last executing test programs: 3.034001813s ago: executing program 3 (id=2738): socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) ioctl$XFS_IOC_GETBMAP(r1, 0xc0205826, &(0x7f0000000100)={0x9, 0x4, 0x984, 0x7, 0x9}) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0400000004000000040000000200000000000004", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$netlink(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1400000000800000080000000100000080060000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) write(r2, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x2003}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0xad724fc17f5eaadc}, 0x4054) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0xff, 0x0, 0xfff7f024}, {0x80000006, 0x0, 0x0, 0xb}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x1, 0x3}, 0x6) write(r4, &(0x7f0000000340)="08000000010000", 0x7) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x0, 0xe, 0x21, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x9}, 0x27) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 2.977835963s ago: executing program 4 (id=2740): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ec", 0x216}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000040000000000040d493d293000000000009500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xffffffff, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0, 0x0, 0x0, 0x0, 0xd0ffffff}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="7c00000010003704030000000300000000000000", @ANYRES32=r1, @ANYBLOB="0b1b0500000000005c0012800b00010069703667726500004c00028008000100", @ANYRES32=r3, @ANYBLOB="14000600fe8000000000000000000000000000bb14000700fe"], 0x7c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) recvmmsg(r0, &(0x7f0000003d40)=[{{&(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f00000021c0)=[{&(0x7f00000003c0)=""/210, 0xd2}, {&(0x7f00000004c0)=""/32, 0x20}, {&(0x7f0000000500)=""/61, 0x3d}, {&(0x7f0000000540)=""/59, 0x3b}, {&(0x7f0000000600)=""/198, 0xc6}, {&(0x7f00000011c0)=""/4096, 0x1000}], 0x6, &(0x7f0000002240)=""/203, 0xcb}, 0xa60}, {{&(0x7f0000002340)=@nfc_llcp, 0x80, &(0x7f0000002600)=[{&(0x7f00000023c0)=""/137, 0x89}, {&(0x7f0000002480)=""/121, 0x79}, {&(0x7f0000002500)=""/253, 0xfd}], 0x3, &(0x7f0000002640)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000003640)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000039c0)=[{&(0x7f00000036c0)=""/230, 0xe6}, {&(0x7f00000037c0)=""/57, 0x39}, {&(0x7f0000003800)=""/169, 0xa9}, {&(0x7f00000038c0)=""/160, 0xa0}, {&(0x7f0000003980)=""/39, 0x27}], 0x5, &(0x7f0000003a40)=""/155, 0x9b}, 0x81}, {{&(0x7f0000003b00)=@sco={0x1f, @none}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000003b80)=""/225, 0xe1}], 0x1, &(0x7f0000000700)=""/107, 0x6b}, 0x4}], 0x4, 0x0, &(0x7f0000003e40)={0x0, 0x3938700}) 2.59552303s ago: executing program 3 (id=2746): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000027c0)={0x20, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000e0000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b509020008000000dbaaf8fff1000000bf8200000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080077ff4608f1ff760000e8be9800000000000056080000010000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.593510571s ago: executing program 1 (id=2747): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000011) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r1) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x17, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda10000fffd000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@map=r4, r3, 0x2f}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup=r3, r4, 0x2f, 0x20, 0x4}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f0000001040)=0x10000b, 0x4) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r7) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r7, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000140)=0x4) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600843b00000c0002", @ANYRES64], 0x30}, 0x1, 0x0, 0x0, 0x4040090}, 0xc000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x40) 2.506543598s ago: executing program 4 (id=2748): listen(0xffffffffffffffff, 0x8001) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000480)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x10, 0x3c, 0x0, @dev, @local, {[@fragment={0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x66}, @srh={0x3b, 0x0, 0x4, 0x0, 0x5, 0x0, 0x8001}]}}}}}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x1, 0x7, 0x0, 0xdad1124f55525059, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x41100}, 0x94) 2.446456628s ago: executing program 1 (id=2750): getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x2b, 0x3, 0x40, 0xa1, 0x40, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x8, 0x0, 0x36157ba6}}) (async, rerun: 32) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000180)={@loopback, @initdev, 0x0}, &(0x7f00000001c0)=0xc) (rerun: 32) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x4}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async, rerun: 32) r3 = gettid() (rerun: 32) r4 = syz_open_procfs$namespace(r3, &(0x7f00000003c0)='ns/pid\x00') r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x77, '\x00', r1, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0x1, 0xffffffffffffffff}, 0x4) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@restrict={0x10, 0x0, 0x0, 0xb, 0x5}, @fwd={0xa}, @restrict={0xb, 0x0, 0x0, 0xb, 0x4}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x6, 0x5}, {0x4, 0x4}, {0x9, 0x3}, {0xf}, {0x6, 0x5}]}, @enum={0x6, 0x6, 0x0, 0x6, 0x4, [{0x2, 0x100}, {0xa, 0x29c}, {0x8, 0x3a7}, {0x5, 0x5}, {0xe, 0x8805}, {0x8, 0x6}]}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0xf, 0x0, 0x6d, 0x4}]}, {0x0, [0x2e]}}, &(0x7f0000000840)=""/20, 0xbf, 0x14, 0x0, 0x2ee0}, 0x28) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f0000000a40)={r4, &(0x7f0000000940)='caif0\x00', 0x309080, &(0x7f0000000980)={@align=0x91, {0x5, 0x1, 0x3, 0x1}}, 0x4, &(0x7f00000009c0)={@_ha_fsid}, &(0x7f0000000a00)=0x5}) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffffffff, '\x00', r0, 0xffffffffffffffff, 0x4, 0x3, 0x5}, 0x50) (async, rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b00)={r4, 0xffffffffffffffff}, 0x4) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000b40), &(0x7f0000000b80)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000c40)}, 0x20) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=@base={0x9, 0x9, 0x6fa, 0x1, 0x48014, 0xffffffffffffffff, 0xb26, '\x00', r2, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r15 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0x3c, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x3}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='GPL\x00', 0x7, 0x6f, &(0x7f0000000700)=""/111, 0x40f00, 0x12, '\x00', r0, 0x25, r7, 0x8, &(0x7f00000008c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000900)={0x2, 0xb, 0x1, 0xc6d}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000d80)=[r8, r9, r10, r11, r12, r13, r14], &(0x7f0000000dc0)=[{0x0, 0x2, 0xb, 0x9}, {0x2, 0x1, 0xb, 0x6}, {0x0, 0x5, 0xc, 0x528a2a5437dac865}, {0x4, 0x2, 0x1, 0x5}, {0x3, 0x2, 0x8, 0x2}, {0x4, 0x5, 0x2, 0xb}, {0x1, 0x5, 0x8, 0x9}, {0x1, 0x2, 0x10, 0x8}, {0x5, 0x5, 0x5, 0x6}], 0x10, 0x8}, 0x94) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_SHORT(r16, 0x82307202, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000011c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffff3, '\x00', r2, r11, 0x1, 0x1}, 0x50) (async) r18 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001280)=@o_path={&(0x7f0000001240)='./file0\x00', 0x0, 0x4010, r10}, 0x18) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001340)={{r13, 0xffffffffffffffff}, &(0x7f00000012c0), &(0x7f0000001300)=r15}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002500)={r6, 0xffffffffffffffff}, 0x4) (async) r21 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002540)={0xffffffffffffffff, 0x9, 0x8}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002600)={0x6, 0x12, &(0x7f0000001380)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd0f, 0x0, 0x0, 0x0, 0x10}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8681}, @map_val={0x18, 0x4, 0x2, 0x0, r17, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0xa, 0x1, 0x0, r18}, @map_fd={0x18, 0x5, 0x1, 0x0, r5}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x8, 0x1, 0x0, r19}]}, &(0x7f0000001440)='GPL\x00', 0x7fffffff, 0x1000, &(0x7f0000001480)=""/4096, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002480)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000024c0)={0x0, 0xb, 0x4d2, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000002580)=[r20, r6, r13, r8, r21, r8, r9], &(0x7f00000025c0)=[{0x7fff, 0x2, 0x2, 0x6}, {0x4, 0x2, 0x2, 0x9}, {0x0, 0x4, 0xc, 0x4}], 0x10, 0x2}, 0x94) r22 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), r8) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r8, &(0x7f00000027c0)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002780)={&(0x7f0000002740)={0x20, r22, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x2e}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) (async) r23 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r24 = socket$inet_sctp(0x2, 0x1, 0x84) ppoll(&(0x7f0000002800)=[{r23, 0x8000}, {r19, 0x20c0}, {r11, 0x8420}, {r24, 0x1}], 0x4, &(0x7f0000002840)={0x77359400}, &(0x7f0000002880)={[0x5]}, 0x8) 2.416188709s ago: executing program 0 (id=2751): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @broadcast}]}, &(0x7f0000000180)=0x10) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={r1, @in={{0x2, 0x4e21, @empty}}, 0x4, 0x2, 0x80000003, 0x4, 0xe2d8f2eb1d010935, 0x5, 0x9}, 0x9c) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, 0x0, 0x8000000000000002, {}, 0x1}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x23, &(0x7f0000000040)=""/32, &(0x7f0000000080)=0x20) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x20, 0x1, 0x7, 0x201, 0x0, 0x0, {}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008085}, 0x40000c4) r3 = socket(0x2b, 0x80801, 0x1) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth1_to_hsr\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c3, 0x8000, 0x0, 0x0, 0x3dc, 0x0, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x1d, 0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0xffffff9c, 0x2, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x0, 0x4, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x0, 0x2, 0x6c}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x0, 0x4, 0xfffff801}]}, {0x0, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x0, 0x3, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x0, 0x2, 0xd}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x0, 0x2, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x0, 0x2, 0xd}]}, {0x0, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x0, 0x3, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_CMD, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x0, 0x3, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x0, 0x2, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x0, 0x3, 0x10001}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x0, 0x4, 0x7fffffff}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x0, 0x3, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x0, 0x2, 0xaf}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x0, 0x3, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x0, 0x4, 0x2d}]}, {0x0, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x0, 0x4, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x0, 0x3, 0x401}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x0, 0x4, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x0, 0x2, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x0, 0x3, 0x3ff}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x0, 0x4, 0x275}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x0, 0x2, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x0, 0x2, 0xf7}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x0, 0x3, 0x10000}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x0, 0x2, 0x7}]}, {0x0, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x0, 0x2, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x0, 0x3, 0x1000}]}, {0x0, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x0, 0x4, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0xfffffffffffffff8, 0x2, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x0, 0x2, 0x10}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x0, 0x4, 0x401}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x0, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x0, 0x4, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x0, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x0, 0x3, 0x90000}]}]}]}}, @qdisc_kind_options=@q_rr={{}, {0x0, 0x2, {0xa000, "f6c27e4deed7cfe00372e89fc3cccefd"}}}, @qdisc_kind_options=@q_hfsc={{}, {0x0, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x80000001, 0xf, 0x5}}}}, @TCA_EGRESS_BLOCK={0x0, 0xe, 0xfffffff8}, @TCA_EGRESS_BLOCK, @qdisc_kind_options=@q_blackhole]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) setsockopt$inet6_mtu(r3, 0x29, 0x1e, &(0x7f0000000200), 0x4) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'veth1_virt_wifi\x00', &(0x7f0000000240)=@ethtool_rxnfc={0x31, 0x6, 0xfe27, {0xd, @ah_ip4_spec={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0x3}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, 0x8, 0x69, [0x3, 0x5]}, @tcp_ip4_spec={@rand_addr=0x64010102, @loopback, 0x4e23, 0x4e24, 0x4c}, {0x0, @empty, 0x4, 0x9, [0x5, 0x3]}, 0x9, 0x8}, 0x4, [0x1, 0x6, 0x7fffffff, 0x7]}}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r7, &(0x7f00000001c0)="cf4aacc485fca4a9fc212f30d0fdc79fe8567afaa208f70363e06c369ce793a8e6d9e4f8aa8aa3ef2cb70d64b6896a95537bfe53de79a598a2fce2280104b0131c873c66437156f28b9ee81cfb67de82b7443ea900", 0x55, 0x20008040, 0x0, 0x0) 2.343699806s ago: executing program 3 (id=2752): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c000000060a010400000000000000000a00000a0904010073797a31000000000900020073797a320000000020000000000a01080000000000000000050000010900010073797a3100000081750034000000080a030000000000000000000a00000608000940000000010900020073797a32000000000900010073797a310000000014000000110001000000c200000000000200000a"], 0xa8}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x24, r2, 0x1, 0x70bd28, 0x4000001, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}}, 0x80) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r4, &(0x7f0000000d00)=[{{&(0x7f0000000c80)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000c00)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x640100fe}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='[', 0x1}], 0x1}}], 0x2, 0x4000) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0xfffff801, 0x5}, &(0x7f0000000100)=0xc) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r6) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)={0x1c, r11, 0x601, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040844) sendmsg$NL80211_CMD_GET_POWER_SAVE(r6, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x408020}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f00000006c0)={r5, 0x353}, &(0x7f0000000700)=0xc) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r10) sendmsg$IPVS_CMD_ZERO(r7, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r13, @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x20000854}, 0xc0448c4) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x168, r13, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x73}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000000}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2b}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x80040}, 0x850) 2.240249461s ago: executing program 1 (id=2753): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r1 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba00001b2cc32b38d3740000ffffffefffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001c00010029bd7000ffdbdf2507000000", @ANYRESDEC=r3, @ANYRES16=r2], 0x28}}, 0x4040004) 2.162948024s ago: executing program 4 (id=2754): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000000000fefffffffffffd8000000000000000000000000000bbac1414bb000000000000000000000000ffffff2b6b57a470b83fce00000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d33c"], 0x1ac}}, 0x0) 2.153949699s ago: executing program 0 (id=2755): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000030000400000000002010000b7080000000000006b8af8ff00000000b7080000020000407b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000600)={0x14c, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x401}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x51}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x864}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x739}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7fffffff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2e}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x14}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xc}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x14c}}, 0x800) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r6, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000240)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [{{0x254, 0x1, {{0x1, 0x7}, 0x4, 0x8, 0x6, 0x8, 0x1a, 'syz0\x00', "914ba820c09d274ee86c250f05aed67434bf12b56cec7846f2d79717d5b9014a", "f152cdf18d97c0414069203d0f8440c1a030ff45d6c99bcffd3a68fd99dd9662", [{0x8, 0x0, {0x2, 0x800}}, {0x3, 0xfbff}, {0x8, 0x6, {0x2, 0x2}}, {0x8001, 0x7, {0x3, 0xfff}}, {0x6, 0x6, {0x1, 0x2}}, {0x2, 0x1000, {0x2, 0x10001}}, {0x3, 0x1, {0x2, 0x7}}, {0x3, 0xa, {0x0, 0x1}}, {0x3ff, 0x2, {0x3, 0x5}}, {0x1, 0x646, {0x3, 0x5}}, {0x2, 0xae, {0x0, 0x3}}, {0x100, 0x3, {0x3, 0x59}}, {0x9, 0x6, {0x3, 0x2}}, {0xfc01, 0x5, {0x0, 0x7}}, {0x1ff, 0xfff9, {0x0, 0xac99}}, {0x5, 0x2, {0x0, 0x3}}, {0x0, 0x2, {0xe7073a48041ab23b, 0x4}}, {0x0, 0xc, {0x2, 0x5}}, {0x8, 0x1, {0x1, 0x9}}, {0x0, 0x477, {0x0, 0x17}}, {0x101, 0x10, {0x0, 0x1000}}, {0x1, 0xa, {0x1, 0xffff7740}}, {0xffff, 0x587f, {0x1, 0xfffffffe}}, {0xd, 0x0, {0x0, 0x10000}}, {0x0, 0x6654, {0x1, 0x3}}, {0x1, 0x3, {0x0, 0xe682}}, {0x6, 0x400, {0x0, 0x8}}, {0x4, 0xc0a}, {0x8, 0xb4b6, {0x1, 0x1000}}, {0x33a, 0xf87, {0x2, 0x9}}, {0x6, 0x81}, {0x1, 0x4, {0x0, 0x5}}, {0x7, 0x1, {0x2, 0x9}}, {0x7, 0x1, {0x2, 0x6}}, {0x7, 0x9, {0x3, 0x5}}, {0x8, 0xe870, {0x1, 0x7}}, {0x2, 0x1cfe, {0x1, 0x8}}, {0x7, 0x81, {0x0, 0x1}}, {0xb2fb, 0x1, {0x1, 0x8}}, {0xff, 0x3, {0x0, 0x29}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="5400000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f00002c0012800e00010069703665727370616e0000001800028004001200050008000c000000050016000200000008000a00", @ANYRES32=r4], 0x54}, 0x1, 0x0, 0x0, 0xc081}, 0x4) 2.009654061s ago: executing program 1 (id=2757): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x3c}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffff80, 0x10, &(0x7f0000000000), 0x76}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000050000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x4a, &(0x7f0000000240)=0xc04, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$packet(0x11, 0x3, 0x300) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @random="cab250dfc5c6", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd87}}}}}}}, 0x3e) r5 = socket(0x10, 0x803, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000100)={'macsec0\x00', 0x200}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000180), 0x10, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="eb7b0000000000000800000000000000e2e2d8a6b81a804f34b69de39eee64c8411e86ad47e11864ad5de416d11670d031fd234a1cfd2edc931f979f984454c8119a31b58c10df24cb063dc29c1997fad1bab6bf5a55ae81edfcc3169408c09a5a3c60648c9cac078ef9575875f719272ec8af045c6f733a56ac4dd5caa891dc5a23feca07477970b648d85aa9fce111131b78d8dfc3f74b9728531b0cbb76aa14bc8c866097f25d2958e7f10de09fc0a8667d6ec2374609dd3ab59886dabd1923db07ea88502f08f30b888b3783fbac03349bb0e483f36e000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000c001000000000000c01a0000005f443f26877b30c5fcd04b83a241a022c00814bcc21ef25cd07aad09826ed145b258ea917799961c1928c7dab53f510dee0bf73da5df46ee44d217b2413b45"], 0x80}, 0x1, 0x0, 0x0, 0x4014}, 0x40000) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd24, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r8, &(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x100000}, 0xc) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x4, 0xd}, {}, {0x3, 0x7}}}, 0x24}}, 0x40004) r11 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000000c0)=[@window={0x3, 0x2, 0x7}, @mss, @window={0x3, 0x4, 0x9}, @mss={0x2, 0x3d}, @timestamp, @sack_perm, @sack_perm, @sack_perm], 0x8) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000240)={'pim6reg\x00'}) 1.991395765s ago: executing program 4 (id=2758): r0 = socket(0x1e, 0x4, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0x1, &(0x7f0000000100)=0xdb, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f000000ad00)=[{{0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000000580)=""/83, 0x53}, {&(0x7f0000003f00)=""/4108, 0x100c}, {&(0x7f00000025c0)=""/29, 0x1d}, {&(0x7f0000003600)=""/27, 0x1b}], 0x4}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000003940)=""/18, 0x12}], 0x1}}, {{0x0, 0x0, &(0x7f0000003cc0)=[{&(0x7f0000003c00)=""/185, 0xb9}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000008bc0)=""/4096, 0x1000}, {0x0}], 0x2}}], 0x4, 0x40000020, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x2000000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB='H\x00'/20, @ANYRES8=r2, @ANYBLOB="5d58000000000000140003006970766c616e30000000000000000000140012800b0001006970766c616e000004000280"], 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) socket$netlink(0x10, 0x3, 0xb) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0), 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000006f40)={0x0, 0x0, &(0x7f0000006e80)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="000000000000000000000000bdb13e0000000000928fa6e07e845e72f5a92754e7a516f687242a94418b5de0035813c3cc1b67e96ed7165d646d1a8a67813b333dcbfbd522a18b6957cdf8d7802207cc685adc18256b1436fd851a800735b72517910dd1b2008616d3ac297a66e5084c7c8ccd04a57412ebb4da4195bcc1a69ab12f2b7acdc984d99fd805c88bb1e1734683b7f588df9e19f40f51e8a03b4001ab98466a6f9b8d642e3989756b3face5bc"], 0x10}, {&(0x7f0000000380)={0x10, 0x3eb, 0x400}, 0x10}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB="2800000043000789defffffffcdbdf25dc8f26eaccb41eaa2897a7d2f31a027c00000c0045800800040019d03b1eda568b869894544ff0dcbff4f8b10e4cac56ab95a85c21c85538a2b6520d4c377262c045fd44628c64d1505954ff8441e00aa202aed918551d456fce01dc2735b2b358ea463fe256f106c787f1e48f338617ec494ba402903d8e7190fb757310d206cfb81943ba22810c65f84dc7ef30be42215f22e9cf79919e1a32e51d1bd2183b242971ab037b1012bb1bdacf045f5a3052b0c721fca027c7b4f70d08945f97d3c949c8d54b38158e9d14ad38f4b6987f4b3def0da86adbd713c8ac803a8605c495e03cab32b67464", @ANYRES32, @ANYBLOB="0800018004001c80"], 0x28}}, 0x2004c000) tee(r0, 0xffffffffffffffff, 0x6, 0xb) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e00"}) 1.799246122s ago: executing program 3 (id=2759): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), r1) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r2, 0x1, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, 0x4, 0x6, 0x0, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4045050}, 0x8000) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x80800) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x14, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) sendfile(r7, r8, 0x0, 0xff7fffff000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket(0x11, 0x2, 0x0) setsockopt(r10, 0x107, 0x1, &(0x7f00000001c0)="010000000200060000071a80010061cc", 0x10) close(r10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(r3, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10000}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x104}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x8c}}, 0x80) 1.798739106s ago: executing program 0 (id=2760): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000011) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r1) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x17, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda10000fdff000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@map=r4, r3, 0x2f}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup=r3, r4, 0x2f, 0x20, 0x4}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f0000001040)=0x10000b, 0x4) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r7) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r7, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000140)=0x4) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600843b00000c0002", @ANYRES64], 0x30}, 0x1, 0x0, 0x0, 0x4040090}, 0xc000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x40) 1.695625503s ago: executing program 0 (id=2762): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3401000010000100"/20, @ANYRES32=r3, @ANYBLOB="000000000000000014011a80100102803c000180080021000000000008001800000000000800030000000000080009000000000008000c0000000000080012000000000008001f"], 0x134}}, 0x0) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="7a0af8ff75257078bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000044000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce72d75946c2b638d91dbef661962239c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e6fff4942eb613eff289026d5045ef76d7d864409eb2dc9518a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be3cdda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed544126fabe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e022034ac81fd48f9b7314ffa730017fbd37fdb23bc26992529402a520ef67e246415a6a8ca9d4aa797a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f00000000008000000000000000000000000040000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getpeername(r7, 0x0, &(0x7f00000000c0)) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0xe365e39d0c265083}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20048080) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000440)={r8}, &(0x7f0000000540)=0xfffffffffffffd12) 1.58598989s ago: executing program 2 (id=2763): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x2f, 0xa, 0x8e, 0x80, 0x0, @loopback, @dev={0xfe, 0x80, '\x00', 0x41}, 0x10, 0x1, 0x9, 0xec21}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010025"], 0x0, 0x46, 0x0, 0x1}, 0x28) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0xb, 0x1, 0x8000, 0x1, 0x6, 0x2, 0xfe, 0x10, 0x5, 0x4af, 0x200, 0x7e4, 0x1, 0x1, 0x45, [0x8, 0x10000002]}}) 1.431605153s ago: executing program 2 (id=2764): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e200", "d8a024e5", "20000926000200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000001840), 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x10, r3}, 0x10) select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x201}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ldst={0x6}], {0x95, 0x0, 0x0, 0x20}}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xa, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) 1.378236996s ago: executing program 0 (id=2765): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_queued\x00', 0x275a, 0x0) syz_emit_ethernet(0x56, &(0x7f0000001100)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e2fa08", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}, @timestamp={0x8, 0xa, 0x40, 0x66}]}}}}}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_channels={0x3c, 0x1, 0x4, 0x6dd1, 0x4000212a, 0x40000004, 0x6, 0x2, 0x1}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x20048081}, 0xc010) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000100000001dcdf250100000008000100", @ANYRES32=r5, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=r3, @ANYBLOB="6a3f219c3d5014f2d51b1cbcf65a3e53b69f2181654797905f5e452b9feaa2f4907480e2495600662a0b9e79ee6ee19d864b57ee0552e9fe7f022d7c5eb41745b1f1cf5a17cefe83a7daae4138ae14585ef80e45099ef4efddabfb1e739cc1b570daba4064f1d90beeba6949fcecbfa4212b3c9c202b18a81527bc0e7bfaa7ef28e2152608940c0625161a4b99b8bfaa130172769e5af449041fb9d4287b592e925047b502454e894abb2b1fef7027fc35649ac692b6bb5c18a8ca8b"], 0x60}, 0x1, 0x400000000000000}, 0x40810) r10 = socket$inet_sctp(0x2, 0x5, 0x84) r11 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0xa, &(0x7f0000000080)={0x3, 0x1, 0x10001, 0x3, 0x7b00, 0x3a84, 0x4, 0x2, r12}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000400)={r12, 0xfff, 0x5d, "337f0eeb37854860b39afba98a8e93b6634aac3e0626b740fb43e0f772dc7deeeebe04e78929e7e1c6811795387f81e1619dfc9349bc65ff334591ca3eee6e4ceab60184926a1135d0b922522a7259700f4c4817fa1955b5622a7b6f10"}, 0x65) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000580)={{r6, &(0x7f0000000080)='\xd7\\/}\xde\\\x00', 0x10200, &(0x7f0000000100)={@_ha_fsid={[0x2, 0x2]}, {0x6, 0x40, 0x8, 0x8}}, 0x1ff, &(0x7f00000004c0)={@_ha_fsid}, &(0x7f0000000500)}, {[0x5, 0xa7e2, 0x13e, 0x8]}, 0x0, 0x16, &(0x7f0000000540)=""/22}) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000600)={0x0, 0x3}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r13, 0x84, 0x1, &(0x7f0000000680)={r14, 0xda6e, 0x8, 0x9, 0xf7d}, &(0x7f00000006c0)=0x14) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) connect$llc(r0, 0x0, 0x0) 1.199535713s ago: executing program 2 (id=2766): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10, 0x0}, 0x3000c085) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f00000000c0)="4496e265f38d19ebcab9b06de2315b125eecbcab21462cefecc5faf663e9df8f163cbc2c1d5f9334b0a5301bcbc7eb1d2714b4681e9faf47ba700749e49dffe29a1ccf7bcf66e2c7cded") recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x10}}], 0x10}, 0x40000000) setsockopt$sock_attach_bpf(r1, 0x6, 0x13, &(0x7f0000000200), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) r4 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41b2cc32b38d3440c6942cb76cab300"/57, 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, 0x0, 0x0) 1.047263846s ago: executing program 4 (id=2767): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000004c0)="e6", 0x1}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee00}}}], 0x20, 0x40081}, 0x10044080) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0xb0, 0x23, 0x200, 0x0, 0x25dfdbff, {0x9, 0x7c}, [@nested={0x4, 0x1}, @nested={0x4, 0x2}, @typed={0x8, 0x7d, 0x0, 0x0, @pid=r1}, @generic="e85db41e87b35b19471d9c129581fe41d4cea903fb410373eeb3bd1c0cc5a78b69eb7e112918455b96c1598fab49bf3e21d4f73efe4e0a3c0c85cce111bddf94ae63fa813ee5112f775dfd1c8e58904d20cdf84af1e3fde890a26968a39f5e3b3c15028c4104741e3a50703e075208faeea6dafed7f4e6f5bf2751aab37210322a58ad6a28564f07c9a339"]}, 0xb0}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sendmsg$nl_route(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fffbcfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000cf74aae1001400128009000100766574680000000004000200"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c014}, 0x4000080) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) getpid() (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000004c0)="e6", 0x1}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee00}}}], 0x20, 0x40081}, 0x10044080) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0xb0, 0x23, 0x200, 0x0, 0x25dfdbff, {0x9, 0x7c}, [@nested={0x4, 0x1}, @nested={0x4, 0x2}, @typed={0x8, 0x7d, 0x0, 0x0, @pid=r1}, @generic="e85db41e87b35b19471d9c129581fe41d4cea903fb410373eeb3bd1c0cc5a78b69eb7e112918455b96c1598fab49bf3e21d4f73efe4e0a3c0c85cce111bddf94ae63fa813ee5112f775dfd1c8e58904d20cdf84af1e3fde890a26968a39f5e3b3c15028c4104741e3a50703e075208faeea6dafed7f4e6f5bf2751aab37210322a58ad6a28564f07c9a339"]}, 0xb0}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) sendmsg$nl_route(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fffbcfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000cf74aae1001400128009000100766574680000000004000200"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c014}, 0x4000080) (async) 994.583274ms ago: executing program 2 (id=2768): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000000000fefffffffffffd8000000000000000000000000000bbac1414bb000000000000000000000000ffffff2b6b57a470b83fce00000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d33c"], 0x1ac}}, 0x0) 916.7869ms ago: executing program 2 (id=2769): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c000000060a010400000000000000000a00000a0904010073797a31000000000900020073797a320000000020000000000a01080000000000000000050000010900010073797a3100000081750034000000080a030000000000000000000a00000608000940000000010900020073797a32000000000900010073797a310000000014000000110001000000c200000000000200000a"], 0xa8}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x24, r2, 0x1, 0x70bd28, 0x4000001, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}}, 0x80) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r4, &(0x7f0000000d00)=[{{&(0x7f0000000c80)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000c00)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x640100fe}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='[', 0x1}], 0x1}}], 0x2, 0x4000) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0xfffff801, 0x5}, &(0x7f0000000100)=0xc) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r6) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)={0x1c, r11, 0x601, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040844) sendmsg$NL80211_CMD_GET_POWER_SAVE(r6, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x408020}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f00000006c0)={r5, 0x353}, &(0x7f0000000700)=0xc) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r10) sendmsg$IPVS_CMD_ZERO(r7, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r13, @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x20000854}, 0xc0448c4) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x168, r13, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x73}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000000}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2b}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x80040}, 0x850) 839.615962ms ago: executing program 3 (id=2770): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1) (async) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x1, 0x8, 0x40}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xb}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x10000000, 0x2, 0x77}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xb023}, @TCA_SKBEDIT_PTYPE={0x6}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) socket$kcm(0x10, 0x2, 0x0) (async) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) (async) sendmsg$can_bcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0100000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000002000040050104"], 0x48}}, 0x20004800) (async) sendmmsg$inet6(r0, &(0x7f0000003740)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0xf, @private1, 0x405}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000280)="b7", 0x1}], 0x1}}], 0x1, 0x0) (async) r14 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r14, &(0x7f0000000040)={0xa, 0xe22, 0x7fff}, 0x1c) (async) connect$inet6(r14, &(0x7f0000000000)={0xa, 0x4e21, 0x6, @loopback, 0x3}, 0x1c) 646.242943ms ago: executing program 1 (id=2771): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c000000060a010400000000000000000a00000a0904010073797a31000000000900020073797a320000000020000000000a01080000000000000000050000010900010073797a3100000081750034000000080a030000000000000000000a00000608000940000000010900020073797a32000000000900010073797a310000000014000000110001000000c200000000000200000a"], 0xa8}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x24, r2, 0x1, 0x70bd28, 0x4000001, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}}, 0x80) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r4, &(0x7f0000000d00)=[{{&(0x7f0000000c80)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000c00)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x640100fe}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='[', 0x1}], 0x1}}], 0x2, 0x4000) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0xfffff801, 0x5}, &(0x7f0000000100)=0xc) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r6) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)={0x1c, r11, 0x601, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040844) sendmsg$NL80211_CMD_GET_POWER_SAVE(r6, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x408020}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f00000006c0)={r5, 0x353}, &(0x7f0000000700)=0xc) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r10) sendmsg$IPVS_CMD_ZERO(r7, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r13, @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x20000854}, 0xc0448c4) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x168, r13, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x73}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000000}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2b}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x80040}, 0x850) 575.05891ms ago: executing program 4 (id=2772): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x104}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newtaction={0x80, 0x30, 0xb, 0x70bd2d, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000003, 0x0, 0x8, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8890}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) unshare(0x2a060400) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x9, 0x3, 0x63c, 0xe, 0x6, 0x2, 0x6, 0x1bfa, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x3, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0x100aa, 0x7f, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x1, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x0, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20004, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010027bd7000fedbdf2500000000", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80) unshare(0x400) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg(r5, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0xf}}], 0x1, 0x24008000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x7, &(0x7f00000003c0)=@framed={{}, [@ringbuf_query]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) 357.403983ms ago: executing program 0 (id=2773): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000001200030600"/18, @ANYRES32=0x0, @ANYBLOB="2fedaa88000000003800128009000100766c616e000000002800028006000100000000000c0002000000000000000000100004800c00010000000000", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x74}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000004000000020000000000000c02000000000000000200000d000000000100000001080000000000000000000000005f"], 0x0, 0x44, 0x0, 0x0, 0xffffffff}, 0x28) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002fff500240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000a}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r5 = accept4(r2, 0x0, 0x0, 0x800) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000180)) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000001701000003000000010000000000000011000000000000001701000003"], 0x1140, 0x4004084}], 0x1, 0x40800) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x11, 0x4, 0x4, 0x9}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x1000, 0x1, r6}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r7}, &(0x7f00000002c0), &(0x7f0000000400)=r7}, 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001080)={0x14, 0x0, 0x1, 0x3, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000841}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x54, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x40}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa507}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000080)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x11}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) 273.465827ms ago: executing program 2 (id=2774): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000001440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random='@\x00'}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES64], 0x32600) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xf, 0x5, 0x7, 0xc1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, &(0x7f0000000340), &(0x7f0000000300)=""/177}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x14) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x24000000) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005200), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000140)=@ethtool_gfeatures}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeed, 0x8031, 0xffffffffffffffff, 0x32cc0000) r7 = socket$inet_smc(0x2b, 0x1, 0x0) unshare(0x8000400) getsockopt$inet_tcp_buf(r7, 0x6, 0xd, 0x0, &(0x7f00000000c0)) 4.540633ms ago: executing program 3 (id=2775): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) clock_gettime(0x0, &(0x7f0000001440)) (async) clock_gettime(0x0, &(0x7f0000001440)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001400)=[{{&(0x7f0000000100)=@generic, 0x80, &(0x7f0000000380)=[{&(0x7f0000000180)=""/36, 0x24}, {&(0x7f00000001c0)=""/159, 0x9f}, {&(0x7f0000000280)=""/26, 0x1a}, {&(0x7f00000002c0)=""/49, 0x31}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/1, 0x1}], 0x6, &(0x7f0000000400)=""/4096, 0x1000}, 0x9}], 0x1, 0x2, &(0x7f0000001480)={r1, r2+60000000}) epoll_create1(0x0) (async) r3 = epoll_create1(0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004680), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r11, &(0x7f00000052c0)={0x0, 0x0, &(0x7f0000005280)={&(0x7f0000005100)={0x20, r10, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40008d6}, 0x840) (async) sendmsg$NL80211_CMD_REQ_SET_REG(r11, &(0x7f00000052c0)={0x0, 0x0, &(0x7f0000005280)={&(0x7f0000005100)={0x20, r10, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40008d6}, 0x840) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0x1b, 0x7fffffff, 0x1, 0x0, 0x10001}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x404d881}, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r12, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14) socket$unix(0x1, 0x1, 0x0) (async) r13 = socket$unix(0x1, 0x1, 0x0) close(r13) socket(0x2000000000000021, 0x2, 0x2) setsockopt$sock_int(r13, 0x1, 0x2, &(0x7f0000000300), 0x4) (async) setsockopt$sock_int(r13, 0x1, 0x2, &(0x7f0000000300), 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r13, &(0x7f00000000c0)={0xa0028000}) 0s ago: executing program 1 (id=2776): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x33fe0}}, 0x4000050) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000280)="2464499ad49a130d04d78f076dc52d6f53f1ee22f47afb6010939c6b855bd20e866ae15e761665e3f932da3810c99b0fa501d652971c3ff3d2a8d72acadcdd13cd95829c4c3301106d73a9674d97f02412e240a8085feedce1e1084f4bdc0e4bd175c1507da2d8133e3307ee5be06dd3007e215e1630467c764238b51021936b7b79b2d95659429780a135017d273e5fb62be4750200d5253a760958955f7bdf47e811f8feb9ac08356555beb6713ad4", 0xb0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r4, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="0600cd00000000006c003300d0200900080211000001080211000000505050505050"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r4, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x9}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x4}]}, 0x40}}, 0x10) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x33fe0}}, 0x4000050) (async) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000080)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) write(r0, &(0x7f0000000280)="2464499ad49a130d04d78f076dc52d6f53f1ee22f47afb6010939c6b855bd20e866ae15e761665e3f932da3810c99b0fa501d652971c3ff3d2a8d72acadcdd13cd95829c4c3301106d73a9674d97f02412e240a8085feedce1e1084f4bdc0e4bd175c1507da2d8133e3307ee5be06dd3007e215e1630467c764238b51021936b7b79b2d95659429780a135017d273e5fb62be4750200d5253a760958955f7bdf47e811f8feb9ac08356555beb6713ad4", 0xb0) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r4, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="0600cd00000000006c003300d0200900080211000001080211000000505050505050"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r4, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x9}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x4}]}, 0x40}}, 0x10) (async) kernel console output (not intermixed with test programs): 0.1432'. [ 245.681799][T11289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1435'. [ 245.821389][T11294] syzkaller0: entered promiscuous mode [ 245.835891][T11294] syzkaller0: entered allmulticast mode [ 245.923429][T11294] tipc: Enabled bearer , priority 0 [ 245.966753][T11293] tipc: Resetting bearer [ 246.102137][T11293] tipc: Disabling bearer [ 246.601320][T11298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.613772][T11318] No such timeout policy "syz1" [ 246.644735][T11298] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.720302][T11298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.892422][T11298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.909186][T11298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.962063][T11298] veth1_vlan: left promiscuous mode [ 246.982103][T11298] veth0_vlan: left promiscuous mode [ 246.994130][T11298] veth0_vlan: entered promiscuous mode [ 247.013472][T11298] veth1_vlan: entered promiscuous mode [ 247.056813][T11298] veth1_macvtap: left promiscuous mode [ 247.081965][T11298] veth0_macvtap: left promiscuous mode [ 247.107675][T11298] veth0_macvtap: entered promiscuous mode [ 247.120112][T11298] veth1_macvtap: entered promiscuous mode [ 247.145737][T11298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 247.154831][T11298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 247.164213][T11298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 247.174809][T11298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 247.191264][T11298] 8021q: adding VLAN 0 to HW filter on device bond1 [ 247.213588][T11298] 8021q: adding VLAN 0 to HW filter on device bond2 [ 247.224041][T11298] 8021q: adding VLAN 0 to HW filter on device bond3 [ 247.235258][T11298] 8021q: adding VLAN 0 to HW filter on device bond4 [ 247.255330][T11298] syz_tun: entered promiscuous mode [ 247.270287][T11298] 8021q: adding VLAN 0 to HW filter on device team1 [ 247.287664][T11298] 8021q: adding VLAN 0 to HW filter on device team2 [ 247.299415][T11298] 8021q: adding VLAN 0 to HW filter on device bond5 [ 247.313504][T11298] 8021q: adding VLAN 0 to HW filter on device bond6 [ 247.331761][T11298] 8021q: adding VLAN 0 to HW filter on device bond7 [ 247.341550][T11298] 8021q: adding VLAN 0 to HW filter on device bond8 [ 247.349784][T11298] 8021q: adding VLAN 0 to HW filter on device bond9 [ 247.365306][T11298] 8021q: adding VLAN 0 to HW filter on device bond10 [ 247.377218][T11298] 8021q: adding VLAN 0 to HW filter on device bond11 [ 247.385307][T11298] 8021q: adding VLAN 0 to HW filter on device bond12 [ 247.392896][T11298] ip6gretap0: entered promiscuous mode [ 247.417026][T11298] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 247.435421][T11336] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 247.488711][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.495953][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.510409][ T60] bridge0: port 3(vlan2) entered blocking state [ 247.516858][ T60] bridge0: port 3(vlan2) entered forwarding state [ 247.529532][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.536980][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.590389][ T3325] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0 [ 247.619247][ T3325] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.649686][ T3325] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 247.689972][ T3325] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.757595][ T3325] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 247.767229][ T3325] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.776219][ T3325] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0 [ 247.789760][ T3325] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.840572][ T3325] bond9: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 247.873951][ T3325] bond9: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 247.888111][ T3325] bond9: (slave veth3): making interface the new active one [ 247.926208][ T3325] bond9: active interface up! [ 247.951835][T11371] Bluetooth: MGMT ver 1.23 [ 247.985556][ T230] ip6_tunnel: - xmit: Local address not yet configured! [ 248.034247][ T10] ip6_tunnel: - xmit: Local address not yet configured! [ 248.047648][ T230] ip6_tunnel: - xmit: Local address not yet configured! [ 248.095567][T11365] syzkaller0: entered promiscuous mode [ 248.107745][T11365] syzkaller0: entered allmulticast mode [ 248.220084][ T10] ip6_tunnel: - xmit: Local address not yet configured! [ 248.251542][ T10] ip6_tunnel: - xmit: Local address not yet configured! [ 248.328930][T11376] "syz.1.1456" (11376) uses obsolete ecb(arc4) skcipher [ 248.364701][T11388] syzkaller0: entered promiscuous mode [ 248.379305][T11388] syzkaller0: entered allmulticast mode [ 248.512787][T11402] xt_nat: multiple ranges no longer supported [ 248.960824][T11414] ip6erspan0: entered allmulticast mode [ 249.026653][T11424] __nla_validate_parse: 9 callbacks suppressed [ 249.026672][T11424] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1468'. [ 249.061122][T11424] macsec1: left promiscuous mode [ 249.076061][T11424] gtp0: left promiscuous mode [ 249.379300][T11438] can: request_module (can-proto-0) failed. [ 249.486038][T11448] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1475'. [ 249.519204][T11442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1473'. [ 249.521261][T11438] batman_adv: batadv0: Adding interface: dummy0 [ 249.535151][T11448] netlink: 'syz.3.1475': attribute type 1 has an invalid length. [ 249.548531][T11442] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1473'. [ 249.570177][T11438] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.600686][T11442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1473'. [ 249.610935][T11442] netlink: 'syz.0.1473': attribute type 5 has an invalid length. [ 249.616780][T11438] batman_adv: batadv0: Interface activated: dummy0 [ 249.620178][T11455] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1477'. [ 249.635567][T11455] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1477'. [ 249.682194][T11454] batadv0: mtu less than device minimum [ 249.692281][T11454] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 249.705005][T11454] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 249.717576][T11454] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 249.728867][T11454] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 249.740664][T11454] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 249.752427][T11454] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 249.764270][T11454] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 249.775486][T11454] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 249.931657][T11452] bond16 (unregistering): Released all slaves [ 250.204505][T11471] syz_tun: entered allmulticast mode [ 250.308921][T11482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1483'. [ 250.328730][T11482] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1483'. [ 250.622973][T11492] netlink: 'syz.1.1486': attribute type 21 has an invalid length. [ 250.646236][T11492] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1486'. [ 250.656622][T11492] netlink: 'syz.1.1486': attribute type 1 has an invalid length. [ 250.857446][T11503] netlink: 'syz.2.1491': attribute type 1 has an invalid length. [ 251.011258][T11503] bond14 (unregistering): Released all slaves [ 251.422310][T11534] netlink: 'syz.2.1497': attribute type 1 has an invalid length. [ 251.729251][T11516] bond8: left promiscuous mode [ 251.736573][T11516] bond9: left promiscuous mode [ 251.756874][ C0] ip6_tunnel: - xmit: Local address not yet configured! [ 251.780679][T11516] bond15: left promiscuous mode [ 251.858636][T11524] bond18: Removing last arp target with arp_interval on [ 252.116056][T11560] syzkaller0: entered promiscuous mode [ 252.132460][T11560] syzkaller0: entered allmulticast mode [ 252.658338][T11583] netlink: 'syz.4.1505': attribute type 1 has an invalid length. [ 252.727676][T11583] 8021q: adding VLAN 0 to HW filter on device bond10 [ 252.763950][T11578] netlink: 'syz.2.1504': attribute type 10 has an invalid length. [ 252.798729][T11583] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 252.808753][T11578] net_ratelimit: 12 callbacks suppressed [ 252.808771][T11578] openvswitch: netlink: Message has 4 unknown bytes. [ 252.833024][T11583] macvlan2: entered promiscuous mode [ 252.839002][T11583] macvlan2: entered allmulticast mode [ 252.845349][T11583] bond10: entered promiscuous mode [ 252.855028][T11583] veth0_to_bond: entered promiscuous mode [ 252.872836][T11583] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 252.892212][T11583] bond10: left promiscuous mode [ 252.908920][T11583] veth0_to_bond: left promiscuous mode [ 253.260007][T11612] netlink: 'syz.0.1509': attribute type 1 has an invalid length. [ 253.360039][T11620] netlink: 'syz.4.1511': attribute type 1 has an invalid length. [ 253.400456][T11620] 8021q: adding VLAN 0 to HW filter on device bond11 [ 253.427194][T11612] bond13: entered promiscuous mode [ 253.434985][T11612] bond13: entered allmulticast mode [ 253.443588][T11612] 8021q: adding VLAN 0 to HW filter on device bond13 [ 253.475486][T11620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.515477][T11620] bond11: (slave batadv0): making interface the new active one [ 253.592200][T11620] bond11: (slave batadv0): Enslaving as an active interface with an up link [ 253.838830][T11637] sch_fq: defrate 8 ignored. [ 253.845938][T11640] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 253.866221][T11639] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 254.186655][T11660] __nla_validate_parse: 9 callbacks suppressed [ 254.186673][T11660] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1521'. [ 254.258986][T11662] geneve1: entered promiscuous mode [ 254.295352][T11657] atomic_op ffff88807fb12198 conn xmit_atomic 0000000000000000 [ 254.436035][T11660] bond16 (unregistering): Released all slaves [ 254.853607][T11673] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1523'. [ 255.204730][T11690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1526'. [ 255.379989][T11702] validate_nla: 1 callbacks suppressed [ 255.380010][T11702] netlink: 'syz.2.1530': attribute type 1 has an invalid length. [ 255.476588][T11705] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1530'. [ 255.735692][T11702] bond14: entered promiscuous mode [ 255.744640][T11702] 8021q: adding VLAN 0 to HW filter on device bond14 [ 255.757084][T11705] bond14: entered allmulticast mode [ 255.775062][T11709] lo speed is unknown, defaulting to 1000 [ 255.832759][T11713] bond14: (slave bridge3): making interface the new active one [ 255.843965][T11713] bridge3: entered promiscuous mode [ 255.850018][T11713] bridge3: entered allmulticast mode [ 255.858394][T11713] bond14: (slave bridge3): Enslaving as an active interface with an up link [ 255.867683][T11709] lo speed is unknown, defaulting to 1000 [ 255.891912][T11709] lo speed is unknown, defaulting to 1000 [ 255.901520][T11709] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 255.916883][T11709] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 255.943457][T11709] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 255.981892][T11709] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 256.031729][T11709] lo speed is unknown, defaulting to 1000 [ 256.037030][T11719] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1533'. [ 256.042670][T11709] lo speed is unknown, defaulting to 1000 [ 256.061074][T11709] lo speed is unknown, defaulting to 1000 [ 256.070423][T11709] lo speed is unknown, defaulting to 1000 [ 256.087386][T11709] lo speed is unknown, defaulting to 1000 [ 256.128849][T11722] netlink: 'syz.1.1533': attribute type 1 has an invalid length. [ 256.188465][T11724] bond15 (unregistering): Released all slaves [ 256.228275][T11728] bond19 (unregistering): Released all slaves [ 258.175824][T11690] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 258.475854][T11741] bridge3: entered promiscuous mode [ 258.500726][T11741] bridge3: entered allmulticast mode [ 258.536852][T11741] team0: Port device bridge3 added [ 258.767680][T11770] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1546'. [ 258.784776][T11763] netlink: 'syz.3.1543': attribute type 1 has an invalid length. [ 258.795898][T11769] tipc: Enabled bearer , priority 0 [ 258.823025][T11769] syzkaller0: entered promiscuous mode [ 258.825890][T11770] netlink: 'syz.4.1546': attribute type 1 has an invalid length. [ 258.848603][T11769] syzkaller0: entered allmulticast mode [ 259.044256][T11777] bond12 (unregistering): Released all slaves [ 259.124357][T11778] tipc: Resetting bearer [ 259.130602][T11785] dummy0: mtu less than device minimum [ 259.145307][T11767] tipc: Resetting bearer [ 259.260870][T11797] netlink: 'syz.0.1550': attribute type 16 has an invalid length. [ 259.283134][T11797] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1550'. [ 259.350439][T11801] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1551'. [ 259.355635][T11793] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 259.372049][T11767] tipc: Disabling bearer [ 259.526129][T11806] netlink: 'syz.0.1552': attribute type 1 has an invalid length. [ 259.676995][ C0] ip6_tunnel: - xmit: Local address not yet configured! [ 259.998041][ T9567] ip6_tunnel: - xmit: Local address not yet configured! [ 260.112777][T11832] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1558'. [ 260.157803][T11831] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1557'. [ 260.246922][ T9567] ip6_tunnel: - xmit: Local address not yet configured! [ 260.774730][T11862] netlink: 'syz.4.1564': attribute type 2 has an invalid length. [ 261.643210][T11892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1570'. [ 261.747799][T11895] netlink: 'syz.4.1571': attribute type 1 has an invalid length. [ 261.795809][T11895] netlink: 'syz.4.1571': attribute type 12 has an invalid length. [ 261.811229][T11895] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1571'. [ 261.912975][T11898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1573'. [ 261.929257][T11898] netlink: 'syz.2.1573': attribute type 1 has an invalid length. [ 262.007933][T11904] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 262.087871][T11909] tipc: Can't bind to reserved service type 1 [ 262.187697][T11919] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1577'. [ 262.378626][T11913] lo speed is unknown, defaulting to 1000 [ 262.528056][T11934] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1582'. [ 263.133246][T11913] dvmrp0: entered allmulticast mode [ 263.321824][ T230] dvmrp0: left allmulticast mode [ 263.421183][T11998] netlink: 'syz.3.1592': attribute type 4 has an invalid length. [ 263.460054][T11998] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1592'. [ 263.896434][T12011] bond14: left promiscuous mode [ 263.909933][T12011] bridge3: left promiscuous mode [ 263.923537][T12011] bond14: left allmulticast mode [ 263.945441][T12011] bridge3: left allmulticast mode [ 264.292526][T12034] netlink: 'syz.2.1602': attribute type 1 has an invalid length. [ 264.306531][T12034] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.750405][T12051] syzkaller0: entered promiscuous mode [ 264.766314][T12051] syzkaller0: entered allmulticast mode [ 264.795290][T12051] __nla_validate_parse: 2 callbacks suppressed [ 264.795319][T12051] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1608'. [ 265.012892][T12058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1610'. [ 265.457287][T12078] bridge0: port 4(syz_tun) entered blocking state [ 265.480547][T12078] bridge0: port 4(syz_tun) entered disabled state [ 265.503995][T12078] syz_tun: entered allmulticast mode [ 265.529684][T12084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1617'. [ 265.533813][T12078] syz_tun: left allmulticast mode [ 265.573870][T12080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1618'. [ 265.679254][T12084] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 266.069585][T12103] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1621'. [ 266.550563][T12131] netlink: 'syz.1.1627': attribute type 3 has an invalid length. [ 266.588447][T12131] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1627'. [ 266.986219][T12145] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 267.096769][T12151] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1634'. [ 267.121550][T12145] bridge4: entered promiscuous mode [ 267.129292][T12145] bridge4: entered allmulticast mode [ 267.293298][T12157] geneve1: left promiscuous mode [ 267.332572][T12157] bridge3: left promiscuous mode [ 267.354308][T12157] bridge3: left allmulticast mode [ 267.516135][T12175] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 267.702254][T12188] xt_hashlimit: size too large, truncated to 1048576 [ 267.950958][T12195] syzkaller1: entered promiscuous mode [ 267.965083][T12195] syzkaller1: entered allmulticast mode [ 267.982522][T12200] netlink: 524 bytes leftover after parsing attributes in process `syz.3.1645'. [ 268.116092][T12203] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1646'. [ 268.342826][T12207] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1648'. [ 268.696188][T12228] netlink: 'syz.1.1655': attribute type 1 has an invalid length. [ 268.891962][ T5625] block nbd0: Receive control failed (result -32) [ 269.193894][T12260] syz_tun: left allmulticast mode [ 269.257988][T12260] geneve1: left promiscuous mode [ 269.813569][T12296] __nla_validate_parse: 4 callbacks suppressed [ 269.813588][T12296] netlink: 276 bytes leftover after parsing attributes in process `syz.0.1673'. [ 270.158846][T12279] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 270.501798][ T30] audit: type=1804 audit(1784127228.591:9): pid=12317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1680" name="/newroot/359/cgroup.controllers" dev="tmpfs" ino=1858 res=1 errno=0 [ 270.586584][ T30] audit: type=1800 audit(1784127228.631:10): pid=12317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1680" name="cgroup.controllers" dev="tmpfs" ino=1858 res=0 errno=0 [ 270.647286][T12318] block nbd1: server does not support multiple connections per device. [ 270.682302][T12318] block nbd1: shutting down sockets [ 270.826804][T12321] tipc: Failed to remove unknown binding: 66,0,0/0:792819096/792819098 [ 270.847866][T12321] tipc: Failed to remove unknown binding: 66,0,0/0:792819096/792819097 [ 270.881293][T12328] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1682'. [ 271.005104][T12340] tipc: Failed to remove unknown binding: 66,0,0/0:792819096/792819098 [ 271.026534][T12340] tipc: Failed to remove unknown binding: 66,0,0/0:792819096/792819097 [ 271.218964][T12352] netlink: 'syz.2.1688': attribute type 29 has an invalid length. [ 271.506092][T12357] tipc: Enabled bearer , priority 0 [ 271.551173][T12357] syzkaller0: entered promiscuous mode [ 271.588225][T12357] syzkaller0: entered allmulticast mode [ 271.660291][T12357] tipc: Resetting bearer [ 271.713414][T12364] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1691'. [ 271.733137][T12356] tipc: Resetting bearer [ 271.743780][T12364] netlink: 'syz.0.1691': attribute type 1 has an invalid length. [ 271.845441][T12356] tipc: Disabling bearer [ 272.082573][T12365] bond15: (slave bridge6): Enslaving as a backup interface with an up link [ 272.102854][T12378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1693'. [ 272.119662][T12378] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1693'. [ 272.403463][T12389] netlink: 'syz.0.1696': attribute type 29 has an invalid length. [ 272.420724][T12389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1696'. [ 272.445142][T12392] netlink: 'syz.0.1696': attribute type 29 has an invalid length. [ 272.464165][T12392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1696'. [ 272.485882][T12392] netlink: 'syz.0.1696': attribute type 29 has an invalid length. [ 272.521940][T12392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1696'. [ 272.532503][T12392] netlink: 'syz.0.1696': attribute type 29 has an invalid length. [ 272.543080][T12392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1696'. [ 272.554198][T12397] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1697'. [ 272.593256][T12392] netlink: 'syz.0.1696': attribute type 29 has an invalid length. [ 272.604094][T12392] netlink: 'syz.0.1696': attribute type 29 has an invalid length. [ 272.614924][T12392] netlink: 'syz.0.1696': attribute type 29 has an invalid length. [ 272.625225][T12392] netlink: 'syz.0.1696': attribute type 29 has an invalid length. [ 272.633948][T12392] netlink: 'syz.0.1696': attribute type 29 has an invalid length. [ 273.235370][T12429] x_tables: duplicate entry at hook 1 [ 273.301096][T12432] syzkaller0: entered promiscuous mode [ 273.324236][T12432] syzkaller0: entered allmulticast mode [ 273.545588][T12445] syzkaller0: entered promiscuous mode [ 273.551892][T12445] syzkaller0: entered allmulticast mode [ 273.579883][T12450] veth0_to_team: entered promiscuous mode [ 273.608491][T12450] veth0_to_team: left promiscuous mode [ 273.846097][T12457] bond20: Unable to set up delay as MII monitoring is disabled [ 273.879401][T12457] bond20 (unregistering): Released all slaves [ 274.266738][T12475] team3: entered promiscuous mode [ 274.285625][T12475] team3: entered allmulticast mode [ 274.297875][T12475] 8021q: adding VLAN 0 to HW filter on device team3 [ 275.425134][T12534] __nla_validate_parse: 73 callbacks suppressed [ 275.425154][T12534] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1734'. [ 275.677233][ C0] ip6_tunnel: - xmit: Local address not yet configured! [ 277.295050][T12482] team4: entered promiscuous mode [ 277.300229][T12482] team4: entered allmulticast mode [ 277.305685][T12482] 8021q: adding VLAN 0 to HW filter on device team4 [ 277.494170][T12533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.532466][T12533] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.562203][T12533] tipc: Resetting bearer [ 277.603336][T12533] tipc: Resetting bearer [ 277.825670][T12557] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1735'. [ 277.849328][T12533] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 277.879843][T12533] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 277.918781][T12533] veth1_vlan: left promiscuous mode [ 277.930038][T12533] veth0_vlan: left promiscuous mode [ 277.938052][T12533] veth0_vlan: entered promiscuous mode [ 277.947943][T12533] veth1_vlan: entered promiscuous mode [ 277.960051][T12533] veth1_macvtap: left promiscuous mode [ 277.969409][T12533] veth0_macvtap: left promiscuous mode [ 277.986845][T12533] veth0_macvtap: entered promiscuous mode [ 278.003908][T12533] veth1_macvtap: entered promiscuous mode [ 278.020731][T12533] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 278.033283][T12563] netlink: 1740 bytes leftover after parsing attributes in process `syz.3.1742'. [ 278.034240][T12533] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 278.056152][T12533] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 278.081529][T12533] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 278.113521][T12533] 8021q: adding VLAN 0 to HW filter on device bond1 [ 278.125518][T12533] 8021q: adding VLAN 0 to HW filter on device bond2 [ 278.138163][T12533] 8021q: adding VLAN 0 to HW filter on device bond3 [ 278.148102][T12533] 8021q: adding VLAN 0 to HW filter on device bond4 [ 278.157736][T12533] 8021q: adding VLAN 0 to HW filter on device bond5 [ 278.165813][T12533] 8021q: adding VLAN 0 to HW filter on device bond6 [ 278.176595][T12533] 8021q: adding VLAN 0 to HW filter on device bond7 [ 278.184391][T12533] 8021q: adding VLAN 0 to HW filter on device bond8 [ 278.193759][T12533] 8021q: adding VLAN 0 to HW filter on device bond9 [ 278.208734][T12533] 8021q: adding VLAN 0 to HW filter on device bond10 [ 278.217444][T12533] 8021q: adding VLAN 0 to HW filter on device bond11 [ 278.240039][T12533] bridge0: port 1(vlan3) entered blocking state [ 278.246575][T12533] bridge0: port 1(vlan3) entered forwarding state [ 278.255340][T12533] geneve0: entered promiscuous mode [ 278.264099][T12533] 8021q: adding VLAN 0 to HW filter on device bond12 [ 278.272221][T12533] 8021q: adding VLAN 0 to HW filter on device bond13 [ 278.293558][T12533] 8021q: adding VLAN 0 to HW filter on device bond14 [ 278.302582][T12533] bridge4: left promiscuous mode [ 278.307773][T12533] bridge4: left allmulticast mode [ 278.442535][ T230] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.469577][ T230] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.733893][T12582] validate_nla: 28 callbacks suppressed [ 278.733912][T12582] netlink: 'syz.2.1749': attribute type 30 has an invalid length. [ 278.806177][T12586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1751'. [ 278.821008][T12588] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1750'. [ 278.848642][T12588] af_packet: tpacket_rcv: packet too big, clamped from 344 to 4294967272. macoff=96 [ 279.278734][T12565] 0·: left allmulticast mode [ 279.287274][T12565] hsr_slave_0: left allmulticast mode [ 279.298136][T12565] hsr_slave_1: left allmulticast mode [ 279.459163][T12602] sctp_setsockopt_delayed_ack: 24 callbacks suppressed [ 279.459183][T12602] sctp: [Deprecated]: syz.1.1753 (pid 12602) Use of struct sctp_assoc_value in delayed_ack socket option. [ 279.459183][T12602] Use struct sctp_sack_info instead [ 279.484315][T12603] sctp: [Deprecated]: syz.1.1753 (pid 12603) Use of struct sctp_assoc_value in delayed_ack socket option. [ 279.484315][T12603] Use struct sctp_sack_info instead [ 279.509108][T12602] sctp_getsockopt_delayed_ack: 23 callbacks suppressed [ 279.509128][T12602] sctp: [Deprecated]: syz.1.1753 (pid 12602) Use of struct sctp_assoc_value in delayed_ack socket option. [ 279.509128][T12602] Use struct sctp_sack_info instead [ 280.062974][T12565] vxcan3: left allmulticast mode [ 280.078679][T12565] bond15: left allmulticast mode [ 280.102372][T12565] ip6erspan0: left allmulticast mode [ 280.140190][ T230] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.149345][ T230] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.163636][ T5830] lo speed is unknown, defaulting to 1000 [ 280.178604][ T5830] syz2: Port: 1 Link DOWN [ 280.349438][T12621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1757'. [ 280.384805][ T230] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.398534][T12623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1757'. [ 280.413871][ T230] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 280.431181][T12621] netlink: 'syz.0.1757': attribute type 1 has an invalid length. [ 280.437373][T12623] netlink: 'syz.0.1757': attribute type 1 has an invalid length. [ 280.451508][ T230] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 280.500729][T12628] netlink: 'syz.2.1758': attribute type 7 has an invalid length. [ 280.518293][T12628] netlink: 'syz.2.1758': attribute type 3 has an invalid length. [ 280.526482][T12628] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1758'. [ 280.534793][ T230] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.570857][ T230] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 280.594692][ T230] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 280.630240][ T230] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.652293][ T230] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 280.676302][ T230] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 280.738506][ T230] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.751557][T12640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1760'. [ 280.757636][ T230] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 280.777071][ T230] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 280.839456][T12638] netlink: 'syz.4.1761': attribute type 13 has an invalid length. [ 280.850948][T12638] netlink: 'syz.4.1761': attribute type 17 has an invalid length. [ 280.908035][T12641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1761'. [ 281.234304][T12638] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.419567][T12638] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 281.431796][T12638] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 281.474071][T12638] veth1_vlan: left promiscuous mode [ 281.482293][T12638] veth0_vlan: left promiscuous mode [ 281.491688][T12638] veth0_vlan: entered promiscuous mode [ 281.501804][T12638] veth1_vlan: entered promiscuous mode [ 281.519422][T12638] veth1_macvtap: left promiscuous mode [ 281.534012][T12638] veth0_macvtap: left promiscuous mode [ 281.556924][T12638] veth0_macvtap: entered promiscuous mode [ 281.615143][T12638] veth1_macvtap: entered promiscuous mode [ 281.632019][T12638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 281.646941][T12638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 281.668154][T12638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 281.684075][T12638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 281.704930][T12638] 8021q: adding VLAN 0 to HW filter on device bond1 [ 281.728215][T12638] 8021q: adding VLAN 0 to HW filter on device bond2 [ 281.750045][T12638] 8021q: adding VLAN 0 to HW filter on device bond3 [ 281.772724][T12638] 8021q: adding VLAN 0 to HW filter on device bond4 [ 281.791826][T12682] netlink: 4412 bytes leftover after parsing attributes in process `syz.1.1770'. [ 281.805214][T12638] 8021q: adding VLAN 0 to HW filter on device bond5 [ 281.820516][T12638] 8021q: adding VLAN 0 to HW filter on device bond6 [ 281.838184][T12638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.849137][T12638] 8021q: adding VLAN 0 to HW filter on device bond7 [ 281.865205][T12638] 8021q: adding VLAN 0 to HW filter on device bond8 [ 281.873889][T12638] 8021q: adding VLAN 0 to HW filter on device bond9 [ 281.887264][T12638] A link change request failed with some changes committed already. Interface dvmrp0 may have been left with an inconsistent configuration, please check. [ 281.914902][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.922341][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.958765][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.966107][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.117831][T12670] lo speed is unknown, defaulting to 1000 [ 282.200740][T12671] bond20: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 282.222625][T12671] bond20 (unregistering): Released all slaves [ 282.340636][T12706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1779'. [ 282.362445][T12672] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 282.387320][ T230] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.405509][ T230] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.437030][ T130] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 282.464021][T12670] lo speed is unknown, defaulting to 1000 [ 282.595495][T12706] team0: Port device team_slave_0 removed [ 282.621517][ T230] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.648664][T12670] lo speed is unknown, defaulting to 1000 [ 282.680006][ T230] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 282.861919][T12717] netlink: 'syz.4.1781': attribute type 1 has an invalid length. [ 282.873775][T12720] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1782'. [ 282.884652][T12717] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1781'. [ 282.908594][T12717] xt_TCPMSS: Only works on TCP SYN packets [ 283.130919][T12730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1784'. [ 283.380394][T12741] netlink: 'syz.4.1786': attribute type 1 has an invalid length. [ 283.582693][T12743] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1786'. [ 283.617987][T12670] infiniband syz1: set down [ 283.637141][T12670] infiniband syz1: added lo [ 283.682107][T12741] 8021q: adding VLAN 0 to HW filter on device bond13 [ 283.691258][T12670] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 283.708306][T12670] infiniband syz1: Couldn't open port 1 [ 283.732082][T12670] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 283.748214][T12670] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 283.767257][T12670] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 283.795831][T12741] bond12: (slave bond13): making interface the new active one [ 283.809981][T12741] bond12: (slave bond13): Enslaving as an active interface with an up link [ 283.836017][T12670] RDS/IB: syz1: added [ 283.844246][T12670] smc: adding ib device syz1 with port count 1 [ 283.861154][ T9568] lo speed is unknown, defaulting to 1000 [ 283.876896][T12670] smc: ib device syz1 port 1 has no pnetid [ 283.974281][ T9568] lo speed is unknown, defaulting to 1000 [ 284.131597][T12758] bond16: Removing last arp target with arp_interval on [ 284.274728][T12712] Set syz1 is full, maxelem 65536 reached [ 285.592255][T12784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1796'. [ 286.163532][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 286.810568][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 287.481507][T12670] lo speed is unknown, defaulting to 1000 [ 287.490053][T12761] batman_adv: batadv0: Adding interface: gretap2 [ 287.496823][T12761] batman_adv: batadv0: Interface activated: gretap2 [ 287.663451][T12788] vti0: entered promiscuous mode [ 287.990150][T12799] syzkaller0: entered promiscuous mode [ 288.012034][T12799] syzkaller0: entered allmulticast mode [ 288.197297][T12813] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1804'. [ 288.381925][T12805] A link change request failed with some changes committed already. Interface dvmrp0 may have been left with an inconsistent configuration, please check. [ 288.413994][T12670] lo speed is unknown, defaulting to 1000 [ 288.414189][T12790] ±ÿþ€: renamed from team_slave_1 (while UP) [ 288.943435][T12839] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1810'. [ 288.976479][T12840] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1809'. [ 288.997471][T12839] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1810'. [ 289.082711][T12670] lo speed is unknown, defaulting to 1000 [ 289.365644][T12847] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1812'. [ 289.539472][T12670] lo speed is unknown, defaulting to 1000 [ 290.027264][T12865] netlink: 'syz.0.1814': attribute type 1 has an invalid length. [ 290.035289][T12865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1814'. [ 290.045213][T12865] netlink: 'syz.0.1814': attribute type 1 has an invalid length. [ 290.053339][T12865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1814'. [ 290.152569][T12865] pim6reg: entered allmulticast mode [ 290.225917][T12670] lo speed is unknown, defaulting to 1000 [ 290.332364][T12879] netlink: 'syz.4.1820': attribute type 1 has an invalid length. [ 290.350991][T12879] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1820'. [ 290.415283][T12873] syzkaller0: entered promiscuous mode [ 290.424451][T12873] syzkaller0: entered allmulticast mode [ 290.763309][T12890] FAULT_INJECTION: forcing a failure. [ 290.763309][T12890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.813631][T12890] CPU: 1 UID: 0 PID: 12890 Comm: syz.3.1823 Not tainted syzkaller #0 PREEMPT(full) [ 290.813659][T12890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 290.813669][T12890] Call Trace: [ 290.813677][T12890] [ 290.813685][T12890] dump_stack_lvl+0xe8/0x150 [ 290.813716][T12890] should_fail_ex+0x40c/0x560 [ 290.813743][T12890] _copy_to_user+0x31/0xb0 [ 290.813773][T12890] bpf_test_finish+0x1cf/0x690 [ 290.813802][T12890] ? __pfx_bpf_test_finish+0x10/0x10 [ 290.813832][T12890] ? _copy_from_user+0x94/0xb0 [ 290.813858][T12890] ? bpf_test_init+0x113/0x150 [ 290.813888][T12890] bpf_prog_test_run_xdp+0x8bc/0x11d0 [ 290.813924][T12890] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 290.813949][T12890] ? __fget_files+0x2a/0x420 [ 290.813986][T12890] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 290.814006][T12890] bpf_prog_test_run+0x2c5/0x340 [ 290.814035][T12890] __sys_bpf+0xa22/0xd90 [ 290.814067][T12890] ? __pfx___sys_bpf+0x10/0x10 [ 290.814102][T12890] ? __fget_files+0x2a/0x420 [ 290.814143][T12890] ? ksys_write+0x242/0x270 [ 290.814173][T12890] ? __pfx_ksys_write+0x10/0x10 [ 290.814206][T12890] __x64_sys_bpf+0xba/0xd0 [ 290.814228][T12890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.814249][T12890] do_syscall_64+0x174/0x580 [ 290.814275][T12890] ? trace_irq_disable+0x3b/0x140 [ 290.814298][T12890] ? clear_bhb_loop+0x40/0x90 [ 290.814320][T12890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.814338][T12890] RIP: 0033:0x7feaaf39de59 [ 290.814354][T12890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.814370][T12890] RSP: 002b:00007feab02f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 290.814390][T12890] RAX: ffffffffffffffda RBX: 00007feaaf625fa0 RCX: 00007feaaf39de59 [ 290.814404][T12890] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 290.814416][T12890] RBP: 00007feab02f3090 R08: 0000000000000000 R09: 0000000000000000 [ 290.814428][T12890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 290.814440][T12890] R13: 00007feaaf626038 R14: 00007feaaf625fa0 R15: 00007ffc09bed988 [ 290.814469][T12890] [ 291.406704][T12899] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 291.608310][T12926] syzkaller0: entered promiscuous mode [ 291.635702][T12927] netlink: 'syz.2.1831': attribute type 9 has an invalid length. [ 291.662133][T12926] syzkaller0: entered allmulticast mode [ 292.154165][T12948] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1839'. [ 292.165173][T12947] FAULT_INJECTION: forcing a failure. [ 292.165173][T12947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.165589][T12948] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1839'. [ 292.201626][T12947] CPU: 0 UID: 0 PID: 12947 Comm: syz.4.1838 Not tainted syzkaller #0 PREEMPT(full) [ 292.201654][T12947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 292.201665][T12947] Call Trace: [ 292.201672][T12947] [ 292.201681][T12947] dump_stack_lvl+0xe8/0x150 [ 292.201714][T12947] should_fail_ex+0x40c/0x560 [ 292.201740][T12947] _copy_to_user+0x31/0xb0 [ 292.201769][T12947] bpf_test_finish+0x4ea/0x690 [ 292.201797][T12947] ? __pfx_bpf_test_finish+0x10/0x10 [ 292.201821][T12947] ? _copy_from_user+0x94/0xb0 [ 292.201847][T12947] ? bpf_test_init+0x113/0x150 [ 292.201878][T12947] bpf_prog_test_run_xdp+0x8bc/0x11d0 [ 292.201913][T12947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 292.201937][T12947] ? __fget_files+0x2a/0x420 [ 292.201966][T12947] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 292.201986][T12947] bpf_prog_test_run+0x2c5/0x340 [ 292.202016][T12947] __sys_bpf+0xa22/0xd90 [ 292.202048][T12947] ? __pfx___sys_bpf+0x10/0x10 [ 292.202082][T12947] ? __fget_files+0x2a/0x420 [ 292.202122][T12947] ? ksys_write+0x242/0x270 [ 292.202153][T12947] ? __pfx_ksys_write+0x10/0x10 [ 292.202185][T12947] __x64_sys_bpf+0xba/0xd0 [ 292.202207][T12947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.202227][T12947] do_syscall_64+0x174/0x580 [ 292.202255][T12947] ? trace_irq_disable+0x3b/0x140 [ 292.202278][T12947] ? clear_bhb_loop+0x40/0x90 [ 292.202309][T12947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.202328][T12947] RIP: 0033:0x7f3541b9de59 [ 292.202346][T12947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.202362][T12947] RSP: 002b:00007f3542b3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 292.202381][T12947] RAX: ffffffffffffffda RBX: 00007f3541e25fa0 RCX: 00007f3541b9de59 [ 292.202394][T12947] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 292.202405][T12947] RBP: 00007f3542b3b090 R08: 0000000000000000 R09: 0000000000000000 [ 292.202419][T12947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 292.202429][T12947] R13: 00007f3541e26038 R14: 00007f3541e25fa0 R15: 00007ffee2e9e218 [ 292.202457][T12947] [ 292.676791][T12964] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1842'. [ 292.754097][T12964] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1842'. [ 292.870710][T12979] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1847'. [ 294.237850][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 294.296572][T13035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1862'. [ 294.569704][T13039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1864'. [ 294.683493][T13049] xfrm1: entered allmulticast mode [ 294.865140][T13060] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1870'. [ 294.874377][T13065] xt_bpf: check failed: parse error [ 295.352498][T13088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1876'. [ 295.416188][T13094] tipc: Enabling of bearer rejected, failed to enable media [ 295.520336][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 295.640864][T13101] syzkaller1: entered promiscuous mode [ 295.672363][T13101] syzkaller1: entered allmulticast mode [ 295.692857][T13101] netlink: 276 bytes leftover after parsing attributes in process `syz.2.1881'. [ 296.144071][T13128] syzkaller0: entered promiscuous mode [ 296.167050][T13128] syzkaller0: entered allmulticast mode [ 296.882650][T13160] syzkaller1: entered promiscuous mode [ 296.918497][T13160] syzkaller1: entered allmulticast mode [ 297.361528][T13181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.391495][T13181] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.426047][T13181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.545419][T13202] __nla_validate_parse: 1 callbacks suppressed [ 297.545439][T13202] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1899'. [ 297.966722][T13181] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 298.027206][ T809] lo speed is unknown, defaulting to 1000 [ 298.041735][ T809] syz2: Port: 1 Link ACTIVE [ 298.104179][T13191] dummy0: entered promiscuous mode [ 298.353145][T13196] syzkaller0: entered promiscuous mode [ 298.375366][T13196] syzkaller0: entered allmulticast mode [ 298.877505][T13232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1904'. [ 299.228904][T13235] xt_hashlimit: size too large, truncated to 1048576 [ 299.336634][T13238] netlink: 'syz.2.1905': attribute type 11 has an invalid length. [ 299.344735][T13238] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1905'. [ 299.370454][T13238] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1905'. [ 299.849767][T13255] netlink: 'syz.0.1906': attribute type 1 has an invalid length. [ 301.850985][T13181] dummy0: left promiscuous mode [ 301.913403][T13255] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 302.146877][T13276] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1909'. [ 302.188407][T13276] siw: device registration error -23 [ 302.307832][T13281] lo speed is unknown, defaulting to 1000 [ 302.357647][T13281] lo speed is unknown, defaulting to 1000 [ 302.446968][T13285] tipc: Failed to remove unknown binding: 66,0,0/236503914:1268514627/1268514629 [ 302.467100][T13301] tipc: Enabled bearer , priority 0 [ 302.474946][T13285] tipc: Failed to remove unknown binding: 66,0,0/236503914:1268514627/1268514628 [ 302.475325][T13301] syzkaller0: entered promiscuous mode [ 302.500459][T13301] syzkaller0: entered allmulticast mode [ 302.506775][T13285] tipc: Failed to remove unknown binding: 66,0,0/236503914:1268514627/1268514629 [ 302.527099][T13285] tipc: Failed to remove unknown binding: 66,0,0/236503914:1268514627/1268514628 [ 302.549256][T13301] tipc: Resetting bearer [ 302.570437][T13303] syzkaller0: entered promiscuous mode [ 302.577154][T13303] syzkaller0: entered allmulticast mode [ 302.815834][T13300] tipc: Resetting bearer [ 302.846212][T13300] tipc: Disabling bearer [ 302.901407][T13313] syzkaller0: entered promiscuous mode [ 302.917393][T13313] syzkaller0: entered allmulticast mode [ 303.105892][T13323] netlink: 'syz.1.1923': attribute type 1 has an invalid length. [ 303.175916][T13323] 8021q: adding VLAN 0 to HW filter on device bond20 [ 303.463227][T13339] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1926'. [ 303.603943][T13336] lo speed is unknown, defaulting to 1000 [ 303.615369][T13336] lo speed is unknown, defaulting to 1000 [ 303.759815][ T30] audit: type=1804 audit(1784127261.851:11): pid=13346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1929" name="/newroot/373/cgroup.controllers" dev="tmpfs" ino=1922 res=1 errno=0 [ 303.797582][ T30] audit: type=1800 audit(1784127261.881:12): pid=13346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1929" name="cgroup.controllers" dev="tmpfs" ino=1922 res=0 errno=0 [ 304.062132][T13353] netlink: 'syz.2.1932': attribute type 29 has an invalid length. [ 304.078232][T13355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1933'. [ 304.676562][T13375] openvswitch: netlink: Flow actions attr not present in new flow. [ 305.572548][T13362] vti0: left promiscuous mode [ 305.589745][ T10] lo speed is unknown, defaulting to 1000 [ 305.608689][ T10] syz2: Port: 1 Link DOWN [ 305.640072][T13408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1938'. [ 305.704562][T13414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.814965][T13418] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1940'. [ 306.184072][T13450] netlink: 'syz.0.1947': attribute type 1 has an invalid length. [ 307.037282][ C0] ip6_tunnel: - xmit: Local address not yet configured! [ 308.878325][T13436] tipc: Enabled bearer , priority 0 [ 308.885671][T13450] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 308.887821][T13445] syzkaller0: entered promiscuous mode [ 308.901835][T13445] syzkaller0: entered allmulticast mode [ 308.982845][T13466] tipc: Resetting bearer [ 309.016156][T13434] tipc: Resetting bearer [ 309.071146][T13434] tipc: Disabling bearer [ 309.215537][T13483] sctp: [Deprecated]: syz.0.1952 (pid 13483) Use of struct sctp_assoc_value in delayed_ack socket option. [ 309.215537][T13483] Use struct sctp_sack_info instead [ 309.314021][T13485] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1956'. [ 309.795234][T13513] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1966'. [ 309.814505][T13509] syzkaller0: entered promiscuous mode [ 309.820647][T13509] syzkaller0: entered allmulticast mode [ 309.829517][T13513] syzkaller1: entered promiscuous mode [ 309.840736][T13513] syzkaller1: entered allmulticast mode [ 309.856583][T13515] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1967'. [ 309.910563][T13515] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 310.011319][T13517] x_tables: unsorted entry at hook 2 [ 310.030230][T13517] xt_hashlimit: size too large, truncated to 1048576 [ 310.120836][T13524] nft_compat: unsupported protocol 5 [ 310.200256][T13524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1970'. [ 310.236830][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 310.252305][T13525] lo speed is unknown, defaulting to 1000 [ 310.312384][T13525] lo speed is unknown, defaulting to 1000 [ 310.467769][T13536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1973'. [ 310.518420][T13536] netlink: 'syz.3.1973': attribute type 1 has an invalid length. [ 310.694618][T13536] 8021q: adding VLAN 0 to HW filter on device bond18 [ 310.879305][T13538] lo speed is unknown, defaulting to 1000 [ 311.172104][T13538] lo speed is unknown, defaulting to 1000 [ 311.365231][T13580] netlink: 'syz.3.1988': attribute type 1 has an invalid length. [ 311.373302][T13580] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1988'. [ 311.384533][T13574] lo speed is unknown, defaulting to 1000 [ 311.395274][T13580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1988'. [ 311.526781][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 311.571228][T13574] lo speed is unknown, defaulting to 1000 [ 311.962682][T13603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1993'. [ 312.129432][ T30] audit: type=1804 audit(1784127270.221:13): pid=13608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1994" name="/newroot/437/cgroup.controllers" dev="tmpfs" ino=2258 res=1 errno=0 [ 312.160467][T13608] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1994'. [ 312.198292][ T30] audit: type=1800 audit(1784127270.221:14): pid=13608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1994" name="cgroup.controllers" dev="tmpfs" ino=2258 res=0 errno=0 [ 312.451876][T13619] openvswitch: netlink: IP tunnel attribute has 3 unknown bytes. [ 312.460464][T13613] syzkaller0: entered promiscuous mode [ 312.466060][T13613] syzkaller0: entered allmulticast mode [ 312.583035][T13614] netlink: 67 bytes leftover after parsing attributes in process `syz.4.1995'. [ 312.635366][T13613] A link change request failed with some changes committed already. Interface dvmrp0 may have been left with an inconsistent configuration, please check. [ 312.720663][T13614] A link change request failed with some changes committed already. Interface dvmrp0 may have been left with an inconsistent configuration, please check. [ 313.094214][T13631] xt_CT: No such helper "pptp" [ 313.501537][T13656] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 313.629215][T13667] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 313.795439][T13675] syzkaller0: entered promiscuous mode [ 313.801680][T13675] syzkaller0: entered allmulticast mode [ 314.403711][ T5639] udevd[5639]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 314.516441][T13696] veth1_to_hsr: entered allmulticast mode [ 314.588581][T13703] syzkaller0: entered promiscuous mode [ 314.594156][T13703] syzkaller0: entered allmulticast mode [ 314.600509][T13698] batadv_slave_1: entered allmulticast mode [ 314.631493][T13698] __nla_validate_parse: 3 callbacks suppressed [ 314.631514][T13698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2021'. [ 314.654832][T13707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2024'. [ 314.760672][T13718] netlink: 'syz.0.2026': attribute type 1 has an invalid length. [ 314.783096][T13718] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2026'. [ 314.810359][T13718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2026'. [ 317.669387][T13697] batadv_slave_1: left allmulticast mode [ 317.833342][T13736] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2031'. [ 317.923041][T13750] netlink: 'syz.1.2035': attribute type 1 has an invalid length. [ 318.074994][T13750] 8021q: adding VLAN 0 to HW filter on device bond21 [ 318.109181][T13753] bond21: (slave dummy0): making interface the new active one [ 318.134991][T13753] bond21: (slave dummy0): Enslaving as an active interface with an up link [ 318.168605][T13760] : renamed from dummy0 (while UP) [ 318.456858][T13768] batman_adv: batadv0: Adding interface: gretap3 [ 318.485044][T13768] batman_adv: batadv0: Interface activated: gretap3 [ 318.495585][T13789] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2044'. [ 318.672628][T13794] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2046'. [ 318.921464][T13806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2050'. [ 318.932849][T13808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2050'. [ 319.003982][T13809] netlink: 'syz.2.2048': attribute type 4 has an invalid length. [ 319.043394][T13811] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2051'. [ 319.172900][T13820] tipc: Enabling of bearer rejected, failed to enable media [ 319.210632][T13820] netlink: 'syz.4.2054': attribute type 1 has an invalid length. [ 319.440493][T13836] veth1_to_bond: entered promiscuous mode [ 319.519859][T13836] veth1_to_bond (unregistering): left promiscuous mode [ 319.564682][T13836] bond0: (slave bond_slave_1): Releasing backup interface [ 319.593804][T13836] bond_slave_1 (unregistering): left promiscuous mode [ 319.683852][T13849] __nla_validate_parse: 1 callbacks suppressed [ 319.683872][T13849] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2063'. [ 319.860829][T13861] vlan4: entered promiscuous mode [ 319.906470][T13861] bridge0: entered promiscuous mode [ 320.003889][T13870] netlink: 'syz.3.2066': attribute type 1 has an invalid length. [ 320.041407][T13870] netlink: 'syz.3.2066': attribute type 2 has an invalid length. [ 320.169256][T13884] tipc: New replicast peer: 255.255.255.255 [ 320.180056][T13884] tipc: Enabled bearer , priority 10 [ 320.198658][T13885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2070'. [ 320.440314][T13904] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.489561][T13908] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2078'. [ 320.650464][T13917] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2081'. [ 320.662797][T13911] lo speed is unknown, defaulting to 1000 [ 320.671769][T13917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2081'. [ 320.700063][T13911] lo speed is unknown, defaulting to 1000 [ 320.837718][T13930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2085'. [ 320.869003][T13930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2085'. [ 320.963464][T13931] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2086'. [ 321.012190][T13931] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2086'. [ 321.065016][T13931] netlink: 'syz.0.2086': attribute type 1 has an invalid length. [ 321.105699][T13931] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2086'. [ 321.129329][T13943] syzkaller1: entered promiscuous mode [ 321.140071][T13943] syzkaller1: entered allmulticast mode [ 321.230651][T13941] syzkaller0: entered promiscuous mode [ 321.245061][T13941] syzkaller0: entered allmulticast mode [ 321.253901][T13944] sit0: entered promiscuous mode [ 321.270781][T13944] netlink: 'syz.2.2088': attribute type 1 has an invalid length. [ 321.330769][T13948] dvmrp0: entered allmulticast mode [ 321.362933][ T9568] tipc: Node number set to 1593835523 [ 321.437775][T13960] netlink: 'syz.4.2091': attribute type 4 has an invalid length. [ 321.506111][T13960] netlink: 'syz.4.2091': attribute type 4 has an invalid length. [ 321.528296][T13960] netlink: 'syz.4.2091': attribute type 4 has an invalid length. [ 324.859912][T14008] xt_hashlimit: size too large, truncated to 1048576 [ 324.916181][T14011] netlink: 'syz.2.2098': attribute type 11 has an invalid length. [ 324.944281][T14012] validate_nla: 62 callbacks suppressed [ 324.944301][T14012] netlink: 'syz.0.2101': attribute type 10 has an invalid length. [ 324.977418][T14011] __nla_validate_parse: 66 callbacks suppressed [ 324.977438][T14011] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2098'. [ 325.013133][T14012] team0: Port device vlan0 added [ 325.033024][T14016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2102'. [ 325.064098][T14015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2102'. [ 325.088375][T14016] netlink: 'syz.3.2102': attribute type 1 has an invalid length. [ 325.115418][T14019] netlink: 'syz.3.2102': attribute type 1 has an invalid length. [ 325.156083][T14015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2102'. [ 325.453481][T14029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.482659][T14029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2105'. [ 325.690600][T14036] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2109'. [ 325.787852][T14041] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2111'. [ 326.032839][T14038] macvlan0: entered promiscuous mode [ 326.210472][T14063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2114'. [ 326.601200][T14086] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2114'. [ 326.891708][T14078] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2116'. [ 327.117946][T14095] cgroup: fork rejected by pids controller in /syz3 [ 327.561933][T14133] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.569223][T14133] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.240611][T14133] batman_adv: batadv0: Interface deactivated: gretap2 [ 328.254241][T14133] batman_adv: batadv0: Interface deactivated: gretap3 [ 328.275811][T14133] vlan4: left promiscuous mode [ 328.281180][T14133] bridge0: left promiscuous mode [ 328.291115][T14071] lo speed is unknown, defaulting to 1000 [ 328.291846][T14206] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 328.361534][T14207] bond16: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 328.384950][T14207] bond16 (unregistering): Released all slaves [ 328.411057][T14215] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 328.412764][ T48] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.431903][ T48] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.469792][T14071] lo speed is unknown, defaulting to 1000 [ 328.476251][ T48] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.624927][T14220] bond14 (unregistering): Released all slaves [ 329.654821][ T5636] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 329.670181][ T5636] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 329.684590][ T5636] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 329.695721][ T5636] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 329.711486][ T5636] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 330.117702][T14260] bond16 (unregistering): Released all slaves [ 330.510317][T14284] Cannot find add_set index 2 as target [ 330.685839][T13403] bond14: left allmulticast mode [ 330.701667][T13403] bond14: left promiscuous mode [ 330.719009][T13403] bridge0: port 1(bond14) entered disabled state [ 330.737008][T13403] bond6: left allmulticast mode [ 330.748032][T13403] bond6: left promiscuous mode [ 330.758589][T13403] bridge0: port 4(bond6) entered disabled state [ 330.818072][T13403] dvmrp0: left allmulticast mode [ 330.987295][T14304] __nla_validate_parse: 6 callbacks suppressed [ 330.987313][T14304] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2146'. [ 331.011683][T14304] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2146'. [ 331.058703][T14306] Cannot find add_set index 2 as target [ 331.413367][T13403] bond10 (unregistering): (slave geneve2): Releasing active interface [ 331.515066][T13403] bond0 (unregistering): Released all slaves [ 331.532509][T13403] bond1 (unregistering): (slave bond2): Releasing backup interface [ 331.541162][T13403] bond1 (unregistering): Released all slaves [ 331.555999][T13403] bond2 (unregistering): Released all slaves [ 331.570716][T13403] bond3 (unregistering): (slave bond4): Releasing backup interface [ 331.579358][T13403] bond3 (unregistering): Released all slaves [ 331.594447][T13403] bond4 (unregistering): Released all slaves [ 331.632331][T13403] bond5 (unregistering): Released all slaves [ 331.648944][T13403] bond6 (unregistering): Released all slaves [ 331.662571][T13403] bond7 (unregistering): Released all slaves [ 331.689433][T13403] bond8 (unregistering): (slave bond9): Releasing backup interface [ 331.698246][T13403] bond8 (unregistering): Released all slaves [ 331.714556][T13403] bond9 (unregistering): Released all slaves [ 331.730574][T13403] bond10 (unregistering): Released all slaves [ 331.750183][T13403] bond11 (unregistering): (slave bond12): Releasing backup interface [ 331.759129][T13403] bond11 (unregistering): Released all slaves [ 331.773483][T13403] bond12 (unregistering): Released all slaves [ 331.792021][T13403] bond13 (unregistering): Released all slaves [ 331.805624][T13403] bond14 (unregistering): Released all slaves [ 331.819615][T13403] bond15 (unregistering): Released all slaves [ 331.835084][T13403] bond16 (unregistering): Released all slaves [ 331.846546][ T5625] Bluetooth: hci1: command tx timeout [ 331.861224][T13403] bond17 (unregistering): Released all slaves [ 331.875108][T13403] bond18 (unregistering): Released all slaves [ 331.890633][T14284] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2146'. [ 332.022664][T14326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2150'. [ 332.188799][ T5284] 8021q: adding VLAN 0 to HW filter on device eth1 [ 332.243525][T13403] tipc: Left network mode [ 332.324169][T14252] lo speed is unknown, defaulting to 1000 [ 332.355412][T14252] lo speed is unknown, defaulting to 1000 [ 332.931924][T14352] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2156'. [ 333.008803][T14352] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2156'. [ 333.257841][T14352] bond16 (unregistering): Released all slaves [ 333.732038][T14381] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2163'. [ 333.814256][T14381] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2163'. [ 333.826172][T14376] veth0_macvtap: left promiscuous mode [ 333.840764][T14381] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2163'. [ 333.874930][T14381] netlink: 'syz.0.2163': attribute type 3 has an invalid length. [ 333.915549][T14381] netlink: 'syz.0.2163': attribute type 2 has an invalid length. [ 333.926729][ T5625] Bluetooth: hci1: command tx timeout [ 333.940990][T14381] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2163'. [ 333.992069][T14381] netlink: 'syz.0.2163': attribute type 2 has an invalid length. [ 334.213669][ T5284] 8021q: adding VLAN 0 to HW filter on device eth2 [ 334.963804][T14416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.000078][T14416] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.038634][T14416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.217498][T14416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.248087][T14416] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 335.266685][T14416] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 335.283201][T14416] hsr0: left promiscuous mode [ 335.299394][T14416] veth1_vlan: left promiscuous mode [ 335.306186][T14416] veth0_vlan: left promiscuous mode [ 335.314374][T14416] veth0_vlan: entered promiscuous mode [ 335.322901][T14416] veth1_vlan: entered promiscuous mode [ 335.328943][T14416] veth1_vlan: entered allmulticast mode [ 335.342649][T14416] veth1_macvtap: left promiscuous mode [ 335.350798][T14416] veth0_macvtap: left promiscuous mode [ 335.359667][T14416] veth0_macvtap: entered promiscuous mode [ 335.371635][T14416] veth1_macvtap: entered promiscuous mode [ 335.389527][T14416] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 335.407093][T14416] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 335.417315][T14416] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 335.426135][T14416] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 335.441075][T14416] 8021q: adding VLAN 0 to HW filter on device bond1 [ 335.473444][T14416] 8021q: adding VLAN 0 to HW filter on device bond2 [ 335.484153][T14416] 8021q: adding VLAN 0 to HW filter on device bond3 [ 335.492348][T14416] 8021q: adding VLAN 0 to HW filter on device bond4 [ 335.518869][T14416] 8021q: adding VLAN 0 to HW filter on device bond5 [ 335.528421][T14416] 8021q: adding VLAN 0 to HW filter on device bond6 [ 335.537907][T14416] 8021q: adding VLAN 0 to HW filter on device bond7 [ 335.545489][T14416] 8021q: adding VLAN 0 to HW filter on device bond8 [ 335.555055][T14416] 8021q: adding VLAN 0 to HW filter on device bond9 [ 335.562747][T14416] 8021q: adding VLAN 0 to HW filter on device bond10 [ 335.574265][T14416] 8021q: adding VLAN 0 to HW filter on device bond11 [ 335.582456][T14416] 8021q: adding VLAN 0 to HW filter on device bond12 [ 335.592446][T14416] 8021q: adding VLAN 0 to HW filter on device bond13 [ 335.602150][T14416] 8021q: adding VLAN 0 to HW filter on device bond14 [ 335.610502][T14416] 8021q: adding VLAN 0 to HW filter on device bond15 [ 335.620743][T14416] 8021q: adding VLAN 0 to HW filter on device bond16 [ 335.629075][T14416] 8021q: adding VLAN 0 to HW filter on device bond17 [ 335.642458][T14416] 8021q: adding VLAN 0 to HW filter on device bond18 [ 335.654264][T14416] 8021q: adding VLAN 0 to HW filter on device bond19 [ 335.676262][T14430] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 335.685888][ T5745] lo speed is unknown, defaulting to 1000 [ 335.733132][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.740544][ T48] bridge0: port 1(bridge_slave_0) entered listening state [ 335.758493][ T5745] syz1: Port: 1 Link ACTIVE [ 335.783260][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.790725][ T48] bridge0: port 2(bridge_slave_1) entered listening state [ 335.858787][T14447] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 335.940732][T13403] hsr_slave_0: left promiscuous mode [ 336.007638][ T5625] Bluetooth: hci1: command tx timeout [ 336.034229][T13403] hsr_slave_1: left promiscuous mode [ 336.072782][T14472] netlink: 'syz.0.2178': attribute type 1 has an invalid length. [ 336.098743][T14472] netlink: 'syz.0.2178': attribute type 4 has an invalid length. [ 336.125424][T14473] netlink: 'syz.0.2178': attribute type 1 has an invalid length. [ 336.136545][T14473] netlink: 'syz.0.2178': attribute type 4 has an invalid length. [ 336.144443][T14472] __nla_validate_parse: 5 callbacks suppressed [ 336.144460][T14472] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2178'. [ 336.186301][T14473] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2178'. [ 336.703072][ T3362] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.717798][ T3362] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.739375][ T3362] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.755482][ T13] smbdirect: ib_dev[syz2] removed [ 336.778097][ T3362] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.807908][ T5284] 8021q: adding VLAN 0 to HW filter on device eth3 [ 336.822216][ T3306] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 336.832843][ T3306] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 336.847386][ T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 336.862141][ T7787] lo speed is unknown, defaulting to 1000 [ 336.872121][T14495] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2181'. [ 336.892148][ T48] bridge0: port 3(macvlan0) entered blocking state [ 336.898765][ T48] bridge0: port 3(macvlan0) entered listening state [ 336.937233][T14471] pimreg9: entered allmulticast mode [ 336.943260][T14466] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2177'. [ 336.966777][ T3362] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.989955][ T3362] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.009174][ T3362] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.029626][ T3362] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.152912][T14500] openvswitch: netlink: Missing key (keys=40, expected=100) [ 337.176302][T14501] netlink: 1696 bytes leftover after parsing attributes in process `syz.1.2183'. [ 337.204850][T14501] netlink: 1696 bytes leftover after parsing attributes in process `syz.1.2183'. [ 337.312899][T14252] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.321638][T14252] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.330700][T14252] bridge_slave_0: entered allmulticast mode [ 337.358849][T14252] bridge_slave_0: entered promiscuous mode [ 337.369960][T14252] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.379868][T14252] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.396582][T14252] bridge_slave_1: entered allmulticast mode [ 337.422843][T14252] bridge_slave_1: entered promiscuous mode [ 337.439346][T14513] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2187'. [ 337.459635][ T9567] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 337.534936][T14513] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2187'. [ 337.566930][T14252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.593497][T14252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.759091][ T9567] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 337.827496][T14519] bond14 (unregistering): Released all slaves [ 337.925363][T14252] team0: Port device team_slave_0 added [ 337.963244][T14252] team0: Port device team_slave_1 added [ 337.982365][T14521] syzkaller0: entered promiscuous mode [ 338.005639][T14521] syzkaller0: entered allmulticast mode [ 338.079836][ T5625] Bluetooth: hci1: command tx timeout [ 338.173135][T13403] IPVS: stop unused estimator thread 0... [ 338.413136][T14252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.440077][T14252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.541554][T14252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.619979][T14252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.637924][T14252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.672502][T14252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.691178][T14564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2196'. [ 338.710662][T14564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2196'. [ 338.822049][T14556] syzkaller0: entered promiscuous mode [ 338.838488][T14556] syzkaller0: entered allmulticast mode [ 340.796688][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 340.959290][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 341.788717][ T5284] 8021q: adding VLAN 0 to HW filter on device eth4 [ 341.800794][T14592] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 341.893738][T14252] hsr_slave_0: entered promiscuous mode [ 341.947972][T14252] hsr_slave_1: entered promiscuous mode [ 342.084752][T14599] tipc: Enabled bearer , priority 0 [ 342.118579][T14618] syzkaller0: entered promiscuous mode [ 342.132032][T14618] syzkaller0: entered allmulticast mode [ 342.206005][T14603] 8021q: VLANs not supported on vxcan1 [ 342.302955][T14626] tipc: Resetting bearer [ 342.331421][T14626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.410400][T14598] tipc: Resetting bearer [ 342.433498][T14635] __nla_validate_parse: 2 callbacks suppressed [ 342.433517][T14635] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2209'. [ 342.479509][T14598] tipc: Disabling bearer [ 342.515504][T14641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2211'. [ 342.634587][T14647] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2212'. [ 342.700639][T14651] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2214'. [ 342.730750][T14651] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2214'. [ 342.859069][T14660] netlink: 'syz.4.2215': attribute type 1 has an invalid length. [ 342.970054][T14647] sit0: left promiscuous mode [ 342.991931][T14647] bridge0: port 1(vlan3) entered disabled state [ 343.100741][T14647] tipc: Resetting bearer [ 343.309106][T14647] veth1_to_hsr: left allmulticast mode [ 343.759579][T14647] macvlan0: left promiscuous mode [ 343.795679][T14660] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 343.797593][T14662] workqueue: Failed to create a rescuer kthread for wq "bond22": -EINTR [ 343.890330][ T48] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.975776][ T48] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.053480][ T48] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.088432][ T48] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.438110][T14698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2223'. [ 344.518375][T14701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2224'. [ 344.585532][T14701] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2224'. [ 344.634903][T14701] ip6gre1: entered promiscuous mode [ 344.655899][T14701] ip6gre1: entered allmulticast mode [ 344.844443][T14710] xt_TPROXY: Can be used only with -p tcp or -p udp [ 344.860963][T14705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.897070][T14705] batadv0: mtu less than device minimum [ 344.930622][T14705] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 344.944042][T14705] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 344.956444][T14705] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 344.968114][T14705] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 344.979804][T14705] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 344.991555][T14705] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 345.003257][T14705] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 345.015017][T14705] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 345.080551][T14719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2228'. [ 345.134962][T14723] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2228'. [ 345.175466][T14705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.553232][T14724] bond14 (unregistering): Released all slaves [ 346.263721][T14762] geneve1: left promiscuous mode [ 346.370360][ T5830] ip6_tunnel: - xmit: Local address not yet configured! [ 346.738596][ T7785] ip6_tunnel: - xmit: Local address not yet configured! [ 346.869120][T14252] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 346.920137][T14252] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 346.951889][T14252] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 346.999739][T14252] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 347.018595][T14252] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 347.048683][T14252] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 347.131535][T14819] netlink: 'syz.4.2247': attribute type 11 has an invalid length. [ 347.145116][T14807] bond22 (unregistering): Released all slaves [ 347.254900][T14252] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 347.322966][T14252] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 347.681198][T14252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.758785][T14252] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.810841][T13399] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.818138][T13399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.905537][T13399] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.912822][T13399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.636550][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 351.206511][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 351.213801][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 351.810498][T14935] __nla_validate_parse: 4 callbacks suppressed [ 351.810530][T14935] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2262'. [ 351.959675][T14945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2262'. [ 352.156466][T14964] net_ratelimit: 12 callbacks suppressed [ 352.156484][T14964] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.224383][T14950] bond16 (unregistering): Released all slaves [ 352.476511][ C0] bridge0: port 3(macvlan0) entered learning state [ 352.652390][T14985] bond22 (unregistering): Released all slaves [ 352.965975][ T9567] IPVS: starting estimator thread 0... [ 353.058810][T14986] syzkaller0: entered promiscuous mode [ 353.072413][T14986] syzkaller0: entered allmulticast mode [ 353.078369][T15009] IPVS: using max 30 ests per chain, 72000 per kthread [ 353.372288][T15028] netlink: 1696 bytes leftover after parsing attributes in process `syz.1.2278'. [ 356.375940][T14252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.505281][T14252] veth0_vlan: entered promiscuous mode [ 356.556627][T14252] veth1_vlan: entered promiscuous mode [ 356.620720][T15057] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2283'. [ 356.633877][T14252] veth0_macvtap: entered promiscuous mode [ 356.652045][T14252] veth1_macvtap: entered promiscuous mode [ 356.665070][T15056] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2284'. [ 356.674687][T14252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.707507][T15057] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2283'. [ 356.719422][T14252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.767564][T13399] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.784497][T13399] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.832795][T13399] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.893382][T15057] bond16 (unregistering): Released all slaves [ 356.910740][T13399] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.941762][T15075] tipc: Enabled bearer , priority 0 [ 356.972916][T15075] syzkaller0: entered promiscuous mode [ 356.993861][T15075] syzkaller0: entered allmulticast mode [ 357.129181][T15075] tipc: Resetting bearer [ 357.179024][T15074] tipc: Resetting bearer [ 357.218568][T15074] tipc: Disabling bearer [ 357.249410][ T3362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.267428][ T3362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.339873][T13399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.348731][T13399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.665169][T15108] syzkaller0: entered promiscuous mode [ 357.673196][T15108] syzkaller0: entered allmulticast mode [ 357.755087][T15118] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2300'. [ 357.770248][T15118] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2300'. [ 357.840791][T15121] lo speed is unknown, defaulting to 1000 [ 357.851828][T15120] netlink: 'syz.2.2299': attribute type 7 has an invalid length. [ 357.871838][T15121] lo speed is unknown, defaulting to 1000 [ 357.886848][T15123] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1500) ! [ 357.913845][T15127] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2303'. [ 357.921596][T15121] lo speed is unknown, defaulting to 1000 [ 357.932839][T15121] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 357.942770][T15127] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 357.948408][T15121] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 357.979750][T15123] syzkaller0: entered promiscuous mode [ 357.986108][T15130] netlink: 'syz.0.2302': attribute type 1 has an invalid length. [ 358.006269][T15130] netlink: 'syz.0.2302': attribute type 2 has an invalid length. [ 358.007166][T15121] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 358.024538][T15123] syzkaller0: entered allmulticast mode [ 358.032112][T15131] netlink: 'syz.3.2304': attribute type 4 has an invalid length. [ 358.051138][T15121] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 358.133279][T15121] lo speed is unknown, defaulting to 1000 [ 358.144300][T15121] lo speed is unknown, defaulting to 1000 [ 358.152222][T15121] lo speed is unknown, defaulting to 1000 [ 358.163921][T15121] lo speed is unknown, defaulting to 1000 [ 358.174959][T15121] lo speed is unknown, defaulting to 1000 [ 358.375539][T15144] netlink: 'syz.3.2307': attribute type 11 has an invalid length. [ 358.432829][T15148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2309'. [ 358.445147][T15148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2309'. [ 358.690231][T15155] erspan0: entered promiscuous mode [ 358.718002][T15155] erspan0: entered allmulticast mode [ 358.836934][T15163] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2312'. [ 359.177069][T15173] erspan0: left promiscuous mode [ 359.193068][T15173] erspan0: left allmulticast mode [ 359.371509][T15173] bridge0: port 3(vlan2) entered disabled state [ 359.378217][T15173] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.385878][T15173] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.449428][T15173] batman_adv: batadv0: Interface deactivated: dummy0 [ 359.583108][T15176] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2315'. [ 359.646799][T15196] x_tables: duplicate underflow at hook 1 [ 359.841701][T15173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.368846][T15173] bond13: left promiscuous mode [ 360.376457][T15173] bond13: left allmulticast mode [ 360.389223][T15173] team3: left promiscuous mode [ 360.396697][T15173] team3: left allmulticast mode [ 360.407066][T15173] team4: left promiscuous mode [ 360.411978][T15173] team4: left allmulticast mode [ 360.422080][T15173] xfrm1: left allmulticast mode [ 360.431627][T15173] ip6gre1: left promiscuous mode [ 360.437064][T15173] ip6gre1: left allmulticast mode [ 360.452568][T15175] tipc: Enabling of bearer rejected, failed to enable media [ 360.484124][ T13] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 4352 - 0 [ 360.520307][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.564170][ T13] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 4352 - 0 [ 360.594838][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.645311][ T13] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 4352 - 0 [ 360.690711][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.741323][ T13] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 4352 - 0 [ 360.778449][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.976975][T13403] nci: nci_rsp_packet: unknown rsp opcode 0x7 [ 361.057839][T15240] sctp: [Deprecated]: syz.3.2329 (pid 15240) Use of int in max_burst socket option deprecated. [ 361.057839][T15240] Use struct sctp_assoc_value instead [ 361.137588][T15247] xt_hashlimit: size too large, truncated to 1048576 [ 361.295739][T15253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2328'. [ 361.322041][T15253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2328'. [ 361.352398][T15253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2328'. [ 361.794067][T15271] lo speed is unknown, defaulting to 1000 [ 362.001315][T15271] lo speed is unknown, defaulting to 1000 [ 363.854911][T15226] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 363.997542][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 364.064075][T15296] tipc: Enabling of bearer rejected, failed to enable media [ 364.119151][T15301] netlink: 'syz.0.2334': attribute type 3 has an invalid length. [ 364.131470][T15303] __nla_validate_parse: 4 callbacks suppressed [ 364.131489][T15303] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2333'. [ 364.131497][T15301] netlink: 'syz.0.2334': attribute type 1 has an invalid length. [ 364.131512][T15301] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2334'. [ 364.169617][T15301] NCSI netlink: No device for ifindex 0 [ 364.278878][T15311] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2336'. [ 364.806647][T15311] bridge0: port 3(macvlan0) entered disabled state [ 364.814230][T15311] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.821811][T15311] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.125638][T15340] netlink: 'syz.3.2341': attribute type 16 has an invalid length. [ 365.237745][T15311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.428892][T15311] veth1_vlan: left allmulticast mode [ 366.399986][ T7786] lo speed is unknown, defaulting to 1000 [ 366.415736][ T7786] syz1: Port: 1 Link DOWN [ 366.430069][T15322] syzkaller0: entered promiscuous mode [ 366.462100][T15322] syzkaller0: entered allmulticast mode [ 366.527025][ T13] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.541352][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.555766][ T13] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.573217][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.583440][T15350] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 366.600646][ T7784] lo speed is unknown, defaulting to 1000 [ 366.607529][ T13] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.626713][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.647313][T15349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2344'. [ 366.668712][ T13] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.699548][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.874347][T15365] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2347'. [ 366.966663][T15376] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2347'. [ 367.067054][T15367] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2348'. [ 367.101555][T15385] lo speed is unknown, defaulting to 1000 [ 367.196635][T15388] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2353'. [ 367.388991][T15388] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.396797][T15388] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.748837][T15388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.782817][T15388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.183288][T15385] lo speed is unknown, defaulting to 1000 [ 368.227834][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.245860][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.283941][T15396] netlink: 'syz.3.2355': attribute type 1 has an invalid length. [ 368.301173][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.327166][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.443528][T15396] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2355'. [ 368.467119][T15415] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.510092][T15418] netlink: 'syz.1.2358': attribute type 2 has an invalid length. [ 368.535031][T15418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2358'. [ 368.657940][T15409] veth3: entered promiscuous mode [ 369.280548][T15459] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2365'. [ 370.224410][T15514] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2380'. [ 370.302037][T15514] veth3: left promiscuous mode [ 370.405335][T15525] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2384'. [ 370.459664][T15530] Bluetooth: MGMT ver 1.23 [ 370.472675][T15525] netlink: 'syz.1.2384': attribute type 1 has an invalid length. [ 370.501659][T15533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2386'. [ 370.532706][T15533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2386'. [ 370.603290][T15525] 8021q: adding VLAN 0 to HW filter on device bond23 [ 370.616207][T15525] bond22: (slave bond23): making interface the new active one [ 370.624860][T15525] bond22: (slave bond23): Enslaving as an active interface with an up link [ 370.708023][T15545] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2390'. [ 370.864859][T15555] sit0: entered promiscuous mode [ 370.883035][T15555] netlink: 'syz.1.2392': attribute type 1 has an invalid length. [ 370.914783][T15555] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2392'. [ 371.192210][T15578] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2396'. [ 371.658797][T15598] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2402'. [ 371.744633][T15598] netlink: 'syz.0.2402': attribute type 1 has an invalid length. [ 371.977392][T15598] 8021q: adding VLAN 0 to HW filter on device bond17 [ 372.001695][T15598] bond16: (slave bond17): making interface the new active one [ 372.027365][T15598] bond16: (slave bond17): Enslaving as an active interface with an up link [ 372.090758][T15621] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2409'. [ 372.237925][T15625] netlink: 'syz.0.2411': attribute type 3 has an invalid length. [ 373.287912][T15647] lo speed is unknown, defaulting to 1000 [ 373.689541][T15673] netlink: 'syz.0.2421': attribute type 13 has an invalid length. [ 373.719063][T15673] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 373.786035][T15647] lo speed is unknown, defaulting to 1000 [ 373.925209][T15681] tipc: Enabled bearer , priority 30 [ 373.954529][T15685] netlink: 'syz.2.2428': attribute type 1 has an invalid length. [ 374.247944][T15687] syzkaller0: entered promiscuous mode [ 374.275915][T15687] syzkaller0: entered allmulticast mode [ 374.451623][T15702] vlan3: entered promiscuous mode [ 374.855386][T15721] __nla_validate_parse: 5 callbacks suppressed [ 374.855421][T15721] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2435'. [ 375.034561][T15732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2437'. [ 375.069500][T15737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2441'. [ 375.205542][T15743] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2442'. [ 375.244242][T15747] xt_hashlimit: overflow, rate too high: 0 [ 375.261256][T15747] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2444'. [ 375.349193][T15752] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2446'. [ 375.367862][T15751] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2446'. [ 375.382320][T15752] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2446'. [ 375.646787][T15770] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 375.682891][T15770] team0: Port device batadv2 added [ 375.710194][T15765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2451'. [ 376.063344][T15793] x_tables: duplicate entry at hook 1 [ 376.160480][T15793] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2462'. [ 376.493345][T15815] FAULT_INJECTION: forcing a failure. [ 376.493345][T15815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.515270][T15815] CPU: 1 UID: 0 PID: 15815 Comm: syz.0.2469 Not tainted syzkaller #0 PREEMPT(full) [ 376.515296][T15815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 376.515316][T15815] Call Trace: [ 376.515323][T15815] [ 376.515331][T15815] dump_stack_lvl+0xe8/0x150 [ 376.515365][T15815] should_fail_ex+0x40c/0x560 [ 376.515391][T15815] _copy_from_user+0x2d/0xb0 [ 376.515420][T15815] ___sys_sendmsg+0x1c6/0x360 [ 376.515448][T15815] ? __lock_acquire+0x683/0x2cf0 [ 376.515477][T15815] ? __pfx____sys_sendmsg+0x10/0x10 [ 376.515542][T15815] ? __fget_files+0x2a/0x420 [ 376.515566][T15815] ? __fget_files+0x3a2/0x420 [ 376.515600][T15815] __x64_sys_sendmsg+0x1b1/0x290 [ 376.515631][T15815] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 376.515677][T15815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.515699][T15815] do_syscall_64+0x174/0x580 [ 376.515733][T15815] ? trace_irq_disable+0x3b/0x140 [ 376.515757][T15815] ? clear_bhb_loop+0x40/0x90 [ 376.515781][T15815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.515800][T15815] RIP: 0033:0x7fcd5bb9de59 [ 376.515818][T15815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.515835][T15815] RSP: 002b:00007fcd59df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.515854][T15815] RAX: ffffffffffffffda RBX: 00007fcd5be25fa0 RCX: 00007fcd5bb9de59 [ 376.515868][T15815] RDX: 0000000000000084 RSI: 00002000000006c0 RDI: 0000000000000003 [ 376.515880][T15815] RBP: 00007fcd59df6090 R08: 0000000000000000 R09: 0000000000000000 [ 376.515892][T15815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.515904][T15815] R13: 00007fcd5be26038 R14: 00007fcd5be25fa0 R15: 00007ffdd0e1f028 [ 376.515936][T15815] [ 376.799936][T15826] netlink: 'syz.3.2471': attribute type 1 has an invalid length. [ 377.391779][T15847] syzkaller0: entered promiscuous mode [ 377.421468][T15847] syzkaller0: entered allmulticast mode [ 377.529822][T15851] 8021q: adding VLAN 0 to HW filter on device bond14 [ 377.582275][T15859] bridge0: port 4(bond15) entered blocking state [ 377.589178][T15859] bridge0: port 4(bond15) entered disabled state [ 377.595777][T15859] bond15: entered allmulticast mode [ 377.605444][T15859] bond15: entered promiscuous mode [ 378.413972][T15881] FAULT_INJECTION: forcing a failure. [ 378.413972][T15881] name failslab, interval 1, probability 0, space 0, times 0 [ 378.466447][T15881] CPU: 1 UID: 0 PID: 15881 Comm: syz.2.2482 Not tainted syzkaller #0 PREEMPT(full) [ 378.466473][T15881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 378.466483][T15881] Call Trace: [ 378.466490][T15881] [ 378.466499][T15881] dump_stack_lvl+0xe8/0x150 [ 378.466529][T15881] should_fail_ex+0x40c/0x560 [ 378.466553][T15881] should_failslab+0xa8/0x100 [ 378.466578][T15881] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 378.466598][T15881] ? local_lock_release+0x9c/0x160 [ 378.466622][T15881] ? __alloc_skb+0x1d7/0x7a0 [ 378.466642][T15881] ? __alloc_skb+0x1d7/0x7a0 [ 378.466668][T15881] __alloc_skb+0x1d7/0x7a0 [ 378.466693][T15881] netlink_sendmsg+0x5d4/0xb40 [ 378.466720][T15881] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.466740][T15881] ? aa_sock_msg_perm+0xf1/0x1b0 [ 378.466762][T15881] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.466777][T15881] sock_sendmsg_nosec+0x13a/0x180 [ 378.466799][T15881] ____sys_sendmsg+0x54e/0x850 [ 378.466829][T15881] ? __pfx_____sys_sendmsg+0x10/0x10 [ 378.466861][T15881] ? import_iovec+0x73/0xa0 [ 378.466887][T15881] ___sys_sendmsg+0x2a5/0x360 [ 378.466921][T15881] ? __lock_acquire+0x683/0x2cf0 [ 378.466946][T15881] ? __pfx____sys_sendmsg+0x10/0x10 [ 378.467003][T15881] ? __fget_files+0x2a/0x420 [ 378.467023][T15881] ? __fget_files+0x3a2/0x420 [ 378.467052][T15881] __x64_sys_sendmsg+0x1b1/0x290 [ 378.467079][T15881] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 378.467119][T15881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.467137][T15881] do_syscall_64+0x174/0x580 [ 378.467160][T15881] ? trace_irq_disable+0x3b/0x140 [ 378.467181][T15881] ? clear_bhb_loop+0x40/0x90 [ 378.467202][T15881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.467219][T15881] RIP: 0033:0x7fc30839de59 [ 378.467236][T15881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.467251][T15881] RSP: 002b:00007fc309330028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 378.467268][T15881] RAX: ffffffffffffffda RBX: 00007fc308625fa0 RCX: 00007fc30839de59 [ 378.467281][T15881] RDX: 0000000000000084 RSI: 00002000000006c0 RDI: 0000000000000003 [ 378.467291][T15881] RBP: 00007fc309330090 R08: 0000000000000000 R09: 0000000000000000 [ 378.467301][T15881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.467311][T15881] R13: 00007fc308626038 R14: 00007fc308625fa0 R15: 00007ffcfa83bbb8 [ 378.467339][T15881] [ 382.932547][T15895] netlink: 'syz.1.2487': attribute type 1 has an invalid length. [ 383.132690][T15899] __nla_validate_parse: 9 callbacks suppressed [ 383.132708][T15899] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.2488'. [ 384.495316][ T7787] lo speed is unknown, defaulting to 1000 [ 384.501328][T15915] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2491'. [ 384.549818][T15915] netlink: 'syz.0.2491': attribute type 1 has an invalid length. [ 384.585409][T15921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2494'. [ 384.662580][T15921] ip6gre1: entered allmulticast mode [ 384.810741][T15915] 8021q: adding VLAN 0 to HW filter on device bond19 [ 384.822795][T15915] bond18: (slave bond19): making interface the new active one [ 384.831923][T15915] bond18: (slave bond19): Enslaving as an active interface with an up link [ 384.964410][T15943] sctp: [Deprecated]: syz.0.2500 (pid 15943) Use of struct sctp_assoc_value in delayed_ack socket option. [ 384.964410][T15943] Use struct sctp_sack_info instead [ 385.005743][T15945] netlink: 2736 bytes leftover after parsing attributes in process `syz.2.2499'. [ 385.208508][T15958] syzkaller0: entered promiscuous mode [ 385.244513][T15958] syzkaller0: entered allmulticast mode [ 385.328518][T15950] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 385.340313][T15962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2503'. [ 385.755916][T15992] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2510'. [ 385.828382][T15992] netlink: 'syz.4.2510': attribute type 1 has an invalid length. [ 385.875312][T15998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2512'. [ 386.073902][T15996] 8021q: adding VLAN 0 to HW filter on device bond17 [ 386.127637][T15996] bond16: (slave bond17): making interface the new active one [ 386.151802][T15996] bond16: (slave bond17): Enslaving as an active interface with an up link [ 386.939720][T16067] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2528'. [ 386.997062][T16067] netlink: 'syz.0.2528': attribute type 1 has an invalid length. [ 387.060016][T16072] netlink: 'syz.2.2529': attribute type 21 has an invalid length. [ 387.121528][T16067] 8021q: adding VLAN 0 to HW filter on device bond21 [ 387.159898][T16067] bond20: (slave bond21): making interface the new active one [ 387.200487][T16067] bond20: (slave bond21): Enslaving as an active interface with an up link [ 387.600892][T16106] syzkaller0: entered promiscuous mode [ 387.631752][T16106] syzkaller0: entered allmulticast mode [ 387.658762][T16105] tipc: Started in network mode [ 387.663812][T16105] tipc: Node identity b630cc90450a, cluster identity 4711 [ 387.671914][T16105] tipc: Enabled bearer , priority 0 [ 387.704159][T16111] syzkaller0: entered promiscuous mode [ 387.716045][T16111] syzkaller0: entered allmulticast mode [ 387.754670][T16105] tipc: Resetting bearer [ 387.835685][T16105] tipc: Disabling bearer [ 388.065663][T16136] siw: device registration error -23 [ 388.083673][T16137] siw: device registration error -23 [ 388.116139][T16137] netlink: 'syz.2.2547': attribute type 210 has an invalid length. [ 388.207996][T16147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2549'. [ 388.371697][T16160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2553'. [ 388.387666][T16147] bond0: option lp_interval: invalid value (0) [ 388.400633][T16147] bond0: option lp_interval: allowed values 1 - 2147483647 [ 388.417720][T16155] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 388.454611][T16155] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 388.491597][T16155] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 388.730400][T16176] syzkaller0: entered promiscuous mode [ 388.759896][T16180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2557'. [ 388.768015][T16176] syzkaller0: entered allmulticast mode [ 388.825784][T16180] block nbd0: reconnected socket [ 388.862012][T16191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2557'. [ 388.906519][T16180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2557'. [ 389.018302][ T5625] block nbd0: Receive control failed (result -32) [ 389.310016][T16213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2565'. [ 389.383880][T16219] netlink: 'syz.0.2565': attribute type 1 has an invalid length. [ 389.531464][ T5625] Bluetooth: hci1: link tx timeout [ 389.542760][ T5625] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 389.882710][T16240] xt_CT: No such helper "syz0" [ 391.605802][ T5625] Bluetooth: hci1: command 0x0406 tx timeout [ 392.446775][T16230] lo speed is unknown, defaulting to 1000 [ 392.579442][T16248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.696110][T16248] veth9: entered promiscuous mode [ 392.860668][T16263] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2577'. [ 392.910463][T16263] ip6gre2: entered promiscuous mode [ 392.931763][T16263] ip6gre2: entered allmulticast mode [ 392.990307][T16230] lo speed is unknown, defaulting to 1000 [ 393.249942][T16281] netlink: 'syz.1.2583': attribute type 3 has an invalid length. [ 396.598502][T16313] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 396.615987][T16315] pim6reg: entered allmulticast mode [ 396.643796][T16315] pim6reg: left allmulticast mode [ 396.834178][T16329] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2596'. [ 396.855238][T16326] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 396.950413][T16325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2593'. [ 396.989779][T16336] netlink: 'syz.2.2596': attribute type 1 has an invalid length. [ 397.013165][T16338] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2599'. [ 397.309479][T16336] 8021q: adding VLAN 0 to HW filter on device bond17 [ 397.348893][T16336] bond16: (slave bond17): making interface the new active one [ 397.391968][T16336] bond16: (slave bond17): Enslaving as an active interface with an up link [ 397.620947][T16369] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 397.687950][T16371] bridge8: the hash_elasticity option has been deprecated and is always 16 [ 397.727876][T16371] bridge8: entered allmulticast mode [ 397.784214][T16377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2607'. [ 397.797838][T16372] bridge9: the hash_elasticity option has been deprecated and is always 16 [ 397.818290][T16372] bridge9: entered allmulticast mode [ 397.998235][T16382] netlink: 'syz.0.2609': attribute type 30 has an invalid length. [ 398.036756][T16385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2609'. [ 398.050870][T16385] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2609'. [ 398.158087][T16396] vlan2: entered promiscuous mode [ 398.163195][T16396] ip6gretap0: entered promiscuous mode [ 398.278005][T16401] openvswitch: netlink: Message has 4 unknown bytes. [ 398.289360][T16401] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.424313][T16407] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2615'. [ 398.436839][T16407] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2615'. [ 398.525486][T16410] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2617'. [ 398.551024][T16412] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2616'. [ 398.593844][T16412] netlink: 'syz.0.2616': attribute type 1 has an invalid length. [ 398.668112][T16417] netlink: 'syz.2.2617': attribute type 1 has an invalid length. [ 398.830686][T16412] 8021q: adding VLAN 0 to HW filter on device bond24 [ 398.863011][T16412] bond23: (slave bond24): making interface the new active one [ 398.882460][T16412] bond23: (slave bond24): Enslaving as an active interface with an up link [ 398.941907][T16410] 8021q: adding VLAN 0 to HW filter on device bond19 [ 398.952013][T16410] bond18: (slave bond19): making interface the new active one [ 398.973870][T16410] bond18: (slave bond19): Enslaving as an active interface with an up link [ 399.111401][T16419] lo speed is unknown, defaulting to 1000 [ 399.257694][T16439] tc action pedit unable to extract header offset for header type (0x4) [ 399.507611][T16445] xt_hashlimit: overflow, rate too high: 0 [ 399.602968][T16445] team0: Port device vlan0 removed [ 399.647314][T16419] lo speed is unknown, defaulting to 1000 [ 399.834509][T16452] syzkaller1: entered promiscuous mode [ 399.850929][T16452] syzkaller1: entered allmulticast mode [ 400.409092][T16468] netlink: 'syz.0.2631': attribute type 1 has an invalid length. [ 400.539205][T16468] 8021q: adding VLAN 0 to HW filter on device bond26 [ 400.554496][T16468] bond25: (slave bond26): making interface the new active one [ 400.565054][T16468] bond25: (slave bond26): Enslaving as an active interface with an up link [ 400.582615][T16473] x_tables: duplicate underflow at hook 2 [ 400.869501][T16493] netlink: 'syz.2.2638': attribute type 4 has an invalid length. [ 400.882399][T16493] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 400.984807][T16495] vlan2: entered promiscuous mode [ 401.141133][T16505] netlink: 'syz.4.2644': attribute type 1 has an invalid length. [ 401.305661][T16505] 8021q: adding VLAN 0 to HW filter on device bond19 [ 401.328321][T16505] bond18: (slave bond19): making interface the new active one [ 401.350288][T16505] bond18: (slave bond19): Enslaving as an active interface with an up link [ 401.441572][T16514] syz_tun: left promiscuous mode [ 401.467714][T16514] ip6gretap0: left promiscuous mode [ 401.502332][T16514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.524523][T16514] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.538279][T16514] batman_adv: batadv0: Interface activated: dummy0 [ 401.544923][T16514] batadv0: mtu less than device minimum [ 401.553602][T16514] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 401.565593][T16514] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 401.577381][T16514] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 401.589190][T16514] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 401.601192][T16514] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 401.641530][T16514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.669328][T16514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.708945][T16514] veth1_vlan: left promiscuous mode [ 401.716289][T16514] veth0_vlan: left promiscuous mode [ 401.725980][T16514] veth0_vlan: entered promiscuous mode [ 401.734616][T16514] veth1_vlan: entered promiscuous mode [ 401.757566][T16514] veth1_macvtap: left promiscuous mode [ 401.773597][T16514] veth0_macvtap: left promiscuous mode [ 401.788844][T16514] veth0_macvtap: entered promiscuous mode [ 401.808195][T16514] veth1_macvtap: entered promiscuous mode [ 401.820733][T16514] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 401.831395][T16514] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 401.842525][T16514] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 401.853528][T16514] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 401.863358][T16514] 8021q: adding VLAN 0 to HW filter on device bond1 [ 401.871692][T16514] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 401.886959][T16514] 8021q: adding VLAN 0 to HW filter on device bond2 [ 401.895162][T16514] 8021q: adding VLAN 0 to HW filter on device bond3 [ 401.903093][T16514] 8021q: adding VLAN 0 to HW filter on device bond4 [ 401.911207][T16514] syz_tun: entered promiscuous mode [ 401.921175][T16514] 8021q: adding VLAN 0 to HW filter on device team1 [ 401.928677][T16514] 8021q: adding VLAN 0 to HW filter on device team2 [ 401.937946][T16514] 8021q: adding VLAN 0 to HW filter on device bond5 [ 401.945499][T16514] 8021q: adding VLAN 0 to HW filter on device bond6 [ 401.954604][T16514] 8021q: adding VLAN 0 to HW filter on device bond7 [ 401.962616][T16514] 8021q: adding VLAN 0 to HW filter on device bond8 [ 401.971571][T16514] 8021q: adding VLAN 0 to HW filter on device bond9 [ 401.982396][T16514] 8021q: adding VLAN 0 to HW filter on device bond10 [ 401.992744][T16514] 8021q: adding VLAN 0 to HW filter on device bond11 [ 402.001070][T16514] 8021q: adding VLAN 0 to HW filter on device bond12 [ 402.008633][T16514] ip6gretap0: entered promiscuous mode [ 402.039981][T16514] 8021q: adding VLAN 0 to HW filter on device bond13 [ 402.050312][T16514] 8021q: adding VLAN 0 to HW filter on device bond14 [ 402.059977][T16514] 8021q: adding VLAN 0 to HW filter on device bond15 [ 402.069879][T16514] 8021q: adding VLAN 0 to HW filter on device team3 [ 402.077579][T16514] 8021q: adding VLAN 0 to HW filter on device team4 [ 402.260306][T13403] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.267542][T13403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.276123][T13403] bridge0: port 3(vlan2) entered blocking state [ 402.282530][T13403] bridge0: port 3(vlan2) entered forwarding state [ 402.291920][T13403] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.299315][T13403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.344706][T16552] netlink: 'syz.2.2656': attribute type 2 has an invalid length. [ 402.444031][ T3362] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0 [ 402.471193][ T3362] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.484233][ T3362] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 402.506407][ T3362] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.531631][T16544] veth1_to_hsr: entered promiscuous mode [ 402.539149][T16544] __nla_validate_parse: 13 callbacks suppressed [ 402.539163][T16544] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2656'. [ 402.593017][T16548] netdevsim netdevsim2 €Â: renamed from netdevsim0 [ 402.627057][T13403] net_ratelimit: 64 callbacks suppressed [ 402.627078][T13403] bond15: (slave bridge6): link status up again after 0 ms [ 402.698060][ T3306] bond15: (slave bridge6): link status up again after 0 ms [ 402.726762][ T3306] bond15: (slave bridge6): link status up again after 0 ms [ 402.752814][T16552] : entered promiscuous mode [ 402.766733][ T13] bond15: (slave bridge6): link status up again after 0 ms [ 402.768370][ T3362] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 402.787367][ T3362] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.796228][ T13] bond15: (slave bridge6): link status up again after 0 ms [ 402.806160][T13403] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0 [ 402.824798][T13403] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.856629][ T13] bond15: (slave bridge6): link status up again after 0 ms [ 402.876746][T13403] bond15: (slave bridge6): link status up again after 0 ms [ 402.916896][T13403] bond15: (slave bridge6): link status up again after 0 ms [ 402.947150][ T13] bond15: (slave bridge6): link status up again after 0 ms [ 402.976555][ T3306] bond15: (slave bridge6): link status up again after 0 ms [ 402.981545][ T230] ip6_tunnel: - xmit: Local address not yet configured! [ 403.022230][ T7791] ip6_tunnel: - xmit: Local address not yet configured! [ 403.031798][ T230] ip6_tunnel: - xmit: Local address not yet configured! [ 403.097520][ T7791] ip6_tunnel: - xmit: Local address not yet configured! [ 403.216209][T16584] netlink: 'syz.2.2666': attribute type 11 has an invalid length. [ 403.242861][T16585] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2667'. [ 403.309848][ T7791] ip6_tunnel: - xmit: Local address not yet configured! [ 403.348445][T16591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2668'. [ 403.657170][T16600] iwpm_parse_nlmsg: Invalid attribute (msg type Remote Mapping info ret = -34) [ 403.706691][T16604] lo speed is unknown, defaulting to 1000 [ 403.750841][T16613] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2676'. [ 404.082984][T16629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2680'. [ 404.089480][T16630] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2679'. [ 404.112470][T16630] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2679'. [ 404.132734][T16630] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2679'. [ 404.157216][T16630] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2679'. [ 404.190272][T16630] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2679'. [ 404.573939][T16633] lo speed is unknown, defaulting to 1000 [ 404.604718][T16604] lo speed is unknown, defaulting to 1000 [ 405.174877][T16668] bridge0: entered allmulticast mode [ 405.213459][T16633] lo speed is unknown, defaulting to 1000 [ 405.311281][T16677] tipc: Trying to set illegal importance in message [ 405.837778][T16707] netlink: 'syz.0.2699': attribute type 1 has an invalid length. [ 406.073014][T16700] lo speed is unknown, defaulting to 1000 [ 406.245947][T16720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.279009][T16711] 8021q: adding VLAN 0 to HW filter on device bond28 [ 406.313346][T16711] bond27: (slave bond28): making interface the new active one [ 406.329313][T16711] bond27: (slave bond28): Enslaving as an active interface with an up link [ 406.402849][T16723] geneve2: entered promiscuous mode [ 406.420496][ T230] netdevsim netdevsim2 €Â: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.449874][ T230] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.460840][ T230] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.504081][ T230] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.529914][T16729] netlink: 'syz.2.2706': attribute type 1 has an invalid length. [ 407.436880][ C1] ip6_tunnel: - xmit: Local address not yet configured! [ 407.642611][T16700] lo speed is unknown, defaulting to 1000 [ 407.846519][ T230] net_ratelimit: 50 callbacks suppressed [ 407.846539][ T230] bond15: (slave bridge6): failed to get link speed/duplex [ 408.086708][ T1098] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 408.101559][ T1098] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 408.176956][ T48] bond15: (slave bridge6): failed to get link speed/duplex [ 408.407069][T16793] xt_hashlimit: size too large, truncated to 1048576 [ 408.516403][ T1098] bond15: (slave bridge6): failed to get link speed/duplex [ 408.637521][ T230] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 408.651933][ T230] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 408.666646][ T1098] bond15: (slave bridge6): failed to get link speed/duplex [ 408.728948][T16798] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 408.787589][ T48] bond15: (slave bridge6): failed to get link speed/duplex [ 408.992297][T16810] __nla_validate_parse: 35 callbacks suppressed [ 408.992315][T16810] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2733'. [ 409.191474][T16826] bond21: (slave ): Releasing active interface [ 409.249809][T16826] bridge_slave_0: left allmulticast mode [ 409.274794][T16826] bridge_slave_0: left promiscuous mode [ 409.324190][T16826] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.353066][T16826] bridge_slave_1: left allmulticast mode [ 409.365504][T16838] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2738'. [ 409.400943][T16826] bridge_slave_1: left promiscuous mode [ 409.407695][T16826] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.428159][T16826] bond0: (slave bond_slave_0): Releasing backup interface [ 409.449511][T16826] bond0: (slave bond_slave_1): Releasing backup interface [ 409.483073][T16851] xt_CT: You must specify a L4 protocol and not use inversions on it [ 409.497847][T16855] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2740'. [ 409.512527][T16826] team0: Port device team_slave_0 removed [ 409.537096][T16826] team0: Port device team_slave_1 removed [ 409.554483][T16826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.586916][T16862] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 3, id = 0 [ 409.782390][T16866] IPv6: Can't replace route, no match found [ 409.984220][T16888] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2751'. [ 410.004596][ T1175] wlan1: Trigger new scan to find an IBSS to join [ 410.032050][T16891] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2752'. [ 410.077729][T16891] netlink: 'syz.3.2752': attribute type 1 has an invalid length. [ 410.225072][T16893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2753'. [ 410.228926][T16901] netlink: 'syz.0.2755': attribute type 1 has an invalid length. [ 410.354485][T16891] 8021q: adding VLAN 0 to HW filter on device bond2 [ 410.368546][T16891] bond1: (slave bond2): making interface the new active one [ 410.381176][T16891] bond1: (slave bond2): Enslaving as an active interface with an up link [ 410.423089][T16904] bond29: (slave ip6erspan0): making interface the new active one [ 410.436043][T16904] bond29: (slave ip6erspan0): Enslaving as an active interface with an up link [ 410.552496][T16907] macsec0: entered allmulticast mode [ 410.568715][T16907] veth1_macvtap: entered allmulticast mode [ 410.588326][T16907] macsec0: left allmulticast mode [ 410.611578][T16907] veth1_macvtap: left allmulticast mode [ 410.634891][T16926] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2761'. [ 410.755828][T16930] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2762'. [ 410.765823][T16930] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2762'. [ 410.782825][T16934] IPv6: sit1: Disabled Multicast RS [ 411.322313][T16951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2767'. [ 411.481558][T16958] netlink: 'syz.2.2769': attribute type 1 has an invalid length. [ 411.839591][T16966] netlink: 'syz.1.2771': attribute type 1 has an invalid length. [ 411.849309][T16956] 8021q: adding VLAN 0 to HW filter on device bond21 [ 411.859787][T16956] bond20: (slave bond21): making interface the new active one [ 411.868914][T16956] bond20: (slave bond21): Enslaving as an active interface with an up link [ 412.084383][T16972] batman_adv: batadv0: Removing interface: gretap2 [ 412.100518][T16972] batman_adv: batadv0: Removing interface: gretap3 [ 412.134392][T16972] bond11: (slave batadv0): Releasing active interface [ 412.204880][T16984] 8021q: adding VLAN 0 to HW filter on device bond26 [ 412.214855][T16984] bond25: (slave bond26): making interface the new active one [ 412.223536][T16984] bond25: (slave bond26): Enslaving as an active interface with an up link [ 412.328271][T16874] [ 412.330650][T16874] ============================================ [ 412.336854][T16874] WARNING: possible recursive locking detected [ 412.343110][T16874] syzkaller #0 Not tainted [ 412.347539][T16874] -------------------------------------------- [ 412.353697][T16874] kworker/u8:26/16874 is trying to acquire lock: [ 412.360121][T16874] ffff88807e75fd58 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 412.370077][T16874] [ 412.370077][T16874] but task is already holding lock: [ 412.377439][T16874] ffff88807ed8dd58 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 412.387293][T16874] [ 412.387293][T16874] other info that might help us debug this: [ 412.395424][T16874] Possible unsafe locking scenario: [ 412.395424][T16874] [ 412.402883][T16874] CPU0 [ 412.406154][T16874] ---- [ 412.409432][T16874] lock(&qdisc_xmit_lock_key#3); [ 412.414453][T16874] lock(&qdisc_xmit_lock_key#3); [ 412.419469][T16874] [ 412.419469][T16874] *** DEADLOCK *** [ 412.419469][T16874] [ 412.427681][T16874] May be due to missing lock nesting notation [ 412.427681][T16874] [ 412.435982][T16874] 11 locks held by kworker/u8:26/16874: [ 412.441600][T16874] #0: ffff88807c362140 ((wq_completion)bond10){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 412.452822][T16874] #1: ffffc9000655fc40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 412.466129][T16874] #2: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf3/0x17c0 [ 412.475715][T16874] #3: ffffffff8eb59cc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x37f0 [ 412.485642][T16874] #4: ffff8880366ef228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#4){+...}-{3:3}, at: __dev_queue_xmit+0x112b/0x37f0 [ 412.498260][T16874] #5: ffff88807ed8dd58 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 412.508556][T16874] #6: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5a/0x450 [ 412.517461][T16874] #7: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3de/0x10b0 [ 412.527218][T16874] #8: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 412.536260][T16874] #9: ffffffff8eb59cc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x37f0 [ 412.546284][T16874] #10: ffff888055f0e228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#4){+...}-{3:3}, at: __dev_queue_xmit+0x112b/0x37f0 [ 412.559003][T16874] [ 412.559003][T16874] stack backtrace: [ 412.565077][T16874] CPU: 0 UID: 0 PID: 16874 Comm: kworker/u8:26 Not tainted syzkaller #0 PREEMPT(full) [ 412.565096][T16874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 412.565107][T16874] Workqueue: bond10 bond_alb_monitor [ 412.565128][T16874] Call Trace: [ 412.565136][T16874] [ 412.565144][T16874] dump_stack_lvl+0xe8/0x150 [ 412.565167][T16874] print_deadlock_bug+0x279/0x290 [ 412.565191][T16874] __lock_acquire+0x24df/0x2cf0 [ 412.565212][T16874] ? __pfx_netif_skb_features+0x10/0x10 [ 412.565227][T16874] ? ret_from_fork_asm+0x1a/0x30 [ 412.565241][T16874] ? __lock_acquire+0x683/0x2cf0 [ 412.565260][T16874] ? sch_direct_xmit+0x15f/0x4c0 [ 412.565278][T16874] lock_acquire+0x106/0x350 [ 412.565296][T16874] ? sch_direct_xmit+0x15f/0x4c0 [ 412.565325][T16874] _raw_spin_lock+0x2e/0x40 [ 412.565345][T16874] ? sch_direct_xmit+0x15f/0x4c0 [ 412.565363][T16874] sch_direct_xmit+0x15f/0x4c0 [ 412.565383][T16874] ? __pfx_sch_direct_xmit+0x10/0x10 [ 412.565402][T16874] ? arp_solicit+0xb90/0xe40 [ 412.565424][T16874] __dev_queue_xmit+0x1754/0x37f0 [ 412.565442][T16874] ? __dev_queue_xmit+0x29b/0x37f0 [ 412.565458][T16874] ? __lock_acquire+0x683/0x2cf0 [ 412.565476][T16874] ? arpt_do_table+0x25b/0x1f90 [ 412.565493][T16874] ? __pfx___dev_queue_xmit+0x10/0x10 [ 412.565510][T16874] ? __pfx_arpt_do_table+0x10/0x10 [ 412.565533][T16874] ? NF_HOOK+0xa2/0x3c0 [ 412.565551][T16874] NF_HOOK+0x33a/0x3c0 [ 412.565570][T16874] ? __pfx_arp_xmit_finish+0x10/0x10 [ 412.565588][T16874] ? NF_HOOK+0xa2/0x3c0 [ 412.565604][T16874] ? __pfx_NF_HOOK+0x10/0x10 [ 412.565621][T16874] ? lock_acquire+0x106/0x350 [ 412.565639][T16874] ? __pfx_arp_xmit_finish+0x10/0x10 [ 412.565658][T16874] ? inet_addr_type_dev_table+0x25/0x190 [ 412.565679][T16874] arp_xmit+0x16c/0x270 [ 412.565695][T16874] ? arp_xmit+0x23/0x270 [ 412.565713][T16874] arp_solicit+0xbdc/0xe40 [ 412.565735][T16874] ? __pfx_arp_solicit+0x10/0x10 [ 412.565754][T16874] ? __neigh_event_send+0xea4/0x1510 [ 412.565774][T16874] ? __pfx_arp_solicit+0x10/0x10 [ 412.565792][T16874] __neigh_event_send+0xf0c/0x1510 [ 412.565815][T16874] neigh_resolve_output+0x1a1/0x720 [ 412.565835][T16874] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 412.565858][T16874] ? ip_finish_output2+0x3de/0x10b0 [ 412.565878][T16874] ip_finish_output2+0xc4b/0x10b0 [ 412.565897][T16874] ? ip_skb_dst_mtu+0x811/0xa50 [ 412.565916][T16874] ? ip_finish_output2+0x3de/0x10b0 [ 412.565936][T16874] ? ip_finish_output+0x40b/0x530 [ 412.565955][T16874] ip_output+0x29f/0x450 [ 412.565973][T16874] ? ip_output+0x5a/0x450 [ 412.565991][T16874] iptunnel_xmit+0x626/0xd10 [ 412.566016][T16874] ip_tunnel_xmit+0x195b/0x2040 [ 412.566048][T16874] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 412.566068][T16874] ? __pfx_gre_build_header+0x10/0x10 [ 412.566086][T16874] ? kfree+0x1c5/0x640 [ 412.566100][T16874] ? pskb_expand_head+0x469/0x13a0 [ 412.566116][T16874] __gre_xmit+0x19e/0x240 [ 412.566133][T16874] ? __pfx___gre_xmit+0x10/0x10 [ 412.566152][T16874] erspan_xmit+0xad5/0x1590 [ 412.566172][T16874] ? __pfx_erspan_xmit+0x10/0x10 [ 412.566190][T16874] ? __lock_acquire+0x683/0x2cf0 [ 412.566210][T16874] dev_hard_start_xmit+0x2cd/0x830 [ 412.566229][T16874] sch_direct_xmit+0x257/0x4c0 [ 412.566249][T16874] ? __pfx_sch_direct_xmit+0x10/0x10 [ 412.566268][T16874] ? __switch_to_asm+0x70/0x70 [ 412.566283][T16874] __dev_queue_xmit+0x1754/0x37f0 [ 412.566304][T16874] ? __dev_queue_xmit+0x29b/0x37f0 [ 412.566328][T16874] ? __pfx___dev_queue_xmit+0x10/0x10 [ 412.566343][T16874] ? rcu_is_watching+0x15/0xb0 [ 412.566363][T16874] ? kmem_cache_alloc_node_noprof+0x1a1/0x610 [ 412.566380][T16874] ? trace_kmem_cache_alloc+0x29/0xe0 [ 412.566395][T16874] ? kmem_cache_alloc_node_noprof+0x1a1/0x610 [ 412.566412][T16874] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 412.566429][T16874] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 412.566450][T16874] ? __alloc_skb+0x4cc/0x7a0 [ 412.566470][T16874] ? alb_send_lp_vid+0x14e/0x550 [ 412.566489][T16874] alb_send_lp_vid+0x348/0x550 [ 412.566510][T16874] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 412.566533][T16874] alb_send_learning_packets+0x12c/0x300 [ 412.566553][T16874] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 412.566571][T16874] ? bond_alb_monitor+0xf3/0x17c0 [ 412.566591][T16874] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 412.566612][T16874] bond_alb_monitor+0x3d0/0x17c0 [ 412.566631][T16874] ? bond_alb_monitor+0xf3/0x17c0 [ 412.566649][T16874] ? __pfx_bond_alb_monitor+0x10/0x10 [ 412.566667][T16874] ? rcu_is_watching+0x15/0xb0 [ 412.566688][T16874] ? process_scheduled_works+0xa20/0x14e0 [ 412.566704][T16874] process_scheduled_works+0xa8e/0x14e0 [ 412.566729][T16874] ? __pfx_process_scheduled_works+0x10/0x10 [ 412.566747][T16874] ? assign_work+0x3cf/0x5d0 [ 412.566762][T16874] worker_thread+0xa47/0xfb0 [ 412.566787][T16874] kthread+0x388/0x470 [ 412.566806][T16874] ? __pfx_worker_thread+0x10/0x10 [ 412.566822][T16874] ? __pfx_kthread+0x10/0x10 [ 412.566841][T16874] ret_from_fork+0x514/0xb70 [ 412.566862][T16874] ? __pfx_ret_from_fork+0x10/0x10 [ 412.566881][T16874] ? __switch_to+0xc89/0x1420 [ 412.566898][T16874] ? __pfx_kthread+0x10/0x10 [ 412.566917][T16874] ret_from_fork_asm+0x1a/0x30 [ 412.566935][T16874] [ 412.976563][ T1175] wlan1: Trigger new scan to find an IBSS to join [ 413.012220][T16874] net_ratelimit: 30 callbacks suppressed [ 413.012237][T16874] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 413.095622][T16874] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 413.142774][T16993] bridge0: port 3(vlan2) entered disabled state [ 413.149680][T16993] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.157038][T16993] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.189522][T16993] batman_adv: batadv0: Interface deactivated: dummy0 [ 413.314102][T16993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.950661][T16993] bridge8: left allmulticast mode [ 413.958600][T16993] bridge9: left allmulticast mode [ 414.003319][T13394] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 4352 - 0 [ 414.040421][T13394] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.063356][T13394] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 4352 - 0 [ 414.076092][T13394] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.094192][T13394] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 4352 - 0 [ 414.104157][T13394] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.113692][T13394] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 4352 - 0 [ 414.123136][T13394] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.996625][ T1175] wlan1: Trigger new scan to find an IBSS to join [ 416.906563][T13394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50