last executing test programs: 10.488088713s ago: executing program 1 (id=8115): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x84}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xfff2, @any, 0x8, 0x2}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) unshare(0x26020480) getsockopt$sock_int(r5, 0x1, 0x22, 0x0, &(0x7f0000000200)) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_ADDRESS={0xa, 0x1, @random="35ff9221262f"}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 5.60180713s ago: executing program 1 (id=8121): socket(0xa, 0x2, 0x0) (async) r0 = socket(0xa, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2800000011148d8a29bd7000fcdbdf2508004b0013000000080001"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004800) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfdfffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) 5.42150439s ago: executing program 2 (id=8125): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14fc29", 0xb) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYBLOB="010026bd7000fddbdf2506000000140002002001000000000000000000000000000114000300fe88000000000000000000000000010108000400ac1414bb2b00070073797374656d5f753a6f626a6563745f723a7373685f"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, 0xffffffffffffffff, &(0x7f0000000140)={0xa0000000}) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 5.377993744s ago: executing program 1 (id=8126): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x4, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040001) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000640)={0x44, r0, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040054}, 0x4040000) 5.376954655s ago: executing program 3 (id=8127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000d80)={'syztnl1\x00', &(0x7f0000000d00)={'ip6_vti0\x00', 0x0, 0x29, 0x9, 0x2, 0x1ff, 0x8, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x1, 0x10000, 0xd8f0}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000dc0)={'vxcan0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000001380)=0x0, &(0x7f00000013c0)=0x4) sendmmsg$inet(r1, &(0x7f0000001500)=[{{&(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000400)="d8957023b637917d8d91be0ff18e77a7b7c8b7efbc5b499f839dcb9c4f046ae1314d74f5942c9c0cca2deeb426ed9787744a8cb5fbb463ccc69a674fbe0aab14076545eeb2eb1932c820a9d151a42affc137e363c38aacc4e7e48091d5814865c9d1c35d46ad7b5f887ca35c0fe6fe3ed9f6226a1397b71952eaef4e82f3fec639a8ad27a94342434b30bf9ce29f67a5c3ecff7459a648b69ca9830384c441b4b8b7240e63ce87751de0304800227e6fc52b5197ab249c", 0xb7}, {&(0x7f0000000340)="b3193b7aef15f75a55c52de4c8cbe0453cdf342f85a2a043caf3d8ca6053d391eef6b4e4f4359bfc747212f6b98f525df233870ffaafabab86828dd7cdac", 0x3e}, {&(0x7f0000000380)="78e9b64a6c51034e01745d06f9a14ef62f285d71ae365e031482cc50269a5ffdc77b98381ef1532201f3a9437d14ea78a5cd2b72", 0x34}, {&(0x7f0000000580)}, {&(0x7f0000000640)="2afa9b2880a608e92f40303de7ea584b131b13bca3e5f7d072b63d10df1277641d78d2d7fee24caa441e7378719247b62a56332e558164f0a8e2a34f30479c2f1c324063aab7297781dc75a72ca565353d8e55021dff172610c4e5184bbd131d222320a61919b5", 0x67}, {&(0x7f00000006c0)="158fa9a7a331fe586c37dab23eb1cd964de3a3d282aee8fda5da9ff1f8059178cfaded9840f6ec17624eddd4157353e09fde02af5d8da5f54a79b7b84043156f9439645503f9e5cc01272c0a99efcb969b2fb6e35c6cfe03f0dee3f997db19e73bd0219ac8f6bc734553d1c6d14a80bdaf99b304300c802a7d1216cb00c3ec9a3d571cedc209c5c3bb98785a6b48b92f74405481e96468708357d7e6990134ee4664a905bc9e902d829165f347022e647d1a84341d1026737a586ce2193f362a8ed38003c8aef59b0663960dd4db22ecd63c30614ea300cadad0faf1d0695a8913f0c325dc", 0xe5}, {&(0x7f00000005c0)="fd6e525fde170f0851bf34e1a01a990a55f06a6cbd22d224cb4a5e3a6ffe3754ec404feb6a5a9f73", 0x28}], 0x7, &(0x7f0000000840)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3ff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}], 0x58}}, {{&(0x7f00000008c0)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000900)="f4733bcb8c3e60ec10834e13ab2658d4bd420a904c", 0x15}], 0x1, &(0x7f0000000ac0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xffff7fff}}, @ip_retopts={{0x30, 0x0, 0x7, {[@cipso={0x86, 0x1e, 0x2, [{0x0, 0x9, "56a5466c1e20ab"}, {0x6, 0xf, "4dcc444e9f06eb90008143141a"}]}]}}}, @ip_tos_int={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9c}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xb}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffff800}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2635}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0xf0}}, {{&(0x7f00000009c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, &(0x7f0000000cc0)=[{&(0x7f0000000a00)="e18c3158b43a5a654ac09cc0a1f6295c31498d04712186a4faa8b3", 0x1b}, {&(0x7f0000000bc0)="914f0c430f1ef60f558a1c6a6bd1e83ddb00848ba748175e6e7dde187ef519732d019f7a1b290a1dcd4bf37aee58a0744c00f3c09eeb001dacaa14f068e71d7b5823bbc37e9afacc5211fea39b1e97dbbac1ea4c82f4b26e80fbdeb6716355b9145ddb5de047c53811302eb3e2f53d07b32933d42589a5b027d33f00068974a788f6f7ee60f5b81916fe680248becc2789edd05b66856d1cc273362928da1d5f4356bc33ac28c88f3884511427f47088063cd5c4d8d1f9b16bad914559c855f62ea8432c3104b7744b83500c7dbe522666803a51233e31aa70dca5223fade1edf71b7a43907d67c5627d268001999591a8030cc750", 0xf5}], 0x2, &(0x7f0000000e00)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0xb7, 0x1, 0x9, [{@multicast1, 0x3}, {@loopback, 0x2}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x16}, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x89, 0x4, "f603"}]}}}, @ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @loopback, @remote}}}], 0xe0}}, {{&(0x7f0000000f00)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000001300)=[{&(0x7f0000000f40)="77257fa5283c1f38ac8f9023f5394fe1b267d2d1e03bcc66cd0d1a92f06e2c28a7c4614815", 0x25}, {&(0x7f0000000f80)="3c4cda51faac5cb8c82fba3b691a4a7c0e6847a692411a1a307bc039f1a6b98f23d47ceaffa6e67c51e1ef3b0d7d923e9e02c6bd99b20df7cea4272ea25b2e1e6b7760b74cdc007b74622a506beda9f9b39229175869d962723260de89c2e4bb62350f5462277e51546603c6ed996f8a4e7aacc4829e82cc72aa88c6ba244bc928c6fcbf366b88c4e6c1c89401c7137b9e2ce1b2fef5bcbde716398a31de155615d7b09f0c0620448bf1b6e7ba3efc84b295d70dd4ecd46484f0b30511753e1fc356e1a627a065", 0xc7}, {&(0x7f0000001080)="172be9650b22c978a4c60524fa6bf272c94d4b5d5ccea27c034f381c44cf2c2b4eb3794dc6c4e8d363d024fcc2c3893a5ecac040318580e40c8394392cf95031b231a37c375de3febf117a238779170b85776f1642130c47ec99baba358ba337b895fec977b3418e820e2f586f3b72808932683e8249b3e98616ca1671601e3525627fc6995fc8db5406da8b8ae1686b7da494fc6a11bf161050985a026ff31a356da5d96e3290c461a48d34", 0xac}, {&(0x7f0000001140)="a612d7729797302a9ae688bb4e91d469ced92175769f99ab91a2e2126ac070de5f743024dbae187ca86465edf0dc2502e412ca173806f0001f793b5ebc645eeb2095c253d36bf08c7d6fc1a15968ed9d3e67c732e48eae916622e15e03494ad75e2237f64ca5c8869d5f1b8da898e2a3de2a8c39975566334e0e1b17db33e9852025eec4fee3aff0e2b7e7bd6b055a53d389556ee5373454286811c90dab1d4f90cd944913d73006cc4d72a8905ce5e68afa028c777fade62ccc26e74cdfadb023dde0d21d012443d2b278487e3a21a345516a6e34a54f57ce7b7684f73f19247f7d3b146e8dd6aca32d4eb23744531122", 0xf1}, {&(0x7f0000001240)="de78797906bca291b27533ebb45427135f6992070dae604b73b0b6cde1e11f5504d63533f0577f3bc946607991fc7b7ca3950a100c48efbf13e535d208afe01eced561aba6bfbdcec6524e5863c39c8dfbf369251073dc63dc0db8c5efe7825cc25dba6a3841f25f2326da97260522eb7eadb7748d25594ce6c72f0ca0f323fe09c844f4684f5d10496580f9dc685b6a4eee6a3ee3ed1a213820bedb3b07df2dc1839544c8f08cd391cf8a4a06d89bcbad04fa8a36cf8fb22e1df8c967bc", 0xbe}], 0x5, &(0x7f0000001400)=[@ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x20, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8a}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @rand_addr=0x64010100}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @rand_addr=0x64010101}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@lsrr={0x83, 0x17, 0x5d, [@remote, @multicast2, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @rr={0x7, 0x7, 0xe, [@dev={0xac, 0x14, 0x14, 0x23}]}, @generic={0x89, 0xb, "1af3f3885451c1fd41"}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x100}}], 0x4, 0x8810) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000180)={r8}, 0x2) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r8}, 0xc) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) r9 = socket(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0xfffffffd, 0x203, {0x60, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4880}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r11 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r11, 0x84, 0x16, &(0x7f00000001c0)={0x2, [0x9, 0x40]}, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x72, 0xffffffffffffffff, 0x2bebc000) r12 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000001400010300000000000000001e"], 0x18}}, 0x0) getsockopt$packet_int(r10, 0x107, 0x2, &(0x7f0000000040), &(0x7f0000000140)=0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000165d5a5e778d8258a000000000a54000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000001080002400000000214"], 0x7c}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r13, 0x8924, &(0x7f00000002c0)={'macsec0\x00', @random="0100061f8145"}) 5.29954477s ago: executing program 1 (id=8129): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x52, 0x0, &(0x7f0000000380)="4094224836e4fb0ba03cba32e511d699807be737ed2fc8266d219382df7b95a5a1e0f2f4198bb5e7bf9e0f60be12dd23cbbb39616b32f569507482e90d384bee9d64ba92d85b7910530996213918b91280a9", 0x0, 0x804, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.193727524s ago: executing program 2 (id=8131): socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/16], 0x0}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, 0xfffffffffffffffc, 0x40, 0x8000005, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x40, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) unshare(0x40000080) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_create1(0x0) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) socket$igmp6(0xa, 0x3, 0x2) write(r1, &(0x7f0000000000)="05000000010001", 0x7) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYBLOB], 0xc0}}, 0x0) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000340)="07000000010000", 0x7) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r4, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00', 0xfffffffc}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, r6, 0x25, 0x2, @val=@netfilter={0x7}}, 0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) 4.645571408s ago: executing program 4 (id=8132): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000280)={0x84, @private=0xa010101, 0x15, 0x3, 'lblc\x00', 0x1, 0x0, 0x7b}, 0x2c) (async) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x8) r2 = socket$kcm(0xa, 0x2, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x800, 0x0, 0x0, 0xa, 0x0, 0x0, 0x88}}, {{@in6=@mcast2, 0x404d3, 0x6c}, 0x0, @in=@empty}}, 0xe8) (async, rerun: 64) close(r3) (async, rerun: 64) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x3, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) (async) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{}]}) (async) r4 = socket(0x40000000015, 0x805, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x89e0, 0x0) (async, rerun: 64) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (rerun: 64) 4.497810525s ago: executing program 1 (id=8134): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000003b80), r0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x45) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003c40)={&(0x7f0000003c00)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008011}, 0x8) 4.405920576s ago: executing program 4 (id=8135): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) (async) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000000040)) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0xfffffffe}, 0x14) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 4.293755273s ago: executing program 1 (id=8136): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'}) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') ioctl$FS_IOC_GETFSLABEL(r1, 0x40305839, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16=r4, @ANYBLOB, @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000c000000080026000816"], 0x40}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "001b01", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0x3, 0x1, 0xfffffff6, [{0x5, 0x1, "c89600000500"}]}}}}}}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r6, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESOCT=r1, @ANYBLOB="5e8732d5003127c600bf7112b74f96b7b25cf43001bb0d15fbb6f1e11233fde0a9a2744f32909b8480b1d1211442a5487cd29a6333a1b184e9d7ddd725f2485de091b031fc1568e3542be0d511ad9f5d2fc727b62f1691022a39ebb35d5238e1a35842659e1e517a642bc890c3edaab8c2a5a7e3d4d839c9f1352a183db38b8859798efa59063a7e8df4f78a44266ad940c55e6aa252acc52d0cd4c7f605a007b95a1474ba99030aaa4aa0ef091f14cd6415edc78b677a685a2ad607a4536e64d0efbdcf734620926a67b0b5b18bc6f271e5ae57a838e111cac249468810fb2404329aa519080ee60ce60f81cac23b0e5de5481a12080afd4a4907b7f0a9ed", @ANYRESDEC=r3, @ANYRES32=r3, @ANYRES16=r1], 0x48}}, 0x80) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010029bd70e1fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000f80)={0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x500}, 0x38) socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000004240)=0xc3, 0x4) recvmmsg(r2, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/243, 0xf3}, 0xf338}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0xd}], 0x3fffe16, 0x2, 0x0) close(r3) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000130000005b000000030000000e00001adb2294eeb3525d00"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r9, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 4.292592623s ago: executing program 4 (id=8137): r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4000, 0xfffffffe, @mcast1, 0x5}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="05"], 0x10) close(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x38, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0xcb, 0x0, 0x1, [@nested={0x4, 0x8}]}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x5}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000500)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r6, @ANYBLOB="050424bd7000fedbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="8400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365"], 0xa0}, 0x1, 0x0, 0x0, 0x4040800}, 0x24040084) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x60, r6, 0x20, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}]}, 0x60}}, 0x4000000) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x61844529}, 0x1c) 4.266587786s ago: executing program 3 (id=8138): unshare(0x2a020400) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000100)=0x3) close(r0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) getsockname$netlink(r2, &(0x7f0000000000), &(0x7f0000000040)=0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e02a19941"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) r5 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r5, 0x84, 0x0, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r6, &(0x7f0000000900)=[{&(0x7f0000000000)=@in={0x2, 0x0, @private=0xa010102}, 0x10, 0x0}], 0x1, 0x0) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000080)={r8, 0x7}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f00000000c0)={r8, 0x16, "d3699f4b8111d60fa310393257b684a661aeb3e4ac57"}, &(0x7f00000001c0)=0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="d4000000200000006910830000000000bfffffff000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 3.98535212s ago: executing program 4 (id=8139): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="04000000000000050000000000000025021f51fd", @ANYRES32=r3, @ANYBLOB="080002007f000001"], 0x20}, 0x1, 0x0, 0x0, 0x4c001}, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@datasec={0x1, 0x1, 0x0, 0xf, 0x3, [{0x2, 0x6, 0xfffffeff}], "aafada"}, @datasec={0x9, 0x0, 0x0, 0xf, 0x1, [], "92"}]}, {0x0, [0x2e]}}, 0x0, 0x43, 0x0, 0x0, 0x1}, 0x28) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 3.915433547s ago: executing program 4 (id=8140): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0xb4, 0x2, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x7e, 0x6, "574c4425af781a233a1dc063102be1bf356bd22f97c05075bde6adb7bdfd58c08a03fea54eaa235903f8c0882b12c48f91bb917cb0a72eaa1188b8928e35c9badb474aed9717b72e742028d4673d07126ae6eb25b20657866d179c6977bb543b5a8f7f4d55bbd5736a3458e5992c10ce097bda69d91fd7f090c7"}]}, @NFT_MSG_DELCHAIN={0x80, 0x5, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8000000000000000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x101}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x164, 0x6, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_RULE_USERDATA={0x51, 0x7, 0x1, 0x0, "b467f3aefb880da24e3aa92a0fd837975c28bfe66c1a9c007effc61e681a54cc6fc8dbfb3d4d22b18f88ee5ae7beb7a67f7ec1f64803d429e62cdd0c1a8ded8f9c664a0ff1563c5483fab981aa"}, @NFTA_RULE_USERDATA={0xfa, 0x7, 0x1, 0x0, "bdfadd607265815d447eb8d84794febf5581e0d617894f4da717e7bda498130b274f74b182e40743c65c54271e0e1bdcc5579dfb378bdd13bdcf5830e76cfe99b77dfea5beccc7151d61c9159af5987d525629a741cf3f2cf72c6c95c9fe71b5e436025c11495716445d673c5f56bbd98daafe5e72f34c030b3fb8fdab74a7777b17bdeaa24a87c267c6b8c8f766bca3aa3819dbff4c7d348b2837e1dea09708ecad3fc47f8ebcd4e9bd1f2e5ea49fd5841a2edf81019765655da820db963e5149cec45e2f87d040541fd368b550e2a7bf3dc1873ad2c7ca1df586f4cb214ff64f6ed4a657b0f7c2775554987913b9e86b4a3e41dba9"}]}, @NFT_MSG_DELOBJ={0x40, 0x14, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}]}]}]}, @NFT_MSG_NEWSET={0x80, 0x9, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_DESC={0x40, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_DESC_CONCAT={0x2c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5d3d}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x5a2f}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @tproxy={{0xb}, @void}}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2f}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x28, 0x16, 0xa, 0xa00, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0xf0, 0x16, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_FLOWTABLE_HOOK={0x48, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x4c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xea3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xd89c}]}]}, @NFT_MSG_NEWTABLE={0x12c, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xf8, 0x6, "0fa16830364281444048207c79fb402e9056ba9b6b8f26032a77275772f59ff9a1834dd09dd931d925d7f943a9b39efd4a07a1125547e02d56519257b878ddb63251a96ac07b676712ce4fe0ea44e261b91f0f15d8262d5965b1e4b5d384cb3d6794ed66a5381ce48be4c4f7419e43458ee6246154cde15181a23f97ab30879d37626bb29c1cc0cecd1c84c8606871f2e6a6f006dd3a5cf9a01e55647e6f486b91dedaa71738aab0353500704a21a937b6ab1dab61e75e0a6ed700ce89973ac7a2abbfa36759a5ffb913ab15565acb65d09e29e5ff8ce7f75e5bc63d38f6bbe4bcffafa3305ca2f30455be4127aafd173b999aa2"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x60c}}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071004200000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 3.871856221s ago: executing program 3 (id=8141): ioctl$int_out(0xffffffffffffffff, 0x7e50, &(0x7f0000000000)) r0 = socket(0x25, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x1) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f0000001440)={0x24, @short={0x2, 0x2, 0xffff}}, 0x8) 3.69806334s ago: executing program 3 (id=8142): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x71eff8d2059dfe60}, 0xc004) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000022bf0000000000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000db003000a0000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x7, 0xc8, &(0x7f0000000040)=""/200}, 0x94) 3.696653174s ago: executing program 4 (id=8143): r0 = socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x5, 0x8, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000580), 0x1000, r2}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0, 0x46, 0x0, 0x1}, 0x28) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) epoll_create1(0x0) (async) epoll_create1(0x0) accept4(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000300)=0x80, 0x40800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044800}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020601080000000000000000000000040900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c000780080012400000000205000500020000000500010006"], 0x58}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000906010200000000000000e1020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) (async) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000906010200000000000000e1020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r7, 0x8946, 0x0) (async) ioctl$sock_SIOCETHTOOL(r7, 0x8946, 0x0) unshare(0x28000600) socket$inet6(0xa, 0x80002, 0x0) (async) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0xfe6c) (async) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0xfe6c) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f00000003c0)=0x491b, 0x4) (async) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f00000003c0)=0x491b, 0x4) sendmmsg$inet6(r8, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004800) sendmsg$inet6(r8, &(0x7f0000000340)={&(0x7f0000000180)={0xa, 0x4e23, 0x0, @remote, 0x400}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000280)="fff85fc433e78d441fb0cedfb2bf12bb07506e9fbfcb175e509ee82eb1590f993f7f5698ab6788e7e363", 0x2a}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/568], 0x238}, 0x24048880) (async) sendmsg$inet6(r8, &(0x7f0000000340)={&(0x7f0000000180)={0xa, 0x4e23, 0x0, @remote, 0x400}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000280)="fff85fc433e78d441fb0cedfb2bf12bb07506e9fbfcb175e509ee82eb1590f993f7f5698ab6788e7e363", 0x2a}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000002900000037000000670000000000000018010000000000002900000036000000081f000000000000067ddca02552d8ef70d599418c51709c047da905c8318833b8ede9005cba6d4f4a8b7d07c06bd6b4a0809ee6476b5a058be4428ee1fb9edf581f95671552d2d0fe4bc5d9c983e41cfba81107d2cbc66b689656e37f38f8b6d0e943c9a207f88a73b1ea4eaa4a73762d9a1e336899dbbffcc910000000000000000000000000000000001d67637fc9f549e0267bfa530512566b5acb0b830293800fcddd7e2f0a5f6b037df4698cdd1be690c35c9b64972cb9b4f28dc83653140255105137f0c3ae4e6bbd136e35ef3a99d8c9de950b49f015301d2328f2cfc42b0895629440169d0c501ce921cb7198ec609604013d00000018000000000000002900000037000000ff00000000000000140000000000000029000000340000000000000000000000d80000000000000029000000370000002e17000000000000087cef0223df1f2bc52dd9a64c1efbb8b252966b7f6d3c925952bd5c1c04aa7d9bcf67ab5555cc7f4b35c3636439542feac4524ec0d30010bde6eda1c06e8328ec32064cc6e43bacd0eb18a356bb7df7614b00a4113f7385466569f465ad251446edcabeae86e8542321d1365ecde9fcc7451a730df50c2ab38d527703fac2040000000205020002c91000000000000000000000000000000001000100c20400000005c20400000006040103c91000000000000000000000ffffe000000200"/568], 0x238}, 0x24048880) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32=r6, @ANYBLOB='.\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB], 0x20) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000020000000800010001"], 0x40}, 0x1, 0x0, 0x0, 0x20000840}, 0x400c000) (async) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000020000000800010001"], 0x40}, 0x1, 0x0, 0x0, 0x20000840}, 0x400c000) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) 3.639240987s ago: executing program 3 (id=8144): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=0x0) syz_open_procfs$namespace(r2, &(0x7f0000000140)='ns/user\x00') r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000340)={r3}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$FS_IOC_GETFSUUID(r4, 0x80111500, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$xdp(r4, &(0x7f00000005c0)={0x2d, 0x0, r6, 0xc}, 0x10) unshare(0x6a040000) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000200), 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0xa8, 0x43, 0x107, 0xfffffffa, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x145}, @nested={0x90, 0x1, 0x0, 0x1, [@nested={0x70, 0x1c, 0x0, 0x1, [@nested={0x69, 0x109, 0x0, 0x1, [@generic="2af879b523445099675acaeb261cb3fdf1f226c1ac7cd6bb3a9212f44f597c84bf3f7e8a8a49e433d236315137adac026b37b1d4a6ae927fe53406b002ba61925fd177252b0efe642a823031a377c7cf3c88ea143ff1305a1a0b8a905513dd6f580675bb7c"]}]}, @typed={0x8, 0x26, 0x0, 0x0, @uid}, @typed={0x14, 0x9c, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x29}}]}]}, 0xa8}}, 0xc000) ioctl$FIONCLEX(r1, 0x5450) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYRES32=0x0, @ANYRESDEC=r5], 0x104}}, 0x0) 1.039427637s ago: executing program 2 (id=8148): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000851000005300000018010000202075250000ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fcffffff85000000730000009500"/96], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="000000000100000000001a000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) accept4$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14, 0x80000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000900)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r10, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffea7) unshare(0x400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0x8031, 0xffffffffffffffff, 0x83dff000) r12 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r12, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x21, 0x1, 0x3, 0x2, {0xa, 0x0, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x3a) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x15, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYRES8=r0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x20008090) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x5d, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0) socket$unix(0x1, 0x5, 0x0) 893.978895ms ago: executing program 0 (id=8149): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000300)='cgroup.clone_children\x00', 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x1a0000010}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018008000300", @ANYRES32=0x0, @ANYBLOB="08001000", @ANYRES32=0x0, @ANYBLOB="04fd0180f2da056af2493841"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB="20005e800400010008000700b4030000080005002a000004080006"], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000200)=""/91, &(0x7f0000000100)=0x5b) setsockopt$netlink_NETLINK_RX_RING(r5, 0x10e, 0x6, &(0x7f0000000080)={0x4, 0x5, 0x200, 0xffff0000}, 0x10) 718.622972ms ago: executing program 0 (id=8150): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000dc0)={0xa, 0x4e1e, 0x0, @loopback}, 0xfffffd83) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 631.394407ms ago: executing program 2 (id=8151): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0091d3e24c69000000000000000000020000000000"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x6, &(0x7f0000000bc0)=@framed={{}, [@exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x2, &(0x7f0000000940), 0x10}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0091d3e24c69000000000000000000020000000000"], 0x0, 0x26}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x6, &(0x7f0000000bc0)=@framed={{}, [@exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x2, &(0x7f0000000940), 0x10}, 0x94) (async) 541.611067ms ago: executing program 0 (id=8152): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000c0"], 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x11, 0xa, 0x8) socket$kcm(0x2, 0xa, 0x2) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0xf, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6}, {0x27}}, [], {{0x4, 0x1, 0x9, 0x3, 0x2}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x255}, 0x94) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @broadcast}}, &(0x7f00000000c0)=0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000c0"], 0x48) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket(0x11, 0xa, 0x8) (async) socket$kcm(0x2, 0xa, 0x2) (async) close(0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0xf, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6}, {0x27}}, [], {{0x4, 0x1, 0x9, 0x3, 0x2}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x255}, 0x94) (async) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @broadcast}}, &(0x7f00000000c0)=0x80) (async) 540.940241ms ago: executing program 3 (id=8153): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(0x3) close(0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001880)=ANY=[@ANYBLOB="4000000002060108000000000000000000000000050005000a00000005000100070000000500000000000500010007000000662b5b739a35f8f2a62595201050911049d5b357bad44233d9420c6b26129615f27dbd1fc1ae715b4e07250000000000000000000000000000e6bbd2eb34fca02e3b9e32cd0ca587960acf8ca6161231ac7843aca7c6fb9bd091a3476237104437b92159d3015d6d80d18aef612ec69f9a9a6d8d861225eaaa77512837079cef8f5d0d3b"], 0x40}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x378, 0x3a8, 0x3a8, 0x378, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x280, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x1, 0x2}, {0x1, 0x2, 0x2}, 0x4f6, 0x5}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000000706010800000000000000000001000005000100060000000500010007000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$key(0xf, 0x3, 0x2) recvmmsg(r5, 0x0, 0xfffffffffffffc1f, 0x10002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x1d, &(0x7f00000003c0)=ANY=[@ANYBLOB="18460000fbffffff0000feffffffffff842000000200000018390000020000000000000000000000b708000000000002008af8ff00000000b70400007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000001856000003000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000840)=""/4096, 0x41100, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x10, 0x8, 0x1}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000580)=[0x1], &(0x7f00000005c0)=[{0x1, 0x5, 0x9, 0xa}, {0x3, 0x1, 0xf, 0x5}, {0x5, 0x2, 0x7, 0x3}, {0x1, 0x5, 0x10, 0xc}, {0x1, 0x2, 0x5, 0x1}, {0x1, 0x5, 0x8, 0xb}], 0x10, 0x10000}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a210200000000000000000a0000050900030073797a30000000000900010073797a3100000000080007006e6174001400048008000140000000030800024054dd5e5414000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0) 413.077324ms ago: executing program 2 (id=8154): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r1, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x5}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x5}, @NL80211_ATTR_HE_OBSS_PD={0x28, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x14}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0xff}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "651c1f590e18b311"}]}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000200)={0x390, r2, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfd5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff81}]}]}, @TIPC_NLA_NODE={0xf8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x83, 0x3, "4a006b2c980bd667d81078cf18e0a477e12fc224bca60e30d1cbc68edbf6a98af3ff60c88d64a040e5071219514782575fcf14b9f411c05a25e500e9137ed99913af4b5d5545604bd130c21e8a330e52a031ffbdfd6b5bb12a6d7dd4ee9b343f32c1180336e4fadb2625e07d6cf29d682e34d7a4e6a4102ee290e7e0357115"}, @TIPC_NLA_NODE_ID={0x2e, 0x3, "947c430a3a66dfb9a67413b841efb362d805a4542e9240d1bb1a8953d169011d629fe13822981d2eb72f"}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "e8d7d7d7409224fa2499f7b4b25ada49c889f3dfd5ce"}}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1000}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "b98746ec15b9fdaacfb285c69181194e9d87bf702f65898a"}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_ID={0x69, 0x3, "7c4579cc0e67b2494b8ec5619917f7c21cbfe42dd53d30ae4e3001cf197659ba30fe3d50092a8d0ed8fdf322e7f02ad6ff6bddee7e4d7ebf372b5b710f3d68fc106e7766f4942bac37caca3b4f7e24a815be2d595d173d91e04b28e1a38ebb9e3668210d1a"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x90}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'macsec0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x81}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x64010101}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}]}]}, 0x390}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000680), r0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r3, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0xb96d962bc7bad3a1) pipe(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x19, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xb6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0xa, 0x1, 0x0, r0}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5c}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000008c0)='syzkaller\x00', 0xbe9, 0xaa, &(0x7f0000000900)=""/170, 0x41100, 0x61, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000a00)={0x4, 0x6, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x2e218ef}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000b40)={0x80000001}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_buf(r7, 0x6, 0x14, &(0x7f0000000b80)="017879390e7e91329673deb6a04243dbd46b5a93e1a7902dfe46832095e9f34ad41ec7a04e2ab9e7b745f8f7", 0x2c) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x40, r3, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008881}, 0x8000) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000cc0)={0x8, 0x40, 0x5, 0x0, 0x4, 0x0, 0xf9, 0x2, 0x9, 0x0, 0x5, 0x5, 0x3, 0x7}, 0xe) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000d00), 0x101002, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000d40)={0x40000002}) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000d80)={{0x3b, @broadcast, 0x4e22, 0x1, 'lc\x00', 0x8, 0x100, 0x7a}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x3, 0x5, 0x10001, 0x4}}, 0x44) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f0000000e00)={'filter\x00', 0x0, [0x8, 0x7, 0x1, 0x0, 0x7f]}, &(0x7f0000000e80)=0x54) r9 = accept$alg(r5, 0x0, 0x0) ioctl$FITHAW(r9, 0xc0045878) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r10, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x2c, 0x0, 0x600, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0xcece}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x4008001) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000fc0)='westwood', 0x8) socket(0x1, 0x800, 0xb52) getsockopt$inet_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000001000)=""/209, &(0x7f0000001100)=0xd1) ioctl$SIOCPNDELRESOURCE(r5, 0x89ef, &(0x7f0000001140)=0x3) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000001180), 0x4) 400.651025ms ago: executing program 0 (id=8155): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 157.48504ms ago: executing program 2 (id=8156): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xb13f0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x40004845}, 0x0) 156.936354ms ago: executing program 0 (id=8157): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x0, 0x1, {0x29}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x20}}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x0, 0x1, {0x29}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008"], 0x58}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000150012800b0001006970766c616e00000400028708000500", @ANYRES32=r3], 0x44}}, 0x8000) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x0) (async) r5 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES64=r2, @ANYRES32=r6, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES64=r2, @ANYRES32=r6, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) 0s ago: executing program 0 (id=8158): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) (async) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x1d}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0xf}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd2d8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50307}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) kernel console output (not intermixed with test programs): interface [ 1277.106915][T31374] team0: Port device dummy0 added [ 1277.123534][T31369] lo speed is unknown, defaulting to 1000 [ 1277.505033][T31387] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6807'. [ 1277.576196][T31389] netlink: 'syz.0.6808': attribute type 11 has an invalid length. [ 1277.616060][T31391] netlink: 'syz.0.6808': attribute type 11 has an invalid length. [ 1277.677015][T31396] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.6810'. [ 1277.715935][T31396] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.6810'. [ 1277.732402][T31396] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.6810'. [ 1277.758754][T31395] team_slave_0: entered promiscuous mode [ 1277.764503][T31395] team_slave_1: entered promiscuous mode [ 1277.770351][T31395] dummy0: entered promiscuous mode [ 1277.777575][T31396] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.6810'. [ 1277.788073][T31396] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.6810'. [ 1277.803682][T31396] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.6810'. [ 1277.827737][T31395] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1277.885982][T31399] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1278.034714][T31404] lo speed is unknown, defaulting to 1000 [ 1278.054470][T31404] lo speed is unknown, defaulting to 1000 [ 1278.650284][T31413] ip6tnl0: entered promiscuous mode [ 1279.406905][T31437] No such timeout policy "syz0" [ 1279.887866][T31447] syzkaller1: entered promiscuous mode [ 1280.696007][T31500] netlink: 'syz.3.6834': attribute type 1 has an invalid length. [ 1281.327652][T31521] macsec2: entered promiscuous mode [ 1281.344712][T31521] syzkaller0: entered promiscuous mode [ 1281.350415][T31521] macsec2: entered allmulticast mode [ 1281.374767][T31521] syzkaller0: entered allmulticast mode [ 1281.407387][T31521] syzkaller0: left allmulticast mode [ 1281.415426][T31521] syzkaller0: left promiscuous mode [ 1281.554721][T28544] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1281.774754][T31540] __nla_validate_parse: 104 callbacks suppressed [ 1281.774773][T31540] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6845'. [ 1282.024160][T31554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6851'. [ 1282.375416][T31562] bond_slave_0: entered promiscuous mode [ 1282.381164][T31562] bond_slave_1: entered promiscuous mode [ 1282.414424][T31562] vlan2: entered promiscuous mode [ 1282.428522][T31562] bond0: entered promiscuous mode [ 1283.177971][T31576] syzkaller0: entered promiscuous mode [ 1283.184694][T31576] syzkaller0: entered allmulticast mode [ 1283.812335][T31607] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6862'. [ 1284.157569][T31619] netlink: 'syz.1.6865': attribute type 6 has an invalid length. [ 1284.173373][T31619] netlink: 176 bytes leftover after parsing attributes in process `syz.1.6865'. [ 1284.328465][T31619] wireguard0: entered promiscuous mode [ 1284.353832][T31619] wireguard0: entered allmulticast mode [ 1284.405236][T31619] team0: Device wireguard0 is of different type [ 1284.416648][T31624] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6867'. [ 1284.488318][T31628] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6866'. [ 1284.589092][T31632] netlink: 'syz.3.6867': attribute type 16 has an invalid length. [ 1284.612909][T31632] netlink: 'syz.3.6867': attribute type 17 has an invalid length. [ 1284.783966][T31632] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1284.921948][T31637] lo speed is unknown, defaulting to 1000 [ 1284.990128][T31637] lo speed is unknown, defaulting to 1000 [ 1285.260009][T31653] netlink: 'syz.2.6875': attribute type 2 has an invalid length. [ 1285.283327][T31653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6875'. [ 1285.674567][T31637] sctp: [Deprecated]: syz.0.6870 (pid 31637) Use of int in max_burst socket option deprecated. [ 1285.674567][T31637] Use struct sctp_assoc_value instead [ 1285.796104][T31670] ip6gretap1: entered promiscuous mode [ 1285.834410][T31670] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1286.044391][T31683] netlink: 'syz.2.6883': attribute type 1 has an invalid length. [ 1286.123493][T31683] netlink: 'syz.2.6883': attribute type 2 has an invalid length. [ 1286.261784][T31695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6886'. [ 1286.294439][T31699] netlink: 'syz.2.6887': attribute type 11 has an invalid length. [ 1286.316380][T31702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6886'. [ 1286.326366][T31697] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1286.419256][T31695] team1: entered promiscuous mode [ 1286.464309][T31708] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6888'. [ 1286.482144][T31695] team1: entered allmulticast mode [ 1286.513194][T31695] 8021q: adding VLAN 0 to HW filter on device team1 [ 1286.589490][T31702] team2: entered promiscuous mode [ 1286.605959][T31702] team2: entered allmulticast mode [ 1286.621986][T31702] 8021q: adding VLAN 0 to HW filter on device team2 [ 1286.651337][T31708] vlan3: entered promiscuous mode [ 1286.731308][T31712] vlan2: entered allmulticast mode [ 1286.736692][T31712] bridge_slave_0: entered allmulticast mode [ 1287.614139][T31732] netlink: 'syz.3.6896': attribute type 1 has an invalid length. [ 1287.624083][T31732] __nla_validate_parse: 2 callbacks suppressed [ 1287.624100][T31732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6896'. [ 1287.645398][T31732] tipc: Resetting bearer [ 1287.795118][T31738] netlink: 'syz.2.6899': attribute type 13 has an invalid length. [ 1287.830894][T31738] macvtap0: entered promiscuous mode [ 1287.858141][T31738] macvtap0: refused to change device tx_queue_len [ 1287.972955][T31748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6901'. [ 1287.993077][T31747] netlink: 'syz.4.6900': attribute type 10 has an invalid length. [ 1288.018102][T31747] 8021q: adding VLAN 0 to HW filter on device team0 [ 1288.037316][T31747] bond0: (slave team0): Enslaving as an active interface with an up link [ 1288.142607][T31751] netlink: 'syz.4.6900': attribute type 1 has an invalid length. [ 1288.397742][T31732] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1288.416891][T31732] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1288.602333][T31732] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1288.617832][T31732] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1288.732666][T31732] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1288.740461][T31732] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1288.759573][ T11] block nbd3: Possible stuck request ffff888025318000: control (read@0,1024B). Runtime 1110 seconds [ 1288.773581][ T11] block nbd3: Possible stuck request ffff888025318200: control (read@1024,1024B). Runtime 1110 seconds [ 1288.785211][ T11] block nbd3: Possible stuck request ffff888025318400: control (read@2048,1024B). Runtime 1110 seconds [ 1288.797951][ T11] block nbd3: Possible stuck request ffff888025318600: control (read@3072,1024B). Runtime 1110 seconds [ 1288.824528][T31732] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1288.830558][T31732] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1288.857925][T31789] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6909'. [ 1289.126701][T31732] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1289.132649][T31732] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1289.396558][T31808] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6915'. [ 1289.443506][T31812] macsec2: entered promiscuous mode [ 1289.448770][T31812] syzkaller0: entered promiscuous mode [ 1289.456775][T31812] macsec2: entered allmulticast mode [ 1289.462211][T31812] syzkaller0: entered allmulticast mode [ 1289.548106][T31812] syzkaller0: left allmulticast mode [ 1289.563353][T31812] syzkaller0: left promiscuous mode [ 1289.652059][T31807] lo speed is unknown, defaulting to 1000 [ 1289.663003][T31807] lo speed is unknown, defaulting to 1000 [ 1290.061131][T31836] nbd: nbd0 already in use [ 1290.362558][T31857] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6930'. [ 1290.387924][T31859] netlink: 'syz.0.6931': attribute type 12 has an invalid length. [ 1290.535638][T31865] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6934'. [ 1290.557051][T31865] netlink: 'syz.0.6934': attribute type 10 has an invalid length. [ 1290.565668][T31865] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6934'. [ 1290.575209][T31865] bond0: entered promiscuous mode [ 1290.582449][T31865] bridge0: port 1(bond0) entered blocking state [ 1290.590284][T31865] bridge0: port 1(bond0) entered disabled state [ 1290.605891][T31865] bond0: entered allmulticast mode [ 1290.636384][T31873] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6936'. [ 1290.684771][T31873] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6936'. [ 1290.749758][T31873] dummy0: entered promiscuous mode [ 1290.766917][T31873] team0: entered promiscuous mode [ 1290.772520][T31873] team_slave_0: entered promiscuous mode [ 1290.778729][T31873] team_slave_1: entered promiscuous mode [ 1290.787233][T31873] syz_tun: entered promiscuous mode [ 1290.795163][T31873] debugfs: 'hsr1' already exists in 'hsr' [ 1290.801219][T31873] Cannot create hsr debugfs directory [ 1291.165154][T31893] macsec1: entered promiscuous mode [ 1291.170507][T31893] mac80211_hwsim hwsim79 syzkaller0: entered promiscuous mode [ 1291.190690][T31893] macsec1: entered allmulticast mode [ 1291.196897][T31893] mac80211_hwsim hwsim79 syzkaller0: entered allmulticast mode [ 1291.257345][T31893] mac80211_hwsim hwsim79 syzkaller0: left allmulticast mode [ 1291.273520][T31893] mac80211_hwsim hwsim79 syzkaller0: left promiscuous mode [ 1291.440499][T31904] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6946'. [ 1291.532670][T31908] netlink: 'syz.4.6947': attribute type 16 has an invalid length. [ 1291.582906][T31908] netlink: 'syz.4.6947': attribute type 17 has an invalid length. [ 1291.619051][T31908] netlink: 'syz.4.6947': attribute type 27 has an invalid length. [ 1291.706947][T31912] lo speed is unknown, defaulting to 1000 [ 1291.748986][T31912] lo speed is unknown, defaulting to 1000 [ 1291.780440][T31922] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1292.430430][T31925] lo speed is unknown, defaulting to 1000 [ 1292.466122][T31925] lo speed is unknown, defaulting to 1000 [ 1292.559495][T31941] netlink: 'syz.1.6954': attribute type 1 has an invalid length. [ 1292.570818][T31940] netlink: 'syz.2.6955': attribute type 1 has an invalid length. [ 1292.715670][T31941] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1292.841203][T31943] bond2: (slave gretap1): making interface the new active one [ 1292.875730][T31943] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1293.049828][T31945] lo speed is unknown, defaulting to 1000 [ 1293.053151][T31956] netlink: 'syz.0.6957': attribute type 8 has an invalid length. [ 1293.101810][T31945] lo speed is unknown, defaulting to 1000 [ 1293.616236][T31978] __nla_validate_parse: 2 callbacks suppressed [ 1293.616319][T31978] netlink: 332 bytes leftover after parsing attributes in process `syz.2.6961'. [ 1293.669451][T31980] lo speed is unknown, defaulting to 1000 [ 1293.720308][T31980] lo speed is unknown, defaulting to 1000 [ 1294.151417][T31996] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6967'. [ 1294.161495][T28485] IPVS: starting estimator thread 0... [ 1294.185525][T31996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6967'. [ 1294.285769][T32011] IPVS: using max 28 ests per chain, 67200 per kthread [ 1294.455931][T32023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6973'. [ 1294.557702][T32032] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6975'. [ 1294.649536][T32037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6976'. [ 1294.679556][T32037] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6976'. [ 1294.930737][T32053] FAULT_INJECTION: forcing a failure. [ 1294.930737][T32053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1294.948753][T32054] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6979'. [ 1294.961456][T32050] lo speed is unknown, defaulting to 1000 [ 1294.970420][T32053] CPU: 0 UID: 0 PID: 32053 Comm: syz.3.6982 Not tainted syzkaller #0 PREEMPT(full) [ 1294.970448][T32053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1294.970459][T32053] Call Trace: [ 1294.970467][T32053] [ 1294.970475][T32053] dump_stack_lvl+0xe8/0x150 [ 1294.970503][T32053] should_fail_ex+0x412/0x560 [ 1294.970532][T32053] _copy_from_iter+0x1d3/0x1670 [ 1294.970566][T32053] ? rcu_is_watching+0x15/0xb0 [ 1294.970588][T32053] ? __pfx__copy_from_iter+0x10/0x10 [ 1294.970610][T32053] ? kmem_cache_alloc_node_noprof+0x473/0x6f0 [ 1294.970644][T32053] ? netlink_sendmsg+0x650/0xb40 [ 1294.970663][T32053] ? skb_put+0x11b/0x210 [ 1294.970683][T32053] netlink_sendmsg+0x6c0/0xb40 [ 1294.970713][T32053] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1294.970735][T32053] ? aa_file_perm+0x12d/0x1630 [ 1294.970757][T32053] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1294.970780][T32053] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1294.970798][T32053] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1294.970819][T32053] __sock_sendmsg+0x21c/0x270 [ 1294.970844][T32053] ____sys_sendmsg+0x4d7/0x810 [ 1294.970862][T32053] ? __might_fault+0xaf/0x130 [ 1294.970892][T32053] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1294.970919][T32053] ? import_iovec+0x73/0xa0 [ 1294.970940][T32053] ___sys_sendmsg+0x2a5/0x360 [ 1294.970957][T32053] ? __lock_acquire+0x6b5/0x2cf0 [ 1294.970979][T32053] ? __pfx____sys_sendmsg+0x10/0x10 [ 1294.971039][T32053] ? __fget_files+0x2a/0x420 [ 1294.971060][T32053] ? __fget_files+0x3a0/0x420 [ 1294.971089][T32053] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1294.971111][T32053] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1294.971138][T32053] ? __pfx_ksys_write+0x10/0x10 [ 1294.971173][T32053] do_syscall_64+0xe2/0xf80 [ 1294.971190][T32053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.971206][T32053] ? trace_irq_disable+0x37/0x100 [ 1294.971227][T32053] ? clear_bhb_loop+0x60/0xb0 [ 1294.971248][T32053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.971264][T32053] RIP: 0033:0x7f51bf79acb9 [ 1294.971282][T32053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1294.971295][T32053] RSP: 002b:00007f51c0579028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1294.971314][T32053] RAX: ffffffffffffffda RBX: 00007f51bfa15fa0 RCX: 00007f51bf79acb9 [ 1294.971326][T32053] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1294.971336][T32053] RBP: 00007f51c0579090 R08: 0000000000000000 R09: 0000000000000000 [ 1294.971346][T32053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1294.971355][T32053] R13: 00007f51bfa16038 R14: 00007f51bfa15fa0 R15: 00007ffc80fa8198 [ 1294.971381][T32053] [ 1295.262278][T32056] netlink: 5 bytes leftover after parsing attributes in process `syz.4.6984'. [ 1295.380747][T32050] lo speed is unknown, defaulting to 1000 [ 1295.418467][T32064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6985'. [ 1296.244761][T32107] netlink: 'syz.0.6997': attribute type 23 has an invalid length. [ 1296.310892][T32100] syzkaller0: entered promiscuous mode [ 1296.324443][T32100] syzkaller0: entered allmulticast mode [ 1296.637450][T32125] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1296.655311][T32125] netlink: 'syz.4.7002': attribute type 13 has an invalid length. [ 1296.688704][T32115] netlink: 'syz.0.6999': attribute type 7 has an invalid length. [ 1296.699350][T32115] netlink: 'syz.0.6999': attribute type 8 has an invalid length. [ 1296.708372][T32115] netlink: 'syz.0.6999': attribute type 15 has an invalid length. [ 1296.806839][T32125] bridge0: port 3(syz_tun) entered disabled state [ 1300.268011][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.284430][T32127] __nla_validate_parse: 6 callbacks suppressed [ 1300.284449][T32127] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.7003'. [ 1300.320440][T26950] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1300.384182][T26950] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1300.455486][T26950] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1300.486367][T26950] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1300.561121][T32151] netlink: 'syz.0.7009': attribute type 21 has an invalid length. [ 1300.680082][T32157] syzkaller1: entered promiscuous mode [ 1300.724435][T32157] syzkaller1: entered allmulticast mode [ 1301.194951][T32181] syzkaller0: entered promiscuous mode [ 1301.254918][T32184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7017'. [ 1301.288639][T32189] IPVS: set_ctl: invalid protocol: 47 172.30.0.3:20001 [ 1301.363538][T32181] syzkaller0: entered allmulticast mode [ 1301.845939][T32212] "syz.2.7020" (32212) uses obsolete ecb(arc4) skcipher [ 1302.252656][T32225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7025'. [ 1302.600286][T32234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7028'. [ 1303.049263][T32241] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7030'. [ 1303.078671][T32249] netlink: 'syz.1.7032': attribute type 22 has an invalid length. [ 1303.115826][T32251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7033'. [ 1303.241217][T32254] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1303.316708][T32251] bond1: entered promiscuous mode [ 1303.342159][T32251] bond1: entered allmulticast mode [ 1303.366247][T32251] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1303.386912][T32258] batadv_slave_1: entered promiscuous mode [ 1303.407389][T32255] lo speed is unknown, defaulting to 1000 [ 1303.415828][T32255] lo speed is unknown, defaulting to 1000 [ 1303.526746][T32253] batadv_slave_1: left promiscuous mode [ 1303.641589][T32263] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7037'. [ 1303.850312][T32275] netlink: 'syz.1.7040': attribute type 39 has an invalid length. [ 1303.936715][T32277] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7041'. [ 1303.974083][T32275] syz_tun (unregistering): left promiscuous mode [ 1304.010165][T32275] team0: Port device syz_tun removed [ 1304.072502][T32287] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7044'. [ 1304.251395][T32299] tipc: Failed to remove unknown binding: 66,1,1/0:132169215/132169217 [ 1304.290805][T32299] tipc: Failed to remove unknown binding: 66,1,1/0:132169215/132169217 [ 1304.323785][T32299] tipc: Failed to remove unknown binding: 66,1,1/0:132169215/132169217 [ 1304.341723][T32309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7048'. [ 1304.897666][T32344] gretap0: entered promiscuous mode [ 1305.053051][T32344] bond3: option broadcast_neighbor: invalid value (30) [ 1305.060820][T32353] netlink: 'syz.4.7061': attribute type 32 has an invalid length. [ 1305.112021][T32344] bond3 (unregistering): Released all slaves [ 1305.179527][T32353] bond2: option coupled_control: invalid value (12) [ 1305.197826][T32353] bond2 (unregistering): Released all slaves [ 1305.241616][T32344] gretap0: left promiscuous mode [ 1305.328490][T32344] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1305.372358][T32369] lo speed is unknown, defaulting to 1000 [ 1305.380578][T32369] lo speed is unknown, defaulting to 1000 [ 1305.538008][T32357] lo speed is unknown, defaulting to 1000 [ 1305.747825][T32357] lo speed is unknown, defaulting to 1000 [ 1305.791591][T32380] __nla_validate_parse: 3 callbacks suppressed [ 1305.791610][T32380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7068'. [ 1306.374455][T32395] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7071'. [ 1306.413089][T32395] netlink: 108 bytes leftover after parsing attributes in process `syz.3.7071'. [ 1306.448899][T32395] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7071'. [ 1306.453809][T32397] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7072'. [ 1306.728567][T32410] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7079'. [ 1306.866094][T32419] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7081'. [ 1307.195670][T32422] lo speed is unknown, defaulting to 1000 [ 1307.242031][T32422] lo speed is unknown, defaulting to 1000 [ 1307.261399][T32436] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7083'. [ 1307.590013][T32442] macsec2: entered promiscuous mode [ 1307.611380][T32442] syzkaller0: entered promiscuous mode [ 1307.634849][T32442] macsec2: entered allmulticast mode [ 1307.648251][T32442] syzkaller0: entered allmulticast mode [ 1307.671005][T32442] syzkaller0: left allmulticast mode [ 1307.705988][T32442] syzkaller0: left promiscuous mode [ 1308.260193][T32474] netlink: 'syz.4.7094': attribute type 1 has an invalid length. [ 1308.304453][T32474] netlink: 'syz.4.7094': attribute type 2 has an invalid length. [ 1308.336145][T32474] netlink: 'syz.4.7094': attribute type 1 has an invalid length. [ 1308.534955][T32482] openvswitch: netlink: Message has 4 unknown bytes. [ 1308.604717][T32484] tipc: Started in network mode [ 1308.609633][T32484] tipc: Node identity d25534a2e2b3, cluster identity 4711 [ 1308.620296][T32484] tipc: Enabled bearer , priority 0 [ 1308.649796][T32488] sit0: entered promiscuous mode [ 1308.660949][T32488] netlink: 1 bytes leftover after parsing attributes in process `syz.3.7099'. [ 1308.682438][T32484] syzkaller0: entered promiscuous mode [ 1308.685423][T32490] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7099'. [ 1308.688127][T32484] syzkaller0: entered allmulticast mode [ 1308.705924][T32492] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1308.816392][T32484] tipc: Resetting bearer [ 1308.843946][T32483] tipc: Resetting bearer [ 1308.928401][T32483] tipc: Disabling bearer [ 1309.190143][T32509] macsec1: entered promiscuous mode [ 1309.215473][T32509] syzkaller0: entered promiscuous mode [ 1309.236025][T32509] macsec1: entered allmulticast mode [ 1309.244677][T32509] syzkaller0: entered allmulticast mode [ 1309.276699][T32509] syzkaller0: left allmulticast mode [ 1309.292466][T32509] syzkaller0: left promiscuous mode [ 1309.418556][T32521] tipc: Failed to remove unknown binding: 66,0,0/0:3279211317/3279211318 [ 1309.496039][T32527] tipc: Failed to remove unknown binding: 66,0,0/0:3279211317/3279211318 [ 1309.578656][T32526] lo speed is unknown, defaulting to 1000 [ 1309.619086][T32526] lo speed is unknown, defaulting to 1000 [ 1309.926389][T32547] netlink: 'syz.3.7116': attribute type 1 has an invalid length. [ 1310.437289][T32575] lo speed is unknown, defaulting to 1000 [ 1310.475800][T32575] lo speed is unknown, defaulting to 1000 [ 1310.856130][T32597] macsec1: entered promiscuous mode [ 1310.894004][T32597] mac80211_hwsim hwsim79 syzkaller0: entered promiscuous mode [ 1310.929909][T32597] macsec1: entered allmulticast mode [ 1310.959617][T32597] mac80211_hwsim hwsim79 syzkaller0: entered allmulticast mode [ 1310.990149][T32597] mac80211_hwsim hwsim79 syzkaller0: left allmulticast mode [ 1310.998394][T32597] mac80211_hwsim hwsim79 syzkaller0: left promiscuous mode [ 1311.085199][T32602] __nla_validate_parse: 9 callbacks suppressed [ 1311.085223][T32602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7131'. [ 1311.206984][T32604] mac80211_hwsim hwsim75 wlan1: vlans aren't supported yet for dev_uc|mc_add() [ 1311.312699][T32608] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1311.390240][T32611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7135'. [ 1311.613550][T32619] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7138'. [ 1312.302326][T32650] macsec1: entered promiscuous mode [ 1312.317853][T32650] mac80211_hwsim hwsim79 syzkaller0: entered promiscuous mode [ 1312.339822][T32650] macsec1: entered allmulticast mode [ 1312.380374][T32650] mac80211_hwsim hwsim79 syzkaller0: entered allmulticast mode [ 1312.428359][T32650] mac80211_hwsim hwsim79 syzkaller0: left allmulticast mode [ 1312.453349][T32650] mac80211_hwsim hwsim79 syzkaller0: left promiscuous mode [ 1312.704488][T32669] tipc: Enabled bearer , priority 0 [ 1312.819888][T32669] syzkaller0: entered promiscuous mode [ 1312.837278][T32669] syzkaller0: entered allmulticast mode [ 1312.856503][T32669] tipc: Resetting bearer [ 1312.936516][T32667] tipc: Resetting bearer [ 1312.958309][T32688] netlink: 'syz.3.7159': attribute type 1 has an invalid length. [ 1316.204979][T32667] tipc: Disabling bearer [ 1316.218015][T32688] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1316.328604][T32702] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7163'. [ 1316.352206][T28817] tipc: Node number set to 820393122 [ 1316.359693][T32698] lo speed is unknown, defaulting to 1000 [ 1316.386197][T32698] lo speed is unknown, defaulting to 1000 [ 1316.423601][T32698] lo speed is unknown, defaulting to 1000 [ 1316.563815][T32709] macsec2: entered promiscuous mode [ 1316.569942][T32709] syzkaller0: entered promiscuous mode [ 1316.590859][T32709] macsec2: entered allmulticast mode [ 1316.612080][T32709] syzkaller0: entered allmulticast mode [ 1316.631746][T32709] syzkaller0: left allmulticast mode [ 1316.654535][T32709] syzkaller0: left promiscuous mode [ 1316.958890][T32698] infiniband syz0: set active [ 1316.964645][T19115] lo speed is unknown, defaulting to 1000 [ 1316.972067][T32698] infiniband syz0: added lo [ 1316.986614][T32698] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1316.990995][T32698] infiniband syz0: Couldn't open port 1 [ 1317.026924][T32736] bond0: left promiscuous mode [ 1317.061455][T32698] RDS/IB: syz0: added [ 1317.071073][T32698] smc: adding ib device syz0 with port count 1 [ 1317.111025][T32698] smc: ib device syz0 port 1 has no pnetid [ 1317.134909][T32740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7174'. [ 1317.306100][T32736] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1317.318268][T32740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7174'. [ 1317.334979][T32745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7174'. [ 1317.373986][T19115] lo speed is unknown, defaulting to 1000 [ 1317.375543][T32746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7175'. [ 1317.424897][T32698] lo speed is unknown, defaulting to 1000 [ 1317.520255][T32736] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1317.715034][T32736] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1317.881939][T32765] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7181'. [ 1317.941181][T32736] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.021825][T32767] macsec2: entered promiscuous mode [ 1318.027941][T32767] syzkaller0: entered promiscuous mode [ 1318.038282][T32767] macsec2: entered allmulticast mode [ 1318.054057][T32767] syzkaller0: entered allmulticast mode [ 1318.091577][T32767] syzkaller0: left allmulticast mode [ 1318.110201][T32767] syzkaller0: left promiscuous mode [ 1318.168598][T32698] lo speed is unknown, defaulting to 1000 [ 1318.605528][ T1338] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.614292][T32698] lo speed is unknown, defaulting to 1000 [ 1318.650969][T22717] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.704782][ T1338] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.787816][ T1338] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.830593][ T11] block nbd3: Possible stuck request ffff888025318000: control (read@0,1024B). Runtime 1140 seconds [ 1318.842374][ T11] block nbd3: Possible stuck request ffff888025318200: control (read@1024,1024B). Runtime 1140 seconds [ 1318.854477][ T11] block nbd3: Possible stuck request ffff888025318400: control (read@2048,1024B). Runtime 1140 seconds [ 1318.866389][ T11] block nbd3: Possible stuck request ffff888025318600: control (read@3072,1024B). Runtime 1140 seconds [ 1318.882108][ T315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7188'. [ 1318.903319][ T313] lo speed is unknown, defaulting to 1000 [ 1318.910108][ T313] lo speed is unknown, defaulting to 1000 [ 1318.942347][ T316] syzkaller0: entered promiscuous mode [ 1318.949303][ T316] syzkaller0: entered allmulticast mode [ 1318.995609][ T315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7188'. [ 1319.031945][ T315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7188'. [ 1319.087142][ T320] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.7188'. [ 1319.300084][ T326] Cannot find add_set index 3 as target [ 1319.371901][ T313] lo speed is unknown, defaulting to 1000 [ 1319.529750][ T338] netlink: 'syz.3.7193': attribute type 4 has an invalid length. [ 1319.558956][ T337] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1319.656824][T32698] lo speed is unknown, defaulting to 1000 [ 1319.711239][ T335] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1319.732545][ T335] syzkaller1: Refused to change device type [ 1319.748702][ T343] xt_cgroup: invalid path, errno=-2 [ 1320.079491][T32698] lo speed is unknown, defaulting to 1000 [ 1320.125328][ T352] netlink: 'syz.3.7198': attribute type 5 has an invalid length. [ 1320.172214][ T352] geneve3: entered promiscuous mode [ 1320.193510][ T352] geneve3: entered allmulticast mode [ 1320.206593][ T1166] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 8192 - 0 [ 1320.247050][ T1166] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 8192 - 0 [ 1320.283457][ T1166] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 8192 - 0 [ 1320.304089][ T1166] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 8192 - 0 [ 1320.449360][T32698] lo speed is unknown, defaulting to 1000 [ 1320.766525][ T364] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1320.808721][T32698] lo speed is unknown, defaulting to 1000 [ 1320.884033][ T366] sit2: entered promiscuous mode [ 1321.159864][ T375] tipc: Enabled bearer , priority 0 [ 1321.174649][ T374] tipc: Disabling bearer [ 1321.204093][T32698] lo speed is unknown, defaulting to 1000 [ 1321.468918][ T382] macsec1: entered promiscuous mode [ 1321.505811][ T382] syzkaller0: entered promiscuous mode [ 1321.511617][ T382] macsec1: entered allmulticast mode [ 1321.523438][ T382] syzkaller0: entered allmulticast mode [ 1321.533944][ T382] syzkaller0: left allmulticast mode [ 1321.539589][ T382] syzkaller0: left promiscuous mode [ 1321.580507][T32698] lo speed is unknown, defaulting to 1000 [ 1321.752301][ T384] netlink: 'syz.4.7209': attribute type 8 has an invalid length. [ 1322.019579][T32698] lo speed is unknown, defaulting to 1000 [ 1322.157111][ T399] tipc: Enabled bearer , priority 0 [ 1322.172572][ T399] tipc: Resetting bearer [ 1322.220670][ T404] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1322.296105][ T398] tipc: Disabling bearer [ 1322.488401][T32698] lo speed is unknown, defaulting to 1000 [ 1322.581499][ T420] team0: Port device dummy0 removed [ 1322.608203][ T420] bridge0: port 3(batadv0) entered disabled state [ 1322.655725][ T423] netlink: 'syz.3.7217': attribute type 10 has an invalid length. [ 1322.681620][ T420] x9: left allmulticast mode [ 1322.697687][ T420] bridge0: port 1(1x9) entered disabled state [ 1322.755548][ T420] bridge_slave_1: left allmulticast mode [ 1322.796173][ T420] bridge_slave_1: left promiscuous mode [ 1322.801990][ T420] bridge0: port 2(bridge_slave_1) entered disabled state [ 1322.827493][ T420] bond0: (slave bond_slave_0): Releasing backup interface [ 1322.869119][ T420] bond0: (slave bond_slave_1): Releasing backup interface [ 1322.904768][ T420] team_slave_0: left promiscuous mode [ 1322.917185][ T420] team0: Port device team_slave_0 removed [ 1322.927721][ T420] team_slave_1: left promiscuous mode [ 1322.938926][ T420] team0: Port device team_slave_1 removed [ 1322.947316][ T420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1322.955172][ T420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1322.968813][ T420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1322.977604][ T420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1322.997196][ T420] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1323.019910][ T431] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1323.084250][ T423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1323.105430][ T423] bond0: (slave wlan1): Opening slave failed [ 1323.468833][ T455] __nla_validate_parse: 5 callbacks suppressed [ 1323.468852][ T455] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7226'. [ 1323.680016][ T458] netlink: 'syz.1.7229': attribute type 11 has an invalid length. [ 1323.832651][ T466] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7231'. [ 1323.855922][ T472] netlink: 'syz.0.7234': attribute type 10 has an invalid length. [ 1323.889814][ T466] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7231'. [ 1324.010987][ T476] macsec1: entered promiscuous mode [ 1324.017323][ T476] syzkaller0: entered promiscuous mode [ 1324.024230][ T476] macsec1: entered allmulticast mode [ 1324.029611][ T476] syzkaller0: entered allmulticast mode [ 1324.046858][ T480] netlink: 'syz.0.7234': attribute type 10 has an invalid length. [ 1324.069616][ T476] syzkaller0: left allmulticast mode [ 1324.075664][ T476] syzkaller0: left promiscuous mode [ 1324.196328][ T480] dummy0: entered allmulticast mode [ 1324.216539][ T480] dummy0: entered promiscuous mode [ 1324.239228][ T480] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1324.275519][ T1346] bridge0: port 1(bond0) entered blocking state [ 1324.281964][ T1346] bridge0: port 1(bond0) entered forwarding state [ 1324.751167][ T499] lo speed is unknown, defaulting to 1000 [ 1324.775407][ T499] lo speed is unknown, defaulting to 1000 [ 1324.784106][ T499] lo speed is unknown, defaulting to 1000 [ 1324.921730][ T508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7245'. [ 1324.957815][ T508] netlink: 'syz.4.7245': attribute type 30 has an invalid length. [ 1324.987120][ T508] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7245'. [ 1325.094558][ T508] bond2: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 1325.168378][ T508] bond2 (unregistering): Released all slaves [ 1325.431673][ T514] pimreg: entered allmulticast mode [ 1325.468632][ T517] pimreg: left allmulticast mode [ 1326.489113][ T538] lo speed is unknown, defaulting to 1000 [ 1326.535204][ T538] lo speed is unknown, defaulting to 1000 [ 1326.557032][ T538] lo speed is unknown, defaulting to 1000 [ 1327.058717][ T551] netlink: 'syz.4.7255': attribute type 10 has an invalid length. [ 1327.185973][ T553] netlink: 'syz.4.7255': attribute type 10 has an invalid length. [ 1327.467382][ T561] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7259'. [ 1327.660208][ T566] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20004 [ 1327.726998][ T568] IPVS: set_ctl: invalid protocol: 82 0.0.0.0:20001 [ 1327.962037][ T572] bond2: option lacp_active: invalid value (8) [ 1327.992695][ T572] bond2 (unregistering): Released all slaves [ 1328.308857][ T596] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7268'. [ 1328.347567][ T598] netlink: 'syz.1.7269': attribute type 1 has an invalid length. [ 1328.366349][ T598] netlink: 'syz.1.7269': attribute type 39 has an invalid length. [ 1328.383828][ T589] bridge7: entered allmulticast mode [ 1328.400464][ T596] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7268'. [ 1328.425894][ T600] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7268'. [ 1328.457699][ T600] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7268'. [ 1328.591169][ T596] tipc: Enabled bearer , priority 0 [ 1328.654663][ T610] netlink: 'syz.2.7274': attribute type 1 has an invalid length. [ 1328.750114][ T595] tipc: Disabling bearer [ 1328.769484][ T610] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1328.841394][ T616] syzkaller0: entered promiscuous mode [ 1328.874111][ T616] syzkaller0: entered allmulticast mode [ 1328.934021][ T624] netlink: 'syz.2.7277': attribute type 1 has an invalid length. [ 1328.954683][ T624] netlink: 'syz.2.7277': attribute type 8 has an invalid length. [ 1328.955009][ T626] syz_tun: entered allmulticast mode [ 1329.013452][ T624] netlink: 'syz.2.7277': attribute type 9 has an invalid length. [ 1329.060414][ T624] netlink: 'syz.2.7277': attribute type 10 has an invalid length. [ 1329.085507][ T624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7277'. [ 1332.514220][ T633] syz_tun (unregistering): left allmulticast mode [ 1332.558460][ T640] geneve2: entered promiscuous mode [ 1332.574910][ T1338] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1332.603423][ T1338] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1332.612445][ T1338] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1332.647306][ T1338] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1332.704758][ T658] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 1332.794234][ T666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7285'. [ 1332.858201][ T666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7285'. [ 1333.082157][ T684] geneve2: entered promiscuous mode [ 1333.147256][ T682] siw: device registration error -23 [ 1333.233280][ T692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7293'. [ 1333.253757][ T692] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7293'. [ 1333.306861][ T697] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7295'. [ 1333.409810][ T690] bond3: entered promiscuous mode [ 1333.634579][ T713] validate_nla: 1 callbacks suppressed [ 1333.634596][ T713] netlink: 'syz.3.7297': attribute type 14 has an invalid length. [ 1333.829676][ T715] syzkaller0: entered promiscuous mode [ 1333.852096][ T715] syzkaller0: entered allmulticast mode [ 1334.034450][ T730] netlink: 'syz.3.7301': attribute type 10 has an invalid length. [ 1334.110693][ T731] netlink: 'syz.3.7301': attribute type 10 has an invalid length. [ 1334.146007][ T730] team0: Port device dummy0 added [ 1334.248556][ T731] team0: Port device dummy0 removed [ 1334.277827][ T731] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1334.541347][ T752] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1334.569480][ T752] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1334.781910][ T767] netlink: 88 bytes leftover after parsing attributes in process `syz.0.7309'. [ 1334.979210][ T772] netlink: 'syz.1.7310': attribute type 14 has an invalid length. [ 1335.275399][ T774] lo speed is unknown, defaulting to 1000 [ 1335.285396][ T774] lo speed is unknown, defaulting to 1000 [ 1335.295392][ T774] lo speed is unknown, defaulting to 1000 [ 1335.452693][ T793] lo speed is unknown, defaulting to 1000 [ 1335.478529][ T793] lo speed is unknown, defaulting to 1000 [ 1335.724572][ T793] lo speed is unknown, defaulting to 1000 [ 1335.743528][ T801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7314'. [ 1336.190105][ T818] geneve0: mtu less than device minimum [ 1336.247488][ T824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7320'. [ 1336.270412][ T824] vlan2: entered promiscuous mode [ 1336.293320][ T824] bridge0: entered promiscuous mode [ 1336.309513][ T826] netlink: 'syz.0.7322': attribute type 3 has an invalid length. [ 1336.318474][ T826] netlink: 'syz.0.7322': attribute type 3 has an invalid length. [ 1336.528427][ T837] netlink: 'syz.0.7325': attribute type 2 has an invalid length. [ 1336.649945][ T840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7326'. [ 1336.967999][ T848] tipc: Enabled bearer , priority 0 [ 1336.997737][ T848] syzkaller0: entered promiscuous mode [ 1337.053313][ T848] syzkaller0: entered allmulticast mode [ 1337.062235][ T853] tipc: Enabling of bearer rejected, failed to enable media [ 1337.288670][ T860] tipc: Resetting bearer [ 1337.395753][ T847] tipc: Resetting bearer [ 1337.464426][ T847] tipc: Disabling bearer [ 1337.540143][ T870] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1337.569925][ T873] dummy0: left promiscuous mode [ 1337.575642][ T873] dummy0: entered promiscuous mode [ 1338.102471][ T900] macvtap1: entered promiscuous mode [ 1338.125860][ T900] batadv0: entered promiscuous mode [ 1338.138299][ T900] macvtap1: entered allmulticast mode [ 1338.162328][ T908] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7338'. [ 1338.182531][ T900] batadv0: entered allmulticast mode [ 1338.204076][ T900] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1338.228954][ T900] batadv0: left allmulticast mode [ 1338.236734][ T900] batadv0: left promiscuous mode [ 1338.746830][ T954] netlink: 'syz.2.7351': attribute type 21 has an invalid length. [ 1338.763966][ T954] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7351'. [ 1338.785585][ T954] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7351'. [ 1339.044266][ T966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7355'. [ 1339.067516][ T968] syzkaller0: entered promiscuous mode [ 1339.074110][ T968] syzkaller0: entered allmulticast mode [ 1339.219895][ T972] netlink: 236 bytes leftover after parsing attributes in process `syz.4.7356'. [ 1339.344455][ T980] lo speed is unknown, defaulting to 1000 [ 1339.351800][ T980] lo speed is unknown, defaulting to 1000 [ 1339.405961][ T980] lo speed is unknown, defaulting to 1000 [ 1339.714884][ T998] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7363'. [ 1340.562680][T19139] IPVS: starting estimator thread 0... [ 1340.598200][ T1044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7369'. [ 1340.636796][ T1036] delete_channel: no stack [ 1340.664406][ T1038] IPVS: using max 32 ests per chain, 76800 per kthread [ 1340.902061][ T1024] lo speed is unknown, defaulting to 1000 [ 1340.926474][ T1024] lo speed is unknown, defaulting to 1000 [ 1341.017980][ T1024] lo speed is unknown, defaulting to 1000 [ 1341.026469][ T1058] syzkaller0: entered promiscuous mode [ 1341.042221][ T1058] syzkaller0: entered allmulticast mode [ 1341.885325][ T1081] ip6tnl0: left promiscuous mode [ 1341.911910][ T1081] bridge0: port 3(syz_tun) entered blocking state [ 1341.918590][ T1081] bridge0: port 3(syz_tun) entered forwarding state [ 1341.951607][ T1081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1341.984211][ T1081] 8021q: adding VLAN 0 to HW filter on device team0 [ 1342.137223][ T1081] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1342.207933][ T1084] gretap2: entered promiscuous mode [ 1342.472609][ T1097] macsec1: entered promiscuous mode [ 1342.478218][ T1097] syzkaller0: entered promiscuous mode [ 1342.484588][ T1097] macsec1: entered allmulticast mode [ 1342.491630][ T1097] syzkaller0: entered allmulticast mode [ 1342.524651][ T1097] syzkaller0: left allmulticast mode [ 1342.530107][ T1097] syzkaller0: left promiscuous mode [ 1342.664094][ T1100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7385'. [ 1343.258790][ T1136] netlink: 'syz.3.7392': attribute type 1 has an invalid length. [ 1343.405425][ T1136] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1343.437993][ T1133] bond7: (slave gretap1): making interface the new active one [ 1343.452285][ T1133] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 1343.565493][ T1152] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7395'. [ 1343.608365][ T1155] tipc: Started in network mode [ 1343.625486][ T1155] tipc: Node identity 080211, cluster identity 4711 [ 1343.642492][ T1155] tipc: Enabled bearer , priority 0 [ 1343.705654][ T1155] mac80211_hwsim hwsim79 syzkaller0: entered promiscuous mode [ 1343.735022][ T1155] mac80211_hwsim hwsim79 syzkaller0: entered allmulticast mode [ 1343.768345][ T1163] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1343.961068][ T1155] tipc: Resetting bearer [ 1343.974846][ T1149] lo speed is unknown, defaulting to 1000 [ 1343.983556][ T1155] netlink: 'syz.0.7397': attribute type 1 has an invalid length. [ 1344.031739][ T1155] bond3 (unregistering): Released all slaves [ 1344.106014][ T1149] lo speed is unknown, defaulting to 1000 [ 1344.135895][ T1149] lo speed is unknown, defaulting to 1000 [ 1344.649472][ T1183] tipc: Enabling of bearer rejected, already enabled [ 1344.689745][T28817] tipc: Node number set to 134353152 [ 1344.869921][ T1198] bond2 (unregistering): Released all slaves [ 1345.000497][ T1210] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7411'. [ 1345.029647][ T1210] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7411'. [ 1345.111056][ T1215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7413'. [ 1345.310862][ T1222] x_tables: duplicate underflow at hook 1 [ 1345.364028][ T1222] No such timeout policy "syz1" [ 1345.485234][ T1232] syzkaller0: entered promiscuous mode [ 1345.502562][ T1232] syzkaller0: entered allmulticast mode [ 1345.675448][ T1226] tipc: Enabled bearer , priority 0 [ 1345.728714][ T1233] lo speed is unknown, defaulting to 1000 [ 1345.785201][ T1225] tipc: Resetting bearer [ 1345.925546][ T1225] tipc: Disabling bearer [ 1345.970900][ T1233] lo speed is unknown, defaulting to 1000 [ 1346.018524][ T1233] lo speed is unknown, defaulting to 1000 [ 1346.177636][ T1254] lo speed is unknown, defaulting to 1000 [ 1346.184883][ T1261] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7426'. [ 1346.215183][ T1261] netlink: 'syz.2.7426': attribute type 13 has an invalid length. [ 1346.239715][ T1254] lo speed is unknown, defaulting to 1000 [ 1346.401604][ T1271] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1346.430237][ T1271] syzkaller0: entered promiscuous mode [ 1346.446887][ T1271] syzkaller0: entered allmulticast mode [ 1346.584391][ T1254] lo speed is unknown, defaulting to 1000 [ 1347.375442][ T1293] tipc: Started in network mode [ 1347.393861][ T1293] tipc: Node identity 165bd786e176, cluster identity 4711 [ 1347.420474][ T1293] tipc: Enabled bearer , priority 0 [ 1347.445894][ T1296] syzkaller0: entered promiscuous mode [ 1347.461736][ T1296] syzkaller0: entered allmulticast mode [ 1347.697507][ T1298] tipc: Resetting bearer [ 1347.758560][ T1293] tipc: Resetting bearer [ 1347.836176][ T1293] tipc: Disabling bearer [ 1348.081209][ T1308] ip6gre1: entered promiscuous mode [ 1348.249435][ T1322] netlink: 332 bytes leftover after parsing attributes in process `syz.2.7437'. [ 1348.293412][ T1322] netlink: 'syz.2.7437': attribute type 9 has an invalid length. [ 1348.301365][ T1322] netlink: 108 bytes leftover after parsing attributes in process `syz.2.7437'. [ 1348.354276][ T1322] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7437'. [ 1348.509098][ T1334] lo speed is unknown, defaulting to 1000 [ 1348.547602][ T1334] lo speed is unknown, defaulting to 1000 [ 1348.582051][ T1334] lo speed is unknown, defaulting to 1000 [ 1348.584672][ T1341] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.7443'. [ 1348.630491][ T1333] IPVS: Scheduler module ip_vs_sip not found [ 1348.765821][ T1353] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7444'. [ 1348.847388][ T1353] lo speed is unknown, defaulting to 1000 [ 1348.865979][ T1353] lo speed is unknown, defaulting to 1000 [ 1348.909960][ T11] block nbd3: Possible stuck request ffff888025318000: control (read@0,1024B). Runtime 1170 seconds [ 1348.927815][ T11] block nbd3: Possible stuck request ffff888025318200: control (read@1024,1024B). Runtime 1170 seconds [ 1348.939952][ T11] block nbd3: Possible stuck request ffff888025318400: control (read@2048,1024B). Runtime 1170 seconds [ 1348.953661][ T11] block nbd3: Possible stuck request ffff888025318600: control (read@3072,1024B). Runtime 1170 seconds [ 1349.022575][ T1353] lo speed is unknown, defaulting to 1000 [ 1349.073766][ T1358] lo speed is unknown, defaulting to 1000 [ 1349.106630][ T1358] lo speed is unknown, defaulting to 1000 [ 1349.444784][ T1361] tipc: Enabled bearer , priority 0 [ 1349.581078][ T1365] syzkaller0: entered promiscuous mode [ 1349.593931][ T1365] syzkaller0: entered allmulticast mode [ 1349.629176][ T1360] tipc: Resetting bearer [ 1349.698216][ T1360] tipc: Disabling bearer [ 1349.724007][ T1358] lo speed is unknown, defaulting to 1000 [ 1349.840143][ T1376] netlink: 420 bytes leftover after parsing attributes in process `syz.0.7449'. [ 1351.078965][ T1415] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7461'. [ 1351.184080][ T1417] syzkaller0: entered promiscuous mode [ 1351.220147][ T1417] syzkaller0: entered allmulticast mode [ 1351.369244][ T1431] tipc: Enabled bearer , priority 0 [ 1351.382461][ T1416] tipc: Resetting bearer [ 1351.459331][ T1405] lec:lec_atm_close: lec0: Shut down! [ 1351.490894][ T1416] tipc: Disabling bearer [ 1352.640583][ T1485] macsec1: entered promiscuous mode [ 1352.653390][ T1485] syzkaller0: entered promiscuous mode [ 1352.659904][ T1485] macsec1: entered allmulticast mode [ 1352.679980][ T1485] syzkaller0: entered allmulticast mode [ 1352.710059][ T1485] syzkaller0: left allmulticast mode [ 1352.734872][ T1485] syzkaller0: left promiscuous mode [ 1352.795729][ T1491] syzkaller0: entered promiscuous mode [ 1352.801878][ T1491] syzkaller0: entered allmulticast mode [ 1352.908879][ T1487] tipc: Enabled bearer , priority 0 [ 1352.948316][ T1486] tipc: Resetting bearer [ 1353.035266][ T1486] tipc: Disabling bearer [ 1353.082724][ T1509] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.7483'. [ 1353.130343][ T1506] lo speed is unknown, defaulting to 1000 [ 1353.185104][ T1506] lo speed is unknown, defaulting to 1000 [ 1353.256532][ T1506] lo speed is unknown, defaulting to 1000 [ 1353.260109][ T1515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7484'. [ 1353.290290][ T1515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7484'. [ 1353.329339][ T1515] syzkaller1: entered promiscuous mode [ 1353.343725][ T1515] syzkaller1: entered allmulticast mode [ 1353.389707][ T1515] ip6erspan1: entered allmulticast mode [ 1353.547845][ T1524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7488'. [ 1354.394166][ T1546] macsec1: entered promiscuous mode [ 1354.399685][ T1546] macsec1: entered allmulticast mode [ 1354.521760][ T1547] batadv_slave_0: entered promiscuous mode [ 1354.578887][ T1545] lo speed is unknown, defaulting to 1000 [ 1354.589178][ T1545] lo speed is unknown, defaulting to 1000 [ 1354.628184][ T1545] lo speed is unknown, defaulting to 1000 [ 1354.709326][ T1552] syzkaller0: entered promiscuous mode [ 1354.716951][ T1552] syzkaller0: entered allmulticast mode [ 1354.878938][ T1557] tipc: Enabled bearer , priority 0 [ 1354.902093][ T1551] tipc: Resetting bearer [ 1355.004248][ T1551] tipc: Disabling bearer [ 1355.132616][ T1544] batadv_slave_0: left promiscuous mode [ 1355.577625][ T1574] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7502'. [ 1355.603942][ T1574] netlink: 184 bytes leftover after parsing attributes in process `syz.1.7502'. [ 1355.619389][ T1574] team0: No ports can be present during mode change [ 1355.922664][ T1581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7503'. [ 1355.924131][ T1582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7505'. [ 1356.030713][ T1590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7505'. [ 1356.388360][ T1606] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7510'. [ 1356.427499][ T1605] syzkaller0: entered promiscuous mode [ 1356.455094][ T1605] syzkaller0: entered allmulticast mode [ 1356.643899][ T1610] lo speed is unknown, defaulting to 1000 [ 1356.693942][ T1610] lo speed is unknown, defaulting to 1000 [ 1356.701130][ T1610] lo speed is unknown, defaulting to 1000 [ 1356.708847][ T1617] tipc: Enabled bearer , priority 0 [ 1356.731437][ T1604] tipc: Resetting bearer [ 1356.833255][ T1604] tipc: Disabling bearer [ 1357.446209][ T1645] syzkaller1: entered promiscuous mode [ 1357.451843][ T1645] syzkaller1: entered allmulticast mode [ 1357.639498][ T1654] macsec1: entered promiscuous mode [ 1357.653683][ T1654] syzkaller0: entered promiscuous mode [ 1357.667234][ T1654] macsec1: entered allmulticast mode [ 1357.675688][ T1654] syzkaller0: entered allmulticast mode [ 1357.694991][ T1654] syzkaller0: left allmulticast mode [ 1357.700567][ T1654] syzkaller0: left promiscuous mode [ 1358.042364][ T1661] x_tables: duplicate underflow at hook 1 [ 1358.158440][ T1663] __nla_validate_parse: 3 callbacks suppressed [ 1358.158460][ T1663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7527'. [ 1358.195914][ T1665] syzkaller0: entered promiscuous mode [ 1358.201898][ T1665] syzkaller0: entered allmulticast mode [ 1358.335517][ T1665] tipc: Enabled bearer , priority 0 [ 1358.412452][ T1664] tipc: Resetting bearer [ 1358.500297][ T1664] tipc: Disabling bearer [ 1358.690326][ T1677] lo speed is unknown, defaulting to 1000 [ 1358.726653][ T1677] lo speed is unknown, defaulting to 1000 [ 1358.740389][ T1677] lo speed is unknown, defaulting to 1000 [ 1358.782621][ T1684] syzkaller1: entered promiscuous mode [ 1358.802366][ T1684] syzkaller1: entered allmulticast mode [ 1359.049899][ T1693] macsec2: entered promiscuous mode [ 1359.078311][ T1693] syzkaller0: entered promiscuous mode [ 1359.095804][ T1693] macsec2: entered allmulticast mode [ 1359.104424][ T1696] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.7537'. [ 1359.121336][ T1693] syzkaller0: entered allmulticast mode [ 1359.149809][ T1693] syzkaller0: left allmulticast mode [ 1359.166989][ T1693] syzkaller0: left promiscuous mode [ 1359.535768][ T1706] lo speed is unknown, defaulting to 1000 [ 1359.598208][ T1706] lo speed is unknown, defaulting to 1000 [ 1359.647382][ T1706] lo speed is unknown, defaulting to 1000 [ 1359.658816][ T1712] lo speed is unknown, defaulting to 1000 [ 1359.724827][ T1712] lo speed is unknown, defaulting to 1000 [ 1360.059518][ T1725] syzkaller0: entered promiscuous mode [ 1360.076935][ T1725] syzkaller0: entered allmulticast mode [ 1360.182245][ T1725] tipc: Enabled bearer , priority 0 [ 1360.237813][ T1724] tipc: Resetting bearer [ 1360.302054][ T1724] tipc: Disabling bearer [ 1360.331074][ T1712] lo speed is unknown, defaulting to 1000 [ 1360.525234][ T1728] ipt_REJECT: ECHOREPLY no longer supported. [ 1360.748092][ T1731] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7546'. [ 1360.966402][ T1740] syzkaller1: entered promiscuous mode [ 1360.992390][ T1740] syzkaller1: entered allmulticast mode [ 1361.063601][ T1744] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7549'. [ 1361.090527][ T1744] netlink: 'syz.3.7549': attribute type 2 has an invalid length. [ 1361.101168][ T1744] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7549'. [ 1361.150016][ T1746] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7549'. [ 1361.393894][ T1754] macsec2: entered promiscuous mode [ 1361.399152][ T1754] syzkaller0: entered promiscuous mode [ 1361.426125][ T1754] macsec2: entered allmulticast mode [ 1361.431468][ T1754] syzkaller0: entered allmulticast mode [ 1361.453825][ T1754] syzkaller0: left allmulticast mode [ 1361.469410][ T1754] syzkaller0: left promiscuous mode [ 1361.708271][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.908111][ T1760] netlink: 'syz.0.7555': attribute type 5 has an invalid length. [ 1361.924067][ T1762] syzkaller0: entered promiscuous mode [ 1361.933756][ T1762] syzkaller0: entered allmulticast mode [ 1362.051406][ T1758] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.103392][ T1758] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1362.166409][ T1771] tipc: Enabled bearer , priority 0 [ 1362.185886][ T1761] tipc: Resetting bearer [ 1362.240786][ T1761] tipc: Disabling bearer [ 1362.327922][ T1758] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.340272][ T1758] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1362.503851][ T1758] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.531276][ T1758] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1362.787061][ T1758] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.827987][ T1758] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1362.865202][ T1791] syzkaller1: entered promiscuous mode [ 1362.870888][ T1791] syzkaller1: entered allmulticast mode [ 1363.091060][ T1799] lo speed is unknown, defaulting to 1000 [ 1363.117311][ T1799] lo speed is unknown, defaulting to 1000 [ 1363.155589][ T1799] lo speed is unknown, defaulting to 1000 [ 1363.285966][ T1814] lo speed is unknown, defaulting to 1000 [ 1363.287090][ T1338] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1363.328128][ T1338] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1363.347480][ T1814] lo speed is unknown, defaulting to 1000 [ 1363.369585][ T1338] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1363.383517][ T1338] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1363.446115][T22717] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1363.475807][T22717] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1363.499413][ T1820] batadv0: left allmulticast mode [ 1363.515635][ T1820] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1363.584163][T22717] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1363.613250][T22717] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1363.795246][ T1814] lo speed is unknown, defaulting to 1000 [ 1363.915165][ T1840] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7576'. [ 1364.355441][ T1843] siw: device registration error -23 [ 1364.559521][ T1847] macsec2: entered promiscuous mode [ 1364.573746][ T1847] syzkaller0: entered promiscuous mode [ 1364.579445][ T1847] macsec2: entered allmulticast mode [ 1364.608449][ T1847] syzkaller0: entered allmulticast mode [ 1364.638812][ T1847] syzkaller0: left allmulticast mode [ 1364.660527][ T1847] syzkaller0: left promiscuous mode [ 1365.126010][ T1851] syzkaller1: entered promiscuous mode [ 1365.143748][ T1851] syzkaller1: entered allmulticast mode [ 1365.396143][ T1855] syzkaller0: entered promiscuous mode [ 1365.411963][ T1855] syzkaller0: entered allmulticast mode [ 1365.559113][ T1867] syzkaller1: entered promiscuous mode [ 1365.565324][ T1867] syzkaller1: entered allmulticast mode [ 1365.583480][ T1855] tipc: Enabled bearer , priority 0 [ 1365.635312][ T1854] tipc: Resetting bearer [ 1365.667968][ T1854] tipc: Disabling bearer [ 1365.716171][ T1872] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1365.745745][ T1872] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1365.897303][ T1872] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1365.933045][ T1872] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1366.039226][ T1872] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1366.083492][ T1872] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1366.209081][ T1872] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1366.244492][ T1872] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1366.349890][ T1898] syzkaller1: entered promiscuous mode [ 1366.377160][ T1898] syzkaller1: entered allmulticast mode [ 1366.498114][ T1899] lo speed is unknown, defaulting to 1000 [ 1366.508673][ T1903] netlink: 'syz.3.7597': attribute type 5 has an invalid length. [ 1366.545298][ T1899] lo speed is unknown, defaulting to 1000 [ 1366.579593][ T1899] lo speed is unknown, defaulting to 1000 [ 1366.717638][ T1913] syzkaller0: entered promiscuous mode [ 1366.724117][ T1913] syzkaller0: entered allmulticast mode [ 1366.738178][ T1914] netlink: 'syz.2.7598': attribute type 1 has an invalid length. [ 1366.790352][ T1913] tipc: Enabled bearer , priority 0 [ 1366.810178][ T1911] tipc: Resetting bearer [ 1366.864213][ T1911] tipc: Disabling bearer [ 1367.078547][ T1927] netlink: 'syz.4.7601': attribute type 1 has an invalid length. [ 1367.097364][ T1927] netlink: 14436 bytes leftover after parsing attributes in process `syz.4.7601'. [ 1367.179840][ T1928] macsec2: entered promiscuous mode [ 1367.209111][ T1928] syzkaller0: entered promiscuous mode [ 1367.219440][ T1928] macsec2: entered allmulticast mode [ 1367.238175][ T1928] syzkaller0: entered allmulticast mode [ 1367.264273][ T1928] syzkaller0: left allmulticast mode [ 1367.278907][ T1928] syzkaller0: left promiscuous mode [ 1367.580014][ T1940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7604'. [ 1367.605340][ T1940] netlink: 'syz.2.7604': attribute type 21 has an invalid length. [ 1367.841088][ T1950] tipc: Enabling of bearer rejected, failed to enable media [ 1368.033576][ T1958] netlink: 'syz.4.7609': attribute type 1 has an invalid length. [ 1368.060227][ T1166] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1368.069460][ T1166] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1368.538051][ T1956] syzkaller1: entered promiscuous mode [ 1368.543832][ T1956] syzkaller1: entered allmulticast mode [ 1368.685231][ T1166] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1368.702663][ T1166] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1368.767383][T31528] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1368.791379][T31528] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1368.861805][ T1971] syzkaller0: entered promiscuous mode [ 1368.874065][ T1971] syzkaller0: entered allmulticast mode [ 1368.940313][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1368.966350][ T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1369.035573][ T1970] tipc: Enabled bearer , priority 0 [ 1369.073722][ T1969] tipc: Resetting bearer [ 1369.164587][ T1969] tipc: Disabling bearer [ 1369.204566][ T1975] syzkaller0: entered promiscuous mode [ 1369.213542][ T1975] syzkaller0: entered allmulticast mode [ 1369.296896][ T1988] syzkaller1: entered promiscuous mode [ 1369.327127][ T1988] syzkaller1: entered allmulticast mode [ 1369.585721][ T2005] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7619'. [ 1369.701073][ T2011] syzkaller1: entered promiscuous mode [ 1369.725154][ T2011] syzkaller1: entered allmulticast mode [ 1369.936678][ T2016] SET target dimension over the limit! [ 1369.998150][ T2023] lo speed is unknown, defaulting to 1000 [ 1370.041304][ T2028] netlink: 'syz.3.7626': attribute type 3 has an invalid length. [ 1370.045039][ T2023] lo speed is unknown, defaulting to 1000 [ 1370.078316][ T2028] netlink: 'syz.3.7626': attribute type 1 has an invalid length. [ 1370.089401][ T2023] lo speed is unknown, defaulting to 1000 [ 1370.116693][ T2028] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7626'. [ 1370.253857][ T2036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7628'. [ 1370.507467][ T2044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7629'. [ 1371.209160][ T2066] syzkaller1: entered promiscuous mode [ 1371.218748][ T2066] syzkaller1: entered allmulticast mode [ 1371.343660][ T2070] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7638'. [ 1371.461908][ T2076] netlink: 'syz.2.7639': attribute type 10 has an invalid length. [ 1371.473973][ T2076] netlink: 'syz.2.7639': attribute type 10 has an invalid length. [ 1371.525102][ T2076] netlink: 'syz.2.7639': attribute type 11 has an invalid length. [ 1371.556882][ T2076] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.7639'. [ 1371.602813][ T2079] netlink: 'syz.2.7639': attribute type 11 has an invalid length. [ 1371.621023][ T2079] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.7639'. [ 1372.720286][ T2110] bridge0: port 2(bridge_slave_1) entered disabled state [ 1372.728059][ T2110] bridge0: port 1(bridge_slave_0) entered disabled state [ 1372.867249][ T2110] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 1372.896301][ T2110] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 1372.930725][ T2110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1372.960057][ T2110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1373.329570][T29794] lo speed is unknown, defaulting to 1000 [ 1373.364871][T29794] syz0: Port: 1 Link DOWN [ 1373.392645][ T1089] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1373.413286][ T1089] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1373.421704][ T1089] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1373.451006][ T1089] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1373.478466][ T1089] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1373.478474][T29794] lo speed is unknown, defaulting to 1000 [ 1373.514323][ T1089] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1373.537991][ T2132] netlink: 7060 bytes leftover after parsing attributes in process `syz.3.7653'. [ 1373.543332][ T1089] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1373.573433][ T1089] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1373.576810][ T2131] netlink: 7060 bytes leftover after parsing attributes in process `syz.3.7653'. [ 1373.610273][ T2127] lo speed is unknown, defaulting to 1000 [ 1373.618060][ T2127] lo speed is unknown, defaulting to 1000 [ 1373.626260][ T2127] lo speed is unknown, defaulting to 1000 [ 1374.068115][ T2149] tipc: Enabled bearer , priority 0 [ 1374.085420][ T2140] syzkaller0: entered promiscuous mode [ 1374.092012][ T2140] syzkaller0: entered allmulticast mode [ 1374.219861][ T2146] tipc: Resetting bearer [ 1374.317277][ T2137] tipc: Resetting bearer [ 1374.424215][ T2137] tipc: Disabling bearer [ 1374.477983][ T2155] macvtap1: entered allmulticast mode [ 1374.515854][ T2155] team0: entered allmulticast mode [ 1374.521471][ T2155] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1374.599257][ T2155] team0: left allmulticast mode [ 1374.832114][ T2161] syzkaller0: entered promiscuous mode [ 1374.856627][ T2181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7664'. [ 1374.869594][ T2161] syzkaller0: entered allmulticast mode [ 1374.926226][ T2184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7665'. [ 1374.930205][ T2181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7664'. [ 1374.955092][ T2184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7665'. [ 1374.976264][ T2165] lo speed is unknown, defaulting to 1000 [ 1374.992441][ T2165] lo speed is unknown, defaulting to 1000 [ 1374.992512][ T2184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7665'. [ 1375.001091][ T2165] lo speed is unknown, defaulting to 1000 [ 1375.026692][T31528] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1375.036235][ T2184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7665'. [ 1375.055472][ T2184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7665'. [ 1375.076794][ T2184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7665'. [ 1375.093530][T31528] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1375.105682][T31528] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1375.130821][T31528] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1375.376415][ T2190] 8021q: VLANs not supported on vxcan1 [ 1375.392236][ T2191] lo speed is unknown, defaulting to 1000 [ 1375.411497][ T2191] lo speed is unknown, defaulting to 1000 [ 1375.697677][ T2196] netlink: 'syz.0.7668': attribute type 1 has an invalid length. [ 1378.837600][ T2191] lo speed is unknown, defaulting to 1000 [ 1379.003176][ T11] block nbd3: Possible stuck request ffff888025318000: control (read@0,1024B). Runtime 1200 seconds [ 1379.015025][ T11] block nbd3: Possible stuck request ffff888025318200: control (read@1024,1024B). Runtime 1200 seconds [ 1379.026810][ T11] block nbd3: Possible stuck request ffff888025318400: control (read@2048,1024B). Runtime 1200 seconds [ 1379.038501][ T11] block nbd3: Possible stuck request ffff888025318600: control (read@3072,1024B). Runtime 1200 seconds [ 1379.055723][ T2207] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7669'. [ 1379.166835][ T2213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7672'. [ 1379.502249][ T2219] openvswitch: netlink: IP tunnel dst address not specified [ 1379.803103][ T2233] syzkaller0: entered promiscuous mode [ 1379.808922][ T2233] syzkaller0: entered allmulticast mode [ 1379.931642][ T2233] tipc: Enabled bearer , priority 0 [ 1379.961943][ T2228] tipc: Resetting bearer [ 1380.039134][ T2228] tipc: Disabling bearer [ 1380.543563][ T2252] __nla_validate_parse: 2 callbacks suppressed [ 1380.543582][ T2252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7685'. [ 1380.580629][ T2253] netlink: 'syz.4.7683': attribute type 10 has an invalid length. [ 1380.653838][ T2248] netlink: 'syz.4.7683': attribute type 10 has an invalid length. [ 1380.693350][ T2253] team0: Port device dummy0 added [ 1380.734468][ T2248] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1380.782250][ T2248] team0: Failed to send options change via netlink (err -105) [ 1380.808268][ T2248] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1380.831988][ T2248] team0: Port device dummy0 removed [ 1380.867702][ T2248] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1380.958096][ T2264] syzkaller0: entered promiscuous mode [ 1380.971997][ T2264] syzkaller0: entered allmulticast mode [ 1381.099849][ T2264] tipc: Enabled bearer , priority 0 [ 1381.130691][ T2261] tipc: Resetting bearer [ 1381.170404][ T2273] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7692'. [ 1381.236392][ T2261] tipc: Disabling bearer [ 1381.514434][ T2282] lo speed is unknown, defaulting to 1000 [ 1381.537063][ T2282] lo speed is unknown, defaulting to 1000 [ 1381.549367][ T2282] lo speed is unknown, defaulting to 1000 [ 1381.587807][ T2295] dummy0: Caught tx_queue_len zero misconfig [ 1381.604120][ T2295] sch_tbf: burst 2 is lower than device dummy0 mtu (1514) ! [ 1381.737158][ T2299] netlink: 'syz.4.7699': attribute type 1 has an invalid length. [ 1381.767686][ T2300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1381.815608][ T2304] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7699'. [ 1381.859080][ T2299] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1381.884311][ T2299] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7699'. [ 1382.619455][ T2313] bond3 (unregistering): Released all slaves [ 1382.710630][ T2310] lo speed is unknown, defaulting to 1000 [ 1382.735904][ T2310] lo speed is unknown, defaulting to 1000 [ 1382.746649][ T2318] lo speed is unknown, defaulting to 1000 [ 1382.764362][ T2310] lo speed is unknown, defaulting to 1000 [ 1382.822158][ T2318] lo speed is unknown, defaulting to 1000 [ 1382.852185][ T2326] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7706'. [ 1383.079596][ T2326] atomic_op ffff888034797998 conn xmit_atomic 0000000000000000 [ 1383.108444][ T2336] bridge5: entered promiscuous mode [ 1383.184088][ T2330] tipc: Enabled bearer , priority 0 [ 1383.214540][ T2335] syzkaller0: entered promiscuous mode [ 1383.231133][ T2335] syzkaller0: entered allmulticast mode [ 1383.266326][ T2329] tipc: Resetting bearer [ 1383.354679][ T2329] tipc: Disabling bearer [ 1383.477285][ T2341] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1383.537001][ T2318] lo speed is unknown, defaulting to 1000 [ 1383.707084][ T2354] lo speed is unknown, defaulting to 1000 [ 1383.729037][ T2354] lo speed is unknown, defaulting to 1000 [ 1383.907397][ T2369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7715'. [ 1383.970504][ T2369] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1383.989877][ T2372] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1383.999737][ T2372] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1384.049501][ T2354] lo speed is unknown, defaulting to 1000 [ 1384.050953][ T2365] lo speed is unknown, defaulting to 1000 [ 1384.090986][ T2365] lo speed is unknown, defaulting to 1000 [ 1384.403405][ T2365] lo speed is unknown, defaulting to 1000 [ 1385.055117][ T2388] syzkaller0: entered promiscuous mode [ 1385.060701][ T2388] syzkaller0: entered allmulticast mode [ 1388.647956][ T2408] tipc: Enabling of bearer rejected, failed to enable media [ 1388.767373][ T2412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7724'. [ 1388.899269][ T2421] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7725'. [ 1389.024278][ T2426] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20004 [ 1389.144450][ T2421] nbd: socks must be embedded in a SOCK_ITEM attr [ 1389.225305][ T2434] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7727'. [ 1389.676526][ T2453] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7730'. [ 1389.997347][ T2461] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7732'. [ 1390.073507][ T2469] syzkaller0: entered promiscuous mode [ 1390.079191][ T2469] syzkaller0: entered allmulticast mode [ 1390.121403][ T2469] tipc: Enabled bearer , priority 0 [ 1390.154114][ T2468] tipc: Resetting bearer [ 1390.216093][ T2468] tipc: Disabling bearer [ 1390.237721][ T2474] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7738'. [ 1390.360632][ T2482] lo speed is unknown, defaulting to 1000 [ 1390.386166][ T2482] lo speed is unknown, defaulting to 1000 [ 1390.399226][ T2482] lo speed is unknown, defaulting to 1000 [ 1390.412309][ T2487] netlink: 'syz.3.7739': attribute type 21 has an invalid length. [ 1390.438942][ T2487] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7739'. [ 1390.690284][ T2499] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7743'. [ 1390.698819][ T2501] lo speed is unknown, defaulting to 1000 [ 1390.750386][ T2501] lo speed is unknown, defaulting to 1000 [ 1390.827143][ T2501] lo speed is unknown, defaulting to 1000 [ 1390.938092][ T2507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7746'. [ 1390.948114][ T2507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7746'. [ 1390.973842][ T2507] syzkaller1: entered promiscuous mode [ 1390.979810][ T2507] syzkaller1: entered allmulticast mode [ 1391.029909][ T2507] ip6erspan0: entered allmulticast mode [ 1391.269373][ T2517] openvswitch: netlink: Message has 8 unknown bytes. [ 1391.293403][ T2517] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1391.641680][ T2523] syzkaller0: entered promiscuous mode [ 1391.649891][ T2523] syzkaller0: entered allmulticast mode [ 1391.784702][ T2520] tipc: Enabled bearer , priority 0 [ 1391.809767][ T2534] netlink: 'syz.1.7752': attribute type 29 has an invalid length. [ 1391.838863][ T2519] tipc: Resetting bearer [ 1391.883814][ T2519] tipc: Disabling bearer [ 1391.899953][ T2537] netlink: 'syz.1.7752': attribute type 29 has an invalid length. [ 1392.827221][ T2595] syzkaller1: entered promiscuous mode [ 1392.853397][ T2595] syzkaller1: entered allmulticast mode [ 1393.091667][ T2615] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1393.432462][ T2637] siw: device registration error -23 [ 1393.482194][ T2646] FAULT_INJECTION: forcing a failure. [ 1393.482194][ T2646] name failslab, interval 1, probability 0, space 0, times 0 [ 1393.523659][ T2646] CPU: 0 UID: 0 PID: 2646 Comm: syz.0.7781 Not tainted syzkaller #0 PREEMPT(full) [ 1393.523683][ T2646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1393.523696][ T2646] Call Trace: [ 1393.523703][ T2646] [ 1393.523710][ T2646] dump_stack_lvl+0xe8/0x150 [ 1393.523739][ T2646] should_fail_ex+0x412/0x560 [ 1393.523767][ T2646] should_failslab+0xa8/0x100 [ 1393.523791][ T2646] __kmalloc_cache_noprof+0x83/0x6e0 [ 1393.523811][ T2646] ? nfnetlink_rcv+0xfe1/0x27b0 [ 1393.523833][ T2646] nfnetlink_rcv+0xfe1/0x27b0 [ 1393.523883][ T2646] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1393.523915][ T2646] ? ref_tracker_free+0x693/0x840 [ 1393.523966][ T2646] ? __netlink_deliver_tap+0x807/0x850 [ 1393.523987][ T2646] ? netlink_deliver_tap+0x2e/0x1b0 [ 1393.524025][ T2646] netlink_unicast+0x80f/0x9b0 [ 1393.524052][ T2646] ? __pfx_netlink_unicast+0x10/0x10 [ 1393.524072][ T2646] ? netlink_sendmsg+0x650/0xb40 [ 1393.524090][ T2646] ? skb_put+0x11b/0x210 [ 1393.524109][ T2646] netlink_sendmsg+0x813/0xb40 [ 1393.524140][ T2646] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1393.524163][ T2646] ? aa_file_perm+0x12d/0x1630 [ 1393.524185][ T2646] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1393.524208][ T2646] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1393.524224][ T2646] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1393.524244][ T2646] __sock_sendmsg+0x21c/0x270 [ 1393.524267][ T2646] ____sys_sendmsg+0x4d7/0x810 [ 1393.524284][ T2646] ? __might_fault+0xaf/0x130 [ 1393.524327][ T2646] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1393.524356][ T2646] ? import_iovec+0x73/0xa0 [ 1393.524376][ T2646] ___sys_sendmsg+0x2a5/0x360 [ 1393.524393][ T2646] ? __lock_acquire+0x6b5/0x2cf0 [ 1393.524415][ T2646] ? __pfx____sys_sendmsg+0x10/0x10 [ 1393.524465][ T2646] ? __fget_files+0x2a/0x420 [ 1393.524484][ T2646] ? __fget_files+0x3a0/0x420 [ 1393.524513][ T2646] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1393.524535][ T2646] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1393.524562][ T2646] ? __pfx_ksys_write+0x10/0x10 [ 1393.524592][ T2646] do_syscall_64+0xe2/0xf80 [ 1393.524609][ T2646] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1393.524625][ T2646] ? trace_irq_disable+0x37/0x100 [ 1393.524645][ T2646] ? clear_bhb_loop+0x60/0xb0 [ 1393.524665][ T2646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1393.524683][ T2646] RIP: 0033:0x7fd6a119acb9 [ 1393.524701][ T2646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1393.524716][ T2646] RSP: 002b:00007fd6a20c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1393.524736][ T2646] RAX: ffffffffffffffda RBX: 00007fd6a1415fa0 RCX: 00007fd6a119acb9 [ 1393.524749][ T2646] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 1393.524760][ T2646] RBP: 00007fd6a20c6090 R08: 0000000000000000 R09: 0000000000000000 [ 1393.524771][ T2646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1393.524782][ T2646] R13: 00007fd6a1416038 R14: 00007fd6a1415fa0 R15: 00007fff0b44ba58 [ 1393.524812][ T2646] [ 1394.194638][ T2659] lo speed is unknown, defaulting to 1000 [ 1394.202036][ T2659] lo speed is unknown, defaulting to 1000 [ 1394.215664][ T2664] __nla_validate_parse: 6 callbacks suppressed [ 1394.215680][ T2664] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7785'. [ 1394.219924][ T2660] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7784'. [ 1394.248054][ T2659] lo speed is unknown, defaulting to 1000 [ 1394.326832][ T2669] block nbd2: Unsupported socket: should be TCP or UNIX. [ 1394.417479][ T2682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7789'. [ 1394.730074][ T2693] lo speed is unknown, defaulting to 1000 [ 1394.766643][ T2693] lo speed is unknown, defaulting to 1000 [ 1394.887730][ T2693] lo speed is unknown, defaulting to 1000 [ 1395.301686][ T2725] syzkaller1: entered promiscuous mode [ 1395.324108][ T2725] syzkaller1: entered allmulticast mode [ 1395.462663][ T2731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7799'. [ 1395.476691][ T2731] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7799'. [ 1395.630393][ T2734] netlink: 820 bytes leftover after parsing attributes in process `syz.1.7800'. [ 1395.672268][ T2734] netlink: 820 bytes leftover after parsing attributes in process `syz.1.7800'. [ 1395.999549][ T2750] netlink: 'syz.1.7804': attribute type 10 has an invalid length. [ 1396.027353][ T2750] veth0_macvtap: left promiscuous mode [ 1396.047497][ T2755] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7805'. [ 1396.058150][ T2750] team0: Device veth0_macvtap failed to register rx_handler [ 1396.278981][ T2770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7807'. [ 1396.279700][ T2762] lo speed is unknown, defaulting to 1000 [ 1396.309498][ T2762] lo speed is unknown, defaulting to 1000 [ 1396.317875][ T2762] lo speed is unknown, defaulting to 1000 [ 1396.347109][ T2770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7807'. [ 1396.776176][ T2776] netlink: 'syz.3.7809': attribute type 1 has an invalid length. [ 1396.921303][ T2776] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1397.066378][ T2779] bond8: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 1397.141957][ T2784] bond8: (slave ip6gretap0): making interface the new active one 35900 ms earlier [ 1397.172129][ T2784] bond8: active interface up! [ 1397.179338][ T2784] bond8: (slave ip6gretap0): Enslaving as an active interface with an up link [ 1397.305553][ T2787] syzkaller1: entered promiscuous mode [ 1397.311371][ T2787] syzkaller1: entered allmulticast mode [ 1397.578442][ T2796] syzkaller0: entered promiscuous mode [ 1397.611557][ T2796] syzkaller0: entered allmulticast mode [ 1397.708650][ T2803] geneve3: entered promiscuous mode [ 1397.733854][ T2803] geneve3: entered allmulticast mode [ 1397.741005][ T2796] tipc: Enabled bearer , priority 0 [ 1397.773763][ T2794] tipc: Resetting bearer [ 1397.922219][ T2794] tipc: Disabling bearer [ 1397.950906][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1397.959806][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1397.960294][ T2827] netlink: 'syz.2.7818': attribute type 1 has an invalid length. [ 1397.980171][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1397.996041][ T2827] netlink: 'syz.2.7818': attribute type 2 has an invalid length. [ 1398.043421][ T2827] netlink: 'syz.2.7818': attribute type 1 has an invalid length. [ 1398.130188][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.305886][ T2831] sit0: left promiscuous mode [ 1398.446517][ T2831] batadv0: left promiscuous mode [ 1398.499397][ T2831] x9: left promiscuous mode [ 1398.695156][ T2831] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1398.737195][ T2831] sit1: left promiscuous mode [ 1398.742120][ T2831] sit1: left allmulticast mode [ 1398.757864][ T2831] bond1: left promiscuous mode [ 1398.778662][ T2831] bond3: left promiscuous mode [ 1398.784287][ T2831] bond3: left allmulticast mode [ 1398.820764][ T2831] geneve3: left promiscuous mode [ 1398.827025][ T2831] geneve3: left allmulticast mode [ 1398.836735][ T2831] sit2: left promiscuous mode [ 1398.871347][ T2828] lo speed is unknown, defaulting to 1000 [ 1398.909129][T26950] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1398.924242][T26950] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.944257][T26950] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 8192 - 0 [ 1398.954037][T26950] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1398.985091][T26950] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.013395][T26950] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 8192 - 0 [ 1399.044403][ T2828] lo speed is unknown, defaulting to 1000 [ 1399.048862][T26950] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1399.070012][T26950] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.082319][T26950] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 8192 - 0 [ 1399.093570][ T2863] syzkaller1: entered promiscuous mode [ 1399.099109][ T2863] syzkaller1: entered allmulticast mode [ 1399.108075][ T2828] lo speed is unknown, defaulting to 1000 [ 1399.151722][ T2865] batadv_slave_1: entered promiscuous mode [ 1399.164766][T26950] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1399.185635][T26950] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.203610][T26950] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 8192 - 0 [ 1399.327861][ T2872] : renamed from wg2 [ 1399.500172][ T2880] __nla_validate_parse: 5 callbacks suppressed [ 1399.500191][ T2880] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7829'. [ 1399.539640][ T2880] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7829'. [ 1399.812617][ T2881] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7829'. [ 1399.905397][ T2864] batadv_slave_1: left promiscuous mode [ 1399.920893][ T2886] tipc: Enabling of bearer rejected, already enabled [ 1400.220022][ T2894] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7835'. [ 1400.239654][ T2892] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7833'. [ 1400.267705][ T2894] unsupported nla_type 540 [ 1400.365478][ T2894] netlink: 'syz.2.7835': attribute type 1 has an invalid length. [ 1400.375183][ T2900] netlink: 'syz.3.7836': attribute type 11 has an invalid length. [ 1400.383571][ T2894] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7835'. [ 1400.385689][ T2894] tipc: Enabled bearer , priority 0 [ 1400.404882][ T2894] syzkaller0: entered promiscuous mode [ 1400.429191][ T2894] syzkaller0: entered allmulticast mode [ 1400.518419][ T2894] tipc: Resetting bearer [ 1400.538087][ T2893] tipc: Resetting bearer [ 1400.647746][ T2893] tipc: Disabling bearer [ 1400.738821][ T2915] netlink: 'syz.1.7839': attribute type 10 has an invalid length. [ 1400.794717][ T2915] netlink: 'syz.1.7839': attribute type 10 has an invalid length. [ 1400.922393][ T2922] lo speed is unknown, defaulting to 1000 [ 1400.951308][ T2922] lo speed is unknown, defaulting to 1000 [ 1400.975853][ T2922] lo speed is unknown, defaulting to 1000 [ 1401.125989][ T2928] syzkaller0: entered promiscuous mode [ 1401.145753][ T2928] syzkaller0: entered allmulticast mode [ 1401.231050][ T2928] tipc: Enabled bearer , priority 0 [ 1401.264231][ T2927] tipc: Resetting bearer [ 1401.305991][ T2927] tipc: Disabling bearer [ 1401.320622][ T2934] lo speed is unknown, defaulting to 1000 [ 1401.329302][ T2934] lo speed is unknown, defaulting to 1000 [ 1401.479825][ T2938] syzkaller1: entered promiscuous mode [ 1401.519054][ T2938] syzkaller1: entered allmulticast mode [ 1401.595354][ T2934] lo speed is unknown, defaulting to 1000 [ 1401.704680][ T2944] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7848'. [ 1401.743010][ T2944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7848'. [ 1402.289414][ T2964] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7857'. [ 1402.304322][ T2968] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7857'. [ 1402.467460][ T2970] IPVS: Error connecting to the multicast addr [ 1402.651154][ T2967] tipc: Enabling of bearer rejected, already enabled [ 1402.675843][ T2985] xt_l2tp: v2 doesn't support IP mode [ 1402.678450][ T2982] syzkaller1: entered promiscuous mode [ 1402.689151][ T2982] syzkaller1: entered allmulticast mode [ 1402.706011][ T2985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1402.724792][ T2985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1403.052100][ T2990] netlink: 'syz.4.7864': attribute type 1 has an invalid length. [ 1403.231802][ T2990] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1403.348020][ T2997] bond3: (slave gretap1): making interface the new active one [ 1403.359992][ T2997] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 1403.756024][ T3022] lo: Caught tx_queue_len zero misconfig [ 1403.868771][ T3030] netlink: 'syz.2.7873': attribute type 1 has an invalid length. [ 1403.969945][ T3039] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1403.998929][ T3039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1404.138720][ T3032] syzkaller1: entered promiscuous mode [ 1404.145971][ T3032] syzkaller1: entered allmulticast mode [ 1404.488099][ T3060] lo speed is unknown, defaulting to 1000 [ 1404.500874][ T3060] lo speed is unknown, defaulting to 1000 [ 1404.584018][ T3060] lo speed is unknown, defaulting to 1000 [ 1404.761969][ T3070] syzkaller0: entered allmulticast mode [ 1405.348198][ T3096] can: request_module (can-proto-3) failed. [ 1405.434012][ T3090] can: request_module (can-proto-3) failed. [ 1405.773476][ T3111] lo speed is unknown, defaulting to 1000 [ 1405.868807][ T3111] lo speed is unknown, defaulting to 1000 [ 1405.887149][ T3119] __nla_validate_parse: 12 callbacks suppressed [ 1405.887169][ T3119] netlink: 6 bytes leftover after parsing attributes in process `syz.1.7898'. [ 1405.958796][ T3119] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1406.045878][ T3111] lo speed is unknown, defaulting to 1000 [ 1406.210691][ T3125] lo speed is unknown, defaulting to 1000 [ 1406.253664][ T3125] lo speed is unknown, defaulting to 1000 [ 1406.435311][ T3139] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1406.486390][ T3139] bond4 (unregistering): Released all slaves [ 1406.808750][ T3151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7904'. [ 1407.487672][ T3161] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1407.535011][ T3125] lo speed is unknown, defaulting to 1000 [ 1407.933392][ T3173] netlink: 'syz.2.7909': attribute type 12 has an invalid length. [ 1407.953740][ T3173] netlink: 'syz.2.7909': attribute type 12 has an invalid length. [ 1407.993603][ T3173] netlink: 'syz.2.7909': attribute type 12 has an invalid length. [ 1408.037081][ T3173] netlink: 'syz.2.7909': attribute type 12 has an invalid length. [ 1408.073692][ T3173] netlink: 'syz.2.7909': attribute type 12 has an invalid length. [ 1408.081940][ T3173] netlink: 'syz.2.7909': attribute type 12 has an invalid length. [ 1408.101819][ T3173] netlink: 'syz.2.7909': attribute type 12 has an invalid length. [ 1408.121594][ T3173] netlink: 'syz.2.7909': attribute type 12 has an invalid length. [ 1408.133980][ T3173] netlink: 'syz.2.7909': attribute type 12 has an invalid length. [ 1408.165357][ T3173] netlink: 'syz.2.7909': attribute type 12 has an invalid length. [ 1408.174341][ T3173] netlink: 'syz.2.7909': attribute type 12 has an invalid length. [ 1408.204888][ T3173] netlink: 'syz.2.7909': attribute type 12 has an invalid length. [ 1408.225232][ T3173] netlink: 'syz.2.7909': attribute type 12 has an invalid length. [ 1408.237413][ T3176] siw: device registration error -23 [ 1408.245610][ T3173] netlink: 'syz.2.7909': attribute type 12 has an invalid length. [ 1408.631268][ T3198] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7913'. [ 1408.745423][ T3203] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7914'. [ 1409.067450][ T11] block nbd3: Possible stuck request ffff888025318000: control (read@0,1024B). Runtime 1230 seconds [ 1409.078524][ T11] block nbd3: Possible stuck request ffff888025318200: control (read@1024,1024B). Runtime 1230 seconds [ 1409.089823][ T11] block nbd3: Possible stuck request ffff888025318400: control (read@2048,1024B). Runtime 1230 seconds [ 1409.101428][ T11] block nbd3: Possible stuck request ffff888025318600: control (read@3072,1024B). Runtime 1230 seconds [ 1409.151212][ T3221] syzkaller0: entered promiscuous mode [ 1409.193320][ T3221] syzkaller0: entered allmulticast mode [ 1409.289466][ T3227] geneve4: entered promiscuous mode [ 1409.397783][ T3235] tipc: Enabled bearer , priority 0 [ 1409.535504][ T3248] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1409.561659][ T3217] tipc: Resetting bearer [ 1409.571742][ T3248] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7924'. [ 1409.630178][ T3217] tipc: Disabling bearer [ 1409.748217][ T3252] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7925'. [ 1409.779525][ T3250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7925'. [ 1409.830214][ T3252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7925'. [ 1409.977165][ T3250] gtp0: entered promiscuous mode [ 1409.982270][ T3250] gtp0: entered allmulticast mode [ 1410.325868][ T3278] bond0: Device is already in use. [ 1410.349995][ T3281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7933'. [ 1410.426355][ T3285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7935'. [ 1410.547495][ T3288] Bluetooth: MGMT ver 1.23 [ 1410.980529][ T3310] lo speed is unknown, defaulting to 1000 [ 1411.009648][ T3310] lo speed is unknown, defaulting to 1000 [ 1411.025664][ T3310] lo speed is unknown, defaulting to 1000 [ 1411.169237][ T3320] __nla_validate_parse: 2 callbacks suppressed [ 1411.169257][ T3320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7942'. [ 1411.454406][ T3318] siw: device registration error -23 [ 1411.546026][ T3329] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7944'. [ 1411.560891][ T3332] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7945'. [ 1411.638976][ T3329] set_match_v1_checkentry: 23 callbacks suppressed [ 1411.638997][ T3329] Cannot find set identified by id 65534 to match [ 1412.003266][ T3343] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1413.090502][ T3368] lo speed is unknown, defaulting to 1000 [ 1413.250336][ T3378] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7952'. [ 1413.288022][ T3359] syzkaller0: entered promiscuous mode [ 1413.311679][ T3359] syzkaller0: entered allmulticast mode [ 1413.358468][ T3368] lo speed is unknown, defaulting to 1000 [ 1413.391244][ T3368] lo speed is unknown, defaulting to 1000 [ 1413.639223][ T3359] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7950'. [ 1413.801053][ T3403] validate_nla: 22 callbacks suppressed [ 1413.801071][ T3403] netlink: 'syz.0.7957': attribute type 1 has an invalid length. [ 1417.110867][ T3403] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1417.171630][ T3394] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.272466][ T3429] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7961'. [ 1417.354865][ T3394] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.438649][ T3429] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1417.472352][ T3394] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.630209][ T3437] netlink: 'syz.1.7964': attribute type 3 has an invalid length. [ 1417.673734][ T3437] netlink: 'syz.1.7964': attribute type 1 has an invalid length. [ 1417.682155][ T3437] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.7964'. [ 1417.706516][ T3394] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.760052][ T3434] syzkaller0: entered promiscuous mode [ 1417.769706][ T3434] syzkaller0: entered allmulticast mode [ 1417.777500][ T3443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7966'. [ 1417.851765][ T3432] tipc: Enabled bearer , priority 0 [ 1417.926011][ T3431] tipc: Resetting bearer [ 1418.064886][ T3431] tipc: Disabling bearer [ 1418.205234][ T3196] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.259422][ T3196] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.344774][ T50] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.384625][ T3458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7970'. [ 1418.435752][ T50] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.455143][ T3464] lo speed is unknown, defaulting to 1000 [ 1418.499761][ T3464] lo speed is unknown, defaulting to 1000 [ 1418.524163][ T3464] lo speed is unknown, defaulting to 1000 [ 1418.853755][ T3483] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1419.252616][ T3499] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1419.263756][ T3497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7979'. [ 1419.300367][ T3501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7978'. [ 1419.432637][ T3507] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1419.613488][ T3511] netlink: 'syz.0.7982': attribute type 1 has an invalid length. [ 1419.869288][ T3523] lo speed is unknown, defaulting to 1000 [ 1419.890028][ T3523] lo speed is unknown, defaulting to 1000 [ 1419.911360][ T3523] lo speed is unknown, defaulting to 1000 [ 1420.015790][ T3527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7986'. [ 1420.683661][ T3530] netlink: 'syz.1.7987': attribute type 13 has an invalid length. [ 1420.692467][ T3530] netlink: 'syz.1.7987': attribute type 12 has an invalid length. [ 1420.785379][ T3544] lo speed is unknown, defaulting to 1000 [ 1420.816122][ T3544] lo speed is unknown, defaulting to 1000 [ 1420.857667][ T3544] lo speed is unknown, defaulting to 1000 [ 1421.155954][ T3555] xt_hashlimit: size too large, truncated to 1048576 [ 1421.389933][ T3568] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7995'. [ 1421.490747][ T3565] lo speed is unknown, defaulting to 1000 [ 1421.527392][ T3565] lo speed is unknown, defaulting to 1000 [ 1421.627320][ T3565] lo speed is unknown, defaulting to 1000 [ 1422.299769][ T3588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8001'. [ 1422.314992][ T3588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8001'. [ 1422.325266][ T3588] netlink: 'syz.2.8001': attribute type 14 has an invalid length. [ 1422.491574][ T3593] dvmrp1: entered allmulticast mode [ 1422.511329][ T3594] dvmrp1: left allmulticast mode [ 1422.816410][ T3605] netlink: 'syz.2.8005': attribute type 13 has an invalid length. [ 1422.851174][ T3605] gretap0: refused to change device tx_queue_len [ 1422.865300][ T3605] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1423.305829][ T3616] lo speed is unknown, defaulting to 1000 [ 1423.337089][ T3616] lo speed is unknown, defaulting to 1000 [ 1423.372122][ T3616] lo speed is unknown, defaulting to 1000 [ 1423.409719][ T3628] netlink: 124 bytes leftover after parsing attributes in process `syz.2.8012'. [ 1424.263705][ T3649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1424.548164][ T3664] netlink: 'syz.3.8023': attribute type 3 has an invalid length. [ 1424.995426][ T3680] lo speed is unknown, defaulting to 1000 [ 1425.015809][ T3680] lo speed is unknown, defaulting to 1000 [ 1425.024005][ T3680] lo speed is unknown, defaulting to 1000 [ 1425.358035][ T3702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8030'. [ 1425.457250][ T3702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8030'. [ 1425.881998][ T3714] lo speed is unknown, defaulting to 1000 [ 1425.932574][ T3714] lo speed is unknown, defaulting to 1000 [ 1425.975668][ T3714] lo speed is unknown, defaulting to 1000 [ 1426.181801][ T3726] netlink: 'syz.2.8036': attribute type 6 has an invalid length. [ 1426.206436][ T3719] delete_channel: no stack [ 1426.378962][ T3734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8037'. [ 1426.964524][ T3753] bond0: (slave dummy0): Releasing backup interface [ 1426.974914][ T3753] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1426.991182][ T3758] netlink: 'syz.1.8043': attribute type 2 has an invalid length. [ 1427.070777][ T3756] tipc: Enabling of bearer rejected, failed to enable media [ 1427.119674][ T3758] 9: entered promiscuous mode [ 1427.250088][ T3759] team0: Mode "loadbal" not found [ 1427.341998][T19115] IPVS: starting estimator thread 0... [ 1427.353597][ T3772] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8047'. [ 1427.444054][ T3775] IPVS: using max 34 ests per chain, 81600 per kthread [ 1427.669870][ T3792] dvmrp12: entered allmulticast mode [ 1427.719675][ T3786] lo speed is unknown, defaulting to 1000 [ 1427.727578][ T3791] dvmrp12: left allmulticast mode [ 1427.832188][ T3789] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 1427.875129][ T3786] lo speed is unknown, defaulting to 1000 [ 1427.917368][ T3786] lo speed is unknown, defaulting to 1000 [ 1428.704344][ T3809] netlink: 88 bytes leftover after parsing attributes in process `syz.3.8058'. [ 1428.794758][ T3812] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8058'. [ 1428.832636][T28119] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1428.941332][T28119] CPU: 1 UID: 0 PID: 28119 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1428.941359][T28119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1428.941371][T28119] Call Trace: [ 1428.941381][T28119] [ 1428.941389][T28119] dump_stack_lvl+0xe8/0x150 [ 1428.941418][T28119] dump_header+0xd3/0x4c0 [ 1428.941441][T28119] oom_kill_process+0x263/0x800 [ 1428.941464][T28119] out_of_memory+0xe55/0x11f0 [ 1428.941492][T28119] ? __pfx___mutex_lock+0x10/0x10 [ 1428.941519][T28119] ? __pfx_out_of_memory+0x10/0x10 [ 1428.941554][T28119] mem_cgroup_out_of_memory+0x158/0x270 [ 1428.941582][T28119] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1428.941616][T28119] ? _raw_spin_unlock+0x28/0x50 [ 1428.941638][T28119] ? memcg1_oom_prepare+0x37e/0x450 [ 1428.941659][T28119] try_charge_memcg+0xdfb/0x12a0 [ 1428.941695][T28119] ? __pfx_try_charge_memcg+0x10/0x10 [ 1428.941717][T28119] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 1428.941751][T28119] charge_memcg+0x9f/0x180 [ 1428.941770][T28119] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 1428.941789][T28119] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 1428.941812][T28119] __read_swap_cache_async+0x212/0x480 [ 1428.941845][T28119] swap_cluster_readahead+0x529/0x680 [ 1428.941875][T28119] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1428.941913][T28119] ? get_vma_policy+0x27b/0x3c0 [ 1428.941937][T28119] swapin_readahead+0x196/0xc50 [ 1428.941958][T28119] ? finish_task_switch+0x161/0x920 [ 1428.941986][T28119] ? swap_table_get+0x1e/0x260 [ 1428.942014][T28119] ? __pfx_swapin_readahead+0x10/0x10 [ 1428.942039][T28119] ? swap_table_get+0x1e/0x260 [ 1428.942059][T28119] ? swap_table_get+0x1e/0x260 [ 1428.942078][T28119] ? swap_table_get+0x1e/0x260 [ 1428.942101][T28119] ? swap_table_get+0x216/0x260 [ 1428.942124][T28119] ? swap_cache_get_folio+0x513/0x520 [ 1428.942153][T28119] do_swap_page+0x4d4/0x5e20 [ 1428.942191][T28119] ? ___pte_offset_map+0x29/0x240 [ 1428.942227][T28119] ? do_swap_page+0x192/0x5e20 [ 1428.942247][T28119] ? __pfx_do_swap_page+0x10/0x10 [ 1428.942269][T28119] ? __lock_acquire+0x6b5/0x2cf0 [ 1428.942288][T28119] ? __pfx_default_wake_function+0x10/0x10 [ 1428.942309][T28119] ? ___pte_offset_map+0x1ae/0x240 [ 1428.942336][T28119] ? pte_offset_map_rw_nolock+0xea/0x160 [ 1428.942367][T28119] handle_mm_fault+0x12d2/0x32a0 [ 1428.942406][T28119] ? handle_mm_fault+0xee/0x32a0 [ 1428.942438][T28119] ? __pfx_handle_mm_fault+0x10/0x10 [ 1428.942459][T28119] ? lock_vma_under_rcu+0x45a/0x500 [ 1428.942513][T28119] do_user_addr_fault+0xa73/0x1360 [ 1428.942540][T28119] ? rcu_is_watching+0x15/0xb0 [ 1428.942563][T28119] ? trace_page_fault_user+0x84/0x1c0 [ 1428.942585][T28119] exc_page_fault+0x6a/0xc0 [ 1428.942604][T28119] asm_exc_page_fault+0x26/0x30 [ 1428.942621][T28119] RIP: 0033:0x7f85a675b58e [ 1428.942639][T28119] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1428.942655][T28119] RSP: 002b:00007fff242bf148 EFLAGS: 00010246 [ 1428.942669][T28119] RAX: 0000000000000000 RBX: 0000555560a98500 RCX: 00007f85a675b58e [ 1428.942679][T28119] RDX: 00007fff242bf1a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1428.942687][T28119] RBP: 00007fff242bf20c R08: 0000000000000000 R09: 0000000000000000 [ 1428.942696][T28119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 1428.942706][T28119] R13: 00000000000927c0 R14: 000000000015cb87 R15: 00007fff242bf260 [ 1428.942735][T28119] [ 1429.283696][T28119] memory: usage 307200kB, limit 307200kB, failcnt 527 [ 1429.290518][T28119] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 1429.483487][T28119] kmem: usage 287840kB, limit 9007199254740988kB, failcnt 0 [ 1429.490826][T28119] Memory cgroup stats for /syz4: [ 1429.491151][T28119] cache 0 [ 1429.564056][T28119] rss 0 [ 1429.593354][T28119] rss_huge 0 [ 1429.603884][T28119] shmem 0 [ 1429.617646][T28119] mapped_file 0 [ 1429.621148][T28119] dirty 0 [ 1429.649990][T28119] writeback 0 [ 1429.668998][T28119] workingset_refault_anon 15 [ 1429.707113][T28119] workingset_refault_file 8 [ 1429.739304][T28119] swap 188416 [ 1429.753431][T28119] swapcached 28672 [ 1429.757857][ T3812] syzkaller1: entered promiscuous mode [ 1429.767307][T28119] pgpgin 248144 [ 1429.781114][T28119] pgpgout 248137 [ 1429.790602][ T3812] syzkaller1: entered allmulticast mode [ 1429.814288][T28119] pgfault 436084 [ 1429.817883][T28119] pgmajfault 13 [ 1429.821381][T28119] inactive_anon 0 [ 1429.839657][T28119] active_anon 28672 [ 1429.854910][T28119] inactive_file 0 [ 1429.858969][T28119] active_file 0 [ 1429.883826][T28119] unevictable 0 [ 1429.887490][T28119] hierarchical_memory_limit 314572800 [ 1429.912253][ T3817] x9: renamed from bridge_slave_0 [ 1429.921021][T28119] hierarchical_memsw_limit 9223372036854771712 [ 1429.939232][T28119] total_cache 0 [ 1429.952535][T28119] total_rss 0 [ 1429.964802][T28119] total_rss_huge 0 [ 1429.968696][T28119] total_shmem 0 [ 1429.972209][T28119] total_mapped_file 0 [ 1429.988977][T28119] total_dirty 0 [ 1429.992474][T28119] total_writeback 0 [ 1430.009243][T28119] total_workingset_refault_anon 15 [ 1430.043393][T28119] total_workingset_refault_file 8 [ 1430.064446][T28119] total_swap 188416 [ 1430.071521][T28119] total_swapcached 28672 [ 1430.083921][T28119] total_pgpgin 248144 [ 1430.087946][T28119] total_pgpgout 248137 [ 1430.115212][T28119] total_pgfault 436084 [ 1430.119319][T28119] total_pgmajfault 13 [ 1430.143971][T28119] total_inactive_anon 0 [ 1430.148285][T28119] total_active_anon 28672 [ 1430.183749][T28119] total_inactive_file 0 [ 1430.187952][T28119] total_active_file 0 [ 1430.191935][T28119] total_unevictable 0 [ 1430.212073][ T3821] FAULT_INJECTION: forcing a failure. [ 1430.212073][ T3821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1430.251420][T28119] anon_cost 0 [ 1430.264023][T28119] file_cost 0 [ 1430.267570][T28119] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.8053,pid=3787,uid=0 [ 1430.313350][ T3821] CPU: 0 UID: 0 PID: 3821 Comm: syz.1.8061 Not tainted syzkaller #0 PREEMPT(full) [ 1430.313376][ T3821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1430.313388][ T3821] Call Trace: [ 1430.313397][ T3821] [ 1430.313404][ T3821] dump_stack_lvl+0xe8/0x150 [ 1430.313432][ T3821] should_fail_ex+0x412/0x560 [ 1430.313459][ T3821] _copy_from_user+0x2d/0xb0 [ 1430.313479][ T3821] __sys_bpf+0x229/0x920 [ 1430.313504][ T3821] ? __pfx___sys_bpf+0x10/0x10 [ 1430.313537][ T3821] ? ksys_write+0x242/0x270 [ 1430.313555][ T3821] ? __pfx_ksys_write+0x10/0x10 [ 1430.313577][ T3821] __x64_sys_bpf+0x7c/0x90 [ 1430.313597][ T3821] do_syscall_64+0xe2/0xf80 [ 1430.313614][ T3821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1430.313632][ T3821] ? trace_irq_disable+0x37/0x100 [ 1430.313652][ T3821] ? clear_bhb_loop+0x60/0xb0 [ 1430.313674][ T3821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1430.313691][ T3821] RIP: 0033:0x7f4f4d79acb9 [ 1430.313708][ T3821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1430.313722][ T3821] RSP: 002b:00007f4f4e574028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1430.313741][ T3821] RAX: ffffffffffffffda RBX: 00007f4f4da15fa0 RCX: 00007f4f4d79acb9 [ 1430.313754][ T3821] RDX: 0000000000000020 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1430.313766][ T3821] RBP: 00007f4f4e574090 R08: 0000000000000000 R09: 0000000000000000 [ 1430.313778][ T3821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1430.313789][ T3821] R13: 00007f4f4da16038 R14: 00007f4f4da15fa0 R15: 00007ffe1aaf58a8 [ 1430.313818][ T3821] [ 1430.386356][T28119] Memory cgroup out of memory: Killed process 3787 (syz.4.8053) total-vm:102388kB, anon-rss:1208kB, file-rss:23240kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1430.807115][ T3825] lo speed is unknown, defaulting to 1000 [ 1430.825207][ T3825] lo speed is unknown, defaulting to 1000 [ 1430.881359][ T3825] lo speed is unknown, defaulting to 1000 [ 1430.938381][ T3841] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8064'. [ 1435.260969][ T3855] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8068'. [ 1435.302393][ T3855] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8068'. [ 1435.334585][ T3855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8068'. [ 1435.354560][ T3858] netlink: 'syz.2.8071': attribute type 3 has an invalid length. [ 1435.375073][ T3858] netlink: 'syz.2.8071': attribute type 1 has an invalid length. [ 1435.394389][ T3858] netlink: 212 bytes leftover after parsing attributes in process `syz.2.8071'. [ 1435.419486][ T3858] NCSI netlink: No device for ifindex 813332851 [ 1435.550696][ T3867] FAULT_INJECTION: forcing a failure. [ 1435.550696][ T3867] name failslab, interval 1, probability 0, space 0, times 0 [ 1435.612037][ T3867] CPU: 0 UID: 0 PID: 3867 Comm: syz.3.8074 Not tainted syzkaller #0 PREEMPT(full) [ 1435.612064][ T3867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1435.612075][ T3867] Call Trace: [ 1435.612082][ T3867] [ 1435.612089][ T3867] dump_stack_lvl+0xe8/0x150 [ 1435.612116][ T3867] should_fail_ex+0x412/0x560 [ 1435.612143][ T3867] should_failslab+0xa8/0x100 [ 1435.612166][ T3867] __kvmalloc_node_noprof+0x166/0x8d0 [ 1435.612184][ T3867] ? __fget_files+0x2a/0x420 [ 1435.612204][ T3867] ? vmemdup_user+0x2b/0xd0 [ 1435.612228][ T3867] vmemdup_user+0x2b/0xd0 [ 1435.612247][ T3867] map_get_next_key+0x1c3/0x620 [ 1435.612274][ T3867] ? bpf_lsm_bpf+0x9/0x20 [ 1435.612291][ T3867] ? security_bpf+0x7e/0x2d0 [ 1435.612313][ T3867] __sys_bpf+0x6b0/0x920 [ 1435.612336][ T3867] ? __pfx___sys_bpf+0x10/0x10 [ 1435.612381][ T3867] ? ksys_write+0x242/0x270 [ 1435.612401][ T3867] ? __pfx_ksys_write+0x10/0x10 [ 1435.612425][ T3867] __x64_sys_bpf+0x7c/0x90 [ 1435.612452][ T3867] do_syscall_64+0xe2/0xf80 [ 1435.612470][ T3867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1435.612487][ T3867] ? trace_irq_disable+0x37/0x100 [ 1435.612507][ T3867] ? clear_bhb_loop+0x60/0xb0 [ 1435.612528][ T3867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1435.612545][ T3867] RIP: 0033:0x7f51bf79acb9 [ 1435.612560][ T3867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1435.612574][ T3867] RSP: 002b:00007f51c0579028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1435.612593][ T3867] RAX: ffffffffffffffda RBX: 00007f51bfa15fa0 RCX: 00007f51bf79acb9 [ 1435.612607][ T3867] RDX: 0000000000000020 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1435.612619][ T3867] RBP: 00007f51c0579090 R08: 0000000000000000 R09: 0000000000000000 [ 1435.612629][ T3867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1435.612640][ T3867] R13: 00007f51bfa16038 R14: 00007f51bfa15fa0 R15: 00007ffc80fa8198 [ 1435.612670][ T3867] [ 1436.195367][ T3884] IPVS: length: 8 != 314313356560 [ 1436.226904][ T3884] netlink: 'syz.3.8078': attribute type 4 has an invalid length. [ 1436.308010][ T3886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8079'. [ 1436.369241][ T3890] gre2: entered allmulticast mode [ 1436.468790][ T3889] 8021q: VLANs not supported on vxcan0 [ 1436.594280][ T3904] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8085'. [ 1436.710990][ T3906] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8084'. [ 1436.744067][ T3906] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8084'. [ 1436.771401][ T3906] macvlan0: entered allmulticast mode [ 1436.825008][ T3906] veth1_vlan: entered allmulticast mode [ 1436.928029][ T3915] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 1436.928093][ T3911] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1436.937733][ T3914] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8087'. [ 1437.044626][ T3915] can: request_module (can-proto-5) failed. [ 1437.228503][ T3920] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8089'. [ 1437.323297][ T3931] macsec1: entered promiscuous mode [ 1437.328899][ T3931] macsec1: entered allmulticast mode [ 1437.417229][ T3930] nbd: device at index 64 is going down [ 1437.684270][ T3944] openvswitch: netlink: Flow key attr not present in new flow. [ 1437.785838][ T3955] FAULT_INJECTION: forcing a failure. [ 1437.785838][ T3955] name failslab, interval 1, probability 0, space 0, times 0 [ 1437.866344][ T3955] CPU: 0 UID: 0 PID: 3955 Comm: syz.1.8100 Not tainted syzkaller #0 PREEMPT(full) [ 1437.866370][ T3955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1437.866381][ T3955] Call Trace: [ 1437.866387][ T3955] [ 1437.866395][ T3955] dump_stack_lvl+0xe8/0x150 [ 1437.866420][ T3955] should_fail_ex+0x412/0x560 [ 1437.866448][ T3955] should_failslab+0xa8/0x100 [ 1437.866469][ T3955] __kvmalloc_node_noprof+0x166/0x8d0 [ 1437.866489][ T3955] ? map_get_next_key+0x234/0x620 [ 1437.866511][ T3955] ? _copy_from_user+0x94/0xb0 [ 1437.866531][ T3955] map_get_next_key+0x234/0x620 [ 1437.866552][ T3955] ? bpf_lsm_bpf+0x9/0x20 [ 1437.866582][ T3955] __sys_bpf+0x6b0/0x920 [ 1437.866607][ T3955] ? __pfx___sys_bpf+0x10/0x10 [ 1437.866640][ T3955] ? ksys_write+0x242/0x270 [ 1437.866658][ T3955] ? __pfx_ksys_write+0x10/0x10 [ 1437.866679][ T3955] __x64_sys_bpf+0x7c/0x90 [ 1437.866699][ T3955] do_syscall_64+0xe2/0xf80 [ 1437.866717][ T3955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.866734][ T3955] ? trace_irq_disable+0x37/0x100 [ 1437.866753][ T3955] ? clear_bhb_loop+0x60/0xb0 [ 1437.866773][ T3955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.866789][ T3955] RIP: 0033:0x7f4f4d79acb9 [ 1437.866806][ T3955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1437.866820][ T3955] RSP: 002b:00007f4f4e574028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1437.866837][ T3955] RAX: ffffffffffffffda RBX: 00007f4f4da15fa0 RCX: 00007f4f4d79acb9 [ 1437.866849][ T3955] RDX: 0000000000000020 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1437.866860][ T3955] RBP: 00007f4f4e574090 R08: 0000000000000000 R09: 0000000000000000 [ 1437.866872][ T3955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1437.866882][ T3955] R13: 00007f4f4da16038 R14: 00007f4f4da15fa0 R15: 00007ffe1aaf58a8 [ 1437.866910][ T3955] [ 1438.122481][ T3961] lo speed is unknown, defaulting to 1000 [ 1438.140076][ T3961] lo speed is unknown, defaulting to 1000 [ 1438.147524][ T3961] lo speed is unknown, defaulting to 1000 [ 1438.182328][ T3962] pim6reg: entered allmulticast mode [ 1438.290193][ T3970] vxcan3: entered promiscuous mode [ 1439.155297][ T11] block nbd3: Possible stuck request ffff888025318000: control (read@0,1024B). Runtime 1260 seconds [ 1439.170233][ T11] block nbd3: Possible stuck request ffff888025318200: control (read@1024,1024B). Runtime 1260 seconds [ 1439.182550][ T11] block nbd3: Possible stuck request ffff888025318400: control (read@2048,1024B). Runtime 1260 seconds [ 1439.194713][ T11] block nbd3: Possible stuck request ffff888025318600: control (read@3072,1024B). Runtime 1260 seconds [ 1439.505914][ T4016] FAULT_INJECTION: forcing a failure. [ 1439.505914][ T4016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1439.560406][ T4016] CPU: 1 UID: 0 PID: 4016 Comm: syz.3.8114 Not tainted syzkaller #0 PREEMPT(full) [ 1439.560432][ T4016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1439.560444][ T4016] Call Trace: [ 1439.560452][ T4016] [ 1439.560460][ T4016] dump_stack_lvl+0xe8/0x150 [ 1439.560488][ T4016] should_fail_ex+0x412/0x560 [ 1439.560517][ T4016] _copy_to_user+0x31/0xb0 [ 1439.560538][ T4016] map_get_next_key+0x4c0/0x620 [ 1439.560565][ T4016] ? map_get_next_key+0x286/0x620 [ 1439.560591][ T4016] __sys_bpf+0x6b0/0x920 [ 1439.560616][ T4016] ? __pfx___sys_bpf+0x10/0x10 [ 1439.560654][ T4016] ? ksys_write+0x242/0x270 [ 1439.560680][ T4016] ? __pfx_ksys_write+0x10/0x10 [ 1439.560705][ T4016] __x64_sys_bpf+0x7c/0x90 [ 1439.560727][ T4016] do_syscall_64+0xe2/0xf80 [ 1439.560745][ T4016] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1439.560762][ T4016] ? trace_irq_disable+0x37/0x100 [ 1439.560783][ T4016] ? clear_bhb_loop+0x60/0xb0 [ 1439.560805][ T4016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1439.560823][ T4016] RIP: 0033:0x7f51bf79acb9 [ 1439.560839][ T4016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1439.560854][ T4016] RSP: 002b:00007f51c0579028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1439.560873][ T4016] RAX: ffffffffffffffda RBX: 00007f51bfa15fa0 RCX: 00007f51bf79acb9 [ 1439.560886][ T4016] RDX: 0000000000000020 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1439.560898][ T4016] RBP: 00007f51c0579090 R08: 0000000000000000 R09: 0000000000000000 [ 1439.560910][ T4016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1439.560921][ T4016] R13: 00007f51bfa16038 R14: 00007f51bfa15fa0 R15: 00007ffc80fa8198 [ 1439.560951][ T4016] [ 1439.955818][ T4022] bridge0: port 3(syz_tun) entered disabled state [ 1440.010187][ T4022] veth1_vlan: left allmulticast mode [ 1440.486848][ T4041] __nla_validate_parse: 11 callbacks suppressed [ 1440.486870][ T4041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8118'. [ 1444.296004][ T4040] tipc: Enabling of bearer rejected, failed to enable media [ 1444.429620][ T4053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8121'. [ 1444.459244][ T4053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8121'. [ 1444.892330][ T4088] netlink: 'syz.0.8130': attribute type 49 has an invalid length. [ 1445.309031][ T4085] lo speed is unknown, defaulting to 1000 [ 1445.326412][ T4085] lo speed is unknown, defaulting to 1000 [ 1445.368709][ T4085] lo speed is unknown, defaulting to 1000 [ 1445.385809][ T4094] lo speed is unknown, defaulting to 1000 [ 1445.401821][ T4094] lo speed is unknown, defaulting to 1000 [ 1445.789408][ T4119] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8137'. [ 1445.806206][T19123] lo speed is unknown, defaulting to 1000 [ 1445.816473][T19123] syz0: Port: 1 Link ACTIVE [ 1445.818175][ T4119] team0: No ports can be present during mode change [ 1445.842202][T19123] lo speed is unknown, defaulting to 1000 [ 1446.034527][ T4094] lo speed is unknown, defaulting to 1000 [ 1446.356793][ T4132] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8143'. [ 1446.509452][ T4140] netlink: zone id is out of range [ 1446.516055][ T4140] netlink: zone id is out of range [ 1446.521198][ T4140] netlink: zone id is out of range [ 1446.538256][ T4140] netlink: zone id is out of range [ 1446.563547][ T4140] netlink: zone id is out of range [ 1446.573236][ T4140] netlink: zone id is out of range [ 1446.589749][ T4140] netlink: zone id is out of range [ 1446.620085][ T4140] netlink: zone id is out of range [ 1446.654694][ T4140] netlink: zone id is out of range [ 1446.670199][ T4140] netlink: zone id is out of range [ 1446.887139][ T4139] lo speed is unknown, defaulting to 1000 [ 1446.907732][ T4139] lo speed is unknown, defaulting to 1000 [ 1447.136902][ T4151] netlink: 'syz.0.8146': attribute type 21 has an invalid length. [ 1447.150265][ T4151] netlink: 'syz.0.8146': attribute type 1 has an invalid length. [ 1447.169079][ T4151] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8146'. [ 1447.240814][ T4139] lo speed is unknown, defaulting to 1000 [ 1447.833989][ T4150] siw: device registration error -23 [ 1448.021813][ T4156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8147'. [ 1448.201919][ T4157] netlink: 'syz.0.8147': attribute type 1 has an invalid length. [ 1448.261659][ T4158] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8147'. [ 1448.456322][ T4158] bond6: (slave geneve4): making interface the new active one [ 1448.467762][ T4158] bond6: (slave geneve4): Enslaving as an active interface with an up link [ 1448.483052][T31528] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1448.499125][T31528] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1448.644945][T31528] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1448.674997][T31528] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1449.104279][ T4163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8148'. [ 1449.174661][ T4165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8149'. [ 1449.586479][ T4178] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8153'. [ 1449.645412][ T4180] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20002 [ 1449.717874][ T4174] --map-set only usable from mangle table [ 1450.064842][ T4194] bridge0: entered promiscuous mode [ 1450.070567][ T4194] bond0: entered promiscuous mode [ 1450.075684][ T4194] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:591 [ 1450.084999][ T4194] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 4194, name: syz.0.8158 [ 1450.094071][ T4194] preempt_count: 201, expected: 0 [ 1450.099112][ T4194] RCU nest depth: 0, expected: 0 [ 1450.104120][ T4194] 3 locks held by syz.0.8158/4194: [ 1450.109231][ T4194] #0: ffffffff8fcf1da0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1450.118885][ T4194] #1: ffffffff8f7a8c08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 1450.127997][ T4194] #2: ffff8880481a4370 (&dev_addr_list_lock_key#7/2){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 1450.138343][ T4194] Preemption disabled at: [ 1450.138355][ T4194] [] dev_uc_add+0x56/0x120 [ 1450.148703][ T4194] CPU: 0 UID: 0 PID: 4194 Comm: syz.0.8158 Not tainted syzkaller #0 PREEMPT(full) [ 1450.148728][ T4194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1450.148740][ T4194] Call Trace: [ 1450.148747][ T4194] [ 1450.148761][ T4194] dump_stack_lvl+0xe8/0x150 [ 1450.148789][ T4194] __might_resched+0x378/0x4d0 [ 1450.148811][ T4194] ? dev_uc_add+0x56/0x120 [ 1450.148834][ T4194] __mutex_lock+0x119/0x1300 [ 1450.148858][ T4194] ? __pfx_vprintk_emit+0x10/0x10 [ 1450.148877][ T4194] ? __irq_work_queue_local+0x1f2/0x540 [ 1450.148901][ T4194] ? prb_read_valid+0x3c/0x60 [ 1450.148925][ T4194] ? dev_set_promiscuity+0x10e/0x260 [ 1450.148946][ T4194] ? _printk+0xdd/0x130 [ 1450.148969][ T4194] ? __pfx___mutex_lock+0x10/0x10 [ 1450.148995][ T4194] ? vprintk_emit+0x4eb/0x560 [ 1450.149018][ T4194] ? __netdev_printk+0x36f/0x480 [ 1450.149045][ T4194] dev_set_promiscuity+0x10e/0x260 [ 1450.149069][ T4194] bond_change_rx_flags+0x21a/0x690 [ 1450.149093][ T4194] ? __pfx_bond_change_rx_flags+0x10/0x10 [ 1450.149123][ T4194] ? __pfx_bond_change_rx_flags+0x10/0x10 [ 1450.149140][ T4194] __dev_set_promiscuity+0x515/0x710 [ 1450.149161][ T4194] ? netdev_info+0x11e/0x180 [ 1450.149189][ T4194] netif_set_promiscuity+0x50/0xe0 [ 1450.149211][ T4194] dev_set_promiscuity+0x126/0x260 [ 1450.149235][ T4194] br_manage_promisc+0x180/0x560 [ 1450.149261][ T4194] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 1450.149283][ T4194] __dev_set_promiscuity+0x515/0x710 [ 1450.149304][ T4194] ? __hw_addr_add_ex+0x361/0x650 [ 1450.149328][ T4194] __dev_set_rx_mode+0x17c/0x260 [ 1450.149349][ T4194] dev_uc_add+0xc8/0x120 [ 1450.149372][ T4194] macvlan_open+0x446/0x8e0 [ 1450.149402][ T4194] __dev_open+0x44d/0x830 [ 1450.149432][ T4194] ? __pfx___dev_open+0x10/0x10 [ 1450.149453][ T4194] ? __dev_change_flags+0x1b0/0x690 [ 1450.149481][ T4194] __dev_change_flags+0x1f7/0x690 [ 1450.149505][ T4194] ? __pfx___dev_change_flags+0x10/0x10 [ 1450.149522][ T4194] ? netdev_is_rx_handler_busy+0x56/0x120 [ 1450.149543][ T4194] ? __pfx_tap_handle_frame+0x10/0x10 [ 1450.149571][ T4194] ? macvtap_newlink+0x166/0x1b0 [ 1450.149597][ T4194] rtnl_newlink_create+0x587/0xb70 [ 1450.149616][ T4194] ? __pfx___nla_validate_parse+0x10/0x10 [ 1450.149645][ T4194] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1450.149668][ T4194] ? __pfx___mutex_lock+0x10/0x10 [ 1450.149696][ T4194] ? ns_capable+0x89/0xe0 [ 1450.149719][ T4194] rtnl_newlink+0x1666/0x1be0 [ 1450.149799][ T4194] ? __pfx_rtnl_newlink+0x10/0x10 [ 1450.149815][ T4194] ? do_syscall_64+0xe2/0xf80 [ 1450.149830][ T4194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1450.149887][ T4194] ? kasan_quarantine_put+0xbb/0x1f0 [ 1450.149906][ T4194] ? lockdep_hardirqs_on+0x7a/0x110 [ 1450.149928][ T4194] ? kmem_cache_free+0x195/0x610 [ 1450.149945][ T4194] ? nlmon_xmit+0xb0/0x100 [ 1450.149977][ T4194] ? __lock_acquire+0x6b5/0x2cf0 [ 1450.150006][ T4194] ? __local_bh_enable_ip+0xd0/0x130 [ 1450.150025][ T4194] ? lockdep_hardirqs_on+0x7a/0x110 [ 1450.150041][ T4194] ? __dev_queue_xmit+0x2a7/0x32b0 [ 1450.150059][ T4194] ? __local_bh_enable_ip+0xd0/0x130 [ 1450.150076][ T4194] ? __dev_queue_xmit+0x2a7/0x32b0 [ 1450.150104][ T4194] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1450.150146][ T4194] ? __pfx_rtnl_newlink+0x10/0x10 [ 1450.150162][ T4194] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1450.150191][ T4194] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1450.150215][ T4194] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1450.150238][ T4194] ? ref_tracker_free+0x693/0x840 [ 1450.150261][ T4194] ? __copy_skb_header+0xa3/0x4a0 [ 1450.150282][ T4194] ? __pfx_ref_tracker_free+0x10/0x10 [ 1450.150317][ T4194] netlink_rcv_skb+0x232/0x4b0 [ 1450.150340][ T4194] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1450.150367][ T4194] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1450.150400][ T4194] ? netlink_deliver_tap+0x2e/0x1b0 [ 1450.150429][ T4194] netlink_unicast+0x80f/0x9b0 [ 1450.150458][ T4194] ? __pfx_netlink_unicast+0x10/0x10 [ 1450.150480][ T4194] ? netlink_sendmsg+0x650/0xb40 [ 1450.150498][ T4194] ? skb_put+0x11b/0x210 [ 1450.150518][ T4194] netlink_sendmsg+0x813/0xb40 [ 1450.150549][ T4194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1450.150573][ T4194] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1450.150598][ T4194] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1450.150614][ T4194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1450.150636][ T4194] __sock_sendmsg+0x21c/0x270 [ 1450.150661][ T4194] ____sys_sendmsg+0x4d7/0x810 [ 1450.150679][ T4194] ? __might_fault+0xaf/0x130 [ 1450.150710][ T4194] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1450.150739][ T4194] ? import_iovec+0x73/0xa0 [ 1450.150769][ T4194] ___sys_sendmsg+0x2a5/0x360 [ 1450.150786][ T4194] ? __lock_acquire+0x6b5/0x2cf0 [ 1450.150809][ T4194] ? __pfx____sys_sendmsg+0x10/0x10 [ 1450.150866][ T4194] ? __fget_files+0x2a/0x420 [ 1450.150886][ T4194] ? __fget_files+0x3a0/0x420 [ 1450.150918][ T4194] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1450.150940][ T4194] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1450.150956][ T4194] ? __se_sys_rt_sigprocmask+0x1e0/0x320 [ 1450.150989][ T4194] ? do_user_addr_fault+0xc7c/0x1360 [ 1450.151020][ T4194] do_syscall_64+0xe2/0xf80 [ 1450.151038][ T4194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1450.151055][ T4194] ? trace_irq_disable+0x37/0x100 [ 1450.151086][ T4194] ? clear_bhb_loop+0x60/0xb0 [ 1450.151107][ T4194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1450.151125][ T4194] RIP: 0033:0x7fd6a119acb9 [ 1450.151143][ T4194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1450.151158][ T4194] RSP: 002b:00007fd6a20a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1450.151177][ T4194] RAX: ffffffffffffffda RBX: 00007fd6a1416090 RCX: 00007fd6a119acb9 [ 1450.151191][ T4194] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1450.151202][ T4194] RBP: 00007fd6a1208bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1450.151213][ T4194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1450.151225][ T4194] R13: 00007fd6a1416128 R14: 00007fd6a1416090 R15: 00007fff0b44ba58 [ 1450.151257][ T4194] [ 1450.151285][ T4194] [ 1450.729264][ T4194] ============================= [ 1450.734106][ T4194] [ BUG: Invalid wait context ] [ 1450.738936][ T4194] syzkaller #0 Tainted: G W [ 1450.744909][ T4194] ----------------------------- [ 1450.749734][ T4194] syz.0.8158/4194 is trying to lock: [ 1450.755001][ T4194] ffff888098244d40 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: dev_set_promiscuity+0x10e/0x260 [ 1450.765344][ T4194] other info that might help us debug this: [ 1450.771392][ T4194] context-{5:5} [ 1450.774829][ T4194] 3 locks held by syz.0.8158/4194: [ 1450.779944][ T4194] #0: ffffffff8fcf1da0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1450.789535][ T4194] #1: ffffffff8f7a8c08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 1450.798567][ T4194] #2: ffff8880481a4370 (&dev_addr_list_lock_key#7/2){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 1450.808843][ T4194] stack backtrace: [ 1450.812706][ T4194] CPU: 0 UID: 0 PID: 4194 Comm: syz.0.8158 Tainted: G W syzkaller #0 PREEMPT(full) [ 1450.812726][ T4194] Tainted: [W]=WARN [ 1450.812731][ T4194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1450.812740][ T4194] Call Trace: [ 1450.812747][ T4194] [ 1450.812755][ T4194] dump_stack_lvl+0xe8/0x150 [ 1450.812775][ T4194] __lock_acquire+0xec1/0x2cf0 [ 1450.812792][ T4194] ? __show_trace_log_lvl+0x478/0x550 [ 1450.812812][ T4194] ? dev_set_promiscuity+0x10e/0x260 [ 1450.812825][ T4194] lock_acquire+0x106/0x330 [ 1450.812837][ T4194] ? dev_set_promiscuity+0x10e/0x260 [ 1450.812851][ T4194] ? dump_stack_lvl+0x135/0x150 [ 1450.812865][ T4194] ? __might_resched+0x378/0x4d0 [ 1450.812881][ T4194] __mutex_lock+0x19f/0x1300 [ 1450.812894][ T4194] ? dev_set_promiscuity+0x10e/0x260 [ 1450.812908][ T4194] ? __pfx_vprintk_emit+0x10/0x10 [ 1450.812923][ T4194] ? __irq_work_queue_local+0x1f2/0x540 [ 1450.812940][ T4194] ? prb_read_valid+0x3c/0x60 [ 1450.812956][ T4194] ? dev_set_promiscuity+0x10e/0x260 [ 1450.812970][ T4194] ? __pfx___mutex_lock+0x10/0x10 [ 1450.812985][ T4194] ? vprintk_emit+0x4eb/0x560 [ 1450.813000][ T4194] ? __netdev_printk+0x36f/0x480 [ 1450.813018][ T4194] dev_set_promiscuity+0x10e/0x260 [ 1450.813032][ T4194] bond_change_rx_flags+0x21a/0x690 [ 1450.813048][ T4194] ? __pfx_bond_change_rx_flags+0x10/0x10 [ 1450.813064][ T4194] ? __pfx_bond_change_rx_flags+0x10/0x10 [ 1450.813076][ T4194] __dev_set_promiscuity+0x515/0x710 [ 1450.813090][ T4194] ? netdev_info+0x11e/0x180 [ 1450.813108][ T4194] netif_set_promiscuity+0x50/0xe0 [ 1450.813123][ T4194] dev_set_promiscuity+0x126/0x260 [ 1450.813137][ T4194] br_manage_promisc+0x180/0x560 [ 1450.813153][ T4194] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 1450.813170][ T4194] __dev_set_promiscuity+0x515/0x710 [ 1450.813183][ T4194] ? __hw_addr_add_ex+0x361/0x650 [ 1450.813198][ T4194] __dev_set_rx_mode+0x17c/0x260 [ 1450.813211][ T4194] dev_uc_add+0xc8/0x120 [ 1450.813226][ T4194] macvlan_open+0x446/0x8e0 [ 1450.813244][ T4194] __dev_open+0x44d/0x830 [ 1450.813263][ T4194] ? __pfx___dev_open+0x10/0x10 [ 1450.813278][ T4194] ? __dev_change_flags+0x1b0/0x690 [ 1450.813294][ T4194] __dev_change_flags+0x1f7/0x690 [ 1450.813309][ T4194] ? __pfx___dev_change_flags+0x10/0x10 [ 1450.813321][ T4194] ? netdev_is_rx_handler_busy+0x56/0x120 [ 1450.813336][ T4194] ? __pfx_tap_handle_frame+0x10/0x10 [ 1450.813356][ T4194] ? macvtap_newlink+0x166/0x1b0 [ 1450.813373][ T4194] rtnl_newlink_create+0x587/0xb70 [ 1450.813387][ T4194] ? __pfx___nla_validate_parse+0x10/0x10 [ 1450.813404][ T4194] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1450.813419][ T4194] ? __pfx___mutex_lock+0x10/0x10 [ 1450.813434][ T4194] ? ns_capable+0x89/0xe0 [ 1450.813448][ T4194] rtnl_newlink+0x1666/0x1be0 [ 1450.813471][ T4194] ? __pfx_rtnl_newlink+0x10/0x10 [ 1450.813481][ T4194] ? do_syscall_64+0xe2/0xf80 [ 1450.813493][ T4194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1450.813518][ T4194] ? kasan_quarantine_put+0xbb/0x1f0 [ 1450.813530][ T4194] ? lockdep_hardirqs_on+0x7a/0x110 [ 1450.813544][ T4194] ? kmem_cache_free+0x195/0x610 [ 1450.813556][ T4194] ? nlmon_xmit+0xb0/0x100 [ 1450.813575][ T4194] ? __lock_acquire+0x6b5/0x2cf0 [ 1450.813590][ T4194] ? __local_bh_enable_ip+0xd0/0x130 [ 1450.813604][ T4194] ? lockdep_hardirqs_on+0x7a/0x110 [ 1450.813615][ T4194] ? __dev_queue_xmit+0x2a7/0x32b0 [ 1450.813629][ T4194] ? __local_bh_enable_ip+0xd0/0x130 [ 1450.813642][ T4194] ? __dev_queue_xmit+0x2a7/0x32b0 [ 1450.813658][ T4194] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1450.813681][ T4194] ? __pfx_rtnl_newlink+0x10/0x10 [ 1450.813692][ T4194] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1450.813713][ T4194] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1450.813730][ T4194] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1450.813748][ T4194] ? ref_tracker_free+0x693/0x840 [ 1450.813765][ T4194] ? __copy_skb_header+0xa3/0x4a0 [ 1450.813780][ T4194] ? __pfx_ref_tracker_free+0x10/0x10 [ 1450.813800][ T4194] netlink_rcv_skb+0x232/0x4b0 [ 1450.813815][ T4194] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1450.813834][ T4194] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1450.813852][ T4194] ? netlink_deliver_tap+0x2e/0x1b0 [ 1450.813869][ T4194] netlink_unicast+0x80f/0x9b0 [ 1450.813885][ T4194] ? __pfx_netlink_unicast+0x10/0x10 [ 1450.813898][ T4194] ? netlink_sendmsg+0x650/0xb40 [ 1450.813913][ T4194] ? skb_put+0x11b/0x210 [ 1450.813925][ T4194] netlink_sendmsg+0x813/0xb40 [ 1450.813942][ T4194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1450.813958][ T4194] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1450.813976][ T4194] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1450.813988][ T4194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1450.814003][ T4194] __sock_sendmsg+0x21c/0x270 [ 1450.814020][ T4194] ____sys_sendmsg+0x4d7/0x810 [ 1450.814033][ T4194] ? __might_fault+0xaf/0x130 [ 1450.814052][ T4194] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1450.814068][ T4194] ? import_iovec+0x73/0xa0 [ 1450.814083][ T4194] ___sys_sendmsg+0x2a5/0x360 [ 1450.814095][ T4194] ? __lock_acquire+0x6b5/0x2cf0 [ 1450.814109][ T4194] ? __pfx____sys_sendmsg+0x10/0x10 [ 1450.814133][ T4194] ? __fget_files+0x2a/0x420 [ 1450.814148][ T4194] ? __fget_files+0x3a0/0x420 [ 1450.814166][ T4194] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1450.814180][ T4194] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1450.814192][ T4194] ? __se_sys_rt_sigprocmask+0x1e0/0x320 [ 1450.814211][ T4194] ? do_user_addr_fault+0xc7c/0x1360 [ 1450.814228][ T4194] do_syscall_64+0xe2/0xf80 [ 1450.814241][ T4194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1450.814253][ T4194] ? trace_irq_disable+0x37/0x100 [ 1450.814269][ T4194] ? clear_bhb_loop+0x60/0xb0 [ 1450.814284][ T4194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1450.814297][ T4194] RIP: 0033:0x7fd6a119acb9 [ 1450.814311][ T4194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1450.814322][ T4194] RSP: 002b:00007fd6a20a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1450.814337][ T4194] RAX: ffffffffffffffda RBX: 00007fd6a1416090 RCX: 00007fd6a119acb9 [ 1450.814347][ T4194] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1450.814356][ T4194] RBP: 00007fd6a1208bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1450.814364][ T4194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1450.814373][ T4194] R13: 00007fd6a1416128 R14: 00007fd6a1416090 R15: 00007fff0b44ba58 [ 1450.814388][ T4194] [ 1451.475860][ T4194] macvtap1: entered promiscuous mode [ 1451.481312][ T4194] macvtap1: entered allmulticast mode [ 1451.488014][ T4194] bridge0: entered allmulticast mode [ 1451.497649][ T4194] bridge0: port 2(macvtap1) entered blocking state [ 1451.505436][ T4194] bridge0: port 2(macvtap1) entered disabled state [ 1451.514945][ T4194] bridge0: left allmulticast mode [ 1451.520904][ T4194] bridge0: left promiscuous mode [ 1451.525972][ T4194] bond0: left promiscuous mode [ 1451.530746][ T4194] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:591 [ 1451.540079][ T4194] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 4194, name: syz.0.8158 [ 1451.549239][ T4194] preempt_count: 201, expected: 0 [ 1451.554289][ T4194] RCU nest depth: 0, expected: 0 [ 1451.559223][ T4194] INFO: lockdep is turned off. [ 1451.564018][ T4194] Preemption disabled at: [ 1451.564030][ T4194] [] dev_uc_del+0x56/0x110 [ 1451.574396][ T4194] CPU: 0 UID: 0 PID: 4194 Comm: syz.0.8158 Tainted: G W syzkaller #0 PREEMPT(full) [ 1451.574457][ T4194] Tainted: [W]=WARN [ 1451.574464][ T4194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1451.574474][ T4194] Call Trace: [ 1451.574481][ T4194] [ 1451.574488][ T4194] dump_stack_lvl+0xe8/0x150 [ 1451.574512][ T4194] __might_resched+0x378/0x4d0 [ 1451.574531][ T4194] ? dev_uc_del+0x56/0x110 [ 1451.574549][ T4194] __mutex_lock+0x119/0x1300 [ 1451.574566][ T4194] ? __pfx_vprintk_emit+0x10/0x10 [ 1451.574589][ T4194] ? dev_set_promiscuity+0x10e/0x260 [ 1451.574607][ T4194] ? _printk+0xdd/0x130 [ 1451.574628][ T4194] ? __pfx___mutex_lock+0x10/0x10 [ 1451.574648][ T4194] ? do_raw_spin_lock+0x12b/0x2f0 [ 1451.574670][ T4194] ? __netdev_printk+0x36f/0x480 [ 1451.574693][ T4194] dev_set_promiscuity+0x10e/0x260 [ 1451.574710][ T4194] ? netdev_info+0x11e/0x180 [ 1451.574734][ T4194] bond_change_rx_flags+0x21a/0x690 [ 1451.574753][ T4194] ? __pfx_bond_change_rx_flags+0x10/0x10 [ 1451.574771][ T4194] ? bond_set_rx_mode+0x409/0x4b0 [ 1451.574786][ T4194] ? __pfx_bond_change_rx_flags+0x10/0x10 [ 1451.574800][ T4194] __dev_set_promiscuity+0x515/0x710 [ 1451.574815][ T4194] ? lock_release+0x4b/0x3a0 [ 1451.574829][ T4194] netif_set_promiscuity+0x50/0xe0 [ 1451.574847][ T4194] dev_set_promiscuity+0x126/0x260 [ 1451.574865][ T4194] br_manage_promisc+0x4db/0x560 [ 1451.574885][ T4194] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 1451.574905][ T4194] __dev_set_promiscuity+0x515/0x710 [ 1451.574925][ T4194] __dev_set_rx_mode+0x17c/0x260 [ 1451.574944][ T4194] dev_uc_del+0xc0/0x110 [ 1451.574962][ T4194] macvlan_stop+0x259/0x3e0 [ 1451.574980][ T4194] ? __pfx_macvlan_stop+0x10/0x10 [ 1451.575000][ T4194] __dev_close_many+0x368/0x6d0 [ 1451.575025][ T4194] ? __pfx___dev_close_many+0x10/0x10 [ 1451.575050][ T4194] netif_close_many+0x225/0x420 [ 1451.575074][ T4194] ? __pfx_netif_close_many+0x10/0x10 [ 1451.575105][ T4194] unregister_netdevice_many_notify+0xb47/0x2370 [ 1451.575128][ T4194] ? __pfx___netdev_upper_dev_unlink+0x10/0x10 [ 1451.575148][ T4194] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1451.575169][ T4194] ? netdev_upper_dev_unlink+0x99/0xe0 [ 1451.575185][ T4194] ? __pfx_netdev_upper_dev_unlink+0x10/0x10 [ 1451.575201][ T4194] ? macvlan_dellink+0x3e2/0x470 [ 1451.575222][ T4194] rtnl_newlink_create+0x84b/0xb70 [ 1451.575241][ T4194] ? __pfx___nla_validate_parse+0x10/0x10 [ 1451.575261][ T4194] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1451.575276][ T4194] ? __pfx___mutex_lock+0x10/0x10 [ 1451.575293][ T4194] ? ns_capable+0x89/0xe0 [ 1451.575310][ T4194] rtnl_newlink+0x1666/0x1be0 [ 1451.575331][ T4194] ? __pfx_rtnl_newlink+0x10/0x10 [ 1451.575344][ T4194] ? do_syscall_64+0xe2/0xf80 [ 1451.575357][ T4194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1451.575386][ T4194] ? kasan_quarantine_put+0xbb/0x1f0 [ 1451.575402][ T4194] ? lockdep_hardirqs_on+0x7a/0x110 [ 1451.575430][ T4194] ? kmem_cache_free+0x195/0x610 [ 1451.575445][ T4194] ? nlmon_xmit+0xb0/0x100 [ 1451.575464][ T4194] ? __lock_acquire+0x6b5/0x2cf0 [ 1451.575482][ T4194] ? __local_bh_enable_ip+0xd0/0x130 [ 1451.575497][ T4194] ? lockdep_hardirqs_on+0x7a/0x110 [ 1451.575510][ T4194] ? __dev_queue_xmit+0x2a7/0x32b0 [ 1451.575525][ T4194] ? __local_bh_enable_ip+0xd0/0x130 [ 1451.575538][ T4194] ? __dev_queue_xmit+0x2a7/0x32b0 [ 1451.575556][ T4194] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1451.575582][ T4194] ? __pfx_rtnl_newlink+0x10/0x10 [ 1451.575595][ T4194] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1451.575617][ T4194] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1451.575638][ T4194] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1451.575660][ T4194] ? ref_tracker_free+0x693/0x840 [ 1451.575680][ T4194] ? __copy_skb_header+0xa3/0x4a0 [ 1451.575698][ T4194] ? __pfx_ref_tracker_free+0x10/0x10 [ 1451.575723][ T4194] netlink_rcv_skb+0x232/0x4b0 [ 1451.575742][ T4194] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1451.575764][ T4194] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1451.575786][ T4194] ? netlink_deliver_tap+0x2e/0x1b0 [ 1451.575808][ T4194] netlink_unicast+0x80f/0x9b0 [ 1451.575829][ T4194] ? __pfx_netlink_unicast+0x10/0x10 [ 1451.575846][ T4194] ? netlink_sendmsg+0x650/0xb40 [ 1451.575864][ T4194] ? skb_put+0x11b/0x210 [ 1451.575879][ T4194] netlink_sendmsg+0x813/0xb40 [ 1451.575902][ T4194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1451.575922][ T4194] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1451.575944][ T4194] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1451.575959][ T4194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1451.575979][ T4194] __sock_sendmsg+0x21c/0x270 [ 1451.576000][ T4194] ____sys_sendmsg+0x4d7/0x810 [ 1451.576017][ T4194] ? __might_fault+0xaf/0x130 [ 1451.576043][ T4194] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1451.576064][ T4194] ? import_iovec+0x73/0xa0 [ 1451.576083][ T4194] ___sys_sendmsg+0x2a5/0x360 [ 1451.576099][ T4194] ? __lock_acquire+0x6b5/0x2cf0 [ 1451.576118][ T4194] ? __pfx____sys_sendmsg+0x10/0x10 [ 1451.576150][ T4194] ? __fget_files+0x2a/0x420 [ 1451.576170][ T4194] ? __fget_files+0x3a0/0x420 [ 1451.576194][ T4194] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1451.576213][ T4194] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1451.576229][ T4194] ? __se_sys_rt_sigprocmask+0x1e0/0x320 [ 1451.576253][ T4194] ? do_user_addr_fault+0xc7c/0x1360 [ 1451.576276][ T4194] do_syscall_64+0xe2/0xf80 [ 1451.576292][ T4194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1451.576309][ T4194] ? trace_irq_disable+0x37/0x100 [ 1451.576329][ T4194] ? clear_bhb_loop+0x60/0xb0 [ 1451.576347][ T4194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1451.576364][ T4194] RIP: 0033:0x7fd6a119acb9 [ 1451.576380][ T4194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1451.576395][ T4194] RSP: 002b:00007fd6a20a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1451.576421][ T4194] RAX: ffffffffffffffda RBX: 00007fd6a1416090 RCX: 00007fd6a119acb9 [ 1451.576435][ T4194] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1451.576445][ T4194] RBP: 00007fd6a1208bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1451.576456][ T4194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1451.576467][ T4194] R13: 00007fd6a1416128 R14: 00007fd6a1416090 R15: 00007fff0b44ba58 [ 1451.576488][ T4194] [ 1452.190439][ T4193] bridge0: entered promiscuous mode [ 1452.195732][ T4193] bond0: entered promiscuous mode [ 1452.201342][ T4193] macvtap1: entered promiscuous mode [ 1452.206987][ T4193] macvtap1: entered allmulticast mode [ 1452.212511][ T4193] bridge0: entered allmulticast mode [ 1452.220068][ T4193] bridge0: port 2(macvtap1) entered blocking state [ 1452.227506][ T4193] bridge0: port 2(macvtap1) entered disabled state [ 1452.242551][ T4193] bridge0: left allmulticast mode [ 1452.249660][ T4193] bridge0: left promiscuous mode [ 1452.254884][ T4193] bond0: left promiscuous mode [ 1453.234728][ T4133] net_ratelimit: 2 callbacks suppressed [ 1453.234745][ T4133] Set syz1 is full, maxelem 65536 reached