last executing test programs: 6m33.271936262s ago: executing program 3 (id=589): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001c0001000000000004086aa42d"], 0x30}}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$inet6(r0, &(0x7f0000005640)=[{{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f00000007c0)="4b000ffd096c1b77cd99b1000009c4b82100375ca9411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c091f7d276305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c977102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd0eb9ae865614e2164f43b968c29910de437d051b7e7bd337f3aa414bda48049ba94d11ba32326eb56575bd72b747591396f7c26b28036952ef6cf8adae9acb1649d599f573f089df51d558fdba120e63db65ec3945f1e9e191ce966eb5693281d9c878f6a27ffef79481510bdd44e7cea15a670a713ea3ee8a488a42e0f63a852d23a37f4146e53829ff02555faf815eedb5ce5af9c2de0ab1e4e32b6d31ab4e98a078908ab5d046e4a6196ffe5c55010a4bb8b80dc993c8f94a9fda", 0x1b5}, {&(0x7f0000000380)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee5604080000005f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88cf1b612298d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e519e8", 0xa7}, {&(0x7f0000000440)="0b0ec2a1e3fc84788972f461fec27348bd54a57f68a85a0200ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b84359e76eee93584aad3f751172c449fb00"/165, 0xa5}, {&(0x7f00000024c0)="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", 0xbd5}, {&(0x7f0000000500)="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", 0x12a}, {&(0x7f00000030c0)="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", 0x1000}], 0x6}}], 0x1, 0x40c0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000780)=0x8829eebdcece2d7e) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) 6m33.071120457s ago: executing program 3 (id=592): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000080), &(0x7f00000000c0)='%pI4 \x00'}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x52e, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x8, 0xf}, {0xf, 0xa}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x5}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd2d4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000daf3715ede9ef24200007a000000", @ANYRES32=0x0, @ANYBLOB="00000000081000001c0012800b00010062726964676500000c000280040018"], 0x3c}, 0x1, 0x0, 0x0, 0x34001843}, 0x4004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a0085000000a0000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000a00000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x640, 0x458, 0x0, 0x0, 0x260, 0x0, 0x570, 0x570, 0x570, 0x570, 0x570, 0x6, &(0x7f0000000000), {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@unspec=@pkttype={{0x28}, {0xe9, 0x7}}, @inet=@rpfilter={{0x28}, {0x10}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3c}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, [0x0, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0xffffff00, 0xffffff00], 'ipvlan1\x00', 'macvlan1\x00', {0xdfe1b52e30151adb}, {}, 0x32, 0x5, 0x3}, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@dst={{0x48}, {0x1a, 0x5, 0x0, [0x101, 0x6, 0x200, 0xff6, 0x8, 0xfc, 0x2, 0x1ff, 0x4, 0x9fa, 0x8, 0xa, 0x0, 0x131, 0x6dc5, 0x15c], 0x5}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7, 0xfff, 0xf7}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0x0, 0xff000000], [0xff, 0x0, 0xffffffff], 'rose0\x00', 'bridge_slave_1\x00', {0xff}, {0xff}, 0x0, 0xe, 0x4, 0x8}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0x60, 0x60}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x4}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0xff, 0x0, 0xff000000], [0xffffffff, 0xffffffff, 0x0, 0xff000000], 'gre0\x00', 'syz_tun\x00', {0xff}, {0xff}, 0x67, 0x4, 0x3, 0x10}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x34, 0xc, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) 6m32.656215291s ago: executing program 3 (id=597): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0xa, 0x4, 0x8, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000010000100000000000000000008000000", @ANYRES32=r2, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="0c002f80080206008001009480"], 0x2c}], 0x1}, 0x24000000) 6m32.452259011s ago: executing program 3 (id=600): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x200040c0}, 0x4000054) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB="a8010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1a8}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r2, @ANYBLOB="200026bd7000fbdbdf250000000024000300a0cb879a47f5bc644c0e293fa6d031c74a1553b6e901b9ff2f518c78042fb5420800070001000000140002007767300000000000000000000000000008000700001e0000060006004e240000060006004e20000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776732000000000000000000000000001400020077673000"/40], 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x50}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000040)=0x6230) 6m32.227477666s ago: executing program 3 (id=605): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_PLIMIT, @TCA_FQ_TIMER_SLACK={0x0, 0xd, 0x2b3}]}}, @qdisc_kind_options=@q_htb={{}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN={0x0, 0x5, 0x8}]}}]}, 0x48}}, 0x0) (async) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f00000006c0)={'nat\x00', 0x0, 0x0, 0x0, [0x7, 0x1, 0x9bca, 0x8, 0x4, 0x8b], 0x1141, 0x0, 0x0, [{}, {}, {}, {}]}, 0x78) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000140)={r0, &(0x7f0000000040)='\x00', 0x80040, &(0x7f0000000080)={@_ha_fsid={[0x9, 0x403]}, {0x1dab, 0x5, 0x640, 0xde26}}, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x9}) setsockopt$TIPC_MCAST_BROADCAST(r5, 0x10f, 0x85) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="034886dd010000000000140000006000000001082f00fe88a43de1a400000000000000027d01ff0200000000000000000000000000010000883e"], 0xfdef) 6m31.899350144s ago: executing program 3 (id=609): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x6}}, 0x14}}, 0x0) 5m42.664743562s ago: executing program 32 (id=609): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x6}}, 0x14}}, 0x0) 2m47.759952426s ago: executing program 4 (id=2032): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$nci(r1, &(0x7f00000000c0)=""/4096, 0x1000) (async) read$nci(r1, &(0x7f00000000c0)=""/4096, 0x1000) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f00000010c0)={'syz_tun\x00', 0x8}) (async) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f00000010c0)={'syz_tun\x00', 0x8}) socket$can_bcm(0x1d, 0x2, 0x2) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) clock_gettime(0x0, &(0x7f0000001140)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000001240)={&(0x7f0000001100), 0x10, &(0x7f0000001200)={&(0x7f0000001180)={0x6, 0x79, 0x0, {0x0, 0xea60}, {r3, r4/1000+60000}, {0x0, 0x1, 0x1, 0x1}, 0x1, @can={{0x3, 0x0, 0x1}, 0x5, 0x0, 0x0, 0x0, "7f89ca82e6777dff"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000001280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000012c0)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000012c0)=0x14) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000001300)) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000001480)={r0, &(0x7f0000001380)='syz_tun\x00', 0x400000, &(0x7f00000013c0)={@_ha_fsid={[0x6, 0x8]}, {0x1, 0x3, 0xfffffffb, 0xfabc}}, 0x8, &(0x7f0000001400), &(0x7f0000001440)=0xfffffffb}) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000001480)={r0, &(0x7f0000001380)='syz_tun\x00', 0x400000, &(0x7f00000013c0)={@_ha_fsid={[0x6, 0x8]}, {0x1, 0x3, 0xfffffffb, 0xfabc}}, 0x8, &(0x7f0000001400), &(0x7f0000001440)=0xfffffffb}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001340), r6) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001340), r6) read$nci(r5, &(0x7f00000014c0)=""/115, 0x73) (async) read$nci(r5, &(0x7f00000014c0)=""/115, 0x73) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x3, &(0x7f0000001540)=""/21, &(0x7f0000001580)=0x15) (async) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x3, &(0x7f0000001540)=""/21, &(0x7f0000001580)=0x15) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000015c0)=0x1, 0x4) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001600)={{{@in6=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@private1}}, &(0x7f0000001700)=0xe8) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r9, 0x112, 0xc, &(0x7f0000001740)=0x100, &(0x7f0000001780)=0x2) connect$bt_sco(r6, &(0x7f00000017c0), 0x8) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000001800)={0x10}, 0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000001840)={r9}) socket$pppl2tp(0x18, 0x1, 0x1) (async) r10 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r9, 0xc0c89425, &(0x7f0000001880)={"c453f09ddc71359e8c4a0c2bfe81be30", 0x0, 0x0, {0x101, 0xff}, {0x7, 0x352}, 0x8, [0x400, 0x1e648c5f, 0x1000, 0x8, 0x4, 0x3, 0xb, 0xf, 0x5, 0x2, 0x1, 0x4, 0x9, 0xa3, 0x1, 0xa]}) ioctl$BTRFS_IOC_WAIT_SYNC(r10, 0x40089416, &(0x7f0000001980)=r11) bind$xdp(r6, &(0x7f00000019c0)={0x2c, 0x0, 0x0, 0xe, r6}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$team(&(0x7f0000001a40), r6) sendmsg$TEAM_CMD_OPTIONS_GET(r12, &(0x7f0000002240)={&(0x7f0000001a00), 0xc, &(0x7f0000002200)={&(0x7f0000002080)={0x180, r13, 0x20, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0xa0, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x3, 0x6, 0x35, 0x2}, {0x4, 0xd0, 0x7c, 0x7}, {0x7, 0x2, 0x8, 0xc1}, {0x484b, 0x1a, 0x6, 0xcb4}, {0x4, 0x1c, 0x5}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}]}}]}, 0x180}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m47.38615275s ago: executing program 4 (id=2038): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x4, 0x0, 0xcbf, 0x4e, @ipv4={'\x00', '\xff\xff', @local}, @empty, 0x8000, 0x8, 0x101, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', r1, 0x29, 0x84, 0x4, 0x4038a0e, 0x11, @empty, @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, 0x0, {0x10, 0x7}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x80}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) (async) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) (async) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r4 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000180)={r5, 0xda0, 0x3, 0x3, 0x0, 0x2f33, 0x1, 0x1ff, {0x0, @in={{0x2, 0x4e20, @empty}}, 0x101, 0x4005, 0x7fc, 0xf, 0xfffffffd}}, &(0x7f0000000280)=0xb0) (async) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f0000000140)) (async) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x4, 0xc, 0x6, 0x9, r5}, 0x10) 2m47.151716532s ago: executing program 4 (id=2041): r0 = socket(0x2b, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x250, 0x0, 0x0, 0x148, 0x0, 0x148, 0x1b8, 0x240, 0x240, 0x1b8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @private=0xa010101, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {0xff}, 0x88, 0x3, 0x10}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@socket1={{0x28}}, @common=@inet=@set2={{0x28}, {{0x0, 0x4, 0x6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff000000, 0xffffff00, 0x0, 0xffffff00], 0x4e21, 0x4e23, 0x4e20, 0x4e23, 0x8, 0x4, 0x5f4a, 0x100, 0x6}}}, {{@ip={@empty, @empty, 0xff000000, 0xff000000, 'wlan0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0xc, 0x0, 0x60}, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x28, r6, 0x10, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x804) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x3, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x1, 0x3}, {}, {0x5, 0xfff1}}}, 0x24}}, 0x40004) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000040)=0x4, 0x4) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r13 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r12, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r13, 0xfffffdc8, &(0x7f0000000340)}, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, &(0x7f00000010c0)='syzkaller\x00', 0x9, 0xff2, &(0x7f0000001cc0)=""/4082, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0)=@broadcast, &(0x7f00000005c0)=ANY=[@ANYBLOB="800000000802110000010802384e0f4950500063c875e1dc5e87fb1bfd000000000000640001000012bcb2fc61dca02864d101040000764405096f010076065c050400de88cee31269d1c88d4c6b5c2f33161b020cafd6e894bbf71dcb88561bafdf87f2722e00fcc92984b6426e057feb3698a29bc74329b8438e7415013a6bf7cde8e64d3652a12ba3e80b8ff48b84154daa32f175ded1baab199e26460f4e3c196e0fa3ad679f0f4a628152"], 0x42) setsockopt$inet_IP_XFRM_POLICY(r11, 0x0, 0x11, 0x0, 0x0) 2m46.418515772s ago: executing program 4 (id=2048): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) unshare(0x20000400) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r6) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000240), 0x1) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x68, r9, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x8, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40410d1}, 0x81) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x501, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xfff2, 0x1e}, {0x3, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket(0x5, 0xe, 0x5) r11 = openat$cgroup_ro(r10, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) getsockopt$IP_VS_SO_GET_DESTS(r11, 0x0, 0x484, &(0x7f0000000380)=""/176, &(0x7f0000000440)=0xb0) 2m46.111207767s ago: executing program 4 (id=2051): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = accept4(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f00000000c0)=0x80, 0x80000) recvmsg$can_j1939(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x2000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x14) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xe8, r6, 0x100, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r7 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r7], 0x3c}}, 0x0) close(r7) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m45.92462674s ago: executing program 4 (id=2054): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000270001031dbd5002fadbdf2501"], 0x14}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r3 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x20000811) write$cgroup_int(r2, &(0x7f00000010c0)=0x3, 0x12) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000080)={@loopback, @empty, 0x0, 0x1, [@multicast1]}, 0x14) 2m30.874291928s ago: executing program 33 (id=2054): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000270001031dbd5002fadbdf2501"], 0x14}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r3 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x20000811) write$cgroup_int(r2, &(0x7f00000010c0)=0x3, 0x12) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000080)={@loopback, @empty, 0x0, 0x1, [@multicast1]}, 0x14) 11.699212481s ago: executing program 5 (id=3474): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000500)=""/138, &(0x7f00000005c0)=0x8a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000680)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, r4, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) r7 = accept4(r2, 0x0, 0x0, 0x80800) sendmsg$TIPC_NL_PUBL_GET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x40810}, 0x48880) sendmmsg$unix(r7, &(0x7f0000003e80), 0x400002c, 0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="d01ce362bf0602ad1d23e466fdca45e593a09712b4c0ade65c4179d46d16640ef1ff83b44750ad53e168d601b313fe6fff2f85f79fdd87839699c584fcf3b308444b13f5b8bcb66a2baf54534322c8cb977b7cfb17b73ee227bb30a377b9e32a37cc04a557a27d77e0a7fc84ffdabc72b041ad6540b3bf9d08d05d950cb3cba056842728", 0x57}, {&(0x7f0000000180)="8294159330f56a9d39c31cdcecb9b6af9338cd980e81107f2344b5fa44668def02893d9148bbeb53a957c6a34be3febb234d9e4112278e9afb4f2dc4a437cca093146771a6b7f0c5e23535a55615e082eb720278175b2f2cb35ab0bc75e4075fac24668142c1d4927f9a385e3e48b8bd59db0ba95f8a3ac8da44ae7ad4860ae2570afc28060e7230218185b215a9e7eb683d99476c563633eb602a43e3bbfd62efbb8f357dbcbb23a2b7831d44ca795d66bbb4e0b6b20e1be4fdc791ded26d8b9186464e7ca1cf", 0xc7}, {&(0x7f0000000280)="d75b9f726fdde77fbd8163fc768cad81a13d82626cc2ec8922d0f6a8bc8c819db8c84b6aca61459ea39f1b47191bd61853afc870810ea3fdb04879de01b73d6b14fd6674d3b87aebe17fdfefffdb29764a752bd62408fd623ec592b582783c0f831b06060f1968c0679d5f1535558af03ea870d51dde0e75e984f9ec424a9ac271fb59fe4c9169f62961bf153b28707df824d5c536628d3abaa0eb1aed1ea917b31f3d3b6dddbfe7de9bb5e8fd6e70830f5e3ade25cd829349e6845c0d913a6525784b51", 0x30000000}], 0x3, 0x0, 0x0, 0x10}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000100)=0x30) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000021000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}, 0x1, 0x0, 0x0, 0x404c080}, 0x4008840) 11.196798149s ago: executing program 5 (id=3479): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000000611100000000000006000000feffffff9500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x22, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x28) (async, rerun: 64) r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000008b61d062ffc42ca19877c320965b1dc21c0a279a9d7d6afd6e65d7371fa90db132349d7c5c06151dcfcad110240fe72f2412b381e2cbbc97aa7138f78e20466bb9d07c41ab28fa97f882c15fe92cb2d6e6f7bbb21a46d6e4d506c87d34c4dab2bc8fbf58e8d3c3efeec6f30eb71c43755b5b3bef6d1d746259a63248d2649fd3e59a888547fdf38e50df0e355497c22e8fefb1da452ad6e50248383977d20d168a16b9049fa300e613c79896fbba23a4235607521c003ed5d1963fc4a294b54bc901955b77ed091017693d745a912b718a3dc65a8af4b78b69457835d95434c0f53a99ee5ef673775531d6780b10a59438cb2779fef73df3fed2409a2805365b54a561763e1abf01dd8b6027494f7a399b323c66437adc89e318bc58b60b1eaec9", @ANYRES16=r2, @ANYBLOB="010022bd78000400000005000000080009000200000008000c00a50a000008000b00000000000600010007000000"], 0x34}}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) (async) getsockopt(r4, 0x111, 0x1, 0x0, &(0x7f0000000080)) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x4000, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40090}, 0x0) (async, rerun: 32) r6 = accept(r5, &(0x7f00000000c0)=@un=@abs, &(0x7f0000000140)=0x80) (rerun: 32) ioctl$sock_ifreq(r5, 0x8925, &(0x7f0000000040)={'wg1\x00', @ifru_mtu=0x7}) (async) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f00000001c0)={@remote, @broadcast, 0x1, "8e9c011b62b62e8c339eca359cf0f1a7e54245289786ea24fce729557ec1033e", 0x7e, 0xd, 0x8de, 0x5}, 0x3c) 10.973762119s ago: executing program 5 (id=3482): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_int(r1, 0x29, 0xd1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0xffffffffffffffe5, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14}}, 0xa4}}, 0x24004000) (async) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="00008000006012000800183a0000000000000000000000000000000001"], 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x3d}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x2f, 0x1, 0x8, 0x3, 0x48, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x2, 0x7fff}}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x20, '\x00', r3, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 10.786967744s ago: executing program 5 (id=3486): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000000201b930ef8476cbb8542e99b70300000000001a01000000000000000001800c000213989323002f0000000c001980080001008c080000"], 0x30}, 0x1, 0x0, 0x0, 0x10050}, 0x4) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x21, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x14}, 0x0) recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000800) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000002c0)={r8, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x6c, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x7, 0xfff1}, {0x4, 0xe}, {0xc}}, [{0x8, 0xb, 0x1ff}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0xd}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x8001}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40480c0}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r9) socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7.062757272s ago: executing program 5 (id=3493): socket$inet6_udp(0xa, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000810000000000000004000630162000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) close(0x3) syz_init_net_socket$llc(0x1a, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53, 0x0, 0x1}, 0x28) (async) r2 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, r4}, 0x14) (async) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000040)={@remote, r4}, 0x14) (async) unshare(0x40000) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r5, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) (async) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x80000001, 0x4a9, 0x52f}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_LINKMODE={0x5, 0x11, 0x9a}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) 6.974976131s ago: executing program 6 (id=3496): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a01040000000000000000070000000900020073797a31000000000900010073797a3000000000080005400000001c08000a4000000000080003400000004008000f"], 0xdc}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016000000034004000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516377ce0ebbadf8017cbec4c2ee5a7ce479acd5e860bf4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9fe08c975116a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dccf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a", 0xd8}], 0x1}, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) write$nci(r3, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) 6.626949657s ago: executing program 5 (id=3497): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x1f, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000005000000000000000900000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095"], 0x0}, 0x94) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x997, @dev={0xfe, 0x80, '\x00', 0x31}, 0x40}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x4048010) (async) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000200)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000240)='*', 0x1}], 0x1}, 0x4000) (async) setsockopt$sock_attach_bpf(r0, 0x84, 0x1f, &(0x7f0000000100), 0x129) 3.693091702s ago: executing program 1 (id=3503): sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xb, 0xe, 0x9, 0x6, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x4, 0x4, 0x5, 0xf, 0x10000000000001}]}, 0x30}}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="6000000002060500000000000000000007000000140007800800114000000040080012400000ffff0500010006000800050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)="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", 0xfa}, {&(0x7f0000000580)="c6aacec0aefd981bea1ce3d1c5f2d2b0a5ef437b4a929889993159cf72d2dbc5f91d60a065e956e7d039ed720442edb6a0a7698aad9926b3df7b541ebf6cac4179c77977e9467a607f1e644b6a403baf5d35b4310b408f5e6fec61377a6ada221efebf4f41af8c5f112f61279f6dc5057d637e0b60bd6c0415b5ee8a134a2346206d4a244cdd4a8a922ea1d44e0be542241445392a5eb8a54a9b444028970d77dd67d9aaa2217aa25ecefd5a199b2d2007684b8d6ffb21bc8cdc6f40b7ed88bee209c3cafdf11a54f71f8128e640f255405b74866dddcea23f304c7f256193cb8fa97b8973fe3b4778b6b9da974c2a3be36bfe702797d6ea", 0xf8}, {&(0x7f0000000680)="a7932fba19cd527a7dc1f343ca07af777ee9f07a0d8fdaa0778042bd87e36490738af06336acff86e43a2340fc2876a4e55d8339413ee33de0f38ab871e0db0d5a42", 0x42}], 0x3, &(0x7f00000007c0)=[{0xc0, 0x114, 0xffff755a, "132918160f702b4744142ab40f777861e1f558c934e90ababc6bc8a835716ef01fbb858b6ee70708c0b4ca5d8bc78f3b8e713d7dedba7d3f72a39cf71a96ded27c234657ca81b6574aa51504dd17f4b9d1b73f7f78baa75ec506fd34ca3e7146c2f10af0292960112069faf09ae619c05f9c4ef3447add241c95f37dd49c133d345b20df339946ea58aa998125cb54aa78f9cee2dea5c3c56147566e0e502100d20230e54041bd39b8a625"}, {0xf0, 0x110, 0x6, "98eadf50a1955b4db8ad7c5800ec8cea98e0685b9cd816a1f054970bd1a0aedcda9404093d6cabfddb4fa0799dba00301f86e95fcc0241516bf5b626b8af4fe61c937769abcab13754f83c440fcbd4ba02ba985f68da096000d7de72bdf7d9c50d08473161f8fc7a024a2807d039d314c7829353eec4981a084d33e93c1c26f1583eefd9faa23d62ceb546db36dbc82b86e0311feef7bbb68743204b449cbd4111fb16d7690a606e1d53a316076c708ab84a05ceb16735ae34189464c0b05a31d8b5bf2350ca219007ac1e3ec21a595402e7e23ad2847d911e"}, {0x10, 0x10e}, {0xa0, 0x1, 0x0, "3e080c3c5e6810fd8c9697a55d98dd39dbda8762bb5f9887a4808569606be83342f392d4b9a76c2c11d5133a416c5f62c4b789dcb2345f7a1e00fde2e2a9d76645261cbaa93744398aecd15f6e1b2f231943742f5acd621586dcd89d95309a92b61f777df37e69a4ee7245660e120997894995ad4585a00ee058f3507be56d4c5e6e5a07cb902b96f26c866a"}, {0xe0, 0xff, 0xffff, "93aaf69e418e72cd7afd197b11afd0b407fc7f24dc1025c566fb4821f383c746889c599c335649635bac2d6d58402b011d1ad8e67f34996ed1a15a9473077097599da61d253850ea4c1f4139e17674edad56e920423b907c400814d1415a85d6c99f1470f03c7da3f970c6e2682e77918b2986c4e9824d0e0bb6c3b49b246e0e3157d508ec1f8ae82a0404e774dbc993773e669f2abf083627876e70f9d63d5faae571277776c78042f750d0c60bdff9fc43cc518d5ba2a64924ccdf7f0a7e9aa8983cf35f411d6008"}, {0x20, 0x107, 0x0, "247e602700b68fb7625d4320fe003b"}, {0xb0, 0x110, 0x4d, "217825824947e787b60efb3a49ee0cd5cd9741f047d60adf1e8f08883d9421664bbd0be515eb556847211d601aadf27a5b9a663e507860201ff19921fd03ba52eca24fe89d317aa514413d20ba36b489a223fd981c220f8605d242e568dc27c7f6352f74a5f3500e756c103d788029ba71172a10249e661d716c446b8ff40261487d91802657903c801a613b81c2f83f9781f2f947d9680089ba7e966f0dba6a"}], 0x410}, 0x4000048) ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, &(0x7f0000000240)={r0, &(0x7f0000000040)='\x00', 0xa000, &(0x7f00000000c0)={@align=0x1ff, {0xc, 0xfff9, 0x5, 0x2}}, 0x4, &(0x7f0000000140)={@_ha_fsid}, &(0x7f00000001c0)=0x401}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003280)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x18, &(0x7f0000000140)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x590b}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000f40)={'syztnl1\x00', &(0x7f0000000e00)={'ip_vti0\x00', 0x0, 0x20, 0x20, 0x6, 0x4, {{0x44, 0x4, 0x1, 0x5, 0x110, 0x66, 0x0, 0x7, 0x2f, 0x0, @loopback, @rand_addr=0x64010102, {[@lsrr={0x83, 0x1b, 0x4, [@broadcast, @empty, @private=0xa010100, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x37}, @dev={0xac, 0x14, 0x14, 0x2d}]}, @timestamp_addr={0x44, 0x54, 0xad, 0x1, 0x0, [{@multicast1, 0x2}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x7fffffff}, {@private=0xa010100, 0x6c}, {@multicast2, 0xa0}, {@remote, 0x9}, {@multicast1, 0x8}, {@multicast2, 0x2}, {@multicast2, 0x7}, {@loopback, 0x16ed}, {@private=0xa010100, 0x6}]}, @rr={0x7, 0x7, 0x71, [@empty]}, @end, @cipso={0x86, 0x39, 0x1, [{0x1, 0x4, "db1e"}, {0x1, 0x2}, {0x7, 0x7, "edadf98634"}, {0x1, 0xb, "0e62c17496e52ee53f"}, {0x6, 0x4, 'hO'}, {0x2, 0x5, "048a93"}, {0x1, 0xa, "7d7cf8658f47d564"}, {0x2, 0x2}, {0x6, 0x4, "64a5"}, {0x1, 0x2}]}, @rr={0x7, 0xf, 0x7d, [@multicast2, @loopback, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x2c, 0x67, 0x3, 0x7, [{@broadcast, 0x40000}, {@private=0xa010101, 0x1}, {@local, 0x80000000}, {@broadcast, 0xba5d}, {@local, 0x7fff}]}, @lsrr={0x83, 0xf, 0x6b, [@multicast2, @multicast1, @loopback]}, @end]}}}}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000110000000800000002"], 0x50) r7 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f0000000080), &(0x7f0000000280)=@udp=r7, 0x1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r6, &(0x7f0000000380), 0x0}, 0x20) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001000)={&(0x7f0000000f80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@union={0xc, 0x1, 0x0, 0x5, 0x0, 0x7fff, [{0x3, 0x2, 0x2}]}]}, {0x0, [0x2e, 0x2e]}}, &(0x7f0000000fc0)=""/34, 0x34, 0x22, 0x1, 0x8}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=r9, 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xca, r10, 0x18}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x12, 0xd, &(0x7f0000000c40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x52}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_fd={0x18, 0xe, 0x1, 0x0, r3}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x100}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x17}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000cc0)='syzkaller\x00', 0x1, 0xcf, &(0x7f0000000d00)=""/207, 0x41000, 0x10, '\x00', r5, @fallback=0x18, r8, 0x8, &(0x7f0000001040)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001080)={0x0, 0xb, 0x9f85, 0x7}, 0x10, r9, r4, 0x1, &(0x7f00000010c0)=[r2, r10, r3, r3, r3, r3, r3], &(0x7f0000001100)=[{0x4, 0x4, 0xc}], 0x10, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r11 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r11, &(0x7f0000000280)={0x2, 0x4e21, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r11, 0x84, 0x6d, &(0x7f0000001c40), &(0x7f0000001c80)=0x8) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701feffffff80d4100003800c00"/34], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 3.622109921s ago: executing program 6 (id=3504): socket$nl_route(0x10, 0x3, 0x0) 3.50297517s ago: executing program 6 (id=3507): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x1, @remote}, 0xa}}, 0x26) (async) sendmmsg$inet(r1, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)}}], 0x1a000, 0x8040) (async) close(0x3) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100100080000000fdc019232eab366834ceedf3773c0f72d37db62d74cea3bcb4c31297a3ce5762a21593c8c35292d36240bf29f5a22a5e8b", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x1, 0x2}]}]}}, 0x0, 0x32, 0x0, 0x1}, 0x28) (async) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt(r4, 0xb2d, 0x2711, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x22, &(0x7f00000000c0)=0x100000001, 0xffffffffffffff03) (async) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x4000005, 0x0, 0x0, 0x41100}, 0x94) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc1ea35512) (async) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a325bd7000fddbdf25200f07074e204e22030000002f00000001ffffffc300000006000000000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="de00fbff090000000000000008000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000005c0)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x0, 0x2d, 0x0, "11cba021ab00d7c3d795bc8741153034523fb8ca053ba1a69ecb02d499b8503ce487d03abab1b53320f25c724fe0d32fce049bf65bdef89efbd833d173b77087ea4ea3a853df466fa7859f68e3de5c95"}, 0xd8) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x30, r9, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x40) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r3, 0x20, &(0x7f0000000200)={&(0x7f0000000100)=""/175, 0xaf, 0x0, &(0x7f00000001c0)=""/35, 0x23}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="1808000058000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000003509010000000040950000000000007824913e00b7020000000000007b9af8ff00000000b5090000010000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018090000", @ANYRES8=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007ea0f0ff0000000056080000000000008500000081000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 3.406361427s ago: executing program 1 (id=3509): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @empty, 0x10001}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7d1}, 0x1c) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000000)="580000001400192340835b80040d8c560a067fbc45ff620500000001070058000b480400945f640094272d7008070000000000000000008000f0fffeffe809000000ffd9dd00000010000100030808004149224e06040800", 0x58}], 0x1) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="200000001600070300bd7000fedbdf25017c00000c00018008000400", @ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x4000011}, 0x8010) 3.317902523s ago: executing program 1 (id=3511): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$inet(0x2, 0x802, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)}], 0x1}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r4, &(0x7f00000000c0), 0x9) sendfile(r4, r3, 0x0, 0x10000) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0x8}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x45}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r9 = socket(0x1e, 0x4, 0x0) connect$inet(r9, &(0x7f0000000480)={0x1e, 0x4e22, @rand_addr=0x640100fd}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp(0x2, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) 2.258032369s ago: executing program 0 (id=3513): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000050000000200000007"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x2, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000300000000000000eb40000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r0, 0x20}, 0xc) 2.152667433s ago: executing program 6 (id=3514): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x18, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4, 0xf}]}, 0x18}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000980)={&(0x7f0000000080), 0xc, &(0x7f0000000940)={&(0x7f0000000780)=@bridge_newneigh={0x54, 0x1c, 0x1, 0xffffffff, 0x0, {}, [@NDA_FLAGS_EXT={0x8}, @NDA_IFINDEX={0x8}, @NDA_DST_IPV6={0x14, 0x1, @mcast1}, @NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5}]}, @NDA_LINK_NETNSID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x31, &(0x7f0000000000)={0x0, 0x0}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e21, 0xfffd, @mcast1, 0x3}, 0x1c) syz_emit_ethernet(0xfffffffffffffedd, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@ra={0x94, 0x4, 0x1}]}}, {{0x4e1f, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x4, {[@window={0x3, 0x3}]}}}}}}}, 0x0) recvmmsg(r1, &(0x7f0000001e40)=[{{&(0x7f00000000c0)=@qipcrtr, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/8, 0x8}], 0x1}, 0x9}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000019c0)=[{&(0x7f00000009c0)=""/4096, 0x1000}], 0x1}, 0xa0f4}, {{&(0x7f0000001a00)=@hci, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001a80)}, {&(0x7f0000001ac0)=""/100, 0x64}, {&(0x7f0000001b40)=""/121, 0x79}, {&(0x7f0000001bc0)=""/195, 0xc3}, {&(0x7f0000001cc0)=""/18, 0x12}, {&(0x7f0000001d00)=""/133, 0x85}], 0x6}, 0xffff}], 0x3, 0x10163, &(0x7f0000001f00)={0x77359400}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000000c0)=[{0x0}], 0x1) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r1) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x16c, r5, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1800000}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffd}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0x100, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "58f79a288e7f36ec1d26597238919ad013c628c6"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "b36444ee2df80e6e9d5dbe9b65374e3f3ccf8b46f1e543407371133623c6f168d5b9"}}, @TIPC_NLA_NODE_ID={0x69, 0x3, "9cdd161ab0878923b793f467e9ab0edd6fb9566d2f2f5a767a63ff74cd862c02504ff86335fc020f1b6e642592ebd184bf71d10cc426e546f710b4b88bd34fab20b8a4b04c268cf87ac9e10923ed1d50cfdc95bb511394ef0d4d5f3606440dfe0cebd69219"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x20004001}, 0x20000014) 2.041712238s ago: executing program 0 (id=3515): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) (async) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) r4 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r5 = socket(0x10, 0x803, 0x0) (rerun: 32) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x17c, 0x10, 0x403, 0x78bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x98646, 0x11700}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x1ad8181}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_VFINFO_LIST={0x14c, 0x16, 0x0, 0x1, [{0x94, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xe, 0xef6, 0x35, 0x88a8}}, {0x14, 0x1, {0x100, 0xc3d, 0x8, 0x88a8}}]}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x5}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x9, 0x4}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x0, 0x8}}, @IFLA_VF_TRUST={0xc, 0x9, {0x3, 0x40}}, @IFLA_VF_TRUST={0xc, 0x9, {0x6, 0x401}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x0, 0x100000000}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x6c7, 0x9}}]}, {0xb4, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x1, 0x5}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x6, 0x7fff}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xfffffffc}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x8, 0xfff}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x400, 0x8}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x3, 0xff}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xe, 0x7}}, @IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x5, 0xba0, 0xff, 0x88a8}}]}]}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) (async, rerun: 64) r11 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000005"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) (async) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) (async) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r12, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r13}, 0x4) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x18, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff8500000070000000b7080000000000007b8af8ff00000000b7080000540000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r12, @ANYRES8=r13], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r14, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) write$cgroup_int(r1, &(0x7f00000000c0)=0x6, 0x12) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYRESDEC=r0], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0x802) 1.667411329s ago: executing program 0 (id=3517): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000200)=@req3={0x10000, 0x1, 0x100, 0x100, 0x6, 0x0, 0x3}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x24060400) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) socket(0x6, 0x800000003, 0x200) bind$packet(r4, &(0x7f0000000d00)={0x11, 0x5, r3, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000c00000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32=r3, @ANYRESHEX=r2, @ANYBLOB="03000000050000000400"/28], 0x50) socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x800, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@remote, 0x4, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xb3}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x24}, 0x404d3, 0x6c}, 0x0, @in=@local, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x3dc22cc8}}, 0xe8) r7 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYRESHEX], 0x10}}, 0x0) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000840)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$key(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x10}}, 0x0) close(0x4) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r9, 0x0, 0x21, 0x0, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES8=r0, @ANYRES64=0x0, @ANYRES16=r3], 0xb8}, 0x1, 0x0, 0x0, 0x10}, 0x4080) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000540)={r5, &(0x7f0000000240)="28276e1b10d5065cfba6c6234b9211f75574d55b7be2947937928bdaac50573a05fa8a69f6cf3e02446e0e5dd357fa0426413af4397ece76e1b68f9b3c7af80da5d69ea8e4ada2c07728aa60d34231ddce1da83b699c06a2237e0a2a63b775f3b957be66f76b0f20d1a2a1f352a7e84290335a4c9129f37e0b83ae6a9bd07404b2bbf14b138b9d6d87648abe7842d8b693204fb90a4224559f6f7294fbe3b7e6c249eb93aa88b7d46c6604c850bbcf99bfca3b2c8030b266cfe055c8c597b057099aca734573a53e1f1d01c90bbf981ebc8a1ba8959e0f42115a2d63d35e458d302997ad1d383cda73b322391dd127", &(0x7f0000000440)=""/208}, 0x20) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 1.62951175s ago: executing program 6 (id=3519): r0 = socket(0x10, 0x6, 0x2) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) recvfrom$l2tp6(r0, &(0x7f00000000c0)=""/64, 0x40, 0x100, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}, 0x20) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x404a3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) 1.126997043s ago: executing program 1 (id=3520): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x200, @local}, {0x2, 0x0, @broadcast}, 0x105, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0xe1b2}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYBLOB="d7bf771351a6143ce74fb8d842ec4c14b3793542e30d9d05a4af2bdaa2289b8994a543c72e85d8a9f7c78d55cb490ad67ed11e0d024e41735e953b766571b3af66d4ed0d2f7f63689691388e2a33069932923b6ec21bbc4965b1247a7542547aac46e74205863639bda73b8c5d0f9c7b8fa56ad1844b2460743d2ce4cfc1aaa21d2f5e0e94e21cbb46aaefa59c5b2c0446d9f724eadb8ea17dfae039b546df7b0a2d2c7662e734dc29b331e4b699176fbb63d7db908bd7d8d9", @ANYRESOCT=r1, @ANYRES32=r0, @ANYRES64=r1, @ANYRESDEC=r1, @ANYRES64=r0, @ANYBLOB="e16538cd7cb587a3822075641db950aabe082ec5f54496e9c4d01df675bb39f18b2af5cfeebfd4873e8ad40b76a696e2991fe234f3892888b8a868d7e00c737750ead3"], 0xfc}, 0x1, 0x0, 0x0, 0x4040800}, 0x800) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="ec000000210001000400000000000000fc020000000000000000000000000001fe80000000000000000000000000003a00000000000000020a0000a02e000000", @ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fc0000000000000000000400000000017f000001000000000000000000000000fc020000000000000000000000000001000000000000000000000000000000013c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) r5 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r5, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa00000000180000000000000084"], 0x30}, 0x24000052) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000000206030000000000000000000000000905000100070000000900020073797a310000140007800800134000000fc508001240000000000500050002000000050004000100000011000300686173683a69702c706f727400000000"], 0x60}, 0x1, 0x0, 0x0, 0x24004804}, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r5) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r6, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, r7, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 1.126506773s ago: executing program 6 (id=3521): r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x8}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8811}, 0x24048080) listen(0xffffffffffffffff, 0x3b54) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x24048014}, 0x8010) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0a000000cb98e68b1c05d00feafeebb38adbcb000a000000000000000958f22c0f88b8db08750fc37257cb8ac5e9e11a59cb797dfdbd8ab2d79c17376bf0329519dbc1269331c23ee4ccf83be0e467fe00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r6, 0x0, 0xa, 0x0, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x0, 0x8}, {0xfff1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x40) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56561, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0x3, 0x8}, {0x10, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20002000}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) 1.124905151s ago: executing program 0 (id=3522): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc2f4}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x0, 0x0, 0x2, 0xb, 0x1, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x9f, 0xb0, &(0x7f00000000c0)=""/176, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0xe, 0x7ff, 0x81}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x800}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r0, 0x0, 0x93, 0xfa, &(0x7f0000000300)="cfab74725b490016a8c395c1e170f23730311077b11f561835c877845aae9a4532c5690bebb6105afee9122c59e1a0985456f52d3887db98ba2828a7ab57d342b8708f28e415614cd5e16ca53ccba1a7113ac82b7684f7170f0a5846330c5bcb8e6be6c81d657d9a1566ac3ecc9942d3f64cfc408f8ae8f57f0e38db77d0c696ff5285f56949b6d59216fdba3fb428cfd878c2", &(0x7f00000003c0)=""/250, 0x101, 0x0, 0xda, 0xda, &(0x7f00000004c0)="4d4b60d555e02b30355ef3b3c57c2c3dc11765f65fe750f6423d81e07183fe62729c039c7a78f3dcbff5c71489618abe626d776e5cb4f4770aa3cded1e30e3a81e32eeb6f8b7a3a6498b393b4e3c3f47f38a26e817f93fe20c7155b50f138079b393a7d8c4c6a490e1c0eb476f0ab6b9b929e06777607db5ad50c2474929a11dd50f25fa82592a9983816a4082d74c701f75002974d88334500e31727dc8e604c644f1994e562c4c449c026d56758319b3ac76e8c4e2dec96dedaf6b20c4d00ae4d6177062666b49aee2dc28a1c138d77ed92efd60d971ea4626", &(0x7f00000005c0)="15960d94a930f0f0c59b9f36971d4c755a0789b39ef57c9878e74ad0060de6868b804b7065a397c6eceaf00bf2cf4ea60a077c0e72cdb040b698a2baf6a31dc2e0c15f9f5e12020e6df13d701ae080f4ee319a89a0d2bad5644e5e0b2674acb1b5286493ae4b08a6e4ab5d68e37a1b7e9532cfe5d4c812e3f3b5d132673ab4db81a13feda61ef59fc5068bb5d03800ae73c3c461a2e6c91e6efae5868c670cba8212e297c2955d53bb444342f26577eaeada75ad277efa1e863c969a6afe4362b7cfa125e7e1c74d7f774c4de9ff20d52da568a4a4990f072f90", 0x4, 0x0, 0x3}, 0x50) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x20010, r0, 0x6d6d5000) r1 = socket(0x15, 0xa, 0xd6d00000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000740)={0x0, 0x3ff}, &(0x7f0000000780)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000007c0)={r2, 0x2}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000800)={r2, @in={{0x2, 0x4e23, @private=0xa010101}}, [0x2, 0x9, 0x9, 0xff, 0x101, 0x6, 0x8, 0xffffffffffffffff, 0x0, 0xae7, 0x2, 0x8001, 0xad0, 0x400]}, &(0x7f0000000900)=0x100) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000009c0)=@nat={'nat\x00', 0x1b, 0x5, 0x5c0, 0x180, 0x270, 0xffffffff, 0x180, 0x270, 0x4f0, 0x4f0, 0xffffffff, 0x4f0, 0x4f0, 0x5, &(0x7f0000000940), {[{{@uncond, 0x0, 0x138, 0x180, 0x0, {}, [@common=@srh1={{0x90}, {0x3c, 0x80, 0x3, 0x80, 0x2, @empty, @mcast1, @private2, [0xff, 0xffffff00, 0xffffffff, 0xff], [0x0, 0xffffffff, 0xff, 0xff000000], [0xff000000, 0x0, 0xffffff, 0xff000000], 0x10, 0x1220}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x5, @ipv4=@empty, @ipv6=@private1, @gre_key=0xdba, @port=0x4e20}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private1, [0x0, 0xffffff00, 0xff, 0xffffff00], [0xff000000, 0xffffffff, 0x101ffffff], 'veth1_to_bridge\x00', 'veth1\x00', {}, {0xff}, 0x2b, 0xb, 0x6, 0x10}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x1c, @ipv4=@remote, @ipv6=@loopback, @port=0x4e20, @icmp_id=0x64}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0xffff], 0x0, 0x43, 0x2}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x17, @ipv4=@private=0xa010102, @ipv4=@empty, @icmp_id=0x65, @port=0x4e24}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@ipv6header={{0x28}, {0x4d, 0x33}}, @common=@hbh={{0x48}, {0x401, 0x1, 0x0, [0x4, 0x10, 0x8, 0x100, 0x10, 0x5, 0x5, 0xc, 0x71, 0x8, 0x6, 0x1, 0x7fff, 0x4, 0x1d, 0x80], 0x2}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x6, @ipv4=@broadcast, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @icmp_id=0x66, @icmp_id=0x68}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001040), r1) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x14, r3, 0x200, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x42015) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000001140)=@assoc_value, &(0x7f0000001180)=0x8) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000011c0), r4) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000001200)={0x0, 0x4, 0x8, 0x7, 0x4000, 0x6, 0xffff, 0x5, {r2, @in={{0x2, 0x4e23, @rand_addr=0x64010100}}, 0x1, 0x4, 0x1, 0x7fff, 0x80000001}}, &(0x7f00000012c0)=0xb0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000001300)={r6, 0x5, 0x2, [0x5, 0x2]}, &(0x7f0000001340)=0xc) sendmsg$IEEE802154_ASSOCIATE_REQ(r4, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x1c, r5, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004804}, 0x4000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000014c0), r4) sendmsg$NLBL_MGMT_C_REMOVE(r7, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x1c, r8, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4090) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000001600)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r9, &(0x7f0000001700)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x58, r5, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "5429efb815875926f601abcd84eb9b7ee96f3a75a9b988b7e37599bb5b82a943"}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) unshare(0x400) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r11, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x24, r5, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x81}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$IEEE802154_LLSEC_DEL_DEV(r4, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x64, r5, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000001a40)={'syztnl0\x00', &(0x7f00000019c0)={'gre0\x00', 0x0, 0x1, 0x8000, 0x7, 0x9e, {{0x15, 0x4, 0x3, 0x1d, 0x54, 0x65, 0x0, 0xc, 0x2f, 0x0, @remote, @loopback, {[@timestamp_prespec={0x44, 0xc, 0x8b, 0x3, 0xc, [{@multicast2, 0x9}]}, @timestamp={0x44, 0x14, 0x3d, 0x0, 0x8, [0x6, 0x8, 0x5, 0x1]}, @cipso={0x86, 0x1e, 0xffffffffffffffff, [{0x5, 0x4, "8381"}, {0x0, 0x8, "d1e75276aafc"}, {0x6, 0xc, "76329729d7f591465f2f"}]}]}}}}}) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000001bc0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001a80)={0xf0, 0x13, 0x10, 0x70bd2a, 0x25dfdbff, {0x2a, 0x90, 0x10, 0x8, {0x4e23, 0x4e22, [0xfffffff7, 0x9, 0xc4000000, 0x6baf], [0x9, 0x5, 0x4, 0x5], r12, [0x5, 0x2]}, 0x7, 0x882}, [@INET_DIAG_REQ_BYTECODE={0x9e, 0x1, "f39320b9efd90348b7981d94a211fd5723daa31c8108767c8699166142bfac15932fcda9e06a459e3f356b8aac23950c5d47ced7b449a4b44fc12f1a3bcef2e9e0a116ded4edbac6934fbbd56027ca5a6a93d1279e13dd8cb7f6131c3bb6ba964fd198913fcca784bd97e4672486e697a7403126d788b5ea05ea0aa9ecab84ed0edd81471798a759b58129eef591ce4ba426e4d0a624893a7d4e"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000084}, 0x20040000) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000001c00)={r2, 0x1000, "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"}, &(0x7f0000002c40)=0x1008) sendmsg$IEEE802154_START_REQ(r11, &(0x7f0000002d40)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002d00)={&(0x7f0000002cc0)={0x34, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x6}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x3}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x8}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c084}, 0x40000) 1.036160409s ago: executing program 2 (id=3523): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0xff07, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0400000007000b0005000000"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) 815.535888ms ago: executing program 2 (id=3524): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(wp512)\x00'}, 0x58) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0x1c) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x4f) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000600)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb5058b292eac8ba88a36aa1d7ee244885b5bb9fa6935849e6098ed884e7cb51726b360", 0x50}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x4040800) (async) recvmsg$qrtr(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000700)=""/195, 0xc3}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x10020) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x41}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x5b7b}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9a}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x65c}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}]}, 0x64}}, 0x4000) (async) listen(r4, 0x0) (async) connect$unix(r3, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) (async) r6 = accept(r4, &(0x7f0000000280)=@generic, &(0x7f0000000000)=0xfffffee8) (async) syz_emit_ethernet(0x82, &(0x7f0000000040)={@broadcast, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast1, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1=0xe0000089}, {@private}, {@multicast1}, {@remote}, {@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}, {@private}]}]}}}}}}}, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r7 = socket(0x40000000015, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6) (async) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000240)={0x0, @empty, @loopback}, &(0x7f0000000340)=0xc) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x4, 0x7, 0x5, 0x7fff, 0x41, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x700, 0x3, 0xffffffff}}) (async) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c783, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x0, "e35059f50cea42ae3ce65eb94eb5e2a0"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) 797.062323ms ago: executing program 1 (id=3525): r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x78, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x2}]}, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="b40200000000000061174c0000000000850000002700000095000000000000004322207f5b9d680874e8dc8c5c9265ced41417862555b50684ce84a7fce1574510ed6540e18e2e0084f0c2c73e11a3e87bb9ee8ed3b5d1657d812d72020d79845c5c0989466b84d54188a25ddd3061579031a74f2018f54e4f66ee29f734df89a483d1561d7c86c1a95fd83fe4395615f4eda249c5702d03208822b1f508fb3ea04aeb85b4d61df6786b"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000140)=r1}, 0x20) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r4, 0xffffffffffffffff}, 0x4) ioctl$XFS_IOC_FD_TO_HANDLE(r5, 0xc038586a, &(0x7f0000000140)={r4, &(0x7f0000000040)='\x00', 0x800, &(0x7f0000000080)={@align=0x7fff, {0xa9b1, 0x6, 0x9, 0x5}}, 0xad, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x6}) (async, rerun: 64) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r6}, 0x4) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000540)='%-5lx \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f0000000700)=r1}, 0x20) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0xfa9, 0x2, 0x0, 0x20, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r13 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x44, 0x18, 0x1, 0x0, 0x8, {0xa, 0x37}, [@IFAL_ADDRESS={0x14, 0x5, @remote}, @IFAL_ADDRESS={0x14, 0x1, @remote}]}, 0x44}}, 0x0) (async) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000003000000ffff00000700000000000300", @ANYRES32, @ANYBLOB="0700000000000000000001a9d3fd000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000040000000400"/24, @ANYRES32, @ANYBLOB], 0x50) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xc, 0x2, 0x10000, 0x8, 0x7581, 0xffffffffffffffff, 0xd285}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xf, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="18270000", @ANYRES32=r2, @ANYBLOB="00000000f7ffffff85100000ffffffff18110020", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x7b, &(0x7f0000000300)=""/123, 0x40f00, 0x26, '\x00', 0x0, @cgroup_device=0x6, r3, 0x8, &(0x7f00000003c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x2, 0x1}, 0x10, 0x0, r1, 0x3, &(0x7f00000009c0)=[r4, r6, r7, r8, r9, r10, r11, r12, r14, r15], &(0x7f0000000a00)=[{0x4, 0x4, 0x3}, {0x4, 0x4, 0x10, 0x5}, {0x0, 0x4, 0x7, 0xc4a4e81029dcfc4c}], 0x10, 0x7}, 0x94) (async) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000100)="93d904000003", 0x6}, {&(0x7f0000000240)='\x00\x00\x00', 0x3}], 0x2) (async) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x1}]}}}]}, 0x5c}}, 0x0) 639.753153ms ago: executing program 0 (id=3526): unshare(0x28000000) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0xa96) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000200)=ANY=[@ANYRESDEC=r2], 0x50) 518.260394ms ago: executing program 2 (id=3527): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000030000000000000009000000850000002e000000850000001100000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x11, &(0x7f0000000040)="020c0000098011e8", 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 509.366332ms ago: executing program 0 (id=3528): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f00000001c0)='pimreg0\x00', 0x40000, 0x0, 0x2, &(0x7f0000000240)={@_ha_fsid}, 0x0}) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) sendmsg$IPVS_CMD_ZERO(r0, 0x0, 0x4000) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20044003) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) close(r2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d40), &(0x7f0000000240), 0x0, r2}, 0x38) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r4, 0x25, 0x0, @void}, 0x10) (async) syz_emit_ethernet(0x42, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) 443.230319ms ago: executing program 1 (id=3529): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}}, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x2a060400) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x45, &(0x7f0000000200), 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180040000000050017"], 0x50}}, 0x4080) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000040) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000180)={r7, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r9, 0x400454cd, 0x6) r10 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000580)=ANY=[@ANYRES16=r3, @ANYRES64=0x0], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r12, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000) recvmmsg(r6, &(0x7f00000056c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000005780)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/4085, 0xff0}, {&(0x7f00000003c0)=""/228}, {&(0x7f00000004c0)=""/152}], 0x3}, 0xfff}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffac}, 0x6}, {{0x0, 0x0, 0x0}, 0x7}], 0x61, 0x10022, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r11, 0xc020f509, &(0x7f0000000080)={r11, 0x4, 0x81}) 294.220709ms ago: executing program 2 (id=3530): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 144.070062ms ago: executing program 2 (id=3531): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000000}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000000}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x94) (async) 0s ago: executing program 2 (id=3532): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000077decc51000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060002"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x101880, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='.\x00', 0x0, 0x4000, r2}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r1], 0x7c}}, 0x4000081) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000010000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0xd, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20000014}, 0x80094) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={0x1fc, 0x17, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x81}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x80, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x78, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0xb0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x14}, 0x44850) kernel console output (not intermixed with test programs): 43][T13932] vlan4: entered allmulticast mode [ 410.274513][T13932] bond7: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 410.560124][T13951] bond5 (unregistering): Released all slaves [ 410.855170][T13965] netlink: 480 bytes leftover after parsing attributes in process `syz.2.2065'. [ 410.879061][T13965] netlink: 480 bytes leftover after parsing attributes in process `syz.2.2065'. [ 411.091460][T13971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2067'. [ 411.194199][T13975] tipc: Enabled bearer , priority 0 [ 411.221310][T13974] tipc: Disabling bearer [ 411.481970][T13984] netlink: 'syz.1.2071': attribute type 1 has an invalid length. [ 411.826735][T13993] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2074'. [ 411.878947][ T5747] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 411.934316][ T5747] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 412.045380][T13999] netlink: 'syz.1.2075': attribute type 1 has an invalid length. [ 412.054715][T14000] netlink: 'syz.0.2076': attribute type 1 has an invalid length. [ 412.071353][T14000] netlink: 'syz.0.2076': attribute type 4 has an invalid length. [ 412.154115][T13999] bond9: (slave veth0_to_bond): making interface the new active one [ 412.174992][T13999] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 412.190241][T13999] 8021q: adding VLAN 0 to HW filter on device bond9 [ 412.609368][T14013] bond0 (unregistering): Released all slaves [ 412.668413][T14033] netlink: 'syz.2.2084': attribute type 5 has an invalid length. [ 412.890136][T14038] netlink: 'syz.0.2085': attribute type 7 has an invalid length. [ 412.898534][T14038] netlink: 'syz.0.2085': attribute type 8 has an invalid length. [ 413.451699][T14064] bridge2: entered promiscuous mode [ 413.462758][T14066] __nla_validate_parse: 5 callbacks suppressed [ 413.462777][T14066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2091'. [ 413.470738][T14064] bridge2: entered allmulticast mode [ 413.484089][T14066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2091'. [ 413.496565][T14066] netlink: 'syz.1.2091': attribute type 18 has an invalid length. [ 413.510716][T14064] team0: Port device bridge2 added [ 413.613282][T14073] ip6gre2: entered promiscuous mode [ 413.621689][T14073] ip6gre2: entered allmulticast mode [ 413.642085][ T6198] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 413.661772][ T6198] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 413.670460][ T5747] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 413.798049][T14088] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2095'. [ 413.808783][T14088] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2095'. [ 413.820187][T14088] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2095'. [ 413.829903][T14088] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2095'. [ 413.869239][T14090] netlink: 'syz.2.2096': attribute type 61 has an invalid length. [ 413.948203][ T5747] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 414.222624][T14110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2101'. [ 414.278486][ T5747] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 414.311808][T14113] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2102'. [ 415.089413][T14153] erspan0: entered promiscuous mode [ 415.097087][T14153] erspan0: entered allmulticast mode [ 415.267089][T14159] erspan0: entered promiscuous mode [ 415.291470][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.322398][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.436299][T14159] bridge0: entered promiscuous mode [ 415.451060][T14159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.482783][T14159] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.513816][T14159] batman_adv: batadv0: Interface activated: dummy0 [ 415.530405][T14159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.564086][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.574689][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.585033][ T1172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.595922][T11989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.617100][T11980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.628181][ T6199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.639583][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.650110][T11976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.722589][T14159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.756889][T14159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.782888][T14159] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 415.794493][T14159] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 415.822679][ T6198] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.829915][ T6198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.859179][ T6198] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.866431][ T6198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.071524][T14189] netlink: 'syz.5.2116': attribute type 1 has an invalid length. [ 416.098634][T14195] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2118'. [ 416.107895][T14189] netlink: 'syz.5.2116': attribute type 2 has an invalid length. [ 416.255654][T14201] netlink: 'syz.2.2120': attribute type 2 has an invalid length. [ 416.441322][T14211] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2119'. [ 417.887677][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 419.116397][T14209] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 419.118823][T14212] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 419.369402][T14251] syzkaller0: entered promiscuous mode [ 419.399642][T14251] syzkaller0: entered allmulticast mode [ 419.455137][T14251] tipc: Enabled bearer , priority 0 [ 419.494421][T14251] veth9: entered promiscuous mode [ 419.500281][T14251] veth9: entered allmulticast mode [ 419.506127][T14251] team0: Device veth9 is up. Set it down before adding it as a team port [ 419.539276][T14263] __nla_validate_parse: 2 callbacks suppressed [ 419.539295][T14263] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2131'. [ 419.587175][T14250] tipc: Resetting bearer [ 419.642306][T14250] tipc: Disabling bearer [ 419.863152][T14289] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2138'. [ 419.895848][T14289] xt_hashlimit: size too large, truncated to 1048576 [ 420.342059][T14305] veth1_to_bond: entered allmulticast mode [ 420.371633][T14305] veth1_to_bond: entered promiscuous mode [ 420.385714][T14304] veth1_to_bond: left promiscuous mode [ 420.412381][T14304] veth1_to_bond: left allmulticast mode [ 420.549574][T14330] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2145'. [ 420.575000][T14334] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2147'. [ 420.772588][ T36] net_ratelimit: 11 callbacks suppressed [ 420.772612][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.787175][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.795365][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.803836][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.930754][ T6199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.950958][ T6199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.987167][T14348] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 421.107291][T14351] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2153'. [ 421.557272][T14374] pimreg: entered allmulticast mode [ 421.566236][T14374] pimreg: left allmulticast mode [ 421.597198][T14376] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2160'. [ 421.609339][T14376] netlink: 'syz.0.2160': attribute type 8 has an invalid length. [ 421.622451][T14376] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2160'. [ 421.728147][T11980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.752060][T14379] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2162'. [ 421.774532][T14382] syzkaller0: entered promiscuous mode [ 421.780270][T14382] syzkaller0: entered allmulticast mode [ 421.972502][T14396] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2166'. [ 422.054697][T14396] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 422.083398][T14396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2166'. [ 422.097713][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.336224][ T5622] block nbd2: Receive control failed (result -107) [ 424.689914][T14408] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.700329][T14408] bridge_slave_0: left allmulticast mode [ 424.706045][T14408] bridge_slave_0: left promiscuous mode [ 424.712419][T14408] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.754348][T14408] bridge_slave_0: entered promiscuous mode [ 424.783276][T14408] team0: Port device bridge_slave_0 added [ 424.969792][T14441] __nla_validate_parse: 1 callbacks suppressed [ 424.969812][T14441] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2174'. [ 425.092411][ T5624] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 425.110885][ T5624] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 425.121191][ T5624] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 425.132614][ T5624] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 425.143849][ T5624] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 425.187045][ T5622] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 425.195333][ T5622] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 425.203004][ T5622] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 425.212214][ T5622] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 425.221143][ T5622] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 425.435963][T14461] xt_CT: No such helper "netbios-ns" [ 425.445508][T14461] netlink: 'syz.5.2179': attribute type 2 has an invalid length. [ 425.453979][T14461] netlink: 'syz.5.2179': attribute type 2 has an invalid length. [ 425.883517][T14482] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2181'. [ 425.887650][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 426.015928][T14489] net_ratelimit: 8 callbacks suppressed [ 426.015946][T14489] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 426.320577][T14505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2188'. [ 426.530187][ T142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.539204][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.551126][ T6199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.560287][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.574989][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.597978][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.606441][T14514] netlink: 'syz.0.2192': attribute type 2 has an invalid length. [ 426.633911][T14517] 8021q: adding VLAN 0 to HW filter on device bond7 [ 426.648824][T14520] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2193'. [ 426.696911][T14520] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2193'. [ 426.741579][T14514] : entered promiscuous mode [ 426.927833][T14448] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.935142][T14448] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.949906][T14448] bridge_slave_0: entered allmulticast mode [ 426.958703][T14448] bridge_slave_0: entered promiscuous mode [ 426.971811][T14448] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.979239][T14448] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.986472][T14448] bridge_slave_1: entered allmulticast mode [ 426.994321][T14448] bridge_slave_1: entered promiscuous mode [ 427.193760][T14546] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 427.339173][ T5622] Bluetooth: hci6: command tx timeout [ 427.728463][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.740090][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.409754][ T5622] Bluetooth: hci6: command tx timeout [ 429.728421][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 430.170140][T14448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.200955][T14448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.303511][T14448] team0: Port device team_slave_0 added [ 430.350345][T14448] team0: Port device team_slave_1 added [ 430.400355][T14571] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2204'. [ 430.491944][T14448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.508272][T14448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.557048][T14448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.582115][T14448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.597763][T14448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.653143][T14448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.783778][T14448] hsr_slave_0: entered promiscuous mode [ 430.797766][T14448] hsr_slave_1: entered promiscuous mode [ 430.811713][T14448] debugfs: 'hsr0' already exists in 'hsr' [ 430.824154][T14448] Cannot create hsr debugfs directory [ 431.058161][ T13] net_ratelimit: 7 callbacks suppressed [ 431.058180][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.086018][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.315068][T14607] netlink: zone id is out of range [ 431.357580][T14607] netlink: zone id is out of range [ 431.453872][T14607] netlink: zone id is out of range [ 431.490888][ T5622] Bluetooth: hci6: command tx timeout [ 431.542121][T14607] netlink: zone id is out of range [ 431.586266][T14607] netlink: zone id is out of range [ 431.596304][T14607] netlink: zone id is out of range [ 431.619187][T14607] netlink: zone id is out of range [ 431.626177][T14607] netlink: zone id is out of range [ 432.015811][T14628] netlink: 165 bytes leftover after parsing attributes in process `syz.5.2214'. [ 432.056202][T14633] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2215'. [ 432.927899][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 433.334213][T14563] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 433.343861][T14579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2206'. [ 433.372250][T14448] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 433.431637][T14448] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 433.481752][T14448] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 433.523023][T14448] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 433.556028][T14448] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 433.577780][ T5622] Bluetooth: hci6: command tx timeout [ 433.602770][T14448] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 433.634537][T14448] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 433.662890][T14448] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 433.832658][T14448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.843302][T14664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2222'. [ 433.939455][T14664] bond6: entered promiscuous mode [ 433.967023][T14664] 8021q: adding VLAN 0 to HW filter on device bond6 [ 434.011400][T14664] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2222'. [ 434.036038][T14676] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2224'. [ 434.043898][T14665] 8021q: adding VLAN 0 to HW filter on device bond7 [ 434.053290][T14665] bond7: entered promiscuous mode [ 434.060111][T14665] bond6: (slave bond7): Enslaving as an active interface with an up link [ 434.126889][T14664] bridge5: entered promiscuous mode [ 434.133073][T14664] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 434.193833][T14682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2227'. [ 434.205663][T14682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2227'. [ 434.231014][T14448] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.279405][T14682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2227'. [ 434.306646][ T6200] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.313885][ T6200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.362525][ T6200] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.369775][ T6200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.186431][T14715] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 435.426050][T14729] bridge_slave_1: left allmulticast mode [ 435.459222][T14729] bridge_slave_1: left promiscuous mode [ 435.470620][T14729] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.492248][T14729] bond0: (slave veth0_to_bond): Releasing active interface [ 435.514418][T14729] team0: Port device team_slave_0 removed [ 435.541247][T14729] team0: Port device team_slave_1 removed [ 435.551932][T14729] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.560884][T14729] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.572118][T14729] bond2: (slave veth5): Releasing active interface [ 435.580837][T14729] bond3: (slave xfrm1): Releasing backup interface [ 435.588064][T14729] xfrm1: left promiscuous mode [ 435.594423][T14729] bond5: (slave bridge4): Releasing active interface [ 435.605056][T14729] bond0: (slave veth9): Releasing active interface [ 435.652128][T11989] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 435.707640][T11989] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 435.886760][T14448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.964328][T14747] __nla_validate_parse: 3 callbacks suppressed [ 435.964346][T14747] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2241'. [ 436.025672][T14747] syzkaller0: entered promiscuous mode [ 436.032339][T14747] syzkaller0: entered allmulticast mode [ 436.041681][T14747] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 436.142502][T14752] IPv6: NLM_F_CREATE should be specified when creating new route [ 436.155628][T14750] IPv6: NLM_F_CREATE should be specified when creating new route [ 436.240062][T14741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2239'. [ 436.474188][T14773] xt_bpf: check failed: parse error [ 436.522364][T14775] netlink: 660 bytes leftover after parsing attributes in process `syz.2.2246'. [ 436.557269][T14775] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2246'. [ 436.685510][ T6199] net_ratelimit: 23 callbacks suppressed [ 436.685527][ T6199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.700411][ T6199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.768461][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.852844][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.862538][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.928560][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.022681][T14448] veth0_vlan: entered promiscuous mode [ 437.059657][T14448] veth1_vlan: entered promiscuous mode [ 437.183543][T14792] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2250'. [ 437.200395][T14792] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2250'. [ 437.212245][T14448] veth0_macvtap: entered promiscuous mode [ 437.226897][T14448] veth1_macvtap: entered promiscuous mode [ 437.250340][T14792] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2250'. [ 437.274619][T14798] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2253'. [ 437.292729][T14448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.331512][T14806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2255'. [ 437.376760][T14448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.403904][T14798] syzkaller1: entered promiscuous mode [ 437.418522][T14798] syzkaller1: entered allmulticast mode [ 437.422818][ T9216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.432779][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.483273][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.505404][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.552895][T14817] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2258'. [ 437.608350][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.627326][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.809025][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.818170][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.983916][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.021226][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.066661][T14827] bond0: entered promiscuous mode [ 438.095263][T14827] batadv0: entered promiscuous mode [ 438.116921][T14827] debugfs: 'hsr0' already exists in 'hsr' [ 438.121011][T14554] udevd[14554]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 438.131131][T14827] Cannot create hsr debugfs directory [ 438.145731][T14827] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 438.161958][T14827] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 438.208343][T14827] bond0: left promiscuous mode [ 438.339174][T14827] batadv0: left promiscuous mode [ 438.346068][T14842] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 438.522812][T14844] xt_CT: You must specify a L4 protocol and not use inversions on it [ 438.581349][T14828] netlink: 'syz.0.2261': attribute type 2 has an invalid length. [ 438.604183][T14828] bond0: entered promiscuous mode [ 438.631212][T14828] batadv0: entered promiscuous mode [ 438.648872][T14828] debugfs: 'hsr0' already exists in 'hsr' [ 438.662834][T14828] Cannot create hsr debugfs directory [ 438.674484][T14828] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 438.696557][T14828] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 438.771700][T14828] bond0: left promiscuous mode [ 439.239483][T14828] batadv0: left promiscuous mode [ 439.321379][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.362670][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.389824][ T9216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.402708][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.416631][ T9216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.441759][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.555138][T14848] 8021q: adding VLAN 0 to HW filter on device bond8 [ 439.612111][T14848] bond8: entered promiscuous mode [ 439.628316][T14848] bond8: entered allmulticast mode [ 440.089812][T14878] syzkaller0: entered promiscuous mode [ 440.105641][T14878] syzkaller0: entered allmulticast mode [ 440.239682][T14880] tipc: Enabled bearer , priority 0 [ 440.416888][T14881] syzkaller0: entered promiscuous mode [ 440.423140][T14881] syzkaller0: entered allmulticast mode [ 440.431332][T14881] tipc: Resetting bearer [ 440.735901][ T9218] tipc: Resetting bearer [ 441.887790][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 442.239448][ T6199] net_ratelimit: 9 callbacks suppressed [ 442.239468][ T6199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.265765][ T6199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.529271][ T9216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.538454][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.008316][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.023761][T14871] tipc: Resetting bearer [ 443.170630][ T6199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.179548][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.391698][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.401024][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.478923][T14926] __nla_validate_parse: 2 callbacks suppressed [ 443.478943][T14926] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2287'. [ 443.506096][T14926] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2287'. [ 443.515808][T14926] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2287'. [ 444.578594][ T6199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.765284][T14871] tipc: Disabling bearer [ 446.113734][T14947] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2295'. [ 446.136583][T14947] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2295'. [ 446.374649][T14960] syzkaller0: entered promiscuous mode [ 446.391594][T14960] syzkaller0: entered allmulticast mode [ 446.582810][T14970] batadv_slave_1: entered allmulticast mode [ 446.602440][T14970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2302'. [ 446.654537][T14973] netlink: 'syz.5.2303': attribute type 12 has an invalid length. [ 446.676491][T14975] syzkaller0: entered promiscuous mode [ 446.683367][T14975] syzkaller0: entered allmulticast mode [ 446.722422][T14970] batadv_slave_1: left allmulticast mode [ 446.898934][T14984] netlink: 'syz.6.2305': attribute type 2 has an invalid length. [ 447.280471][T14999] net_ratelimit: 807 callbacks suppressed [ 447.280491][T14999] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 447.556488][T15010] xt_hashlimit: size too large, truncated to 1048576 [ 447.899664][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.913990][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.289186][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.621553][T11980] IPVS: starting estimator thread 0... [ 448.738062][T15054] IPVS: using max 31 ests per chain, 74400 per kthread [ 448.930327][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.938836][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.041169][ T9218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.083514][ T9218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.091697][T11980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.352746][T15060] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.365149][T15060] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.502770][T15088] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2337'. [ 449.521108][T15060] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.532799][T15060] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.586864][T15093] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2337'. [ 449.642957][T15096] bridge1: entered promiscuous mode [ 449.655504][T15096] bridge1: entered allmulticast mode [ 449.673484][T15096] team0: Port device bridge1 added [ 449.774322][T15060] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.785347][T15060] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.860732][T15090] bridge2: entered promiscuous mode [ 449.879962][T15090] bridge2: entered allmulticast mode [ 449.900840][T15090] team0: Port device bridge2 added [ 450.012083][T15060] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.095346][T15060] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.114244][T15120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.390086][ T36] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.404733][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.653883][ T154] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.688808][ T154] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.769212][T15131] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2343'. [ 450.835644][ T36] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.844531][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.893136][ T9216] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.903075][ T9216] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.047002][T15156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2350'. [ 451.644268][T15196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2361'. [ 451.875401][T15202] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2365'. [ 451.937116][T15203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2365'. [ 452.324829][T15219] net_ratelimit: 5 callbacks suppressed [ 452.324852][T15219] openvswitch: netlink: ct_state flags 806d0004 unsupported [ 452.829398][T15243] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2377'. [ 452.843584][T15243] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2377'. [ 452.855846][T15243] netlink: 'syz.6.2377': attribute type 2 has an invalid length. [ 452.870441][T15243] netlink: 103 bytes leftover after parsing attributes in process `syz.6.2377'. [ 453.424876][T15272] openvswitch: netlink: Flow actions attr not present in new flow. [ 456.161837][T15256] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 456.366211][T15288] ip6gre2: entered promiscuous mode [ 456.400233][T15288] ip6gre2: entered allmulticast mode [ 456.474288][T15297] tipc: Enabled bearer , priority 0 [ 456.502200][T15297] tipc: Resetting bearer [ 456.505488][T15295] __nla_validate_parse: 3 callbacks suppressed [ 456.505504][T15295] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2388'. [ 456.535056][T15296] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2391'. [ 456.581983][T15296] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 456.621081][T15306] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2393'. [ 456.634519][T15308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 456.790379][T15292] tipc: Disabling bearer [ 456.813952][ T6198] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 456.822669][ T6198] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 456.839516][T11980] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 456.892447][T15317] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2395'. [ 457.090150][T15327] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 457.186440][T15337] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 457.568866][T11980] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 457.650559][T11980] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 457.917361][T15371] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2414'. [ 457.965280][T15376] netlink: 'syz.2.2415': attribute type 1 has an invalid length. [ 457.979346][T15376] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2415'. [ 457.988785][T15376] netlink: 'syz.2.2415': attribute type 1 has an invalid length. [ 458.824907][T15402] erspan0: left promiscuous mode [ 458.842220][T15402] erspan0: left allmulticast mode [ 459.464740][T15430] syzkaller1: entered promiscuous mode [ 459.479432][T15430] syzkaller1: entered allmulticast mode [ 459.491915][T15430] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 5 [ 459.705292][ T6198] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.720692][ T6198] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.743526][ T6198] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.760606][ T6198] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.914631][T15451] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2438'. [ 459.924945][T15451] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2438'. [ 459.944607][T15451] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2438'. [ 459.957205][T15451] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2438'. [ 460.200894][T15461] veth1_to_batadv: entered promiscuous mode [ 460.224020][T15468] netlink: 'syz.2.2441': attribute type 33 has an invalid length. [ 460.483334][T15482] netlink: 'syz.2.2448': attribute type 1 has an invalid length. [ 460.559449][T15482] 8021q: adding VLAN 0 to HW filter on device bond10 [ 460.571729][T15473] netlink: 'syz.1.2445': attribute type 3 has an invalid length. [ 460.580289][T15473] netlink: 'syz.1.2445': attribute type 3 has an invalid length. [ 460.589936][T15486] bond10: entered promiscuous mode [ 460.595071][T15486] bond10: entered allmulticast mode [ 460.641776][T15482] macvlan2: entered promiscuous mode [ 460.655195][T15482] macvlan2: entered allmulticast mode [ 460.684273][T15482] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 461.211375][T15509] syzkaller0: entered promiscuous mode [ 461.231969][T15509] syzkaller0: entered allmulticast mode [ 461.247592][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 461.652075][T15527] __nla_validate_parse: 4 callbacks suppressed [ 461.652093][T15527] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2465'. [ 461.714040][T15529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2466'. [ 461.746242][T15529] netlink: 'syz.0.2466': attribute type 1 has an invalid length. [ 461.766202][T15529] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2466'. [ 462.085025][T15545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2470'. [ 462.095747][T15547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2470'. [ 462.265869][T15556] netlink: 'syz.5.2472': attribute type 2 has an invalid length. [ 462.278721][T15556] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2472'. [ 462.320101][T15563] ip6tnl6: entered allmulticast mode [ 462.727360][T15587] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2481'. [ 462.753215][T15593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2481'. [ 462.763516][T15592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2481'. [ 462.774897][T15589] netlink: 'syz.2.2480': attribute type 1 has an invalid length. [ 462.783680][T15589] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2480'. [ 462.801743][T15595] sctp: [Deprecated]: syz.5.2482 (pid 15595) Use of int in maxseg socket option. [ 462.801743][T15595] Use struct sctp_assoc_value instead [ 462.829559][T15596] netlink: 'syz.1.2483': attribute type 16 has an invalid length. [ 462.998152][T11976] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 463.098353][T11976] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 463.170328][T11976] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 463.202095][T15614] netlink: 'syz.1.2487': attribute type 13 has an invalid length. [ 463.280697][ T5732] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 463.708885][T11976] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 463.954886][T15650] netlink: 'syz.1.2496': attribute type 16 has an invalid length. [ 463.965443][T15652] Cannot find set identified by id 65534 to match [ 464.214946][T15652] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.026560][T15691] netlink: 'syz.5.2509': attribute type 10 has an invalid length. [ 465.035341][T15691] openvswitch: netlink: Flow key attr not present in new flow. [ 465.744862][T15736] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 465.763243][T15736] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.095441][T15751] netlink: 'syz.1.2526': attribute type 1 has an invalid length. [ 466.150788][T15754] x_tables: duplicate underflow at hook 2 [ 466.336449][T15758] syzkaller0: entered promiscuous mode [ 466.344902][T15758] syzkaller0: entered allmulticast mode [ 466.392401][T15760] geneve0: Caught tx_queue_len zero misconfig [ 466.521965][T15767] netlink: 'syz.0.2534': attribute type 3 has an invalid length. [ 466.532418][T15767] netlink: 'syz.0.2534': attribute type 3 has an invalid length. [ 466.813368][T15787] netlink: zone id is out of range [ 466.835774][T15787] netlink: zone id is out of range [ 466.856137][T15787] netlink: zone id is out of range [ 466.883799][T15787] netlink: zone id is out of range [ 466.926441][T15787] netlink: zone id is out of range [ 466.963445][T15781] syzkaller0: entered promiscuous mode [ 466.991900][T15787] netlink: zone id is out of range [ 466.999493][T15781] syzkaller0: entered allmulticast mode [ 467.015983][T15787] netlink: zone id is out of range [ 467.088473][T15781] __nla_validate_parse: 11 callbacks suppressed [ 467.088493][T15781] netlink: 124 bytes leftover after parsing attributes in process `syz.6.2536'. [ 467.130306][T15800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2540'. [ 467.790205][T15825] x_tables: duplicate underflow at hook 1 [ 467.827534][T15825] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20002 [ 468.473311][T15851] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2554'. [ 468.506252][T15851] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2554'. [ 468.690842][T15858] syzkaller0: entered promiscuous mode [ 468.704056][T15858] syzkaller0: entered allmulticast mode [ 468.980121][T15877] tipc: Enabling of bearer rejected, failed to enable media [ 469.261950][T15897] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2568'. [ 469.418088][T15904] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2570'. [ 469.431750][T15904] netlink: 'syz.6.2570': attribute type 7 has an invalid length. [ 469.456369][T15904] netlink: 'syz.6.2570': attribute type 8 has an invalid length. [ 469.489516][T15904] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2570'. [ 469.523714][T15904] erspan0: entered promiscuous mode [ 469.544059][T15904] gretap0: entered promiscuous mode [ 469.741871][T15904] erspan0: left promiscuous mode [ 469.764512][T15904] gretap0: left promiscuous mode [ 470.002696][T15921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 470.113086][T15936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2580'. [ 470.194422][T15943] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2580'. [ 470.452719][T15964] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2585'. [ 470.687608][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 470.882447][T15970] syzkaller0: entered promiscuous mode [ 470.888282][T15970] syzkaller0: entered allmulticast mode [ 473.396819][T15956] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 474.187979][T16042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2601'. [ 474.418836][T16055] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2606'. [ 474.460443][T16054] xt_hashlimit: size too large, truncated to 1048576 [ 474.606336][T16062] netlink: 'syz.0.2608': attribute type 4 has an invalid length. [ 474.840945][ T9216] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 474.852012][ T9216] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 474.885500][ T9216] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 474.911942][ T9216] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 475.082935][T16077] veth0: entered promiscuous mode [ 475.090782][T16079] net_ratelimit: 5 callbacks suppressed [ 475.090798][T16079] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.103350][T16076] veth0: left promiscuous mode [ 475.126844][T16079] xt_l2tp: v2 doesn't support IP mode [ 475.167652][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 475.601384][T16114] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2624'. [ 475.947295][T16126] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2628'. [ 476.055712][T16130] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2629'. [ 477.428623][T16178] x_tables: duplicate underflow at hook 1 [ 477.960175][T16210] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2650'. [ 478.233872][T16229] syzkaller1: entered promiscuous mode [ 478.251290][T16229] syzkaller1: entered allmulticast mode [ 478.264434][T16229] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2657'. [ 478.274380][T16229] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2657'. [ 478.284817][T16229] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2657'. [ 478.459189][T16238] netlink: 'syz.5.2660': attribute type 3 has an invalid length. [ 478.466981][T16238] netlink: 'syz.5.2660': attribute type 16 has an invalid length. [ 478.474975][T16238] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2660'. [ 478.515205][T16238] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 478.529127][T16238] syzkaller1: linktype set to 1 [ 478.774107][T16251] netlink: 'syz.1.2663': attribute type 2 has an invalid length. [ 478.917973][T16260] netlink: 'syz.0.2665': attribute type 1 has an invalid length. [ 479.069163][T16264] gretap1: entered allmulticast mode [ 479.081203][T16264] bond8: (slave gretap1): making interface the new active one [ 479.092196][T16264] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 479.243835][T16259] syzkaller0: entered promiscuous mode [ 479.251552][T16259] syzkaller0: entered allmulticast mode [ 479.289279][T16282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2669'. [ 479.423896][T16284] netlink: 'syz.6.2671': attribute type 1 has an invalid length. [ 481.805313][T16284] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 482.030837][T16303] netlink: zone id is out of range [ 482.043630][T16301] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2676'. [ 482.083869][T16303] netlink: zone id is out of range [ 482.100123][T16303] netlink: zone id is out of range [ 482.105460][T16303] netlink: zone id is out of range [ 482.120693][T16303] netlink: zone id is out of range [ 482.146846][T16303] netlink: zone id is out of range [ 482.149506][T16304] bond6: entered allmulticast mode [ 482.158095][T16303] netlink: zone id is out of range [ 482.163658][T16303] netlink: zone id is out of range [ 482.165213][T16307] tunl0: Caught tx_queue_len zero misconfig [ 482.172605][T16303] netlink: zone id is out of range [ 482.181016][T16303] netlink: zone id is out of range [ 482.234627][T16298] gre3: entered promiscuous mode [ 482.252469][T16298] gre3: entered allmulticast mode [ 482.259663][T16315] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2674'. [ 482.269594][T16298] bond6: (slave gre3): The slave device specified does not support setting the MAC address [ 482.302494][T16298] bond6: (slave gre3): Error -95 calling set_mac_address [ 482.344372][T16317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2678'. [ 482.366298][T16317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2678'. [ 482.442097][T16317] geneve4: entered promiscuous mode [ 482.454224][T16317] geneve4: entered allmulticast mode [ 482.467160][T16304] syzkaller0: entered promiscuous mode [ 482.478073][T16304] syzkaller0: entered allmulticast mode [ 482.573297][T16325] netlink: 766 bytes leftover after parsing attributes in process `syz.2.2681'. [ 482.865259][T16359] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2690'. [ 482.925073][T16349] netlink: 216 bytes leftover after parsing attributes in process `syz.5.2688'. [ 483.010470][T16351] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2688'. [ 483.053314][T16351] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2688'. [ 484.440584][T16437] erspan0: left allmulticast mode [ 484.474927][T16437] erspan0: left promiscuous mode [ 484.506152][T16437] bridge4: port 1(erspan0) entered disabled state [ 484.513680][T16435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 484.572180][T16437] bond1: (slave veth0_to_bond): Releasing active interface [ 484.689457][T16437] team0: Port device team_slave_0 removed [ 484.736768][T16437] team0: Port device team_slave_1 removed [ 484.770664][T16437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.778743][T16437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.811568][T16437] macvlan0: left allmulticast mode [ 484.823973][T16437] macvlan0: left promiscuous mode [ 484.843782][T16437] bridge0: port 1(macvlan0) entered disabled state [ 484.925810][T16437] bond2: (slave bridge1): Removing an active aggregator [ 484.965697][T16437] bond2: (slave bridge1): Releasing backup interface [ 484.992638][T16437] bridge1: left promiscuous mode [ 485.006900][T16437] bridge1: left allmulticast mode [ 485.051890][ T5624] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 485.060692][T11989] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 485.074490][ T5624] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 485.085453][ T5624] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 485.095884][ T5624] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 485.106178][ T5624] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 485.120819][T16437] bond6: (slave bond7): Releasing backup interface [ 485.172325][T16437] bond6: (slave bond7): the permanent HWaddr of slave - 76:f4:5c:8e:d9:b6 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 485.278985][T16437] bond7: left promiscuous mode [ 485.289962][T16437] bond6: (slave bridge5): Releasing backup interface [ 485.302694][T16437] bridge5: left promiscuous mode [ 485.329953][T11974] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 485.333419][T16454] IPVS: Error connecting to the multicast addr [ 485.942064][T16494] netlink: 'syz.6.2725': attribute type 4 has an invalid length. [ 486.246833][T16479] syzkaller1: entered promiscuous mode [ 486.255022][T16479] syzkaller1: entered allmulticast mode [ 486.324374][T16515] xt_CT: You must specify a L4 protocol and not use inversions on it [ 487.045010][T16537] syzkaller0: entered promiscuous mode [ 487.055068][T16537] syzkaller0: entered allmulticast mode [ 487.076292][T16464] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.084200][T16464] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.092628][T16464] bridge_slave_0: entered allmulticast mode [ 487.101009][T16464] bridge_slave_0: entered promiscuous mode [ 487.113211][T16537] tipc: Started in network mode [ 487.120593][T16537] tipc: Node identity 16053ee061e2, cluster identity 4711 [ 487.128634][T16537] tipc: Enabled bearer , priority 0 [ 487.140956][T16464] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.153934][T16464] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.161700][T16464] bridge_slave_1: entered allmulticast mode [ 487.167782][ T5624] Bluetooth: hci7: command tx timeout [ 487.179438][T16464] bridge_slave_1: entered promiscuous mode [ 487.214266][T16537] tipc: Resetting bearer [ 487.272050][T16536] tipc: Resetting bearer [ 487.306712][T16536] tipc: Disabling bearer [ 487.324423][T16464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.351215][T16464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.486735][T16464] team0: Port device team_slave_0 added [ 487.521143][T16464] team0: Port device team_slave_1 added [ 487.767013][T16569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2744'. [ 487.909558][T16557] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.917293][T16557] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.042242][T16557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.066654][T16557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.179818][T16557] bridge1: left promiscuous mode [ 488.184798][T16557] bridge1: left allmulticast mode [ 488.191101][T16557] bridge2: left promiscuous mode [ 488.196070][T16557] bridge2: left allmulticast mode [ 488.289409][T11982] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 488.458873][T16569] veth0_macvtap: left promiscuous mode [ 488.509785][T16580] TCP: TCP_TX_DELAY enabled [ 488.582831][ T13] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.592923][ T13] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.604101][ T13] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.624122][ T13] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.645257][T16464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.646098][T16585] netlink: 'syz.5.2748': attribute type 13 has an invalid length. [ 488.652653][T16464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.652686][T16464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.655862][T16464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.709431][T16464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.739526][T16464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.765895][ T13] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.779738][ T13] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.790955][ T13] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.800140][ T13] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.877142][T11974] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 488.889311][T11974] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 488.988900][T16464] hsr_slave_0: entered promiscuous mode [ 488.995836][T16464] hsr_slave_1: entered promiscuous mode [ 489.003309][T16464] debugfs: 'hsr0' already exists in 'hsr' [ 489.013420][T16464] Cannot create hsr debugfs directory [ 489.025018][T16598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2751'. [ 489.060362][T16598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2751'. [ 489.088079][T11984] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 489.154551][T16596] xt_CT: You must specify a L4 protocol and not use inversions on it [ 489.249571][ T5624] Bluetooth: hci7: command tx timeout [ 489.264075][T16595] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 489.346599][T16617] net_ratelimit: 9 callbacks suppressed [ 489.346620][T16617] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 489.429968][T11989] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 489.579310][T11989] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 489.730485][T16632] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2758'. [ 489.887805][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 490.011364][T16643] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2761'. [ 490.032852][T16639] bridge6: entered promiscuous mode [ 490.062530][T16639] bridge6: entered allmulticast mode [ 490.091211][T16639] team0: Port device bridge6 added [ 490.148201][T16634] bridge7: entered promiscuous mode [ 490.160338][T16634] bridge7: entered allmulticast mode [ 490.188582][T16634] team0: Port device bridge7 added [ 490.228104][T16655] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2762'. [ 490.452734][T16655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.563232][T16653] syzkaller1: entered promiscuous mode [ 490.591972][T16653] syzkaller1: entered allmulticast mode [ 490.806730][T16688] syzkaller0: entered promiscuous mode [ 490.829256][T16688] syzkaller0: entered allmulticast mode [ 490.846797][T16679] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2769'. [ 491.165146][T16696] syzkaller0: entered promiscuous mode [ 491.198117][T16696] syzkaller0: entered allmulticast mode [ 491.281025][T16696] tipc: Enabled bearer , priority 0 [ 491.308780][T16706] tipc: Enabling of bearer rejected, failed to enable media [ 491.318796][T16696] veth0_macvtap: mtu less than device minimum [ 491.332748][ T5624] Bluetooth: hci7: command tx timeout [ 491.349884][T16695] tipc: Resetting bearer [ 491.383983][T16695] tipc: Disabling bearer [ 491.399654][T16708] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2776'. [ 491.419304][T16708] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2776'. [ 491.721540][T16716] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2779'. [ 491.766716][T16716] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 491.803494][T16464] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 491.849221][T16464] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 491.869439][T16464] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 491.910229][T16464] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 491.931424][T16464] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 491.961361][T16464] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 491.990642][T16464] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 492.022602][T16464] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 492.413703][T16464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.468773][T16464] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.522616][ T6200] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.529858][ T6200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.601197][ T6200] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.608438][ T6200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.894608][T16761] batadv_slave_0: Caught tx_queue_len zero misconfig [ 493.094821][T16773] tipc: New replicast peer: 255.255.255.255 [ 493.127294][T16773] tipc: Enabled bearer , priority 10 [ 493.418419][ T5624] Bluetooth: hci7: command tx timeout [ 493.598700][T16785] __nla_validate_parse: 2 callbacks suppressed [ 493.598719][T16785] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2796'. [ 493.619404][T16789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.960331][T16464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.105785][T16464] veth0_vlan: entered promiscuous mode [ 494.122672][T11976] tipc: Node number set to 2011643616 [ 494.154507][T16464] veth1_vlan: entered promiscuous mode [ 494.216436][T16464] veth0_macvtap: entered promiscuous mode [ 494.246908][T16464] veth1_macvtap: entered promiscuous mode [ 494.319536][T16464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.383800][T16464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.436404][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.463219][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.482987][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.502575][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.728730][T16833] dummy0: mtu less than device minimum [ 494.785403][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.823422][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.952173][ T9218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.001005][ T9218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.185173][T16865] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2817'. [ 495.324430][T16865] batadv0: entered promiscuous mode [ 495.360333][T16865] 8021q: adding VLAN 0 to HW filter on device macsec3 [ 495.484401][T16881] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2817'. [ 495.554922][T16865] netlink: 'syz.5.2817': attribute type 21 has an invalid length. [ 495.602243][T16865] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2817'. [ 495.661642][T16865] netlink: 'syz.5.2817': attribute type 5 has an invalid length. [ 495.683144][T16865] netlink: 'syz.5.2817': attribute type 6 has an invalid length. [ 495.691907][T16886] netlink: 'syz.1.2820': attribute type 2 has an invalid length. [ 495.711618][T16865] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2817'. [ 495.786008][T16891] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2822'. [ 495.801843][T16884] syzkaller0: entered promiscuous mode [ 495.810407][T16884] syzkaller0: entered allmulticast mode [ 495.940878][T16891] syzkaller1: entered promiscuous mode [ 495.957695][T16891] syzkaller1: entered allmulticast mode [ 496.044571][T16891] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2822'. [ 496.072863][T16891] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2822'. [ 496.108505][T16891] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2822'. [ 496.414402][T16913] syzkaller0: entered promiscuous mode [ 496.428314][T16913] syzkaller0: entered allmulticast mode [ 496.448488][T16913] tipc: Started in network mode [ 496.463732][T16913] tipc: Node identity aa946fda0f18, cluster identity 4711 [ 496.482219][T16913] tipc: Enabled bearer , priority 0 [ 496.550311][T16918] netlink: 'syz.6.2830': attribute type 11 has an invalid length. [ 496.578071][T16918] netlink: 'syz.6.2830': attribute type 4 has an invalid length. [ 496.604508][T16918] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2830'. [ 496.701964][T16913] tipc: Resetting bearer [ 497.229386][T16907] tipc: Resetting bearer [ 497.288620][T16907] tipc: Disabling bearer [ 497.497063][T16936] netlink: 'syz.2.2834': attribute type 5 has an invalid length. [ 498.004573][T16968] 8021q: adding VLAN 0 to HW filter on device bond7 [ 498.081953][T16968] 8021q: adding VLAN 0 to HW filter on device bond7 [ 498.101776][T16968] bond7: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 498.144640][T16968] bond7: (slave ip_vti0): Error -95 calling set_mac_address [ 498.193269][T16964] bond7: entered promiscuous mode [ 498.222196][T16964] bond7: entered allmulticast mode [ 498.766224][T17000] Cannot find add_set index 1 as target [ 498.802320][T17000] __nla_validate_parse: 6 callbacks suppressed [ 498.802340][T17000] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2851'. [ 499.001767][T17011] netlink: 'syz.5.2854': attribute type 1 has an invalid length. [ 499.161237][T17017] netlink: 'syz.5.2856': attribute type 61 has an invalid length. [ 499.178034][T17017] netlink: 'syz.5.2856': attribute type 62 has an invalid length. [ 499.320653][T17025] netlink: 'syz.2.2858': attribute type 1 has an invalid length. [ 499.340800][T17025] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2858'. [ 499.575701][T17030] syzkaller0: entered promiscuous mode [ 499.593154][T17030] syzkaller0: entered allmulticast mode [ 499.645439][T17030] pimreg9: entered allmulticast mode [ 499.661142][T17034] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2861'. [ 500.314539][T17059] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 500.335483][T17047] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 500.545163][T17068] syzkaller0: entered promiscuous mode [ 500.545468][T17069] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 500.553271][T17068] syzkaller0: entered allmulticast mode [ 500.615655][T17068] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 500.734866][T17076] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2874'. [ 500.888713][T17080] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2875'. [ 501.316488][T17103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2882'. [ 501.348170][T17103] Cannot find set identified by id 65534 to match [ 501.411947][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 501.543296][T17119] x_tables: duplicate entry at hook 1 [ 502.133458][T17153] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20000 [ 502.389701][T17167] ipt_ECN: cannot use operation on non-tcp rule [ 502.635562][T17179] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2903'. [ 502.718783][T11980] hid-generic 0005:0007:0007.0001: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 502.890582][ T5622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 502.906476][ T5622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 502.915811][ T5622] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 502.932685][ T5622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 502.943020][ T5622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 503.874045][T17225] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2914'. [ 503.906791][ T1172] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.919541][ T1172] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.971447][ T1172] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 504.436437][T17223] validate_nla: 1 callbacks suppressed [ 504.436452][T17223] netlink: 'syz.6.2913': attribute type 1 has an invalid length. [ 504.603228][T17240] pimreg: entered allmulticast mode [ 504.830749][ T1172] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.864021][ T1172] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.894406][ T1172] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 504.999437][T17255] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2919'. [ 505.018315][ T5624] Bluetooth: hci2: command tx timeout [ 505.142083][ T1172] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.178386][ T1172] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.201484][ T1172] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 505.316239][ T1172] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.335930][ T1172] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.346142][ T1172] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 506.528571][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 506.803535][T17347] netlink: 'syz.5.2933': attribute type 30 has an invalid length. [ 506.930881][T17354] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2936'. [ 506.936931][T17352] netlink: 1363 bytes leftover after parsing attributes in process `syz.5.2933'. [ 507.088118][ T5624] Bluetooth: hci2: command tx timeout [ 507.251360][ T1172] bond7 (unregistering): (slave gretap1): Releasing active interface [ 507.260220][ T1172] gretap1 (unregistering): left allmulticast mode [ 507.327154][ T1172] bond4 (unregistering): (slave geneve3): Releasing active interface [ 507.335915][ T1172] geneve3 (unregistering): left allmulticast mode [ 507.436716][ T1172] team0: Port device bridge6 removed [ 507.452950][ T1172] team0: Port device bridge7 removed [ 507.486960][ T1172] bond0 (unregistering): Released all slaves [ 507.501292][ T1172] bond1 (unregistering): Released all slaves [ 507.520586][ T1172] bond2 (unregistering): Released all slaves [ 507.537234][ T1172] bond3 (unregistering): Released all slaves [ 507.557329][ T1172] bond4 (unregistering): Released all slaves [ 507.583452][ T1172] bond5 (unregistering): Released all slaves [ 507.597263][ T1172] bond6 (unregistering): Released all slaves [ 507.611880][ T1172] bond7 (unregistering): Released all slaves [ 507.634244][ T1172] bond8 (unregistering): Released all slaves [ 507.652190][ T1172] bond9 (unregistering): (slave veth0_to_bond): Releasing active interface [ 507.664681][ T1172] bond9 (unregistering): Released all slaves [ 507.681411][ T1172] bond10 (unregistering): Released all slaves [ 507.761376][T17332] vxcan3: entered allmulticast mode [ 507.981898][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 508.063458][ T1172] tipc: Left network mode [ 508.182241][T17184] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.210367][T17184] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.226671][T17184] bridge_slave_0: entered allmulticast mode [ 508.254186][T17184] bridge_slave_0: entered promiscuous mode [ 508.383896][T17184] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.408808][T17184] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.430876][T17184] bridge_slave_1: entered allmulticast mode [ 508.441788][T17184] bridge_slave_1: entered promiscuous mode [ 508.721416][T17184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.775267][T17184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.815697][T17393] team0: Port device syz_tun added [ 508.919801][T17399] ªªªªªª: renamed from vlan0 (while UP) [ 509.032139][T17409] netlink: 'syz.6.2950': attribute type 1 has an invalid length. [ 509.123473][T17184] team0: Port device team_slave_0 added [ 509.167947][ T5624] Bluetooth: hci2: command tx timeout [ 509.253964][T17414] bridge1: entered promiscuous mode [ 509.265046][T17414] bridge1: entered allmulticast mode [ 509.294865][T17184] team0: Port device team_slave_1 added [ 509.538500][T17184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.554144][T17184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.586005][T17184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.692580][T17184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.717300][T17184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.754048][T17184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.787316][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 509.795185][T17451] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2959'. [ 510.023068][ T1172] veth1_to_batadv: left promiscuous mode [ 510.040770][ T1172] veth1_macvtap: left promiscuous mode [ 510.055116][ T1172] veth1_vlan: left promiscuous mode [ 510.071715][ T1172] veth0_vlan: left promiscuous mode [ 511.248101][ T5624] Bluetooth: hci2: command tx timeout [ 511.623902][T17184] hsr_slave_0: entered promiscuous mode [ 511.641457][T17184] hsr_slave_1: entered promiscuous mode [ 511.663413][T17184] debugfs: 'hsr0' already exists in 'hsr' [ 511.678032][T17184] Cannot create hsr debugfs directory [ 512.159829][T17486] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2968'. [ 512.308972][T17499] IPVS: set_ctl: invalid protocol: 31091 97.108.108.101:29232 [ 512.355150][T17508] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2970'. [ 512.414625][T17506] netlink: 'syz.0.2973': attribute type 21 has an invalid length. [ 512.459178][T17506] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2973'. [ 512.534257][T17506] netlink: 'syz.0.2973': attribute type 4 has an invalid length. [ 512.542874][T17506] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2973'. [ 512.649161][ T1172] IPVS: stop unused estimator thread 0... [ 513.162008][T17539] netlink: 6024 bytes leftover after parsing attributes in process `syz.6.2978'. [ 513.564190][T17564] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2983'. [ 513.704363][T17577] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2986'. [ 513.815680][T17577] 8021q: adding VLAN 0 to HW filter on device bond11 [ 513.842845][T17585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2986'. [ 513.924478][T17580] 8021q: adding VLAN 0 to HW filter on device bond12 [ 513.960973][T17580] bond11: (slave bond12): Enslaving as an active interface with an up link [ 513.984767][T17573] netlink: 'syz.6.2985': attribute type 1 has an invalid length. [ 514.054571][T17585] bond11 (unregistering): (slave bond12): Releasing backup interface [ 514.073751][T17585] bond11 (unregistering): Released all slaves [ 514.767528][T17624] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2991'. [ 514.812509][T17624] netlink: 'syz.2.2991': attribute type 7 has an invalid length. [ 515.042117][T17637] syzkaller0: entered promiscuous mode [ 515.059269][T17637] syzkaller0: entered allmulticast mode [ 515.116210][T17639] vlan2: entered promiscuous mode [ 515.136351][T17639] bridge0: entered promiscuous mode [ 515.161163][T17184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 515.193276][T17184] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 515.222877][T17637] tipc: Enabled bearer , priority 0 [ 515.256912][T17184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 515.290942][T17184] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 515.318294][T17637] tipc: Resetting bearer [ 515.365135][T17184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 515.405262][T17184] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 515.440013][T17184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 515.478966][T17184] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 515.491592][T17645] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2997'. [ 515.524809][T17634] tipc: Resetting bearer [ 515.585510][T17634] tipc: Disabling bearer [ 516.204416][T17699] netlink: 'syz.2.3002': attribute type 21 has an invalid length. [ 516.350917][T17184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.620812][T17184] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.696990][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.704286][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.785033][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.793728][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.205177][T17720] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3006'. [ 517.241367][T17720] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3006'. [ 517.306107][T17732] netlink: 112 bytes leftover after parsing attributes in process `syz.5.3009'. [ 517.681700][T17743] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3012'. [ 518.150391][T17779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3017'. [ 518.718496][T17799] veth0: entered promiscuous mode [ 518.725062][T17798] netlink: 'syz.6.3022': attribute type 13 has an invalid length. [ 518.792929][T17184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.802486][T17799] veth0: left promiscuous mode [ 519.060104][T17184] veth0_vlan: entered promiscuous mode [ 519.169246][T17184] veth1_vlan: entered promiscuous mode [ 519.228741][T17829] syzkaller0: entered promiscuous mode [ 519.234465][T17829] syzkaller0: entered allmulticast mode [ 519.271603][T17832] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3032'. [ 519.307000][T17832] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3032'. [ 519.314324][T17184] veth0_macvtap: entered promiscuous mode [ 519.323843][T17832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3032'. [ 519.331733][T17184] veth1_macvtap: entered promiscuous mode [ 519.380432][T17832] veth3: entered allmulticast mode [ 519.420161][T17184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.434377][T17184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.457293][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.484458][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.519912][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.552122][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.642021][T17839] syzkaller0: entered promiscuous mode [ 519.658100][T17839] syzkaller0: entered allmulticast mode [ 519.833179][ T6198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.842976][ T6198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.926165][ T9216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.956239][ T9216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.106010][T17856] bridge0: port 1(veth1_to_bridge) entered blocking state [ 520.114676][T17856] bridge0: port 1(veth1_to_bridge) entered disabled state [ 520.125710][T17856] veth1_to_bridge: entered allmulticast mode [ 520.137030][T17856] veth1_to_bridge: entered promiscuous mode [ 520.150350][T17856] bridge0: port 1(veth1_to_bridge) entered blocking state [ 520.157705][T17856] bridge0: port 1(veth1_to_bridge) entered forwarding state [ 520.207335][T17862] bond0: (slave wlan0): Error: Slave does not support XDP [ 520.238638][T17866] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3040'. [ 520.293813][T17868] sctp: [Deprecated]: syz.6.3040 (pid 17868) Use of struct sctp_assoc_value in delayed_ack socket option. [ 520.293813][T17868] Use struct sctp_sack_info instead [ 520.362730][T17866] sctp: [Deprecated]: syz.6.3040 (pid 17866) Use of struct sctp_assoc_value in delayed_ack socket option. [ 520.362730][T17866] Use struct sctp_sack_info instead [ 520.734892][ T5622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 520.761674][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 520.780010][ T5622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 520.792900][ T5622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 520.802159][ T5622] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 521.164070][T17890] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3045'. [ 521.205224][T17886] wlan0: renamed from ip6tnl0 (while UP) [ 521.231489][T17886] wlan0: entered promiscuous mode [ 521.273064][T17888] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3045'. [ 521.297324][T17886] wlan0: entered allmulticast mode [ 521.319432][T17886] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3045'. [ 521.332756][T17886] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 521.475806][T17904] netlink: 'syz.6.3049': attribute type 1 has an invalid length. [ 521.612816][T17904] 8021q: adding VLAN 0 to HW filter on device bond1 [ 522.194245][T17931] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3056'. [ 522.258996][T17933] xt_hashlimit: size too large, truncated to 1048576 [ 522.308435][T17934] netlink: 'syz.5.3056': attribute type 1 has an invalid length. [ 522.522250][T17941] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3057'. [ 522.840450][T17882] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.857208][T17882] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.883372][T17882] bridge_slave_0: entered allmulticast mode [ 522.899663][T17882] bridge_slave_0: entered promiscuous mode [ 522.915984][T17882] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.932442][T17882] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.935688][ T5622] Bluetooth: hci0: command tx timeout [ 522.948209][T17882] bridge_slave_1: entered allmulticast mode [ 522.950112][T17882] bridge_slave_1: entered promiscuous mode [ 522.994715][T17882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.029607][T17882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.374942][T17964] geneve0: entered promiscuous mode [ 523.395123][T17964] macvlan2: entered promiscuous mode [ 523.429292][T17882] team0: Port device team_slave_0 added [ 523.459379][T17882] team0: Port device team_slave_1 added [ 523.627127][T17882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.666936][T17882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.730259][T17882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.762648][T17882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.778318][T17882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.842825][T17882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.937171][T17996] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3070'. [ 523.998851][T17882] hsr_slave_0: entered promiscuous mode [ 524.016524][T17882] hsr_slave_1: entered promiscuous mode [ 524.025634][T18002] xt_hashlimit: size too large, truncated to 1048576 [ 524.032454][T17882] debugfs: 'hsr0' already exists in 'hsr' [ 524.032478][T17882] Cannot create hsr debugfs directory [ 524.360020][T18010] netlink: 'syz.0.3072': attribute type 1 has an invalid length. [ 524.429674][T17882] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.451538][T17882] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 524.491326][T18013] sctp: [Deprecated]: syz.0.3073 (pid 18013) Use of struct sctp_assoc_value in delayed_ack socket option. [ 524.491326][T18013] Use struct sctp_sack_info instead [ 524.622210][T11984] IPVS: starting estimator thread 0... [ 524.634692][T17882] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.648038][T17882] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 524.672835][T18018] veth0_to_bridge: entered promiscuous mode [ 524.696776][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.728041][T18019] IPVS: using max 28 ests per chain, 67200 per kthread [ 524.837256][T18023] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3077'. [ 524.858705][T17882] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.873538][T17882] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 525.008765][ T5622] Bluetooth: hci0: command tx timeout [ 525.038253][T17882] netdevsim netdevsim2 €Â (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 525.048793][T18032] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3079'. [ 525.058630][T17882] netdevsim netdevsim2 €Â (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 525.069434][T18032] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3079'. [ 525.292737][T18039] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 525.600000][T18053] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3084'. [ 525.778044][T17882] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 525.803931][T17882] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 525.819957][T17882] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 525.839124][T17882] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 525.851132][T17882] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 525.881612][T17882] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 525.897152][T17882] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 525.966088][T17882] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 526.017146][T18062] xt_hashlimit: size too large, truncated to 1048576 [ 526.202403][T18080] __nla_validate_parse: 1 callbacks suppressed [ 526.202423][T18080] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3091'. [ 526.203347][T18077] bridge4: entered promiscuous mode [ 526.241138][T18074] can: request_module (can-proto-3) failed. [ 526.264302][T18077] bridge4: entered allmulticast mode [ 526.284156][T18083] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3091'. [ 526.297188][T18077] team0: Port device bridge4 added [ 526.374916][T18077] bridge0: port 3(team0) entered blocking state [ 526.427046][T18077] bridge0: port 3(team0) entered disabled state [ 526.449636][T18077] team0: entered allmulticast mode [ 526.465347][T18077] team_slave_0: entered allmulticast mode [ 526.472491][T18077] team_slave_1: entered allmulticast mode [ 526.485822][T18077] bridge1: entered allmulticast mode [ 526.492196][T18077] bridge2: entered allmulticast mode [ 526.499257][T18077] syz_tun: entered allmulticast mode [ 526.509387][T18077] team0: entered promiscuous mode [ 526.514488][T18077] team_slave_0: entered promiscuous mode [ 526.521362][T18077] team_slave_1: entered promiscuous mode [ 526.527355][T18077] bridge1: entered promiscuous mode [ 526.535779][T18077] bridge2: entered promiscuous mode [ 526.542231][T18077] syz_tun: entered promiscuous mode [ 526.555704][ T6199] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.590437][ T6199] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.606050][ T6199] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.632274][ T6199] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.712551][T17882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.756347][T17882] 8021q: adding VLAN 0 to HW filter on device team0 [ 526.776974][ T6199] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.784174][ T6199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.811312][ T6199] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.818615][ T6199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.961359][T18101] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3096'. [ 527.088310][ T5622] Bluetooth: hci0: command tx timeout [ 527.618700][T18117] sctp: [Deprecated]: syz.0.3099 (pid 18117) Use of struct sctp_assoc_value in delayed_ack socket option. [ 527.618700][T18117] Use struct sctp_sack_info instead [ 527.773410][T18126] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3102'. [ 527.906841][T17882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.027172][T17882] veth0_vlan: entered promiscuous mode [ 528.054452][T18143] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 528.060995][T18143] syzkaller1: linktype set to 823 [ 528.072919][T17882] veth1_vlan: entered promiscuous mode [ 528.182040][T17882] veth0_macvtap: entered promiscuous mode [ 528.220059][T17882] veth1_macvtap: entered promiscuous mode [ 528.286836][T18153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3110'. [ 528.317694][T17882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.356675][T17882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.373501][T18155] bridge0: port 4(netdevsim1) entered blocking state [ 528.384579][T18155] bridge0: port 4(netdevsim1) entered disabled state [ 528.393102][T18155] netdevsim netdevsim6 netdevsim1: entered allmulticast mode [ 528.405774][T18155] netdevsim netdevsim6 netdevsim1: entered promiscuous mode [ 528.431717][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.463344][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.493464][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.522350][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.769635][ T9216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.776600][T18164] netlink: 'syz.1.3114': attribute type 10 has an invalid length. [ 528.802865][ T9216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.830576][T18164] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 528.877952][T18169] syzkaller0: entered promiscuous mode [ 528.881203][ T9216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.884163][T18169] syzkaller0: entered allmulticast mode [ 528.909121][ T9216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.928273][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 528.992830][T18169] tipc: Enabled bearer , priority 0 [ 529.041671][T18169] tipc: Resetting bearer [ 529.075662][T18181] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3119'. [ 529.096473][T18168] tipc: Resetting bearer [ 529.135142][T18185] netlink: 'syz.5.3119': attribute type 1 has an invalid length. [ 529.150844][T18168] tipc: Disabling bearer [ 529.168089][ T5622] Bluetooth: hci0: command tx timeout [ 529.205294][T18185] 8021q: adding VLAN 0 to HW filter on device bond8 [ 529.344837][T18181] bond8: (slave veth14): Enslaving as an active interface with a down link [ 529.477039][T18185] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 529.507183][T18185] bond8: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 529.594374][T18182] netlink: 'syz.1.3117': attribute type 1 has an invalid length. [ 529.711609][T18212] netlink: 'syz.6.3126': attribute type 15 has an invalid length. [ 529.826577][T18218] netlink: 'syz.2.3128': attribute type 1 has an invalid length. [ 529.851494][T18215] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3127'. [ 530.523675][T18251] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3138'. [ 531.072678][T18271] netlink: 'syz.2.3144': attribute type 33 has an invalid length. [ 531.880319][T18306] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3152'. [ 531.960875][T18308] Cannot find add_set index 0 as target [ 532.041059][T18315] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3154'. [ 532.796900][T18346] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3165'. [ 532.814026][T18346] gretap0: entered promiscuous mode [ 532.866146][T18346] syzkaller0: entered promiscuous mode [ 532.875311][T18346] syzkaller0: entered allmulticast mode [ 532.895239][T18352] Bluetooth: MGMT ver 1.23 [ 532.903054][T18346] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3165'. [ 532.930713][T18346] 0ªî{X¹¦: renamed from gretap0 [ 532.949934][T18346] 0ªî{X¹¦: left promiscuous mode [ 532.969068][T18346] 0ªî{X¹¦: entered allmulticast mode [ 532.985242][T18346] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 533.260556][T18361] syzkaller0: entered promiscuous mode [ 533.275578][T18361] syzkaller0: entered allmulticast mode [ 533.652193][T18384] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3176'. [ 533.930331][T18391] bond2 (unregistering): Released all slaves [ 534.196003][T18407] tipc: Enabled bearer , priority 0 [ 534.221085][T18418] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3185'. [ 534.261426][T18405] tipc: Disabling bearer [ 534.429384][T18430] ip6tnl0: entered promiscuous mode [ 534.502567][T18433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3188'. [ 534.530920][T18436] batadv_slave_0: Caught tx_queue_len zero misconfig [ 534.543152][T18433] IPv6: NLM_F_CREATE should be specified when creating new route [ 534.572968][T18433] IPv6: Can't replace route, no match found [ 534.601591][T18433] netlink: 'syz.0.3188': attribute type 25 has an invalid length. [ 534.852060][T18441] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3191'. [ 535.267351][T18469] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3192'. [ 535.442304][T18468] xt_CT: No such helper "snmp_trap" [ 535.794333][T18495] tipc: Enabled bearer , priority 0 [ 535.900801][T18487] tipc: Disabling bearer [ 536.071209][T18504] sctp: [Deprecated]: syz.0.3204 (pid 18504) Use of struct sctp_assoc_value in delayed_ack socket option. [ 536.071209][T18504] Use struct sctp_sack_info instead [ 536.371320][T18525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3210'. [ 536.902945][T18552] __nla_validate_parse: 1 callbacks suppressed [ 536.902963][T18552] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3220'. [ 537.119079][T18556] netlink: 'syz.5.3222': attribute type 7 has an invalid length. [ 537.321896][T18565] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3225'. [ 537.356342][T18566] netlink: 'syz.0.3224': attribute type 10 has an invalid length. [ 537.414452][T18566] team0: Port device ªªªªªª added [ 537.467000][T18571] netlink: 'syz.1.3227': attribute type 1 has an invalid length. [ 537.621124][T18583] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3229'. [ 537.883069][T18601] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3234'. [ 537.930547][T18585] 8021q: adding VLAN 0 to HW filter on device bond9 [ 538.001800][T18608] netlink: 'syz.2.3235': attribute type 1 has an invalid length. [ 538.014397][T18586] bond9: (slave veth1): Enslaving as an active interface with an up link [ 538.233149][T18615] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3237'. [ 538.246097][T18615] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3237'. [ 538.479463][T18633] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3242'. [ 538.592288][T18633] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 538.677177][T18633] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 538.735198][T18633] bond0 (unregistering): Released all slaves [ 538.953907][T18633] xt_TCPMSS: Only works on TCP SYN packets [ 539.169550][T18665] veth0: entered promiscuous mode [ 539.212071][T18665] veth0: left promiscuous mode [ 539.298792][T18674] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3249'. [ 539.336408][T18673] netlink: 'syz.2.3250': attribute type 11 has an invalid length. [ 539.375120][T18673] syzkaller1: entered promiscuous mode [ 539.393587][T18673] syzkaller1: entered allmulticast mode [ 539.511978][T18681] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3252'. [ 540.148340][T18709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3256'. [ 540.376499][T18719] block nbd1: NBD_DISCONNECT [ 540.399869][T18719] block nbd1: Send disconnect failed -32 [ 540.844825][T18746] netlink: 'syz.1.3264': attribute type 1 has an invalid length. [ 540.992504][T18746] 8021q: adding VLAN 0 to HW filter on device bond2 [ 541.181964][T18758] bond2: (slave geneve2): making interface the new active one [ 541.216534][T18758] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 541.647070][T18747] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 541.952403][T18805] netlink: 'syz.5.3274': attribute type 1 has an invalid length. [ 541.983370][T18809] __nla_validate_parse: 3 callbacks suppressed [ 541.983388][T18809] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3275'. [ 542.369857][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 542.670305][T18852] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3285'. [ 542.676998][T18850] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3285'. [ 542.682827][T18849] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3285'. [ 542.700132][T18850] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3285'. [ 542.720702][T18849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 542.845148][T18860] netlink: 'syz.0.3288': attribute type 10 has an invalid length. [ 542.891887][T18860] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 542.928663][T18860] team0: Port device netdevsim1 added [ 542.949086][T18860] netlink: 'syz.0.3288': attribute type 10 has an invalid length. [ 543.181248][T18868] netlink: 'syz.0.3291': attribute type 1 has an invalid length. [ 543.191239][T18868] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3291'. [ 543.200806][T18868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3291'. [ 543.276047][T18870] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3292'. [ 543.600350][T14453] block nbd1: Receive control failed (result -32) [ 543.615137][ T5624] block nbd1: Receive control failed (result -32) [ 543.623105][ T5622] block nbd1: Receive control failed (result -32) [ 543.624475][T18890] x_tables: duplicate underflow at hook 4 [ 544.003137][T18913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3303'. [ 544.023707][T18911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3302'. [ 544.054149][T18913] syzkaller0: entered promiscuous mode [ 544.069642][T18913] syzkaller0: entered allmulticast mode [ 544.183881][ T5725] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 544.192256][ T5725] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 544.389199][ T810] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 544.499054][T11982] IPVS: starting estimator thread 0... [ 544.518156][T18934] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 544.599058][T18935] IPVS: using max 40 ests per chain, 96000 per kthread [ 544.701508][T18940] xt_ipcomp: unknown flags 1D [ 544.933297][ T810] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 545.076949][T18965] netlink: 'syz.2.3318': attribute type 1 has an invalid length. [ 545.129991][T18974] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 545.381936][T18987] batman_adv: batadv0: Interface deactivated: dummy0 [ 545.400951][T18987] batman_adv: batadv0: Removing interface: dummy0 [ 546.232505][T19030] ip6gre1: entered promiscuous mode [ 546.238662][T19030] ip6gre1: entered allmulticast mode [ 546.282055][T19030] netlink: 'syz.2.3335': attribute type 6 has an invalid length. [ 546.334434][T19039] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 546.371072][T19039] geneve0: entered promiscuous mode [ 546.378554][T19039] geneve0: left promiscuous mode [ 546.745640][T19042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.782235][T19042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.988076][T19042] __nla_validate_parse: 208 callbacks suppressed [ 546.988097][T19042] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3340'. [ 547.010679][T19042] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3340'. [ 547.019885][T19042] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3340'. [ 547.029839][T19042] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3340'. [ 547.043868][T19042] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3340'. [ 547.054586][T19042] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3340'. [ 547.064097][T19042] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3340'. [ 547.073609][T19042] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3340'. [ 547.083166][T19042] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3340'. [ 547.092926][T19042] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3340'. [ 547.255945][T19043] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 547.278346][T19043] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 547.306907][T19038] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 547.311094][ T1172] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.335054][ T1172] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.421073][ T1172] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.444195][ T1172] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.805410][T19066] bond11: (slave bridge6): Enslaving as an active interface with an up link [ 547.842483][T19075] netlink: 'syz.2.3350': attribute type 3 has an invalid length. [ 547.859362][T19075] netlink: 'syz.2.3350': attribute type 1 has an invalid length. [ 547.875960][T19066] nbd: must specify a size in bytes for the device [ 547.891100][T19063] macvlan0: entered promiscuous mode [ 547.904588][T19063] macvlan0: entered allmulticast mode [ 547.922495][T19063] bond11: (slave macvlan0): Error -98 calling set_mac_address [ 548.066588][T19082] openvswitch: netlink: IP tunnel attribute has 258 unknown bytes. [ 548.194886][T19058] 8021q: adding VLAN 0 to HW filter on device bond1 [ 548.222741][T19058] 8021q: adding VLAN 0 to HW filter on device bond2 [ 548.231283][T19091] netlink: 'syz.1.3355': attribute type 20 has an invalid length. [ 548.294808][ T9216] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.301971][ T9216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.369574][T19089] erspan0: left promiscuous mode [ 548.442639][T19089] bridge0: left promiscuous mode [ 548.461673][T19089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 548.484132][T19089] 8021q: adding VLAN 0 to HW filter on device team0 [ 548.517233][T19089] batadv0: left promiscuous mode [ 548.560167][T19089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.730269][T19089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.752795][T19089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.790194][T19089] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 548.803971][T19089] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 548.823106][T19089] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 548.835828][T19089] veth1_vlan: left promiscuous mode [ 548.844003][T19089] veth0_vlan: left promiscuous mode [ 548.856767][T19089] veth0_vlan: entered promiscuous mode [ 548.865316][T19089] veth1_vlan: entered promiscuous mode [ 548.876226][T19089] veth1_macvtap: left promiscuous mode [ 548.884255][T19089] veth0_macvtap: left promiscuous mode [ 548.891290][T19089] veth0_macvtap: entered promiscuous mode [ 548.900247][T19089] veth1_macvtap: entered promiscuous mode [ 548.916564][T19089] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 548.931102][T19089] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 548.940133][T19089] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 548.949113][T19089] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 548.960434][T19089] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 549.005086][T19089] 8021q: adding VLAN 0 to HW filter on device bond1 [ 549.013424][T19089] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 549.024021][T19089] erspan0: entered promiscuous mode [ 549.030874][T19089] 8021q: adding VLAN 0 to HW filter on device bond3 [ 549.069117][T19089] hsr1: Interlink (team0) is not up; please bring it up to get a fully working HSR network [ 549.079511][T19089] hsr1: left promiscuous mode [ 549.086315][T19089] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 549.096152][T19089] batman_adv: batadv0: Interface activated: ip6gretap2 [ 549.108082][T19089] erspan1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 549.129242][T19089] hsr2: Slave A (netdevsim0) is not up; please bring it up to get a fully working HSR network [ 549.145827][T19089] ip6gre1: left promiscuous mode [ 549.152482][T19089] geneve2: left promiscuous mode [ 549.162037][T19089] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 549.183772][ T24] bridge0: port 3(vlan2) entered blocking state [ 549.192944][ T24] bridge0: port 3(vlan2) entered forwarding state [ 549.225294][ T24] bridge0: entered promiscuous mode [ 549.269795][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.277024][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 549.361348][ T6198] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.371366][ T6198] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.381930][ T6198] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.403671][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 549.425304][ T6198] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.492470][ T6198] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.503909][ T6198] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.514529][ T6198] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.525084][ T6198] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.599954][ T6199] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 549.629297][ T6199] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 549.640378][T11989] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 549.695430][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 549.737436][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 549.749184][ T5747] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 549.762258][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 549.788879][T11982] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 549.860438][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 549.953167][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 550.009165][T11989] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 550.111730][T11974] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 550.329570][T11982] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 550.441367][T19163] netlink: 'syz.1.3371': attribute type 1 has an invalid length. [ 550.490318][T19163] bond3: entered promiscuous mode [ 550.496923][T19163] 8021q: adding VLAN 0 to HW filter on device bond3 [ 550.508956][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 550.643909][T19163] 8021q: adding VLAN 0 to HW filter on device bond4 [ 550.661616][T19163] bond3: (slave bond4): making interface the new active one [ 550.669124][T19163] bond4: entered promiscuous mode [ 550.675042][T19163] bond3: (slave bond4): Enslaving as an active interface with an up link [ 551.035537][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 551.080663][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 551.131200][T19192] netlink: 'syz.2.3379': attribute type 1 has an invalid length. [ 551.149638][T19192] netlink: 'syz.2.3379': attribute type 1 has an invalid length. [ 551.551047][T19210] pim6reg1: entered promiscuous mode [ 551.560621][T19210] pim6reg1: entered allmulticast mode [ 552.005223][T19229] __nla_validate_parse: 77 callbacks suppressed [ 552.005245][T19229] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3393'. [ 552.049020][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 552.104382][T19232] netlink: 'syz.5.3394': attribute type 1 has an invalid length. [ 552.112910][T19232] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3394'. [ 552.405723][T19248] FAULT_INJECTION: forcing a failure. [ 552.405723][T19248] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 552.433443][T19248] CPU: 0 UID: 0 PID: 19248 Comm: syz.0.3397 Not tainted syzkaller #0 PREEMPT(full) [ 552.433472][T19248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 552.433494][T19248] Call Trace: [ 552.433502][T19248] [ 552.433509][T19248] dump_stack_lvl+0xe8/0x150 [ 552.433693][T19248] should_fail_ex+0x40c/0x560 [ 552.433815][T19248] _copy_from_user+0x2d/0xb0 [ 552.433910][T19248] do_sys_poll+0x258/0x1110 [ 552.433972][T19248] ? __lock_acquire+0x683/0x2cf0 [ 552.434015][T19248] ? __pfx_do_sys_poll+0x10/0x10 [ 552.434042][T19248] ? aa_file_perm+0x18b/0x15f0 [ 552.434232][T19248] ? set_user_sigmask+0xcd/0x1c0 [ 552.434270][T19248] ? __pfx_set_user_sigmask+0x10/0x10 [ 552.434288][T19248] ? kmem_cache_free+0x182/0x650 [ 552.434319][T19248] ? fd_install+0x94/0x3d0 [ 552.434348][T19248] __se_sys_ppoll+0x209/0x2b0 [ 552.434373][T19248] ? __pfx___se_sys_ppoll+0x10/0x10 [ 552.434392][T19248] ? __pfx_ksys_write+0x10/0x10 [ 552.434432][T19248] ? __x64_sys_ppoll+0x20/0xc0 [ 552.434451][T19248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.434486][T19248] do_syscall_64+0x174/0x580 [ 552.434587][T19248] ? trace_irq_disable+0x3b/0x140 [ 552.434625][T19248] ? clear_bhb_loop+0x40/0x90 [ 552.434646][T19248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.434662][T19248] RIP: 0033:0x7ff24fd9de99 [ 552.434685][T19248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.434699][T19248] RSP: 002b:00007ff250c22028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 552.434718][T19248] RAX: ffffffffffffffda RBX: 00007ff250026090 RCX: 00007ff24fd9de99 [ 552.434730][T19248] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00002000000002c0 [ 552.434741][T19248] RBP: 00007ff250c22090 R08: 0000000000000000 R09: 0000000000000000 [ 552.434752][T19248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.434763][T19248] R13: 00007ff250026128 R14: 00007ff250026090 R15: 00007ffd0f7bd3c8 [ 552.434794][T19248] [ 552.853481][T19256] netlink: 'syz.6.3400': attribute type 1 has an invalid length. [ 553.353560][ T5282] veth0_macvtap: left promiscuous mode [ 553.749341][T19281] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3407'. [ 554.004810][T19296] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3409'. [ 554.071106][T19296] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3409'. [ 554.542763][T19317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3412'. [ 554.614220][T19320] netlink: 212 bytes leftover after parsing attributes in process `syz.0.3411'. [ 554.661633][T19320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3411'. [ 554.684197][T19326] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3415'. [ 554.701602][T19319] pimreg: entered allmulticast mode [ 554.707058][T19320] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3411'. [ 554.736835][T19319] pimreg: left allmulticast mode [ 555.243781][ T6199] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.284874][ T6199] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.305648][ T6199] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 52657 - 0 [ 555.410049][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 555.499827][ T6199] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.528482][ T6199] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.551345][ T6199] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 52657 - 0 [ 555.597170][T19350] syzkaller0: entered promiscuous mode [ 555.613446][T19350] syzkaller0: entered allmulticast mode [ 555.735859][ T6199] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.766415][ T6199] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.779521][ T6199] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 52657 - 0 [ 555.916954][ T6199] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.942262][ T6199] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.964334][ T6199] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 52657 - 0 [ 556.077272][T19384] netlink: 'syz.6.3427': attribute type 11 has an invalid length. [ 556.132029][T19389] rdma_rxe: Failed to create IPv4 UDP tunnel [ 556.350573][T19398] tipc: Enabled bearer , priority 0 [ 556.361287][T19399] syzkaller0: entered promiscuous mode [ 556.380794][T19399] syzkaller0: entered allmulticast mode [ 556.756826][T19399] tipc: Resetting bearer [ 556.826315][T19399] tipc: Disabling bearer [ 556.965972][ T6199] bridge_slave_1: left allmulticast mode [ 556.998904][ T6199] bridge_slave_1: left promiscuous mode [ 557.009488][T19435] __nla_validate_parse: 7 callbacks suppressed [ 557.009505][T19435] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3433'. [ 557.036987][ T6199] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.075816][ T6199] bridge_slave_0: left allmulticast mode [ 557.096205][ T6199] bridge_slave_0: left promiscuous mode [ 557.131326][ T6199] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.585817][T19388] infiniband syz2: set active [ 557.597674][T19388] infiniband syz2: added ipvlan0 [ 557.661987][T19388] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 557.679466][T19388] infiniband syz2: Couldn't open port 1 [ 557.706106][T19388] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 557.738606][T19388] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 557.775748][T19388] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 557.921361][ T6199] team0: Port device bridge1 removed [ 557.962204][T19388] RDS/IB: syz2: added [ 557.966960][T19388] smc: adding ib device syz2 with port count 1 [ 557.979320][T19388] smc: ib device syz2 port 1 has no pnetid [ 558.014141][ T6199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 558.024500][ T6199] bond0 (unregistering): Released all slaves [ 558.036792][ T6199] bond1 (unregistering): Released all slaves [ 558.052307][ T6199] bond2 (unregistering): Released all slaves [ 558.069378][T19444] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 558.092892][T19444] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 558.118913][T19444] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 558.172660][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 558.191739][ T6199] tipc: Left network mode [ 558.954567][T19503] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3445'. [ 558.968461][T19506] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3445'. [ 559.697285][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 560.093689][T19559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3451'. [ 560.618799][T19579] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3452'. [ 560.638820][T19579] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3452'. [ 560.673944][T19579] tipc: Cannot configure node identity twice [ 560.690824][T19579] tipc: Cannot configure node identity twice [ 561.019093][T19592] netlink: 'syz.5.3454': attribute type 13 has an invalid length. [ 561.084368][T19596] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 561.113984][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 561.115452][T19596] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 561.217715][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3 [ 561.233492][ T5724] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 561.233512][ T5724] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 561.280734][ T5724] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 561.300760][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 561.567578][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 561.567697][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 561.623148][ T5724] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 561.690813][T19615] syzkaller0: entered promiscuous mode [ 561.697260][T19615] syzkaller0: entered allmulticast mode [ 562.052311][ T5747] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 562.151504][ T5282] 8021q: adding VLAN 0 to HW filter on device eth4 [ 562.890854][T19520] smc: removing ib device syz2 [ 563.127184][T19643] netlink: 'syz.0.3463': attribute type 11 has an invalid length. [ 563.357130][T19520] smbdirect: ib_dev[syz2] removed [ 564.132319][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 564.170255][T19702] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3475'. [ 564.204241][T19702] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3475'. [ 564.205401][T19703] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3474'. [ 564.248343][T19703] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3474'. [ 564.259390][T19703] netlink: 'syz.5.3474': attribute type 5 has an invalid length. [ 564.268274][T19703] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3474'. [ 564.557063][T19717] sctp: [Deprecated]: syz.6.3480 (pid 19717) Use of struct sctp_assoc_value in delayed_ack socket option. [ 564.557063][T19717] Use struct sctp_sack_info instead [ 564.956025][T19743] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3486'. [ 565.117349][T19743] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 565.153055][T19748] x_tables: duplicate underflow at hook 1 [ 565.177161][T19748] netlink: 'syz.0.3487': attribute type 1 has an invalid length. [ 565.231994][T19743] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 565.410932][T19750] bridge2: entered promiscuous mode [ 565.426330][T19750] bridge2: entered allmulticast mode [ 565.446455][T19750] team0: Port device bridge2 added [ 568.785141][T19782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3492'. [ 568.848597][T19784] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3494'. [ 568.942301][T19796] netlink: 'syz.6.3496': attribute type 21 has an invalid length. [ 569.029823][ T6199] hsr_slave_0: left promiscuous mode [ 569.079527][ T6199] hsr_slave_1: left promiscuous mode [ 569.104153][ T6199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 569.142329][ T6199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 569.169054][ T6199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 569.179554][ T6199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 569.202414][ T6199] batman_adv: batadv0: Removing interface: vlan3 [ 569.230937][ T6199] veth1_macvtap: left promiscuous mode [ 569.236484][ T6199] veth0_macvtap: left promiscuous mode [ 569.250185][ T6199] veth1_vlan: left promiscuous mode [ 569.255502][ T6199] veth0_vlan: left promiscuous mode [ 569.535631][ T6199] team0 (unregistering): Port device team_slave_1 removed [ 569.555061][ T6199] team0 (unregistering): Port device team_slave_0 removed [ 569.676921][T19796] netlink: 164 bytes leftover after parsing attributes in process `syz.6.3496'. [ 570.021444][T19822] syzkaller0: entered promiscuous mode [ 570.038904][T19822] syzkaller0: entered allmulticast mode [ 570.070744][T19826] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 570.347108][ T5624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 570.370998][ T5624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 570.383946][ T5624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 570.406007][ T5624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 570.419325][ T5624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 570.734546][ T6199] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.910847][ T6199] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.999052][ T6199] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.088430][ T6199] netdevsim netdevsim4 €Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.290378][ T6199] bond3: left allmulticast mode [ 571.295382][ T6199] bond3: left promiscuous mode [ 571.300801][ T6199] bridge0: port 2(bond3) entered disabled state [ 571.309633][ T6199] bridge_slave_0: left allmulticast mode [ 571.315314][ T6199] bridge_slave_0: left promiscuous mode [ 571.322938][ T6199] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.341738][ T6199] dvmrp0: left allmulticast mode [ 571.440666][ T6199] team0: Port device xfrm0 removed [ 571.864048][T19798] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 572.092165][T19863] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3503'. [ 572.103090][T19867] netlink: 'syz.0.3506': attribute type 11 has an invalid length. [ 572.111219][T19863] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 572.450177][ T5624] Bluetooth: hci1: command tx timeout [ 572.632166][T19889] block nbd0: reconnected socket [ 572.646983][T19889] nbd: socks must be embedded in a SOCK_ITEM attr [ 572.878128][ T6199] batman_adv: batadv0: Removing interface: gretap1 [ 572.911153][ T6199] bond5 (unregistering): (slave gretap2): Removing an active aggregator [ 572.924841][ T6199] bond5 (unregistering): (slave gretap2): Releasing backup interface [ 573.043707][ T6199] bond4 (unregistering): (slave geneve2): Releasing active interface [ 573.105562][ T6199] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 573.114008][ T6199] bridge1 (unregistering): left allmulticast mode [ 573.154162][ T6199] bond0 (unregistering): Released all slaves [ 573.178037][ T6199] bond1 (unregistering): Released all slaves [ 573.200421][ T6199] bond2 (unregistering): Released all slaves [ 573.216602][ T5624] block nbd0: Receive control failed (result -32) [ 573.225423][ T6199] bond3 (unregistering): Released all slaves [ 573.246864][ T6199] bond4 (unregistering): Released all slaves [ 573.290314][ T6199] bond5 (unregistering): Released all slaves [ 573.510636][T19896] syzkaller0: entered promiscuous mode [ 573.547434][T19896] syzkaller0: entered allmulticast mode [ 573.653938][ T6199] tipc: Disabling bearer [ 573.665080][ T6199] tipc: Disabling bearer [ 573.675841][T19908] netlink: 'syz.0.3515': attribute type 1 has an invalid length. [ 573.713636][ T6199] tipc: Left network mode [ 573.813878][T19902] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3514'. [ 573.871136][T19908] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 574.127345][T19835] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.149038][T19835] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.189015][T19835] bridge_slave_0: entered allmulticast mode [ 574.210471][T19835] bridge_slave_0: entered promiscuous mode [ 574.418675][T19922] geneve0: left promiscuous mode [ 574.456374][T19835] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.494908][T19835] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.526173][T19835] bridge_slave_1: entered allmulticast mode [ 574.533413][ T5624] Bluetooth: hci1: command tx timeout [ 574.552042][T19835] bridge_slave_1: entered promiscuous mode [ 574.585764][T19939] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3520'. [ 574.693006][T19941] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 574.723004][T19939] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3520'. [ 574.935511][T19835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.975741][T19835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.056018][T19946] tipc: Enabled bearer , priority 0 [ 575.152153][T19941] syzkaller0: entered promiscuous mode [ 575.176086][T19941] syzkaller0: entered allmulticast mode [ 575.337313][T19941] tipc: Resetting bearer [ 575.382514][T19835] team0: Port device team_slave_0 added [ 575.403591][T19835] team0: Port device team_slave_1 added [ 575.434711][T19940] tipc: Resetting bearer [ 575.497780][T19940] tipc: Disabling bearer [ 575.608989][ T6199] [ 575.611362][ T6199] ====================================================== [ 575.618377][ T6199] WARNING: possible circular locking dependency detected [ 575.625399][ T6199] syzkaller #0 Not tainted [ 575.629801][ T6199] ------------------------------------------------------ [ 575.636799][ T6199] kworker/u8:11/6199 is trying to acquire lock: [ 575.643029][ T6199] ffff88801c28d210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x6d/0x170 [ 575.653603][ T6199] [ 575.653603][ T6199] but task is already holding lock: [ 575.660955][ T6199] ffff88801c28d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0x76/0x800 [ 575.670541][ T6199] [ 575.670541][ T6199] which lock already depends on the new lock. [ 575.670541][ T6199] [ 575.680925][ T6199] [ 575.680925][ T6199] the existing dependency chain (in reverse order) is: [ 575.689917][ T6199] [ 575.689917][ T6199] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 575.697895][ T6199] down_write+0x96/0x200 [ 575.702724][ T6199] kernfs_add_one+0x41/0x5e0 [ 575.707826][ T6199] kernfs_create_dir_ns+0x1a1/0x230 [ 575.713538][ T6199] internal_create_group+0x440/0x1180 [ 575.719417][ T6199] cpuhp_invoke_callback+0x434/0x810 [ 575.725218][ T6199] cpuhp_issue_call+0x3f0/0x750 [ 575.730576][ T6199] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 575.737153][ T6199] __cpuhp_setup_state+0x3f/0x60 [ 575.742601][ T6199] do_one_initcall+0x250/0x870 [ 575.747876][ T6199] do_initcall_level+0x10a/0x1a0 [ 575.753395][ T6199] do_initcalls+0x59/0xa0 [ 575.758233][ T6199] kernel_init_freeable+0x29d/0x3e0 [ 575.763942][ T6199] kernel_init+0x1d/0x1d0 [ 575.768840][ T6199] ret_from_fork+0x514/0xb70 [ 575.773960][ T6199] ret_from_fork_asm+0x1a/0x30 [ 575.779233][ T6199] [ 575.779233][ T6199] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 575.787036][ T6199] [ 575.787036][ T6199] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 575.794749][ T6199] cpus_read_lock+0x42/0x160 [ 575.799845][ T6199] static_key_slow_inc+0x12/0x30 [ 575.805318][ T6199] nbd_genl_reconfigure+0x1301/0x1e80 [ 575.811310][ T6199] genl_family_rcv_msg_doit+0x233/0x340 [ 575.817457][ T6199] genl_rcv_msg+0x614/0x7a0 [ 575.822468][ T6199] netlink_rcv_skb+0x226/0x4a0 [ 575.827743][ T6199] genl_rcv+0x28/0x40 [ 575.832236][ T6199] netlink_unicast+0x7bb/0x940 [ 575.837516][ T6199] netlink_sendmsg+0x813/0xb40 [ 575.842787][ T6199] sock_sendmsg_nosec+0x13a/0x180 [ 575.848435][ T6199] ____sys_sendmsg+0x54e/0x850 [ 575.853746][ T6199] ___sys_sendmsg+0x2a5/0x360 [ 575.858936][ T6199] __x64_sys_sendmsg+0x1b1/0x290 [ 575.864387][ T6199] do_syscall_64+0x174/0x580 [ 575.869489][ T6199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.875894][ T6199] [ 575.875894][ T6199] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 575.883526][ T6199] __mutex_lock+0x19d/0x1550 [ 575.888628][ T6199] nbd_queue_rq+0x373/0x1150 [ 575.893736][ T6199] blk_mq_dispatch_rq_list+0x499/0x1990 [ 575.899900][ T6199] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 575.906838][ T6199] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 575.913340][ T6199] blk_mq_run_work_fn+0x16c/0x300 [ 575.918874][ T6199] process_scheduled_works+0xa8e/0x14e0 [ 575.924929][ T6199] worker_thread+0xa47/0xfb0 [ 575.930029][ T6199] kthread+0x388/0x470 [ 575.934613][ T6199] ret_from_fork+0x514/0xb70 [ 575.939715][ T6199] ret_from_fork_asm+0x1a/0x30 [ 575.944988][ T6199] [ 575.944988][ T6199] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 575.952187][ T6199] __mutex_lock+0x19d/0x1550 [ 575.957300][ T6199] nbd_queue_rq+0xc1/0x1150 [ 575.962315][ T6199] blk_mq_dispatch_rq_list+0x499/0x1990 [ 575.968381][ T6199] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 575.975254][ T6199] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 575.981771][ T6199] blk_mq_run_work_fn+0x16c/0x300 [ 575.987308][ T6199] process_scheduled_works+0xa8e/0x14e0 [ 575.993363][ T6199] worker_thread+0xa47/0xfb0 [ 575.998462][ T6199] kthread+0x388/0x470 [ 576.003041][ T6199] ret_from_fork+0x514/0xb70 [ 576.008141][ T6199] ret_from_fork_asm+0x1a/0x30 [ 576.013413][ T6199] [ 576.013413][ T6199] -> #4 (set->srcu){.+.+}-{0:0}: [ 576.020521][ T6199] __synchronize_srcu+0xc9/0x2f0 [ 576.026012][ T6199] elevator_switch+0x1e8/0x7b0 [ 576.031344][ T6199] elevator_change+0x2fa/0x480 [ 576.036619][ T6199] elevator_set_default+0x375/0x440 [ 576.042326][ T6199] blk_register_queue+0x3f3/0x4e0 [ 576.047928][ T6199] __add_disk+0x6cb/0xe30 [ 576.052800][ T6199] add_disk_fwnode+0xfb/0x4b0 [ 576.057983][ T6199] nbd_dev_add+0x733/0xb60 [ 576.062911][ T6199] nbd_init+0x15f/0x1e0 [ 576.067664][ T6199] do_one_initcall+0x250/0x870 [ 576.072940][ T6199] do_initcall_level+0x10a/0x1a0 [ 576.078388][ T6199] do_initcalls+0x59/0xa0 [ 576.083233][ T6199] kernel_init_freeable+0x29d/0x3e0 [ 576.088939][ T6199] kernel_init+0x1d/0x1d0 [ 576.093778][ T6199] ret_from_fork+0x514/0xb70 [ 576.098876][ T6199] ret_from_fork_asm+0x1a/0x30 [ 576.104146][ T6199] [ 576.104146][ T6199] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 576.111950][ T6199] __mutex_lock+0x19d/0x1550 [ 576.117052][ T6199] elevator_change+0x1af/0x480 [ 576.122326][ T6199] elevator_set_none+0xb5/0x140 [ 576.127683][ T6199] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 576.134005][ T6199] nbd_start_device+0x189/0xb30 [ 576.139372][ T6199] nbd_genl_connect+0x1597/0x1c10 [ 576.144909][ T6199] genl_family_rcv_msg_doit+0x233/0x340 [ 576.150968][ T6199] genl_rcv_msg+0x614/0x7a0 [ 576.155981][ T6199] netlink_rcv_skb+0x226/0x4a0 [ 576.161257][ T6199] genl_rcv+0x28/0x40 [ 576.165748][ T6199] netlink_unicast+0x7bb/0x940 [ 576.171024][ T6199] netlink_sendmsg+0x813/0xb40 [ 576.176291][ T6199] sock_sendmsg_nosec+0x13a/0x180 [ 576.181824][ T6199] ____sys_sendmsg+0x54e/0x850 [ 576.187098][ T6199] ___sys_sendmsg+0x2a5/0x360 [ 576.192286][ T6199] __x64_sys_sendmsg+0x1b1/0x290 [ 576.197736][ T6199] do_syscall_64+0x174/0x580 [ 576.202842][ T6199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.209242][ T6199] [ 576.209242][ T6199] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 576.217839][ T6199] blk_alloc_queue+0x544/0x690 [ 576.223115][ T6199] __blk_mq_alloc_disk+0x194/0x390 [ 576.228741][ T6199] nbd_dev_add+0x494/0xb60 [ 576.233668][ T6199] nbd_init+0x15f/0x1e0 [ 576.238330][ T6199] do_one_initcall+0x250/0x870 [ 576.243607][ T6199] do_initcall_level+0x10a/0x1a0 [ 576.249054][ T6199] do_initcalls+0x59/0xa0 [ 576.253895][ T6199] kernel_init_freeable+0x29d/0x3e0 [ 576.259604][ T6199] kernel_init+0x1d/0x1d0 [ 576.264441][ T6199] ret_from_fork+0x514/0xb70 [ 576.269544][ T6199] ret_from_fork_asm+0x1a/0x30 [ 576.274813][ T6199] [ 576.274813][ T6199] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 576.282010][ T6199] fs_reclaim_acquire+0x71/0x100 [ 576.287489][ T6199] kmem_cache_alloc_noprof+0x64/0x5f0 [ 576.293370][ T6199] __kernfs_iattrs+0xdd/0x380 [ 576.298558][ T6199] kernfs_iop_setattr+0xe6/0x3f0 [ 576.304006][ T6199] notify_change+0xbba/0xea0 [ 576.309104][ T6199] do_truncate+0x1c2/0x250 [ 576.314021][ T6199] path_openat+0x2fed/0x3830 [ 576.319123][ T6199] do_file_open+0x23e/0x4a0 [ 576.324142][ T6199] do_sys_openat2+0x115/0x200 [ 576.329333][ T6199] __x64_sys_openat+0x138/0x170 [ 576.334696][ T6199] do_syscall_64+0x174/0x580 [ 576.339808][ T6199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.346209][ T6199] [ 576.346209][ T6199] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 576.354710][ T6199] __lock_acquire+0x1520/0x2cf0 [ 576.360073][ T6199] lock_acquire+0x106/0x350 [ 576.365084][ T6199] down_write+0x96/0x200 [ 576.369834][ T6199] kernfs_unlink_sibling+0x6d/0x170 [ 576.375548][ T6199] kernfs_rename_ns+0x48e/0x800 [ 576.380912][ T6199] sysfs_rename_link_ns+0x16e/0x1b0 [ 576.386617][ T6199] device_rename+0x110/0x210 [ 576.391803][ T6199] __dev_change_net_namespace+0x1392/0x1de0 [ 576.398252][ T6199] cfg802154_switch_netns+0xbd/0x410 [ 576.404100][ T6199] cfg802154_pernet_exit+0x75/0xc0 [ 576.409716][ T6199] ops_undo_list+0x43d/0x8d0 [ 576.414885][ T6199] cleanup_net+0x572/0x810 [ 576.419806][ T6199] process_scheduled_works+0xa8e/0x14e0 [ 576.425858][ T6199] worker_thread+0xa47/0xfb0 [ 576.430957][ T6199] kthread+0x388/0x470 [ 576.435546][ T6199] ret_from_fork+0x514/0xb70 [ 576.440672][ T6199] ret_from_fork_asm+0x1a/0x30 [ 576.445958][ T6199] [ 576.445958][ T6199] other info that might help us debug this: [ 576.445958][ T6199] [ 576.456184][ T6199] Chain exists of: [ 576.456184][ T6199] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 576.456184][ T6199] [ 576.470609][ T6199] Possible unsafe locking scenario: [ 576.470609][ T6199] [ 576.478046][ T6199] CPU0 CPU1 [ 576.483394][ T6199] ---- ---- [ 576.488739][ T6199] lock(&root->kernfs_rwsem); [ 576.493491][ T6199] lock(cpuhp_state_mutex); [ 576.500584][ T6199] lock(&root->kernfs_rwsem); [ 576.507861][ T6199] lock(&root->kernfs_iattr_rwsem); [ 576.513150][ T6199] [ 576.513150][ T6199] *** DEADLOCK *** [ 576.513150][ T6199] [ 576.521288][ T6199] 5 locks held by kworker/u8:11/6199: [ 576.526640][ T6199] #0: ffff88801c28e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 576.537509][ T6199] #1: ffffc90005fefc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 576.548032][ T6199] #2: ffffffff9001d7a8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 576.557336][ T6199] #3: ffffffff9002c340 (rtnl_mutex){+.+.}-{4:4}, at: cfg802154_pernet_exit+0x18/0xc0 [ 576.566920][ T6199] #4: ffff88801c28d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0x76/0x800 [ 576.576952][ T6199] [ 576.576952][ T6199] stack backtrace: [ 576.582830][ T6199] CPU: 0 UID: 0 PID: 6199 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 576.582847][ T6199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 576.582858][ T6199] Workqueue: netns cleanup_net [ 576.582882][ T6199] Call Trace: [ 576.582890][ T6199] [ 576.582898][ T6199] dump_stack_lvl+0xe8/0x150 [ 576.582920][ T6199] print_circular_bug+0x2e1/0x300 [ 576.582942][ T6199] check_noncircular+0x12e/0x150 [ 576.582966][ T6199] __lock_acquire+0x1520/0x2cf0 [ 576.582987][ T6199] ? __lock_acquire+0x683/0x2cf0 [ 576.583006][ T6199] ? __lock_acquire+0x683/0x2cf0 [ 576.583027][ T6199] ? kernfs_unlink_sibling+0x6d/0x170 [ 576.583048][ T6199] lock_acquire+0x106/0x350 [ 576.583065][ T6199] ? kernfs_unlink_sibling+0x6d/0x170 [ 576.583091][ T6199] down_write+0x96/0x200 [ 576.583105][ T6199] ? kernfs_unlink_sibling+0x6d/0x170 [ 576.583126][ T6199] ? __pfx_down_write+0x10/0x10 [ 576.583139][ T6199] ? kernfs_root+0x1c/0x230 [ 576.583156][ T6199] ? kernfs_root+0x1c/0x230 [ 576.583172][ T6199] ? kernfs_root+0x1c/0x230 [ 576.583190][ T6199] ? kernfs_root+0x1ea/0x230 [ 576.583207][ T6199] kernfs_unlink_sibling+0x6d/0x170 [ 576.583230][ T6199] kernfs_rename_ns+0x48e/0x800 [ 576.583253][ T6199] sysfs_rename_link_ns+0x16e/0x1b0 [ 576.583272][ T6199] device_rename+0x110/0x210 [ 576.583289][ T6199] __dev_change_net_namespace+0x1392/0x1de0 [ 576.583313][ T6199] ? __pfx___dev_change_net_namespace+0x10/0x10 [ 576.583333][ T6199] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 576.583428][ T6199] ? lockdep_hardirqs_on+0x7a/0x110 [ 576.583449][ T6199] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 576.583469][ T6199] ? __mutex_trylock_common+0x15f/0x270 [ 576.583484][ T6199] ? __pfx___mutex_trylock_common+0x10/0x10 [ 576.583499][ T6199] ? rcu_is_watching+0x15/0xb0 [ 576.583520][ T6199] ? trace_contention_end+0x3d/0x140 [ 576.583534][ T6199] ? __mutex_lock+0x30d/0x1550 [ 576.583556][ T6199] ? do_raw_spin_unlock+0xf5/0x210 [ 576.583572][ T6199] ? __rtnl_unlock+0xc8/0xf0 [ 576.583633][ T6199] ? cfg802154_pernet_exit+0x18/0xc0 [ 576.583651][ T6199] ? __pfx___mutex_lock+0x10/0x10 [ 576.583676][ T6199] cfg802154_switch_netns+0xbd/0x410 [ 576.583695][ T6199] cfg802154_pernet_exit+0x75/0xc0 [ 576.583712][ T6199] ops_undo_list+0x43d/0x8d0 [ 576.583733][ T6199] ? __pfx_ops_undo_list+0x10/0x10 [ 576.583753][ T6199] ? idr_destroy+0x218/0x290 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 576.583827][ T6199] ? do_raw_spin_unlock+0xf5/0x210 [ 576.583844][ T6199] cleanup_net+0x572/0x810 [ 576.583863][ T6199] ? __pfx_cleanup_net+0x10/0x10 [ 576.583883][ T6199] ? rcu_is_watching+0x15/0xb0 [ 576.583905][ T6199] ? process_scheduled_works+0xa20/0x14e0 [ 576.583921][ T6199] process_scheduled_works+0xa8e/0x14e0 [ 576.583951][ T6199] ? __pfx_process_scheduled_works+0x10/0x10 [ 576.583970][ T6199] ? assign_work+0x3cf/0x5d0 [ 576.583986][ T6199] worker_thread+0xa47/0xfb0 [ 576.584011][ T6199] kthread+0x388/0x470 [ 576.584030][ T6199] ? __pfx_worker_thread+0x10/0x10 [ 576.584046][ T6199] ? __pfx_kthread+0x10/0x10 [ 576.584064][ T6199] ret_from_fork+0x514/0xb70 [ 576.584086][ T6199] ? __pfx_ret_from_fork+0x10/0x10 [ 576.584105][ T6199] ? __switch_to+0xc89/0x1420 [ 576.584122][ T6199] ? __pfx_kthread+0x10/0x10 [ 576.584141][ T6199] ret_from_fork_asm+0x1a/0x30 [ 576.584161][ T6199] [ 576.608961][ T5624] Bluetooth: hci1: command tx timeout [ 576.614165][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 576.985538][ T5282] 8021q: adding VLAN 0 to HW filter on device eth5 [ 577.107244][ T6199] hsr_slave_0: left promiscuous mode [ 577.136439][ T6199] hsr_slave_1: left promiscuous mode [ 577.189140][ T6199] veth1_vlan: left allmulticast mode [ 577.567642][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 577.649970][T19940] syz_tun (unregistering): left promiscuous mode [ 577.656400][T19940] syz_tun (unregistering): left allmulticast mode [ 577.669839][T19940] team0: Port device syz_tun removed [ 578.006170][ T6199] IPVS: stop unused estimator thread 0... [ 578.020086][ T5282] 8021q: adding VLAN 0 to HW filter on device eth6 [ 578.116286][ T6199] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.186605][ T6199] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.270437][ T6199] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.328114][ T5282] 8021q: adding VLAN 0 to HW filter on device eth7 [ 578.343969][ T6199] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.435716][ T6199] bridge_slave_1: left allmulticast mode [ 578.442280][ T6199] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.452925][ T6199] bridge_slave_0: left allmulticast mode [ 578.466250][ T6199] bridge_slave_0: left promiscuous mode [ 578.474389][ T6199] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.488652][ T6199] bridge_slave_1: left allmulticast mode [ 578.494351][ T6199] bridge_slave_1: left promiscuous mode [ 578.500588][ T6199] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.510843][ T6199] bridge_slave_0: left allmulticast mode [ 578.516510][ T6199] bridge_slave_0: left promiscuous mode [ 578.532404][ T6199] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.625878][ T6199] bond2 (unregistering): (slave geneve2): Releasing active interface [ 578.647936][ T6199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 578.667585][ T6199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 578.679097][ T6199] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 578.692084][ T6199] bond0 (unregistering): Released all slaves [ 578.701050][ T6199] bond1 (unregistering): Released all slaves [ 578.711848][ T6199] bond2 (unregistering): Released all slaves [ 578.721964][ T6199] bond3 (unregistering): (slave bond4): Releasing backup interface [ 578.730020][ T6199] bond4 (unregistering): left promiscuous mode [ 578.736617][ T6199] bond3 (unregistering): Released all slaves [ 578.750604][ T6199] bond4 (unregistering): Released all slaves [ 578.771773][ T6199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 578.783735][ T6199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 578.797103][ T6199] bond0 (unregistering): Released all slaves [ 578.805931][ T5282] 8021q: adding VLAN 0 to HW filter on device eth8 [ 579.042347][ T6199] hsr_slave_0: left promiscuous mode [ 579.048375][ T6199] hsr_slave_1: left promiscuous mode [ 579.054233][ T6199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 579.062298][ T6199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 579.070387][ T6199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 579.078025][ T6199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 579.087266][ T6199] veth1_macvtap: left promiscuous mode [ 579.094581][ T6199] veth0_macvtap: left promiscuous mode [ 579.100432][ T6199] veth1_vlan: left promiscuous mode [ 579.105741][ T6199] veth0_vlan: left promiscuous mode [ 579.226824][ T6199] team0 (unregistering): Port device team_slave_1 removed [ 579.241649][ T6199] team0 (unregistering): Port device team_slave_0 removed [ 579.313693][ T6199] team0 (unregistering): Port device team_slave_1 removed [ 579.324854][ T6199] team0 (unregistering): Port device team_slave_0 removed [ 579.363491][ T5282] 8021q: adding VLAN 0 to HW filter on device eth9 [ 579.684115][ T5282] 8021q: adding VLAN 0 to HW filter on device eth11 [ 579.736346][ T6199] IPVS: stop unused estimator thread 0... [ 579.914574][ T5282] 8021q: adding VLAN 0 to HW filter on device eth10 [ 580.118600][ T5282] 8021q: adding VLAN 0 to HW filter on device eth12 [ 580.768271][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 583.346375][ T6200] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 583.356857][ T6200] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.431697][ T6200] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 583.442651][ T6200] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.501846][ T6200] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 583.512677][ T6200] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.571652][ T6200] netdevsim netdevsim5 netdevsim0 (unregistering): left promiscuous mode [ 583.580312][ T6200] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 583.591302][ T6200] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.680804][ T6200] vlan2: left allmulticast mode [ 583.690507][ T6200] geneve0: left allmulticast mode [ 583.699499][ T6200] vlan2: left promiscuous mode [ 583.704332][ T6200] geneve0: left promiscuous mode [ 583.710525][ T6200] bridge0: port 3(vlan2) entered disabled state [ 583.719028][ T6200] bridge_slave_1: left promiscuous mode [ 583.724704][ T6200] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.736113][ T6200] pimreg9: left allmulticast mode [ 583.742350][ T6200] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 583.822631][ T6200] ip6gretap0 (unregistering): left promiscuous mode [ 583.834286][ T6200] batman_adv: batadv0: Removing interface: ip6gretap2 [ 583.945548][ T6200] bond2 (unregistering): (slave geneve4): Releasing active interface [ 583.974776][ T6200] team0: Port device bridge2 removed [ 583.986694][ T6200] bond11 (unregistering): (slave bridge6): Releasing backup interface [ 584.014052][ T6200] bond0 (unregistering): left promiscuous mode [ 584.020931][ T6200] bond_slave_0: left promiscuous mode [ 584.026420][ T6200] bond_slave_1: left promiscuous mode [ 584.032860][ T6200] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 584.042905][ T6200] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 584.053268][ T6200] bond0 (unregistering): Released all slaves [ 584.061571][ T6200] bond1 (unregistering): Released all slaves [ 584.070808][ T6200] bond3 (unregistering): Released all slaves [ 584.082284][ T6200] bond2 (unregistering): Released all slaves [ 584.092805][ T6200] bond4 (unregistering): Released all slaves [ 584.102041][ T6200] bond5 (unregistering): Released all slaves [ 584.110960][ T6200] bond6 (unregistering): Released all slaves [ 584.120924][ T6200] bond7 (unregistering): Released all slaves [ 584.135554][ T6200] bond8 (unregistering): (slave veth14): Releasing active interface [ 584.145268][ T6200] bond8 (unregistering): Released all slaves [ 584.156641][ T6200] bond9 (unregistering): (slave veth1): Releasing backup interface [ 584.165586][ T6200] bond9 (unregistering): Released all slaves [ 584.174366][ T6200] bond10 (unregistering): Released all slaves [ 584.183533][ T6200] bond11 (unregistering): Released all slaves [ 584.308185][ T6200] tipc: Left network mode [ 584.502547][ T5282] 8021q: adding VLAN 0 to HW filter on device eth13 [ 584.515651][ T6200] team0: left promiscuous mode [ 584.520655][ T6200] team_slave_0: left promiscuous mode [ 584.526490][ T6200] team_slave_1: left promiscuous mode [ 584.532384][ T6200] bridge_slave_0: left promiscuous mode [ 584.540959][ T6200] hsr_slave_0: left promiscuous mode [ 584.546559][ T6200] hsr_slave_1: left promiscuous mode [ 584.552716][ T6200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 584.560445][ T6200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 584.568862][ T6200] veth1_macvtap: left promiscuous mode [ 584.574317][ T6200] veth0_macvtap: left promiscuous mode [ 584.579883][ T6200] veth1_vlan: left promiscuous mode [ 584.585103][ T6200] veth0_vlan: left promiscuous mode [ 584.754990][ T6200] team0 (unregistering): Port device team_slave_1 removed [ 584.765302][ T6200] team0 (unregistering): Port device team_slave_0 removed [ 584.793389][ T6200] team0 (unregistering): Port device bridge_slave_0 removed [ 585.040538][ T6200] IPVS: stop unused estimator thread 0... [ 585.130631][ T5282] 8021q: adding VLAN 0 to HW filter on device eth14 [ 585.356088][ T5282] 8021q: adding VLAN 0 to HW filter on device eth15 [ 585.554166][ T5282] 8021q: adding VLAN 0 to HW filter on device eth16