last executing test programs: 3.285508446s ago: executing program 4 (id=1767): r0 = socket(0x2, 0x3, 0xff) (async, rerun: 64) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (rerun: 64) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000180)={0x22, 0x9, 0x9, 0x6, 0x1, 0x81}) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x7db7, 0x4) (async) sendto$inet(r0, &(0x7f0000000340)="0f83b07ef75b4ff0f2d163c7c8a0d8fb8ab88f5b134df9055ab57dcbb68052fc319ac66954faccf67679a82789438adf3664351d952cd72c0dd8e9e7", 0x3c, 0x4004040, &(0x7f0000000200)={0x2, 0x4e23, @remote}, 0x10) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d800000019000100000212ba0d8105040a600000ff0f040b067c55a1bc0009007d0006000000000015001500fe808178a80035fd00e4ff3f0200000901ac040000d67f6f94007100a007a290457f0189b316277ce06b9e9dfc487d5d32bace8017cbec4c2ee5a71602b2a10c11ce1b14d600741f795025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fec114c5d46a73290f9eaef6288b97192309a00000e000000000000000000000000000000000000000000000000000ab62800"/216, 0xd8}], 0x1}, 0x0) (async) listen(r2, 0x7ff) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) (async) close(0x4) (async) getsockname(r3, 0x0, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}}, 0x0) 2.885041333s ago: executing program 4 (id=1773): r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x1e4, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r4, 0x215eb000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket(0x14, 0x2, 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, 0x0, &(0x7f0000000780)) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 2.046478751s ago: executing program 3 (id=1785): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000001080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000050000000000000001000084000000000300000002000000000000210000000000000005000000000000005f"], &(0x7f0000000280)=""/265, 0x41, 0x109, 0x1}, 0x20) 2.044137688s ago: executing program 2 (id=1786): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003900000003000300", @ANYRES32=r3, @ANYBLOB="24005a802000018014000300000000000000000001020004"], 0x40}}, 0x0) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) (async) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r4) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000140)=0x28080, 0x4) (async) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000180)={0x0, r4, 0x80, 0x22, 0x2, 0x7f}) 1.926633758s ago: executing program 3 (id=1788): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x28, r4, 0xf01, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x4f}}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r4, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1d}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040801}, 0x4008000) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000500)=@security={'security\x00', 0xe, 0x4, 0x478, 0xffffffff, 0x0, 0x3f0, 0x0, 0xffffffff, 0xffffffff, 0x4e0, 0x4e0, 0x4e0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff000000, 0xff], [0xff, 0x0, 0xffffffff, 0xffffffff], 'wg1\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x3a, 0x9, 0x1, 0x10}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe, 'system_u:object_r:unconfined_execmem_exec_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "4d3a46e177abbed5001ef11bd2f0c66301c685c93d118e7c89799c396822"}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @loopback, [0xff000000, 0xffffff00, 0x0, 0xffffffff], [0xffffffff, 0xff000000, 0xff, 0xff000000], 'ipvlan0\x00', 'wg1\x00', {}, {}, 0x3a, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth1\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x34, r5, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x4040010) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="140100002e00010000000000fbdbdf25040117800c00160006ac0f00000000001400010000000000000000000000ffff0000000050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc00b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec5875470900000050351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf1"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.829937562s ago: executing program 2 (id=1789): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x5}, [@printk={@li, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5, 0x1, 0xb, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222}, 0x90) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x200003b2, 0x0, &(0x7f0000000380)="fd97a6633528276901d509de9400a14fb5913c6c253c5551be05130e9eee4bce3f4ed4c3db6b2ebdb7da4818a778bb7c2e4f", 0x0}, 0x50) 1.829360346s ago: executing program 4 (id=1790): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.617620851s ago: executing program 1 (id=1793): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000040)={{r0}, 0x5, 0x396f7a5e, 0xd8f}) socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {0x9, 0x0, 0x50}}, 0x18}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {0x9, 0x0, 0x50}}, 0x18}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, r5, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x4, 0xa}]}]}]}]}, 0x2c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000d042dbd7000fcffff1f00000000c9641c15bd960581adbbfb3030b94afe37736b4737d060ad0c491c73de480571128342bec2c6908a3037529a01314994b8e53b83e3bd6a5abce6b1a56eca9960bb2a8cc3525610eb30a4bcda54973429d3d8dc0eb13e3157277dfa19dde3645edf313373dce6fd9187148bd3fbc08fa81e3d8a75bbbc4fadc4d51c137b6ae5f07f8a54407258f770448ddf99db8bc466ec013ecc1e0f8de47b5069473bd4d2a6802319daa0e06aad21a8dfe74880b95833350b2862910940ad8ad8c0fb01808c221b88084eff66", @ANYRES32=r6, @ANYBLOB="46000600000000002400128009000100626f6e640000000014000280050001000200000005000e0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) (async) close(r10) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r12, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f0000000140)={&(0x7f00000001c0)=@xdp={0x2c, 0x8, r13, 0xb}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)='f', 0x1}], 0x1}, 0x857) (async) sendmsg$kcm(r9, &(0x7f0000000140)={&(0x7f00000001c0)=@xdp={0x2c, 0x8, r13, 0xb}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)='f', 0x1}], 0x1}, 0x857) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001085f0000000000003a33a9e4fc", @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32=r6, @ANYBLOB="08001b"], 0x30}}, 0x0) 1.615963688s ago: executing program 2 (id=1794): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x44, 0x9, 0x0, 0x0, {0x3}}, 0x14}}, 0x24000044) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000140)=0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async, rerun: 32) syz_emit_ethernet(0x86, &(0x7f0000001100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x50, 0x6, 0x0, @local, @local, {[@fragment={0x2b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x66}, @srh={0x89, 0x4, 0x4, 0x2, 0xfb, 0x68, 0x81, [@mcast1, @rand_addr=' \x01\x00']}], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@sack={0x1d, 0xa, [0x0, 0x0]}]}}}}}}}}, 0x0) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) (async, rerun: 32) socket$kcm(0xa, 0x2, 0x0) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) (async, rerun: 32) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r4, &(0x7f0000000180)}, 0x20) (rerun: 32) write$tun(r1, &(0x7f0000000080)=ANY=[], 0xfdef) (async) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) 1.615658936s ago: executing program 4 (id=1795): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xd}}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x4}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0xf}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x10, 0x10, 0x5, 0x8, {{0x20, 0x4, 0x0, 0x5, 0x80, 0x67, 0x0, 0x3, 0x2f, 0x0, @rand_addr=0x64010101, @multicast1, {[@ra={0x94, 0x4}, @generic={0x44, 0x9, "a15de7969edaaf"}, @timestamp={0x44, 0x14, 0x11, 0x0, 0x1, [0x3, 0x7, 0x6, 0x2]}, @timestamp_prespec={0x44, 0x3c, 0xf7, 0x3, 0x5, [{@broadcast, 0x4}, {@broadcast, 0xa1}, {@local, 0x10}, {@private=0xa010100, 0x6}, {@broadcast, 0x3ff}, {@loopback, 0xde7c}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x1}]}, @timestamp_prespec={0x44, 0xc, 0xd4, 0x3, 0x0, [{@rand_addr=0x64010100, 0x6}]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000bc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b80)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0500001e00000228bd7000fbdbdf2507000000", @ANYRES32=r3, @ANYBLOB="1810000000ef0100080025000000000008000500", @ANYRES32=r4, @ANYBLOB="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"], 0x53c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000001) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c00)=@bridge_dellink={0x1b8, 0x11, 0x400, 0x70bd28, 0x25dfdbfd, {0x7, 0x0, 0x0, r3, 0x4480, 0x821}, [@IFLA_OPERSTATE={0x5, 0x10, 0x7f}, @IFLA_BROADCAST={0x0, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, @IFLA_GSO_MAX_SIZE={0x0, 0x29, 0x5}, @IFLA_WEIGHT={0x8, 0xf, 0x8}, @IFLA_LINKMODE={0x5, 0x11, 0xa}, @IFLA_IFALIAS={0x14, 0x14, 'team_slave_1\x00'}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.609367195s ago: executing program 3 (id=1796): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x3, 0x3ff, 0x1, 0x5, 0x3, 0x3, 0xa, 0x7, 0x0}, &(0x7f0000000040)=0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={r1, @in6={{0xa, 0x4e20, 0x3f0f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}, 0x55, 0x7}, 0x90) r2 = socket$inet(0x2, 0x4, 0xffffffff) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r1, 0x9}, &(0x7f0000000180)=0x8) setsockopt$inet_buf(r2, 0x0, 0x25, &(0x7f00000001c0)="19d64ecafe5d85a12a3c88a16007d3bd1625379abfedf375465891d68e2b1da778cc7db43c29956ac88f65c4f115e48dc549ac69bf345bb66caaf3015e45582acdf737500ca94b699724022ff6372d73943ac5d4630825e418be6a7dfaed48300dfd7efd8aeb70aff0c84ba2291fe705cb7ebd2f01a459630d3d950b695acb3784d7d23f7735b46532fc4c334d9c7406b43bfc5e1ea15eb914bf48286f8c9f8e0cd74167cfbd3eacd8850eb2179850e4fff049", 0xb3) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f00000003c0)={{r2, &(0x7f0000000280)='\x00', 0x800, &(0x7f00000002c0)={@align=0x6, {0xffff, 0x0, 0x7, 0x1}}, 0x3, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x5}, {[0x3, 0x10000]}, 0x4, 0x2, &(0x7f0000000380)=""/2}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000440)={r3, @in6={{0xa, 0x4e21, 0xfff, @dev={0xfe, 0x80, '\x00', 0x29}, 0x3}}, [0x1, 0x4, 0x7, 0x6637229d, 0x8000000000000001, 0x3, 0x4, 0x3ff, 0x9, 0x6, 0x0, 0x7, 0x0, 0x681, 0x8]}, &(0x7f0000000540)=0x100) r6 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000580)={r5, 0x8, 0x2}, 0x8) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r4) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x6c, r7, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xc31, 0x5b}}}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x6c}, 0x1, 0x0, 0x0, 0x48801}, 0x20048893) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000740)={0x9, 0x7, 0x8, 0x81, 0xa4e, 0x9, 0x6, 0xd, r3}, 0x20) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000007c0), r4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000900)={'ip_vti0\x00', &(0x7f0000000800)={'syztnl2\x00', 0x0, 0x8000, 0x8000, 0x5, 0x6, {{0x2c, 0x4, 0x0, 0x2a, 0xb0, 0x66, 0x0, 0x8, 0x29, 0x0, @empty, @local, {[@timestamp_addr={0x44, 0x24, 0x86, 0x1, 0x0, [{@empty, 0x60d8}, {@remote, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@private=0xa010100}]}, @ssrr={0x89, 0xb, 0xe1, [@multicast2, @rand_addr=0x64010100]}, @noop, @lsrr={0x83, 0x17, 0xb9, [@remote, @dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @remote]}, @lsrr={0x83, 0x13, 0xaa, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @remote, @broadcast]}, @timestamp_prespec={0x44, 0x24, 0x1e, 0x3, 0x1, [{@private=0xa010101, 0x6}, {@multicast2, 0x8000}, {@rand_addr=0x64010100, 0x4c}, {@local, 0x48}]}, @generic={0x88, 0x11, "09360a452e5b58be0df8ade7b40652"}, @cipso={0x86, 0xa, 0x0, [{0x7, 0x2}, {0x2, 0x2}]}]}}}}}) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000940)={0x0, @rand_addr, @initdev}, &(0x7f0000000980)=0xc) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000a80)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2404004f}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x6c, r8, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x81}, 0x40000) sendmsg$AUDIT_USER_AVC(r6, &(0x7f0000001b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001b40)={&(0x7f0000000b00)={0x1010, 0x453, 0x8, 0x70bd27, 0x25dfdbfc, "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", ["", "", "", "", "", "", "", "", ""]}, 0x1010}, 0x1, 0x0, 0x0, 0x8}, 0x4008000) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000001d00)={'filter\x00', 0x0, 0x3, 0x62, [0x0, 0x0, 0x1, 0x3, 0x3], 0x9, &(0x7f0000001bc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000001c80)=""/98}, &(0x7f0000001d80)=0x78) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002000)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x8, '\x00', r10, 0xffffffffffffffff, 0x5, 0x2, 0x5}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002080)={r4, 0xffffffffffffffff}, 0x4) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000002180)={0x8, 0x23, &(0x7f0000001dc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xdd5}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @jmp={0x5, 0x1, 0x9, 0x9, 0x2, 0x8, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000001f00)='syzkaller\x00', 0xeda8, 0x69, &(0x7f0000001f40)=""/105, 0x41100, 0x6f, '\x00', r9, @cgroup_skb=0x1, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001fc0)={0x4, 0xc, 0x0, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f00000020c0)=[r4, r4, r4, r4, r4, r4, r4, r11, r12], &(0x7f0000002100)=[{0x1, 0x2, 0x0, 0x8}, {0x3, 0x1, 0x8, 0x2}, {0x1, 0x3, 0x0, 0x6}, {0x2, 0x1, 0x4, 0xc}, {0x3, 0x5, 0xf, 0x5}], 0x10, 0x5}, 0x94) r14 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002280), r4) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f00000023c0)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002380)={&(0x7f00000022c0)={0x88, r14, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x80000001}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x9, 0x40, 0x3ff, 0x0]}, @SEG6_ATTR_SECRET={0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x4004000}, 0x20044010) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000002400)=0x1, &(0x7f0000002440)=0x4) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000002480)={r1, @in6={{0xa, 0x4e23, 0x76ca, @dev={0xfe, 0x80, '\x00', 0x11}, 0x400}}}, 0x84) getsockopt$MRT6(r4, 0x29, 0xcf, &(0x7f0000002540), &(0x7f0000002580)=0x4) r15 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002680)={&(0x7f00000025c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x56, 0x56, 0x4, [@datasec={0x10, 0x6, 0x0, 0xf, 0x2, [{0x4, 0x2, 0x4}, {0x5, 0x80000000, 0x10000}, {0x2, 0x1, 0x6}, {0x4, 0x7, 0x1}, {0x4, 0xffffffff, 0xfffffff4}, {0x2, 0x1000000, 0x7}], "886d"}]}, {0x0, [0x2e, 0x5f]}}, &(0x7f0000002640)=""/60, 0x74, 0x3c, 0x1, 0x401}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000026c0)={0x1b, 0x0, 0x0, 0xe, 0x0, r4, 0x3, '\x00', r10, r15, 0x4, 0x2, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000027c0)={{r4}, &(0x7f0000002740), &(0x7f0000002780)=r13}, 0x20) 1.393953618s ago: executing program 4 (id=1798): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x41, &(0x7f0000000000)=0x7f, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x11, @private=0xa010102, 0x15, 0x0, 'wrr\x00', 0x0, 0x0, 0x2c}, 0x2c) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x64, &(0x7f0000000900)=0x1002, 0x4) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r3, 0x8000000000000003}, 0x18) bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r3, 0x2, {0x0, 0xff, 0x5}, 0xfd}, 0x18) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f0000000600)=0x50d, 0x4) listen(r4, 0xffffffff) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$inet(r4, &(0x7f0000002540)={&(0x7f0000000980)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002480)=[{&(0x7f0000002280)="376055aed89b2244ca704a267e0328e3148abad6b9e1216b3165c01a587fdbea298dac789143809c9b6bccdbec657aabdcd80424ffb6ffedf6d3ca41747eac2cff1df73e22fdab39cf1b0a2e1c7bb4b0919c119a3998efed39d55b9eb00c424ecc464b2b63671665a4251973c07960fb3359c81404bc886b8a5794227df29cc2d5aa08432a8585b986a38ae7737c425dff9566ef5975a0066474b5a9a0f72f758e1b00e14a09019cea4fec62de2a7cd19c9b44c0990d6be1e18fc86033927273117102699ffb189e0f4c85454ebc86976e96f6598a216362f577203aac0b4ae72153a36e1b42a266e14345f83664c530b6859c5c5188", 0xf6}, {&(0x7f0000002380)="f21129838e5bbb40c3900601da67e71b9aa31aa06939259a7e0aa6eb92bb3544b45dfc6940bc9bb5119f379fd2b94837737a28edb0c9beee70e8839fee3cf36838f5d6c6b8fb8419b503e2df535a159ae3e9c0402cee6eebb2ebc7030dea2c2924c347343c78e1c5bb621f1027cf1584920cc5e7c41c3b750da2a608b03312cd9b81360aa02aa24047a7a7ed37e2f77c929397f0d3a5c3395f0bc28b5a9dbbde0b10ce6ec10476be1553720e520af3b251abfdfe42fde5dd1674593c19a3610d010ccfb998aebac777bc57745664a87b3915d9d78ce82d", 0xd7}], 0x2, &(0x7f00000024c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x27}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x48}, 0x24004040) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r6, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0x20, 0x3fa, 0x20, 0x70bd26, 0x25dfdbfe, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r8, 0x40046f01, &(0x7f0000000940)=0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000003a00), r10) sendmsg$NLBL_CALIPSO_C_REMOVE(r10, &(0x7f0000003ac0)={0x0, 0x0, &(0x7f0000003a80)={&(0x7f0000003a40)={0x14, r11, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4014000}, 0x800) sendmmsg$inet(r9, &(0x7f0000002140)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000100)="fc950bbc6a8c68fdf6cfe3dd1c832a5d979686f971", 0x15}, {&(0x7f0000000180)="709ef27d0a68d0e42ee2e60c8f692a9d746cfc835a9c58673a05dc1a8b9e579eefa183909bfa4ccbe6a89e2b4e68618fbedc8786d54dd46d8a6777edc54f711e144e19c77bc9a34a6cab926148ce5cce181989b205c5400c6319a958e6e9ce18e579743baaf32158c4d40e9125f0dcba1f8caa0ed4a7c159c77c5704a399e951955158392ab79c878f681b4a5e290a94d1588f3253421b741d9fa3156ec231f597fa2edff2539cd6c6da42ef", 0xac}, {&(0x7f0000000240)="12b06a5d6e82c0ade2777077308ba36aa934bcdc9c19fd9b00f9bb50e22915f5c27df715805fad33a244df417e07a7bf69b22da062e3fc0fad2040d4f1cc9c78381f06ec0ded4844e4ad8664365ffe2fe545cf815d0ffcd916ceb542eeb489a083a580f11387549659eeb6e0cc917acf1f81d7e41832affeb1b2959c2271a78a47d45cd0ffacd093c5bf", 0x8a}, {&(0x7f0000000380)="dea26c7753fa7f892c15bb5a5ab6b19325b556480ee4adf896c3425d77617d17ad829314e2d18dcfc9359aebef3582cd79fdb2ac74dd3e3b", 0x38}], 0x4}}, {{&(0x7f0000000400)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000440)="0f92097880bcc18a180c7dec3b840121cf4459a0dcc9894bda599d02f4b0a86c666071bcdcb689c6ea9baa3879e12ef47f7c8c648f396d0f0101f954113c4a127529af10939b5b7e2ab43bb56e2c93914b44b464e7227f11a684077ba814ddabeebbba644173ca397f0ea74545e0518d9a89360b9dcdd23384d7841de0ebae5316617faeb01eb26f77afd6c002836e352a1dc4c7a19517cf5d1679543317f5329ca02c6876079837321c0944ddf719f302e962416f9b9911e68f5acb03ecc5479f634636d79c0d567253f0e1af235b6d61c6", 0xd2}, {&(0x7f0000000540)="b86067a8703f5e6d0d81d7200780df55e86b229cd5f1cc4f0e6cd19ba14df86dda36561f95f817500911f674d1880215c62432316a5a4c03ec3773f023e02240fb8565d485b80f4d84525defe85ee253e18fca573e73475bda9977844cd9e5f787aa", 0x62}, {&(0x7f00000005c0)="6fb8c99fd20aae9f08377363e12e68c97d5059b5d534630a7b084abd53f805b91d57ffcd569e261c9d43963a659a86c423aa9016d70ea186b5e84434c6660f45e8e934a2badb9f4bf39479208d7f16fb48fb4d6b8e19fd4b1d5c4ac91c4d6f706a27a22c9863f8a715da4800434b72a2f5bad33bbfb49b4fcdcccb5903a8e5525dde35aa93922b22f04e4e5ce3def69315bf0163ebf52de532c894e798e66d410833cf64acfbf10647d814e90cf6", 0xae}], 0x3, &(0x7f00000006c0)=[@ip_retopts={{0x20, 0x0, 0x7, {[@rr={0x7, 0xf, 0x29, [@empty, @loopback, @loopback]}]}}}], 0x20}}, {{&(0x7f0000000700)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000000a40)="aac91bdedd7a502eac7e6ec7cb088c41dbdf8c8c200cdf28a18dbcff088e1ad7bfc8c34ce63627fa07e672d2baebb11d162ab64773f515d5d84c23f929172102db58fa97d32a625f83e5b6292efa0ed127c1213de0a4385b88e5c66c83fbc40c486b0583a658db01ef25e27fbd790d208640f323c7185b39823e6e1343919fcdfab101b97e62ca63973a582caf83cde72f8f800f505937987d0443ac5bb0f8a6474602ab26d95436bde3a8ac0bfdfcc712eacf791d9dcfb0e7ad7056b40f3f959282b68c97a2bf87372e1b622d8e1b209068b67bb0f5aab0b70156ad93e2e64656109544020bb63e99d619b6cee96e2bb96a0c39eb5b37203124f1230a556c90bfc985dd93488408b4b8e07bb16eb8912b915876aae16715764ce1b5fea3a499984e337d6dd02f3a960354a3006a467b3e673902aa5443a9d227edf2b10fd31c40b3ffa714c30481a673ee71f196f25759faeef3ae24337356f8b73f2c43c03204592c7b89e39170ce7908a78fc4f64a721df1bd92f4dd2e5edf0e4062105a9ceade7f676b23f2f4b0078a47f83b1849771960707248019c6d46d9616423e7af159859fe5fa90f0dcce00ebeb4a66e4b9f4d001f0326a7aad4e40046f0a238626198aff323aeb4a6be8833253ff84306fba2c89f76cc457963d7790ff7a7aea99fa664fe76fd6139c9b44d7409deac0394c681006ba5374fa1927e2f9016eab2762b0c02f4bf96f7d5cd73bfefd6af6f38a51ce2bbc9f2179ae0dad1c9ffca9c6f22246e35ab44520aa431147d928a3d8006903cb03d34dc36870a9c7b14545371fffe6022d553cbfacac9cc58a9976b86130269340384b978bfe4ed8fe9b09d2175d9cb6efe53e0f2c4bf8348b8859c1291e64c88680c32fd8a781035aa9bb6123569d8f3baeee414d1b2c92c132e71c6a026f35d80f8cb41d400b35f1a3df4a272b1349bd4a784812470075b73f40f7036d639a3980497f3934d92b979b2b6b7a4d0a678de2796d0b763bdbffdc2bea255bc770b7ee737e42d9b77b7dec63eb8fc5c4601402fddb3bb032893c58ede3820b5b457ae95de3d0c61a9250285f34a9672a7dabfdcf5334a3f8a2d8cddfc9c46a42aa0c3707ea4452428cf2f6b42f2ee32b3857b502945b642085fe4205b04259dd564e05bfb546151c5f764d9e04d154a9247677bceb3503dd885e93f0dbd7e39eabc5af585efecedd422c43a57340bf196b1b80c3972593a955b487adc2e79eb83acd614c92cd479be26ed521eeb450e541db7a3a236522d787b7c25d91d4b38142d3763c10c02c364d9ff306e25c6483ab661019f3f3045f24a517196ef90666058ce48fd7c39649c4b1ca6f8699db25f1c3408d310fb3adc56b0c324d3a862639a560c8675def7c5ce1a9aad9c21bc279afe73983f6e7494b2d0283e57186dcf8f02dd9d238c1c684b7a74a477911e155e67bc62bf4cca164f944d24414ab675cd8169b0da33902f2d65ee3f954c39c7d855692f06d86b6320123667e4bb8da880cbf4b300bfc63ab00e8dbf01692314d2c51925b0a1d65aa4a3676da6ce16b5377fb71d613180cdee6f9bb638ca812daa5251ca5363acddaad13472fc51eead5fa3d0a7194c2a039426e4e9fe53e8202ff0281f6d5de8f751b02ad2247b82bf925193d92940efa98dcfcf97d81cac5ae981025d8bd6cf1b0d716bb682272f7c3d3b1b7a5e231dd5dbfaee920cc95bd55eabaf3ac23cbcad55d0b9b88a50e93ac82867065e890c7086f167d55a3d81561d893a205727a824d9fc8c614ec2141aa893c9b56d3f21d4aeefc5cab0084d08a436865fc2939478db408ae5db4dcac1ae63ffaff50cde8490024a04c911f12f53f51839683df14f2cef23919452c44546c08d4d5ca24f2342e650ef6441018ee8b0a8a86f04e759ff3fedc6dfb71e7bc268a45632124bfc5d2996b2041876f0751375ea68a0bcad5acc6c38fddcf522f01ad1f60f778c7b0d161426612e047428b0cd165d5c5589e8b481e90f9b284c018bec7d81bf23df5b2a9178e76e0dc9270e20462a67197592cddc8d15120768b5df06f24a78aaf1e048c8a0c273bee1354a748dd399b8791d55d61d0cf74d08ab7375db0f3cfbe29aa7eea4fe98a407f26ccb9d598c0287ecabcb85219251af8d814b47221b8b82230a6bb12796fdcb7ba93208e5b3326b262086b45a1769a5d7ed3403982730df958139f3828eade7f6b6360fab2fe8343553271ead2b758c85607b8d186003bf6ac69dc0b3517a5e44ba59ccbcd13701f36a24a807d2119090c64ecc348b6c33d473e36457fecd7ce27fcb63a3fd299a90aa4ed8fcbb8e4471dfc44f1ef8cfe912490b018437a4cd775a4ad7ce7bdaac8d447ef9e1efd6853f1c64cdd5239605987574835333affb111ab19d1f571ac782c3983747fe244549de2c8178aa3508e52e841558973fb1bb06aa5956f65655c314bbc4f1b1201e8506f18edafd9c4d9f023fd470f5187cf9d492e339f7344c93c579131f805837588645f5de48358f57bc42a4a1cdec3b308fdfd61df13799f38fc0edd957133b069624912b03880d6614b2927db6edc8518628f74054d486af4e3ac3436cc976105dbd9599b7a06e259c29815c2f819315c081d3b5c184dcbcf628eb83c76b22f20d6fc60cdda5e5f1b934d5b154dab5c717251160c90447745e59bfb222c07bdfe12ec06f8182b99ddbaf17e9edeae23989192d8d0f48fbd936daa054497ceb8e05a7a67a1e9e1c93de33e23ae37ebf36e8c5d3d2bd7c9544853c543a71ae7263b671e3af6a5377f119759c50bdee9a59bec99421345790d4516681f24db930cc8cfdbad1e271636bd73a1cf3f62548ce521c4eeb2f87850221ec4f7098411908e55213a25cd78f77243d61822d4a7f4579cd6f5cf7bdc85c344958b6a835a21b3782294fc8e317e1bb2f8360973849857b24f72ae47ca5633c32bf8acabe993bc66237343b376f2d9ef2395ce873bbe2dbfb16219b3f8c1af1224a13adde0f146007a3ee4143a8e727a74f818093e6cc241655793e49cb05776d8fed1afab2a2fc1bbd3891a899c9ad52db4d5f0ab63116f1d9f058b5b70dc4f95c435f796f42b517318d90cfb2c276f68ef1cea7c0a5e8d16478b1209187b8863ab44b740f8584b5f95f3ef1500928ea945307ed91f12f1914e0d805e4213ff17257de0260791e0de88cf11d6ad9e053ebb8961a318a1664cc35ac8ffea7ead01c0cc97b65653220f272823420fa76a43f8220935334b982726bbc2459530f5b855fa672935e72fa45199200a2f6e049a2eff65af0a9c591d820a51da62b9c7f203481b6be4f760afef4c6311ca8a311a2b5a247b76eceaa9b2e6888ca34a7b212b9b420cc4227d0d95f572a97485c95c31700e80f9ef337259525db3637a71581a695bb997df0b54258024cb0e0b80aeb46dbe24b39caf35b110c1758e70371964716d61a13eeab8a9190c6db543645558cc5f28f2fc388cdf3116d8ba9eb6179555cf09ace15afdd411e97114bbb8e378f8f013c27aa9515c2638665af62e79cb61382cd7320ef88956292a2bfd057db6042c03be9924b9af7d5edf6a0b480a7343481a93632bddeead3c923dcdacc0b008a89b14d2a06f2afef1779a637cbdfb03192f709a59c32dcbf331673c9acac424d41cc5127061c7a7122d4f45c623befa826267da68062ba9109897e66b9721659ca85106cc4f52d7c4c333d94f2823af6bc4f9dc0e24df805f700ee7209343f043465450f972dd11d1f87cb92b54b6c4da20346201d87ed783cbdf1662b7618dfde4015a2e7df27d4a8b0ed127894b604741d129b012797497c45f6da3ccd7ebbd2b8f60e05cc26d11de1cc768158036ad406f03767760e36b954b3513ae3f9e843bcbee56a291c8be99c89b84b7c518942a3384268cda76bfc4f13013d35fcc1c9b4e365fae0e14b1a9f66b92d9b3adab103f101c4d82bc788b06c96427175dcf52791079635900a6550db63158157749a0e3602246531a04021a190cb1ee79ec3832623b97d0be2a35556653b048b44adbbea5f0f930e98dbfbb547481ad20adab03ce172b50e4a90b1734f83c63c91be2fb7315f3777629c47aae2d375a2ce4af00820324d091d5f4b1049f768dbb29793d84055b1c0d1bf16681434a442c63e4bc9d7f93d2d0b1f685971865ff7cf9d2eb620a0dca658f15053feb52d37fdbce2ebbd36308f2013b0eca8ecf6829e8714e0c7e864245168663e623a9958ec7973fa285cfc9cea6cf0fcc8d2e178b582c1ac7427c32b693bca5593a4915733d57b6e2b9e79dabec3e4538497854cd2dcdca38ef08b70a7276ed6ac0fb9612d69e1c679ceb7e99853319bce1098ce6576c33c41e5d853271cb00c6a9aa51058b1c1b9cb18e7c8b706ef83892d8232696b37a316ac4fdf9d856226ad409b464c80974e35fa0768fb8f7bb035ee7c4e54b310e2fac05c89d76d6d8c405a8350c5430c5abe230e268fdc427e76c184a734c65496a5530f0d3d33d314bcf63ab61c7fe9bbde5dd023e2a6b473ca50244d68ecbbf14939b4cf36959ece13e49cb9c154ae9a7b15ce59f28c2ee44681f024f44d5aa3cd0a2f3687210123f6dd2cfab704cc2478f5ba8143d834f9f3aea6e6fbf0c09418af4a75d8a75e56273eebc157f6986394544e98d31928ddcd285a96cc51e816705336c35603b9be8f5216401f8bd2eba85b165d8d89f4e55704122435335a192ef0ddeea3ed0682d5b10a81122234a8a76a02633dc4a56957e7ec2f52fce9032199bf52c50719f1c1bf2a43fb1e4e9d9df68d9bfa3dec1c53497b75f84f7299120e25cef1abfc12f3a76358447b451879305067ef2749d0a1c1b2f8ead4790f7e2354af66b07ed34995a8226ab8ed7750225ef2b093893850c1817f64d76949cb726b68fede5cfbbbe4232e2719299d64ff48fe5fe808ed52d9212e78f10cdff9b38d30f6393710b8bb23be6ee5567ad61b144c95d3314b1a5eb8df924adc0d7929b58c415a41492e98f06d2446b9978d55dc55954001cfdd8636ba5f85adb80371faa789236d2793fb605752ae3da54da0e357d607f062ab86d4b5c8336b9ad30c7f68c6f4c7561ff05dff9da82e82752b8cc75a93e9cf55b72abf04d4cfa9d06a956b9f0819390de93e1f04ce6b15a19b747e15a95a9d88470cfd1fd7c1dd8d296734c26813982b0caaa8dfd916eb67caf8bd222346ca238b76c9cf08b886fe518478839f33b46b46d20ba9ab8d452766eb0cb556340701cbc7128da25c0323a002fc7713b93779eb07cdfffc259f43d2db66f77a8f91ea373377e237fc245dc1881f6bcc744948d52ae672844bca0308d91d0c39b7add23d625885c37bfbcde629527f69e7ee415515d55e7c06bb6b494c9832f5cd0b9952e55859e03803d1412513ea330f14b47940f70e0d2028ced2caed33b708b3a9831f54a4ad520bb07dd76a78d72ae640d8818cb99558e38f8d8dc340faedba04c6d758ef5d3d4732bfa1656fb8ea100e407881b59c3763fd1f026885c8e6e762677f0a71ede4db68d85eca81cf68e9f09f882b88f2c36a38a487f4bdb64e6b9c3e30e0dc39f244dc45b89baa28a51c7c2d0c89ec03b160f100b5c13c29098b9b5775250793afafdee7b8b113ce47f6c72b0ec230dc3ffaf9b03bfc3963300c80f461ff1d719538ad68a1cc12f38d82394e9077f327507554ae287747b59d150aface15bbeb93caed58b740ce8a0c01437a5fcd11723acb1e2cd8dae509a137afc3d47aacc8c5d12ed6b24b778ef188f0bc80", 0x1000}], 0x1}}, {{&(0x7f0000001a80)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000001e80)=[{&(0x7f0000001ac0)="1aed1adc5c02c0276bc8c16fcc428e39fa272827c4c96d3da9224545f8b814d796a2d10d4419ce1d81431b52f533fb9ea9f5ca9d0e1536a67088c79744fad70662553bd5f8c68b8cf2f079e2c2bfd2b9ae92327c4b2f34d272321370c554505ff48c9676b80c4de8850d6e5cf93dce890bbc686f690d132f94f8fbd3a6ed105dbbad81ca866c54ca56631774d9777af373a8514a5265ce5a6d6cd03ed3282e9af2b9cd2460e5fd654dfb5b192b9d41d9335dfd03a525c4ef58beb00daf175f80abae4ec6d826ac177b69085cdd0578c14931bb30d9646d9702920ecc0a8ded6f6d755e6b202850ee", 0xe8}, {&(0x7f0000001bc0)="23b791d377d26708a4093daac50620dbc0233462456ea7da5d8b", 0x1a}, {&(0x7f0000001c00)="6f3c693719bc1a3c34e4f022b6790ff9df199afed225c751b5f6f50f501649d62598649a5bcd1690dd520d1b5add4cc4ea8ddd6d384e8ddcd7acc60cc221ff6ab5853c41d73b08e5278b230d9fe6fa4395", 0x51}, {&(0x7f0000001c80)="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", 0xfd}, {&(0x7f0000001d80)="ea902423d241687f105f0e650b5615653f90", 0x12}, {&(0x7f0000001dc0)="34e10778c0f3502e429e6ba40529a48889e5603ed399cf8bf19207682ff0d52290effd3d4774ec54e13c4a35242f0602d0f4a367597ce30c2b20873ec79e97fa0acb5d58ddef59d0d6c721c4165ea5acf4d3aa7ef93e28c1221592d61994853734e8a34fd07065e49048e2ca2b96bf10b2d626bbd064b839387bded64cf680b4c1436309b7e5e5a9af372d620968b1837b8cd0f4a482b0b079c5edadc690e2a30a0fba960ac5a8", 0xa7}], 0x6, &(0x7f0000001f00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x10001}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0xff}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x88, 0x0, 0x1, [0x9, 0x1]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xce}}, @ip_ttl={{0x14, 0x0, 0x2, 0xc}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0xe0}}, {{&(0x7f0000002000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002040), 0x0, &(0x7f0000002080)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1ff}}, @ip_retopts={{0x90, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x44, 0x98, 0x3, 0x0, [{@broadcast, 0x2}, {@empty, 0xffff0000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@local, 0x2}, {@rand_addr=0x64010100, 0xffffffff}, {@broadcast, 0x7}, {@broadcast, 0x6}, {@private=0xa010101}]}, @timestamp={0x44, 0x18, 0x92, 0x0, 0xd, [0x8, 0x9, 0x9a, 0x5379, 0x5a]}, @timestamp_prespec={0x44, 0x14, 0xaa, 0x3, 0x6, [{@private=0xa010101, 0x400}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000000}]}, @generic={0x88, 0xd, "768a60ba4830173625846d"}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}], 0xc0}}], 0x5, 0x4040) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private2}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014e5ffffb6030000000000008500000005000000bf09000000000000b60901000000002066000000646c6c251801000020786c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffff7f0000000008000000b70300000000000015040000060000003f93000000000000b5030000020000008500000096e1c44600b700"], &(0x7f0000000000)='syzkaller\x00', 0x1000003, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.378386361s ago: executing program 3 (id=1799): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000200)="1700000072006bcd9e3fe3dc6e08000007230000040200", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) (async) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="40020000", @ANYRES16=r1, @ANYBLOB="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"], 0x240}, 0x1, 0x0, 0x0, 0x20004111}, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) 1.141664456s ago: executing program 3 (id=1801): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x884, &(0x7f0000000080)={0x2, 0x4e25, @multicast1}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48440}, 0x4040000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000009, 0x11010, r0, 0x257e9000) recvmsg(r0, &(0x7f0000004080)={0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000000a80)=""/118, 0x76}], 0x1}, 0x40000120) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) getpid() getpid() r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) listen(r6, 0x8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r7 = accept4(r6, 0x0, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000000280), &(0x7f0000000380)=0x8) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) r10 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r10, r9, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'pimreg0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r9, @ANYBLOB="003000000000000014001a8010000480"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') 1.141301163s ago: executing program 0 (id=1802): syz_emit_ethernet(0x4e, &(0x7f00000019c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6080a08300180000fc010000000000000000000000000000fe8000000000000000000000000000bb0002000000000000040100040100c20402"], 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x10, 0x8000, 0xfffffc00, 0x3, 0x0}, &(0x7f0000000040)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000080)={r0, @in6={{0xa, 0x4e23, 0x2cb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x7, 0x4, 0xf, 0x6, 0x44, 0xed, 0x8}, &(0x7f0000000140)=0x9c) 1.125545856s ago: executing program 2 (id=1803): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r1, 0xffffffffffffc000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x80) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0x0, 0x0, 0x1b8, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x43, 0x3, "e234ccfa475b2e2243e0ca26bf6ea1240cfa4c98036d0601b0a28b6ce8b0"}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, [0xff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'team0\x00', '\x00', {0xff}, {0xff}, 0xff, 0xe7, 0x4}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x8001, 0x3, 0xc1, 0x4, 0x4, 0x9, 0x7, 0x6]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440500000000010400000000000000000000e3ff17469b58bf44a35a10ea50c5db2c648ea29e99def79d95220bea8834099889da9e0549ae8ee47b5b1b1ceb0f386600"/80, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000300040000000800040005000000"], 0x44}}, 0x0) 1.010856369s ago: executing program 4 (id=1804): r0 = socket$inet(0x2, 0x80001, 0x84) listen(r0, 0x3) accept4(r0, 0x0, 0x0, 0x800) listen(r0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000140081044e81f782db46b904021d000025000000040000a118000200ff02000100000e1208000f0100810401a80316ea1f000b40032a5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc0000000000000080bb9ad809d5e1cace81b341139fe3cd4032ecedb12d1d2eb0c0ed0bffa29954e5413f017fe491", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @local, @multicast1, @multicast, @rand_addr=0x64010100}}}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) shutdown(r0, 0x0) 1.008735756s ago: executing program 1 (id=1805): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r0], 0xd8}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r0], 0xd8}}, 0x0) (async) 1.006568607s ago: executing program 0 (id=1806): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000000000007111b600000000008510000002000000850000002a00000095000000000000009500a505000000008d8d72a4d2b0e866647a5563580154525990a711faae6b5efa82c515c097c645d4a49869490531e6fc004371de6a0e2aeb39db28a841fee433ca770c6799b28945ba973ff15b71d81a48f65b229efa31eb19c4d6945c8db59bf97ce0d74761c6ededcdebebfcd90759bd2cfe8b4253a9468fe5b0759b99a37a189ddd91f7bf447837"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 829.977655ms ago: executing program 2 (id=1807): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, 0x25, 0x109, 0x870bd24, 0xfffffff9, {0x2}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}, @typed={0x8, 0x10a, 0x0, 0x0, @pid}]}, 0x24}, 0x1, 0x0, 0x0, 0x4011}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x3, 0x0, r1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x38) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) 827.978323ms ago: executing program 1 (id=1808): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x5e22, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x30, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'vlan0\x00', &(0x7f00000003c0)=@ethtool_drvinfo={0x20, "53df0c5ec882c42fd909e29262d8207fb00ba14ff8087317ca4aff4e1eb458ee", "e8c6cabbacf981fdb0cc2100fe707ba1f625c077bb17222a8f893b85a7c52625", "8d5208e323896bc080d59878fad6c91cbaafab96f6df17f11fc23ed31b5b6146", "8b00c93a010605475f2ac35a98e5260600098fdff6eab4bfee2d937af5881f15", "2bf44512b4e4feaa61e959f3b8c6c2b68bbbc3299ac0f18a89a900eb1470ec0e", "6a74a3bda117982c6af1f6b2", 0x0, 0x5, 0x3ff, 0xa8, 0xfffffff1}}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close(r1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300000f, 0x11, r0, 0xcfa3e000) r2 = socket(0x10, 0x2, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) close(r3) recvmmsg(r2, &(0x7f00000007c0)=[{{&(0x7f0000000100)=@isdn, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000200)}, {&(0x7f0000000240)=""/88, 0x58}, {&(0x7f00000002c0)=""/18, 0x12}, {&(0x7f0000000340)=""/117, 0x75}], 0x4, &(0x7f0000000400)=""/27, 0x1b}, 0x8000}, {{&(0x7f0000000440)=@caif=@dgm, 0x80, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/160, 0xa0}, {&(0x7f0000000580)=""/34, 0x22}], 0x2}, 0x1ff}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000600)=""/86, 0x56}, {&(0x7f0000000680)=""/86, 0x56}], 0x2, &(0x7f0000000740)=""/72, 0x48}, 0x7}], 0x3, 0x40002001, &(0x7f0000000880)={0x77359400}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x2, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f000001fcc0)={'syztnl1\x00', &(0x7f000001fc40)={'ip6gre0\x00', r4, 0x2f, 0x6, 0x74, 0x101, 0x40, @dev={0xfe, 0x80, '\x00', 0x42}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x8, 0x401}}) 826.952626ms ago: executing program 0 (id=1809): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_pauseparam={0x13, 0x2, 0x1, 0x80000104}}) 661.069883ms ago: executing program 3 (id=1810): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e23, 0x101, @private2, 0x8e4}}, 0x0, 0x0, 0x2b, 0x0, "bb02a3c364ca41d6357e54452401400400941292f4925a1e1ea6324d6193fcf19b49f3eefb1f56c54dc46d8b6d2ccd118aa0cc1dc2767bbe000100060000010100"}, 0xd8) r1 = socket$kcm(0x23, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c000000120003032dbd7000fdffffff000402004e224e230400000007000000faffffff000000040200000080000000ff0f000000000000", @ANYRES32=0x0, @ANYBLOB="070000000000000002f6fff802000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20040849}, 0x8004) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r1, 0x800) accept4(r1, 0x0, 0x0, 0x80000) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x40, 0x700, 0x9, 0x4, {{0x14, 0x4, 0x1, 0x20, 0x50, 0x64, 0x0, 0x62, 0x0, 0x0, @multicast2, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x3c, 0x58, 0x3, 0x0, [{@remote, 0x4}, {@private=0xa010101, 0xffff}, {@private=0xa010101, 0xfdf5}, {@loopback, 0x2}, {@empty}, {@remote, 0x1}, {@multicast2, 0x2}]}]}}}}}) r4 = socket(0x2a, 0x2, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) setsockopt$sock_int(r5, 0x1, 0x1a, &(0x7f0000000240), 0x4) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x80}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x31cf}]}}]}, 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x29, 0x1, 0x5, 0x9, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x40, 0x10, 0x2, 0x200}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000300)={'wg2\x00'}) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000000640)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x2, @private1, 0x28}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)="dc", 0x1}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x280}}], 0x1, 0x880) shutdown(r7, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000000280), &(0x7f0000000080)=0x8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0x10, 0xff, 0x0, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x40, 0x6, 0x3}}) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r8, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) 635.755947ms ago: executing program 2 (id=1811): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x308, 0xffffffff, 0x0, 0x600, 0x168, 0xffffffff, 0xffffffff, 0x270, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x6, 0x4, 0x0, 0x1, 0x1, 0x4], 0x1, 0x5}, {0x4, [0x5, 0x4, 0x2, 0x2, 0x1, 0x3], 0x4, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x2, 0x0, 0x2, 0x4, 0x5, 0x1], 0x1, 0x2}, {0x2, [0x0, 0x7, 0x0, 0x0, 0x2, 0x1]}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0xd, 0xf, [0x33, 0x3e, 0x25, 0x23, 0x25, 0x2b, 0xb, 0x21, 0x12, 0x15, 0x1c, 0x8, 0x16, 0x37, 0x3b, 0x3a], 0x1, 0x9044, 0xff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x368) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x44}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x6}}}, &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="100000001b1401"], 0x10}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) 578.473557ms ago: executing program 0 (id=1812): r0 = socket(0x10, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x0, 0xa5, 0x4, 0x30, 0x46, @private0, @empty, 0x1, 0x80, 0xfffffffc, 0x1}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x0, 0xa5, 0x4, 0x30, 0x46, @private0, @empty, 0x1, 0x80, 0xfffffffc, 0x1}}) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'gretap0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xffffffffffffffff}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0}) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)=0x4) 438.195939ms ago: executing program 1 (id=1813): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) (async) accept4$tipc(r2, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x80000) (async, rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) (async, rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) (rerun: 32) 234.509928ms ago: executing program 1 (id=1814): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) (async) syz_emit_ethernet(0x9e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000900000000000119078000000550000000000004e22007c9078040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000"], 0x0) (async) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000300), 0x10) (async) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="050000000000", @ANYRESOCT, @ANYRES64, @ANYRESDEC], 0x48}}, 0x4000) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-serpent-sse2\x00'}, 0x58) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) (async) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f0000000d40)={&(0x7f00000002c0), 0xc, &(0x7f0000000d00)={&(0x7f00000008c0)={0x430, 0x3f4, 0x400, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x2d, [0x290bd514, 0x10000, 0x7, 0xfffff702, 0x8, 0x1, 0x4, 0x6, 0x0, 0x40, 0x5, 0x8000, 0x10, 0xb92a, 0xb, 0x4, 0xc, 0x1, 0x8, 0x6, 0x2, 0x1, 0xb8, 0x6, 0x5500, 0x0, 0x68f1f0e9, 0x400, 0x5, 0x9, 0x8, 0x20510a0d, 0x9, 0x4, 0x1, 0x0, 0x9, 0x10, 0x3, 0xfffffffb, 0x7, 0xffff0001, 0x5, 0x1ff, 0x3, 0x9, 0x22c4, 0x9, 0x83, 0x5, 0x0, 0x0, 0x0, 0x4a23, 0x6, 0x3, 0x8, 0x1, 0x9, 0x8, 0xff, 0xffffff7e, 0x1], [0x1, 0x2, 0x7, 0x8, 0x79, 0x9, 0xdb4, 0x1, 0x0, 0x9, 0xc978, 0x10001, 0x200, 0xb2, 0xe, 0xec, 0x0, 0xfff, 0x6, 0x8e, 0x3, 0x3, 0x6, 0xff, 0x7, 0x10000, 0x0, 0x2, 0x4, 0x8, 0x2, 0x2, 0xb, 0x0, 0x0, 0x7, 0x0, 0x13, 0xfffffffd, 0x5, 0x7, 0x7ff, 0x40, 0x9, 0x6, 0x1, 0x8, 0xd24, 0x1, 0x8, 0x1, 0x96, 0x8, 0xfffffffd, 0x80000001, 0x6, 0xa16, 0x1, 0x4, 0x2, 0x2, 0x4, 0x7fffffff, 0x8], [0x7, 0x5, 0x1, 0x5, 0x9, 0x1, 0xb, 0xfff, 0x7a5, 0x1ff, 0x7, 0xacf3, 0x1000, 0x4, 0x5, 0xae3, 0x9, 0x7, 0x5, 0xfffffffa, 0xf328, 0x9, 0x3, 0x0, 0x7, 0x9, 0xeb, 0x7, 0x1, 0x4, 0x3, 0x0, 0x9e5, 0xa, 0x8, 0x4, 0x7, 0x9, 0x200, 0x8000, 0x80000000, 0x2, 0x80, 0x2, 0xfffff001, 0x4, 0x8, 0x5, 0x89, 0x2, 0x401, 0xc, 0x1, 0x4, 0x1ae2, 0x6, 0x6a8, 0x1, 0x50a, 0x400, 0x2, 0x1, 0x6, 0x3], [0x0, 0x3ff, 0xffffffff, 0x6, 0x9, 0x1, 0x3ff, 0x9, 0x9, 0x0, 0x5, 0x8000, 0x9, 0x3, 0x4, 0x3, 0x80000001, 0x6, 0x9, 0x0, 0xc, 0x4, 0x2, 0x5, 0xf, 0x2, 0x6, 0x3, 0x6, 0x4, 0x6, 0x1, 0x0, 0xffffff01, 0x7fffffff, 0x4, 0xfffffff7, 0xcfd, 0x0, 0x3, 0xc35, 0x7fff, 0x7b38, 0xffff, 0xa9b, 0x8, 0x1, 0x5, 0xffffffff, 0x9, 0x1, 0x7, 0xffffff00, 0x0, 0x7, 0x8, 0x1, 0x49, 0x4, 0x9, 0x65, 0x0, 0x0, 0x1], 0x10, ['skcipher\x00', '\xaa\xaa\xaa\xaa\xaa', '!\x00']}, ["", "", "", "", "", ""]}, 0x430}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) close(r2) r5 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000001dc0)={0x0, 0x10000}, &(0x7f0000001e00)=0x8) sendmsg$inet_sctp(r4, &(0x7f0000001f00)={&(0x7f0000000440)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000001d80)=[{&(0x7f00000004c0)="e96f86acb99f6163a9c6d9d705589da609c5de9ff2454ea294553651ae374e40f830a4", 0x23}, {&(0x7f0000000500)="a880ab4ec4b3d20f956cf4ccbe3c68915f5fc6aac55df49553b0caaaf222c710b6ed685580a970caa4ffdd293dc07fb1aa4fb488c8a5d08e49ed4c13e34852160c6ab4fb4eafe34ef412ef6ed4295efc2194cba8bfd78dbdd1504e9ade20aebdf65023cc349de837d37ec9e0dc5f7fe02577e1f236f45b6d540c8a76a333943e52735fe7876ee36f3a341812d27f1a2b3a84f165892a6cc6d67c1594516941ed84d4abdada479f1e9dbeb808ecb0ed973e94e8360535", 0xb6}, {&(0x7f00000005c0)="c04bb8abce888dc239c521f2b03bf9badee49c7f25fa24ae91a281c2582e838f188a7439698362713e39f4169a56ba0e49e2c248a47bdf9f3cd74f23ab798e709351c8dee5bd003e16d798977361ad9b3425dd60dc6ce3f9a15c01eef84b26e7834f2cc0954f8549c5a5b32d72a6416f4fcb726eb7f065c893004c9afac3451143280ec6414b5b5456f37546c98e3c4b95c897889e4a59da4ceebcae2078df05f6e9d2e3d5c1de1c25c9bc81b7e77782829d59818015602cf48f41875e1e5912f9a77a80ef8d607daa44b81c610e2029b90709341f75eb7090647fe14e1733220738f6db", 0xe4}, {&(0x7f0000000d80)="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", 0x1000}], 0x4, &(0x7f0000001e40)=[@init={0x18, 0x84, 0x0, {0xffff, 0x4, 0x7, 0xff}}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @init={0x18, 0x84, 0x0, {0x4, 0x8, 0x8, 0x100}}, @authinfo={0x18, 0x84, 0x6, {0x6}}, @sndrcv={0x30, 0x84, 0x1, {0x5b76, 0x2, 0x301, 0x1, 0x2, 0x4, 0xab, 0x4, r6}}, @dstaddrv4={0x18, 0x84, 0x7, @empty}], 0xa8, 0x4000}, 0x80) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_MODES={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x1c}}, 0x0) sendmsg$inet6(r1, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x0, 0x40, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x79000000}}], 0x18}, 0x40080) (async) sendmsg$AUDIT_SIGNAL_INFO(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x10, 0x3f2, 0x8, 0x70bd2c, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x40040) 161.664535ms ago: executing program 0 (id=1815): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000005000000000000000000711232000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r1}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0x10, &(0x7f0000000100)=ANY=[@ANYRES16=r3, @ANYRES32=r2, @ANYRES16=r1], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x38, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0x0, 0xfff4}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x4, 0xd}]}}}]}, 0x50}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000005000000000000000000711232000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000040), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r1}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0x10, &(0x7f0000000100)=ANY=[@ANYRES16=r3, @ANYRES32=r2, @ANYRES16=r1], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x38, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0x0, 0xfff4}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x4, 0xd}]}}}]}, 0x50}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 66.24071ms ago: executing program 1 (id=1816): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x40, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = socket(0x1e, 0x805, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r4, 0x84, 0x74, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="300000001a0001000000000000000000818000000003000000000000140001"], 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_buf(r6, 0x1, 0x13, 0x0, &(0x7f0000000100)) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e24, 0x3, 'fo\x00', 0x15, 0x3240, 0x3a}, {@empty, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipmr_delroute={0x3c, 0x19, 0x400, 0x70bd2a, 0x25dfdbff, {0x80, 0x20, 0x14, 0xf0, 0xff, 0x3, 0x0, 0x1}, [@RTA_NH_ID={0x8, 0x1e, 0x3}, @RTA_DST={0x8, 0x1, @rand_addr=0x64010101}, @RTA_GATEWAY={0x8, 0x5, @loopback}, @RTA_UID={0x8, 0x19, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8814}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3) 0s ago: executing program 0 (id=1817): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3a, 0x0, &(0x7f00000000c0)) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@can_newroute={0x154, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "8ca5be073cff296e"}, 0x2}}, @CGW_CS_CRC8={0x11e, 0x6, {0x1, 0xff, 0x0, 0x0, 0x0, "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", 0x0, "5c8d586b2a88d81866930fca15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0x0, 0x8}}]}, 0x154}}, 0x49080) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1, 0x2}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="020600000200"], 0x10}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000680)=0x2, 0x4) r7 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000600)=""/46, 0x2e}, {&(0x7f00000019c0)=""/51, 0x33}], 0x2, &(0x7f0000001a40)=""/147, 0x93}, 0x6}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001d00)=""/52, 0x34}], 0x1, &(0x7f0000001b80)=""/186, 0xba}, 0x9}], 0x2, 0x10040, &(0x7f0000001cc0)={0x0, 0x3938700}) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={r8, 0xf, 0x25, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x40) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1d084, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000010000000900f80073797a3000000000140000001100010000000500000000000000000a"], 0x48}}, 0x0) sendmsg$tipc(r3, &(0x7f0000001980)={&(0x7f00000006c0)=@name={0x1e, 0x2, 0x1, {{0x43, 0x4}, 0x1}}, 0x10, &(0x7f0000001840)=[{&(0x7f0000000700)="90429a99639e3631cb3cc534d87934352b308cb5e02d90e7b8ac8b992c3302431746bf3b96ebf3666e65b56e0ccb6e5b1817978892baf13f3d894b781cde28a93972a3ea0bbb5a0132c4004cca3f49a0a7cfd9549942dd8ee6543380d6a2141650088cfbc88675626c7b6aecadcd4e6d", 0x70}, {&(0x7f0000000780)="b2592a777646d37003cccc724540abd987684c0d0bdf89f334263fa45fb0149d8e4ce85347ff9dadc762129a999d2348788c2fccc17209", 0x37}, {&(0x7f00000007c0)="0d83c10fce5611d81db5318807f9059ea7b2fdc6e48a69cf7181d9da98d06e6f20cc1c99c9f3321a99d086a8cc9c00346323917522cbe6a9f976b84e26b9baae1ce0698d75867aca1dba739a48cd7069c414faf71e5b47b9a268ff59139bbe8e", 0x60}, {&(0x7f0000000840)="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", 0x1000}], 0x4, &(0x7f0000001880)="376674eb011315e2d4ba9a86a9d37a70493b2ce4bf4b117d5331b1411bb192afec0dd4c450bcfb2b14efb12637f99761b816261c708ba9eb38bb289dafb07029a1b1cc387873b3bdb5afa03662661088df02c01ba366707b682e97721797209c34e7a45c13de55410348dfa310e4bdf71143d26d1615cdeb7790323860024f682e9d0536b6acfb116fccb1da2839328ef4b4a61707350daaaa30771935dc4ba3fc6d9e333ab1619fe62238c05ef80afd00270d4f0373a0e9276c2ab69242b41c227d184b876487502a866f0151865ab155c0bfcd46a8bf79f090f241d7e0", 0xde, 0x48014}, 0x81) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r11, &(0x7f00000005c0)={0x2, 0x4e21, @local}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x40, 0x4, 0x3}, 0x10) kernel console output (not intermixed with test programs): . [ 72.545495][ T5618] cgroup: Unknown subsys name 'net' [ 72.676974][ T5618] cgroup: Unknown subsys name 'cpuset' [ 72.685996][ T5618] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.033244][ T5618] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.236151][ T5650] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.237628][ T5649] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.245067][ T5650] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.259213][ T5649] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.262640][ T5650] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.269698][ T5651] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.275597][ T5650] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.284888][ T5649] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.298873][ T5650] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.300326][ T5649] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.307479][ T5650] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.313036][ T5653] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.321762][ T5650] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.328490][ T5653] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.337244][ T5650] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.342636][ T5653] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.348947][ T5650] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.354832][ T5649] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.370826][ T5653] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.371380][ T5652] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.389009][ T5653] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.389326][ T5652] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.399194][ T5653] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.411845][ T5652] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.422675][ T5652] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.001426][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.009080][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.016372][ T5630] bridge_slave_0: entered allmulticast mode [ 78.023982][ T5630] bridge_slave_0: entered promiscuous mode [ 78.060604][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.068018][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.075390][ T5630] bridge_slave_1: entered allmulticast mode [ 78.082343][ T5630] bridge_slave_1: entered promiscuous mode [ 78.187579][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.201527][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.208850][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.216159][ T5631] bridge_slave_0: entered allmulticast mode [ 78.222975][ T5631] bridge_slave_0: entered promiscuous mode [ 78.247681][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.266530][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.273808][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.281004][ T5631] bridge_slave_1: entered allmulticast mode [ 78.288591][ T5631] bridge_slave_1: entered promiscuous mode [ 78.303764][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.311274][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.318602][ T5632] bridge_slave_0: entered allmulticast mode [ 78.326048][ T5632] bridge_slave_0: entered promiscuous mode [ 78.367757][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.375206][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.382383][ T5632] bridge_slave_1: entered allmulticast mode [ 78.389695][ T5632] bridge_slave_1: entered promiscuous mode [ 78.405236][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.412455][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.419998][ T5633] bridge_slave_0: entered allmulticast mode [ 78.427151][ T5633] bridge_slave_0: entered promiscuous mode [ 78.442761][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.444327][ T5652] Bluetooth: hci2: command tx timeout [ 78.450844][ T5644] Bluetooth: hci4: command tx timeout [ 78.456616][ T5637] Bluetooth: hci3: command tx timeout [ 78.462600][ T5644] Bluetooth: hci1: command tx timeout [ 78.469676][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.480618][ T5634] bridge_slave_0: entered allmulticast mode [ 78.487789][ T5634] bridge_slave_0: entered promiscuous mode [ 78.513258][ T5630] team0: Port device team_slave_0 added [ 78.524161][ T5644] Bluetooth: hci0: command tx timeout [ 78.524302][ T5630] team0: Port device team_slave_1 added [ 78.536105][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.543368][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.550546][ T5633] bridge_slave_1: entered allmulticast mode [ 78.558494][ T5633] bridge_slave_1: entered promiscuous mode [ 78.567703][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.577389][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.584510][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.591639][ T5634] bridge_slave_1: entered allmulticast mode [ 78.598767][ T5634] bridge_slave_1: entered promiscuous mode [ 78.640200][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.662889][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.673190][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.680213][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.706158][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.747486][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.757375][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.764942][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.791012][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.804244][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.825619][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.856098][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.867080][ T5631] team0: Port device team_slave_0 added [ 78.875243][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.897517][ T5632] team0: Port device team_slave_0 added [ 78.913867][ T5631] team0: Port device team_slave_1 added [ 78.947680][ T5632] team0: Port device team_slave_1 added [ 78.981067][ T5634] team0: Port device team_slave_0 added [ 78.998018][ T5633] team0: Port device team_slave_0 added [ 79.006420][ T5633] team0: Port device team_slave_1 added [ 79.030566][ T5634] team0: Port device team_slave_1 added [ 79.055821][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.063590][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.089836][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.106261][ T5630] hsr_slave_0: entered promiscuous mode [ 79.112728][ T5630] hsr_slave_1: entered promiscuous mode [ 79.129075][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.136166][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.162787][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.184161][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.191347][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.218360][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.252724][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.259943][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.288173][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.306810][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.313806][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.339868][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.352182][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.359284][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.385222][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.411910][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.418922][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.444953][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.457577][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.464799][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.491078][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.588396][ T5631] hsr_slave_0: entered promiscuous mode [ 79.594771][ T5631] hsr_slave_1: entered promiscuous mode [ 79.600816][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 79.606821][ T5631] Cannot create hsr debugfs directory [ 79.651827][ T5633] hsr_slave_0: entered promiscuous mode [ 79.658602][ T5633] hsr_slave_1: entered promiscuous mode [ 79.665428][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 79.671167][ T5633] Cannot create hsr debugfs directory [ 79.683057][ T5634] hsr_slave_0: entered promiscuous mode [ 79.689426][ T5634] hsr_slave_1: entered promiscuous mode [ 79.695529][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 79.701371][ T5634] Cannot create hsr debugfs directory [ 79.711507][ T5632] hsr_slave_0: entered promiscuous mode [ 79.718014][ T5632] hsr_slave_1: entered promiscuous mode [ 79.725308][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 79.731075][ T5632] Cannot create hsr debugfs directory [ 80.208283][ T5630] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.222418][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.231041][ T5630] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.244546][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.254125][ T5630] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.264643][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.272636][ T5630] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.281812][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.349055][ T5631] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.359095][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.367699][ T5631] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.377032][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.384989][ T5631] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.394041][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.405288][ T5631] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.415335][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.511801][ T5632] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.522220][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.530627][ T5644] Bluetooth: hci1: command tx timeout [ 80.533473][ T5637] Bluetooth: hci3: command tx timeout [ 80.537567][ T5644] Bluetooth: hci4: command tx timeout [ 80.541613][ T5652] Bluetooth: hci2: command tx timeout [ 80.553450][ T5632] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.563924][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.580109][ T5632] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.589755][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.597861][ T5632] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.605428][ T5652] Bluetooth: hci0: command tx timeout [ 80.615296][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.726978][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.744578][ T5634] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.755438][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.763281][ T5634] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.773897][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.782036][ T5634] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.792048][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.800546][ T5634] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.810897][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.894210][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.911537][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.950396][ T5633] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.960619][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.975145][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.982634][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.995362][ T5633] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.006914][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.018409][ T5633] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.027674][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.035854][ T5633] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.046144][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.066614][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.073779][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.105406][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.148438][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.155551][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.182213][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.189363][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.224812][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.322665][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.371733][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.378984][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.389421][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.396596][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.423193][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.525508][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.536894][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.559908][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.567196][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.606861][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.614066][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.632034][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.673094][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.680328][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.713011][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.720248][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.212682][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.402317][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.597495][ T5631] veth0_vlan: entered promiscuous mode [ 82.605424][ T5652] Bluetooth: hci4: command tx timeout [ 82.607642][ T5644] Bluetooth: hci2: command tx timeout [ 82.610919][ T5637] Bluetooth: hci3: command tx timeout [ 82.617605][ T5644] Bluetooth: hci1: command tx timeout [ 82.647516][ T5631] veth1_vlan: entered promiscuous mode [ 82.698396][ T5644] Bluetooth: hci0: command tx timeout [ 82.727371][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.809522][ T5631] veth0_macvtap: entered promiscuous mode [ 82.859712][ T5631] veth1_macvtap: entered promiscuous mode [ 82.896664][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.982327][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.991945][ T5632] veth0_vlan: entered promiscuous mode [ 83.029495][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.042632][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.055546][ T5632] veth1_vlan: entered promiscuous mode [ 83.082345][ T1174] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.092283][ T1174] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.115535][ T1174] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.134685][ T1174] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.162372][ T5630] veth0_vlan: entered promiscuous mode [ 83.200530][ T5630] veth1_vlan: entered promiscuous mode [ 83.209705][ T5634] veth0_vlan: entered promiscuous mode [ 83.266069][ T5634] veth1_vlan: entered promiscuous mode [ 83.289380][ T5632] veth0_macvtap: entered promiscuous mode [ 83.321042][ T5633] veth0_vlan: entered promiscuous mode [ 83.329663][ T5632] veth1_macvtap: entered promiscuous mode [ 83.346485][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.364740][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.369642][ T5633] veth1_vlan: entered promiscuous mode [ 83.405763][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.438578][ T5634] veth0_macvtap: entered promiscuous mode [ 83.449780][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.452789][ T5634] veth1_macvtap: entered promiscuous mode [ 83.463983][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.468869][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.480542][ T5630] veth0_macvtap: entered promiscuous mode [ 83.501459][ T5630] veth1_macvtap: entered promiscuous mode [ 83.531851][ T1124] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.543804][ T1124] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.566040][ T5631] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.567488][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.598975][ T1124] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.608527][ T1124] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.636796][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.659129][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.707105][ T5828] Zero length message leads to an empty skb [ 83.737521][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.770852][ T5633] veth0_macvtap: entered promiscuous mode [ 83.782992][ T1124] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.812494][ T1124] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.822649][ T1124] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.837757][ T5633] veth1_macvtap: entered promiscuous mode [ 83.844654][ T1124] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.854985][ T1124] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.871603][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.880657][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.899569][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.956641][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.984280][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.018629][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.029200][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.041988][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.054206][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.683785][ T5637] Bluetooth: hci4: command tx timeout [ 84.683954][ T5652] Bluetooth: hci2: command tx timeout [ 84.689231][ T4950] Bluetooth: hci1: command tx timeout [ 84.700108][ T5644] Bluetooth: hci3: command tx timeout [ 84.764196][ T5644] Bluetooth: hci0: command tx timeout [ 86.608566][ T29] cfg80211: failed to load regulatory.db [ 86.769987][ T5830] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 86.882281][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.899750][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.941488][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.951373][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.009928][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.024551][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.045575][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.061491][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.095429][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.108888][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.170161][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.194593][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.209337][ T5850] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.8'. [ 87.239254][ T5850] veth0_to_bond: default FDB implementation only supports local addresses [ 87.272232][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.282563][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.292957][ T5850] xfrm0 speed is unknown, defaulting to 1000 [ 87.351157][ T5850] xfrm0 speed is unknown, defaulting to 1000 [ 87.351809][ T5853] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 87.365655][ T5853] syzkaller1: linktype set to 823 [ 87.378303][ T5850] xfrm0 speed is unknown, defaulting to 1000 [ 87.384637][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.407915][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.749727][ T5863] netlink: 220 bytes leftover after parsing attributes in process `syz.0.10'. [ 87.763609][ T5861] netlink: 33 bytes leftover after parsing attributes in process `syz.4.5'. [ 87.778049][ T5863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 87.796104][ T5861] netlink: 140 bytes leftover after parsing attributes in process `syz.4.5'. [ 87.828673][ T5861] netlink: 33 bytes leftover after parsing attributes in process `syz.4.5'. [ 87.989441][ T5873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13'. [ 87.999208][ T5872] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14'. [ 88.052869][ T5869] vlan2: entered allmulticast mode [ 88.063678][ T5869] bond0: entered allmulticast mode [ 88.068912][ T5869] bond_slave_0: entered allmulticast mode [ 88.076323][ T5869] bond_slave_1: entered allmulticast mode [ 88.113143][ T5878] Bluetooth: MGMT ver 1.23 [ 88.128662][ T5875] veth1_macvtap: left promiscuous mode [ 88.137343][ T5875] macsec0: entered promiscuous mode [ 88.142665][ T5875] macsec0: entered allmulticast mode [ 88.170449][ T48] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.208811][ T5878] veth1_macvtap: entered promiscuous mode [ 88.221378][ T5878] veth1_macvtap: entered allmulticast mode [ 88.234333][ T5878] macsec0: left promiscuous mode [ 88.241451][ T5850] infiniband syz1: set active [ 88.247542][ T5878] macsec0: left allmulticast mode [ 88.259845][ T5850] infiniband syz1: added xfrm0 [ 88.260266][ T5878] veth1_macvtap: left allmulticast mode [ 88.299794][ T48] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.310413][ T5850] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 88.326893][ T5850] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 88.328793][ T48] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.346152][ T5850] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 88.380992][ T10] xfrm0 speed is unknown, defaulting to 1000 [ 88.386866][ T5881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16'. [ 88.387242][ T48] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.487236][ T5850] RDS/IB: syz1: added [ 88.505007][ T5850] smc: adding ib device syz1 with port count 1 [ 88.521715][ T5850] smc: ib device syz1 port 1 has no pnetid [ 88.618694][ T5894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20'. [ 88.665174][ T5881] bond1 (unregistering): Released all slaves [ 88.736678][ T10] xfrm0 speed is unknown, defaulting to 1000 [ 88.752391][ T5850] xfrm0 speed is unknown, defaulting to 1000 [ 88.759196][ T5894] trusted_key: syz.0.20 sent an empty control message without MSG_MORE. [ 89.336363][ T5850] xfrm0 speed is unknown, defaulting to 1000 [ 89.405421][ T5914] veth3: entered promiscuous mode [ 89.411305][ T5914] veth3: entered allmulticast mode [ 89.430971][ T5918] netlink: 28 bytes leftover after parsing attributes in process `syz.4.25'. [ 89.821556][ T5850] xfrm0 speed is unknown, defaulting to 1000 [ 90.221892][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.230871][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.348548][ T5945] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 91.485242][ T5951] veth3: entered allmulticast mode [ 91.496208][ T5850] xfrm0 speed is unknown, defaulting to 1000 [ 91.502974][ T5957] tipc: Enabling of bearer rejected, failed to enable media [ 91.696665][ T5964] syz_tun: entered promiscuous mode [ 91.716163][ T5964] syz_tun: entered allmulticast mode [ 91.767590][ T5972] Illegal XDP return value 16128 on prog (id 10) dev syz_tun, expect packet loss! [ 91.787005][ T5972] netlink: 'syz.2.41': attribute type 49 has an invalid length. [ 92.058440][ T5972] ip6gretap0: entered promiscuous mode [ 92.074136][ T5972] ip6gretap0: entered allmulticast mode [ 92.272049][ T5999] __nla_validate_parse: 5 callbacks suppressed [ 92.272067][ T5999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.46'. [ 92.346022][ T5850] xfrm0 speed is unknown, defaulting to 1000 [ 92.404881][ T6002] veth0: entered promiscuous mode [ 92.470058][ T6002] veth0: left promiscuous mode [ 92.649789][ T6014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.50'. [ 92.684955][ T6014] netlink: 60 bytes leftover after parsing attributes in process `syz.2.50'. [ 92.721462][ T6014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.50'. [ 92.767255][ T6026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.52'. [ 92.795335][ T6014] netlink: 60 bytes leftover after parsing attributes in process `syz.2.50'. [ 92.835574][ T6014] netlink: 104 bytes leftover after parsing attributes in process `syz.2.50'. [ 92.875624][ T6018] netlink: 'syz.4.52': attribute type 83 has an invalid length. [ 93.146670][ T6036] netlink: 'syz.3.54': attribute type 2 has an invalid length. [ 93.182346][ T6045] netlink: 96 bytes leftover after parsing attributes in process `syz.0.57'. [ 93.198407][ T6036] netlink: 'syz.3.54': attribute type 2 has an invalid length. [ 94.572633][ T6115] syz.3.71 uses obsolete (PF_INET,SOCK_PACKET) [ 95.328909][ T6150] atomic_op ffff888069330198 conn xmit_atomic 0000000000000000 [ 95.587279][ T6164] batman_adv: batadv0: Adding interface: dummy0 [ 95.593833][ T6164] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.658064][ T6164] batman_adv: batadv0: Interface activated: dummy0 [ 95.750953][ T6174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.793037][ T6169] batadv0: mtu less than device minimum [ 95.806280][ T6169] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 95.819029][ T6169] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 95.830844][ T6169] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 95.842527][ T6169] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 95.855149][ T6169] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 95.866275][ T6169] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 95.877532][ T6169] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 95.888643][ T6169] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 95.923785][ T6172] syzkaller1: entered promiscuous mode [ 95.932952][ T6172] syzkaller1: entered allmulticast mode [ 96.222593][ T6198] netlink: 'syz.4.95': attribute type 2 has an invalid length. [ 96.269123][ T6198] netlink: 12 bytes leftover after parsing attributes in process `syz.4.95'. [ 96.326031][ T6206] netlink: 16 bytes leftover after parsing attributes in process `syz.2.96'. [ 96.372233][ T6198] pim6reg: entered allmulticast mode [ 97.442872][ T6270] __nla_validate_parse: 2 callbacks suppressed [ 97.442889][ T6270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.111'. [ 97.522599][ T6270] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.111'. [ 97.585843][ T6274] IPv6: NLM_F_CREATE should be specified when creating new route [ 97.709464][ T6274] syzkaller0: entered promiscuous mode [ 97.737232][ T6274] syzkaller0: entered allmulticast mode [ 97.743410][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.114'. [ 97.803696][ T5644] Bluetooth: hci3: command tx timeout [ 97.827634][ T6289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.114'. [ 97.884007][ T6295] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 98.166378][ T6309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.120'. [ 98.205433][ T6309] netlink: 'syz.3.120': attribute type 5 has an invalid length. [ 98.243654][ T6309] netlink: 20 bytes leftover after parsing attributes in process `syz.3.120'. [ 98.381693][ T6321] netlink: 68 bytes leftover after parsing attributes in process `syz.0.125'. [ 98.392006][ T6319] netlink: 24 bytes leftover after parsing attributes in process `syz.4.124'. [ 98.412774][ T6319] netlink: 48 bytes leftover after parsing attributes in process `syz.4.124'. [ 98.911777][ T6362] IPVS: set_ctl: invalid protocol: 41 172.20.20.64:20003 [ 99.280235][ T6382] tipc: Enabling of bearer rejected, failed to enable media [ 99.502873][ T6392] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.512058][ T6392] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.766861][ T6409] netlink: 156 bytes leftover after parsing attributes in process `syz.0.144'. [ 99.860822][ T6417] netlink: 'syz.3.146': attribute type 1 has an invalid length. [ 99.930738][ T6417] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.938303][ T6417] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.011497][ T6426] tipc: Enabling of bearer rejected, failed to enable media [ 100.289595][ T6441] ip6gre1: entered allmulticast mode [ 101.149774][ T6487] netlink: 'syz.1.167': attribute type 5 has an invalid length. [ 101.187156][ T6487] geneve2: entered promiscuous mode [ 101.192712][ T6487] geneve2: entered allmulticast mode [ 101.202492][ T140] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 101.233425][ T140] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 101.269735][ T140] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 101.295731][ T140] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 101.526719][ T6496] netlink: 'syz.4.171': attribute type 1 has an invalid length. [ 101.612307][ T6496] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.977019][ T6516] net_ratelimit: 13 callbacks suppressed [ 101.977036][ T6516] openvswitch: netlink: Flow key attr not present in new flow. [ 102.235747][ T6522] syzkaller0: entered promiscuous mode [ 102.246230][ T6522] syzkaller0: entered allmulticast mode [ 102.395055][ T6528] tipc: Started in network mode [ 102.406057][ T6528] tipc: Node identity , cluster identity 4711 [ 102.418419][ T6528] tipc: Failed to set node id, please configure manually [ 102.438130][ T6528] tipc: Enabling of bearer rejected, failed to enable media [ 102.575522][ T6538] netlink: 'syz.4.184': attribute type 1 has an invalid length. [ 103.091620][ T6564] vlan2: entered allmulticast mode [ 103.112847][ T6564] bond0: entered allmulticast mode [ 103.126883][ T6564] bond_slave_0: entered allmulticast mode [ 103.139217][ T6564] bond_slave_1: entered allmulticast mode [ 103.225356][ T6570] __nla_validate_parse: 20 callbacks suppressed [ 103.225372][ T6570] netlink: 28 bytes leftover after parsing attributes in process `syz.1.196'. [ 103.259366][ T6573] netlink: 'syz.2.197': attribute type 4 has an invalid length. [ 103.441057][ T6584] Cannot find add_set index 0 as target [ 103.624118][ T6594] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 103.644334][ T6594] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 103.913141][ T6612] netlink: 20 bytes leftover after parsing attributes in process `syz.1.208'. [ 103.974405][ T6568] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 104.135846][ T6622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.213'. [ 104.159537][ T6620] syzkaller0: entered promiscuous mode [ 104.176633][ T6620] syzkaller0: entered allmulticast mode [ 104.245128][ T6626] netlink: 'syz.4.215': attribute type 64 has an invalid length. [ 104.253028][ T6626] netlink: 5 bytes leftover after parsing attributes in process `syz.4.215'. [ 104.370957][ T6630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.217'. [ 104.391942][ T6630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.217'. [ 104.417199][ T6630] netlink: 'syz.4.217': attribute type 12 has an invalid length. [ 104.441756][ T6630] netlink: 'syz.4.217': attribute type 11 has an invalid length. [ 104.654025][ T6645] netlink: 'syz.3.219': attribute type 1 has an invalid length. [ 104.681759][ T6645] netlink: 96 bytes leftover after parsing attributes in process `syz.3.219'. [ 104.703116][ T6645] netlink: 658 bytes leftover after parsing attributes in process `syz.3.219'. [ 104.747661][ T6645] netlink: 1 bytes leftover after parsing attributes in process `syz.3.219'. [ 104.747930][ T6651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.219'. [ 105.243524][ T5644] Bluetooth: hci0: command 0x0c1a tx timeout [ 105.863041][ T6722] netlink: 'syz.0.238': attribute type 21 has an invalid length. [ 105.923404][ T6714] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.990843][ T6719] macvlan2: entered promiscuous mode [ 105.996900][ T6719] macvlan2: entered allmulticast mode [ 106.017490][ T6719] bond1: entered promiscuous mode [ 106.046521][ T6719] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 106.090509][ T6719] bond1: left promiscuous mode [ 106.824443][ T6769] netlink: 'syz.3.247': attribute type 1 has an invalid length. [ 106.864692][ T6769] netlink: 'syz.3.247': attribute type 1 has an invalid length. [ 107.253618][ T6797] netlink: 'syz.1.257': attribute type 1 has an invalid length. [ 107.313713][ T6791] hsr_slave_1 (unregistering): left promiscuous mode [ 107.397071][ T6803] netem: change failed [ 107.433488][ T6810] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 107.518833][ T6802] syzkaller1: entered promiscuous mode [ 107.550282][ T6802] syzkaller1: entered allmulticast mode [ 107.849417][ T6840] syzkaller0: entered promiscuous mode [ 107.856030][ T6840] syzkaller0: entered allmulticast mode [ 107.998852][ T6848] x_tables: duplicate underflow at hook 3 [ 110.560730][ T6821] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 111.631305][ T6925] netlink: 'syz.3.291': attribute type 1 has an invalid length. [ 112.064729][ T6959] __nla_validate_parse: 21 callbacks suppressed [ 112.064746][ T6959] netlink: 40 bytes leftover after parsing attributes in process `syz.0.297'. [ 112.404446][ T6919] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 112.564625][ T6974] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 112.740854][ T6978] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.480020][ T7027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.316'. [ 113.907236][ T7048] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 114.209422][ T7056] netlink: 32 bytes leftover after parsing attributes in process `syz.1.322'. [ 114.398551][ T7061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.325'. [ 114.905934][ T7073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.920729][ T7073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.060742][ T7073] ip6gre1: left allmulticast mode [ 115.071744][ T7073] geneve2: left promiscuous mode [ 115.076979][ T7073] geneve2: left allmulticast mode [ 115.114928][ T9] xfrm0 speed is unknown, defaulting to 1000 [ 115.121735][ T7096] FAULT_INJECTION: forcing a failure. [ 115.121735][ T7096] name failslab, interval 1, probability 0, space 0, times 1 [ 115.122651][ T1174] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.140113][ T9] syz1: Port: 1 Link DOWN [ 115.149914][ T1174] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 115.165605][ T7096] CPU: 0 UID: 0 PID: 7096 Comm: syz.2.335 Not tainted syzkaller #0 PREEMPT(full) [ 115.165626][ T7096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 115.165645][ T7096] Call Trace: [ 115.165652][ T7096] [ 115.165661][ T7096] dump_stack_lvl+0xe8/0x150 [ 115.165693][ T7096] should_fail_ex+0x412/0x560 [ 115.165715][ T7096] should_failslab+0xa8/0x100 [ 115.165733][ T7096] __kmalloc_noprof+0xe8/0x760 [ 115.165755][ T7096] ? nl80211_trigger_scan+0x52f/0x1f50 [ 115.165771][ T7096] ? __pfx___cfg80211_wdev_from_attrs+0x10/0x10 [ 115.165797][ T7096] nl80211_trigger_scan+0x52f/0x1f50 [ 115.165825][ T7096] genl_family_rcv_msg_doit+0x22a/0x330 [ 115.165851][ T7096] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 115.165882][ T7096] ? bpf_lsm_capable+0x9/0x20 [ 115.165896][ T7096] ? security_capable+0x7e/0x2c0 [ 115.165923][ T7096] genl_rcv_msg+0x61c/0x7a0 [ 115.165946][ T7096] ? __pfx_genl_rcv_msg+0x10/0x10 [ 115.165962][ T7096] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 115.165980][ T7096] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 115.165994][ T7096] ? __pfx_nl80211_post_doit+0x10/0x10 [ 115.166028][ T7096] netlink_rcv_skb+0x232/0x4b0 [ 115.166051][ T7096] ? __pfx_genl_rcv_msg+0x10/0x10 [ 115.166070][ T7096] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 115.166106][ T7096] ? down_read+0x270/0x2e0 [ 115.166122][ T7096] ? genl_rcv+0xd/0x40 [ 115.166140][ T7096] genl_rcv+0x28/0x40 [ 115.166154][ T7096] netlink_unicast+0x75c/0x8e0 [ 115.166184][ T7096] netlink_sendmsg+0x813/0xb40 [ 115.166215][ T7096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.166244][ T7096] ? aa_sock_msg_perm+0xf1/0x1b0 [ 115.166267][ T7096] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 115.166291][ T7096] ____sys_sendmsg+0x972/0x9f0 [ 115.166306][ T7096] ? __might_fault+0xaf/0x130 [ 115.166332][ T7096] ? __pfx_____sys_sendmsg+0x10/0x10 [ 115.166357][ T7096] ? import_iovec+0x73/0xa0 [ 115.166380][ T7096] ___sys_sendmsg+0x2a5/0x360 [ 115.166394][ T7096] ? __lock_acquire+0x6b5/0x2cf0 [ 115.166416][ T7096] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.166467][ T7096] ? __fget_files+0x2a/0x420 [ 115.166485][ T7096] ? __fget_files+0x3a0/0x420 [ 115.166513][ T7096] __x64_sys_sendmsg+0x1bd/0x2a0 [ 115.166532][ T7096] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 115.166558][ T7096] ? __pfx_ksys_write+0x10/0x10 [ 115.166587][ T7096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.166611][ T7096] do_syscall_64+0x174/0x580 [ 115.166626][ T7096] ? trace_irq_disable+0x3b/0x140 [ 115.166646][ T7096] ? clear_bhb_loop+0x40/0x90 [ 115.166665][ T7096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.166680][ T7096] RIP: 0033:0x7f7c89d9ce59 [ 115.166705][ T7096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.166715][ T7096] RSP: 002b:00007f7c8ac66028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.166734][ T7096] RAX: ffffffffffffffda RBX: 00007f7c8a015fa0 RCX: 00007f7c89d9ce59 [ 115.166744][ T7096] RDX: 0000000000002800 RSI: 0000200000001800 RDI: 0000000000000003 [ 115.166753][ T7096] RBP: 00007f7c8ac66090 R08: 0000000000000000 R09: 0000000000000000 [ 115.166760][ T7096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.166767][ T7096] R13: 00007f7c8a016038 R14: 00007f7c8a015fa0 R15: 00007ffc52402c08 [ 115.166791][ T7096] [ 115.522068][ T200] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.531067][ T200] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 115.540369][ T200] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.549372][ T200] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 115.583386][ T10] xfrm0 speed is unknown, defaulting to 1000 [ 115.583885][ T200] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.601538][ T200] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 115.628476][ T7098] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.630522][ T7103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.337'. [ 115.645626][ T7103] openvswitch: netlink: Flow actions attr not present in new flow. [ 115.829431][ T7109] netlink: 'syz.0.339': attribute type 4 has an invalid length. [ 115.873404][ T7109] netlink: 156 bytes leftover after parsing attributes in process `syz.0.339'. [ 115.910174][ T7115] netlink: 48 bytes leftover after parsing attributes in process `syz.3.343'. [ 115.920501][ T7109] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 116.097163][ T7126] netlink: 56 bytes leftover after parsing attributes in process `syz.0.347'. [ 116.142694][ T7129] netlink: 56 bytes leftover after parsing attributes in process `syz.0.347'. [ 116.345609][ T7144] netlink: 'syz.1.351': attribute type 23 has an invalid length. [ 116.434527][ T7146] netlink: 12 bytes leftover after parsing attributes in process `syz.3.350'. [ 116.666669][ T7162] nft_compat: unsupported protocol 0 [ 116.874276][ T7159] ksmbd: Unknown IPC event: 8, ignore. [ 116.887596][ T7162] tipc: Started in network mode [ 116.910936][ T7162] tipc: Node identity 5e4ada9bccb5, cluster identity 4711 [ 116.939336][ T7162] tipc: Enabled bearer , priority 0 [ 117.095474][ T7169] syzkaller0: entered promiscuous mode [ 117.110307][ T7169] syzkaller0: entered allmulticast mode [ 117.118209][ T7169] tipc: Resetting bearer [ 117.182878][ T7160] tipc: Resetting bearer [ 117.189080][ T7191] tipc: Can't bind to reserved service type 1 [ 117.264698][ T7193] ieee802154 phy0 wpan0: encryption failed: -22 [ 117.698141][ T7218] __nla_validate_parse: 2 callbacks suppressed [ 117.698158][ T7218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.370'. [ 118.706869][ T7160] tipc: Disabling bearer [ 118.946198][ T24] tipc: Node number set to 2466241179 [ 118.973037][ T7229] FAULT_INJECTION: forcing a failure. [ 118.973037][ T7229] name failslab, interval 1, probability 0, space 0, times 0 [ 119.026129][ T7229] CPU: 1 UID: 0 PID: 7229 Comm: syz.4.372 Not tainted syzkaller #0 PREEMPT(full) [ 119.026157][ T7229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 119.026166][ T7229] Call Trace: [ 119.026172][ T7229] [ 119.026179][ T7229] dump_stack_lvl+0xe8/0x150 [ 119.026203][ T7229] should_fail_ex+0x412/0x560 [ 119.026226][ T7229] should_failslab+0xa8/0x100 [ 119.026242][ T7229] ? skb_clone+0x212/0x3a0 [ 119.026258][ T7229] kmem_cache_alloc_noprof+0x87/0x650 [ 119.026288][ T7229] skb_clone+0x212/0x3a0 [ 119.026307][ T7229] __netlink_deliver_tap+0x404/0x850 [ 119.026339][ T7229] ? netlink_deliver_tap+0x2e/0x1b0 [ 119.026362][ T7229] netlink_deliver_tap+0x19c/0x1b0 [ 119.026383][ T7229] netlink_sendskb+0x68/0x140 [ 119.026403][ T7229] netlink_rcv_skb+0x2b6/0x4b0 [ 119.026424][ T7229] ? __pfx_genl_rcv_msg+0x10/0x10 [ 119.026442][ T7229] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 119.026478][ T7229] ? down_read+0x270/0x2e0 [ 119.026494][ T7229] ? genl_rcv+0xd/0x40 [ 119.026513][ T7229] genl_rcv+0x28/0x40 [ 119.026529][ T7229] netlink_unicast+0x75c/0x8e0 [ 119.026560][ T7229] netlink_sendmsg+0x813/0xb40 [ 119.026591][ T7229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.026616][ T7229] ? aa_sock_msg_perm+0xf1/0x1b0 [ 119.026642][ T7229] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 119.026664][ T7229] ____sys_sendmsg+0x972/0x9f0 [ 119.026679][ T7229] ? __might_fault+0xaf/0x130 [ 119.026704][ T7229] ? __pfx_____sys_sendmsg+0x10/0x10 [ 119.026730][ T7229] ? import_iovec+0x73/0xa0 [ 119.026752][ T7229] ___sys_sendmsg+0x2a5/0x360 [ 119.026767][ T7229] ? __lock_acquire+0x6b5/0x2cf0 [ 119.026789][ T7229] ? __pfx____sys_sendmsg+0x10/0x10 [ 119.026841][ T7229] ? __fget_files+0x2a/0x420 [ 119.026858][ T7229] ? __fget_files+0x3a0/0x420 [ 119.026899][ T7229] __x64_sys_sendmsg+0x1bd/0x2a0 [ 119.026918][ T7229] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 119.026944][ T7229] ? __pfx_ksys_write+0x10/0x10 [ 119.026975][ T7229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.026992][ T7229] do_syscall_64+0x174/0x580 [ 119.027008][ T7229] ? trace_irq_disable+0x3b/0x140 [ 119.027029][ T7229] ? clear_bhb_loop+0x40/0x90 [ 119.027048][ T7229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.027063][ T7229] RIP: 0033:0x7fed1ad9ce59 [ 119.027079][ T7229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.027091][ T7229] RSP: 002b:00007fed1bc6c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.027108][ T7229] RAX: ffffffffffffffda RBX: 00007fed1b015fa0 RCX: 00007fed1ad9ce59 [ 119.027119][ T7229] RDX: 0000000000002800 RSI: 0000200000001800 RDI: 0000000000000003 [ 119.027129][ T7229] RBP: 00007fed1bc6c090 R08: 0000000000000000 R09: 0000000000000000 [ 119.027138][ T7229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.027147][ T7229] R13: 00007fed1b016038 R14: 00007fed1b015fa0 R15: 00007fff5b43e3b8 [ 119.027181][ T7229] [ 119.550997][ T7248] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 119.583843][ T7247] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 119.674465][ T7254] ieee802154 phy0 wpan0: encryption failed: -22 [ 119.697343][ T7267] netlink: 'syz.2.384': attribute type 2 has an invalid length. [ 120.034694][ T7285] netlink: 'syz.2.388': attribute type 49 has an invalid length. [ 120.219405][ T7291] pim6reg527: entered allmulticast mode [ 121.483550][ T5644] Bluetooth: hci1: command 0x0401 tx timeout [ 121.969457][ T5644] Bluetooth: hci3: link tx timeout [ 121.975022][ T5644] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 122.961291][ T5644] Bluetooth: hci3: link tx timeout [ 122.966499][ T5644] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 123.573612][ T5644] Bluetooth: hci1: command 0x0401 tx timeout [ 123.970463][ T5644] Bluetooth: hci3: link tx timeout [ 123.979797][ T5644] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 124.044201][ T5644] Bluetooth: hci3: command 0x0406 tx timeout [ 132.684502][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.690842][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 145.457964][ T7353] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 145.473516][ T7353] netlink: 36 bytes leftover after parsing attributes in process `syz.0.403'. [ 145.534088][ T7356] netlink: 12 bytes leftover after parsing attributes in process `syz.3.405'. [ 145.661879][ T7361] nftables ruleset with unbound set [ 145.926852][ T7374] 8021q: adding VLAN 0 to HW filter on device bond2 [ 145.936147][ T7374] bridge0: port 3(bond2) entered blocking state [ 145.942720][ T7374] bridge0: port 3(bond2) entered disabled state [ 145.950203][ T7374] bond2: entered allmulticast mode [ 145.958096][ T7374] bond2: entered promiscuous mode [ 146.042583][ T7382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.412'. [ 146.212917][ T7385] netlink: 'syz.3.414': attribute type 9 has an invalid length. [ 146.338601][ T7393] netlink: 96 bytes leftover after parsing attributes in process `syz.4.417'. [ 146.377929][ T7395] netlink: 'syz.1.418': attribute type 1 has an invalid length. [ 146.419544][ T7400] netlink: 72 bytes leftover after parsing attributes in process `syz.0.420'. [ 146.495201][ T7408] netlink: 240 bytes leftover after parsing attributes in process `syz.4.417'. [ 146.558999][ T7395] 8021q: adding VLAN 0 to HW filter on device bond4 [ 146.582459][ T7405] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 146.630937][ T7415] netlink: 'syz.0.423': attribute type 1 has an invalid length. [ 146.639315][ T7415] netlink: 24 bytes leftover after parsing attributes in process `syz.0.423'. [ 146.678556][ T7409] bond4: (slave ip6gretap1): making interface the new active one [ 146.697936][ T7409] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 146.717641][ T7419] netlink: 44 bytes leftover after parsing attributes in process `syz.0.423'. [ 146.740937][ T7415] netlink: 28 bytes leftover after parsing attributes in process `syz.0.423'. [ 147.171299][ T7442] netlink: 12 bytes leftover after parsing attributes in process `syz.2.432'. [ 147.268512][ T7446] netlink: 'syz.1.433': attribute type 4 has an invalid length. [ 147.579271][ T7470] openvswitch: netlink: nsh attribute has 16 unknown bytes. [ 147.609195][ T7470] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.923946][ T7489] x_tables: duplicate entry at hook 2 [ 148.180250][ T7500] IPv6: Can't replace route, no match found [ 148.208344][ T7500] IPv6: Can't replace route, no match found [ 148.566191][ T7514] sctp: [Deprecated]: syz.0.453 (pid 7514) Use of int in max_burst socket option deprecated. [ 148.566191][ T7514] Use struct sctp_assoc_value instead [ 149.147083][ T7541] sock: sock_timestamping_bind_phc: sock not bind to device [ 149.424241][ T7558] siw: device registration error -23 [ 149.485309][ T7561] openvswitch: netlink: Flow key attr not present in new flow. [ 149.490726][ T7558] netlink: 'syz.2.470': attribute type 1 has an invalid length. [ 149.956361][ T7579] netlink: 'syz.1.477': attribute type 4 has an invalid length. [ 150.241767][ T7593] IPVS: set_ctl: invalid protocol: 12 0.0.0.0:20003 [ 150.311959][ T7591] netlink: 'syz.2.481': attribute type 1 has an invalid length. [ 150.321063][ T140] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.345804][ T140] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.401739][ T140] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.412709][ T36] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.478812][ T7604] netlink: 'syz.3.486': attribute type 11 has an invalid length. [ 150.491262][ T7604] netlink: 'syz.3.486': attribute type 5 has an invalid length. [ 150.501138][ T7604] __nla_validate_parse: 14 callbacks suppressed [ 150.501154][ T7604] netlink: 6548 bytes leftover after parsing attributes in process `syz.3.486'. [ 150.732938][ T7611] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 150.755991][ T7611] bond3 (unregistering): Released all slaves [ 150.891627][ T7626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.491'. [ 151.025923][ T7631] IPv6: NLM_F_CREATE should be specified when creating new route [ 151.034858][ T7631] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.494'. [ 151.044752][ T7631] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 153.731418][ T7624] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 154.192904][ T7696] SET target dimension over the limit! [ 154.211056][ T7695] SET target dimension over the limit! [ 154.221876][ T7688] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 154.250075][ T7688] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 154.313943][ T7688] team0: Failed to send options change via netlink (err -105) [ 154.322834][ T7688] team0: Port device batadv1 added [ 154.484669][ T7709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.567133][ T7714] netlink: 32 bytes leftover after parsing attributes in process `syz.1.520'. [ 154.606203][ T7714] warning: `syz.1.520' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 154.660131][ T7721] syzkaller1: entered promiscuous mode [ 154.665867][ T7721] syzkaller1: entered allmulticast mode [ 154.685117][ T7721] sctp: [Deprecated]: syz.4.521 (pid 7721) Use of int in maxseg socket option. [ 154.685117][ T7721] Use struct sctp_assoc_value instead [ 155.229071][ T7751] syzkaller0: entered promiscuous mode [ 155.245819][ T7751] syzkaller0: entered allmulticast mode [ 155.369076][ T7761] raw_sendmsg: syz.3.533 forgot to set AF_INET. Fix it! [ 155.380438][ T7763] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.535'. [ 155.469881][ T7765] netlink: 'syz.1.536': attribute type 1 has an invalid length. [ 155.529533][ T7769] netlink: 36 bytes leftover after parsing attributes in process `syz.1.536'. [ 155.590899][ T7771] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 155.622889][ T7771] netlink: 52 bytes leftover after parsing attributes in process `syz.1.536'. [ 155.663622][ T7765] 8021q: adding VLAN 0 to HW filter on device bond5 [ 155.824124][ T7782] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 155.983884][ T7786] netlink: 48 bytes leftover after parsing attributes in process `syz.1.543'. [ 156.131236][ T7788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.544'. [ 156.147509][ T7788] netlink: 2 bytes leftover after parsing attributes in process `syz.2.544'. [ 156.205275][ T7792] tap0: tun_chr_ioctl cmd 1074025676 [ 156.229754][ T7792] tap0: owner set to 0 [ 156.259616][ T7792] tap0: tun_chr_ioctl cmd 1074025684 [ 156.379872][ T7803] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.467248][ T7801] netlink: 'syz.0.548': attribute type 49 has an invalid length. [ 156.550504][ T7808] pim6reg: entered allmulticast mode [ 156.651641][ T7812] netlink: 20 bytes leftover after parsing attributes in process `syz.0.552'. [ 156.739874][ T7812] 8021q: VLANs not supported on ip6_vti0 [ 156.801905][ T7812] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 157.350547][ T7842] netlink: 'syz.4.561': attribute type 9 has an invalid length. [ 157.491525][ T7864] netlink: 44 bytes leftover after parsing attributes in process `syz.0.565'. [ 157.501735][ T7863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.568'. [ 157.589412][ T7868] block nbd4: not configured, cannot reconfigure [ 157.630601][ T7868] IPv6: NLM_F_CREATE should be specified when creating new route [ 157.650324][ T7868] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 157.657718][ T7868] IPv6: NLM_F_CREATE should be set when creating new route [ 157.891109][ T7875] bond3 (unregistering): Released all slaves [ 158.421126][ T7906] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20003 [ 158.486074][ T7910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.581'. [ 158.527231][ T7913] netlink: 216 bytes leftover after parsing attributes in process `syz.3.582'. [ 158.538443][ T7913] netlink: 'syz.3.582': attribute type 2 has an invalid length. [ 158.547026][ T7913] netlink: 'syz.3.582': attribute type 1 has an invalid length. [ 158.553104][ T7911] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 158.570877][ T7911] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 158.840217][ T7924] macsec1: entered promiscuous mode [ 158.846267][ T7924] batadv0: entered promiscuous mode [ 158.854685][ T7924] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 158.862753][ T7924] batadv0: left promiscuous mode [ 158.875950][ T7929] ieee802154 phy0 wpan0: encryption failed: -22 [ 159.022362][ T7929] ieee802154 phy0 wpan0: encryption failed: -22 [ 159.117030][ T7935] netlink: 'syz.2.589': attribute type 12 has an invalid length. [ 159.144534][ T7935] netlink: 'syz.2.589': attribute type 12 has an invalid length. [ 159.161535][ T7935] netlink: 'syz.2.589': attribute type 29 has an invalid length. [ 159.191913][ T7935] netlink: 'syz.2.589': attribute type 1 has an invalid length. [ 159.210871][ T7935] netlink: 'syz.2.589': attribute type 2 has an invalid length. [ 159.947989][ T7970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.975907][ T7970] batadv0: mtu less than device minimum [ 160.008580][ T7970] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 160.023604][ T7970] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 160.035793][ T7970] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 160.047634][ T7970] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 160.059345][ T7970] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 160.071022][ T7970] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 160.085850][ T7970] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 160.261675][ T7970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.402903][ T7973] erspan0: entered promiscuous mode [ 160.535978][ T7999] geneve1: entered promiscuous mode [ 160.555987][ T8000] xt_hashlimit: size too large, truncated to 1048576 [ 160.966116][ T8020] net_ratelimit: 12 callbacks suppressed [ 160.966138][ T8020] openvswitch: netlink: IP tunnel dst address not specified [ 161.940910][ T8086] __nla_validate_parse: 3 callbacks suppressed [ 161.940931][ T8086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.624'. [ 162.199839][ T8102] x_tables: unsorted entry at hook 3 [ 162.208697][ T8102] netlink: 20 bytes leftover after parsing attributes in process `syz.3.627'. [ 162.225399][ T8103] x_tables: unsorted entry at hook 3 [ 162.619803][ T8127] netlink: 'syz.0.632': attribute type 83 has an invalid length. [ 162.709578][ T8135] geneve2: entered promiscuous mode [ 162.717367][ T8135] geneve2: entered allmulticast mode [ 162.888045][ T8148] Bluetooth: MGMT ver 1.23 [ 163.075394][ T8162] netlink: 20 bytes leftover after parsing attributes in process `syz.4.639'. [ 163.280272][ T8171] netlink: 'syz.4.647': attribute type 2 has an invalid length. [ 163.459056][ T8170] syzkaller0: entered promiscuous mode [ 163.468104][ T8181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.650'. [ 163.473800][ T8170] syzkaller0: entered allmulticast mode [ 163.894410][ T8187] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 165.447065][ T8206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.654'. [ 165.477656][ T8206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.654'. [ 165.578889][ T8214] netlink: 12 bytes leftover after parsing attributes in process `syz.3.656'. [ 165.637428][ T8214] tc_dump_action: action bad kind [ 165.738923][ T8227] netlink: 'syz.2.660': attribute type 25 has an invalid length. [ 165.767212][ T8227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.660'. [ 165.789768][ T8231] netlink: 20 bytes leftover after parsing attributes in process `syz.3.661'. [ 165.851889][ T8231] lo: entered promiscuous mode [ 166.131204][ T8242] workqueue: name exceeds WQ_NAME_LEN. Truncating to: KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼Ú [ 166.190855][ T8248] netlink: 32 bytes leftover after parsing attributes in process `syz.2.667'. [ 166.266941][ T8253] netlink: 'syz.0.665': attribute type 23 has an invalid length. [ 166.318358][ T8242] x_tables: unsorted entry at hook 1 [ 167.025021][ T8296] netlink: 'syz.4.679': attribute type 1 has an invalid length. [ 167.377639][ T8322] tipc: Enabling of bearer rejected, failed to enable media [ 167.414746][ T8324] __nla_validate_parse: 1 callbacks suppressed [ 167.414763][ T8324] netlink: 40 bytes leftover after parsing attributes in process `syz.4.688'. [ 167.439117][ T8327] netlink: 'syz.3.689': attribute type 1 has an invalid length. [ 167.454028][ T8324] netlink: 72 bytes leftover after parsing attributes in process `syz.4.688'. [ 167.577532][ T8338] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 167.601787][ T8327] bond3: entered promiscuous mode [ 167.616253][ T8327] 8021q: adding VLAN 0 to HW filter on device bond3 [ 168.117477][ T8368] netlink: 72 bytes leftover after parsing attributes in process `syz.3.698'. [ 168.136348][ T8367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.699'. [ 168.157467][ T8367] veth1_macvtap: left promiscuous mode [ 168.318676][ T8377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.700'. [ 168.452376][ T8386] netlink: 8796 bytes leftover after parsing attributes in process `syz.4.703'. [ 168.622941][ T8391] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.705'. [ 168.677679][ T8392] netlink: 80 bytes leftover after parsing attributes in process `syz.4.706'. [ 168.705116][ T8392] netlink: 'syz.4.706': attribute type 4 has an invalid length. [ 168.727189][ T8396] syzkaller0: entered promiscuous mode [ 168.730575][ T8392] netlink: 17 bytes leftover after parsing attributes in process `syz.4.706'. [ 168.750543][ T8396] syzkaller0: entered allmulticast mode [ 168.849973][ T8406] netlink: 24 bytes leftover after parsing attributes in process `syz.1.710'. [ 170.538053][ T8529] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 171.069644][ T8474] workqueue: Failed to create a rescuer kthread for wq "nfc31_nci_rx_wq": -EINTR [ 171.120854][ T8614] netlink: 'syz.1.753': attribute type 1 has an invalid length. [ 172.177330][ T8657] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.251680][ T8665] netlink: 'syz.0.764': attribute type 2 has an invalid length. [ 172.812415][ T8693] __nla_validate_parse: 6 callbacks suppressed [ 172.812432][ T8693] netlink: 76 bytes leftover after parsing attributes in process `syz.0.769'. [ 173.640137][ T5637] Bluetooth: hci3: link tx timeout [ 173.645681][ T5637] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 174.081440][ T8668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.763'. [ 174.102030][ T8695] mac80211_hwsim hwsim4 dvmrp0: entered promiscuous mode [ 174.126251][ T8695] mac80211_hwsim hwsim4 dvmrp0: entered allmulticast mode [ 174.242084][ T8697] netlink: 'syz.1.770': attribute type 1 has an invalid length. [ 174.289687][ T8701] x_tables: duplicate underflow at hook 3 [ 174.339592][ T8698] bond6: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 174.351904][ T8701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.771'. [ 174.374197][ T8698] bond6: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 174.386662][ T8714] netlink: 24 bytes leftover after parsing attributes in process `syz.3.775'. [ 174.396683][ T8698] bond6: (slave ip6gre2): making interface the new active one [ 174.405560][ T8698] bond6: (slave ip6gre2): Enslaving as an active interface with an up link [ 174.772697][ T8736] netlink: 'syz.4.782': attribute type 4 has an invalid length. [ 174.964703][ T8739] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 175.288249][ T8758] x_tables: duplicate underflow at hook 2 [ 175.440429][ T8771] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 175.475128][ T8777] netlink: 'syz.2.795': attribute type 3 has an invalid length. [ 175.526110][ T8778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.793'. [ 175.529111][ T8780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.796'. [ 175.573974][ T8784] netlink: 20 bytes leftover after parsing attributes in process `syz.3.793'. [ 175.629663][ T8775] x_tables: duplicate entry at hook 3 [ 175.724399][ T5644] Bluetooth: hci3: command 0x0406 tx timeout [ 176.036849][ T8795] syzkaller0: entered promiscuous mode [ 176.081371][ T8795] syzkaller0: entered allmulticast mode [ 176.118747][ T8815] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 176.148951][ T8805] tipc: Started in network mode [ 176.213550][ T8805] tipc: Node identity f23db27efa69, cluster identity 4711 [ 176.243106][ T8805] tipc: Enabled bearer , priority 0 [ 176.257231][ T8827] tipc: Resetting bearer [ 176.266935][ T8819] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 176.303106][ T8794] tipc: Resetting bearer [ 176.371723][ T8794] tipc: Disabling bearer [ 177.951833][ T8911] netlink: 12 bytes leftover after parsing attributes in process `syz.3.822'. [ 178.122360][ T8917] bond3: (slave gre0): Device is not bonding slave [ 178.133162][ T8917] bond3: option active_slave: invalid value (gre0) [ 178.145724][ T8917] bond3 (unregistering): Released all slaves [ 178.590465][ T8943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.827'. [ 178.637549][ T8943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.827'. [ 178.659819][ T8945] netlink: 24 bytes leftover after parsing attributes in process `syz.1.828'. [ 178.699419][ T8954] netlink: 24 bytes leftover after parsing attributes in process `syz.1.828'. [ 179.554382][ T9006] netlink: 'syz.1.842': attribute type 4 has an invalid length. [ 179.588306][ T9006] netlink: 17 bytes leftover after parsing attributes in process `syz.1.842'. [ 179.588900][ T9007] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 179.942647][ T9031] openvswitch: netlink: Message has -2 unknown bytes. [ 179.976991][ T9022] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 180.034442][ T9022] netlink: 'syz.0.846': attribute type 2 has an invalid length. [ 180.216660][ T9043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.852'. [ 180.474780][ T9057] netlink: 12 bytes leftover after parsing attributes in process `syz.2.855'. [ 180.621731][ T9067] netlink: 'syz.0.858': attribute type 22 has an invalid length. [ 180.637103][ T9066] netlink: 'syz.0.858': attribute type 22 has an invalid length. [ 180.659505][ T9066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.858'. [ 180.695218][ T9067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.858'. [ 180.727936][ T9071] xt_TPROXY: Can be used only with -p tcp or -p udp [ 180.741121][ T9067] netlink: 'syz.0.858': attribute type 22 has an invalid length. [ 180.771771][ T9066] netlink: 'syz.0.858': attribute type 22 has an invalid length. [ 181.015476][ T9084] netlink: 'syz.0.864': attribute type 2 has an invalid length. [ 182.163532][ T9151] netem: change failed [ 182.567009][ T9170] veth1_to_bond: mtu less than device minimum [ 182.977122][ T9198] __nla_validate_parse: 9 callbacks suppressed [ 182.977139][ T9198] netlink: 24 bytes leftover after parsing attributes in process `syz.3.890'. [ 183.232871][ T9206] netlink: 'syz.4.893': attribute type 1 has an invalid length. [ 183.311198][ T9209] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 183.437811][ T9210] veth7: entered promiscuous mode [ 184.086184][ T9249] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 184.102256][ T9252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.904'. [ 184.132911][ T9251] tipc: Started in network mode [ 184.137018][ T9252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.904'. [ 184.162347][ T9251] tipc: Node identity ac14140f, cluster identity 4711 [ 184.198605][ T9251] tipc: New replicast peer: 255.255.255.255 [ 184.225278][ T9251] tipc: Enabled bearer , priority 10 [ 184.251037][ T9264] ip6t_REJECT: ECHOREPLY is not supported [ 184.273033][ T9264] x_tables: duplicate underflow at hook 2 [ 184.283044][ T9252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.904'. [ 184.283123][ T36] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.310484][ T9252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.904'. [ 184.358223][ T36] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.371648][ T9251] netlink: 'syz.3.902': attribute type 11 has an invalid length. [ 184.376199][ T9264] ip6t_REJECT: ECHOREPLY is not supported [ 184.385214][ T36] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.400471][ T36] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.400614][ T9268] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 184.696920][ T9295] netlink: 'syz.4.911': attribute type 24 has an invalid length. [ 184.818328][ T9295] netlink: 'syz.4.911': attribute type 1 has an invalid length. [ 184.848956][ T9295] netlink: 'syz.4.911': attribute type 11 has an invalid length. [ 184.879733][ T9295] netlink: 224 bytes leftover after parsing attributes in process `syz.4.911'. [ 184.889052][ T9304] netlink: 'syz.3.914': attribute type 58 has an invalid length. [ 184.889073][ T9304] netlink: 20 bytes leftover after parsing attributes in process `syz.3.914'. [ 184.909315][ T9303] netlink: 'syz.2.915': attribute type 10 has an invalid length. [ 185.151482][ T9299] syzkaller0: entered promiscuous mode [ 185.174152][ T9299] syzkaller0: entered allmulticast mode [ 185.206094][ T9303] team0: Port device dummy0 added [ 185.225571][ T9323] netlink: 'syz.0.918': attribute type 1 has an invalid length. [ 185.531934][ T9345] netlink: 'syz.2.923': attribute type 1 has an invalid length. [ 186.854387][ T9323] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 186.858384][ T9329] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 186.875983][ T10] tipc: Node number set to 2886997007 [ 187.115755][ T9360] netlink: 'syz.3.924': attribute type 83 has an invalid length. [ 187.186301][ T9367] netlink: 'syz.4.929': attribute type 11 has an invalid length. [ 187.205640][ T9367] netlink: 228 bytes leftover after parsing attributes in process `syz.4.929'. [ 187.445188][ T9381] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 187.474653][ T9381] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 187.531358][ T9390] netlink: 12 bytes leftover after parsing attributes in process `syz.0.935'. [ 187.628321][ T9397] netlink: 'syz.3.936': attribute type 26 has an invalid length. [ 187.686130][ T9397] netlink: 24 bytes leftover after parsing attributes in process `syz.3.936'. [ 187.688274][ C0] vcan0: j1939_tp_rxtimer: 0xffff888029270c00: rx timeout, send abort [ 187.746600][ T9397] IPv6: NLM_F_CREATE should be specified when creating new route [ 187.829488][ T9406] dvmrp0: entered allmulticast mode [ 188.080879][ T9424] netlink: zone id is out of range [ 188.252465][ T9435] __nla_validate_parse: 1 callbacks suppressed [ 188.252481][ T9435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.945'. [ 188.287495][ T9424] netlink: set zone limit has 4 unknown bytes [ 188.534036][ T9448] netlink: 40 bytes leftover after parsing attributes in process `syz.1.948'. [ 188.575349][ T9448] netlink: 'syz.1.948': attribute type 10 has an invalid length. [ 188.605777][ T9452] sctp: [Deprecated]: syz.4.950 (pid 9452) Use of struct sctp_assoc_value in delayed_ack socket option. [ 188.605777][ T9452] Use struct sctp_sack_info instead [ 188.772728][ T9456] block nbd3: not configured, cannot reconfigure [ 188.860150][ T9460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.953'. [ 188.994941][ T9468] netlink: 24 bytes leftover after parsing attributes in process `syz.2.957'. [ 189.006575][ T9468] netlink: 80 bytes leftover after parsing attributes in process `syz.2.957'. [ 189.017299][ T9468] netlink: 24 bytes leftover after parsing attributes in process `syz.2.957'. [ 189.130909][ T9474] netlink: 24 bytes leftover after parsing attributes in process `syz.1.961'. [ 189.324491][ T9485] FAULT_INJECTION: forcing a failure. [ 189.324491][ T9485] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 189.368225][ T9485] CPU: 1 UID: 0 PID: 9485 Comm: syz.1.963 Not tainted syzkaller #0 PREEMPT(full) [ 189.368247][ T9485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 189.368257][ T9485] Call Trace: [ 189.368263][ T9485] [ 189.368270][ T9485] dump_stack_lvl+0xe8/0x150 [ 189.368294][ T9485] should_fail_ex+0x412/0x560 [ 189.368317][ T9485] _copy_from_user+0x2d/0xb0 [ 189.368337][ T9485] __sys_sendto+0x2b0/0x710 [ 189.368362][ T9485] ? __pfx___sys_sendto+0x10/0x10 [ 189.368380][ T9485] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 189.368409][ T9485] ? __fget_files+0x3a0/0x420 [ 189.368435][ T9485] ? ksys_write+0x242/0x270 [ 189.368459][ T9485] ? __pfx_ksys_write+0x10/0x10 [ 189.368484][ T9485] __x64_sys_sendto+0xde/0x100 [ 189.368505][ T9485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.368522][ T9485] do_syscall_64+0x174/0x580 [ 189.368537][ T9485] ? trace_irq_disable+0x3b/0x140 [ 189.368557][ T9485] ? clear_bhb_loop+0x40/0x90 [ 189.368575][ T9485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.368590][ T9485] RIP: 0033:0x7f726379ce59 [ 189.368604][ T9485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.368616][ T9485] RSP: 002b:00007f72645fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 189.368633][ T9485] RAX: ffffffffffffffda RBX: 00007f7263a16090 RCX: 00007f726379ce59 [ 189.368643][ T9485] RDX: 0000000000000028 RSI: 0000200000000180 RDI: 0000000000000003 [ 189.368653][ T9485] RBP: 00007f72645fb090 R08: 0000200000000140 R09: 0000000000000014 [ 189.368662][ T9485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.368671][ T9485] R13: 00007f7263a16128 R14: 00007f7263a16090 R15: 00007ffd763d7a28 [ 189.368699][ T9485] [ 189.564299][ T9491] veth0: entered promiscuous mode [ 189.597001][ T10] IPVS: starting estimator thread 0... [ 189.609917][ T9488] veth0_to_bridge: entered promiscuous mode [ 189.633974][ T9498] veth0: left promiscuous mode [ 189.725140][ T9496] IPVS: using max 57 ests per chain, 136800 per kthread [ 189.931410][ T9516] syz_tun: refused to change device tx_queue_len [ 189.940985][ T9504] syzkaller0: entered promiscuous mode [ 189.947638][ T9504] syzkaller0: entered allmulticast mode [ 189.999432][ T9504] netem: change failed [ 190.027114][ T9504] Unsupported ieee802154 address type: 0 [ 190.185341][ T9527] bond5: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 190.197541][ T9527] bond5 (unregistering): Released all slaves [ 190.272051][ T9486] veth0_to_bridge: left promiscuous mode [ 190.484191][ T9544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.981'. [ 190.519276][ T9544] IPv6: sit1: Disabled Multicast RS [ 190.584981][ T9552] netlink: 40 bytes leftover after parsing attributes in process `syz.3.983'. [ 190.696869][ T9560] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 190.720709][ T9560] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 190.734406][ T9560] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 190.753093][ T9560] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 190.781815][ T9560] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 190.797533][ T9560] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 190.836470][ T9560] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 191.025518][ T9570] ip6t_rpfilter: unknown options [ 191.592884][ T9597] nft_compat: unsupported protocol 201 [ 191.622970][ T9600] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2449744829/2449744830 [ 191.636246][ T9600] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2449744829/2449744830 [ 191.827358][ T9612] openvswitch: netlink: IP tunnel dst address not specified [ 191.875164][ T9614] FAULT_INJECTION: forcing a failure. [ 191.875164][ T9614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.913775][ T9614] CPU: 0 UID: 0 PID: 9614 Comm: syz.0.1006 Not tainted syzkaller #0 PREEMPT(full) [ 191.913798][ T9614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 191.913808][ T9614] Call Trace: [ 191.913814][ T9614] [ 191.913821][ T9614] dump_stack_lvl+0xe8/0x150 [ 191.913846][ T9614] should_fail_ex+0x412/0x560 [ 191.913869][ T9614] _copy_from_iter+0x1d3/0x1670 [ 191.913889][ T9614] ? sock_alloc_send_pskb+0x896/0x990 [ 191.913911][ T9614] ? __pfx__copy_from_iter+0x10/0x10 [ 191.913936][ T9614] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 191.913955][ T9614] skb_copy_datagram_from_iter+0xf5/0x710 [ 191.913984][ T9614] ? dev_get_by_index+0x22/0x2e0 [ 191.914001][ T9614] ? skb_put+0x11b/0x210 [ 191.914025][ T9614] packet_sendmsg+0x35b1/0x4fb0 [ 191.914056][ T9614] ? __lock_acquire+0x6b5/0x2cf0 [ 191.914084][ T9614] ? __lock_acquire+0x6b5/0x2cf0 [ 191.914119][ T9614] ? __pfx_packet_sendmsg+0x10/0x10 [ 191.914136][ T9614] ? aa_sk_perm+0x6d5/0x900 [ 191.914164][ T9614] ? __pfx_aa_sk_perm+0x10/0x10 [ 191.914182][ T9614] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 191.914209][ T9614] ? aa_sock_msg_perm+0xf1/0x1b0 [ 191.914231][ T9614] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 191.914250][ T9614] ? __pfx_packet_sendmsg+0x10/0x10 [ 191.914270][ T9614] __sys_sendto+0x672/0x710 [ 191.914293][ T9614] ? __pfx___sys_sendto+0x10/0x10 [ 191.914311][ T9614] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 191.914340][ T9614] ? __fget_files+0x3a0/0x420 [ 191.914367][ T9614] ? ksys_write+0x242/0x270 [ 191.914390][ T9614] ? __pfx_ksys_write+0x10/0x10 [ 191.914415][ T9614] __x64_sys_sendto+0xde/0x100 [ 191.914436][ T9614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.914453][ T9614] do_syscall_64+0x174/0x580 [ 191.914467][ T9614] ? trace_irq_disable+0x3b/0x140 [ 191.914488][ T9614] ? clear_bhb_loop+0x40/0x90 [ 191.914507][ T9614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.914523][ T9614] RIP: 0033:0x7fce6919ce59 [ 191.914538][ T9614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.914550][ T9614] RSP: 002b:00007fce6a141028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 191.914567][ T9614] RAX: ffffffffffffffda RBX: 00007fce69415fa0 RCX: 00007fce6919ce59 [ 191.914578][ T9614] RDX: 0000000000000028 RSI: 0000200000000180 RDI: 0000000000000003 [ 191.914588][ T9614] RBP: 00007fce6a141090 R08: 0000200000000140 R09: 0000000000000014 [ 191.914598][ T9614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.914610][ T9614] R13: 00007fce69416038 R14: 00007fce69415fa0 R15: 00007ffd61ddcd68 [ 191.914637][ T9614] [ 192.247189][ T9619] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1007'. [ 192.525196][ T9639] validate_nla: 1 callbacks suppressed [ 192.525212][ T9639] netlink: 'syz.4.1014': attribute type 21 has an invalid length. [ 192.561642][ T9628] x_tables: duplicate underflow at hook 1 [ 192.610614][ T9639] netlink: 'syz.4.1014': attribute type 4 has an invalid length. [ 192.639372][ T9639] netlink: 'syz.4.1014': attribute type 5 has an invalid length. [ 192.679016][ T9641] netlink: 'syz.4.1014': attribute type 21 has an invalid length. [ 192.759607][ T9641] netlink: 'syz.4.1014': attribute type 4 has an invalid length. [ 192.776010][ T9641] netlink: 'syz.4.1014': attribute type 5 has an invalid length. [ 192.900242][ T9655] tipc: Started in network mode [ 192.913395][ T9655] tipc: Node identity 2, cluster identity 4711 [ 192.928319][ T9655] tipc: Node number set to 2 [ 192.958054][ T9653] xt_CT: You must specify a L4 protocol and not use inversions on it [ 193.163950][ T9676] x_tables: duplicate underflow at hook 3 [ 193.450714][ T9686] ip6gre0: Master is either lo or non-ether device [ 193.466793][ T9688] __nla_validate_parse: 9 callbacks suppressed [ 193.466809][ T9688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1024'. [ 193.514738][ T9688] bond0: entered promiscuous mode [ 193.529838][ T9688] bond_slave_0: entered promiscuous mode [ 193.549302][ T9688] bond_slave_1: entered promiscuous mode [ 193.557293][ T9688] bond0: left promiscuous mode [ 193.562178][ T9688] bond_slave_0: left promiscuous mode [ 193.570836][ T9688] bond_slave_1: left promiscuous mode [ 193.625376][ T9686] syzkaller0: entered promiscuous mode [ 193.637276][ T9686] syzkaller0: entered allmulticast mode [ 193.656839][ T9696] syzkaller0: entered promiscuous mode [ 193.666355][ T9686] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 193.693368][ T9696] syzkaller0: entered allmulticast mode [ 193.855803][ T9711] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1029'. [ 194.028494][ T9715] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1029'. [ 194.130796][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.137696][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.411352][ T9744] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1033'. [ 194.570230][ T9748] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1035'. [ 194.619324][ T9748] team0: Port device dummy0 removed [ 194.656837][ T9756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1035'. [ 194.694719][ T9756] openvswitch: netlink: Unknown nsh attribute 0 [ 194.838862][ T9769] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.1039'. [ 194.861041][ T9769] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 194.871414][ T9763] xfrm0 speed is unknown, defaulting to 1000 [ 194.985437][ T9778] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 194.999531][ T9778] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 196.078174][ T9821] gre1: entered promiscuous mode [ 196.083156][ T9821] gre1: entered allmulticast mode [ 196.769491][ T9705] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 196.950388][ T9845] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1046'. [ 196.977025][ T9844] openvswitch: netlink: Multiple metadata blocks provided [ 197.277688][ T9865] netlink: 'syz.3.1051': attribute type 7 has an invalid length. [ 197.453110][ T9873] xt_ecn: cannot match TCP bits for non-tcp packets [ 197.473863][ T9873] netlink: 'syz.3.1055': attribute type 13 has an invalid length. [ 197.487519][ T9873] gretap0: refused to change device tx_queue_len [ 197.495248][ T9873] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 197.637323][ T9887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1057'. [ 197.786690][ T9894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1060'. [ 198.007009][ T9900] openvswitch: netlink: Message has 4 unknown bytes. [ 198.556932][ T9936] x_tables: duplicate underflow at hook 2 [ 198.590793][ T9938] __nla_validate_parse: 3 callbacks suppressed [ 198.590809][ T9938] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1072'. [ 198.608821][ T9938] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1072'. [ 198.770630][ T9949] netlink: 'syz.0.1074': attribute type 29 has an invalid length. [ 198.802069][ T9949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1074'. [ 198.819667][ T9954] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1077'. [ 198.844670][ T9949] netlink: 'syz.0.1074': attribute type 29 has an invalid length. [ 198.862771][ T9949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1074'. [ 198.994826][ T9959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1074'. [ 199.565501][T10002] netlink: 'syz.4.1089': attribute type 62 has an invalid length. [ 199.685532][T10005] ip6gre1: entered allmulticast mode [ 200.091294][T10046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1102'. [ 200.123726][T10047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1102'. [ 200.175390][T10046] bridge_slave_0: left allmulticast mode [ 200.189330][T10046] bridge_slave_0: left promiscuous mode [ 200.204163][T10046] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.227240][T10046] bridge_slave_1: left allmulticast mode [ 200.231241][T10055] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1104'. [ 200.242992][T10046] bridge_slave_1: left promiscuous mode [ 200.264966][T10046] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.285601][T10046] bond0: (slave bond_slave_0): Releasing backup interface [ 200.299031][T10046] bond0: (slave bond_slave_1): Releasing backup interface [ 200.320923][T10046] team0: Port device team_slave_0 removed [ 200.337869][T10046] team0: Port device team_slave_1 removed [ 200.358625][T10046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.396332][T10046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.407347][T10046] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 200.425662][T10047] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 200.704833][T10080] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1110'. [ 201.103725][T10103] netlink: 'syz.2.1120': attribute type 11 has an invalid length. [ 201.206395][T10109] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.262503][T10111] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.336184][ T5646] Bluetooth: hci4: command 0x0406 tx timeout [ 201.342763][ T5653] Bluetooth: hci1: command 0x0401 tx timeout [ 201.342804][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 201.350111][ T5653] Bluetooth: hci2: command 0x0406 tx timeout [ 201.504803][T10115] syzkaller1: entered promiscuous mode [ 201.525808][T10115] syzkaller1: entered allmulticast mode [ 201.915353][T10143] tap0: tun_chr_ioctl cmd 1074025672 [ 201.934412][T10143] tap0: ignored: set checksum disabled [ 202.088192][T10155] netlink: 'syz.1.1134': attribute type 4 has an invalid length. [ 202.154904][T10158] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.261779][T10162] netlink: 'syz.4.1136': attribute type 16 has an invalid length. [ 202.759236][T10145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.775089][T10188] netlink: 'syz.3.1146': attribute type 3 has an invalid length. [ 202.930170][T10198] openvswitch: netlink: Missing key (keys=40, expected=80) [ 202.944618][T10195] netlink: 'syz.0.1148': attribute type 1 has an invalid length. [ 202.981947][T10195] netlink: 'syz.0.1148': attribute type 1 has an invalid length. [ 203.328276][T10223] sctp: [Deprecated]: syz.4.1155 (pid 10223) Use of struct sctp_assoc_value in delayed_ack socket option. [ 203.328276][T10223] Use struct sctp_sack_info instead [ 203.995530][ T5761] IPVS: starting estimator thread 0... [ 204.093404][T10257] IPVS: using max 41 ests per chain, 98400 per kthread [ 204.107477][T10259] __nla_validate_parse: 14 callbacks suppressed [ 204.107493][T10259] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1166'. [ 204.154688][T10265] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1168'. [ 204.167150][T10265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1168'. [ 204.434155][T10277] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1171'. [ 204.790473][T10306] netem: change failed [ 204.828346][T10300] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1177'. [ 204.891069][T10305] geneve1: left promiscuous mode [ 204.980358][T10314] netlink: 'syz.0.1181': attribute type 8 has an invalid length. [ 205.258892][T10326] IPv6: NLM_F_CREATE should be specified when creating new route [ 205.277354][T10326] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 205.284660][T10326] IPv6: NLM_F_CREATE should be set when creating new route [ 205.477913][T10338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1186'. [ 205.610869][T10349] vlan4: entered allmulticast mode [ 205.628180][T10349] veth1_virt_wifi: entered allmulticast mode [ 205.635372][T10355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1195'. [ 205.650818][T10355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1195'. [ 205.660446][T10338] netlink: 'syz.0.1186': attribute type 1 has an invalid length. [ 205.679228][T10355] netlink: 'syz.1.1195': attribute type 15 has an invalid length. [ 205.802039][ T1010] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 256 - 0 [ 205.831661][ T1010] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 256 - 0 [ 205.868814][ T1010] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 256 - 0 [ 205.892133][ T1010] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 256 - 0 [ 206.060482][T10381] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1200'. [ 206.338313][T10396] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1206'. [ 206.386640][T10395] netlink: 'syz.2.1205': attribute type 5 has an invalid length. [ 206.397829][T10396] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.410860][T10396] bond_slave_0: left allmulticast mode [ 206.420669][T10396] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.435657][T10396] bond_slave_1: left allmulticast mode [ 206.459379][T10396] bond0 (unregistering): Released all slaves [ 206.826660][T10426] veth0_to_bridge: entered promiscuous mode [ 206.857280][T10425] veth0_to_bridge: left promiscuous mode [ 206.944025][T10432] netlink: 'syz.3.1217': attribute type 5 has an invalid length. [ 207.214265][T10448] netlink: 'syz.4.1221': attribute type 5 has an invalid length. [ 207.258088][T10448] netlink: 'syz.4.1221': attribute type 6 has an invalid length. [ 207.578624][T10466] tipc: New replicast peer: 255.255.255.255 [ 207.598204][T10466] tipc: Enabled bearer , priority 10 [ 207.704682][T10469] syzkaller0: entered promiscuous mode [ 207.726702][T10469] syzkaller0: entered allmulticast mode [ 208.087367][T10487] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 208.142157][T10494] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 208.166962][T10494] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.386757][T10515] netlink: 'syz.0.1241': attribute type 21 has an invalid length. [ 208.669301][T10531] netlink: 'syz.3.1248': attribute type 12 has an invalid length. [ 208.687633][T10531] netlink: 'syz.3.1248': attribute type 29 has an invalid length. [ 208.743229][T10535] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 209.179106][T10570] __nla_validate_parse: 22 callbacks suppressed [ 209.179123][T10570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1260'. [ 209.511219][T10585] atomic_op ffff88806a947998 conn xmit_atomic 0000000000000000 [ 209.872156][T10592] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1265'. [ 209.914050][T10610] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 209.919760][T10595] bond3: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 209.936390][T10609] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 210.048845][T10597] veth7: entered promiscuous mode [ 210.098439][T10597] bond3: (slave veth7): Enslaving as a backup interface with a down link [ 210.137421][ T1174] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 210.152990][T10592] 8021q: adding VLAN 0 to HW filter on device bond3 [ 210.160864][T10599] syzkaller1: entered promiscuous mode [ 210.172375][T10599] syzkaller1: entered allmulticast mode [ 210.185602][T10622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.223674][T10616] tap0: tun_chr_ioctl cmd 1074025676 [ 210.240637][T10616] tap0: owner set to 0 [ 210.261360][ T13] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 210.458519][T10633] validate_nla: 3 callbacks suppressed [ 210.458536][T10633] netlink: 'syz.1.1276': attribute type 13 has an invalid length. [ 210.534802][T10633] macsec0: entered allmulticast mode [ 210.579057][T10646] netlink: 'syz.3.1278': attribute type 10 has an invalid length. [ 210.631020][T10646] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1278'. [ 210.714325][T10644] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1276'. [ 210.747875][T10646] team0: entered allmulticast mode [ 210.753151][T10646] team_slave_0: entered allmulticast mode [ 210.759759][T10646] team_slave_1: entered allmulticast mode [ 210.768372][T10646] bridge0: port 4(team0) entered blocking state [ 210.788593][T10646] bridge0: port 4(team0) entered disabled state [ 210.827487][T10646] team0: entered promiscuous mode [ 210.845015][T10646] team_slave_0: entered promiscuous mode [ 210.858273][T10646] team_slave_1: entered promiscuous mode [ 210.990157][T10667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1284'. [ 211.044766][T10670] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1285'. [ 211.222554][T10684] netlink: 'syz.3.1291': attribute type 28 has an invalid length. [ 211.239179][T10684] netlink: 'syz.3.1291': attribute type 3 has an invalid length. [ 211.260584][T10684] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1291'. [ 211.320387][T10690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1292'. [ 211.482752][T10707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1295'. [ 211.678736][T10715] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 211.687199][T10713] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1298'. [ 211.713849][T10715] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 211.754063][T10721] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 211.840902][T10713] bond0 (unregistering): Released all slaves [ 212.232681][T10754] netlink: 'syz.4.1309': attribute type 2 has an invalid length. [ 212.280113][T10754] netlink: 'syz.4.1309': attribute type 1 has an invalid length. [ 212.313162][T10754] netlink: 'syz.4.1309': attribute type 1 has an invalid length. [ 212.330921][T10760] netlink: 'syz.4.1309': attribute type 2 has an invalid length. [ 212.372077][T10760] netlink: 'syz.4.1309': attribute type 1 has an invalid length. [ 212.393940][T10760] netlink: 'syz.4.1309': attribute type 1 has an invalid length. [ 213.047813][T10801] xt_CT: You must specify a L4 protocol and not use inversions on it [ 213.140595][ T5644] block nbd1: Receive control failed (result -32) [ 213.495018][T10841] bridge_slave_1: left allmulticast mode [ 213.511036][T10841] bridge_slave_1: left promiscuous mode [ 213.523875][T10841] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.571937][T10841] bridge_slave_0: left allmulticast mode [ 213.579362][T10841] bridge_slave_0: left promiscuous mode [ 213.586112][T10841] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.817441][T10856] sctp: [Deprecated]: syz.1.1339 (pid 10856) Use of int in max_burst socket option deprecated. [ 213.817441][T10856] Use struct sctp_assoc_value instead [ 213.999248][T10869] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 214.254206][T10889] __nla_validate_parse: 10 callbacks suppressed [ 214.254224][T10889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1346'. [ 214.342515][T10889] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.076576][T10923] xt_l2tp: v2 doesn't support IP mode [ 215.609197][T10947] validate_nla: 2 callbacks suppressed [ 215.609215][T10947] netlink: 'syz.3.1367': attribute type 1 has an invalid length. [ 215.654082][T10947] 8021q: adding VLAN 0 to HW filter on device bond5 [ 215.675457][T10947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1367'. [ 215.755318][T10947] vlan5: entered promiscuous mode [ 215.760775][T10947] bond5: entered promiscuous mode [ 215.766754][T10947] vlan5: entered allmulticast mode [ 215.771940][T10947] bond5: entered allmulticast mode [ 216.129521][T10979] sctp: [Deprecated]: syz.3.1376 (pid 10979) Use of int in maxseg socket option. [ 216.129521][T10979] Use struct sctp_assoc_value instead [ 216.141408][T10980] netlink: 'syz.1.1378': attribute type 1 has an invalid length. [ 216.157528][T10981] netlink: 'syz.1.1378': attribute type 1 has an invalid length. [ 216.167173][T10980] netlink: 16110 bytes leftover after parsing attributes in process `syz.1.1378'. [ 216.327600][T10989] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.1380'. [ 216.746212][T11016] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1388'. [ 216.755462][T11016] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1388'. [ 216.783731][T11015] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1387'. [ 216.830309][T11015] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1387'. [ 216.856086][T11023] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1387'. [ 216.870302][T11023] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1387'. [ 216.977097][T11030] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 217.000184][T11030] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.382813][T11040] macvlan0: entered promiscuous mode [ 217.470365][T11049] bond9: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 217.488975][T11049] bond9 (unregistering): Released all slaves [ 217.929019][T11066] IPVS: Error joining to the multicast group [ 218.804229][T11105] veth1_to_bond: entered allmulticast mode [ 218.868225][T11106] 8021q: adding VLAN 0 to HW filter on device bond2 [ 218.876288][T11105] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 218.922826][T11112] team0: Port device xfrm0 added [ 218.928660][ T5367] xfrm0 speed is unknown, defaulting to 1000 [ 218.935855][ T5367] syz1: Port: 1 Link ACTIVE [ 218.936128][T11105] tipc: Enabled bearer , priority 0 [ 219.008855][ T5367] xfrm0 speed is unknown, defaulting to 1000 [ 219.023418][T11103] veth1_to_bond: left allmulticast mode [ 219.301276][T11111] __nla_validate_parse: 4 callbacks suppressed [ 219.301293][T11111] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1419'. [ 219.468624][T11129] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1424'. [ 219.767861][T11138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1427'. [ 219.831320][T11140] netlink: 'syz.0.1428': attribute type 1 has an invalid length. [ 219.881100][T11139] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 219.926962][T11139] bond5: (slave lo): Enslaving as an active interface with an up link [ 219.955735][T11139] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 220.159471][T11148] bond3: (slave bridge4): making interface the new active one [ 220.179639][T11148] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 220.257052][ T5761] tipc: Node number set to 139768446 [ 220.493500][T11176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1437'. [ 220.626887][T11187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1439'. [ 220.671671][T11187] netlink: 'syz.3.1439': attribute type 1 has an invalid length. [ 220.708490][T11187] netlink: 'syz.3.1439': attribute type 2 has an invalid length. [ 220.730466][T11194] netlink: 'syz.2.1442': attribute type 11 has an invalid length. [ 220.932917][T11206] syzkaller1: entered promiscuous mode [ 220.945642][T11206] syzkaller1: entered allmulticast mode [ 221.054471][T11218] netlink: 'syz.1.1448': attribute type 1 has an invalid length. [ 221.062269][T11218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1448'. [ 221.071722][T11218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1448'. [ 221.081128][T11218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1448'. [ 221.091631][T11218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1448'. [ 221.101119][T11218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1448'. [ 221.166894][T11194] nbd2: detected capacity change from 0 to 63 [ 221.241633][ T8513] block nbd2: Send control failed (result -32) [ 221.243128][ T5644] block nbd2: Receive control failed (result -32) [ 221.257438][ T5652] block nbd2: Receive control failed (result -32) [ 221.283087][ T8513] block nbd2: Request send failed, requeueing [ 221.299639][ T1699] block nbd2: Dead connection, failed to find a fallback [ 221.309452][ T1699] block nbd2: shutting down sockets [ 221.321371][ T1699] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 221.332184][ T1699] Buffer I/O error on dev nbd2, logical block 0, async page read [ 221.344277][ T8513] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 221.355535][ T8513] Buffer I/O error on dev nbd2, logical block 1, async page read [ 221.366146][ T8513] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 221.375789][ T8513] Buffer I/O error on dev nbd2, logical block 2, async page read [ 221.385403][ T8513] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 221.395247][ T8513] Buffer I/O error on dev nbd2, logical block 3, async page read [ 221.405570][ T8513] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 221.415525][ T8513] Buffer I/O error on dev nbd2, logical block 0, async page read [ 221.423720][ T8513] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 221.431429][T11227] syzkaller0: entered promiscuous mode [ 221.437178][ T8513] Buffer I/O error on dev nbd2, logical block 1, async page read [ 221.451172][ T8513] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 221.460597][ T8513] Buffer I/O error on dev nbd2, logical block 2, async page read [ 221.468909][ T8513] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 221.472148][T11227] syzkaller0: entered allmulticast mode [ 221.488615][ T8513] Buffer I/O error on dev nbd2, logical block 3, async page read [ 221.517185][ T8513] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 221.527810][T11235] macvlan0: entered promiscuous mode [ 221.543029][ T8513] Buffer I/O error on dev nbd2, logical block 0, async page read [ 221.556043][T11227] tc action pedit 'at' offset 2047 out of bounds [ 221.561098][ T8513] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 221.564029][T11227] tc action pedit 'at' offset 2047 out of bounds [ 221.579726][T11227] tc action pedit 'at' offset 2047 out of bounds [ 221.586141][T11227] tc action pedit 'at' offset 2047 out of bounds [ 221.592481][T11227] tc action pedit 'at' offset 2047 out of bounds [ 221.598888][T11227] tc action pedit 'at' offset 2047 out of bounds [ 221.605268][T11227] tc action pedit 'at' offset 2047 out of bounds [ 221.611667][T11227] tc action pedit 'at' offset 2047 out of bounds [ 221.618060][T11227] tc action pedit 'at' offset 2047 out of bounds [ 221.621991][ T8513] Buffer I/O error on dev nbd2, logical block 1, async page read [ 221.624529][T11227] tc action pedit 'at' offset 2047 out of bounds [ 221.624572][T11227] TC_ACT_REPEAT abuse ? [ 221.675101][ T8513] ldm_validate_partition_table(): Disk read failed. [ 221.718389][ T8513] Dev nbd2: unable to read RDB block 0 [ 221.723122][T11244] xt_CT: You must specify a L4 protocol and not use inversions on it [ 221.742710][ T8513] nbd2: unable to read partition table [ 221.815563][ T8513] ldm_validate_partition_table(): Disk read failed. [ 221.830633][ T8513] Dev nbd2: unable to read RDB block 0 [ 221.861817][ T8513] nbd2: unable to read partition table [ 222.167340][T11268] xt_CT: You must specify a L4 protocol and not use inversions on it [ 223.220574][T11314] nbd: couldn't find a device at index 0 [ 223.794679][T11299] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 223.998999][T11354] tipc: Enabled bearer , priority 0 [ 224.022064][T11354] syzkaller0: entered promiscuous mode [ 224.038255][T11354] syzkaller0: entered allmulticast mode [ 224.087095][T11354] netlink: 'syz.3.1494': attribute type 9 has an invalid length. [ 224.151538][T11365] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 224.280741][T11368] team1: entered promiscuous mode [ 224.286769][T11368] team1: entered allmulticast mode [ 224.298440][T11365] tipc: Resetting bearer [ 225.003938][ T5644] Bluetooth: hci0: command 0x0c1a tx timeout [ 225.158390][T11368] syzkaller0: entered promiscuous mode [ 225.164299][T11368] syzkaller0: entered allmulticast mode [ 225.177955][T11353] tipc: Resetting bearer [ 225.247947][T11353] tipc: Disabling bearer [ 225.262179][T11379] netlink: 'syz.4.1501': attribute type 61 has an invalid length. [ 225.317817][T11382] __nla_validate_parse: 16 callbacks suppressed [ 225.317835][T11382] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1502'. [ 225.470615][T11385] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1504'. [ 225.492189][T11388] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1505'. [ 225.495944][T11385] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1504'. [ 225.702713][T11407] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1512'. [ 226.018229][T11434] netlink: 'syz.3.1518': attribute type 58 has an invalid length. [ 226.021990][T11433] : renamed from vlan0 (while UP) [ 226.061651][T11434] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1518'. [ 226.112183][T11439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1519'. [ 226.281226][T11444] bond9: entered promiscuous mode [ 226.302315][T11444] bond9: entered allmulticast mode [ 226.325050][T11446] ip6t_srh: unknown srh match flags 5F28 [ 226.350256][T11446] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1522'. [ 227.271325][T11518] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1541'. [ 227.318989][T11517] syzkaller1: entered promiscuous mode [ 227.333049][T11517] syzkaller1: entered allmulticast mode [ 227.655960][T11539] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1548'. [ 227.686201][T11535] netlink: 'syz.1.1547': attribute type 1 has an invalid length. [ 227.752201][T11541] netlink: 'syz.0.1549': attribute type 3 has an invalid length. [ 227.781746][T11541] netlink: 'syz.0.1549': attribute type 3 has an invalid length. [ 227.819266][T11541] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 227.826783][T11541] syzkaller1: linktype set to 823 [ 227.862263][T11549] netlink: 'syz.2.1552': attribute type 1 has an invalid length. [ 227.994662][T11549] 8021q: adding VLAN 0 to HW filter on device bond4 [ 228.389534][T11562] syzkaller0: entered promiscuous mode [ 228.396452][T11562] syzkaller0: entered allmulticast mode [ 228.458712][T11586] bridge3: entered promiscuous mode [ 228.471304][T11586] bridge3: entered allmulticast mode [ 229.253618][ T5652] Bluetooth: hci3: command 0x0406 tx timeout [ 230.522092][T11626] __nla_validate_parse: 6 callbacks suppressed [ 230.522109][T11626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1576'. [ 230.540578][T11628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1577'. [ 230.577717][T11628] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1577'. [ 230.612070][T11628] netlink: 'syz.1.1577': attribute type 4 has an invalid length. [ 230.667513][T11632] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1578'. [ 230.786248][T11647] netlink: 'syz.2.1581': attribute type 1 has an invalid length. [ 230.817615][T11647] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1581'. [ 230.834387][T11647] netlink: 'syz.2.1581': attribute type 1 has an invalid length. [ 230.849718][T11647] netlink: 'syz.2.1581': attribute type 8 has an invalid length. [ 230.859364][T11647] netlink: 606 bytes leftover after parsing attributes in process `syz.2.1581'. [ 230.869100][T11647] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1581'. [ 230.999820][T11656] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1585'. [ 231.018474][T11653] openvswitch: netlink: Unknown key attributes 2 [ 231.026762][T11653] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1583'. [ 231.041531][ T5652] block nbd3: Receive control failed (result -107) [ 231.102671][T11663] vlan0: entered allmulticast mode [ 231.291335][T11671] netlink: 'syz.1.1588': attribute type 12 has an invalid length. [ 231.348033][T11673] netlink: 'syz.1.1588': attribute type 8 has an invalid length. [ 231.366822][T11681] nbd: nbd3 already in use [ 231.377530][T11673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1588'. [ 231.406867][T11673] veth1_to_team: entered promiscuous mode [ 231.427844][T11673] gretap0: entered promiscuous mode [ 231.442812][T11673] veth1_to_team: left promiscuous mode [ 231.458449][T11673] gretap0: left promiscuous mode [ 231.527473][T11687] netlink: 'syz.3.1594': attribute type 1 has an invalid length. [ 231.545121][T11687] netlink: 'syz.3.1594': attribute type 2 has an invalid length. [ 231.553066][T11685] netlink: 'syz.2.1593': attribute type 21 has an invalid length. [ 231.562814][T11687] netlink: 'syz.3.1594': attribute type 1 has an invalid length. [ 231.589240][T11687] netlink: 'syz.3.1594': attribute type 2 has an invalid length. [ 231.652270][T11692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.680132][T11694] xt_hashlimit: size too large, truncated to 1048576 [ 232.089342][T11714] syzkaller0: entered promiscuous mode [ 232.108581][T11714] syzkaller0: entered allmulticast mode [ 232.819893][T11753] netlink: 'syz.4.1615': attribute type 3 has an invalid length. [ 233.556308][T11788] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.617365][T11817] __nla_validate_parse: 12 callbacks suppressed [ 235.617378][T11817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1632'. [ 236.120401][T11765] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 236.318558][T11821] netlink: 'syz.0.1634': attribute type 3 has an invalid length. [ 236.322195][T11823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1633'. [ 236.534459][T11839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1639'. [ 236.545858][T11841] netlink: 'syz.2.1637': attribute type 10 has an invalid length. [ 236.563116][T11841] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1637'. [ 236.585313][T11843] xt_CT: You must specify a L4 protocol and not use inversions on it [ 236.606741][T11841] team0: Port device geneve1 added [ 236.689247][T11837] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1638'. [ 236.693216][T11848] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 236.781301][T11837] IPVS: Error connecting to the multicast addr [ 236.885028][T11848] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.892713][T11848] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.907437][T11848] batman_adv: batadv0: Interface deactivated: dummy0 [ 236.989148][T11848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.073869][ T48] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.095326][ T48] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.117538][ T48] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.144439][ T48] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.179620][T11868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1647'. [ 237.225551][ T48] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.259997][ T48] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.290186][T11868] xfrm0 speed is unknown, defaulting to 1000 [ 237.299969][ T48] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.333140][ T48] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.350721][T11877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1647'. [ 237.440736][T11868] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1647'. [ 237.562262][T11891] vlan2: entered promiscuous mode [ 237.584160][T11891] bridge0: entered promiscuous mode [ 237.667619][T11906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1656'. [ 237.779321][T11905] netlink: 'syz.2.1656': attribute type 83 has an invalid length. [ 238.019565][T11932] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 238.115625][T11934] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 238.248800][T11942] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1668'. [ 238.285056][T11946] netem: change failed [ 238.598010][T11959] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 238.712716][T11968] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 239.315445][T12003] xt_socket: unknown flags 0xe4 [ 239.423930][T12007] syzkaller1: entered promiscuous mode [ 239.448200][T12007] syzkaller1: entered allmulticast mode [ 239.942164][T12028] netlink: 'syz.0.1698': attribute type 21 has an invalid length. [ 239.967772][T12028] netlink: 'syz.0.1698': attribute type 22 has an invalid length. [ 239.987235][T12028] netlink: 'syz.0.1698': attribute type 23 has an invalid length. [ 240.002328][T12028] netlink: 'syz.0.1698': attribute type 25 has an invalid length. [ 240.040294][T12028] netlink: 'syz.0.1698': attribute type 26 has an invalid length. [ 240.248207][T12045] IPv6: NLM_F_CREATE should be specified when creating new route [ 240.549991][T12063] xt_CT: You must specify a L4 protocol and not use inversions on it [ 241.388085][T12113] __nla_validate_parse: 8 callbacks suppressed [ 241.388104][T12113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1724'. [ 241.432360][T12113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1724'. [ 241.575783][T12122] syzkaller0: entered promiscuous mode [ 241.581341][T12122] syzkaller0: entered allmulticast mode [ 241.659724][T12124] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1725'. [ 241.679259][T12124] syzkaller0: entered promiscuous mode [ 241.685456][T12124] syzkaller0: entered allmulticast mode [ 241.760477][T12127] netlink: 'syz.0.1725': attribute type 33 has an invalid length. [ 241.786751][T12127] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 241.798435][T12127] bond4 (unregistering): Released all slaves [ 243.854880][T12078] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 243.866842][T12097] netlink: 'syz.2.1719': attribute type 2 has an invalid length. [ 243.875056][T12097] netlink: 'syz.2.1719': attribute type 2 has an invalid length. [ 244.137878][T12153] netlink: 'syz.2.1734': attribute type 1 has an invalid length. [ 244.187244][T12152] ip6_vti0: entered promiscuous mode [ 244.193062][T12153] netlink: 'syz.2.1734': attribute type 1 has an invalid length. [ 244.233207][T12153] netlink: 9172 bytes leftover after parsing attributes in process `syz.2.1734'. [ 244.410670][T12176] netlink: 67 bytes leftover after parsing attributes in process `syz.4.1736'. [ 244.516937][T12164] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 244.541630][T12164] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 244.799339][T12176] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 244.802202][T12198] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1741'. [ 244.853068][T12202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1744'. [ 244.867480][T12186] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1741'. [ 244.883201][T12198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1741'. [ 244.996750][T12196] xfrm0 speed is unknown, defaulting to 1000 [ 245.104656][T12215] netlink: 'syz.4.1748': attribute type 7 has an invalid length. [ 245.382600][T12238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1751'. [ 245.488241][T12241] netlink: 'syz.1.1753': attribute type 1 has an invalid length. [ 245.511091][T12241] netlink: 'syz.1.1753': attribute type 2 has an invalid length. [ 245.527381][T12241] netlink: 'syz.1.1753': attribute type 1 has an invalid length. [ 245.530844][T12243] openvswitch: netlink: Flow actions attr not present in new flow. [ 245.567690][T12245] syzkaller0: entered promiscuous mode [ 245.573858][T12245] syzkaller0: entered allmulticast mode [ 246.142644][T12269] netlink: 'syz.1.1762': attribute type 10 has an invalid length. [ 246.153004][T12270] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 246.282876][T12271] sit1: entered promiscuous mode [ 246.293772][T12271] sit1: entered allmulticast mode [ 246.422177][T12279] __nla_validate_parse: 3 callbacks suppressed [ 246.422194][T12279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1765'. [ 247.325482][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.352220][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.373872][T12328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.422376][T12331] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1779'. [ 247.441710][T12332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.449719][T12336] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 247.484473][T12331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1779'. [ 247.503738][T12336] tipc: Enabling of bearer rejected, failed to enable media [ 247.663753][ T30] audit: type=1107 audit(1780594958.205:2): pid=12341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='>ìVs¤5…' [ 247.862440][T12354] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1786'. [ 247.960147][T12361] netlink: 'syz.3.1788': attribute type 11 has an invalid length. [ 247.988456][T12361] netlink: 'syz.3.1788': attribute type 11 has an invalid length. [ 248.013460][T12361] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1788'. [ 248.260234][T12378] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1793'. [ 248.334575][ T30] audit: type=1107 audit(1780594958.875:3): pid=12385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='=‰'4' [ 248.366717][T12378] syzkaller0: entered promiscuous mode [ 248.398736][T12378] syzkaller0: entered allmulticast mode [ 248.418669][T12379] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 248.492209][T12379] bond8: (slave lo): Enslaving as an active interface with an up link [ 248.520879][T12379] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 248.559988][ T24] IPVS: starting estimator thread 0... [ 248.667562][T12402] IPVS: using max 29 ests per chain, 69600 per kthread [ 248.985868][T12425] validate_nla: 1 callbacks suppressed [ 248.985885][T12425] netlink: 'syz.4.1804': attribute type 2 has an invalid length. [ 249.055760][T12425] netlink: 'syz.4.1804': attribute type 11 has an invalid length. [ 249.097106][T12425] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1804'. [ 249.710688][T12467] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1815'. [ 249.808143][T12474] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 249.827357][T12474] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 249.931855][T12479] [ 249.934213][T12479] ====================================================== [ 249.941287][T12479] WARNING: possible circular locking dependency detected [ 249.948311][T12479] syzkaller #0 Not tainted [ 249.952728][T12479] ------------------------------------------------------ [ 249.959735][T12479] syz.0.1817/12479 is trying to acquire lock: [ 249.965778][T12479] ffffffff8ea855c0 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660 [ 249.975079][T12479] [ 249.975079][T12479] but task is already holding lock: [ 249.982421][T12479] ffff888052d2ea60 (k-sk_lock-AF_INET/1){+.+.}-{0:0}, at: mptcp_subflow_create_socket+0x142/0x800 [ 249.993019][T12479] [ 249.993019][T12479] which lock already depends on the new lock. [ 249.993019][T12479] [ 250.003401][T12479] [ 250.003401][T12479] the existing dependency chain (in reverse order) is: [ 250.012390][T12479] [ 250.012390][T12479] -> #7 (k-sk_lock-AF_INET/1){+.+.}-{0:0}: [ 250.020369][T12479] lock_sock_nested+0x41/0x100 [ 250.025643][T12479] mptcp_subflow_create_socket+0x142/0x800 [ 250.031958][T12479] __mptcp_nmpc_sk+0x155/0x790 [ 250.037235][T12479] mptcp_bind+0xab/0x1d0 [ 250.041990][T12479] __sys_bind+0x2e3/0x410 [ 250.046827][T12479] __x64_sys_bind+0x7a/0x90 [ 250.051853][T12479] do_syscall_64+0x174/0x580 [ 250.056960][T12479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.063364][T12479] [ 250.063364][T12479] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 250.070991][T12479] lock_sock_nested+0x41/0x100 [ 250.076263][T12479] inet_shutdown+0x6a/0x390 [ 250.081274][T12479] nbd_mark_nsock_dead+0x2e9/0x560 [ 250.086894][T12479] recv_work+0x1c2e/0x1d40 [ 250.091813][T12479] process_scheduled_works+0xb5d/0x1860 [ 250.097864][T12479] worker_thread+0xa53/0xfc0 [ 250.102963][T12479] kthread+0x389/0x470 [ 250.107534][T12479] ret_from_fork+0x514/0xb70 [ 250.112622][T12479] ret_from_fork_asm+0x1a/0x30 [ 250.117892][T12479] [ 250.117892][T12479] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 250.125523][T12479] __mutex_lock+0x1a3/0x1550 [ 250.130619][T12479] nbd_queue_rq+0x37b/0x1100 [ 250.135716][T12479] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 250.141763][T12479] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 250.148593][T12479] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 250.155084][T12479] blk_mq_run_hw_queue+0x348/0x4f0 [ 250.160696][T12479] blk_mq_dispatch_list+0xd16/0xe10 [ 250.166397][T12479] blk_mq_flush_plug_list+0x48d/0x570 [ 250.172271][T12479] __blk_flush_plug+0x3ed/0x4d0 [ 250.177624][T12479] __submit_bio+0x28d/0x580 [ 250.182631][T12479] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 250.188767][T12479] block_read_full_folio+0x599/0x830 [ 250.194551][T12479] filemap_read_folio+0x137/0x3b0 [ 250.200080][T12479] do_read_cache_folio+0x358/0x590 [ 250.205695][T12479] read_part_sector+0xb6/0x2b0 [ 250.210958][T12479] adfspart_check_ICS+0xb1/0x960 [ 250.216397][T12479] bdev_disk_changed+0x817/0x1770 [ 250.221923][T12479] blkdev_get_whole+0x380/0x510 [ 250.227275][T12479] bdev_open+0x31e/0xd30 [ 250.232024][T12479] blkdev_open+0x470/0x610 [ 250.236943][T12479] do_dentry_open+0x822/0x13a0 [ 250.242208][T12479] vfs_open+0x3b/0x340 [ 250.246784][T12479] path_openat+0x2e08/0x3860 [ 250.251882][T12479] do_file_open+0x23e/0x4a0 [ 250.256889][T12479] do_sys_openat2+0x113/0x200 [ 250.262066][T12479] __x64_sys_openat+0x138/0x170 [ 250.267418][T12479] do_syscall_64+0x174/0x580 [ 250.272507][T12479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.278902][T12479] [ 250.278902][T12479] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 250.286095][T12479] __mutex_lock+0x1a3/0x1550 [ 250.291187][T12479] nbd_queue_rq+0xc6/0x1100 [ 250.296192][T12479] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 250.302239][T12479] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 250.309081][T12479] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 250.315580][T12479] blk_mq_run_hw_queue+0x348/0x4f0 [ 250.321210][T12479] blk_mq_dispatch_list+0xd16/0xe10 [ 250.326918][T12479] blk_mq_flush_plug_list+0x48d/0x570 [ 250.332825][T12479] __blk_flush_plug+0x3ed/0x4d0 [ 250.338186][T12479] __submit_bio+0x28d/0x580 [ 250.343192][T12479] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 250.349328][T12479] block_read_full_folio+0x599/0x830 [ 250.355116][T12479] filemap_read_folio+0x137/0x3b0 [ 250.360646][T12479] do_read_cache_folio+0x358/0x590 [ 250.366258][T12479] read_part_sector+0xb6/0x2b0 [ 250.371524][T12479] adfspart_check_ICS+0xb1/0x960 [ 250.376962][T12479] bdev_disk_changed+0x817/0x1770 [ 250.382487][T12479] blkdev_get_whole+0x380/0x510 [ 250.387842][T12479] bdev_open+0x31e/0xd30 [ 250.392585][T12479] blkdev_open+0x470/0x610 [ 250.397502][T12479] do_dentry_open+0x822/0x13a0 [ 250.402766][T12479] vfs_open+0x3b/0x340 [ 250.407338][T12479] path_openat+0x2e08/0x3860 [ 250.412432][T12479] do_file_open+0x23e/0x4a0 [ 250.417437][T12479] do_sys_openat2+0x113/0x200 [ 250.422612][T12479] __x64_sys_openat+0x138/0x170 [ 250.427964][T12479] do_syscall_64+0x174/0x580 [ 250.433054][T12479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.439446][T12479] [ 250.439446][T12479] -> #3 (set->srcu){.+.+}-{0:0}: [ 250.446551][T12479] __synchronize_srcu+0xca/0x300 [ 250.451992][T12479] elevator_switch+0x1e8/0x7a0 [ 250.457256][T12479] elevator_change+0x2cc/0x450 [ 250.462520][T12479] elevator_set_default+0x36c/0x430 [ 250.468216][T12479] blk_register_queue+0x3e9/0x4e0 [ 250.473742][T12479] __add_disk+0x677/0xd50 [ 250.478578][T12479] add_disk_fwnode+0xfb/0x480 [ 250.483756][T12479] nbd_dev_add+0x72c/0xb50 [ 250.488674][T12479] nbd_init+0x168/0x1f0 [ 250.493332][T12479] do_one_initcall+0x250/0x870 [ 250.498606][T12479] do_initcall_level+0x104/0x190 [ 250.504064][T12479] do_initcalls+0x59/0xa0 [ 250.508910][T12479] kernel_init_freeable+0x2a6/0x3e0 [ 250.514615][T12479] kernel_init+0x1d/0x1d0 [ 250.519447][T12479] ret_from_fork+0x514/0xb70 [ 250.524540][T12479] ret_from_fork_asm+0x1a/0x30 [ 250.529819][T12479] [ 250.529819][T12479] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 250.537624][T12479] __mutex_lock+0x1a3/0x1550 [ 250.542717][T12479] elevator_change+0x1b3/0x450 [ 250.547983][T12479] elevator_set_none+0xb5/0x140 [ 250.553334][T12479] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 250.559645][T12479] nbd_start_device+0x17f/0xb10 [ 250.565001][T12479] nbd_genl_connect+0x165b/0x1cf0 [ 250.570526][T12479] genl_family_rcv_msg_doit+0x22a/0x330 [ 250.576589][T12479] genl_rcv_msg+0x61c/0x7a0 [ 250.581592][T12479] netlink_rcv_skb+0x232/0x4b0 [ 250.586858][T12479] genl_rcv+0x28/0x40 [ 250.591337][T12479] netlink_unicast+0x75c/0x8e0 [ 250.596604][T12479] netlink_sendmsg+0x813/0xb40 [ 250.601870][T12479] ____sys_sendmsg+0x972/0x9f0 [ 250.607131][T12479] ___sys_sendmsg+0x2a5/0x360 [ 250.612308][T12479] __x64_sys_sendmsg+0x1bd/0x2a0 [ 250.617744][T12479] do_syscall_64+0x174/0x580 [ 250.622835][T12479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.629226][T12479] [ 250.629226][T12479] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 250.637814][T12479] blk_alloc_queue+0x546/0x680 [ 250.643086][T12479] __blk_mq_alloc_disk+0x197/0x390 [ 250.648701][T12479] nbd_dev_add+0x499/0xb50 [ 250.653620][T12479] nbd_init+0x168/0x1f0 [ 250.658280][T12479] do_one_initcall+0x250/0x870 [ 250.663545][T12479] do_initcall_level+0x104/0x190 [ 250.668986][T12479] do_initcalls+0x59/0xa0 [ 250.673814][T12479] kernel_init_freeable+0x2a6/0x3e0 [ 250.679520][T12479] kernel_init+0x1d/0x1d0 [ 250.684347][T12479] ret_from_fork+0x514/0xb70 [ 250.689437][T12479] ret_from_fork_asm+0x1a/0x30 [ 250.694699][T12479] [ 250.694699][T12479] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 250.701905][T12479] __lock_acquire+0x15a5/0x2cf0 [ 250.707276][T12479] lock_acquire+0x106/0x350 [ 250.712293][T12479] fs_reclaim_acquire+0x71/0x100 [ 250.717738][T12479] __kmalloc_cache_noprof+0x40/0x660 [ 250.723539][T12479] ref_tracker_alloc+0x15a/0x4c0 [ 250.728985][T12479] get_net_track+0x16e/0x230 [ 250.734085][T12479] sk_net_refcnt_upgrade+0xb2/0x130 [ 250.739791][T12479] mptcp_subflow_create_socket+0x32b/0x800 [ 250.746098][T12479] __mptcp_nmpc_sk+0x155/0x790 [ 250.751364][T12479] mptcp_pm_nl_add_addr_doit+0xe25/0x1420 [ 250.757586][T12479] genl_family_rcv_msg_doit+0x22a/0x330 [ 250.763636][T12479] genl_rcv_msg+0x61c/0x7a0 [ 250.768651][T12479] netlink_rcv_skb+0x232/0x4b0 [ 250.773936][T12479] genl_rcv+0x28/0x40 [ 250.778430][T12479] netlink_unicast+0x75c/0x8e0 [ 250.783704][T12479] netlink_sendmsg+0x813/0xb40 [ 250.788974][T12479] ____sys_sendmsg+0x972/0x9f0 [ 250.794247][T12479] ___sys_sendmsg+0x2a5/0x360 [ 250.799428][T12479] __x64_sys_sendmsg+0x1bd/0x2a0 [ 250.804866][T12479] do_syscall_64+0x174/0x580 [ 250.809959][T12479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.816352][T12479] [ 250.816352][T12479] other info that might help us debug this: [ 250.816352][T12479] [ 250.826556][T12479] Chain exists of: [ 250.826556][T12479] fs_reclaim --> sk_lock-AF_INET --> k-sk_lock-AF_INET/1 [ 250.826556][T12479] [ 250.839492][T12479] Possible unsafe locking scenario: [ 250.839492][T12479] [ 250.846922][T12479] CPU0 CPU1 [ 250.852266][T12479] ---- ---- [ 250.857608][T12479] lock(k-sk_lock-AF_INET/1); [ 250.862362][T12479] lock(sk_lock-AF_INET); [ 250.869275][T12479] lock(k-sk_lock-AF_INET/1); [ 250.876544][T12479] lock(fs_reclaim); [ 250.880508][T12479] [ 250.880508][T12479] *** DEADLOCK *** [ 250.880508][T12479] [ 250.888627][T12479] 4 locks held by syz.0.1817/12479: [ 250.893804][T12479] #0: ffffffff8fe37dc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 250.901968][T12479] #1: ffffffff8fe37c00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 250.910906][T12479] #2: ffff888055fb0ea0 (msk_lock-AF_INET){+.+.}-{0:0}, at: mptcp_pm_nl_add_addr_doit+0xdc7/0x1420 [ 250.921590][T12479] #3: ffff888052d2ea60 (k-sk_lock-AF_INET/1){+.+.}-{0:0}, at: mptcp_subflow_create_socket+0x142/0x800 [ 250.932619][T12479] [ 250.932619][T12479] stack backtrace: [ 250.938489][T12479] CPU: 1 UID: 0 PID: 12479 Comm: syz.0.1817 Not tainted syzkaller #0 PREEMPT(full) [ 250.938504][T12479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 250.938526][T12479] Call Trace: [ 250.938532][T12479] [ 250.938537][T12479] dump_stack_lvl+0xe8/0x150 [ 250.938554][T12479] print_circular_bug+0x2e1/0x300 [ 250.938570][T12479] check_noncircular+0x12e/0x150 [ 250.938588][T12479] __lock_acquire+0x15a5/0x2cf0 [ 250.938601][T12479] ? check_noncircular+0xda/0x150 [ 250.938617][T12479] ? lockdep_unlock+0x5d/0xd0 [ 250.938628][T12479] ? __lock_acquire+0x146e/0x2cf0 [ 250.938642][T12479] ? __kmalloc_cache_noprof+0x40/0x660 [ 250.938659][T12479] lock_acquire+0x106/0x350 [ 250.938670][T12479] ? __kmalloc_cache_noprof+0x40/0x660 [ 250.938690][T12479] fs_reclaim_acquire+0x71/0x100 [ 250.938706][T12479] ? __kmalloc_cache_noprof+0x40/0x660 [ 250.938721][T12479] __kmalloc_cache_noprof+0x40/0x660 [ 250.938737][T12479] ? ref_tracker_alloc+0x15a/0x4c0 [ 250.938750][T12479] ? rcu_is_watching+0x15/0xb0 [ 250.938764][T12479] ref_tracker_alloc+0x15a/0x4c0 [ 250.938778][T12479] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 250.938790][T12479] ? ref_tracker_free+0x522/0x840 [ 250.938803][T12479] ? __pfx_ref_tracker_free+0x10/0x10 [ 250.938815][T12479] ? sk_net_refcnt_upgrade+0x8c/0x130 [ 250.938833][T12479] ? mptcp_subflow_create_socket+0x32b/0x800 [ 250.938846][T12479] ? __mptcp_nmpc_sk+0x155/0x790 [ 250.938859][T12479] ? mptcp_pm_nl_add_addr_doit+0xe25/0x1420 [ 250.938875][T12479] ? genl_family_rcv_msg_doit+0x22a/0x330 [ 250.938890][T12479] ? net_passive_dec+0x177/0x250 [ 250.938905][T12479] ? __pfx_net_passive_dec+0x10/0x10 [ 250.938921][T12479] get_net_track+0x16e/0x230 [ 250.938938][T12479] sk_net_refcnt_upgrade+0xb2/0x130 [ 250.938956][T12479] mptcp_subflow_create_socket+0x32b/0x800 [ 250.938971][T12479] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 250.938987][T12479] ? do_raw_spin_lock+0x12b/0x2f0 [ 250.939001][T12479] ? lock_sock_nested+0x6a/0x100 [ 250.939015][T12479] __mptcp_nmpc_sk+0x155/0x790 [ 250.939029][T12479] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 250.939041][T12479] ? mptcp_pm_nl_add_addr_doit+0xdc7/0x1420 [ 250.939059][T12479] ? __local_bh_enable_ip+0xd0/0x130 [ 250.939072][T12479] mptcp_pm_nl_add_addr_doit+0xe25/0x1420 [ 250.939093][T12479] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 250.939121][T12479] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 250.939135][T12479] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 250.939156][T12479] genl_family_rcv_msg_doit+0x22a/0x330 [ 250.939170][T12479] ? __asan_memcpy+0x40/0x70 [ 250.939186][T12479] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 250.939204][T12479] ? bpf_lsm_capable+0x9/0x20 [ 250.939215][T12479] ? security_capable+0x7e/0x2c0 [ 250.939234][T12479] genl_rcv_msg+0x61c/0x7a0 [ 250.939248][T12479] ? __pfx_genl_rcv_msg+0x10/0x10 [ 250.939260][T12479] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 250.939281][T12479] netlink_rcv_skb+0x232/0x4b0 [ 250.939298][T12479] ? __pfx_genl_rcv_msg+0x10/0x10 [ 250.939311][T12479] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 250.939332][T12479] ? down_read+0x270/0x2e0 [ 250.939344][T12479] ? genl_rcv+0xd/0x40 [ 250.939356][T12479] genl_rcv+0x28/0x40 [ 250.939368][T12479] netlink_unicast+0x75c/0x8e0 [ 250.939387][T12479] netlink_sendmsg+0x813/0xb40 [ 250.939406][T12479] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.939423][T12479] ? aa_sock_msg_perm+0xf1/0x1b0 [ 250.939439][T12479] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 250.939455][T12479] ____sys_sendmsg+0x972/0x9f0 [ 250.939466][T12479] ? __might_fault+0xaf/0x130 [ 250.939482][T12479] ? __pfx_____sys_sendmsg+0x10/0x10 [ 250.939497][T12479] ? import_iovec+0x73/0xa0 [ 250.939512][T12479] ___sys_sendmsg+0x2a5/0x360 [ 250.939522][T12479] ? __lock_acquire+0x6b5/0x2cf0 [ 250.939535][T12479] ? __pfx____sys_sendmsg+0x10/0x10 [ 250.939548][T12479] ? futex_wake+0x4ac/0x580 [ 250.939572][T12479] ? __fget_files+0x2a/0x420 [ 250.939585][T12479] ? __fget_files+0x3a0/0x420 [ 250.939601][T12479] __x64_sys_sendmsg+0x1bd/0x2a0 [ 250.939614][T12479] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 250.939628][T12479] ? rcu_is_watching+0x15/0xb0 [ 250.939644][T12479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.939657][T12479] do_syscall_64+0x174/0x580 [ 250.939669][T12479] ? trace_irq_disable+0x3b/0x140 [ 250.939685][T12479] ? clear_bhb_loop+0x40/0x90 [ 250.939698][T12479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.939710][T12479] RIP: 0033:0x7fce6919ce59 [ 250.939722][T12479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.939733][T12479] RSP: 002b:00007fce6a141028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.939746][T12479] RAX: ffffffffffffffda RBX: 00007fce69415fa0 RCX: 00007fce6919ce59 [ 250.939755][T12479] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000008 [ 250.939763][T12479] RBP: 00007fce69232d6f R08: 0000000000000000 R09: 0000000000000000 [ 250.939770][T12479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.939778][T12479] R13: 00007fce69416038 R14: 00007fce69415fa0 R15: 00007ffd61ddcd68 [ 250.939793][T12479] [ 255.564191][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.570520][ T1317] ieee802154 phy1 wpan1: encryption failed: -22