last executing test programs: 13.154528716s ago: executing program 0 (id=11742): socket$inet6_udp(0xa, 0x2, 0x0) (async) socket(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) (async, rerun: 32) socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44801}, 0x20000000) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, 0x0, 0x0) (async) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0x5743000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x9, 0x40, 0x6, 0x400}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 12.99186343s ago: executing program 0 (id=11744): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x848000000015, 0x805, 0x0) socket$inet6(0xa, 0x802, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000400000000010000000800010000000000040004800800020001000000240008"], 0x4c}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f0000000880)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f00000005c0)={0x270, r4, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6182}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x108, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf7e8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x447d5746}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f074d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6c66cc8c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa7bb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc715}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3c9c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ddd7f9b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5827b996}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a4faa82}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70f3e0c6}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf524}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x358b3852}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4256}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xca35}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x37759460}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x96f5c7d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c03e37}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xade4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc88c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3795}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x46bd44ef}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe92}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x944}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x78917bb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd23e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1633}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4c1af43c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb2a1}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x118, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30056247}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xaf05de4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x27}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ab82875}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb6}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x89}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x704bc5bd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78955c88}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x49b839f1}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a4bd05b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5551898d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7abad59a}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe46847d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x423f18d1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e57e9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x574c3a67}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x617ab90a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x74}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23a40660}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xea}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1be39cf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7300f78a}]}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x4000000}, 0x840) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0) write(r5, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @remote, @random="000100", @remote}}}}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r9) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r8, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 12.901106738s ago: executing program 0 (id=11745): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x1911, 0x4) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000040)=0xfffffffb, 0x4) sendmmsg$inet6(r1, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x12141, 0x0) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x3fb, 0x2, 0x70bd27, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x44000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200000009000200737900640000000008000440000000000900010073797a30000000000800034000000001"], 0x64}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x440, 0x0, 0x0, 0xfeffffff, 0xf0, 0x2d0, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x4e23], 0x0, 0x4, 0x2, 0xf}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000000, 0x4000000], 0x0, 0x4}}}, @common=@unspec=@connlabel={{0x28}, {0x6, 0x2}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x13, @multicast1, @multicast1, @icmp_id=0x67, @icmp_id=0x67}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @broadcast, @multicast1, @gre_key=0x6, @gre_key=0x7}}}}, {{@ip={@private=0xa010101, @broadcast, 0x0, 0x0, 'veth0_virt_wifi\x00', 'wlan0\x00', {}, {}, 0x0, 0x0, 0x48}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@dev, @port, @icmp_id=0x65}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r4, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6bbb5ea80cba3c", @ANYRES16=0x0, @ANYBLOB="0003000425620000fffd000300", @ANYRES32=0x0, @ANYBLOB="0c00990001000000280000000600b400e40c00000600b400770700000600b300000000000600b30000000000"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000f01000000000000", 0x20}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005ff4f570000000000000000004a", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100736974001c00028005000a000100000006000800280000000500090029000000"], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x4000080) 2.809478476s ago: executing program 4 (id=11821): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x8c}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x93}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newtaction={0x78, 0x30, 0xb, 0x70bd26, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "4614c334e344ae53204373dc0ddeb17f"}, @TCA_CT_ZONE={0x6, 0x8}, @TCA_CT_PARMS={0x18, 0x1, {0xfffffffc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40800}, 0x1010) 2.448116863s ago: executing program 4 (id=11825): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffffff1, 0x7, 0x6, 0x23, 0x5, 0x7}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xc, 0xffe8}, {0xf, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x200008c1}, 0x4041080) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000300)={r0, &(0x7f0000000040)='[\x00', 0x301000, &(0x7f0000000180)={@_ha_fsid={[0x24]}, {0x7f, 0x2, 0x77f0}}, 0xa7d9, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000280)=0xfffffff8}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 1.966690414s ago: executing program 4 (id=11832): r0 = socket(0x21, 0x5, 0x20081) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x1000) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x640c42, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000280)=0x4) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)=0x3) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r2, &(0x7f00000005c0)=[{&(0x7f0000000040)="00213ae50deba8cd1caf190e1ae69f52cf98f3a1309b", 0x16}], 0x1, 0x807, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a000b2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2c000003"], 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x8101}, 0x8040) sendmsg$NFT_BATCH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@getchain={0x54, 0x66, 0x400, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x3, 0xf}, {0xc, 0xa}, {0xb, 0x9}}, [{0x8, 0xb, 0x29}, {0x8, 0xb, 0xee20}, {0x8, 0xb, 0x43}, {0x8, 0xb, 0x7429}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0xfffffff9}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000340)={@remote, 0x800, 0x2, 0x0, 0x9}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r3, &(0x7f0000000500)=[{{&(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7080000, @mcast1, 0x4, 0x1}, 0x80, 0x0}}], 0x1, 0x4040000) setsockopt$MRT6_TABLE(r0, 0x29, 0x24, &(0x7f0000000040)=0x16b17ac4b7a10d37, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'geneve1\x00'}) socket$inet6_mptcp(0xa, 0x1, 0x106) 1.553991862s ago: executing program 3 (id=11836): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)="9d", 0x1}], 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000084000000070000007f0000010000000018000000000000008400000000000000ff7f06001200040030"], 0x60, 0x8d5}, 0x24000052) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@alu={0x4, 0x0, 0x6, 0x2, 0x0, 0x1}]}, &(0x7f0000000340)='GPL\x00', 0x7, 0x0, 0x0, 0x1f00, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)={@val={0xa, 0x201}, @void, @eth={@multicast, @broadcast, @val={@val={0x88a8, 0x2}, {0x8100, 0x2, 0x1}}, {@generic={0x6558}}}}, 0x1a) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x14, 0x35, 0x107, 0xffffffff, 0xfffffffe, {0x5, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000340)={0xffffffffffffffff, r6}) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, 0xd, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x4008004) close(0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000036c0)={r6, 0x0, 0x45, 0x1000, &(0x7f0000000380)="8499a08e26f6ef74aab0e466edb4769534c298fd1753d4faf34bdf2556f5c5a7f557bbfd0b1cc29b9e248b64cde35e846149e6247b155784987fa899a31122ebad74e9fc89", &(0x7f0000002500)=""/4096, 0x8, 0x0, 0xa2, 0xcf, &(0x7f0000003500)="48b0407af61cdb33f903b6e6ade21e43199dd6fe1948a7c5176e7f729b56e35c9ee22bb5e113b9ea77d8b811f46ed7bb520afe6616893b874cb55f2bd365cf2d705add6d22c7fc7ffdef6a90b3562cb5d17e6fd0249bc93ce1b32ce5f6b67b47b2c38d0df0b86918154d4d77811d74e9fe25ba192214c38acdbd526ed1e6dd6d75e6af77ba5b9cf1dbacf3f261c6a632a12ee69982ac65d246e825f3c27dff9dfc41", &(0x7f00000035c0)="91ed764cb483317bd6690184ce402449baa119bfa4073e60d5ed34b147efceb91718731e8f8ce21b1e1a37e845ff6ea28b2c0b1bda3094ec37b85b5313d1f3609fcad8c946630888ddeb5e64acf389f37ec50ddd125d1ff89d8d2f5a19beb3e7be56b2d0739acb3b3eefa202de01360ef0f376119a96a6030a24c79e18ea45883a5e2943246895065e6ad53bdd244eef203c01c17e52d464e33ba3934bc5ba443c8675ee5fe8105b2fc0ee9aa24796fa878232f5cdad065c38ff8b03b8592451c212980f40664546a02ffeb5a6475b", 0x7, 0x0, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x0, 0x208000, 0x7}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 1.172916671s ago: executing program 1 (id=11838): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7ff}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xbc00}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc001}, 0x4040800) r2 = socket(0xa, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000440)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'], 0x28}}], 0x1, 0x4000810) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x0, 0x1000000, 0xffffffff, 0x250, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @private=0xa010100, 0x0, 0x0, 'bond0\x00', 'geneve1\x00', {}, {}, 0x84, 0x0, 0x28}, 0x0, 0x1f0, 0x250, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'ip6gretap0\x00', {0x6, 0x0, 0x0, 0x338, 0x0, 0x80000000, 0x3, 0x3, 0x0, 0x18}, {0x3}}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x0, 0x8, 0x7, 0x4, 0xb], 0x3, 0x6}, {0x1, [0x4, 0x6, 0x2, 0x0, 0x5, 0x2], 0xfd}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6d12, 0x3ff, 0x6, 'snmp\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x400) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x90, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x9c4}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x5, 0x4, 0x3}, 0xfffffffd, 0x83, 0xfffffffd}}]}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x1, 0x1, 0x40, 0x2, 0xffffffff, 0x0, 0x1}}, {0x6, 0x2, [0x2]}}]}]}, 0x90}}, 0x4000080) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={@empty, @loopback, @local, 0x1, 0x8, 0x1000, 0x400, 0xf997, 0x20000, r6}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x50}}, 0x4000010) socket$nl_route(0x10, 0x3, 0x0) (async) pipe(&(0x7f0000000100)) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7ff}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xbc00}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc001}, 0x4040800) (async) socket(0xa, 0x2, 0x0) (async) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000440)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'], 0x28}}], 0x1, 0x4000810) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) socket$inet_icmp(0x2, 0x2, 0x1) (async) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x0, 0x1000000, 0xffffffff, 0x250, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @private=0xa010100, 0x0, 0x0, 'bond0\x00', 'geneve1\x00', {}, {}, 0x84, 0x0, 0x28}, 0x0, 0x1f0, 0x250, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'ip6gretap0\x00', {0x6, 0x0, 0x0, 0x338, 0x0, 0x80000000, 0x3, 0x3, 0x0, 0x18}, {0x3}}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x0, 0x8, 0x7, 0x4, 0xb], 0x3, 0x6}, {0x1, [0x4, 0x6, 0x2, 0x0, 0x5, 0x2], 0xfd}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6d12, 0x3ff, 0x6, 'snmp\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x400) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x90, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x9c4}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x5, 0x4, 0x3}, 0xfffffffd, 0x83, 0xfffffffd}}]}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x1, 0x1, 0x40, 0x2, 0xffffffff, 0x0, 0x1}}, {0x6, 0x2, [0x2]}}]}]}, 0x90}}, 0x4000080) (async) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) (async) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={@empty, @loopback, @local, 0x1, 0x8, 0x1000, 0x400, 0xf997, 0x20000, r6}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x50}}, 0x4000010) (async) 1.151923436s ago: executing program 2 (id=11839): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x4) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001080)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @rand_addr=0x64010101}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}]}}]}, 0x44}}, 0x0) unshare(0x8040600) (async) unshare(0x8040600) getsockopt(r0, 0x1, 0x1, 0x0, 0x0) 951.839721ms ago: executing program 2 (id=11840): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000) (async) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x9, 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r7) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) (async) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x264, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x234, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x110, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x24, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xdd13}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1af}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xd}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x2}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x54, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xa}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x400}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x800}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xffff}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xcc}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x2c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xf}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xe147}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xd, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0xec, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4000086}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8c}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x0, 0x1, 0xfffc}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xe7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x75}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x46}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x400}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xd5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xffffffff}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x80}]}}]}, 0x264}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 929.739599ms ago: executing program 3 (id=11841): syz_emit_ethernet(0xf87, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local, {[@routing={0x84}], "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"}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000000004000"/32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x1, 0x7800, 0x4, 0x3ff, {{0x17, 0x4, 0x2, 0x38, 0x5c, 0x64, 0x0, 0xf, 0x29, 0x0, @rand_addr=0x64010100, @local, {[@timestamp={0x44, 0xc, 0x87, 0x0, 0xa, [0xfffffffc, 0xc9e]}, @ssrr={0x89, 0x13, 0x44, [@empty, @multicast1, @private=0xa010101, @empty]}, @generic={0x44, 0x12, "29f71fefb75510d3fbcd19dc5be0f76e"}, @generic={0x89, 0x7, "5af95180d0"}, @generic={0x44, 0x3, '<'}, @end, @timestamp={0x44, 0xc, 0x78, 0x0, 0x5, [0x1, 0x9]}]}}}}}) (async) socket$kcm(0x29, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r0) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000880)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x70a3ade0ef9d2ce9}, 0xc, &(0x7f0000000840)={&(0x7f0000000600)={0x234, r3, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}]}, 0x234}}, 0x20000014) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0x1, 0x5, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x10, 0x2, 0xfffffffc}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg2\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x30, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) (async) r7 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) (async) recvfrom$inet6(r7, &(0x7f0000000000)=""/31, 0x1f, 0x2002, 0x0, 0x0) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r8 = socket$inet6(0x10, 0x3, 0x0) (async) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), r0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x70, r9, 0x800, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xdda5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffff7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000000}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x884) sendto$inet6(r8, &(0x7f0000000000)='s', 0x573, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async) r10 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r10, 0x1, 0x3d, &(0x7f0000000080)={0xb}, 0x8) (async) connect$inet6(r10, &(0x7f0000000100)={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) (async) write(r10, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x138, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x800) 892.836425ms ago: executing program 4 (id=11842): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in=@multicast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x4e22, 0x0, 0xa, 0xa0}, {0x0, 0x79, 0xfd, 0x0, 0x0, 0x0, 0x800}, {0x10000000000, 0x0, 0x0, 0x2}, 0xfff, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x32}, 0x2, @in=@multicast1, 0x1, 0x0, 0x2, 0x0, 0x0, 0xfffffffb}}, 0xe8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x1e) syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000400000183afffe8000000000000000000000000000000000000000000188009078d2000000fc0900"/78], 0x0) socketpair(0xa, 0x0, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0xa, 0x4e1c, 0x80000, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="4800000000000000290000003e0000008706007f00000000fc010000000000000000000000000001fe88000000000000000000000000000100000000000000000000000000000001c05612cb3b8292c52ef76137f0ecf92c1b272b695c11f28b5d68e5af228bd7cac77f5bd9657c0df613db3537fee15736a5f99e13d91d28fb9ffc2766f43d12042421795e9719e639db06f2bf68b996ffffffff75b0bf280be844e939f3ee9e15a19c7cd017f57dafc46a29fdc0e1"], 0x48}, 0x20440e4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=ANY=[@ANYRESOCT=r1, @ANYRES32=r4, @ANYRES16=r1, @ANYRESHEX=r0, @ANYRESDEC=r2], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000240), &(0x7f0000000280)=0x4) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYRES32], 0x1c}}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0), r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000100fffc0900010073797a30000000002c000000030a01020000000000000000010000000900010073797a300000000009000300"], 0xc8}}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1e0000008f00000005000000ff01000000500000", @ANYRES32=r7, @ANYBLOB="8100"/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="0400000002000000000000000e0000000000000000000008000000001770f5b3b5bf17fc216bb5bd1799dcb1d72a926d04f9d5e2c6dc355c15b65b8b53edac61dc9fe5bd651a4fc9a0a633bd250d831232d1349c30dfc252a040932c851a4caa7b1f10fed734343ffdc5f801b1877d98175df118eda67c047af952219f86942a3312af62548c6f4130d4f12bb792336a95a5955c4d528b39adc5945a616f946005a3e269fa1acc9f36c839586390a3d489a78c7f9a97a078f4cfea71"], 0x50) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r10, &(0x7f0000000080)={&(0x7f0000000500)={0x2, 0x0, @initdev={0xac, 0x1e, 0x8, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r10, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000280)={r9, r8, 0x3, 0x0, 0x0, 0xc, 0xf, 0x6, 0x5508, 0x104, 0x1, 0xb, 'syz1\x00'}) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 739.401963ms ago: executing program 1 (id=11843): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x0, 0xfff], [0x0, 0x4, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xffff, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0xc, 0x89f8c55f46292553}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x40, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xb0}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x1}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x1ff}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x804) 739.207701ms ago: executing program 3 (id=11844): unshare(0xe020680) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) unshare(0x10a00) sendmsg$inet_sctp(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@prinfo={0x18, 0x84, 0x5, {0x60, 0xd}}], 0x18}, 0x4044081) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000040)=0xfffffffd, 0x4) 672.764215ms ago: executing program 2 (id=11845): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="2ee158dfaebeffa6f8bcc81e6066cb121b114c186f8d58662d1fb5be77a4c16f72418cc72b861ad151fefc7ec7935836015484980dff4d6037c546a67a5751ece3758895c0930ff896435db2b37aaaad35da41fde88a741094c20d65670ab66cc32219f3646c28d99885d02bfe00292f4135cadbf6f8045e2eb629f8fc16aef80ada8ddbce157ec75aab00b772b05ef0f59776cd1e49c3f69dbdf95190a5ad52076db5c47d6af2a28b7e23cddb4355dd5256e5e836a19ca362b8451c53e0", @ANYRES32=r1, @ANYRESOCT=r1, @ANYRESOCT=r0], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r2 = socket(0x10, 0x3, 0x0) unshare(0x20000400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000840)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002c000800000000000000000000000000950000e435147d001aa10600000000000000001195181b5e472009f23f28c16eab65a407813c3acd54735f2287d2b08c3d155affdbfb738f7821a943c35cb6dbbb16993de2da755d5831a6deb836899c9369f4bc38f552f84f81a2df11ce0dfa39ca79b6a0291a59cee8618d9ab04311e9a92e4321f966a19a2473f48a45eefb01a3c55454050b4ee486772e517a6dea09703dd1112a66d4669978dbd43eeec630f673e39b5354fd694a4d0e9897570b0f73b72fa70bc35ab06fe1e1e4312ecbcfb087fcffa4e63bbd5895bfacda18895cfdfdc1080c"], &(0x7f0000000000)='GPL\x00'}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00000046000701fefffffffcdbdf25047c00000800018004"], 0x1c}}, 0xc000) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0x0, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="41040000015001001800128008000100677470000c00028008000100", @ANYRES32=r6], 0x40}}, 0x0) close(0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x54, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0, 0x9}, {0x0, 0x9}, {0x2, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x28, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'pimreg\x00'}, @TCA_FW_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x200008c4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@generic={0x4, 0x8, 0x7, 0x0, 0x2}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) r7 = socket(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r8, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r8, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r8, 0x0, 0x14, &(0x7f0000000440)=0x135, 0x4) recvmmsg(r8, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003dc0)=""/31, 0x1f}, 0x8000}], 0x1, 0x45833af92e4a39df, 0x0) sendmmsg(r7, &(0x7f0000005280)=[{{&(0x7f0000000500)=@generic={0x0, "2a041ad9fde3e7c6ec4f62767a727e5e3016cd64852eb8dc541ec61fdbb1c0e8ca2947a3776dba4da38ba1931f836ea13b9f391748373893323b2d7b69e705ffd4cfb6c9864f2157b2081858823ee970a8967047acfbe3454f4b7bc20a926836b191140db0eb364e618c41983e0c09b693230d9cd7bd94b752bc61f1d2e7"}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000680)="71f5a09667399a68b5c1489924da97c784d45d1a10b284977fa1aff5ccc209ca88b8d72802ad7547482e5f4d9027f7139c76023cdb941a5b41a7daa6fca9f938930b031ee63e0cadbf254b56e0a2784f2d2b3fe2db8c0a5ddebcc045", 0x5c}, {&(0x7f0000000700)="0084b27d903e70a656af03226d085d2421bfde23d7a9c05085f03975f5aea81f0d6fda09cbe59a7ee8e24fee5f15e458f20e703093703d67fe5cb045eb35fe5a3127336d90bf7400087992daee17f553e9f9e2e330437fc6abc52640bbda104a3e78", 0x62}, {&(0x7f0000000980)="51db7038ae3998c85dde838eb56f7f0ce976136ee36b9d5036881724c9adda1b9903c6ef3d327cd3f5fedd182fdf02e932cd292099ce3f618e4fa1225afd0e82db5dcd13b3ddb55c76f293706c698be4f31aed151262f622db22c3213b95681f27", 0x61}, {&(0x7f0000000a00)="4deb65d20fc02676f261515cf92dab7571776f95186c1ef018fba4b865d39130093ab2b534d7770fb75b65af1e9eb0bc0caf1ae2ccadc0c21223c9fddb2d1db00b30c32dfa982cccf2273dfcb40b4beaab8c557953f194c6bd6240dc1cc6133130a1c13a5493e62da744723940fb029824c4776030594e2981816adbb99ced98eef2fcf84e909cd1f15fdb57a252", 0x8e}, {&(0x7f0000000ac0)="2c88760b2c4394b155b2e616c9c00eb3dedde61c88a0a0186ddd8efbf171875fb31067f262f95c8b", 0x28}, {&(0x7f0000000b00)="f838d889e956e9fb804c557ca9f866b66fb8cae6cbeef2659e1f4581909c994f8cbe6ebc3f1c3ce19d2d88b86a9235a2b4168b487c9ae2b43146a85cf7bc8ae397fb324697", 0x45}], 0x6, &(0x7f0000000c00)=[{0x88, 0x117, 0x8, "f1dc99df549c84a1d53426de98a0be856e44b37e8126293c79bac7d58f5b0b21358202f1280f881034e90457f1cde9b906657e55493fbd64754596703dd9af60c49c52bb2690f00363b484c9503fa9295393180bdae6a04b04303cc09f1c71362155d90a47bee44ecc7a38ab6359774da9c2"}, {0x78, 0x117, 0xfffffffe, "4668c4f9cb55ae37d1a7b09121836fef19c748a9b2184a9a90d42f4e0372d52c5ca7674fb04728d38b8e3b95107a2138c22979d953d64d12264b4b5407cdbc2cc7835f3735392f411efada7d7caf1788262a6fc14378a5dc0a5bf1083e6373ccddcf52"}, {0x18, 0x104, 0x6, "84"}, {0x1010, 0xff, 0x4, "4092b4d45ecc76c8745aaa6a16b135a282efe2965cb7a85213b136622e0e15b3499a61b9041328c7cb6de7a50812f3df0f75ca5ed4b7d5586ab9d835e95fb74e9e021b81a153903ce5e8d7cf19c8757724618086b0dbfe906450c9ef1288b78d3550167a5616d626496c559fc50b87a0f252be3c1d2ce07905ef02662b8f8bc07c955c5d84d59e5b82f7280ab671d851e706c36abc9e1dbd3f74857405fb18dc326ad37c8448c16ba3251233543e6ec4ed8168f60c66b3b14922ba987f510963271f75693d54ed5a78be2c12fd184eae43809a74d6893898e56470f8252836278faf97ac6fdb8b6e2b782e85e96f001be7369f86b994165ae2a78f611c12c066f4a09187846e628cee78efacaeed937c56a38b1160f723bbc0ad3333546c9a3022cf445e3f551d5ec2cb7b1c2d1d017b5268e0e24aa1ad785489dca3e5244fd47c3dfe83c966ed780d814421b284426c7fe4aa77785dde74d3e11a1d666b14dc4296f48a54e754acffd741a588f2dc5311d7254aa034ae76e4cedb9953438caec92fcc7903f2bb3c84272484691cb79a488cc94562dcc76c443cfe8e880bbb180e4c7b09012cdcf76c9f3922c7c021a9cc36cd88014e980015cd79a54b6019556539869932cc05cf227f430f718a99c74776ecefa2e9b747d2c568eed06c33a6b0eb2915c896ec7f00a95e3b4ed45f07ce4040b82fdecba5357421e09e340991ef1785a2f88ec0720249f740a845e64bf43036a101a6a725b567524382fb00b9c7a1f793df1c23ea3e20e4696d84aeb82bfd4cc00e56de4489328dbf95d3fa0bd644701f46be6e8b47a7f3108665fc67c563a9ff08c65974f632d07fa3c7e783ff34b80843ee2552ce7d4c31ce9b0d96cb242c5142fc3a675e353970b49ea626ee72902a5dc9fc79e3cb74e3ac46229c24948ea030d94b26f55d5c0ee4216a559c640e6a98f318ac541b0b1856fe83df798ed22ce400bc4147368f4caa7e4d57fae3b0239ed774e16d6a6c3eb1d3000ca72375a3c513450bbe24e66f9efc4a155da4d370c540443a3efbcf1f60a9bd1bad7456e6b4e6542cf4851e633766b19271a2bcc400f04a6eca48a7761f0df8f712580d9109ab400995bce27792b2a80e6b6a9974f6ef001fe4e27a4f5bd0a943396216ce1c17b5084fae190a91a4ab3d67c2a9bc9c99c509bcb7b8762e96efe24275ca2ab35c195032d7080f2346cbf00757ea2e6e6b5347ede5de7e6c36433e268b4519ff67aae6ff02b1a09d68cc30650f836ba7605afd33da52678eb519f88ece55dbcb0b425103c06f5908fc1a9ed9221757071e5158a83a7e0f92268dea3a47dc86c87668eb8d6f3871846bdac5766e18261438adbc1889db173f87d25e2e1f2e51584d4e59b04904bf813d81ca3b739d7996804fca32e3a9508c569793a226e9364c8cad88763d8a582a1bc1cb68297d581290ddc1cc2da8e52358107ec83f2abd1398f15f3b43edf2d738625d3199f1405d0f7b6389d9cc54012b7af08457593b5dae36d3e54cd04bbc8f775a2f6378de650996b5b2adea67dff1ab7a7ea87ad99a673efb7dde9857ab3827dff9c718c3b874cf1b9a2a17b1550a92bf203ef9ecd4159008af3f28607a6def0be01e1e24362351e907e46b1e244b21f72eb2d091c285a4e430c199e73b88c1f03cffee9b99399689f8f6d0f6be0463e00183221f1e6093478a78b921d679aa8c1ef3502075eec93769d9a0070d9202a5eaa2c05b234ea00bf152fa90b5e5adc0d1bf4a8c1b55c73225252db105a3d9a65ec914ce52e1a745278ff18d71f6ab34f8b0918229643801a48156e156aefb3b5a3a556158cfd124f75b7a526470b00a617963c995877a5fcaa7819fc5d7440a81a73cb654a31a3a8770486b514c41d79458c81f7ca1e875cfb56b31f479ab24ce85492cc4b9368a3bd11021ce90831d1d3a6c7ac9e5d608432455b865a4303a370758216ff97e64d77da1a963fe18fd29bab2efdbd53574eb2a8f843024b0296df6ec3b3ceb2ba09820eefcc2d08988b9d76e6d2a888e609be837c87d2a6b03660729a2f8b28ac9600006f43c8af56b38ecb1918a71a8802d68f726571ab8d017640c508720d4c9391a7a3d6fd9c268b56d0e67bb7d4cd4e643b98846cfde3c8f269a15975da6caf2957e35ad2042b3c976211beca43a4f7fa59e83b4fee1e67cd5375af99150c671ddf2da4c307471aa7361699a058beaaed373bad936cfdf2a90cbbb17e3e12ba8cf6703dc47a2807e1e20d337a36d4c1d31c0d4c1e8e0e3fe7e8e14ab292a5eb2590e964db645134d4cde5cbda27b02b8e3b7337ade0e4c5c47f78013bb44114c31172cf0c80161d32848b631ea5c073ea4d1a3d5deef9d5583f50f9d11a91bc1bb754b14a77edf8ce5d55145d2a0de4e8288cdee6e4b073034b109d569830b3f3440e300a40a65ca7fcae216c8cd25f378b15bfecf4916a931d886a61b7a58c055c97294472698ee36894273d909dbada4389f8991d0f11a86ffd1ec5f627c957f2bf51107c01b3b7dc2344f2de69ec1c38b3d3a10014436eb963f7c7fecc5c839c675fd5e8bffd9ccf5ac48c3c8b9a011e4ff6d4fd65f146ace84b83b117d3ca86329a087f7a09e741ce611de150650d5806da7b6ed004993ec73b4dfe995dc0fbe31cb6d1dd9949001b879e32bcedf093a644548f2a04ea3ad362b8fc7725e33361ba42ae970c6bf118d078e1a0fb9ced0dc0435d2830810df9c5a4b24e477860f22ef16b684f51ea371b0858678d02ded69c5bfcc4d65d5129a0b7b5ddcaf5ea4565e728b68419dae7beeab71c63095eca58731df416d23a039db942da5a29421155a17cc73d05b20b35cdc9065824fd9f9964470948fda72c52d9f7aa2fc9ca1fb7012198ac889f32a597bc0fd64cd47a81f7c0a2622651fbae6d9f6479fc8b7c7c72f7c3930e87d21b125001a2ec0601e90b62ea364e51d7dcd1c8c02d31b4f54d92fb78bcc22d18902040ff7c1f631aaf87ec386c63989b344b7a9079bcf0b2e8de969b7766aafd917ef2e693a7b937330ac5399aecbeafb4acaaa9cabd2e48795b9ba9c13af0c483bb7797545d2ed1052740a1300917b2870e9b9c3de20d1ac24a6b551a229e31640c7984215385bd00bd0fab50284334e9bdae339d1dfc43a200ad319994332d03c867e16bf66921e356dbee7b0391dc23633bdbef847c2dc6d8993b26ab5d9d123389c6b497438f6f449b422f7c56abec405f75221f79beda11523fc79642cb798ce7dc824846a8f69bb1a4abe7a92c893dd86ff31a5b0484d2ae1d5a5ec483583b4ffeabf5024b6971145256a086f233c2b7dc06ff733f565b64f1dd9ed289056d6f83aa60cbad8e5a920d211ccf3bee86481a477eceb43b1b99aff03896dd8e12b566bca260c453e8e2ea0a20caa2b5804b4f7a301f091d2bbac2c66a37833be13844aad8fd151d66b18ce06e134c5834c35b61ea9fb8d974914a8871c788c0685ef09985f8d786312a7ffe48f9c97f5295c7451d46a273d28a98e45043cad32c6a9c3420b43098312ab22bd47795d5f03f9dd4af58237491edd85a6c1c625505142768cc824c612400c9bc24952331d471c14f25896270daacdaa409a371b434b7dc87f0e6160ad6d6389d28cff3832f6aa2d26c9dbc801f4245be86df5817305a4b7951d4a38792c6c4ef8462624cab059a27ee1667ecd648516808bbccbffcc91001049f1ca39d54adef74bb25630d178f4d748082bebfe34e95b05f64d39a862e672bf940bc0bcdfbc64234454b2d872f53382eed474bac75e89202d5b50581ee2b8031f8147005e11128320454f4b155866fde3aa818df7e5f0d86b36ca9244f6ac5053f40c5bcfdbe210d0bc44b08d8bd8a38d1b62cdc91d699368b487249397f0e5489ad490c2575a30ff8777dc6354952792d9c33eaebed2c98fb515d9793faf3706d4ab5331de1622e9370e091421975d75486dc891afc5a56093fbb58a324c4d29a2f8075fd02f73e9d3f527844fa74449816b8187fdcc045c3bbeb10c6a94b9e71135c0dcd49506302bb431c39cfe57fab7c10cdfd604d118495c671ca216b6d85ac782867ddceb4981d0f61eb2f7ac3792e05dd2c44324024b24ae999d7941d771e70549f364eecd8a2ac0a8948b2208e235a29185a9ac59c708b1c23246573885e6bae03267f8436a87ce198ed9ebf98537971d38fe3b14771c4885bc6521d5c854a25f08b2e497539b4b37bce2989305ada65ad26450e9b2e79a1b57b1e5e9ccaa906d6c2a14bfc0b93b1c3698e0761a5580bd28fbd363be9afb2711e466786845dc0cb5a0068f12024a9097e8aac59d1dbffcb8fb8eaef0bcfe13ac8125d6d85a14c7753e613d56bd582adb06b67466caa196a5d56b201b9a9eeac75bea4ecd9416a344444662bc3eb78e566016f0312f134583965c2c807df7a84f64221d0df7cea8a12057053691797b0efbaddee505952dc71814068dcc4ebf9ec1590ce50043e6a550425c3541cedbc066550ad9660b613261596f418fcf773eb1d55b820ea1f089cccfd0237761534113acd505e96cd060bd23c4433719ce2ad8cab5325b81761583b1914548953d5c046d4cc0c7898cba0ea832d0fcfd31aa7b77a353c18d63bef6a8a49c8a5a8f4fdaa0b95d8772eff78c58701019d71ed43ab762be1bb491d0ab1b19b309af548d0ec811f9f63cc2fd8d0b3d59a546413ce83c9fd1f8ed9bdec9cb4bf2a14989eb500f4139a523323009a615c47b50ef1ac04e5148f78cf9f0d5d5f298f8fdf37feeeec4110b42d5750ed4fb7895b7f63d8e66ea9b8461f15ca580933b8a91183fadda6b8ad5897d6d4781ea01eb1babc85b244fd7ed64665c3b01e7fcb4519d66e20bdb78668841b3aaad7e1ae64d396f794e66409a43e0f73891852372526b7695ac8d1d8eee77f55ae4192d8a93046af7ec079d8870e9ac4b06a4953a56cbc6d60f5d96902d46ba3986fcb5f3e232b79edcdf33c6117cf0a9db325c91a591bccd8359d8f552130c6b4f70ac4d4c8dd5a61226a01867a456efd0c2f7de3266f8c0333c995538ec900bc09335fb8f6bb9aee491669c554574e2245fd8a4dd0323d57b424c7852c0002fb27d338cbca13bd039dbebc9138f5c45c867ce00978688fb3769a7c9b5b5f4c438938d941f0ed7e6675709ee18f8757c9de6fec3254fdfe85303085b811aeceb547050399d3e9a6584b2c69f9cfebbcf84d7a75916f7b27fd08b1a7883093bc85c1c819b9f19f85130d86f8f0acd85fa0d69bcd275a499866a7f9653dfc777536412021a1aa2d099b3b985eb378f984c601aaba606a20017d6d10c33b53701c1529471e4f9f48d1fe3f45ed977d396fc96bc3d84cea2990ca8b6463f2743dd49181dc22c08e3439228056879e6dbdfdc3c72e70ea18da1827c18100ce9c8617ab413f911ad5c3ec37665971bcc4e70419c05dbcb39ec7026fba459ef2810531d14f55bd6d5877e9a78cf03dadb11b6a9d34f088e1c0b7bdc8a97625db90a1cb4b5d880a61f6cc0405df6845b5b856110ddec9d3ce8ad1c9ff8614d46b0168580b9f78c450462371c8725fcf5f65fe3b83647119ac3898ea9a6be58e9d1cd0762e44953f74931b801d01883a67274df10baf4157f8e1f08e61542e4b26480dc59f585ff74c9b232ff710504f7453b6cf7e7a09c93335a50aa043e8e0e69a5d71a366106c651cefd2466adbe7199117303a84e49c3815fd798fb5b5be61a2a7e447bb0a38bbd3e1ce872e850891f1e7c6fcf3c9014977f78f01f459456f1dc36"}], 0x1128}}, {{&(0x7f0000001d40)=@l2tp6={0xa, 0x0, 0x3, @mcast2, 0x0, 0x4}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001dc0)="0cf5c5618688f73d52f8befef08a4c062e6b6a6c18b92f5071860168925402f451", 0x21}], 0x1, &(0x7f0000001e40)=[{0xc0, 0x10a, 0x50112ec9, "ca020ffaec77adb7b30d172cf37cf74bbc48eb9021a313e82ca8a15c00315efda28b24f8aae0929b69482737b35ed49d4fb5f68f96366ad4ce3bff59c88492876b792d12d0c9b34aea7dd22cef6a77e2385b663817a44889348d6605703d1e31fdaadafc7a40f44924c4a89b8603796185113226c16837d93ad1cdc0d55dcadd2b0c24745cf1ddbb1dbe034dcdb08026427bd5d9cf1f2ae9e8dc7ab008716aeb65b4a0248cad3883182f57c48767093c"}, {0x28, 0x115, 0x4800000, "2caaa430cce68a2897dea10f041e13235c5f974d55b8f757"}], 0xe8}}, {{&(0x7f0000001f40)=@nl=@kern={0x10, 0x0, 0x0, 0x2000000}, 0x80, &(0x7f0000003240)=[{&(0x7f0000001fc0)="99f8831eb47bd6c76197fd33024c6d92ae4a62d24d129d8fe5ac247c075dcbac31ccc5b978018e3ee2bc752ea6123699926489aeff71be64104bdba3591412170bb92d2d277fde211818c858a58a4d26b3df420d9f3c6971f1c6c2b08362af79616ca062e53ef8f0dab7dbe3", 0x6c}, {&(0x7f0000002040)="417596e2c7a9495969563e128ae5eed33dbebc761504418471e2aa06fed18b64e113305bb671cd394d87fcc523ab006f57e5f5eb5d0879d19dc360766693b6b4aef8148759a544d5054e76041ee6342798b65ae694c435a97708e561c64b561d4fe690fa1a12acac4ccb6156368d6c00826cbd8e59811e658a0608131d6a38b29a72bda45ff8e56861d21b388a0a1e08e7662bfa00b44653afa71c038e719e660097173cfecf570694067e806f1c52d68db12ab9310edd27350e5e9c44c29cb3bc896890bb22757da14a674aff4846932c30a6cca8f84ec19bd84399fcaf4fda749d93b06a7f1f3ddc12a365ce8610", 0xef}, {&(0x7f0000002140)="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", 0x1000}, {&(0x7f0000003140)="ee8bb9623a6b9cf7c320d49f38ad3c1d55c0d28ae1efb640a8e7a4f5cfc6454bf5e36006a23e8e865a5ad4e43cf2", 0x2e}, {&(0x7f0000003180)="f71218996c2a41807bda11cc5d8851475bcb78235f043480a46ba17d2be137c74661125f8f9643c44a811a2d008efbb85f6a532550293a0e09f56a554ad577f10394768dfff2df5f804a3df057b0f7cd73969a1b4b62da385d904a5a0ba3146853724e84267ed54d1cd1b07b1e8dd1230c9723a9f734d9c279248216045a49e31ec44de1cb14add4ee4b623003295048dc216420f9dab64664e38b946bd6", 0x9e}], 0x5}}, {{&(0x7f00000032c0)=@rc={0x1f, @none, 0xaa}, 0x80, &(0x7f0000003580)=[{&(0x7f0000003340)="906ed32527a66e13619816bc7d59a53ce5122e527d82126d9d0d4794368b9a23d0ecdcb66c91641847f00d0438ba5a7dfeba1e3ae9e4fc400d1af11c571b093ded2715d65f9880", 0x47}, {&(0x7f00000033c0)="f9fb68554485630b9ea2e365db637bc35179030f319b2485ed5a48a8207a4167528cb22e7464b100358c6bdc4a314127496438e1789ef2945b86ec00f6874e2b8a6b995859a7ac9270075eeefbd2a1008162ee44359a9f6e2d8142678d4a765773af279020f3b9ddf6ec8f9d3a53915bfe51c863e55875aeae1dfcae13b8b2207c053e3cf91c6a33616d", 0x8a}, {&(0x7f0000003480)="502e63bb6468f497b53b8cff15169ece1c417665947bccc54aac61ee69f7fde5d3e50dbd7011b3b27fb020d54ab0f94cfd07b6ca957a76a1636e85e3b7d0d67f676607435b946cce9de54180c428d676a916fbf18d688b8a1a2afafe495e62a167d3c7b97c99e1a08bea1f8757e515494ce04745bd256e556e3de33aa203689d06439d5296d0bd8f663292d3d9bbfdd65282adcc4ad7d15c78f0e0c55ed6005e1e7d05135b7ee11cff1e133aa12862a06b06e160f7a0563638707d764a3c2da9dd2b43fb51b1e54e3d08b335af95e44956a7863c7434cfe32cacb7079aac84e80825", 0xe2}], 0x3, &(0x7f0000003e40)=[{0x10, 0x108, 0xffffffff}, {0xd0, 0x102, 0x2, "880d3db340725e3acd4e7d943af45986be58b297142eec4699b8063ae0e69a49b119ff08f6fd4f667f67bd45729a39e0477d39cbd23642632f68c914251b06f1ffa5fcc9864769cfb731e9234b99adfb912fdaebaa98f98ce91e48b6de50ed6233234bd9d6ab64f4792bf4b6b8d4663b8e1bf72414a9054a5e5c2552c46d0f8ebaabf368727162378c03728c6bb5e6dd11086149727bff9f5a5acfef76fa757860e5505bcd6a735fca4202d571f42d64cd9731ef3a18a60e8a"}, {0x38, 0x10a, 0x3ff, "a2ae85f7fdb812aa94235f8653d5e3bca5a368253f64a6f56ab148a65618147048c41af8"}, {0x60, 0x3a, 0x4, "42ccff29707813d700acde8a7cf4bd6c323af65f060897110baa9e1dbf140efa3da9c7c089c538e7d5ede1a1ecf6c5b6a193e7cfedc7fba74a6f7a850976335c67954074a7da2f8e4d65665316d733"}, {0x40, 0x11, 0x6, "f97e91b4a01ca2abdc3efa894cbd70251d6704e15cff0afbcdfac75c484d873c4d938b7962483ae9a8f2ecdb"}, {0x108, 0x116, 0x8, "12f509e78e1308cf6ed805431e2f63055cecb56f781801227de92dcf246bc0c8d838c9dae207e2b6ef3bbe13dfb7f8250d26d277816e5057aa8e608c1e286217f59490a2ec6ec806a32db663493a41933439cf7183f5cbb523266818d2069929573e81c2e941babb1021355c9d441b801115eac2cb71e642d611e0de5be876f8e850a1ea7c2f83d492b81dacfc9eb796e5cfd2a5fc406700386841e20f9b355e4a28e787f3048516e9cc232ae95421a55a9beaea8e55293b30762e9b273d1111dfe04f9e66fbcbac670726e12584172c24d1f4e4e4fb768bb33157253719c2ddd0e21d3a78c7d7c951aa1a77edc2390e971f29ba406115"}, {0x1010, 0xff, 0x9, "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"}, {0x80, 0x29, 0xde, "95f61d4874114e8cc24008f14d113b785845a3eb9f914221854a07550317575b4f24f6a61a6e2463cb30d6145dcb3983ed4cf09602c64b9a202f92d4dea3e789057c3f6ae9dc1d0d73f491a06c6acf70c10d2b9333cb1f2b9ab2f706ccb4f88ca78fe9f4c76347af120a74962a"}, {0xe0, 0x119, 0x7f, "0fd6fc4bd6213d10859c9b2fef55c059e659ae0bd1e85765de3991885c2369694236ccbaeb1aa0d7e3bc90b287f2f12feac826fbdf62aae00b65ff09199433fd37c56852b9b84eafdb0b919f1aaf473a6cf472f55b87a69c550d0a04824b6d9ac014791ee91c5545fca48928e1216f39a5361d15ec0441731c08b8be8056c76ce9dc896d0fbb5ff48d52f8bc8e3be4da75333390cfe32a1908757662fc5dcf8516371a20330656c645d106fb9e82503e14c1592e9d256beaf9a2d4d8e4fa9ab5128c3bcfdc0cde91da31a806c7"}], 0x1430}}], 0x4, 0x24885) 637.20894ms ago: executing program 1 (id=11846): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0xff00, 0x37bc0b736aabec5e, &(0x7f0000000100)={0xa, 0x0, 0xa576, @empty, 0x40000008, 0x2}, 0x20) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0xf, 0x4) (async) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) 604.955552ms ago: executing program 0 (id=11748): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000001c0)={&(0x7f0000000000)="aaf3ca977d97", 0x0, 0x0, 0x0, 0xffff, r0}, 0x38) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r1}, 0x8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="b543080afb161a8d714452"], 0x14}}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x800) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r8, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r9 = socket$inet6(0xa, 0x80003, 0x6) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000000906010200000000000000000200ffff100007800c140180a00002"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000006800b5610000000000000000020000000000000004000b00080010"], 0x24}}, 0x800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000020000000c00000000140000", @ANYRES32, @ANYBLOB="00000000000800000000000000000000000000007bf8b8cf1c8ba7f2b90216845d0392d7fd9ab5b822a1389f00bf698bdbbb288ecf35d77a4b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) unshare(0x400) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r11, 0x68, &(0x7f0000000200)}, 0x10) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x1000, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x5, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x6e6bb6, 0x1}, {{@in=@private, 0x4d3, 0x33}, 0x2, @in=@rand_addr=0x64010100, 0x0, 0x3, 0x1, 0x7, 0x0, 0x20000}}, 0xe8) 495.710698ms ago: executing program 3 (id=11847): ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) write$bt_hci(r0, &(0x7f0000000280)={0x1, @inquiry={{0x401, 0x5}, {"71dfa7"}}}, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000013c0)={'wg2\x00', &(0x7f0000000500)=@ethtool_gstrings={0x25, 0x8}}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140), &(0x7f0000000240)=0x4) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x2}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018220000", @ANYRES32=r3, @ANYBLOB="0000100000030000001800000000000000000000000000000195000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000200)={&(0x7f0000000100)=""/156, 0x9c}) 495.105383ms ago: executing program 1 (id=11848): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, r2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x6}}, @restrict={0x4, 0x0, 0x0, 0xb, 0x5}, @decl_tag={0x7, 0x0, 0x0, 0x11, 0x4, 0x4}, @volatile={0x7, 0x0, 0x0, 0x9, 0x3}, @restrict={0x3}, @const={0xb, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x61, 0x30, 0x2e, 0x61, 0x5f]}}, &(0x7f0000000100)=""/36, 0x77, 0x24, 0x0, 0xb6, 0xddace7cd4f139789, @value=r2}, 0x28) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffff}, {0x3, 0xffe0}, {0x9}}}, 0x24}}, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}}], 0x2, 0x60, 0x0) 492.942119ms ago: executing program 4 (id=11849): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x2c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x69e9174b7d70c7b3, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40884}, 0xc857a35317b04aca) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r2) 439.607644ms ago: executing program 0 (id=11850): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x850) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x2004c090) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r5) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40014}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000029000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x7}, 0x94) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a000014000280100017800c00010006"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) close(0x3) 415.338335ms ago: executing program 2 (id=11851): r0 = socket$inet6(0xa, 0x802, 0x0) sendmmsg$inet6(r0, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e1e, 0x6, @empty, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000012c0)="1c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000600)="5bbb51f35a1960717e8b", 0xa}], 0x1}}], 0x3, 0x1c000) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000000)={'ip6tnl0\x00', 0xa5}) 361.33892ms ago: executing program 4 (id=11852): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000002880)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0xf772, @local, 0x64}, 0x1c, 0x0, 0x0, &(0x7f0000000b00)=[@flowinfo={{0x14, 0x29, 0xb, 0x4}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8000}}], 0x48}}], 0x1, 0x8000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0x6e24}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x7ff}]}, 0x10) sendmmsg$inet(r6, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) splice(r4, 0x0, r5, 0x0, 0x1100000000f336, 0x0) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@ifindex, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$PPPIOCGNPMODE(r4, 0xc008744c, &(0x7f0000000140)={0xc223}) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r8, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c1200000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000e0110380dc1100800800034000000003"], 0x120c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 303.916991ms ago: executing program 1 (id=11853): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_emit_ethernet(0x83, &(0x7f00000001c0)={@broadcast, @remote, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x49, 0x3a, 0x0, @private0={0xfc, 0x0, '\x00', 0xfd}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2d}, @local, [@hopopts={0x11}], "fafb17c163a3040b7758ba1b5be6d88a91"}}}}}}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000580)={'wlan1\x00', &(0x7f00000001c0)=@ethtool_ts_info}) 272.689735ms ago: executing program 2 (id=11854): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000001200), 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000012c0)={0xfffffffe, 0x0}, 0x8) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001340)=@o_path={&(0x7f0000001300)='./file0\x00', 0x0, 0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x16, 0x13, &(0x7f00000000c0)=@raw=[@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @jmp={0x5, 0x0, 0x3, 0x8, 0x4, 0x80, 0xffffffffffffffff}], &(0x7f0000000080)='GPL\x00', 0xfffffffb, 0x1000, &(0x7f0000000200)=""/4096, 0x41000, 0x40, '\x00', 0x0, @fallback=0x19, r1, 0x8, &(0x7f0000001240)={0xb, 0x4}, 0x8, 0x10, &(0x7f0000001280)={0x1, 0xa, 0x1c, 0x200}, 0x10, r2, r0, 0x1, &(0x7f0000001380)=[r3], &(0x7f00000013c0)=[{0x0, 0x3, 0xb, 0x8}], 0x10, 0xff}, 0x94) 271.538274ms ago: executing program 3 (id=11855): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x0, 0xfff], [0x0, 0x4, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xffff, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0xc, 0x89f8c55f46292553}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x40, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xb0}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x1}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x1ff}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x804) 102.179201ms ago: executing program 2 (id=11856): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000006, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f00000009c0), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r5, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback}}}], 0x28}, 0x0) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r6 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name, &(0x7f0000000140)=0x10, 0x800) setsockopt$TIPC_MCAST_BROADCAST(r6, 0x10f, 0x85) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x1, &(0x7f00000025c0)=""/227, &(0x7f0000000000)=0xe3) socket$nl_netfilter(0x10, 0x3, 0xc) 72.332213ms ago: executing program 1 (id=11857): socket(0x40000000015, 0x5, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) listen(r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) shutdown(r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x28, 0x5, 0x0) socket(0x10, 0x3, 0x0) listen(r1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000003240)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x400, 0xfffffffffffffffd, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="b7000000001f0000bfa30000000000000703000018feffff620af0fff8ffffff71a4f0ff00000000ae04020000000000be400300000000006504030001ed00007b130000000000004d44000000000000630a00fe000000007933000000000000b504fdff000000009500000000000000023bc065b7a379d17cf9333379fc05000000912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50bec919bc461e91a7168c5181554d1b583c587e436fe275daf51efd601b6bf01c8e8b1b526375ec5dd6fcd82e4fee5bef7af9a0200000000000000e3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f645679c294392cf538b07ce2646cb7798b3e6440c2fbdb00a3e35208b0bb1d2cd871c5548930be3835f2554b4a28610643a98d9ec21ead2ed51b104d4d91af25b84550a7925c3109b151b8b9f75d80000000eda88c658d42ecbf28bf7076c15b463bebc72f526d8e4a9e231d512381e7a78afcb913466aae7f6df70252e79166d858fc152b659da074e1320060d0b11008e59a5923906f88b53987ad1714e72ba7a5b74f0c33d39000d06a59ff61622cfd9aa58fe8d485ae2c0cc65c2a36aaec2477584b6a89adaf17b0a6041bde4cc3ed54d27f777e92b87496e6649cf728d236619074d6ebdf098bc908c423d228a40f9411fe7226a40409d6e37c4f46756d31cb46761bade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18de0ae564162a27afea62d84f3a10746443d64364f56e24e6d21053d901204a1deeed41556175cbd4041b7d301bcb72652d950ad31928b0b093778b68e2e9853c02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f98928d5e9b94ff9ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cff538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595bcf50ab32d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063b59261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6f8c3a13596c2ea3e2e04cfdce669e51731b2875353193f82ade69d0540059fe6c7fe7c00fb7502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abd47b64a1b304502dda787343ce3c95300000000010000003baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022af46667cf25c5d3038816106dec28eaeb88343261a48a18f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfeff59d54d1f92ecc4e95dd2d18383117c03987d198899b212c55318294270a1ad10d30fef7c24b78b29d83238273f4fc87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead8eaf68b0c5dda0467d35a3807000000b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ea1e717d29135753208165b9cdbae037f315c7d951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d7012c1b45f6ada1ee7baa5b6a686b50f09b7f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac4d73a008364e0602a594817031fc2ff2c32a1989e00f52f8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a3c3e6e4fd2e016820f78b796a825b3dad9ce7b37507e0b83c3ecd01549bca6a016b3e18a00c748894dc3bfe5efda8b0a477d6a6562fdee45eb16e276dee992094ba9830f6c164179e7d532d86060bea930118d3cae1b8f916b9671b7000000000040f4bee5ad2dea2d14e195265504c05bba38b095e1679f96ddef65ba5de9c8cfb6465ae4165c0689a314a6eb6b36aa705b957edef3035e14b879d4e7dc00624708042e00bf9a7f7ae5f308744770759558e4fcb99c0dc957521ef255362bf2f3966f3754e81fb9bdef22c19f5a49147b85343f9f36bcda9f64b7a5c5b2f5452f5b1de02e6f15c5640bf89d4a74d51dc233dee628c1dfbb5566b98478c174b34eb234481547e484c6af101396b6977dd668b401391c1dc54f2edccf1cabe6be9868d383eb937efdfd9ade018106f544f04fc07ad525497f65fbad3cf145396acf3b0d38e6b46e28d86880fd6f62c373000000000000000000005d194c27cd4d8f6727de79be80fb4493a0ee2e85f59c71dc84311c0f1fb6c87081c7be9355288610c32c2d8c18bf2027212182903687f48262aea54c5f8a315c9aa4a5af1aa2c4007d1baae38c270012b7eb9411ae451204dba30f8321b07a18db97c3e0cf6a15170e515b1cc463a67a5b2b23ec5662ccfa898b8d5075647bdfb390cde56efb8fd42df12c5c8f66bdc58449ec2b38bf12f5f0a49dcbcf4e6f11c47d23fa34793a0000a1cbb1e06e9a8d2449451d7a05ec0a0d3c9716f505ddeba488c60ebf44cac05c2739694359c925148137376dd3f1330ed0e9211f73ee279cc0b5c298422395ce438f48a39ff569375e609f9e904aacc3d8011326d5e4d654c74501cf16bbf72d3984f9b4ef000000003a8a3d49fc837001e4622e58e3a4ef6b55a8dd0680d951cdb6e54ed92a9a6a0e5e494b7b7b0ef4b4bafc5d964551b2a22bfd12b0761ef07a103e51e84917ee44f860b9785e264343f6a80e9318edecf73df6940856cd56c56eb3831445833c701044aaa49439a44a624267580b3c0980d7f87437bf498f6e1915450400000000000000564a02552c0a5fedbcf4da0db6ed03b9dbc224ee76d20aaf1ac74bcb7eb6f202209e64cc4d130dcf6ab3df8ae4911deb4bb5c7df97fc348d151e834be73915f854272f69d88123f666448b6a8e73322b04fffea9cc05e4129debf311c73b4d1a244b1e5b9943028745a0b6477686740ab877315e35624d791e6f71adb1acd3e22cf472ff7e048b16c11c84da9a3b16b92665912132a4dba680052919c20e191311d8092a09f3c609823fed1bd651ce1c34de105790ba2ca3afa26647f66efbf97b109e7226c74e32beb14ff3fd6918e255fc9b42f86b0188cf885afcc9bb77a7fc3ca7ec1015af49"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) 70.647959ms ago: executing program 3 (id=11858): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000280)="96fa2c0bff2099297e1c1ea6d53ff4c2f69b32d385f14857ae25047e39555bbacdb216aa20b99d21a3aa5e5775e86006778ec677400377670a3422aa5184ed400cf452f14ef81d20a792091e037ed82c9ee401f0f428bd4951eab88952d04fd3c2201db3378816", 0xfffffdce) vmsplice(r2, &(0x7f0000000200)=[{&(0x7f0000000140)='K', 0x1}], 0x1, 0x5) tee(r0, r2, 0xfffffffffffffffd, 0x0) close(r0) close(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="7f0a00030011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, "000022ebffff0000"}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) shutdown(r3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@bridge_newvlan={0x24, 0x70, 0x1, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x31, 0x3}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r6 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000000c0)='veth1_vlan\x00', 0x10) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000100)="08001efbb0", 0x5}, {&(0x7f0000000140)="d0849e", 0x3}], 0x2, 0x0, 0x0, 0x60000000}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) splice(r3, &(0x7f0000000080)=0x5, r3, &(0x7f0000000140)=0x100000000, 0x403, 0x3) 0s ago: executing program 0 (id=11859): r0 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$netlink(0x10, 0x3, 0xe) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r2, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5f}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xfa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x8801) kernel console output (not intermixed with test programs): 4][T14509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10423'. [ 1017.229733][T14509] mac80211_hwsim hwsim124 wlan0: entered promiscuous mode [ 1017.243788][T14509] mac80211_hwsim hwsim124 wlan0: entered allmulticast mode [ 1017.252089][T14509] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1017.505590][T14522] xfrm0 speed is unknown, defaulting to 1000 [ 1017.762284][T14535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10430'. [ 1017.785985][T14535] bond6 (unregistering): Released all slaves [ 1017.919135][T14546] netlink: 'syz.2.10433': attribute type 1 has an invalid length. [ 1017.986612][T14542] netlink: 'syz.3.10432': attribute type 1 has an invalid length. [ 1017.995160][T14542] netlink: 16138 bytes leftover after parsing attributes in process `syz.3.10432'. [ 1018.171805][T14557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10434'. [ 1018.195118][T14556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10436'. [ 1018.486138][T14574] syzkaller1: entered promiscuous mode [ 1018.493229][T14574] syzkaller1: entered allmulticast mode [ 1018.899786][T14592] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10445'. [ 1019.159917][T14616] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10453'. [ 1019.188177][T14620] netlink: 80 bytes leftover after parsing attributes in process `syz.0.10454'. [ 1019.225715][T14616] netlink: 'syz.4.10453': attribute type 12 has an invalid length. [ 1019.400612][T14641] bond0: Error: Cannot enslave bond to itself. [ 1019.447993][T14651] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1019.504592][T14648] netlink: 'syz.1.10461': attribute type 13 has an invalid length. [ 1019.538135][T14648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10461'. [ 1019.603065][T14648] netlink: 'syz.1.10461': attribute type 2 has an invalid length. [ 1019.631483][T14648] netlink: 14 bytes leftover after parsing attributes in process `syz.1.10461'. [ 1019.681613][T14675] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1019.742970][T14648] dummy0 (unregistering): left allmulticast mode [ 1019.754194][T14648] dummy0 (unregistering): left promiscuous mode [ 1019.761506][T14648] bridge4: port 1(dummy0) entered disabled state [ 1019.791909][T14679] hmac(sha224): entered promiscuous mode [ 1019.823382][T14683] netlink: 'syz.0.10469': attribute type 2 has an invalid length. [ 1020.225697][T14711] netlink: 'syz.0.10476': attribute type 4 has an invalid length. [ 1020.296497][T14720] netlink: 'syz.0.10476': attribute type 4 has an invalid length. [ 1020.449441][T14729] sock: sock_set_timeout: `syz.4.10480' (pid 14729) tries to set negative timeout [ 1020.712968][T14745] tipc: Failed to remove unknown binding: 66,0,0/3983277261:1070573727/1070573729 [ 1020.742794][T14745] tipc: Failed to remove unknown binding: 66,0,0/3983277261:1070573727/1070573728 [ 1020.776157][T14745] tipc: Failed to remove unknown binding: 66,0,0/3983277261:1070573727/1070573729 [ 1020.800295][T14745] tipc: Failed to remove unknown binding: 66,0,0/3983277261:1070573727/1070573728 [ 1021.337854][T14786] syz_tun: entered promiscuous mode [ 1021.383815][T14786] syz_tun: left promiscuous mode [ 1021.429956][T14792] pim6reg: entered allmulticast mode [ 1021.479697][T14793] pim6reg: entered allmulticast mode [ 1021.503284][T14793] pim6reg: left allmulticast mode [ 1021.569516][T14773] xfrm0 speed is unknown, defaulting to 1000 [ 1021.724948][ T3399] block nbd8: Receive control failed (result -32) [ 1021.732018][T18416] block nbd8: Receive control failed (result -32) [ 1021.883713][T14769] pim6reg: left allmulticast mode [ 1022.157365][T14840] syzkaller0: refused to change device tx_queue_len [ 1022.381707][T14856] __nla_validate_parse: 10 callbacks suppressed [ 1022.381728][T14856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10510'. [ 1022.789788][T14853] bond6: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 1022.856553][T14853] bond6 (unregistering): Released all slaves [ 1023.026232][T14880] ip6tnl0: Caught tx_queue_len zero misconfig [ 1023.060425][T14887] IPVS: set_ctl: invalid protocol: 58 172.20.20.38:20001 [ 1023.076989][T14888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10515'. [ 1023.090953][T14887] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10516'. [ 1023.152158][T14890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10517'. [ 1023.166247][T14892] validate_nla: 3 callbacks suppressed [ 1023.166562][T14892] netlink: 'syz.2.10518': attribute type 8 has an invalid length. [ 1023.181904][T14892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10518'. [ 1023.196245][T14892] veth1_to_team: entered promiscuous mode [ 1023.206548][T14892] gretap0: entered promiscuous mode [ 1023.235292][T14892] veth1_to_team: left promiscuous mode [ 1023.245352][T14892] gretap0: left promiscuous mode [ 1023.425085][T14916] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1023.460036][ T5233] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1023.477894][ T5233] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1023.495411][ T5233] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1023.506137][ T5233] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1023.599992][T14921] syzkaller1: entered promiscuous mode [ 1023.613080][T14921] syzkaller1: entered allmulticast mode [ 1023.630983][T14925] netlink: 280 bytes leftover after parsing attributes in process `syz.1.10529'. [ 1023.632350][T14921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10527'. [ 1023.663111][T14927] hsr0 speed is unknown, defaulting to 1000 [ 1023.700403][T14927] hsr0 speed is unknown, defaulting to 1000 [ 1023.707912][T14927] hsr0 speed is unknown, defaulting to 1000 [ 1023.714693][T14927] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1023.731926][T14927] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1023.750593][T14927] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1023.766563][T14927] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1023.777686][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1023.813424][T14927] hsr0 speed is unknown, defaulting to 1000 [ 1023.855902][T14927] hsr0 speed is unknown, defaulting to 1000 [ 1023.880027][T14935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10532'. [ 1023.901434][T14927] hsr0 speed is unknown, defaulting to 1000 [ 1023.921844][T14927] hsr0 speed is unknown, defaulting to 1000 [ 1023.924645][T14937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10533'. [ 1023.959707][T14927] hsr0 speed is unknown, defaulting to 1000 [ 1023.967732][T14927] hsr0 speed is unknown, defaulting to 1000 [ 1023.983223][T14927] hsr0 speed is unknown, defaulting to 1000 [ 1024.002402][T14927] hsr0 speed is unknown, defaulting to 1000 [ 1024.009857][T14927] hsr0 speed is unknown, defaulting to 1000 [ 1024.062929][T14942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10535'. [ 1024.249316][T14942] vlan2: entered promiscuous mode [ 1024.260599][T14942] gretap0: entered promiscuous mode [ 1024.367862][T14968] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 1024.412458][T14968] x_tables: duplicate underflow at hook 1 [ 1024.635654][T14979] bond6: option primary_reselect: invalid value (6) [ 1024.655598][T14979] bond6 (unregistering): Released all slaves [ 1024.717119][T14984] ip6tnl4: entered allmulticast mode [ 1024.859993][T14993] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1025.170701][T15009] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1025.386366][T15025] netlink: 'syz.0.10560': attribute type 4 has an invalid length. [ 1025.657433][T15048] sctp: [Deprecated]: syz.1.10567 (pid 15048) Use of int in max_burst socket option. [ 1025.657433][T15048] Use struct sctp_assoc_value instead [ 1026.034792][T15044] xfrm0 speed is unknown, defaulting to 1000 [ 1026.074040][T15044] hsr0 speed is unknown, defaulting to 1000 [ 1026.168003][T15079] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1026.277413][T15049] dvmrp0: entered allmulticast mode [ 1027.094559][T15125] netlink: 'syz.1.10587': attribute type 1 has an invalid length. [ 1027.112354][T15125] netlink: 'syz.1.10587': attribute type 1 has an invalid length. [ 1027.200075][T15131] netlink: 'syz.0.10589': attribute type 1 has an invalid length. [ 1027.236026][T15131] bond9: entered promiscuous mode [ 1027.241479][T15131] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1027.257854][T15131] netlink: 'syz.0.10589': attribute type 29 has an invalid length. [ 1027.275781][T15139] netlink: zone id is out of range [ 1027.288791][T15139] netlink: zone id is out of range [ 1027.294282][T15139] netlink: zone id is out of range [ 1027.300668][T15139] netlink: zone id is out of range [ 1027.306375][T15139] netlink: zone id is out of range [ 1027.313108][T15139] netlink: zone id is out of range [ 1027.318611][T15139] netlink: zone id is out of range [ 1027.323887][T15139] netlink: zone id is out of range [ 1027.329175][T15139] netlink: zone id is out of range [ 1027.334441][T15139] netlink: zone id is out of range [ 1027.425796][T15144] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 1027.457704][T15141] __nla_validate_parse: 15 callbacks suppressed [ 1027.457726][T15141] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10592'. [ 1027.599051][T15156] debugfs: '1ùà^!‚Y‡°”õËí [ 1027.599051][T15156] 3ìUH†5rºBnœæ\' already exists in 'ieee80211' [ 1027.640633][T15160] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10602'. [ 1027.673543][T15163] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.10598'. [ 1027.683748][T15166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10600'. [ 1027.860434][T15182] xt_TCPMSS: Only works on TCP SYN packets [ 1027.911217][T15183] netlink: 2492 bytes leftover after parsing attributes in process `syz.4.10608'. [ 1027.930994][T15187] netlink: 'syz.3.10609': attribute type 1 has an invalid length. [ 1027.939900][T15187] netlink: 'syz.3.10609': attribute type 2 has an invalid length. [ 1027.949761][T15187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10609'. [ 1028.073444][T15182] team0: left allmulticast mode [ 1028.079611][T15182] team_slave_0: left allmulticast mode [ 1028.086618][T15182] team_slave_1: left allmulticast mode [ 1028.092678][T15182] team0: left promiscuous mode [ 1028.099377][T15182] team_slave_0: left promiscuous mode [ 1028.109380][T15182] team_slave_1: left promiscuous mode [ 1028.119329][T15182] bridge0: port 3(team0) entered disabled state [ 1028.146742][T15182] bridge_slave_1: left promiscuous mode [ 1028.158681][T15182] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.181161][T15182] bridge_slave_0: left allmulticast mode [ 1028.189892][T15182] bridge_slave_0: left promiscuous mode [ 1028.199630][T15182] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.277329][T15198] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1028.299371][T15202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10612'. [ 1028.315852][ T5233] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1028.315888][T15202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10612'. [ 1028.336247][ T5233] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1028.346178][ T5233] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1028.354968][ T5233] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1028.575904][T15220] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10617'. [ 1028.795618][T15238] netlink: 'syz.0.10621': attribute type 3 has an invalid length. [ 1028.883033][T15244] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10623'. [ 1028.949239][T15250] x_tables: duplicate underflow at hook 1 [ 1029.275763][T15283] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1029.276233][T15293] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 1029.979987][T15337] netlink: 'syz.2.10647': attribute type 1 has an invalid length. [ 1030.033916][T15336] tipc: Enabled bearer , priority 0 [ 1030.050713][T15336] syzkaller0: entered promiscuous mode [ 1030.059584][T15336] syzkaller0: entered allmulticast mode [ 1030.100053][T15336] tipc: Resetting bearer [ 1030.125062][T15334] tipc: Resetting bearer [ 1030.150927][T15334] tipc: Disabling bearer [ 1030.249659][ T5241] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 1030.271313][T15359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1030.514504][T15377] x_tables: duplicate underflow at hook 2 [ 1030.874472][T15396] ipip1: entered promiscuous mode [ 1030.885935][T15396] ipip1: entered allmulticast mode [ 1031.395074][T15429] tap0: tun_chr_ioctl cmd 1074025677 [ 1031.402150][T15429] tap0: linktype set to 768 [ 1031.722222][T15449] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1032.313391][T15495] IPv6: sit2: Disabled Multicast RS [ 1032.332434][T15495] syzkaller0: entered promiscuous mode [ 1032.345871][T15495] syzkaller0: entered allmulticast mode [ 1032.386254][T15495] tipc: Enabled bearer , priority 0 [ 1032.394939][T15494] tipc: Resetting bearer [ 1032.404091][T15494] tipc: Disabling bearer [ 1032.496575][T15508] netlink: 'syz.4.10696': attribute type 1 has an invalid length. [ 1032.506464][T15508] __nla_validate_parse: 17 callbacks suppressed [ 1032.506481][T15508] netlink: 228 bytes leftover after parsing attributes in process `syz.4.10696'. [ 1032.562850][T15516] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.10698'. [ 1032.740853][T15527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10701'. [ 1032.763294][T15527] xt_ecn: cannot match TCP bits for non-tcp packets [ 1033.110047][T15524] macvtap2: entered promiscuous mode [ 1033.115478][T15524] vlan0: entered promiscuous mode [ 1033.122432][T15524] vlan0: left promiscuous mode [ 1033.132783][T15523] ip6tnl0: Caught tx_queue_len zero misconfig [ 1033.150143][ T5233] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1033.170941][ T5233] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.202368][ T5233] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1033.222659][ T5233] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.238153][ T5233] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1033.247985][ T5233] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.258871][ T5233] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1033.267954][ T5233] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.291508][T15538] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10706'. [ 1033.330128][T15541] netlink: 'syz.4.10705': attribute type 1 has an invalid length. [ 1033.403494][T15548] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10705'. [ 1033.418331][T15541] bond7: entered promiscuous mode [ 1033.423800][T15541] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1033.432997][T15548] bond7: entered allmulticast mode [ 1033.530244][T15553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10709'. [ 1033.557729][T15551] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10710'. [ 1033.635674][T15539] bond7: (slave bridge3): making interface the new active one [ 1033.652159][T15539] bridge3: entered promiscuous mode [ 1033.669178][T15539] bridge3: entered allmulticast mode [ 1033.680643][T15570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10714'. [ 1033.689690][T15539] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 1033.698871][T15570] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10714'. [ 1033.793985][T15579] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10718'. [ 1033.879533][T15577] syzkaller0: entered promiscuous mode [ 1033.885192][T15577] syzkaller0: entered allmulticast mode [ 1034.061385][T15598] sch_fq: defrate 4294967293 ignored. [ 1034.092955][T15596] bridge0: port 3(vlan2) entered blocking state [ 1034.101278][T15596] bridge0: port 3(vlan2) entered disabled state [ 1034.108082][T15596] vlan2: entered allmulticast mode [ 1034.113321][T15596] geneve0: entered allmulticast mode [ 1034.119815][T15596] vlan2: entered promiscuous mode [ 1034.124973][T15596] geneve0: entered promiscuous mode [ 1034.208947][T15610] netlink: 'syz.2.10726': attribute type 21 has an invalid length. [ 1034.217096][T15610] netlink: 'syz.2.10726': attribute type 20 has an invalid length. [ 1034.261187][T15612] netlink: 'syz.1.10725': attribute type 1 has an invalid length. [ 1034.280655][T15612] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1036.731887][T15582] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1036.849425][T15622] netlink: 'syz.2.10729': attribute type 7 has an invalid length. [ 1037.034252][T15640] ip6tnl1: entered allmulticast mode [ 1037.066536][T15639] syzkaller0: entered promiscuous mode [ 1037.072915][T15647] netlink: 'syz.0.10736': attribute type 11 has an invalid length. [ 1037.099874][T15647] netlink: 'syz.0.10736': attribute type 4 has an invalid length. [ 1037.108921][T15639] syzkaller0: entered allmulticast mode [ 1037.120913][T15650] netlink: 'syz.2.10737': attribute type 1 has an invalid length. [ 1037.535577][T15697] __nla_validate_parse: 9 callbacks suppressed [ 1037.535598][T15697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10747'. [ 1037.577058][T15697] netlink: 'syz.4.10747': attribute type 3 has an invalid length. [ 1037.597747][T15691] syzkaller1: entered promiscuous mode [ 1037.608432][T15691] syzkaller1: entered allmulticast mode [ 1037.870980][T15727] tipc: Enabling of bearer rejected, failed to enable media [ 1037.980065][T15736] netlink: 1544 bytes leftover after parsing attributes in process `syz.4.10758'. [ 1038.015199][T15739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10757'. [ 1038.149815][T18416] block nbd9: Receive control failed (result -32) [ 1038.156487][ T3399] block nbd9: Receive control failed (result -32) [ 1038.223615][ T5240] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1038.238915][ T5240] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1038.250890][ T5244] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1038.260609][ T5244] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1038.391580][T15764] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10768'. [ 1038.746181][T15772] lo: entered allmulticast mode [ 1038.751790][T15772] lo: left allmulticast mode [ 1038.952897][T15794] bridge1: left promiscuous mode [ 1039.169586][T15809] syzkaller0: entered promiscuous mode [ 1039.186234][T15809] syzkaller0: entered allmulticast mode [ 1039.209065][T15809] tipc: Enabled bearer , priority 0 [ 1039.258198][T15813] netlink: 'syz.0.10784': attribute type 21 has an invalid length. [ 1039.258871][T15801] tipc: Resetting bearer [ 1039.279100][T15801] tipc: Disabling bearer [ 1039.303202][T15813] netlink: 'syz.0.10784': attribute type 1 has an invalid length. [ 1039.312641][T15813] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10784'. [ 1039.330417][T15813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10784'. [ 1039.467443][T15822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10786'. [ 1039.505919][T15829] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 1039.637973][T15819] xfrm0 speed is unknown, defaulting to 1000 [ 1039.650682][T15819] hsr0 speed is unknown, defaulting to 1000 [ 1039.860531][T15853] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10793'. [ 1039.912316][T15853] net_ratelimit: 346 callbacks suppressed [ 1039.912335][T15853] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1040.023615][T15859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10798'. [ 1040.241140][T15856] xfrm0 speed is unknown, defaulting to 1000 [ 1040.258534][T15856] hsr0 speed is unknown, defaulting to 1000 [ 1040.300587][T15875] netlink: 100 bytes leftover after parsing attributes in process `syz.4.10804'. [ 1040.682321][T15898] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1041.058535][T15935] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1041.214254][T15948] netlink: 'syz.4.10826': attribute type 4 has an invalid length. [ 1041.222468][ T3399] Bluetooth: hci4: command 0x0406 tx timeout [ 1041.320020][T15955] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1041.331596][T15949] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1041.464252][T15973] xfrm0 speed is unknown, defaulting to 1000 [ 1041.479102][T15970] debugfs: '1ùà^!‚Y‡°”õËí [ 1041.479102][T15970] 3ìUH†5rºBnœæ\' already exists in 'ieee80211' [ 1041.523328][T15973] xfrm0 speed is unknown, defaulting to 1000 [ 1041.541893][T15973] xfrm0 speed is unknown, defaulting to 1000 [ 1041.577146][T15982] xt_connbytes: Forcing CT accounting to be enabled [ 1041.629552][T15985] netlink: 'syz.3.10833': attribute type 9 has an invalid length. [ 1041.637820][T15985] netlink: 'syz.3.10833': attribute type 6 has an invalid length. [ 1041.739360][T15973] infiniband syz0: set down [ 1041.744357][T10252] xfrm0 speed is unknown, defaulting to 1000 [ 1041.759126][T15973] infiniband syz0: added xfrm0 [ 1041.773096][T15973] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1041.790283][T15973] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1041.808045][T15973] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1041.842798][T15973] RDS/IB: syz0: added [ 1041.855532][T15973] smc: adding ib device syz0 with port count 1 [ 1041.867705][T15973] smc: ib device syz0 port 1 has no pnetid [ 1041.880583][ T5922] xfrm0 speed is unknown, defaulting to 1000 [ 1041.889336][T15973] xfrm0 speed is unknown, defaulting to 1000 [ 1041.899811][T15995] netlink: 'syz.3.10835': attribute type 1 has an invalid length. [ 1041.923584][T15996] netlink: 'syz.3.10835': attribute type 1 has an invalid length. [ 1041.940359][T15999] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1041.990321][T15995] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1042.033607][T15994] bond4: (slave geneve3): making interface the new active one [ 1042.044913][T15994] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 1042.132461][T15999] syzkaller0: entered promiscuous mode [ 1042.138373][T15999] syzkaller0: entered allmulticast mode [ 1042.243682][T15973] xfrm0 speed is unknown, defaulting to 1000 [ 1042.319260][T16018] bond5: Unable to set up delay as MII monitoring is disabled [ 1042.355899][T16018] bond5 (unregistering): Released all slaves [ 1042.409897][T16029] netlink: 'syz.2.10844': attribute type 1 has an invalid length. [ 1042.433771][T16029] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1042.598318][T16029] vlan2: entered allmulticast mode [ 1042.604189][T16029] bond6: entered allmulticast mode [ 1042.609910][T15973] xfrm0 speed is unknown, defaulting to 1000 [ 1042.629733][T16039] bond6: (slave geneve4): making interface the new active one [ 1042.637647][T16039] geneve4: entered allmulticast mode [ 1042.645189][T16039] bond6: (slave geneve4): Enslaving as an active interface with an up link [ 1042.669856][ T5244] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1042.700278][ T5244] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1042.728997][ T5244] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1042.750160][ T5244] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1042.796387][T16050] netlink: 'syz.4.10849': attribute type 3 has an invalid length. [ 1042.806057][T16050] netlink: 'syz.4.10849': attribute type 1 has an invalid length. [ 1042.814152][T16050] __nla_validate_parse: 13 callbacks suppressed [ 1042.814168][T16050] netlink: 196 bytes leftover after parsing attributes in process `syz.4.10849'. [ 1042.834805][T16050] NCSI netlink: No device for ifindex 0 [ 1042.842071][T16053] tipc: Enabled bearer , priority 0 [ 1042.849785][T16053] syzkaller0: entered promiscuous mode [ 1042.856791][T16053] syzkaller0: entered allmulticast mode [ 1042.876164][T16053] tipc: Resetting bearer [ 1042.884827][T16052] tipc: Resetting bearer [ 1042.919991][T16052] tipc: Disabling bearer [ 1042.941344][T15973] xfrm0 speed is unknown, defaulting to 1000 [ 1043.055214][T16061] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10853'. [ 1043.098034][T16064] netlink: 92 bytes leftover after parsing attributes in process `syz.3.10854'. [ 1043.155504][T15973] xfrm0 speed is unknown, defaulting to 1000 [ 1043.215062][T16061] syzkaller0: entered promiscuous mode [ 1043.236247][T16061] syzkaller0: entered allmulticast mode [ 1043.267021][T16067] syzkaller1: entered promiscuous mode [ 1043.274740][T16067] syzkaller1: entered allmulticast mode [ 1043.327733][T15973] xfrm0 speed is unknown, defaulting to 1000 [ 1043.411111][T16065] xfrm0 speed is unknown, defaulting to 1000 [ 1043.423106][T16065] hsr0 speed is unknown, defaulting to 1000 [ 1043.529616][T16076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10858'. [ 1043.546814][T16075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10858'. [ 1043.560946][T15973] xfrm0 speed is unknown, defaulting to 1000 [ 1043.692789][T16081] x_tables: duplicate underflow at hook 2 [ 1044.163748][T16085] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.232637][T16085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1044.244805][T16085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1044.353543][T16065] xfrm0 speed is unknown, defaulting to 1000 [ 1044.390937][ T5240] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1044.421810][ T5240] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.455022][ T5240] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1044.475775][ T5240] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.495383][ T5240] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1044.514371][ T5240] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.542929][T16106] netlink: 'syz.3.10865': attribute type 1 has an invalid length. [ 1044.568550][ T5240] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1044.578185][ T5240] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.587546][T15973] xfrm0 speed is unknown, defaulting to 1000 [ 1044.618129][T16106] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1044.683224][T16105] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10865'. [ 1044.843738][T15973] xfrm0 speed is unknown, defaulting to 1000 [ 1044.997562][T16122] netlink: 45 bytes leftover after parsing attributes in process `syz.1.10872'. [ 1045.037654][T16124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10870'. [ 1045.195068][T16134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10873'. [ 1045.207210][T16135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10871'. [ 1045.277137][T16139] macvtap0: entered promiscuous mode [ 1045.427256][T16148] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1045.523269][T16155] netlink: 'syz.0.10880': attribute type 13 has an invalid length. [ 1045.532960][T16155] netlink: 'syz.0.10880': attribute type 17 has an invalid length. [ 1045.571164][T16155] erspan0: left promiscuous mode [ 1045.644266][T16155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1045.655988][T16155] 8021q: adding VLAN 0 to HW filter on device team0 [ 1045.707361][T16155] bond_slave_1: left allmulticast mode [ 1045.735570][T16155] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1045.748250][T16155] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1045.770242][T16155] veth1_vlan: left promiscuous mode [ 1045.776465][T16155] veth0_vlan: left promiscuous mode [ 1045.782370][T16155] veth0_vlan: entered promiscuous mode [ 1045.791030][T16155] veth1_vlan: entered promiscuous mode [ 1045.801039][T16155] veth1_macvtap: left promiscuous mode [ 1045.808133][T16155] veth0_macvtap: left promiscuous mode [ 1045.814667][T16155] veth0_macvtap: entered promiscuous mode [ 1045.829000][T16155] veth1_macvtap: entered promiscuous mode [ 1045.841473][T16155] gre1: left allmulticast mode [ 1045.848433][T16155] geneve2: left promiscuous mode [ 1045.854372][T16155] bond1: left promiscuous mode [ 1045.860120][T16155] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1045.872531][T16155] ip6tnl1: left allmulticast mode [ 1045.880449][T16155] bond2: left promiscuous mode [ 1045.885278][T16155] vti0: left promiscuous mode [ 1045.890942][T16155] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1045.901703][T16155] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1045.915232][T16155] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1045.923585][T16155] bond5: left promiscuous mode [ 1045.928631][T16155] bond5: left allmulticast mode [ 1045.933881][T16155] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1045.942965][T16155] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1045.954820][T16155] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1045.966548][T16155] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1045.978845][T16155] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1045.993565][T16155] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1046.007902][T16155] bridge0: entered promiscuous mode [ 1046.013385][T16155] macvtap1: left promiscuous mode [ 1046.029041][T16155] A link change request failed with some changes committed already. Interface > may have been left with an inconsistent configuration, please check. [ 1046.072888][ T2765] xfrm0 speed is unknown, defaulting to 1000 [ 1046.079888][ T2765] syz0: Port: 1 Link ACTIVE [ 1046.088984][ T6610] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1046.107255][ T6610] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.115710][ T6610] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1046.137329][ T6610] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.152226][ T6610] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1046.161123][ T6610] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.171927][ T2765] xfrm0 speed is unknown, defaulting to 1000 [ 1046.179638][ T6610] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1046.195043][ T6610] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.244388][ T5244] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1046.300086][T16174] netlink: 'syz.1.10885': attribute type 4 has an invalid length. [ 1046.315852][T16173] : renamed from veth0_to_bond [ 1046.328468][T16173] mac80211_hwsim hwsim129 wlan1: Caught tx_queue_len zero misconfig [ 1046.389747][T16181] netlink: 'syz.1.10885': attribute type 32 has an invalid length. [ 1046.413683][T16181] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 1046.426607][T16177] syzkaller1: entered promiscuous mode [ 1046.432854][T16177] syzkaller1: entered allmulticast mode [ 1046.585502][ T5244] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1046.594255][T16193] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 1046.779282][T16209] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 1046.818195][ T5240] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1046.874891][T16214] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1046.892504][T16214] bond1: left promiscuous mode [ 1046.907010][T16214] geneve2: left promiscuous mode [ 1046.916892][T16214] geneve2: left allmulticast mode [ 1046.925670][T16214] sit1: left promiscuous mode [ 1046.932348][T16214] veth5: left promiscuous mode [ 1047.028041][T16227] syzkaller0: entered promiscuous mode [ 1047.033591][T16227] syzkaller0: entered allmulticast mode [ 1047.241530][T16242] bond0: (slave bond_slave_0): Releasing backup interface [ 1047.289567][T16246] openvswitch: netlink: VXLAN extension 1 has unexpected len 8 expected 4 [ 1047.306218][T16242] bond_slave_0: entered promiscuous mode [ 1047.313344][T16242] bond_slave_0: entered allmulticast mode [ 1047.589570][T16259] syzkaller1: entered promiscuous mode [ 1047.601849][T16259] syzkaller1: entered allmulticast mode [ 1047.684341][T16274] syzkaller1: left promiscuous mode [ 1047.698125][T16274] syzkaller1: left allmulticast mode [ 1047.982568][T16282] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1048.058067][T16305] __nla_validate_parse: 16 callbacks suppressed [ 1048.058089][T16305] netlink: 52 bytes leftover after parsing attributes in process `syz.4.10923'. [ 1048.364147][T16321] bridge_slave_1: Caught tx_queue_len zero misconfig [ 1048.473465][T16326] netlink: 'syz.4.10929': attribute type 1 has an invalid length. [ 1048.496556][T16326] netlink: 88 bytes leftover after parsing attributes in process `syz.4.10929'. [ 1048.525471][T16326] netlink: 'syz.4.10929': attribute type 1 has an invalid length. [ 1048.552702][T16326] netlink: 634 bytes leftover after parsing attributes in process `syz.4.10929'. [ 1048.886272][T16338] RDS: rds_bind could not find a transport for ::8000:0:20:0, load rds_tcp or rds_rdma? [ 1048.912392][T16341] netlink: 'syz.0.10932': attribute type 1 has an invalid length. [ 1048.921172][T16341] netlink: 'syz.0.10932': attribute type 2 has an invalid length. [ 1048.930950][T16341] netlink: 'syz.0.10932': attribute type 1 has an invalid length. [ 1049.407412][T16362] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1049.602078][T16388] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input12 [ 1049.918224][T16417] netlink: 96 bytes leftover after parsing attributes in process `syz.2.10952'. [ 1049.953847][T16420] validate_nla: 3 callbacks suppressed [ 1049.953867][T16420] netlink: 'syz.3.10953': attribute type 8 has an invalid length. [ 1049.975706][T16422] netlink: 'syz.2.10954': attribute type 32 has an invalid length. [ 1050.017357][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1050.043444][T16422] netlink: 76 bytes leftover after parsing attributes in process `syz.2.10954'. [ 1050.067001][T16426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10951'. [ 1050.736961][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1050.875328][T16463] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10966'. [ 1050.938340][T16463] block nbd10: Unsupported socket: should be TCP or UNIX. [ 1050.974273][T16469] netlink: 193 bytes leftover after parsing attributes in process `syz.2.10967'. [ 1050.986777][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1051.335239][T16485] netlink: 5 bytes leftover after parsing attributes in process `syz.4.10971'. [ 1051.352564][T16464] xfrm0 speed is unknown, defaulting to 1000 [ 1051.362665][T16464] hsr0 speed is unknown, defaulting to 1000 [ 1051.380083][T16464] xfrm0 speed is unknown, defaulting to 1000 [ 1051.453484][T16489] netlink: 'syz.0.10974': attribute type 8 has an invalid length. [ 1051.466112][ T3399] Bluetooth: hci5: command 0x0406 tx timeout [ 1052.089151][T16502] netlink: 'syz.4.10976': attribute type 1 has an invalid length. [ 1052.114844][T16502] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10976'. [ 1052.359292][T16513] netlink: 'syz.2.10979': attribute type 13 has an invalid length. [ 1052.389399][T16513] netlink: 'syz.2.10979': attribute type 17 has an invalid length. [ 1052.927698][T16531] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1052.989795][T16513] 8021q: adding VLAN 0 to HW filter on device team0 [ 1053.001909][T16513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1053.036377][T16513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1053.047643][T16513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1053.061109][T16513] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1053.071862][T16513] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1053.105459][T16513] veth1_vlan: left promiscuous mode [ 1053.112571][T16513] veth0_vlan: left promiscuous mode [ 1053.118974][T16513] veth0_vlan: entered promiscuous mode [ 1053.128575][T16513] veth1_vlan: entered promiscuous mode [ 1053.142496][T16513] veth1_macvtap: left promiscuous mode [ 1053.149608][T16513] veth0_macvtap: left promiscuous mode [ 1053.167627][T16513] veth0_macvtap: entered promiscuous mode [ 1053.185134][T16513] veth1_macvtap: entered promiscuous mode [ 1053.196404][T16513] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1053.209691][T16513] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1053.223484][T16513] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1053.236232][T16513] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1053.250775][T16513] mac80211_hwsim hwsim131 wlan1: left allmulticast mode [ 1053.262496][T16513] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1053.274154][T16513] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1053.282422][T16513] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1053.308134][T16513] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1053.323120][T16513] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1053.385741][T16513] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1053.395560][T16513] vlan2: left allmulticast mode [ 1053.400586][T16513] bond6: left allmulticast mode [ 1053.405483][T16513] geneve4: left allmulticast mode [ 1053.421741][ T5244] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1053.430954][ T5244] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1053.444292][ T5704] bridge0: entered promiscuous mode [ 1053.456336][ T5241] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.464053][ T5241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1053.484927][ T5241] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.492616][ T5241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1053.622932][ T5244] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1053.663760][T16541] sock: sock_timestamping_bind_phc: sock not bind to device [ 1053.666192][ T5244] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1053.728971][T16536] veth0: Caught tx_queue_len zero misconfig [ 1053.847166][T16546] __nla_validate_parse: 4 callbacks suppressed [ 1053.847202][T16546] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10984'. [ 1053.888994][T16552] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10988'. [ 1054.147725][T16565] netlink: 80 bytes leftover after parsing attributes in process `syz.0.10991'. [ 1054.246473][T16570] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10994'. [ 1054.305971][T16578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10996'. [ 1054.369816][T16578] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1054.435656][T16585] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 1054.444742][T16578] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1054.531876][T16585] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1054.665959][T16595] netlink: 276 bytes leftover after parsing attributes in process `syz.4.10999'. [ 1054.704936][T16597] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 1054.718781][T16597] bridge6: entered allmulticast mode [ 1054.741564][T16595] geneve3: entered promiscuous mode [ 1054.750034][ T5236] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.775163][ T5236] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.814940][ T5236] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.849872][ T5236] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.166112][T16627] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11009'. [ 1055.179980][T16623] netlink: 'syz.1.11005': attribute type 13 has an invalid length. [ 1055.192223][T16625] netlink: 'syz.2.11006': attribute type 1 has an invalid length. [ 1055.206139][T16623] netlink: 'syz.1.11005': attribute type 17 has an invalid length. [ 1055.224866][T16625] netlink: 244 bytes leftover after parsing attributes in process `syz.2.11006'. [ 1055.323302][T16636] netlink: 'syz.1.11005': attribute type 3 has an invalid length. [ 1055.391117][T16636] netlink: 'syz.1.11005': attribute type 1 has an invalid length. [ 1055.442943][T16636] netlink: 232 bytes leftover after parsing attributes in process `syz.1.11005'. [ 1055.569706][T16623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1055.602043][T16623] 8021q: adding VLAN 0 to HW filter on device team0 [ 1055.635499][T16623] 0ªX¹¦À: left allmulticast mode [ 1055.654019][T16623] 8021q: adding VLAN 0 to HW filter on device 60ªX¹¦À [ 1055.744400][T16623] bridge_slave_1: left allmulticast mode [ 1055.797702][T16623] batman_adv: 60ªX¹¦À: Interface activated: batadv_slave_0 [ 1055.820456][T16623] batman_adv: 60ªX¹¦À: Interface activated: ÿÿÿÿÿÿ [ 1055.894861][T16623] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1055.907070][T16623] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1055.962980][T16623] veth1_macvtap: left promiscuous mode [ 1055.992914][T16623] veth0_macvtap: left promiscuous mode [ 1056.024571][T16623] veth0_macvtap: entered promiscuous mode [ 1056.078663][T16623] veth1_macvtap: entered promiscuous mode [ 1056.114280][T16623] mac80211_hwsim hwsim124 wlan0: left promiscuous mode [ 1056.124417][T16623] mac80211_hwsim hwsim124 wlan0: left allmulticast mode [ 1056.292705][T16623] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1056.364195][T16623] bridge2: left allmulticast mode [ 1056.377717][T16623] geneve2: left promiscuous mode [ 1056.384144][T16623] geneve2: left allmulticast mode [ 1056.394035][T16623] ipip0: left promiscuous mode [ 1056.400760][T16623] ipip0: left allmulticast mode [ 1056.410034][T16623] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1056.426048][T16623] bridge3: left promiscuous mode [ 1056.432246][T16623] bridge3: left allmulticast mode [ 1056.443026][T16623] bond3: left promiscuous mode [ 1056.449441][T16623] ip6gre1: left promiscuous mode [ 1056.457084][T16623] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1056.472542][T16623] bond4: left promiscuous mode [ 1056.479331][T16623] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1056.503748][T16623] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1056.529073][T16623] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1056.569976][T16623] ip6tnl4: left allmulticast mode [ 1056.588095][T16623] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1056.623123][T16623] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1056.646285][T16623] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1056.671264][T16623] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1056.691276][T16623] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1056.711137][T16623] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1056.729231][T16623] bridge6: left allmulticast mode [ 1056.738735][T16633] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11010'. [ 1056.872435][T11796] xfrm0 speed is unknown, defaulting to 1000 [ 1056.879665][ T5240] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1056.894028][T11796] syz2: Port: 1 Link ACTIVE [ 1056.900199][ T5240] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.922968][T16669] netlink: 'syz.1.11017': attribute type 1 has an invalid length. [ 1056.971292][ T5240] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1056.995777][ T5240] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.041784][ T5240] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1057.067732][ T5240] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.136412][ T5240] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1057.163290][ T5240] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.376220][T16684] xt_TCPMSS: Only works on TCP SYN packets [ 1057.513186][T16698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1057.587590][T16700] netlink: 'syz.4.11027': attribute type 13 has an invalid length. [ 1057.617707][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1057.669870][T16701] sctp: [Deprecated]: syz.4.11027 (pid 16701) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1057.669870][T16701] Use struct sctp_sack_info instead [ 1057.697678][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1057.756169][T16706] sch_tbf: burst 6 is lower than device gretap0 mtu (82) ! [ 1058.221195][T16720] netlink: 'syz.3.11034': attribute type 1 has an invalid length. [ 1058.240390][T16720] netlink: 'syz.3.11034': attribute type 1 has an invalid length. [ 1058.252988][T16724] netlink: 'syz.4.11036': attribute type 3 has an invalid length. [ 1058.537623][T16742] xt_TCPMSS: Only works on TCP SYN packets [ 1058.607940][T16743] syzkaller0: refused to change device tx_queue_len [ 1058.976773][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1058.984492][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1059.168411][T16778] __nla_validate_parse: 7 callbacks suppressed [ 1059.168431][T16778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11051'. [ 1059.211785][T16778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11051'. [ 1059.247158][T16760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1059.280215][T16778] geneve4: entered promiscuous mode [ 1059.296583][T16778] geneve4: entered allmulticast mode [ 1059.315465][ T5236] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 46729 - 0 [ 1059.342720][ T5236] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 46729 - 0 [ 1059.378140][ T5236] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 46729 - 0 [ 1059.400714][ T5236] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 46729 - 0 [ 1059.437295][T16788] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11054'. [ 1059.463295][T16790] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11055'. [ 1059.494835][T16790] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11055'. [ 1059.666136][T16797] erspan0: entered promiscuous mode [ 1060.033612][T16820] Cannot find set identified by id 0 to match [ 1060.335338][T16825] validate_nla: 5 callbacks suppressed [ 1060.335360][T16825] netlink: 'syz.3.11065': attribute type 1 has an invalid length. [ 1060.365551][T16825] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1060.384294][T16825] bond7: (slave ip6gretap1): making interface the new active one [ 1060.394415][T16825] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1060.451117][T16829] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11066'. [ 1060.499513][T16832] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1060.511256][T16832] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1061.105046][T16857] netlink: 268 bytes leftover after parsing attributes in process `syz.4.11075'. [ 1061.180086][T16861] syzkaller0: entered promiscuous mode [ 1061.199963][T16861] syzkaller0: entered allmulticast mode [ 1062.765579][T16802] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1062.878459][T16879] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11077'. [ 1063.021794][T16887] vti0: entered promiscuous mode [ 1063.100804][T16889] lo: Caught tx_queue_len zero misconfig [ 1063.134145][T16891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11083'. [ 1063.645118][T16928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11091'. [ 1063.807398][T16935] netlink: 'syz.0.11093': attribute type 21 has an invalid length. [ 1063.863334][T16939] netlink: 'syz.2.11094': attribute type 1 has an invalid length. [ 1063.912058][T16939] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1063.985364][T16939] bond7: (slave veth3): Enslaving as an active interface with a down link [ 1064.057168][T16947] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1064.095203][T16947] bond7: (slave batadv1): making interface the new active one [ 1064.161298][T16947] batadv1: entered promiscuous mode [ 1064.202059][T16947] bond7: (slave batadv1): Enslaving as an active interface with an up link [ 1065.461372][T16983] __nla_validate_parse: 4 callbacks suppressed [ 1065.461404][T16983] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11106'. [ 1066.018951][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1067.188741][T16991] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11107'. [ 1067.217374][T16991] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11107'. [ 1067.291806][T16991] geneve4: entered promiscuous mode [ 1067.394838][T17004] netlink: 'syz.0.11111': attribute type 1 has an invalid length. [ 1067.469223][T17012] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 1067.591953][T17023] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.11114'. [ 1067.615285][T17024] netlink: 'syz.4.11112': attribute type 3 has an invalid length. [ 1067.702126][T17012] syzkaller0: entered promiscuous mode [ 1067.716840][T17012] syzkaller0: entered allmulticast mode [ 1067.732180][T17031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11116'. [ 1067.747533][T17030] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.11114'. [ 1068.176434][T17049] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11120'. [ 1068.448370][T17062] netlink: 'syz.4.11124': attribute type 1 has an invalid length. [ 1068.508762][T17063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11124'. [ 1068.536341][T17063] dummy0: left promiscuous mode [ 1068.562567][T17070] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1068.609887][T17069] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1069.118954][T11796] hid-generic 0005:046D:0440.0004: item fetching failed at offset 2/3 [ 1069.138607][T11796] hid-generic 0005:046D:0440.0004: probe with driver hid-generic failed with error -22 [ 1069.291317][T17088] netlink: 128 bytes leftover after parsing attributes in process `syz.0.11130'. [ 1069.367356][T17081] xfrm0 speed is unknown, defaulting to 1000 [ 1069.397636][T17081] hsr0 speed is unknown, defaulting to 1000 [ 1069.419937][T17081] xfrm0 speed is unknown, defaulting to 1000 [ 1069.549895][T17095] mac80211_hwsim hwsim125 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1069.759718][T17114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11138'. [ 1069.790086][T17114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1069.823275][T17114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1069.863923][T17114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1069.919765][T17114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1070.174219][T17129] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1070.388952][T17138] syzkaller0: entered promiscuous mode [ 1070.406264][T17138] syzkaller0: entered allmulticast mode [ 1070.472345][T17142] netlink: 'syz.3.11147': attribute type 1 has an invalid length. [ 1070.679253][T17142] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1071.074947][T17156] __nla_validate_parse: 3 callbacks suppressed [ 1071.074966][T17156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11150'. [ 1071.104204][T17154] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11149'. [ 1071.135056][T17156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11150'. [ 1071.168133][T17156] netlink: 'syz.0.11150': attribute type 12 has an invalid length. [ 1071.199320][T17154] ip6gre2: entered promiscuous mode [ 1071.225580][T17154] ip6gre2: entered allmulticast mode [ 1071.275033][T17156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11150'. [ 1071.290915][T17156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11150'. [ 1071.301622][T17156] netlink: 'syz.0.11150': attribute type 12 has an invalid length. [ 1071.503611][T17174] netlink: 'syz.2.11154': attribute type 9 has an invalid length. [ 1071.549580][T17179] x_tables: duplicate underflow at hook 1 [ 1071.562128][T17174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1071.731730][T17185] vxcan1: entered promiscuous mode [ 1071.743028][T17185] vxcan1: entered allmulticast mode [ 1071.753466][T17190] netlink: 'syz.4.11161': attribute type 1 has an invalid length. [ 1071.764467][T17189] netlink: 'syz.3.11159': attribute type 1 has an invalid length. [ 1071.874131][T17189] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1071.937856][ T5245] wlan1: Trigger new scan to find an IBSS to join [ 1072.150634][T17213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11166'. [ 1072.192061][T17217] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11165'. [ 1072.205025][T17218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11167'. [ 1072.225639][T17199] batman_adv: 60ªX¹¦À: Interface deactivated: batadv_slave_0 [ 1072.234287][T17218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11167'. [ 1072.249908][T17199] batman_adv: 60ªX¹¦À: Interface deactivated: ÿÿÿÿÿÿ [ 1072.317568][T17219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11166'. [ 1072.582037][T17218] sit3: entered promiscuous mode [ 1072.599520][T10249] xfrm0 speed is unknown, defaulting to 1000 [ 1072.606514][ T5240] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1072.607867][T10249] syz2: Port: 1 Link DOWN [ 1072.632945][ T5240] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.663283][ T5240] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1072.708444][ T5240] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.758635][ T5240] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1072.795542][ T5240] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.827458][ T5240] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1072.838699][T17236] netlink: 'syz.3.11171': attribute type 30 has an invalid length. [ 1072.847619][ T5240] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.875472][ T5240] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1072.886001][T17236] netlink: 'syz.3.11171': attribute type 30 has an invalid length. [ 1072.906920][ T5240] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1072.963039][ T5240] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1073.006068][ T5240] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1073.057260][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1073.236239][T17258] syz_tun: entered promiscuous mode [ 1073.242318][T17258] syz_tun: entered allmulticast mode [ 1073.273088][T17258] tipc: Enabled bearer , priority 0 [ 1073.339247][T17257] tipc: Disabling bearer [ 1073.572687][T17272] netlink: 'syz.3.11184': attribute type 19 has an invalid length. [ 1073.852203][T17253] xfrm0 speed is unknown, defaulting to 1000 [ 1073.878991][T17253] hsr0 speed is unknown, defaulting to 1000 [ 1073.899862][T17287] x_tables: duplicate underflow at hook 2 [ 1073.910392][T17253] xfrm0 speed is unknown, defaulting to 1000 [ 1074.215424][T17306] openvswitch: netlink: Flow actions attr not present in new flow. [ 1074.274139][T17310] netlink: 'syz.2.11195': attribute type 1 has an invalid length. [ 1074.336830][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1074.348682][T17310] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1075.170210][T17356] bond10 (unregistering): Released all slaves [ 1075.298920][T17334] xfrm0 speed is unknown, defaulting to 1000 [ 1075.330649][T17334] hsr0 speed is unknown, defaulting to 1000 [ 1075.350798][T17334] xfrm0 speed is unknown, defaulting to 1000 [ 1075.373635][T17358] nbd: must specify a size in bytes for the device [ 1075.383899][T17358] block nbd1: NBD_DISCONNECT [ 1075.389821][ T5244] batadv1: left promiscuous mode [ 1075.396409][T17358] block nbd1: Send disconnect failed -104 [ 1075.406569][T17358] block nbd1: shutting down sockets [ 1075.568802][T17370] netlink: 'syz.2.11212': attribute type 1 has an invalid length. [ 1075.680529][T17370] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1076.225472][T17392] __nla_validate_parse: 22 callbacks suppressed [ 1076.225508][T17392] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11219'. [ 1076.257609][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1076.318795][T17395] vlan2: entered allmulticast mode [ 1076.330777][T17395] bond0: entered allmulticast mode [ 1076.336450][T17395] bond_slave_0: entered allmulticast mode [ 1076.343721][T17395] bond_slave_1: entered allmulticast mode [ 1076.350971][T17395] mac80211_hwsim hwsim124 wlan0: entered allmulticast mode [ 1076.370533][T17398] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11221'. [ 1076.403573][T17398] bond1: (slave bond0): Releasing backup interface [ 1076.503388][T17398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1076.504986][T17402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11220'. [ 1076.534373][T17398] bond_slave_0: left allmulticast mode [ 1076.557151][T17398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1076.592731][T17398] bond_slave_1: left allmulticast mode [ 1076.612336][T17398] bond0 (unregistering): (slave wlan0): Releasing backup interface [ 1076.627871][T17398] mac80211_hwsim hwsim124 wlan0: left allmulticast mode [ 1076.635447][T17398] bond0 (unregistering): Released all slaves [ 1076.732182][T17407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11223'. [ 1076.771652][T17409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11222'. [ 1076.996312][T17422] xfrm0: left allmulticast mode [ 1077.011719][T17422] macvtap0: left promiscuous mode [ 1077.028204][T17422] geneve2: left promiscuous mode [ 1077.060683][T17424] netlink: 'syz.0.11227': attribute type 1 has an invalid length. [ 1077.072945][T17422] bond2: left promiscuous mode [ 1077.110787][T17422] vti0: left promiscuous mode [ 1077.127690][T17422] gre2: left promiscuous mode [ 1077.152203][T17422] ipip1: left promiscuous mode [ 1077.172728][T17422] ipip1: left allmulticast mode [ 1077.189526][T17422] bond7: left promiscuous mode [ 1077.194844][T17422] bridge3: left promiscuous mode [ 1077.213294][T17422] bond7: left allmulticast mode [ 1077.224270][T17422] bridge3: left allmulticast mode [ 1077.235609][T17422] ip6tnl1: left allmulticast mode [ 1077.250291][T17422] geneve3: left promiscuous mode [ 1077.258427][T17422] geneve4: left promiscuous mode [ 1077.263802][T17422] sit3: left promiscuous mode [ 1077.297507][T17424] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1077.308237][T17434] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11229'. [ 1077.321489][T18416] Bluetooth: hci2: link tx timeout [ 1077.332051][T18416] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1077.354542][T17429] bond10: (slave ip6gretap2): making interface the new active one [ 1077.370110][T17429] bond10: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1077.380002][T17411] xfrm0 speed is unknown, defaulting to 1000 [ 1077.380937][ T5237] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1077.409674][ T5237] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.484475][T17411] hsr0 speed is unknown, defaulting to 1000 [ 1077.489956][ T5237] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1077.515926][ T5237] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.541007][ T5237] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1077.583635][ T5237] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.615962][ T5237] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1077.615977][T17411] xfrm0 speed is unknown, defaulting to 1000 [ 1077.636413][ T5237] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.711857][T17453] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1077.798586][T17461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11235'. [ 1077.812201][T17460] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11236'. [ 1077.840857][T17460] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11236'. [ 1078.204459][T17483] netlink: 'syz.3.11242': attribute type 1 has an invalid length. [ 1078.280074][T17483] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1078.305802][T17467] xfrm0 speed is unknown, defaulting to 1000 [ 1078.323080][T17467] hsr0 speed is unknown, defaulting to 1000 [ 1078.344411][T17467] xfrm0 speed is unknown, defaulting to 1000 [ 1078.474274][T17494] netlink: 3 bytes leftover after parsing attributes in process `syz.4.11245'. [ 1078.516255][T17494] 0ªX¹¦À: renamed from batadv0 [ 1078.533489][T17494] 0ªX¹¦À: entered allmulticast mode [ 1078.553780][T17494] 8021q: adding VLAN 0 to HW filter on device 60ªX¹¦À [ 1078.576455][T17494] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1078.863528][T17507] netlink: 'syz.3.11249': attribute type 1 has an invalid length. [ 1079.009217][T17512] syzkaller0: entered promiscuous mode [ 1079.015311][T17512] syzkaller0: entered allmulticast mode [ 1079.102230][T17518] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1079.122195][T17518] netlink: 'syz.0.11251': attribute type 4 has an invalid length. [ 1079.192244][T17520] netlink: 'syz.0.11251': attribute type 4 has an invalid length. [ 1079.377514][ T3399] Bluetooth: hci2: command 0x0405 tx timeout [ 1079.520448][T17526] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1080.723017][T17590] netlink: 'syz.1.11267': attribute type 1 has an invalid length. [ 1080.748011][T17584] syzkaller0: entered promiscuous mode [ 1080.768531][T17584] syzkaller0: entered allmulticast mode [ 1080.844670][T17590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1081.332199][T17616] __nla_validate_parse: 9 callbacks suppressed [ 1081.332223][T17616] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11270'. [ 1081.350836][T17616] gre0: entered promiscuous mode [ 1081.356270][T17616] gre0: entered allmulticast mode [ 1082.018166][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1083.135559][T17570] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1083.375827][T17712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11278'. [ 1083.388381][T17711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11276'. [ 1083.446313][T17723] IPVS: set_ctl: invalid protocol: 1 172.20.20.170:20003 [ 1083.501859][T17711] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1083.592192][T17727] gretap1: entered allmulticast mode [ 1083.623078][T17727] bond11: (slave gretap1): Enslaving as an active interface with an up link [ 1083.680635][T17735] tipc: Enabled bearer , priority 0 [ 1083.700078][T17730] syzkaller0: entered promiscuous mode [ 1083.717330][T17730] syzkaller0: entered allmulticast mode [ 1083.750410][T17730] tipc: Resetting bearer [ 1083.771906][T17730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11281'. [ 1083.793433][T17728] tipc: Resetting bearer [ 1083.807586][T17728] tipc: Disabling bearer [ 1084.016494][T17747] 0: reclassify loop, rule prio 0, protocol 700 [ 1084.107761][T17753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11287'. [ 1084.130316][T17753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11287'. [ 1084.141628][T17753] netlink: 'syz.3.11287': attribute type 11 has an invalid length. [ 1084.150612][T17753] netlink: 'syz.3.11287': attribute type 14 has an invalid length. [ 1084.221076][T17756] netlink: 'syz.3.11288': attribute type 1 has an invalid length. [ 1084.245904][T17756] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1084.435119][T17768] netlink: 'syz.2.11291': attribute type 1 has an invalid length. [ 1084.563337][T17768] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1084.594014][T17775] veth1_to_bond: entered promiscuous mode [ 1084.602261][T17779] veth1_to_bond: entered allmulticast mode [ 1084.617069][T17775] veth1_to_bond: left allmulticast mode [ 1084.631803][T17775] veth1_to_bond: left promiscuous mode [ 1084.664783][T17784] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11297'. [ 1084.676780][T17775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11296'. [ 1084.685896][T17784] tipc: Invalid UDP bearer configuration [ 1084.685937][T17784] tipc: Enabling of bearer rejected, failed to enable media [ 1084.707906][T17775] bond0: (slave bond_slave_1): Releasing backup interface [ 1084.741882][T17784] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11297'. [ 1084.762543][T17784] tipc: Invalid UDP bearer configuration [ 1084.762657][T17784] tipc: Enabling of bearer rejected, failed to enable media [ 1084.899271][T17790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11300'. [ 1085.190552][T17816] block nbd1: NBD_DISCONNECT [ 1085.399092][T17824] netlink: 'syz.1.11310': attribute type 5 has an invalid length. [ 1085.421626][T17824] geneve3: entered promiscuous mode [ 1085.445381][T17824] geneve3: entered allmulticast mode [ 1085.467299][ T5245] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 56091 - 0 [ 1085.498497][ T6610] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 56091 - 0 [ 1085.522880][ T6610] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 56091 - 0 [ 1085.550572][ T6610] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 56091 - 0 [ 1085.891768][T17853] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20000 [ 1085.903098][T17854] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20000 [ 1086.043614][T17860] vlan4: entered promiscuous mode [ 1086.054098][T17852] netlink: 'syz.0.11318': attribute type 9 has an invalid length. [ 1086.067437][T17852] netlink: 'syz.0.11318': attribute type 6 has an invalid length. [ 1086.094611][T17852] netlink: 'syz.0.11318': attribute type 7 has an invalid length. [ 1086.117434][T17852] netlink: 'syz.0.11318': attribute type 8 has an invalid length. [ 1086.356823][T17881] __nla_validate_parse: 5 callbacks suppressed [ 1086.356843][T17881] netlink: 116 bytes leftover after parsing attributes in process `syz.1.11323'. [ 1086.742416][T17863] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1087.094894][T17904] netlink: 236 bytes leftover after parsing attributes in process `syz.4.11328'. [ 1087.116194][T17904] netlink: 236 bytes leftover after parsing attributes in process `syz.4.11328'. [ 1087.130739][T17897] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.11328'. [ 1087.260453][T17915] netlink: 84 bytes leftover after parsing attributes in process `syz.4.11334'. [ 1087.275929][T17913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11333'. [ 1087.359041][T17921] veth1: mtu less than device minimum [ 1087.380324][T17927] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.11337'. [ 1087.415422][T17924] bond9 (unregistering): Released all slaves [ 1087.513839][T17935] IPVS: Error connecting to the multicast addr [ 1087.870976][T17955] syzkaller1: entered promiscuous mode [ 1087.895520][T17955] syzkaller1: entered allmulticast mode [ 1087.919465][T17955] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11345'. [ 1088.088609][T17976] netlink: 'syz.3.11350': attribute type 23 has an invalid length. [ 1088.107418][T17976] IPv6: NLM_F_CREATE should be specified when creating new route [ 1088.136357][T17976] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11350'. [ 1088.421522][T17981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11351'. [ 1088.552448][T17989] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1088.561475][T17989] bond9: (slave bond10): Enslaving as an active interface with an up link [ 1088.746586][T18004] bridge10: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1088.779500][T18006] syzkaller1: entered promiscuous mode [ 1088.795864][T18006] syzkaller1: entered allmulticast mode [ 1088.984360][T18018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1089.067896][T18018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1089.160920][T18025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1089.831212][T18065] validate_nla: 2 callbacks suppressed [ 1089.831246][T18065] netlink: 'syz.2.11375': attribute type 9 has an invalid length. [ 1089.941789][T18065] bond11: option ad_actor_sys_prio: invalid value (0) [ 1089.966562][T18065] bond11: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1089.983313][T18065] bond11 (unregistering): Released all slaves [ 1090.575295][T18103] vxcan1: entered allmulticast mode [ 1090.616329][T18116] vlan2: entered allmulticast mode [ 1090.622425][T18116] bond0: entered allmulticast mode [ 1090.630369][T18116] bond_slave_0: entered allmulticast mode [ 1090.636255][T18116] bond_slave_1: entered allmulticast mode [ 1090.658958][ T5236] bond7: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 1090.718879][T18121] hmac(sha224): entered promiscuous mode [ 1090.905473][T18145] bond11: option resend_igmp: invalid value (2878) [ 1090.912434][T18145] bond11: option resend_igmp: allowed values 0 - 255 [ 1090.920817][T18145] bond11 (unregistering): Released all slaves [ 1091.168940][ T5244] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1091.180680][ T5244] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 46729 - 0 [ 1091.191689][ T5244] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1091.204111][ T5244] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 46729 - 0 [ 1091.216334][ T5244] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1091.228685][ T3399] Bluetooth: hci2: command 0x0405 tx timeout [ 1091.237241][ T5244] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 46729 - 0 [ 1091.247484][ T5244] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1091.257256][ T5244] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 46729 - 0 [ 1091.621908][T18183] __nla_validate_parse: 14 callbacks suppressed [ 1091.621946][T18183] netlink: 292 bytes leftover after parsing attributes in process `syz.2.11401'. [ 1093.499463][T18115] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1093.704584][T18194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11405'. [ 1093.778710][T18197] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11406'. [ 1093.800802][T18200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11407'. [ 1093.813590][T18197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11406'. [ 1093.889868][T18203] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11404'. [ 1093.966403][T18186] xfrm0 speed is unknown, defaulting to 1000 [ 1093.973988][T18186] hsr0 speed is unknown, defaulting to 1000 [ 1093.981966][T18186] xfrm0 speed is unknown, defaulting to 1000 [ 1094.148215][T18213] netlink: 'syz.1.11410': attribute type 27 has an invalid length. [ 1094.405181][T18223] sctp: [Deprecated]: syz.3.11413 (pid 18223) Use of int in max_burst socket option deprecated. [ 1094.405181][T18223] Use struct sctp_assoc_value instead [ 1094.425061][T18223] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11413'. [ 1094.713299][T18234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11418'. [ 1095.450404][T18274] syzkaller0: entered promiscuous mode [ 1095.463968][T18274] syzkaller0: entered allmulticast mode [ 1095.485449][T18279] netlink: 56 bytes leftover after parsing attributes in process `syz.0.11428'. [ 1095.511908][T18284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11425'. [ 1095.907950][T18264] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 1096.014592][T18307] vlan4: entered promiscuous mode [ 1096.072424][T18313] FAULT_INJECTION: forcing a failure. [ 1096.072424][T18313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1096.109361][T18313] CPU: 0 UID: 0 PID: 18313 Comm: syz.1.11436 Not tainted syzkaller #0 PREEMPT(full) [ 1096.109404][T18313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1096.109417][T18313] Call Trace: [ 1096.109424][T18313] [ 1096.109433][T18313] dump_stack_lvl+0xe8/0x150 [ 1096.109459][T18313] should_fail_ex+0x40c/0x560 [ 1096.109482][T18313] _copy_from_user+0x2d/0xb0 [ 1096.109509][T18313] ___sys_sendmsg+0x1c6/0x360 [ 1096.109560][T18313] ? __pfx____sys_sendmsg+0x10/0x10 [ 1096.109608][T18313] ? __fget_files+0x2a/0x420 [ 1096.109637][T18313] ? __fget_files+0x3a2/0x420 [ 1096.109665][T18313] __x64_sys_sendmsg+0x1b1/0x290 [ 1096.109692][T18313] ? do_raw_spin_unlock+0xf5/0x210 [ 1096.109717][T18313] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1096.109751][T18313] ? handle_softirqs+0x70f/0x840 [ 1096.109778][T18313] ? rcu_is_watching+0x15/0xb0 [ 1096.109811][T18313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.109831][T18313] do_syscall_64+0x174/0x580 [ 1096.109856][T18313] ? clear_bhb_loop+0x40/0x90 [ 1096.109877][T18313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.109896][T18313] RIP: 0033:0x7f57b5d9ce59 [ 1096.109913][T18313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1096.109929][T18313] RSP: 002b:00007f57b6cb9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1096.109950][T18313] RAX: ffffffffffffffda RBX: 00007f57b6015fa0 RCX: 00007f57b5d9ce59 [ 1096.109964][T18313] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1096.109976][T18313] RBP: 00007f57b6cb9090 R08: 0000000000000000 R09: 0000000000000000 [ 1096.109987][T18313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1096.109998][T18313] R13: 00007f57b6016038 R14: 00007f57b6015fa0 R15: 00007ffe0329dcc8 [ 1096.110021][T18313] [ 1096.746635][T18336] __nla_validate_parse: 5 callbacks suppressed [ 1096.746655][T18336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11442'. [ 1097.539245][T18416] Bluetooth: hci4: command 0x0406 tx timeout [ 1098.093157][T18334] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 1098.105111][T18349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11445'. [ 1098.287346][T18357] netlink: 1040 bytes leftover after parsing attributes in process `syz.2.11447'. [ 1098.330701][T18357] netlink: 80 bytes leftover after parsing attributes in process `syz.2.11447'. [ 1099.488923][T18395] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11459'. [ 1099.511668][T18395] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11459'. [ 1099.522125][T18395] nbd: must specify at least one socket [ 1099.629135][T18399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11460'. [ 1099.660357][T18403] FAULT_INJECTION: forcing a failure. [ 1099.660357][T18403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1099.694206][T18403] CPU: 1 UID: 0 PID: 18403 Comm: syz.2.11461 Not tainted syzkaller #0 PREEMPT(full) [ 1099.694234][T18403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1099.694248][T18403] Call Trace: [ 1099.694256][T18403] [ 1099.694264][T18403] dump_stack_lvl+0xe8/0x150 [ 1099.694292][T18403] should_fail_ex+0x40c/0x560 [ 1099.694316][T18403] _copy_from_iter+0x1d3/0x1660 [ 1099.694351][T18403] ? rcu_is_watching+0x15/0xb0 [ 1099.694377][T18403] ? __pfx__copy_from_iter+0x10/0x10 [ 1099.694399][T18403] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 1099.694449][T18403] ? netlink_sendmsg+0x650/0xb40 [ 1099.694481][T18403] ? skb_put+0x112/0x210 [ 1099.694517][T18403] netlink_sendmsg+0x6c0/0xb40 [ 1099.694553][T18403] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1099.694586][T18403] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1099.694608][T18403] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1099.694633][T18403] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1099.694664][T18403] ____sys_sendmsg+0x9b9/0xa20 [ 1099.694700][T18403] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1099.694747][T18403] ? lock_release+0x4b/0x3c0 [ 1099.694791][T18403] ? import_iovec+0x73/0xa0 [ 1099.694820][T18403] ___sys_sendmsg+0x2a5/0x360 [ 1099.694849][T18403] ? rcu_is_watching+0x15/0xb0 [ 1099.694870][T18403] ? get_pid_task+0x20/0x1f0 [ 1099.694892][T18403] ? __pfx____sys_sendmsg+0x10/0x10 [ 1099.694925][T18403] ? rcu_is_watching+0x15/0xb0 [ 1099.694961][T18403] ? __fget_files+0x2a/0x420 [ 1099.694983][T18403] ? __fget_files+0x3a2/0x420 [ 1099.695011][T18403] __x64_sys_sendmsg+0x1b1/0x290 [ 1099.695043][T18403] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1099.695082][T18403] ? rcu_is_watching+0x15/0xb0 [ 1099.695104][T18403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1099.695125][T18403] do_syscall_64+0x174/0x580 [ 1099.695152][T18403] ? trace_irq_disable+0x3b/0x140 [ 1099.695181][T18403] ? clear_bhb_loop+0x40/0x90 [ 1099.695204][T18403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1099.695226][T18403] RIP: 0033:0x7fb38bd9ce59 [ 1099.695244][T18403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1099.695263][T18403] RSP: 002b:00007fb38ccfa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1099.695286][T18403] RAX: ffffffffffffffda RBX: 00007fb38c015fa0 RCX: 00007fb38bd9ce59 [ 1099.695301][T18403] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1099.695315][T18403] RBP: 00007fb38ccfa090 R08: 0000000000000000 R09: 0000000000000000 [ 1099.695329][T18403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1099.695341][T18403] R13: 00007fb38c016038 R14: 00007fb38c015fa0 R15: 00007ffc58ed7b08 [ 1099.695367][T18403] [ 1099.992476][T18407] netlink: 'syz.2.11464': attribute type 2 has an invalid length. [ 1100.000663][T18407] netlink: 232 bytes leftover after parsing attributes in process `syz.2.11464'. [ 1100.102567][T18412] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 1100.184680][T18415] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1100.191994][T18415] IPv6: NLM_F_CREATE should be set when creating new route [ 1100.199314][T18415] IPv6: NLM_F_CREATE should be set when creating new route [ 1100.206564][T18415] IPv6: NLM_F_CREATE should be set when creating new route [ 1100.230756][T18418] netlink: 156 bytes leftover after parsing attributes in process `syz.0.11468'. [ 1100.595405][T18428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11472'. [ 1100.797664][T18434] FAULT_INJECTION: forcing a failure. [ 1100.797664][T18434] name failslab, interval 1, probability 0, space 0, times 0 [ 1100.852552][T18434] CPU: 0 UID: 0 PID: 18434 Comm: syz.0.11474 Not tainted syzkaller #0 PREEMPT(full) [ 1100.852582][T18434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1100.852595][T18434] Call Trace: [ 1100.852602][T18434] [ 1100.852611][T18434] dump_stack_lvl+0xe8/0x150 [ 1100.852638][T18434] should_fail_ex+0x40c/0x560 [ 1100.852682][T18434] should_failslab+0xa8/0x100 [ 1100.852712][T18434] ? skb_clone+0x212/0x3a0 [ 1100.852730][T18434] kmem_cache_alloc_noprof+0x87/0x650 [ 1100.852762][T18434] skb_clone+0x212/0x3a0 [ 1100.852782][T18434] __netlink_deliver_tap+0x413/0x860 [ 1100.852821][T18434] ? netlink_deliver_tap+0x2e/0x1b0 [ 1100.852852][T18434] netlink_deliver_tap+0x19c/0x1b0 [ 1100.852883][T18434] netlink_unicast+0x77f/0x940 [ 1100.852918][T18434] netlink_sendmsg+0x813/0xb40 [ 1100.852955][T18434] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1100.852988][T18434] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1100.853009][T18434] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1100.853036][T18434] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1100.853068][T18434] ____sys_sendmsg+0x9b9/0xa20 [ 1100.853103][T18434] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1100.853144][T18434] ? lock_release+0x4b/0x3c0 [ 1100.853177][T18434] ? import_iovec+0x73/0xa0 [ 1100.853207][T18434] ___sys_sendmsg+0x2a5/0x360 [ 1100.853236][T18434] ? rcu_is_watching+0x15/0xb0 [ 1100.853257][T18434] ? get_pid_task+0x20/0x1f0 [ 1100.853278][T18434] ? __pfx____sys_sendmsg+0x10/0x10 [ 1100.853311][T18434] ? rcu_is_watching+0x15/0xb0 [ 1100.853348][T18434] ? __fget_files+0x2a/0x420 [ 1100.853371][T18434] ? __fget_files+0x3a2/0x420 [ 1100.853400][T18434] __x64_sys_sendmsg+0x1b1/0x290 [ 1100.853433][T18434] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1100.853472][T18434] ? rcu_is_watching+0x15/0xb0 [ 1100.853494][T18434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.853517][T18434] do_syscall_64+0x174/0x580 [ 1100.853544][T18434] ? trace_irq_disable+0x3b/0x140 [ 1100.853572][T18434] ? clear_bhb_loop+0x40/0x90 [ 1100.853596][T18434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.853617][T18434] RIP: 0033:0x7fe3a4b9ce59 [ 1100.853636][T18434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1100.853655][T18434] RSP: 002b:00007fe3a5a21028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1100.853677][T18434] RAX: ffffffffffffffda RBX: 00007fe3a4e15fa0 RCX: 00007fe3a4b9ce59 [ 1100.853694][T18434] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1100.853707][T18434] RBP: 00007fe3a5a21090 R08: 0000000000000000 R09: 0000000000000000 [ 1100.853720][T18434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1100.853733][T18434] R13: 00007fe3a4e16038 R14: 00007fe3a4e15fa0 R15: 00007fffd7a61cf8 [ 1100.853758][T18434] [ 1101.421963][T18456] netlink: 'syz.2.11481': attribute type 1 has an invalid length. [ 1101.486003][T18456] bond11: (slave bridge7): Enslaving as a backup interface with an up link [ 1101.863479][T18458] xfrm0 speed is unknown, defaulting to 1000 [ 1101.871970][T18458] hsr0 speed is unknown, defaulting to 1000 [ 1101.887290][T18458] xfrm0 speed is unknown, defaulting to 1000 [ 1101.952502][T18480] syzkaller1: entered promiscuous mode [ 1101.967537][T18480] syzkaller1: entered allmulticast mode [ 1102.055028][T18489] __nla_validate_parse: 3 callbacks suppressed [ 1102.055059][T18489] netlink: 27 bytes leftover after parsing attributes in process `syz.4.11490'. [ 1102.217099][T18494] netlink: 31 bytes leftover after parsing attributes in process `syz.3.11494'. [ 1102.437672][T18503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11495'. [ 1102.593488][T18508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11498'. [ 1102.601889][T18500] netlink: 76 bytes leftover after parsing attributes in process `syz.3.11495'. [ 1102.757952][T18515] netlink: 'syz.1.11501': attribute type 1 has an invalid length. [ 1102.828028][T18515] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1102.962181][T18520] bond9: (slave veth11): Enslaving as an active interface with a down link [ 1103.004645][T18523] tipc: Enabled bearer , priority 10 [ 1103.137158][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1103.237621][T18519] bond9: (slave veth13): Enslaving as an active interface with a down link [ 1103.265317][T18522] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1103.486383][T18536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11508'. [ 1103.501783][T18531] IPVS: set_ctl: invalid protocol: 98 172.30.1.2:20002 [ 1103.527636][T18529] syzkaller0: entered promiscuous mode [ 1103.533146][T18529] syzkaller0: entered allmulticast mode [ 1103.981780][T10249] tipc: Node number set to 736241913 [ 1104.004357][T18557] FAULT_INJECTION: forcing a failure. [ 1104.004357][T18557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1104.050433][T18557] CPU: 1 UID: 0 PID: 18557 Comm: syz.1.11513 Not tainted syzkaller #0 PREEMPT(full) [ 1104.050468][T18557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1104.050481][T18557] Call Trace: [ 1104.050489][T18557] [ 1104.050499][T18557] dump_stack_lvl+0xe8/0x150 [ 1104.050527][T18557] should_fail_ex+0x40c/0x560 [ 1104.050553][T18557] _copy_to_user+0x31/0xb0 [ 1104.050581][T18557] simple_read_from_buffer+0xe1/0x170 [ 1104.050609][T18557] proc_fail_nth_read+0x1bb/0x230 [ 1104.050638][T18557] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1104.050666][T18557] ? rw_verify_area+0x24a/0x4c0 [ 1104.050693][T18557] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1104.050719][T18557] vfs_read+0x213/0xa80 [ 1104.050748][T18557] ? __pfx___mutex_lock+0x10/0x10 [ 1104.050775][T18557] ? __pfx_vfs_read+0x10/0x10 [ 1104.050804][T18557] ? __fget_files+0x3a2/0x420 [ 1104.050826][T18557] ? __fget_files+0x2a/0x420 [ 1104.050853][T18557] ksys_read+0x150/0x270 [ 1104.050880][T18557] ? __pfx_ksys_read+0x10/0x10 [ 1104.050907][T18557] ? rcu_is_watching+0x15/0xb0 [ 1104.050929][T18557] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1104.050950][T18557] do_syscall_64+0x174/0x580 [ 1104.050977][T18557] ? clear_bhb_loop+0x40/0x90 [ 1104.051000][T18557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1104.051020][T18557] RIP: 0033:0x7f57b5d5d68e [ 1104.051039][T18557] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1104.051056][T18557] RSP: 002b:00007f57b6c97fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1104.051078][T18557] RAX: ffffffffffffffda RBX: 00007f57b6c986c0 RCX: 00007f57b5d5d68e [ 1104.051093][T18557] RDX: 000000000000000f RSI: 00007f57b6c980a0 RDI: 0000000000000005 [ 1104.051106][T18557] RBP: 00007f57b6c98090 R08: 0000000000000000 R09: 0000000000000000 [ 1104.051118][T18557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1104.051129][T18557] R13: 00007f57b6016128 R14: 00007f57b6016090 R15: 00007ffe0329dcc8 [ 1104.051155][T18557] [ 1104.445559][T18571] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11518'. [ 1104.450945][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1104.454668][T18571] block nbd1: Unsupported socket: should be TCP or UNIX. [ 1104.507696][T18572] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11518'. [ 1104.633655][T18574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11520'. [ 1104.691098][T18580] netlink: 'syz.2.11518': attribute type 3 has an invalid length. [ 1104.729595][T18581] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11519'. [ 1105.110568][T18590] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1105.412540][T18614] erspan0: entered promiscuous mode [ 1105.451691][T18614] erspan0: left promiscuous mode [ 1106.117868][T18648] tipc: Invalid UDP bearer configuration [ 1106.117953][T18648] tipc: Enabling of bearer rejected, failed to enable media [ 1106.531692][T18677] netlink: 'syz.4.11547': attribute type 3 has an invalid length. [ 1106.898212][T18688] syzkaller0: entered promiscuous mode [ 1106.912837][T18688] syzkaller0: entered allmulticast mode [ 1106.996449][T18697] tipc: Enabled bearer , priority 0 [ 1107.005185][T18697] syzkaller0: entered promiscuous mode [ 1107.012995][T18697] syzkaller0: entered allmulticast mode [ 1107.049884][T18696] bridge0: port 1(vlan4) entered blocking state [ 1107.057091][T18696] bridge0: port 1(vlan4) entered disabled state [ 1107.064196][T18696] vlan4: entered allmulticast mode [ 1107.069957][T18696] geneve0: entered allmulticast mode [ 1107.083457][T18697] tipc: Resetting bearer [ 1107.091680][T18695] tipc: Resetting bearer [ 1107.101721][T18695] tipc: Disabling bearer [ 1107.607563][T18716] netlink: 'syz.2.11555': attribute type 21 has an invalid length. [ 1107.718999][T18720] __nla_validate_parse: 4 callbacks suppressed [ 1107.719043][T18720] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11557'. [ 1107.750320][T18723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1107.854393][T18724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11558'. [ 1108.210781][T18722] netlink: 248 bytes leftover after parsing attributes in process `syz.4.11558'. [ 1108.220873][T18734] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 1108.256422][T18722] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11558'. [ 1108.275962][T18736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11561'. [ 1108.904275][T18754] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11566'. [ 1109.053728][T18754] bond12: entered allmulticast mode [ 1109.095377][T18760] vlan0: entered allmulticast mode [ 1109.112294][T18760] bond0: entered allmulticast mode [ 1109.117471][T18760] team0: entered allmulticast mode [ 1109.143541][T18765] lo: entered allmulticast mode [ 1109.150572][T18765] tunl0: entered allmulticast mode [ 1109.166250][T18765] gre0: entered allmulticast mode [ 1109.173833][T18760] netlink: 14 bytes leftover after parsing attributes in process `syz.0.11565'. [ 1109.195277][T18765] gretap0: entered allmulticast mode [ 1109.205763][T18765] erspan0: entered allmulticast mode [ 1109.227489][T18765] ip_vti0: entered allmulticast mode [ 1109.236594][T18765] ip6_vti0: entered allmulticast mode [ 1109.269277][T18765] sit0: entered allmulticast mode [ 1109.297167][T18765] ip6tnl0: entered allmulticast mode [ 1109.307290][T18765] ip6gre0: entered allmulticast mode [ 1109.311017][T18770] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11570'. [ 1109.321887][T18765] syz_tun: left promiscuous mode [ 1109.328357][T18765] ip6gretap0: entered allmulticast mode [ 1109.335371][T18765] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.342528][T18765] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.349780][T18765] bridge0: entered allmulticast mode [ 1109.359203][T18765] bond0: entered allmulticast mode [ 1109.364325][T18765] bond_slave_1: entered allmulticast mode [ 1109.381918][T18765] team0: entered allmulticast mode [ 1109.387082][T18765] team_slave_0: entered allmulticast mode [ 1109.392820][T18765] team_slave_1: entered allmulticast mode [ 1109.400302][T18765] dummy0: entered allmulticast mode [ 1109.407078][T18765] nlmon0: entered allmulticast mode [ 1109.413191][T18765] vxcan0: entered allmulticast mode [ 1109.419584][T18765] vxcan1: entered allmulticast mode [ 1109.426043][T18765] veth0: entered allmulticast mode [ 1109.432853][T18765] veth1: entered allmulticast mode [ 1109.442233][T18765] wg0: entered allmulticast mode [ 1109.448015][T18765] tipc: Resetting bearer [ 1109.453354][T18765] wg1: entered allmulticast mode [ 1109.461002][T18765] wg2: entered allmulticast mode [ 1109.467277][T18765] veth0_to_bridge: entered allmulticast mode [ 1109.475873][T18765] veth1_to_bridge: entered allmulticast mode [ 1109.489114][T18765] veth0_to_bond: entered allmulticast mode [ 1109.496260][T18765] veth1_to_bond: entered allmulticast mode [ 1109.504173][T18765] veth0_to_team: entered allmulticast mode [ 1109.512580][T18765] veth1_to_team: entered allmulticast mode [ 1109.521007][T18765] veth0_to_batadv: entered allmulticast mode [ 1109.534448][T18765] batadv_slave_0: entered allmulticast mode [ 1109.543495][T18765] veth1_to_batadv: entered allmulticast mode [ 1109.551356][T18765] batadv_slave_1: entered allmulticast mode [ 1109.559790][T18765] xfrm0: entered allmulticast mode [ 1109.566787][T18765] veth0_to_hsr: entered allmulticast mode [ 1109.574409][T18765] hsr_slave_0: entered allmulticast mode [ 1109.581532][T18765] veth1_to_hsr: entered allmulticast mode [ 1109.595864][T18765] hsr_slave_1: entered allmulticast mode [ 1109.604045][T18765] hsr0: entered allmulticast mode [ 1109.611285][T18765] veth1_virt_wifi: entered allmulticast mode [ 1109.620623][T18765] veth0_virt_wifi: entered allmulticast mode [ 1109.628656][T18765] virt_wifi0: entered allmulticast mode [ 1109.637563][T18765] veth1_vlan: entered allmulticast mode [ 1109.645051][T18765] veth0_vlan: entered allmulticast mode [ 1109.655150][T18765] vlan0: entered allmulticast mode [ 1109.660614][T18765] macvlan0: entered allmulticast mode [ 1109.667586][T18765] macvlan1: entered allmulticast mode [ 1109.674504][T18765] ipvlan0: entered allmulticast mode [ 1109.689692][T18765] ipvlan1: entered allmulticast mode [ 1109.696896][T18765] veth1_macvtap: entered allmulticast mode [ 1109.704235][T18765] veth0_macvtap: entered allmulticast mode [ 1109.711545][T18765] macvtap0: entered allmulticast mode [ 1109.718352][T18765] macsec0: entered allmulticast mode [ 1109.724999][T18765] geneve0: entered allmulticast mode [ 1109.731575][T18765] geneve1: entered allmulticast mode [ 1109.738448][T18765] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1109.751678][T18765] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 1109.760499][T18765] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 1109.769320][T18765] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 1109.779718][T18765] mac80211_hwsim hwsim130 wlan0: entered allmulticast mode [ 1109.797047][T18765] mac80211_hwsim hwsim131 wlan1: entered allmulticast mode [ 1109.805694][T18765] syztnl2: entered allmulticast mode [ 1109.813128][T18765] vxlan0: entered allmulticast mode [ 1109.820104][T18765] bond1: entered allmulticast mode [ 1109.825220][T18765] geneve2: entered allmulticast mode [ 1109.832867][T18765] syztnl0: entered allmulticast mode [ 1109.839611][T18765] bond2: entered allmulticast mode [ 1109.844738][T18765] bond3: entered allmulticast mode [ 1109.850241][T18765] gretap1: entered allmulticast mode [ 1109.859278][T18765] bridge1: entered allmulticast mode [ 1109.865835][T18765] bridge_slave_1.: entered allmulticast mode [ 1109.872132][T18765] syzkaller1: entered allmulticast mode [ 1109.880668][T18765] mac80211_hwsim hwsim139 wlan2: entered allmulticast mode [ 1109.890685][T18765] mac80211_hwsim hwsim140 wlan3: entered allmulticast mode [ 1109.905297][T18765] bond4: entered allmulticast mode [ 1109.910723][T18765] ip6gretap1: entered allmulticast mode [ 1109.918889][T18765] vlan1: entered allmulticast mode [ 1109.924330][T18765] bond5: entered allmulticast mode [ 1109.929443][T18765] geneve3: entered allmulticast mode [ 1109.937334][T18765] gre1: entered allmulticast mode [ 1109.954885][T18765] ip6erspan0: entered allmulticast mode [ 1109.962266][T18765] sit1: entered allmulticast mode [ 1109.979324][T18765] macsec1: entered allmulticast mode [ 1109.985963][T18765] bridge2: entered allmulticast mode [ 1109.993209][T18765] bond6: entered allmulticast mode [ 1109.998346][T18765] geneve4: entered allmulticast mode [ 1110.020844][T18765] vlan2: entered allmulticast mode [ 1110.028284][T18765] bridge3: entered allmulticast mode [ 1110.035558][T18765] vxlan1: entered allmulticast mode [ 1110.043002][T18765] vlan3: entered allmulticast mode [ 1110.048778][T18765] bridge4: entered allmulticast mode [ 1110.056496][T18765] bond7: entered allmulticast mode [ 1110.062362][T18765] batadv1: entered allmulticast mode [ 1110.070178][T18765] veth2: entered allmulticast mode [ 1110.077406][T18765] veth3: entered allmulticast mode [ 1110.084835][T18765] bond8: entered allmulticast mode [ 1110.091675][T18765] bridge5: entered allmulticast mode [ 1110.099374][T18765] bond9: entered allmulticast mode [ 1110.105915][T18765] bridge6: entered allmulticast mode [ 1110.114059][T18765] bond10: entered allmulticast mode [ 1110.122250][T18765] sit2: entered allmulticast mode [ 1110.142692][T18765] vlan4: left promiscuous mode [ 1110.148505][T18765] vlan4: entered allmulticast mode [ 1110.154032][T18765] ipvlan2: entered allmulticast mode [ 1110.161101][T18765] mac80211_hwsim hwsim149 wlan4: entered allmulticast mode [ 1110.169983][T18765] bond11: entered allmulticast mode [ 1110.175206][T18765] bridge7: entered allmulticast mode [ 1110.182723][T18765] sit3: entered allmulticast mode [ 1110.189110][T18765] ipvlan3: entered allmulticast mode [ 1110.195738][T18765] veth4: entered allmulticast mode [ 1110.201119][T18765] veth5: entered allmulticast mode [ 1110.232891][T18760] bond0 (unregistering): (slave team0): Releasing backup interface [ 1110.241708][T18760] team0: left allmulticast mode [ 1110.250237][T18760] bond0 (unregistering): Released all slaves [ 1110.291306][ T6610] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1110.320365][ T6610] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1110.349882][ T6610] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1110.384545][ T5236] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1110.393809][ T5236] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1110.417023][ T5236] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1110.450369][ T5236] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1110.459372][ T5236] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1110.528896][ T5236] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1110.573893][T18784] dvmrp8: entered allmulticast mode [ 1110.597970][ T5236] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1110.629855][ T5236] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1110.646875][ T5236] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1110.730019][T18817] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11577'. [ 1110.817501][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1111.154556][T18844] nftables ruleset with unbound chain [ 1111.498207][T18868] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.11588'. [ 1111.630265][ T5236] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 1112.034913][T18901] batadv0: entered promiscuous mode [ 1112.042526][T18901] batadv0: entered allmulticast mode [ 1112.138223][T18860] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1112.267553][T18910] syzkaller1: entered promiscuous mode [ 1112.273086][T18910] syzkaller1: entered allmulticast mode [ 1112.673253][T18935] bond12: (slave tunl0): Device is not bonding slave [ 1112.690764][T18935] bond12: option active_slave: invalid value (tunl0) [ 1112.710808][T18935] bond12 (unregistering): Released all slaves [ 1112.783933][T18913] xfrm0 speed is unknown, defaulting to 1000 [ 1112.804978][T18913] hsr0 speed is unknown, defaulting to 1000 [ 1112.824237][T18913] xfrm0 speed is unknown, defaulting to 1000 [ 1113.038941][T18912] xfrm0 speed is unknown, defaulting to 1000 [ 1113.049738][T18912] hsr0 speed is unknown, defaulting to 1000 [ 1113.096118][T18915] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1113.122534][T18964] bridge8: the hash_elasticity option has been deprecated and is always 16 [ 1113.270906][T18912] xfrm0 speed is unknown, defaulting to 1000 [ 1113.690387][T18996] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11606'. [ 1113.971269][T19002] syzkaller0: entered promiscuous mode [ 1113.978905][T19006] netlink: 'syz.0.11608': attribute type 1 has an invalid length. [ 1113.991399][T19002] syzkaller0: entered allmulticast mode [ 1114.333231][T19018] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1114.625600][T19028] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11612'. [ 1114.904483][T19035] tipc: Enabled bearer , priority 0 [ 1114.942762][T19035] syzkaller0: entered promiscuous mode [ 1114.948337][T19035] syzkaller0: entered allmulticast mode [ 1114.982170][T19035] tipc: Resetting bearer [ 1114.990061][T19034] tipc: Resetting bearer [ 1114.997958][T19038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11616'. [ 1115.064802][T19034] tipc: Disabling bearer [ 1115.095503][T19038] netlink: 'syz.2.11616': attribute type 1 has an invalid length. [ 1115.195373][T19053] netlink: 'syz.3.11621': attribute type 1 has an invalid length. [ 1115.210661][T19055] netlink: 'syz.2.11620': attribute type 62 has an invalid length. [ 1115.298874][T19059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11623'. [ 1115.314660][T19057] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11622'. [ 1115.337061][T19057] syzkaller0: entered promiscuous mode [ 1115.342576][T19057] syzkaller0: entered allmulticast mode [ 1115.356029][T19061] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11624'. [ 1115.726251][T19079] syzkaller0: entered promiscuous mode [ 1115.761642][T19079] syzkaller0: entered allmulticast mode [ 1115.781430][T19092] TC_ACT_REPEAT abuse ? [ 1115.972595][T19096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11633'. [ 1116.242340][T19089] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11632'. [ 1116.305403][T19111] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 1116.316918][T19111] dvmrp1: linktype set to 776 [ 1116.712877][T19115] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11636'. [ 1116.969887][T19159] syzkaller0: entered promiscuous mode [ 1117.005115][T19159] syzkaller0: entered allmulticast mode [ 1117.110179][T19171] netlink: 'syz.0.11648': attribute type 1 has an invalid length. [ 1117.168707][T19171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1117.394707][ T5241] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1117.431576][T19188] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11652'. [ 1117.441355][ T5241] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1117.473912][ T5241] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1117.512169][ T5241] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1117.579632][T19197] netdevsim netdevsim2: Direct firmware load for á failed with error -2 [ 1117.606329][T19197] netdevsim netdevsim2: Falling back to sysfs fallback for: á [ 1117.640662][T19196] netdevsim netdevsim2: Direct firmware load for á failed with error -2 [ 1117.664596][T19196] netdevsim netdevsim2: Falling back to sysfs fallback for: á [ 1118.257917][T19216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1118.391090][T19239] netlink: 'syz.1.11664': attribute type 10 has an invalid length. [ 1118.741085][T19265] __nla_validate_parse: 7 callbacks suppressed [ 1118.741103][T19265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11674'. [ 1119.353126][T19305] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1119.474571][T19310] netlink: 'syz.1.11687': attribute type 1 has an invalid length. [ 1119.484547][T19311] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11687'. [ 1119.494992][T19312] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11687'. [ 1119.525071][T19310] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 1119.738194][T19318] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11688'. [ 1119.770498][T19318] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11688'. [ 1119.794630][T19318] tc action pedit 'at' offset 9 out of bounds [ 1119.868373][T19337] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11691'. [ 1119.916001][T19340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11694'. [ 1119.939990][T19334] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11691'. [ 1120.024319][T19343] netlink: 'syz.3.11696': attribute type 1 has an invalid length. [ 1120.032180][T19343] netlink: 224 bytes leftover after parsing attributes in process `syz.3.11696'. [ 1120.073137][T19351] netlink: 'syz.4.11698': attribute type 1 has an invalid length. [ 1120.093193][T19351] netlink: 1 bytes leftover after parsing attributes in process `syz.4.11698'. [ 1120.112952][T19350] netlink: 'syz.4.11698': attribute type 1 has an invalid length. [ 1120.129729][T19358] x_tables: duplicate underflow at hook 2 [ 1120.167782][T19347] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1121.081967][T19413] ÿÿÿÿÿÿ: renamed from batadv_slave_1 (while UP) [ 1121.160652][T19417] pim6reg0: tun_chr_ioctl cmd 1074025681 [ 1121.294983][T19426] netlink: 'syz.3.11722': attribute type 32 has an invalid length. [ 1121.316183][T19426] bond13: Setting coupled_control to on (1) [ 1121.568626][T19439] =v: renamed from veth0_to_bond [ 1121.900115][T19465] tipc: MTU too low for tipc bearer [ 1122.160771][T19472] bond11: entered promiscuous mode [ 1122.178125][T19472] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1122.243239][T19463] xfrm0 speed is unknown, defaulting to 1000 [ 1122.251873][T19463] hsr0 speed is unknown, defaulting to 1000 [ 1122.260621][T19463] xfrm0 speed is unknown, defaulting to 1000 [ 1122.733346][T19502] xt_TCPMSS: Only works on TCP SYN packets [ 1123.410763][ T3399] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1123.418323][ T3399] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1123.425615][ T3399] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1123.433495][ T3399] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1123.441797][ T3399] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1123.738149][T19518] bridge10: port 1(veth13) entered blocking state [ 1123.756423][T19518] bridge10: port 1(veth13) entered disabled state [ 1123.767253][T19518] veth13: entered allmulticast mode [ 1123.773864][T19518] veth13: entered promiscuous mode [ 1123.897942][T19526] bridge10: port 2(veth15) entered blocking state [ 1123.916124][T19526] bridge10: port 2(veth15) entered disabled state [ 1123.923124][T19526] veth15: entered allmulticast mode [ 1123.929966][T19526] veth15: entered promiscuous mode [ 1123.954965][T19531] __nla_validate_parse: 31 callbacks suppressed [ 1123.955008][T19531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11752'. [ 1123.997067][ T5241] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1124.007234][ T5241] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.124744][T19533] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11753'. [ 1124.152692][ T5241] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1124.162904][ T5241] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.193570][T19543] pimreg: entered allmulticast mode [ 1124.276540][T19512] xfrm0 speed is unknown, defaulting to 1000 [ 1124.293968][T19512] hsr0 speed is unknown, defaulting to 1000 [ 1124.302450][T19512] xfrm0 speed is unknown, defaulting to 1000 [ 1124.315179][T19554] netlink: 'syz.1.11758': attribute type 24 has an invalid length. [ 1124.331140][T19555] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11759'. [ 1124.370425][T19562] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 1124.576012][T19569] tipc: Enabling of bearer rejected, failed to enable media [ 1124.629935][T19573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11764'. [ 1124.640575][T19550] xfrm0 speed is unknown, defaulting to 1000 [ 1124.660573][T19550] hsr0 speed is unknown, defaulting to 1000 [ 1124.672335][T19550] xfrm0 speed is unknown, defaulting to 1000 [ 1124.724169][T19576] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11765'. [ 1124.765870][T19576] Bluetooth: MGMT ver 1.23 [ 1124.781478][T19576] gtp0: entered allmulticast mode [ 1124.804229][T19576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11765'. [ 1124.861885][ T5241] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1124.883681][ T5241] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.006483][ T5241] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1125.032629][ T5241] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.211153][T19512] bridge0: port 1(bridge_slave_0) entered blocking state [ 1125.225525][T19512] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.235308][T19512] bridge_slave_0: entered allmulticast mode [ 1125.242986][T19512] bridge_slave_0: entered promiscuous mode [ 1125.314287][T19512] bridge0: port 2(bridge_slave_1) entered blocking state [ 1125.324445][T19512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.335884][T19512] bridge_slave_1: entered allmulticast mode [ 1125.346387][T19512] bridge_slave_1: entered promiscuous mode [ 1125.362708][T19605] netlink: 'syz.1.11771': attribute type 1 has an invalid length. [ 1125.370736][ T5233] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 1125.381428][ T5233] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 1125.445649][T19512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1125.473995][T19512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1125.536719][T18416] Bluetooth: hci3: command tx timeout [ 1125.559045][ T5236] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 1125.667715][T19512] team0: Port device team_slave_0 added [ 1125.675601][T19512] team0: Port device team_slave_1 added [ 1125.692324][ T6610] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 20002 - 0 [ 1125.708744][T19614] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1125.730851][T19619] tipc: Enabling of bearer rejected, failed to enable media [ 1125.740948][T19614] netlink: 27 bytes leftover after parsing attributes in process `syz.4.11775'. [ 1125.751817][T19620] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11776'. [ 1125.771491][ T5241] dvmrp0: left allmulticast mode [ 1125.846175][ T5241] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 1125.858917][ T5241] bond10 (unregistering): (slave ip6gretap2): Releasing active interface [ 1125.883964][ T5233] smc: removing ib device syz0 [ 1125.917336][ T5241] bond2 (unregistering): (slave vti0): Releasing backup interface [ 1125.933098][ T5233] smbdirect: ib_dev[syz0] removed [ 1126.245731][ T5241] bond1 (unregistering): Released all slaves [ 1126.322004][ T5241] bond2 (unregistering): Released all slaves [ 1126.342089][ T5241] bond3 (unregistering): Released all slaves [ 1126.372986][ T5241] bond4 (unregistering): Released all slaves [ 1126.409639][ T5241] bond5 (unregistering): Released all slaves [ 1126.474251][ T5241] bond6 (unregistering): Released all slaves [ 1126.503263][ T5241] bond7 (unregistering): Released all slaves [ 1126.533780][ T5241] bond8 (unregistering): Released all slaves [ 1126.572940][ T5241] bond9 (unregistering): Released all slaves [ 1126.593474][ T5241] bond10 (unregistering): Released all slaves [ 1126.617091][ T5241] bond0 (unregistering): Released all slaves [ 1126.666518][ T5241] bond11 (unregistering): Released all slaves [ 1126.788400][T19512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1126.795869][T19512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1126.826082][T19512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1126.939381][ T5719] xfrm0 speed is unknown, defaulting to 1000 [ 1126.956565][ T5719] syz0: Port: 1 Link DOWN [ 1127.000761][T19512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1127.020070][T19512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1127.048522][T19512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1127.583175][T19512] hsr_slave_0: entered promiscuous mode [ 1127.621113][T19512] hsr_slave_1: entered promiscuous mode [ 1127.627357][T19512] debugfs: 'hsr0' already exists in 'hsr' [ 1127.633115][T19512] Cannot create hsr debugfs directory [ 1127.687216][T19659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11783'. [ 1127.747457][T18416] Bluetooth: hci3: command tx timeout [ 1127.863586][T19635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1128.342090][T19688] netlink: 'syz.4.11790': attribute type 1 has an invalid length. [ 1128.492449][T19682] bridge0: left promiscuous mode [ 1128.548492][T19682] 8021q: adding VLAN 0 to HW filter on device team0 [ 1128.695488][T19682] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1128.749723][T19682] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1128.771161][T19682] veth1_vlan: left promiscuous mode [ 1128.779765][T19682] veth0_vlan: left promiscuous mode [ 1128.785741][T19682] veth0_vlan: entered promiscuous mode [ 1128.795138][T19682] veth1_vlan: entered promiscuous mode [ 1128.804698][T19682] veth1_macvtap: left promiscuous mode [ 1128.812132][T19682] veth0_macvtap: left promiscuous mode [ 1128.831164][T19682] veth0_macvtap: entered promiscuous mode [ 1128.854855][T19682] veth1_macvtap: entered promiscuous mode [ 1128.871045][T19682] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1128.883168][T19682] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1128.893161][T19682] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1128.905086][T19682] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1128.942466][T19682] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1128.980888][T19682] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1128.992776][T19682] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1129.010306][T19682] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1129.022106][T19682] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1129.034359][T19682] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 1129.086119][T19688] bond13: entered promiscuous mode [ 1129.096333][T19688] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1129.123030][T19692] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1129.134842][T19692] bond13: (slave bond14): making interface the new active one [ 1129.143090][T19692] bond14: entered promiscuous mode [ 1129.149864][T19692] bond13: (slave bond14): Enslaving as an active interface with an up link [ 1129.166118][ T5244] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.173316][ T5244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1129.188789][ T5244] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.195983][ T5244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1129.251407][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1129.270602][ T6612] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1129.288014][ T6612] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.302366][ T6612] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1129.311168][ T6612] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.313738][T19714] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11794'. [ 1129.331002][T19512] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1129.345106][T19704] syzkaller1: entered promiscuous mode [ 1129.350632][T19704] syzkaller1: entered allmulticast mode [ 1129.361502][T19713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11795'. [ 1129.370649][ T6612] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1129.379592][ T6612] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.388354][ T6612] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1129.404595][ T6612] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.425285][T19713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11795'. [ 1129.509480][ T5244] bond5: (slave geneve3): link status definitely down, disabling slave [ 1129.532109][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1129.555352][ T5244] bond5: now running without any active interface! [ 1129.611881][T19512] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1129.681680][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1129.693985][ C0] IPv6: bridge0: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1b used by aa:aa:aa:aa:aa:1b detected! [ 1129.750724][T19512] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1129.792134][T18416] Bluetooth: hci3: command tx timeout [ 1129.816875][ T5241] tipc: Left network mode [ 1129.825807][T19730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11798'. [ 1129.870473][ T5241] IPVS: stopping master sync thread 8976 ... [ 1129.892467][T19512] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1129.906016][ T5241] IPVS: stopping backup sync thread 14675 ... [ 1130.238580][T19512] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1130.296572][T19512] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1130.342145][T19512] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1130.410691][T19512] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1130.499303][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1130.544084][T19512] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1130.574003][T19512] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1130.599491][T19512] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1130.632935][T19512] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1130.662309][T19766] tc_dump_action: action bad kind [ 1130.774110][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1130.791749][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1130.805249][T19775] tipc: Invalid UDP bearer configuration [ 1130.805285][T19775] tipc: Enabling of bearer rejected, failed to enable media [ 1130.960787][T19782] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11807'. [ 1131.122787][T19792] netlink: 'syz.4.11811': attribute type 89 has an invalid length. [ 1131.139937][T19512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1131.206582][T19512] 8021q: adding VLAN 0 to HW filter on device team0 [ 1131.260326][ T5240] bridge0: port 1(bridge_slave_0) entered blocking state [ 1131.267531][ T5240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1131.302086][T19799] netlink: 256 bytes leftover after parsing attributes in process `syz.4.11812'. [ 1131.341502][ T5237] bridge0: port 2(bridge_slave_1) entered blocking state [ 1131.348661][ T5237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1131.437772][ T5241] hsr_slave_0: left promiscuous mode [ 1131.448256][ T5241] hsr_slave_1: left promiscuous mode [ 1131.458334][ T5241] veth1_macvtap: left promiscuous mode [ 1131.463865][ T5241] veth0_macvtap: left promiscuous mode [ 1131.709065][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1131.857270][T18416] Bluetooth: hci3: command tx timeout [ 1132.079828][T19839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11817'. [ 1132.452946][T19819] geneve5: entered promiscuous mode [ 1132.528026][T19839] team1: entered promiscuous mode [ 1132.558376][T19839] team1: entered allmulticast mode [ 1132.588445][T19839] 8021q: adding VLAN 0 to HW filter on device team1 [ 1132.630303][ T5237] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.649761][T19862] netlink: 'syz.4.11818': attribute type 1 has an invalid length. [ 1132.663324][ T5237] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.701661][ T5237] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.735059][ T5237] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.812864][T19864] syzkaller1: entered promiscuous mode [ 1132.832956][T19864] syzkaller1: entered allmulticast mode [ 1133.147506][T19891] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 1133.587594][ T5241] IPVS: stop unused estimator thread 0... [ 1133.664250][T19921] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 1133.713905][T19512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1133.741064][T19929] netlink: 'syz.2.11830': attribute type 1 has an invalid length. [ 1133.888104][T19512] veth0_vlan: entered promiscuous mode [ 1133.928442][T19512] veth1_vlan: entered promiscuous mode [ 1133.968449][T19938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11834'. [ 1134.051057][T19943] netlink: 'syz.2.11834': attribute type 4 has an invalid length. [ 1134.139564][T19943] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11834'. [ 1134.162156][T19938] bond13: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 1134.174644][T19938] bond13 (unregistering): Released all slaves [ 1134.211829][T19950] syzkaller0: entered promiscuous mode [ 1134.230866][T19950] syzkaller0: entered allmulticast mode [ 1134.272153][T19512] veth0_macvtap: entered promiscuous mode [ 1134.305171][T19512] veth1_macvtap: entered promiscuous mode [ 1134.358627][T19512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1134.404551][T19512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1134.438147][ T6612] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.459473][ T6612] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.488571][ T6612] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.543033][ T6612] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.555079][T19967] xt_hashlimit: overflow, try lower: 6/0 [ 1134.577889][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1134.611049][T19967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11838'. [ 1134.690450][ T5237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1134.722410][ T5237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1134.781677][ T5245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1134.806185][ T5245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1135.002012][T19996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11845'. [ 1142.219037][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1156.297630][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1185.097496][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1240.496565][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1240.503573][ C1] rcu: 0-...!: (1 GPs behind) idle=951c/1/0x4000000000000000 softirq=281454/281454 fqs=2 [ 1240.513504][ C1] rcu: (detected by 1, t=10505 jiffies, g=251129, q=964 ncpus=2) [ 1240.521331][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1240.521364][ C0] NMI backtrace for cpu 0 [ 1240.521380][ C0] CPU: 0 UID: 0 PID: 19512 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1240.521399][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1240.521410][ C0] RIP: 0010:timerqueue_linked_add+0x23f/0x2e0 [ 1240.521436][ C0] Code: f6 4c 89 e8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ef e8 55 ae 8d f6 4d 89 75 00 49 8d 7d 08 ba 10 00 00 00 31 f6 e8 21 b0 8d f6 <4c> 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 2c ae 8d f6 4d [ 1240.521451][ C0] RSP: 0018:ffffc90000007d58 EFLAGS: 00000046 [ 1240.521468][ C0] RAX: ffff8880768f9308 RBX: ffff8880b86282d8 RCX: 0000000000000000 [ 1240.521481][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880768f9318 [ 1240.521493][ C0] RBP: dffffc0000000000 R08: ffff8880768f9317 R09: 0000000000000000 [ 1240.521505][ C0] R10: ffff8880768f9308 R11: ffffed100ed1f263 R12: 0000000000000000 [ 1240.521517][ C0] R13: ffff8880768f9300 R14: ffff8880b8628bb8 R15: ffff8880b8628bc8 [ 1240.521531][ C0] FS: 000055555e7e8500(0000) GS:ffff88812527c000(0000) knlGS:0000000000000000 [ 1240.521546][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1240.521558][ C0] CR2: 00007fd9c75456b8 CR3: 0000000058b3a000 CR4: 00000000003526f0 [ 1240.521574][ C0] Call Trace: [ 1240.521583][ C0] [ 1240.521595][ C0] enqueue_hrtimer+0x18e/0x2c0 [ 1240.521620][ C0] __hrtimer_run_queues+0x4ce/0xa10 [ 1240.521648][ C0] hrtimer_interrupt+0x448/0x910 [ 1240.521680][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 1240.521703][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1240.521725][ C0] [ 1240.521730][ C0] [ 1240.521738][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1240.521757][ C0] RIP: 0010:copy_pmd_range+0x8a8/0x5880 [ 1240.521779][ C0] Code: c0 0f 84 bd 1a 00 00 49 89 c4 48 8d 78 08 48 89 f8 48 c1 e8 03 48 89 04 24 42 80 3c 38 00 74 05 e8 ad 5e 18 00 49 8b 44 24 08 <41> 89 c5 41 83 e5 01 49 ff cd 49 09 c5 4d 21 e5 48 83 bc 24 58 01 [ 1240.521794][ C0] RSP: 0018:ffffc90004d07320 EFLAGS: 00000246 [ 1240.521808][ C0] RAX: dead000000000100 RBX: 0000000000000001 RCX: ffff888038e23e00 [ 1240.521820][ C0] RDX: 0000000000000000 RSI: 00000000001a0c00 RDI: ffffea0006830108 [ 1240.521832][ C0] RBP: ffffc90004d075b0 R08: ffff88814343c13f R09: 1ffff11028687827 [ 1240.521845][ C0] R10: dffffc0000000000 R11: ffffed1028687828 R12: ffffea0006830100 [ 1240.521858][ C0] R13: ffff8880564ad160 R14: 80000001a0c04007 R15: dffffc0000000000 [ 1240.521882][ C0] ? try_charge_memcg+0x264/0x1590 [ 1240.521913][ C0] ? try_charge_memcg+0x667/0x1590 [ 1240.521941][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 1240.521963][ C0] ? __pfx_try_charge_memcg+0x10/0x10 [ 1240.521990][ C0] ? do_syscall_64+0x174/0x580 [ 1240.522014][ C0] ? mas_wr_walk_descend+0x574/0x8b0 [ 1240.522044][ C0] copy_page_range+0xc26/0x1250 [ 1240.522080][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 1240.522103][ C0] ? lock_release+0x4b/0x3c0 [ 1240.522132][ C0] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 1240.522160][ C0] dup_mmap+0xf21/0x1d90 [ 1240.522190][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 1240.522210][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1240.522236][ C0] ? copy_mm+0x10f/0x480 [ 1240.522257][ C0] ? rcu_is_watching+0x15/0xb0 [ 1240.522274][ C0] ? lock_acquire+0x5f/0x350 [ 1240.522297][ C0] ? __percpu_counter_init_many+0x35f/0x380 [ 1240.522321][ C0] copy_mm+0x11a/0x480 [ 1240.522342][ C0] ? copy_process+0xd2b/0x42e0 [ 1240.522363][ C0] copy_process+0x1e4a/0x42e0 [ 1240.522394][ C0] ? copy_process+0xd2b/0x42e0 [ 1240.522418][ C0] ? __pfx_copy_process+0x10/0x10 [ 1240.522439][ C0] ? rcu_is_watching+0x15/0xb0 [ 1240.522460][ C0] kernel_clone+0x2d7/0x940 [ 1240.522483][ C0] ? cgroup1_freezing+0x20/0x350 [ 1240.522505][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 1240.522532][ C0] ? freezing_slow_path+0x115/0x160 [ 1240.522557][ C0] __x64_sys_clone+0x1b6/0x230 [ 1240.522580][ C0] ? __might_fault+0xcb/0x130 [ 1240.522601][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 1240.522633][ C0] ? do_user_addr_fault+0xc4a/0x1340 [ 1240.522650][ C0] ? rcu_is_watching+0x15/0xb0 [ 1240.522672][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1240.522690][ C0] do_syscall_64+0x174/0x580 [ 1240.522728][ C0] ? trace_irq_disable+0x3b/0x140 [ 1240.522752][ C0] ? clear_bhb_loop+0x40/0x90 [ 1240.522772][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1240.522789][ C0] RIP: 0033:0x7fd9c67c58d2 [ 1240.522806][ C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 1240.522821][ C0] RSP: 002b:00007ffd756fc420 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1240.522838][ C0] RAX: ffffffffffffffda RBX: 00007ffd756fc420 RCX: 00007fd9c67c58d2 [ 1240.522851][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1240.522862][ C0] RBP: 00007ffd756fc5ac R08: 0000000000000000 R09: 0000000000000001 [ 1240.522873][ C0] R10: 000055555e7e87d0 R11: 0000000000000246 R12: 0000000000000001 [ 1240.522885][ C0] R13: 00000000000927c0 R14: 0000000000115318 R15: 00007ffd756fc600 [ 1240.522906][ C0] [ 1240.523358][ C1] rcu: rcu_preempt kthread starved for 10495 jiffies! g251129 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1241.034477][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1241.044462][ C1] rcu: RCU grace-period kthread stack dump: [ 1241.050360][ C1] task:rcu_preempt state:R running task stack:28408 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1241.063878][ C1] Call Trace: [ 1241.067183][ C1] [ 1241.070141][ C1] __schedule+0x17d9/0x56c0 [ 1241.074670][ C1] ? rcu_is_watching+0x15/0xb0 [ 1241.079457][ C1] ? rcu_is_watching+0x15/0xb0 [ 1241.084238][ C1] ? __pfx___schedule+0x10/0x10 [ 1241.089149][ C1] ? schedule+0x90/0x360 [ 1241.093422][ C1] ? rcu_is_watching+0x15/0xb0 [ 1241.098206][ C1] ? lock_release+0x4b/0x3c0 [ 1241.102859][ C1] schedule+0x164/0x360 [ 1241.107053][ C1] schedule_timeout+0x152/0x2c0 [ 1241.111931][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1241.117315][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1241.122636][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1241.128476][ C1] ? prepare_to_swait_event+0x322/0x350 [ 1241.134068][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 1241.138954][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1241.145129][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1241.150444][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1241.155662][ C1] ? trace_irq_enable+0x3b/0x140 [ 1241.160637][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 1241.165297][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1241.170528][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1241.175495][ C1] ? __kthread_parkme+0x196/0x1f0 [ 1241.180565][ C1] kthread+0x388/0x470 [ 1241.184653][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1241.189895][ C1] ? __pfx_kthread+0x10/0x10 [ 1241.194502][ C1] ret_from_fork+0x514/0xb70 [ 1241.199121][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1241.204273][ C1] ? __switch_to+0xc89/0x1420 [ 1241.209008][ C1] ? __pfx_kthread+0x10/0x10 [ 1241.213628][ C1] ret_from_fork_asm+0x1a/0x30 [ 1241.218428][ C1] [ 1241.221468][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1241.227821][ C1] CPU: 1 UID: 0 PID: 5237 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 1241.237295][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1241.247375][ C1] Workqueue: writeback wb_workfn (flush-8:0) [ 1241.253400][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x5c/0x70 [ 1241.259578][ C1] Code: f8 16 00 00 83 fa 02 75 21 48 8b 91 00 17 00 00 48 8b 32 48 8d 7e 01 8b 89 fc 16 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 cc cc cc cc cc 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 [ 1241.279211][ C1] RSP: 0018:ffffc90003b6e258 EFLAGS: 00000293 [ 1241.285299][ C1] RAX: ffffffff81b9f7f7 RBX: dffffc0000000000 RCX: ffff88803ea95d00 [ 1241.293289][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1241.301288][ C1] RBP: ffffc90003b6e390 R08: ffff8880363f7ec7 R09: 1ffff11006c7efd8 [ 1241.309378][ C1] R10: dffffc0000000000 R11: ffffed1006c7efd9 R12: 1ffff110170c85c5 [ 1241.317395][ C1] R13: ffff8880b873c2c8 R14: ffff8880b8642e28 R15: 0000000000000000 [ 1241.325390][ C1] FS: 0000000000000000(0000) GS:ffff88812537c000(0000) knlGS:0000000000000000 [ 1241.334337][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1241.340935][ C1] CR2: 000000110c2fe118 CR3: 0000000031cae000 CR4: 00000000003526f0 [ 1241.348926][ C1] Call Trace: [ 1241.352225][ C1] [ 1241.355181][ C1] smp_call_function_many_cond+0x10c7/0x14b0 [ 1241.361203][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 1241.366444][ C1] ? __pfx_should_flush_tlb+0x10/0x10 [ 1241.371855][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1241.378234][ C1] ? rcu_is_watching+0x15/0xb0 [ 1241.383020][ C1] ? rcu_is_watching+0x15/0xb0 [ 1241.387817][ C1] ? __pfx_should_flush_tlb+0x10/0x10 [ 1241.393231][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 1241.398461][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 1241.403606][ C1] flush_tlb_mm_range+0x5c4/0x1090 [ 1241.408761][ C1] ? page_table_check_clear+0x124/0x4f0 [ 1241.414337][ C1] ? page_table_check_clear+0x48d/0x4f0 [ 1241.419929][ C1] ptep_clear_flush+0x120/0x170 [ 1241.424804][ C1] page_vma_mkclean_one+0x43f/0x780 [ 1241.430025][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1241.435181][ C1] ? __pfx_page_vma_mkclean_one+0x10/0x10 [ 1241.440951][ C1] ? __rmap_walk_file+0x1a6/0x610 [ 1241.446004][ C1] ? rcu_is_watching+0x15/0xb0 [ 1241.450813][ C1] page_mkclean_one+0x1d8/0x2b0 [ 1241.455692][ C1] ? __pfx_page_mkclean_one+0x10/0x10 [ 1241.461097][ C1] ? __pfx_down_read_trylock+0x10/0x10 [ 1241.466599][ C1] ? irqentry_exit+0x218/0x8f0 [ 1241.471396][ C1] ? vma_interval_tree_iter_first+0x20f/0x230 [ 1241.477490][ C1] ? __pfx_page_mkclean_one+0x10/0x10 [ 1241.482895][ C1] __rmap_walk_file+0x450/0x610 [ 1241.487782][ C1] folio_mkclean+0x2d5/0x3f0 [ 1241.492405][ C1] ? __pfx_folio_mkclean+0x10/0x10 [ 1241.497554][ C1] ? __pfx_page_mkclean_one+0x10/0x10 [ 1241.502954][ C1] ? __pfx_invalid_mkclean_vma+0x10/0x10 [ 1241.508621][ C1] ? rcu_is_watching+0x15/0xb0 [ 1241.513426][ C1] ? folio_mapping+0x16f/0x1f0 [ 1241.518210][ C1] folio_clear_dirty_for_io+0x190/0x820 [ 1241.523789][ C1] mpage_submit_folio+0x83/0x2a0 [ 1241.528757][ C1] mpage_process_page_bufs+0x6b2/0x8c0 [ 1241.534254][ C1] mpage_prepare_extent_to_map+0xe0e/0x1690 [ 1241.540175][ C1] ? writeback_sb_inodes+0x9de/0x1b00 [ 1241.545573][ C1] ? __writeback_inodes_wb+0x114/0x240 [ 1241.551064][ C1] ? __pfx_mpage_prepare_extent_to_map+0x10/0x10 [ 1241.557433][ C1] ? kmem_cache_alloc_noprof+0x303/0x650 [ 1241.563095][ C1] ? ext4_init_io_end+0x29/0x130 [ 1241.568060][ C1] ext4_do_writepages+0xc36/0x47a0 [ 1241.573213][ C1] ? rcu_is_watching+0x15/0xb0 [ 1241.578028][ C1] ? rcu_is_watching+0x15/0xb0 [ 1241.582833][ C1] ? rcu_is_watching+0x15/0xb0 [ 1241.587622][ C1] ? __pfx_ext4_do_writepages+0x10/0x10 [ 1241.593192][ C1] ? unwind_next_frame+0x1baf/0x2550 [ 1241.598506][ C1] ? deref_stack_reg+0x18e/0x220 [ 1241.603467][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1241.608627][ C1] ? unwind_next_frame+0x1baf/0x2550 [ 1241.613970][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1241.618929][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1241.624074][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1241.630262][ C1] ? ext4_writepages+0x205/0x3b0 [ 1241.635224][ C1] ? rcu_is_watching+0x15/0xb0 [ 1241.640015][ C1] ? lock_acquire+0x5f/0x350 [ 1241.644649][ C1] ? preempt_count_add+0x91/0x190 [ 1241.649712][ C1] ext4_writepages+0x241/0x3b0 [ 1241.654506][ C1] ? unwind_next_frame+0x1baf/0x2550 [ 1241.659819][ C1] ? __pfx_ext4_writepages+0x10/0x10 [ 1241.665149][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 1241.670289][ C1] ? __pfx_ext4_writepages+0x10/0x10 [ 1241.675634][ C1] do_writepages+0x338/0x560 [ 1241.680263][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1241.685311][ C1] __writeback_single_inode+0x12e/0xf90 [ 1241.690900][ C1] writeback_sb_inodes+0x9de/0x1b00 [ 1241.696128][ C1] ? kernel_wait+0xd6/0x1c0 [ 1241.700662][ C1] ? worker_thread+0xa47/0xfb0 [ 1241.705496][ C1] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1241.711153][ C1] ? rcu_is_watching+0x15/0xb0 [ 1241.715962][ C1] ? __pfx_down_read_trylock+0x10/0x10 [ 1241.721456][ C1] __writeback_inodes_wb+0x114/0x240 [ 1241.726775][ C1] wb_writeback+0x42f/0xad0 [ 1241.731304][ C1] ? queue_io+0x2d1/0x470 [ 1241.735655][ C1] ? __pfx_wb_writeback+0x10/0x10 [ 1241.740767][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1241.745819][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 1241.751581][ C1] ? rcu_is_watching+0x15/0xb0 [ 1241.756376][ C1] wb_workfn+0xc92/0x10f0 [ 1241.760753][ C1] ? __pfx_wb_workfn+0x10/0x10 [ 1241.765545][ C1] ? rcu_is_watching+0x15/0xb0 [ 1241.770327][ C1] ? trace_hrtimer_start+0x82/0x200 [ 1241.775558][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1241.780627][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1241.786069][ C1] ? rcu_is_watching+0x15/0xb0 [ 1241.790884][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 1241.796641][ C1] ? rcu_is_watching+0x15/0xb0 [ 1241.801535][ C1] ? lock_acquire+0x5f/0x350 [ 1241.806160][ C1] ? rcu_is_watching+0x15/0xb0 [ 1241.810958][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 1241.816764][ C1] process_scheduled_works+0xa8e/0x14e0 [ 1241.822364][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1241.828369][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1241.833419][ C1] ? assign_work+0x3cf/0x5d0 [ 1241.838042][ C1] worker_thread+0xa47/0xfb0 [ 1241.842682][ C1] kthread+0x388/0x470 [ 1241.846821][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1241.851970][ C1] ? __pfx_kthread+0x10/0x10 [ 1241.856598][ C1] ret_from_fork+0x514/0xb70 [ 1241.861218][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1241.866368][ C1] ? __switch_to+0xc89/0x1420 [ 1241.871080][ C1] ? __pfx_kthread+0x10/0x10 [ 1241.875688][ C1] ret_from_fork_asm+0x1a/0x30 [ 1241.880490][ C1] [ 1243.938026][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)