last executing test programs: 15.694349207s ago: executing program 3 (id=5762): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x470, 0x0, 0x268, 0x33a, 0x268, 0x268, 0x3a0, 0x460, 0x460, 0x3a0, 0x460, 0xc, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0xd8000000, {0x9402}, [@common=@inet=@hashlimit2={{0x150}, {'pimreg\x00', {0x2000000000, 0x8, 0x0, 0x1, 0x10000000, 0x5, 0xd}}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@rand_addr=0x64010102, 'dvmrp1\x00', {0xfffffffffffff000}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x41, 0x30, 0x0, 0x5f]}}, 0x0, 0x36, 0x0, 0xa, 0x32e}, 0x28) r3 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r3, &(0x7f0000000340)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f00000003c0)}}], 0x2, 0xc000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000ff0d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r4, 0x2000012, 0xeaa, 0x7ffe, &(0x7f00000003c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000a00)={{0x6, 0x4}, 0x100, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="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"], 0x270}}, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0xfc) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x1c, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x5, 0x2}, {0x7, 0xe}}}, 0x24}}, 0x0) setsockopt$MRT6_DONE(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) 15.267583411s ago: executing program 3 (id=5766): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11000000040000000400000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23048000000f858db343f00000000", 0x35}, {&(0x7f0000000600)="051a00000e800065589ab62b0ce07be2525ff592bf22c3126481c865", 0x1c}], 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000b06010800000000000000000600000205000100070000000900020073797a31000000001000078009001a"], 0x38}, 0x1, 0x0, 0x0, 0x20008041}, 0x24008084) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @broadcast, @broadcast}, &(0x7f00000002c0)=0xc) r8 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000380)=[@timestamp, @timestamp], 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYRES64=r7, @ANYRESDEC=r5], &(0x7f0000000300)='syzkaller\x00', 0x800006, 0x8b, &(0x7f00000015c0)=""/139, 0x41000, 0x0, '\x00', r7}, 0x94) 15.047804124s ago: executing program 3 (id=5767): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x3a, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r2) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, 0x0, 0x4040084) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0x700, 0x0, 0xc, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @broadcast, @loopback}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000200)={'tunl0\x00', r4, 0x40, 0x1, 0x2, 0x9, {{0x5, 0x4, 0x1, 0x5, 0x14, 0x66, 0x0, 0xea, 0x2f, 0x0, @local, @multicast2}}}}) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040)=0x1000001, 0x2) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x2000000000031, 0xffffffffffffffff, 0x0) 14.792072951s ago: executing program 3 (id=5771): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x23, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r1, 0x800) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, 0x0, 0x2, {0x2, 0x0, 0x2}}, 0x18) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="74010000", @ANYRES16=r5, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088048010c8054000b800800090000000000040009"], 0x174}}, 0x0) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYRES64=r1], 0x78) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="0300000000000000380012800b0001006970366772650000c8f370082800028006000f008000000014000700ff010000000000000000000000000001060010004e210000"], 0x58}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x1, 0x7bca, 0x5}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYBLOB="1a2383166cfb08b7551aec27228cee5136c1c6063f6e42c3f993a621a2f62a7a172a8df0ee2209ebede6179d447d68013f2a066ff3f0c577eaf85e6ce50127215f50d4c80cde5e812c22da01e8d0a84ab4861ca4bce84935c9394e18501ea3fa2fd8d3cc06", @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r11, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) pselect6(0x40, &(0x7f0000000280)={0x6, 0x3, 0x7, 0xffff, 0x7, 0x2cb, 0xeea, 0x3}, &(0x7f0000000300)={0x8, 0xf, 0x97d, 0x100, 0x6, 0x3, 0x2, 0x8}, &(0x7f0000000340)={0x6, 0x9, 0x10001, 0x8000, 0x3, 0x4, 0x20000000000000, 0x9}, &(0x7f0000000880), &(0x7f0000000900)={&(0x7f00000008c0)={[0x52e]}, 0x8}) setsockopt$packet_int(r11, 0x107, 0xe, &(0x7f0000000000)=0x9, 0x4) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r7) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000a00)={0x68, r12, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x800, 0x55}}}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x40}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xcc}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x5}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x71}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x8}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x9}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000002580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xa02004}, 0xc, &(0x7f0000002540)={&(0x7f0000003700)=ANY=[@ANYBLOB="34110000", @ANYRES16=r8, @ANYBLOB="10002dbd7000fcdbdf253a00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x1134}, 0x1, 0x0, 0x0, 0xc0}, 0x200cc086) sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400001}, 0xc, &(0x7f0000000440)={&(0x7f0000000840)={0x28, r8, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7, 0xd}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24008004}, 0x20000040) 14.330833641s ago: executing program 3 (id=5776): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000240)="a85751ad519b201965da2ebcc4898c7f46cb0819b38bbf504fd2617bf9689f2cdbe63959901f5afb841befbb8787b77bc6855e836e2c277f600c31ff7ea5acf0a9525fa1c161d06b23b802aaf4716846d96af1654995ec32db50c7e056aa45", 0x5f}], 0x2}}], 0x1, 0x20008000) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r1], 0x20}}, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040080}, 0x40000004) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x9bfb3310afb1717}, "62abe0eba8446300", "5a8165de50a35f8124246fece91e946a", "dbfaa1c3", "a85e3fd122d44367"}, 0x28) 14.029678441s ago: executing program 3 (id=5781): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x3a, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r2) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, 0x0, 0x4040084) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0x700, 0x0, 0xc, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @broadcast, @loopback}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000200)={'tunl0\x00', r4, 0x40, 0x1, 0x2, 0x9, {{0x5, 0x4, 0x1, 0x5, 0x14, 0x66, 0x0, 0xea, 0x2f, 0x0, @local, @multicast2}}}}) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040)=0x1000001, 0x2) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x2000000000031, 0xffffffffffffffff, 0x0) 3.18908428s ago: executing program 4 (id=5831): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') ioctl$FICLONE(r1, 0x40049409, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000b80)=@data_frame={@a_msdu=@type01={{0x0, 0x2, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {}, @device_a, @from_mac, @from_mac=@device_b, {0x6, 0x8}, "", @value={0x6, 0x1, 0x2, 0x1, 0x96}, @value=@ver_80211n={0x0, 0x8, 0x3, 0x1}}, @random="01ffa9f20d890b31ee114e7352786b098133d0e1a2e0864d7a8284ec2e52abfef7378b3fe2c86541877db2e5a3ddbbdd8a4130aac2245d03c2b8b80ee47e1e18cd5256c28aa02f3057f70978a41b2cdc0a1e6ee7e8f6c4518025ccd14c3f0ee92d28ab6188a1a1e492a6c1e92001a6986e82fe3cfcedf3e3e41110a08a4532a7a82efbe31e67e2ddaf73d10a9c95720abeb3eed3cc56ac016e1f67b5d82797ccc7242a6ec64efc5cde21f8f05ee920bbaa26cb2d66c331e8a367b99b133f58906a25a17edd9f18d04d083baa66ff82e925224b34e14f5e2ddcfa7e666ad210989a01de36d85858884bf496851e409603582860386e0dcead92dbba9596d8162c7224a5748e04906c5eee9b4811d5e8066ebb95f4e8cc42f3a4450f1921d22ffdbef6d5948fc45d402b548e22ea906de5c9216d7488f399da253d4d5b8ed6b59feed737820b2af2f44000e7e1b33f3effd19b6ef1bab6b68bb6d396ffaf479e1e0aebfa09563419b4b5eb0a6e0e3576cc16d0739cc53fdfa36b20c44cd31abef9c8fe0fb60ea0a457a33cf82aba1b102b2d04ab67dbdb07defee1fba06c8758bce67bb9f725fb67b2a56dd41542053bb8593c01a1036940e48fb243d752ac1e4f5b399814a836f740870b21ec629d6ebd7579b4b6affcba6a1ac60c36d2cda8357e94b63405b44016179c57e84e9f35084997b7a3c918f0683d610b97969e499c68dd028ff3092f2940ff5e8b27711682500b127993381700df13edf382624a7e409a7b18334ba1dce9b09406871cfe00ca49aee800d84d4394396ec5a3ab39a13a5e642dc5a4ebb1718de8014afdaefba8e6df204808100258a3216c7e20ed3fff7b8e7b7bc5e8a59d0447e8781a512052dbcc9ce9dd81943739d839c0ba336d03a20f56652b8166211d05672a8ff8483bf8a8d1da6ba366105b4adca8d933de7d83c636070b0c5ed6085aa0bc996463db5462a1eeea4de7d7723f215550ef69e1049e8a43a54ed38a509b63d9f9458cd15a7595029c1adc5297abab32954517ec705cd31e92da69deebd0a9cc45d866e96d67828bb2b5af357f523010e66cfd2d74067ef1c575cf8935516a80b759f4c3330b695225f1d291f99b71cb7f0181a8f18af019ab0965081abd54f3044b6fa08ccf5d6891797dd76717fed998b59902a87f8641596099382abe8d053aaf92c99a96d33a94527e8d2b237eda602a20204d5b6e25d8756ef0f4eb334267275cfa946f7648beb98ceaad1d68baa8180f1627705b61471dace8c55cc2c92e9ffd8f7117974afe05a7a46f78933ee02ee61f727bb3fbcd60e367f73dfe1be7d80479ec7581ecbe96c3326c0809e85ab86e4ed55db9d6089e02d3e2e14d57cc1d053955a164ca2249b9f34e9d6f7e97f20e8ae1108435a7f4bd194ac166c743c0721b98d738af2570d84bda8c3d302401bee1a3658d7ef2645b1c0a9594354c9fc5392f150ae732aa0481cc0ca4169e06b52d5b48b3a04a6578deb2e5fe0f393d76fa5da73aedd316242b155190229b3aca0356c1d412a8a791192f50669e0ea1ff30b94b499e32c19dfb44c1552b4fd61770cc2a8adc6abe927eebb74bf0f0e37a2c33c7eea73cd95482dee76e968ce567f676aca3c2e99aa33c7fb3a585b9a9e259c4107033af8bb1e6578b006e03cfda5bf49fdd3c36b076358c71c391ecdbd6cdfe93c3bb0bcfb9878963bb1e0926d77f0767f046d46334c779548124397b0a4a1a724796579cd63cab1ba1078a3a21a748ab078f4b896ad7f9b6c7fe76df2d0732b2ebf0d90d041964276a3ffa213ef6e2cede43bc8446e1a57a48d69487dd1244445477ccd93cce5c2bebe524b580cad8b958af350534541d30e69d5b2bd80fa3f14b50ba27b70f8a5e179354502ae75631c6ccc73cf410fbbe1dd6fa0123376bd94c87c857dd106c5f614d0b"}, 0x57c) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)={0x28, r3, 0x8, 0x70bd2a, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x2000000, 0x55}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8810}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r2) 3.026980328s ago: executing program 2 (id=5833): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18cf0ddd35e4e563def01aeb242e000002000000000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x1, @ANYRES64=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001f000200000000ec00"/28], 0x48) tee(r0, r1, 0x6, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020206b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x1, 0x6, 0x0, 0x100, 0x4, 0x500000, r3}) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x9c}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2ea}], &(0x7f0000000100)='syzkaller\x00', 0x1ff, 0x2f, &(0x7f0000000180)=""/47, 0x40f00, 0x25, '\x00', r3, @sched_cls=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xaa9}, 0x94) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pwritev(r2, &(0x7f0000000280), 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) (async) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) bind$can_raw(0xffffffffffffffff, &(0x7f0000000040), 0x10) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)=ANY=[@ANYRES32=r5, @ANYBLOB, @ANYRES32=r4], 0x20) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x1f, 0x0, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000002f00090027010000fbdbdf25040000000c000c00400000"], 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) (async) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @remote, 0x2, 0x6, 0x4, 0x100, 0x6, 0x44, r3}) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@ipv6_newrule={0x9c, 0x20, 0x300, 0x70bd27, 0x5, {0xa, 0x0, 0x14, 0x0, 0x4e, 0x0, 0x0, 0x2, 0x8}, [@FRA_DST={0x14, 0x1, @private1}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x24}}, @FRA_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x7ffc}, @FRA_DST={0x14, 0x1, @private1}, @FRA_DST={0x14, 0x1, @private1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x400c844}, 0x0) 2.934323791s ago: executing program 0 (id=5834): socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240488c0}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000008c000000060a010400000000000000000100000208000b400000000064000480340001800b000100657874686472000024000280080001400000000c0800034000000002080004400000002205000200070000002c0001800c00010062697477697365001c0002800800034000000002080001400000001208000240000000120900010073797a3000000009140000001100010000000000000000000700000a"], 0x100}}, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) (async) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, r5}, 0x14) (async) sendto$inet6(r4, &(0x7f00000000c0)="800034ca269bb73c", 0x8, 0x200440c0, &(0x7f0000000040)={0xa, 0xfffd, 0xff, @private2}, 0x1c) (async) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_extract_tcp_res(&(0x7f0000000080)={0x41424344}, 0x5, 0x1) (async) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x1062, &(0x7f0000000700)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x2, 0x6, 0x1054, 0x66, 0x0, 0x4, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}]}}, {{0x4e20, 0x4e24, r6, r7, 0x0, 0x0, 0xe, 0x10, 0x7, 0x0, 0x5, {[@md5sig={0x13, 0x12, "0081665401df144599ad088c93d6f4a8"}, @md5sig={0x13, 0x12, "79f27bbffde0a0eb89320d86a9d4065a"}]}}, {"34446f42f0eb9e1fe5c9f046403d4b02472b99353e334a8ec2ef7d8ef38522dd947b38d416510711707b7adc21e49ec620aa1060402cdd7b9c5688929a5470a54d59087241cca113c487abc528e6a11e314002f2303c395e68d0aeb1a3e91f152960b5cd98e331d7de1cd740fc0b585a1d4566ec88d41b6c8c732521edf29bfc2823f49ec4d8fed5af5bc0ec562c1422e862ac3a1b19892559f3f606aa8d58518167eb0ef3623b2b5e3c670efcdd1cdab1b1393c263c2dd145d7beaae82fda3239cf5fe5af548a36b8009f0a7f36a08d7b837007779bbc3ac5c8b2cbbe9ce17e2daba63d671db2c82f84f7642573cdff874e30d68492764f22d2bafef2c8410a1b54e7b423936d1b41b40e591b64ae723abb70a53ef71d88fe928ba86f89e7d22952d0ffe1df524cc1c55ccc863ee3b6f2be463777bcebeb21dea73df1a26a95310f5aab8233c2ccd0c49ff51da4ed18d36ecc13c055219aaeb486ec42f98624c43e287211f345b7c7442ccb4181ecba0273310c716443656187cf9053087567197ff922cf2ae254dc5d1b06626d2b9becab5bc2f78194583af355d4df71ec0c31966b0c3a82b8a6c0bc590279033161d9aa13527ac2148eb32ed432467f6a252c93ac0ad45effb7e512cd99a70d01c3a9519c73284ae9995b3cf62cf67676c647e3214a6816dc112dc90452b2f3e1df517bfb86d52c7f5515fbf8fe7948298aa4572df1c95cb9151a66ef8642f653bc2fb1108041f7290d01edd2de934d44a0d56acafd45985f9e4e37d826e9349ca0b7d630f59c629960cec147c321871df7fb8c6c4ec30b93e0939f1120486a95e5542eeffa970b65d0537a98a54f73e8225c43b0bcff5e7506649efbc72a8dfbce4f5e7366a65c8107a644d22050635e81363b47485d7976b3e1db64f075f1cf95112ae03a4fada67eab64f0b55ad21279f5f51e9d8e999459e0e6b97eba808f1e4c34899b4873e121766f6dfdeb99195ac28f77ab36ac99f3aa8b6ed13d9fd9876b938034deefcb8b2b0b34ba8c430a2ae79ef0614b262098f41b294c580a995e28f41e3c63f23b360424d0afe00a4463473d89efe91058dd927d0af4dc9522da3cdd94532ef72effedd910d7b61d298c8c8f96bfd5cc2de20ea1f8521433dbc0234671429902d22466010396c3cbb2ca4c5e1398124e2ac8e4c5266c36ee87a5462c62f0e13a5ab5b24d9e03e98a75b13a3be3128d0427a68561d4b309fee623ddcce9efb41de67499ef476b50116025201f5e5546f8a842cd0311585e331a513f7c72bf054864979288185693df8600a56cd5626d127976424a590d5948eae6e7c109def3b033420e66d3fb7741a5545d74a79a8e8d2ba865a23aaf7ed8531bcdf49be9107a11fb7b791bc2dab306f30765b54f5ec044a7e946119628b7def6d64260e7e2e07f5b8c4af008be4516caf5930159bf1b98fcf35e2649b3116c1e0d5b8f04b1fe9e0b0b66af517446ba4f6de8e769b22daf1311ba72b8e5b7e1d2de2902bf0abe65891f04ceeec88af922a44490da59751300ed6a54b589a4ab034547e5e9c591a440c4dcc39fb45f792bfd731d2c4d9b50751ba1d4e0fa3c46a4624abc250ab7112994583f67014e9ebb8da7ca2f8713bb35ab7116319fedb218fb5114fab8df59770414c632e07c2b16deabca36ca9829f837a4a961c128c5db2f95666c6ed2e3ccf1dbf0a981426a462a987e083d68b797e1092dfe89730ff4b2d1db4df71095d2ed38c38b13dd598956153cf962862df2d7df6990b4a949181de89f05fc043fef0bdafc6c683b31d4ecf4e0ef80763a5f4146c8aa894d6463ff7e2e49cda03d0e6b615b12e2cc6c2ead8506c6b04bf149977a38edf04ece26e2ed1cc6587db9da1f4675fefbefe1c870ce8a4ee52a565aa5485027f861e92217c281f3cc95ac1825be1a34c0ce07f341cf37cef91d6f36bdcfd1a034d73ab50892c74b247b9a3d4e2c798bfe23c9d233f90a91f138991fca8caa549bdc0ec201fee963315a372136af08d9fd52b7fe760fea2749e3a83e3d2a80fd2167217242409bac70254ddc46d5a792eb36daff1713a7f4719579682ec58ffaa7686547131388332524dc508729747e0fe999301410272146a05262d5ff9021bf2e2f9906c9d44142c71ec07bf035fd703aaaef84f24a0c17767b813a65e855b453211896f5d3d39fb4b948c615413feb2ea2c1d7a619bdd7f849a2b1a610daea36e83922496f1640c2476cc2b23c12a1f741d68b983d7b879d25a22031dc9eb6dae6b80bd1b66c2f6585e3a495510e6c0f2cdfb5181c410f64919f774b07cd452cec144ed0d3e9cc98297a9d6d2046e6ef26a79ef0fb7979d38facf8c1e45e43dff6a7fc36b8144f57c1b924997a73df94ffb30792d942d9455b258c8a65927ea956fc465cf8afb9ed236d1b01c9355d9b921fe5606de848c19a697d1bb6a2cf31da3c4ad338b1ab83be0dc16e2d90484623f2eedd421046e05988c29d5a146bc2019581290bdf01a01757769c32709eea450d44d1ff9fd96bbf56642551f6263616da84eb5fb9dffa436d5c2a0e69981f994bb015fd103c574b9b52f313cab3fb235493b3f410cd6dca37da753123b744c03f4e5f42d19d6eb41e4b2c42f0bcea0f5fbe2a9d3a80c68d317c1c9d45d9e7aed2acebc036e369c4c7296c3fda5cd1722b5ee462e9e24c73fc00d35eea9ab15a9a9a55978334bde1c0f4d55a1094b5160895bbb754f732adaef26dbfe04e25a7677686859e3fa6b1660174c073d5c9b616758986a5d7855d80e3a6bf2561859c97cc7d2af2cd2823e13ceda1fe0c97509bb1adac9164e2ffe996f7a6b4c598040e3654642ae945a3899a6bc3c86c570825f1d840736a7d029038ca77576622c078a46c5054c3a9de5481f79a53d8c05d874ee07d70c42747052b0cb83c2c00362ded2bdfd04e59637132eb24b5d1fd66ad5f3948233419a8d3c4c77223b44c2c3765bad43ab020cfa0366b97f052e7ddc60823a18599bb2e300e812ab32b66d993520937b5b0fc47c89664725298fbff45c77fbe60eb9db28adc6bac2b09fe924ad277a139e12cef25a311ad492183eb7de4096cd8457c2aa47331e8fb07d68ca1a1d3373ef11dd5cedfcf0c76ba35ddb2382cf3b403c48955fb52832c8201a96c2f92ca950a6925d5cceb7404514d9aeb689f66f78af6a3c04f5c3388ee333fef8cad262564f38ff7aa7a56e993bc400045ef69b381abfec72214dea35c6c0a0fb7ca1b1ab9c6a38e1b9d5df501bc1f06d49c1b0a41e717f9554b2df8ee6adf42e8bbc9c5315f90c520e2ae886e073d800026dd8b530d6724e05f7c6dfbf5f0558aa1498f048ea16a711fdbdde5b5e1ae60709ad6dbc877463d68dc35db97f4229707c27bf0581193565f7750e941415e7eb1c217aff469a4f2a4ce0b713247b05bc590fab73638057eef365f272c5326fdc6886fa6ac63ca9ad435658de1c23adc27db0946fa9a75d1b621a4e617354acc3e0db7057f4e51eb7d15e55d6908899df863d61ec88cb3c23b2de0fdf52d0750917bade27d6625a82ad50eb6ace83440ff239bb56cb79796a96dc83d043bd5aa43011e5812a182656a5ba50e3b23b687ca8da85a3311003be288b36c138280983d70f39f16468635dac2be7b9d53eb83ff8ee83265c953e6f74939903f0691ef944c2da8304926bcc7977420721673d56450c7d0f796018fa328e8c4041be12dcb15b40d061eda35e8774100a52e851ab0c55e80b91cf93ed7bcb4f5381f4202157787a2375e3d9f0f9ca4501f6e2e8a5e82117013659c90175aa008d8dfa6e9a3e9c5145f09fdccf012eaab5363b8e0d2013890764d9a3531c5874c6ba8ca5e7eac74c5752ba8f7fb694d0bc0aa875304f3beb34c47e4b65ed0aee05daecf095c594e74d052691e6e6737de903f007ef2cb5ddad2a209365674f792a229cd3dadd86817df112ac97ea5749ec9a5dca8e182f33b2de0815171e015daebed5be37a7f916de3880d53bf0f0ab51680b21263d37a5cc4ec1371a9df140c1588bb8beaf619dfd62518af197f376ccf2f923e16bab1203728f3a113b02b3061735c623f18d172cfbeb9156e468554cf14d2ac49e5ce7ab095397792de78fe1fab022235bb074597b272446bd0aa1fd57b07feccdba9e733fd7f204e970aac8da06e5467e9d61fd73746fc0c855696f82d6a473332ed53b6ca7a1ca7cef8a08d01c4297ba8dc0008bd8a021167a11e418d40d220f99ccdd60981086f4c538f4c1e2939161ba3b21df13a89856942e1270e09959a571085add5d15854ce8e6331b63cc60662710a3d9c3dde6bbc02d954dd06f418b61f63b155e3e0eb238b8bd414721bb6998772897fcbff67563e7ee2758b5446519d59fa974b48809f0dffe31dd0438e11b6f7c2ea953e47b895c0f54ac9bbae85ac86966ebcc11ce1bd3ba8a5d9d6403512c3c2b98d5efcb8bf665418fb27f0e8720584d0fa9b9d22b398d750ad101c3c85e5c136cb143a515a15510b2f02b11eed6c0eea986a8da560ea25676b9c4bf983d93059ba46b7c2b87dc30176d3a42fbacdb5d8c7ea24f54a5ab1da5b365de73ff47290ff6393e9ce9dce121c74efd928961d01fb62bec65dda3d84905549a89bd42b14a891a4139c72fd7ba888bb288cb618b98151e326711ac1cef8ad7e5f6b708eaaa2c26b3e7ae2c7ea970ec83ff2e857d7d26fa3f3096d811f3b84a18d7c948f5a4cdf4a382e4c365b68760f754dd4ba6e3629d015379b2db27fe7ad94c56eac63b5b9b0b77e9e3fe39bc30eebeb899acb21ebb23f4a38e9c2887693179d8b97c1373a67918087e1854ebb58337040a3430bff3f1293ab53b0fb76a68255568d9123b9aba8d8c918896211e497984ad1d4a875f34e5d709e0d9619f8cafdc492269ab2e9c5123019b8a68257fc19bb0224fbcdf6e2f319f11f64b5ec76a2898b6fee3531a94a196f8487a41c2c62f089ac0792420be7ee49d135512ff61fbf489046663269e5325645825c31f38fced2aa34f728aec02a136ccf1071914763ee5eb68dd63abc6a482b152be06cb3213a09c64a9164df07e48b1413b6a540fba5e2dae4d645114afbc2f15c7d3e5a529d1162bb2b9dc77b6a60947f92b2276bc5f4f7bb9312f75fa93747193ebe1a73447ebb0a883e1bb0557baaa22580f52926d8a98da8b4189f15f0b7a02db27b4fe17ba2225ef31d549b54a00455e0a6fabf6f4273567d907521df0442c844dc4fedd9daa459b8a8bbe7e9cdf0229a8e5b356612f02d890e52ba67c8459fa45194324ee8b694a601bad5f38ee6b769c0db748f82f886b6494831ec46549e5f7b265a850b8c58e44221691c94a4e1a111232755c041e39c2139fa78d3e6701d632daae1fad40c93540a9ac1e1cd56b4cdbf288cf0ecbae02b832c8a4074402b5ffc3cb549da8220956e45a3627313206025b1396d5a345f01ae19000003ecdf3b5dfca04499aa331f4fcf8c183b041812866746a207cfc810c5f613e850a71e6940244645dbe2042db82da1e4c678a92fa81de74027490221e29aec8a73e218684c01f8474d80b1229abe5174582da9470aa92e5aec5b8c3f53b004cbb079a3b46069f59913898d18be28a0c6b2d78db389b2a3928a5cd756e79f83addbdc0e2329265752c42f78c1f71542de5c5c3d30e95669895048142ee34023afe71a28aa631f808ec10a19619df82d62ecd7f3b509b87d3fb63530ae5babcc2d793b7aece2f7cfcab38f410cbf469192ccb16de1f5544493e4991ec36ec24043"}}}}}}, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) (async) write(r8, &(0x7f0000000000)="240000001a005f0214f9f407000982001f000000fe0000000000000008000f00fd000000", 0x24) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r8) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, 0x0, 0x0}, 0x20) (async) r9 = socket$inet6(0xa, 0x2, 0x0) close(r9) socket$nl_route(0x10, 0x3, 0x0) 2.70062971s ago: executing program 2 (id=5836): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0xfffffff5, {0x0, 0x0, 0x4a00, 0x0, 0x2844a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r1, {0x6}}}, 0x24}}, 0x0) (async) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x1, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xc910}, 0x8000) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e7", 0x35}], 0x1}}], 0x1, 0x20000044) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000006ac0)={0x0, 0x106, &(0x7f0000006a80)={&(0x7f0000000080)={0x2c, r6, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044840}, 0x48804) (async) sendmmsg$alg(r4, 0x0, 0x0, 0x40800) (async) recvmsg(r4, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000780), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0), &(0x7f00000004c0)=[0x0, 0x0], 0x0, 0x12, &(0x7f00000006c0)=[{}], 0x8, 0x10, &(0x7f0000000740), &(0x7f0000000900), 0x8, 0x63, 0x8, 0xe4e514b315ab0b0b, &(0x7f0000000940)}}, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000c40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c00)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="200025bd7000fddbdf253600000008000300", @ANYRES32=r9, @ANYBLOB="1d2e3f01922e2d715833bb9f8ef2a1573080a414ccc3b022c672670abe0bbd7dd5ef6027ff8dfe69ffb5efe5c51a399b0a472b8033779258a862851bd4bf"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x804) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000b40)=r7, 0x4) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r12, @ANYRES32=r11, @ANYBLOB='&'], 0x10) 2.567470088s ago: executing program 0 (id=5837): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) (async) listen(r3, 0x4) listen(r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async, rerun: 32) write$tun(r2, &(0x7f0000000440)=ANY=[], 0xfdef) 2.566718128s ago: executing program 1 (id=5838): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r11, 0x0, 0xf3a, 0x0) close(r10) write(r8, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0xa1b92000) r12 = socket$rds(0x15, 0x5, 0x0) bind$rds(r12, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$rds(r12, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x5, 0x8}, {0x0}, &(0x7f0000000440)=[{&(0x7f0000001880)=""/4112, 0x1010}], 0x1, 0x20}}], 0x48, 0x80}, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r6) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6369, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8, 0x1, r13}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r14}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) 2.374266635s ago: executing program 2 (id=5839): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32], 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg(r2, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000380)="d8ada465a0e1c7b3d9e209d40014ef19be115afc66256a32ca13fe1061933ff799a75b47ceef5362b3168454729f82720dc5800e27280faf9cbe36b4c8af2f2c8ff420e6c46a609795f2bba21a28bafbbe86d3bd55a3fa069baf6c73a1194cf4bbafcdfb4dd0552204547cc479eff6a7d003e2c73e20a4cc31d99596774e45f2872d236bb68b", 0x86}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="de7eca14e256098a273d8c151726025f9751081c7db8a59b6c1ebd7a7370f337a5b85b464801dcb133a47c8e75c11222a9ad19cd60d13abbf8b1ebdc87b550227fa486688355b57f56dbcf3c52157ba391bb817a8f560e67223bd815d92d32ece202d01d0c146be621c5f60c8c749c34a681b34335e06b5c44e439fb0e9d5ea9a2100632d7bd57f7e661ed4b6a324984bf919539aa3617ec739c06df7e45223162f1625324254811013af66ad66ca6dc7da6b153786a66714b549830dcf1812e0c7e08790b0176db072143201bcbfa89c60aefefbfd8eab372", 0xd9}, {&(0x7f0000001780)="6b266bc5c786216dd294c01f1962a273eeeda3ee5528220b520adf67f2f27ba9d35afe7566802e231e4661590ad4aebc79f188a1ae375096cd1c14ef4965bbb24dda55fdba8a1a2ec4d37e1161f7ed93da5cadfca6bd60c96d3b7ab7dd45c8f5e3504c48aa7523a8049be7fe4b60eaa332c3a423da5797846d4bc7e608d2158a6361b4a695272f156e22877bcdadccb9e2", 0x91}, {&(0x7f0000001840)="6a486ba6170d94a1f2c444ff42ab828730acd7f5536d184cc0086e85", 0x1c}, {&(0x7f0000001880)="b8aa51fb8e485017b421969ad1ab02013046e7aee85fa69513857f94473da3dc8845bdc5d7d8a9970d8c611366c7671c0cf9ab95cfae1b97c15fc5b4e46b81fc2116019c757b0ab7f86d293c7e81de98726b6dc7f6e0163aea0f2998e4a7725f5152e64559", 0x65}, {&(0x7f0000001900)="8f482bbb6738173ae6c98417e3b7c7b206a9557839a7d85e57ffc5f80aa1139875faa3ea28af695da908c41ce1ae918baa55470fabac137b98a0f74864faf84f4fcbe13abacd5762c26a157af7e423ed3e839a9bf42bf42f17de97cd9c394b339f2b08108c6a9a9c83a1a56c7ada77d6ef2494e82db166c04bf89d44accd14bdf3998a283f2ad69846d5c58fb3a8f4bfc8456f52b9c155ce2b354a7a37c78d2810feace5f63a2216e55d31ba7fe4fed06d90f0d2ece626a693ebc7613e3e6e0eb74e5d956e757090bf8a15dbd1eb4490", 0xd0}, {&(0x7f0000001a00)="6ea0db639bc38eacefcaaf1a77dca598c0c381c92a9f321c337433d2029d5a5b74a7b1cb62570401a7722cf703ae871608162ac9a3c243b43a697fc26ed2c93e9591d3def3b78c7ad7904e1d38fe5b4285552b29076ad5083e040c17efa0963dc305f3a9f223b4f7b4dcb99944fdcf38d97bd217d8431ec1641bf8ba1869b26d5529a8", 0x83}, {&(0x7f0000001ac0)="ea8c20cd01c48adf31ff446f4e296a96980dbaebe39aa43e73dac58a7df33c4abaf13c3a96ee672055df47350706637bd612cc087f4c261feb871e029cd8d33e03358efcef23ac9c0d0e6436090d9d79a158f27ed3ae8b7471e84f17badf45f13df5b528caace5d840a57b364e9acc3bbb1bddd060c5e9db641b1777cf158dfa07f6bcf2de80e5837d1782b14c5debcc7065a24238c86738e5141d92b7e782d4f02eab7cc54a872333f52c1faab3fba93fb3e90719c10a", 0xb7}], 0x9, &(0x7f0000001c40)=[{0x28, 0xff, 0x8, "d0fa34dda55df9f0ebec63224986abe6df97c30f26f0"}, {0x20, 0x10f, 0xfffffffb, "5cc9d3bc45e48c1c5e917bee94f2f484"}, {0x40, 0x112, 0x1, "641bdf78c94a60946dd48d40e2570e3b0270d894b4cb3335aa39ec48ad81695b90175bff7c109fe15d02"}, {0xb0, 0x103, 0xa, "bc67648bf349839e03731f77c600cf9bf1012541ec5afe9a3d547d2c731fdd613037a9028f2a39257c106ef52bc9074eb77c8274bab25663e797aa6f8f9fa19c096c28d32c9d0fe6c5d9ffc7aae41eb983668c5a414e675b62bf97aa64e69e492bf2d0d143061b882016ea9c69d061d865e5cb0b58b4cecddf05abad8f7b95b8171406e113455047e770a1f12775277959e5c38ad2b74ac5dd"}, {0x1010, 0x115, 0x1, "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"}, {0x58, 0x88, 0x7, "9839ba5d233b348e0ef9b7988874782d031281f52efe5f8a8140f6b27121b24cf013d00d2fbde1dde4540e8a872cbeaa6ffc792167dd5fbe5f3a2aad0e23c4303c9f"}], 0x11a0}, 0x4008001) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="01002cbd700003dcdf3504000000140006000000000000000000000000000000000114000500000000000000000000000000000000010800020003000000"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4) (async) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r6, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x8c5) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) (async) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) sendmsg$xdp(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r7, &(0x7f0000001740)=[{{0x0, 0xfd67, &(0x7f0000001400), 0x1}}], 0x4000210, 0x10002, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) unshare(0x26020480) pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r9) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r9, 0x84, 0x6c, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002b3d00000008000300", @ANYRES32=r1, @ANYBLOB="0c009900010000006a000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x240408c0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000c, 0x840124ef165b6a45}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x44040) 2.255464316s ago: executing program 4 (id=5840): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x15, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x9}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x200068a0}, 0x0) socketpair(0x15, 0xa, 0x1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001d80)) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000680)={{{@in=@initdev, @in=@broadcast}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f00000003c0)=0xffffffffffffff31) socket$key(0xf, 0x3, 0x2) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001f00)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001f40), &(0x7f0000001f80)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 2.133651682s ago: executing program 2 (id=5841): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x35, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xac}}, &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) 2.10880552s ago: executing program 4 (id=5842): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) pread64(r1, 0x0, 0x0, 0x0) setsockopt(r0, 0x84, 0xb, &(0x7f00000002c0)="1400000009000010", 0x8) sendto$inet6(r0, &(0x7f00000004c0)="b0", 0x1, 0x4008050, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) 2.043747103s ago: executing program 0 (id=5843): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x2, {0x0, 0xf0, 0x2}, {0x1, 0x1, 0x4}, 0x2, 0xfe}], 0xff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x3, @private2}], 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000140), 0x4) listen(r1, 0x2) accept$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@empty, @dev, 0x0}, &(0x7f0000000140)=0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r5, &(0x7f0000000000)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @private=0xa010100, @empty}}}, @ip_retopts={{0x10}}], 0x30}}], 0x1, 0xc0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x0, 0x37, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000680), &(0x7f0000000340), 0x8, 0x2b, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000540)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0800726e1b9327e00000000000001000f92429bd7000", @ANYRES32=r4, @ANYBLOB="040001804000018008000100", @ANYRES32=r6, @ANYBLOB="08000300000000001400020076657468315f746f5f626f6e6400000008000100", @ANYRES32=r7, @ANYBLOB="080003000200000008000100", @ANYRES32=r8, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x44011) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@dellink={0x28, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1.906188236s ago: executing program 4 (id=5844): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0xa96) (async, rerun: 64) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async, rerun: 64) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid_for_children\x00') (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000086dd6100000000103afef18000000000000000000000000000aa00000000000000000000000000000001"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000400)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xf3a, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0xc) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002340)=@delchain={0x2c, 0x64, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xf, 0xfff1}, {0x0, 0xfff1}, {0xc, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x41090) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000000180)=@file={0x1}, 0x6e) (async) listen(r7, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$int_in(r8, 0x5421, &(0x7f0000000100)=0x1000) connect$unix(r8, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r8, &(0x7f0000000440)=@file={0x1}, 0x6e) (async) socket$netlink(0x10, 0x3, 0x0) 1.893782017s ago: executing program 2 (id=5845): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000000)=0xab7, 0x4) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000380)={r4, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x80100, &(0x7f00000002c0)={@_ha_fsid={[0x1, 0x1]}, {0x6, 0x8, 0xb799, 0x2}}, 0x0, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0xb}) r6 = openat$cgroup_ro(r5, &(0x7f0000000400)='blkio.bfq.time\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) syz_emit_ethernet(0x2c, &(0x7f0000000180)=ANY=[], 0x0) r9 = socket(0x2, 0x80805, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f0000000000)={0xd, 0x0, 0x4, 0x7fff, 0x3, 0x708, 0x0, 0xe7ad, r11}, &(0x7f0000000080)=0x20) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r12 = socket$igmp(0x2, 0x3, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) setsockopt$MRT_ADD_MFC(r12, 0x0, 0xcc, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "3dab2026179e3f9e94f795c562aef6c7ea5725a79a084ad573851412355a1302", 0x200000ff, 0x3, 0x6, 0x2}, 0x3c) setsockopt$MRT_DEL_MFC(r12, 0x0, 0xcd, &(0x7f0000000200)={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, 0xffffffffffffffff, "fafc88a4223a64c3f6455a1beaaa8a06a4170f5854f3bdd1c9e3a6913c0e2ef5", 0x1, 0x4, 0x8}, 0x3c) 1.832274834s ago: executing program 4 (id=5846): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x6, 0x0, 0x2}, 0x40000300) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0x4, 0x0, &(0x7f0000000000)=0x41) getsockopt$sock_int(r2, 0x1, 0x2a, 0x0, &(0x7f0000000300)) r4 = socket$netlink(0x10, 0x3, 0x4) socket$unix(0x1, 0x2, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x4004011}, 0x800) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r7, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) shutdown(r7, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001a00010000000000000000000a0080"], 0x38}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000500)) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newtaction={0x60, 0x30, 0xb, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000003, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001c00), 0x400000000000159, 0x40840) write(r4, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) 1.645153384s ago: executing program 2 (id=5847): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r2}, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@void, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x7, 0x1, 0x1}, {0x8100, 0x6, 0x1}}, {@generic={0x88f7}}}}, 0x16) unshare(0x6a040000) 1.441863484s ago: executing program 1 (id=5848): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x4}]}}}]}, 0x3c}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f0000000340)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000000), 0x3) r4 = socket$inet6_sctp(0xa, 0xf, 0x84) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x20000000, 0x4, 0x1cba, 0x8, 0x6, 0x5, 0xe161, {0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}, 0x2, 0x10001, 0xffff, 0x81, 0x2}}, &(0x7f0000000280)=0xb0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, 0x0, &(0x7f0000000380)) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f00000000c0)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000100003040007057007c78d9292cb0000", @ANYRESDEC=r5, @ANYRES32=r6, @ANYRES32=r7], 0x54}, 0x1, 0x0, 0x0, 0xc035}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r9) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c00078018000180080001"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 1.08813413s ago: executing program 0 (id=5849): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x3a, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r2) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200098d5}, 0x4040084) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0x700, 0x0, 0xc, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @broadcast, @loopback}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000200)={'tunl0\x00', r5, 0x40, 0x1, 0x2, 0x9, {{0x5, 0x4, 0x1, 0x5, 0x14, 0x66, 0x0, 0xea, 0x2f, 0x0, @local, @multicast2}}}}) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040)=0x1000001, 0x2) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x2000000000031, 0xffffffffffffffff, 0x0) 981.334216ms ago: executing program 1 (id=5850): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x18, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0xb, 0x0, 0x0, 0xffffffffffffffff}, @printk={@ld, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0xc00}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80005}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x24}, 0x94) 876.871016ms ago: executing program 0 (id=5851): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32) close(r1) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x1e, 0x1, 0x0, 0xffdff036}, {0x6, 0x0, 0x0, 0x100}]}) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x28, 0x25, 0x44, 0xfffff010}]}) ioctl$TUNGETVNETLE(r5, 0x40107447, &(0x7f0000000180)) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r7, 0x4004743d, 0x110e22fff6) (async) write$cgroup_type(r7, &(0x7f0000000280), 0x9) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r3) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01002bbd7000fcdbdf251000000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40840) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async, rerun: 64) unshare(0x400) (rerun: 64) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async, rerun: 64) sendfile(r0, r10, 0x0, 0x7ff) (async, rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xb}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xd}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) socket$kcm(0x11, 0x3, 0x0) (async) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 736.136302ms ago: executing program 1 (id=5852): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xae, '\x00', 0x0, @sched_cls}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r2, &(0x7f0000001500)={&(0x7f0000000000)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x26f}, 0x1c, 0x0, 0x0, &(0x7f0000001340)=[@flowinfo={{0x14, 0x29, 0xb, 0x4}}, @rthdr={{0x18, 0x29, 0x39, {0x5a, 0x0, 0x0, 0x1}}}], 0x30}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000000000000ffff0000851000000600000018000000", @ANYRES32, @ANYRES16=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f00000009c0)=""/222, 0x0, 0xc}, 0x94) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a0011802e"], 0x40}, 0x1, 0x0, 0x0, 0x2004e884}, 0x0) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x19, 0x0, @void}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000006c0), 0xffffffffffffffff) r6 = socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r6, &(0x7f0000000800)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000008c0), r7) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r8, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) splice(r6, 0x0, r7, 0x0, 0x9, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0xe4}}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r4, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x54, r5, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c080}, 0x80) ioctl$XFS_IOC_GETBMAPX(r3, 0xc0205838, &(0x7f0000000540)={0x6, 0xffd, 0x2, 0xa4, 0xfffffe01, 0x2}) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="00007acf", @ANYRES16=0x0, @ANYBLOB="000428bd7000fedbdf254b00000008000300020000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20008044) 514.874223ms ago: executing program 1 (id=5853): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe326c2ed0a432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRESDEC=r0, @ANYRES64=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000100"/28], 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48010000060a0b04000000000000000002000000300004802c0001800b0001006e756d67656e00001c0002800800034000000001080001400000000a08000240000000000900010073797a30000000000900020073797a3200000000eb0007"], 0x170}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&\x00'], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r1, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x5) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010021bd7000fcdbefe1e1c5d1a60cae0d6f9045e1df2573797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x1080}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1d0, 0x1170, 0x1398, 0x0, 0x1170, 0x310, 0x1398, 0x1398, 0x310, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@dev={0xac, 0x14, 0x14, 0x3c}, [0xff000000, 0xff, 0xff, 0xffffffff], @ipv4=@loopback, [0xff000000], @ipv6=@dev={0xfe, 0x80, '\x00', 0xb}, [0xff, 0xffffffff, 0xffffffff, 0xffffffff], @ipv4=@multicast2, [0xff, 0xffffff00, 0xffffff00, 0xff], 0x4, 0x101, 0x87, 0x4e21, 0x4e23, 0x4e21, 0x4e21, 0x410, 0x300}, 0x41}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3, 0x6, 0x1, 'syz0\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'geneve1\x00', 'veth1_vlan\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@gettclass={0x24, 0x2a, 0x300, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x2, 0xe}, {0xa, 0xffe0}, {0x7, 0xfff1}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r6, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x4004) ioctl$F2FS_IOC_SEC_TRIM_FILE(r1, 0x4018f514, &(0x7f00000002c0)={0x8, 0x6dd4, 0x3}) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000900)=@nat={'nat\x00', 0x19, 0x1, 0x206, [0x2000000006c0, 0x0, 0x0, 0x2000000006f0, 0x200000000720], 0x0, &(0x7f0000000300), &(0x7f00000006c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000004000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff01000000030000002000000022f06272696467655f736c6176655f300000776c616e31000000000000000000000076657468305f766972745f776966690064766d72703100000000000000000000aaaaaaaaaa39ffffffffffff0180c2000001ffffffffffffa60000000e01000046010000636c75737465720000000000000000000000000000000000000000000000000010000000000000000800000001800000ffffffff00000000736e617400000000e2000000000000000000000000000000000000000000000010000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000800000000000000fbffffff00000000736e617400000000000000000000000000000000000000000000000000000000100000000000000000000000000000001000000000000000"]}, 0x27e) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) 454.798248ms ago: executing program 0 (id=5854): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) epoll_create1(0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x81}, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r2) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x1c, r7, 0x331, 0x2000, 0x40080000, {0x8}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01c}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000480)={0x0, 'veth0_to_hsr\x00', {0x2}, 0x51}) write$tun(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaabb0180c200000e88a800008100007eab91b32dd80cffd20adf8cf828782802010045fc006953d778f6c9a77f00b919d9c62454c57ffd7fbc4dd3ca57e7071c705f7148892e2d0a"], 0x32) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r9, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) recvmmsg$unix(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000080)}}], 0x1, 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) readv(r11, &(0x7f0000000780)=[{&(0x7f0000000100)=""/39, 0x27}, {&(0x7f0000000380)=""/197, 0xc5}, {&(0x7f0000000540)=""/139, 0x8b}, {&(0x7f0000000600)=""/47, 0x2f}, {&(0x7f0000000280)=""/90, 0x5a}, {&(0x7f0000000080)=""/49, 0x31}], 0x6) 144.201865ms ago: executing program 4 (id=5855): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) (async) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x884) 0s ago: executing program 1 (id=5856): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r7 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0xe, r3, 0x31, r7}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xf}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x40) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000003b00000003"], 0x48) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000001740)={r8, 0x0, 0x0}, 0x20) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r15 = socket(0x400000000010, 0x3, 0x0) r16 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r17, {0x6, 0x2}, {0x0, 0xfff1}, {0x2, 0x2}}, [{0x8, 0xb, 0xfffffffe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040851}, 0x4045080) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r18, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x6, 0x0, 0x7, 0x9, 0x0, 0x5, 0x6, 0x1, 0x7, 0xb, 0x6, 0x5, 0x6, 0xa, 0x2, 0xd], 0x0, [0xd, 0x7, 0x4, 0x9, 0x31f5, 0x155, 0x1, 0x0, 0x4, 0x4, 0x1, 0x400, 0xfff, 0xe403, 0x5e4b, 0xfff], [0x7, 0x2, 0x5, 0x2, 0xd, 0x5, 0x9, 0xff48, 0x6, 0x2, 0x401, 0x400, 0x4, 0x6, 0x2, 0x1]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x85c}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) close(0x3) kernel console output (not intermixed with test programs): `syz.0.4066'. [ 522.466436][T21673] lo speed is unknown, defaulting to 1000 [ 522.908952][T21697] ip6gre3: entered promiscuous mode [ 522.922132][T21697] ip6gre3: entered allmulticast mode [ 522.939595][T21673] wlan0 speed is unknown, defaulting to 1000 [ 523.543991][T21728] netlink: 'syz.0.4083': attribute type 11 has an invalid length. [ 523.641134][T21728] netlink: 'syz.0.4083': attribute type 11 has an invalid length. [ 524.613599][T21771] syzkaller0: entered promiscuous mode [ 524.637609][T21771] syzkaller0: entered allmulticast mode [ 524.669429][T21771] tipc: Enabled bearer , priority 0 [ 524.738579][T21771] tipc: Resetting bearer [ 524.749903][T21779] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4096'. [ 524.972152][T21770] tipc: Resetting bearer [ 525.106592][T21770] tipc: Disabling bearer [ 525.151321][T21796] netlink: 'syz.0.4101': attribute type 5 has an invalid length. [ 525.185311][T21797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4100'. [ 525.209445][T21796] ip6erspan0: entered allmulticast mode [ 525.443664][T21797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 525.472187][T21797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.541597][T21812] IPVS: length: 67 != 24 [ 525.991997][T21796] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 527.870804][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 527.944224][T21845] net_ratelimit: 12 callbacks suppressed [ 527.944244][T21845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 527.962289][T21845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4112'. [ 529.161749][T21827] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 529.371593][T21858] netlink: 'syz.0.4117': attribute type 1 has an invalid length. [ 529.393578][T21858] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4117'. [ 529.621708][T21872] netlink: 'syz.1.4120': attribute type 1 has an invalid length. [ 529.744782][T21872] 8021q: adding VLAN 0 to HW filter on device bond4 [ 529.800124][T21877] veth0_to_bond: left allmulticast mode [ 529.879972][T21877] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 529.946290][T21872] macvlan0: entered promiscuous mode [ 529.966375][T21872] macvlan0: entered allmulticast mode [ 529.991232][T21872] bond4: entered promiscuous mode [ 530.002064][T21872] veth0_to_bond: entered promiscuous mode [ 530.023773][T21872] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 530.041514][T21872] bond4: left promiscuous mode [ 530.046486][T21872] veth0_to_bond: left promiscuous mode [ 530.089935][T21891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4125'. [ 530.102808][T21891] netlink: 5572 bytes leftover after parsing attributes in process `syz.2.4125'. [ 530.586388][T21906] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4130'. [ 530.632804][T21901] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4130'. [ 530.676000][T21913] sctp: [Deprecated]: syz.0.4132 (pid 21913) Use of struct sctp_assoc_value in delayed_ack socket option. [ 530.676000][T21913] Use struct sctp_sack_info instead [ 530.842116][T21920] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4136'. [ 531.230840][T21941] Bluetooth: MGMT ver 1.23 [ 531.319611][T21941] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.347527][T21941] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.600756][T21959] netlink: 616 bytes leftover after parsing attributes in process `syz.0.4147'. [ 532.045532][T21982] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4153'. [ 532.046923][T21981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4152'. [ 532.092045][T21980] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4152'. [ 532.148371][T21981] 8021q: adding VLAN 0 to HW filter on device bond2 [ 532.212197][T21990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.255436][T21990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.296807][T22002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4158'. [ 532.297015][T22001] netlink: 'syz.2.4158': attribute type 30 has an invalid length. [ 532.309051][T22002] netlink: 'syz.2.4158': attribute type 30 has an invalid length. [ 532.324123][T21997] tipc: Resetting bearer [ 532.332996][T21997] team0: entered allmulticast mode [ 532.364518][T22001] vxlan0: entered promiscuous mode [ 532.384120][T22001] vxlan0: entered allmulticast mode [ 532.423644][T22002] vxlan1: entered promiscuous mode [ 532.434351][T22002] vxlan1: entered allmulticast mode [ 532.451208][ T7966] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.472516][ T7966] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.507457][ T7966] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.533209][ T7966] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.928366][T22023] lo speed is unknown, defaulting to 1000 [ 533.725140][T22066] netlink: 'syz.1.4176': attribute type 30 has an invalid length. [ 533.959535][T22023] wlan0 speed is unknown, defaulting to 1000 [ 534.066461][T22082] xt_CT: You must specify a L4 protocol and not use inversions on it [ 534.429255][T22089] bond0: option updelay: invalid value (18446744073533817527) [ 534.455700][T22089] bond0: option updelay: allowed values 0 - 2147483647 [ 534.476233][T22095] netlink: 'syz.3.4183': attribute type 1 has an invalid length. [ 534.763013][T22095] bond6: entered promiscuous mode [ 534.788901][T22095] 8021q: adding VLAN 0 to HW filter on device bond6 [ 534.845099][T22100] smbdirect: ib_dev[syz2] removed [ 535.072438][T22095] 8021q: adding VLAN 0 to HW filter on device bond7 [ 535.096407][T22095] bond6: (slave bond7): making interface the new active one [ 535.127594][T22095] bond7: entered promiscuous mode [ 535.139662][T22095] bond6: (slave bond7): Enslaving as an active interface with an up link [ 535.186280][T22119] __nla_validate_parse: 8 callbacks suppressed [ 535.186298][T22119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4191'. [ 535.232588][T22119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4191'. [ 536.624452][T22116] gre1: entered allmulticast mode [ 536.652955][T22118] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 536.664917][T22118] bond5 (unregistering): Released all slaves [ 537.310124][T22169] netlink: 'syz.3.4207': attribute type 49 has an invalid length. [ 537.606554][T22169] ip6gretap0: left promiscuous mode [ 537.614361][T22169] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 537.623041][T22169] ip6gretap0: entered promiscuous mode [ 537.628643][T22169] ip6gretap0: entered allmulticast mode [ 537.672323][T22147] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 537.851103][T22186] netlink: 'syz.4.4211': attribute type 1 has an invalid length. [ 537.953618][T22186] 8021q: adding VLAN 0 to HW filter on device bond4 [ 537.987621][T22193] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4213'. [ 538.174329][T22199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4214'. [ 538.268821][T22206] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4216'. [ 538.505413][T22224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4219'. [ 538.619117][T22224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4219'. [ 538.675626][T22228] netlink: 'syz.1.4219': attribute type 3 has an invalid length. [ 539.335216][T22268] netlink: 'syz.4.4233': attribute type 1 has an invalid length. [ 539.376965][T22268] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4233'. [ 539.427813][T22268] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4233'. [ 539.493492][T22278] vlan2: entered promiscuous mode [ 539.511186][T22278] bridge0: entered promiscuous mode [ 539.525962][T22277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4234'. [ 539.571903][T22277] netlink: 'syz.2.4234': attribute type 30 has an invalid length. [ 539.578905][T22281] netlink: 'syz.2.4234': attribute type 30 has an invalid length. [ 539.582491][T22280] Bluetooth: MGMT ver 1.23 [ 539.769830][T22249] wlan0 speed is unknown, defaulting to 1000 [ 539.779747][T22287] team0: entered promiscuous mode [ 539.794602][T22287] team_slave_0: entered promiscuous mode [ 539.807460][T22287] team_slave_1: entered promiscuous mode [ 539.821006][T22287] team0: entered allmulticast mode [ 539.836834][T22287] team_slave_0: entered allmulticast mode [ 539.846796][T22287] team_slave_1: entered allmulticast mode [ 539.867761][T22287] team0: Cannot enslave team device to itself [ 540.337217][T22313] xt_TCPMSS: Only works on TCP SYN packets [ 540.568304][T22322] netlink: 'syz.2.4245': attribute type 13 has an invalid length. [ 540.608085][T22325] syzkaller0: entered promiscuous mode [ 540.613934][T22325] syzkaller0: entered allmulticast mode [ 540.738722][T22331] netlink: 'syz.4.4247': attribute type 3 has an invalid length. [ 541.005574][T22348] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 541.314946][T22338] wlan0 speed is unknown, defaulting to 1000 [ 542.661489][T22329] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 544.757826][T22356] wlan0 speed is unknown, defaulting to 1000 [ 544.928435][T22386] __nla_validate_parse: 4 callbacks suppressed [ 544.928455][T22386] netlink: 200 bytes leftover after parsing attributes in process `syz.0.4260'. [ 544.946020][T22386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4260'. [ 545.024697][T22390] IPVS: set_ctl: invalid protocol: 41 172.20.20.17:20000 [ 545.135021][T22394] netlink: 'syz.2.4263': attribute type 2 has an invalid length. [ 545.377269][T22394] : entered promiscuous mode [ 545.694333][T22412] batman_adv: batadv0: Adding interface: vlan2 [ 545.709831][T22412] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 545.747835][T22412] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 546.138723][T22441] dvmrp8: entered allmulticast mode [ 546.154303][T22443] netlink: 'syz.0.4276': attribute type 58 has an invalid length. [ 546.220787][T22443] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4276'. [ 546.264072][T22439] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4275'. [ 546.529892][T22458] netlink: 'syz.3.4283': attribute type 4 has an invalid length. [ 546.737026][T22470] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 547.046457][T22481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4289'. [ 547.139638][T22456] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.207965][T22488] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4290'. [ 547.215353][T22456] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.305523][T22487] syzkaller0: entered promiscuous mode [ 547.324488][T22487] syzkaller0: entered allmulticast mode [ 547.393659][T22485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 547.519267][T22456] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.530175][T22456] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.648920][T22456] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.659629][T22456] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.797644][T22456] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.808278][T22456] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.891959][T22511] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4296'. [ 548.084851][T22523] netlink: 'syz.2.4300': attribute type 1 has an invalid length. [ 548.095754][T22523] netlink: 'syz.2.4300': attribute type 2 has an invalid length. [ 548.110160][T22523] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4300'. [ 548.121891][T13627] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.130269][T13627] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.145954][T22518] IPVS: set_ctl: invalid protocol: 4 10.1.1.2:0 [ 548.178734][ T7976] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.188168][ T7976] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.222655][T13627] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.242035][T13627] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.267854][T13627] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.271448][T22523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4300'. [ 548.277542][T13627] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.489458][T22547] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4304'. [ 548.694467][T22555] syzkaller1: entered promiscuous mode [ 548.708752][T22555] syzkaller1: entered allmulticast mode [ 549.041547][T22569] syzkaller0: entered promiscuous mode [ 549.048111][T22569] syzkaller0: entered allmulticast mode [ 549.279290][T22586] xfrm1: entered promiscuous mode [ 549.292541][T22586] xfrm1: entered allmulticast mode [ 549.598336][T22607] netlink: 'syz.4.4321': attribute type 13 has an invalid length. [ 549.850311][T22622] bridge0: port 4(macvlan0) entered blocking state [ 549.851000][T22578] wlan0 speed is unknown, defaulting to 1000 [ 549.862202][T22622] bridge0: port 4(macvlan0) entered disabled state [ 549.892164][T22622] macvlan0: entered allmulticast mode [ 549.902162][T22622] veth1_vlan: entered allmulticast mode [ 549.915632][T22622] macvlan0: entered promiscuous mode [ 549.923248][T22622] bridge0: port 4(macvlan0) entered blocking state [ 549.929930][T22622] bridge0: port 4(macvlan0) entered listening state [ 550.174751][T22636] __nla_validate_parse: 3 callbacks suppressed [ 550.174769][T22636] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4328'. [ 550.662479][T22628] wlan0 speed is unknown, defaulting to 1000 [ 551.032009][T22668] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 551.217913][T22672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4332'. [ 552.062447][T22703] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4339'. [ 552.316407][T22712] FAULT_INJECTION: forcing a failure. [ 552.316407][T22712] name failslab, interval 1, probability 0, space 0, times 0 [ 552.388901][T22712] CPU: 0 UID: 0 PID: 22712 Comm: syz.1.4341 Not tainted syzkaller #0 PREEMPT(full) [ 552.388929][T22712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 552.388940][T22712] Call Trace: [ 552.388947][T22712] [ 552.388955][T22712] dump_stack_lvl+0xe8/0x150 [ 552.388989][T22712] should_fail_ex+0x40c/0x560 [ 552.389016][T22712] should_failslab+0xa8/0x100 [ 552.389044][T22712] __kmalloc_cache_noprof+0xa8/0x660 [ 552.389070][T22712] ? call_usermodehelper_setup+0x8e/0x270 [ 552.389089][T22712] ? call_usermodehelper_setup+0x8e/0x270 [ 552.389109][T22712] ? __request_module+0x2ec/0x630 [ 552.389141][T22712] call_usermodehelper_setup+0x8e/0x270 [ 552.389159][T22712] ? __pfx_free_modprobe_argv+0x10/0x10 [ 552.389190][T22712] __request_module+0x3ba/0x630 [ 552.389223][T22712] ? __pfx___request_module+0x10/0x10 [ 552.389264][T22712] ? security_capable+0x7e/0x2c0 [ 552.389296][T22712] ? dev_load+0x21/0x1f0 [ 552.389322][T22712] dev_load+0x190/0x1f0 [ 552.389348][T22712] dev_ioctl+0x837/0x1150 [ 552.389374][T22712] sock_ioctl+0x753/0x7e0 [ 552.389395][T22712] ? __pfx_sock_ioctl+0x10/0x10 [ 552.389417][T22712] ? __fget_files+0x3a2/0x420 [ 552.389439][T22712] ? __fget_files+0x2a/0x420 [ 552.389464][T22712] ? bpf_lsm_file_ioctl+0x9/0x20 [ 552.389486][T22712] ? __pfx_sock_ioctl+0x10/0x10 [ 552.389507][T22712] __se_sys_ioctl+0xfc/0x170 [ 552.389525][T22712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.389546][T22712] do_syscall_64+0x174/0x580 [ 552.389564][T22712] ? trace_irq_disable+0x3b/0x140 [ 552.389594][T22712] ? clear_bhb_loop+0x40/0x90 [ 552.389616][T22712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.389634][T22712] RIP: 0033:0x7f75eb59de99 [ 552.389652][T22712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.389668][T22712] RSP: 002b:00007f75e97f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 552.389688][T22712] RAX: ffffffffffffffda RBX: 00007f75eb825fa0 RCX: 00007f75eb59de99 [ 552.389702][T22712] RDX: 0000200000000780 RSI: 00000000000089f2 RDI: 0000000000000003 [ 552.389714][T22712] RBP: 00007f75e97f6090 R08: 0000000000000000 R09: 0000000000000000 [ 552.389725][T22712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.389739][T22712] R13: 00007f75eb826038 R14: 00007f75eb825fa0 R15: 00007fffac3a8d38 [ 552.389767][T22712] [ 552.858209][T22727] xt_hashlimit: size too large, truncated to 1048576 [ 552.910162][T22731] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 552.942116][T22731] netlink: 'syz.1.4347': attribute type 178 has an invalid length. [ 553.217681][T22753] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4350'. [ 554.467858][T22782] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4353'. [ 556.693033][T22796] FAULT_INJECTION: forcing a failure. [ 556.693033][T22796] name failslab, interval 1, probability 0, space 0, times 0 [ 556.726591][T22796] CPU: 0 UID: 0 PID: 22796 Comm: syz.2.4357 Not tainted syzkaller #0 PREEMPT(full) [ 556.726617][T22796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 556.726627][T22796] Call Trace: [ 556.726634][T22796] [ 556.726641][T22796] dump_stack_lvl+0xe8/0x150 [ 556.726671][T22796] should_fail_ex+0x40c/0x560 [ 556.726696][T22796] should_failslab+0xa8/0x100 [ 556.726721][T22796] __kmalloc_cache_noprof+0xa8/0x660 [ 556.726744][T22796] ? __request_module+0x2d0/0x630 [ 556.726766][T22796] ? __request_module+0x2d0/0x630 [ 556.726796][T22796] __request_module+0x2d0/0x630 [ 556.726829][T22796] ? __pfx___request_module+0x10/0x10 [ 556.726858][T22796] ? __pfx___request_module+0x10/0x10 [ 556.726885][T22796] ? apparmor_capable+0x126/0x170 [ 556.726916][T22796] ? dev_load+0x21/0x1f0 [ 556.726941][T22796] dev_ioctl+0x837/0x1150 [ 556.726966][T22796] sock_ioctl+0x753/0x7e0 [ 556.726988][T22796] ? __pfx_sock_ioctl+0x10/0x10 [ 556.727012][T22796] ? __fget_files+0x3a2/0x420 [ 556.727033][T22796] ? __fget_files+0x2a/0x420 [ 556.727059][T22796] ? bpf_lsm_file_ioctl+0x9/0x20 [ 556.727080][T22796] ? __pfx_sock_ioctl+0x10/0x10 [ 556.727101][T22796] __se_sys_ioctl+0xfc/0x170 [ 556.727118][T22796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.727138][T22796] do_syscall_64+0x174/0x580 [ 556.727156][T22796] ? trace_irq_disable+0x3b/0x140 [ 556.727179][T22796] ? clear_bhb_loop+0x40/0x90 [ 556.727200][T22796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.727217][T22796] RIP: 0033:0x7fe20a59de99 [ 556.727234][T22796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.727248][T22796] RSP: 002b:00007fe20b3ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 556.727266][T22796] RAX: ffffffffffffffda RBX: 00007fe20a825fa0 RCX: 00007fe20a59de99 [ 556.727279][T22796] RDX: 0000200000000780 RSI: 00000000000089f2 RDI: 0000000000000003 [ 556.727290][T22796] RBP: 00007fe20b3ef090 R08: 0000000000000000 R09: 0000000000000000 [ 556.727300][T22796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.727310][T22796] R13: 00007fe20a826038 R14: 00007fe20a825fa0 R15: 00007ffea1aca508 [ 556.727337][T22796] [ 556.986620][T22808] x_tables: duplicate underflow at hook 3 [ 557.315749][T22822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4364'. [ 557.387391][T22808] smc: net device vlan1 applied user defined pnetid SYZ2 [ 557.594384][T22820] macsec1: entered promiscuous mode [ 557.740966][T22838] tipc: Enabled bearer , priority 30 [ 557.807016][T22842] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4370'. [ 557.817598][T22842] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4370'. [ 557.843266][T22839] ip6tnl0: Caught tx_queue_len zero misconfig [ 557.862865][T22843] openvswitch: netlink: Flow key attr not present in new flow. [ 558.303604][T22855] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.355604][ T5357] syz1: Port: 1 Link DOWN [ 558.633768][T22862] sit0: entered promiscuous mode [ 558.671474][T22862] netlink: 'syz.0.4376': attribute type 1 has an invalid length. [ 558.719976][T22862] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4376'. [ 558.773874][T22860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4375'. [ 558.854261][ T10] tipc: Node number set to 3748098331 [ 559.007864][T22876] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4379'. [ 559.035981][T22846] wlan0 speed is unknown, defaulting to 1000 [ 559.046536][T22878] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4380'. [ 559.258191][T22889] netlink: 'syz.0.4382': attribute type 1 has an invalid length. [ 559.275436][T22893] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4381'. [ 559.293785][T22889] netlink: 192 bytes leftover after parsing attributes in process `syz.0.4382'. [ 559.319077][T22889] netlink: 33 bytes leftover after parsing attributes in process `syz.0.4382'. [ 559.335228][T22885] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 559.360982][T22885] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 559.383404][T22885] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 560.529208][T22954] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 560.569626][T13627] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.576896][T13627] bridge0: port 2(bridge_slave_1) entered listening state [ 560.605132][ T2173] syz1: Port: 1 Link ACTIVE [ 560.728995][T22963] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.753030][T22963] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.809518][T22963] bridge0: port 4(macvlan0) entered disabled state [ 560.821966][T22969] netlink: 'syz.1.4402': attribute type 2 has an invalid length. [ 560.845223][T22963] bridge0: port 3(vlan2) entered disabled state [ 560.982630][T22981] netlink: 'syz.2.4406': attribute type 1 has an invalid length. [ 561.115805][T22985] gretap1: entered allmulticast mode [ 561.125298][T22985] bond3: (slave gretap1): making interface the new active one [ 561.149792][T22985] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 561.174341][T22981] ip6_vti0: Caught tx_queue_len zero misconfig [ 561.238461][T22981] tap0: tun_chr_ioctl cmd 1074025676 [ 561.268033][T22981] tap0: owner set to 0 [ 561.303771][T22999] openvswitch: netlink: Multiple metadata blocks provided [ 561.358003][T22995] can: request_module (can-proto-0) failed. [ 561.608902][T23018] netlink: 'syz.1.4415': attribute type 39 has an invalid length. [ 561.857985][T22981] tap0: tun_chr_ioctl cmd 35314 [ 561.886213][T23027] netlink: 'syz.4.4419': attribute type 1 has an invalid length. [ 561.932083][T23030] syzkaller0: entered promiscuous mode [ 561.942626][T23030] syzkaller0: entered allmulticast mode [ 562.689344][T23069] netlink: 'syz.0.4429': attribute type 2 has an invalid length. [ 562.723081][T23069] : entered promiscuous mode [ 562.882073][T23072] __nla_validate_parse: 10 callbacks suppressed [ 562.882094][T23072] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4431'. [ 562.897950][T23072] netlink: 'syz.0.4431': attribute type 2 has an invalid length. [ 562.912343][T23072] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4431'. [ 562.934850][T23072] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 563.198837][T23060] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.431952][T23091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4436'. [ 563.540923][T23060] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.740202][T23060] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.886941][T23060] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.138086][T23118] geneve2: entered promiscuous mode [ 564.276872][T23125] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4441'. [ 564.331904][ T7976] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.401850][T23129] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4445'. [ 564.419008][ T7976] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.486372][ T7970] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.508269][T23133] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4446'. [ 564.556282][T23133] veth0_to_team: entered promiscuous mode [ 564.572549][T23133] erspan0: entered promiscuous mode [ 564.589550][ T7970] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.714417][T23143] syzkaller1: entered promiscuous mode [ 564.730446][T23143] syzkaller1: entered allmulticast mode [ 564.959172][T23157] lo speed is unknown, defaulting to 1000 [ 564.972903][T23157] lo speed is unknown, defaulting to 1000 [ 564.974665][T23160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4454'. [ 564.985102][T23157] lo speed is unknown, defaulting to 1000 [ 565.368514][T23179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4460'. [ 565.487749][T23179] bond4: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 565.537210][T23179] bond4 (unregistering): Released all slaves [ 565.609074][T23157] infiniband s: set down [ 565.614228][ T5632] lo speed is unknown, defaulting to 1000 [ 565.625810][T23157] infiniband s: added lo [ 565.722427][T23190] netlink: 'syz.3.4461': attribute type 3 has an invalid length. [ 565.742320][T23157] smbdirect: ib_dev[s]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 565.757517][T23190] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4461'. [ 565.782511][T23198] netlink: 'syz.4.4465': attribute type 4 has an invalid length. [ 565.790902][T23198] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4465'. [ 565.798190][T23157] smbdirect: ib_dev[s]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 565.809853][T23198] syzkaller0: entered promiscuous mode [ 565.823590][T23198] syzkaller0: entered allmulticast mode [ 565.867908][T23157] smbdirect: ib_dev[s]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 565.878540][T23201] bridge0: left allmulticast mode [ 565.904659][T23201] bridge0: port 3(vlan3) entered blocking state [ 565.923965][T23201] bridge0: port 3(vlan3) entered disabled state [ 565.943089][T23201] vlan3: entered allmulticast mode [ 565.951249][T23157] RDS/IB: s: added [ 565.955085][T23157] smc: adding ib device s with port count 1 [ 565.965835][T23201] vlan3: entered promiscuous mode [ 565.971259][T23157] smc: ib device s port 1 has no pnetid [ 565.978443][T23201] geneve0: entered promiscuous mode [ 566.019628][ T2173] lo speed is unknown, defaulting to 1000 [ 566.031177][T23157] lo speed is unknown, defaulting to 1000 [ 566.147201][T23211] netlink: 'syz.4.4469': attribute type 1 has an invalid length. [ 566.317135][T23218] lo: Caught tx_queue_len zero misconfig [ 566.634163][T23157] lo speed is unknown, defaulting to 1000 [ 567.054853][T23233] nbd: couldn't find device at index 1 [ 567.124317][ T2173] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 567.176725][T23157] lo speed is unknown, defaulting to 1000 [ 567.327239][T23253] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 567.341324][T20292] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 567.376975][T23255] syzkaller1: entered promiscuous mode [ 567.392393][T20292] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 567.420595][T23255] syzkaller1: entered allmulticast mode [ 567.568713][T23262] bond0: entered promiscuous mode [ 567.575946][T23262] bond_slave_0: entered promiscuous mode [ 567.601090][T23262] bond_slave_1: entered promiscuous mode [ 567.619376][T23262] batadv0: entered promiscuous mode [ 567.671317][T23262] bond0: left promiscuous mode [ 567.682616][T23262] bond_slave_0: left promiscuous mode [ 567.694893][T23262] bond_slave_1: left promiscuous mode [ 567.704843][T23262] batadv0: left promiscuous mode [ 567.749269][T23157] lo speed is unknown, defaulting to 1000 [ 568.059858][T23277] netlink: 'syz.0.4493': attribute type 1 has an invalid length. [ 568.263361][T23289] syzkaller0: entered promiscuous mode [ 568.277340][T23289] syzkaller0: entered allmulticast mode [ 568.349762][T23293] __nla_validate_parse: 4 callbacks suppressed [ 568.349780][T23293] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4497'. [ 568.396423][T23157] lo speed is unknown, defaulting to 1000 [ 568.405115][T23297] sit0: entered promiscuous mode [ 568.418191][T23297] sit0: left allmulticast mode [ 568.451613][T23297] netlink: 'syz.1.4499': attribute type 1 has an invalid length. [ 568.478903][T23297] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4499'. [ 571.722163][T23297] netlink: 'syz.1.4499': attribute type 1 has an invalid length. [ 571.729936][T23297] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4499'. [ 571.747300][T23157] lo speed is unknown, defaulting to 1000 [ 572.030872][T23333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4504'. [ 572.072057][T23333] tc action pedit 'at' offset 6 out of bounds [ 572.358025][T23333] IPVS: lc: FWM 3 0x00000003 - no destination available [ 572.491937][T23157] lo speed is unknown, defaulting to 1000 [ 572.698679][T23354] openvswitch: netlink: Actions may not be safe on all matching packets [ 572.797459][T23332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4501'. [ 572.833668][T23332] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4501'. [ 573.034831][T23327] wlan0 speed is unknown, defaulting to 1000 [ 573.049515][T23157] lo speed is unknown, defaulting to 1000 [ 573.449867][T23327] lo speed is unknown, defaulting to 1000 [ 573.647340][T23377] netlink: 'syz.2.4515': attribute type 21 has an invalid length. [ 573.688454][T23377] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4515'. [ 573.749899][T23377] netlink: 'syz.2.4515': attribute type 5 has an invalid length. [ 573.772837][T23377] netlink: 'syz.2.4515': attribute type 6 has an invalid length. [ 573.850466][T23377] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4515'. [ 573.995165][T23385] netlink: 'syz.3.4516': attribute type 16 has an invalid length. [ 574.014332][T23385] netlink: 'syz.3.4516': attribute type 17 has an invalid length. [ 574.178001][T23385] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.185263][T23385] bridge0: port 1(bridge_slave_0) entered listening state [ 574.197988][T23385] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.205222][T23385] bridge0: port 2(bridge_slave_1) entered listening state [ 574.229352][T23402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4521'. [ 574.299297][T23385] bridge0: port 3(vlan2) entered blocking state [ 574.305777][T23385] bridge0: port 3(vlan2) entered listening state [ 574.696135][T23426] netlink: 'syz.2.4526': attribute type 1 has an invalid length. [ 574.936849][T23429] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.969223][T23429] tipc: Resetting bearer [ 575.033241][T23429] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 575.094583][T23432] bond4: (slave dummy0): making interface the new active one [ 575.122700][T23432] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 575.259733][T23434] bond4: (slave dummy0): Releasing active interface [ 575.742158][T23434] bond0: (slave bond_slave_0): Releasing backup interface [ 575.805298][T23434] bond0: (slave bond_slave_1): Releasing backup interface [ 575.818667][T23434] team0: Port device team_slave_0 removed [ 575.826367][T23434] team0: Port device team_slave_1 removed [ 575.832811][T23434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 575.842027][T23434] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 575.859191][T23426] tunl0: Caught tx_queue_len zero misconfig [ 576.207416][ T29] audit: type=1804 audit(1784620900.182:18): pid=23478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4539" name="/newroot/352/cgroup.controllers" dev="tmpfs" ino=1840 res=1 errno=0 [ 576.283635][ T29] audit: type=1800 audit(1784620900.182:19): pid=23478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4539" name="cgroup.controllers" dev="tmpfs" ino=1840 res=0 errno=0 [ 576.497332][T23496] batadv_slave_0: Caught tx_queue_len zero misconfig [ 577.038601][T23513] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4548'. [ 577.138101][T23518] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4550'. [ 577.368936][T23522] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4551'. [ 577.427700][T23524] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4552'. [ 577.451674][T23524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4552'. [ 577.567055][T23527] IPVS: set_ctl: invalid protocol: 103 0.0.0.0:20001 [ 577.593438][T23527] 8021q: VLANs not supported on ip6_vti0 [ 577.732628][T23534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4555'. [ 577.804002][T23534] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4555'. [ 577.977560][T23551] C: renamed from veth1_to_team (while UP) [ 578.153944][T23558] openvswitch: netlink: VXLAN extension 317 out of range max 1 [ 578.155513][T23561] openvswitch: netlink: VXLAN extension 317 out of range max 1 [ 578.196443][T23558] nbd: must specify at least one socket [ 578.657877][T23570] veth9: entered allmulticast mode [ 578.696276][T23570] bond5: (slave veth9): Enslaving as an active interface with an up link [ 578.786941][T23583] bond5 (unregistering): (slave veth9): Releasing backup interface [ 578.834821][T23583] bond5 (unregistering): Released all slaves [ 578.952452][T23602] lo: Caught tx_queue_len zero misconfig [ 579.128018][T23606] netlink: 'syz.2.4573': attribute type 11 has an invalid length. [ 579.152812][T23606] __nla_validate_parse: 7 callbacks suppressed [ 579.152828][T23606] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4573'. [ 579.302877][T23615] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4574'. [ 579.334038][T23614] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4574'. [ 579.363713][T23614] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4574'. [ 579.388207][T23615] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4574'. [ 579.588552][T23560] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 579.942291][T23645] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 580.320286][T23653] netlink: 'syz.4.4585': attribute type 322 has an invalid length. [ 580.344537][T23667] netlink: 'syz.1.4589': attribute type 17 has an invalid length. [ 580.360639][T23667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4589'. [ 580.386456][T23667] bond0: option all_slaves_active: invalid value (183) [ 580.406258][T23667] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4589'. [ 580.585794][T23678] batadv0: entered promiscuous mode [ 580.625689][T23678] tipc: Enabled bearer , priority 0 [ 580.635796][T23679] netlink: 'syz.3.4592': attribute type 3 has an invalid length. [ 580.644763][T23678] syzkaller0: entered promiscuous mode [ 580.653655][T23678] syzkaller0: entered allmulticast mode [ 580.668134][T23679] netlink: 'syz.3.4592': attribute type 3 has an invalid length. [ 580.680643][T23677] tipc: Resetting bearer [ 580.751469][T23677] tipc: Disabling bearer [ 580.793226][T23677] batadv0: left promiscuous mode [ 581.052972][T23697] netlink: 'syz.3.4598': attribute type 10 has an invalid length. [ 581.111743][T23701] netlink: 'syz.3.4598': attribute type 10 has an invalid length. [ 581.178514][T23697] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 581.193599][T23697] team0: Port device netdevsim1 added [ 581.480937][T23713] tipc: Enabled bearer , priority 0 [ 581.551348][T23723] tipc: Enabled bearer , priority 2 [ 581.612317][T23724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 581.633100][T23713] tipc: Disabling bearer [ 581.786918][T23733] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4609'. [ 581.805682][T23733] netlink: 'syz.2.4609': attribute type 2 has an invalid length. [ 581.813945][T23733] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4609'. [ 581.823248][T23733] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 581.848850][T23737] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 581.931527][T23739] netlink: 'syz.1.4611': attribute type 1 has an invalid length. [ 581.942606][T23739] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 582.043649][T23748] lo: left allmulticast mode [ 582.084159][T23748] tunl0: left allmulticast mode [ 582.101349][T23748] gre0: left allmulticast mode [ 582.115847][T23749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4612'. [ 582.125195][T23748] gretap0: left allmulticast mode [ 582.132210][T23748] erspan0: left allmulticast mode [ 582.138098][T23748] ip_vti0: left allmulticast mode [ 582.145959][T23748] ip6_vti0: left allmulticast mode [ 582.152509][T23748] ip6tnl0: left allmulticast mode [ 582.160088][T23748] ip6gre0: left allmulticast mode [ 582.168452][T23748] ip6gretap0: left allmulticast mode [ 582.178565][T23748] vcan0: left allmulticast mode [ 582.186949][T23748] bond0: left allmulticast mode [ 582.195074][T23748] team0: left allmulticast mode [ 582.202496][T23748] : left allmulticast mode [ 582.214566][T23748] nlmon0: left allmulticast mode [ 582.222958][T23748] batadv0: left allmulticast mode [ 582.233312][T23748] vxcan0: left allmulticast mode [ 582.243905][T23748] vxcan1: left allmulticast mode [ 582.252138][T23748] veth0: left allmulticast mode [ 582.268495][T23748] veth1: left allmulticast mode [ 582.286365][T23748] wg0: left allmulticast mode [ 582.296590][T23748] wg2: left allmulticast mode [ 582.304701][T23748] veth0_to_bridge: left allmulticast mode [ 582.314510][T23748] veth1_to_bridge: left allmulticast mode [ 582.324121][T23748] bond_slave_0: left allmulticast mode [ 582.331593][T23748] veth1_to_bond: left allmulticast mode [ 582.339139][T23748] bond_slave_1: left allmulticast mode [ 582.345755][T23748] veth0_to_team: left allmulticast mode [ 582.356221][T23748] team_slave_0: left allmulticast mode [ 582.364160][T23748] veth1_to_team: left allmulticast mode [ 582.372713][T23748] team_slave_1: left allmulticast mode [ 582.380241][T23748] veth0_to_batadv: left allmulticast mode [ 582.388287][T23748] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 582.396437][T23748] batadv_slave_0: left allmulticast mode [ 582.404054][T23748] veth0_to_hsr: left allmulticast mode [ 582.413112][T23748] veth1_to_hsr: left allmulticast mode [ 582.423403][T23748] hsr0: left allmulticast mode [ 582.428204][T23748] hsr_slave_0: left allmulticast mode [ 582.434867][T23748] hsr_slave_1: left allmulticast mode [ 582.444839][T23748] vlan0: left allmulticast mode [ 582.452526][T23748] vlan1: left allmulticast mode [ 582.459197][T23748] veth1_vlan: left allmulticast mode [ 582.465382][T23748] macvlan1: left allmulticast mode [ 582.476132][T23748] ipvlan0: left allmulticast mode [ 582.483551][T23748] ipvlan1: left allmulticast mode [ 582.488643][T23748] veth0_vlan: left allmulticast mode [ 582.499942][T23748] veth0_macvtap: left allmulticast mode [ 582.505881][T23748] macvtap0: left allmulticast mode [ 582.512953][T23748] veth1_macvtap: left allmulticast mode [ 582.518548][T23748] macsec0: left allmulticast mode [ 582.527335][T23748] geneve1: left allmulticast mode [ 582.535588][T23748] mac80211_hwsim hwsim40 wlan0: left allmulticast mode [ 582.542971][T23748] mac80211_hwsim hwsim41 wlan1: left allmulticast mode [ 582.551644][T23748] vxlan0: left allmulticast mode [ 582.558226][T23748] bond1: left allmulticast mode [ 582.563745][T23748] syz_tun: left allmulticast mode [ 582.571764][T23748] ip6gretap1: left allmulticast mode [ 582.578435][T23748] mac80211_hwsim hwsim46 wlan2: left allmulticast mode [ 582.586166][T23748] bond2: left allmulticast mode [ 582.592952][T23748] gre1: left allmulticast mode [ 582.598741][T23748] team1: left allmulticast mode [ 582.604772][T23748] team2: left allmulticast mode [ 582.613043][T23748] bond3: left allmulticast mode [ 582.638040][T23748] veth9: left allmulticast mode [ 582.662944][ T7970] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.689655][ T7970] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.712003][T20293] tipc: Node number set to 59394536 [ 582.781131][T23764] xt_CT: No such helper "syz0" [ 582.812321][ T7976] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.833249][ T7976] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.842629][ T7976] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.851392][ T7976] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.872944][ T7976] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.888952][ T7976] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.987579][T23774] syzkaller1: entered promiscuous mode [ 582.994764][T23774] syzkaller1: entered allmulticast mode [ 583.076927][T23785] netlink: 'syz.0.4619': attribute type 3 has an invalid length. [ 583.102037][T23787] netlink: 'syz.3.4623': attribute type 10 has an invalid length. [ 583.184964][T23787] team0: Port device dummy0 added [ 583.319298][T23797] syzkaller0: entered promiscuous mode [ 583.325325][T23797] syzkaller0: entered allmulticast mode [ 583.337115][T23800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 583.337479][T23797] tipc: Enabled bearer , priority 0 [ 583.367947][T23797] tipc: Resetting bearer [ 583.418885][T23795] tipc: Resetting bearer [ 583.453854][T23795] tipc: Disabling bearer [ 584.842414][T23861] syzkaller0: entered promiscuous mode [ 584.848126][T23861] syzkaller0: entered allmulticast mode [ 585.100003][T23867] __nla_validate_parse: 4 callbacks suppressed [ 585.100021][T23867] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4643'. [ 585.120162][T23867] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4643'. [ 585.280013][T23876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4645'. [ 585.389226][T23881] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4648'. [ 585.479845][T23886] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 585.509134][T23888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4649'. [ 585.634236][T23892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4650'. [ 585.665848][T23892] netlink: 312 bytes leftover after parsing attributes in process `syz.3.4650'. [ 585.675406][T23892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4650'. [ 585.938942][T23906] tipc: MTU too low for tipc bearer [ 586.103605][T23920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 586.153895][T23920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 586.200693][T23924] pimreg1: renamed from bridge0 (while UP) [ 586.211531][T23924] A link change request failed with some changes committed already. Interface pimreg1 may have been left with an inconsistent configuration, please check. [ 586.380159][T23930] IPVS: set_ctl: invalid protocol: 255 100.1.1.1:20002 [ 586.421244][T23932] IPVS: set_ctl: invalid protocol: 255 100.1.1.1:20002 [ 586.605144][T23954] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4668'. [ 586.932609][T23959] validate_nla: 1 callbacks suppressed [ 586.932627][T23959] netlink: 'syz.2.4667': attribute type 30 has an invalid length. [ 587.014799][T23983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4673'. [ 587.634389][T24021] syzkaller0: entered promiscuous mode [ 587.666891][T24021] syzkaller0: entered allmulticast mode [ 588.529148][T24085] netlink: 'syz.1.4692': attribute type 1 has an invalid length. [ 588.648189][T24085] 8021q: adding VLAN 0 to HW filter on device bond5 [ 588.710260][T24086] bond5: (slave geneve3): making interface the new active one [ 588.724481][T24086] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 588.736873][ T7976] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.755934][ T7976] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.789933][ T7976] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.829738][ T7976] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.033727][T24105] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 589.148239][T24108] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 589.164617][T24110] netlink: 'syz.4.4700': attribute type 30 has an invalid length. [ 589.218588][T24117] netlink: 'syz.4.4700': attribute type 30 has an invalid length. [ 589.221212][T24110] vxlan1: entered promiscuous mode [ 589.236995][T24110] vxlan1: entered allmulticast mode [ 589.269049][T13627] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 589.286522][T13627] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 589.303930][T13627] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 589.311977][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 589.319870][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 589.336506][T24117] vxlan2: entered promiscuous mode [ 589.342865][T24117] vxlan2: entered allmulticast mode [ 589.734069][T24131] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 589.765044][T24134] veth0: entered promiscuous mode [ 589.940811][ C1] bridge0: port 3(vlan2) entered learning state [ 590.025975][T24147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 590.044012][T24148] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 590.063187][T24143] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 590.082170][T24143] bond6 (unregistering): Released all slaves [ 590.117126][T24154] __nla_validate_parse: 8 callbacks suppressed [ 590.117144][T24154] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4712'. [ 590.164247][T24154] bond0 (unregistering): Released all slaves [ 590.188140][T24143] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 590.217802][T24143] bond6 (unregistering): Released all slaves [ 590.269061][T24124] veth0: left promiscuous mode [ 590.345080][T24143] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 590.358075][T24143] bond6 (unregistering): Released all slaves [ 590.358937][T24159] x_tables: duplicate underflow at hook 2 [ 590.511091][T24170] netlink: 'syz.2.4718': attribute type 1 has an invalid length. [ 590.528764][T24143] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 590.542793][T24143] bond6 (unregistering): Released all slaves [ 590.635696][T24165] bond6 (unregistering): Released all slaves [ 590.665571][T24170] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 590.736981][T24143] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 590.759891][T24143] bond6 (unregistering): Released all slaves [ 590.772740][T24188] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4721'. [ 590.808436][T24188] ip6gre4: entered promiscuous mode [ 590.827461][T24188] ip6gre4: entered allmulticast mode [ 590.841992][ T7970] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 590.850159][ T7970] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 590.871561][ T5632] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 591.196198][T24209] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4727'. [ 591.221417][ T5632] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 591.341785][T24221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4732'. [ 591.381619][T24228] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4734'. [ 591.427073][T24228] netlink: 'syz.1.4734': attribute type 11 has an invalid length. [ 591.464545][T24230] ip6gre2: entered promiscuous mode [ 591.481112][T24230] ip6gre2: entered allmulticast mode [ 591.490741][T24240] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 591.544413][T24233] ipvlan0: Caught tx_queue_len zero misconfig [ 591.565424][ T7970] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 591.582482][ T7970] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 591.591504][ T2173] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 591.623110][ T5632] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 591.693432][T24241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4737'. [ 591.846284][T24256] nbd: couldn't find a device at index 0 [ 591.927102][T24260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4744'. [ 592.016696][T24260] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4744'. [ 592.126894][T24274] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4749'. [ 592.200993][T20292] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 592.244173][T24280] team0: entered allmulticast mode [ 592.318193][T24286] netlink: 'syz.0.4755': attribute type 5 has an invalid length. [ 592.384180][T24291] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4757'. [ 592.543946][T24296] ip6gre5: entered promiscuous mode [ 592.549390][T24296] ip6gre5: entered allmulticast mode [ 592.556376][T24297] netlink: 'syz.2.4760': attribute type 1 has an invalid length. [ 592.589637][T24297] netlink: 'syz.2.4760': attribute type 1 has an invalid length. [ 592.610215][T24300] xt_bpf: check failed: parse error [ 592.629481][T24297] netlink: 'syz.2.4760': attribute type 1 has an invalid length. [ 592.661949][T24297] netlink: 'syz.2.4760': attribute type 1 has an invalid length. [ 592.722524][T24299] syzkaller0: entered promiscuous mode [ 592.738091][T24299] syzkaller0: entered allmulticast mode [ 592.773769][T24299] tipc: Enabled bearer , priority 0 [ 592.786446][T24299] tipc: Resetting bearer [ 592.796840][T24298] tipc: Resetting bearer [ 593.099449][T24298] tipc: Disabling bearer [ 593.677355][T24355] netlink: 'syz.0.4775': attribute type 2 has an invalid length. [ 593.942078][T24368] gretap0: entered promiscuous mode [ 593.952447][T24368] 0{X功: renamed from gretap0 [ 593.959355][T24368] 0{X功: left promiscuous mode [ 593.965686][T24368] 0{X功: entered allmulticast mode [ 593.977918][T24368] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 594.039895][T24373] netlink: 'syz.4.4782': attribute type 4 has an invalid length. [ 594.115101][T24379] openvswitch: netlink: Flow key attr not present in new flow. [ 594.115101][T24381] openvswitch: netlink: Flow key attr not present in new flow. [ 594.164393][T24381] syzkaller0: entered promiscuous mode [ 594.171469][T24381] syzkaller0: entered allmulticast mode [ 594.382389][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ff19400: rx timeout, send abort [ 594.404313][T24389] netlink: 'syz.2.4788': attribute type 1 has an invalid length. [ 594.443412][T24389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 594.458550][T24371] wlan0 speed is unknown, defaulting to 1000 [ 594.481890][T24389] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 594.493833][T24371] lo speed is unknown, defaulting to 1000 [ 594.811859][T24406] netlink: 'syz.1.4794': attribute type 1 has an invalid length. [ 594.872565][T24406] bond6: (slave veth13): Enslaving as an active interface with a down link [ 594.882546][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ff1bc00: rx timeout, send abort [ 594.891629][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ff19400: abort rx timeout. Force session deactivation [ 594.914646][T24406] bond6: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 594.931164][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88807ff1bc00: connection exists (fe ff). last cmd: 20 [ 595.190121][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ff19000: rx timeout, send abort [ 595.245301][T24425] (: renamed from bridge_slave_0 (while UP) [ 595.507046][T24434] ip6tnl0: Caught tx_queue_len zero misconfig [ 595.698427][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ff19000: abort rx timeout. Force session deactivation [ 595.825340][T24457] __nla_validate_parse: 13 callbacks suppressed [ 595.825358][T24457] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4809'. [ 595.860179][T24460] tc_dump_action: action bad kind [ 595.940677][ C1] ip6_tnl_xmit_ctl: 8 callbacks suppressed [ 595.940696][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 596.116935][T24461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4811'. [ 596.128618][T24461] hsr_slave_0: left promiscuous mode [ 596.140509][T24461] hsr_slave_1: left promiscuous mode [ 596.448811][T24470] syzkaller0: entered promiscuous mode [ 596.457428][T24470] syzkaller0: entered allmulticast mode [ 596.501266][T24470] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4814'. [ 596.798141][T24495] nbd: must specify at least one socket [ 596.821524][ C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 599.657932][T24492] vlan4: entered promiscuous mode [ 599.663366][T24492] team0: entered promiscuous mode [ 599.668445][T24492] team_slave_0: entered promiscuous mode [ 599.674596][T24492] team_slave_1: entered promiscuous mode [ 599.699909][T24486] wlan0 speed is unknown, defaulting to 1000 [ 599.714693][T24486] lo speed is unknown, defaulting to 1000 [ 599.853675][T24517] netlink: 'syz.1.4824': attribute type 2 has an invalid length. [ 599.908408][T24520] netlink: 240 bytes leftover after parsing attributes in process `syz.0.4826'. [ 600.026375][T24526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4827'. [ 600.387908][T24540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4832'. [ 600.425849][T24541] sctp: [Deprecated]: syz.1.4831 (pid 24541) Use of int in maxseg socket option. [ 600.425849][T24541] Use struct sctp_assoc_value instead [ 600.430200][T24540] 8021q: adding VLAN 0 to HW filter on device bond4 [ 600.516621][T24540] netlink: 'syz.0.4832': attribute type 10 has an invalid length. [ 600.534216][T24540] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4832'. [ 600.598314][T24547] team0: left promiscuous mode [ 600.605153][T24547] team_slave_0: left promiscuous mode [ 600.611596][T24547] team_slave_1: left promiscuous mode [ 600.617316][T24547] team0: left allmulticast mode [ 600.623416][T24547] team_slave_0: left allmulticast mode [ 600.629040][T24547] team_slave_1: left allmulticast mode [ 600.827944][T24554] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4836'. [ 600.946039][T24559] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4837'. [ 601.353390][T24577] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 601.445527][T24579] netlink: 'syz.0.4843': attribute type 13 has an invalid length. [ 601.463671][T24579] netlink: 'syz.0.4843': attribute type 17 has an invalid length. [ 601.556002][T24589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4846'. [ 601.560209][T24587] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4845'. [ 602.100545][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 602.425905][T24579] sit0: left promiscuous mode [ 602.467499][T24579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 602.478025][T24579] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.486977][T24579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.525948][T24579] veth1_vlan: left promiscuous mode [ 602.542174][T24579] veth0_vlan: left promiscuous mode [ 602.550140][T24579] veth0_vlan: entered promiscuous mode [ 602.561086][T24579] veth1_vlan: entered promiscuous mode [ 602.582901][T24579] veth1_macvtap: left promiscuous mode [ 602.601128][T24579] veth0_macvtap: left promiscuous mode [ 602.626747][T24579] veth0_macvtap: entered promiscuous mode [ 602.674198][T24579] veth1_macvtap: entered promiscuous mode [ 602.705478][T24579] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 602.783042][T24620] netlink: 'syz.4.4851': attribute type 4 has an invalid length. [ 603.005049][T24631] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4855'. [ 603.113803][T24641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4858'. [ 603.133229][T24641] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4858'. [ 603.988635][T24674] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4866'. [ 604.000804][T24674] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4866'. [ 604.429219][T24697] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4876'. [ 604.464284][T24704] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4878'. [ 604.657236][T24718] syzkaller0: entered promiscuous mode [ 604.660484][ C1] bridge0: port 1(() entered forwarding state [ 604.663962][T24718] syzkaller0: entered allmulticast mode [ 604.668916][ C1] bridge0: topology change detected, propagating [ 604.670590][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.688099][ C1] bridge0: topology change detected, propagating [ 605.300599][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 605.310956][ C1] bridge0: port 3(vlan2) entered forwarding state [ 605.317503][ C1] bridge0: topology change detected, propagating [ 605.491837][T24747] syzkaller0: entered promiscuous mode [ 605.504308][T24747] syzkaller0: entered allmulticast mode [ 605.581737][T24747] 0: reclassify loop, rule prio 0, protocol 800 [ 606.805479][T24814] openvswitch: netlink: Tunnel attr 157 out of range max 16 [ 606.816477][T24781] tipc: Resetting bearer [ 606.878406][T24781] bridge0: port 3(vlan2) entered disabled state [ 606.884949][T24781] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.892304][T24781] bridge0: port 1(() entered disabled state [ 607.376060][T24781] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 607.636343][T24781] veth1_vlan: left allmulticast mode [ 607.868723][T24781] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 608.014380][T24781] geneve2: left promiscuous mode [ 608.081619][T24781] veth5: left allmulticast mode [ 608.153069][T24781] bond3: left allmulticast mode [ 608.291118][T24781] bridge1: left promiscuous mode [ 608.299716][T24781] bridge1: left allmulticast mode [ 608.320273][T24781] gretap1: left allmulticast mode [ 608.378427][T24781] bond6: left promiscuous mode [ 608.385521][T24781] bond7: left promiscuous mode [ 608.551932][T24804] bridge5: entered promiscuous mode [ 608.557887][T24804] bridge5: entered allmulticast mode [ 608.566063][T24804] team0: Port device bridge5 added [ 608.614242][T24755] wlan0 speed is unknown, defaulting to 1000 [ 608.630130][ T5755] syz1: Port: 1 Link DOWN [ 608.631071][ T7966] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.670625][ T7966] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.681143][T24822] __nla_validate_parse: 2 callbacks suppressed [ 608.681161][T24822] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4903'. [ 608.710562][ T7966] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.727556][ T7966] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.781427][T24755] lo speed is unknown, defaulting to 1000 [ 608.788078][ T7966] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.809563][ T7966] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.828632][ T7966] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.839785][ T7966] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.851694][T24827] netlink: 'syz.2.4905': attribute type 8 has an invalid length. [ 608.983864][T24832] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 609.007285][T24832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 609.704360][T24862] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4916'. [ 610.479898][T24895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.625843][T24895] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.707678][T24895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 610.845588][T24895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 610.899213][T24895] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 610.924714][T24895] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 610.939576][T24895] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 610.978807][ T7489] bridge0: port 1(() entered blocking state [ 610.984900][ T7489] bridge0: port 1(() entered listening state [ 611.017896][ T7489] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.025118][ T7489] bridge0: port 2(bridge_slave_1) entered listening state [ 611.126333][ T5357] syz1: Port: 1 Link ACTIVE [ 611.405488][T24942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4934'. [ 611.624036][T24953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4934'. [ 612.244740][T24978] syzkaller0: entered promiscuous mode [ 612.257016][T24978] syzkaller0: entered allmulticast mode [ 612.326524][T24981] syzkaller1: entered promiscuous mode [ 612.346768][T24981] syzkaller1: entered allmulticast mode [ 612.891467][T25020] netlink: 'syz.3.4950': attribute type 30 has an invalid length. [ 612.896329][T25026] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4951'. [ 612.917784][T25013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4947'. [ 612.930216][T25028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4949'. [ 612.939603][T25013] mac80211_hwsim hwsim36 换换换: renamed from wlan0 [ 612.958564][T25020] netlink: 'syz.3.4950': attribute type 16 has an invalid length. [ 612.980311][T25026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4951'. [ 612.994959][T25020] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4950'. [ 613.266196][T25045] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4956'. [ 613.816310][T25071] __nla_validate_parse: 1 callbacks suppressed [ 613.816329][T25071] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4962'. [ 613.849328][T25047] wlan0 speed is unknown, defaulting to 1000 [ 613.865441][T25047] lo speed is unknown, defaulting to 1000 [ 614.269711][T25093] FAULT_INJECTION: forcing a failure. [ 614.269711][T25093] name failslab, interval 1, probability 0, space 0, times 0 [ 614.282454][T25093] CPU: 0 UID: 0 PID: 25093 Comm: syz.0.4968 Not tainted syzkaller #0 PREEMPT(full) [ 614.282500][T25093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 614.282522][T25093] Call Trace: [ 614.282537][T25093] [ 614.282551][T25093] dump_stack_lvl+0xe8/0x150 [ 614.282586][T25093] should_fail_ex+0x40c/0x560 [ 614.282613][T25093] should_failslab+0xa8/0x100 [ 614.282640][T25093] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 614.282662][T25093] ? skb_clone+0x212/0x3a0 [ 614.282685][T25093] ? skb_clone+0x212/0x3a0 [ 614.282703][T25093] ? run_filter+0x23/0x270 [ 614.282728][T25093] skb_clone+0x212/0x3a0 [ 614.282746][T25093] ? packet_rcv+0x563/0x16f0 [ 614.282768][T25093] packet_rcv+0x65d/0x16f0 [ 614.282797][T25093] __netif_receive_skb_core+0x2705/0x30b0 [ 614.282829][T25093] ? kernel_text_address+0xa5/0xe0 [ 614.282858][T25093] ? unwind_get_return_address+0x4d/0x90 [ 614.282877][T25093] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 614.282904][T25093] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 614.282931][T25093] ? __lock_acquire+0x683/0x2cf0 [ 614.282974][T25093] ? kasan_save_track+0x4f/0x80 [ 614.282996][T25093] ? __kasan_slab_alloc+0x6c/0x80 [ 614.283024][T25093] __netif_receive_skb_list_core+0x24d/0x830 [ 614.283060][T25093] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 614.283082][T25093] ? lockdep_hardirqs_on+0x7a/0x110 [ 614.283101][T25093] ? seqcount_lockdep_reader_access+0xea/0x100 [ 614.283126][T25093] ? ktime_get_with_offset+0x27f/0x2d0 [ 614.283154][T25093] netif_receive_skb_list_internal+0x995/0xcf0 [ 614.283184][T25093] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 614.283202][T25093] ? eth_type_trans+0x49b/0x800 [ 614.283222][T25093] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 614.283251][T25093] ? __xdp_build_skb_from_frame+0x324/0x6a0 [ 614.283276][T25093] netif_receive_skb_list+0x67/0x480 [ 614.283297][T25093] ? bpf_test_run_xdp_live+0x185a/0x1c20 [ 614.283320][T25093] bpf_test_run_xdp_live+0x1875/0x1c20 [ 614.283353][T25093] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 614.283385][T25093] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 614.283405][T25093] ? 0xffffffffa02057c0 [ 614.283467][T25093] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 614.283495][T25093] ? _copy_from_user+0x94/0xb0 [ 614.283519][T25093] ? bpf_test_init+0x113/0x150 [ 614.283536][T25093] ? xdp_convert_md_to_buff+0x5b/0x330 [ 614.283559][T25093] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 614.283593][T25093] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 614.283616][T25093] ? __fget_files+0x2a/0x420 [ 614.283644][T25093] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 614.283665][T25093] bpf_prog_test_run+0x2c5/0x340 [ 614.283701][T25093] __sys_bpf+0xa22/0xd90 [ 614.283729][T25093] ? __pfx___sys_bpf+0x10/0x10 [ 614.283762][T25093] ? __fget_files+0x2a/0x420 [ 614.283801][T25093] ? ksys_write+0x242/0x270 [ 614.283831][T25093] ? __pfx_ksys_write+0x10/0x10 [ 614.283860][T25093] __x64_sys_bpf+0xba/0xd0 [ 614.283881][T25093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.283900][T25093] do_syscall_64+0x174/0x580 [ 614.283919][T25093] ? trace_irq_disable+0x3b/0x140 [ 614.283940][T25093] ? clear_bhb_loop+0x40/0x90 [ 614.283963][T25093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.283982][T25093] RIP: 0033:0x7fc1ef39de99 [ 614.283999][T25093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 614.284014][T25093] RSP: 002b:00007fc1f02ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 614.284033][T25093] RAX: ffffffffffffffda RBX: 00007fc1ef625fa0 RCX: 00007fc1ef39de99 [ 614.284045][T25093] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 614.284056][T25093] RBP: 00007fc1f02ad090 R08: 0000000000000000 R09: 0000000000000000 [ 614.284067][T25093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 614.284076][T25093] R13: 00007fc1ef626038 R14: 00007fc1ef625fa0 R15: 00007ffc19512098 [ 614.284106][T25093] [ 615.110322][T25118] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4976'. [ 615.356195][T25129] syzkaller0: entered promiscuous mode [ 615.373171][T25129] syzkaller0: entered allmulticast mode [ 615.395739][T25140] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4979'. [ 615.892635][T25170] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4987'. [ 615.903050][T25162] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 616.125389][T25177] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 616.314154][T25195] dummy0: Caught tx_queue_len zero misconfig [ 616.361430][T25199] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4994'. [ 616.415474][T25193] 8021q: adding VLAN 0 to HW filter on device bond5 [ 616.498661][T25183] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 616.524964][T25193] bond5: entered promiscuous mode [ 616.537843][T25193] bond5: entered allmulticast mode [ 616.694230][T25220] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4998'. [ 616.769471][T25225] netlink: 'syz.4.4998': attribute type 10 has an invalid length. [ 616.789278][T25220] 8021q: adding VLAN 0 to HW filter on device bond6 [ 616.812681][T25225] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4998'. [ 617.120285][T25251] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5001'. [ 617.434997][T25265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5008'. [ 617.476216][T25265] sctp: [Deprecated]: syz.1.5008 (pid 25265) Use of int in maxseg socket option. [ 617.476216][T25265] Use struct sctp_assoc_value instead [ 617.572605][T25272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5011'. [ 617.839468][T25283] 8021q: adding VLAN 0 to HW filter on device bond6 [ 617.846984][T25287] netlink: 'syz.2.5014': attribute type 10 has an invalid length. [ 617.847117][T25260] wlan0 speed is unknown, defaulting to 1000 [ 617.866580][T25260] lo speed is unknown, defaulting to 1000 [ 617.869630][T25288] syzkaller0: entered promiscuous mode [ 617.878460][T25288] syzkaller0: entered allmulticast mode [ 617.885973][T25287] dummy0: entered promiscuous mode [ 618.619961][T25311] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 618.891761][T25316] __nla_validate_parse: 3 callbacks suppressed [ 618.891780][T25316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5023'. [ 619.024551][T25324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5026'. [ 619.036544][T25324] netlink: 59 bytes leftover after parsing attributes in process `syz.0.5026'. [ 619.448751][T25356] syzkaller1: entered promiscuous mode [ 619.456529][T25356] syzkaller1: entered allmulticast mode [ 619.466938][T25360] netlink: 'syz.0.5036': attribute type 3 has an invalid length. [ 619.672822][T25376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5040'. [ 619.732912][T25376] xt_TCPMSS: Only works on TCP SYN packets [ 619.756979][T25376] xt_TCPMSS: Only works on TCP SYN packets [ 620.057734][T25388] bridge0: entered allmulticast mode [ 620.583546][T25396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5042'. [ 621.185839][T25415] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 621.208340][T25415] netlink: 'syz.1.5045': attribute type 1 has an invalid length. [ 621.234257][T25415] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5045'. [ 621.434431][T25430] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5049'. [ 621.534385][T25438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5051'. [ 621.871135][T25455] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5056'. [ 621.899821][T25457] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5056'. [ 622.446010][T25489] team_slave_1: Caught tx_queue_len zero misconfig [ 622.665151][T25498] syzkaller0: entered promiscuous mode [ 622.680581][T25498] syzkaller0: entered allmulticast mode [ 623.204928][T25538] netlink: 'syz.4.5079': attribute type 4 has an invalid length. [ 623.238602][T25538] netlink: 'syz.4.5079': attribute type 4 has an invalid length. [ 623.500505][T25538] tipc: Resetting bearer [ 623.860654][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 623.905775][T25538] veth1_vlan: left allmulticast mode [ 624.090813][T25538] batman_adv: batadv0: Interface deactivated: gretap1 [ 624.157396][ T1339] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 4352 - 0 [ 624.178451][ T1339] netdevsim netdevsim4 netdevsim0: unset [0, 1] type 1 family 0 port 8472 - 0 [ 624.188214][ T1339] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.217372][ T1339] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 4352 - 0 [ 624.226629][ T1339] netdevsim netdevsim4 netdevsim1: unset [0, 1] type 1 family 0 port 8472 - 0 [ 624.237670][ T1339] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.264354][ T1339] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 4352 - 0 [ 624.278391][ T1339] netdevsim netdevsim4 netdevsim2: unset [0, 1] type 1 family 0 port 8472 - 0 [ 624.294322][ T1339] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.311423][T25548] syzkaller0: entered promiscuous mode [ 624.318209][T25548] syzkaller0: entered allmulticast mode [ 624.521309][T25569] bridge0: entered allmulticast mode [ 624.549730][T25571] __nla_validate_parse: 3 callbacks suppressed [ 624.549749][T25571] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5089'. [ 624.637812][T25578] netlink: 'syz.2.5091': attribute type 1 has an invalid length. [ 624.646198][T25578] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5091'. [ 624.732563][T25582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5092'. [ 624.799615][T25589] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5094'. [ 624.875839][T25593] wireguard0: entered allmulticast mode [ 624.967158][T25600] syzkaller0: entered promiscuous mode [ 624.980297][T25600] syzkaller0: entered allmulticast mode [ 625.307909][T25617] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 626.431105][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 626.438395][ C0] bridge0: port 1(() entered learning state [ 628.755390][T25637] veth1_to_bond: entered allmulticast mode [ 628.762854][T25637] veth1_to_bond: entered promiscuous mode [ 628.772602][T25636] veth1_to_bond: left promiscuous mode [ 628.778435][T25636] veth1_to_bond: left allmulticast mode [ 628.927238][T25646] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 629.419574][T25675] netlink: 'syz.4.5113': attribute type 8 has an invalid length. [ 629.433972][T25675] nbd: couldn't find a device at index 0 [ 629.466915][T25634] wlan0 speed is unknown, defaulting to 1000 [ 629.479664][T25634] lo speed is unknown, defaulting to 1000 [ 629.916754][T25685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5117'. [ 629.927802][T25685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5117'. [ 630.018965][T25685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5117'. [ 630.045239][T25685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5117'. [ 630.118573][T25681] wlan0 speed is unknown, defaulting to 1000 [ 630.153629][T25681] lo speed is unknown, defaulting to 1000 [ 630.165621][T25685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5117'. [ 630.188163][T25685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5117'. [ 630.469810][T25706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5120'. [ 631.034958][T25721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5125'. [ 631.103702][T25725] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5125'. [ 631.155458][T25726] netlink: 'syz.3.5125': attribute type 10 has an invalid length. [ 631.163416][T25726] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5125'. [ 631.223552][T25721] 8021q: adding VLAN 0 to HW filter on device bond8 [ 631.333608][T25726] dummy0: entered promiscuous mode [ 631.369047][T25726] team0: Port device dummy0 removed [ 631.377137][T25728] tipc: Enabling of bearer rejected, failed to enable media [ 631.412730][T25723] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 632.265473][T25762] bond9: Unable to set up delay as MII monitoring is disabled [ 632.293683][T25762] bond9 (unregistering): Released all slaves [ 632.611477][T25787] netlink: 'syz.2.5139': attribute type 1 has an invalid length. [ 632.679157][T25790] IPv6: NLM_F_CREATE should be specified when creating new route [ 632.706830][T25790] netlink: 'syz.4.5140': attribute type 13 has an invalid length. [ 632.964157][T25802] tc action pedit 'at' offset 2 out of bounds [ 632.972146][T25802] tc action pedit 'at' offset 2 out of bounds [ 632.978230][T25802] tc action pedit 'at' offset 2 out of bounds [ 632.984336][T25802] tc action pedit 'at' offset 2 out of bounds [ 632.990437][T25802] tc action pedit 'at' offset 2 out of bounds [ 632.996514][T25802] tc action pedit 'at' offset 2 out of bounds [ 633.002595][T25802] tc action pedit 'at' offset 2 out of bounds [ 633.008650][T25802] tc action pedit 'at' offset 2 out of bounds [ 633.014727][T25802] tc action pedit 'at' offset 2 out of bounds [ 633.020801][T25802] tc action pedit 'at' offset 2 out of bounds [ 633.026872][T25802] TC_ACT_REPEAT abuse ? [ 633.314214][T25823] netlink: 'syz.2.5149': attribute type 1 has an invalid length. [ 633.352941][T25819] team0: Port device syz_tun added [ 633.377843][T25827] syzkaller0: entered promiscuous mode [ 633.397969][T25827] syzkaller0: entered allmulticast mode [ 633.503547][T25831] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 634.317480][ T7971] tipc: Subscription rejected, illegal request [ 634.914279][T25921] macsec0: entered promiscuous mode [ 634.925985][T25921] macsec0 (unregistering): left promiscuous mode [ 635.046419][T25917] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 635.172336][T25928] __nla_validate_parse: 8 callbacks suppressed [ 635.172356][T25928] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5180'. [ 635.235335][T25938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5182'. [ 635.418867][T25950] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5186'. [ 635.455236][T25950] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5186'. [ 635.475166][T25950] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 636.034814][T25979] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5195'. [ 636.086249][T25981] xt_hashlimit: max too large, truncated to 1048576 [ 636.224914][T25992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5199'. [ 636.312579][T25998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5202'. [ 636.403588][T26007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5204'. [ 636.425263][T26007] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5204'. [ 636.467407][T26007] netlink: 'syz.1.5204': attribute type 1 has an invalid length. [ 636.493646][T26007] netlink: 'syz.1.5204': attribute type 2 has an invalid length. [ 636.513752][T26007] netlink: 236 bytes leftover after parsing attributes in process `syz.1.5204'. [ 636.532905][T26011] netlink: 'syz.3.5206': attribute type 1 has an invalid length. [ 636.692889][T26017] bond11: (slave geneve3): making interface the new active one [ 636.707027][T26017] bond11: (slave geneve3): Enslaving as an active interface with an up link [ 636.729272][ T7972] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 636.759453][ T7972] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 636.788772][ T7972] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 636.813976][ T7972] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 637.135345][ T5627] block nbd5: Receive control failed (result -107) [ 637.463563][T26055] 8021q: adding VLAN 0 to HW filter on device bond7 [ 637.490249][T26055] netlink: 'syz.4.5219': attribute type 10 has an invalid length. [ 637.636760][T26066] netlink: 'syz.4.5223': attribute type 1 has an invalid length. [ 637.660495][T26066] netlink: 'syz.4.5223': attribute type 4 has an invalid length. [ 638.159061][T26081] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 638.212249][T26083] netlink: 'syz.3.5229': attribute type 11 has an invalid length. [ 638.511569][T26099] 8021q: adding VLAN 0 to HW filter on device bond12 [ 638.520287][T26102] netlink: 'syz.1.5234': attribute type 2 has an invalid length. [ 638.533283][T26103] netlink: 'syz.1.5234': attribute type 2 has an invalid length. [ 638.544454][T26099] netlink: 'syz.3.5233': attribute type 10 has an invalid length. [ 638.730789][T26108] netlink: 'syz.1.5236': attribute type 1 has an invalid length. [ 638.842144][T26112] xt_bpf: check failed: parse error [ 639.268081][T26127] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 639.309700][T26127] bond7: (slave lo): Enslaving as an active interface with an up link [ 639.326830][T26127] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 639.594092][T26137] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 639.691436][T26141] bond8: entered promiscuous mode [ 639.726362][T26141] 8021q: adding VLAN 0 to HW filter on device bond8 [ 639.805716][T26140] bond0: entered promiscuous mode [ 639.815730][T26137] block nbd6: shutting down sockets [ 639.841972][T26140] ipvlan1: entered promiscuous mode [ 639.869782][T26140] ipvlan1: left promiscuous mode [ 639.893804][T26140] bond0: left promiscuous mode [ 639.934084][T26152] bond0: entered promiscuous mode [ 639.940230][T26152] ipvlan1: entered promiscuous mode [ 639.965787][T26152] ipvlan1: left promiscuous mode [ 639.979436][T26152] bond0: left promiscuous mode [ 640.034006][T26148] ipvlan2: entered allmulticast mode [ 640.051510][T26148] bond8: entered allmulticast mode [ 640.082265][T26141] ipvlan3: entered allmulticast mode [ 640.187708][T26153] bond8: (slave bridge1): making interface the new active one [ 640.206970][T26153] bridge1: entered promiscuous mode [ 640.220736][T26153] bridge1: entered allmulticast mode [ 640.241361][T26153] bond8: (slave bridge1): Enslaving as an active interface with an up link [ 640.586118][T26175] __nla_validate_parse: 15 callbacks suppressed [ 640.586136][T26175] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5254'. [ 640.765343][T26185] tipc: Enabled bearer , priority 0 [ 640.781988][T26185] syzkaller0: entered promiscuous mode [ 640.787839][T26185] syzkaller0: entered allmulticast mode [ 640.807738][T26185] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 640.862516][T26185] tipc: Resetting bearer [ 640.886498][T26184] tipc: Resetting bearer [ 640.959582][T26184] tipc: Disabling bearer [ 641.161658][T26211] netlink: 59 bytes leftover after parsing attributes in process `syz.4.5262'. [ 641.278702][T26214] tipc: Enabling of bearer rejected, already enabled [ 641.386116][T26223] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5263'. [ 641.497483][T26227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5264'. [ 641.507362][T26227] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5264'. [ 641.524220][T26223] 8021q: adding VLAN 0 to HW filter on device bond8 [ 641.745164][T26238] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5267'. [ 641.790466][ C0] bridge0: port 1(() entered forwarding state [ 641.796690][ C0] bridge0: topology change detected, propagating [ 641.803399][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 641.810643][ C0] bridge0: topology change detected, propagating [ 642.399813][T26270] sctp: [Deprecated]: syz.4.5277 (pid 26270) Use of int in max_burst socket option deprecated. [ 642.399813][T26270] Use struct sctp_assoc_value instead [ 642.407114][T26267] syzkaller1: entered promiscuous mode [ 642.422327][T26267] syzkaller1: entered allmulticast mode [ 642.647866][T26281] validate_nla: 1 callbacks suppressed [ 642.647898][T26281] netlink: 'syz.4.5277': attribute type 1 has an invalid length. [ 642.710107][T26281] bond9: option mode: invalid value (9) [ 642.729053][T26281] bond9 (unregistering): Released all slaves [ 643.188728][T26306] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5284'. [ 643.202183][T26306] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5284'. [ 643.202461][T26307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5285'. [ 643.245354][T26304] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 643.258399][T26304] ipt_ECN: cannot use operation on non-tcp rule [ 643.568447][T26318] netlink: 'syz.2.5288': attribute type 1 has an invalid length. [ 643.577567][T26318] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5288'. [ 644.636824][T26364] 8021q: adding VLAN 0 to HW filter on device bond7 [ 644.651419][T26369] dummy0: left promiscuous mode [ 644.733194][T26369] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 644.980634][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 645.399235][T26427] 8021q: adding VLAN 0 to HW filter on device bond8 [ 645.444867][T26427] bond7: (slave dummy0): Releasing backup interface [ 645.472833][T26427] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 645.978100][T26463] bond13: option ad_select: invalid value (34) [ 645.986502][T26463] bond13 (unregistering): Released all slaves [ 646.013184][T26469] tipc: Enabling of bearer rejected, failed to enable media [ 646.029975][T26469] syzkaller0: entered promiscuous mode [ 646.038155][T26469] syzkaller0: entered allmulticast mode [ 646.105646][T26473] __nla_validate_parse: 5 callbacks suppressed [ 646.105665][T26473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5330'. [ 646.179861][T26475] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5330'. [ 646.371292][T26477] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5331'. [ 646.471899][T26483] xt_cgroup: path and classid specified [ 646.676988][T26493] syzkaller0: entered promiscuous mode [ 646.699227][T26497] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5337'. [ 646.710654][T26493] syzkaller0: entered allmulticast mode [ 646.800016][T26048] udevd[26048]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 646.817365][T25635] udevd[25635]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 647.115988][T26514] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5342'. [ 647.441948][T26523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5344'. [ 647.452565][T26523] syzkaller0: entered promiscuous mode [ 647.458131][T26523] syzkaller0: entered allmulticast mode [ 647.899685][T26546] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5351'. [ 648.011714][T26549] sctp: [Deprecated]: syz.1.5352 (pid 26549) Use of int in max_burst socket option. [ 648.011714][T26549] Use struct sctp_assoc_value instead [ 648.260206][T25635] udevd[25635]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 648.274762][T26567] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5357'. [ 648.302405][T26567] netlink: 'syz.4.5357': attribute type 7 has an invalid length. [ 648.320810][T26567] netlink: 'syz.4.5357': attribute type 8 has an invalid length. [ 648.333002][T26567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5357'. [ 648.439648][T26560] netlink: 'syz.2.5354': attribute type 1 has an invalid length. [ 648.456456][T26560] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5354'. [ 650.689927][T26621] x_tables: duplicate underflow at hook 2 [ 652.744147][T26589] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 652.745523][T26603] __nla_validate_parse: 1 callbacks suppressed [ 652.745540][T26603] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5365'. [ 653.145765][T26636] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 653.247267][T26634] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 653.318500][T26650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 653.357482][T26649] syzkaller0: entered promiscuous mode [ 653.372367][T26649] syzkaller0: entered allmulticast mode [ 653.438004][T26649] tipc: Enabled bearer , priority 0 [ 653.489493][T26649] tipc: Resetting bearer [ 653.505252][T26664] syzkaller0: entered promiscuous mode [ 653.511168][T26664] syzkaller0: entered allmulticast mode [ 653.521136][T26648] tipc: Resetting bearer [ 653.559344][T26648] tipc: Disabling bearer [ 653.604859][T26670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5381'. [ 653.619381][T26634] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 653.683210][T26670] 8021q: adding VLAN 0 to HW filter on device bond7 [ 653.795820][T26634] team0: Port device netdevsim1 removed [ 653.807691][T26634] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 653.853994][T26679] netlink: 'syz.0.5383': attribute type 66 has an invalid length. [ 653.867300][T26678] netlink: 'syz.0.5383': attribute type 66 has an invalid length. [ 653.925946][T26634] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 653.964664][T26688] syzkaller0: entered promiscuous mode [ 653.970217][T26688] syzkaller0: entered allmulticast mode [ 654.221080][T26709] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5391'. [ 654.243714][T26710] netlink: 5 bytes leftover after parsing attributes in process `syz.0.5391'. [ 654.370005][T26710] 0{X功: renamed from gretap0 (while UP) [ 654.390344][T26710] 0{X功: entered allmulticast mode [ 654.400046][T26710] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 654.420070][T26709] 0{X功: entered promiscuous mode [ 654.425778][T26709] 0{X功: left allmulticast mode [ 654.444458][ T7970] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 654.530147][T13627] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 654.587348][ T7976] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 654.613456][ T7976] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 654.666950][T26722] netlink: 'syz.2.5394': attribute type 29 has an invalid length. [ 654.749552][T26727] dummy0: left promiscuous mode [ 654.789529][T26727] netlink: 'syz.3.5396': attribute type 10 has an invalid length. [ 654.816050][T26727] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5396'. [ 654.835558][T26727] dummy0: entered promiscuous mode [ 654.930302][T26737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5399'. [ 655.081764][T26739] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5400'. [ 655.277455][T26746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5402'. [ 655.489571][T26763] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5405'. [ 655.516763][T26765] syzkaller0: entered promiscuous mode [ 655.523151][T26765] syzkaller0: entered allmulticast mode [ 655.539902][T26766] netlink: 'syz.4.5406': attribute type 1 has an invalid length. [ 655.844729][T26780] openvswitch: netlink: Actions may not be safe on all matching packets [ 655.975121][T26785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5411'. [ 656.347959][T26800] IPVS: Scheduler module ip_vs_sip not found [ 656.713736][T26818] syzkaller0: entered promiscuous mode [ 656.724780][T26818] syzkaller0: entered allmulticast mode [ 657.037886][T26846] IPv6: NLM_F_CREATE should be specified when creating new route [ 657.054282][T26846] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 657.061632][T26846] IPv6: NLM_F_CREATE should be set when creating new route [ 657.068948][T26846] IPv6: NLM_F_CREATE should be set when creating new route [ 657.076248][T26846] IPv6: NLM_F_CREATE should be set when creating new route [ 657.936103][T26883] __nla_validate_parse: 7 callbacks suppressed [ 657.936123][T26883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5438'. [ 658.504658][T26876] wlan0 speed is unknown, defaulting to 1000 [ 658.516321][T26911] bond0: entered promiscuous mode [ 658.533008][T26911] bond0: left promiscuous mode [ 658.554848][T26876] lo speed is unknown, defaulting to 1000 [ 658.593954][T26914] bond0: entered promiscuous mode [ 658.620574][T26914] bond0: left promiscuous mode [ 659.346941][T26946] tipc: Enabling of bearer rejected, failed to enable media [ 659.407328][T26946] tipc: Enabling of bearer rejected, failed to enable media [ 659.700997][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 661.001230][T26980] netlink: 'syz.4.5464': attribute type 7 has an invalid length. [ 661.139841][T26986] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5465'. [ 661.322377][T26994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5469'. [ 661.351348][T26997] netlink: zone id is out of range [ 661.368546][T26997] netlink: zone id is out of range [ 661.383751][T26997] netlink: zone id is out of range [ 661.397160][T26997] netlink: zone id is out of range [ 661.403270][T26997] netlink: zone id is out of range [ 661.419439][T27001] netlink: 'syz.4.5472': attribute type 25 has an invalid length. [ 661.420489][T26997] netlink: zone id is out of range [ 661.455435][T26997] netlink: zone id is out of range [ 661.489333][T26997] netlink: zone id is out of range [ 661.504507][T26997] netlink: zone id is out of range [ 661.514621][T26997] netlink: zone id is out of range [ 661.717730][T27025] x_tables: ip_tables: osf match: only valid for protocol 6 [ 661.937555][T27037] netlink: 'syz.1.5482': attribute type 5 has an invalid length. [ 662.026926][T27041] syzkaller0: entered promiscuous mode [ 662.033129][T27041] syzkaller0: entered allmulticast mode [ 662.061408][T27043] tipc: Enabled bearer , priority 0 [ 662.100828][T27040] tipc: Resetting bearer [ 662.262709][T27040] tipc: Disabling bearer [ 663.166510][T27061] wlan0 speed is unknown, defaulting to 1000 [ 663.177566][T27061] lo speed is unknown, defaulting to 1000 [ 663.289818][T27098] netlink: 'syz.4.5500': attribute type 1 has an invalid length. [ 663.298300][T27098] netlink: 236 bytes leftover after parsing attributes in process `syz.4.5500'. [ 663.313145][T27098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5500'. [ 663.335490][T27100] team0: Port device syz_tun removed [ 663.367466][T27100] bond0: (slave batadv0): Releasing backup interface [ 663.399788][T27100] (: left allmulticast mode [ 663.421517][T27100] (: left promiscuous mode [ 663.440752][T27100] bridge0: port 1(() entered disabled state [ 663.462813][T27100] bridge_slave_1: left allmulticast mode [ 663.468612][T27100] bridge_slave_1: left promiscuous mode [ 663.474838][T27100] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.487491][T27100] bond0: (slave bond_slave_0): Releasing backup interface [ 663.505475][T27100] bond0: (slave bond_slave_1): Releasing backup interface [ 663.531509][T27100] team0: Port device team_slave_0 removed [ 663.559446][T27100] team0: Port device team_slave_1 removed [ 663.566418][T27100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 663.574172][T27100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.607196][T27106] team0: Port device xfrm0 added [ 663.781954][T27113] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 664.185496][T27126] netlink: 'syz.4.5505': attribute type 1 has an invalid length. [ 664.209820][T27123] bond13: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 664.236691][T27123] bond13 (unregistering): Released all slaves [ 664.295933][T27126] 8021q: adding VLAN 0 to HW filter on device bond9 [ 664.318067][T27128] bond9: (slave geneve3): making interface the new active one [ 664.328500][T27128] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 664.351634][T13627] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.387610][ T7976] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.408937][ T7976] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.770609][T27154] sctp: [Deprecated]: syz.2.5512 (pid 27154) Use of int in max_burst socket option. [ 664.770609][T27154] Use struct sctp_assoc_value instead [ 664.801306][T27153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5513'. [ 664.902983][T27156] dummy0: left promiscuous mode [ 664.926459][T27156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 664.936613][T27163] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5517'. [ 664.960162][T27163] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5517'. [ 665.001023][T27163] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5517'. [ 665.024112][T27163] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5517'. [ 665.053040][T27163] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5517'. [ 665.089750][T27163] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5517'. [ 665.119733][T27163] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5517'. [ 665.329772][T27177] wlan0: renamed from sit0 [ 665.353773][T27177] wlan0: entered promiscuous mode [ 665.362086][T27177] wlan0: entered allmulticast mode [ 665.446017][T27179] netlink: 'syz.1.5521': attribute type 21 has an invalid length. [ 665.927031][T27198] syzkaller0: entered promiscuous mode [ 665.944133][T27198] syzkaller0: entered allmulticast mode [ 665.957634][T27206] netlink: 'syz.1.5529': attribute type 58 has an invalid length. [ 667.035003][T27264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 667.056178][T27264] 8021q: adding VLAN 0 to HW filter on device team0 [ 667.079622][T27264] tipc: Resetting bearer [ 667.121444][T27264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 667.202651][T27264] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 667.222057][T27264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 667.267047][T27264] net_ratelimit: 7 callbacks suppressed [ 667.267067][T27264] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 667.471198][T14422] wlan0 speed is unknown, defaulting to 1000 [ 668.423341][T27349] __nla_validate_parse: 76 callbacks suppressed [ 668.423359][T27349] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5567'. [ 668.520228][T27354] netlink: 'syz.2.5569': attribute type 1 has an invalid length. [ 668.528637][T27354] netlink: 'syz.2.5569': attribute type 4 has an invalid length. [ 668.536775][T27354] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.5569'. [ 668.613916][T27358] netlink: 'syz.2.5571': attribute type 3 has an invalid length. [ 668.789796][T27365] vlan0: entered promiscuous mode [ 668.850007][T27368] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 668.904970][T27370] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5576'. [ 668.998631][T27373] netlink: 'syz.0.5577': attribute type 1 has an invalid length. [ 669.006931][T27373] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5577'. [ 669.007635][T27375] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5578'. [ 669.016634][T27373] NCSI netlink: No device for ifindex 0 [ 669.106145][T27379] netlink: 8752 bytes leftover after parsing attributes in process `syz.2.5579'. [ 669.233898][T27387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5582'. [ 669.249226][T27385] vlan2: entered promiscuous mode [ 669.255277][T27385] syz_tun: entered promiscuous mode [ 669.447024][T27394] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5585'. [ 669.584977][ T29] audit: type=1804 audit(1784620993.562:20): pid=27394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5585" name="/newroot/510/cgroup.controllers" dev="tmpfs" ino=2639 res=1 errno=0 [ 669.608112][ T29] audit: type=1800 audit(1784620993.562:21): pid=27394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5585" name="cgroup.controllers" dev="tmpfs" ino=2639 res=0 errno=0 [ 670.188296][T27423] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5593'. [ 670.210509][T27423] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5593'. [ 670.246188][T27424] netlink: 'syz.4.5593': attribute type 10 has an invalid length. [ 670.377463][T27424] geneve4: entered promiscuous mode [ 670.394924][T27424] geneve4: entered allmulticast mode [ 670.497761][T27412] wlan0 speed is unknown, defaulting to 1000 [ 670.520265][T27412] lo speed is unknown, defaulting to 1000 [ 673.008070][T27519] syzkaller0: entered promiscuous mode [ 673.031076][T27519] syzkaller0: entered allmulticast mode [ 673.102015][T27491] wlan0 speed is unknown, defaulting to 1000 [ 673.103458][T27525] 8021q: VLANs not supported on ip6_vti0 [ 673.264627][T27491] lo speed is unknown, defaulting to 1000 [ 673.565123][T27549] team0: Port device xfrm0 removed [ 673.593408][T27549] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 673.707175][T27549] team0: Mode changed to "activebackup" [ 673.768000][ T7970] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 674.666055][T27593] __nla_validate_parse: 7 callbacks suppressed [ 674.666072][T27593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5631'. [ 674.952432][T27609] macvtap1: entered promiscuous mode [ 674.962125][T27609] batadv0: entered promiscuous mode [ 674.979320][T27609] macvtap1: entered allmulticast mode [ 674.998007][T27609] batadv0: entered allmulticast mode [ 675.021197][T27609] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 675.044648][T27609] batadv0: left allmulticast mode [ 675.051829][T27609] batadv0: left promiscuous mode [ 675.284592][T27619] veth0_vlan: left promiscuous mode [ 675.318568][T27620] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5637'. [ 675.509714][T27627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5639'. [ 675.519771][T27627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5639'. [ 675.650718][T27634] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5641'. [ 675.834935][T27616] wlan0 speed is unknown, defaulting to 1000 [ 675.858829][T27616] lo speed is unknown, defaulting to 1000 [ 676.576996][T27624] wlan0 speed is unknown, defaulting to 1000 [ 676.611704][T27624] lo speed is unknown, defaulting to 1000 [ 676.828986][T27676] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5650'. [ 677.071585][T27688] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5651'. [ 677.554248][T27698] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5654'. [ 677.564995][T27698] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5654'. [ 678.199073][T27715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5659'. [ 678.712361][T27733] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.760233][T27733] batadv0: left promiscuous mode [ 678.773978][T27733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 678.844228][T27743] netlink: 'syz.4.5665': attribute type 4 has an invalid length. [ 679.024695][T27733] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 679.091259][ T10] lo speed is unknown, defaulting to 1000 [ 679.115584][ T10] s: Port: 1 Link ACTIVE [ 679.168018][ T10] lo speed is unknown, defaulting to 1000 [ 679.779379][T27796] netlink: 'syz.1.5678': attribute type 1 has an invalid length. [ 679.928384][T27800] __nla_validate_parse: 7 callbacks suppressed [ 679.928402][T27800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5680'. [ 680.159459][T27811] netlink: 'syz.0.5684': attribute type 12 has an invalid length. [ 680.164865][T27816] netlink: 'syz.4.5686': attribute type 62 has an invalid length. [ 680.198795][T27811] netlink: 'syz.0.5684': attribute type 12 has an invalid length. [ 680.223116][T27811] netlink: 'syz.0.5684': attribute type 12 has an invalid length. [ 680.238703][T27811] netlink: 'syz.0.5684': attribute type 12 has an invalid length. [ 680.249555][T27812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5684'. [ 680.268287][T27811] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5684'. [ 680.284026][T27812] macsec0: entered promiscuous mode [ 680.297724][T27822] : renamed from veth0_to_bond [ 680.371454][T27812] macsec0: left promiscuous mode [ 680.449073][T27827] dvmrp8: entered allmulticast mode [ 680.579141][T27835] ip6tnl1: entered allmulticast mode [ 680.695127][T27842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5695'. [ 680.932788][T27854] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5693'. [ 680.951889][T27855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5697'. [ 680.972405][T27856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5697'. [ 681.596592][T27870] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5702'. [ 681.623476][T27870] bridge3: entered allmulticast mode [ 681.703641][T27873] netlink: 'syz.3.5703': attribute type 2 has an invalid length. [ 681.920152][T27885] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5706'. [ 682.195786][T27898] Unknown options in mask 6 [ 682.202496][T27898] Unknown options in mask 6 [ 682.207353][T27898] Unknown options in mask 6 [ 682.354941][T27905] netlink: 'syz.3.5713': attribute type 1 has an invalid length. [ 682.416759][T27905] 8021q: adding VLAN 0 to HW filter on device bond13 [ 682.424648][T27886] wlan0 speed is unknown, defaulting to 1000 [ 682.464905][T27912] vlan4: entered allmulticast mode [ 682.470296][T27912] bond13: entered allmulticast mode [ 682.482053][T27914] bridge0: port 1(macvlan0) entered blocking state [ 682.488845][T27886] lo speed is unknown, defaulting to 1000 [ 682.496391][T27914] bridge0: port 1(macvlan0) entered disabled state [ 682.504044][T27914] macvlan0: entered allmulticast mode [ 682.512182][T27914] veth1_vlan: entered allmulticast mode [ 682.523726][T27914] macvlan0: entered promiscuous mode [ 682.532180][T27914] bridge0: port 1(macvlan0) entered blocking state [ 682.538800][T27914] bridge0: port 1(macvlan0) entered forwarding state [ 682.574072][T27905] bond13: (slave geneve4): making interface the new active one [ 682.582825][T27905] geneve4: entered allmulticast mode [ 682.594842][T27905] bond13: (slave geneve4): Enslaving as an active interface with an up link [ 682.616776][ T7974] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 682.636593][T27905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 682.675079][ T7974] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 682.694505][ T7974] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 682.723146][ T7974] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 682.730339][T27905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 683.083506][T27932] x_tables: unsorted entry at hook 2 [ 683.230010][T27934] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5721'. [ 683.478859][T27925] wlan0 speed is unknown, defaulting to 1000 [ 683.504194][T27925] lo speed is unknown, defaulting to 1000 [ 683.557283][T27950] netlink: 'syz.3.5725': attribute type 3 has an invalid length. [ 684.962960][T28003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 685.063928][T28003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 685.486451][T28026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 685.551572][T28028] __nla_validate_parse: 1 callbacks suppressed [ 685.551594][T28028] netlink: 228 bytes leftover after parsing attributes in process `syz.2.5740'. [ 686.476854][T28047] syzkaller0: entered promiscuous mode [ 686.487163][T28047] syzkaller0: entered allmulticast mode [ 686.816577][T28067] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5748'. [ 687.068082][T28078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5752'. [ 690.005703][T28086] openvswitch: netlink: Duplicate or invalid key (type 0). [ 690.013702][T28086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 690.593376][T28099] nbd: couldn't find device at index 0 [ 690.726326][ T3395] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 690.745733][ T3395] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 690.765363][ T3395] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 690.768242][T28111] xt_hashlimit: max too large, truncated to 1048576 [ 690.787987][ T3395] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 690.790695][T28111] xt_hashlimit: overflow, try lower: 137438953472/8 [ 690.819952][T28107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5761'. [ 690.835430][T28107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5761'. [ 690.860635][T28107] validate_nla: 1 callbacks suppressed [ 690.860655][T28107] netlink: 'syz.2.5761': attribute type 6 has an invalid length. [ 690.921557][ T7980] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 690.921643][T28107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5761'. [ 690.992527][T28107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5761'. [ 691.035650][T28107] netlink: 'syz.2.5761': attribute type 6 has an invalid length. [ 691.368029][T28107] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 691.764622][T28157] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5773'. [ 691.796006][T28153] netlink: 240 bytes leftover after parsing attributes in process `syz.3.5771'. [ 691.817744][T28157] syzkaller0: entered promiscuous mode [ 691.831644][T28153] netlink: 'syz.3.5771': attribute type 9 has an invalid length. [ 691.834903][T28157] syzkaller0: entered allmulticast mode [ 691.864900][T28153] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.5771'. [ 691.886942][T28157] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5773'. [ 692.321167][T28186] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5779'. [ 692.358663][T28186] lo speed is unknown, defaulting to 1000 [ 692.386502][T28186] lo speed is unknown, defaulting to 1000 [ 692.448480][T28186] lo speed is unknown, defaulting to 1000 [ 692.463652][T28186] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 692.511806][T28186] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 692.570494][T28186] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 692.632084][T28206] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5785'. [ 692.676476][T28186] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 692.792633][T28206] bridge0: port 1(macvlan0) entered disabled state [ 692.857748][T28186] lo speed is unknown, defaulting to 1000 [ 692.967210][T28208] syzkaller0: entered promiscuous mode [ 692.972949][T28208] syzkaller0: entered allmulticast mode [ 693.004488][T28206] bond8: option ad_user_port_key: invalid value (65535) [ 693.016733][T28206] bond8: option ad_user_port_key: allowed values 0 - 1023 [ 693.027059][T28206] bond8 (unregistering): Released all slaves [ 693.063923][T28186] lo speed is unknown, defaulting to 1000 [ 693.168943][ T5635] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 693.183873][ T5635] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 693.193003][ T5635] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 693.214509][ T5635] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 693.223661][ T5635] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 693.279441][ T5627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 693.288783][ T5627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 693.297573][ T5627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 693.307522][ T5627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 693.316451][ T5627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 695.400183][ T5635] Bluetooth: hci4: command tx timeout [ 696.744160][T28186] lo speed is unknown, defaulting to 1000 [ 696.875932][T28186] lo speed is unknown, defaulting to 1000 [ 696.904608][T28186] lo speed is unknown, defaulting to 1000 [ 696.936679][T28186] lo speed is unknown, defaulting to 1000 [ 696.967558][T28186] lo speed is unknown, defaulting to 1000 [ 696.989906][T28186] lo speed is unknown, defaulting to 1000 [ 697.258603][T28259] syzkaller0: entered promiscuous mode [ 697.286548][T28259] syzkaller0: entered allmulticast mode [ 697.460855][ T5635] Bluetooth: hci4: command tx timeout [ 697.993534][T28297] netlink: 'syz.1.5801': attribute type 3 has an invalid length. [ 698.012166][T28297] netlink: 'syz.1.5801': attribute type 3 has an invalid length. [ 698.031235][T28297] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5801'. [ 698.149477][T28275] mac80211_hwsim hwsim38 wlan0: entered allmulticast mode [ 698.173171][T28303] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5802'. [ 698.431461][T28310] netlink: 'syz.1.5804': attribute type 15 has an invalid length. [ 698.993519][T28226] wlan0 speed is unknown, defaulting to 1000 [ 699.013647][T28226] lo speed is unknown, defaulting to 1000 [ 699.154695][ T29] audit: type=1804 audit(1784621023.132:22): pid=28333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5811" name="/newroot/484/cgroup.controllers" dev="tmpfs" ino=2511 res=1 errno=0 [ 699.218511][ T29] audit: type=1800 audit(1784621023.132:23): pid=28333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5811" name="cgroup.controllers" dev="tmpfs" ino=2511 res=0 errno=0 [ 699.458005][T28340] netlink: 'syz.0.5814': attribute type 9 has an invalid length. [ 699.493046][T28340] netlink: 'syz.0.5814': attribute type 5 has an invalid length. [ 699.542862][ T5635] Bluetooth: hci4: command tx timeout [ 699.595381][T28226] lo speed is unknown, defaulting to 1000 [ 699.769269][T28352] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 699.858142][T28357] xt_hashlimit: size too large, truncated to 1048576 [ 700.338608][T28226] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.348605][T28226] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.356444][T28226] bridge_slave_0: entered allmulticast mode [ 700.364705][T28226] bridge_slave_0: entered promiscuous mode [ 700.374278][T28226] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.381974][T28226] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.389216][T28226] bridge_slave_1: entered allmulticast mode [ 700.397830][T28226] bridge_slave_1: entered promiscuous mode [ 700.443873][T28226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 700.457417][T28226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.499795][T28226] team0: Port device team_slave_0 added [ 700.509128][T28226] team0: Port device team_slave_1 added [ 700.545606][T28226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.553060][T28226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.579722][T28226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.592919][T28226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.599908][T28226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.627619][T28226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 700.694901][T28226] hsr_slave_0: entered promiscuous mode [ 700.701772][T28226] hsr_slave_1: entered promiscuous mode [ 700.708242][T28226] debugfs: 'hsr0' already exists in 'hsr' [ 700.714907][T28226] Cannot create hsr debugfs directory [ 700.730253][T28382] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5820'. [ 700.862951][T28226] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 700.873619][T28226] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 700.907489][T28387] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 700.951887][T28226] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 700.961951][T28226] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 700.993192][T28226] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 701.003253][T28226] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 701.067111][T28226] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 701.077435][T28226] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 701.620679][ T5635] Bluetooth: hci4: command tx timeout [ 701.707343][T28391] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5823'. [ 702.702400][T28350] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 702.759511][T28226] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 702.831195][T28226] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 702.875125][T28226] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 702.930726][T28226] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 703.033696][T28226] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 703.097214][T28226] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 703.113759][T28226] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 703.169145][T28226] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 703.214290][T28426] ip6tnl4: entered allmulticast mode [ 703.368080][T28444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 703.525255][T28451] netlink: 'syz.2.5833': attribute type 12 has an invalid length. [ 703.619264][T28226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 703.695494][ T3395] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 703.724897][ T3395] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 703.732446][ T10] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 703.759039][T28226] 8021q: adding VLAN 0 to HW filter on device team0 [ 703.800432][ T7976] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.807640][ T7976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 703.824745][T28470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5836'. [ 703.860342][ T7976] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.867580][ T7976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 703.887846][T28479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5836'. [ 703.912681][T28470] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 703.941544][T20293] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 704.261830][ T10] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 704.530105][T28483] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 704.604179][T28518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5845'. [ 705.199264][T28542] bond9 (unregistering): Released all slaves [ 705.302855][T28226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 705.466460][T28226] veth0_vlan: entered promiscuous mode [ 705.510682][T28226] veth1_vlan: entered promiscuous mode [ 705.581745][T28226] veth0_macvtap: entered promiscuous mode [ 705.611557][T28226] veth1_macvtap: entered promiscuous mode [ 705.669957][T28226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 705.748331][T28534] wlan0 speed is unknown, defaulting to 1000 [ 705.754171][T28226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 705.849669][T28534] lo speed is unknown, defaulting to 1000 [ 705.886721][ T7980] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.910956][ T7980] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.948873][ T7980] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.966513][ T7980] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.097504][T28569] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5853'. [ 706.154201][T28563] xt_CT: No such helper "syz0" [ 706.289860][T28574] netlink: 'syz.4.5855': attribute type 1 has an invalid length. [ 706.362347][T28574] 8021q: adding VLAN 0 to HW filter on device bond10 [ 706.423847][T28578] bond10: entered promiscuous mode [ 706.440732][T28578] bond10: entered allmulticast mode [ 706.461591][T28570] nbd0: detected capacity change from 0 to 63 [ 706.493980][ T4952] [ 706.496351][ T4952] ====================================================== [ 706.503377][ T4952] WARNING: possible circular locking dependency detected [ 706.510417][ T4952] syzkaller #0 Not tainted [ 706.514837][ T4952] ------------------------------------------------------ [ 706.521954][ T4952] kworker/1:1H/4952 is trying to acquire lock: [ 706.528201][ T4952] ffff8880367fd068 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x373/0x1150 [ 706.537285][ T4952] [ 706.537285][ T4952] but task is already holding lock: [ 706.544658][ T4952] ffff88804c83e178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0x1150 [ 706.553222][ T4952] [ 706.553222][ T4952] which lock already depends on the new lock. [ 706.553222][ T4952] [ 706.563672][ T4952] [ 706.563672][ T4952] the existing dependency chain (in reverse order) is: [ 706.572696][ T4952] [ 706.572696][ T4952] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 706.579927][ T4952] __mutex_lock+0x19d/0x1550 [ 706.585058][ T4952] nbd_queue_rq+0xc1/0x1150 [ 706.590143][ T4952] blk_mq_dispatch_rq_list+0x499/0x1990 [ 706.596244][ T4952] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 706.603151][ T4952] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 706.609648][ T4952] blk_mq_run_work_fn+0x16c/0x300 [ 706.615198][ T4952] process_scheduled_works+0xa8e/0x14e0 [ 706.621276][ T4952] worker_thread+0xa47/0xfb0 [ 706.626379][ T4952] kthread+0x388/0x470 [ 706.630958][ T4952] ret_from_fork+0x514/0xb70 [ 706.636109][ T4952] ret_from_fork_asm+0x1a/0x30 [ 706.641383][ T4952] [ 706.641383][ T4952] -> #5 (set->srcu){.+.+}-{0:0}: [ 706.648489][ T4952] __synchronize_srcu+0xc9/0x2f0 [ 706.653941][ T4952] elevator_switch+0x1e8/0x7b0 [ 706.659241][ T4952] elevator_change+0x2fa/0x480 [ 706.664521][ T4952] elevator_set_default+0x375/0x440 [ 706.670250][ T4952] blk_register_queue+0x3f3/0x4e0 [ 706.675816][ T4952] __add_disk+0x6cb/0xe30 [ 706.680679][ T4952] add_disk_fwnode+0x100/0x3a0 [ 706.685953][ T4952] nbd_dev_add+0x733/0xb60 [ 706.690885][ T4952] nbd_init+0x15f/0x1e0 [ 706.695572][ T4952] do_one_initcall+0x250/0x870 [ 706.700855][ T4952] do_initcall_level+0x10a/0x1a0 [ 706.706328][ T4952] do_initcalls+0x59/0xa0 [ 706.711197][ T4952] kernel_init_freeable+0x29d/0x3e0 [ 706.716924][ T4952] kernel_init+0x1d/0x1d0 [ 706.721770][ T4952] ret_from_fork+0x514/0xb70 [ 706.726870][ T4952] ret_from_fork_asm+0x1a/0x30 [ 706.732138][ T4952] [ 706.732138][ T4952] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 706.739937][ T4952] __mutex_lock+0x19d/0x1550 [ 706.745046][ T4952] elevator_change+0x1af/0x480 [ 706.750355][ T4952] elevator_set_none+0xb5/0x140 [ 706.755740][ T4952] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 706.762096][ T4952] nbd_start_device+0x189/0xb30 [ 706.767492][ T4952] nbd_genl_connect+0x1597/0x1c10 [ 706.773070][ T4952] genl_family_rcv_msg_doit+0x233/0x340 [ 706.779157][ T4952] genl_rcv_msg+0x614/0x7a0 [ 706.784205][ T4952] netlink_rcv_skb+0x226/0x4a0 [ 706.789507][ T4952] genl_rcv+0x28/0x40 [ 706.794031][ T4952] netlink_unicast+0x7bb/0x940 [ 706.799342][ T4952] netlink_sendmsg+0x813/0xb40 [ 706.804672][ T4952] sock_sendmsg_nosec+0x13a/0x180 [ 706.810244][ T4952] ____sys_sendmsg+0x54e/0x850 [ 706.815518][ T4952] ___sys_sendmsg+0x2a5/0x360 [ 706.820709][ T4952] __x64_sys_sendmsg+0x1b1/0x290 [ 706.826175][ T4952] do_syscall_64+0x174/0x580 [ 706.831279][ T4952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.832191][ T5635] block nbd0: Receive control failed (result -32) [ 706.837685][ T4952] [ 706.837685][ T4952] -> #3 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 706.837723][ T4952] blk_alloc_queue+0x544/0x690 [ 706.837747][ T4952] __blk_mq_alloc_disk+0x194/0x390 [ 706.863612][ T4952] nbd_dev_add+0x494/0xb60 [ 706.868631][ T4952] nbd_init+0x15f/0x1e0 [ 706.873337][ T4952] do_one_initcall+0x250/0x870 [ 706.878642][ T4952] do_initcall_level+0x10a/0x1a0 [ 706.884120][ T4952] do_initcalls+0x59/0xa0 [ 706.889064][ T4952] kernel_init_freeable+0x29d/0x3e0 [ 706.894805][ T4952] kernel_init+0x1d/0x1d0 [ 706.899679][ T4952] ret_from_fork+0x514/0xb70 [ 706.904812][ T4952] ret_from_fork_asm+0x1a/0x30 [ 706.910156][ T4952] [ 706.910156][ T4952] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 706.917386][ T4952] fs_reclaim_acquire+0x71/0x100 [ 706.922866][ T4952] __kmalloc_noprof+0xbc/0x720 [ 706.928171][ T4952] tls_sw_sendmsg+0x599/0x2860 [ 706.933479][ T4952] sock_sendmsg_nosec+0x90/0x180 [ 706.938961][ T4952] sock_sendmsg+0x1ca/0x2d0 [ 706.944014][ T4952] splice_to_socket+0xb5e/0x12a0 [ 706.949492][ T4952] direct_splice_actor+0x101/0x160 [ 706.955170][ T4952] splice_direct_to_actor+0x57b/0xcb0 [ 706.961148][ T4952] do_splice_direct+0x195/0x290 [ 706.966583][ T4952] do_sendfile+0x52e/0x7c0 [ 706.971513][ T4952] __se_sys_sendfile64+0x144/0x1a0 [ 706.977134][ T4952] do_syscall_64+0x174/0x580 [ 706.982236][ T4952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.988636][ T4952] [ 706.988636][ T4952] -> #1 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 706.996698][ T4952] lock_sock_nested+0x41/0x100 [ 707.001975][ T4952] inet_shutdown+0x6a/0x390 [ 707.007024][ T4952] nbd_mark_nsock_dead+0x2cb/0x550 [ 707.012688][ T4952] sock_shutdown+0x15e/0x260 [ 707.017796][ T4952] nbd_clear_sock+0x24/0x170 [ 707.022900][ T4952] nbd_config_put+0x35b/0x660 [ 707.028098][ T4952] nbd_genl_connect+0x18f7/0x1c10 [ 707.033637][ T4952] genl_family_rcv_msg_doit+0x233/0x340 [ 707.039696][ T4952] genl_rcv_msg+0x614/0x7a0 [ 707.044717][ T4952] netlink_rcv_skb+0x226/0x4a0 [ 707.050002][ T4952] genl_rcv+0x28/0x40 [ 707.054501][ T4952] netlink_unicast+0x7bb/0x940 [ 707.059833][ T4952] netlink_sendmsg+0x813/0xb40 [ 707.065144][ T4952] sock_sendmsg_nosec+0x13a/0x180 [ 707.070684][ T4952] ____sys_sendmsg+0x54e/0x850 [ 707.075960][ T4952] ___sys_sendmsg+0x2a5/0x360 [ 707.081163][ T4952] __x64_sys_sendmsg+0x1b1/0x290 [ 707.086616][ T4952] do_syscall_64+0x174/0x580 [ 707.091720][ T4952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.098129][ T4952] [ 707.098129][ T4952] -> #0 (&nsock->tx_lock){+.+.}-{4:4}: [ 707.105786][ T4952] __lock_acquire+0x1520/0x2cf0 [ 707.111173][ T4952] lock_acquire+0x106/0x350 [ 707.116195][ T4952] __mutex_lock+0x19d/0x1550 [ 707.121290][ T4952] nbd_queue_rq+0x373/0x1150 [ 707.126398][ T4952] blk_mq_dispatch_rq_list+0x499/0x1990 [ 707.132454][ T4952] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 707.139328][ T4952] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 707.145819][ T4952] blk_mq_run_work_fn+0x16c/0x300 [ 707.151351][ T4952] process_scheduled_works+0xa8e/0x14e0 [ 707.157426][ T4952] worker_thread+0xa47/0xfb0 [ 707.162544][ T4952] kthread+0x388/0x470 [ 707.167145][ T4952] ret_from_fork+0x514/0xb70 [ 707.172243][ T4952] ret_from_fork_asm+0x1a/0x30 [ 707.177527][ T4952] [ 707.177527][ T4952] other info that might help us debug this: [ 707.177527][ T4952] [ 707.187760][ T4952] Chain exists of: [ 707.187760][ T4952] &nsock->tx_lock --> set->srcu --> &cmd->lock [ 707.187760][ T4952] [ 707.199841][ T4952] Possible unsafe locking scenario: [ 707.199841][ T4952] [ 707.207283][ T4952] CPU0 CPU1 [ 707.212640][ T4952] ---- ---- [ 707.217999][ T4952] lock(&cmd->lock); [ 707.222038][ T4952] lock(set->srcu); [ 707.228461][ T4952] lock(&cmd->lock); [ 707.234956][ T4952] lock(&nsock->tx_lock); [ 707.239395][ T4952] [ 707.239395][ T4952] *** DEADLOCK *** [ 707.239395][ T4952] [ 707.247523][ T4952] 4 locks held by kworker/1:1H/4952: [ 707.252819][ T4952] #0: ffff88801fab0140 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 707.263925][ T4952] #1: ffffc9000fff7c40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 707.276837][ T4952] #2: ffff888028670998 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x144/0x300 [ 707.286223][ T4952] #3: ffff88804c83e178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0x1150 [ 707.295178][ T4952] [ 707.295178][ T4952] stack backtrace: [ 707.301062][ T4952] CPU: 1 UID: 0 PID: 4952 Comm: kworker/1:1H Not tainted syzkaller #0 PREEMPT(full) [ 707.301085][ T4952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 707.301097][ T4952] Workqueue: kblockd blk_mq_run_work_fn [ 707.301121][ T4952] Call Trace: [ 707.301128][ T4952] [ 707.301135][ T4952] dump_stack_lvl+0xe8/0x150 [ 707.301160][ T4952] print_circular_bug+0x2e1/0x300 [ 707.301178][ T4952] check_noncircular+0x12e/0x150 [ 707.301209][ T4952] __lock_acquire+0x1520/0x2cf0 [ 707.301237][ T4952] ? irqentry_exit+0x218/0x8f0 [ 707.301255][ T4952] ? __pfx___schedule+0x10/0x10 [ 707.301277][ T4952] ? irqentry_exit+0x218/0x8f0 [ 707.301298][ T4952] ? nbd_queue_rq+0x373/0x1150 [ 707.301322][ T4952] lock_acquire+0x106/0x350 [ 707.301342][ T4952] ? nbd_queue_rq+0x373/0x1150 [ 707.301370][ T4952] __mutex_lock+0x19d/0x1550 [ 707.301387][ T4952] ? nbd_queue_rq+0x373/0x1150 [ 707.301414][ T4952] ? nbd_queue_rq+0x373/0x1150 [ 707.301438][ T4952] ? __pfx___mutex_lock+0x10/0x10 [ 707.301458][ T4952] ? ktime_get+0x45/0x220 [ 707.301480][ T4952] nbd_queue_rq+0x373/0x1150 [ 707.301505][ T4952] ? __pfx_clockevents_program_event+0x10/0x10 [ 707.301532][ T4952] ? __pfx_nbd_queue_rq+0x10/0x10 [ 707.301561][ T4952] ? irqentry_exit+0x218/0x8f0 [ 707.301579][ T4952] blk_mq_dispatch_rq_list+0x499/0x1990 [ 707.301607][ T4952] ? sbitmap_get+0x229/0x390 [ 707.301631][ T4952] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 707.301652][ T4952] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 707.301671][ T4952] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 707.301691][ T4952] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 707.301707][ T4952] ? blk_mq_run_work_fn+0x144/0x300 [ 707.301718][ T4952] ? blk_mq_run_work_fn+0x144/0x300 [ 707.301729][ T4952] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 707.301744][ T4952] ? blk_mq_run_work_fn+0x144/0x300 [ 707.301753][ T4952] blk_mq_run_work_fn+0x16c/0x300 [ 707.301765][ T4952] ? process_scheduled_works+0xa20/0x14e0 [ 707.301783][ T4952] process_scheduled_works+0xa8e/0x14e0 [ 707.301811][ T4952] ? __pfx_process_scheduled_works+0x10/0x10 [ 707.301832][ T4952] ? assign_work+0x3cf/0x5d0 [ 707.301851][ T4952] worker_thread+0xa47/0xfb0 [ 707.301876][ T4952] ? __kthread_parkme+0x71/0x1f0 [ 707.301899][ T4952] kthread+0x388/0x470 [ 707.301913][ T4952] ? __pfx_worker_thread+0x10/0x10 [ 707.301924][ T4952] ? __pfx_kthread+0x10/0x10 [ 707.301938][ T4952] ret_from_fork+0x514/0xb70 [ 707.301952][ T4952] ? __pfx_ret_from_fork+0x10/0x10 [ 707.301974][ T4952] ? __switch_to+0xc89/0x1420 [ 707.301987][ T4952] ? __pfx_kthread+0x10/0x10 [ 707.302000][ T4952] ret_from_fork_asm+0x1a/0x30 [ 707.302013][ T4952] [ 707.566794][ T4952] block nbd0: Dead connection, failed to find a fallback [ 707.574002][ T4952] block nbd0: shutting down sockets [ 707.579288][ T4952] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 707.588575][ T4952] Buffer I/O error on dev nbd0, logical block 0, async page read [ 707.596574][ T4952] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 707.605702][ T4952] Buffer I/O error on dev nbd0, logical block 1, async page read [ 707.613651][ T4952] Buffer I/O error on dev nbd0, logical block 2, async page read [ 707.622192][ T4952] Buffer I/O error on dev nbd0, logical block 3, async page read [ 707.631133][ T1642] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 707.640229][ T1642] Buffer I/O error on dev nbd0, logical block 0, async page read [ 707.648501][ T1642] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 707.657913][ T1642] Buffer I/O error on dev nbd0, logical block 1, async page read [ 707.667743][ T1642] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 707.677537][ T1642] Buffer I/O error on dev nbd0, logical block 2, async page read [ 707.685848][ T1642] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 707.695274][ T1642] Buffer I/O error on dev nbd0, logical block 3, async page read [ 707.704279][ T1642] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 707.713879][ T1642] Buffer I/O error on dev nbd0, logical block 0, async page read [ 707.721919][ T1642] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 707.731539][ T1642] Buffer I/O error on dev nbd0, logical block 1, async page read [ 707.739740][ T1642] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 707.749257][ T1642] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 707.758898][T28566] ip6gre1: left promiscuous mode [ 707.760463][T28252] ldm_validate_partition_table(): Disk read failed. [ 707.774204][T28252] Dev nbd0: unable to read RDB block 0 [ 707.774317][T28566] 8021q: adding VLAN 0 to HW filter on device bond1 [ 707.781834][T28252] nbd0: unable to read partition table [ 707.793790][T28566] bond2: left promiscuous mode [ 707.798725][T28566] bridge3: left promiscuous mode [ 707.805504][T28566] 8021q: adding VLAN 0 to HW filter on device bond2 [ 707.806082][T28252] ldm_validate_partition_table(): Disk read failed. [ 707.815369][T28566] 8021q: adding VLAN 0 to HW filter on device eth0 [ 707.820040][T28252] Dev nbd0: unable to read RDB block 0 [ 707.833658][T28566] 8021q: adding VLAN 0 to HW filter on device eth1 [ 707.834479][T28252] nbd0: unable to read partition table [ 707.847879][T28566] 8021q: adding VLAN 0 to HW filter on device eth2 [ 707.857369][T28566] 8021q: adding VLAN 0 to HW filter on device eth3 [ 707.860520][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 707.873970][T28566] 8021q: adding VLAN 0 to HW filter on device bond3 [ 707.884567][T28566] ip6gre3: left promiscuous mode [ 708.429440][T28566] xfrm1: left promiscuous mode [ 708.449241][T28566] ip6gre4: left promiscuous mode [ 708.455015][T28566] ip6gre5: left promiscuous mode [ 708.461021][T28566] mac80211_hwsim hwsim34 wlan0: entered promiscuous mode [ 708.471570][T28566] 8021q: adding VLAN 0 to HW filter on device bond4 [ 708.479442][T28566] bridge5: left promiscuous mode [ 708.486261][T28566] bond5: left promiscuous mode [ 708.491865][T28566] 8021q: adding VLAN 0 to HW filter on device bond5 [ 708.499132][T28566] bridge0: port 1(macvlan0) entered blocking state [ 708.505746][T28566] bridge0: port 1(macvlan0) entered forwarding state [ 708.514263][T28566] 8021q: adding VLAN 0 to HW filter on device bond6 [ 708.531276][T28575] macvlan2: entered promiscuous mode [ 708.536607][T28575] macvlan2: entered allmulticast mode [ 708.543180][T28575] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 708.559396][ T3395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 708.561274][T28534] lo speed is unknown, defaulting to 1000 [ 708.568146][ T7499] bond3: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 708.585219][ T3395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 708.606944][ T7980] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 708.622115][ T7980] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 708.633328][ T5816] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 708.647524][T28226] ieee80211 phy60: Selected rate control algorithm 'minstrel_ht' [ 708.674201][ T7980] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 708.694962][ T7980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 708.700642][T20293] ip6_tnl_xmit_ctl: 5 callbacks suppressed [ 708.700660][T20293] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 708.703265][ T7980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 708.722521][T20293] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 708.734316][T20293] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 708.831057][T20292] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 709.000780][T20292] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 709.061851][ T5816] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 709.251424][T20293] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 709.280851][T20293] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 709.461389][T20293] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 709.469106][T20293] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!