last executing test programs: 9m37.070865791s ago: executing program 4 (id=1617): socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x8810) r0 = socket$inet(0x2, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x20040084) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x2, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x7000000}}}}}, 0x0) 9m36.900747789s ago: executing program 4 (id=1619): recvmmsg(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f0000002f80)=[{0x0}, {&(0x7f0000002f40)=""/13, 0xd}], 0x2}, 0xd}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002440), 0x400, 0x0) 9m36.583350042s ago: executing program 4 (id=1624): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(r1, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x20) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f00000000c0)="279a004c6588d5d6dc03d5cc2a00", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 9m35.872368032s ago: executing program 4 (id=1627): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x39b3) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000340)=""/83, 0x53}], 0x1}, 0x81}], 0x2, 0x23, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4) 9m35.635372615s ago: executing program 4 (id=1631): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='yeah', 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r0, &(0x7f0000000300)="89", 0x1, 0x4044880, 0x0, 0x0) 9m34.409761029s ago: executing program 4 (id=1636): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) 9m20.806119485s ago: executing program 0 (id=1728): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@delchain={0x54, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 9m20.732244827s ago: executing program 0 (id=1729): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) 9m20.607993381s ago: executing program 0 (id=1732): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f0000001600)=[{&(0x7f00000000c0)=""/91, 0x5b}], 0x1, 0xa2e3, 0xc) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) preadv(r2, &(0x7f00000039c0)=[{&(0x7f0000000140)=""/142, 0x8e}], 0x1, 0x4, 0x3) r3 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x10001) 9m20.534284537s ago: executing program 0 (id=1734): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 9m19.433823207s ago: executing program 0 (id=1740): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300440c4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000ffffff"], 0x50) recvmsg$unix(r1, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000040)=r3, 0x4) 9m19.24031342s ago: executing program 32 (id=1636): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) 9m19.16884749s ago: executing program 0 (id=1743): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x330, 0xffffffff, 0x0, 0x0, 0x1d8, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}, {0x5}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'ip6gretap0\x00', {0xf63}}}}, {{@ip={@rand_addr=0x64010102, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xf, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="000008060000", @ANYRES16=r1], 0xfdef) sendmsg$NLBL_MGMT_C_REMOVE(r0, 0x0, 0x20048000) 9m4.068399971s ago: executing program 33 (id=1743): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x330, 0xffffffff, 0x0, 0x0, 0x1d8, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}, {0x5}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'ip6gretap0\x00', {0xf63}}}}, {{@ip={@rand_addr=0x64010102, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xf, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="000008060000", @ANYRES16=r1], 0xfdef) sendmsg$NLBL_MGMT_C_REMOVE(r0, 0x0, 0x20048000) 1m8.297957645s ago: executing program 3 (id=4726): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300", 0x42}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r7) 1m4.247545232s ago: executing program 3 (id=4751): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYRES64=r0], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x800) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001b00), r4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000100)=ANY=[@ANYBLOB="54000000461ec72778d2835e7f80d9fc67ecea1439fe320aaac5a4c8828f02c544d741e0c52776af2ffd9beb4373e5ba7dce8b44617ca20568416656c91dc55b7e637ecd80657ceb3395da0f568cd8a45c76da55f7762c95026aa8a75e2aa99a9d9fa94f2c4dd9", @ANYRES16=r5, @ANYBLOB="01002bbd7000fddbdf25170000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000008000b000900000006001600030000000500120001000000"], 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c00028005002100010400080500010004"], 0x4c}}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 1m1.311330546s ago: executing program 3 (id=4771): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000058000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000409500000000000000b7020000000000007b9af8ff00000000b5090000010000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018090000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007ea000000000000056080000000000008500000081000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x4e22, @local}, 0x83, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='syzkaller0\x00', 0x9, 0x9, 0x4}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000640)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmsg$OSF_MSG_ADD(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x175c}, 0x1, 0x0, 0x0, 0x4044084}, 0x1dc8b08251aa3334) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4048014) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) 52.193048191s ago: executing program 3 (id=4788): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3c, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES64=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x20000091}, 0x4000800) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @mcast1, 0x4}, 0x1c) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000680)) ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40809440, &(0x7f0000000500)={&(0x7f0000000600)=[{&(0x7f0000000080)="67d54d09e33ff501287d4c508875fc9648e2e0fc67ae7d", 0x17}, {&(0x7f00000000c0)="00843d048f369937", 0x8}, {&(0x7f0000000100)="85551f710cfc3f25cfc824f37fa0c2423cbb2812c510f98fc56534847894b1e3a9bee835d615304fd558a5215f11b1acbae2f53816a01aaf1a2a9a7030ed6b0216bcf3be899f3ad261825f2cc19522f1db5fb6cff3f1151106841f160a18340872fa0c773234b6f85c0fe22175b1d48903a3bbcbce9b", 0x76}, {&(0x7f0000000200)="b53916f8052e92b6b54480f8067f7b17956eb42204b4f683309cace9b6b30ea3804d938e923f3642d619b1cc157409bb60c55982ec65b9acf9cade18e32ee40d008a2cedf819e3637ca849a876a8011a3d7f8c588a15a1808dc1f60ea66078050e293f5986143a0d9adbebb6a56f2b5d8b0de5358105e54e2ed1907b8466bc4a80a1d53f0ea6802e12f870c214a98e1424cb4bb77205aedb6427612e7e5d", 0x9e}, {&(0x7f0000000400)="ca2724b0c0a4cfe0133611ed8f65ec11230302b2a93a48a2585f13f12b88720fab9896f51a590f53a610c45b2de3bd4cfd5a2d9b4c55c63a0ad63ece6b5768b26819b31fab467b95abb363560848c3ec0391a35c64f1389eac420ddeda9517690463960d55aec030483c92e0f20115902ae1be0940124080", 0x78}], 0x5, 0x9, 0x0, 0x4, 0x5, 0x4af1, 0x5, 0xff}) sendmmsg$inet6(r0, &(0x7f00000026c0)=[{{&(0x7f0000000380)={0xa, 0x4e21, 0x8e8b, @loopback, 0x1}, 0x1c, &(0x7f0000000b80)=[{&(0x7f00000003c0)="0f72036063785aca432ce6c4f99bc9d2f3e44be6a09dabda69b0ecd033d81109845c", 0x22}, {&(0x7f0000000840)="0398ba46807facb8ec309822b151a5494b4a3556d00b855216b018e2009ae983ef04544c8d135f", 0x27}, {&(0x7f0000000880)="104d637e106bd7d1cdffbcb9945f86942f6566bf08f8aad9242d353eb3677d84b786f3220f884d52b96acf8c0bdec5d0fbc7e83e4d01fc", 0x37}, {&(0x7f00000008c0)="d94c60c77acb618655a26bcf26f99ad59be4b883440b559592f825f7c22b837bd13e1f194a126ee489a86c852b3c89c1344a8279b268d23813bb7f99dc35a1fe6f6d975ca41924600141f06b53cd6e9e17f452ae65586018a1415a3e034183943eaffac9e373f2ff068e48176d38ad7df6", 0x71}, {&(0x7f0000000ac0)="2c929421e1d8c747e52bc0a9590f7bf3ea2beb6c1ee2e032075a50122c49d87634772fdd2945a6ad0b9753a28c3af3d7788ce1a2170781067d2366406c55525eb2817b84246f32939154db1612184c8358eeb59440f6300fd29b1ec589c1cdec016747dfaa04ec56f8b9d28c4a5a89ac0fb4c7dd3d010f2b2f89c667eb76ccbf9789db8eff3660d7cf9db15bbb831a9dcf36f8d33e3d162fb0d008c00646bcaa60534e835b13722a13fe66afb4c41deb3f", 0xb1}], 0x5}}, {{&(0x7f0000000c00)={0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, &(0x7f0000000d40)=[{&(0x7f0000000c40)="53e2afea0007d2c947c1c3a84f0cf9aaa3e34b80c517090fbb0487c0c1928594073860c28458e50327fc6a27a0f5894d0f546fd93f39aa998089461f65e1bdf0bdfb39685faf9209fe4648d4e0e0d35f3195221903987fb90a46ba5e49d16c5856584f53215d31a002f4291a64b89c20fcb09cc242cbea455ea03216b08f2dcedf680e481c36fdcbf273ce9866da12721da69df1ae60c27afd2798a159a96a9ddf4bac4dbb68b5d35b2c2b91a58901d32283781a8e62bd1839238dd12912c4eacf47e6982fb8f0", 0xc7}], 0x1, &(0x7f0000000d80)=[@pktinfo={{0x24, 0x29, 0x32, {@private1}}}, @hoplimit={{0x14}}, @hoplimit={{0x14, 0x29, 0x34, 0x8}}, @rthdr={{0xa8, 0x29, 0x39, {0x4, 0x12, 0x1, 0x0, 0x0, [@mcast1, @private1, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x31}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}, @local, @private2={0xfc, 0x2, '\x00', 0x1}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x92d}}, @flowinfo={{0x14, 0x29, 0xb, 0x7}}, @dstopts={{0x90, 0x29, 0x37, {0x2e, 0xe, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @loopback}, @pad1, @calipso={0x7, 0x48, {0x3, 0x10, 0x19, 0xfffb, [0x7, 0x6, 0xf, 0x8000, 0x0, 0x5, 0x8000000000000000, 0x19]}}]}}}], 0x1c0}}, {{&(0x7f0000000f40)={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000002340)=[{0x0}, {&(0x7f0000000fc0)="d2fb7c3480d7890123b300310b3e9f11fbfe13e270717e6a86c9475309f8823b087547c3e699dda4da9019fd1d0c5650eb51e4da1a0e498877a697b5245e6262dcf94aea50ac05aa666fff", 0x4b}, {&(0x7f0000001040)="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", 0x1000}, {&(0x7f0000002040)="a621344b62c9a7a87a08", 0xa}, {&(0x7f0000002080)="32116811a6d43adf768c74c6af08bdec050ee9aab8225ccc6b53fe248db5a150016f02ec14eab493690907e1f7c7c4eb5063896d4241fabe543c79956a1c67c37952def311fa2b814b5579e7aefdf169edd8322eb1f24ad7baefba8918190c9a5ea85adc7f", 0x65}, {&(0x7f0000002100)="18f9ec6119fefc1d3df88d07bb407d8dffa2672536a81d1c091529ac265d6ccccebe53280e8e830ef3bbfac18c9e1d27f16a4d0b3177aa44d3e90dc08766db77cb1ae3f6df62bdfcef47604d657e437793e0637d8bc8807b4021a44682ede5746468b4129167e5a4c400bd84ee96f667f45d5fb4d4b88dd1e28527de884e2b92ee2bb9ed0028f4ce3beef369babef1fcf629bc9faa1bbceb7f74ea760942fb86b4e59041ba9271bff5d5212ec298377c51cb6ccebdd88f25bcaa", 0xba}, {&(0x7f00000021c0)="77ef37e1ce44b847", 0x8}, {&(0x7f0000002200)="4dcd05bfdfba2208c1cb45924915e5af305b6a095ebb335e07695146c789e9010e2b263cfe3ab50f44bcff24b229eb01721513253856766847", 0x39}, {&(0x7f0000002240)="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", 0xfc}], 0x9, &(0x7f0000002400)=[@rthdrdstopts={{0x130, 0x29, 0x37, {0x6, 0x22, '\x00', [@generic={0x5, 0xb0, "17b132c56556ae35dec66a96cc06d7555e0bf56fc3a4e7afa03f44ee8ea3891fe51932e096f1ee5e36bd214e24f68e78b627683eef434fc9da38745900506246f9afaadf09def5309f3472ce0877199592c58b6f50ecd9d159f02b430f2bdb64b6bc677a21afdaa55fc1a50a1d7a8ef51771fe9692f52288917cbe8dbe28f571621c67afbbb1c6b841016f25d11b4a425b3aff81fedb9eb45840364b52455601534bdd90feaf5ab6bec616fbceb14bd9"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x31, 0xfffe, [0x4d, 0x0, 0x0]}}, @enc_lim={0x4, 0x1, 0xe6}, @jumbo={0xc2, 0x4, 0x5}, @calipso={0x7, 0x28, {0x3, 0x8, 0xb, 0x1ff, [0x34, 0xffffffffffffffff, 0x3, 0x5]}}, @jumbo={0xc2, 0x4, 0x6}, @pad1, @ra={0x5, 0x2, 0x4000}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}, @tclass={{0x14, 0x29, 0x43, 0xfb92}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x5c}}}], 0x178}}], 0x3, 0x888d) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000700)="d80000001c0081ee4e81f782db44b904021d0802010000000500f0a1180002000000000000000e120a000f0100810401a8001600200001400300000803600cfab94dcf5c049118312d655179c0420df0f820862161c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e002c2827a3aeb44009fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3eb551d76671c44ca84d669bc663abfe20f4a8084dedc6c9f3ea380aa759c5cd11427e2d76b4031ea82a6f22959b68c87d096346de6d8ede711c0d61c5e208a25c0a6c1c8027ecb138a103ff73fc6d00d031c17a3a2f2f1c303c35d0a671afb7a5406427", 0x13c}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xffffffffffffff87) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) unshare(0x6020400) r4 = gettid() syz_open_procfs$namespace(r4, &(0x7f0000000000)='ns/uts\x00') unshare(0x2c060000) unshare(0x2a060400) socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0xf5, &(0x7f0000000480)=""/6, &(0x7f0000000580)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r3, &(0x7f00000004c0)="231af87985731b", 0x7, 0x90, 0x0, 0x0) sendmsg$nl_generic(r5, 0x0, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x300060d1) 51.638308163s ago: executing program 3 (id=4790): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x44008000}, 0x40008d2) 50.064644171s ago: executing program 3 (id=4799): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000500)={0x18, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x840}, 0x40044) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000780)={0x24, 0x38, 0x825, 0x70bd2a, 0x25dfdbf9, {0xf}, [@nested={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x59, 0x0, 0x0, @uid}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4050}, 0x804c050) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000017000000540006803c0004"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40) unshare(0x64000600) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002000010027bd700000000040020000000000000d00000000080018004e224e23"], 0x24}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) r10 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xc, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x48000, 0x9, 0x1, 0x4, 0xffff}, 0x8d23}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r12 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r12, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r3, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)='\'', 0x5dc}], 0x1}, 0x4011) 34.653832597s ago: executing program 34 (id=4799): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000500)={0x18, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x840}, 0x40044) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000780)={0x24, 0x38, 0x825, 0x70bd2a, 0x25dfdbf9, {0xf}, [@nested={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x59, 0x0, 0x0, @uid}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4050}, 0x804c050) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000017000000540006803c0004"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40) unshare(0x64000600) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002000010027bd700000000040020000000000000d00000000080018004e224e23"], 0x24}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) r10 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xc, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x48000, 0x9, 0x1, 0x4, 0xffff}, 0x8d23}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r12 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r12, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r3, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)='\'', 0x5dc}], 0x1}, 0x4011) 11.390009044s ago: executing program 5 (id=4959): socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000040000180060001000a00000008000500000000000c000700000000000000000008000900710000010700060072720000080008"], 0x54}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000043000701fefffffffbdbdf25027c000004004580280001"], 0x40}}, 0x810) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x3c}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r10 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r11, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0x3c}}, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r13, r9, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) close(r14) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}}, 0x0) 10.59509829s ago: executing program 1 (id=4961): socket$xdp(0x2c, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) close(0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) write$cgroup_pressure(r1, &(0x7f0000001000)={'full', 0x20, 0x1, 0x20, 0xffffffffffffffff}, 0x2f) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket$inet(0x2, 0x4, 0xffff0000) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000001280)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xe}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x80000}}]}}}]}, 0x8c}}, 0x0) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) connect$bt_l2cap(r1, &(0x7f0000001240)={0x1f, 0x0, @none, 0x300d}, 0xe) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, 0x0, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) pselect6(0x40, &(0x7f0000000000)={0x4, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x2000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x80000003}, 0x0, 0x0) 10.430943968s ago: executing program 2 (id=4963): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0x13f}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x7}, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYRES16=0x0], 0xe0}, 0x1, 0x7}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000000090000000000000000000000000000080005400000001f080005400000001708000340000000080c00048008000140000000080c00048008000140000010060000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x81) setsockopt$sock_int(r4, 0x1, 0x3c, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x2000c802, &(0x7f0000000180)={0x2, 0x4e1e, @local}, 0x10) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f00000002c0)={r4, &(0x7f0000000080)='GPL\x00', 0x200000, &(0x7f0000000140)={@_ha_fsid={[0x2, 0x2]}, {0x7, 0x6, 0x6, 0x76a7}}, 0x4, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x401}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) listen(r6, 0x97) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_int(r8, 0x107, 0x8, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) write(r7, &(0x7f0000000000)="5a000300010003", 0x7) 9.757571123s ago: executing program 5 (id=4964): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c) sendto$inet6(r3, &(0x7f0000000000)="826b", 0x2, 0xffffffffffffffd6, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x0, 0x33) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x840) unshare(0x2c020400) write$nci(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="7105b8060305007f0f400a6302cdb08e7e4afc612f7ebb302b22122ed7fcd20d0d99b3bdd6ab35522e16ea5bac817fc71044d1275307d2934d5d2564b506e3681773e90508f7f5e8bc2324152b06b893f16ad228608af9b0460540e147d13076960146391b1187bacb94c82df29347010c0e0300004509d85e5cd0c2d740484b962609e0656be06703b9d5400aa85bd247f1f24fa5efd635c500f64fb0289afd64bfcd15d2bbf47dbe376c516aa37afacb5fe21c861b4741914c17"], 0xbb) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x635d, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r11, 0x3f}, 0x80, &(0x7f0000003340)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e105000000890600001144ee1611", 0x1f}, {&(0x7f0000000f00)="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", 0x1c7}, {&(0x7f00000022c0)="03b08259909695eb5ca0294fba511a888314cac2cc4b8fcfa8a6395f98c9495276871c1415f144fc9b74b6be1832c68c5a06cd992e2fa712186cb328d237fb2b3daa49d29c7221005ae22dfd2fa279a3a0ebe73b3093e6f66d7ab7e24362e64a1bbd1f4e7a6e2f2cf522cf9b4437037aed5091737c0883648a89f0c8ad70436a97e52561c4ac61cc619e5cc62e9a9b0fec63", 0x92}], 0x3}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r12, 0x8924, &(0x7f00000002c0)={'dummy0\x00', @random="0100"}) 9.303918366s ago: executing program 2 (id=4965): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c) sendto$inet6(r3, &(0x7f0000000000)="826b", 0x2, 0xffffffffffffffd6, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x0, 0x33) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x840) unshare(0x2c020400) write$nci(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="7105b8060305007f0f400a6302cdb08e7e4afc612f7ebb302b22122ed7fcd20d0d99b3bdd6ab35522e16ea5bac817fc71044d1275307d2934d5d2564b506e3681773e90508f7f5e8bc2324152b06b893f16ad228608af9b0460540e147d13076960146391b1187bacb94c82df29347010c0e0300004509d85e5cd0c2d740484b962609e0656be06703b9d5400aa85bd247f1f24fa5efd635c500f64fb0289afd64bfcd15d2bbf47dbe376c516aa37afacb5fe21c861b4741914c17"], 0xbb) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r10, 0x3f}, 0x80, &(0x7f0000003340)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e105000000890600001144ee1611", 0x1f}, {&(0x7f0000000f00)="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", 0x1c7}, {&(0x7f00000022c0)="03b08259909695eb5ca0294fba511a888314cac2cc4b8fcfa8a6395f98c9495276871c1415f144fc9b74b6be1832c68c5a06cd992e2fa712186cb328d237fb2b3daa49d29c7221005ae22dfd2fa279a3a0ebe73b3093e6f66d7ab7e24362e64a1bbd1f4e7a6e2f2cf522cf9b4437037aed5091737c0883648a89f0c8ad70436a97e52561c4ac61cc619e5cc62e9a9b0fec63", 0x92}], 0x3}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f00000002c0)={'dummy0\x00', @random="0100"}) 8.981238106s ago: executing program 1 (id=4966): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x8}, {0x4}}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="2e9b5b00ace03dd65193dfb6c5619a3d86dd6067060000140654034d069cdb99b4dcf74b5c85cd6db0c10000", 0x2c}, {&(0x7f0000000100)="0400e4eda7f6c173b552572f13f823c1", 0x10}, {&(0x7f0000002480)="37bcb3983785779df7392b7dca", 0xd}], 0x3) 8.878058935s ago: executing program 6 (id=4967): syz_emit_ethernet(0x22a, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000000001050500000000000000000a7f00003c0002802c00018014000300ff01e7d5c4b4e215944100000000000114000400ff0200000004000000000000000000010c0002800500010000000000100001800c00024605f027e37f0346652be5cf9a7c830a7fa57032946137d6e4a1ef444aed281e3fa8cdb4d002bedfcc614d359ff51d09e0cc725e1337a9407587b05a86357bac7486772cddb03a4531a55a5e60c2a89236e692af00"/186], 0x60}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003f00010327bd7000fbdbdf2503"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x4}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000340)={0x8000044, 0x2}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x8d4) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x400000, @private1}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x9c9, @private1={0xfc, 0x1, '\x00', 0xfc}}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x8, 0x8, 0x6bb}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='hybla', 0x5) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd07, 0x760, 0x0, 0xfffffffffffffd25) 8.398150197s ago: executing program 6 (id=4968): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac010000170001000000000000000000ffffffff0000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000000000000000000000000000000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB], 0x1ac}, 0x1, 0x0, 0x0, 0x4880}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @mcast1, 0x4}, 0x1c) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000680)) ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40809440, &(0x7f0000000500)={&(0x7f0000000600)=[{&(0x7f0000000080)="67d54d09e33ff501287d4c508875fc9648e2e0fc67ae7d", 0x17}, {&(0x7f00000000c0)="00843d048f369937", 0x8}, {&(0x7f0000000100)="85551f710cfc3f25cfc824f37fa0c2423cbb2812c510f98fc56534847894b1e3a9bee835d615304fd558a5215f11b1acbae2f53816a01aaf1a2a9a7030ed6b0216bcf3be899f3ad261825f2cc19522f1db5fb6cff3f1151106841f160a18340872fa0c773234b6f85c0fe22175b1d48903a3bbcbce9b", 0x76}, {&(0x7f0000000200)="b53916f8052e92b6b54480f8067f7b17956eb42204b4f683309cace9b6b30ea3804d938e923f3642d619b1cc157409bb60c55982ec65b9acf9cade18e32ee40d008a2cedf819e3637ca849a876a8011a3d7f8c588a15a1808dc1f60ea66078050e293f5986143a0d9adbebb6a56f2b5d8b0de5358105e54e2ed1907b8466bc4a80a1d53f0ea6802e12f870c214a98e1424cb4bb77205aedb6427612e7e5d", 0x9e}, {&(0x7f00000002c0)="3d1ff1b9e661981e9773b5a263679d63d7eaa6e2e3e0f65fe56ed4bf615b59b5f527f111b27bf422fac94f05fdb5144bd8545776e530f51ba91557ee756092587e71f0f8b5e18ed85f1036eb7adfb2d1d6d9ab41f814697bd3ad57dae6e65ad8aa0823a93d5af9575b9a556872ebe6ebec9c9375cfd842247353b2195593b1a7c013f0353a47abd46e8f5322", 0x8c}, {&(0x7f0000000400)="ca2724b0c0a4cfe0133611ed8f65ec11230302b2a93a48a2585f13f12b88720fab9896f51a590f53a610c45b2de3bd4cfd5a2d9b4c55c63a0ad63ece6b5768b26819b31fab467b95abb363560848c3ec0391a35c64f1389eac420ddeda9517690463960d55aec030483c92e0f20115902ae1be0940124080", 0x78}], 0x6, 0x9, 0x0, 0x4, 0x5, 0x4af1, 0x5, 0xff}) sendmmsg$inet6(r0, &(0x7f0000002940), 0x40000000000017d, 0x888) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000700)="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", 0x13c}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xffffffffffffff87) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) unshare(0x6020400) r4 = gettid() syz_open_procfs$namespace(r4, &(0x7f0000000000)='ns/uts\x00') unshare(0x2c060000) unshare(0x2a060400) socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0xf5, &(0x7f0000000480)=""/6, &(0x7f0000000580)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r3, &(0x7f00000004c0)="231af87985731b", 0x7, 0x90, 0x0, 0x0) sendmsg$nl_generic(r5, 0x0, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) socket(0x3, 0x800, 0x2) 8.118730752s ago: executing program 5 (id=4969): socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="02008dff0400"}) 7.795987667s ago: executing program 5 (id=4970): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0xc, 0xdf, &(0x7f0000001400)=""/223}, 0x94) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="1800000012000501000000000000000005000600"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20040810) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x2000c890) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macvlan0\x00', 0x8000}) ioctl$XFS_IOC_FSBULKSTAT(r1, 0xc0205865, &(0x7f0000000740)={0x0, 0x1, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000700)}) sendmsg$nl_xfrm(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000840)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendto$packet(r9, &(0x7f00000005c0)="bad330fbc93f8b78040000ea0756a85d86dd", 0x5ea, 0x4041, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) 7.773430672s ago: executing program 1 (id=4972): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfdfffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x8044}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) connect$inet(r1, &(0x7f0000000240)={0x2, 0x8, @loopback}, 0x10) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac141410bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x800c) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r7, 0x4004743c, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x2, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000770000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r10, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r9}, 0x20) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0, @void}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r11, &(0x7f00000001c0), 0x0}, 0x20) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="840000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9180030000200000500012800b000100697036746e6c000040000280040013000800080001000000080014000300000008000100", @ANYRES32, @ANYBLOB="0600100003000000080014000000000008000700060000000800140000800000140003006e"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e24, @local}}, 0x0, 0x0, 0x30, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) 7.735463138s ago: executing program 6 (id=4973): r0 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2404c050}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:* m'], 0xa) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) r3 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r4}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000080)={r4}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x7, 0xffffff7f}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}]}, 0x60}, 0x1, 0x7}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$alg(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005}, 0x40040) sendmsg$nl_route_sched_retired(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@deltfilter={0x43c, 0x2d, 0x200, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffe0}, {0x3, 0xffe0}, {0x9}}, [@f_rsvp6={{0xa}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10, 0xffffff01, 0x9, 0x8000, 0x10001, 0x3, 0x80000000, 0xb4cb, 0x5, 0x2, 0xfffffeff, 0x3ff, 0x5, 0x2, 0x1b92, 0x8, 0x5, 0x6d58, 0x81, 0x6, 0x0, 0x6f, 0x7f, 0x3, 0x80, 0x7, 0x7, 0x12fd96d2, 0xfffff000, 0x40, 0x7, 0xa, 0x2, 0x3, 0x5, 0x6, 0x401, 0x1000, 0x0, 0xd, 0x6, 0xa, 0x800, 0x8, 0x7, 0x8, 0xfffffffa, 0x20000, 0x8, 0x6, 0x80, 0x1, 0x8, 0x73, 0x800, 0x351, 0x70b0, 0x1, 0x3, 0xb, 0x51d22a98, 0x0, 0x3, 0x8000, 0xf, 0xfffff81f, 0x3, 0x7, 0x8, 0x3, 0x400, 0x8001, 0xfffffffa, 0x1000, 0x293, 0x7, 0x4, 0xb, 0x9, 0x3, 0x2, 0x1, 0x200, 0x7, 0x80000001, 0x4, 0x10, 0x7, 0x7, 0x3a, 0xfffffffd, 0x4, 0x3, 0xd, 0xebf, 0x100, 0x8, 0x2, 0xe, 0x401, 0x1, 0xfffff801, 0x4, 0x7fffffff, 0x8, 0x80000001, 0x10, 0xffffffff, 0x800, 0x9, 0x3, 0x80, 0x8, 0x3, 0x396e, 0x200, 0xffffffff, 0x10, 0x81, 0x0, 0x80000001, 0x4, 0xb, 0x31, 0x6, 0x5, 0x316, 0x4, 0xc880eca, 0x80000000, 0x9, 0x401, 0xf, 0x3, 0xc, 0x0, 0x924, 0x5, 0x8001, 0x400000, 0x1ff, 0x2, 0x3, 0x7fffffff, 0x6, 0x2, 0x3, 0x25a, 0x6a, 0x6, 0x9, 0x9, 0xb4, 0x217, 0x8f, 0x9, 0x2c, 0x2, 0x9, 0x7, 0x9, 0x100, 0x4, 0x6, 0x7, 0x7, 0x3, 0x6, 0x0, 0x7fffffff, 0x0, 0x9, 0x2, 0xb6c, 0x4, 0x8, 0x3, 0x401, 0x3, 0x0, 0xa1, 0x7f, 0x80000001, 0x7, 0x9, 0x800, 0x7, 0x1000, 0xe9, 0x3, 0x6, 0xffffffff, 0x3, 0xae9, 0xba3, 0x6, 0x3, 0xac, 0x8001, 0x2c562366, 0x9, 0xfffffff7, 0x1, 0x3, 0x657, 0x4196, 0x0, 0x8, 0x0, 0xb, 0x3ff, 0x7, 0x5, 0x2, 0x3, 0x41, 0xfffffffe, 0x8, 0x0, 0x8, 0x269, 0xfffffffc, 0xffff70e1, 0x40000000, 0x8, 0x7, 0x1000, 0x4, 0x1, 0x80, 0x8000000, 0x0, 0x7f, 0x67, 0x6, 0xf, 0xbfca, 0x2, 0x8, 0x1, 0x4, 0x66a7633e, 0x9e4, 0x10000, 0x9, 0x3, 0x4, 0x1, 0x3, 0xad2, 0x7, 0x80, 0x2, 0x9, 0x39, 0x10000]}]}]}}]}, 0x43c}}, 0x0) recvmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/229, 0x202}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000640)=""/219, 0xdb}], 0x3}}], 0x2, 0x60, 0x0) r9 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 2.076980982s ago: executing program 2 (id=4974): sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3e8, 0x4, 0x70bd27, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000000000006911160000000000851000000200000085000000a000000095000000000000009500a505000000005fcd68e5168ab0554faaa0d85fbb2fbcada325586454c9b45869548f500ac61a6755d474af6e1901e174636e994a224359c42066877de31f37531f60967d834efc078c0e7d5b2767088801dc94bca4a9097d915140a6bed4dc6eeb209b3fee010955a0ef664c16291cfdee7cd1786cf756dfca8132e38f38189455aac3b7401f2bedbabae2bb136b5aeb2b28787211a463fad7c4bed11e2165beaa0386ee6747e06427e96493536880632ab012002b69ccdbcd31a5e8543ee52a39c97ffedcf89bfffbff5e1aac487f403556b7a95d1c18fc97d3fa1c660a48691208e15109a991500665d0ce256dc62734c70d0f77f8018132696240aea67f0675e0f2c1a77365a9880beb287044704131b7f40da4c0e647e2fbad1f00c3c447ac500de519758773882f348b07"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x70) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000001c0)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[@ANYRESDEC=r5], 0x31) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x10000258}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0x9, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x6, 0x0, 0xdad1124f55525050, 0x30}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x27}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x702, 0x36, 0x0, &(0x7f0000000380)="e460334470b8d480eb20c15286dda4fba8285e2e31ca72823a29dad4781041a996430bbe5ecac76a351df831cdb98842af6450b2abf5", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000680)={&(0x7f0000000500), 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x60, r9, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x4f, 0x2b}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4c000) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map=0x1, 0x1d, 0x1, 0x6, &(0x7f0000000b80)=[0x0], 0x1, 0x0, &(0x7f0000000200), &(0x7f0000000b80), &(0x7f0000000280)=[0x0, 0x0, 0x0]}, 0x40) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f00000009c0)={0x1b8, 0x1, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_MARK_MASK={0x8}, @CTA_TUPLE_ORIG={0x60, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_FILTER={0x34, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x29}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x42}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x800}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x946}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x800}]}, @CTA_LABELS_MASK={0x2c, 0x17, [0x3, 0x1, 0x7, 0x0, 0x0, 0xfffffe01, 0x4, 0x401, 0x9, 0x5]}, @CTA_NAT_SRC={0xc8, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_PROTO={0xfffffffffffffef8, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x54}, 0x20000880) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000003400), r12) sendmsg$NFC_CMD_START_POLL(r12, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000003500)={0x24, r13, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xe8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x802) sendmsg$nl_route(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x14318}, [@IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000884}, 0x4000) 1.886456161s ago: executing program 5 (id=4975): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) recvmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) 1.670473127s ago: executing program 6 (id=4976): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x6, 0xd21, 0x101, 0x6, 0x5, 0xbd, 0x100, 0x4}}}}]}, 0x58}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@newtfilter={0x74, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x1e, 0x1, {0x9, 0x6, 0x9, 0xfffffffc, 0x4, {0x5, 0x2, 0xff69, 0x1, 0x7, 0xffffffff}, {0x1, 0x1, 0xb5, 0x0, 0x9, 0x1}, 0x3, 0x80, 0x6f5}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040010}, 0x1c090) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r8, @ANYBLOB="1400128009000100766574680000000004000280"], 0x3c}}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) unshare(0x2c060000) close(0x4) syz_open_procfs$namespace(0x0, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) write$tun(r11, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x45) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008004) socket$netlink(0x10, 0x3, 0x8000000004) 1.604673911s ago: executing program 1 (id=4977): r0 = socket$packet(0x11, 0xa, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) 1.510833437s ago: executing program 2 (id=4978): syz_emit_ethernet(0x22a, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000000001050500000000000000000a7f00003c0002802c00018014000300ff01e7d5c4b4e215944100000000000114000400ff0200000004000000000000000000010c0002800500010000000000100001800c00024605f027e37f0346652be5cf9a7c830a7fa57032946137d6e4a1ef444aed281e3fa8cdb4d002bedfcc614d359ff51d09e0cc725e1337a9407587b05a86357bac7486772cddb03a4531a55a5e60c2a89236e692af00"/186], 0x60}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003f00010327bd7000fbdbdf2503"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x4}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000340)={0x8000044, 0x2}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x8d4) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x400000, @private1}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x9c9, @private1={0xfc, 0x1, '\x00', 0xfc}}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x8, 0x8, 0x6bb}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='hybla', 0x5) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd07, 0x760, 0x0, 0xfffffffffffffd25) 1.168195801s ago: executing program 2 (id=4979): r0 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="826b", 0x2, 0xffffffffffffffd6, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x0, 0x33) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x840) unshare(0x2c020400) write$nci(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="7105b8060305007f0f400a6302cdb08e7e4afc612f7ebb302b22122ed7fcd20d0d99b3bdd6ab35522e16ea5bac817fc71044d1275307d2934d5d2564b506e3681773e90508f7f5e8bc2324152b06b893f16ad228608af9b0460540e147d13076960146391b1187bacb94c82df29347010c0e0300004509d85e5cd0c2d740484b962609e0656be06703b9d5400aa85bd247f1f24fa5efd635c500f64fb0289afd64bfcd15d2bbf47dbe376c516aa37afacb5fe21c861b4741914c17"], 0xbb) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x635d, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, 0x0, 0x3f}, 0x80, &(0x7f0000003340)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e105000000890600001144ee1611", 0x1f}, {&(0x7f0000000f00)="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", 0x1c7}, {&(0x7f00000022c0)="03b08259909695eb5ca0294fba511a888314cac2cc4b8fcfa8a6395f98c9495276871c1415f144fc9b74b6be1832c68c5a06cd992e2fa712186cb328d237fb2b3daa49d29c7221005ae22dfd2fa279a3a0ebe73b3093e6f66d7ab7e24362e64a1bbd1f4e7a6e2f2cf522cf9b4437037aed5091737c0883648a89f0c8ad70436a97e52561c4ac61cc619e5cc62e9a9b0fec63", 0x92}], 0x3}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f00000002c0)={'dummy0\x00', @random="0100"}) 1.159118887s ago: executing program 1 (id=4980): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, 0x0, 0x4000800) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)={@fallback=r4, r4, 0x2f}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r3, {0xd, 0x10}, {0xfff8, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 1.0032462s ago: executing program 6 (id=4981): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) unshare(0x2a060400) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f0", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000180)=0x284, 0x4) sendto(r3, &(0x7f0000000040)="cec17299253d97363be011fae774c95eff3d8fd74ca2974f22ee90adb120661dae2d9d1a15e80b3f", 0x28, 0x24044044, 0x0, 0x32) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe80, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x0, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{}, 0x97, 0x0, [{}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {0x0, 0x0, 0x80000000}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x18}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe80}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x38}}, 0x4000800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff9085000000710000001811"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f00000002c0), 0x4) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x8000, 0x5, 0x5}}]}, 0x40}}, 0xc800) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x0, 0x6, {0x5, 0x4, 0xd8, 0xff}}]}, 0x34}}, 0x8080) 888.272674ms ago: executing program 5 (id=4982): r0 = socket(0x1e, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r4, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000000}, 0x40044) sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000141}, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r6 = socket(0x1e, 0x4, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r6) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000480)={0x0, 'veth0_to_hsr\x00', {0x2}, 0x51}) write$tun(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaabb0180c200000e88a800008100007eab91b32dd80cffd20adf8cf828782802010045fc006953d778f6c9a77f00"], 0x32) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r11, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r12, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r12, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) 612.843625ms ago: executing program 6 (id=4983): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c) sendto$inet6(r3, &(0x7f0000000000)="826b", 0x2, 0xffffffffffffffd6, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x0, 0x33) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x840) unshare(0x2c020400) write$nci(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="7105b8060305007f0f400a6302cdb08e7e4afc612f7ebb302b22122ed7fcd20d0d99b3bdd6ab35522e16ea5bac817fc71044d1275307d2934d5d2564b506e3681773e90508f7f5e8bc2324152b06b893f16ad228608af9b0460540e147d13076960146391b1187bacb94c82df29347010c0e0300004509d85e5cd0c2d740484b962609e0656be06703b9d5400aa85bd247f1f24fa5efd635c500f64fb0289afd64bfcd15d2bbf47dbe376c516aa37afacb5fe21c861b4741914c17"], 0xbb) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r10, 0x3f}, 0x80, &(0x7f0000003340)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e105000000890600001144ee1611", 0x1f}, {&(0x7f0000000f00)="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", 0x1c7}, {&(0x7f00000022c0)="03b08259909695eb5ca0294fba511a888314cac2cc4b8fcfa8a6395f98c9495276871c1415f144fc9b74b6be1832c68c5a06cd992e2fa712186cb328d237fb2b3daa49d29c7221005ae22dfd2fa279a3a0ebe73b3093e6f66d7ab7e24362e64a1bbd1f4e7a6e2f2cf522cf9b4437037aed5091737c0883648a89f0c8ad70436a97e52561c4ac61cc619e5cc62e9a9b0fec63", 0x92}], 0x3}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f00000002c0)={'dummy0\x00', @random="0100"}) 535.851658ms ago: executing program 1 (id=4984): socket$inet6(0xa, 0x80002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x60}}, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="520001"], 0x6) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x6c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffff7, 0x0, 0x7fffffff, 0x6}}]}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendto$packet(r5, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x6f4fef9cab2ede47, &(0x7f0000000440)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r9) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0xff, 0xffdff032}, {0x6, 0x3e}]}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x28, 0x25, 0x44, 0xfffff00c}]}) ioctl$TUNGETVNETLE(r9, 0x40107447, &(0x7f0000000180)) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r11, 0x4004743d, 0x110e22fff6) write$cgroup_type(r11, &(0x7f0000000280), 0x9) 0s ago: executing program 2 (id=4985): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5ee17688a8006c00030100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3da400001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605007f7117", 0xb6) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r1, &(0x7f0000000040)={@val={0x20, 0x88be}, @void, @eth={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3f, 0x1c, 0x68, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010100, @multicast1}, {0x0, 0x17c1, 0x8}}}}}}, 0x36) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x38, 0x1, 0x2, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_EXPECT_HELP_NAME={0xa, 0x6, 'Q.931\x00'}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x44800}, 0x804) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70000010000000085000000060000008500000005000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c25000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)=@allocspi={0x11c, 0x16, 0x20, 0x70bd28, 0x25dfdbfd, {{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@empty, 0x4e24, 0x1000, 0x4e21, 0x0, 0xa, 0x20, 0x20, 0x3a}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d6, 0x2b}, @in6=@private0, {0x5, 0x2, 0x80000001, 0x6, 0x8, 0xe2, 0x5, 0x3}, {0x382, 0x6, 0x10, 0x6}, {0x2b, 0x2, 0xffffff80}, 0x70bd2b, 0x34ff, 0x2, 0x1, 0x6, 0x80}, 0x8001, 0xa}, [@lifetime_val={0x24, 0x9, {0x10000, 0x3, 0x2, 0x4}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4008000}, 0x40040) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840)={r5, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000880)={&(0x7f0000000600)="52dde5be5b91679dced254450467cd3fc7cc6d94d01f53958a8b7e8dfddb192f6da004a067eff2a933bb6f9300d0f6f403cea6086c233594c74363de6ba6d4f0caed5768698fc0182e8f3cd688", &(0x7f0000000680)=""/203, &(0x7f0000000780)="1c2adadea6ef8f9841ed6a057fc7a41d3b16078915892535ebc8a25f59270ea228d9621b9a85d32975a6198adcfc674e38", &(0x7f0000000800)="eb00a8b442483de6c2ac", 0x8000, r7}, 0x38) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002fbd7040fbdbdf250f00000008000300", @ANYRES32=0x0, @ANYBLOB="05802f200010000000000000"], 0x2c}}, 0x8) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r9, 0x400448cb, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x44, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x600}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xaa}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004010}, 0x4040) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000003, 0x50, r0, 0x0) kernel console output (not intermixed with test programs): ximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 659.809019][T18977] syzkaller1: entered promiscuous mode [ 659.821131][T18977] syzkaller1: entered allmulticast mode [ 659.931439][T18994] x_tables: duplicate underflow at hook 2 [ 660.126143][T19000] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4173'. [ 660.208882][T19002] syzkaller0: entered promiscuous mode [ 660.243539][T19002] syzkaller0: entered allmulticast mode [ 660.258824][ T1133] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 660.698554][T19012] tipc: Enabled bearer , priority 0 [ 660.778483][ T1117] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 660.980997][T19012] syzkaller0: entered promiscuous mode [ 660.986787][T19012] syzkaller0: entered allmulticast mode [ 661.011163][T19021] netlink: 'syz.1.4180': attribute type 8 has an invalid length. [ 661.029617][T19024] tipc: Resetting bearer [ 661.261350][T19011] tipc: Resetting bearer [ 661.300483][ T1117] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 661.343626][T19038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4182'. [ 661.384059][T19011] tipc: Disabling bearer [ 661.618090][T19038] 8021q: adding VLAN 0 to HW filter on device bond26 [ 661.858696][ T47] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 661.876835][T19053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4186'. [ 661.885622][T19033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.903255][T19033] 8021q: adding VLAN 0 to HW filter on device team0 [ 661.914885][T19033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 661.951981][T19033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 661.962284][T19033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 661.975071][T19033] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 661.986092][T19033] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 661.997811][T19033] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 662.007041][T19033] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 662.085927][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.093218][ T47] bridge0: port 1(bridge_slave_0) entered listening state [ 662.140264][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.147519][ T47] bridge0: port 2(bridge_slave_1) entered listening state [ 662.240723][T19066] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4190'. [ 662.256457][T19057] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 662.264469][T19057] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 662.326636][T19071] netlink: 'syz.3.4188': attribute type 1 has an invalid length. [ 662.335581][T19071] netlink: 756 bytes leftover after parsing attributes in process `syz.3.4188'. [ 662.380725][ T6614] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 662.512295][T19068] syzkaller0: entered promiscuous mode [ 662.518035][T19068] syzkaller0: entered allmulticast mode [ 662.646331][T19081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 662.929513][ T33] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 663.019582][T19088] netlink: 'syz.1.4195': attribute type 3 has an invalid length. [ 663.451806][T19101] netlink: 'syz.2.4199': attribute type 10 has an invalid length. [ 663.468529][ T1133] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 663.636434][T19108] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4200'. [ 663.757540][T19109] syzkaller0: entered promiscuous mode [ 663.765805][T19109] syzkaller0: entered allmulticast mode [ 663.775126][T19112] netlink: 'syz.1.4203': attribute type 1 has an invalid length. [ 663.847855][T19116] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4203'. [ 663.879408][T19112] bond27: entered promiscuous mode [ 663.891351][T19112] 8021q: adding VLAN 0 to HW filter on device bond27 [ 663.893422][T19117] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4201'. [ 664.028891][ T6618] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 664.134891][T19116] bond27: entered allmulticast mode [ 664.182820][T19120] bond27: (slave bridge16): making interface the new active one [ 664.184247][T19014] udevd[19014]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 664.197223][T19120] bridge16: entered promiscuous mode [ 664.228978][T19120] bridge16: entered allmulticast mode [ 664.263005][T19120] bond27: (slave bridge16): Enslaving as an active interface with an up link [ 664.321385][T19125] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4205'. [ 664.471393][T19127] syzkaller0: entered promiscuous mode [ 664.476981][T19127] syzkaller0: entered allmulticast mode [ 664.648546][T19136] tipc: Enabled bearer , priority 0 [ 664.666977][T19136] syzkaller0: entered promiscuous mode [ 664.675196][T19136] syzkaller0: entered allmulticast mode [ 664.725878][T19141] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 665.053575][T19142] syzkaller0: entered promiscuous mode [ 665.068587][ T3339] net_ratelimit: 1 callbacks suppressed [ 665.068611][ T3339] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 665.083529][T19142] syzkaller0: entered allmulticast mode [ 665.145986][T19151] tipc: Resetting bearer [ 665.153801][T19145] syzkaller1: entered promiscuous mode [ 665.171726][T19145] syzkaller1: entered allmulticast mode [ 665.599828][ T6624] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 666.138630][ T33] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 666.662246][ T6614] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 667.198672][ T3339] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 667.730397][ T33] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 668.250144][ T6614] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 668.775380][ T33] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 669.313543][ T6624] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 669.683803][T19135] tipc: Resetting bearer [ 669.709331][T19135] tipc: Disabling bearer [ 669.814958][T19159] tipc: Enabled bearer , priority 0 [ 669.831488][T19158] tipc: Disabling bearer [ 669.850378][ T47] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 670.019595][T19169] bond0: (slave ip6tnl0): Error: Device can not be enslaved while up [ 670.138810][T19170] pimreg: entered allmulticast mode [ 670.164885][T19167] pimreg: left allmulticast mode [ 670.203755][T19173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4215'. [ 670.228493][T19173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4215'. [ 670.291972][T19170] netlink: 212 bytes leftover after parsing attributes in process `syz.2.4217'. [ 670.311161][T19170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4217'. [ 670.333518][T19170] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4217'. [ 670.390159][T19177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4219'. [ 670.399411][ T1117] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 670.585953][T19182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4222'. [ 670.837612][T19196] netlink: 'syz.5.4223': attribute type 2 has an invalid length. [ 670.845941][T19191] can: request_module (can-proto-0) failed. [ 670.869054][ T1117] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 670.929158][ T47] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 670.960302][T19189] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 671.196938][T19207] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4227'. [ 671.208162][T19207] tipc: Invalid UDP bearer configuration [ 671.208213][T19207] tipc: Enabling of bearer rejected, failed to enable media [ 671.417162][T19207] bond19: Removing last arp target with arp_interval on [ 671.499442][ T1117] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 671.512184][T19217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4229'. [ 671.653056][T19217] vlan6: entered promiscuous mode [ 671.659301][T19217] gretap0: entered promiscuous mode [ 672.018607][ T6624] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 672.061197][T19231] netlink: 'syz.2.4233': attribute type 1 has an invalid length. [ 672.264576][T19232] bond18: (slave gretap2): making interface the new active one [ 672.326440][T19232] bond18: (slave gretap2): Enslaving as an active interface with an up link [ 672.481691][T19256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4237'. [ 672.523109][T19242] tipc: Enabled bearer , priority 0 [ 672.535843][T19248] syzkaller0: entered promiscuous mode [ 672.544539][T19248] syzkaller0: entered allmulticast mode [ 672.552245][T19252] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 672.588669][ T33] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 672.646015][T19240] tipc: Resetting bearer [ 672.715296][T19239] tipc: Resetting bearer [ 672.811302][T19263] netlink: 'syz.5.4238': attribute type 30 has an invalid length. [ 672.828735][T19239] tipc: Disabling bearer [ 672.977215][T19273] syzkaller0: entered promiscuous mode [ 673.003009][T19273] syzkaller0: entered allmulticast mode [ 673.037772][T19273] tipc: Enabled bearer , priority 0 [ 673.085137][T19273] tipc: Resetting bearer [ 673.109377][T19281] netlink: 'syz.6.4244': attribute type 1 has an invalid length. [ 673.138779][ T47] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 673.203620][T19272] tipc: Resetting bearer [ 673.283789][T19272] tipc: Disabling bearer [ 673.678911][ T6624] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 674.218486][ T1133] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 674.426677][T19331] 8021q: adding VLAN 0 to HW filter on device bond19 [ 674.439767][T19331] bridge0: port 1(bond19) entered blocking state [ 674.448932][T19331] bridge0: port 1(bond19) entered disabled state [ 674.468770][T19331] bond19: entered allmulticast mode [ 674.476917][T19331] bond19: entered promiscuous mode [ 674.788574][ T6614] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 675.200114][T19303] dvmrp0: entered allmulticast mode [ 675.319116][ T33] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 675.351893][T19357] bond14: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 675.487212][T19357] bond14 (unregistering): Released all slaves [ 675.558258][T19356] lo speed is unknown, defaulting to 1000 [ 675.723614][T19359] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 675.742900][T19364] netlink: 'syz.5.4257': attribute type 1 has an invalid length. [ 675.771903][T19364] netlink: 'syz.5.4257': attribute type 2 has an invalid length. [ 675.855694][T19356] lo speed is unknown, defaulting to 1000 [ 675.880156][ T6624] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 675.894199][T19356] lo speed is unknown, defaulting to 1000 [ 676.069157][T19369] netlink: 'syz.1.4260': attribute type 13 has an invalid length. [ 676.080184][T19369] netlink: 'syz.1.4260': attribute type 17 has an invalid length. [ 676.256586][T19379] __nla_validate_parse: 4 callbacks suppressed [ 676.256609][T19379] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4261'. [ 676.290356][T19369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 676.304378][T19369] 8021q: adding VLAN 0 to HW filter on device team0 [ 676.458827][ T33] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 676.494211][T19369] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 676.511983][T19356] infiniband syz1: set active [ 676.520404][T19356] infiniband syz1: added lo [ 676.539755][T19369] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 676.551944][T19356] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 676.567822][T19356] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 676.598585][T19356] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 676.613901][T19369] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 676.631394][T19356] RDS/IB: syz1: added [ 676.635574][T19356] smc: adding ib device syz1 with port count 1 [ 676.642359][T19356] smc: ib device syz1 port 1 has no pnetid [ 676.670298][T19375] syzkaller0: entered promiscuous mode [ 676.675976][T19375] syzkaller0: entered allmulticast mode [ 676.694284][T19377] vlan4: entered allmulticast mode [ 676.707729][T19379] bond17: (slave bond0): Releasing backup interface [ 676.715655][T19379] bond0 (unregistering): left promiscuous mode [ 676.722126][T19379] bond_slave_1: left promiscuous mode [ 676.727924][T19379] bridge1: left promiscuous mode [ 676.740537][T19379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 676.751581][T19379] bond_slave_1: left allmulticast mode [ 676.760137][T19379] bond0 (unregistering): (slave bridge1): Releasing backup interface [ 676.769109][T19379] bridge1: left allmulticast mode [ 676.774925][T19379] bond0 (unregistering): Released all slaves [ 676.806742][T19378] 8021q: adding VLAN 0 to HW filter on device bond20 [ 676.814428][T19378] bridge0: port 2(bond20) entered blocking state [ 676.821073][T19378] bridge0: port 2(bond20) entered disabled state [ 676.827715][T19378] bond20: entered allmulticast mode [ 676.835308][T19378] bond20: entered promiscuous mode [ 676.845841][T19378] vlan4: entered promiscuous mode [ 676.851265][T19378] geneve0: entered promiscuous mode [ 676.975754][T10284] lo speed is unknown, defaulting to 1000 [ 677.010854][ T6624] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 677.264650][ T5742] lo speed is unknown, defaulting to 1000 [ 677.294729][T19356] lo speed is unknown, defaulting to 1000 [ 677.482548][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 677.493822][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 677.509820][T19396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4265'. [ 677.553262][ T33] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 678.034868][T19356] lo speed is unknown, defaulting to 1000 [ 678.129926][ T33] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 678.535701][T19356] lo speed is unknown, defaulting to 1000 [ 678.572531][T19412] tipc: Enabling of bearer rejected, already enabled [ 678.678615][ T1117] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 678.756870][T19413] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4271'. [ 678.964247][T19418] syzkaller0: entered promiscuous mode [ 678.970135][T19418] syzkaller0: entered allmulticast mode [ 678.990218][T19356] lo speed is unknown, defaulting to 1000 [ 679.230632][ T47] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 679.788573][ T6624] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 680.837504][ T6624] net_ratelimit: 1 callbacks suppressed [ 680.837529][ T6624] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 681.371160][ T6624] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 681.893644][ T6624] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 682.418537][ T6618] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 682.944731][ T3339] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 683.475369][ T1117] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 683.568155][T19356] lo speed is unknown, defaulting to 1000 [ 683.900976][T19465] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4279'. [ 684.008629][ T1133] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 684.150811][T19437] tipc: Enabling of bearer rejected, failed to enable media [ 684.314255][T19466] syzkaller0: entered promiscuous mode [ 684.320189][T19466] syzkaller0: entered allmulticast mode [ 684.538665][ T6624] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 685.058824][ T47] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 685.579191][ T1133] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 686.098475][ T1133] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 686.623121][ T1117] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 687.149692][ T33] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 687.699847][ T6614] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 688.247531][ T33] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 688.441031][T19479] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 688.514685][T19484] 8021q: adding VLAN 0 to HW filter on device bond28 [ 688.541537][T19484] bridge0: port 2(bond28) entered blocking state [ 688.564266][T19509] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4288'. [ 688.581757][T19484] bridge0: port 2(bond28) entered disabled state [ 688.611815][T19484] bond28: entered allmulticast mode [ 688.648935][T19484] bond28: entered promiscuous mode [ 688.658236][T19484] bond25: entered promiscuous mode [ 688.681915][T19484] bridge0: port 2(bond28) entered blocking state [ 688.688706][T19484] bridge0: port 2(bond28) entered forwarding state [ 688.750078][T19517] netlink: 'syz.2.4289': attribute type 1 has an invalid length. [ 688.768504][ T1133] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 688.830409][T19521] netlink: 'syz.1.4290': attribute type 13 has an invalid length. [ 688.839285][T19521] netlink: 'syz.1.4290': attribute type 17 has an invalid length. [ 688.868059][T19502] syzkaller0: entered promiscuous mode [ 688.873844][T19502] syzkaller0: entered allmulticast mode [ 688.896135][T19509] 8021q: adding VLAN 0 to HW filter on device bond14 [ 688.916868][T19512] tipc: Resetting bearer [ 688.924341][T19512] batman_adv: batadv0: Interface deactivated: dummy0 [ 688.939320][T19512] batman_adv: batadv0: Removing interface: dummy0 [ 688.982292][T19512] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 689.033377][ T33] bridge0: port 2(bond28) entered disabled state [ 689.100551][T19516] team0: Port device xfrm0 added [ 689.338866][T19538] netlink: 288 bytes leftover after parsing attributes in process `syz.5.4292'. [ 689.358941][T19538] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4292'. [ 692.854003][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.861316][ C0] bridge0: topology change detected, propagating [ 692.868055][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.875345][ C0] bridge0: topology change detected, propagating [ 693.079756][T19521] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 693.183522][T19534] netlink: 216 bytes leftover after parsing attributes in process `syz.5.4292'. [ 693.306272][T19546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4293'. [ 693.369511][T19551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 693.377191][T19551] bridge0: port 2(bond0) entered blocking state [ 693.384279][T19551] bridge0: port 2(bond0) entered disabled state [ 693.392134][T19551] bond0: entered allmulticast mode [ 693.401036][T19551] bond0: entered promiscuous mode [ 693.424070][T19555] syzkaller0: entered promiscuous mode [ 693.456505][T19555] syzkaller0: entered allmulticast mode [ 693.661676][T19563] netlink: 'syz.2.4300': attribute type 1 has an invalid length. [ 693.827649][T19576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4297'. [ 693.844944][T19563] 8021q: adding VLAN 0 to HW filter on device bond20 [ 694.116377][T19584] syzkaller0: entered promiscuous mode [ 694.126621][T19584] syzkaller0: entered allmulticast mode [ 694.141809][T19584] tipc: Enabled bearer , priority 0 [ 694.154459][T19584] tipc: Resetting bearer [ 694.171276][T19583] tipc: Resetting bearer [ 694.230523][T19583] tipc: Disabling bearer [ 694.326053][T19589] netlink: 'syz.1.4303': attribute type 40 has an invalid length. [ 694.372747][T19591] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 694.589241][T19599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 694.597022][T19599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 694.606964][T19599] batman_adv: batadv0: Removing interface: gretap1 [ 695.019650][T19611] lo speed is unknown, defaulting to 1000 [ 695.026020][T19611] lo speed is unknown, defaulting to 1000 [ 695.034064][T19611] lo speed is unknown, defaulting to 1000 [ 695.042030][T19611] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 695.058741][T19611] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 695.078859][T19611] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 695.099230][T19609] netlink: 'syz.6.4309': attribute type 13 has an invalid length. [ 695.154561][T10276] IPVS: starting estimator thread 0... [ 695.161404][T19616] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 695.205277][T19611] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 695.268916][T19617] IPVS: using max 35 ests per chain, 84000 per kthread [ 695.515584][ T5742] lo speed is unknown, defaulting to 1000 [ 695.544181][T19611] lo speed is unknown, defaulting to 1000 [ 695.605970][T19611] lo speed is unknown, defaulting to 1000 [ 695.624427][T19611] lo speed is unknown, defaulting to 1000 [ 695.665726][T19611] lo speed is unknown, defaulting to 1000 [ 695.692116][T19611] lo speed is unknown, defaulting to 1000 [ 695.744997][T19636] tipc: Enabled bearer , priority 0 [ 695.753544][T19636] syzkaller0: entered promiscuous mode [ 695.760611][T19636] syzkaller0: entered allmulticast mode [ 695.909260][T19636] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1514) ! [ 695.930084][T19636] tipc: Resetting bearer [ 695.954542][T19635] tipc: Resetting bearer [ 696.020484][T19635] tipc: Disabling bearer [ 696.037673][T19640] syzkaller0: entered promiscuous mode [ 696.045571][T19640] syzkaller0: entered allmulticast mode [ 696.063999][T19640] tipc: Enabled bearer , priority 0 [ 696.184163][T19642] tipc: Resetting bearer [ 696.260726][T19639] tipc: Resetting bearer [ 696.326354][T19639] tipc: Disabling bearer [ 696.437583][T19660] netlink: 'syz.6.4320': attribute type 1 has an invalid length. [ 696.784252][T19678] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4319'. [ 696.894195][T19660] bridge3: port 1(erspan0) entered disabled state [ 696.929366][T19660] erspan0: left allmulticast mode [ 696.934808][T19660] erspan0: left promiscuous mode [ 696.941027][T19660] bridge3: port 1(erspan0) entered disabled state [ 697.136374][T19660] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.144417][T19660] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.315451][T19660] bridge_slave_0: left allmulticast mode [ 697.335288][T19660] bridge_slave_0: left promiscuous mode [ 697.341587][T19660] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.370629][T19660] bridge_slave_1: left allmulticast mode [ 697.388594][T19660] bridge_slave_1: left promiscuous mode [ 697.394797][T19660] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.419207][T19660] bond12: (slave veth0_to_bond): Releasing active interface [ 697.437314][T19660] bond0: (slave bond_slave_0): Releasing backup interface [ 697.476821][T19660] bond0: (slave bond_slave_1): Releasing backup interface [ 697.520565][T19660] team0: Port device team_slave_0 removed [ 697.563603][T19660] team0: Port device team_slave_1 removed [ 697.635677][T19660] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 697.675749][T19666] tunl0: Caught tx_queue_len zero misconfig [ 697.690071][T19658] netlink: 7 bytes leftover after parsing attributes in process `syz.5.4319'. [ 697.700886][ T5742] lo speed is unknown, defaulting to 1000 [ 697.715408][T19676] batadv0: entered promiscuous mode [ 697.721654][T19676] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 697.758448][ T5742] syz1: Port: 1 Link DOWN [ 697.776048][T10284] lo speed is unknown, defaulting to 1000 [ 697.942677][T19688] netlink: 'syz.5.4324': attribute type 1 has an invalid length. [ 697.998418][T19688] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 698.486554][T19692] 8021q: adding VLAN 0 to HW filter on device bond21 [ 698.503782][T19692] bridge0: port 3(bond21) entered blocking state [ 698.527605][T19692] bridge0: port 3(bond21) entered disabled state [ 698.534571][T19692] bond21: entered allmulticast mode [ 698.542844][T19692] bond21: entered promiscuous mode [ 698.575170][T19691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4325'. [ 698.619214][T19691] bond13: (slave batadv0): Releasing active interface [ 698.692416][T19703] netlink: 'syz.2.4326': attribute type 4 has an invalid length. [ 698.745180][T19699] netlink: 'syz.2.4326': attribute type 4 has an invalid length. [ 699.120626][T19708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4328'. [ 699.414314][T19723] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4333'. [ 699.437100][T19723] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4333'. [ 699.823945][T19742] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4335'. [ 699.834075][T19728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 699.875184][T19728] 8021q: adding VLAN 0 to HW filter on device team0 [ 699.894748][T19740] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4337'. [ 699.950290][T19737] xt_CT: You must specify a L4 protocol and not use inversions on it [ 699.997160][T19749] netlink: 'syz.1.4338': attribute type 3 has an invalid length. [ 700.250920][T19728] veth1_vlan: left promiscuous mode [ 700.259303][T19728] veth0_vlan: left promiscuous mode [ 700.266881][T19728] veth0_vlan: entered promiscuous mode [ 700.276776][T19728] veth1_vlan: entered promiscuous mode [ 700.307572][T19728] veth1_macvtap: left promiscuous mode [ 700.321180][T19728] veth0_macvtap: left promiscuous mode [ 700.328364][T19728] veth0_macvtap: entered promiscuous mode [ 700.341222][T19728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 700.360093][T19728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 700.378008][T19728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 700.386629][T19728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 700.396235][T19728] 8021q: adding VLAN 0 to HW filter on device bond1 [ 700.404751][T19728] 8021q: adding VLAN 0 to HW filter on device bond2 [ 700.422115][T19728] 8021q: adding VLAN 0 to HW filter on device bond3 [ 700.435299][T19728] 8021q: adding VLAN 0 to HW filter on device bond4 [ 700.477008][T19728] 8021q: adding VLAN 0 to HW filter on device bond5 [ 700.487971][T19728] 8021q: adding VLAN 0 to HW filter on device bond6 [ 700.501889][T19728] 8021q: adding VLAN 0 to HW filter on device bond7 [ 700.511876][T19728] 8021q: adding VLAN 0 to HW filter on device bond8 [ 700.530838][T19728] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 700.552126][T19728] 8021q: adding VLAN 0 to HW filter on device bond9 [ 700.577507][T19728] 8021q: adding VLAN 0 to HW filter on device bond10 [ 700.603912][T19728] 8021q: adding VLAN 0 to HW filter on device bond15 [ 700.630531][T10294] lo speed is unknown, defaulting to 1000 [ 700.655665][T10294] syz1: Port: 1 Link ACTIVE [ 700.730413][T19738] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 700.744315][ T47] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.820304][ T47] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 48725 - 0 [ 700.848145][T10268] lo speed is unknown, defaulting to 1000 [ 700.905291][ T1117] bond8: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 700.948210][ T1117] bond8: (slave veth5): making interface the new active one [ 700.974127][ T1117] bond8: active interface up! [ 700.980971][T19770] netlink: 19 bytes leftover after parsing attributes in process `syz.2.4344'. [ 701.511043][T19770] netlink: 19 bytes leftover after parsing attributes in process `syz.2.4344'. [ 701.611560][ T47] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 701.633758][ T47] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 48725 - 0 [ 701.691549][ T3339] bond9: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 701.701675][ T3339] bond9: (slave veth11): link status definitely up, 10000 Mbps full duplex [ 701.719696][ T3339] bond9: (slave veth9): making interface the new active one [ 701.740563][ T3339] bond9: active interface up! [ 701.988569][T19785] nbd: socks must be embedded in a SOCK_ITEM attr [ 702.038050][T19785] block nbd2: shutting down sockets [ 702.126579][T19794] netlink: 'syz.1.4348': attribute type 1 has an invalid length. [ 702.965708][T19804] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4349'. [ 703.523456][T19778] vlan3: left allmulticast mode [ 703.534508][T19778] bridge3: left allmulticast mode [ 703.625419][T19778] veth13: left allmulticast mode [ 703.642669][T19778] dummy0: left allmulticast mode [ 703.649254][T19778] macvlan2: left allmulticast mode [ 703.677756][ T47] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.690041][ T47] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.699827][T10268] lo speed is unknown, defaulting to 1000 [ 703.705642][T10268] syz1: Port: 1 Link DOWN [ 703.713241][T19794] workqueue: Failed to create a rescuer kthread for wq "bond29": -EINTR [ 703.866237][T19797] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 703.994811][ T47] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 704.017018][ T47] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.040951][ T47] netdevsim netdevsim6 netdevsim0: unset [1, 1] type 2 family 0 port 48725 - 0 [ 704.064419][ T5721] lo speed is unknown, defaulting to 1000 [ 704.121592][ T47] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 704.143866][ T47] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.170406][ T47] netdevsim netdevsim6 netdevsim1: unset [1, 1] type 2 family 0 port 48725 - 0 [ 704.386148][T19827] lo: Caught tx_queue_len zero misconfig [ 704.555574][T19829] 8021q: adding VLAN 0 to HW filter on device bond21 [ 704.566083][T19829] bridge0: port 3(bond21) entered blocking state [ 704.577476][T19829] bridge0: port 3(bond21) entered disabled state [ 704.585200][T19829] bond21: entered allmulticast mode [ 704.593705][T19829] bond21: entered promiscuous mode [ 704.773313][T19845] 8021q: adding VLAN 0 to HW filter on device bond16 [ 704.781579][T19845] bridge0: port 1(bond16) entered blocking state [ 704.789644][T19845] bridge0: port 1(bond16) entered disabled state [ 704.796545][T19845] bond16: entered allmulticast mode [ 704.818946][T19845] bond16: entered promiscuous mode [ 704.946643][T19853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4359'. [ 705.033479][T19855] netlink: 'syz.6.4363': attribute type 13 has an invalid length. [ 705.042366][T19855] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4363'. [ 705.761421][T19876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4365'. [ 705.846929][T19882] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4368'. [ 705.941354][T19884] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4369'. [ 706.027768][T19884] pim6reg1: entered promiscuous mode [ 706.041539][T19884] pim6reg1: entered allmulticast mode [ 706.123777][T19892] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4369'. [ 706.202228][T19895] syzkaller0: entered promiscuous mode [ 706.216356][T19895] syzkaller0: entered allmulticast mode [ 706.255353][T19895] tipc: Enabled bearer , priority 0 [ 706.294015][T19895] tipc: Resetting bearer [ 706.323977][T19898] netlink: 'syz.1.4374': attribute type 1 has an invalid length. [ 706.348965][T19894] tipc: Resetting bearer [ 706.381008][T19894] tipc: Disabling bearer [ 706.433466][T19901] bond22 (unregistering): Released all slaves [ 706.553187][ T30] audit: type=1804 audit(1783983219.183:13): pid=19910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.4375" name="/newroot/518/cgroup.controllers" dev="tmpfs" ino=2658 res=1 errno=0 [ 706.632488][ T30] audit: type=1800 audit(1783983219.233:14): pid=19910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4375" name="cgroup.controllers" dev="tmpfs" ino=2658 res=0 errno=0 [ 706.685588][T19912] macvlan2: entered promiscuous mode [ 706.696349][T19912] macvlan2: entered allmulticast mode [ 706.711493][T19912] bond29: entered promiscuous mode [ 706.733386][T19912] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 706.843204][T19912] bond29: left promiscuous mode [ 707.007055][T19927] netlink: 'syz.5.4379': attribute type 9 has an invalid length. [ 707.423625][T19934] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4382'. [ 707.952395][T19934] team0: Port device macvlan2 removed [ 708.391524][T19978] syzkaller0: entered promiscuous mode [ 708.410387][T19978] syzkaller0: entered allmulticast mode [ 708.679105][T19983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4388'. [ 708.745271][T19983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4388'. [ 708.990655][T19995] netlink: zone id is out of range [ 709.009969][T19995] netlink: zone id is out of range [ 709.032032][T19995] netlink: zone id is out of range [ 709.050635][T19995] netlink: zone id is out of range [ 709.071599][T19995] netlink: zone id is out of range [ 709.172727][T19995] netlink: zone id is out of range [ 709.203630][T19995] netlink: zone id is out of range [ 709.225673][T19995] netlink: zone id is out of range [ 709.233495][T19995] netlink: zone id is out of range [ 709.245356][T19995] netlink: zone id is out of range [ 710.160791][T20040] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4405'. [ 710.202967][T20040] smc: net device wlan0 applied user defined pnetid SYZ0 [ 710.213253][T20040] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4405'. [ 711.127659][T20062] netlink: 'syz.1.4412': attribute type 30 has an invalid length. [ 711.186574][T20062] bond30: option arp_missed_max: invalid value (0) [ 711.211629][T20062] bond30: option arp_missed_max: allowed values 1 - 255 [ 711.230975][T20062] bond30 (unregistering): Released all slaves [ 711.308126][T20058] 8021q: adding VLAN 0 to HW filter on device bond22 [ 711.315696][T20058] bridge0: port 4(bond22) entered blocking state [ 711.345429][T20058] bridge0: port 4(bond22) entered disabled state [ 711.352666][T20058] bond22: entered allmulticast mode [ 711.361193][T20058] bond22: entered promiscuous mode [ 711.492220][T20076] ip6gre1: entered promiscuous mode [ 711.497659][T20076] ip6gre1: entered allmulticast mode [ 711.530147][ T33] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 711.549451][T20080] can: request_module (can-proto-0) failed. [ 711.556021][ T33] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 711.566715][T10294] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 711.594328][T20080] tipc: Enabling of bearer rejected, failed to enable media [ 711.699359][T10294] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 711.909749][T20090] netlink: 'syz.2.4421': attribute type 41 has an invalid length. [ 712.072742][T20097] RDS: rds_bind could not find a transport for ::fcff:ffff:8000:0:20:0, load rds_tcp or rds_rdma? [ 712.278613][T10294] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 713.610722][T20127] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4430'. [ 713.621030][T20127] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4430'. [ 713.630899][T20127] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4430'. [ 713.897463][T20107] dvmrp0: entered allmulticast mode [ 714.098027][T20139] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4435'. [ 714.113457][T20139] batman_adv: batadv0: Removing interface: gretap2 [ 714.118773][T20141] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4436'. [ 714.226659][T20143] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4436'. [ 714.454914][T20110] lo speed is unknown, defaulting to 1000 [ 714.667004][T20148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4438'. [ 714.754280][T20148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 714.787989][T20148] 8021q: adding VLAN 0 to HW filter on device team0 [ 714.907558][T20148] veth1_vlan: left promiscuous mode [ 714.944524][T20148] veth0_vlan: entered promiscuous mode [ 714.975583][T20148] veth1_vlan: entered promiscuous mode [ 715.023107][T20148] veth1_macvtap: left promiscuous mode [ 715.040759][T20148] veth0_macvtap: left promiscuous mode [ 715.052760][T20148] veth0_macvtap: entered promiscuous mode [ 715.065853][T20148] veth1_macvtap: entered promiscuous mode [ 715.080993][T20148] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 715.090266][T20148] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 715.099698][T20148] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 715.112806][T20148] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 715.121806][T20148] 8021q: adding VLAN 0 to HW filter on device bond1 [ 715.129331][T20148] 8021q: adding VLAN 0 to HW filter on device bond2 [ 715.140998][T20148] erspan0: entered promiscuous mode [ 715.148250][T20148] 8021q: adding VLAN 0 to HW filter on device bond3 [ 715.156284][T20148] 8021q: adding VLAN 0 to HW filter on device bond4 [ 715.164003][T20148] 8021q: adding VLAN 0 to HW filter on device bond5 [ 715.171851][T20148] 8021q: adding VLAN 0 to HW filter on device bond6 [ 715.183671][T20148] 8021q: adding VLAN 0 to HW filter on device bond7 [ 715.198824][T20148] 8021q: adding VLAN 0 to HW filter on device bond8 [ 715.206290][T20148] 8021q: adding VLAN 0 to HW filter on device bond9 [ 715.221880][T20148] net_ratelimit: 19 callbacks suppressed [ 715.221892][T20148] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 715.245788][T20149] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4438'. [ 715.348418][T20110] lo speed is unknown, defaulting to 1000 [ 715.348633][T20143] lo speed is unknown, defaulting to 1000 [ 715.355688][ T1133] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 715.397374][ T1133] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.420214][ T1133] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 715.434917][T20156] netlink: 'syz.1.4441': attribute type 1 has an invalid length. [ 715.448183][ T1133] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.594843][T20156] 8021q: adding VLAN 0 to HW filter on device bond30 [ 715.605208][ T1133] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 715.614637][ T1133] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.631325][ T1133] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 715.661892][ T1133] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.708756][T20159] bond30: (slave veth19): Enslaving as an active interface with a down link [ 715.747788][T20162] vlan6: entered allmulticast mode [ 715.754925][T20162] veth0_to_bond: entered allmulticast mode [ 715.763063][T20162] bond30: (slave vlan6): Error -34 calling dev_set_mtu [ 715.835180][T20156] bond31: option updelay: invalid value (18446744073709518847) [ 715.861332][T20156] bond31: option updelay: allowed values 0 - 2147483647 [ 715.871164][T20156] bond31 (unregistering): Released all slaves [ 715.896275][T20143] lo speed is unknown, defaulting to 1000 [ 715.958496][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 716.788626][T20187] bridge0: entered promiscuous mode [ 717.969632][T20202] xt_hashlimit: size too large, truncated to 1048576 [ 718.133134][T20203] xt_hashlimit: size too large, truncated to 1048576 [ 718.169193][T20203] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 719.052899][T20228] vlan4: entered promiscuous mode [ 719.079240][T20228] hsr0: entered promiscuous mode [ 719.092171][T20228] vlan4: entered allmulticast mode [ 719.098214][T20228] hsr0: entered allmulticast mode [ 719.104026][T20228] hsr_slave_0: entered allmulticast mode [ 719.110029][T20228] hsr_slave_1: entered allmulticast mode [ 719.153331][T20228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4458'. [ 719.233853][T20236] netlink: 92 bytes leftover after parsing attributes in process `syz.5.4461'. [ 719.381809][T20228] hsr_slave_0: left promiscuous mode [ 719.390476][T20228] hsr_slave_1: left promiscuous mode [ 719.693637][T20250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4465'. [ 721.515755][T20215] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 721.811629][T20262] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4468'. [ 721.855207][T20264] x_tables: duplicate underflow at hook 2 [ 721.877055][T20262] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4468'. [ 721.955657][T20270] bond31: option arp_interval: invalid value (18446744073709551615) [ 721.964945][T20270] bond31: option arp_interval: allowed values 0 - 2147483647 [ 722.043887][T20270] bond31 (unregistering): Released all slaves [ 722.097564][T20260] syzkaller1: entered promiscuous mode [ 722.106082][T20260] syzkaller1: entered allmulticast mode [ 722.317326][T20278] netlink: 'syz.2.4473': attribute type 1 has an invalid length. [ 722.368842][T20278] bond22: entered promiscuous mode [ 722.375078][T20278] 8021q: adding VLAN 0 to HW filter on device bond22 [ 722.538047][T20287] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4476'. [ 722.751899][T20293] netlink: 'syz.2.4479': attribute type 1 has an invalid length. [ 722.752026][T20295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4477'. [ 722.785828][T20293] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4479'. [ 722.896745][T20296] netlink: 164 bytes leftover after parsing attributes in process `syz.6.4478'. [ 722.992191][T20296] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4478'. [ 723.161422][T20295] 8021q: adding VLAN 0 to HW filter on device bond32 [ 723.274757][T20295] bond32 (unregistering): Released all slaves [ 723.596371][T20326] netlink: 'syz.2.4482': attribute type 13 has an invalid length. [ 723.607062][T20326] netlink: 'syz.2.4482': attribute type 17 has an invalid length. [ 723.716949][ T5628] block nbd2: Receive control failed (result -32) [ 723.830789][T20332] xt_connbytes: Forcing CT accounting to be enabled [ 724.074050][T20326] veth1_vlan: left promiscuous mode [ 724.249737][T20326] veth0_vlan: left promiscuous mode [ 724.264273][T20326] veth0_vlan: entered promiscuous mode [ 724.294131][T20326] veth1_vlan: entered promiscuous mode [ 724.300080][T20344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.351571][T20326] veth1_macvtap: left promiscuous mode [ 724.375493][T20326] veth0_macvtap: left promiscuous mode [ 724.402622][T20326] veth0_macvtap: entered promiscuous mode [ 724.435316][T20326] veth1_macvtap: entered promiscuous mode [ 724.471110][T20326] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 724.518690][T20326] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 724.561154][T20326] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 724.595674][T20326] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 724.621760][T20326] 8021q: adding VLAN 0 to HW filter on device bond1 [ 724.632917][T20326] 8021q: adding VLAN 0 to HW filter on device bond2 [ 724.654526][T20326] 8021q: adding VLAN 0 to HW filter on device bond4 [ 724.666103][T20326] 8021q: adding VLAN 0 to HW filter on device bond3 [ 724.675018][T20326] 8021q: adding VLAN 0 to HW filter on device bond5 [ 724.687250][T20326] 8021q: adding VLAN 0 to HW filter on device bond6 [ 724.728912][T20326] 8021q: adding VLAN 0 to HW filter on device bond7 [ 724.757844][T20326] 8021q: adding VLAN 0 to HW filter on device bond8 [ 724.771178][T20326] 8021q: adding VLAN 0 to HW filter on device bond9 [ 724.786694][T20326] 8021q: adding VLAN 0 to HW filter on device bond10 [ 724.795589][T20326] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 724.817106][T20326] 8021q: adding VLAN 0 to HW filter on device bond11 [ 724.827249][T20326] 8021q: adding VLAN 0 to HW filter on device bond12 [ 724.841015][T20326] 8021q: adding VLAN 0 to HW filter on device bond13 [ 724.848543][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 724.883973][T20326] 8021q: adding VLAN 0 to HW filter on device bond14 [ 724.902995][T20326] 8021q: adding VLAN 0 to HW filter on device bond15 [ 724.913913][T20326] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 724.925821][T20326] bond16: left promiscuous mode [ 724.931518][T20326] bridge8: left promiscuous mode [ 724.936679][T20326] bond16: left allmulticast mode [ 724.942041][T20326] bridge8: left allmulticast mode [ 724.948090][T20326] 8021q: adding VLAN 0 to HW filter on device bond16 [ 724.957442][T20326] bond17: left promiscuous mode [ 724.962505][T20326] bond17: left allmulticast mode [ 724.967943][T20326] 8021q: adding VLAN 0 to HW filter on device bond17 [ 724.985104][T20326] 8021q: adding VLAN 0 to HW filter on device bond18 [ 725.006245][T20326] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 725.103789][ T47] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.121767][ T47] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.136487][ T47] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.147260][ T47] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.157268][T20312] sit0: entered promiscuous mode [ 725.210249][T20312] netlink: 'syz.3.4472': attribute type 1 has an invalid length. [ 725.219575][T20312] __nla_validate_parse: 2 callbacks suppressed [ 725.219597][T20312] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4472'. [ 725.250583][T20354] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4489'. [ 725.265111][T20354] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4489'. [ 725.275956][ T47] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.286315][ T47] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.311620][ T47] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.328474][ T47] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.337623][ T47] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 725.397781][T20354] geneve2: entered promiscuous mode [ 725.428968][ T47] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 725.455212][ T47] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 725.557845][ T47] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 20002 - 0 [ 725.577379][ T47] netdevsim netdevsim0 eth5: set [1, 0] type 2 family 0 port 20002 - 0 [ 725.628854][ T47] netdevsim netdevsim0 eth6: set [1, 0] type 2 family 0 port 20002 - 0 [ 725.650774][ T47] netdevsim netdevsim0 eth7: set [1, 0] type 2 family 0 port 20002 - 0 [ 725.691905][ T47] netdevsim netdevsim0 eth8: set [1, 0] type 2 family 0 port 20002 - 0 [ 726.011386][T20385] IPVS: persistence engine module ip_vs_pe_À not found [ 726.057946][T20395] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4495'. [ 726.098001][T20398] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4497'. [ 726.115550][T20400] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4495'. [ 726.507071][T20409] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4499'. [ 726.659558][T20410] tipc: Enabling of bearer rejected, already enabled [ 726.810971][T20416] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4500'. [ 727.540083][T20441] 8021q: adding VLAN 0 to HW filter on device bond32 [ 727.548244][T20441] bridge0: port 3(bond32) entered blocking state [ 727.555471][T20441] bridge0: port 3(bond32) entered disabled state [ 727.577064][T20441] bond32: entered allmulticast mode [ 727.586619][T20441] bond32: entered promiscuous mode [ 727.594274][T20441] bridge0: port 3(bond32) entered blocking state [ 727.601055][T20441] bridge0: port 3(bond32) entered forwarding state [ 727.627913][ T182] bridge0: port 3(bond32) entered disabled state [ 727.809319][T20425] lo speed is unknown, defaulting to 1000 [ 727.872129][T20447] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4510'. [ 728.248016][T20425] lo speed is unknown, defaulting to 1000 [ 728.293402][T20460] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4512'. [ 729.202982][T20469] tipc: Resetting bearer [ 730.086238][T20512] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 730.460196][T20524] __nla_validate_parse: 3 callbacks suppressed [ 730.460221][T20524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4528'. [ 730.535945][T20524] 8021q: adding VLAN 0 to HW filter on device bond23 [ 730.652039][T20528] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4529'. [ 730.667703][T20528] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 730.684173][T20528] netlink: 'syz.1.4529': attribute type 1 has an invalid length. [ 730.699559][T20528] netlink: 'syz.1.4529': attribute type 2 has an invalid length. [ 730.963333][T20545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4531'. [ 731.015128][T20503] bond0: (slave wlan0): Enslaving as an active interface with an up link [ 731.590383][T20565] netdevsim netdevsim6: Firmware load for './file0/file0/..' refused, path contains '..' component [ 731.607786][T10284] bridge0: entered promiscuous mode [ 731.614630][T20568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4535'. [ 731.628263][T20565] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4534'. [ 732.070187][T20579] netlink: 'syz.3.4539': attribute type 8 has an invalid length. [ 732.786494][T20598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4546'. [ 733.165279][T20610] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 733.225567][T20611] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 733.977477][T20630] syzkaller0: entered promiscuous mode [ 734.002675][T20630] syzkaller0: entered allmulticast mode [ 734.145027][T20640] bond24: entered allmulticast mode [ 734.624519][T20658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4559'. [ 734.659172][T20658] netlink: 'syz.1.4559': attribute type 9 has an invalid length. [ 734.681870][T20658] netlink: 'syz.1.4559': attribute type 6 has an invalid length. [ 734.876473][T20639] lo speed is unknown, defaulting to 1000 [ 735.537862][T20639] lo speed is unknown, defaulting to 1000 [ 735.837108][T20692] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4564'. [ 736.571990][T20701] openvswitch: netlink: Flow key attr not present in new flow. [ 737.794918][T20720] smc: removing ib device syz0 [ 738.046728][T20720] smbdirect: ib_dev[syz0] removed [ 738.116737][T20729] syzkaller1: entered promiscuous mode [ 738.135911][T20729] syzkaller1: entered allmulticast mode [ 738.379969][T20735] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4576'. [ 738.879058][T20743] mac80211_hwsim hwsim16 syzkaller0: entered promiscuous mode [ 738.903409][T20743] mac80211_hwsim hwsim16 syzkaller0: entered allmulticast mode [ 739.028987][T20748] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4579'. [ 739.326710][T20746] ksmbd: Unknown IPC event: 4, ignore. [ 739.490757][T20756] netlink: 'syz.5.4581': attribute type 1 has an invalid length. [ 739.526124][T20756] netlink: 232 bytes leftover after parsing attributes in process `syz.5.4581'. [ 739.549021][T20756] netlink: 'syz.5.4581': attribute type 1 has an invalid length. [ 739.629135][T20760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4580'. [ 740.835145][T20760] 8021q: adding VLAN 0 to HW filter on device bond7 [ 740.998745][T20774] 8021q: adding VLAN 0 to HW filter on device bond24 [ 741.004977][T20784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4587'. [ 741.012748][T20774] bridge0: port 5(bond24) entered blocking state [ 741.038789][T20774] bridge0: port 5(bond24) entered disabled state [ 741.046279][T20774] bond24: entered allmulticast mode [ 741.054219][T20774] bond24: entered promiscuous mode [ 741.060815][T20774] bridge0: port 5(bond24) entered blocking state [ 741.067334][T20774] bridge0: port 5(bond24) entered listening state [ 741.225998][T20791] netlink: 'syz.6.4588': attribute type 1 has an invalid length. [ 741.283803][T20797] netlink: 'syz.5.4592': attribute type 4 has an invalid length. [ 741.314252][T20797] netlink: 'syz.5.4592': attribute type 4 has an invalid length. [ 741.322585][T10284] lo speed is unknown, defaulting to 1000 [ 741.342691][T10284] syz2: Port: 1 Link DOWN [ 741.360007][T10284] lo speed is unknown, defaulting to 1000 [ 741.389264][T10284] syz2: Port: 1 Link ACTIVE [ 741.478501][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 741.619826][T20807] netlink: 'syz.1.4593': attribute type 16 has an invalid length. [ 741.658223][T20807] netlink: 'syz.1.4593': attribute type 17 has an invalid length. [ 741.812822][ T47] bridge0: port 5(bond24) entered disabled state [ 742.345859][T20807] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 742.353630][T20807] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 742.365752][T20807] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 742.396932][T20812] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4595'. [ 742.517498][T20818] mac80211_hwsim hwsim16 syzkaller0: left promiscuous mode [ 742.539913][T20818] mac80211_hwsim hwsim16 syzkaller0: left allmulticast mode [ 742.948208][T20835] gre0: left allmulticast mode [ 743.573058][T20849] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4600'. [ 743.728199][T20835] tipc: Resetting bearer [ 744.711463][T20878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4603'. [ 744.754575][T20835] macsec0: left promiscuous mode [ 744.792678][T20835] geneve2: left promiscuous mode [ 744.803624][T20835] bond4: left promiscuous mode [ 744.811616][T20835] vlan2: left allmulticast mode [ 744.816599][T20835] bond5: left allmulticast mode [ 744.822417][T20835] geneve3: left allmulticast mode [ 744.828724][T20835] bond8: left promiscuous mode [ 744.833745][T20835] bond8: left allmulticast mode [ 744.839777][T20835] bond9: left promiscuous mode [ 744.844846][T20835] bond9: left allmulticast mode [ 744.851340][T20835] bond10: left promiscuous mode [ 744.856388][T20835] bridge6: left promiscuous mode [ 744.862443][T20835] bond12: left promiscuous mode [ 744.867489][T20835] bond12: left allmulticast mode [ 744.874155][T20835] bond14: left promiscuous mode [ 744.880694][T20835] bridge8: left promiscuous mode [ 744.886517][T20835] vlan5: left allmulticast mode [ 744.891849][T20835] bond14: left allmulticast mode [ 744.897227][T20835] bridge8: left allmulticast mode [ 744.904007][T20835] vlan6: left promiscuous mode [ 744.909612][T20835] hsr0: left promiscuous mode [ 744.914595][T20835] vlan6: left allmulticast mode [ 744.920254][T20835] hsr0: left allmulticast mode [ 744.925170][T20835] hsr_slave_0: left allmulticast mode [ 744.942616][T20835] veth15: left allmulticast mode [ 744.953550][T20835] bond17: left promiscuous mode [ 744.979936][T20835] vlan0: left promiscuous mode [ 744.985366][T20835] macvtap2: left promiscuous mode [ 745.155575][T10294] lo speed is unknown, defaulting to 1000 [ 745.163063][T10294] syz2: Port: 1 Link DOWN [ 745.170503][T20885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4606'. [ 745.335236][T20882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4606'. [ 745.359550][T20892] netlink: 'syz.2.4609': attribute type 1 has an invalid length. [ 745.513655][T20898] bond25: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 745.523402][ T3339] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.533464][ T3339] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.549642][ T3339] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.559347][ T3339] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.560418][T20892] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4609'. [ 745.635580][T20904] block nbd0: must specify backend [ 745.995360][T20902] veth27: entered promiscuous mode [ 746.004789][T20902] bond25: (slave veth27): Enslaving as a backup interface with a down link [ 746.054923][T20894] 8021q: adding VLAN 0 to HW filter on device bond33 [ 746.064299][T20892] 8021q: adding VLAN 0 to HW filter on device bond25 [ 746.098757][ T182] bond25: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 746.266186][T20909] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4611'. [ 746.303203][ T13] bond25: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 746.329837][T20909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4611'. [ 746.366741][T20909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4611'. [ 746.410715][T20909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4611'. [ 746.909419][T20907] syzkaller1: entered promiscuous mode [ 746.926133][T20907] syzkaller1: entered allmulticast mode [ 747.240378][ T1317] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 747.377910][T20944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4618'. [ 747.416197][T20934] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.449046][T20934] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.525795][T20952] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4620'. [ 747.771245][T20944] bond25: (slave ip6gretap0): Removing an active aggregator [ 747.784048][T20944] bond25: (slave ip6gretap0): Releasing backup interface [ 747.792143][T20944] bond25: (slave ip6gretap0): the permanent HWaddr of slave - 26:17:c8:5b:bf:fe - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 747.859210][T20960] mac80211_hwsim hwsim16 syzkaller0: entered promiscuous mode [ 747.872123][T20960] mac80211_hwsim hwsim16 syzkaller0: entered allmulticast mode [ 747.884990][T20963] netlink: 'syz.6.4621': attribute type 1 has an invalid length. [ 748.169588][T20953] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 749.098537][T20994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4627'. [ 749.117541][T20994] netlink: 'syz.2.4627': attribute type 2 has an invalid length. [ 749.145238][T20994] openvswitch: netlink: Actions may not be safe on all matching packets [ 749.936809][T21014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4634'. [ 749.986091][T21014] 8021q: adding VLAN 0 to HW filter on device bond26 [ 750.123676][T21012] 8021q: adding VLAN 0 to HW filter on device bond25 [ 750.524078][T21038] netlink: 'syz.1.4641': attribute type 13 has an invalid length. [ 750.898542][T21054] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4644'. [ 751.137585][T21061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4645'. [ 756.021077][T21053] mac80211_hwsim hwsim16 syzkaller0: left promiscuous mode [ 756.028902][T21053] mac80211_hwsim hwsim16 syzkaller0: left allmulticast mode [ 756.106138][T21055] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 756.118215][T21055] bond8 (unregistering): Released all slaves [ 756.147174][T21061] workqueue: Failed to create a rescuer kthread for wq "bond27": -EINTR [ 756.221789][T21071] macsec1: entered promiscuous mode [ 756.642802][T21095] netlink: 'syz.1.4652': attribute type 32 has an invalid length. [ 756.668462][T21095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4652'. [ 756.711442][T21095] bond34: Setting coupled_control to off (0) [ 757.128777][T21109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4656'. [ 757.251820][T21112] netlink: 'syz.5.4657': attribute type 9 has an invalid length. [ 757.673610][T21131] tipc: Enabling of bearer rejected, failed to enable media [ 757.839210][T21134] bond27: option arp_all_targets: invalid value (3) [ 757.926224][T21134] bond27 (unregistering): Released all slaves [ 757.973197][T21138] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4664'. [ 758.318592][T21145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4668'. [ 758.356828][T21147] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4666'. [ 758.376915][T21140] 8021q: adding VLAN 0 to HW filter on device bond17 [ 758.403927][T21140] bridge0: port 2(bond17) entered blocking state [ 758.418543][T21140] bridge0: port 2(bond17) entered disabled state [ 758.427595][T21140] bond17: entered allmulticast mode [ 758.439692][T21140] bond17: entered promiscuous mode [ 758.618685][T21161] veth0: entered promiscuous mode [ 758.627849][T21161] veth0: left promiscuous mode [ 759.157921][T21183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4675'. [ 759.503548][T21197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4675'. [ 759.831983][T21202] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4679'. [ 759.834245][T21206] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4680'. [ 760.221830][T21213] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 760.258560][T21213] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 760.289625][T21213] tipc: Enabling of bearer rejected, already enabled [ 760.619235][T21237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4687'. [ 760.955368][T21247] netlink: 'syz.2.4690': attribute type 13 has an invalid length. [ 761.371805][T21265] ipip0: entered promiscuous mode [ 761.554844][T21270] 8021q: adding VLAN 0 to HW filter on device bond18 [ 761.620638][T21254] netlink: 'syz.3.4689': attribute type 1 has an invalid length. [ 761.800451][T21287] __nla_validate_parse: 3 callbacks suppressed [ 761.800477][T21287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4699'. [ 761.847620][T21292] IPv6: NLM_F_CREATE should be specified when creating new route [ 762.084016][T21254] 8021q: adding VLAN 0 to HW filter on device bond8 [ 762.132686][T21306] netlink: 'syz.6.4701': attribute type 4 has an invalid length. [ 762.178025][T21308] netlink: 199784 bytes leftover after parsing attributes in process `syz.5.4700'. [ 762.189282][T21308] netlink: 'syz.5.4700': attribute type 1 has an invalid length. [ 762.198180][T21252] bond8: (slave geneve4): making interface the new active one [ 762.262195][T21252] bond8: (slave geneve4): Enslaving as an active interface with an up link [ 762.310473][T21254] netlink: 'syz.3.4689': attribute type 4 has an invalid length. [ 762.367118][ T6621] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.377778][T21310] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 762.386353][T21310] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 762.429415][ T6621] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.546666][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.579203][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.093732][T21319] xfrm0 speed is unknown, defaulting to 1000 [ 763.098847][T21326] netlink: 'syz.3.4704': attribute type 12 has an invalid length. [ 763.119557][T21319] xfrm0 speed is unknown, defaulting to 1000 [ 763.210874][T21319] xfrm0 speed is unknown, defaulting to 1000 [ 763.427043][T21319] infiniband syz0: set active [ 763.438443][T20872] xfrm0 speed is unknown, defaulting to 1000 [ 763.460841][T21319] infiniband syz0: added xfrm0 [ 763.536524][T21319] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 763.556649][T21319] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 763.575517][T21319] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 763.667504][T21319] RDS/IB: syz0: added [ 763.672997][T21319] smc: adding ib device syz0 with port count 1 [ 763.690526][T21319] smc: ib device syz0 port 1 has no pnetid [ 763.706505][T20872] xfrm0 speed is unknown, defaulting to 1000 [ 763.717234][T21319] xfrm0 speed is unknown, defaulting to 1000 [ 763.973699][T21348] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4712'. [ 764.368650][T21358] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4715'. [ 764.610369][T21319] xfrm0 speed is unknown, defaulting to 1000 [ 764.901500][T21380] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4719'. [ 765.023227][T21319] xfrm0 speed is unknown, defaulting to 1000 [ 765.298482][T21319] xfrm0 speed is unknown, defaulting to 1000 [ 765.506659][T21319] xfrm0 speed is unknown, defaulting to 1000 [ 765.752983][T21398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4725'. [ 765.846017][T21402] netlink: 80 bytes leftover after parsing attributes in process `syz.6.4727'. [ 766.046506][T21411] netlink: 'syz.2.4729': attribute type 4 has an invalid length. [ 766.214791][T21411] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 766.367804][T21424] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4732'. [ 766.480503][T21430] netlink: 'syz.1.4733': attribute type 4 has an invalid length. [ 766.533603][T21430] netlink: 'syz.1.4733': attribute type 4 has an invalid length. [ 766.845981][T21434] netlink: 'syz.6.4735': attribute type 4 has an invalid length. [ 766.854859][T21434] netlink: 'syz.6.4735': attribute type 4 has an invalid length. [ 766.871158][T20872] lo speed is unknown, defaulting to 1000 [ 766.883301][T20872] syz1: Port: 1 Link ACTIVE [ 766.895031][T20872] lo speed is unknown, defaulting to 1000 [ 767.237382][T21448] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4739'. [ 767.490325][T21451] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4740'. [ 767.641522][T21451] 8021q: adding VLAN 0 to HW filter on device bond19 [ 768.113812][T21461] mac80211_hwsim hwsim16 syzkaller0: entered promiscuous mode [ 768.146232][T21461] mac80211_hwsim hwsim16 syzkaller0: entered allmulticast mode [ 768.279510][T21461] tipc: Enabled bearer , priority 0 [ 768.431188][T21477] netlink: 'syz.6.4746': attribute type 2 has an invalid length. [ 768.485034][T21477] netlink: 'syz.6.4746': attribute type 2 has an invalid length. [ 768.537699][T21477] netlink: 1347 bytes leftover after parsing attributes in process `syz.6.4746'. [ 768.543440][T21480] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 769.305941][T21495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4749'. [ 769.577742][T21501] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 769.618586][T21501] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.803442][ T182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 769.871258][T21505] nbd: nbd1 already in use [ 769.894191][T21505] block nbd1: NBD_DISCONNECT [ 769.909241][T21505] block nbd1: Send disconnect failed -32 [ 769.962549][T21505] block nbd1: shutting down sockets [ 770.239066][T21518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4751'. [ 770.250404][T21518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4751'. [ 770.263595][T21518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4751'. [ 770.419747][T21518] 8021q: adding VLAN 0 to HW filter on device bond9 [ 770.678732][T21529] netlink: 'syz.5.4755': attribute type 1 has an invalid length. [ 770.696924][T21529] netlink: 'syz.5.4755': attribute type 8 has an invalid length. [ 771.893066][T21566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4763'. [ 771.962436][T21564] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4762'. [ 772.048189][T21572] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4765'. [ 772.264501][T21579] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4766'. [ 772.482797][T21583] netlink: 'syz.1.4768': attribute type 4 has an invalid length. [ 772.504567][T21593] netlink: 'syz.2.4770': attribute type 4 has an invalid length. [ 772.556575][T21595] netlink: 'syz.2.4770': attribute type 4 has an invalid length. [ 773.138177][T21579] lo speed is unknown, defaulting to 1000 [ 773.284534][T21591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 773.303019][T21591] 8021q: adding VLAN 0 to HW filter on device team0 [ 773.311552][T21591] tipc: Resetting bearer [ 773.442678][T21623] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4775'. [ 773.557025][T21591] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 773.634197][T21591] veth1_vlan: left promiscuous mode [ 773.642124][T21591] veth0_vlan: left promiscuous mode [ 773.670621][T21591] veth0_vlan: entered promiscuous mode [ 773.706655][T21633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4774'. [ 773.710315][T21591] veth1_vlan: entered promiscuous mode [ 773.753104][T21591] veth1_macvtap: left promiscuous mode [ 773.786438][T21591] veth0_macvtap: left promiscuous mode [ 773.805181][T21591] veth0_macvtap: entered promiscuous mode [ 773.816901][T21591] veth1_macvtap: entered promiscuous mode [ 773.837037][T21591] 8021q: adding VLAN 0 to HW filter on device €Â [ 773.844752][T21591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 773.854950][T21591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 773.863373][T21591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 773.874897][T21591] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 773.891285][ T808] lo speed is unknown, defaulting to 1000 [ 773.914677][ T808] syz2: Port: 1 Link ACTIVE [ 774.087897][T21638] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4777'. [ 774.100590][T21633] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 774.118913][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 774.210232][T21579] lo speed is unknown, defaulting to 1000 [ 774.210376][ T6624] netdevsim netdevsim5 €Â: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.241495][ T6624] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.256393][T21579] xfrm0 speed is unknown, defaulting to 1000 [ 774.347114][T21647] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4778'. [ 774.391363][T21647] netlink: 244 bytes leftover after parsing attributes in process `syz.6.4778'. [ 774.433056][T21651] lo: entered allmulticast mode [ 774.449042][T21651] tunl0: entered allmulticast mode [ 774.461992][T21651] gre0: entered allmulticast mode [ 774.477056][T21651] gretap0: entered allmulticast mode [ 774.493159][T21651] erspan0: entered allmulticast mode [ 774.507828][T21651] ip_vti0: entered allmulticast mode [ 774.515977][T21651] ip6_vti0: entered allmulticast mode [ 774.523511][T21651] sit0: entered allmulticast mode [ 774.540949][T21651] ip6tnl0: entered allmulticast mode [ 774.553615][T21651] ip6gre0: entered allmulticast mode [ 774.581349][T21651] bridge0: entered allmulticast mode [ 774.609975][T21651] bond0: entered allmulticast mode [ 774.629557][T21651] team0: entered allmulticast mode [ 774.649143][T21651] bridge8: entered allmulticast mode [ 774.666785][T21651] dummy0: entered allmulticast mode [ 774.692621][T21651] nlmon0: entered allmulticast mode [ 774.707000][T21651] veth0: entered allmulticast mode [ 774.717935][T21651] veth1: entered allmulticast mode [ 774.725368][T21651] wg0: entered allmulticast mode [ 774.732252][T21651] wg2: entered allmulticast mode [ 774.741781][T21651] veth0_to_bridge: entered allmulticast mode [ 774.757770][T21651] bridge_slave_0: entered allmulticast mode [ 774.772918][T21651] veth1_to_bridge: entered allmulticast mode [ 774.781123][T21651] bridge_slave_1: entered allmulticast mode [ 774.789788][T21651] bond_slave_0: entered allmulticast mode [ 774.796757][T21651] veth1_to_bond: entered allmulticast mode [ 774.805823][T21651] bond_slave_1: entered allmulticast mode [ 774.814129][T21651] veth0_to_team: entered allmulticast mode [ 774.823103][T21651] team_slave_0: entered allmulticast mode [ 774.831212][T21651] veth1_to_team: entered allmulticast mode [ 774.877716][T21651] team_slave_1: entered allmulticast mode [ 774.886518][T21651] veth0_to_batadv: entered allmulticast mode [ 774.896177][T21651] batadv_slave_0: entered allmulticast mode [ 774.905061][T21651] xfrm0: entered allmulticast mode [ 774.913343][T21651] veth0_to_hsr: entered allmulticast mode [ 774.921934][T21651] hsr_slave_0: entered allmulticast mode [ 774.930896][T21651] veth1_to_hsr: entered allmulticast mode [ 774.938144][T21651] hsr_slave_1: entered allmulticast mode [ 774.946579][T21651] hsr0: entered allmulticast mode [ 774.954058][T21651] veth1_virt_wifi: entered allmulticast mode [ 774.963046][T21651] veth0_virt_wifi: entered allmulticast mode [ 774.971468][T21651] virt_wifi0: entered allmulticast mode [ 774.977428][T21651] veth1_vlan: entered allmulticast mode [ 774.986940][T21651] vlan0: entered allmulticast mode [ 774.996434][T21651] veth0_vlan: entered allmulticast mode [ 775.019293][T21651] vlan1: entered allmulticast mode [ 775.026550][T21651] macvlan0: entered allmulticast mode [ 775.034060][T21651] macvlan1: entered allmulticast mode [ 775.042462][T21651] ipvlan0: entered allmulticast mode [ 775.053527][T21651] ipvlan1: entered allmulticast mode [ 775.060832][T21651] veth1_macvtap: entered allmulticast mode [ 775.068046][T21651] veth0_macvtap: entered allmulticast mode [ 775.082217][T21651] macvtap0: entered allmulticast mode [ 775.105625][T21651] macsec0: entered allmulticast mode [ 775.119866][T21651] geneve0: entered allmulticast mode [ 775.126890][T21651] geneve1: entered allmulticast mode [ 775.135040][T21651] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 775.151852][T21651] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 775.231218][T21651] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 775.273569][T21651] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 775.308653][T21651] bond1: entered allmulticast mode [ 775.331519][T21651] bond2: entered allmulticast mode [ 775.360847][T21651] vxlan0: entered allmulticast mode [ 775.376296][T21651] ip6erspan0: entered allmulticast mode [ 775.392367][T21651] sit1: entered allmulticast mode [ 775.400449][T21651] ip6tnl1: entered allmulticast mode [ 775.407292][T21651] bridge0.257: entered allmulticast mode [ 775.414453][T21651] gtp0: entered allmulticast mode [ 775.421402][T21651] gtp1: entered allmulticast mode [ 775.430355][T21651] macvtap1: entered allmulticast mode [ 775.437319][T21651] : entered allmulticast mode [ 775.447582][T21651] : entered allmulticast mode [ 775.464345][T21651] gtp2: entered allmulticast mode [ 775.476248][T21651] bond3: entered allmulticast mode [ 775.491704][T21651] ip6gre1: entered allmulticast mode [ 775.522178][T21651] bond4: entered allmulticast mode [ 775.542142][T21651] bond5: entered allmulticast mode [ 775.550938][T21651] bond6: entered allmulticast mode [ 775.557673][T21651] veth2: entered allmulticast mode [ 775.565605][T21651] veth3: entered allmulticast mode [ 775.608475][T21651] veth4: entered allmulticast mode [ 775.615007][T21651] veth5: entered allmulticast mode [ 775.622463][T21651] bond7: entered allmulticast mode [ 775.627903][T21651] gretap1: entered allmulticast mode [ 775.637586][T21651] veth6: entered allmulticast mode [ 775.645854][T21651] veth7: entered allmulticast mode [ 775.653609][T21651] veth8: entered allmulticast mode [ 775.660866][T21651] veth9: entered allmulticast mode [ 775.667596][T21651] bond8: entered allmulticast mode [ 775.674810][T21651] bond9: entered allmulticast mode [ 775.681856][T21651] bridge1: entered allmulticast mode [ 775.689551][T21651] bridge2: entered allmulticast mode [ 775.696139][T21651] bridge3: entered allmulticast mode [ 775.703279][T21651] veth10: entered allmulticast mode [ 775.711137][T21651] veth11: entered allmulticast mode [ 775.717623][T21651] veth12: entered allmulticast mode [ 775.727492][T21651] veth13: entered allmulticast mode [ 775.735261][T21651] bridge4: entered allmulticast mode [ 775.743238][T21651] bridge5: entered allmulticast mode [ 775.750937][T21651] bridge6: entered allmulticast mode [ 775.757801][T21651] bridge7: entered allmulticast mode [ 775.766198][T21651] gre1: entered allmulticast mode [ 775.773639][T21651] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 775.782601][T21651] mac80211_hwsim hwsim19 wlan2: entered allmulticast mode [ 775.790973][T21651] gtp3: entered allmulticast mode [ 775.796598][T21651] bridge9: entered allmulticast mode [ 775.803997][T21651] bond10: entered allmulticast mode [ 775.809717][T21651] bond11: entered allmulticast mode [ 775.815443][T21651] gretap2: entered allmulticast mode [ 775.821947][T21651] bridge10: entered allmulticast mode [ 775.827850][T21651] bond13: entered allmulticast mode [ 775.833952][T21651] veth14: entered allmulticast mode [ 775.840016][T21651] veth15: entered allmulticast mode [ 775.845636][T21651] gre2: entered allmulticast mode [ 775.851417][T21651] bond15: entered allmulticast mode [ 775.856908][T21651] bond16: entered allmulticast mode [ 775.862781][T21651] ip6gretap1: entered allmulticast mode [ 775.868981][T21651] vlan2: entered allmulticast mode [ 775.874505][T21651] veth16: entered allmulticast mode [ 775.881306][T21651] veth17: entered allmulticast mode [ 775.886847][T21651] bridge11: entered allmulticast mode [ 775.892717][T21651] bond17: entered allmulticast mode [ 775.897995][T21651] bond18: entered allmulticast mode [ 775.903956][T21651] bond19: entered allmulticast mode [ 775.911556][T21651] bridge12: entered allmulticast mode [ 775.917132][T21651] bridge13: entered allmulticast mode [ 775.923674][T21651] bond20: entered allmulticast mode [ 775.929292][T21651] ipip0: entered allmulticast mode [ 775.934736][T21651] ip6tnl2: entered allmulticast mode [ 775.940410][T21651] bond21: entered allmulticast mode [ 775.945855][T21651] bridge14: entered allmulticast mode [ 775.953286][T21651] vlan3: entered allmulticast mode [ 775.960861][T21651] vlan4: entered allmulticast mode [ 775.966278][T21651] vlan5: entered allmulticast mode [ 775.973197][T21651] bond22: entered allmulticast mode [ 775.979081][T21651] bond23: entered allmulticast mode [ 775.986123][T21651] bridge15: entered allmulticast mode [ 775.992130][T21651] ipvlan2: entered allmulticast mode [ 775.997652][T21651] ipvlan3: entered allmulticast mode [ 776.003464][T21651] bond24: entered allmulticast mode [ 776.009149][T21651] bond26: entered allmulticast mode [ 776.015361][T21651] bond27: left promiscuous mode [ 776.020732][T21651] bridge16: left promiscuous mode [ 776.029103][T21651] bond29: entered allmulticast mode [ 776.034845][T21651] bond30: entered allmulticast mode [ 776.041716][T21651] veth18: entered allmulticast mode [ 776.047154][T21651] veth19: entered allmulticast mode [ 776.053639][T21651] bond31: entered allmulticast mode [ 776.060019][T21651] geneve2: left promiscuous mode [ 776.065230][T21651] geneve2: entered allmulticast mode [ 776.072148][T21651] bond33: entered allmulticast mode [ 776.078010][T21651] bond34: entered allmulticast mode [ 776.085212][T21651] gre3: entered allmulticast mode [ 776.091121][T21651] 7: entered allmulticast mode [ 776.122727][T21641] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 776.133748][T21641] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 776.152612][T21641] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 776.292100][T21695] netlink: 'syz.1.4784': attribute type 4 has an invalid length. [ 776.347827][T21696] netlink: 'syz.1.4784': attribute type 4 has an invalid length. [ 781.423845][ T6624] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.432942][ T6624] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.451995][T20872] xfrm0 speed is unknown, defaulting to 1000 [ 781.706955][T21702] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4787'. [ 781.797736][T21710] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4786'. [ 781.837934][T21711] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20000 [ 781.872196][T21714] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4786'. [ 781.890535][T21714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 782.106584][T21721] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4788'. [ 782.577510][ T5282] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 783.203234][T21741] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4793'. [ 783.542365][T21756] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4796'. [ 783.879639][T21748] tipc: Resetting bearer [ 784.846460][T21748] tipc: Resetting bearer [ 784.907683][ T5721] lo speed is unknown, defaulting to 1000 [ 784.914178][ T5721] syz2: Port: 1 Link DOWN [ 784.941325][T21759] bridge0: port 4(vlan4) entered blocking state [ 784.949117][T21759] bridge0: port 4(vlan4) entered disabled state [ 784.956127][T21759] vlan4: entered allmulticast mode [ 784.963002][T21759] geneve0: entered allmulticast mode [ 784.971237][T21759] vlan4: entered promiscuous mode [ 784.976530][T21759] geneve0: entered promiscuous mode [ 785.114590][T21782] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4799'. [ 785.143011][T21785] netlink: 'syz.2.4802': attribute type 4 has an invalid length. [ 785.216294][T21770] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4799'. [ 785.232324][ T13] netdevsim netdevsim5 €Â: unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.257394][ T13] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.271609][ T13] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.281014][ T13] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.344257][T21788] smc: net device wlan0 erased user defined pnetid SYZ0 [ 786.594564][T21774] lo speed is unknown, defaulting to 1000 [ 786.602277][T21837] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4811'. [ 786.763549][T21846] x_tables: unsorted entry at hook 2 [ 786.774734][T21846] xt_hashlimit: size too large, truncated to 1048576 [ 787.008270][T21853] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4815'. [ 787.359789][T21863] netlink: 'syz.1.4820': attribute type 4 has an invalid length. [ 787.393049][T21863] netlink: 'syz.1.4820': attribute type 4 has an invalid length. [ 787.592598][T21870] sctp: [Deprecated]: syz.1.4822 (pid 21870) Use of int in max_burst socket option. [ 787.592598][T21870] Use struct sctp_assoc_value instead [ 787.671561][T21870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4822'. [ 787.698010][T21870] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 787.796760][ T3339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.822304][ T3339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 787.878264][T21877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 789.603590][T21912] erspan0: entered promiscuous mode [ 789.615587][T21912] erspan0: entered allmulticast mode [ 789.634815][T21774] lo speed is unknown, defaulting to 1000 [ 789.634915][T21873] lo speed is unknown, defaulting to 1000 [ 789.644090][T21774] xfrm0 speed is unknown, defaulting to 1000 [ 789.901313][T21916] netlink: 'syz.2.4832': attribute type 4 has an invalid length. [ 789.910364][T21916] netlink: 'syz.2.4832': attribute type 4 has an invalid length. [ 789.935704][T21873] lo speed is unknown, defaulting to 1000 [ 790.056280][T21920] netlink: 'syz.6.4834': attribute type 1 has an invalid length. [ 790.109933][T21920] 8021q: adding VLAN 0 to HW filter on device bond20 [ 790.165381][T21920] vlan5: entered allmulticast mode [ 790.170940][T21920] bond20: entered allmulticast mode [ 790.663134][T21935] netlink: 'syz.2.4838': attribute type 4 has an invalid length. [ 790.717518][T21939] netlink: 'syz.2.4838': attribute type 4 has an invalid length. [ 790.719500][T21933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 790.737582][T21933] 8021q: adding VLAN 0 to HW filter on device team0 [ 790.747420][T21937] openvswitch: netlink: Actions may not be safe on all matching packets [ 791.015813][T21933] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 791.026725][T21933] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 791.041598][T21933] veth1_vlan: left promiscuous mode [ 791.049770][T21933] veth0_vlan: left promiscuous mode [ 791.056431][T21933] veth0_vlan: entered promiscuous mode [ 791.064625][T21933] veth1_vlan: entered promiscuous mode [ 791.085248][T21933] veth0_macvtap: left promiscuous mode [ 791.093992][T21933] veth0_macvtap: entered promiscuous mode [ 791.105713][T21933] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 791.114087][T21933] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 791.123299][T21933] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 791.133802][T21933] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 791.152620][T21933] 8021q: adding VLAN 0 to HW filter on device bond1 [ 791.172854][T21933] 8021q: adding VLAN 0 to HW filter on device bond2 [ 791.193115][T21933] 8021q: adding VLAN 0 to HW filter on device bond3 [ 791.202201][T21933] 8021q: adding VLAN 0 to HW filter on device bond4 [ 791.229481][T21933] 8021q: adding VLAN 0 to HW filter on device bond5 [ 791.240132][T21933] 8021q: adding VLAN 0 to HW filter on device bond6 [ 791.253218][T21933] 8021q: adding VLAN 0 to HW filter on device bond7 [ 791.263407][T21933] 8021q: adding VLAN 0 to HW filter on device bond8 [ 791.275330][T21933] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 791.284882][T21933] 8021q: adding VLAN 0 to HW filter on device bond9 [ 791.297262][T21933] A link change request failed with some changes committed already. Interface vlan3 may have been left with an inconsistent configuration, please check. [ 791.384732][T17723] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 791.394385][T17723] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.431174][T17723] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 36851 - 0 [ 791.462791][T17723] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 791.488560][T17723] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.508650][T17723] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 36851 - 0 [ 791.524232][T21873] xfrm0 speed is unknown, defaulting to 1000 [ 791.535670][T21953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4841'. [ 791.563306][T21954] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4840'. [ 791.647696][T17723] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 791.659251][T17723] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.678744][T17723] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 36851 - 0 [ 791.698593][T17723] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 791.716514][T17723] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.726329][T17723] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 36851 - 0 [ 791.833438][T21958] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4840'. [ 792.253126][T21961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 792.354330][T21970] netlink: 'syz.5.4844': attribute type 4 has an invalid length. [ 792.406684][T21971] netlink: 'syz.5.4844': attribute type 4 has an invalid length. [ 792.582936][T20869] lo speed is unknown, defaulting to 1000 [ 792.596724][T20869] syz2: Port: 1 Link ACTIVE [ 792.617661][T21973] lo speed is unknown, defaulting to 1000 [ 792.629403][T21976] netlink: 'syz.6.4845': attribute type 1 has an invalid length. [ 792.656863][T21976] netlink: 16150 bytes leftover after parsing attributes in process `syz.6.4845'. [ 792.742381][T21981] mac80211_hwsim hwsim16 syzkaller0: left promiscuous mode [ 792.763064][T21981] mac80211_hwsim hwsim16 syzkaller0: left allmulticast mode [ 792.784272][T21981] tipc: Resetting bearer [ 793.214395][T21991] wlan0: renamed from sit0 (while UP) [ 793.279398][T21993] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4850'. [ 793.331629][T21989] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4850'. [ 793.356064][T21991] wlan0: entered promiscuous mode [ 793.368410][T21991] wlan0: entered allmulticast mode [ 793.386506][T21991] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4850'. [ 793.459052][T21991] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 793.459785][T21994] block nbd0: must specify backend [ 793.672299][T21973] lo speed is unknown, defaulting to 1000 [ 793.682151][T21973] xfrm0 speed is unknown, defaulting to 1000 [ 793.698115][T21996] netlink: 'syz.2.4851': attribute type 4 has an invalid length. [ 793.747401][T21996] netlink: 'syz.2.4851': attribute type 4 has an invalid length. [ 793.967110][T22005] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4853'. [ 794.189661][T22008] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4854'. [ 794.240984][T22008] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4854'. [ 794.467022][T22014] netlink: 'syz.5.4856': attribute type 4 has an invalid length. [ 794.485938][T20869] lo speed is unknown, defaulting to 1000 [ 794.493207][T20869] syz2: Port: 1 Link DOWN [ 794.497858][T22014] netlink: 'syz.5.4856': attribute type 4 has an invalid length. [ 794.510043][T20869] lo speed is unknown, defaulting to 1000 [ 794.518263][T20869] syz2: Port: 1 Link ACTIVE [ 794.943672][T22028] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4859'. [ 796.005261][T22057] lo: left allmulticast mode [ 796.027441][T22057] tunl0: left allmulticast mode [ 796.047001][T22057] gre0: left allmulticast mode [ 796.088227][T22064] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4865'. [ 796.132889][T22057] gretap0: left allmulticast mode [ 796.147176][T22057] ip_vti0: left allmulticast mode [ 796.169933][T22057] ip6_vti0: left allmulticast mode [ 796.178016][T22057] sit0: left allmulticast mode [ 796.221442][T22072] netlink: 'syz.2.4866': attribute type 9 has an invalid length. [ 796.233790][T22057] ip6tnl0: left allmulticast mode [ 796.241877][T22057] ip6gre0: left allmulticast mode [ 796.266157][T22057] bond0: left allmulticast mode [ 796.273308][T22057] team0: left allmulticast mode [ 796.291529][T22057] dummy0: left allmulticast mode [ 796.312959][T22057] nlmon0: left allmulticast mode [ 796.320176][T22057] veth0: left allmulticast mode [ 796.326861][T22057] veth1: left allmulticast mode [ 796.337422][T22057] wg0: left allmulticast mode [ 796.344881][T22057] wg2: left allmulticast mode [ 796.353137][T22057] veth0_to_bridge: left allmulticast mode [ 796.362385][T22057] bridge_slave_0: left allmulticast mode [ 796.372475][T22057] veth1_to_bridge: left allmulticast mode [ 796.381541][T22057] bridge_slave_1: left allmulticast mode [ 796.394057][T22057] bond_slave_0: left allmulticast mode [ 796.403205][T22057] veth1_to_bond: left allmulticast mode [ 796.411888][T22057] bond_slave_1: left allmulticast mode [ 796.419951][T22057] veth0_to_team: left allmulticast mode [ 796.428027][T22057] team_slave_0: left allmulticast mode [ 796.436164][T22057] veth1_to_team: left allmulticast mode [ 796.453129][T22057] team_slave_1: left allmulticast mode [ 796.460747][T22057] veth0_to_batadv: left allmulticast mode [ 796.469501][T22057] batadv_slave_0: left allmulticast mode [ 796.477403][T22057] xfrm0: left allmulticast mode [ 796.485476][T22057] veth0_to_hsr: left allmulticast mode [ 796.497071][T22057] veth1_to_hsr: left allmulticast mode [ 796.507913][T22057] veth1_virt_wifi: left allmulticast mode [ 796.516310][T22057] veth0_virt_wifi: left allmulticast mode [ 796.527177][T22057] virt_wifi0: left allmulticast mode [ 796.536276][T22057] vlan0: left allmulticast mode [ 796.544124][T22057] veth0_vlan: left promiscuous mode [ 796.551037][T22057] vlan1: left allmulticast mode [ 796.557960][T22057] macvlan0: left allmulticast mode [ 796.566509][T22057] veth1_vlan: left allmulticast mode [ 796.575093][T22057] macvlan1: left allmulticast mode [ 796.583569][T22057] ipvlan0: left allmulticast mode [ 796.604739][T22057] ipvlan1: left allmulticast mode [ 796.613766][T22057] veth0_vlan: left allmulticast mode [ 796.636375][T22057] veth0_macvtap: left allmulticast mode [ 796.643105][T22057] macvtap0: left allmulticast mode [ 796.651440][T22057] veth1_macvtap: left allmulticast mode [ 796.657210][T22057] macsec0: left allmulticast mode [ 796.665644][T22057] geneve0: left allmulticast mode [ 796.673890][T22057] geneve1: left allmulticast mode [ 796.694985][T22057] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 796.712768][T22057] netdevsim netdevsim1 netdevsim1: left allmulticast mode [ 796.725714][T22057] netdevsim netdevsim1 netdevsim2: left allmulticast mode [ 796.735564][T22057] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 796.743531][T22057] bond1: left allmulticast mode [ 796.750633][T22057] bond2: left allmulticast mode [ 796.756986][T22057] vxlan0: left allmulticast mode [ 796.767394][T22057] ip6erspan0: left allmulticast mode [ 796.777269][T22057] sit1: left allmulticast mode [ 796.816647][T22057] ip6tnl1: left allmulticast mode [ 796.824822][T22057] bridge0.257: left allmulticast mode [ 796.831496][T22057] bridge0: left allmulticast mode [ 796.837907][T22057] gtp0: left allmulticast mode [ 796.861049][T22057] gtp1: left allmulticast mode [ 796.884143][T22057] erspan0: left allmulticast mode [ 796.891248][T22057] macvtap1: left allmulticast mode [ 796.905365][T22057] : left allmulticast mode [ 796.915099][T22057] : left allmulticast mode [ 796.922367][T22057] gtp2: left allmulticast mode [ 796.936274][T22057] bond3: left allmulticast mode [ 796.944249][T22057] ip6gre1: left allmulticast mode [ 796.950911][T22057] bond4: left allmulticast mode [ 796.957162][T22057] bond5: left allmulticast mode [ 796.963652][T22057] bond6: left allmulticast mode [ 796.970706][T22057] veth2: left allmulticast mode [ 796.977275][T22057] veth3: left allmulticast mode [ 796.985038][T22057] veth4: left allmulticast mode [ 796.992468][T22057] veth5: left allmulticast mode [ 797.001127][T22057] bond7: left allmulticast mode [ 797.008037][T22057] gretap1: left allmulticast mode [ 797.014653][T22057] veth6: left allmulticast mode [ 797.024929][T22057] veth7: left allmulticast mode [ 797.031539][T22057] veth8: left allmulticast mode [ 797.037915][T22057] veth9: left allmulticast mode [ 797.045569][T22057] bond8: left allmulticast mode [ 797.052360][T22057] bond9: left allmulticast mode [ 797.059475][T22057] bridge1: left allmulticast mode [ 797.066536][T22057] bridge2: left allmulticast mode [ 797.074706][T22057] bridge3: left allmulticast mode [ 797.082286][T22057] veth10: left allmulticast mode [ 797.088921][T22057] veth11: left allmulticast mode [ 797.095392][T22057] veth12: left allmulticast mode [ 797.102015][T22057] veth13: left allmulticast mode [ 797.109919][T22057] bridge4: left allmulticast mode [ 797.118077][T22057] bridge5: left allmulticast mode [ 797.126709][T22057] bridge6: left allmulticast mode [ 797.136668][T22057] bridge7: left allmulticast mode [ 797.145302][T22057] bridge8: left allmulticast mode [ 797.152440][T22057] gre1: left allmulticast mode [ 797.158972][T22057] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 797.166509][T22057] mac80211_hwsim hwsim19 wlan2: left allmulticast mode [ 797.174888][T22057] gtp3: left allmulticast mode [ 797.180182][T22057] bridge9: left allmulticast mode [ 797.185359][T22057] bond10: left allmulticast mode [ 797.193913][T22057] bond11: left allmulticast mode [ 797.199335][T22057] gretap2: left allmulticast mode [ 797.204520][T22057] bridge10: left allmulticast mode [ 797.210345][T22057] bond13: left allmulticast mode [ 797.215633][T22057] veth14: left allmulticast mode [ 797.221293][T22057] veth15: left allmulticast mode [ 797.226495][T22057] gre2: left allmulticast mode [ 797.231575][T22057] bond15: left allmulticast mode [ 797.236936][T22057] vlan2: left allmulticast mode [ 797.246703][T22057] bond16: left allmulticast mode [ 797.252179][T22057] ip6gretap1: left allmulticast mode [ 797.257643][T22057] veth16: left allmulticast mode [ 797.263146][T22057] veth17: left allmulticast mode [ 797.268812][T22057] bridge11: left allmulticast mode [ 797.274235][T22057] bond17: left allmulticast mode [ 797.279559][T22057] bond18: left allmulticast mode [ 797.284748][T22057] bond19: left allmulticast mode [ 797.290030][T22057] bridge12: left allmulticast mode [ 797.295372][T22057] bridge13: left allmulticast mode [ 797.301557][T22057] bond20: left allmulticast mode [ 797.306720][T22057] ipip0: left allmulticast mode [ 797.312379][T22057] ip6tnl2: left allmulticast mode [ 797.317813][T22057] bond21: left allmulticast mode [ 797.323447][T22057] vlan3: left allmulticast mode [ 797.328998][T22057] bridge14: left allmulticast mode [ 797.341678][T22057] vlan4: left allmulticast mode [ 797.347194][T22057] vlan5: left allmulticast mode [ 797.354008][T22057] hsr0: left allmulticast mode [ 797.359015][T22057] hsr_slave_0: left allmulticast mode [ 797.365057][T22057] hsr_slave_1: left allmulticast mode [ 797.372594][T22057] bond22: left allmulticast mode [ 797.378523][T22057] ipvlan2: left allmulticast mode [ 797.383829][T22057] ipvlan3: left allmulticast mode [ 797.389918][T22057] bond23: left allmulticast mode [ 797.395301][T22057] bridge15: left allmulticast mode [ 797.401299][T22057] bond24: left allmulticast mode [ 797.407144][T22057] bond26: left allmulticast mode [ 797.414530][T22057] bond27: left allmulticast mode [ 797.422187][T22057] bridge16: left allmulticast mode [ 797.430815][T22057] bond29: left allmulticast mode [ 797.436413][T22057] bond30: left allmulticast mode [ 797.442572][T22057] veth18: left allmulticast mode [ 797.448240][T22057] veth19: left allmulticast mode [ 797.454687][T22057] bond31: left allmulticast mode [ 797.461526][T22057] geneve2: left allmulticast mode [ 797.468605][T22057] bond33: left allmulticast mode [ 797.474739][T22057] bond34: left allmulticast mode [ 797.482007][T22057] gre3: left allmulticast mode [ 797.487789][T22057] 7: left allmulticast mode [ 797.579816][ T808] xfrm0 speed is unknown, defaulting to 1000 [ 797.586256][ T6621] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 797.605311][ T808] syz0: Port: 1 Link DOWN [ 797.619267][ T6621] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.657801][ T6621] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 797.690519][ T6621] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.711288][ T6621] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 797.734494][ T6621] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.834170][T22079] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4868'. [ 797.951929][ T808] xfrm0 speed is unknown, defaulting to 1000 [ 798.590888][T22109] geneve0: entered promiscuous mode [ 798.628033][T22109] macvlan2: entered promiscuous mode [ 798.812209][T22117] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4872'. [ 798.885989][T22119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4876'. [ 798.940754][T22123] xt_TCPMSS: Only works on TCP SYN packets [ 799.722047][T18479] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 799.754338][T18479] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 799.780374][T18479] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 799.797565][T18479] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 799.806581][T18479] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 800.128245][T22153] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4881'. [ 800.480572][T22169] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4883'. [ 800.656991][T22169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 800.693748][T22169] 8021q: adding VLAN 0 to HW filter on device team0 [ 800.724236][T22169] tipc: Resetting bearer [ 800.974704][T22169] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 801.062412][T22169] veth1_vlan: left promiscuous mode [ 801.080199][T22169] veth0_vlan: left promiscuous mode [ 801.104408][T22169] veth0_vlan: entered promiscuous mode [ 801.134225][T22169] veth1_vlan: entered promiscuous mode [ 801.152468][T22169] veth1_macvtap: left promiscuous mode [ 801.159504][T22169] veth0_macvtap: left promiscuous mode [ 801.166708][T22169] veth0_macvtap: entered promiscuous mode [ 801.174380][T22169] veth1_macvtap: entered promiscuous mode [ 801.196776][T22169] 8021q: adding VLAN 0 to HW filter on device €Â [ 801.222589][T22169] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 801.258995][T22169] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 801.292869][T22169] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 801.310674][T22169] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 801.538466][ T13] netdevsim netdevsim5 €Â: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.566023][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.858504][T22227] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4890'. [ 801.878564][ T5628] Bluetooth: hci4: command tx timeout [ 801.965244][T22227] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4890'. [ 802.019226][T22232] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4892'. [ 802.140532][T22232] IPVS: sed: FWM 3 0x00000003 - no destination available [ 802.164131][T22238] IPv6: NLM_F_CREATE should be specified when creating new route [ 802.308855][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.334784][T22246] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4892'. [ 802.343728][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.390993][T22247] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4892'. [ 803.778654][T22258] netlink: 'syz.6.4894': attribute type 14 has an invalid length. [ 803.835000][T22272] syzkaller1: entered promiscuous mode [ 803.850061][T22272] syzkaller1: entered allmulticast mode [ 803.958685][ T5628] Bluetooth: hci4: command 0x041b tx timeout [ 803.982341][T22141] lo speed is unknown, defaulting to 1000 [ 804.036327][T22285] netlink: 'syz.1.4897': attribute type 4 has an invalid length. [ 804.219712][T22289] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 804.744365][T22141] lo speed is unknown, defaulting to 1000 [ 804.755996][T22141] xfrm0 speed is unknown, defaulting to 1000 [ 804.809264][T22303] __nla_validate_parse: 1 callbacks suppressed [ 804.809287][T22303] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4901'. [ 804.860769][T22306] netlink: 'syz.6.4901': attribute type 1 has an invalid length. [ 805.655931][T22323] netlink: 'syz.5.4909': attribute type 4 has an invalid length. [ 805.740712][ T5721] lo speed is unknown, defaulting to 1000 [ 805.763328][ T5721] syz2: Port: 1 Link DOWN [ 806.038667][T18479] Bluetooth: hci4: command 0x041b tx timeout [ 807.146058][T22331] vlan5: left allmulticast mode [ 807.161616][T22331] bond20: left allmulticast mode [ 807.171003][T10281] lo speed is unknown, defaulting to 1000 [ 807.186617][T10281] syz1: Port: 1 Link DOWN [ 807.292033][T22368] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4913'. [ 807.295739][ T3339] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 807.315623][ T3339] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.457576][ T13] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 807.476979][ T13] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.487862][T22347] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 807.497878][ T13] netdevsim netdevsim6 netdevsim0: unset [1, 1] type 2 family 0 port 36851 - 0 [ 807.519629][T22352] lo speed is unknown, defaulting to 1000 [ 807.570697][T22368] 8021q: adding VLAN 0 to HW filter on device bond26 [ 807.786801][ T3339] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 807.815333][ T3339] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.010553][ T13] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 808.036713][ T13] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.049243][ T13] netdevsim netdevsim6 netdevsim1: unset [1, 1] type 2 family 0 port 36851 - 0 [ 808.120860][T18479] Bluetooth: hci4: command 0x041b tx timeout [ 808.259612][ T13] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 808.277339][ T13] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.304859][ T13] netdevsim netdevsim6 netdevsim2: unset [1, 1] type 2 family 0 port 36851 - 0 [ 808.324165][ T13] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 808.348797][ T13] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.370705][ T13] netdevsim netdevsim6 netdevsim3: unset [1, 1] type 2 family 0 port 36851 - 0 [ 808.519658][ T808] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 808.681218][ T1317] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 810.208782][T18479] Bluetooth: hci4: command 0x041b tx timeout [ 813.524144][ T3339] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.535198][ T3339] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.575695][T22407] team0: Device syz_tun is of different type [ 813.600411][T22413] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 813.738717][T22423] netlink: 'syz.2.4922': attribute type 4 has an invalid length. [ 813.812382][ T3339] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.838568][ T3339] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.918634][T22141] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.943690][T22141] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.966168][T22141] bridge_slave_0: entered allmulticast mode [ 813.999003][T22141] bridge_slave_0: entered promiscuous mode [ 814.025226][T22141] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.064053][T22141] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.094269][T22141] bridge_slave_1: entered allmulticast mode [ 814.135622][T22141] bridge_slave_1: entered promiscuous mode [ 814.332948][T22141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 814.385723][T22440] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4926'. [ 814.392559][T22141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 814.564965][T22447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4927'. [ 814.621533][T22432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4925'. [ 814.720123][T22141] team0: Port device team_slave_0 added [ 814.764945][ T12] netdevsim netdevsim3 eth9: set [1, 0] type 2 family 0 port 20002 - 0 [ 814.814819][T22141] team0: Port device team_slave_1 added [ 815.251673][T17723] netdevsim netdevsim3 eth10: set [1, 0] type 2 family 0 port 20002 - 0 [ 815.263974][T22460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4931'. [ 815.281190][T22141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 815.301778][T22141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 815.315821][T22460] netlink: 'syz.1.4931': attribute type 1 has an invalid length. [ 815.376058][T22141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 815.444933][T22465] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4933'. [ 815.451888][T22141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 815.474353][T22141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 815.476772][T22466] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4932'. [ 815.501185][T22141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 815.518988][T22466] netlink: 'syz.6.4932': attribute type 7 has an invalid length. [ 815.524825][T17723] netdevsim netdevsim3 eth11: set [1, 0] type 2 family 0 port 20002 - 0 [ 815.531287][T22466] netlink: 'syz.6.4932': attribute type 8 has an invalid length. [ 815.540125][T22470] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4933'. [ 815.547978][T22466] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4932'. [ 815.639670][ T6621] netdevsim netdevsim3 eth12: set [1, 0] type 2 family 0 port 20002 - 0 [ 815.706884][ T3339] bridge_slave_1: left allmulticast mode [ 815.722238][ T3339] bridge_slave_1: left promiscuous mode [ 815.732360][ T3339] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.747372][ T3339] bridge_slave_0: left allmulticast mode [ 815.761396][ T3339] bridge_slave_0: left promiscuous mode [ 815.774425][ T3339] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.799214][T22476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4935'. [ 815.843960][T22476] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 816.320058][ T3339] bond2 (unregistering): (slave gretap1): Releasing active interface [ 816.328499][T22481] netlink: 'syz.1.4936': attribute type 3 has an invalid length. [ 816.370717][ T3339] bond4 (unregistering): (slave gretap2): Releasing active interface [ 816.429549][ T3339] bond8 (unregistering): (slave geneve4): Releasing active interface [ 816.446435][ T3339] bond6 (unregistering): (slave geneve3): Releasing active interface [ 816.614067][ T3339] bond5 (unregistering): (slave bridge5): Releasing backup interface [ 816.636377][ T3339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 816.647635][ T3339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 816.658060][ T3339] bond0 (unregistering): Released all slaves [ 816.670884][ T3339] bond1 (unregistering): Released all slaves [ 816.694314][ T3339] bond2 (unregistering): Released all slaves [ 816.709351][ T3339] bond3 (unregistering): Released all slaves [ 816.735396][ T3339] bond4 (unregistering): Released all slaves [ 816.753019][ T3339] bond5 (unregistering): Released all slaves [ 816.781417][ T3339] bond6 (unregistering): Released all slaves [ 816.795586][ T3339] bond7 (unregistering): Released all slaves [ 816.812723][ T3339] bond8 (unregistering): Released all slaves [ 816.827141][ T3339] bond9 (unregistering): Released all slaves [ 817.201133][T22491] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4939'. [ 817.283375][T22141] hsr_slave_0: entered promiscuous mode [ 817.336198][T22141] hsr_slave_1: entered promiscuous mode [ 817.635800][ T3339] tipc: Left network mode [ 818.510742][T22536] netlink: 'syz.6.4943': attribute type 10 has an invalid length. [ 818.951910][T22546] netlink: 'syz.1.4947': attribute type 11 has an invalid length. [ 818.989430][T22536] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 819.044595][T22536] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 819.154026][ T5282] 8021q: adding VLAN 0 to HW filter on device eth9 [ 819.164820][T22549] xt_hashlimit: size too large, truncated to 1048576 [ 819.295181][T22553] netlink: 'syz.5.4948': attribute type 11 has an invalid length. [ 820.461982][T22593] __nla_validate_parse: 4 callbacks suppressed [ 820.462008][T22593] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4951'. [ 820.478170][T22581] bond27: Unable to set up delay as MII monitoring is disabled [ 820.510828][T22581] bond27 (unregistering): Released all slaves [ 821.271071][T22602] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 821.298912][T22602] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 821.681294][ T5282] 8021q: adding VLAN 0 to HW filter on device eth10 [ 822.064677][T22634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4955'. [ 822.094924][T22624] tipc: Resetting bearer [ 822.418939][T22642] netlink: 'syz.6.4958': attribute type 1 has an invalid length. [ 822.431275][T22642] netlink: 232 bytes leftover after parsing attributes in process `syz.6.4958'. [ 822.442205][T22642] netlink: 'syz.6.4958': attribute type 1 has an invalid length. [ 822.459799][T22624] tipc: Resetting bearer [ 822.473456][T22347] lo speed is unknown, defaulting to 1000 [ 822.489951][ T3339] hsr_slave_0: left promiscuous mode [ 822.506042][ T3339] hsr_slave_1: left promiscuous mode [ 822.517105][T22643] netlink: 'syz.6.4958': attribute type 1 has an invalid length. [ 822.530168][ T3339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 822.537892][T22643] netlink: 256 bytes leftover after parsing attributes in process `syz.6.4958'. [ 822.553639][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 822.584997][ T3339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 822.604345][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 822.861368][T22654] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4959'. [ 822.872889][T22654] netlink: 'syz.5.4959': attribute type 1 has an invalid length. [ 823.088673][ T3339] team0 (unregistering): Port device team_slave_1 removed [ 823.105904][ T3339] team0 (unregistering): Port device team_slave_0 removed [ 823.458137][T22141] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 823.491466][T22141] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 823.519455][T22141] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 823.575162][T22141] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 823.607149][T22671] netlink: 'syz.1.4961': attribute type 14 has an invalid length. [ 823.770616][T22141] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 823.812779][T22141] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 823.922131][T22141] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 824.092398][T22141] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 824.511316][T22141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 824.537243][T22141] 8021q: adding VLAN 0 to HW filter on device team0 [ 824.553028][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.560631][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 824.595860][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.603181][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 824.921208][T22700] mac80211_hwsim hwsim16 syzkaller0: entered promiscuous mode [ 824.966623][T22700] mac80211_hwsim hwsim16 syzkaller0: entered allmulticast mode [ 825.014519][ T3339] IPVS: stop unused estimator thread 0... [ 825.671456][T22737] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4968'. [ 825.722709][T22708] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 825.754190][T22710] syzkaller0: entered promiscuous mode [ 825.771173][T22710] syzkaller0: entered allmulticast mode [ 825.824556][T22737] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4968'. [ 826.282200][T22751] netlink: 'syz.1.4972': attribute type 1 has an invalid length. [ 831.816510][ T5282] 8021q: adding VLAN 0 to HW filter on device eth11 [ 831.872683][T22751] bond35: entered promiscuous mode [ 831.878105][T22751] bond35: entered allmulticast mode [ 831.902379][T22751] 8021q: adding VLAN 0 to HW filter on device bond35 [ 831.929815][T22756] erspan1: entered allmulticast mode [ 831.938688][T22756] bond35: (slave erspan1): making interface the new active one [ 831.946801][T22756] erspan1: entered promiscuous mode [ 831.960446][T22756] bond35: (slave erspan1): Enslaving as an active interface with an up link [ 831.981323][T22763] syz.1.4972 (22763) used obsolete PPPIOCDETACH ioctl [ 832.012451][T22757] syzkaller1: entered promiscuous mode [ 832.017977][T22757] syzkaller1: entered allmulticast mode [ 832.165818][T22770] erspan0: entered promiscuous mode [ 832.178362][T22770] erspan0: entered allmulticast mode [ 832.473862][T22782] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4976'. [ 832.834515][T22141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 833.003168][T22815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4980'. [ 833.065584][T22811] syzkaller0: entered promiscuous mode [ 833.091505][T22821] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4981'. [ 833.122116][T22811] syzkaller0: entered allmulticast mode [ 833.202325][T22821] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4981'. [ 833.715503][T22849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4984'. [ 833.954236][T22840] nbd5: detected capacity change from 0 to 63 [ 833.993642][ T1689] [ 833.996384][ T1689] ====================================================== [ 834.003420][ T1689] WARNING: possible circular locking dependency detected [ 834.010645][ T1689] syzkaller #0 Not tainted [ 834.011860][T22829] block nbd5: NBD_DISCONNECT [ 834.015154][ T1689] ------------------------------------------------------ [ 834.015165][ T1689] kworker/1:1H/1689 is trying to acquire lock: [ 834.015176][ T1689] ffff8880363ff868 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x373/0x1150 [ 834.043026][ T1689] [ 834.043026][ T1689] but task is already holding lock: [ 834.051006][ T1689] ffff8880275851f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0x1150 [ 834.059649][ T1689] [ 834.059649][ T1689] which lock already depends on the new lock. [ 834.059649][ T1689] [ 834.070166][ T1689] [ 834.070166][ T1689] the existing dependency chain (in reverse order) is: [ 834.079186][ T1689] [ 834.079186][ T1689] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 834.086486][ T1689] __mutex_lock+0x19d/0x1550 [ 834.091926][ T1689] nbd_queue_rq+0xc1/0x1150 [ 834.097042][ T1689] blk_mq_dispatch_rq_list+0x499/0x1990 [ 834.103225][ T1689] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 834.110309][ T1689] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 834.116930][ T1689] blk_mq_run_work_fn+0x16c/0x300 [ 834.122487][ T1689] process_scheduled_works+0xa8e/0x14e0 [ 834.128650][ T1689] worker_thread+0xa47/0xfb0 [ 834.133926][ T1689] kthread+0x388/0x470 [ 834.138597][ T1689] ret_from_fork+0x514/0xb70 [ 834.143747][ T1689] ret_from_fork_asm+0x1a/0x30 [ 834.149041][ T1689] [ 834.149041][ T1689] -> #5 (set->srcu){.+.+}-{0:0}: [ 834.156168][ T1689] __synchronize_srcu+0xc9/0x2f0 [ 834.161652][ T1689] elevator_switch+0x1e8/0x7b0 [ 834.167518][ T1689] elevator_change+0x2fa/0x480 [ 834.172811][ T1689] elevator_set_default+0x375/0x440 [ 834.178527][ T1689] blk_register_queue+0x3f3/0x4e0 [ 834.184132][ T1689] __add_disk+0x6cb/0xe30 [ 834.189020][ T1689] add_disk_fwnode+0xfb/0x4b0 [ 834.194314][ T1689] nbd_dev_add+0x733/0xb60 [ 834.199244][ T1689] nbd_init+0x15f/0x1e0 [ 834.204028][ T1689] do_one_initcall+0x250/0x870 [ 834.209307][ T1689] do_initcall_level+0x10a/0x1a0 [ 834.214788][ T1689] do_initcalls+0x59/0xa0 [ 834.219716][ T1689] kernel_init_freeable+0x29d/0x3e0 [ 834.225436][ T1689] kernel_init+0x1d/0x1d0 [ 834.230275][ T1689] ret_from_fork+0x514/0xb70 [ 834.235382][ T1689] ret_from_fork_asm+0x1a/0x30 [ 834.240738][ T1689] [ 834.240738][ T1689] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 834.248577][ T1689] __mutex_lock+0x19d/0x1550 [ 834.253683][ T1689] elevator_change+0x1af/0x480 [ 834.258960][ T1689] elevator_set_none+0xb5/0x140 [ 834.264326][ T1689] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 834.270742][ T1689] nbd_start_device+0x189/0xb30 [ 834.276209][ T1689] nbd_genl_connect+0x1597/0x1c10 [ 834.281836][ T1689] genl_family_rcv_msg_doit+0x233/0x340 [ 834.288045][ T1689] genl_rcv_msg+0x614/0x7a0 [ 834.293337][ T1689] netlink_rcv_skb+0x226/0x4a0 [ 834.298881][ T1689] genl_rcv+0x28/0x40 [ 834.303472][ T1689] netlink_unicast+0x7bb/0x940 [ 834.308754][ T1689] netlink_sendmsg+0x813/0xb40 [ 834.314114][ T1689] sock_sendmsg_nosec+0x13a/0x180 [ 834.319749][ T1689] ____sys_sendmsg+0x54e/0x850 [ 834.325173][ T1689] ___sys_sendmsg+0x2a5/0x360 [ 834.330466][ T1689] __x64_sys_sendmsg+0x1b1/0x290 [ 834.335962][ T1689] do_syscall_64+0x174/0x580 [ 834.341189][ T1689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.347655][ T1689] [ 834.347655][ T1689] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 834.356260][ T1689] blk_alloc_queue+0x544/0x690 [ 834.361565][ T1689] __blk_mq_alloc_disk+0x194/0x390 [ 834.367352][ T1689] nbd_dev_add+0x494/0xb60 [ 834.372496][ T1689] nbd_init+0x15f/0x1e0 [ 834.377266][ T1689] do_one_initcall+0x250/0x870 [ 834.382554][ T1689] do_initcall_level+0x10a/0x1a0 [ 834.388042][ T1689] do_initcalls+0x59/0xa0 [ 834.392888][ T1689] kernel_init_freeable+0x29d/0x3e0 [ 834.398608][ T1689] kernel_init+0x1d/0x1d0 [ 834.403545][ T1689] ret_from_fork+0x514/0xb70 [ 834.408649][ T1689] ret_from_fork_asm+0x1a/0x30 [ 834.413923][ T1689] [ 834.413923][ T1689] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 834.421141][ T1689] fs_reclaim_acquire+0x71/0x100 [ 834.426753][ T1689] __kmalloc_noprof+0xbc/0x720 [ 834.432039][ T1689] tls_sw_sendmsg+0x599/0x2860 [ 834.437504][ T1689] sock_sendmsg_nosec+0x90/0x180 [ 834.442959][ T1689] sock_sendmsg+0x1ca/0x2d0 [ 834.447983][ T1689] splice_to_socket+0xb5e/0x12a0 [ 834.453475][ T1689] direct_splice_actor+0x101/0x160 [ 834.459101][ T1689] splice_direct_to_actor+0x57b/0xcb0 [ 834.465097][ T1689] do_splice_direct+0x195/0x290 [ 834.470720][ T1689] do_sendfile+0x52e/0x7c0 [ 834.475674][ T1689] __se_sys_sendfile64+0x144/0x1a0 [ 834.481319][ T1689] do_syscall_64+0x174/0x580 [ 834.486444][ T1689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.492861][ T1689] [ 834.492861][ T1689] -> #1 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 834.500942][ T1689] lock_sock_nested+0x41/0x100 [ 834.506327][ T1689] inet_shutdown+0x6a/0x390 [ 834.511413][ T1689] nbd_mark_nsock_dead+0x2cb/0x550 [ 834.517046][ T1689] recv_work+0x1cee/0x1e10 [ 834.521970][ T1689] process_scheduled_works+0xa8e/0x14e0 [ 834.528031][ T1689] worker_thread+0xa47/0xfb0 [ 834.533480][ T1689] kthread+0x388/0x470 [ 834.538099][ T1689] ret_from_fork+0x514/0xb70 [ 834.543231][ T1689] ret_from_fork_asm+0x1a/0x30 [ 834.548518][ T1689] [ 834.548518][ T1689] -> #0 (&nsock->tx_lock){+.+.}-{4:4}: [ 834.556157][ T1689] __lock_acquire+0x1520/0x2cf0 [ 834.561614][ T1689] lock_acquire+0x106/0x350 [ 834.566854][ T1689] __mutex_lock+0x19d/0x1550 [ 834.572147][ T1689] nbd_queue_rq+0x373/0x1150 [ 834.577524][ T1689] blk_mq_dispatch_rq_list+0x499/0x1990 [ 834.583673][ T1689] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 834.590700][ T1689] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 834.597462][ T1689] blk_mq_run_work_fn+0x16c/0x300 [ 834.603005][ T1689] process_scheduled_works+0xa8e/0x14e0 [ 834.609083][ T1689] worker_thread+0xa47/0xfb0 [ 834.614244][ T1689] kthread+0x388/0x470 [ 834.618845][ T1689] ret_from_fork+0x514/0xb70 [ 834.624044][ T1689] ret_from_fork_asm+0x1a/0x30 [ 834.629334][ T1689] [ 834.629334][ T1689] other info that might help us debug this: [ 834.629334][ T1689] [ 834.640120][ T1689] Chain exists of: [ 834.640120][ T1689] &nsock->tx_lock --> set->srcu --> &cmd->lock [ 834.640120][ T1689] [ 834.652404][ T1689] Possible unsafe locking scenario: [ 834.652404][ T1689] [ 834.659931][ T1689] CPU0 CPU1 [ 834.665281][ T1689] ---- ---- [ 834.670640][ T1689] lock(&cmd->lock); [ 834.674627][ T1689] lock(set->srcu); [ 834.681134][ T1689] lock(&cmd->lock); [ 834.687644][ T1689] lock(&nsock->tx_lock); [ 834.692151][ T1689] [ 834.692151][ T1689] *** DEADLOCK *** [ 834.692151][ T1689] [ 834.700347][ T1689] 4 locks held by kworker/1:1H/1689: [ 834.705618][ T1689] #0: ffff88801e6d0940 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 834.716668][ T1689] #1: ffffc9000654fc40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 834.729537][ T1689] #2: ffff888026b76698 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x144/0x300 [ 834.739024][ T1689] #3: ffff8880275851f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0x1150 [ 834.747995][ T1689] [ 834.747995][ T1689] stack backtrace: [ 834.753883][ T1689] CPU: 1 UID: 0 PID: 1689 Comm: kworker/1:1H Not tainted syzkaller #0 PREEMPT(full) [ 834.753913][ T1689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 834.753931][ T1689] Workqueue: kblockd blk_mq_run_work_fn [ 834.753971][ T1689] Call Trace: [ 834.753981][ T1689] [ 834.753990][ T1689] dump_stack_lvl+0xe8/0x150 [ 834.754014][ T1689] print_circular_bug+0x2e1/0x300 [ 834.754032][ T1689] check_noncircular+0x12e/0x150 [ 834.754059][ T1689] __lock_acquire+0x1520/0x2cf0 [ 834.754081][ T1689] ? irqentry_exit+0x218/0x8f0 [ 834.754105][ T1689] ? __pfx___schedule+0x10/0x10 [ 834.754123][ T1689] ? irqentry_exit+0x218/0x8f0 [ 834.754145][ T1689] ? nbd_queue_rq+0x373/0x1150 [ 834.754167][ T1689] lock_acquire+0x106/0x350 [ 834.754190][ T1689] ? nbd_queue_rq+0x373/0x1150 [ 834.754216][ T1689] __mutex_lock+0x19d/0x1550 [ 834.754236][ T1689] ? nbd_queue_rq+0x373/0x1150 [ 834.754257][ T1689] ? ret_from_fork_asm+0x1a/0x30 [ 834.754271][ T1689] ? unwind_next_frame+0x8f/0x2550 [ 834.754314][ T1689] ? nbd_queue_rq+0x373/0x1150 [ 834.754335][ T1689] ? __pfx___mutex_lock+0x10/0x10 [ 834.754356][ T1689] ? ret_from_fork_asm+0x1a/0x30 [ 834.754370][ T1689] ? stack_trace_save+0xa9/0x100 [ 834.754388][ T1689] ? __pfx_stack_trace_save+0x10/0x10 [ 834.754407][ T1689] nbd_queue_rq+0x373/0x1150 [ 834.754430][ T1689] ? __lock_acquire+0x13e8/0x2cf0 [ 834.754449][ T1689] ? __pfx_nbd_queue_rq+0x10/0x10 [ 834.754475][ T1689] blk_mq_dispatch_rq_list+0x499/0x1990 [ 834.754501][ T1689] ? sbitmap_get+0x229/0x390 [ 834.754663][ T1689] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 834.754682][ T1689] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 834.754704][ T1689] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 834.754734][ T1689] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 834.754757][ T1689] ? blk_mq_run_work_fn+0x144/0x300 [ 834.754771][ T1689] ? blk_mq_run_work_fn+0x144/0x300 [ 834.754789][ T1689] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 834.754810][ T1689] ? blk_mq_run_work_fn+0x144/0x300 [ 834.754824][ T1689] blk_mq_run_work_fn+0x16c/0x300 [ 834.754839][ T1689] ? process_scheduled_works+0xa20/0x14e0 [ 834.754855][ T1689] process_scheduled_works+0xa8e/0x14e0 [ 834.754880][ T1689] ? __pfx_process_scheduled_works+0x10/0x10 [ 834.754898][ T1689] ? assign_work+0x3cf/0x5d0 [ 834.754914][ T1689] worker_thread+0xa47/0xfb0 [ 834.754935][ T1689] ? __kthread_parkme+0x71/0x1f0 [ 834.754955][ T1689] kthread+0x388/0x470 [ 834.754974][ T1689] ? __pfx_worker_thread+0x10/0x10 [ 834.754990][ T1689] ? __pfx_kthread+0x10/0x10 [ 834.755008][ T1689] ret_from_fork+0x514/0xb70 [ 834.755029][ T1689] ? __pfx_ret_from_fork+0x10/0x10 [ 834.755048][ T1689] ? __switch_to+0xc89/0x1420 [ 834.755067][ T1689] ? __pfx_kthread+0x10/0x10 [ 834.755085][ T1689] ret_from_fork_asm+0x1a/0x30 [ 834.755104][ T1689] [ 835.040047][T22829] block nbd5: Disconnected due to user request. [ 835.046390][T22829] block nbd5: shutting down sockets [ 835.064063][T22856] syzkaller0: entered promiscuous mode [ 835.078546][T22856] syzkaller0: entered allmulticast mode [ 835.123493][ T5282] 8021q: adding VLAN 0 to HW filter on device eth12 [ 835.139431][ C1] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 835.148607][ C1] Buffer I/O error on dev nbd5, logical block 0, async page read [ 835.156442][ C1] Buffer I/O error on dev nbd5, logical block 1, async page read [ 835.164339][ C1] Buffer I/O error on dev nbd5, logical block 2, async page read [ 835.172169][ C1] Buffer I/O error on dev nbd5, logical block 3, async page read [ 835.180299][T22864] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 835.190399][T22864] Buffer I/O error on dev nbd5, logical block 0, async page read [ 835.198451][T22864] Buffer I/O error on dev nbd5, logical block 1, async page read [ 835.206329][T22864] Buffer I/O error on dev nbd5, logical block 2, async page read [ 835.214506][T22864] Buffer I/O error on dev nbd5, logical block 3, async page read [ 835.223598][T22864] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 835.232728][T22864] Buffer I/O error on dev nbd5, logical block 0, async page read [ 835.240675][T22864] Buffer I/O error on dev nbd5, logical block 1, async page read [ 835.248919][T22864] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 835.258595][T22864] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 835.269517][T22864] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 835.280144][T22864] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 835.289864][T22864] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 835.300057][T22864] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 835.309733][T22864] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 835.319817][T22836] ldm_validate_partition_table(): Disk read failed. [ 835.328139][T22836] Dev nbd5: unable to read RDB block 0 [ 835.335525][T22836] nbd5: unable to read partition table [ 835.346363][T22836] ldm_validate_partition_table(): Disk read failed. [ 835.354692][T22836] Dev nbd5: unable to read RDB block 0 [ 835.363161][T22836] nbd5: unable to read partition table [ 835.514839][T22141] veth0_vlan: entered promiscuous mode [ 835.551350][T22141] veth1_vlan: entered promiscuous mode [ 835.591447][T22141] veth0_macvtap: entered promiscuous mode [ 835.602528][T22141] veth1_macvtap: entered promiscuous mode [ 835.619963][T22141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 835.634262][T22141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 835.646432][ T1117] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.660704][ T1117] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.676276][ T1117] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.685594][ T1117] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.706307][T22141] ieee80211 phy28: Selected rate control algorithm 'minstrel_ht' [ 835.724489][ T3339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.726100][T22141] ieee80211 phy29: Selected rate control algorithm 'minstrel_ht' [ 835.740096][ T3339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.760494][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.770931][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.409212][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!