last executing test programs: 5.890994402s ago: executing program 3 (id=10927): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000080)=0x5, 0x2) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000180)) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000001c0)={0x1, 0x1, 0x2, 0x4, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) bind$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r5, 0x0, 0xffffffff000) recvmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/146, 0x92}], 0x1}, 0x9}], 0x1, 0x2, 0x0) bind$bt_sco(r0, &(0x7f00000001c0), 0x37) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x1}, 0x20) unshare(0x4020600) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x11e, 0x5, 0x0, 0x0) 5.548127531s ago: executing program 1 (id=10932): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) 5.340580499s ago: executing program 1 (id=10935): r0 = socket$nl_route(0x10, 0x3, 0x0) poll(&(0x7f0000000000)=[{r0, 0x40}], 0x1, 0x4) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r1, &(0x7f0000000100)='reno\x00', 0x5) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7c, 0x0, 0x0, 0xffffffff}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x4, 0x8, 0x1, 0x9, 0x7fffffff, 0xfffffff5, 0xa}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f00000012c0)=0x44fb, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) r8 = socket$kcm(0x29, 0x5, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a) sendmsg$NL80211_CMD_ADD_TX_TS(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40088c0) sendfile(r8, r9, 0x0, 0xffffffff000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x1010) syz_emit_ethernet(0x2a, 0x0, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r10, &(0x7f0000000040)="114353012008ba00000037510800", 0xe, 0x4008005, &(0x7f00000000c0)={0x11, 0xd, r11, 0x1, 0x7, 0x6, @local}, 0x14) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r6, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1}}}}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001a00010000000000fbdb5f250a808000000000a20000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000004) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x200, 0x4) 4.692630605s ago: executing program 3 (id=10938): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x110, 0xa}, {0x10, 0x110, 0x2}], 0x20}, 0xfc40) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) bind$rds(r3, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x5, 0x0}}, 0x10, &(0x7f0000001540)=[{&(0x7f0000000300)=""/98, 0x62}], 0x1, &(0x7f0000000180)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x1}, @rdma_dest={0x18, 0x114, 0x2, {0x3, 0x9}}], 0x30}, 0x4000000) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x3, 0x80}, {0x94, 0x0, 0x0, 0xffffff81}, {0x6}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:10 2', 0x1b) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0xde, 0x85, 0xfffff038}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6a8, 0x3a0, 0x3a0, 0x230, 0x4c8, 0x0, 0x5d8, 0x5d8, 0x5d8, 0x5d8, 0x5d8, 0x6, &(0x7f0000000580), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xc5}}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b3b646c379c506e83e205648a3c73050b9ad7575387a074e5d1ee348ed6a"}}, {{@ipv6={@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff, 0xffffffff, 0xff000000, 0xff000000], [0xff, 0x0, 0x0, 0xffffffff], 'pimreg\x00', 'veth0_to_hsr\x00', {0xff}, {}, 0x2, 0x1, 0x7, 0x10}, 0x0, 0x100, 0x170, 0x0, {}, [@common=@srh={{0x30}, {0x6, 0x10, 0x1, 0x5, 0x0, 0x300, 0x808}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x6, 0xff, 0x8, 0x1, 0x0, "964c73a55ed6aeafc78481772ab7e8fc4e10447d3d796fd3ac6cb3cb887fea413c6eb54f49c48c1ae0401fa2fb4831414e02fbb153db6db0b430bd31e8518c59"}}}, {{@ipv6={@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0x0, 0xffffff00, 0xff000000], [0xffffffff, 0x0, 0xff000000, 0xffffff00], '\x00', 'netpci0\x00', {0xff}, {}, 0x6, 0x7, 0x2, 0xa}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d4], 0xf, 0x2, 0x3}}, @common=@ipv6header={{0x28}, {0x2, 0x0, 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0xd}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0x0, 0xffffff00, 0x0, 0xff000000], [0x0, 0xff000000, 0xff, 0xffffffff], 'ip6_vti0\x00', 'geneve1\x00', {0xff}, {0xff}, 0x491e597b2835c6af, 0x40, 0x0, 0xc}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x9, 0xffffff61, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x708) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfdfffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmmsg$inet6(r0, &(0x7f0000000540)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x3, @loopback, 0x3}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000240)="dc", 0x1}], 0x1}}], 0x1, 0x3404c891) r7 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000000)=0xaf50, 0x4) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000040)={0x0, 0xa, 0x3, [0x2, 0x4, 0x1]}, 0xe) 3.773673068s ago: executing program 1 (id=10944): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x4000) r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V1(r2, 0x80705864, &(0x7f0000000300)) socket$kcm(0x23, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="7a0af8ff75257078bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce72d75946c2b638d91dbef661962239c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e6fff4942eb613eff289026d5045ef76d7d864409eb2dc9518a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be3cdda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed544126fabe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e022034ac81fd48f9b7314ffa730017fbd37fdb23bc26992529402a520ef67e246415a6a8ca9d4aa797a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f00000000008000000000000000000000000040000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000002900)=r4, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r8, &(0x7f0000000040)={0xa, 0xe22, 0x8000, @empty}, 0x1c) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000004c0)=@ccm_128={{0x304}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "0100009800"}, 0x28) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001380)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d7d18db747c88f6e518f0a947ee2b49e33538afa8af92347514f", 0x8a}], 0x1}, 0x20004000) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000002e00090027bd700000000000040000000443c843d0ca20f630aae349bba792001d00a198e0d95ea407ce178d7040e5b6285cc6ae39c126c0e359b49e288972017e6c24499b7b15b3bcc062b3721f9a919d43084329d61d96ae250f0e593d74d27841b62ff939d6ed30d1b572224a833c58c821048bff932f35ba63ad7c1e6409000000e0070000002d4497fbba0aba5be32a6d"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) syz_emit_ethernet(0x82, &(0x7f00000003c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x1, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @dev, {[@lsrr={0x83, 0x3}, @lsrr={0x83, 0x3, 0x90}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@local}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}, {@loopback}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x800}, {@broadcast}]}]}}}}}}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, 0x0) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r10, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x14, @local}, 0x10) 3.615110664s ago: executing program 2 (id=10948): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYRESHEX=r3, @ANYRESDEC=r3], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r4}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x3, [{0x2, 0x1, 0x3}], "44942d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "9a"}]}, {0x0, [0x2e, 0x2e]}}, 0x0, 0x44, 0x0, 0x1}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="63812bbd7000fcdbdf25030000000800010000000000280007800c00018008000100", @ANYRES32=r8, @ANYBLOB="0c00018008000100", @ANYRES32=r9], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) socket$inet6(0xa, 0x5, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x4412c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x4040) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001940)=ANY=[@ANYBLOB="40010000", @ANYRES16=r13, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r13, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000) sendmsg$NL80211_CMD_SET_STATION(r10, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r11, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x37}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x3}]}, 0x67}, 0x1, 0x0, 0x0, 0x4000020}, 0x40040) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000400)={0x0, 0x1}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000480)={r14, 0x7, 0x3}, 0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/145, 0x91}, {&(0x7f0000003800)=""/4133, 0x1025}, {&(0x7f0000000040)=""/185, 0xb9}, {&(0x7f0000000340)=""/122, 0x7a}, {&(0x7f0000000a40)=""/4093, 0xffd}, {&(0x7f0000000280)=""/65, 0x41}, {&(0x7f0000000300)=""/22, 0x16}], 0x7}, 0xd}, {{0x0, 0x0, 0x0}, 0xffff}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0x7}], 0x4, 0x40000102, 0x0) 3.369250336s ago: executing program 3 (id=10949): socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x9d) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd, 0x200cc, 0x6, 0x5}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc0000000301010200000000000000000a000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c000180140003000000000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001008800000006000340000400000c00028005000100060000000c00028005000100010000000c00198008000200", @ANYRES16=r0], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) 2.999382453s ago: executing program 2 (id=10951): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x40801}, 0x0) bind(0xffffffffffffffff, &(0x7f0000000000)=@hci={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000100)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) nanosleep(&(0x7f0000000200)={0x0, 0x10000000}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) accept4$llc(r1, &(0x7f00000000c0), &(0x7f0000000140)=0x10, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, &(0x7f0000000240)={0x80}) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000740)=""/130, &(0x7f0000000800)=0x82) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000040), &(0x7f00000000c0)=r3}, 0x20) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) recvmsg$unix(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/154, 0x9a}], 0x1}, 0x10100) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd700000000000010000000c00020002000000000000001c0007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c000180080001"], 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="021800001c000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000005000600000010000a00000000000000fc02000000000000000000000000000000000000000000000800120000000000b76b6e000000000006000000002900000000000000000000fc010000000000000000000000000000e0000001000000000000000000000000080019"], 0xe0}}, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(r8, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000425bd7000ffdbdf25600000000c009900230f00002d0000000600b1007f0000002f002a0082b805097ac5fa000008021100000007000000ff0f0000018037f4ccfcc57e8c5813ee8000000101fffffffffffffefffff706020600000600b100050000000600b100730062000600b10004000000"], 0x70}, 0x1, 0x0, 0x0, 0x81}, 0x40000) bind(r1, &(0x7f0000000300)=@generic={0xb, "0000000000000100000000000000000000000000000000000000000000000000000000000000ed0000000200000000000000000700000000000004000000000000000000000000000000000000000000000000002a0000000000000000000000000000000000000000000000000000001000"}, 0x80) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000080)) listen(r1, 0x1) 2.904533129s ago: executing program 0 (id=10952): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x32}, [], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x3c, r0, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000700)="d80000001c0081ee4e81f782db44b904021d0802010000000500f0a1180002000000000000000e120a000f0100810401a8001600200001400300000803600cfab94dcf5c049118312d655179c0420df0f820862161c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e002c2827a3aeb44009fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r5, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r6, 0x4) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x20040000) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d6163000000050004000100"], 0x70}}, 0x8004) ioctl$sock_inet6_SIOCDELRT(r7, 0x890c, &(0x7f0000000140)={@dev={0xfe, 0x80, '\x00', 0x39}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x9, 0x40, 0x80, 0x100, 0x5de0d1e1, 0x408c00b2}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r9, 0x0, 0xe6, 0x0, &(0x7f0000000500)="0600668920f8297f8f020000000000000023c36482cd284a63da5396e3f0bbd9e4a4291e0a3b5010493178323360b087712208b2e7b349c1ea2f0db3604dde622bfcc9100b9d4d120b002489126dbf10bc5c72b041260cd6c1bbb750ee6638ce4b384129b6415404bf7f651016e11791eb9e8dcb3fee12e2c185870f173ceac789b63869aa96c88e417f5265aaa029bbf9abb84416cccba3feac194d09355e65a68b7c5b5cd5252ca5dc26fc1b3ccf2261aedd0ad9084416f6e79b5db28ca0d5dcb685358eafd1002bbc5a3dac9e9b17e819e021ccff3fbe367480a069299f23c6b9719f927b", 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYBLOB="010000000000000000083b000000", @ANYRES32=r10, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x8084}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r11, 0x0) close(0x3) 2.894439198s ago: executing program 3 (id=10954): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4ea2, @empty}, 0x43) setsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f0000000040), 0x4) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="40000000400007012bad700000000000047c00000c00fc80080008"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) r3 = socket$inet6(0xa, 0x3, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0xb8, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xc3, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@RTM_GETMDB={0x18, 0x56, 0x200, 0x70bd28, 0x25dfdbfe, {0x7, r4}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x94}, 0x1000) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast2, @in=@broadcast, 0x4e22, 0xbb1a, 0x0, 0x4, 0xa}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40010}, {0x0, 0x3}, 0x9, 0x0, 0x2, 0x0, 0x2, 0x2}, {{@in=@multicast1, 0x4d8, 0x33}, 0xa, @in=@remote, 0x0, 0x0, 0x1, 0x3}}, 0xe8) socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) connect$inet6(r3, &(0x7f00000000c0), 0x1c) socket$alg(0x26, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x18}}, 0x0) recvmmsg(r5, &(0x7f0000004680)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x2c, r8, 0xa11, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4cffff090000100000000026aa33a82e9f3d0000", @ANYRES32=r11, @ANYBLOB="f0760600c16a01002c0012801100010062726964"], 0x4c}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c6) 2.754852503s ago: executing program 0 (id=10955): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket(0x2, 0x80805, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f00000001c0)) pipe(&(0x7f0000000380)) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0xa, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r2], 0xc4}}, 0x0) 2.593881046s ago: executing program 4 (id=10957): sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000240)={0xb4, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x98, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x60, 0x1b, 0x4, 0x3, 0x12, 0x2, 0xc, 0x20, 0x1, 0x18, 0x1, 0x3, 0x16]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x3, 0x6, 0x9, 0xb, 0x36, 0x30, 0xc, 0x6, 0x16, 0x2, 0x24, 0x30]}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x511a, 0x7, 0x6, 0xa3c, 0x4, 0x6, 0x3]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x36]}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8296, 0xfce2, 0x1, 0x7, 0xc, 0x1, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x9, 0xfffe, 0x9, 0x8001, 0x4, 0x101, 0xc9]}}]}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004050) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a020000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd2c, 0x25dfdbfc, {0x7, 0x0, 0x0, r2, 0x2, 0x26, 0xa}, [@NDA_LLADDR={0xa, 0x2, @multicast}, @NDA_VLAN={0x6, 0x5, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) listen(0xffffffffffffffff, 0x402) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(0x3) r4 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r4, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, 0x0, 0x40) syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x6, 0x1, 0x4, 0x2, 0xa}]}}}}}}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x0) 2.491959056s ago: executing program 2 (id=10958): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) 2.485839137s ago: executing program 0 (id=10959): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000130002000000007988cec85400fbdbdf25fc00000000000000000000000000e022524d0000000000220000000000000009"], 0xb8}}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @private=0xa010100}}, 0x80, 0x0}, 0x54890) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040a8002b", 0x33}], 0x1}, 0x200488c4) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) r2 = socket(0x40000000015, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r5, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000010) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r8, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="05000400"], 0x10) connect$inet6(r2, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x1d8, 0xc8, 0x8, 0x1d8, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @mcast1, [0xffffff00, 0xff, 0xff], [0x0, 0xff000000, 0xff], 'pimreg\x00', 'wlan0\x00', {}, {}, 0x2c, 0x1, 0x1, 0x51}, 0x0, 0x168, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x8, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3274e082555f6722282f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5000000000800", 0x1, 0x1, {0xfffffffffffffffe}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x0, 0x3, 'pptp\x00', {0x100000000}}}}, {{@ipv6={@remote, @mcast1, [0xff000000, 0x100000100], [], 'macvtap0\x00', 'macsec0\x00', {}, {}, 0x87}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0xffffffff, 0x0, 'netbios-ns\x00', 'syz0\x00', {0xd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffc}}}}, 0x3f0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r10) sendmsg$TIPC_NL_MEDIA_SET(r10, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001880)={0x34, r11, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4020}, 0x8084) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 2.266152638s ago: executing program 4 (id=10960): r0 = socket(0x2b, 0x80801, 0x1) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x92, 0x20000004, 0x7, 0xffeffffc}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x4}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c800) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, 0x0, 0x2000000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b, 0x22002}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x48}}, 0x40800) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r6 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}, {0x4}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xfc, 0x200, 0xa, 0x0, 0x0, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x9, 0x81, 0x8, 0x3, 0x3, 0x9, 0xc6}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008814}, 0x20000040) syz_emit_ethernet(0xfdef, &(0x7f00000001c0)={@random="659b3dfadf01", @link_local, @void, {@llc={0x4, {@llc={0x0, 0x0, "af", "dd"}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_pressure(r7, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r8, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000041401002cbd7000fbdbdf25080001000100000011c960947fbf13f519d5933eade8254efa94b68d93da9e8fdd63bb3da197c724bbff836a1b5907779503c0797e86d31a4d146d40d0f907baa224f6c1c3e80225fc55f4b3babaa1407e7f335ba4217f9da1eb9a290efc22eb5cec3ba89d80820bc6ff"], 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x1, 0x6c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.224196809s ago: executing program 2 (id=10961): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="18020000740400000000000000000000850000004100000085000000a00000009500000000000000093d93a89b0d5300f7d8abf610696bba2613b94a178ba4ba6e41b102c66fe4a76227a014e6f0ff24dc1e41178d227acc91e37241ff36da6c2905141beb0aa7bbdfb87bacc5bbf58d96a92eb59372d01d30ea19917f18a29f33fd47f06db7ac166e5cd1e1132d84c3494febe5c752aa2a7481cc1671a211c9c4b8a7186bea83e1aa5a57ed85545ccc43bd9ed6fad98c9ba364c7e1ecd852339f2a866f419eb6e9165914f95d5d60e1e45538fec3f19d"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f00000000c0)={0x4, 0x746, 0x3, 0x3, 0xfb, 0x8, 0xb}, 0xc) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r4 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast2, @in=@empty, 0x3, 0x8, 0x4e24, 0x10, 0x2, 0x180}, {0x0, 0x0, 0x2000000, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1, 0xfffffffffffffffd}, {0x1ff, 0x800000000000, 0x4, 0xbfffffffffffff7f}, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xffffffff, 0x2b}, 0xa, @in=@loopback, 0x3504, 0x4, 0x0, 0x0, 0x9, 0x6, 0x9}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) sendmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000180)="fbecb183a9cffc0ee5d1d434a494db587414a63ef7fed2175c894997b4760cede524e40ae9a937434e1756f7b60d81a7da87fa2614c509b671a7bf8557275e807e7af1c65c1860dcd7b32c", 0x4b}, {&(0x7f0000000340)="36da21ba0be270a73a76b0b2c1b08b0aa7b634bde7b42b05fff77a1bd375fa61812e0a3df2dc7fea643e6cf5ef23233fe2b752a206d9be7865e37ef0b528cde3720d51a67f20caab530191c4", 0x4c}, {&(0x7f00000006c0)="8b3e97e66c34520fa8e2a370f6233f47fa505952ceaf6714d4030cf71b06d9c227e92f4a323b6ebf087032d4498fdc03e86e62f25a610270568c2c7147975019b3fa481fe21ab4ed149068e364b45ddd86efa6b28b42f1977be3937c8b1edf121d5defd4180ca936d2169e6734570a3e713fb30c4e18c13d66b17b808cad9e8c9af357cb504fbec0bf4cb07af24b4d49049ad0b80472ce7e307a5b4892afbe4edb5ec566ae52aac0ea58afb19188f9161d0a12fba2e42b9cdbeec498cebe3698e1bdd29ebfbe8237fc0e", 0xca}, {&(0x7f00000007c0)="259c1e0da026f141b18e0c546887d455a791e379a60024c5ad2fbb", 0x1b}, {&(0x7f0000000800)="f1f90ee8d3a476eafbc79faa69937cde26a691e03e6ceed21bf980b72b9f21463b3821266ad276f81429b7f50c09b18445106c2a77a8787e813e50cb0fdc2d4b67f07fed507e5fc76d", 0x49}, {0x0}], 0x6}}], 0x1, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtfilter={0x84, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r8, {0xc}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x54, 0x5, {0x10, 0x9, 0x4, 0x10da, 0xa760, 0x0, 0x10, 0x102, [{0x1000, 0xe, 0x4, 0x9f6}, {0xdeb2, 0x3, 0x6, 0x3}, {0x1, 0xfffffffb, 0x100, 0x3ff}, {0x200, 0x3ff, 0x3, 0x4}]}}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0xfff2}, 0x24040084) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000280)='GPL\x00', 0x2, 0xda, &(0x7f00000005c0)=""/218}, 0x94) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x18050}, 0x44014) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000", @ANYRES16=r10, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r11, @ANYBLOB="10002d800a000000020202020202000004002a0040002d800a"], 0x80}}, 0x0) recvmmsg(r0, &(0x7f0000004480), 0x40000c2, 0x12, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) 2.000939693s ago: executing program 1 (id=10962): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000080)=0x5, 0x2) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000180)) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000001c0)={0x1, 0x1, 0x2, 0x4, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) bind$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) recvmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/146, 0x92}], 0x1}, 0x9}], 0x1, 0x2, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000180)=0x800003) bind$bt_sco(r0, &(0x7f00000001c0), 0x37) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x1}, 0x20) unshare(0x4020600) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x11e, 0x5, 0x0, 0x0) 1.800382079s ago: executing program 3 (id=10963): socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000083) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001300c000b400000000000000006400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000140000001100010000000000000000000100000a000000"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x248}, 0x1, 0x0, 0x0, 0x20044090}, 0x20048804) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a00000429bd7000fedbdf2507000007fe01fd0b0008000008000300", @ANYRES32=r0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4814}, 0xa0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x10000014}) r7 = socket(0x10, 0x3, 0x0) r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r8, 0x400442c9, &(0x7f0000000080)={0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}) write(r7, &(0x7f00000002c0)="2000000012005f0214f9f4070000fbe60a0000000000c5c61f33ad512e9cfc31", 0x20) recvmmsg(r7, &(0x7f00000021c0), 0x5b, 0x40, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d2, &(0x7f0000000100)) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="5753fcfffffffddbdf256b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900317400004e000000"], 0x28}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r5, r5, 0xd, 0x0, 0x0, 0x9, 0x1, 0x16c0, 0x5505, 0x8b, 0x1, 0x9, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) 1.631093741s ago: executing program 4 (id=10964): socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x9d) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd, 0x200cc, 0x6, 0x5}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc0000000301010200000000000000000a000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c000180140003000000000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001008800000006000340000400000c00028005000100060000000c00028005000100010000000c00198008000200", @ANYRES16=r0], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) 1.113647556s ago: executing program 4 (id=10965): socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000fbff27bd7002fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14100400040004001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 949.631211ms ago: executing program 2 (id=10966): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20004810) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 945.839774ms ago: executing program 0 (id=10967): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fc2b0000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x400000000010, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b000000000000"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 834.76971ms ago: executing program 1 (id=10968): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000100)={0x48, r1, 0x1, 0x0, 0x300, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x4}]}]}]}, 0x48}}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x40010) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffb, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}, @IFLA_GRE_TOS={0x5, 0x9, 0x7}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x68, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}, @TCA_STAB={0x20, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x68}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'sit0\x00', &(0x7f00000003c0)={'tunl0\x00', 0x0, 0x20, 0x1, 0x10000, 0xe4, {{0x2d, 0x4, 0x2, 0x1a, 0xb4, 0x65, 0x0, 0x1, 0x2f, 0x0, @private=0xa010101, @multicast2, {[@cipso={0x86, 0x16, 0x3, [{0x1, 0x10, "5a74cf29596544d626653300f389"}]}, @timestamp_prespec={0x44, 0x34, 0x31, 0x3, 0x6, [{@remote, 0x12}, {@broadcast, 0x1}, {@private=0xa010102, 0x8}, {@empty, 0x4}, {@local, 0xae5}, {@loopback, 0x101}]}, @timestamp_addr={0x44, 0x44, 0x1c, 0x1, 0x4, [{@broadcast, 0x1}, {@remote, 0x1}, {@broadcast, 0x5}, {@broadcast, 0x3ff}, {@local, 0x7}, {@rand_addr=0x64010100, 0x5122}, {@multicast1, 0x103}, {@multicast2, 0xffffd8d3}]}, @generic={0x88, 0xa, "6856e169c34a5528"}, @generic={0x7, 0x7, "ad7c416de0"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x0, 0xc, 0x9, 0x348e, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, 0x7, 0x20, 0x6e5e, 0x2}}) r12 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000002600)={0x0, @in6={{0xa, 0x4e20, 0x8, @local}}}, &(0x7f00000026c0)=0x84) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=@newqdisc={0x38, 0x24, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0x0, 0x9}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f0000000680)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x8, 0x8, 0x0, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x700, 0x81, 0xff}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback, 0x0}, &(0x7f0000000780)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000dc0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d80)={&(0x7f00000007c0)={0x4ac, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x905d}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}]}}, {{0x8}, {0x200, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x6, 0xf9, 0x7, 0x8}, {0x8, 0xb, 0x1}, {0x9, 0x81, 0x8, 0x1ac}, {0x6, 0xf1, 0x3, 0x400}, {0x8001, 0xfe, 0x1, 0x3}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x28}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r15}}}]}}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x40004}, 0x800) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000280), 0x3) 569.867053ms ago: executing program 2 (id=10969): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000240)="a85751ad519b201965da2ebcc4898c7f46cb0819b38bbf504fd2617bf9689f2cdbe63959901f5afb841befbb8787b77bc6855e836e2c277f600c31ff7ea5acf0a9525fa1c161d06b23b802aaf4716846d96af1654995ec32db50c7e0", 0x5c}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0xa82a02e4010a08bd}, "1a01c783a8bc563d", "e9a0bd986e338531d1157bc12d1fc364fdbaaa4d2954c1166835dbbe78286228", "0400d8c7"}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r2, &(0x7f00000002c0)=ANY=[], 0x33) sendfile(r2, r1, 0x0, 0x10000) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, 0x0, 0x4000800) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000005000000b7040000010000"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x89f6, &(0x7f0000000080)={'bridge0\x00', 0x0}) r5 = openat$cgroup_ro(r3, &(0x7f0000000100)='freezer.self_freezing\x00', 0x0, 0x0) readv(r5, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001780)={'tunl0\x00', &(0x7f0000000700)={'syztnl2\x00', 0x0, 0x8000, 0x7, 0xb, 0x80000001, {{0x6, 0x4, 0x0, 0x9, 0x18, 0x65, 0x0, 0xf, 0x4, 0x0, @private=0xa010101, @multicast1, {[@generic={0x4f, 0x2}]}}}}}) r7 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r7, 0x1, 0x3}, 0x5f) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x11, &(0x7f0000000580)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @generic={0x6, 0x2, 0x2, 0x3, 0x6}, @jmp={0x5, 0x1, 0x2, 0x5, 0x3, 0xffffffffffffffbe, 0x8}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}], &(0x7f0000000640)='GPL\x00', 0x3, 0x7f, &(0x7f0000000680)=""/127, 0x41100, 0x20, '\x00', r6, 0x25, r7, 0x8, &(0x7f00000017c0)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x2c7}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000000)='GPL\x00', 0x3, 0xfed, &(0x7f0000000780)=""/4077, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x58}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 569.402958ms ago: executing program 4 (id=10970): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x1e01}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty=0x98, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) 516.636689ms ago: executing program 0 (id=10971): sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000240)={0xb4, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x98, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x60, 0x1b, 0x4, 0x3, 0x12, 0x2, 0xc, 0x20, 0x1, 0x18, 0x1, 0x3, 0x16]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x3, 0x6, 0x9, 0xb, 0x36, 0x30, 0xc, 0x6, 0x16, 0x2, 0x24, 0x30]}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x511a, 0x7, 0x6, 0xa3c, 0x4, 0x6, 0x3]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x36]}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8296, 0xfce2, 0x1, 0x7, 0xc, 0x1, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x9, 0xfffe, 0x9, 0x8001, 0x4, 0x101, 0xc9]}}]}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004050) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a020000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvtap0\x00'}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) listen(r2, 0x402) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(0x3) r4 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r4, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, 0x0, 0x40) syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x6, 0x1, 0x4, 0x2, 0xa}]}}}}}}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x0) 316.715222ms ago: executing program 0 (id=10972): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r0, &(0x7f0000000100), 0x0}, 0x20) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x6, 0xfffffffffffffffe, 0xfffffffffffffffc}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r3, @ANYBLOB="0100000002"], 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000680)={r4, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000702000000b0ffb0bc26100000000000bf672000000000001602000000b0ffb06702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x48) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x7800, 0x80, 0x4, 0x9, {{0x6, 0x4, 0x3, 0x3c, 0x18, 0x68, 0x0, 0xb4, 0x29, 0x0, @empty, @local, {[@end]}}}}}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r2, 0x0, 0x4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "41b57012b47bc8e8d8e3484d9c5998b3"}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x8, 0x1a95, 0x88ad, 0x2, 0x7, 0x2752}}, {0x4}}]}]}, 0x6c}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {0x0, 0xff}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) socket$key(0xf, 0x3, 0x2) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000003f000500000000000000000002000000000000000f0001006f76732d73797374656d"], 0x34}}, 0x0) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000440)={&(0x7f0000000140), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd7000ffdbdf25210000000c000500000000000000000009001f00706879310000000009001f007068793200000000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r9 = socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80805, 0x0) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000500)=0x5) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'dummy0\x00'}) r10 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r10, 0x89a3, &(0x7f0000000200)='bridge0\x00') 310.510089ms ago: executing program 4 (id=10973): socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000004c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r5, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x41) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r7, 0x411, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00'}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r9, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f0000000200)={0xa, 0xfffa, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f00000000c0)={0xfd, 0x0, 0xfe, 0x80, 0x1, 0x7, 0x6, 0xfe, 0x0, 0x7, 0x0, 0x8, 0x2, 0xf2}, 0xe) shutdown(r9, 0x1) ioctl$sock_SIOCINQ(r9, 0x541b, &(0x7f0000000680)) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x1d, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x58, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) 210.021623ms ago: executing program 3 (id=10974): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$kcm(0x2a, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, &(0x7f0000000080)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000002f00090024bd7000000000000500000014000a"], 0x28}}, 0x84) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmmsg(r2, &(0x7f000000b640)=[{{0x0, 0x0, 0x0}, 0xffff6108}], 0x1, 0x2100, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x20048040) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r4, 0x891b, 0x0) recvfrom$inet(r3, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000045}, 0x40046) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000540)=""/120, 0x78}], 0x1}, 0x2001) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) close(0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601"], 0x1c}}, 0x80) 0s ago: executing program 1 (id=10975): socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x9d) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd, 0x200cc, 0x6, 0x5}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc0000000301010200000000000000000a000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c000180140003000000000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001008800000006000340000400000c00028005000100060000000c00028005000100010000000c00198008000200", @ANYRES16=r0], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) kernel console output (not intermixed with test programs): bytes leftover after parsing attributes in process `syz.2.9990'. [ 821.111869][T31585] netlink: 164 bytes leftover after parsing attributes in process `syz.4.9992'. [ 821.140569][T31587] netlink: 'syz.2.9993': attribute type 2 has an invalid length. [ 821.491937][T31599] tipc: Resetting bearer [ 821.585293][T31599] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 821.605678][T31599] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 821.724598][T31599] veth15: left promiscuous mode [ 822.083901][T31609] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 823.145812][ C0] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 824.185701][ C0] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 825.269075][T31669] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 825.269123][T31669] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 825.269721][T31669] tipc: Resetting bearer [ 825.308962][T31674] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10004'. [ 825.881608][T31698] netlink: 244 bytes leftover after parsing attributes in process `syz.4.10010'. [ 825.892951][T31698] netlink: 'syz.4.10010': attribute type 1 has an invalid length. [ 825.955279][T31698] 8021q: adding VLAN 0 to HW filter on device bond13 [ 826.396246][T31717] netlink: 'syz.1.10014': attribute type 32 has an invalid length. [ 826.581415][T31726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10015'. [ 826.964353][T31739] syzkaller0: entered promiscuous mode [ 826.971739][T31739] syzkaller0: entered allmulticast mode [ 826.984254][T31738] netlink: 'syz.2.10018': attribute type 1 has an invalid length. [ 826.984290][T31738] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10018'. [ 827.434155][T31761] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10023'. [ 827.492456][T31758] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 827.492507][T31758] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 827.798507][T31774] netlink: 'syz.0.10027': attribute type 32 has an invalid length. [ 827.798544][T31774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10027'. [ 827.798586][T31774] bond0: option coupled_control: mode dependency failed, not supported in mode balance-alb(6) [ 827.851819][T31777] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10028'. [ 828.412618][T31767] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10025'. [ 828.412662][T31767] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10025'. [ 828.412694][T31767] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10025'. [ 828.461859][T31809] 8021q: adding VLAN 0 to HW filter on device team0 [ 828.498733][T31809] tipc: Resetting bearer [ 828.521051][T31809] veth1_vlan: left promiscuous mode [ 828.528330][T31809] veth0_vlan: left promiscuous mode [ 828.536664][T31809] veth0_vlan: entered promiscuous mode [ 828.545095][T31809] veth1_vlan: entered promiscuous mode [ 828.568763][T31809] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 828.576956][T31809] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 828.584799][T31809] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 828.601464][T31809] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 828.612213][T31809] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 828.620254][T31809] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 828.631292][T31809] tipc: Resetting bearer [ 828.638825][T31809] tipc: Resetting bearer [ 828.646670][T31809] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 828.657016][T31809] 8021q: adding VLAN 0 to HW filter on device bond1 [ 828.665949][ T260] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.666061][ T260] bridge0: port 1(bridge_slave_0) entered listening state [ 828.682768][ T260] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.682883][ T260] bridge0: port 2(bridge_slave_1) entered listening state [ 829.055773][T28937] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 829.055820][T28937] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.063059][T28937] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 829.063086][T28937] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.063120][T28937] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 829.063149][T28937] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.063180][T28937] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 829.063201][T28937] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.170192][T31823] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10039'. [ 829.220703][T31829] IPVS: ip_vs_add_dest(): server weight less than zero [ 829.273551][T31831] syzkaller0: create flow: hash 2353063588 index 0 [ 829.321415][T31832] IPVS: rr: UDP 127.0.0.1:10000 - no destination available [ 829.361067][T31830] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 829.361123][T31830] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 829.361443][T31830] bridge2: left promiscuous mode [ 829.364320][T31830] bond3: left allmulticast mode [ 829.369524][T31830] bond7: left allmulticast mode [ 829.372352][T31830] macvlan0: left promiscuous mode [ 829.372369][T31830] macvlan0: left allmulticast mode [ 829.372912][T31830] bond12: left promiscuous mode [ 829.373022][T31830] macvtap1: left allmulticast mode [ 829.373159][T31830] bond13: left promiscuous mode [ 829.373171][T31830] bridge7: left promiscuous mode [ 829.373301][T31830] bridge8: left promiscuous mode [ 829.373438][T31830] bridge9: left promiscuous mode [ 829.382193][T31830] bond13: left allmulticast mode [ 829.382209][T31830] bridge7: left allmulticast mode [ 829.382223][T31830] bridge8: left allmulticast mode [ 829.382235][T31830] bridge9: left allmulticast mode [ 829.383035][T31830] veth27: left allmulticast mode [ 829.383183][T31830] vlan0: left promiscuous mode [ 829.383194][T31830] bond15: left promiscuous mode [ 829.383205][T31830] bridge10: left promiscuous mode [ 829.383461][T31830] vlan0: left allmulticast mode [ 829.383472][T31830] bond15: left allmulticast mode [ 829.383482][T31830] bridge10: left allmulticast mode [ 829.393800][T31830] veth29: left allmulticast mode [ 829.517406][T31823] syzkaller0 (unregistered): delete flow: hash 2353063588 index 0 [ 829.627511][T31834] xt_bpf: check failed: parse error [ 829.680311][T31834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 829.709230][T31834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 829.912095][T31849] netlink: 'syz.2.10048': attribute type 1 has an invalid length. [ 830.031345][T31854] bond19: (slave bridge11): Enslaving as a backup interface with an up link [ 830.941627][T31886] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10056'. [ 831.112159][T31888] macsec2: entered allmulticast mode [ 831.117671][T31888] veth1_macvtap: entered allmulticast mode [ 831.139510][T31888] veth1_macvtap: left allmulticast mode [ 831.675566][T31900] vlan1: entered promiscuous mode [ 831.682511][T31900] vlan1: entered allmulticast mode [ 831.688641][T31900] hsr0: entered allmulticast mode [ 831.694119][T31900] hsr_slave_0: entered allmulticast mode [ 831.694138][T31900] hsr_slave_1: entered allmulticast mode [ 831.709354][T31896] netlink: 'syz.0.10059': attribute type 16 has an invalid length. [ 831.709385][T31896] netlink: 'syz.0.10059': attribute type 17 has an invalid length. [ 831.745394][ T5615] block nbd11: Receive control failed (result -32) [ 831.753021][T24917] block nbd11: Receive control failed (result -32) [ 831.916028][T31896] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 831.916059][T31896] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 831.916306][T31896] tipc: Resetting bearer [ 831.916433][T31896] tipc: Resetting bearer [ 831.935473][T31896] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 831.937527][T31903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10061'. [ 831.955229][T31896] 8021q: adding VLAN 0 to HW filter on device bond2 [ 831.975965][T31896] 8021q: adding VLAN 0 to HW filter on device bond3 [ 831.984834][T31896] 8021q: adding VLAN 0 to HW filter on device bond4 [ 831.996136][T31896] 8021q: adding VLAN 0 to HW filter on device bond5 [ 832.009936][T31896] 8021q: adding VLAN 0 to HW filter on device bond6 [ 832.018260][T31896] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 832.059347][T31896] 8021q: adding VLAN 0 to HW filter on device bond7 [ 832.134025][T31896] 8021q: adding VLAN 0 to HW filter on device bond8 [ 832.144603][T31896] 8021q: adding VLAN 0 to HW filter on device bond9 [ 832.153715][T31896] 8021q: adding VLAN 0 to HW filter on device bond10 [ 832.163186][T31896] 8021q: adding VLAN 0 to HW filter on device bond11 [ 832.181597][T31896] 8021q: adding VLAN 0 to HW filter on device bond12 [ 832.248255][T31896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 832.279522][T31896] 8021q: adding VLAN 0 to HW filter on device bond13 [ 832.300035][T31896] 8021q: adding VLAN 0 to HW filter on device bond14 [ 832.491670][T31896] 8021q: adding VLAN 0 to HW filter on device bond15 [ 832.494998][T31896] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 832.499377][T31896] 8021q: adding VLAN 0 to HW filter on device bond16 [ 832.500698][T31896] 8021q: adding VLAN 0 to HW filter on device bond17 [ 832.501755][T31896] 8021q: adding VLAN 0 to HW filter on device bond18 [ 832.503047][T31896] 8021q: adding VLAN 0 to HW filter on device bond19 [ 832.559514][T31896] 8021q: adding VLAN 0 to HW filter on device bond20 [ 832.578787][T31896] 8021q: adding VLAN 0 to HW filter on device bond21 [ 832.599799][T31896] 8021q: adding VLAN 0 to HW filter on device bond22 [ 832.609152][T31896] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 832.618770][T31896] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 832.724835][T31896] 8021q: adding VLAN 0 to HW filter on device bond23 [ 832.735548][T17766] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 832.736130][T17766] bridge6: entered promiscuous mode [ 832.797393][T28937] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 832.799172][T28937] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 832.826680][ T5787] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 832.846257][ T5787] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 832.893166][T29524] bridge7: port 1(veth19) entered blocking state [ 832.893286][T29524] bridge7: port 1(veth19) entered forwarding state [ 832.902399][T29524] bridge7: port 2(veth21) entered blocking state [ 832.902493][T29524] bridge7: port 2(veth21) entered forwarding state [ 833.018332][T31914] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 833.018402][T31914] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 833.018812][T31915] tipc: Started in network mode [ 833.018825][T31915] tipc: Node identity , cluster identity 4711 [ 833.018836][T31915] tipc: Failed to obtain node identity [ 833.018868][T31915] tipc: Enabling of bearer rejected, failed to enable media [ 833.040560][T10305] bond21: (slave veth17): link status definitely up, 10000 Mbps full duplex [ 833.042651][T10305] bond21: (slave veth17): making interface the new active one [ 833.063573][T10305] bond21: active interface up! [ 833.327597][ T5787] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 833.372781][T31927] lo speed is unknown, defaulting to 1000 [ 833.482525][T31936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10069'. [ 833.756686][T31941] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10064'. [ 833.756732][T31941] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10064'. [ 833.756749][T31941] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10064'. [ 834.216467][T31953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10071'. [ 834.316717][T31956] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig [ 834.381218][T31960] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 834.381266][T31960] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 834.387436][T31956] tipc: Enabling of bearer rejected, already enabled [ 834.490395][T31963] netlink: 72 bytes leftover after parsing attributes in process `syz.3.10074'. [ 835.444979][T31982] netlink: 'syz.3.10079': attribute type 10 has an invalid length. [ 835.496940][T31974] smbdirect: ib_dev[syz_device_name_32_chars_1234567] removed [ 835.675149][T31989] tipc: Enabling of bearer rejected, already enabled [ 835.675499][T31990] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 835.675522][T31990] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 835.676134][T31990] tipc: Resetting bearer [ 835.686911][T31989] tipc: Resetting bearer [ 835.929887][T32009] netlink: zone id is out of range [ 835.929930][T32009] netlink: zone id is out of range [ 835.930215][T32009] netlink: zone id is out of range [ 835.930224][T32009] netlink: zone id is out of range [ 835.930247][T32009] netlink: zone id is out of range [ 835.930255][T32009] netlink: zone id is out of range [ 835.930261][T32009] netlink: zone id is out of range [ 835.930268][T32009] netlink: zone id is out of range [ 835.930275][T32009] netlink: zone id is out of range [ 835.930282][T32009] netlink: set zone limit has 4 unknown bytes [ 836.049248][T32016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10083'. [ 836.091727][T32012] macsec2: entered allmulticast mode [ 836.091762][T32012] veth1_macvtap: entered allmulticast mode [ 836.104551][T32012] veth1_macvtap: left allmulticast mode [ 836.284747][T32025] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 836.284786][T32025] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 836.442314][T32029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10088'. [ 836.501690][ T52] block nbd12: Receive control failed (result -32) [ 836.513847][ T5615] block nbd12: Receive control failed (result -32) [ 836.673273][T32036] netlink: 1347 bytes leftover after parsing attributes in process `syz.1.10089'. [ 836.807787][T32038] netlink: 'syz.1.10089': attribute type 11 has an invalid length. [ 836.807832][T32038] netlink: 140 bytes leftover after parsing attributes in process `syz.1.10089'. [ 836.975847][T32047] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10091'. [ 837.063074][T32043] tipc: Enabled bearer , priority 10 [ 837.107565][T32050] netlink: 'syz.2.10092': attribute type 1 has an invalid length. [ 837.146592][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 837.291390][T32050] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10092'. [ 837.324268][T32055] bond20: (slave geneve7): making interface the new active one [ 837.325220][T32055] bond20: (slave geneve7): Enslaving as an active interface with an up link [ 837.342851][T30047] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 837.343923][T30047] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 837.343963][T30047] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 837.343995][T30047] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 837.351659][T32050] 8021q: adding VLAN 0 to HW filter on device bond20 [ 837.634166][T32050] tipc: Resetting bearer [ 837.651908][T32061] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10094'. [ 837.670031][T32061] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10094'. [ 838.107259][ C1] bridge0: port 3(batadv1) entered learning state [ 838.581949][T32097] tipc: Resetting bearer [ 838.746158][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 838.746335][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 838.854603][T32097] tipc: Resetting bearer [ 838.912946][T32097] tipc: Resetting bearer [ 839.611232][T32117] netlink: 'syz.3.10111': attribute type 1 has an invalid length. [ 839.770644][T32117] bond17: (slave geneve3): making interface the new active one [ 839.780659][T32122] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10111'. [ 839.789855][T32117] bond17: (slave geneve3): Enslaving as an active interface with an up link [ 839.791507][T10306] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 839.800349][T32122] 8021q: adding VLAN 0 to HW filter on device bond17 [ 839.815930][T10306] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 839.815969][T10306] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 839.816028][T10306] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 840.190574][T32135] netlink: 570 bytes leftover after parsing attributes in process `syz.3.10117'. [ 840.211157][T32131] netlink: 'syz.1.10115': attribute type 1 has an invalid length. [ 840.241858][T32131] 8021q: adding VLAN 0 to HW filter on device bond15 [ 840.269811][T32131] ip6gretap0: left promiscuous mode [ 840.297386][T32131] bond15: (slave ip6gretap0): making interface the new active one [ 840.328037][T32131] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 840.328183][T32131] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 840.371288][T32131] bond15: (slave ip6gretap0): Enslaving as an active interface with an up link [ 841.048578][T32163] netlink: 'syz.0.10128': attribute type 1 has an invalid length. [ 841.237461][T32172] __nla_validate_parse: 5 callbacks suppressed [ 841.239887][T32172] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10128'. [ 841.256028][T32164] net_ratelimit: 4 callbacks suppressed [ 841.256070][T32164] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 841.280827][T32163] bond24: (slave geneve3): making interface the new active one [ 841.296615][T32163] bond24: (slave geneve3): Enslaving as an active interface with an up link [ 841.345990][T20395] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 841.507106][T32172] 8021q: adding VLAN 0 to HW filter on device bond24 [ 841.658053][T32163] tipc: Resetting bearer [ 841.832363][T32163] tipc: Resetting bearer [ 841.833515][T32163] tipc: Resetting bearer [ 841.938503][T32182] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10131'. [ 841.956616][ T5787] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 842.108117][T24917] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 842.386095][T20394] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 842.386187][T20394] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 842.386236][T20394] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 842.386271][T20394] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 842.426593][T24917] Bluetooth: hci4: command 0x0405 tx timeout [ 842.448665][ T1167] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 842.516452][ T9] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 843.031031][T32210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10139'. [ 843.287913][T32217] §: renamed from sit0 (while UP) [ 843.528919][T32226] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10142'. [ 843.570956][ T59] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 843.580672][T32228] netlink: 'syz.4.10144': attribute type 2 has an invalid length. [ 843.866135][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 843.866311][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 843.916197][T32233] tc_dump_action: action bad kind [ 844.352599][T32249] x_tables: duplicate underflow at hook 1 [ 844.688778][ T59] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 845.285494][T32276] tipc: Enabling of bearer rejected, already enabled [ 845.308898][T32276] syzkaller0: mtu less than device minimum [ 845.796667][ T1149] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 846.082890][T32314] Bluetooth: hci0: unsupported parameter 5135 [ 846.089162][T32314] Bluetooth: hci0: invalid len left 4, exp >= 20 [ 846.130562][T20394] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 846.168611][T32307] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 846.428344][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 846.493179][T32321] netlink: 'syz.0.10170': attribute type 4 has an invalid length. [ 846.563967][T32323] netlink: 'syz.1.10171': attribute type 10 has an invalid length. [ 846.622033][T32323] team0 (unregistering): Port device netdevsim1 removed [ 846.676862][T32326] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10171'. [ 846.690481][T32326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10171'. [ 846.917665][T20394] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 846.928219][T32337] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 846.935768][T32337] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 846.961328][T32335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10174'. [ 846.961381][T32335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10174'. [ 847.435801][T32351] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 847.435848][T32351] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 847.813754][T32361] xt_hashlimit: size too large, truncated to 1048576 [ 847.908099][T32365] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.966168][T32365] bridge_slave_0 (unregistering): left allmulticast mode [ 847.973428][T32365] bridge_slave_0 (unregistering): left promiscuous mode [ 847.980755][T32365] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.016963][T10305] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 848.050697][T32366] tipc: Enabling of bearer rejected, already enabled [ 848.232021][T32377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10188'. [ 848.243687][T32375] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10187'. [ 848.713433][T32393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10192'. [ 848.720685][T32393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10192'. [ 849.125895][T10305] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 849.314643][ T59] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 849.429296][T32412] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 850.170351][T32437] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10203'. [ 850.271092][T12620] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 851.407653][T10306] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 851.602659][T32463] netlink: 'syz.2.10212': attribute type 29 has an invalid length. [ 851.602702][T32463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10212'. [ 851.603584][T32463] netlink: 'syz.2.10212': attribute type 29 has an invalid length. [ 851.919677][T32472] __nla_validate_parse: 1 callbacks suppressed [ 851.926435][T32472] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10215'. [ 852.160483][T32481] syzkaller0: left promiscuous mode [ 852.166059][T32481] syzkaller0: left allmulticast mode [ 852.173264][T32481] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 852.264153][T32487] netlink: Invalid conntrack helper [ 852.264206][T32487] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 852.537338][T12620] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 852.714908][T32507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10225'. [ 853.024158][T32514] netlink: 'syz.0.10226': attribute type 61 has an invalid length. [ 853.313926][T32517] xt_CT: No such helper "snmp_trap" [ 853.315477][T32524] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10230'. [ 853.602247][T32533] netlink: 'syz.1.10234': attribute type 12 has an invalid length. [ 853.604666][T32533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10234'. [ 853.611512][T32533] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10234'. [ 853.655884][T20394] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 853.754565][T32532] netlink: 'syz.3.10235': attribute type 4 has an invalid length. [ 854.307727][T32561] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10239'. [ 854.632776][T32576] tipc: Enabled bearer , priority 10 [ 854.759711][T32570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10242'. [ 854.771208][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 854.902597][T32585] ip_tables: iptables: counters copy to user failed while replacing table [ 855.115008][T32586] macsec1: entered allmulticast mode [ 855.115046][T32586] veth1_macvtap: entered allmulticast mode [ 855.146126][T32586] veth1_macvtap: left allmulticast mode [ 855.197821][T32562] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 855.305276][T32591] block nbd0: Unsupported socket: should be TCP or UNIX. [ 855.392290][ T52] block nbd13: Receive control failed (result -32) [ 855.394941][T24917] block nbd13: Receive control failed (result -32) [ 855.692759][T32600] ip_tables: iptables: counters copy to user failed while replacing table [ 855.877020][T10305] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 856.044876][T32593] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.507073][T32593] tipc: Resetting bearer [ 856.914459][T32622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10254'. [ 856.914514][T32622] netlink: 'syz.2.10254': attribute type 32 has an invalid length. [ 856.914527][T32622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10254'. [ 856.965157][T32593] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 856.966604][T32623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10254'. [ 856.972533][T32593] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 856.986092][T10305] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 857.964251][T32593] bridge7: port 2(veth21) entered disabled state [ 857.964442][T32593] bridge7: port 1(veth19) entered disabled state [ 858.079439][ T1167] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 858.088559][ T1167] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.088582][ T59] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 858.105285][ T1167] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 858.129903][ T1149] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 858.138975][ T1149] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.148032][ T1149] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 858.212972][T32622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10254'. [ 858.223702][T32622] netlink: 'syz.2.10254': attribute type 32 has an invalid length. [ 858.231804][T32622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10254'. [ 858.317559][T32626] netlink: 564 bytes leftover after parsing attributes in process `syz.3.10256'. [ 858.481927][T20394] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 858.481977][T20394] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.482014][T20394] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 858.482046][T20394] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 858.482067][T20394] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.482088][T20394] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 858.727001][T32635] ip_tables: iptables: counters copy to user failed while replacing table [ 859.206682][T12620] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 859.284626][T32650] netlink: 'syz.0.10263': attribute type 1 has an invalid length. [ 859.494605][T32650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10263'. [ 859.513644][T32652] bond26: option arp_validate: invalid value (1048579) [ 859.523778][T32652] bond26 (unregistering): Released all slaves [ 859.664932][T32653] bond26: option arp_validate: invalid value (1048579) [ 859.700983][T32653] bond26 (unregistering): Released all slaves [ 859.751097][T32675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10267'. [ 859.774739][T32650] bridge8: entered promiscuous mode [ 859.830524][T32676] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 859.830569][T32676] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 859.905843][T32660] syzkaller0: entered promiscuous mode [ 859.905881][T32660] syzkaller0: entered allmulticast mode [ 860.099442][T32682] netlink: 52 bytes leftover after parsing attributes in process `syz.0.10269'. [ 860.210387][T32686] ip_tables: iptables: counters copy to user failed while replacing table [ 860.243201][T32688] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10272'. [ 860.246420][T32688] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10272'. [ 860.327982][ T1167] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 860.490364][T32696] v: renamed from vlan0 [ 860.772586][T32710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10278'. [ 860.873431][T32710] bridge0 (unregistering): left allmulticast mode [ 860.965315][T32717] netlink: 'syz.1.10280': attribute type 9 has an invalid length. [ 860.987774][T32717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 860.996957][T32717] netdevsim netdevsim1 netdevsim0: refused to change device tx_queue_len [ 861.426392][T20394] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 861.500311][T32729] macsec2: entered allmulticast mode [ 861.500353][T32729] veth1_macvtap: entered allmulticast mode [ 861.511911][T32729] veth1_macvtap: left allmulticast mode [ 861.576052][T32739] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:65534 [ 861.683232][T24917] block nbd14: Receive control failed (result -32) [ 861.686383][ T52] block nbd14: Receive control failed (result -32) [ 861.726678][T32739] 8021q: adding VLAN 0 to HW filter on device team0 [ 861.800287][T32739] tipc: Resetting bearer [ 861.824782][T32739] veth1_vlan: left promiscuous mode [ 861.831368][T32739] veth0_vlan: left promiscuous mode [ 861.838512][T32739] veth0_vlan: entered promiscuous mode [ 861.846696][T32739] veth1_vlan: entered promiscuous mode [ 861.865182][T32739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 861.874686][T32739] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 861.883478][T32739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 861.884578][T32739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 861.902248][T32739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 861.919480][T32739] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 861.929438][T32739] tipc: Resetting bearer [ 861.940931][T32739] tipc: Resetting bearer [ 861.941538][T32746] netlink: 'syz.4.10287': attribute type 1 has an invalid length. [ 861.947524][T32739] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 861.970412][T32739] 8021q: adding VLAN 0 to HW filter on device bond1 [ 861.974446][T32739] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 861.984646][T32739] 8021q: adding VLAN 0 to HW filter on device bond2 [ 861.998700][T32739] 8021q: adding VLAN 0 to HW filter on device bond3 [ 861.999621][T32739] 8021q: adding VLAN 0 to HW filter on device bond4 [ 862.014305][T32739] 8021q: adding VLAN 0 to HW filter on device bond5 [ 862.021445][T32746] __nla_validate_parse: 1 callbacks suppressed [ 862.021462][T32746] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10287'. [ 862.024039][T32739] 8021q: adding VLAN 0 to HW filter on device bond6 [ 862.025054][T32739] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 862.117764][T32739] 8021q: adding VLAN 0 to HW filter on device bond7 [ 862.261436][T32739] 8021q: adding VLAN 0 to HW filter on device bond8 [ 862.263623][T32739] 8021q: adding VLAN 0 to HW filter on device bond9 [ 862.264882][T32739] 8021q: adding VLAN 0 to HW filter on device bond10 [ 862.283591][T32739] 8021q: adding VLAN 0 to HW filter on device bond11 [ 862.289343][T32739] 8021q: adding VLAN 0 to HW filter on device bond12 [ 862.319856][T32739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 862.375161][T32739] 8021q: adding VLAN 0 to HW filter on device bond13 [ 862.400030][T32739] 8021q: adding VLAN 0 to HW filter on device bond14 [ 862.527539][ T1167] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 862.529813][T32739] 8021q: adding VLAN 0 to HW filter on device bond15 [ 862.532621][T32739] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 862.536324][T32739] 8021q: adding VLAN 0 to HW filter on device bond16 [ 862.539799][T32739] 8021q: adding VLAN 0 to HW filter on device bond17 [ 862.540888][T32739] 8021q: adding VLAN 0 to HW filter on device bond18 [ 862.543064][T32739] 8021q: adding VLAN 0 to HW filter on device bond19 [ 862.547354][T32739] 8021q: adding VLAN 0 to HW filter on device bond20 [ 862.550984][T32739] 8021q: adding VLAN 0 to HW filter on device bond21 [ 862.554755][T32739] 8021q: adding VLAN 0 to HW filter on device bond22 [ 862.557485][T32739] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 862.561367][T32739] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 862.563234][T32739] bridge6: left promiscuous mode [ 862.657584][T32739] 8021q: adding VLAN 0 to HW filter on device bond23 [ 862.661880][T32739] 8021q: adding VLAN 0 to HW filter on device bond24 [ 862.664790][T32739] 8021q: adding VLAN 0 to HW filter on device bond25 [ 862.667461][T30402] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 862.667677][T30402] bridge6: entered promiscuous mode [ 862.677200][T32743] lo: left promiscuous mode [ 862.677377][T32743] tunl0: left promiscuous mode [ 862.677577][T32743] gre0: left promiscuous mode [ 862.677775][T32743] erspan0: left promiscuous mode [ 862.677882][T32743] ip_vti0: left promiscuous mode [ 862.678014][T32743] ip6_vti0: left promiscuous mode [ 862.678116][T32743] sit0: left promiscuous mode [ 862.678247][T32743] ip6tnl0: left promiscuous mode [ 862.678348][T32743] ip6gre0: left promiscuous mode [ 862.678459][T32743] syz_tun: left promiscuous mode [ 862.733210][T32743] vcan0: left promiscuous mode [ 862.733375][T32743] .`: left promiscuous mode [ 862.743184][T32743] dummy0: left promiscuous mode [ 862.743450][T32743] nlmon0: left promiscuous mode [ 862.752910][T32743] veth0: left promiscuous mode [ 862.753059][T32743] veth1: left promiscuous mode [ 862.753194][T32743] wg0: left promiscuous mode [ 862.753333][T32743] wg1: left promiscuous mode [ 862.753470][T32743] wg2: left promiscuous mode [ 862.760836][T32743] veth1_to_bridge: left promiscuous mode [ 862.761021][T32743] bridge_slave_1: left promiscuous mode [ 862.761159][T32743] veth0_to_bond: left promiscuous mode [ 862.761287][T32743] bond_slave_0: left promiscuous mode [ 862.761426][T32743] veth1_to_bond: left promiscuous mode [ 862.773029][T32743] bond_slave_1: left promiscuous mode [ 862.773292][T32743] team_slave_0: left promiscuous mode [ 862.773462][T32743] C: left promiscuous mode [ 862.773596][T32743] team_slave_1: left promiscuous mode [ 862.773726][T32743] xfrm0: left promiscuous mode [ 862.773851][T32743] veth0_to_hsr: left promiscuous mode [ 862.773988][T32743] hsr_slave_0: left promiscuous mode [ 862.774126][T32743] veth1_to_hsr: left promiscuous mode [ 862.774258][T32743] hsr_slave_1: left promiscuous mode [ 862.797794][T32743] veth1_virt_wifi: left promiscuous mode [ 862.797973][T32743] veth0_virt_wifi: left promiscuous mode [ 862.798105][T32743] virt_wifi0: left promiscuous mode [ 862.800111][T32743] macvtap0: left promiscuous mode [ 862.800256][T32743] macsec0: left promiscuous mode [ 862.800366][T32743] geneve0: left promiscuous mode [ 862.800532][T32743] geneve1: left promiscuous mode [ 862.819077][T32743] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 862.841236][T32743] netdevsim netdevsim1 netdevsim1: left promiscuous mode [ 862.841389][T32743] netdevsim netdevsim1 netdevsim2: left promiscuous mode [ 862.841511][T32743] netdevsim netdevsim1 netdevsim3: left promiscuous mode [ 862.841748][T32743] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 862.841883][T32743] vxlan0: left promiscuous mode [ 862.841988][T32743] macvlan2: left promiscuous mode [ 862.843938][T32743] macvlan3: left promiscuous mode [ 862.844079][T32743] macvlan4: left promiscuous mode [ 862.844251][T32743] bridge1: left promiscuous mode [ 862.858089][T32743] macvlan5: left promiscuous mode [ 862.858275][T32743] macvlan6: left promiscuous mode [ 862.858421][T32743] macvlan7: left promiscuous mode [ 862.858565][T32743] team1: left promiscuous mode [ 862.858696][T32743] macsec1: left promiscuous mode [ 862.858802][T32743] bridge2: left promiscuous mode [ 862.858918][T32743] gre1: left promiscuous mode [ 862.859026][T32743] bridge3: left promiscuous mode [ 862.859136][T32743] bond1: left promiscuous mode [ 862.859245][T32743] sit1: left promiscuous mode [ 862.859348][T32743] bond2: left promiscuous mode [ 862.869105][T32743] gretap1: left promiscuous mode [ 862.869231][T32743] sit2: left promiscuous mode [ 862.869338][T32743] bond3: left promiscuous mode [ 862.869569][T32743] geneve2: left promiscuous mode [ 862.869670][T32743] geneve3: left promiscuous mode [ 862.869833][T32743] dummy1: left promiscuous mode [ 862.869988][T32743] ip6gre1: left promiscuous mode [ 862.870101][T32743] bond4: left promiscuous mode [ 862.870211][T32743] veth2: left promiscuous mode [ 862.870343][T32743] veth3: left promiscuous mode [ 862.882761][T32743] bridge4: left promiscuous mode [ 862.882948][T32743] macvlan8: left promiscuous mode [ 862.883096][T32743] macvlan9: left promiscuous mode [ 862.883234][T32743] bond5: left promiscuous mode [ 862.883347][T32743] ip6tnl1: left promiscuous mode [ 862.883460][T32743] bond6: left promiscuous mode [ 862.883677][T32743] gre2: left promiscuous mode [ 862.883779][T32743] veth4: left promiscuous mode [ 862.883915][T32743] veth5: left promiscuous mode [ 862.884075][T32743] ipip0: left promiscuous mode [ 862.884174][T32743] bond7: left promiscuous mode [ 862.893832][T32743] mac80211_hwsim hwsim17 wlan2: left promiscuous mode [ 862.893989][T32743] gre3: left promiscuous mode [ 862.894100][T32743] geneve4: left promiscuous mode [ 862.894237][T32743] veth6: left promiscuous mode [ 862.894467][T32743] veth7: left promiscuous mode [ 862.894600][T32743] veth8: left promiscuous mode [ 862.894734][T32743] veth9: left promiscuous mode [ 862.894898][T32743] veth10: left promiscuous mode [ 862.895033][T32743] veth11: left promiscuous mode [ 862.895165][T32743] mac80211_hwsim hwsim18 wlan3: left promiscuous mode [ 862.912744][T32743] bridge5: left promiscuous mode [ 862.912895][T32743] veth12: left promiscuous mode [ 862.913036][T32743] veth13: left promiscuous mode [ 862.913174][T32743] veth14: left promiscuous mode [ 862.913305][T32743] veth15: left promiscuous mode [ 862.913477][T32743] gre4: left promiscuous mode [ 862.913584][T32743] gtp0: left promiscuous mode [ 862.913718][T32743] bridge6: left promiscuous mode [ 862.913833][T32743] gre5: left promiscuous mode [ 862.913943][T32743] mac80211_hwsim hwsim19 wlan4: left promiscuous mode [ 862.914083][T32743] gtp1: left promiscuous mode [ 862.930107][T32743] mac80211_hwsim hwsim20 wlan5: left promiscuous mode [ 862.930261][T32743] bridge7: left promiscuous mode [ 862.930380][T32743] bridge0: left promiscuous mode [ 862.930501][T32743] bond8: left promiscuous mode [ 862.930711][T32743] vlan0: left promiscuous mode [ 862.930722][T32743] bond9: left promiscuous mode [ 862.930958][T32743] ip6gretap1: left promiscuous mode [ 862.934203][T32743] veth16: left promiscuous mode [ 862.934380][T32743] veth17: left promiscuous mode [ 862.934392][T32743] veth17: left allmulticast mode [ 862.944622][T32743] bond11: left promiscuous mode [ 862.944765][T32743] bond10: left promiscuous mode [ 862.945007][T32743] bond12: left promiscuous mode [ 862.945114][T32743] bridge8: left promiscuous mode [ 862.945225][T32743] bridge9: left promiscuous mode [ 862.945339][T32743] bond13: left promiscuous mode [ 862.945495][T32743] bond0: left promiscuous mode [ 862.952926][T32743] ipvlan0: left promiscuous mode [ 862.952944][T32743] ipvlan0: left allmulticast mode [ 862.959189][T32743] ipvlan1: left promiscuous mode [ 862.959206][T32743] ipvlan1: left allmulticast mode [ 862.959218][T32743] bond0: left allmulticast mode [ 862.959229][T32743] bridge10: left allmulticast mode [ 862.959366][T32743] bridge10: left promiscuous mode [ 862.959494][T32743] bond14: left promiscuous mode [ 863.002266][T28936] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 863.002297][T28936] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.002318][T28936] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 863.002406][T28936] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 863.002428][T28936] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.002450][T28936] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 863.002482][T28936] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 863.002503][T28936] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.002524][T28936] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 863.002555][T28936] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 863.002577][T28936] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.002598][T28936] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 863.028822][T20395] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.028938][T20395] bridge0: port 2(bridge_slave_1) entered listening state [ 863.349427][T20395] bridge7: port 1(veth19) entered blocking state [ 863.349524][T20395] bridge7: port 1(veth19) entered forwarding state [ 863.374847][T20395] bridge7: port 2(veth21) entered blocking state [ 863.374947][T20395] bridge7: port 2(veth21) entered forwarding state [ 863.648754][T32763] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10292'. [ 863.839408][T32764] bond26: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 864.000797][T32764] bond26 (unregistering): Released all slaves [ 864.089007][ T1149] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 864.098343][ T1149] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 864.116175][T13675] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 864.441062][ T321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10298'. [ 864.630473][ T321] 8021q: adding VLAN 0 to HW filter on device bond18 [ 864.908380][T17765] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 865.059290][ T337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10302'. [ 865.070474][T17765] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 865.358544][ T340] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:65534 [ 865.411032][T24917] block nbd15: Receive control failed (result -32) [ 865.417103][ T52] block nbd15: Receive control failed (result -32) [ 865.464606][ T340] 8021q: adding VLAN 0 to HW filter on device team0 [ 865.517635][T20394] bond0: (slave bond_slave_0): link status up, enabling it in 4 ms [ 865.529501][ T340] veth1_macvtap: left promiscuous mode [ 865.541541][T12620] bond0: (slave bond_slave_0): link status up, enabling it in 4 ms [ 865.545555][ T340] veth0_macvtap: left promiscuous mode [ 865.553975][ T340] veth0_macvtap: entered promiscuous mode [ 865.555134][ T340] veth1_macvtap: entered promiscuous mode [ 865.557548][T20394] bond0: (slave bond_slave_0): link status up, enabling it in 4 ms [ 865.576351][T20394] bond0: (slave bond_slave_0): link status up, enabling it in 4 ms [ 865.595834][T20395] bond0: (slave bond_slave_0): link status up, enabling it in 4 ms [ 865.596968][ T340] geneve0: entered promiscuous mode [ 865.615899][ T13] bond0: (slave bond_slave_0): link status up, enabling it in 4 ms [ 865.636769][ T12] bond0: (slave bond_slave_0): link status up, enabling it in 4 ms [ 865.652265][ T340] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 865.660034][T12620] bond0: (slave bond_slave_0): link status up, enabling it in 4 ms [ 865.669080][ T340] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 865.677806][T20394] bond0: (slave bond_slave_0): link status up, enabling it in 4 ms [ 865.697718][T20394] bond0: (slave bond_slave_0): link status up, enabling it in 4 ms [ 865.811289][ T348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10307'. [ 865.901797][T31414] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.901917][T31414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 865.907715][T31414] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.907829][T31414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 865.971702][T31414] bridge0: port 4(team0) entered blocking state [ 865.971817][T31414] bridge0: port 4(team0) entered forwarding state [ 866.008795][ T348] team0: Port device vlan5 added [ 866.088138][T20395] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.091506][T31414] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.091543][T31414] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.091573][T31414] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.113689][T10305] bridge0: port 3(vlan2) entered blocking state [ 866.113806][T10305] bridge0: port 3(vlan2) entered forwarding state [ 866.226771][T31414] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 866.243495][T31414] bond0: active interface up! [ 866.257071][ T359] netlink: 'syz.0.10310': attribute type 2 has an invalid length. [ 866.299614][ T357] tipc: Enabled bearer , priority 10 [ 866.437017][ T359] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10310'. [ 866.527315][ T365] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 866.527372][ T365] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 866.527423][ T365] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 866.670016][ T365] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 866.701768][ T367] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10311'. [ 867.196104][ T384] 0ªî{X¹¦: left promiscuous mode [ 867.223488][ T384] erspan0: left promiscuous mode [ 867.330166][ T384] ÿ: entered promiscuous mode [ 867.449972][ T384] veth1_macvtap: left promiscuous mode [ 867.470228][ T384] veth0_macvtap: left promiscuous mode [ 867.481184][ T384] veth0_macvtap: entered promiscuous mode [ 867.493272][ T384] veth1_macvtap: entered promiscuous mode [ 867.523081][ T384] 0ªî{X¹¦: entered promiscuous mode [ 867.534561][ T384] erspan0: entered promiscuous mode [ 867.578036][ T384] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 867.610447][ T384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 867.620098][ T384] 8021q: adding VLAN 0 to HW filter on device bond1 [ 867.635002][ T384] 8021q: adding VLAN 0 to HW filter on device bond2 [ 867.866653][ T1167] wlan1: Trigger new scan to find an IBSS to join [ 867.944066][ T396] lo speed is unknown, defaulting to 1000 [ 868.024630][ T396] lo speed is unknown, defaulting to 1000 [ 868.056172][ T396] lo speed is unknown, defaulting to 1000 [ 868.062055][ T396] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 868.062088][ T396] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 868.062125][ T396] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 868.075908][T28936] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.075937][T28936] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 868.076130][T28936] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.076152][T28936] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 868.076184][T28936] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.076206][T28936] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 868.076236][T28936] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.076257][T28936] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 868.091584][ T396] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 868.159544][ T415] netlink: 140 bytes leftover after parsing attributes in process `syz.3.10318'. [ 868.188051][ C1] bridge0: port 3(batadv1) entered forwarding state [ 868.188077][ C1] bridge0: topology change detected, propagating [ 868.330002][ T396] lo speed is unknown, defaulting to 1000 [ 868.347905][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 868.387523][ T396] lo speed is unknown, defaulting to 1000 [ 868.405117][ T396] lo speed is unknown, defaulting to 1000 [ 868.412786][ T396] lo speed is unknown, defaulting to 1000 [ 868.422521][ T396] lo speed is unknown, defaulting to 1000 [ 868.500292][ T426] netlink: 'syz.2.10320': attribute type 1 has an invalid length. [ 868.634458][ T430] dvmrp0: entered allmulticast mode [ 868.664049][ T430] dvmrp1: entered allmulticast mode [ 868.688733][ T430] dvmrp0: left allmulticast mode [ 868.688848][ T430] dvmrp1: left allmulticast mode [ 868.688928][ T430] syz_tun: left allmulticast mode [ 868.825748][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 868.825789][ C0] bridge0: topology change detected, propagating [ 868.827552][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 868.827572][ C0] bridge0: topology change detected, propagating [ 868.929324][ T441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10323'. [ 869.329484][ T448] syzkaller1: entered promiscuous mode [ 869.335172][ T448] syzkaller1: entered allmulticast mode [ 869.494047][ T457] tipc: Enabling of bearer rejected, already enabled [ 869.840531][ T464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10328'. [ 870.044605][ T474] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10333'. [ 870.087350][ T475] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10332'. [ 870.087393][ T475] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10332'. [ 870.087427][ T475] netlink: 'syz.2.10332': attribute type 4 has an invalid length. [ 870.260896][ T478] Bluetooth: MGMT ver 1.23 [ 870.276457][ T478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10334'. [ 870.423607][ T478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10334'. [ 870.499871][ T496] tipc: Enabling of bearer rejected, already enabled [ 870.568181][ T499] net_ratelimit: 28 callbacks suppressed [ 870.568234][ T499] ip_tables: iptables: counters copy to user failed while replacing table [ 870.594258][ T498] netlink: 830 bytes leftover after parsing attributes in process `syz.4.10340'. [ 870.603607][ T498] bond_slave_0: entered promiscuous mode [ 870.819319][ T505] netlink: 184 bytes leftover after parsing attributes in process `syz.3.10342'. [ 870.830012][T31414] wlan1: Trigger new scan to find an IBSS to join [ 873.866007][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.340967][ T13] wlan1: Creating new IBSS network, BSSID de:cd:e8:01:78:9e [ 874.489891][ T545] bridge0: port 3(batadv1) entered disabled state [ 874.490093][ T545] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.490377][ T545] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.512146][ T545] bridge0: entered allmulticast mode [ 874.526185][ T546] bond4: left allmulticast mode [ 874.526390][ T546] bond4: left promiscuous mode [ 874.527187][ T546] bridge0: port 4(bond4) entered disabled state [ 874.612711][ T546] batadv1: left allmulticast mode [ 874.618154][ T546] batadv1: left promiscuous mode [ 874.623440][ T546] bridge0: port 3(batadv1) entered disabled state [ 874.667202][ T546] bridge_slave_1: left allmulticast mode [ 874.673029][ T546] bridge_slave_1: left promiscuous mode [ 874.679164][ T546] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.699544][ T546] bridge_slave_0: left allmulticast mode [ 874.705359][ T546] bridge_slave_0: left promiscuous mode [ 874.708852][ T546] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.873743][ T559] ip_tables: iptables: counters copy to user failed while replacing table [ 875.299090][ T565] netlink: 'syz.3.10360': attribute type 6 has an invalid length. [ 875.299139][ T565] __nla_validate_parse: 3 callbacks suppressed [ 875.299166][ T565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10360'. [ 875.764958][ T590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10370'. [ 876.030910][ T595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10371'. [ 876.030969][ T595] netlink: 'syz.4.10371': attribute type 30 has an invalid length. [ 876.036060][ T595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10371'. [ 876.207726][ T600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10372'. [ 876.505812][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 877.121425][ T627] bond0: (slave veth1_to_bond): Device is not bonding slave [ 877.121465][ T627] bond0: option active_slave: invalid value (veth1_to_bond) [ 878.054640][ T647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10384'. [ 878.110481][ T648] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 878.410811][ T648] xt_CT: No such helper "netbios-ns" [ 878.431883][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 878.599851][ T647] team_slave_0 (unregistering): left promiscuous mode [ 878.618388][ T647] team0: Port device team_slave_0 removed [ 879.625959][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.782819][ T694] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 879.790586][ T694] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 879.799025][ T694] tipc: Resetting bearer [ 880.284862][ T716] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10404'. [ 880.448030][ T723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10408'. [ 880.907153][ T740] netlink: 'syz.4.10412': attribute type 1 has an invalid length. [ 880.999836][ T740] bond14: entered promiscuous mode [ 881.000263][ T740] 8021q: adding VLAN 0 to HW filter on device bond14 [ 881.092773][ T740] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10412'. [ 881.133522][ T746] 8021q: adding VLAN 0 to HW filter on device bond14 [ 881.144655][ T746] bond14: (slave gre5): The slave device specified does not support setting the MAC address [ 881.157281][ T746] bond14: (slave gre5): Setting fail_over_mac to active for active-backup mode [ 881.162519][ T746] bond14: (slave gre5): making interface the new active one [ 881.162547][ T746] gre5: entered promiscuous mode [ 881.195816][ T746] bond14: (slave gre5): Enslaving as an active interface with an up link [ 881.304389][ T740] bond14 (unregistering): (slave gre5): Releasing backup interface [ 881.304440][ T740] gre5: left promiscuous mode [ 881.367651][ T740] bond14 (unregistering): Released all slaves [ 881.541432][ T761] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10415'. [ 881.554783][ T743] netlink: 104 bytes leftover after parsing attributes in process `syz.2.10413'. [ 881.639139][ T759] tipc: Resetting bearer [ 881.645322][ T759] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 881.653018][ T759] tipc: Resetting bearer [ 881.696927][T13668] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 881.785448][ T759] A link change request failed with some changes committed already. Interface geneve4 may have been left with an inconsistent configuration, please check. [ 881.988298][ T770] openvswitch: netlink: Missing valid actions attribute. [ 881.995526][ T770] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 882.105066][ T776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10418'. [ 882.118274][ T780] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10419'. [ 882.427444][T30402] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 882.575271][ T794] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10423'. [ 882.771036][ T802] tc_dump_action: action bad kind [ 883.173166][ T814] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10428'. [ 884.054006][ T832] tipc: Resetting bearer [ 884.170221][ T832] tipc: Resetting bearer [ 884.267643][ T845] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 884.385040][ T845] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10437'. [ 884.515233][ T845] 8021q: adding VLAN 0 to HW filter on device bond14 [ 884.528263][ T856] tipc: Enabling of bearer rejected, already enabled [ 884.542451][ T854] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 884.552707][ T851] ip_tables: iptables: counters copy to user failed while replacing table [ 884.583801][ T861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10441'. [ 884.666360][ T862] netlink: 'syz.3.10440': attribute type 1 has an invalid length. [ 884.840698][ T862] 8021q: adding VLAN 0 to HW filter on device bond19 [ 884.891417][ T869] bond19: (slave geneve5): making interface the new active one [ 884.903495][ T869] bond19: (slave geneve5): Enslaving as an active interface with an up link [ 885.023125][ T877] lo speed is unknown, defaulting to 1000 [ 885.330672][ T895] netlink: 'syz.4.10448': attribute type 7 has an invalid length. [ 885.706464][ T875] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 886.103855][ T921] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 886.120510][ T912] lo speed is unknown, defaulting to 1000 [ 886.223429][ T922] dvmrp0: entered allmulticast mode [ 886.248033][ T922] dvmrp1: entered allmulticast mode [ 886.250857][ T922] dvmrp0: left allmulticast mode [ 886.250949][ T922] dvmrp1: left allmulticast mode [ 886.339076][ T933] dvmrp0: entered allmulticast mode [ 886.372422][ T937] netlink: 'syz.2.10456': attribute type 4 has an invalid length. [ 886.392739][ T933] dvmrp1: entered allmulticast mode [ 886.414738][ T933] dvmrp0: left allmulticast mode [ 886.414858][ T933] dvmrp1: left allmulticast mode [ 886.434703][ T937] openvswitch: netlink: Multiple metadata blocks provided [ 886.476818][ T937] __nla_validate_parse: 1 callbacks suppressed [ 886.476870][ T937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10456'. [ 886.476916][ T937] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10456'. [ 886.537436][ T941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10456'. [ 886.537496][ T941] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10456'. [ 886.909618][ T954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10457'. [ 887.020870][ T959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10459'. [ 887.177302][ T961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10458'. [ 887.731522][ T971] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10463'. [ 887.741144][ T977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10460'. [ 888.024063][ T990] netlink: 570 bytes leftover after parsing attributes in process `syz.0.10468'. [ 888.024130][ T990] bond_slave_0: entered promiscuous mode [ 888.061095][ T991] dvmrp0: left allmulticast mode [ 888.277247][ T994] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:65534 [ 888.313139][ T994] gretap0: left promiscuous mode [ 888.418626][ T994] 8021q: adding VLAN 0 to HW filter on device .` [ 888.453038][T31414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.484863][T31414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.538571][ T994] veth0_to_team: left promiscuous mode [ 888.593610][ T994] veth1_macvtap: left promiscuous mode [ 888.599437][ T994] veth0_macvtap: left promiscuous mode [ 888.608208][ T994] veth0_macvtap: entered promiscuous mode [ 888.620752][ T994] veth1_macvtap: entered promiscuous mode [ 888.724381][ T994] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 888.750282][ T994] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 888.766195][ T994] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 888.775123][ T994] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 888.784713][ T994] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 888.827781][ T994] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 888.828550][ T994] gretap0: entered promiscuous mode [ 888.919802][ T994] 8021q: adding VLAN 0 to HW filter on device team1 [ 888.959652][ T994] 8021q: adding VLAN 0 to HW filter on device bond1 [ 888.997354][ T994] 8021q: adding VLAN 0 to HW filter on device bond2 [ 889.026514][ T994] 8021q: adding VLAN 0 to HW filter on device bond3 [ 889.040546][ T994] 8021q: adding VLAN 0 to HW filter on device bond4 [ 889.051916][ T994] veth0_to_team: entered promiscuous mode [ 889.059836][ T994] 8021q: adding VLAN 0 to HW filter on device bond5 [ 889.094978][ T994] 8021q: adding VLAN 0 to HW filter on device bond6 [ 889.107502][ T550] bond2: (slave gretap1): link status up again after 0 ms [ 889.116309][ T994] 8021q: adding VLAN 0 to HW filter on device bond7 [ 889.125988][T10307] bond2: (slave gretap1): link status up again after 0 ms [ 889.160455][ T1516] bond2: (slave gretap1): link status up again after 0 ms [ 889.176047][ T1516] bond2: (slave gretap1): link status up again after 0 ms [ 889.196825][T10305] bond2: (slave gretap1): link status up again after 0 ms [ 889.216059][T10307] bond2: (slave gretap1): link status up again after 0 ms [ 889.236497][T10307] bond2: (slave gretap1): link status up again after 0 ms [ 889.261420][ T994] 8021q: adding VLAN 0 to HW filter on device bond8 [ 889.270229][ T994] 8021q: adding VLAN 0 to HW filter on device bond9 [ 889.282158][ T994] 8021q: adding VLAN 0 to HW filter on device bond11 [ 889.292217][ T994] 8021q: adding VLAN 0 to HW filter on device bond10 [ 889.297240][ T994] 8021q: adding VLAN 0 to HW filter on device bond12 [ 889.301458][ T994] 8021q: adding VLAN 0 to HW filter on device bond13 [ 889.326874][ T994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 889.336099][ T994] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 889.345523][ T994] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 889.355456][ T994] 8021q: adding VLAN 0 to HW filter on device bond14 [ 889.368795][T13668] lo speed is unknown, defaulting to 1000 [ 889.368844][T13668] syz_device_name_32_chars_1234567: Port: 1 Link ACTIVE [ 889.413301][T31414] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 889.413353][T31414] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.413376][T31414] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 54625 - 0 [ 889.413461][T31414] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 889.413484][T31414] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.413505][T31414] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 54625 - 0 [ 889.413544][T31414] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 889.413565][T31414] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.413586][T31414] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 54625 - 0 [ 889.417519][T31414] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 889.417549][T31414] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.417570][T31414] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 54625 - 0 [ 889.888128][ T1017] dvmrp0: entered allmulticast mode [ 889.989872][ T1017] dvmrp0: left allmulticast mode [ 890.042142][ T1013] lo speed is unknown, defaulting to 1000 [ 890.800193][ T1035] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.997749][ T1051] ÿÿÿ: entered promiscuous mode [ 891.436267][T10307] net_ratelimit: 18 callbacks suppressed [ 891.436321][T10307] bond2: (slave gretap1): failed to get link speed/duplex [ 891.546744][ T1516] bond2: (slave gretap1): failed to get link speed/duplex [ 891.576819][ T1075] netlink: 'syz.4.10487': attribute type 4 has an invalid length. [ 891.629058][ T1079] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 891.653827][ T1075] netlink: 'syz.4.10487': attribute type 4 has an invalid length. [ 891.675924][ T552] bond2: (slave gretap1): failed to get link speed/duplex [ 891.732267][ T1083] __nla_validate_parse: 6 callbacks suppressed [ 891.732325][ T1083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10489'. [ 891.789927][ T552] bond2: (slave gretap1): failed to get link speed/duplex [ 891.873821][ T1082] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 891.897801][ T12] bond2: (slave gretap1): failed to get link speed/duplex [ 891.961475][ T1077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10488'. [ 892.011687][ T550] bond2: (slave gretap1): failed to get link speed/duplex [ 892.120886][ T550] bond2: (slave gretap1): failed to get link speed/duplex [ 892.337996][ T550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.413563][ T1093] tipc: Started in network mode [ 892.413614][ T1093] tipc: Node identity 080211000001, cluster identity 4711 [ 892.413769][ T1093] tipc: Enabled bearer , priority 10 [ 892.481450][ T1098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10494'. [ 892.481565][ T1098] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10494'. [ 892.481614][ T1098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10494'. [ 892.489853][ T97] bond2: (slave gretap1): failed to get link speed/duplex [ 892.996018][ T1106] netlink: 570 bytes leftover after parsing attributes in process `syz.4.10496'. [ 893.147447][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 893.364963][ T1108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10497'. [ 893.650567][T13668] tipc: Node number set to 134418688 [ 894.288420][ T1136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10502'. [ 894.696862][ T1144] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:65534 [ 894.724124][ T1142] vlan0: entered promiscuous mode [ 894.729806][ T1142] bond0: entered promiscuous mode [ 894.744584][ T1142] vlan0: entered allmulticast mode [ 894.751324][ T1142] bond0: entered allmulticast mode [ 894.756693][ T1142] bond_slave_0: entered allmulticast mode [ 894.786000][ T1142] team0: Port device vlan0 added [ 894.968523][ T1151] netlink: 570 bytes leftover after parsing attributes in process `syz.4.10508'. [ 895.235463][ T1156] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10509'. [ 895.461115][ T1163] tipc: Enabling of bearer rejected, already enabled [ 895.714660][ T1174] tipc: Bearer : already 2 bearers with priority 10 [ 895.714703][ T1174] tipc: Bearer : trying with adjusted priority [ 895.715070][ T1174] tipc: Enabling of bearer rejected, already enabled [ 895.717347][ T1174] netlink: 'syz.4.10515': attribute type 1 has an invalid length. [ 895.777175][ T1174] bond15: entered promiscuous mode [ 895.779238][ T1174] 8021q: adding VLAN 0 to HW filter on device bond15 [ 895.836750][ T1169] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 895.927968][ T1176] bond15: entered allmulticast mode [ 895.966807][ T1176] bond15: (slave bridge15): making interface the new active one [ 895.974711][ T1176] bridge15: entered promiscuous mode [ 895.981090][ T1176] bridge15: entered allmulticast mode [ 895.991656][ T1176] bond15: (slave bridge15): Enslaving as an active interface with an up link [ 896.102070][ T1181] tipc: Resetting bearer [ 896.387339][ T1186] netlink: 'syz.3.10519': attribute type 4 has an invalid length. [ 896.465760][T10307] net_ratelimit: 37 callbacks suppressed [ 896.465810][T10307] bond2: (slave gretap1): failed to get link speed/duplex [ 896.575836][T10305] bond2: (slave gretap1): failed to get link speed/duplex [ 896.692953][T10305] bond2: (slave gretap1): failed to get link speed/duplex [ 896.796996][ T97] bond2: (slave gretap1): failed to get link speed/duplex [ 896.912865][ T13] bond2: (slave gretap1): failed to get link speed/duplex [ 896.922443][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.013482][ T1189] bridge0: port 4(team0) entered disabled state [ 897.041661][ T1189] team0 (unregistering): left allmulticast mode [ 897.048524][ T1189] team_slave_0: left allmulticast mode [ 897.054787][ T1189] team_slave_1: left allmulticast mode [ 897.060586][ T1189] bridge2: left allmulticast mode [ 897.066717][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 897.079413][ T1189] vlan0: left allmulticast mode [ 897.085142][ T1189] bond0: left allmulticast mode [ 897.087665][ T1189] bond_slave_0: left allmulticast mode [ 897.087960][ T1189] team0 (unregistering): left promiscuous mode [ 897.087974][ T1189] team_slave_0: left promiscuous mode [ 897.088177][ T1189] team_slave_1: left promiscuous mode [ 897.088351][ T1189] bridge2: left promiscuous mode [ 897.102058][ T1189] vlan0: left promiscuous mode [ 897.102077][ T1189] bond0: left promiscuous mode [ 897.102921][ T1189] bridge0: port 4(team0) entered disabled state [ 897.156394][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 897.180468][ T1189] team0 (unregistering): Port device team_slave_0 removed [ 897.216469][ T1189] team0 (unregistering): Port device team_slave_1 removed [ 897.232275][ T1189] team0 (unregistering): Port device bridge2 removed [ 897.263422][ T1189] team0 (unregistering): Port device vlan0 removed [ 897.308245][T28937] bond2: (slave gretap1): failed to get link speed/duplex [ 897.459365][T28937] bond2: (slave gretap1): failed to get link speed/duplex [ 898.177239][ T1224] tipc: Enabling of bearer rejected, already enabled [ 898.458555][ T1235] __nla_validate_parse: 5 callbacks suppressed [ 898.458605][ T1235] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10532'. [ 898.646834][ T1246] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 898.646878][ T1246] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 898.647763][ T1246] tipc: Resetting bearer [ 898.971326][ T1254] lo speed is unknown, defaulting to 1000 [ 899.555529][ T1268] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 900.337462][ T1287] tipc: Resetting bearer [ 900.879548][ T1317] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 900.925386][ T1317] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 900.925446][ T1317] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 901.054243][ T1302] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10547'. [ 901.063789][ T1302] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10547'. [ 901.073533][ T1302] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10547'. [ 901.117278][ T1317] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 901.117338][ T1317] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 901.117362][ T1317] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 901.547101][T29524] net_ratelimit: 101 callbacks suppressed [ 901.547156][T29524] bond2: (slave gretap1): link status up again after 0 ms [ 901.567709][ T1516] bond2: (slave gretap1): link status up again after 0 ms [ 901.587226][T29524] bond2: (slave gretap1): link status up again after 0 ms [ 901.606431][ T13] bond2: (slave gretap1): link status up again after 0 ms [ 901.630662][ T13] bond2: (slave gretap1): link status up again after 0 ms [ 901.645925][T29524] bond2: (slave gretap1): link status up again after 0 ms [ 901.666798][T31414] bond2: (slave gretap1): link status up again after 0 ms [ 901.686016][T29524] bond2: (slave gretap1): link status up again after 0 ms [ 901.710338][ T12] bond2: (slave gretap1): link status up again after 0 ms [ 901.736128][T10307] bond2: (slave gretap1): link status up again after 0 ms [ 901.827572][ T1317] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 901.827633][ T1317] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 901.827674][ T1317] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 901.860857][ T1329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10552'. [ 901.953529][ T1317] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 901.953596][ T1317] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 901.953639][ T1317] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 902.138306][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 902.138366][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.138404][ T12] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 902.202279][ T1516] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 902.202333][ T1516] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.202354][ T1516] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 902.206823][T31414] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 902.206853][T31414] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.206876][T31414] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 902.210110][ T1516] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 902.210137][ T1516] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.210158][ T1516] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 902.415155][ T1349] netlink: 'syz.1.10557': attribute type 1 has an invalid length. [ 902.504345][ T1342] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20001 [ 902.512763][ T1349] 8021q: adding VLAN 0 to HW filter on device bond16 [ 902.531034][ T1352] bond16: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 902.535153][ T1348] tipc: Resetting bearer [ 902.729780][ T1349] bridge13: entered promiscuous mode [ 902.760643][ T1349] bond16: (slave bridge13): Enslaving as an active interface with an up link [ 902.769664][ T1348] tipc: Resetting bearer [ 902.846756][ T1365] netlink: 'syz.2.10560': attribute type 3 has an invalid length. [ 902.848269][ T1365] netlink: 'syz.2.10560': attribute type 4 has an invalid length. [ 902.848286][ T1365] netlink: 17 bytes leftover after parsing attributes in process `syz.2.10560'. [ 902.890519][ T1362] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 902.890565][ T1362] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 902.908320][ T1365] xt_CT: No such helper "snmp_trap" [ 902.990905][ T1348] tipc: Resetting bearer [ 903.042316][ T1348] tipc: Resetting bearer [ 903.116066][ T1373] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10563'. [ 903.226864][ T1348] tipc: Resetting bearer [ 903.398296][ T1379] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 903.398338][ T1379] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 903.626554][ T52] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 903.627832][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 905.401671][T17765] lo speed is unknown, defaulting to 1000 [ 905.401716][T17765] syz_device_name_32_chars_1234567: Port: 1 Link DOWN [ 905.421915][T28937] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 905.421961][T28937] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.422006][T28937] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 54625 - 0 [ 905.422063][T28937] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 905.422085][T28937] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.422106][T28937] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 54625 - 0 [ 905.422140][T28937] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 905.422164][T28937] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.422186][T28937] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 54625 - 0 [ 905.422220][T28937] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 905.422242][T28937] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.422266][T28937] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 54625 - 0 [ 905.654810][ T1416] tc_dump_action: action bad kind [ 905.700850][ T1397] lo speed is unknown, defaulting to 1000 [ 905.955073][ T1434] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10575'. [ 905.980633][ T1439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10574'. [ 905.993892][ T1434] netlink: 'syz.1.10575': attribute type 1 has an invalid length. [ 905.993938][ T1434] netlink: 200 bytes leftover after parsing attributes in process `syz.1.10575'. [ 906.144177][ T1434] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 906.391960][ T1445] netlink: 'syz.2.10579': attribute type 13 has an invalid length. [ 906.401173][ T1445] netlink: 'syz.2.10579': attribute type 17 has an invalid length. [ 906.527918][ T1445] tipc: Resetting bearer [ 906.536489][ T1445] tipc: Resetting bearer [ 906.545486][ T1454] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 906.573054][ T1445] ip6gre1: left allmulticast mode [ 906.612977][ T1445] xfrm1: left allmulticast mode [ 906.623370][ T1445] bond7: left allmulticast mode [ 906.632632][ T1445] net_ratelimit: 16 callbacks suppressed [ 906.632673][ T1445] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 906.776986][ T1455] dvmrp1: entered allmulticast mode [ 906.777195][ T1456] dvmrp1: left allmulticast mode [ 907.199491][ T1471] netlink: 'syz.2.10585': attribute type 21 has an invalid length. [ 907.199536][ T1471] IPv6: NLM_F_CREATE should be specified when creating new route [ 907.211979][ T1468] openvswitch: netlink: Multiple metadata blocks provided [ 907.310333][ T1476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10585'. [ 907.342694][ T1472] veth1: entered allmulticast mode [ 907.401844][ T1469] veth1: left allmulticast mode [ 907.684535][ T1482] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10587'. [ 907.776910][ T1484] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10587'. [ 908.142463][ T1494] Bluetooth: hci0: unsupported parameter 5135 [ 908.151162][ T1494] Bluetooth: hci0: unsupported parameter 8192 [ 908.158874][ T1494] Bluetooth: hci0: unsupported parameter 5135 [ 908.165376][ T1494] Bluetooth: hci0: unsupported parameter 8192 [ 908.290771][ T1497] syzkaller0: left promiscuous mode [ 908.296324][ T1497] syzkaller0: left allmulticast mode [ 908.639535][ T1501] netlink: 'syz.2.10593': attribute type 1 has an invalid length. [ 908.777599][ T1501] lo: entered promiscuous mode [ 908.787677][ T1501] tunl0: entered promiscuous mode [ 908.808776][ T1501] gre0: entered promiscuous mode [ 909.140044][ T1501] erspan0: entered promiscuous mode [ 909.154404][ T1501] ip_vti0: entered promiscuous mode [ 909.164741][ T1501] ip6_vti0: entered promiscuous mode [ 909.175500][ T1501] §: entered promiscuous mode [ 909.238992][ T1501] ip6tnl0: entered promiscuous mode [ 909.343730][ T1513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10595'. [ 909.427618][ T1501] ip6gre0: entered promiscuous mode [ 909.510526][ T1501] nlmon0: entered promiscuous mode [ 909.522498][ T1501] batadv0: entered promiscuous mode [ 909.550900][ T1501] wg0: entered promiscuous mode [ 909.568359][ T1501] wg1: entered promiscuous mode [ 909.588261][ T1501] wg2: entered promiscuous mode [ 909.595410][ T1501] veth0_to_bridge: entered promiscuous mode [ 909.616184][ T1501] bridge_slave_0: entered promiscuous mode [ 909.642697][ T1501] veth1_to_bridge: entered promiscuous mode [ 909.664480][ T1501] bridge_slave_1: entered promiscuous mode [ 909.683240][ T1501] veth0_to_bond: entered promiscuous mode [ 909.722405][ T1501] veth1_to_bond: entered promiscuous mode [ 909.742412][ T1501] bond_slave_1: entered promiscuous mode [ 909.773643][ T1501] veth1_to_team: entered promiscuous mode [ 909.823575][ T1501] veth0_to_batadv: entered promiscuous mode [ 909.844135][ T1501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 909.861945][ T1501] batadv_slave_0: entered promiscuous mode [ 909.887271][ T1501] xfrm0: entered promiscuous mode [ 909.911634][ T1501] veth0_to_hsr: entered promiscuous mode [ 909.940045][ T1501] hsr_slave_0: entered promiscuous mode [ 909.959715][ T1501] veth1_to_hsr: entered promiscuous mode [ 909.980430][ T1501] hsr_slave_1: entered promiscuous mode [ 910.005079][ T1501] veth1_virt_wifi: entered promiscuous mode [ 910.019571][ T1501] veth0_virt_wifi: entered promiscuous mode [ 910.228485][ T1522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 910.354394][ T1526] netlink: 'syz.3.10598': attribute type 2 has an invalid length. [ 910.373450][ T1521] smbdirect: ib_dev[syz1] renamed to [syz2] [ 910.387351][ T1526] : entered promiscuous mode [ 910.655407][ T1534] xt_CT: No such helper "snmp_trap" [ 910.941947][ T1534] lo speed is unknown, defaulting to 1000 [ 911.197881][T28936] tipc: Subscription rejected, illegal request [ 911.515381][ T1554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10605'. [ 911.515563][ T1554] unsupported nla_type 140 [ 911.680823][ T1562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10606'. [ 911.680865][ T1562] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10606'. [ 911.723668][ T1543] xt_connbytes: Forcing CT accounting to be enabled [ 911.754493][ T1564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10606'. [ 912.002962][ T1564] team0: Port device team_slave_0 removed [ 912.056021][ T1556] syzkaller1: entered promiscuous mode [ 912.056062][ T1556] syzkaller1: entered allmulticast mode [ 912.280709][ T1583] dvmrp0: entered allmulticast mode [ 912.351481][ T1586] dvmrp0: left allmulticast mode [ 912.638269][ T1593] netlink: 'syz.4.10612': attribute type 1 has an invalid length. [ 912.782769][ T1597] netlink: 'syz.4.10612': attribute type 46 has an invalid length. [ 912.820849][ T1600] netlink: 'syz.0.10613': attribute type 4 has an invalid length. [ 913.462775][ T1620] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 914.019992][ T1612] bond15: (slave ip6gretap0): Releasing active interface [ 914.081213][ T1633] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10620'. [ 914.109875][ T1612] ip6gretap0: entered promiscuous mode [ 914.109921][ T1612] ip6gretap0: entered allmulticast mode [ 914.137804][ T1631] tipc: Enabled bearer , priority 0 [ 914.203040][ T1625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10619'. [ 914.203090][ T1625] openvswitch: netlink: Flow actions attr not present in new flow. [ 915.703228][ T1671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10627'. [ 915.971699][ T1678] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10629'. [ 915.981539][ T1678] openvswitch: netlink: Flow actions attr not present in new flow. [ 915.998801][ T1678] netlink: 76 bytes leftover after parsing attributes in process `syz.2.10629'. [ 916.226214][ T1681] netlink: 666 bytes leftover after parsing attributes in process `syz.3.10630'. [ 916.425113][ T5277] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 916.614990][ T1697] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 916.615035][ T1697] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 916.646528][ T1699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10634'. [ 916.733178][ T1706] xt_NFQUEUE: number of total queues is 0 [ 916.801060][ T1691] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 917.033797][ T5277] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 917.300707][ T1724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 917.316127][ T1724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 917.399331][ T1727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 917.473417][ T1729] netlink: 144 bytes leftover after parsing attributes in process `syz.1.10641'. [ 917.518929][ T1729] netlink: 112 bytes leftover after parsing attributes in process `syz.1.10641'. [ 917.575471][ T1716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10638'. [ 917.953271][ T1740] netlink: 'syz.2.10644': attribute type 1 has an invalid length. [ 918.101891][ T1740] 8021q: adding VLAN 0 to HW filter on device bond21 [ 918.113286][ T1746] veth0_to_bond: left promiscuous mode [ 918.137486][ T1746] bond21: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 918.173656][ T1739] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 918.187961][ T1752] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10646'. [ 918.248743][ T1740] bridge0: entered promiscuous mode [ 918.253188][ T1754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10647'. [ 918.260149][ T1740] bond21: (slave bridge0): Enslaving as an active interface with an up link [ 918.429669][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 918.468809][ T1748] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 918.648282][ T1763] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10650'. [ 918.908206][ T1773] netlink: 164 bytes leftover after parsing attributes in process `syz.0.10650'. [ 919.226752][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 919.648571][ T1794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10652'. [ 919.648615][ T1794] openvswitch: netlink: Flow key attribute not present in set flow. [ 919.817679][ T1799] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 919.846587][ T1799] netlink: 'syz.0.10654': attribute type 96 has an invalid length. [ 919.856336][ T1691] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 920.065256][ T1804] tipc: Enabling of bearer rejected, already enabled [ 920.142102][ T1814] ip_tables: iptables: counters copy to user failed while replacing table [ 920.678103][ T1825] netlink: 'syz.4.10659': attribute type 13 has an invalid length. [ 920.678148][ T1825] netlink: 'syz.4.10659': attribute type 17 has an invalid length. [ 920.912205][ T1828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10660'. [ 920.924561][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 921.038215][ T5277] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 921.130406][ T1825] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 921.465827][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 921.509555][ T1841] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 921.626627][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 921.820695][ T1856] 8021q: VLANs not supported on vcan0 [ 921.838304][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 921.839126][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 921.866384][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 922.022030][ T1865] lo speed is unknown, defaulting to 1000 [ 922.243163][ T1870] tipc: Enabling of bearer rejected, already enabled [ 922.290578][ T1870] ip_tables: iptables: counters copy to user failed while replacing table [ 922.790300][ T1841] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 923.223150][ T1897] netlink: 'syz.0.10674': attribute type 2 has an invalid length. [ 923.223196][ T1897] __nla_validate_parse: 3 callbacks suppressed [ 923.223762][ T1897] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10674'. [ 923.421698][ T1893] tipc: Enabled bearer , priority 0 [ 923.436437][ T1893] syzkaller0: entered promiscuous mode [ 923.436480][ T1893] syzkaller0: entered allmulticast mode [ 923.454611][ T1894] netlink: 'syz.0.10674': attribute type 10 has an invalid length. [ 923.454821][ T1894] team0: Device dummy0 is already a lower device of the team interface [ 923.457865][ T1893] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 923.570946][ T1893] netlink: 116 bytes leftover after parsing attributes in process `syz.1.10675'. [ 923.584298][ T1893] tipc: Resetting bearer [ 923.667703][ T1891] tipc: Resetting bearer [ 923.736748][ T1891] tipc: Disabling bearer [ 923.845201][ T1916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10681'. [ 923.989223][ T1919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10685'. [ 923.998894][ T1919] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10685'. [ 924.090263][ T1841] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 924.168346][ T1933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 924.398781][ T1945] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 924.398810][ T1945] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 924.503266][ T1948] dvmrp0: entered allmulticast mode [ 924.511933][ T1948] dvmrp1: entered allmulticast mode [ 924.513654][ T1948] dvmrp0: left allmulticast mode [ 924.513747][ T1948] dvmrp1: left allmulticast mode [ 924.513821][ T1948] dvmrp6: left allmulticast mode [ 924.515814][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 924.743423][ T1953] netlink: 'syz.0.10690': attribute type 1 has an invalid length. [ 924.930482][ T1958] veth23: entered allmulticast mode [ 925.017490][ T1953] bond26: (slave veth0_to_bond): making interface the new active one [ 925.020052][ T1953] bond26: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 925.026910][ T1959] macvlan5: entered promiscuous mode [ 925.026935][ T1959] macvlan5: entered allmulticast mode [ 925.027946][ T1959] bond26: entered promiscuous mode [ 925.028163][ T1959] veth0_to_bond: entered promiscuous mode [ 925.040552][ T5277] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 925.125854][ T1959] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 925.133652][ T1959] bond26: (slave macvlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 925.156123][ T1959] bond26: left promiscuous mode [ 925.167072][ T1959] veth0_to_bond: left promiscuous mode [ 925.430538][ T1970] netlink: 570 bytes leftover after parsing attributes in process `syz.2.10693'. [ 925.946993][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 926.506797][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 928.341974][ T1990] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 928.342024][ T1990] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 928.342439][ T1991] tc_dump_action: action bad kind [ 928.922129][ T2005] dvmrp0: entered allmulticast mode [ 928.966902][ T2005] dvmrp1: entered allmulticast mode [ 929.138492][ T2005] dvmrp0: left allmulticast mode [ 929.138614][ T2005] dvmrp1: left allmulticast mode [ 929.158251][ T2023] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10702'. [ 929.218661][ T2024] syzkaller0: entered promiscuous mode [ 929.218702][ T2024] syzkaller0: entered allmulticast mode [ 929.825582][ T2036] bridge0: port 3(vlan2) entered disabled state [ 929.825824][ T2036] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.826280][ T2036] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.089523][ T5277] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 930.090536][ T1691] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 930.151322][ T2036] tipc: Resetting bearer [ 930.165998][ T2036] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 930.198130][ T2036] bond15: left allmulticast mode [ 930.203170][ T2036] bridge15: left allmulticast mode [ 930.217239][ T1167] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.219277][T30565] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.219387][T30565] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.219419][T30565] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.643726][ T2075] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 930.651869][ T2075] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 930.807238][ T2085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10715'. [ 930.926667][ T2088] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10717'. [ 930.926721][ T2088] netlink: 'syz.1.10717': attribute type 7 has an invalid length. [ 930.926734][ T2088] netlink: 'syz.1.10717': attribute type 8 has an invalid length. [ 930.926744][ T2088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10717'. [ 931.039556][ T2091] bond27 (unregistering): Released all slaves [ 931.088384][ T2094] tipc: Resetting bearer [ 931.100524][ T2094] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 931.122355][ T2094] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 931.252830][ T2101] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 931.471674][ T2112] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10721'. [ 931.546126][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 931.553910][ T1310] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 931.907812][ T2123] dvmrp0: entered allmulticast mode [ 931.974074][ T2123] dvmrp1: entered allmulticast mode [ 932.709150][ T2154] set match dimension is over the limit! [ 932.791734][ T2154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10729'. [ 932.813466][ T2158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10731'. [ 933.245363][ T2163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10730'. [ 933.245405][ T2163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10730'. [ 933.541593][ T2178] netlink: 'syz.0.10735': attribute type 2 has an invalid length. [ 933.541622][ T2178] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10735'. [ 933.694437][ T2178] netlink: 'syz.0.10735': attribute type 10 has an invalid length. [ 933.719910][ T2178] team0: Device dummy0 is already a lower device of the team interface [ 935.105903][ T2211] bond17: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 935.558679][ T2211] bond17 (unregistering): Released all slaves [ 935.782002][ T2234] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 935.792998][ T2234] tipc: Resetting bearer [ 935.825567][ T2215] __nla_validate_parse: 1 callbacks suppressed [ 935.828896][ T2215] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10744'. [ 935.828916][ T2215] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10744'. [ 935.828934][ T2215] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10744'. [ 936.071330][ T2247] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10751'. [ 936.191861][ T2245] tipc: Resetting bearer [ 936.215772][ T2245] tipc: Resetting bearer [ 936.253447][ T2245] tipc: Resetting bearer [ 936.273276][ T2245] tipc: Resetting bearer [ 936.355266][ T2256] xt_policy: output policy not valid in PREROUTING and INPUT [ 936.585750][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 937.118329][ T2264] tc_dump_action: action bad kind [ 937.224641][ T2273] netlink: 240 bytes leftover after parsing attributes in process `syz.4.10757'. [ 938.377611][ T2293] lo speed is unknown, defaulting to 1000 [ 938.405329][ T2315] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10765'. [ 938.529148][ T2320] syzkaller0: left promiscuous mode [ 938.529471][ T2320] syzkaller0: left allmulticast mode [ 938.535567][ T2320] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 938.678270][ T2327] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 938.678317][ T2327] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 938.680967][ T2316] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10764'. [ 938.680986][ T2316] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10764'. [ 938.681001][ T2316] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10764'. [ 939.291818][ T2342] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10774'. [ 939.512635][ T2351] syzkaller0: entered promiscuous mode [ 939.512672][ T2351] syzkaller0: entered allmulticast mode [ 939.756799][ T2357] netlink: 'syz.3.10777': attribute type 10 has an invalid length. [ 939.781107][ T2365] netlink: 'syz.2.10780': attribute type 1 has an invalid length. [ 939.961715][ T2372] ip_tables: iptables: counters copy to user failed while replacing table [ 940.290365][ T2382] dvmrp0: entered allmulticast mode [ 940.312229][ T2382] dvmrp1: entered allmulticast mode [ 940.314467][ T2382] dvmrp0: left allmulticast mode [ 940.314558][ T2382] dvmrp1: left allmulticast mode [ 940.331103][ T2385] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 940.473707][ T2388] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 940.894827][ T2399] __nla_validate_parse: 5 callbacks suppressed [ 940.894873][ T2399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10790'. [ 941.164847][ T2406] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10791'. [ 941.338054][ T2394] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10789'. [ 941.338100][ T2394] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10789'. [ 941.338149][ T2394] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10789'. [ 941.631256][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 941.807683][ T2422] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10796'. [ 942.032067][ T2428] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10797'. [ 942.245823][ T2438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10800'. [ 942.262117][ T2443] netlink: 120 bytes leftover after parsing attributes in process `syz.0.10801'. [ 942.371079][ T2445] dvmrp0: entered allmulticast mode [ 942.424158][ T2445] dvmrp1: entered allmulticast mode [ 942.428565][ T2448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10800'. [ 942.454354][ T2445] dvmrp0: left allmulticast mode [ 942.454472][ T2445] dvmrp1: left allmulticast mode [ 943.282639][ T2478] ip_tables: iptables: counters copy to user failed while replacing table [ 943.432761][ T2486] dvmrp0: entered allmulticast mode [ 943.434354][ T2481] syzkaller1: entered promiscuous mode [ 943.434372][ T2481] syzkaller1: entered allmulticast mode [ 943.479098][ T2486] dvmrp1: entered allmulticast mode [ 943.506469][ T2486] dvmrp0: left allmulticast mode [ 943.506584][ T2486] dvmrp1: left allmulticast mode [ 943.621197][ T2490] IPv6: NLM_F_CREATE should be specified when creating new route [ 945.160802][ T2509] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 945.160870][ T2509] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 945.178656][ T2509] tipc: Resetting bearer [ 945.206277][ T2512] netlink: 'syz.0.10813': attribute type 6 has an invalid length. [ 945.206317][ T2512] netlink: 'syz.0.10813': attribute type 7 has an invalid length. [ 945.206329][ T2512] netlink: 'syz.0.10813': attribute type 8 has an invalid length. [ 945.660613][ T2543] netlink: 'syz.4.10818': attribute type 1 has an invalid length. [ 945.793996][ T2542] openvswitch: netlink: Message has 8 unknown bytes. [ 945.794047][ T2542] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 945.982352][ T2556] ip_tables: iptables: counters copy to user failed while replacing table [ 946.150125][ T2561] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 946.235036][T24917] block nbd4: Receive control failed (result -32) [ 946.237331][ T52] block nbd4: Receive control failed (result -32) [ 946.370313][ T1691] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 946.667654][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 946.786476][ T2576] dvmrp0: entered allmulticast mode [ 946.793546][ T2576] dvmrp0: left allmulticast mode [ 946.954529][ T2588] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 946.954579][ T2588] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 947.091755][ T2594] tipc: Resetting bearer [ 947.625408][ T2611] __nla_validate_parse: 6 callbacks suppressed [ 947.625463][ T2611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10832'. [ 948.031519][ T2630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10837'. [ 948.040607][ T2630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10837'. [ 948.109846][ T2628] lo speed is unknown, defaulting to 1000 [ 948.410355][ T2647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 949.354638][ T2646] bond8: entered allmulticast mode [ 949.406408][ T2646] dvmrp8: entered allmulticast mode [ 949.415979][ T2688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10843'. [ 949.536357][ T2645] bond8: left allmulticast mode [ 949.929334][ T2691] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10844'. [ 949.929397][ T2691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10844'. [ 949.929431][ T2691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10844'. [ 949.981131][ T2691] syzkaller0: left promiscuous mode [ 949.981176][ T2691] syzkaller0: left allmulticast mode [ 950.017359][ T2694] dvmrp0: entered allmulticast mode [ 950.028093][ T2691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10844'. [ 950.039963][ T2694] dvmrp1: entered allmulticast mode [ 950.046641][ T2694] dvmrp0: left allmulticast mode [ 950.051850][ T2694] dvmrp1: left allmulticast mode [ 950.785527][ T2712] dvmrp0: entered allmulticast mode [ 950.870720][ T2712] dvmrp1: entered allmulticast mode [ 950.876898][ T2716] dvmrp0: left allmulticast mode [ 950.877005][ T2716] dvmrp1: left allmulticast mode [ 950.877082][ T2716] dvmrp8: left allmulticast mode [ 951.240752][ T2714] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 951.240797][ T2714] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 951.241499][ T2714] tipc: Resetting bearer [ 951.364480][ T2740] netlink: 244 bytes leftover after parsing attributes in process `syz.0.10851'. [ 951.435549][ T2740] netlink: 'syz.0.10851': attribute type 1 has an invalid length. [ 951.508735][ T2742] netlink: 'syz.3.10853': attribute type 16 has an invalid length. [ 951.508778][ T2742] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.10853'. [ 951.631219][ T2740] 8021q: adding VLAN 0 to HW filter on device bond27 [ 951.711573][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 951.745059][ T2746] syz.4.10854: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 951.745414][ T2746] CPU: 1 UID: 0 PID: 2746 Comm: syz.4.10854 Not tainted syzkaller #0 PREEMPT(full) [ 951.745438][ T2746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 951.745459][ T2746] Call Trace: [ 951.745550][ T2746] [ 951.745624][ T2746] dump_stack_lvl+0xe8/0x150 [ 951.745786][ T2746] warn_alloc+0x24d/0x270 [ 951.745841][ T2746] ? kasan_save_track+0x4f/0x80 [ 951.745898][ T2746] ? kasan_save_track+0x3e/0x80 [ 951.745919][ T2746] ? __pfx_warn_alloc+0x10/0x10 [ 951.745943][ T2746] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 951.746044][ T2746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.746101][ T2746] __vmalloc_node_range_noprof+0x127/0x1540 [ 951.746158][ T2746] ? rcu_is_watching+0x16/0xb0 [ 951.746218][ T2746] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 951.746246][ T2746] ? __kmalloc_cache_noprof+0x321/0x600 [ 951.746276][ T2746] ? __kmalloc_cache_noprof+0x14d/0x600 [ 951.746305][ T2746] ? xskq_create+0x56/0x220 [ 951.746397][ T2746] xskq_create+0x148/0x220 [ 951.746424][ T2746] ? xsk_init_queue+0x8a/0xe0 [ 951.746452][ T2746] xsk_init_queue+0x8a/0xe0 [ 951.746480][ T2746] xsk_setsockopt+0x52a/0x960 [ 951.746508][ T2746] ? __pfx_xsk_setsockopt+0x10/0x10 [ 951.746532][ T2746] ? __pfx_aa_sk_perm+0x10/0x10 [ 951.746630][ T2746] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 951.746673][ T2746] ? __pfx_xsk_setsockopt+0x10/0x10 [ 951.746700][ T2746] do_sock_setsockopt+0x17c/0x1b0 [ 951.746725][ T2746] __x64_sys_setsockopt+0x13d/0x1b0 [ 951.746751][ T2746] do_syscall_64+0x166/0x520 [ 951.746860][ T2746] ? trace_irq_disable+0x3b/0x140 [ 951.746892][ T2746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.746913][ T2746] ? clear_bhb_loop+0x70/0xc0 [ 951.746938][ T2746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.746958][ T2746] RIP: 0033:0x7fb62e99e159 [ 951.746984][ T2746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 951.747001][ T2746] RSP: 002b:00007fb62f8d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 951.747027][ T2746] RAX: ffffffffffffffda RBX: 00007fb62ec25fa0 RCX: 00007fb62e99e159 [ 951.747042][ T2746] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 951.747055][ T2746] RBP: 00007fb62ea3503b R08: 0000000000000004 R09: 0000000000000000 [ 951.747068][ T2746] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 951.747081][ T2746] R13: 00007fb62ec26038 R14: 00007fb62ec25fa0 R15: 00007ffe895aada8 [ 951.747116][ T2746] [ 951.928216][ T2746] Mem-Info: [ 951.928232][ T2746] active_anon:19842 inactive_anon:0 isolated_anon:0 [ 951.928232][ T2746] active_file:0 inactive_file:43769 isolated_file:0 [ 951.928232][ T2746] unevictable:0 dirty:434 writeback:0 [ 951.928232][ T2746] slab_reclaimable:12583 slab_unreclaimable:212646 [ 951.928232][ T2746] mapped:29605 shmem:4737 pagetables:1353 [ 951.928232][ T2746] sec_pagetables:0 bounce:0 [ 951.928232][ T2746] kernel_misc_reclaimable:0 [ 951.928232][ T2746] free:1173825 free_pcp:13999 free_cma:0 [ 951.928287][ T2746] Node 0 active_anon:79368kB inactive_anon:0kB active_file:0kB inactive_file:174868kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118420kB dirty:1736kB writeback:0kB shmem:18948kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16836kB pagetables:5292kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 951.928339][ T2746] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 951.928393][ T2746] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 951.928448][ T2746] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 951.928485][ T2746] Node 0 DMA32 free:740040kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:79368kB inactive_anon:0kB active_file:0kB inactive_file:174868kB unevictable:0kB writepending:1736kB zspages:0kB present:3129332kB managed:2546696kB mlocked:0kB bounce:0kB free_pcp:51212kB local_pcp:30012kB free_cma:0kB [ 951.928541][ T2746] lowmem_reserve[]: 0 0 0 0 0 [ 951.928575][ T2746] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 951.928627][ T2746] lowmem_reserve[]: 0 0 0 0 0 [ 951.928661][ T2746] Node 1 Normal free:3939900kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:4784kB local_pcp:0kB free_cma:0kB [ 951.928714][ T2746] lowmem_reserve[]: 0 0 0 0 0 [ 951.928747][ T2746] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 951.928858][ T2746] Node 0 DMA32: 1008*4kB (UE) 159*8kB (UE) 369*16kB (UM) 260*32kB (UME) 166*64kB (UME) 74*128kB (UM) 28*256kB (UM) 8*512kB (UM) 5*1024kB (UME) 6*2048kB (UM) 164*4096kB (UM) = 740040kB [ 951.929012][ T2746] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 951.970390][ T2746] Node 1 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 1*32kB (M) 2*64kB (UM) 1*128kB (M) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 0*2048kB 961*4096kB (UM) = 3939900kB [ 951.970537][ T2746] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 951.970554][ T2746] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 951.970583][ T2746] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 951.970599][ T2746] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 951.970614][ T2746] 48302 total pagecache pages [ 951.970651][ T2746] 0 pages in swap cache [ 951.970659][ T2746] Free swap = 124996kB [ 951.970666][ T2746] Total swap = 124996kB [ 951.970682][ T2746] 2097051 pages RAM [ 951.970690][ T2746] 0 pages HighMem/MovableOnly [ 951.970697][ T2746] 428761 pages reserved [ 951.970704][ T2746] 0 pages cma reserved [ 952.337370][ T2753] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 952.449184][ T2755] netlink: zone id is out of range [ 952.449252][ T2755] netlink: zone id is out of range [ 952.449352][ T2755] netlink: zone id is out of range [ 952.449390][ T2755] netlink: zone id is out of range [ 952.449398][ T2755] netlink: zone id is out of range [ 952.449406][ T2755] netlink: zone id is out of range [ 952.449413][ T2755] netlink: zone id is out of range [ 952.449421][ T2755] netlink: zone id is out of range [ 952.449428][ T2755] netlink: zone id is out of range [ 952.449435][ T2755] netlink: zone id is out of range [ 952.713155][ T2762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10856'. [ 952.748080][ T2762] IPv6: NLM_F_CREATE should be specified when creating new route [ 952.756997][ T2762] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 952.757046][ T2762] IPv6: NLM_F_CREATE should be set when creating new route [ 952.757089][ T2762] IPv6: NLM_F_CREATE should be set when creating new route [ 952.757112][ T2762] IPv6: NLM_F_CREATE should be set when creating new route [ 952.814712][ T2762] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.10856'. [ 952.882746][ T2763] IPVS: Scheduler module ip_vs_sip not found [ 952.905303][ T2771] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10859'. [ 952.998287][ T2759] netlink: 'syz.2.10857': attribute type 1 has an invalid length. [ 953.128606][ T2759] 8021q: adding VLAN 0 to HW filter on device bond23 [ 953.200657][ T2780] dvmrp0: entered allmulticast mode [ 953.206457][ T2763] bond23: entered promiscuous mode [ 953.206483][ T2763] bond23: entered allmulticast mode [ 953.229348][ T2787] dvmrp1: entered allmulticast mode [ 953.259007][ T2789] dvmrp0: left allmulticast mode [ 953.259112][ T2789] dvmrp1: left allmulticast mode [ 953.916521][ T2800] dvmrp0: entered allmulticast mode [ 953.931234][ T2800] dvmrp0: left allmulticast mode [ 954.178510][ T2801] macsec1: entered allmulticast mode [ 954.178553][ T2801] veth1_macvtap: entered allmulticast mode [ 954.207608][ T2801] veth1_macvtap: left allmulticast mode [ 954.383156][ T52] block nbd16: Receive control failed (result -32) [ 954.386411][T24917] block nbd16: Receive control failed (result -32) [ 954.573979][ T2818] tipc: Resetting bearer [ 954.592816][ T2818] tipc: Resetting bearer [ 954.794054][ T2835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10872'. [ 954.848849][ T2818] bridge7: port 1(veth19) entered disabled state [ 954.861886][ T2818] bridge7: port 2(veth21) entered disabled state [ 955.141454][ T2845] tipc: Enabling of bearer rejected, already enabled [ 955.323479][ T2852] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10876'. [ 955.399569][ T2868] dvmrp0: entered allmulticast mode [ 955.436626][ T2868] dvmrp1: entered allmulticast mode [ 955.468760][ T2868] dvmrp0: left allmulticast mode [ 955.475532][ T2868] dvmrp1: left allmulticast mode [ 955.861901][ T2887] geneve0: entered promiscuous mode [ 956.174032][ T52] block nbd17: Receive control failed (result -32) [ 956.178236][T24917] block nbd17: Receive control failed (result -32) [ 956.337939][ T2896] netlink: 'syz.4.10882': attribute type 1 has an invalid length. [ 956.337986][ T2896] netlink: 'syz.4.10882': attribute type 2 has an invalid length. [ 956.470921][ T2902] C: renamed from veth1_to_team (while UP) [ 956.491750][ T2902] tipc: Disabling bearer [ 956.501452][ T2902] netlink: 'syz.0.10883': attribute type 1 has an invalid length. [ 956.501503][ T2902] netlink: 116 bytes leftover after parsing attributes in process `syz.0.10883'. [ 956.650411][ T2907] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10886'. [ 956.745769][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 956.862691][ T2916] netlink: 'syz.2.10887': attribute type 10 has an invalid length. [ 957.053925][ T2925] netlink: 72 bytes leftover after parsing attributes in process `syz.2.10887'. [ 957.184287][ T2928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10887'. [ 957.552137][ T2933] netlink: 296 bytes leftover after parsing attributes in process `syz.4.10889'. [ 957.556680][T32109] udevd[32109]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 957.797740][ T2937] netlink: 'syz.0.10890': attribute type 1 has an invalid length. [ 957.797779][ T2937] netlink: 'syz.0.10890': attribute type 268 has an invalid length. [ 957.798208][ T2937] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10890'. [ 957.873537][ T2938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10890'. [ 958.131346][ T2908] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 958.234178][ T2916] bond9: (slave team0): Releasing backup interface [ 958.253398][ T2916] team0 (unregistering): Port device team_slave_1 removed [ 958.308587][T20395] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 958.308646][T20395] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.308684][T20395] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 958.310692][T10306] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 958.310733][T10306] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.310754][T10306] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 958.310791][T10306] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 958.310811][T10306] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.310833][T10306] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 958.310862][T10306] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 958.310885][T10306] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.310906][T10306] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 958.522267][ T2941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10891'. [ 958.713703][ T2951] dvmrp0: entered allmulticast mode [ 958.881495][ T2961] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10896'. [ 958.916847][ T2952] macsec1: entered allmulticast mode [ 958.916891][ T2952] veth1_macvtap: entered allmulticast mode [ 958.929940][ T2952] veth1_macvtap: left allmulticast mode [ 959.092388][ T2951] dvmrp1: entered allmulticast mode [ 959.092578][ T2957] dvmrp0: left allmulticast mode [ 959.092682][ T2957] dvmrp1: left allmulticast mode [ 959.245921][ T1167] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 959.246012][ T1167] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 959.246061][ T1167] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 959.246103][ T1167] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 959.288060][T24917] block nbd18: Receive control failed (result -32) [ 959.290540][ T52] block nbd18: Receive control failed (result -32) [ 959.864219][ T2979] netlink: 96 bytes leftover after parsing attributes in process `syz.3.10901'. [ 960.937031][ T3014] dvmrp0: entered allmulticast mode [ 960.950536][ T3014] dvmrp1: entered allmulticast mode [ 960.951590][ T3014] dvmrp0: left allmulticast mode [ 960.951683][ T3014] dvmrp1: left allmulticast mode [ 961.288676][ T3020] netlink: 68 bytes leftover after parsing attributes in process `syz.2.10911'. [ 961.364952][ T3020] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10911'. [ 961.523490][ T3025] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 961.523549][ T3025] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 961.785791][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 962.243062][ T3039] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10918'. [ 962.714199][ T3050] netlink: 'syz.2.10920': attribute type 1 has an invalid length. [ 963.088615][ T3059] tipc: Enabling of bearer rejected, already enabled [ 963.121629][T32109] udevd[32109]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 963.517942][ T3063] netlink: 'syz.4.10922': attribute type 4 has an invalid length. [ 963.521757][ T3063] netlink: 'syz.4.10922': attribute type 4 has an invalid length. [ 963.759476][ T3074] dvmrp0: entered allmulticast mode [ 963.766091][ T3073] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10928'. [ 963.798388][ T3074] dvmrp0: left allmulticast mode [ 964.027484][ T3083] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10931'. [ 964.194597][ T3089] netlink: 'syz.0.10933': attribute type 2 has an invalid length. [ 964.197658][ T3089] netlink: 'syz.0.10933': attribute type 2 has an invalid length. [ 964.197677][ T3089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10933'. [ 964.435031][ T3095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10934'. [ 965.405117][ T3113] sock: sock_timestamping_bind_phc: sock not bind to device [ 965.515960][ T3118] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 965.523417][ T3118] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 965.942417][ T3124] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10946'. [ 965.971191][ T3128] block nbd0: reconnected socket [ 965.999830][ T3128] netlink: 'syz.2.10948': attribute type 9 has an invalid length. [ 966.163670][ T3130] vlan1: entered allmulticast mode [ 966.163716][ T3130] bridge20: entered allmulticast mode [ 966.177721][ T3139] tipc: Resetting bearer [ 966.177903][ T3139] tipc: Resetting bearer [ 966.281665][ T3124] bridge20: port 1(erspan0) entered blocking state [ 966.289118][ T3124] bridge20: port 1(erspan0) entered disabled state [ 966.297036][ T3124] erspan0: entered allmulticast mode [ 966.322190][ T3124] erspan0: left allmulticast mode [ 966.373517][ T52] block nbd0: Receive control failed (result -32) [ 966.436161][ T3144] veth1: entered allmulticast mode [ 966.635996][ T3149] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10952'. [ 966.659305][ T3149] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10952'. [ 966.788475][ T3155] block nbd19: shutting down sockets [ 966.802566][ T3160] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10954'. [ 966.825770][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 966.989083][ T3167] netlink: 570 bytes leftover after parsing attributes in process `syz.4.10957'. [ 967.284142][ T3176] netlink: 'syz.0.10959': attribute type 4 has an invalid length. [ 967.284182][ T3176] netlink: 116 bytes leftover after parsing attributes in process `syz.0.10959'. [ 967.284755][ T3176] net_ratelimit: 63 callbacks suppressed [ 967.284774][ T3176] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 967.678453][ T3189] dvmrp0: entered allmulticast mode [ 967.700604][ T3189] dvmrp1: entered allmulticast mode [ 967.704333][ T3189] dvmrp0: left allmulticast mode [ 967.704430][ T3189] dvmrp1: left allmulticast mode [ 968.710629][ T3234] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 968.980868][ T3238] netlink: 'syz.1.10968': attribute type 1 has an invalid length. [ 969.020772][ T3245] ip_tables: iptables: counters copy to user failed while replacing table [ 969.028947][ T3238] 8021q: adding VLAN 0 to HW filter on device bond17 [ 969.029450][ T3240] __nla_validate_parse: 2 callbacks suppressed [ 969.029464][ T3240] netlink: 570 bytes leftover after parsing attributes in process `syz.0.10971'. [ 969.224487][ T3246] bond17: (slave gretap2): Enslaving as an active interface with an up link [ 969.473238][ T3261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10972'. [ 969.473342][ T3261] ovs-system: left promiscuous mode [ 969.915355][ T3261] [ 969.917730][ T3261] ====================================================== [ 969.924840][ T3261] WARNING: possible circular locking dependency detected [ 969.931939][ T3261] syzkaller #0 Not tainted [ 969.936349][ T3261] ------------------------------------------------------ [ 969.943429][ T3261] syz.0.10972/3261 is trying to acquire lock: [ 969.949498][ T3261] ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 969.959884][ T3261] [ 969.959884][ T3261] but task is already holding lock: [ 969.967238][ T3261] ffff88801c2d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 969.978111][ T3261] [ 969.978111][ T3261] which lock already depends on the new lock. [ 969.978111][ T3261] [ 969.988500][ T3261] [ 969.988500][ T3261] the existing dependency chain (in reverse order) is: [ 969.997501][ T3261] [ 969.997501][ T3261] -> #10 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 970.006276][ T3261] down_read+0x4a/0x330 [ 970.011004][ T3261] kernfs_remove_by_name_ns+0x3f/0x140 [ 970.016974][ T3261] internal_create_group+0x58e/0x1180 [ 970.022859][ T3261] sysfs_update_groups+0x60/0x130 [ 970.028405][ T3261] pmu_dev_alloc+0x29b/0x300 [ 970.033526][ T3261] perf_event_sysfs_init+0x76/0x100 [ 970.039371][ T3261] do_one_initcall+0x250/0x870 [ 970.044661][ T3261] do_initcall_level+0x10a/0x1a0 [ 970.050195][ T3261] do_initcalls+0x59/0xa0 [ 970.055036][ T3261] kernel_init_freeable+0x29d/0x3e0 [ 970.060747][ T3261] kernel_init+0x22/0x1d0 [ 970.065653][ T3261] ret_from_fork+0x514/0xb70 [ 970.070780][ T3261] ret_from_fork_asm+0x1a/0x30 [ 970.076065][ T3261] [ 970.076065][ T3261] -> #9 (pmus_lock){+.+.}-{4:4}: [ 970.083183][ T3261] __mutex_lock+0x19d/0x1550 [ 970.088293][ T3261] perf_event_init_cpu+0x1d1/0x7a0 [ 970.093920][ T3261] cpuhp_invoke_callback+0x434/0x810 [ 970.099759][ T3261] cpuhp_thread_fun+0x362/0x780 [ 970.105132][ T3261] smpboot_thread_fn+0x565/0xa70 [ 970.110590][ T3261] kthread+0x38b/0x480 [ 970.115172][ T3261] ret_from_fork+0x514/0xb70 [ 970.120273][ T3261] ret_from_fork_asm+0x1a/0x30 [ 970.125563][ T3261] [ 970.125563][ T3261] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 970.133125][ T3261] cpuhp_thread_fun+0x127/0x780 [ 970.138511][ T3261] smpboot_thread_fn+0x565/0xa70 [ 970.143969][ T3261] kthread+0x38b/0x480 [ 970.148550][ T3261] ret_from_fork+0x514/0xb70 [ 970.153649][ T3261] ret_from_fork_asm+0x1a/0x30 [ 970.158934][ T3261] [ 970.158934][ T3261] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 970.166661][ T3261] cpus_read_lock+0x42/0x160 [ 970.171769][ T3261] static_key_slow_inc+0x12/0x30 [ 970.177253][ T3261] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 970.183582][ T3261] nbd_genl_foreach_sock+0x265/0x450 [ 970.189424][ T3261] nbd_genl_reconfigure+0xbbb/0x1040 [ 970.195224][ T3261] genl_family_rcv_msg_doit+0x233/0x340 [ 970.201346][ T3261] genl_rcv_msg+0x614/0x7a0 [ 970.206364][ T3261] netlink_rcv_skb+0x226/0x4a0 [ 970.211639][ T3261] genl_rcv+0x28/0x40 [ 970.216224][ T3261] netlink_unicast+0x7bd/0x940 [ 970.221499][ T3261] netlink_sendmsg+0x813/0xb40 [ 970.226777][ T3261] sock_sendmsg_nosec+0x13a/0x180 [ 970.232388][ T3261] ____sys_sendmsg+0x54e/0x850 [ 970.237657][ T3261] ___sys_sendmsg+0x2a5/0x360 [ 970.242843][ T3261] __x64_sys_sendmsg+0x1b1/0x290 [ 970.248287][ T3261] do_syscall_64+0x166/0x520 [ 970.253394][ T3261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.259797][ T3261] [ 970.259797][ T3261] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 970.267431][ T3261] __mutex_lock+0x19d/0x1550 [ 970.272536][ T3261] nbd_queue_rq+0x373/0xff0 [ 970.277555][ T3261] blk_mq_dispatch_rq_list+0x499/0x1990 [ 970.283768][ T3261] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 970.290685][ T3261] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 970.297194][ T3261] blk_mq_run_work_fn+0x16c/0x300 [ 970.302733][ T3261] process_scheduled_works+0xc3d/0x1630 [ 970.308795][ T3261] worker_thread+0xa47/0xfb0 [ 970.313904][ T3261] kthread+0x38b/0x480 [ 970.318482][ T3261] ret_from_fork+0x514/0xb70 [ 970.323588][ T3261] ret_from_fork_asm+0x1a/0x30 [ 970.328870][ T3261] [ 970.328870][ T3261] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 970.336077][ T3261] __mutex_lock+0x19d/0x1550 [ 970.341197][ T3261] nbd_queue_rq+0xc1/0xff0 [ 970.346130][ T3261] blk_mq_dispatch_rq_list+0x499/0x1990 [ 970.352196][ T3261] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 970.359040][ T3261] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 970.365536][ T3261] blk_mq_run_work_fn+0x16c/0x300 [ 970.371076][ T3261] process_scheduled_works+0xc3d/0x1630 [ 970.377132][ T3261] worker_thread+0xa47/0xfb0 [ 970.382233][ T3261] kthread+0x38b/0x480 [ 970.386812][ T3261] ret_from_fork+0x514/0xb70 [ 970.391907][ T3261] ret_from_fork_asm+0x1a/0x30 [ 970.397183][ T3261] [ 970.397183][ T3261] -> #4 (set->srcu){.+.+}-{0:0}: [ 970.404298][ T3261] __synchronize_srcu+0xc9/0x2f0 [ 970.409743][ T3261] elevator_switch+0x1e8/0x7b0 [ 970.415143][ T3261] elevator_change+0x2fa/0x480 [ 970.420524][ T3261] elevator_set_default+0x375/0x440 [ 970.426246][ T3261] blk_register_queue+0x3f3/0x4e0 [ 970.431847][ T3261] __add_disk+0x6cb/0xe30 [ 970.436693][ T3261] add_disk_fwnode+0x100/0x3a0 [ 970.441970][ T3261] nbd_dev_add+0x733/0xb60 [ 970.446900][ T3261] nbd_init+0x168/0x1f0 [ 970.451665][ T3261] do_one_initcall+0x250/0x870 [ 970.456945][ T3261] do_initcall_level+0x10a/0x1a0 [ 970.462395][ T3261] do_initcalls+0x59/0xa0 [ 970.467232][ T3261] kernel_init_freeable+0x29d/0x3e0 [ 970.472936][ T3261] kernel_init+0x22/0x1d0 [ 970.477774][ T3261] ret_from_fork+0x514/0xb70 [ 970.482872][ T3261] ret_from_fork_asm+0x1a/0x30 [ 970.488150][ T3261] [ 970.488150][ T3261] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 970.495963][ T3261] __mutex_lock+0x19d/0x1550 [ 970.501069][ T3261] elevator_change+0x1af/0x480 [ 970.506358][ T3261] elevator_set_none+0xb5/0x140 [ 970.511725][ T3261] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 970.518045][ T3261] nbd_start_device+0x189/0xb30 [ 970.523410][ T3261] nbd_genl_connect+0x167d/0x1cd0 [ 970.528943][ T3261] genl_family_rcv_msg_doit+0x233/0x340 [ 970.535005][ T3261] genl_rcv_msg+0x614/0x7a0 [ 970.540037][ T3261] netlink_rcv_skb+0x226/0x4a0 [ 970.545339][ T3261] genl_rcv+0x28/0x40 [ 970.549855][ T3261] netlink_unicast+0x7bd/0x940 [ 970.555135][ T3261] netlink_sendmsg+0x813/0xb40 [ 970.560416][ T3261] sock_sendmsg_nosec+0x13a/0x180 [ 970.565962][ T3261] ____sys_sendmsg+0x54e/0x850 [ 970.571233][ T3261] ___sys_sendmsg+0x2a5/0x360 [ 970.576417][ T3261] __x64_sys_sendmsg+0x1b1/0x290 [ 970.581862][ T3261] do_syscall_64+0x166/0x520 [ 970.586969][ T3261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.593371][ T3261] [ 970.593371][ T3261] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 970.601966][ T3261] blk_alloc_queue+0x544/0x690 [ 970.607253][ T3261] __blk_mq_alloc_disk+0x194/0x390 [ 970.612879][ T3261] nbd_dev_add+0x494/0xb60 [ 970.617815][ T3261] nbd_init+0x168/0x1f0 [ 970.622484][ T3261] do_one_initcall+0x250/0x870 [ 970.627770][ T3261] do_initcall_level+0x10a/0x1a0 [ 970.633217][ T3261] do_initcalls+0x59/0xa0 [ 970.638058][ T3261] kernel_init_freeable+0x29d/0x3e0 [ 970.643772][ T3261] kernel_init+0x22/0x1d0 [ 970.648614][ T3261] ret_from_fork+0x514/0xb70 [ 970.653709][ T3261] ret_from_fork_asm+0x1a/0x30 [ 970.658990][ T3261] [ 970.658990][ T3261] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 970.666192][ T3261] fs_reclaim_acquire+0x71/0x100 [ 970.671648][ T3261] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 970.677880][ T3261] alloc_inode+0xb8/0x1b0 [ 970.682762][ T3261] iget_locked+0x131/0x6a0 [ 970.687730][ T3261] kernfs_get_inode+0x4f/0x770 [ 970.693013][ T3261] kernfs_get_tree+0x5cd/0x980 [ 970.698291][ T3261] vfs_get_tree+0x92/0x2a0 [ 970.703222][ T3261] do_new_mount+0x319/0xdc0 [ 970.708266][ T3261] __se_sys_mount+0x31d/0x420 [ 970.713459][ T3261] do_syscall_64+0x166/0x520 [ 970.718566][ T3261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.724969][ T3261] [ 970.724969][ T3261] -> #0 (&root->kernfs_rwsem){++++}-{4:4}: [ 970.732952][ T3261] __lock_acquire+0x15ff/0x2e50 [ 970.738347][ T3261] lock_acquire+0x115/0x350 [ 970.743359][ T3261] down_write+0x96/0x200 [ 970.748111][ T3261] kernfs_remove_by_name_ns+0x4e/0x140 [ 970.754077][ T3261] sysfs_remove_group+0x101/0x2e0 [ 970.759616][ T3261] sysfs_remove_groups+0x54/0xb0 [ 970.765065][ T3261] net_rx_queue_update_kobjects+0x6b7/0x780 [ 970.771619][ T3261] netdev_unregister_kobject+0xff/0x450 [ 970.777680][ T3261] unregister_netdevice_many_notify+0x1be1/0x2140 [ 970.784682][ T3261] unregister_netdevice_queue+0x2f5/0x340 [ 970.790910][ T3261] lapbeth_device_event+0x407/0x460 [ 970.796683][ T3261] notifier_call_chain+0x1a5/0x3d0 [ 970.802309][ T3261] unregister_netdevice_many_notify+0x17f9/0x2140 [ 970.809234][ T3261] unregister_netdevice_queue+0x2f5/0x340 [ 970.815468][ T3261] internal_dev_destroy+0x127/0x170 [ 970.821278][ T3261] __dp_destroy+0x69f/0x9b0 [ 970.826333][ T3261] ovs_dp_cmd_del+0x23d/0x370 [ 970.831518][ T3261] genl_family_rcv_msg_doit+0x233/0x340 [ 970.837580][ T3261] genl_rcv_msg+0x614/0x7a0 [ 970.842594][ T3261] netlink_rcv_skb+0x226/0x4a0 [ 970.847892][ T3261] genl_rcv+0x28/0x40 [ 970.852411][ T3261] netlink_unicast+0x7bd/0x940 [ 970.857680][ T3261] netlink_sendmsg+0x813/0xb40 [ 970.862957][ T3261] sock_sendmsg_nosec+0x13a/0x180 [ 970.868495][ T3261] ____sys_sendmsg+0x54e/0x850 [ 970.873767][ T3261] ___sys_sendmsg+0x2a5/0x360 [ 970.878952][ T3261] __x64_sys_sendmsg+0x1b1/0x290 [ 970.884402][ T3261] do_syscall_64+0x166/0x520 [ 970.889504][ T3261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.895906][ T3261] [ 970.895906][ T3261] other info that might help us debug this: [ 970.895906][ T3261] [ 970.906117][ T3261] Chain exists of: [ 970.906117][ T3261] &root->kernfs_rwsem --> pmus_lock --> &root->kernfs_supers_rwsem [ 970.906117][ T3261] [ 970.920013][ T3261] Possible unsafe locking scenario: [ 970.920013][ T3261] [ 970.927496][ T3261] CPU0 CPU1 [ 970.932856][ T3261] ---- ---- [ 970.938251][ T3261] rlock(&root->kernfs_supers_rwsem); [ 970.943712][ T3261] lock(pmus_lock); [ 970.950117][ T3261] lock(&root->kernfs_supers_rwsem); [ 970.957996][ T3261] lock(&root->kernfs_rwsem); [ 970.962751][ T3261] [ 970.962751][ T3261] *** DEADLOCK *** [ 970.962751][ T3261] [ 970.970902][ T3261] locks held by syz.0.10972/3261: 4, last CPU#0: [ 970.977350][ T3261] #0: ffffffff902c18e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 970.985532][ T3261] #1: ffffffff905c07e0 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_cmd_del+0x82/0x370 [ 970.994487][ T3261] #2: ffffffff90250a60 (rtnl_mutex){+.+.}-{4:4}, at: internal_dev_destroy+0xf0/0x170 [ 971.004051][ T3261] #3: ffff88801c2d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 971.015351][ T3261] [ 971.015351][ T3261] stack backtrace: [ 971.021235][ T3261] CPU: 0 UID: 0 PID: 3261 Comm: syz.0.10972 Not tainted syzkaller #0 PREEMPT(full) [ 971.030593][ T3261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 971.040642][ T3261] Call Trace: [ 971.043921][ T3261] [ 971.046853][ T3261] dump_stack_lvl+0xe8/0x150 [ 971.051456][ T3261] print_circular_bug+0x2e2/0x300 [ 971.056483][ T3261] check_noncircular+0x12f/0x150 [ 971.061427][ T3261] __lock_acquire+0x15ff/0x2e50 [ 971.066290][ T3261] ? irqentry_exit+0x218/0x910 [ 971.071056][ T3261] ? lockdep_hardirqs_on+0x7b/0x110 [ 971.076264][ T3261] lock_acquire+0x115/0x350 [ 971.080947][ T3261] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 971.086595][ T3261] down_write+0x96/0x200 [ 971.090845][ T3261] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 971.096479][ T3261] ? __pfx_down_write+0x10/0x10 [ 971.101331][ T3261] ? down_read+0x2be/0x330 [ 971.105750][ T3261] kernfs_remove_by_name_ns+0x4e/0x140 [ 971.111235][ T3261] sysfs_remove_group+0x101/0x2e0 [ 971.116273][ T3261] sysfs_remove_groups+0x54/0xb0 [ 971.121225][ T3261] net_rx_queue_update_kobjects+0x6b7/0x780 [ 971.127153][ T3261] netdev_unregister_kobject+0xff/0x450 [ 971.132698][ T3261] unregister_netdevice_many_notify+0x1be1/0x2140 [ 971.139116][ T3261] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 971.145879][ T3261] ? ref_tracker_free+0x689/0x830 [ 971.151018][ T3261] ? ipvlan_device_event+0x146/0xfa0 [ 971.156352][ T3261] unregister_netdevice_queue+0x2f5/0x340 [ 971.162071][ T3261] ? tun_device_event+0x78/0x11f0 [ 971.167181][ T3261] ? __asan_memset+0x22/0x50 [ 971.171782][ T3261] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 971.178019][ T3261] ? macvtap_device_event+0xd1/0x400 [ 971.183404][ T3261] ? __pfx_ipvlan_device_event+0x10/0x10 [ 971.189033][ T3261] ? pppoe_device_event+0x80/0x6c0 [ 971.194197][ T3261] lapbeth_device_event+0x407/0x460 [ 971.199395][ T3261] notifier_call_chain+0x1a5/0x3d0 [ 971.204516][ T3261] unregister_netdevice_many_notify+0x17f9/0x2140 [ 971.210932][ T3261] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 971.217699][ T3261] ? do_raw_spin_lock+0x12b/0x2f0 [ 971.222742][ T3261] unregister_netdevice_queue+0x2f5/0x340 [ 971.228475][ T3261] ? netdev_work_dequeue+0x225/0x250 [ 971.233767][ T3261] ? __local_bh_enable_ip+0xd6/0x140 [ 971.239055][ T3261] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 971.245297][ T3261] ? netif_rx_mode_sync+0x43/0x50 [ 971.250318][ T3261] ? dev_set_promiscuity+0x1cb/0x220 [ 971.255604][ T3261] internal_dev_destroy+0x127/0x170 [ 971.260812][ T3261] __dp_destroy+0x69f/0x9b0 [ 971.265318][ T3261] ovs_dp_cmd_del+0x23d/0x370 [ 971.270005][ T3261] genl_family_rcv_msg_doit+0x233/0x340 [ 971.275565][ T3261] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 971.281642][ T3261] ? bpf_lsm_capable+0x9/0x20 [ 971.286327][ T3261] ? security_capable+0x7e/0x2c0 [ 971.291350][ T3261] genl_rcv_msg+0x614/0x7a0 [ 971.295860][ T3261] ? __pfx_genl_rcv_msg+0x10/0x10 [ 971.300883][ T3261] ? __pfx_ovs_dp_cmd_del+0x10/0x10 [ 971.306081][ T3261] netlink_rcv_skb+0x226/0x4a0 [ 971.310840][ T3261] ? __pfx_genl_rcv_msg+0x10/0x10 [ 971.315860][ T3261] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 971.321140][ T3261] ? down_read+0x2be/0x330 [ 971.325580][ T3261] genl_rcv+0x28/0x40 [ 971.329562][ T3261] netlink_unicast+0x7bd/0x940 [ 971.334321][ T3261] netlink_sendmsg+0x813/0xb40 [ 971.339086][ T3261] ? __pfx_netlink_sendmsg+0x10/0x10 [ 971.344366][ T3261] ? apparmor_socket_sendmsg+0x98/0x360 [ 971.349988][ T3261] ? __pfx_netlink_sendmsg+0x10/0x10 [ 971.355263][ T3261] sock_sendmsg_nosec+0x13a/0x180 [ 971.360284][ T3261] ____sys_sendmsg+0x54e/0x850 [ 971.365042][ T3261] ? __pfx_____sys_sendmsg+0x10/0x10 [ 971.370318][ T3261] ? import_iovec+0x73/0xa0 [ 971.374886][ T3261] ___sys_sendmsg+0x2a5/0x360 [ 971.379549][ T3261] ? __lock_acquire+0x6df/0x2e50 [ 971.384476][ T3261] ? __pfx____sys_sendmsg+0x10/0x10 [ 971.389664][ T3261] ? futex_wait+0x2a2/0x390 [ 971.394221][ T3261] ? __fget_files+0x2a/0x420 [ 971.398808][ T3261] ? __fget_files+0x3a2/0x420 [ 971.403522][ T3261] __x64_sys_sendmsg+0x1b1/0x290 [ 971.408455][ T3261] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 971.413919][ T3261] do_syscall_64+0x166/0x520 [ 971.418544][ T3261] ? trace_irq_disable+0x3b/0x140 [ 971.423560][ T3261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.429618][ T3261] ? clear_bhb_loop+0x70/0xc0 [ 971.434287][ T3261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.440182][ T3261] RIP: 0033:0x7f74b439e159 [ 971.444603][ T3261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 971.464202][ T3261] RSP: 002b:00007f74b25f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 971.472622][ T3261] RAX: ffffffffffffffda RBX: 00007f74b4626090 RCX: 00007f74b439e159 [ 971.480585][ T3261] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 000000000000000b [ 971.488543][ T3261] RBP: 00007f74b443503b R08: 0000000000000000 R09: 0000000000000000 [ 971.496505][ T3261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 971.504465][ T3261] R13: 00007f74b4626128 R14: 00007f74b4626090 R15: 00007ffc62627fc8 [ 971.512464][ T3261] [ 971.773513][ T3258] netlink: 'syz.3.10974': attribute type 10 has an invalid length. [ 971.865712][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 976.905808][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 977.666064][ T1691] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!