last executing test programs: 39.983867397s ago: executing program 3 (id=21221): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000008c0)={0xa, 0x4e22, 0xfffffffc, @loopback, 0x6}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000340)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0x3c, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000009}, 0x1c) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000181401000200000003000000080001"], 0x20}, 0x1, 0x0, 0x0, 0x9}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003340)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0xa, @remote, 0x1800000}, 0x1c, 0x0, 0x0, 0x0, 0x1f0}}], 0x1, 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000040)={r4, 0x2, 0x20000000, 0x4}, &(0x7f0000000080)=0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x20a, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f", 0x7}, {0x0}], 0x2}, 0x0) close(0xffffffffffffffff) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000100)=ANY=[], 0x22) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000b0601020000000000000000020000000900020073797a300007000000300007800c00000000000108002000e98f00148014000240fc0200000000000000000000000000010600044050000000"], 0x58}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000540)={r4, 0x9e, "c3531036f7e193fa857e1edd57f109f042f9d27e4890955aa47f61165bbe07fb0a84ca4595e2dd1dbc1374a1abb1d0391effdd43f88d56f48fbf6a5b85df57d7f61a1fc1d0abd678817def6959c1811173718f5529aadc4f51acff2ed022971eb89cfcb58e8eeb602ebf8170ad9917c04aeaf64bd72fdee4de84db5edf90480eaa5f4b84bebc69fdaf5ce113404cc79c1ad6b6cf54fb7a61a945122f0092"}, &(0x7f0000000600)=0xa6) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000006c0)={r7, 0x5f, "ce0b103c0603cbdc3ab5eeefdecc07eebe79b68d65a279399a254ec2c5177456c1bbe48b05734ea86eae5db9a74691a92d3836dca070fa153a932e06f71fd144c4959f73461ca1ffb26b2ea280dc41bf213ead24d437e93d91b3bbef5b048e"}, &(0x7f0000000740)=0x67) recvmmsg(r0, &(0x7f0000005640), 0x0, 0x40002000, 0x0) sendmmsg$inet6(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="12dcad8f6ce0f05a3a7e69e0d1ff7604323e29a4590fd04fb8dfe8fc8cda1674d647a15f1d52c8c7532260476cd17090dc698fe45d500adc6ed031bd5f11dd9c897fdaad29", 0x45}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000680)="b3", 0x1}], 0x1}}], 0x2, 0x4000001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7, 0x6}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0xff}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 39.20861905s ago: executing program 3 (id=21223): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$inet(0x2, 0x3, 0x1) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4) sendmsg$inet(r1, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008024) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbffffa, 0x0, 0x0, 0x0, 0x40}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x0, 0x0) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000340), 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r3, 0x58, &(0x7f0000000280)}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x800, 0x0, 0x0, 0x9, 0xde}, 0x20) socket$inet(0x2, 0xa, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000040)={r8, 0x8008}, 0xc) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000380)={0x3, 0x3, 0x2, 0x9}) r9 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x3e68, @loopback, 0x1}, 0x1c) setsockopt$inet6_int(r9, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x32600) sendmmsg(r9, &(0x7f0000003b80)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @loopback, 0xc21}, 0x80, 0x0}, 0x5b4}], 0x1, 0x20000850) setsockopt$inet6_int(r6, 0x29, 0xd0, &(0x7f00000000c0), 0x4) 38.796011879s ago: executing program 3 (id=21226): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000020000000000000009a88b9b3000000001abafff0010000000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x18, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000180000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r6, 0x215eb000) socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010003b15000000000000000000000000531af7c9de98e3010faf5f35e1d439253df95f59c66c", @ANYRES32=0x0, @ANYBLOB="0304000012410100140012800a000100767863616e0000000400028008001c00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 34.807863599s ago: executing program 3 (id=21235): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="000086dd0203050009000a004000683739ed002889fffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x80c4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x4000000) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001900)=@newsa={0x140, 0x10, 0x1, 0x70bd27, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private2, 0x0, 0xecdf, 0x0, 0x3}, {@in=@broadcast, 0x0, 0x32}, @in=@rand_addr=0x640100fe, {0x0, 0x0, 0x1, 0x0, 0x40000000000000, 0xfffffffffffffffc}, {0x0, 0x1, 0x80000000, 0x2}, {0x10, 0x20000, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x73, 0x4c}, [@algo_crypt={0x4d, 0x2, {{'cbc(serpent)\x00'}, 0x28, "70f4946ac2"}}]}, 0x140}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xff8c}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8044}, 0x4040050) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000012c0)={'syztnl2\x00', &(0x7f0000001240)={'ip6tnl0\x00', 0x0, 0x29, 0x7, 0xf0, 0x81, 0x65, @mcast2, @mcast2, 0x8, 0x700, 0x80000, 0x8}}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x2, 0x4, 0x8, 0xd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$tun(r5, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x8, 0x40, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1, {[@ra={0x94, 0x4}]}}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x10, 0x7, 0x0, 0x8, {[@md5sig={0x13, 0x12, "570ae7f0b905a456f064db0300ffe61e"}]}}}}}, 0x4e) 33.762741562s ago: executing program 3 (id=21238): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1}, 0x48) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000ffffffff000000002000000073110b000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001780)={r0, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x23}]}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='blkio.bfq.idle_time\x00', 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000180)={0x1, 'veth0_to_batadv\x00', {}, 0xc}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010004a08184edb8bd938bc692bc139b1cce70100a54d00000000000b07000000000a"], 0x80}}, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x3b, 0x301, 0x2, 0x25dfdbf8, {0x5}}, 0x14}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="581800004400010029bd7000040000000100000004004880401801"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x110}, 0x1, 0x0, 0x0, 0x80}, 0x48090) readv(r3, &(0x7f0000000740)=[{&(0x7f0000001640)=""/244, 0xf4}, {&(0x7f0000000680)=""/138, 0x8a}], 0x2) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000017c0)=r1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f00000000c0)={'virt_wifi0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="dbaa00fe5000000071101d000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0xa6, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x23, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000540)={0x0, 0x40, 0x10}, &(0x7f0000000580)=0xc) 33.027722853s ago: executing program 3 (id=21241): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x800000e}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000600)={r4, r4, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r5, 0x800448d3, &(0x7f00000001c0)={@any, 0xff, 0x5, 0x3, 0x800, 0x5, "8f1dc444b2a813bcfd8e57d84dc7115eec5fbeda733e52756349fd8d2c4fda878f0e54599180e4543cba2ef65d539ad3cd097ab0f432e66f1466ba52b445f33927335186bbab00507d36e8b17e8b3af68ca2e0d945c90c64f86ad7be6544128410589a95916675cc8006a544210f380098271a4f83f018722836306112e8b25b"}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001011404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0xffffffff}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x702, 0x36, 0x0, &(0x7f0000000380)="e460334470b8d480eb20c15286dda4fba8285e2e31ca72823a29dad4781041a996430bbe5ecac76a351df831cdb98842af6450b2abf5", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x811) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz0\x00', 0x1ff) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4c014}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x20, 0x0, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 17.660548231s ago: executing program 32 (id=21241): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x800000e}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000600)={r4, r4, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r5, 0x800448d3, &(0x7f00000001c0)={@any, 0xff, 0x5, 0x3, 0x800, 0x5, "8f1dc444b2a813bcfd8e57d84dc7115eec5fbeda733e52756349fd8d2c4fda878f0e54599180e4543cba2ef65d539ad3cd097ab0f432e66f1466ba52b445f33927335186bbab00507d36e8b17e8b3af68ca2e0d945c90c64f86ad7be6544128410589a95916675cc8006a544210f380098271a4f83f018722836306112e8b25b"}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001011404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0xffffffff}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x702, 0x36, 0x0, &(0x7f0000000380)="e460334470b8d480eb20c15286dda4fba8285e2e31ca72823a29dad4781041a996430bbe5ecac76a351df831cdb98842af6450b2abf5", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x811) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz0\x00', 0x1ff) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4c014}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x20, 0x0, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 11.773074063s ago: executing program 4 (id=21295): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x401}, 0x20}}, 0x0) close(r3) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = socket$unix(0x1, 0x2, 0x0) connect$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r7, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) close(r6) r8 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0x12, 0x0, 0x1000, 0x0, 0x400000, 0x7ff, 0x40004, 0xc0000000, 0x402, 0x9, 0x4, 0x5, 0x3, 0x4006, 0x84, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x5, 0x424f, 0x3}}) r9 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x7a, &(0x7f0000000280)={@random="856b934629fa", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x14, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100, 0x2, 0x892f}, {}, {}, {0xa888}}}}}}}, 0x0) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x17, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x6c}}, 0x80) sendto$packet(r9, &(0x7f00000002c0)="0503e5fdd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x8100, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) 11.287334171s ago: executing program 4 (id=21297): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x8, 0xade, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}}}}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="0a012a20", @ANYRES16=0x0, @ANYBLOB="e60f000901008b00005d33cdc96be58bd5b3274e000f", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0c001a804800030001"], 0x2c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fcdbdf253d0000000e0001006e65746465260cca814f8f3e630002006e657464647673696d3000021c008200736f758f63655f6d61635f69735f6d756c74696361737400"], 0x50}, 0x1, 0x0, 0x0, 0x20008804}, 0x4050) r4 = socket(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x40, 0x6f, 0x0, 0x1}, {0x50, 0x1, 0x2}, {0x6, 0x80, 0xfd, 0xfffffffd}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, 0x0, 0x0) write(r4, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = socket$rxrpc(0x21, 0x2, 0xa) socket(0x22, 0x800, 0x340b) setsockopt$RXRPC_SECURITY_KEY(r8, 0x110, 0x1, &(0x7f0000000000)='.[]\x00', 0x4) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) pread64(r10, &(0x7f00000003c0)=""/4093, 0xffd, 0x202df) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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", @ANYRES64=r4, @ANYRESOCT=r1, @ANYRESHEX=r4, @ANYRES8], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_genetlink_get_family_id$fou(&(0x7f0000001a00), r10) recvmsg(r4, &(0x7f0000000a80)={&(0x7f0000000040)=@sco, 0x80, &(0x7f0000000940)=[{&(0x7f0000000140)=""/193, 0xc1}, {&(0x7f0000000280)=""/221, 0xdd}, {&(0x7f0000000380)=""/80, 0x50}, {&(0x7f0000000480)=""/82, 0x52}, {&(0x7f0000000500)=""/192, 0xc0}, {&(0x7f00000005c0)=""/109, 0x6d}, {&(0x7f00000006c0)=""/130, 0x82}, {&(0x7f0000000780)=""/135, 0x87}, {&(0x7f0000000840)=""/215, 0xd7}], 0x9, &(0x7f0000000a00)=""/76, 0x4c}, 0x40) 10.226460028s ago: executing program 4 (id=21300): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="28000000040801010000008a92fd637c9a1ea5cfc72e56b28f7ad100000000000a0000"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20000800) r0 = socket(0x10, 0x803, 0x0) r1 = syz_genetlink_get_family_id$ethtool(0x0, r0) r2 = socket(0x2, 0x80805, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r1], 0x31c}, 0x1, 0x0, 0x0, 0x4050}, 0x4800) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r2) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000780)={0x168, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2877}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x95}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffff801}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf37}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x11, 0x3, "b4d3ebe789fec81a7421304679"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x80}, 0x4000800) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f00000002c0)={0x1, [0x0]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r5) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x4008000) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r9) sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)={0x30, r10, 0x303, 0x0, 0x0, {0x13}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x40010) sendmsg$netlink(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff090045000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 9.95628745s ago: executing program 4 (id=21302): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) unshare(0x2a060400) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000002010000089"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, &(0x7f0000000980)=""/99, &(0x7f00000025c0), &(0x7f0000000600), 0x82, r3, 0x0, 0x7}, 0x38) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x44}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010300000e000000000008000000"], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)={0x14, r1, 0x401}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x14, r1, 0x301}, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r4, &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r6, &(0x7f0000000180)={0xa, 0x4f23, 0x200000e, @loopback={0xe0}, 0x40000008}, 0x1c) setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}], 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@cgroup, r5, 0x2e, 0x0, r5, @void, @value=0x0}, 0x20) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="14f40000", @ANYRES16=r1, @ANYBLOB="01030000000000000000080000"], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x30}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0xd0, r8, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0xa0, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x74, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x1}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) 9.378710189s ago: executing program 4 (id=21305): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) unshare(0x10000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x11, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newqdisc={0x6c, 0x28, 0x1, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x800, 0x3, 0x8, 0x4, 0x9, 0xa902, 0x800, 0x400, 0xfffffffc, 0x8, 0x1c, 0x1c, 0xd, 0x2, 0x9, 0xffff}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4009c}, 0x40000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r7) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c000000a4fa4cb92262e07256eadfbadf8c74f114df877549a150e8afe78b845970f1f221067559b01be897da7edaa37983d3d79c108b6a8814f3476756b690d6b6aa741f10e9cb29105cf526bf15d74d1b3653d30200000000000000028eb69919a1e07513fea9b6c1e0ed", @ANYRES16=r8, @ANYBLOB="31072bbd700000000000380000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030002000000"], 0x3c}, 0x1, 0x2}, 0x20000014) 8.703653051s ago: executing program 2 (id=21307): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f00000007c0)="6e660f76", 0x4, 0x20000000, &(0x7f0000000880)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a010400000000000000000a0000020900020073797a310000000008000a40fffffffc0900010073797a310000000008000540000000242c00128014000180090001006c6173740000000004000280140001800c000100636f756e74657200040002800800034000000130140000001100010000000000000000000100000abba5b8ae6196808a33411a998d9366b7ef9d021a675a987821a4637511f3f2f695c2929202e1469788c4748769ddc60fdfd5a940f71c824b32f34c7c9afa14446c26912de0edfed4036aa551c1273b3e0fd0be7471260c5fe6e007b97cc1f8679862455e958aa08038af477007a510aa7b11ebef3ba501c8c96681299462775a376c753a04"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000001100), &(0x7f0000001180)=0x8) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000040)=0xffffffff, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x2}]}, 0x1c}}, 0x4000880) bind$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x1}, 0x14) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000640)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r3, 0x0) bind$nfc_llcp(r0, &(0x7f0000000880)={0x27, r2, 0x0, 0x6, 0x0, 0x2, "d92984bd1ca44c226af5160e961711a077609475b78411e879918d20000000f2170e65e3f50327080e000000000000001900", 0x3c}, 0x60) close(0x4) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0, 0x0, 0x0, 0x0, 0xfffffff9}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.547539795s ago: executing program 0 (id=21311): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00', @ANYRES32, @ANYBLOB="1400018008000100000001000500030003"], 0x2c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r2, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x2fcfd, 0x25dfdbfb, {0x2, 0x0, 0x1}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x55}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006a0005062cbd7000fcdbdf25020000000000000008000500", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'erspan0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x80, 0x40, 0x400, 0x1, {{0x7, 0x4, 0x3, 0x1, 0x1c, 0x67, 0x0, 0x4, 0x2f, 0x0, @multicast2, @local, {[@generic={0x86, 0x2}, @rr={0x7, 0x3, 0x1e}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'gre0\x00'}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x0) 7.541004998s ago: executing program 2 (id=21312): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x60000016}) epoll_pwait(r3, &(0x7f0000000100)=[{}], 0x1, 0xfffffffe, 0x0, 0x0) close(r1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f00000022c0)=""/4096, 0x4000}], 0x1}, 0xfff}, {{0x0, 0x0, 0x0}, 0x100}], 0x2, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0xfe86}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xfc96}, {&(0x7f00000014c0)="8fa68a274cab49b9c806172798e6a829701bb4eefee6919e0a30fa83a50170b6a3b499361f95ab6ff05f9001332b3a463b64282a924b0dcf6499c8c9b23d7290ab896ed6e2c7280dcda0336864e06d9570ea2cc78330859fa73080f5ddd3fd2b943287b312357816e9cfaa9e8941dd981f837506cabc6e016e507076819ff37d790c0b868166925649c9a74f4afc322ac971832fc3f12ba4dd3931c773134441bd46d9b10095eaabcfb846ac5fa9ea76f3547884091f073880656438f4406cf2051edb37139066dcaed45a544f5f92cccb1db0e2e503de3d4216d961dea1cbd9119a3f49b8bcdfe7078a7706296712eab5bd91b189f0140892b56c46912cc16dbe9fb469502eb67f36e8531dbfbed70615a836d32b5dabcf933201c97b29209e071433edb1b92ba47b514232654a36067c9b241737eb902ede1e18f99757339d2858bbe9c48484ec608e5fae534c4580d22fcd6ad28a786e0f5e675bc264ca03cf081038cb872e039100f94d25a7b5b9f2f18815e948aa65513c63a61e68c6a4ef4888980b54e3b7332112ee424e65172b2076528cd11cf63d7f4ff88c9eabf2c388bcb02beaa7e9c33cbe26149703fd3d511283739fa9638b1d6290a53b679227ee54d0fb232befdc92e59396c5bb818926e8a30a38a0aa358e1c818dbc27646fb4dc43168540cf724358d07124937cb3baa5365970e14240d727a8111d250202b39e8e3d6ff5e250eb09fdd83b8a129015567ae0f71a6b9166cd3718e3a83e711271f2ffd2d968e1153a38a8c5995e5c46fb8f22613690852bbea407b417eff9fd86e685025cbad82174164c3529407c4a27af5c6fdd911a4a87b7365655d5275c5719151b4440752785ff416a8e3a1f83f70e1f5d2538348b839f4e965e586e8b28a8aa94b79bc4e23d97d159af010918721be419234850fbeac52bb5de10a199f6591ab4deea9670e8b3d9f9341cddef4f3fe1b08a4f1943329cfa12c3972fc50525b8ebb5923235bbecd182d486169cf51e8c69259a404c0867328943358e95ad690a9c8eea73ddde677ebfe6f0d5f2e3a03541291e09a30bcce4b66550c28c6ba6cc431bb0fa87848652fb9319577a38a8ad45a87647b523fe3e452d90306c4c690b47d3c840ebbb1d96abb0735b21f557f5de101b7fbb7618d9739fabf89b8fb34c02493d1bfc31e80b1a9fcdac8aaf0fd69a0aee6f456705420ea3e7df30b478dd12ee137a6d6747750e5d6a7e5d308276c0ebd77377f000296108954f5371a9c84a01a18a76bee8ea849ddaf492a35f943ac395b9dddbd5ee05f6d75ac40237a0690584d7afaa3e117135b1406e03c9e49223ee48feccab18a3fd0325ed281bc70fb41b4f13905744afcbb588b8daee6d635007cf96dbd9549726c4cf9e350072702058bb533a4bb598a06e5505e8393b2793cc6ac2d66a0529b2aa7991a30f8bdd2bec5ac7ca2064e7b3a2a2d510de4675a7a6ce5d1729c2b98dbb08ab4a33cbd83484092d48b9c4fac7b7b6191057a2acf109565c6d49d9be0f1f2838650cdc36ad835fd78be83c6df052659ed1e8242d45891442a54205311da1814b18ed7fcc7c5bd979434040cd2133fd35ab946ff87e807a48a4802a1e4cce7cef4f2f555029cdecadaf99c5c3bf65db4be3940bfedb87cc491ac59d027496d87a792961f1f59cb72df3280b1845722282745fa77dfa1fce5e67e09466475c0e988719e528d39815cdfe0d16a6de1d871cfc4778ed47e8a7d3b2dfeea2083a41b061848324fe15e90c2dac3303992fdc42ba1a1995b87154a618660094a942074c5e02ed1a11293c5276b06439468f99c9d184c0152c44308c64c432277fe367a7fac9c9fb08d9dc8949e8ab9740a357fdc9d69df07375d011947b43072f554d63831af4319664e735c3eb08c0afe5120bd89b4d0654b6266aa4709ea2beb3dfd0449d2c3fde3f1098c9f73d994a741bb9f3c5322743c310fd7881856e5d529f4a9eb7dc43c0be6c36653b2cda92a7f07247450d666ca88863c6880d656eb8006bfe2f96543bf683fe3126e03ccf2120878a4fc46bdf64e11e323637ae0024a3d6fa52729591758c36a5ddeff1d1c5ba3e1bfedad1ff460f05ce276f1f3c2d70f9c6c5927a8fd15e65bc9c648b7dfccde510f5bf46bab8f2c5e21cb129dbf3f4df7a5a831f198f21fee429d73646eab00b1542941108592708fe8f53613d6b7dc1e4999374317b57c1e4a974fedd089c4295682d1a03d770b7639e80d25b0f428dfd3c46be492fc80b5c4913e476845a359dbe4187fd0027bd9fc814ba6a2877b61b637878f2af7ef18a0858fe5c7e75ecf92e735452456089efae8a13d3e6ac9d28c18cb1ca54522066edbf9e67ab4cf158b63c7b4d25146bafa14163cd4d171ad97f3ef93cfabae0557e237bbbe9cb80144b03f6fdb7d357d253235ddbde503829403657fdde516d3974091c40c6b9dd245f730458e1fd594f6b694af0150cbd31b6d0fb3bc04eb5096e704e039eecf4be9e93eb2f841878538ed1c46d015b1a792b599ed9225577460f72e6b4e271e5e6eeed34f69cfd76683e21d87e3ee8ed88df79901f9354823824fa6b67a91e2626161436327fc58879085d87db5dd94e09a0d24c7c381fb8fdc7198d2c2fece49e6496a119023852fca717d2ff2f9ed5e0715ddebd267ed0b8378ad852b03a539e6d03025b4a04f2483bdb79a4bd233ce3b6bd30d736ad0784b978861badc236e7106d23f26eac50e93d8ab012dc7c5d85d4f944aaa27378efc99572f932344cddc488ffa9210dc6b8f0cc29d07110362485eaa5b4b196a49c7080633c1befe802207ed0a172fa0b61fea6305f04d7b755a6e5e162aa8047f80647ad0bae8143226ce3aa8de3b0c0fc4e7cd6baab274fba47abf95ae88584778325250063855a4b9f0c966efa43dc0196d3dec619c490181c259b341b3fd370bab0b66af3cb1e9365cf6b62e44d939d36ffcc6badb924f44e86337360efbf4e3f9bd716adbc3f0ba6055ec9790504c9f3865f47e422b1c6ba16c07d0df618cc572b36ec8e519db90a499424a7d689e6fbcc9be1abd843512ec16540c6c7c6d6e2cf50ab2014e4208c2abb0ddfd2ef9dece79389f21d7a9985903f7f01b0394d268349fa41a487bacfe8deba2ffca815ad0b1c6ffa5af2eba6d9436ad298c4e11b68451c7ff001c02ddd3ceb153a865327845349e8b817aa8ed24924f49260f8209d0ddcacf5306d9222320776162fe8396914fa22c85bc261661fa547c3063e20ca37c0862c3b9abd3da9b02e3f58d89be00003509bae9b82f60975c0687c500bb213a580f6e9f08b207d7c31748e3fda05a0cc76b1fdd563610a2bb09a57020d85026a57a178c38839b5b88cd8434d1f0308d872c7356a6445de801ff14c133bda3b42b9ca099fb3ee0d5c7a835f56ed30aa75d47cd97c329b682879290faee167334500d2fe596564f3e4064f41cf3469aaae846f1e84f3d8a7f42d98d0b6b67913c376d6bbde3027aa41b753ace165f88379981685f918ada5043800b5e0a0865dcda94df85fefa9348d6ec4e1ffbd940d023fbbd3b77d5db572981dbe40cbae9f010c1ea02718b1c4b7d0447c9d83d1afea58097a0467d6cdd47aef05f97dab63462f6ea61f4b611040b30e7cf60a499aa9d0bc50c08463f25a47d2dbc958fe1d1cf2399dcf1952987b6fcbc97bf73b12177c374c8fd56c8228fc796c958687104f4eb9d46ab80eeeeedb7096a67ee440ae92a65cbf6f81939e3d1050c67245036b5dcc13d577fbb4d9c3fbf2e2e61aa154074ae225c54e23289c4ef41a07a49a9d40f3103f4c9dfd4d750cc646adadd2e1fe24c74ce099d753d4c59d806a0b7f576ac37ac58a51a120f93162c43d16c1f7e5289c75f5f0a5b838d020040c9ce512ca35d08f42acd24cdbc2e6b1ac3c6809a5ed9e272155e9fa55349bc3ce0e3f2d1624dc60e2396b954587bbab275f38911e86b826b85730c6670a92a221cdcbf18ee0c44aec4591fcd12204b3049a1b5da1215a4cf88ecbe2d877ef975f4f661999d17d7d9ec14e0895ce25034dac4705d50ae42ca162778d0dcfc4e9180517be0daca5deb10773f93e2c61a5fe9b823218a97c35d0d7b436b2e1afb670b5a4c6dacd401afd1832c1dd96e8eba7734954070c6796cc80707441404cfe95fabf214bf03a6e4643ca559c2b8dcf1fa871114f3dc973a056c9aee7cd0ed4cbaf18298377e750869551632c1713bd8372e3f11fa02edf0a68d2c01245459d9e78597ac1eec75064024c1f3c98260d34b611ba8fa4b2022babd44b76ea70c718df8268dba447038b1539f0499603cf2d79bcc49c35a8cf38892d982d153d72253a22ae68da65e84d6399e81a14ebf89ba446630814d9dcf8914acafc8603a5396167c5aa99814af62c1c39a6ba76ad2c6c51a6d56d89fbda5334e626540ef1b1ecad53247531fcdd661a48d28a6d48bac8ef70c888b00db57edceee94425df5161e1b1a1bec9c897e01867442ed8ba000b5f75832a8ec57ef0737994b95f40eac48f3c8da5db80e965fcdf3f0bbb4439a7123b59987f0fdac96bc7ce09c013562ff7c0cb23a882828e45a51f7e748db90c5eaacfdf3657d11a348f747ddd860387de41be3376a5dabf4296bc05282cb73fcd60c4a4148d9e872ae86e30b22db1ce5452ad9fe3fea029f94a583d301e74eac1818da3f1279c63690db6e7166ddaacd1278716fa3221daaa27c98fd97b88e63208d604505ad8f31bd2b83a19f89480b71198d8a31c89cadd258ce338afe1a26b0db248c1a39fe027716e417e45bb6c9a68cab1cd6c3445e9796ee1003650e97eccdadc9bea540e2c8253652c8f1586ba7e508cd29d53467bad11eef729796dbe83d3fc0bc15762c2f1de34c6380a6725f94600a82d87ccf80948babcadec31ca654671d17de360f20aaf04f4d44951661fe8fe7731174ec3aaf330aebeaed9620f694859785a36c5f787ce35e4425ed3387710fa346f04db11255c6985fa4cdbe54d25c942264b3383d60903bd2677611850fe125b", 0xdf3}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000002080)=ANY=[@ANYBLOB="18000000080000000000000080000000731131000000000095"], &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0xa, 0x5, 0x0) listen(r5, 0x1ff) sendmsg$inet_sctp(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="30000000000000008400000001"], 0x30}, 0x4000040) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f0000000140)={0x9, &(0x7f00000000c0)=[{0x8000, 0x6, 0xfd, 0x9}, {0x1000, 0x2, 0xb4, 0x8}, {0x0, 0x1, 0x0, 0x10000}, {0x81, 0x3, 0x30}, {0x1000, 0x82, 0x80, 0x800}, {0x4, 0x0, 0x3, 0x9}, {0x6, 0x33, 0x8, 0x4}, {0xfff9, 0x8, 0xa, 0xb6a9}, {0x328, 0x1, 0x9, 0x8001}]}) 6.979213886s ago: executing program 1 (id=21313): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaa0300bb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r3], 0x68}}, 0x8c1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x40050) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x20000880) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x18, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000008d510000000000000000000079a00000000000007b00e0ff00000000180100002020752500000000002020207b1af8fd00000000bfa100000000000007010000faffffffb702000008000000b70300000280007f720000000000000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdc}, 0x94) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f0000000180), 0x4) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff000000000800000091119a000000000095"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r8, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r8, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0209000902"], 0x10}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000240), 0x3) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$CAN_RAW_LOOPBACK(r7, 0x65, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'tunl0\x00', 0x0}) recvmsg(r9, &(0x7f0000002840)={&(0x7f0000000080)=@caif=@util, 0x80, &(0x7f0000002680)=[{&(0x7f0000000100)=""/58, 0x3a}, {&(0x7f0000000140)=""/127, 0x7f}, {&(0x7f00000001c0)=""/113, 0x71}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/253, 0xfd}, {&(0x7f0000002340)=""/236, 0xec}, {&(0x7f0000002440)=""/223, 0xdf}, {&(0x7f0000002540)=""/107, 0x6b}, {&(0x7f00000025c0)=""/178, 0xb2}], 0x9, &(0x7f0000002740)=""/247, 0xf7}, 0x40012140) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x2000, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0xb, 0x1}}, {0x6, 0x2, [0x4782]}}]}]}, 0x58}}, 0x4000010) 6.969505101s ago: executing program 0 (id=21314): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1709000000000000000001000000050007000000000008000900fbff000014002000ffffffffffff00000000ffff0000000008000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x620b}, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r1, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r5 = accept4(r1, 0x0, 0x0, 0x0) sendto(r5, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r4, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r6, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900272f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="052a001f0580006558", 0x9}], 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x2000}, 0x800) close(r8) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.863205128s ago: executing program 2 (id=21315): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x36, 0x301, 0x70bd25, 0xfffffffc, {0x3}}, 0x14}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xc508d153}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/cgroup\x00') setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000340)=0x8, 0x4) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, r6, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x480}, 0x4000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000020601080000000000006f14e90a00001400078008001140000000000500150000000000050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x60}}, 0x0) sendmsg$tipc(r2, 0x0, 0x0) r10 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r10, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r10, 0xda90) accept4(r10, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010004000000fcdbdf25030000000800010003"], 0x38}, 0x1, 0x0, 0x0, 0x45bf3c16e68e268e}, 0x3000c000) 5.679289185s ago: executing program 1 (id=21316): socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtaction={0x9c, 0x30, 0x3, 0x70bd2b, 0x25dfdbde, {}, [{0x88, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x5}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x6, 0xfc, 0xee, 0xfffffffd}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x24, r1, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x4010) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r2 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r2, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0x36}}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000480)="6797f04cdb6f2b8ff1c912acb0da67dc3bf442976fc916f5fe40c3a4bb8423c058dd95ffbb65d4a51d4b99564d9d6466da7ab0bd17e9281956c6ba7e10b7932de5be24106e3afc007cdf7620e0c61175af571e506a21f16330", 0x59}], 0x1}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000"], 0x48) r3 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r3, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x44004) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="0000000000000000fdffffffffffffff00000000000000000400000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000fcca0d0bb2da43bf0000000000000000000000000000000000000000000000b86b6e00000002000000000044000500ac1414aa000000000000000000000000000000002b00000000000000ffffffff000000000000000000000000000000000000000007000000a8000000000000000c00"], 0x108}, 0x1, 0x0, 0x0, 0x9}, 0x20000040) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet(r2, &(0x7f0000000580)={0x2, 0x4e23, @remote}, 0x10) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000003c0), 0x3) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) syz_emit_ethernet(0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa86dd6002adf700383a00fc000000000000000000000000000001ff020000000000000000000000000001020390780000000060ed906b00383a00ff01000000000000000000000000000100000000000000000000ffffac1414aa1e520b4c811e"], 0x0) 5.508919105s ago: executing program 0 (id=21317): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007500000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xcc0, 0x0, &(0x7f0000000140)="06ff03076844268cb89e14f00800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x68, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c0002000600060008000000100003000c00170004000100"]}, 0x68}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = socket(0x1d, 0x2, 0x6) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1ac0400ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28712d2d5f2c28"], 0xe0}], 0x1, 0x0, 0x0, 0x40000}, 0x40040) listen(r4, 0xfffffffd) r6 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f00000002c0)={0x1, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x28, 0x0, 0x0, 0x2, 0x20}, 0xe) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e22, @multicast1}}}, &(0x7f0000000180)=0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) r8 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r8, &(0x7f0000000d00)={&(0x7f0000000680)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000700)}, {&(0x7f0000000940)=""/196, 0xc4}, {&(0x7f0000000a40)=""/238, 0xee}, {&(0x7f0000000b40)=""/111, 0x6f}], 0x4, &(0x7f0000000c00)=""/207, 0xcf}, 0x2020) bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r7, 0x3}, 0x18) r9 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x64, 0x12, 0x100, 0x70bd27, 0x25dfdbfd, {0x2c, 0x0, 0x0, 0x4, {0x4e24, 0x4e23, [0x80000001, 0x9, 0x1, 0x5], [0x6, 0x2, 0xe2, 0x1], r7, [0x28, 0x7]}, 0x4, 0x9}, [@INET_DIAG_REQ_BYTECODE={0x16, 0x1, "aee994db7f70d2b9e76e1ca28fe7bcc69b1d"}]}, 0x64}, 0x1, 0x0, 0x0, 0x840}, 0xc048000) bind$can_j1939(r9, &(0x7f0000000000)={0x1d, r10, 0x3}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 5.139466821s ago: executing program 2 (id=21318): r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket$packet(0x11, 0x3, 0x300) bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name={0x1e, 0x2, 0xe6cecfb4f094927d, {{0x41, 0x3}, 0x4}}, 0x10) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x348, 0x100}}]}]}, @IFLA_IFALIASn={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40c1}, 0x8840) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040055}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@private, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, {0x3bc7, 0x7, 0x80000004}, {0x2, 0x0, 0xffffffff}, 0x70bd2d, 0x800000, 0x2, 0x4, 0x0, 0x4c}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a}}, @algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}]}, 0x154}}, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r7, 0x84, 0x1e, &(0x7f0000000000), 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000400)={0xffffffffffffffff, 0x1f, 0x0, "b3ae172ac7329d35596cb67ef5f1dc7edcb721b2adaa7350ce5d98a2583efe87220718a297df56621770b83c63f28c3350bddc9c40e9280fdf244aef0bc329e8b1feb9cb2f3218698c4ffa4335a0c277c1f29f96b7e66a156cdd4387c66628d30baa750b596bf72efadef3ebd3bdb885e46414c22f3b6abc7564a4132af7c5fb3a3d716842e4f062e232796f"}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r8, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="e8000000100001002dbd7000fddbdf257874732874776f6669736829"], 0xe8}, 0x1, 0x0, 0x0, 0x44}, 0x80) 3.410796727s ago: executing program 1 (id=21319): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="300000001a00010000000000000100000a478486ed4203a315656aa51e258c38600000003a2a62c37b00000014002000"], 0x30}], 0x1}, 0x0) ioctl$NILFS_IOCTL_GET_BDESCS(r0, 0xc0186e87, &(0x7f00000003c0)={&(0x7f00000000c0)=[{0x7, 0x2b9, 0x9}], 0x1, 0x28, 0x3, 0x2}) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x20008004) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(r6, 0x0, 0x4000800) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000080)={0x54, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d5}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000004}, 0x4008090) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r1}, 0x8) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000080)=r8, 0x4) sendmsg$nl_netfilter(r7, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x44) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x14000000}, @TCA_FQ_PLIMIT={0x1300, 0x1, 0x5}]}}]}, 0x48}}, 0x0) 3.410305924s ago: executing program 5 (id=21279): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x805, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, r0, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$igmp(0x2, 0x3, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x1, 0xb}, {0xffff, 0xfffd}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x544b}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000380)={@link_local, @random="0100000000c9", @val={@val={0x88a8, 0x1, 0x1, 0x1}, {0x8100, 0x4}}, {@ipv6={0x86dd, @generic={0x8, 0x6, "d82b06", 0x0, 0x81, 0x0, @remote, @mcast2}}}}, 0x0) listen(0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0xfffffffd) connect$inet(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0) r5 = epoll_create(0x7f) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000740)={0x40000004}) write$tun(r2, &(0x7f0000000040)={@void, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x4000, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0x4e22, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0x4, 0x100}}}}}}}}, 0x3a) 3.141706976s ago: executing program 1 (id=21320): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000010401ffff00000000000000010004000500010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="24000000010401040000000000000000050000000500010002"], 0x24}, 0x1, 0x0, 0x0, 0x20000835}, 0x2002889c) write(r0, &(0x7f0000000340)="18000000010003", 0x7) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x8000, 0x8, 0x2, 0x1, {{0x11, 0x4, 0x2, 0x4, 0x44, 0x67, 0x0, 0xf7, 0x4, 0x0, @remote, @empty, {[@lsrr={0x83, 0x7, 0xfd, [@multicast2]}, @ssrr={0x89, 0x27, 0x5e, [@local, @multicast2, @empty, @rand_addr=0x64010101, @broadcast, @private=0xa010100, @remote, @broadcast, @multicast2]}]}}}}}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000200)=0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000a40)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x130, 0x2a8, 0x2a8, 0x208, 0x98, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x3}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0xfffffff8, @ipv6=@private0, 0x4e24}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xff, 'pim6reg\x00', 'ip6erspan0\x00', {}, {}, 0x0, 0x3, 0x10}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x5, 0x9, @dev={0xac, 0x14, 0x14, 0x25}, 0x4e23}}}, {{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0xfffffffc, @empty}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="00042abd7000fedbdf25204549ac"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff) setsockopt$sock_timeval(r5, 0x1, 0x43, &(0x7f0000000240)={0x0, 0x2710}, 0x10) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="40000000200000000000306b0000df2520000000ed20f3429fbe2eb0ef38cb964b2f27cbc0497b95f2a47128240392d9584b67e2d7f95e6edfd16d10249fd2029134cfd5fd9f"], 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x40840) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000100)=0x4) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003e8000000000101", 0x2c}], 0x1, 0x0, 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000003c0)}], 0x1, 0x0, 0x0) 2.933420313s ago: executing program 2 (id=21321): r0 = socket$key(0xf, 0x3, 0x2) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x22020600) r2 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) connect(r2, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01"], 0x17) nanosleep(0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r3, 0x0, 0x33, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r4, 0x0, 0x33, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x20040940, 0x0, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e24, 0xf, @local, 0xfffffffd}, 0x1c) listen(r3, 0x14) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x7, 0x90, 0x0, 0x2, 0x0, 0x70bd2c, 0x25dfdbfe}, 0x10}}, 0x8040) 2.910263385s ago: executing program 0 (id=21322): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x5e21, @empty}, 0x10) close(r2) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000002040)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x1, 0xffffffff}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@llc={0x4, {@llc={0x4, 0x4e, "8819", "af255fd84cf258e3ce43455d657ef8ce84537ba0b3ff389e48ab5394bfbe39759f7ceff23dc3ca80a22a3258"}}}}}, &(0x7f0000000440)={0x0, 0x2, [0x66c, 0xdc5, 0xe81, 0x8ee]}) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="660a00000000000061118a00000000008500000003000000954e2de19ea44a395ff77437bcc9b0a39500d16e8ce23d53d9f94139fdaa67b30358b4a0b4ffd4838aefbca74ec200bd5f11a70e304a1226a369fdd2c6e095c4b3301f029cf524ff6aa7bacbccf5f7112561462af7871e3a823b520064730bac2ea270ba6ae712936cb40a7f5f7efb3c119e025f20ece10226f7f5891f564aa32f1f22e4215c073be79b05ae73a9aa52795804836f010a86d04203e4f40a483481e25d0969ba9135ed01b603f5e830438d136f014e34b042f303a9cff9e50390170c0023cf6f5e552536fe3fbfa47c393a4ba11053cd256eee4d5fc2b3858625ba8d4a6e3a8cbea99f"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f00000003c0)={&(0x7f00000001c0)=""/91, 0x5b, 0x0, &(0x7f0000000240)=""/177, 0xb1}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 2.599736803s ago: executing program 0 (id=21323): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x40881}, 0x0) r1 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="6783bc330059b2b782a15c87d51216876b5358a472cb6a71759db27d3beb72", 0x1f}], 0x1, &(0x7f0000000680)=ANY=[], 0x150}, 0x40040) recvmsg(r1, 0x0, 0x10100) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0xfeff, 0x4, 0x200, 0x2, 0x400, 0x9, 0xffff29a3, 0xffff7ea2, r3}, &(0x7f0000000040)=0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0x0, 0xff], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@helper={{0x48}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3ff, 0xf}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x5, 0x31d}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000e80)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x150, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3a0, 0xffffffff, 0xffffffff, 0x3a0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00', {}, {}, 0x0, 0x8, 0x2, 0x21}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x2, 0x3}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x62, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x228, 0x250, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x1, 0x1000, 0x6, 0x3}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000600), 0x80, 0xffffffffffffffff, 0x0, 0x7}, 0x38) ioctl$OCFS2_IOC_MOVE_EXT(r4, 0x40406f06, &(0x7f0000000140)={0x33, 0x4, 0x7, 0x4}) close(0x3) syz_emit_ethernet(0x6a, &(0x7f0000001240)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x34, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @dest_unreach={0x1, 0x1, 0x0, 0x2, '\x00', {0x5, 0x6, "6f21ef", 0x37ba, 0x2b, 0xff, @dev={0xfe, 0x80, '\x00', 0x32}, @rand_addr=' \x01\x00', [], "00040000"}}}}}}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001380)=@raw={'raw\x00', 0x9, 0x3, 0x3b8, 0x160, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, &(0x7f0000000340), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, [0xffffffff, 0xffffff00, 0xff000000, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffff00, 0xff000000], 'netdevsim0\x00', 'bond_slave_0\x00', {0xff}, {0xff}, 0x2, 0x9, 0x6}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x7, 0x0, 0x6, 'snmp\x00', 'syz1\x00', {0x8}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff, 0xffffffff, 0xffffff00, 0xffffffff], [0x0, 0xffffffff, 0x0, 0xff000000], 'batadv_slave_0\x00', 'veth1_vlan\x00', {0xff}, {0xff}, 0x1d, 0x7f, 0x3, 0xcf74f4a16b0d99ec}, 0x0, 0x160, 0x188, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@srh1={{0x90}, {0x4, 0x10, 0xa4, 0x6, 0x3, @mcast1, @mcast2, @empty, [0xffffff00, 0xffffff00, 0xff000000, 0xffffff00], [0xff, 0xff000000, 0xffffff00, 0xffffffff], [0xffffff00, 0xff, 0xff000000, 0xb9874067249e5b75], 0x2403, 0x180}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_hci(r7, 0x0, 0x3, 0x0, &(0x7f0000000780)) 2.22720888s ago: executing program 4 (id=21324): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{0x0}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x2c}}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r5, 0xfffffffc) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b00"], 0x28}}, 0x0) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bf"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, 0x0, 0x10) 2.189634689s ago: executing program 1 (id=21325): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000006c40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}, {0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 1.837582461s ago: executing program 5 (id=21326): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x74, &(0x7f0000000440)=[@in={0x2, 0x4e20, @private=0xa010102}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e23, 0x400, @mcast1, 0x2d4}, @in6={0xa, 0x4e22, 0xf479, @mcast2, 0xeb}, @in6={0xa, 0x4e23, 0xffffff7d, @loopback, 0xd}]}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000002c0)={r3, 0x694}, &(0x7f0000000300)=0x8) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x1c) openat$cgroup_freezer_state(r0, 0x0, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4b, 0x0, 0x0) pread64(r2, &(0x7f0000001840)=""/4096, 0x1000, 0x8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}]}, &(0x7f0000000640)=0x10) getpeername$inet6(r7, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f"], 0x18) close(r5) pread64(r1, &(0x7f0000000080)=""/46, 0x2e, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 1.71651785s ago: executing program 2 (id=21327): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000540)=""/229, 0xe5}], 0x1}, 0x40010002) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f00000007c0)}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "a06adadb1e8816ec", "de0000006deed7f21d74bc440900", "9884f958", "fc4bd6b33a9b93ca"}, 0x28) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000180)={@local, @multicast1, 0x0}, &(0x7f0000000280)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000440)={'gretap0\x00', r5, 0x80, 0x10, 0x6, 0x3026, {{0x23, 0x4, 0x3, 0x4, 0x8c, 0x66, 0x0, 0xf8, 0x2f, 0x0, @rand_addr=0x64010102, @private=0xa010101, {[@timestamp_prespec={0x44, 0x54, 0x3e, 0x3, 0xe, [{@remote, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x8001}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x2}, {@empty, 0x9}, {@remote, 0x2}, {@broadcast, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x8}, {@empty, 0x14f}, {@loopback, 0x7}, {@rand_addr=0x64010101, 0xa2}]}, @end, @ssrr={0x89, 0x7, 0xe9, [@local]}, @generic={0x9b, 0x9, "c8dc846b793654"}, @noop, @timestamp_prespec={0x44, 0xc, 0xa6, 0x3, 0x9, [{@multicast2, 0x13}]}, @end, @ra={0x94, 0x4}]}}}}}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x52}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r6, 0x20, &(0x7f00000001c0)={&(0x7f0000002700)=""/4116, 0x1014, 0x0, &(0x7f0000000000)=""/89, 0x59}}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000140)="58ddb0", 0x3}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 1.418265249s ago: executing program 1 (id=21328): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000bc0)=@generic={&(0x7f0000000b80)='./file0\x00', 0x0, 0x10}, 0x18) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}, 0x1, 0x0, 0x0, 0x24048044}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1}, 0x4005) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}, [@alu={0x4, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0xa7, 0x9, 0x1, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x7, 0x80, 0x1, 0x7}}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, r5, 0x800, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x4000004) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000280)) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 0 (id=21329): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6, 0x578d2b3c232dfacf}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000400c) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6bbb5ea8"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x53b, 0x0, 0x25dfdbfc, {0x9}, [{0x64, 0x1, [@m_sample={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x0, 0x6, 0xfffffffc, 0x3ff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9c}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000810}, 0x4) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7, {0x0, 0x0, 0x3f}}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x3, &(0x7f0000000180)=""/166, &(0x7f0000000240)=0xa6) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000005001e"], 0x24}}, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="ad4300000000000000000f"], 0x14}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r10, 0x0, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000081}, 0x4080) r12 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r12, 0x0, 0x42, &(0x7f0000000400)={'ipvs\x00'}, &(0x7f0000000440)=0x1e) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) syz_emit_ethernet(0xfa, &(0x7f0000000540)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@llc_tr={0x11, {@snap={0x1, 0xab, "faff", "e7205f", 0x6005, "d69a7891e980d4adbac2481165547e5e7c4e64705a89b4a42f09d7f914f952e2007f15a139f8681e00602fd57916d66967c44759bcb374c36fd7a97a0f627f68b2c04ccf1539caa9881e1700545bc367773a595175a1119c6bdf071806541a8d91743119dec0eb1f8184952efc7a95128b063c7846922dc6b658ea26a6ab14e3535753181884bd2799333a8e2446e22e197538a5104c86126a429d77195b7edc350b5f51bad1fb4fc686234a896b952eacbf3ddae923148ca9cdba5bead1913c854450f4d7d69cdff5906f725ae13cd05dc9e3af8039ba65801313dfa85c853031bd9a"}}}}}, 0x0) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x5, 0x4, 0x7, 0x0, r13, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r14}, &(0x7f0000000180), &(0x7f00000001c0)=r13}, 0x20) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newtaction={0x6c, 0x30, 0x9, 0x70bd29, 0xffffffff, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x8000, 0x0, 0x20000000}, 0x2}}]}, {0x4, 0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x6c}}, 0x0) kernel console output (not intermixed with test programs): 8021q: adding VLAN 0 to HW filter on device bond0 [ 1537.250461][T20067] 8021q: adding VLAN 0 to HW filter on device team0 [ 1538.190734][T20067] 0·: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1538.240933][T18692] wg2 speed is unknown, defaulting to 1000 [ 1538.253392][T18692] syz1: Port: 1 Link ACTIVE [ 1538.284233][ T1861] wg2 speed is unknown, defaulting to 1000 [ 1538.331490][ T67] bond23: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 1538.331795][ T67] bond23: (slave veth0_to_bond): making interface the new active one [ 1538.334423][ T67] bond23: active interface up! [ 1538.370627][T20084] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1538.518088][T20089] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20273'. [ 1539.363096][T20105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20277'. [ 1539.666250][T20118] netlink: 'syz.4.20282': attribute type 1 has an invalid length. [ 1539.743303][T20123] netlink: 28 bytes leftover after parsing attributes in process `syz.4.20282'. [ 1539.782535][T20122] ip_tables: iptables: counters copy to user failed while replacing table [ 1539.798013][T20123] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1540.649761][T20118] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1540.665572][T20118] bond16: (slave geneve0): making interface the new active one [ 1540.680537][T20118] bond16: (slave geneve0): Enslaving as an active interface with an up link [ 1540.748013][ T3358] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 20004 - 0 [ 1540.822268][T20126] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20285'. [ 1540.908801][ T50] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 20004 - 0 [ 1540.909389][ T50] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 20004 - 0 [ 1540.909931][ T50] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 20004 - 0 [ 1540.940471][T20140] xt_ipcomp: unknown flags 1D [ 1541.209505][T20147] netlink: 'syz.4.20292': attribute type 1 has an invalid length. [ 1541.392166][T20147] bond17: entered promiscuous mode [ 1541.411490][T20147] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1541.555425][T20158] netlink: 'syz.0.20295': attribute type 1 has an invalid length. [ 1541.621607][T20147] bond17: (slave bridge17): making interface the new active one [ 1541.621634][T20147] bridge17: entered promiscuous mode [ 1541.635294][T20147] bond17: (slave bridge17): Enslaving as an active interface with an up link [ 1541.773258][T20158] 8021q: adding VLAN 0 to HW filter on device bond28 [ 1541.812304][T20162] bond23: (slave veth0_to_bond): Releasing active interface [ 1541.859513][T20162] bond28: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1542.011686][T20178] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20302'. [ 1542.403711][T20191] syzkaller0: left promiscuous mode [ 1542.403736][T20191] syzkaller0: left allmulticast mode [ 1542.404075][T20191] tipc: Resetting bearer [ 1542.805087][T20207] syzkaller0: entered promiscuous mode [ 1542.805115][T20207] syzkaller0: entered allmulticast mode [ 1542.806568][T20207] tipc: Resetting bearer [ 1543.096233][T20213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20312'. [ 1543.305640][T20213] bond18: entered promiscuous mode [ 1543.305669][T20213] bond18: entered allmulticast mode [ 1543.757040][T20244] syzkaller0: entered promiscuous mode [ 1543.757067][T20244] syzkaller0: entered allmulticast mode [ 1544.112621][T20249] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1544.570080][T20261] netlink: 'syz.1.20325': attribute type 1 has an invalid length. [ 1544.570108][T20261] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.20325'. [ 1544.570127][T20261] netlink: 'syz.1.20325': attribute type 1 has an invalid length. [ 1544.570140][T20261] netlink: 2016 bytes leftover after parsing attributes in process `syz.1.20325'. [ 1544.659658][T20261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20325'. [ 1544.659694][T20261] block nbd5: Unsupported socket: should be TCP or UNIX. [ 1544.956087][T20270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20327'. [ 1545.022548][T20270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20327'. [ 1545.022594][T20270] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20327'. [ 1545.054006][T20270] veth27: entered allmulticast mode [ 1545.067009][T20270] bond15: (slave veth27): Enslaving as an active interface with an up link [ 1545.809011][T20296] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1500) ! [ 1545.812212][T20296] syzkaller0: entered promiscuous mode [ 1545.812238][T20296] syzkaller0: entered allmulticast mode [ 1546.969754][T20323] netlink: 'syz.1.20345': attribute type 1 has an invalid length. [ 1547.050257][T20327] bond16: entered promiscuous mode [ 1547.050286][T20327] bond16: entered allmulticast mode [ 1547.050663][T20327] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1547.109875][T20323] bridge10: entered promiscuous mode [ 1547.110081][T20323] bridge10: entered allmulticast mode [ 1547.112755][T20323] bond16: (slave bridge10): Enslaving as a backup interface with an up link [ 1547.179812][T20323] bridge11: entered promiscuous mode [ 1547.181200][T20323] bridge11: entered allmulticast mode [ 1547.186261][T20323] bond16: (slave bridge11): Enslaving as a backup interface with a down link [ 1547.190317][T18422] page_pool_release_retry() stalled pool shutdown: id 385, 1 inflight 60 sec [ 1547.190527][ T3356] bond16: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1547.270514][T20323] bridge12: entered promiscuous mode [ 1547.270718][T20323] bridge12: entered allmulticast mode [ 1547.274363][T20323] bond16: (slave bridge12): Enslaving as a backup interface with a down link [ 1547.345901][ T50] bond16: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1548.286462][T20363] netlink: 'syz.4.20358': attribute type 1 has an invalid length. [ 1548.666491][T20363] bridge18: entered promiscuous mode [ 1548.666518][T20363] bridge18: entered allmulticast mode [ 1548.695526][T20363] bond19: (slave bridge18): making interface the new active one [ 1548.706505][T20363] bond19: (slave bridge18): Enslaving as an active interface with an up link [ 1549.300846][T20398] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.20363'. [ 1549.332700][T20398] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.20363'. [ 1549.541713][T20405] bridge0: port 3(syz_tun) entered disabled state [ 1549.547161][T20405] tipc: Resetting bearer [ 1549.563077][T20405] tipc: Resetting bearer [ 1549.608489][T20405] bridge0: port 2(veth1_to_bond) entered disabled state [ 1549.881478][T20405] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 1551.021519][T20433] netlink: 'syz.2.20374': attribute type 1 has an invalid length. [ 1551.456965][T20443] netlink: 104 bytes leftover after parsing attributes in process `syz.0.20376'. [ 1551.503079][T20433] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1551.912065][T20464] netlink: 48 bytes leftover after parsing attributes in process `syz.2.20381'. [ 1551.912093][T20464] netlink: 48 bytes leftover after parsing attributes in process `syz.2.20381'. [ 1551.918078][T20441] syzkaller0: entered promiscuous mode [ 1551.918102][T20441] syzkaller0: entered allmulticast mode [ 1557.415675][T20513] tipc: Resetting bearer [ 1559.109956][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1561.307785][T20553] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1563.420750][T20590] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 1563.421786][T20596] syzkaller0: entered promiscuous mode [ 1563.421809][T20596] syzkaller0: entered allmulticast mode [ 1563.549097][T20605] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 1563.572723][T20607] netlink: 'syz.0.20414': attribute type 1 has an invalid length. [ 1563.635881][T20611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20414'. [ 1564.772120][T20607] 8021q: adding VLAN 0 to HW filter on device bond29 [ 1564.860234][T20613] bond29: (slave bridge26): making interface the new active one [ 1564.864699][T20613] bond29: (slave bridge26): Enslaving as an active interface with an up link [ 1565.036903][T20625] syzkaller0: left promiscuous mode [ 1565.036931][T20625] syzkaller0: left allmulticast mode [ 1565.037698][T20625] tipc: Resetting bearer [ 1565.323993][T20636] netlink: 'syz.2.20424': attribute type 1 has an invalid length. [ 1565.766108][T20654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20431'. [ 1565.766139][T20654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20431'. [ 1565.951852][T20656] syzkaller0: entered promiscuous mode [ 1565.951880][T20656] syzkaller0: entered allmulticast mode [ 1566.334171][T20664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20434'. [ 1566.334198][T20664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20434'. [ 1566.381191][T20665] netlink: 24 bytes leftover after parsing attributes in process `syz.3.20435'. [ 1566.387157][T20666] netlink: 'syz.0.20434': attribute type 4 has an invalid length. [ 1566.387181][T20666] netlink: 152 bytes leftover after parsing attributes in process `syz.0.20434'. [ 1566.421507][T20660] 8021q: adding VLAN 0 to HW filter on device bond30 [ 1566.495292][T20664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1566.513713][T20670] netlink: 48 bytes leftover after parsing attributes in process `syz.1.20436'. [ 1566.535645][T20664] bond30: (slave bond0): making interface the new active one [ 1566.536927][T20664] bond30: (slave bond0): Enslaving as an active interface with an up link [ 1566.595541][T20670] netlink: 'syz.1.20436': attribute type 8 has an invalid length. [ 1566.595571][T20670] netlink: 11575 bytes leftover after parsing attributes in process `syz.1.20436'. [ 1566.694483][T20666] .`: renamed from bond0 (while UP) [ 1566.903849][T15579] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1566.996468][T20673] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1567.303856][T20693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20442'. [ 1567.306647][T20693] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1568.237678][T20706] netlink: 'syz.4.20446': attribute type 1 has an invalid length. [ 1568.276420][T20706] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1568.358333][T20706] bond21: (slave bridge19): making interface the new active one [ 1568.360566][T20706] bond21: (slave bridge19): Enslaving as an active interface with an up link [ 1568.906614][T20734] netlink: 'syz.2.20456': attribute type 1 has an invalid length. [ 1568.963512][T20734] bond19: entered promiscuous mode [ 1568.964099][T20734] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1569.006124][T20722] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1569.049863][T20741] syzkaller0: entered promiscuous mode [ 1569.049887][T20741] syzkaller0: entered allmulticast mode [ 1569.262989][T20734] vlan6: entered allmulticast mode [ 1569.263018][T20734] bond19: entered allmulticast mode [ 1569.342257][T20738] bond19: (slave bridge15): making interface the new active one [ 1569.342288][T20738] bridge15: entered promiscuous mode [ 1569.342515][T20738] bridge15: entered allmulticast mode [ 1569.378913][T20738] bond19: (slave bridge15): Enslaving as an active interface with an up link [ 1569.436798][T20745] netlink: 'syz.3.20459': attribute type 1 has an invalid length. [ 1569.666203][T20745] bond8: entered promiscuous mode [ 1569.677524][T20745] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1569.874836][T20746] vlan4: entered allmulticast mode [ 1569.874862][T20746] bond8: entered allmulticast mode [ 1569.938336][T20753] bond8: (slave bridge13): making interface the new active one [ 1569.938362][T20753] bridge13: entered promiscuous mode [ 1569.938674][T20753] bridge13: entered allmulticast mode [ 1569.957052][T20753] bond8: (slave bridge13): Enslaving as an active interface with an up link [ 1570.675205][T20779] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig [ 1570.735441][T20782] __nla_validate_parse: 1 callbacks suppressed [ 1570.735468][T20782] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20471'. [ 1570.815464][T20784] netlink: 'syz.4.20472': attribute type 10 has an invalid length. [ 1570.883930][T20784] tipc: Resetting bearer [ 1570.914825][T20784] tipc: Disabling bearer [ 1571.045949][T20788] veth27: entered allmulticast mode [ 1571.076641][T20788] bond0: (slave veth27): Enslaving as an active interface with an up link [ 1571.192567][T20791] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 1571.240701][T20800] netlink: 60 bytes leftover after parsing attributes in process `syz.4.20475'. [ 1571.825534][T20813] netlink: 28 bytes leftover after parsing attributes in process `syz.3.20482'. [ 1573.102809][T20845] netlink: 'syz.0.20490': attribute type 1 has an invalid length. [ 1573.162839][T20850] netlink: 84 bytes leftover after parsing attributes in process `syz.3.20491'. [ 1573.200261][T20845] 8021q: adding VLAN 0 to HW filter on device bond31 [ 1573.244384][ T3358] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1573.522058][T20860] syzkaller0: entered promiscuous mode [ 1573.522085][T20860] syzkaller0: entered allmulticast mode [ 1573.549417][T20848] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1573.714538][T20865] netlink: 28 bytes leftover after parsing attributes in process `syz.2.20495'. [ 1574.110141][T20873] syzkaller0: entered promiscuous mode [ 1574.110167][T20873] syzkaller0: entered allmulticast mode [ 1574.276500][T20878] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1574.761018][T20896] syzkaller0: entered promiscuous mode [ 1574.761046][T20896] syzkaller0: entered allmulticast mode [ 1574.765035][T20896] tipc: Resetting bearer [ 1574.980111][T20900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1575.175520][T20906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20510'. [ 1575.248532][T20911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20509'. [ 1575.293825][T20906] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20510'. [ 1575.320137][T20910] veth29: entered promiscuous mode [ 1575.329966][T20910] bond17: (slave veth29): Enslaving as an active interface with an up link [ 1575.330096][T20911] bridge_slave_0: left allmulticast mode [ 1575.330618][T20911] bridge0: port 4(bridge_slave_0) entered disabled state [ 1576.011921][T20911] batadv2: left allmulticast mode [ 1576.012182][T20911] bridge0: port 3(batadv2) entered disabled state [ 1576.016473][T20911] veth1_to_bridge: left allmulticast mode [ 1576.016745][T20911] bridge0: port 1(veth1_to_bridge) entered disabled state [ 1576.043539][T20911] bridge_slave_1: left allmulticast mode [ 1576.043795][T20911] bridge0: port 2(bridge_slave_1) entered disabled state [ 1576.300351][T20911] bond0: (slave bridge0): Releasing backup interface [ 1576.536797][T20906] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1576.562710][T20928] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 1577.078984][T20946] netlink: 'syz.3.20523': attribute type 12 has an invalid length. [ 1577.088398][T20946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20523'. [ 1578.086209][T20977] syzkaller0: left promiscuous mode [ 1578.086237][T20977] syzkaller0: left allmulticast mode [ 1578.086711][T20977] tipc: Resetting bearer [ 1578.352906][T20983] syzkaller0: entered promiscuous mode [ 1578.352931][T20983] syzkaller0: entered allmulticast mode [ 1578.354262][T20983] tipc: Resetting bearer [ 1578.603672][T20986] netlink: 550 bytes leftover after parsing attributes in process `syz.2.20533'. [ 1579.095802][T20994] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 1579.385227][T21000] netlink: 20 bytes leftover after parsing attributes in process `syz.1.20538'. [ 1579.675922][T21008] syzkaller0: left promiscuous mode [ 1579.675947][T21008] syzkaller0: left allmulticast mode [ 1579.704655][T21007] syzkaller0: entered promiscuous mode [ 1579.704679][T21007] syzkaller0: entered allmulticast mode [ 1580.156660][T21024] syzkaller0: entered promiscuous mode [ 1580.156685][T21024] syzkaller0: entered allmulticast mode [ 1580.168812][T21024] netlink: 2724 bytes leftover after parsing attributes in process `syz.1.20548'. [ 1580.169065][T21024] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20548'. [ 1580.169085][T21024] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20548'. [ 1580.172802][T21024] TC_ACT_REPEAT abuse ? [ 1581.680483][T21047] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1581.706100][T21047] bond12: (slave macvlan5): Enslaving as an active interface with a down link [ 1582.023230][T21062] netlink: 'syz.2.20558': attribute type 1 has an invalid length. [ 1582.066636][T21066] netlink: 'syz.1.20561': attribute type 49 has an invalid length. [ 1582.096791][T21062] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1582.106672][T21063] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 1582.106699][T21063] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 1582.150478][T21062] netlink: 'syz.2.20558': attribute type 10 has an invalid length. [ 1582.150505][T21062] netlink: 40 bytes leftover after parsing attributes in process `syz.2.20558'. [ 1582.636475][T21077] syzkaller0: entered promiscuous mode [ 1582.636500][T21077] syzkaller0: entered allmulticast mode [ 1582.958158][T21082] syzkaller0: entered promiscuous mode [ 1582.958185][T21082] syzkaller0: entered allmulticast mode [ 1584.338919][T21105] tipc: Enabled bearer , priority 0 [ 1584.343592][T21105] syzkaller0: entered promiscuous mode [ 1584.343616][T21105] syzkaller0: entered allmulticast mode [ 1584.476145][T21106] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 1584.519978][T21105] tipc: Resetting bearer [ 1584.616518][T21104] tipc: Resetting bearer [ 1584.685802][T21104] tipc: Disabling bearer [ 1584.787363][T21112] netlink: 52 bytes leftover after parsing attributes in process `syz.3.20575'. [ 1584.787392][T21112] netlink: 'syz.3.20575': attribute type 1 has an invalid length. [ 1585.653746][T21140] tipc: Enabling of bearer rejected, already enabled [ 1585.676762][T21140] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 1585.676792][T21140] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 1585.780142][T21140] tipc: Resetting bearer [ 1585.924341][T21133] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1586.282258][T21155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20587'. [ 1586.513153][T21156] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1586.791123][T21168] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1586.791155][T21168] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1586.794068][T21168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20592'. [ 1586.796440][T21168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20592'. [ 1587.232218][T21181] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 1587.232249][T21181] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 1587.703879][T21186] netlink: 14 bytes leftover after parsing attributes in process `syz.4.20597'. [ 1588.259192][T21198] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1588.407184][T21207] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 1588.407214][T21207] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 1590.333612][T21260] tc_dump_action: action bad kind [ 1590.392503][T20426] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1590.425754][T21255] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1590.806153][T21267] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 1591.561586][T21288] netlink: 'syz.3.20626': attribute type 12 has an invalid length. [ 1591.579330][T21288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20626'. [ 1591.802599][T21293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20628'. [ 1593.934061][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1593.934147][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1593.934213][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1593.934280][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1593.934346][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1593.934410][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1593.934474][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1593.934542][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1593.934612][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1593.934687][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1594.677774][T21346] netlink: 'syz.0.20647': attribute type 39 has an invalid length. [ 1594.848672][T21352] netlink: 'syz.2.20649': attribute type 1 has an invalid length. [ 1595.342001][T21357] bridge0: entered promiscuous mode [ 1595.344157][T21357] bond21: (slave bridge0): making interface the new active one [ 1595.344658][T21357] bond21: (slave bridge0): Enslaving as an active interface with an up link [ 1595.418800][T21358] bridge16: entered promiscuous mode [ 1595.424870][T21358] bond21: (slave bridge16): Enslaving as a backup interface with an up link [ 1596.032436][T21380] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 1596.378054][T21388] tipc: Failed to remove unknown binding: 66,0,0/4:495919771/495919773 [ 1596.378091][T21388] tipc: Failed to remove unknown binding: 66,0,0/4:495919771/495919772 [ 1596.382208][T21388] tipc: Failed to remove unknown binding: 66,0,0/4:495919771/495919773 [ 1596.382244][T21388] tipc: Failed to remove unknown binding: 66,0,0/4:495919771/495919772 [ 1596.426880][T21372] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1596.796421][T21394] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20659'. [ 1598.567701][T21436] IPVS: Scheduler module ip_vs_sip not found [ 1598.808438][T21443] batman_adv: batadv0: Adding interface: macvtap4 [ 1598.808460][T21443] batman_adv: batadv0: The MTU of interface macvtap4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1598.808490][T21443] batman_adv: batadv0: Not using interface macvtap4 (retrying later): interface not active [ 1599.485114][T21456] tipc: Enabling of bearer rejected, already enabled [ 1599.970478][T21472] erspan0: left promiscuous mode [ 1600.136275][T21472] net_ratelimit: 101 callbacks suppressed [ 1600.136301][T21472] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1600.464018][T21479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20687'. [ 1600.590129][T21487] netlink: 296 bytes leftover after parsing attributes in process `syz.3.20689'. [ 1600.712090][T21483] netlink: 48 bytes leftover after parsing attributes in process `syz.3.20689'. [ 1601.959276][T21513] macsec0: entered promiscuous mode [ 1601.965062][T21513] macsec0: left promiscuous mode [ 1603.077122][T21535] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1603.438405][T21546] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 1603.771204][T21560] syzkaller0: entered promiscuous mode [ 1603.771241][T21560] syzkaller0: entered allmulticast mode [ 1603.961780][T21571] syzkaller0: left promiscuous mode [ 1603.961809][T21571] syzkaller0: left allmulticast mode [ 1604.255889][T21574] syzkaller0: entered promiscuous mode [ 1604.255934][T21574] syzkaller0: entered allmulticast mode [ 1604.270982][T21574] tipc: Enabled bearer , priority 0 [ 1604.275496][ T30] audit: type=1804 audit(1790949821.671:29): pid=21575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.20715" name="/newroot/4031/cgroup.controllers" dev="tmpfs" ino=20341 res=1 errno=0 [ 1604.275867][ T30] audit: type=1800 audit(1790949821.671:30): pid=21575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.20715" name="cgroup.controllers" dev="tmpfs" ino=20341 res=0 errno=0 [ 1604.914795][T21588] caif0: tun_chr_ioctl cmd 2147767507 [ 1605.013734][T21587] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1605.018290][T21590] netlink: 28 bytes leftover after parsing attributes in process `syz.4.20720'. [ 1605.018316][T21590] netlink: 28 bytes leftover after parsing attributes in process `syz.4.20720'. [ 1605.409278][T17914] tipc: Node number set to 2130706433 [ 1605.458882][T21595] tc action pedit unable to extract header offset for header type (0x5) [ 1605.458910][T21595] tc action pedit unable to extract header offset for header type (0x5) [ 1605.458925][T21595] tc action pedit unable to extract header offset for header type (0x5) [ 1605.458937][T21595] tc action pedit unable to extract header offset for header type (0x5) [ 1605.458950][T21595] tc action pedit unable to extract header offset for header type (0x5) [ 1605.458964][T21595] tc action pedit unable to extract header offset for header type (0x5) [ 1605.458978][T21595] tc action pedit unable to extract header offset for header type (0x5) [ 1605.458991][T21595] tc action pedit unable to extract header offset for header type (0x5) [ 1605.459004][T21595] tc action pedit unable to extract header offset for header type (0x5) [ 1605.459019][T21595] tc action pedit unable to extract header offset for header type (0x5) [ 1605.459045][T21595] 0: reclassify loop, rule prio 0, protocol 800 [ 1606.501233][T21613] netlink: 'syz.3.20729': attribute type 1 has an invalid length. [ 1606.627497][T18422] page_pool_release_retry() stalled pool shutdown: id 430, 1 inflight 60 sec [ 1607.335976][T21616] veth25: entered allmulticast mode [ 1607.478745][T21616] bond9: (slave veth25): Enslaving as an active interface with a down link [ 1607.543609][T21622] bond5: (slave veth0_to_bond): Releasing active interface [ 1607.543640][T21622] veth0_to_bond: left promiscuous mode [ 1607.543841][T21622] veth0_to_bond: left allmulticast mode [ 1607.561718][T21622] bond9: (slave veth0_to_bond): making interface the new active one [ 1607.569294][T21622] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1607.655600][T21630] macvlan4: entered promiscuous mode [ 1607.655938][T21630] macvlan4: entered allmulticast mode [ 1607.659799][T21630] bond9: entered promiscuous mode [ 1607.659822][T21630] veth0_to_bond: entered promiscuous mode [ 1607.661154][T21630] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1607.678050][T21630] bond9: (slave macvlan4): the slave hw address is in use by the bond; giving it the hw address of veth25 [ 1607.683149][T21630] bond9: left promiscuous mode [ 1607.683173][T21630] veth0_to_bond: left promiscuous mode [ 1607.750196][T21632] tipc: Enabling of bearer rejected, already enabled [ 1607.809626][T21639] tipc: Resetting bearer [ 1608.214307][T21660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20736'. [ 1608.748513][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 1609.035394][T21671] netlink: 20 bytes leftover after parsing attributes in process `syz.4.20743'. [ 1609.115339][T21676] syzkaller1: entered promiscuous mode [ 1609.115365][T21676] syzkaller1: entered allmulticast mode [ 1609.128285][T21676] raw_sendmsg: syz.3.20746 forgot to set AF_INET. Fix it! [ 1609.503211][T21684] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1610.048699][T21705] bond23: option min_links: invalid value (18446744073709551612) [ 1610.048729][T21705] bond23: option min_links: allowed values 0 - 2147483647 [ 1610.051623][T21705] bond23 (unregistering): Released all slaves [ 1610.172518][T21711] tun0: tun_chr_ioctl cmd 1074025675 [ 1610.172543][T21711] tun0: persist disabled [ 1610.677483][T21729] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 1610.989831][T21742] netlink: 100 bytes leftover after parsing attributes in process `syz.4.20766'. [ 1611.018039][T21742] netlink: zone id is out of range [ 1611.018061][T21742] netlink: zone id is out of range [ 1611.018070][T21742] netlink: zone id is out of range [ 1611.018080][T21742] netlink: zone id is out of range [ 1611.018087][T21742] netlink: zone id is out of range [ 1611.018096][T21742] netlink: zone id is out of range [ 1611.018105][T21742] netlink: zone id is out of range [ 1611.018113][T21742] netlink: zone id is out of range [ 1611.018150][T21742] netlink: zone id is out of range [ 1611.018159][T21742] netlink: zone id is out of range [ 1611.604412][T21751] netlink: 'syz.4.20772': attribute type 8 has an invalid length. [ 1611.630182][T21751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20772'. [ 1611.764511][T21751] veth18: entered allmulticast mode [ 1612.065194][T21764] tipc: Enabling of bearer rejected, already enabled [ 1612.074156][T21764] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 1612.394816][T21772] netlink: 'syz.2.20777': attribute type 1 has an invalid length. [ 1612.478210][T21776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20777'. [ 1612.515033][T21772] 8021q: adding VLAN 0 to HW filter on device bond23 [ 1612.616680][T21772] bond23: (slave bridge17): making interface the new active one [ 1612.626246][T21772] bond23: (slave bridge17): Enslaving as an active interface with an up link [ 1612.630451][T21779] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 1612.636984][T21783] netlink: 'syz.4.20780': attribute type 4 has an invalid length. [ 1612.961308][T21791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20783'. [ 1613.407759][T21798] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20785'. [ 1613.466251][T21784] syzkaller1: entered promiscuous mode [ 1613.466452][T21784] syzkaller1: entered allmulticast mode [ 1613.555988][T21801] vlan2: entered allmulticast mode [ 1613.556014][T21801] bridge13: entered allmulticast mode [ 1613.728403][T21798] bridge13: port 1(erspan0) entered blocking state [ 1613.728637][T21798] bridge13: port 1(erspan0) entered disabled state [ 1613.728793][T21798] erspan0: entered allmulticast mode [ 1613.741684][T21798] erspan0: entered promiscuous mode [ 1613.746316][T21798] bridge13: port 1(erspan0) entered blocking state [ 1613.746522][T21798] bridge13: port 1(erspan0) entered forwarding state [ 1614.252272][ T3361] tipc: Subscription rejected, illegal request [ 1614.323310][T21811] syzkaller0: left promiscuous mode [ 1614.323336][T21811] syzkaller0: left allmulticast mode [ 1614.323830][T21811] tipc: Resetting bearer [ 1614.509987][T21820] team_slave_1: Caught tx_queue_len zero misconfig [ 1614.644058][T21823] netlink: 'syz.0.20792': attribute type 12 has an invalid length. [ 1615.201492][T21812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20790'. [ 1615.201532][T21812] netlink: 16 bytes leftover after parsing attributes in process `syz.4.20790'. [ 1615.283928][T21812] bridge0: entered promiscuous mode [ 1615.283956][T21812] bridge0: entered allmulticast mode [ 1615.333713][T21842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20798'. [ 1615.386249][T21846] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 1615.426005][T21846] netlink: 'syz.3.20800': attribute type 1 has an invalid length. [ 1615.451150][T21846] netlink: 'syz.3.20800': attribute type 1 has an invalid length. [ 1615.733703][T21857] netlink: 'syz.0.20802': attribute type 4 has an invalid length. [ 1615.733730][T21857] netlink: 152 bytes leftover after parsing attributes in process `syz.0.20802'. [ 1615.761383][T21857] 8021q: adding VLAN 0 to HW filter on device .` [ 1616.070012][ C0] net_ratelimit: 5 callbacks suppressed [ 1616.070036][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 1616.348333][T21875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20808'. [ 1616.626660][T21880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20810'. [ 1616.626761][T21880] tipc: Resetting bearer [ 1616.626803][T21880] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1616.748675][T21880] tipc: Disabling bearer [ 1616.751702][T21880] batman_adv: batadv0: Removing interface: syzkaller0 [ 1616.861273][ T42] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1616.861392][ T42] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1616.861429][ T42] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1616.861466][ T42] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1617.192678][T21888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20811'. [ 1617.246779][T21894] syzkaller0: entered promiscuous mode [ 1617.246804][T21894] syzkaller0: entered allmulticast mode [ 1617.423500][T21899] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1617.913287][T21909] ip_tables: iptables: counters copy to user failed while replacing table [ 1618.241727][T21914] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 1618.303478][T21918] xt_bpf: check failed: parse error [ 1618.330773][T21918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1618.480797][T21922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20825'. [ 1618.735979][T21928] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 1619.020723][T21935] netlink: 24 bytes leftover after parsing attributes in process `syz.3.20829'. [ 1619.149522][T21941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20830'. [ 1619.153297][T21941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20830'. [ 1619.187987][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 1619.261377][T21939] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.20831'. [ 1619.261408][T21939] openvswitch: netlink: Message has 512 unknown bytes. [ 1619.500114][T21947] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1619.799252][T21952] syzkaller0: entered promiscuous mode [ 1619.799279][T21952] syzkaller0: entered allmulticast mode [ 1619.838221][T21952] simple: /dev/video#_1 [ 1619.838246][T21952] simple: /dev/video#_2 [ 1619.838257][T21952] simple: /dev/video#_3 [ 1619.838267][T21952] simple: /dev/video#_4 [ 1619.838278][T21952] simple: /dev/video#_5 [ 1619.838287][T21952] simple: /dev/video#_6 [ 1619.838297][T21952] simple: /dev/video#_7 [ 1619.838307][T21952] simple: /dev/video#_8 [ 1619.838317][T21952] simple: /dev/video#_9 [ 1619.838327][T21952] simple: /dev/video#_10 [ 1619.838338][T21952] simple: /dev/video#_11 [ 1619.838348][T21952] simple: /dev/video#_12 [ 1619.838358][T21952] simple: /dev/video#_13 [ 1619.838369][T21952] simple: /dev/video#_14 [ 1619.838379][T21952] simple: /dev/video#_15 [ 1619.838389][T21952] simple: /dev/video#_16 [ 1619.838399][T21952] simple: /dev/video#_17 [ 1619.838409][T21952] simple: /dev/video#_18 [ 1619.838420][T21952] simple: /dev/video#_19 [ 1619.838430][T21952] simple: /dev/video#_20 [ 1619.838440][T21952] simple: /dev/video#_21 [ 1619.838450][T21952] simple: /dev/video#_22 [ 1619.838460][T21952] simple: /dev/video#_23 [ 1619.838468][T21952] simple: /dev/video#_24 [ 1619.838476][T21952] simple: /dev/video#_25 [ 1619.838485][T21952] simple: /dev/video#_26 [ 1619.838494][T21952] simple: /dev/video#_27 [ 1619.838505][T21952] simple: /dev/video#_28 [ 1619.838516][T21952] simple: /dev/video#_29 [ 1619.838526][T21952] simple: /dev/video#_30 [ 1619.838536][T21952] simple: /dev/video#_31 [ 1619.838547][T21952] simple: /dev/video#_32 [ 1619.838558][T21952] TC_ACT_REPEAT abuse ? [ 1620.263583][T21962] xt_hashlimit: size too large, truncated to 1048576 [ 1620.372626][T21969] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 1620.373211][T21964] netlink: 168 bytes leftover after parsing attributes in process `syz.4.20838'. [ 1620.574451][T21975] openvswitch: netlink: Flow actions attr not present in new flow. [ 1620.643463][T21976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20840'. [ 1621.310306][T21985] netlink: 'syz.1.20842': attribute type 4 has an invalid length. [ 1621.321779][T21985] netlink: 'syz.1.20842': attribute type 4 has an invalid length. [ 1621.459147][T21988] netlink: 'syz.2.20844': attribute type 8 has an invalid length. [ 1621.459172][T21988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20844'. [ 1621.721514][T21995] ip6tnl0: Caught tx_queue_len zero misconfig [ 1621.731679][T21999] netlink: 'syz.2.20848': attribute type 1 has an invalid length. [ 1621.992500][T21999] bond24: entered promiscuous mode [ 1621.993057][T21999] 8021q: adding VLAN 0 to HW filter on device bond24 [ 1622.031106][T22006] bond24: (slave bridge18): making interface the new active one [ 1622.031135][T22006] bridge18: entered promiscuous mode [ 1622.033887][T22006] bond24: (slave bridge18): Enslaving as an active interface with an up link [ 1622.055468][T22000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20849'. [ 1622.104587][T22012] ipvlan0: entered allmulticast mode [ 1622.104611][T22012] bond24: entered allmulticast mode [ 1622.104626][T22012] bridge18: entered allmulticast mode [ 1622.108681][T22012] bond24: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1622.108706][T22012] bond24: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 1622.186423][T22017] gre0: left promiscuous mode [ 1622.286706][T22017] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1622.290701][T22000] tipc: Enabling of bearer rejected, already enabled [ 1622.734474][T22030] xt_CT: No such helper "snmp" [ 1623.036423][T22045] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20858'. [ 1623.150748][T22056] netlink: 'syz.1.20858': attribute type 2 has an invalid length. [ 1623.231584][ T8441] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1623.281176][ T8441] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1623.359761][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 1623.480451][ T3361] bond16: (slave bridge10): link status up again after 0 ms [ 1623.480487][ T3361] bond16: (slave bridge10): failed to get link speed/duplex [ 1623.599975][ T42] bond16: (slave bridge10): failed to get link speed/duplex [ 1623.653446][T22061] lo: Caught tx_queue_len zero misconfig [ 1623.752265][T22062] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20862'. [ 1623.797413][ T3361] bond16: (slave bridge10): failed to get link speed/duplex [ 1623.909676][ T3361] bond16: (slave bridge10): failed to get link speed/duplex [ 1623.939697][T22064] xt_IDLETIMER: label is empty or not nul-terminated [ 1624.017608][ T3356] bond16: (slave bridge10): failed to get link speed/duplex [ 1624.094501][T22066] netlink: 'syz.4.20863': attribute type 4 has an invalid length. [ 1624.129039][ T3356] bond16: (slave bridge10): failed to get link speed/duplex [ 1624.237454][ T4523] bond16: (slave bridge10): failed to get link speed/duplex [ 1624.449942][T21979] udevd[21979]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1624.834529][T22084] tc_dump_action: action bad kind [ 1625.213104][T22080] syzkaller1: entered promiscuous mode [ 1625.213131][T22080] syzkaller1: entered allmulticast mode [ 1625.511081][T22093] syzkaller0: left promiscuous mode [ 1625.511111][T22093] syzkaller0: left allmulticast mode [ 1625.511432][T22093] tipc: Resetting bearer [ 1625.806169][T22100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20873'. [ 1625.996505][T22103] netlink: 'syz.4.20874': attribute type 1 has an invalid length. [ 1626.143786][T22103] bond22: entered promiscuous mode [ 1626.145039][T22103] 8021q: adding VLAN 0 to HW filter on device bond22 [ 1626.296620][T22116] 8021q: adding VLAN 0 to HW filter on device bond22 [ 1626.298098][T22116] bond22: (slave gre6): The slave device specified does not support setting the MAC address [ 1626.298121][T22116] bond22: (slave gre6): Setting fail_over_mac to active for active-backup mode [ 1626.337836][T22116] bond22: (slave gre6): making interface the new active one [ 1626.337866][T22116] gre6: entered promiscuous mode [ 1626.342384][T22116] bond22: (slave gre6): Enslaving as an active interface with an up link [ 1626.344367][T22121] netlink: 'syz.2.20878': attribute type 1 has an invalid length. [ 1626.344433][T22121] netlink: 224 bytes leftover after parsing attributes in process `syz.2.20878'. [ 1626.545670][T22131] netlink: 44 bytes leftover after parsing attributes in process `syz.4.20879'. [ 1626.825227][T22137] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20880'. [ 1626.922264][T22141] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 1626.922293][T22141] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 1627.247410][T22149] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 1627.247441][T22149] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 1627.379388][ T3356] net_ratelimit: 20 callbacks suppressed [ 1627.379415][ T3356] bond16: (slave bridge10): failed to get link speed/duplex [ 1627.489636][ T3356] bond16: (slave bridge10): failed to get link speed/duplex [ 1627.495969][T22159] tipc: Enabled bearer , priority 0 [ 1627.496936][T22159] syzkaller0: entered promiscuous mode [ 1627.496960][T22159] syzkaller0: entered allmulticast mode [ 1627.530294][T22159] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1627.598505][ T3356] bond16: (slave bridge10): failed to get link speed/duplex [ 1627.603658][ T30] audit: type=1804 audit(1790949845.001:31): pid=22157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.20888" name="/newroot/4085/cgroup.controllers" dev="tmpfs" ino=20597 res=1 errno=0 [ 1627.603955][ T30] audit: type=1800 audit(1790949845.001:32): pid=22157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.20888" name="cgroup.controllers" dev="tmpfs" ino=20597 res=0 errno=0 [ 1627.641053][T22159] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 1627.661150][T22159] tipc: Resetting bearer [ 1627.681909][T22158] tipc: Resetting bearer [ 1627.799109][T22158] tipc: Disabling bearer [ 1627.837957][ T4523] bond16: (slave bridge10): failed to get link speed/duplex [ 1627.948179][ T4523] bond16: (slave bridge10): failed to get link speed/duplex [ 1628.057455][ T4523] bond16: (slave bridge10): failed to get link speed/duplex [ 1628.093527][T22173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20893'. [ 1628.167758][ T4523] bond16: (slave bridge10): failed to get link speed/duplex [ 1628.277975][ T4524] bond16: (slave bridge10): failed to get link speed/duplex [ 1628.361101][T22184] syzkaller0: entered promiscuous mode [ 1628.361136][T22184] syzkaller0: entered allmulticast mode [ 1628.364983][T22186] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 1628.365011][T22186] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 1628.421304][ T4524] bond16: (slave bridge10): failed to get link speed/duplex [ 1628.607650][ T4524] bond16: (slave bridge10): failed to get link speed/duplex [ 1628.747998][T22195] netlink: 116 bytes leftover after parsing attributes in process `syz.0.20903'. [ 1629.179657][T22201] tipc: Resetting bearer [ 1629.179866][T22201] tipc: Resetting bearer [ 1629.312465][ T8441] wlan1 speed is unknown, defaulting to 1000 [ 1629.530837][T22214] netlink: 'syz.1.20909': attribute type 1 has an invalid length. [ 1629.530862][T22214] netlink: 84 bytes leftover after parsing attributes in process `syz.1.20909'. [ 1629.530881][T22214] netlink: 'syz.1.20909': attribute type 2 has an invalid length. [ 1629.530895][T22214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20909'. [ 1629.697660][T22216] tipc: Enabling of bearer rejected, failed to enable media [ 1629.883494][T22219] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20911'. [ 1630.273319][T22228] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 1630.713108][T22241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20918'. [ 1630.737062][T22242] syzkaller0: entered promiscuous mode [ 1630.737088][T22242] syzkaller0: entered allmulticast mode [ 1630.739676][T22242] tipc: Resetting bearer [ 1630.960199][T22253] netlink: 112 bytes leftover after parsing attributes in process `syz.3.20923'. [ 1631.019187][T22254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20922'. [ 1631.062948][T22254] bond25: option lacp_active: invalid value (5) [ 1631.078773][T22254] bond25 (unregistering): Released all slaves [ 1632.124521][ T3356] smbdirect: ib_dev[syz0] removed [ 1632.297826][T22265] netlink: 36 bytes leftover after parsing attributes in process `syz.3.20926'. [ 1632.297854][T22265] netlink: 16 bytes leftover after parsing attributes in process `syz.3.20926'. [ 1632.297874][T22265] netlink: 36 bytes leftover after parsing attributes in process `syz.3.20926'. [ 1632.723351][T22305] netlink: 'syz.3.20936': attribute type 1 has an invalid length. [ 1632.921197][T22310] netlink: 'syz.3.20936': attribute type 10 has an invalid length. [ 1632.921224][T22310] netlink: 40 bytes leftover after parsing attributes in process `syz.3.20936'. [ 1633.501591][T22313] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20937'. [ 1633.506193][ T5624] block nbd5: Receive control failed (result -1) [ 1634.486917][T22326] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20940'. [ 1634.523132][ T5624] block nbd6: Receive control failed (result -32) [ 1637.852881][T22305] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 1637.940563][T22308] syzkaller0: entered promiscuous mode [ 1637.940592][T22308] syzkaller0: entered allmulticast mode [ 1637.945183][T22302] bond4: (slave dummy0): Releasing active interface [ 1637.945227][T22302] dummy0: left promiscuous mode [ 1637.998417][T15579] net_ratelimit: 22 callbacks suppressed [ 1637.998444][T15579] bond16: (slave bridge10): failed to get link speed/duplex [ 1638.119373][ T3361] bond16: (slave bridge10): failed to get link speed/duplex [ 1638.189487][T22338] netlink: 32 bytes leftover after parsing attributes in process `syz.2.20943'. [ 1638.208443][T22338] syzkaller1: entered promiscuous mode [ 1638.208468][T22338] syzkaller1: entered allmulticast mode [ 1638.435948][T22349] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1638.457439][ T3356] bond16: (slave bridge10): failed to get link speed/duplex [ 1638.567585][T15579] bond16: (slave bridge10): failed to get link speed/duplex [ 1638.631116][T22353] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 1638.631148][T22353] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 1638.688408][ T3361] bond16: (slave bridge10): failed to get link speed/duplex [ 1638.692444][T22358] netlink: 'syz.2.20950': attribute type 1 has an invalid length. [ 1638.798005][T15579] bond16: (slave bridge10): failed to get link speed/duplex [ 1638.808930][T22363] SET target dimension over the limit! [ 1638.833776][T22358] veth15: entered promiscuous mode [ 1638.847194][T22358] bond25: (slave veth15): Enslaving as a backup interface with a down link [ 1638.907418][ T4524] bond16: (slave bridge10): failed to get link speed/duplex [ 1639.067078][T22368] netlink: 48 bytes leftover after parsing attributes in process `syz.2.20954'. [ 1639.197656][T22373] netlink: 'syz.2.20954': attribute type 2 has an invalid length. [ 1639.197684][T22373] netlink: 11575 bytes leftover after parsing attributes in process `syz.2.20954'. [ 1639.291546][T22366] dvmrp1: entered allmulticast mode [ 1639.536843][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 1639.922293][T22393] netlink: 'syz.1.20959': attribute type 10 has an invalid length. [ 1641.164947][T22385] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1641.177457][ T3356] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1641.177493][ T3356] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 44573 - 0 [ 1641.177516][ T3356] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1641.177539][ T3356] netdevsim netdevsim4 eth3: unset [1, 2] type 2 family 0 port 20004 - 0 [ 1641.177591][ T3356] bond16: (slave bridge10): failed to get link speed/duplex [ 1641.177627][ T3356] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1641.177650][ T3356] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 44573 - 0 [ 1641.177672][ T3356] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1641.177694][ T3356] netdevsim netdevsim4 eth2: unset [1, 2] type 2 family 0 port 20004 - 0 [ 1641.177726][ T3356] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1641.177748][ T3356] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 44573 - 0 [ 1641.177769][ T3356] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1641.177789][ T3356] netdevsim netdevsim4 eth1: unset [1, 2] type 2 family 0 port 20004 - 0 [ 1641.177822][ T3356] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1641.177844][ T3356] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 44573 - 0 [ 1641.177864][ T3356] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1641.177885][ T3356] netdevsim netdevsim4 eth0: unset [1, 2] type 2 family 0 port 20004 - 0 [ 1641.323746][T22393] 8021q: adding VLAN 0 to HW filter on device team0 [ 1641.352409][T22393] bond0: (slave team0): Enslaving as an active interface with a down link [ 1641.439212][T22397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20961'. [ 1641.453174][T22397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20961'. [ 1641.453609][T22397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20961'. [ 1641.454022][T22397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20961'. [ 1641.454426][T22397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20961'. [ 1641.461330][T22397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20961'. [ 1641.545063][T22401] syzkaller0: left promiscuous mode [ 1641.545091][T22401] syzkaller0: left allmulticast mode [ 1641.545451][T22401] tipc: Resetting bearer [ 1641.616071][T22397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20961'. [ 1641.773097][T22403] smc: removing net device vlan1 with user defined pnetid SYZ2 [ 1641.961693][T22410] syzkaller0: entered promiscuous mode [ 1641.961718][T22410] syzkaller0: entered allmulticast mode [ 1642.292587][T22420] syzkaller0: entered promiscuous mode [ 1642.292613][T22420] syzkaller0: entered allmulticast mode [ 1642.349085][T22420] tipc: Enabled bearer , priority 0 [ 1642.395599][T22420] tipc: Resetting bearer [ 1642.426430][T22425] block nbd7: server does not support multiple connections per device. [ 1642.439030][T22425] block nbd7: shutting down sockets [ 1642.732938][T22418] tipc: Resetting bearer [ 1642.891371][T22418] tipc: Disabling bearer [ 1643.047671][ T42] net_ratelimit: 10 callbacks suppressed [ 1643.047710][ T42] bond16: (slave bridge10): failed to get link speed/duplex [ 1643.157463][T20426] bond16: (slave bridge10): failed to get link speed/duplex [ 1643.200391][T22439] xt_TCPMSS: Only works on TCP SYN packets [ 1643.271549][ T42] bond16: (slave bridge10): failed to get link speed/duplex [ 1643.387582][ T4523] bond16: (slave bridge10): failed to get link speed/duplex [ 1643.476013][T22439] tipc: Resetting bearer [ 1643.507501][ T42] bond16: (slave bridge10): failed to get link speed/duplex [ 1643.617929][ T3356] bond16: (slave bridge10): failed to get link speed/duplex [ 1643.632907][T22435] __nla_validate_parse: 2 callbacks suppressed [ 1643.632928][T22435] netlink: 108 bytes leftover after parsing attributes in process `syz.3.20974'. [ 1643.729996][ T4523] bond16: (slave bridge10): failed to get link speed/duplex [ 1643.853344][ T4523] bond16: (slave bridge10): failed to get link speed/duplex [ 1643.957530][ T4523] bond16: (slave bridge10): failed to get link speed/duplex [ 1644.135552][T22452] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 1644.137875][ T4523] bond16: (slave bridge10): failed to get link speed/duplex [ 1644.279967][T22454] veth0: entered promiscuous mode [ 1644.281264][T22454] vlan3: entered promiscuous mode [ 1644.423141][T22465] siw: device registration error -23 [ 1644.982653][T22482] xt_IDLETIMER: timeout value is too big [ 1645.092615][T22487] tipc: Resetting bearer [ 1645.128329][T22488] netlink: 'syz.3.20986': attribute type 1 has an invalid length. [ 1645.231977][T22488] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1645.333970][T22496] netlink: 1224 bytes leftover after parsing attributes in process `syz.0.20988'. [ 1645.528512][T22488] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1645.569385][T22488] bond10: (slave bond11): Enslaving as an active interface with a down link [ 1645.608426][T22503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20987'. [ 1645.622228][T22492] bond10 (unregistering): (slave bond11): Releasing active interface [ 1645.666621][T22492] bond10 (unregistering): Released all slaves [ 1645.842035][T22501] 8021q: adding VLAN 0 to HW filter on device .` [ 1645.970015][T22501] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1645.970047][T22501] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1645.971298][T22501] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 1646.033029][T22503] bond18: option lacp_active: invalid value (5) [ 1646.038635][T22503] bond18 (unregistering): Released all slaves [ 1646.072449][T22504] netlink: 'syz.4.20989': attribute type 3 has an invalid length. [ 1646.072830][T22504] netlink: 'syz.4.20989': attribute type 3 has an invalid length. [ 1646.126741][T22511] netlink: 20 bytes leftover after parsing attributes in process `syz.3.20991'. [ 1646.622297][T22523] tipc: Resetting bearer [ 1646.653086][T22523] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1646.653115][T22523] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1646.745883][T22525] gre0: left allmulticast mode [ 1646.854315][T22526] netlink: 220 bytes leftover after parsing attributes in process `syz.3.20995'. [ 1646.925606][T22525] bridge13: port 1(erspan0) entered disabled state [ 1647.075131][T22525] tipc: Resetting bearer [ 1647.908014][T22543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20999'. [ 1647.948390][T22525] veth0_macvtap: left promiscuous mode [ 1648.013047][T22525] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 1648.013593][T22525] gretap1: left allmulticast mode [ 1648.115136][T22525] vxcan5: left promiscuous mode [ 1648.159839][T22525] ip6gre1: left allmulticast mode [ 1648.267805][T22525] macsec1: left promiscuous mode [ 1648.278499][T22525] ip6gretap3: left allmulticast mode [ 1648.290567][T22525] ip6gretap4: left allmulticast mode [ 1648.317022][T22525] vxlan0: left promiscuous mode [ 1648.317049][T22525] vxlan0: left allmulticast mode [ 1648.361765][T22525] ip6gretap5: left allmulticast mode [ 1648.696550][T22525] bond5: left promiscuous mode [ 1648.772448][T22525] bond6: left promiscuous mode [ 1648.963873][T22525] gretap3: left promiscuous mode [ 1649.300636][T22525] macvtap1: left allmulticast mode [ 1649.313550][T22525] veth27: left allmulticast mode [ 1649.320471][T22525] bond16: left promiscuous mode [ 1649.320494][T22525] bridge10: left promiscuous mode [ 1649.320980][T22525] bridge11: left promiscuous mode [ 1649.321210][T22525] bridge12: left promiscuous mode [ 1649.321416][T22525] bond16: left allmulticast mode [ 1649.321431][T22525] bridge10: left allmulticast mode [ 1649.321555][T22525] bridge11: left allmulticast mode [ 1649.321624][T22525] bridge12: left allmulticast mode [ 1649.379737][T22525] veth29: left promiscuous mode [ 1649.426614][T22525] vlan2: left allmulticast mode [ 1649.426643][T22525] bridge13: left allmulticast mode [ 1649.441637][T22525] syzkaller0: left promiscuous mode [ 1649.441662][T22525] syzkaller0: left allmulticast mode [ 1649.465743][T22523] netlink: 'syz.3.20995': attribute type 3 has an invalid length. [ 1649.466048][T22523] netlink: 'syz.3.20995': attribute type 3 has an invalid length. [ 1649.478422][ T4523] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1649.478459][ T4523] netdevsim netdevsim1 eth1: unset [0, 1] type 1 family 0 port 2816 - 0 [ 1649.478485][ T4523] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1649.478529][ T4523] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1649.478553][ T4523] netdevsim netdevsim1 eth0: unset [0, 1] type 1 family 0 port 2816 - 0 [ 1649.478578][ T4523] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1649.478614][ T4523] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1649.478639][ T4523] netdevsim netdevsim1 eth2: unset [0, 1] type 1 family 0 port 2816 - 0 [ 1649.478664][ T4523] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1649.478700][ T4523] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1649.478725][ T4523] netdevsim netdevsim1 eth3: unset [0, 1] type 1 family 0 port 2816 - 0 [ 1649.478749][ T4523] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1649.613128][T22543] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1649.791006][T22543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1649.878575][T22566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21001'. [ 1650.096675][T22565] syzkaller0: entered promiscuous mode [ 1650.096702][T22565] syzkaller0: entered allmulticast mode [ 1650.097035][T22565] tipc: Resetting bearer [ 1650.154455][ C0] net_ratelimit: 18 callbacks suppressed [ 1650.154483][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 1650.154553][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 1650.154623][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 1650.154688][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 1650.154757][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 1650.154825][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 1650.154915][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 1650.154982][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 1650.155050][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 1650.155119][ C0] 0: reclassify loop, rule prio 0, protocol 03 [ 1650.483279][T22579] pimreg: entered allmulticast mode [ 1650.523494][T22579] pimreg: left allmulticast mode [ 1650.643944][T22583] netlink: 48 bytes leftover after parsing attributes in process `syz.4.21005'. [ 1650.769100][T22583] macsec0: entered promiscuous mode [ 1650.769125][T22583] macsec0: entered allmulticast mode [ 1651.126962][T22598] syzkaller1: entered promiscuous mode [ 1651.126986][T22598] syzkaller1: entered allmulticast mode [ 1652.005545][T22632] x_tables: unsorted entry at hook 3 [ 1652.017706][T22632] tipc: Bearer : already 2 bearers with priority 10 [ 1652.017730][T22632] tipc: Bearer : trying with adjusted priority [ 1652.017743][T22632] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1652.304401][T22644] tipc: Can't bind to reserved service type 2 [ 1652.354608][T22644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21020'. [ 1653.072144][T22668] netlink: 'syz.2.21019': attribute type 29 has an invalid length. [ 1653.072172][T22668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21019'. [ 1653.203356][T22637] netlink: 'syz.2.21019': attribute type 29 has an invalid length. [ 1653.203384][T22637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21019'. [ 1653.368325][T22674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21025'. [ 1653.832215][T22677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21025'. [ 1654.299881][T22704] wg2 speed is unknown, defaulting to 1000 [ 1654.385630][ T30] audit: type=1800 audit(1790949871.781:33): pid=22710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.21032" name=CB dev="tmpfs" ino=20661 res=0 errno=0 [ 1655.439539][T22750] bond26: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1655.599789][T22750] bond26 (unregistering): Released all slaves [ 1656.142634][T22781] tipc: Enabled bearer , priority 0 [ 1656.195320][T22781] syzkaller0: entered promiscuous mode [ 1656.195346][T22781] syzkaller0: entered allmulticast mode [ 1656.678963][T22790] syzkaller0: entered promiscuous mode [ 1656.678993][T22790] syzkaller0: entered allmulticast mode [ 1656.754407][T22801] netlink: 'syz.3.21048': attribute type 4 has an invalid length. [ 1657.198661][ T5624] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1661.720332][T22823] tipc: New replicast peer: 255.255.255.255 [ 1661.720710][T22823] tipc: Enabled bearer , priority 10 [ 1661.944392][T22847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21057'. [ 1662.006795][T22848] netlink: 'syz.3.21054': attribute type 1 has an invalid length. [ 1662.006820][T22848] netlink: 200 bytes leftover after parsing attributes in process `syz.3.21054'. [ 1662.741035][T22872] netlink: 'syz.3.21059': attribute type 16 has an invalid length. [ 1662.741063][T22872] netlink: 'syz.3.21059': attribute type 17 has an invalid length. [ 1662.741092][T22872] lo: left promiscuous mode [ 1662.769957][T22872] tunl0: left promiscuous mode [ 1662.770760][T22872] gre0: left promiscuous mode [ 1662.773978][T22872] erspan0: left promiscuous mode [ 1662.776186][T22872] ip_vti0: left promiscuous mode [ 1662.776901][T22872] ip6_vti0: left promiscuous mode [ 1662.808225][T22872] sit0: left promiscuous mode [ 1662.808800][T22872] ip6tnl0: left promiscuous mode [ 1662.809485][T22872] ip6gre0: left promiscuous mode [ 1662.810266][T22872] bridge0: port 3(syz_tun) entered blocking state [ 1662.810398][T22872] bridge0: port 3(syz_tun) entered forwarding state [ 1662.816928][T22872] ip6gretap0: left promiscuous mode [ 1662.824672][T22872] .`: left promiscuous mode [ 1662.831058][T22872] nlmon0: left promiscuous mode [ 1662.834757][T22872] veth0: left promiscuous mode [ 1662.836075][T22872] veth1: left promiscuous mode [ 1662.841290][T22872] wg0: left promiscuous mode [ 1662.841983][T22872] wg1: left promiscuous mode [ 1662.847177][T22872] wg2: left promiscuous mode [ 1662.848163][T22872] veth0_to_bridge: left promiscuous mode [ 1662.850403][T18693] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1662.858822][T22872] bridge_slave_0: left promiscuous mode [ 1662.859503][T22872] veth1_to_bridge: left promiscuous mode [ 1662.865943][T22872] : left promiscuous mode [ 1662.873878][T22872] bond_slave_0: left promiscuous mode [ 1662.874655][T22872] bridge0: port 2(veth1_to_bond) entered blocking state [ 1662.874792][T22872] bridge0: port 2(veth1_to_bond) entered forwarding state [ 1662.884379][T22872] bond_slave_1: left promiscuous mode [ 1662.889979][T22872] veth1_to_team: left promiscuous mode [ 1662.890695][T22872] team_slave_1: left promiscuous mode [ 1662.895971][T22872] veth0_to_batadv: left promiscuous mode [ 1662.898628][T22872] batadv_slave_0: left promiscuous mode [ 1662.901586][T22872] veth1_to_batadv: left promiscuous mode [ 1662.903936][T22872] batadv_slave_1: left promiscuous mode [ 1662.906501][T22872] xfrm0: left promiscuous mode [ 1662.909272][T22872] veth0_to_hsr: left promiscuous mode [ 1662.916110][T22872] veth1_to_hsr: left promiscuous mode [ 1662.927678][T22872] hsr0: left promiscuous mode [ 1662.928048][T22872] veth1_virt_wifi: left promiscuous mode [ 1662.928683][T22872] veth0_virt_wifi: left promiscuous mode [ 1662.929093][T22872] –: left promiscuous mode [ 1662.929111][T22872] net_ratelimit: 114 callbacks suppressed [ 1662.929131][T22872] A link change request failed with some changes committed already. Interface – may have been left with an inconsistent configuration, please check. [ 1663.004718][T22877] bridge27: entered promiscuous mode [ 1663.004740][T22877] bridge27: entered allmulticast mode [ 1663.057625][T22877] team0: Port device bridge27 added [ 1663.070393][T22880] bridge0: port 1(team0) entered blocking state [ 1663.070485][T22880] bridge0: port 1(team0) entered disabled state [ 1663.070643][T22880] team0: entered allmulticast mode [ 1663.070658][T22880] bond25: entered allmulticast mode [ 1663.083627][T22880] team0: entered promiscuous mode [ 1663.083649][T22880] bond25: entered promiscuous mode [ 1663.140070][T22879] netlink: 56 bytes leftover after parsing attributes in process `syz.4.21062'. [ 1663.201284][T22879] netlink: 56 bytes leftover after parsing attributes in process `syz.4.21062'. [ 1663.230568][ T3356] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1663.314326][T22888] netlink: 165 bytes leftover after parsing attributes in process `syz.2.21064'. [ 1663.340295][T22888] netlink: 24 bytes leftover after parsing attributes in process `syz.2.21064'. [ 1663.413385][T22892] netlink: 'syz.3.21065': attribute type 27 has an invalid length. [ 1663.413413][T22892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21065'. [ 1663.443731][T22889] bridge0: port 1(bridge_slave_0) entered blocking state [ 1663.443802][T22889] bridge0: port 1(bridge_slave_0) entered disabled state [ 1663.443912][T22889] bridge_slave_0: entered allmulticast mode [ 1663.453420][T22889] bridge_slave_0: entered promiscuous mode [ 1663.458080][T22891] netlink: 32 bytes leftover after parsing attributes in process `syz.2.21064'. [ 1663.461427][T22892] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 1663.485307][T22889] bridge_slave_0: left allmulticast mode [ 1663.485336][T22889] bridge_slave_0: left promiscuous mode [ 1663.485581][T22889] bridge0: port 1(bridge_slave_0) entered disabled state [ 1663.541463][T22895] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1663.550242][T22888] netlink: 'syz.2.21064': attribute type 3 has an invalid length. [ 1663.576522][T22895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21066'. [ 1663.741500][T22895] 8021q: adding VLAN 0 to HW filter on device bond23 [ 1663.831334][T22532] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1663.907377][ T5624] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1663.926723][T22912] netlink: zone id is out of range [ 1663.926742][T22912] netlink: zone id is out of range [ 1663.926752][T22912] netlink: zone id is out of range [ 1663.926761][T22912] netlink: zone id is out of range [ 1663.926788][T22912] netlink: zone id is out of range [ 1663.926797][T22912] netlink: zone id is out of range [ 1663.926806][T22912] netlink: zone id is out of range [ 1663.926814][T22912] netlink: zone id is out of range [ 1663.926824][T22912] netlink: zone id is out of range [ 1664.014080][T22902] netlink: 76 bytes leftover after parsing attributes in process `syz.0.21068'. [ 1664.301019][T22919] block nbd7: server does not support multiple connections per device. [ 1664.303391][T22919] block nbd7: shutting down sockets [ 1664.312821][ T3358] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1664.315160][ T3358] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1665.107622][T11046] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1666.373570][T22953] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1666.392985][T22959] syzkaller0: left promiscuous mode [ 1666.393011][T22959] syzkaller0: left allmulticast mode [ 1667.388104][T22970] tipc: Resetting bearer [ 1667.853363][T23000] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1668.123117][T23009] syzkaller0: left promiscuous mode [ 1668.123144][T23009] syzkaller0: left allmulticast mode [ 1668.123487][T23009] tipc: Resetting bearer [ 1668.178057][T23012] xt_MASQUERADE: bad MAP_IPS. [ 1668.547762][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1668.716929][T23024] xt_bpf: check failed: parse error [ 1669.026957][T23031] __nla_validate_parse: 10 callbacks suppressed [ 1669.026983][T23031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21104'. [ 1669.385522][T23036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21105'. [ 1669.505376][T23040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21106'. [ 1669.545670][T23042] wg2: Caught tx_queue_len zero misconfig [ 1669.701895][T23042] netlink: 16 bytes leftover after parsing attributes in process `syz.0.21107'. [ 1669.911481][T23049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21108'. [ 1670.495840][T23082] netlink: 'syz.3.21114': attribute type 1 has an invalid length. [ 1670.683794][T23082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21114'. [ 1670.735187][T23089] bond12: option arp_validate: invalid value (1048579) [ 1670.751499][T23089] bond12 (unregistering): Released all slaves [ 1670.757154][T23097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21117'. [ 1670.834768][T23099] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1670.921216][T23069] bond12: option arp_validate: invalid value (1048579) [ 1670.950539][T23069] bond12 (unregistering): Released all slaves [ 1670.999752][T23099] xt_CT: No such helper "netbios-ns" [ 1671.161742][T23082] bridge15: entered promiscuous mode [ 1671.599536][T23105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21119'. [ 1672.103122][T23116] netlink: 'syz.4.21122': attribute type 11 has an invalid length. [ 1672.397540][T23125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21124'. [ 1672.505686][T23133] netlink: 'syz.0.21127': attribute type 4 has an invalid length. [ 1672.545273][T23130] syzkaller1: entered promiscuous mode [ 1672.545303][T23130] syzkaller1: entered allmulticast mode [ 1672.554918][T23139] netlink: 'syz.0.21127': attribute type 4 has an invalid length. [ 1673.232087][T23150] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21130'. [ 1673.423785][T23156] netlink: 'syz.3.21131': attribute type 1 has an invalid length. [ 1676.869249][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1677.813376][T23153] tipc: Enabling of bearer rejected, already enabled [ 1677.825559][T23155] __nla_validate_parse: 1 callbacks suppressed [ 1677.825583][T23155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21131'. [ 1677.844759][T23156] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 1678.096774][T23170] netlink: 212 bytes leftover after parsing attributes in process `syz.4.21132'. [ 1678.096804][T23170] net_ratelimit: 4 callbacks suppressed [ 1678.096817][T23170] openvswitch: netlink: Flow key attr not present in new flow. [ 1678.193689][T23178] netlink: 'syz.1.21135': attribute type 2 has an invalid length. [ 1678.226145][T23178] sysfs: cannot create duplicate filename '/class/ieee80211/.PÑè'óG!DEÒSˆ' [ 1678.226172][T23178] CPU: 1 UID: 0 PID: 23178 Comm: syz.1.21135 Not tainted syzkaller #0 PREEMPT(full) [ 1678.226197][T23178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1678.226211][T23178] Call Trace: [ 1678.226221][T23178] [ 1678.226230][T23178] dump_stack_lvl+0xe8/0x150 [ 1678.226271][T23178] sysfs_warn_dup+0x8e/0xa0 [ 1678.226351][T23178] sysfs_do_create_link_sd+0xc0/0x110 [ 1678.226388][T23178] device_add_class_symlinks+0x1cf/0x240 [ 1678.226523][T23178] device_add+0x467/0xb80 [ 1678.226552][T23178] wiphy_register+0x1fc8/0x2ff0 [ 1678.226667][T23178] ? __pfx_wiphy_register+0x10/0x10 [ 1678.226693][T23178] ? __pfx_netdev_run_todo+0x10/0x10 [ 1678.226773][T23178] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1678.226839][T23178] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1678.226899][T23178] ieee80211_register_hw+0x3d7c/0x4b40 [ 1678.226994][T23178] ? ieee80211_register_hw+0x1981/0x4b40 [ 1678.227054][T23178] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1678.227089][T23178] ? __asan_memset+0x22/0x50 [ 1678.227113][T23178] ? __hrtimer_setup+0x1b7/0x260 [ 1678.227144][T23178] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1678.227230][T23178] mac80211_hwsim_new_radio+0x3264/0x5720 [ 1678.227293][T23178] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1678.227316][T23178] ? kstrndup+0xbd/0x160 [ 1678.227355][T23178] ? kstrndup+0xbd/0x160 [ 1678.227380][T23178] hwsim_new_radio_nl+0xd8b/0xf90 [ 1678.227423][T23178] genl_family_rcv_msg_doit+0x233/0x340 [ 1678.227512][T23178] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1678.227559][T23178] ? bpf_lsm_capable+0x9/0x20 [ 1678.227579][T23178] ? security_capable+0x7e/0x2c0 [ 1678.227647][T23178] genl_rcv_msg+0x614/0x7a0 [ 1678.227683][T23178] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1678.227709][T23178] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1678.227751][T23178] netlink_rcv_skb+0x226/0x4a0 [ 1678.227788][T23178] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1678.227815][T23178] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1678.227857][T23178] ? down_read+0x2be/0x330 [ 1678.227914][T23178] genl_rcv+0x28/0x40 [ 1678.227939][T23178] netlink_unicast+0x7bd/0x940 [ 1678.228019][T23178] netlink_sendmsg+0x813/0xb40 [ 1678.228058][T23178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1678.228093][T23178] ? apparmor_socket_sendmsg+0x98/0x360 [ 1678.228123][T23178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1678.228145][T23178] sock_sendmsg_nosec+0x14e/0x190 [ 1678.228205][T23178] ____sys_sendmsg+0x54e/0x850 [ 1678.228243][T23178] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1678.228287][T23178] ? import_iovec+0x73/0xa0 [ 1678.228321][T23178] ___sys_sendmsg+0x2a5/0x360 [ 1678.228347][T23178] ? __lock_acquire+0x747/0x2de0 [ 1678.228379][T23178] ? __pfx____sys_sendmsg+0x10/0x10 [ 1678.228413][T23178] ? futex_wait+0x2a2/0x390 [ 1678.228485][T23178] ? __fget_files+0x2a/0x420 [ 1678.228533][T23178] ? __fget_files+0x3a2/0x420 [ 1678.228577][T23178] __x64_sys_sendmsg+0x1b1/0x290 [ 1678.228611][T23178] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1678.228671][T23178] do_syscall_64+0x166/0x520 [ 1678.228703][T23178] ? trace_irq_disable+0x3b/0x140 [ 1678.228726][T23178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1678.228749][T23178] ? clear_bhb_loop+0x70/0xc0 [ 1678.228777][T23178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1678.228799][T23178] RIP: 0033:0x7feaf359e159 [ 1678.228821][T23178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1678.228840][T23178] RSP: 002b:00007feaf4464028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1678.228864][T23178] RAX: ffffffffffffffda RBX: 00007feaf3825fa0 RCX: 00007feaf359e159 [ 1678.228880][T23178] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 1678.228894][T23178] RBP: 00007feaf363506b R08: 0000000000000000 R09: 0000000000000000 [ 1678.228907][T23178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1678.228920][T23178] R13: 00007feaf3826038 R14: 00007feaf3825fa0 R15: 00007ffd52cca5d8 [ 1678.228962][T23178] [ 1678.379965][T23181] netlink: 224 bytes leftover after parsing attributes in process `syz.2.21134'. [ 1679.241487][T23079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1679.241515][T23079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1679.415189][T23195] syzkaller0: entered promiscuous mode [ 1679.415216][T23195] syzkaller0: entered allmulticast mode [ 1679.458888][T23193] ip6gre3: entered promiscuous mode [ 1679.458920][T23193] ip6gre3: entered allmulticast mode [ 1679.520901][T23198] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21142'. [ 1680.040423][T23078] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1680.040774][T23078] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1680.069872][T11046] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1680.130185][T11046] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1680.153354][T11046] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1680.260260][T23202] A link change request failed with some changes committed already. Interface – may have been left with an inconsistent configuration, please check. [ 1680.644650][T23220] lo: left promiscuous mode [ 1680.655398][T23220] tunl0: left promiscuous mode [ 1680.665944][T23220] gre0: left promiscuous mode [ 1680.745173][T23220] ip_vti0: left promiscuous mode [ 1680.757807][T23220] ip6_vti0: left promiscuous mode [ 1680.784727][T23220] sit0: left promiscuous mode [ 1680.868763][T23220] ip6tnl0: left promiscuous mode [ 1680.878658][T23220] ip6gre0: left promiscuous mode [ 1680.887152][T23220] ip6gretap0: left promiscuous mode [ 1680.896524][T23220] bond0: left promiscuous mode [ 1680.905575][T23220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1680.908125][T23220] team0: left promiscuous mode [ 1680.932147][T23220] 8021q: adding VLAN 0 to HW filter on device team0 [ 1680.935965][T23220] nlmon0: left promiscuous mode [ 1680.942773][T23220] batadv0: left promiscuous mode [ 1680.944054][T23220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1680.945773][T23220] vxcan0: left promiscuous mode [ 1680.955647][T23220] vxcan1: left promiscuous mode [ 1680.959046][T11046] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1680.962824][T23220] veth0: left promiscuous mode [ 1680.970861][T23220] veth1: left promiscuous mode [ 1680.971308][T23220] wg0: left promiscuous mode [ 1680.976261][T23220] wg2: left promiscuous mode [ 1680.976673][T23220] veth0_to_bridge: left promiscuous mode [ 1680.977077][T23220] bridge_slave_0: left promiscuous mode [ 1680.981509][T23220] veth1_to_bridge: left promiscuous mode [ 1680.985515][T23220] bond_slave_0: left promiscuous mode [ 1680.986064][T23220] veth1_to_bond: left promiscuous mode [ 1680.986523][T23220] bond_slave_1: left promiscuous mode [ 1680.986970][T23220] veth0_to_team: left promiscuous mode [ 1680.991141][T23220] team_slave_0: left promiscuous mode [ 1680.991964][T23220] veth1_to_team: left promiscuous mode [ 1680.995145][T23220] team_slave_1: left promiscuous mode [ 1680.998358][T23220] veth0_to_batadv: left promiscuous mode [ 1681.001096][T23220] batadv_slave_0: left promiscuous mode [ 1681.005640][T23220] veth0_to_hsr: left promiscuous mode [ 1681.008306][T23220] hsr_slave_0: left promiscuous mode [ 1681.010013][T23220] veth1_virt_wifi: left promiscuous mode [ 1681.010667][T23220] veth0_virt_wifi: left promiscuous mode [ 1681.011091][T23220] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1681.041626][T11046] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1681.791665][T23247] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1681.923059][T23252] netlink: 64 bytes leftover after parsing attributes in process `syz.2.21157'. [ 1682.825499][T23253] veth0_macvtap: left promiscuous mode [ 1682.833853][T23253] veth0_macvtap: entered promiscuous mode [ 1682.875207][T23253] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1682.884776][T23265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21158'. [ 1682.920504][T23078] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1682.920557][T23078] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1682.920593][T23078] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1682.920625][T23078] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1683.376512][T23282] netlink: 16 bytes leftover after parsing attributes in process `syz.2.21163'. [ 1683.622691][T23282] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication [ 1683.831577][T23291] bond0: (slave gretap0): Error: Slave does not support XDP [ 1684.397851][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1684.474683][T23310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21167'. [ 1685.703289][T23344] netlink: 'syz.0.21176': attribute type 1 has an invalid length. [ 1685.991037][T23357] netlink: 'syz.4.21177': attribute type 1 has an invalid length. [ 1686.032107][T23344] bond32: option mode: invalid value (7) [ 1686.034021][T23344] bond32 (unregistering): Released all slaves [ 1686.100021][T23363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21177'. [ 1686.110210][T23364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21179'. [ 1686.215178][T23348] bridge0: port 4(bridge_slave_0) entered blocking state [ 1686.215601][T23348] bridge0: port 4(bridge_slave_0) entered disabled state [ 1686.215859][T23348] bridge_slave_0: entered allmulticast mode [ 1686.222736][T23348] bridge_slave_0: entered promiscuous mode [ 1686.223975][T23348] bridge0: port 4(bridge_slave_0) entered blocking state [ 1686.224138][T23348] bridge0: port 4(bridge_slave_0) entered forwarding state [ 1686.251725][T23349] bond18: (slave dummy0): Removing an active aggregator [ 1686.257916][T23349] bond18: (slave dummy0): Releasing backup interface [ 1686.477404][T23357] bond24: entered promiscuous mode [ 1686.478901][T23357] 8021q: adding VLAN 0 to HW filter on device bond24 [ 1686.480303][T23358] bridge_slave_0: left allmulticast mode [ 1686.480330][T23358] bridge_slave_0: left promiscuous mode [ 1686.480577][T23358] bridge0: port 4(bridge_slave_0) entered disabled state [ 1686.721336][T23361] 8021q: adding VLAN 0 to HW filter on device bond24 [ 1686.721768][T23361] bond24: (slave gre7): The slave device specified does not support setting the MAC address [ 1686.721791][T23361] bond24: (slave gre7): Setting fail_over_mac to active for active-backup mode [ 1686.756399][T23361] bond24: (slave gre7): making interface the new active one [ 1686.756426][T23361] gre7: entered promiscuous mode [ 1686.771524][T23361] bond24: (slave gre7): Enslaving as an active interface with an up link [ 1686.771816][T23362] syz_tun: left allmulticast mode [ 1686.771847][T23362] syz_tun: left promiscuous mode [ 1686.774308][T23362] bridge0: port 3(syz_tun) entered disabled state [ 1686.800651][T23362] veth1_to_bond: left allmulticast mode [ 1686.806638][T23362] bridge0: port 2(veth1_to_bond) entered disabled state [ 1686.856358][T23362] batadv0: left allmulticast mode [ 1686.856630][T23362] bridge0: port 1(batadv0) entered disabled state [ 1687.017008][T23363] bond24 (unregistering): (slave gre7): Releasing backup interface [ 1687.017040][T23363] gre7: left promiscuous mode [ 1687.041864][T23363] bond24 (unregistering): Released all slaves [ 1687.311455][T23364] bond18: option lacp_active: invalid value (5) [ 1687.333929][T23364] bond18 (unregistering): Released all slaves [ 1687.632310][T23395] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 1687.981406][T23413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21187'. [ 1688.393645][T23426] ip_tables: iptables: counters copy to user failed while replacing table [ 1688.473591][T23420] wg2 speed is unknown, defaulting to 1000 [ 1688.511643][T23427] lo: entered promiscuous mode [ 1688.514597][T23427] tunl0: entered promiscuous mode [ 1688.536994][T23427] gre0: entered promiscuous mode [ 1688.551076][T23427] ip_vti0: entered promiscuous mode [ 1688.551571][T23427] ip6_vti0: entered promiscuous mode [ 1688.552017][T23427] sit0: entered promiscuous mode [ 1688.552378][T23427] ip6tnl0: entered promiscuous mode [ 1688.552606][T23427] ip6gre0: entered promiscuous mode [ 1688.552968][T23427] tipc: Resetting bearer [ 1688.553001][T23427] syz_tun: entered promiscuous mode [ 1688.553504][T23427] vcan0: entered promiscuous mode [ 1688.553900][T23427] bond0: entered promiscuous mode [ 1688.553911][T23427] team0: entered promiscuous mode [ 1688.554441][T23427] nlmon0: entered promiscuous mode [ 1688.554913][T23427] veth1: entered promiscuous mode [ 1688.555301][T23427] wg0: entered promiscuous mode [ 1688.555553][T23427] wg1: entered promiscuous mode [ 1688.555788][T23427] wg2: entered promiscuous mode [ 1688.556051][T23427] veth0_to_bridge: entered promiscuous mode [ 1688.669189][T23427] bridge_slave_0: entered promiscuous mode [ 1688.677857][T23427] veth1_to_bridge: entered promiscuous mode [ 1688.678376][T23427] bridge_slave_1: entered promiscuous mode [ 1688.678813][T23427] veth0_to_bond: entered promiscuous mode [ 1688.679213][T23427] bond_slave_0: entered promiscuous mode [ 1688.679669][T23427] veth1_to_bond: entered promiscuous mode [ 1688.680098][T23427] bond_slave_1: entered promiscuous mode [ 1688.680601][T23427] veth0_to_team: entered promiscuous mode [ 1688.681035][T23427] team_slave_0: entered promiscuous mode [ 1688.681505][T23427] C: entered promiscuous mode [ 1688.681940][T23427] team_slave_1: entered promiscuous mode [ 1688.682459][T23427] veth0_to_batadv: entered promiscuous mode [ 1688.682882][T23427] batadv_slave_0: entered promiscuous mode [ 1688.683323][T23427] veth1_to_batadv: entered promiscuous mode [ 1688.683766][T23427] batadv_slave_1: entered promiscuous mode [ 1688.685321][T23427] xfrm0: entered promiscuous mode [ 1688.685729][T23427] veth1_to_hsr: entered promiscuous mode [ 1688.686128][T23427] hsr_slave_1: entered promiscuous mode [ 1689.181552][T23439] netlink: 'syz.1.21192': attribute type 1 has an invalid length. [ 1689.415275][T23439] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1689.416884][T23443] veth0_to_bond: left promiscuous mode [ 1689.463378][T23443] bond18: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1689.546997][T23445] bridge0: entered promiscuous mode [ 1689.585961][T23445] bond18: (slave bridge0): Enslaving as an active interface with an up link [ 1689.699862][T23420] syzkaller0 speed is unknown, defaulting to 1000 [ 1690.053179][T23458] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1691.263236][T23470] wg2 speed is unknown, defaulting to 1000 [ 1691.359727][T23480] netlink: 32 bytes leftover after parsing attributes in process `syz.1.21210'. [ 1692.490781][T23493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21202'. [ 1692.684742][T23488] tipc: Resetting bearer [ 1692.708821][T23496] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 1693.212501][T23488] vlan0: left promiscuous mode [ 1693.212954][T23488] macvlan0: left promiscuous mode [ 1693.213128][T23488] macvlan1: left promiscuous mode [ 1693.213352][T23488] ipvlan1: left promiscuous mode [ 1693.213836][T23488] macvtap0: left promiscuous mode [ 1693.214012][T23488] macsec0: left promiscuous mode [ 1693.214141][T23488] geneve0: left promiscuous mode [ 1693.214336][T23488] geneve1: left promiscuous mode [ 1693.214513][T23488] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 1693.214686][T23488] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 1693.214857][T23488] bridge1: left promiscuous mode [ 1693.215006][T23488] geneve2: left promiscuous mode [ 1693.215173][T23488] ip6tnl1: left promiscuous mode [ 1693.215345][T23488] mac80211_hwsim hwsim13 wlan2: left promiscuous mode [ 1693.215510][T23488] veth2: left promiscuous mode [ 1693.215672][T23488] veth3: left promiscuous mode [ 1693.215830][T23488] ip6erspan0: left promiscuous mode [ 1693.215964][T23488] ip6gretap1: left promiscuous mode [ 1693.216267][T23488] geneve3: left promiscuous mode [ 1693.216389][T23488] gtp0: left promiscuous mode [ 1693.216558][T23488] gretap1: left promiscuous mode [ 1693.216694][T23488] bareudp0: left promiscuous mode [ 1693.217035][T23488] mac80211_hwsim hwsim25 wlan3: left promiscuous mode [ 1693.217203][T23488] ip6erspan1: left promiscuous mode [ 1693.310624][T23488] mac80211_hwsim hwsim26 wlan4: left promiscuous mode [ 1693.310790][T23488] gtp1: left promiscuous mode [ 1693.310955][T23488] mac80211_hwsim hwsim27 wlan5: left promiscuous mode [ 1693.311107][T23488] bridge2: left promiscuous mode [ 1693.311612][T23488] ip6tnl2: left promiscuous mode [ 1693.311732][T23488] mac80211_hwsim hwsim28 wlan6: left promiscuous mode [ 1693.311880][T23488] mac80211_hwsim hwsim34 wlan7: left promiscuous mode [ 1693.312025][T23488] ip6tnl3: left promiscuous mode [ 1693.312143][T23488] mac80211_hwsim hwsim36 wlan8: left promiscuous mode [ 1693.315070][T23488] ip6gre1: left promiscuous mode [ 1693.315195][T23488] mac80211_hwsim hwsim38 wlan9: left promiscuous mode [ 1693.315373][T23488] mac80211_hwsim hwsim40 wlan10: left promiscuous mode [ 1693.315534][T23488] syztnl1: left promiscuous mode [ 1693.315649][T23488] veth4: left promiscuous mode [ 1693.315760][T23488] veth5: left promiscuous mode [ 1693.315867][T23488] vsockmon0: left promiscuous mode [ 1693.316010][T23488] gre1: left promiscuous mode [ 1693.316126][T23488] ip6tnl4: left promiscuous mode [ 1693.316239][T23488] syztnl2: left promiscuous mode [ 1693.316353][T23488] dummy1: left promiscuous mode [ 1693.320797][T23488] geneve4: left promiscuous mode [ 1693.320968][T23488] bridge3: left promiscuous mode [ 1693.321099][T23488] ip6gretap2: left promiscuous mode [ 1693.321216][T23488] : left promiscuous mode [ 1693.322833][T23488] pim6reg: left promiscuous mode [ 1693.322988][T23488] netdevsim netdevsim3 eth0: left promiscuous mode [ 1693.323119][T23488] netdevsim netdevsim3 eth1: left promiscuous mode [ 1693.323240][T23488] netdevsim netdevsim3 eth2: left promiscuous mode [ 1693.323359][T23488] netdevsim netdevsim3 eth3: left promiscuous mode [ 1693.323488][T23488] ip6tnl5: left promiscuous mode [ 1693.328183][T23488] syztnl0: left promiscuous mode [ 1693.328316][T23488] ip6gre2: left promiscuous mode [ 1693.328329][T23488] ip6gre2: left allmulticast mode [ 1693.328455][T23488] mac80211_hwsim hwsim54 wlan11: left promiscuous mode [ 1693.328605][T23488] vxlan0: left promiscuous mode [ 1693.328724][T23488] macvlan2: left promiscuous mode [ 1693.328925][T23488] macvlan3: left promiscuous mode [ 1693.331340][T23488] ipvlan2: left promiscuous mode [ 1693.331356][T23488] ipvlan2: left allmulticast mode [ 1693.331368][T23488] macvlan1: left allmulticast mode [ 1693.331614][T23488] bond1: left promiscuous mode [ 1693.358866][T23488] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 1693.370352][T23488] mac80211_hwsim hwsim55 wlan12: left promiscuous mode [ 1693.370536][T23488] batadv0: left promiscuous mode [ 1693.370696][T23488] bridge4: left promiscuous mode [ 1693.370825][T23488] mac80211_hwsim hwsim56 wlan13: left promiscuous mode [ 1693.370976][T23488] gre2: left promiscuous mode [ 1693.371095][T23488] bond2: left promiscuous mode [ 1693.371216][T23488] ip6tnl6: left promiscuous mode [ 1693.371356][T23488] sit1: left promiscuous mode [ 1693.373990][T23488] bridge5: left promiscuous mode [ 1693.374012][T23488] bridge5: left allmulticast mode [ 1693.374170][T23488] ip6tnl7: left promiscuous mode [ 1693.374292][T23488] hsr1: left promiscuous mode [ 1693.374307][T23488] hsr1: left allmulticast mode [ 1693.374319][T23488] gretap0: left allmulticast mode [ 1693.374539][T23488] vxlan1: left promiscuous mode [ 1693.374667][T23488] xfrm1: left promiscuous mode [ 1693.374820][T23488] vxlan2: left promiscuous mode [ 1693.374937][T23488] gtp2: left promiscuous mode [ 1693.375099][T23488] bond0: left promiscuous mode [ 1693.380701][T23488] xfrm2: left promiscuous mode [ 1693.380872][T23488] bridge6: left promiscuous mode [ 1693.381015][T23488] gtp3: left promiscuous mode [ 1693.385948][T23488] syzkaller0.1: left promiscuous mode [ 1693.385972][T23488] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 1693.392041][T23488] gre3: left promiscuous mode [ 1693.392207][T23488] veth6: left promiscuous mode [ 1693.392368][T23488] veth7: left promiscuous mode [ 1693.392715][T23488] bridge7: left promiscuous mode [ 1693.392848][T23488] veth8: left promiscuous mode [ 1693.393025][T23488] veth9: left promiscuous mode [ 1693.393172][T23488] bridge8: left promiscuous mode [ 1693.393291][T23488] veth10: left promiscuous mode [ 1693.395695][T23488] veth11: left promiscuous mode [ 1693.395846][T23488] veth12: left promiscuous mode [ 1693.395995][T23488] veth13: left promiscuous mode [ 1693.396144][T23488] veth14: left promiscuous mode [ 1693.396292][T23488] veth15: left promiscuous mode [ 1693.396444][T23488] veth16: left promiscuous mode [ 1693.396587][T23488] veth17: left promiscuous mode [ 1693.396734][T23488] veth18: left promiscuous mode [ 1693.396879][T23488] veth19: left promiscuous mode [ 1693.397023][T23488] bridge9: left promiscuous mode [ 1693.402774][T23488] vlan2: left promiscuous mode [ 1693.417862][T23488] bridge10: left promiscuous mode [ 1693.418020][T23488] bridge11: left promiscuous mode [ 1693.418144][T23488] geneve5: left promiscuous mode [ 1693.418570][T23488] vlan3: left promiscuous mode [ 1693.418584][T23488] bond3: left promiscuous mode [ 1693.418996][T23488] geneve6: left promiscuous mode [ 1693.422926][T23488] bond4: left promiscuous mode [ 1693.423064][T23488] veth20: left promiscuous mode [ 1693.423212][T23488] veth21: left promiscuous mode [ 1693.423372][T23488] gre4: left promiscuous mode [ 1693.423482][T23488] bond5: left promiscuous mode [ 1693.423495][T23488] bond5: left allmulticast mode [ 1693.439866][T23488] macvtap1: left allmulticast mode [ 1693.441763][T23488] bond7: left promiscuous mode [ 1693.441782][T23488] bridge12: left promiscuous mode [ 1693.452792][T23488] macvtap2: left allmulticast mode [ 1693.452966][T23488] macvtap3: left allmulticast mode [ 1693.461960][T23488] bond8: left promiscuous mode [ 1693.461981][T23488] bridge13: left promiscuous mode [ 1693.472628][T23488] vlan4: left allmulticast mode [ 1693.472648][T23488] bond8: left allmulticast mode [ 1693.472659][T23488] bridge13: left allmulticast mode [ 1693.492904][T23488] veth25: left allmulticast mode [ 1693.512019][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1693.514544][T23488] ip6gre3: left promiscuous mode [ 1693.514565][T23488] ip6gre3: left allmulticast mode [ 1693.526110][T23470] syzkaller0 speed is unknown, defaulting to 1000 [ 1694.194661][T23504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21204'. [ 1696.892874][T23538] netlink: 120 bytes leftover after parsing attributes in process `syz.0.21213'. [ 1697.187566][ T5624] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1700.504011][T23558] infiniband syz0: set down [ 1700.504039][T23558] infiniband syz0: added bond_slave_1 [ 1700.577899][T23558] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1700.577943][T23558] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1700.577982][T23558] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1700.716379][T23558] RDS/IB: syz0: added [ 1700.716441][T23558] smc: adding ib device syz0 with port count 1 [ 1700.716797][T23558] smc: ib device syz0 port 1 has pnetid SYZ2 (user defined) [ 1703.358391][T23579] PKCS7: Unknown OID: [4] (bad) [ 1703.358415][T23579] PKCS7: Only support pkcs7_signedData type [ 1703.522715][T23579] wg2 speed is unknown, defaulting to 1000 [ 1703.902254][T23583] netlink: 32 bytes leftover after parsing attributes in process `syz.2.21220'. [ 1704.060917][T23586] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 1704.164903][T23589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21221'. [ 1704.219466][T23589] netlink: 56 bytes leftover after parsing attributes in process `syz.3.21221'. [ 1704.279677][T23593] IPVS: stopping master sync thread 23586 ... [ 1704.818865][T23579] syzkaller0 speed is unknown, defaulting to 1000 [ 1704.948633][T23597] netlink: 20 bytes leftover after parsing attributes in process `syz.2.21222'. [ 1705.256544][T23601] netlink: 24 bytes leftover after parsing attributes in process `syz.2.21224'. [ 1705.265505][T23603] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21225'. [ 1705.265630][T23603] openvswitch: netlink: Message has 4 unknown bytes. [ 1705.379175][T23601] netlink: 104 bytes leftover after parsing attributes in process `syz.2.21224'. [ 1705.938972][T23619] team0: Port device veth0 removed [ 1705.963998][T23619] bond16: (slave veth0_to_bond): Releasing active interface [ 1705.964030][T23619] veth0_to_bond: left promiscuous mode [ 1705.988472][T23619] veth0_to_bond: left allmulticast mode [ 1706.026669][T23619] bond0: (slave bond_slave_0): Releasing backup interface [ 1706.095070][T23619] bond0: (slave bond_slave_1): Releasing backup interface [ 1706.163858][T23619] team0: Port device team_slave_0 removed [ 1706.229183][T23619] team0: Port device team_slave_1 removed [ 1706.239932][T23619] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1706.239958][T23619] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1706.274110][T23619] team0: Port device netdevsim1 removed [ 1706.309977][T23619] team0: Port device bridge10 removed [ 1706.313538][T23619] batman_adv: batadv0: Removing interface: vlan3 [ 1706.343661][T23619] bond9: (slave bond10): Releasing backup interface [ 1706.356961][T23619] bond15: (slave ip6gretap3): Releasing active interface [ 1706.357132][T23619] ip6gretap3: left allmulticast mode [ 1706.404726][T23619] bond19: (slave bridge15): Releasing backup interface [ 1706.404757][T23619] bridge15: left promiscuous mode [ 1706.404944][T23619] bridge15: left allmulticast mode [ 1706.455345][T23619] bond21: (slave bridge0): Releasing backup interface [ 1706.455375][T23619] bond21: (slave bridge0): the permanent HWaddr of slave - 7a:69:7c:28:eb:b3 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1706.455408][T23619] bond21: (slave bridge16): making interface the new active one [ 1706.519899][T23619] bond21: (slave bridge16): Releasing backup interface [ 1706.581527][T23619] bond23: (slave bridge17): Releasing active interface [ 1706.672721][T23619] bond24: (slave bridge18): Releasing backup interface [ 1706.672756][T23619] bridge18: left promiscuous mode [ 1706.672987][T23619] bridge18: left allmulticast mode [ 1706.682591][T23625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21229'. [ 1706.818920][T23619] bond25: (slave veth15): Releasing backup interface [ 1706.912370][T23605] netlink: 28 bytes leftover after parsing attributes in process `syz.3.21226'. [ 1706.936813][T23618] 8021q: adding VLAN 0 to HW filter on device .` [ 1707.114527][T23618] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1707.114557][T23618] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1707.125505][T23618] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 1707.136544][T23618] veth1_vlan: left promiscuous mode [ 1707.145955][T23618] veth0_vlan: entered promiscuous mode [ 1707.149849][T23618] veth1_vlan: entered promiscuous mode [ 1707.173143][T23618] veth1_macvtap: left promiscuous mode [ 1707.191400][T23618] veth0_macvtap: left promiscuous mode [ 1707.196093][T23618] veth0_macvtap: entered promiscuous mode [ 1707.457756][ T5624] block nbd7: Receive control failed (result -32) [ 1707.463736][ T5624] block nbd7: Receive control failed (result -32) [ 1708.349381][T23618] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1708.363013][T23618] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1708.368790][T23618] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1708.376323][T23618] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1708.449730][T23618] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1708.456659][T23618] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1708.463306][T23618] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1708.464477][T23618] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 1708.507028][T20426] tipc: Resetting bearer [ 1708.607143][T31241] syz0: Port: 1 Link ACTIVE [ 1708.608851][T23074] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1708.608885][T23074] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1708.608910][T23074] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20003 - 0 [ 1708.608934][T23074] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 50250 - 0 [ 1708.641490][T23079] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1708.641524][T23079] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1708.641546][T23079] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20003 - 0 [ 1708.641568][T23079] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 50250 - 0 [ 1708.641608][T23079] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1708.641630][T23079] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1708.641651][T23079] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20003 - 0 [ 1708.641673][T23079] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 50250 - 0 [ 1708.641705][T23079] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1708.641727][T23079] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1708.641748][T23079] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20003 - 0 [ 1708.641769][T23079] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 50250 - 0 [ 1709.223128][T23651] netlink: 20 bytes leftover after parsing attributes in process `syz.1.21234'. [ 1709.447758][T23656] netlink: 48 bytes leftover after parsing attributes in process `syz.3.21235'. [ 1709.599721][T23660] netlink: 220 bytes leftover after parsing attributes in process `syz.2.21236'. [ 1709.621581][T23653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21235'. [ 1709.733143][T23661] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1710.263239][T23664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21237'. [ 1710.263269][T23664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21237'. [ 1710.315600][T23663] tipc: Resetting bearer [ 1710.517423][T23672] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21239'. [ 1710.517550][T23672] openvswitch: netlink: Message has 4 unknown bytes. [ 1710.610001][T23670] netlink: zone id is out of range [ 1710.610059][T23670] netlink: zone id is out of range [ 1710.610272][T23670] netlink: zone id is out of range [ 1710.610322][T23670] netlink: zone id is out of range [ 1710.610332][T23670] netlink: zone id is out of range [ 1710.610341][T23670] netlink: zone id is out of range [ 1710.610350][T23670] netlink: zone id is out of range [ 1710.610359][T23670] netlink: zone id is out of range [ 1710.610368][T23670] netlink: zone id is out of range [ 1711.607055][T23686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21242'. [ 1713.246466][T23718] wg2 speed is unknown, defaulting to 1000 [ 1713.675902][T23729] netlink: 4912 bytes leftover after parsing attributes in process `syz.2.21251'. [ 1714.075408][T23718] syzkaller0 speed is unknown, defaulting to 1000 [ 1714.908796][T23742] tipc: Resetting bearer [ 1714.925990][T23742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21255'. [ 1715.112496][T23742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21255'. [ 1715.304023][T23745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21254'. [ 1715.446433][T23753] netlink: 24 bytes leftover after parsing attributes in process `syz.4.21256'. [ 1715.493823][T23745] bond26: option lacp_active: invalid value (5) [ 1715.518078][T23745] bond26 (unregistering): Released all slaves [ 1716.941283][T23771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21259'. [ 1717.137663][T23770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21259'. [ 1717.545915][T23773] veth0_to_bond: Caught tx_queue_len zero misconfig [ 1718.159730][T23778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21262'. [ 1718.159758][T23778] netlink: 24 bytes leftover after parsing attributes in process `syz.0.21262'. [ 1718.160018][T23778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21262'. [ 1718.160050][T23778] netlink: 24 bytes leftover after parsing attributes in process `syz.0.21262'. [ 1719.528522][T23795] bond30: (slave .`): Releasing backup interface [ 1719.577954][T23795] team0: left allmulticast mode [ 1719.577980][T23795] bond25: left allmulticast mode [ 1719.578322][T23795] team0: left promiscuous mode [ 1719.578336][T23795] bond25: left promiscuous mode [ 1719.580912][T23795] bridge0: port 1(team0) entered disabled state [ 1719.622304][T23795] bond28: (slave veth0_to_bond): Releasing backup interface [ 1719.641014][T23795] net_ratelimit: 62 callbacks suppressed [ 1719.641039][T23795] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1719.948484][T23799] __nla_validate_parse: 2 callbacks suppressed [ 1719.948510][T23799] netlink: 20 bytes leftover after parsing attributes in process `syz.0.21265'. [ 1720.405780][T23803] netlink: 'syz.0.21267': attribute type 9 has an invalid length. [ 1720.633644][T23805] wg2 speed is unknown, defaulting to 1000 [ 1721.248055][T23805] syzkaller0 speed is unknown, defaulting to 1000 [ 1723.215349][T23811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21269'. [ 1723.327677][T23814] macsec0: entered promiscuous mode [ 1723.336062][T23814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21270'. [ 1723.337688][T23814] veth1_macvtap: left promiscuous mode [ 1723.361988][T23814] macsec0 (unregistering): left promiscuous mode [ 1723.927191][T23820] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21272'. [ 1724.892278][T23835] tipc: Resetting bearer [ 1725.064750][T23835] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1725.083297][T23835] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1725.099336][T23835] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1725.139461][T23835] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1725.174552][T23835] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1725.227759][T23835] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1725.254428][T23835] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1725.304599][T23835] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1725.313670][T23835] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1725.366768][T23851] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 1725.401047][T23835] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1725.481847][T23835] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1725.521814][T23835] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1725.576489][T23835] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1725.594061][T23835] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1725.620086][T23835] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1725.622839][T23835] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1725.790502][T23835] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1725.863672][T23835] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1725.923412][T23835] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1725.949674][T23835] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1725.952648][T23835] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1726.072917][T23835] A link change request failed with some changes committed already. Interface bond16 may have been left with an inconsistent configuration, please check. [ 1726.537734][T23079] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1726.537785][T23079] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1726.538024][T23079] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1726.538061][T23079] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1726.538095][T23079] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1726.538120][T23079] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1726.538153][T23079] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1726.538178][T23079] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1727.147803][T23882] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1727.152489][T23882] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1727.174281][T23882] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1727.184879][T23882] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1727.195862][T23081] wlan1: Trigger new scan to find an IBSS to join [ 1727.206350][T23882] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1727.379467][ T5624] block nbd8: Receive control failed (result -32) [ 1727.397103][T23887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21281'. [ 1727.631618][T23890] netlink: 'syz.4.21280': attribute type 1 has an invalid length. [ 1727.631645][T23890] netlink: 200 bytes leftover after parsing attributes in process `syz.4.21280'. [ 1728.127011][T23692] tipc: Disabling bearer [ 1728.656736][T23873] wg2 speed is unknown, defaulting to 1000 [ 1729.111082][T23873] syzkaller0 speed is unknown, defaulting to 1000 [ 1729.267658][ T5624] Bluetooth: hci5: command tx timeout [ 1729.953741][T23874] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1730.096869][T23873] bridge0: port 1(bridge_slave_0) entered blocking state [ 1730.097069][T23873] bridge0: port 1(bridge_slave_0) entered disabled state [ 1730.097802][T23873] bridge_slave_0: entered allmulticast mode [ 1730.100448][T23873] bridge_slave_0: entered promiscuous mode [ 1730.104782][T23873] bridge0: port 2(bridge_slave_1) entered blocking state [ 1730.104977][T23873] bridge0: port 2(bridge_slave_1) entered disabled state [ 1730.105142][T23873] bridge_slave_1: entered allmulticast mode [ 1730.107972][T23873] bridge_slave_1: entered promiscuous mode [ 1730.350836][T23873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1730.364342][T23873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1730.478446][T23946] xt_policy: output policy not valid in PREROUTING and INPUT [ 1730.636074][T23873] team0: Port device team_slave_0 added [ 1730.645622][T23873] team0: Port device team_slave_1 added [ 1730.863954][T23873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1730.863976][T23873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1730.864005][T23873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1730.965816][T23873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1730.965838][T23873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1730.965869][T23873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1731.281632][T20426] wlan1: Trigger new scan to find an IBSS to join [ 1731.342832][T23964] syzkaller0: entered promiscuous mode [ 1731.342858][T23964] syzkaller0: entered allmulticast mode [ 1731.350480][ T5624] Bluetooth: hci5: command tx timeout [ 1731.484619][T23873] hsr_slave_0: entered promiscuous mode [ 1731.491151][T23873] hsr_slave_1: entered promiscuous mode [ 1731.595739][T23970] bond0: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 1731.598823][T23970] netlink: 'syz.4.21291': attribute type 10 has an invalid length. [ 1731.610188][T23970] netlink: 108 bytes leftover after parsing attributes in process `syz.4.21291'. [ 1731.633272][T23970] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 1731.633904][T23941] xt_policy: output policy not valid in PREROUTING and INPUT [ 1731.900252][T23977] netlink: 20 bytes leftover after parsing attributes in process `syz.4.21294'. [ 1732.501295][T23873] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1732.506617][T23873] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1732.524039][T23873] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1732.551155][T23873] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1732.552600][T23873] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1732.578326][T23873] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1732.580671][T23873] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1732.606004][T23873] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1732.762168][T23995] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1732.799836][T23873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1732.854569][T23873] 8021q: adding VLAN 0 to HW filter on device team0 [ 1732.886161][T20426] bridge0: port 1(bridge_slave_0) entered blocking state [ 1732.886280][T20426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1732.931803][T20426] bridge0: port 2(bridge_slave_1) entered blocking state [ 1732.931929][T20426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1733.044528][T24000] netlink: 'syz.4.21297': attribute type 16 has an invalid length. [ 1733.044557][T24000] netlink: 'syz.4.21297': attribute type 3 has an invalid length. [ 1733.044571][T24000] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.21297'. [ 1733.047827][T23999] netlink: 64 bytes leftover after parsing attributes in process `syz.2.21298'. [ 1733.181004][T23999] syzkaller1: entered promiscuous mode [ 1733.181033][T23999] syzkaller1: entered allmulticast mode [ 1733.267925][T23081] wlan1: Creating new IBSS network, BSSID 5e:81:a7:52:fa:61 [ 1733.427826][ T5624] Bluetooth: hci5: command tx timeout [ 1733.489824][T24004] bond19 (unregistering): Released all slaves [ 1733.682748][T24009] netlink: 40 bytes leftover after parsing attributes in process `syz.2.21298'. [ 1734.288827][T24024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21303'. [ 1734.381354][T24022] netlink: 16 bytes leftover after parsing attributes in process `syz.4.21302'. [ 1734.383397][T24024] tipc: Disabling bearer [ 1734.403886][T24022] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21302'. [ 1734.530621][T24031] netlink: 9 bytes leftover after parsing attributes in process `syz.2.21304'. [ 1734.637581][T24031] netlink: 5 bytes leftover after parsing attributes in process `syz.2.21304'. [ 1734.638409][T24031] 0ªî{X¹¦: renamed from gretap0 [ 1734.682193][T24031] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1734.978773][T24035] wg2 speed is unknown, defaulting to 1000 [ 1735.452556][T23873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1735.507890][ T5624] Bluetooth: hci5: command tx timeout [ 1735.904361][T24035] syzkaller0 speed is unknown, defaulting to 1000 [ 1736.104348][T24064] netlink: 40 bytes leftover after parsing attributes in process `syz.1.21310'. [ 1736.433951][T23873] veth0_vlan: entered promiscuous mode [ 1736.470712][T23873] veth1_vlan: entered promiscuous mode [ 1736.674286][T23873] veth0_macvtap: entered promiscuous mode [ 1736.699799][T23873] veth1_macvtap: entered promiscuous mode [ 1736.835466][T23873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1737.013105][T23873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1737.247810][T23078] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1737.289374][T23079] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1737.289425][T23079] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1737.289469][T23079] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1737.821547][T23078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1737.821575][T23078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1738.267033][ T3358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1738.267059][ T3358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1738.457189][T24092] siw: device registration error -23 [ 1738.499581][T24091] netlink: 'syz.1.21316': attribute type 16 has an invalid length. [ 1738.499621][T24091] netlink: 'syz.1.21316': attribute type 17 has an invalid length. [ 1738.499740][T24091] lo: left promiscuous mode [ 1738.531738][T24091] tunl0: left promiscuous mode [ 1738.535442][T24091] gre0: left promiscuous mode [ 1738.580704][T24091] gretap0: left promiscuous mode [ 1738.661628][T24091] ip_vti0: left promiscuous mode [ 1738.672407][T24091] ip6_vti0: left promiscuous mode [ 1738.684725][T24096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21317'. [ 1738.684859][T24096] openvswitch: netlink: Message has 4 unknown bytes. [ 1738.685785][T24091] sit0: left promiscuous mode [ 1738.732707][T24091] ip6tnl0: left promiscuous mode [ 1738.745425][T24091] ip6gre0: left promiscuous mode [ 1738.751780][T24091] syz_tun: left promiscuous mode [ 1738.754953][T24089] netlink: 28 bytes leftover after parsing attributes in process `syz.2.21315'. [ 1738.761261][T24091] ip6gretap0: left promiscuous mode [ 1738.773376][T24091] vcan0: left promiscuous mode [ 1738.779993][T24091] bond0: left promiscuous mode [ 1738.808326][T24091] team0: left promiscuous mode [ 1738.810916][T24091] 8021q: adding VLAN 0 to HW filter on device team0 [ 1738.813240][T24091] nlmon0: left promiscuous mode [ 1738.823014][T24091] veth1: left promiscuous mode [ 1738.847657][T24091] wg0: left promiscuous mode [ 1738.862164][T24091] wg1: left promiscuous mode [ 1738.895597][T24091] wg2: left promiscuous mode [ 1738.915512][T24091] veth0_to_bridge: left promiscuous mode [ 1738.936643][T24091] bridge_slave_0: left promiscuous mode [ 1738.945432][T24091] veth1_to_bridge: left promiscuous mode [ 1738.953166][T24091] bridge_slave_1: left promiscuous mode [ 1738.960113][T24091] bond_slave_0: left promiscuous mode [ 1738.962606][T24091] veth1_to_bond: left promiscuous mode [ 1738.969445][T24091] bond_slave_1: left promiscuous mode [ 1738.975266][T24091] veth0_to_team: left promiscuous mode [ 1738.982342][T24091] team_slave_0: left promiscuous mode [ 1738.984852][T24091] C: left promiscuous mode [ 1738.992875][T24091] team_slave_1: left promiscuous mode [ 1738.995985][T24091] veth0_to_batadv: left promiscuous mode [ 1739.003033][T24091] batadv_slave_0: left promiscuous mode [ 1739.006975][T24091] veth1_to_batadv: left promiscuous mode [ 1739.016992][T24091] batadv_slave_1: left promiscuous mode [ 1739.024711][T24091] xfrm0: left promiscuous mode [ 1739.034286][T24091] veth1_to_hsr: left promiscuous mode [ 1739.041093][T24091] hsr_slave_1: left promiscuous mode [ 1739.053146][T24091] veth0_macvtap: entered promiscuous mode [ 1739.085903][T24091] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1739.130649][T24091] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1739.158534][T24091] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1739.398595][T24091] ip6erspan0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1739.462412][T24091] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1739.543241][T24091] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1739.675945][T24091] ip6gretap0: entered promiscuous mode [ 1739.743626][T24091] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 1739.780576][T24091] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1739.800440][T24091] gretap0: entered promiscuous mode [ 1739.884952][T24105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21318'. [ 1740.024350][T24091] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1740.068784][T24091] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1740.075954][T24091] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1740.180456][T24091] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1740.190021][T24091] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1740.195130][T24091] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1740.212788][T24091] netdevsim netdevsim1 eth0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1740.215665][T24091] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1740.231253][T24091] netdevsim netdevsim1 eth1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1740.233038][T24091] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1740.241616][T24091] netdevsim netdevsim1 eth2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1740.244450][T24091] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1740.258814][T24091] netdevsim netdevsim1 eth3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1740.260717][T24091] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1740.306917][T24091] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1740.319890][T24091] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1740.325069][T24091] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1740.366314][T24091] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1740.375319][T24091] macvtap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1740.376013][T24091] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1740.382848][T24091] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1740.385028][T24091] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1740.393036][T24091] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1740.399798][T24091] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1740.416385][T24091] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1740.435147][T24091] bridge13: port 1(erspan0) entered blocking state [ 1740.435325][T24091] bridge13: port 1(erspan0) entered forwarding state [ 1740.445716][T24091] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 1740.453757][T24091] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1740.458522][T24091] bridge0: left promiscuous mode [ 1740.504948][T20426] bond16: (slave bridge10): link status up again after 0 ms [ 1740.531553][T23081] bond16: (slave bridge10): link status up again after 0 ms [ 1740.552366][T23081] bond16: (slave bridge10): link status up again after 0 ms [ 1740.578795][T20426] bond16: (slave bridge10): link status up again after 0 ms [ 1740.615190][T20426] bond16: (slave bridge10): link status up again after 0 ms [ 1740.635881][T23079] bond16: (slave bridge10): link status up again after 0 ms [ 1740.649275][T20426] bond16: (slave bridge10): link status up again after 0 ms [ 1740.669613][T20426] bond16: (slave bridge10): link status up again after 0 ms [ 1740.700736][T20426] bond16: (slave bridge10): link status up again after 0 ms [ 1740.712548][T24118] netlink: 20 bytes leftover after parsing attributes in process `syz.1.21319'. [ 1740.861757][T24102] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1741.009034][T23078] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1741.009073][T23078] netdevsim netdevsim1 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 1741.009099][T23078] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1741.043735][T24125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21320'. [ 1741.080886][T23078] bond10: (slave veth23): link status definitely up, 10000 Mbps full duplex [ 1741.081295][T23078] bond10: (slave veth23): making interface the new active one [ 1741.122362][T23078] bond10: active interface up! [ 1741.530184][ T3356] tipc: Subscription rejected, illegal request [ 1741.761766][T23081] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1741.766997][T23081] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1741.769886][T23081] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1741.782981][T23081] netdevsim netdevsim1 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 1741.783013][T23081] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1741.802224][T22538] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1741.816269][T23081] bond9: (slave veth21): link status definitely up, 10000 Mbps full duplex [ 1741.918153][T22538] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1741.954107][T23081] bond9: (slave veth21): making interface the new active one [ 1742.132555][T23081] bond9: active interface up! [ 1742.349309][ T3358] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1742.349348][ T3358] netdevsim netdevsim1 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 1742.349374][ T3358] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1742.413213][T18692] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1742.477897][ T3358] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1742.477937][ T3358] netdevsim netdevsim1 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 1742.477962][ T3358] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1742.653507][ T3358] bond11: (slave veth25): link status definitely up, 10000 Mbps full duplex [ 1742.673178][ T3358] bond11: (slave veth25): making interface the new active one [ 1742.690205][T18691] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1742.706793][ T3358] bond11: active interface up! [ 1742.710812][T31241] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1742.747137][T24168] netlink: 'syz.5.21326': attribute type 4 has an invalid length. [ 1745.588331][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1751.049530][T24155] Increase LOCKDEP_CIRCULAR_QUEUE_BITS to avoid this warning: [ 1751.049566][T24155] ------------[ cut here ]------------ [ 1751.049577][T24155] lockdep bfs error:-1 [ 1751.049587][T24155] WARNING: kernel/locking/lockdep.c:2103 at print_bfs_bug+0x20/0x40, CPU#0: syz.4.21324/24155 [ 1751.078594][T24155] Modules linked in: [ 1751.082748][T24155] CPU: 0 UID: 0 PID: 24155 Comm: syz.4.21324 Not tainted syzkaller #0 PREEMPT(full) [ 1751.094092][T24155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1751.104983][T24155] RIP: 0010:print_bfs_bug+0x22/0x40 [ 1751.111037][T24155] Code: 90 90 90 90 90 90 90 90 55 53 89 fb e8 e7 45 38 03 89 c5 e8 c0 85 ff ff 85 ed 74 13 83 fb ff 74 16 48 8d 3d d0 3a d9 0e 89 de <67> 48 0f b9 3a 5b 5d c3 cc cc cc cc cc 48 c7 c7 c4 86 59 8e e8 25 [ 1751.131435][T24155] RSP: 0018:ffffc900024ce4c8 EFLAGS: 00010046 [ 1751.137702][T24155] RAX: 000000000000003b RBX: 00000000ffffffff RCX: b34ef389312f7700 [ 1751.145937][T24155] RDX: ffffc90010bc3000 RSI: 00000000ffffffff RDI: ffffffff907ce080 [ 1751.154092][T24155] RBP: 0000000000000001 R08: ffffc900024ce247 R09: 1ffff92000499c48 [ 1751.162370][T24155] R10: dffffc0000000000 R11: fffff52000499c49 R12: 0000000000000054 [ 1751.170915][T24155] R13: ffffffff94447058 R14: ffffffff9739a9d8 R15: ffffffff9739aa48 [ 1751.179040][T24155] FS: 00007fda964486c0(0000) GS:ffff888124cdc000(0000) knlGS:0000000000000000 [ 1751.189564][T24155] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1751.196345][T24155] CR2: 00007f7f4363d35f CR3: 000000007ba60000 CR4: 00000000003526f0 [ 1751.205045][T24155] Call Trace: [ 1751.208728][T24155] [ 1751.211787][T24155] __lock_acquire+0x25ed/0x2de0 [ 1751.217097][T24155] lock_acquire+0x115/0x350 [ 1751.221741][T24155] ? ktime_get+0x45/0x220 [ 1751.226182][T24155] ? ktime_get+0x45/0x220 [ 1751.230921][T24155] seqcount_lockdep_reader_access+0x55/0x100 [ 1751.237285][T24155] ? ktime_get+0x45/0x220 [ 1751.241633][T24155] ktime_get+0x45/0x220 [ 1751.245926][T24155] clockevents_program_event+0x290/0x630 [ 1751.251999][T24155] ? __pfx_clockevents_program_event+0x10/0x10 [ 1751.258284][T24155] ? tick_program_event+0x8f/0x120 [ 1751.263496][T24155] __hrtimer_rearm_deferred+0x36c/0x4b0 [ 1751.269156][T24155] irqentry_exit+0x8d3/0x910 [ 1751.273753][T24155] ? trace_irq_disable+0x3b/0x140 [ 1751.278915][T24155] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1751.285091][T24155] RIP: 0010:lock_acquire+0x232/0x350 [ 1751.290463][T24155] Code: ff ff ff e8 b0 8d 42 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 42 f8 f0 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 87 92 d9 [ 1751.311566][T24155] RSP: 0018:ffffc900024ce930 EFLAGS: 00000296 [ 1751.317809][T24155] RAX: b34ef389312f7700 RBX: 0000000000000001 RCX: 8000000000000201 [ 1751.325986][T24155] RDX: ffff88801e36ab18 RSI: ffffffff8e688cc7 RDI: ffffffff8c6dad80 [ 1751.334840][T24155] RBP: ffff88801e369f40 R08: 0000000000000008 R09: ffffffff96b976f8 [ 1751.343182][T24155] R10: 0000000021b7008f R11: 000000002c5f9b07 R12: ffff888055a7e170 [ 1751.351396][T24155] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000246 [ 1751.359551][T24155] ? dev_deactivate_many+0xade/0xda0 [ 1751.365089][T24155] _raw_spin_lock_bh+0x36/0x50 [ 1751.370237][T24155] ? dev_deactivate_many+0xade/0xda0 [ 1751.375639][T24155] dev_deactivate_many+0xade/0xda0 [ 1751.380754][T24155] ? dev_deactivate_many+0x25d/0xda0 [ 1751.386124][T24155] __dev_close_many+0x180/0x6e0 [ 1751.391111][T24155] ? __pfx___dev_close_many+0x10/0x10 [ 1751.396562][T24155] ? __dev_change_flags+0x2e2/0x820 [ 1751.401950][T24155] ? __local_bh_enable_ip+0xd6/0x140 [ 1751.407314][T24155] __dev_change_flags+0x3f5/0x820 [ 1751.412537][T24155] ? __pfx___dev_change_flags+0x10/0x10 [ 1751.418108][T24155] ? __local_bh_enable_ip+0xd6/0x140 [ 1751.423427][T24155] ? lockdep_hardirqs_on+0x7b/0x110 [ 1751.429001][T24155] ? netdev_work_dequeue+0x225/0x250 [ 1751.434551][T24155] ? __local_bh_enable_ip+0xd6/0x140 [ 1751.440925][T24155] netif_change_flags+0x7c/0x1b0 [ 1751.446701][T24155] do_setlink+0xdd6/0x47a0 [ 1751.451225][T24155] ? __lock_acquire+0x747/0x2de0 [ 1751.456725][T24155] ? __pfx_do_setlink+0x10/0x10 [ 1751.462457][T24155] ? do_raw_spin_lock+0x12b/0x2f0 [ 1751.467518][T24155] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1751.473529][T24155] ? __mutex_lock+0x1096/0x1550 [ 1751.479288][T24155] ? __mutex_lock+0x5d4/0x1550 [ 1751.484082][T24155] ? rtnl_newlink+0xc1d/0x1c30 [ 1751.489306][T24155] ? __pfx___mutex_lock+0x10/0x10 [ 1751.494474][T24155] ? ns_capable+0x89/0xe0 [ 1751.498869][T24155] ? rtnl_nets_add+0x16c/0x300 [ 1751.503905][T24155] ? refcount_inc+0x46/0x70 [ 1751.508763][T24155] rtnl_newlink+0x147c/0x1c30 [ 1751.513482][T24155] ? __pfx_rtnl_newlink+0x10/0x10 [ 1751.518893][T24155] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 1751.524869][T24155] ? netlink_deliver_tap+0x19c/0x1b0 [ 1751.530781][T24155] ? netlink_unicast+0x781/0x940 [ 1751.536105][T24155] ? netlink_sendmsg+0x813/0xb40 [ 1751.541330][T24155] ? sock_sendmsg_nosec+0x14e/0x190 [ 1751.546733][T24155] ? ____sys_sendmsg+0x54e/0x850 [ 1751.552653][T24155] ? ___sys_sendmsg+0x2a5/0x360 [ 1751.558054][T24155] ? __x64_sys_sendmsg+0x1b1/0x290 [ 1751.563599][T24155] ? do_syscall_64+0x166/0x520 [ 1751.569086][T24155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1751.575286][T24155] ? kasan_quarantine_put+0xbb/0x1f0 [ 1751.581996][T24155] ? lockdep_hardirqs_on+0x7b/0x110 [ 1751.588454][T24155] ? nlmon_xmit+0xb0/0x100 [ 1751.593302][T24155] ? kmem_cache_free+0x182/0x650 [ 1751.599074][T24155] ? __lock_acquire+0x747/0x2de0 [ 1751.605203][T24155] ? __dev_queue_xmit+0x29b/0x3920 [ 1751.612385][T24155] ? __local_bh_enable_ip+0xd6/0x140 [ 1751.619106][T24155] ? lockdep_hardirqs_on+0x7b/0x110 [ 1751.624590][T24155] ? lock_acquire+0x115/0x350 [ 1751.630260][T24155] ? __pfx_rtnl_newlink+0x10/0x10 [ 1751.636101][T24155] ? __pfx_rtnl_newlink+0x10/0x10 [ 1751.641664][T24155] rtnetlink_rcv_msg+0x802/0xc00 [ 1751.646708][T24155] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1751.651939][T24155] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1751.657752][T24155] ? __copy_skb_header+0xa3/0x4a0 [ 1751.662935][T24155] netlink_rcv_skb+0x226/0x4a0 [ 1751.667920][T24155] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1751.673452][T24155] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1751.679369][T24155] ? netlink_deliver_tap+0x2e/0x1b0 [ 1751.684683][T24155] ? netlink_deliver_tap+0x2e/0x1b0 [ 1751.690141][T24155] netlink_unicast+0x7bd/0x940 [ 1751.695256][T24155] netlink_sendmsg+0x813/0xb40 [ 1751.700210][T24155] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1751.705982][T24155] ? apparmor_socket_sendmsg+0x98/0x360 [ 1751.711728][T24155] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1751.718021][T24155] sock_sendmsg_nosec+0x14e/0x190 [ 1751.723538][T24155] ____sys_sendmsg+0x54e/0x850 [ 1751.728964][T24155] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1751.734797][T24155] ? import_iovec+0x73/0xa0 [ 1751.739849][T24155] ___sys_sendmsg+0x2a5/0x360 [ 1751.744743][T24155] ? __lock_acquire+0x747/0x2de0 [ 1751.751295][T24155] ? __pfx____sys_sendmsg+0x10/0x10 [ 1751.757224][T24155] ? futex_wait+0x2a2/0x390 [ 1751.763531][T24155] ? __fget_files+0x2a/0x420 [ 1751.768869][T24155] ? __fget_files+0x3a2/0x420 [ 1751.776813][T24155] __x64_sys_sendmsg+0x1b1/0x290 [ 1751.782243][T24155] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1751.788990][T24155] do_syscall_64+0x166/0x520 [ 1751.794923][T24155] ? trace_irq_disable+0x3b/0x140 [ 1751.800221][T24155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1751.806599][T24155] ? clear_bhb_loop+0x70/0xc0 [ 1751.811295][T24155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1751.817737][T24155] RIP: 0033:0x7fda9559e159 [ 1751.822437][T24155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1751.844109][T24155] RSP: 002b:00007fda96448028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1751.853409][T24155] RAX: ffffffffffffffda RBX: 00007fda95825fa0 RCX: 00007fda9559e159 [ 1751.861640][T24155] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a [ 1751.869609][T24155] RBP: 00007fda9563506b R08: 0000000000000000 R09: 0000000000000000 [ 1751.877575][T24155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1751.885909][T24155] R13: 00007fda95826038 R14: 00007fda95825fa0 R15: 00007ffe65fe3b78 [ 1751.894406][T24155] [ 1751.897620][T24155] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1751.905175][T24155] CPU: 0 UID: 0 PID: 24155 Comm: syz.4.21324 Not tainted syzkaller #0 PREEMPT(full) [ 1751.914984][T24155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1751.925155][T24155] Call Trace: [ 1751.928707][T24155] [ 1751.931811][T24155] vpanic+0x56d/0xa60 [ 1751.936359][T24155] ? __pfx__printk+0x10/0x10 [ 1751.941068][T24155] ? __pfx_vpanic+0x10/0x10 [ 1751.945660][T24155] ? is_bpf_text_address+0x292/0x2b0 [ 1751.951347][T24155] ? is_bpf_text_address+0x26/0x2b0 [ 1751.956592][T24155] panic+0xc5/0xd0 [ 1751.960429][T24155] ? __pfx_panic+0x10/0x10 [ 1751.965306][T24155] __warn+0x315/0x4c0 [ 1751.969391][T24155] ? print_bfs_bug+0x20/0x40 [ 1751.974334][T24155] ? print_bfs_bug+0x20/0x40 [ 1751.979393][T24155] __report_bug+0x276/0x570 [ 1751.984369][T24155] ? print_bfs_bug+0x20/0x40 [ 1751.989407][T24155] ? __pfx___report_bug+0x10/0x10 [ 1751.994815][T24155] ? __pfx_vprintk_emit+0x10/0x10 [ 1752.000486][T24155] ? __kasan_check_byte+0x12/0x40 [ 1752.006344][T24155] report_bug_entry+0x19b/0x290 [ 1752.011452][T24155] ? print_bfs_bug+0x22/0x40 [ 1752.016446][T24155] ? print_bfs_bug+0x27/0x40 [ 1752.021661][T24155] handle_bug+0xce/0x200 [ 1752.026014][T24155] exc_invalid_op+0x1a/0x50 [ 1752.030711][T24155] asm_exc_invalid_op+0x1a/0x20 [ 1752.035676][T24155] RIP: 0010:print_bfs_bug+0x22/0x40 [ 1752.041068][T24155] Code: 90 90 90 90 90 90 90 90 55 53 89 fb e8 e7 45 38 03 89 c5 e8 c0 85 ff ff 85 ed 74 13 83 fb ff 74 16 48 8d 3d d0 3a d9 0e 89 de <67> 48 0f b9 3a 5b 5d c3 cc cc cc cc cc 48 c7 c7 c4 86 59 8e e8 25 [ 1752.061394][T24155] RSP: 0018:ffffc900024ce4c8 EFLAGS: 00010046 [ 1752.067480][T24155] RAX: 000000000000003b RBX: 00000000ffffffff RCX: b34ef389312f7700 [ 1752.075856][T24155] RDX: ffffc90010bc3000 RSI: 00000000ffffffff RDI: ffffffff907ce080 [ 1752.084134][T24155] RBP: 0000000000000001 R08: ffffc900024ce247 R09: 1ffff92000499c48 [ 1752.092577][T24155] R10: dffffc0000000000 R11: fffff52000499c49 R12: 0000000000000054 [ 1752.100559][T24155] R13: ffffffff94447058 R14: ffffffff9739a9d8 R15: ffffffff9739aa48 [ 1752.108847][T24155] ? print_bfs_bug+0x3b/0x40 [ 1752.113721][T24155] __lock_acquire+0x25ed/0x2de0 [ 1752.118612][T24155] lock_acquire+0x115/0x350 [ 1752.123211][T24155] ? ktime_get+0x45/0x220 [ 1752.127561][T24155] ? ktime_get+0x45/0x220 [ 1752.131912][T24155] seqcount_lockdep_reader_access+0x55/0x100 [ 1752.138019][T24155] ? ktime_get+0x45/0x220 [ 1752.142378][T24155] ktime_get+0x45/0x220 [ 1752.146734][T24155] clockevents_program_event+0x290/0x630 [ 1752.154651][T24155] ? __pfx_clockevents_program_event+0x10/0x10 [ 1752.160878][T24155] ? tick_program_event+0x8f/0x120 [ 1752.166102][T24155] __hrtimer_rearm_deferred+0x36c/0x4b0 [ 1752.171765][T24155] irqentry_exit+0x8d3/0x910 [ 1752.176459][T24155] ? trace_irq_disable+0x3b/0x140 [ 1752.182218][T24155] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1752.188846][T24155] RIP: 0010:lock_acquire+0x232/0x350 [ 1752.194587][T24155] Code: ff ff ff e8 b0 8d 42 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 42 f8 f0 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 87 92 d9 [ 1752.215788][T24155] RSP: 0018:ffffc900024ce930 EFLAGS: 00000296 [ 1752.222143][T24155] RAX: b34ef389312f7700 RBX: 0000000000000001 RCX: 8000000000000201 [ 1752.231356][T24155] RDX: ffff88801e36ab18 RSI: ffffffff8e688cc7 RDI: ffffffff8c6dad80 [ 1752.239436][T24155] RBP: ffff88801e369f40 R08: 0000000000000008 R09: ffffffff96b976f8 [ 1752.247772][T24155] R10: 0000000021b7008f R11: 000000002c5f9b07 R12: ffff888055a7e170 [ 1752.256105][T24155] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000246 [ 1752.264528][T24155] ? dev_deactivate_many+0xade/0xda0 [ 1752.269959][T24155] _raw_spin_lock_bh+0x36/0x50 [ 1752.275092][T24155] ? dev_deactivate_many+0xade/0xda0 [ 1752.280412][T24155] dev_deactivate_many+0xade/0xda0 [ 1752.286808][T24155] ? dev_deactivate_many+0x25d/0xda0 [ 1752.292151][T24155] __dev_close_many+0x180/0x6e0 [ 1752.297272][T24155] ? __pfx___dev_close_many+0x10/0x10 [ 1752.303189][T24155] ? __dev_change_flags+0x2e2/0x820 [ 1752.308602][T24155] ? __local_bh_enable_ip+0xd6/0x140 [ 1752.314548][T24155] __dev_change_flags+0x3f5/0x820 [ 1752.319681][T24155] ? __pfx___dev_change_flags+0x10/0x10 [ 1752.325947][T24155] ? __local_bh_enable_ip+0xd6/0x140 [ 1752.331693][T24155] ? lockdep_hardirqs_on+0x7b/0x110 [ 1752.337393][T24155] ? netdev_work_dequeue+0x225/0x250 [ 1752.342991][T24155] ? __local_bh_enable_ip+0xd6/0x140 [ 1752.348484][T24155] netif_change_flags+0x7c/0x1b0 [ 1752.353535][T24155] do_setlink+0xdd6/0x47a0 [ 1752.358175][T24155] ? __lock_acquire+0x747/0x2de0 [ 1752.363231][T24155] ? __pfx_do_setlink+0x10/0x10 [ 1752.368225][T24155] ? do_raw_spin_lock+0x12b/0x2f0 [ 1752.373470][T24155] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1752.379853][T24155] ? __mutex_lock+0x1096/0x1550 [ 1752.385498][T24155] ? __mutex_lock+0x5d4/0x1550 [ 1752.390916][T24155] ? rtnl_newlink+0xc1d/0x1c30 [ 1752.396415][T24155] ? __pfx___mutex_lock+0x10/0x10 [ 1752.401974][T24155] ? ns_capable+0x89/0xe0 [ 1752.406584][T24155] ? rtnl_nets_add+0x16c/0x300 [ 1752.411564][T24155] ? refcount_inc+0x46/0x70 [ 1752.416358][T24155] rtnl_newlink+0x147c/0x1c30 [ 1752.421941][T24155] ? __pfx_rtnl_newlink+0x10/0x10 [ 1752.427516][T24155] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 1752.433103][T24155] ? netlink_deliver_tap+0x19c/0x1b0 [ 1752.438648][T24155] ? netlink_unicast+0x781/0x940 [ 1752.443738][T24155] ? netlink_sendmsg+0x813/0xb40 [ 1752.448717][T24155] ? sock_sendmsg_nosec+0x14e/0x190 [ 1752.454294][T24155] ? ____sys_sendmsg+0x54e/0x850 [ 1752.459785][T24155] ? ___sys_sendmsg+0x2a5/0x360 [ 1752.465383][T24155] ? __x64_sys_sendmsg+0x1b1/0x290 [ 1752.471494][T24155] ? do_syscall_64+0x166/0x520 [ 1752.477072][T24155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1752.483465][T24155] ? kasan_quarantine_put+0xbb/0x1f0 [ 1752.489069][T24155] ? lockdep_hardirqs_on+0x7b/0x110 [ 1752.494998][T24155] ? nlmon_xmit+0xb0/0x100 [ 1752.499630][T24155] ? kmem_cache_free+0x182/0x650 [ 1752.505022][T24155] ? __lock_acquire+0x747/0x2de0 [ 1752.510166][T24155] ? __dev_queue_xmit+0x29b/0x3920 [ 1752.515847][T24155] ? __local_bh_enable_ip+0xd6/0x140 [ 1752.521765][T24155] ? lockdep_hardirqs_on+0x7b/0x110 [ 1752.527391][T24155] ? lock_acquire+0x115/0x350 [ 1752.535554][T24155] ? __pfx_rtnl_newlink+0x10/0x10 [ 1752.541216][T24155] ? __pfx_rtnl_newlink+0x10/0x10 [ 1752.546657][T24155] rtnetlink_rcv_msg+0x802/0xc00 [ 1752.552789][T24155] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1752.558808][T24155] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1752.566483][T24155] ? __copy_skb_header+0xa3/0x4a0 [ 1752.572814][T24155] netlink_rcv_skb+0x226/0x4a0 [ 1752.577888][T24155] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1752.583560][T24155] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1752.589505][T24155] ? netlink_deliver_tap+0x2e/0x1b0 [ 1752.594996][T24155] ? netlink_deliver_tap+0x2e/0x1b0 [ 1752.600945][T24155] netlink_unicast+0x7bd/0x940 [ 1752.605888][T24155] netlink_sendmsg+0x813/0xb40 [ 1752.610762][T24155] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1752.616504][T24155] ? apparmor_socket_sendmsg+0x98/0x360 [ 1752.622130][T24155] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1752.627443][T24155] sock_sendmsg_nosec+0x14e/0x190 [ 1752.633185][T24155] ____sys_sendmsg+0x54e/0x850 [ 1752.638093][T24155] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1752.643949][T24155] ? import_iovec+0x73/0xa0 [ 1752.649075][T24155] ___sys_sendmsg+0x2a5/0x360 [ 1752.653865][T24155] ? __lock_acquire+0x747/0x2de0 [ 1752.659214][T24155] ? __pfx____sys_sendmsg+0x10/0x10 [ 1752.664639][T24155] ? futex_wait+0x2a2/0x390 [ 1752.669621][T24155] ? __fget_files+0x2a/0x420 [ 1752.674426][T24155] ? __fget_files+0x3a2/0x420 [ 1752.679309][T24155] __x64_sys_sendmsg+0x1b1/0x290 [ 1752.684407][T24155] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1752.690319][T24155] do_syscall_64+0x166/0x520 [ 1752.694940][T24155] ? trace_irq_disable+0x3b/0x140 [ 1752.700861][T24155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1752.707664][T24155] ? clear_bhb_loop+0x70/0xc0 [ 1752.712560][T24155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1752.719358][T24155] RIP: 0033:0x7fda9559e159 [ 1752.724023][T24155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1752.745488][T24155] RSP: 002b:00007fda96448028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1752.754112][T24155] RAX: ffffffffffffffda RBX: 00007fda95825fa0 RCX: 00007fda9559e159 [ 1752.762695][T24155] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a [ 1752.771727][T24155] RBP: 00007fda9563506b R08: 0000000000000000 R09: 0000000000000000 [ 1752.781198][T24155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1752.789448][T24155] R13: 00007fda95826038 R14: 00007fda95825fa0 R15: 00007ffe65fe3b78 [ 1752.798318][T24155] [ 1753.954171][T24155] Shutting down cpus with NMI [ 1753.959627][T24155] Kernel Offset: disabled [ 1753.964136][T24155] Rebooting in 86400 seconds..