last executing test programs: 7.02089904s ago: executing program 2 (id=3261): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002740)) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0x10, 0x4) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_wait(r4, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff) shutdown(r3, 0x1) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$'], 0x28}}], 0x1, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYRESDEC=r5, @ANYRES64=r4, @ANYBLOB="445abc8df086dd7a65da6bdaf7cf33feb6b7b9564eaa03c7b45f4b3d99ea64b586200d794236f43245496420e37903464d2ea403483d2fd0f922cb20be031df06baafc9279e8b46a4ec4b8c1049b774d8b55ec10753efcc55375c10e6cc5a70ece36ac5036e4bfc6351362ea957f9f0e54c801e8024b079708462c2ea6883f76d333b7bada", @ANYRES64=0x77359400, @ANYRESDEC=r1, @ANYBLOB="00da34fdf8"], 0x48}}, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x840) ioctl$NILFS_IOCTL_GET_CPINFO(r3, 0x80186e82, &(0x7f0000000540)={&(0x7f0000000480), 0x0, 0x38, 0x0, 0x1d8d}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x3953c2, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x1405, 0x702, 0x70bd2a, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000040)=0x3) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x9, 0x0, 0x2, 0x6, 0x1bd1, 0x8}, &(0x7f0000000100)=0x20) r9 = socket(0x840000000002, 0x3, 0x100) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x2b) sendmmsg$inet(r9, &(0x7f0000005240), 0x4000095, 0x0) connect$inet(r9, &(0x7f0000000140)={0x2, 0x4e20, @broadcast}, 0x10) 6.967633931s ago: executing program 4 (id=3263): socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x1, 0x7ff, 0x1}, {0x6, 0x0, 0x8, 0x6, 0x8, 0x401}, 0x40, 0xd, 0x8ef}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x40000) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_route(0x10, 0x3, 0x0) 6.455010833s ago: executing program 3 (id=3265): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) listen(r5, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x5, @multicast}, 0x10) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000080)={r4, 0x1, 0x6, @multicast}, 0x10) bind$nfc_llcp(r0, &(0x7f0000000880)={0x27, r2, 0x0, 0x6, 0x0, 0x2, "d92984bd1ca44c226af5160e961711a077609475b78411e879918d20000000f2170e65e3f50327080e000000000000001900", 0x3c}, 0x60) close(r1) close(0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r8, 0xc0046686, &(0x7f00000001c0)={0x2, 0x42, "b0d8535e5b2ae66eaa09f98b20e4ea7fa0dc93b666f199b4cad93a74a0a91857156c229961a264cf754565f03fcaea190694046921ac34fa9484c1f8f23f8e7139ac"}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r9, 0x0, 0x8000f28, 0x6) bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r1, @ANYBLOB="04e0e9962b5d321ae838da2df51ee9643d7df960ddee1e7945bbb5d653ee4908421ea93b7d9ab17f74fb081dde8953c51817ddc2bd14b12b13b86f89466a7c5106d2430cec5e7fbfad3d2cadedbce8819233699eda85f4e053a868bf901145775e0e8edd6f8546db31cf527d4050ef769c6b08d4990765913e42c08643b7e5edc8897b5d134a50c85c2ab976ed47122b4b002334ab6d53103312018102cd2b", @ANYBLOB="000000000000000004002400140012"], 0x38}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r11, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f00000003c0)=""/86, 0x56}, {&(0x7f0000001880)=""/4112, 0x1010}, {&(0x7f0000000000)=""/100, 0x64}, {&(0x7f00000005c0)=""/82, 0x52}, {&(0x7f0000000440)=""/62, 0x3e}, {&(0x7f0000000640)=""/118, 0x76}, {0x0}, {&(0x7f00000028c0)=""/4096, 0x1000}], 0x8}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x5}], 0x4, 0x2030, 0x0) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="40000000120003042dbd7000fbdbdf2500000400", @ANYRES32=0x0, @ANYBLOB="40600000800000000a00010000000000000000001400030062726964676530000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x2008004) 6.383243979s ago: executing program 4 (id=3267): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, 0x0, 0x20048410) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x4000800) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, 0x0, 0x0) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x10) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)='$\x00', 0x2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r4, 0x0, 0x20000000) 6.026237929s ago: executing program 1 (id=3269): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001200)={0x60000010}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000000d}) r4 = epoll_create1(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x20000000, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0xffffffff}, 0x50) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000300)={0x10000000}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000600)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRES16=r2], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x22d3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r6, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000014c0)='\t', 0x1}], 0x1, &(0x7f0000000000)=ANY=[], 0xa}}], 0x1, 0x4044805) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa862}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40d8}, 0x50) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000100)="85f840d02ebc758fcc4fd8982bff0f923718e16233461f9c1a3ce93cb2e3e1b5666c3cdc23b6d7dcd3cd8158f44bbca6be7cd16bf73922e6556885996caee7f42427b8b5711eb35ed2d4a912e47a61f0f28e38b0d0146f2bba48bd8c7445fd43c0fec375534fc2a97406d700bdb2c127e57a2f02358d8828d8275735a49122748215c82e601c626223a766832ac88c01ec4b", 0x92}], 0x1, &(0x7f0000000480)=[@ip_ttl={{0x14, 0x0, 0x2, 0xa2}}, @ip_retopts={{0x88, 0x0, 0x7, {[@cipso={0x86, 0x52, 0x3, [{0x7, 0x2}, {0x0, 0x3, "ce"}, {0x1, 0x12, "5ddb8941f77c67df9f007ec29270e53e"}, {0x6, 0xa, "960c0201b61a470d"}, {0x5, 0x12, "04405a9e4a8c44fbc5e8a4f44a640033"}, {0x0, 0x11, "a142710509a2960a77c618082722b7"}, {0x7, 0x8, "ff201e965852"}]}, @rr={0x7, 0x23, 0x5d, [@multicast1, @private=0xa010100, @empty, @local, @multicast1, @empty, @multicast2, @dev={0xac, 0x14, 0x14, 0x10}]}]}}}], 0xa0}}], 0x1, 0x4c080) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x3, &(0x7f00000027c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0x9, 0x3, 0xc4f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r8}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000340)=""/211, &(0x7f0000000080), &(0x7f0000000440), 0x3, r8}, 0x38) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x38, r9, 0x521, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x1c, 0x17, {0x8020, 0x32d, @l2={'eth', 0x3a, 'macvlan1\x00'}}}}}, 0x38}, 0x1, 0x0, 0x0, 0x20004081}, 0x24000100) socket(0x2, 0x80805, 0x0) 5.829616655s ago: executing program 1 (id=3271): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0xe9, 0x8, 0x2}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f00000007c0), &(0x7f00000000c0)=@udp=r1, 0x1}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x47, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x4]}]}, 0x6c}}, 0x0) socket$netlink(0x10, 0x3, 0x9) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x4e24, @private=0xa010101}], 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) socket(0xf, 0x5, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x62a01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000036005d082bfd700403dcdf25040000000800040002000000040005"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000080) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="08000800060005000000140000006f56342fcb9be982ff45050024006800000b2190"], 0x32) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000580)="140000001600f963d25a80648456dc921f6b718d", 0x14}], 0x1}, 0x804) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0xfffffffffffffe77, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000100010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x24004005}, 0x0) 5.697840038s ago: executing program 0 (id=3272): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r2], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="71050108030306f708fb230e90cee95ca31cd4f209819d08"], 0x105) 5.53504609s ago: executing program 1 (id=3273): socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x11, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x1, 0x7ff, 0x1}, {0x6, 0x0, 0x8, 0x6, 0x8, 0x401}, 0x40, 0xd, 0x8ef}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x40000) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_route(0x10, 0x3, 0x0) 5.493859926s ago: executing program 3 (id=3274): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x89}, 0x50) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0x42, 0x4, 0x311, 0xffffffff, 0x1d8, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {0xff}}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4}}, @common=@unspec=@limit={{0x48}, {0xfffffffa, 0xb, 0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1278]}, {0xffff, [0x5]}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x1, 0x2, 0x0, 0x5], 0x1, 0x4}, {0xffffffffffffffff, [0x7, 0x4, 0x4, 0x5], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) getsockopt$inet_opts(r1, 0x0, 0x16, &(0x7f0000000180)=""/171, &(0x7f0000000240)=0xab) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r0, 0x40406f06, &(0x7f0000000140)={0x33, 0x4, 0x7, 0x4}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) close(0x3) r2 = socket(0x8, 0x800, 0xdf5) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ac0100000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000003c0002802c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000044000f800800034000000006080002400000000108000340000000ce08000240000000030800034058696a8c0800024000000001080001400000000008000140000000040c000680080002000000000010000d80080001006401010004000380140018"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000000f030004000000080800030004000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) 5.457508569s ago: executing program 0 (id=3275): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000240000000000119078000000000000000000004e2000109078829cd70080000000a2f44db91315088c52510563d862c32f69ed6b7923674c09bd2b17455f5c6bc6dc6af7d8d4d35a1d1b7283c65b0000"], 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) pread64(r5, 0x0, 0x0, 0x202df) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r4}, 0x8) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0xe, 0x0, &(0x7f0000000100), &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffd}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f0000000440), &(0x7f0000000040)=@udp=r2}, 0x20) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) r8 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r9 = socket$inet_smc(0x2b, 0x1, 0x0) close(r9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f0000001d80)=[{{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000a40)=""/4096, 0x1000}], 0x1}, 0x7e}], 0x1, 0x40000007, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='highspeed', 0x9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 5.45596767s ago: executing program 4 (id=3276): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8feffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\b\x00\x00', &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="7c5331fc9356b5b1000600008100", 0x0, 0xd5a2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x8000}}, @func_proto]}}, 0x0, 0x3e, 0x0, 0x1, 0x3}, 0x28) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0xfff9, 0x20000000, 0x5, 0x50, 0x1000, 0x1}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000540)={0x0, @in6={{0xa, 0x4e24, 0x1, @mcast1, 0x1}}, 0x955, 0x80, 0x0, 0x3ff, 0xb3550aa4ba8783b6, 0x10001, 0xff}, 0x9c) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair(0x1e, 0x2, 0x10001, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000200", @ANYRES16=r4, @ANYBLOB="10006cbd7000feffffff1a0000000c00018008000100", @ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x44050) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000003000000010000000000000803000000000000000000000200000000010000000000000f02000000002e"], 0x0, 0x3f, 0x0, 0x1}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[], &(0x7f0000000f40)=""/4089, 0x3f, 0xff9, 0xa}, 0x28) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x822}, [@IFLA_MTU={0x8, 0x4, 0x5}, @IFLA_MTU={0x8, 0x4, 0x400005}, @IFLA_MASTER={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x20}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="c800b66cf7e6a58cd8e0e80c86470ec8c3c0d6b06acd299df554ff6d4c46a5e948e458d6291d3aab88af945442040056972d9d82b584db7aed7075fcb4850257c7cf202122802afec235970a469a73ea4193e861993d0d14c39e25a81de895927d3a86ba369ed1c66b615488829a7502aaed5d20c90800753013f6a46fd587a882589bea59703c5619a8697ee9661140a295a65ede871662b0a5713e89f3bfff54a01fbb1a641056b8f7d98a65a17dedcf11ffbb8c93ed0275431beebd524767543f3a0083992c9406001106a201fa8fb4c2abb7d22d810aa4101e5e6100", 0xde}, {&(0x7f00000029c0)="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", 0xb45}], 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) 4.949262445s ago: executing program 2 (id=3277): socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x1, 0x7ff, 0x1}, {0x6, 0x0, 0x8, 0x6, 0x8, 0x401}, 0x40, 0xd, 0x8ef}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x40000) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4.831520375s ago: executing program 1 (id=3278): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c00"], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x4040090) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) setsockopt$MRT6_DEL_MIF(r6, 0x29, 0xcb, &(0x7f00000001c0)={0xffffffffffffffff, 0x1, 0x4, 0x0, 0xfffffffc}, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}, @IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xfffffffc}]}}}]}, 0x44}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0x1}, 0x4) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r9) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x6, 0x0, 0xc, 0x8015, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5, 0xc}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r8, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000780)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f00000007c0)=[0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x65, &(0x7f0000000840)=[{}, {}], 0x10, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0xa9, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a80), 0x4) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a0011802f"], 0x40}, 0x1, 0x0, 0x0, 0x2004e884}, 0x0) 4.740825631s ago: executing program 3 (id=3279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000406050000000000000000000a0000000500010007000000176b41de4e99a3daee0bee36ad0255130d4a8f137a9486c12bfbebf9aee289dbd2c1f95b02d696056d"], 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), 0xffffffffffffffff) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000010000000000000000000000000000000000b318f8760ee649734de9d2ac8f31bfa5776e9520a039ccbe081faab0cbf3995e390f2b47083c55f6233fe23bd78c068889e1c7afb9b3ed3c24ee22f4e9955d3138e3bcc3d7dd553a08b63ad05fde3acbe96777b039c5"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000058000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000409500000000000000b7020000000000007b9af8ff00000000b5090000010000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018090000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007ea000000000000056080000000000008500000081000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x4e22, @local}, 0x83, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='syzkaller0\x00', 0x9, 0x9, 0x4}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x800) setsockopt$sock_int(r8, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000700)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000640)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmsg$OSF_MSG_ADD(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x175c}, 0x1, 0x0, 0x0, 0x4044084}, 0x1dc8b08251aa3334) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000025c0)=@bpf_tracing={0x1a, 0x21, &(0x7f0000000a40)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x8}, @exit, @tail_call, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffffff}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}], &(0x7f0000000a00)='GPL\x00', 0xffff, 0x1000, &(0x7f0000001500)=""/4096, 0x41000, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000002500)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000002540)={0x5, 0x3, 0x0, 0xc}, 0x10, 0x595b, r2, 0x0, &(0x7f0000002580)=[r1], 0x0, 0x10, 0xfffffff1}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4048014) 4.669857368s ago: executing program 2 (id=3280): r0 = socket$inet(0x2, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) close(r1) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000900)}, 0x20) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r5 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80000) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4, r0}, 0x18) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "e3ffffff", "4008000000008700"}, 0x38) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000000), 0x4) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e26, @multicast2}, {0x20000010304, @local}, 0x12, {0x2, 0x4e24, @multicast1}, 'lo\x00'}) syz_emit_ethernet(0xff76, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x27, 0x2c, 0x3fc, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) 4.486256508s ago: executing program 0 (id=3281): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x6, 0xd21, 0x101, 0x6, 0x5, 0xbd, 0x100, 0x4}}}}]}, 0x58}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@newtfilter={0x74, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x1e, 0x1, {0x9, 0x6, 0x9, 0xfffffffc, 0x4, {0x5, 0x2, 0xff69, 0x1, 0x7, 0xffffffff}, {0x1, 0x1, 0xb5, 0x0, 0x9, 0x1}, 0x3, 0x80, 0x6f5}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040010}, 0x1c090) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r8, @ANYBLOB="1400128009000100766574680000000004000280"], 0x3c}}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) unshare(0x2c060000) close(0x4) syz_open_procfs$namespace(0x0, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) write$tun(r11, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x45) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008004) socket$netlink(0x10, 0x3, 0x8000000004) 4.427031393s ago: executing program 4 (id=3282): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0x2}], 0x1, 0x0, 0x0, 0x800300}, 0x20004801) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x50}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x0, 0x1, 0xffffffff, 0xfffffffe, 0x1}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0xfffffffffffff813, 0xfffffffc, 0x7, 0x4, 0x55}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x11}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d40)=@newtfilter={0x43c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40c, 0x2, [@TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x3, 0x7f, 0x1000, 0x80, 0xfffffff7, 0x3, 0x401, 0x1, 0x931, 0x6, 0xe, 0x5, 0x7fff, 0x4, 0x3, 0x10, 0x3, 0xf, 0x40000008, 0x4, 0x3, 0xc, 0x5, 0x9, 0x8001, 0x8, 0x658, 0xf3, 0x4, 0x3, 0x4, 0x8, 0x2, 0xc000000, 0x3, 0x9, 0x8, 0x200, 0x7, 0x249d, 0x9db, 0xfffffe01, 0x9, 0xfffffd49, 0x5, 0x90000, 0xffff8001, 0x800, 0xffffff5e, 0x7fffffff, 0xb5d, 0x5, 0x7ff, 0x9, 0x6, 0x3, 0x7, 0x9, 0x9, 0xfffffff9, 0xff, 0xceb, 0x7, 0xa6, 0x8, 0x5, 0xffffffff, 0x7, 0x80000, 0xfffffff8, 0x9, 0x0, 0x9, 0x1, 0x200, 0xfe1, 0xd1, 0x3, 0x2, 0x10, 0x0, 0x1, 0xfffffffd, 0x2, 0x7, 0x951, 0x19c, 0x38de, 0x6, 0x10001, 0x8, 0x8, 0x3, 0x8, 0x3, 0x9, 0xa60, 0x0, 0x100, 0x2, 0x0, 0x2c, 0x80000000, 0x3ff, 0x2, 0x5, 0x10000, 0x6, 0x4, 0xffffffff, 0x1, 0x1, 0xf915, 0x6, 0x2, 0x80, 0x3ff, 0x9, 0x3, 0x10000, 0x7f, 0x7, 0x81, 0x2, 0x4, 0x4, 0x8000, 0x2, 0xfff, 0x0, 0xf, 0x4, 0x90c, 0x1, 0x4, 0x6, 0x6, 0xc7, 0x5, 0x9, 0x3650, 0x2, 0x6, 0xa27d, 0x686e8f84, 0x3ff, 0x7fffffff, 0x6, 0x7, 0x3, 0x4, 0x37735ae5, 0x7fff, 0x6, 0x7, 0x9, 0xd6, 0x5, 0x401, 0x9, 0x7, 0x1, 0x4, 0x4, 0x5, 0x8000, 0x2, 0x1, 0x6, 0x0, 0x80000001, 0x80, 0x2, 0xe, 0xfffffffe, 0x7, 0x9, 0x4, 0xf59, 0x8, 0x100, 0x6, 0x0, 0x3, 0x0, 0x1, 0x6, 0x8, 0xfff, 0x1, 0x6, 0xd0ed, 0x6, 0x1, 0xf24c, 0x1000, 0x9, 0x0, 0x1, 0x7, 0x6, 0x7f, 0x2, 0x8001, 0x3, 0x800, 0xde, 0x2, 0x3ff, 0x9, 0x3, 0x5, 0x3, 0x1d68, 0x8, 0x16, 0x5, 0x400, 0xc0f, 0x5, 0x400, 0x9, 0x7, 0x1, 0x9, 0xf, 0x8, 0x1, 0x421, 0xa, 0x7b, 0x73, 0x4, 0x7, 0x1, 0xf6e7, 0x5, 0x6, 0x5, 0x1bf3, 0xb, 0xac9, 0x401, 0x6, 0x6c, 0x1, 0x3, 0xab2, 0x1, 0xffff, 0x4, 0x296, 0x5, 0x3ff, 0x6]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x20040010}, 0x1c090) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r9}, 0x14) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xd}, r9}, 0x14) sendmmsg$inet6(r7, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000001de9cb53ed00000000000000", @ANYRES32=r9], 0x28}}], 0x1, 0x0) getpeername$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000001d00070f000000000000080007000000", @ANYRES32=r12, @ANYBLOB="800072"], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x20000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x95, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x73, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x1fc, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4010}, 0x10000001) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x101) r14 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r14, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r15, &(0x7f0000000300)={0xa, 0x4e23, 0x3, @loopback, 0x5}, 0x1c) sendto$inet6(r15, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r15, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x300, 0x0, 0x54, 0x6}, 0x9c) 4.424967609s ago: executing program 2 (id=3283): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x3}, {0x10040002, 0x0, 0x7, 0x5}], 0x10, 0x80}, 0x94) close(r3) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) close(r4) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608304c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r8 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f00000001c0)={0x5, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r9, &(0x7f0000000000)="436e91", 0x0}, 0x20) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x10, &(0x7f0000000040)=ANY=[@ANYRES8=r8], 0x0, 0x40, 0xbe, &(0x7f0000000240)=""/190, 0x41000, 0x54, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x0, 0x8, 0xff, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000380), &(0x7f00000003c0)=[{0x2, 0x3, 0x4, 0x1}, {0x1, 0x1, 0xe, 0x7}, {0x0, 0x1, 0x80000001, 0xb}, {0x1, 0x3, 0xa, 0xc8acadbc0b5dcbd4}], 0x10, 0x8}, 0x94) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r10, 0x8937, 0x0) setsockopt$MRT_DEL_VIF(r8, 0x0, 0xcb, &(0x7f00000004c0)={0x1, 0x4, 0xff, 0xffff, @vifc_lcl_addr=@loopback, @private=0xa010101}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25ffdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x4001}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x1500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r7, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x240080d8}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 4.320687027s ago: executing program 3 (id=3284): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003340)=@newtfilter={0x488, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10, 0x10000, 0x80000001, 0x3, 0x3, 0x80000000, 0x5, 0xbf, 0x4, 0xf4, 0xffffffff, 0x7, 0x1, 0x81, 0x80000000, 0x81, 0x6, 0x0, 0x7, 0x9cc7, 0xfff, 0xff, 0x9, 0x9, 0x7f, 0x9, 0x3, 0x7, 0x4, 0x9, 0x0, 0x2, 0x1, 0x6, 0xffffff09, 0x4, 0x3, 0x8, 0x0, 0x1, 0xd, 0x40, 0x0, 0x0, 0x7fffffff, 0x9, 0x101, 0x107, 0x263, 0x98, 0x3, 0x80000001, 0x6, 0x4, 0xfffffffa, 0x5, 0x0, 0x9, 0x4, 0x5, 0x8, 0x0, 0x8, 0xfffffe01, 0x7d4, 0x0, 0x1389, 0x53b7, 0xd18, 0x6, 0x7, 0x56, 0x645ec805, 0x4, 0x3, 0x3, 0x5007, 0x3, 0x2, 0x8a92, 0x4, 0x7, 0x4, 0xbbb, 0x0, 0x3, 0x9, 0x271, 0xffffe819, 0xa, 0xe8, 0x3, 0x200, 0x8001, 0x3, 0x87d7, 0x9, 0x851, 0x2, 0x8, 0x3, 0x7, 0x8, 0x6f47, 0x3, 0x5c90, 0x4, 0x1ff, 0x0, 0xf02, 0x1e, 0x57e7, 0x5adaaf8c, 0x3f8, 0x4, 0x79, 0x7, 0x5, 0x4, 0x2, 0x2, 0x1, 0xa, 0x3ff, 0x85f, 0x8, 0x2, 0x3, 0x2, 0x25a, 0x4, 0x3, 0x0, 0xfffffff8, 0x8001, 0xffff6a70, 0x6, 0x5, 0x2, 0x8, 0x3, 0x5, 0x5, 0x1, 0xffffffc0, 0x9, 0x3ff, 0x5, 0x9, 0x7, 0x7, 0xf, 0xfffffff7, 0x8, 0x7fff, 0x0, 0x2e7, 0x3ff, 0x8, 0x450, 0x7, 0x7fffffff, 0x5, 0x5, 0x5, 0x2, 0x1, 0x1000, 0x5, 0x3, 0x4, 0x65b38436, 0x2, 0x0, 0x0, 0x1, 0x80, 0x6670, 0x5, 0x16d, 0x2, 0x4, 0x9, 0x200, 0xc, 0x9, 0x13f9, 0x9, 0x0, 0x5, 0x7, 0x45, 0x80000001, 0xb, 0x3, 0x2, 0x0, 0x6, 0x8000, 0x4, 0x3, 0x6, 0x2, 0x7, 0xa262, 0x1, 0xc, 0x6, 0x7, 0x400, 0x2, 0x401, 0x8, 0x205, 0xa, 0x1000, 0x1, 0x58ba, 0x5, 0x42bc, 0x5, 0x120, 0x3, 0x5, 0x3, 0x6f1da0e, 0x80000001, 0x2, 0x8, 0x4, 0x696, 0x7, 0x8, 0x2, 0x1e, 0x3, 0x0, 0x8, 0x2, 0x8f0d, 0x4, 0xa, 0xfffffff6, 0xfffffff7, 0x6, 0x6, 0x1, 0x80, 0x5, 0x0, 0x6, 0x8e, 0xb5d, 0x9, 0xfffffd4c, 0x8000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc2, 0x6, 0x859, 0xaedb, 0x7, {0x7, 0x0, 0xd, 0x8, 0x4, 0xfa6}, {0x8, 0x0, 0x7ff, 0xf95b, 0x2, 0x280000}, 0x10001, 0xfffffffd, 0x6}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) 3.978529209s ago: executing program 1 (id=3285): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000022c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {0xfff4, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xb, 0x0, 0x6, 0x0, 0x7, 0x10001}, {0x9, 0x1, 0x3, 0x4, 0x90, 0x7ff}, 0x800, 0x7fffffff, 0x4ef}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xd6dffbde74885196}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x240040a4}, 0x200040d0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05", 0x1, 0x20000005, &(0x7f0000000140)={0x11, 0x7, r6, 0x1, 0x0, 0x6, @remote}, 0x14) 3.918525537s ago: executing program 3 (id=3286): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x4c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x3}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000040)={0x18, 0x0, {0x4, @broadcast, 'batadv_slave_1\x00'}}, 0x1e) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a000000040000000a0000008000000040010000", @ANYRES32, @ANYBLOB="307fc53f6d218c049700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x4}, 0x20) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x14000008}, 0x20000000) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$unix(r9, &(0x7f00000020c0)=[{{&(0x7f00000050c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="24000000000000001701000002"], 0x28, 0x2000c000}}], 0x2, 0x88) r10 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r10, &(0x7f0000000080)={0x18, 0x0, {0xfffd, @multicast, 'veth0_virt_wifi\x00'}}, 0x1e) r11 = socket(0x1e, 0x1, 0x0) ioctl$sock_ifreq(r11, 0x8991, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0x0, 0x0, 0x9}]}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x14, 0x0, 0x1, 0x70bd27, 0x0, {0x54}}, 0x14}}, 0xc084) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x2c, r12, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20001000) 3.378891108s ago: executing program 0 (id=3287): setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000640)={@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, {0x0}, 0x0, 0x59}, 0xa0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r0, 0x215eb000) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x90000005}) epoll_pwait(r4, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) socket$kcm(0x11, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f00000003c0), 0x1bf1, r5}, 0x38) connect$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) accept4(r1, &(0x7f0000000100)=@nfc, &(0x7f0000000180)=0x80, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1, 0x5, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x50}}, 0x0) 3.298251785s ago: executing program 2 (id=3288): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003340)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10, 0x10000, 0x80000001, 0x3, 0x3, 0x80000000, 0x5, 0xbf, 0x4, 0xf4, 0xffffffff, 0x7, 0x1, 0x81, 0x80000000, 0x81, 0x6, 0x0, 0x7, 0x9cc7, 0xfff, 0xff, 0x9, 0x9, 0x7f, 0x9, 0x3, 0x7, 0x4, 0x9, 0x0, 0x2, 0x1, 0x6, 0xffffff09, 0x4, 0x3, 0x8, 0x0, 0x1, 0xd, 0x40, 0x0, 0x0, 0x7fffffff, 0x9, 0x101, 0x107, 0x263, 0x98, 0x3, 0x80000001, 0x6, 0x4, 0xfffffffa, 0x5, 0x0, 0x9, 0x4, 0x5, 0x8, 0x0, 0x8, 0xfffffe01, 0x7d4, 0x0, 0x1389, 0x53b7, 0xd18, 0x6, 0x7, 0x56, 0x645ec805, 0x4, 0x3, 0x3, 0x5007, 0x3, 0x2, 0x8a92, 0x4, 0x7, 0x4, 0xbbb, 0x0, 0x3, 0x9, 0x271, 0xffffe819, 0xa, 0xe8, 0x3, 0x200, 0x8001, 0x3, 0x87d7, 0x9, 0x851, 0x2, 0x8, 0x3, 0x7, 0x8, 0x6f47, 0x3, 0x5c90, 0x4, 0x1ff, 0x0, 0xf02, 0x1e, 0x57e7, 0x5adaaf8c, 0x3f8, 0x4, 0x79, 0x7, 0x5, 0x4, 0x2, 0x2, 0x1, 0xa, 0x3ff, 0x85f, 0x8, 0x2, 0x3, 0x2, 0x25a, 0x4, 0x3, 0x0, 0xfffffff8, 0x8001, 0xffff6a70, 0x6, 0x5, 0x2, 0x8, 0x3, 0x5, 0x5, 0x1, 0xffffffc0, 0x9, 0x3ff, 0x5, 0x9, 0x7, 0x7, 0xf, 0xfffffff7, 0x8, 0x7fff, 0x0, 0x2e7, 0x3ff, 0x8, 0x450, 0x7, 0x7fffffff, 0x5, 0x5, 0x5, 0x2, 0x1, 0x1000, 0x5, 0x3, 0x4, 0x65b38436, 0x2, 0x0, 0x0, 0x1, 0x80, 0x6670, 0x5, 0x16d, 0x2, 0x4, 0x9, 0x200, 0xc, 0x9, 0x13f9, 0x9, 0x0, 0x5, 0x7, 0x45, 0x80000001, 0xb, 0x3, 0x2, 0x0, 0x6, 0x8000, 0x4, 0x3, 0x6, 0x2, 0x7, 0xa262, 0x1, 0xc, 0x6, 0x7, 0x400, 0x2, 0x401, 0x8, 0x205, 0xa, 0x1000, 0x1, 0x58ba, 0x5, 0x42bc, 0x5, 0x120, 0x3, 0x5, 0x3, 0x6f1da0e, 0x80000001, 0x2, 0x8, 0x4, 0x696, 0x7, 0x8, 0x2, 0x1e, 0x3, 0x0, 0x8, 0x2, 0x8f0d, 0x4, 0xa, 0xfffffff6, 0xfffffff7, 0x6, 0x6, 0x1, 0x80, 0x5, 0x0, 0x6, 0x8e, 0xb5d, 0x9, 0xfffffd4c, 0x8000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc2, 0x6, 0x859, 0xaedb, 0x7, {0x7, 0x0, 0xd, 0x8, 0x4, 0xfa6}, {0x8, 0x0, 0x7ff, 0xf95b, 0x2, 0x280000}, 0x10001, 0xfffffffd, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x0, 0xfffffffe, 0x10, 0x8, 0x0, 0x9, 0x0, 0x7, 0x8, 0x4d8b, 0x6, 0x40, 0x1, 0x0, 0x81, 0x0, 0xf, 0x0, 0x0, 0x5, 0x8, 0x8000, 0x4, 0x9, 0x9, 0x81, 0xa00000, 0xe, 0x4, 0x80000000, 0x6, 0xfffffff9, 0x3, 0x2, 0x7, 0x7, 0x1, 0x14f, 0x8, 0x200, 0x7, 0x5, 0x69, 0x84, 0x3ff, 0x0, 0xf0e7, 0x7, 0x487, 0x4, 0x8, 0x7fffffff, 0x3ff, 0x7fffffff, 0x0, 0xbd, 0x6, 0x0, 0xa, 0x10001, 0x2, 0x43, 0x1, 0x7, 0xffffff00, 0x6, 0x333f, 0x7, 0xc8a, 0x6, 0x1, 0x10, 0x7f, 0x7, 0x8, 0x100, 0x8001, 0x8, 0x4, 0x9, 0x81, 0x5, 0x7, 0x4, 0x0, 0x7f, 0x9, 0x3, 0x4, 0x4, 0x2, 0x9, 0x2, 0xfffffff8, 0x4, 0x4e, 0x3, 0x4, 0x1ff, 0xc0000000, 0x4, 0x5b3c, 0xfffffff7, 0x6d, 0x8001, 0x10000, 0x1, 0x2c29, 0x7, 0x4, 0x0, 0x5, 0x0, 0xfffffffb, 0xea, 0x0, 0x9, 0x40, 0xfffffffa, 0xffffff00, 0x1, 0x8001, 0xda, 0x7f, 0x3, 0x8566, 0x2f, 0x9, 0xfffffff9, 0xb, 0xa97e, 0x8, 0x9, 0x82b36, 0x4, 0x4, 0x6, 0x2, 0x7f, 0x5, 0x1ff, 0x7f, 0x101, 0xfffffffa, 0xd, 0x6, 0x0, 0xf, 0x9, 0xb, 0x7f, 0x1, 0x10, 0x0, 0x5, 0x1038, 0x9, 0x5, 0xf0, 0x200, 0x0, 0x6, 0x80000000, 0x5, 0xffffffff, 0x6, 0x2, 0x3ff, 0x3, 0x7ff, 0x6, 0x1, 0xd, 0x3, 0x632, 0x2, 0xc4, 0xffff, 0x8, 0x0, 0x9, 0x3, 0x8, 0x5, 0x7, 0x3, 0x10001, 0xd, 0xd, 0x7, 0x7, 0xf2, 0x5, 0x600000, 0x7, 0x4, 0xfffffff7, 0x1, 0x3, 0x33fbb166, 0x9, 0x3, 0x4, 0x8, 0x4, 0xc, 0x7fffffff, 0x400, 0x9, 0x8, 0x1, 0x2e5c, 0x5, 0x7, 0x5, 0x1, 0x7fff, 0x80000001, 0x8c, 0xffffffc0, 0x80000000, 0x7, 0x7d3, 0xfff0, 0x1, 0x8, 0xb, 0x7ff, 0x4, 0x0, 0x6, 0x4, 0x5, 0x6, 0xd143, 0x4, 0x3a6, 0x7, 0x6, 0x7, 0x1000, 0x1, 0x4, 0x2b, 0x7, 0xa, 0x6, 0xdff, 0x30d, 0x1003, 0x1, 0x3ff, 0x7ff, 0xfffffffd, 0x7]}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x204001, 0x0) close(r9) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) 3.233626085s ago: executing program 3 (id=3289): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x89}, 0x50) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0x42, 0x4, 0x311, 0xffffffff, 0x1d8, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {0xff}}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4}}, @common=@unspec=@limit={{0x48}, {0xfffffffa, 0xb, 0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1278]}, {0xffff, [0x5]}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x1, 0x2, 0x0, 0x5], 0x1, 0x4}, {0xffffffffffffffff, [0x7, 0x4, 0x4, 0x5], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) getsockopt$inet_opts(r1, 0x0, 0x16, &(0x7f0000000180)=""/171, &(0x7f0000000240)=0xab) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r0, 0x40406f06, &(0x7f0000000140)={0x33, 0x4, 0x7, 0x4}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) close(0x3) r2 = socket(0x8, 0x800, 0xdf5) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ac0100000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000003c0002802c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000044000f800800034000000006080002400000000108000340000000ce08000240000000030800034058696a8c0800024000000001080001400000000008000140000000040c000680080002000000000010000d80080001006401010004000380140018"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000000f030004000000080800030004000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) 3.164482651s ago: executing program 4 (id=3290): sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x34, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40005}, 0x40) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200330000002f1eafbcf706e1050000008864000f1102ee16005782973d2bd4b8114a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x31, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0xa}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x20}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) accept4(r2, 0x0, 0x0, 0x800) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0f00000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0200000001"], 0x48) 2.311106422s ago: executing program 0 (id=3291): socket$kcm(0x11, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x1, 0x7ff, 0x1}, {0x6, 0x0, 0x8, 0x6, 0x8, 0x401}, 0x40, 0xd, 0x8ef}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x40000) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_route(0x10, 0x3, 0x0) 101.866197ms ago: executing program 4 (id=3292): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, 0x0, 0x20048410) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x4000800) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, 0x0, 0x0) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x10) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)='$\x00', 0x2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r4, 0x0, 0x20000000) 101.470722ms ago: executing program 2 (id=3293): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r2], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="71050108030306f708fb230e90cee95ca31cd4f209819d08"], 0x105) 71.498539ms ago: executing program 1 (id=3294): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="71050108030306f708fb230e90cee95ca31cd4f209819d08"], 0x105) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000) socket$rds(0x15, 0x5, 0x0) socket$inet(0x2, 0xa, 0xfffff7fd) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) recvmmsg(r5, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000540)=""/64, 0x40}], 0x1}, 0x6}], 0x1, 0x20, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 0s ago: executing program 0 (id=3295): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r2) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'geneve0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaabb0180c200000e88a800008100007eab91b32dd80cffd20adf8cf828782802010045fc006953d778f6c9a77f00"], 0x32) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0x8}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r7, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r7, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) recvmmsg$unix(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/174, 0xae}], 0x1}}], 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="c927d9ceda7045612153a6e4796c286aaed9cb167cdfe6505018"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x24000004) recvmmsg(r1, &(0x7f0000008280)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/55, 0x37}], 0x1}, 0x8}], 0x1, 0x40000180, 0x0) preadv(r4, &(0x7f0000003c00)=[{&(0x7f0000001480)=""/255, 0xff}, {&(0x7f00000000c0)=""/1, 0x1}, {0x0}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/4096, 0x1000}], 0x5, 0x23a1, 0x1) close(r2) kernel console output (not intermixed with test programs): [ 439.093257][T14433] bond0: left promiscuous mode [ 439.111793][T14433] bridge6: left promiscuous mode [ 439.121836][T14433] macvtap1: left allmulticast mode [ 439.127317][T14433] macvtap2: left allmulticast mode [ 439.149529][T14433] batman_adv: batadv0: Interface deactivated: gretap3 [ 439.177278][T14429] tipc: Enabled bearer , priority 0 [ 439.201594][ T5908] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.218253][ T5908] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.235288][ T5908] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.246219][ T5908] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.270642][T14446] tipc: Resetting bearer [ 439.308814][T14428] tipc: Resetting bearer [ 439.334862][T14428] tipc: Disabling bearer [ 439.617173][T14451] validate_nla: 2 callbacks suppressed [ 439.617265][T14451] netlink: 'syz.4.2375': attribute type 7 has an invalid length. [ 439.631004][T14451] netlink: 'syz.4.2375': attribute type 3 has an invalid length. [ 439.638864][T14451] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2375'. [ 439.662058][T14451] block nbd4: not configured, cannot reconfigure [ 441.604293][T14454] syzkaller0: entered promiscuous mode [ 441.609964][T14454] syzkaller0: entered allmulticast mode [ 441.619940][T14472] team0: Device vxcan1 is of different type [ 441.862566][T14484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2381'. [ 443.016806][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 443.616801][T14481] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2381'. [ 443.652905][T14484] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 443.689585][T14484] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 443.844998][T14490] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2384'. [ 444.536099][T14501] syzkaller0: entered promiscuous mode [ 444.547445][T14501] syzkaller0: entered allmulticast mode [ 444.814098][T14509] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2390'. [ 444.919330][T14518] team0: Device vxcan1 is of different type [ 444.935673][T14521] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2394'. [ 444.976540][T14513] batman_adv: batadv0: Adding interface: gretap3 [ 445.011982][T14513] batman_adv: batadv0: The MTU of interface gretap3 is too small (1242) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1312 would solve the problem. [ 445.083971][T14513] batman_adv: batadv0: Interface activated: gretap3 [ 445.381085][T14531] siw: device registration error -23 [ 445.412123][T14538] syzkaller0: entered promiscuous mode [ 445.417675][T14538] syzkaller0: entered allmulticast mode [ 446.860618][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 447.984079][T14554] bond0: (slave team0): Releasing backup interface [ 448.001026][T14554] bridge_slave_1: left allmulticast mode [ 448.006678][T14554] bridge_slave_1: left promiscuous mode [ 448.012804][T14554] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.027804][T14554] bond7: (slave veth0_to_bond): Releasing active interface [ 448.059939][T14554] bond0: (slave bond_slave_0): Releasing backup interface [ 448.086738][T14554] bond0: (slave bond_slave_1): Releasing backup interface [ 448.114950][T14554] team0: Port device team_slave_0 removed [ 448.136992][T14554] team0: Port device team_slave_1 removed [ 448.149222][T14554] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.157101][T14554] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.167440][ T5911] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 448.181343][T14554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.188997][T14554] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.201085][T14554] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 448.251108][T14556] team0: Port device xfrm0 added [ 448.372231][T14566] team0: Device vxcan1 is of different type [ 448.465205][T14592] syzkaller0: entered promiscuous mode [ 448.513956][T14592] syzkaller0: entered allmulticast mode [ 448.541557][T14595] tipc: Enabled bearer , priority 0 [ 448.571055][T14598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2411'. [ 448.591106][T14598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2411'. [ 448.612214][T14598] netlink: 'syz.3.2411': attribute type 6 has an invalid length. [ 448.625270][T14598] netlink: 'syz.3.2411': attribute type 5 has an invalid length. [ 448.631355][T14592] tipc: Resetting bearer [ 448.656312][T14603] syzkaller0: entered promiscuous mode [ 448.670575][T14603] syzkaller0: entered allmulticast mode [ 448.683450][T14591] tipc: Resetting bearer [ 448.731500][T14591] tipc: Disabling bearer [ 448.844312][T14609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2413'. [ 448.967849][T14614] syzkaller0: entered promiscuous mode [ 448.973584][T14614] syzkaller0: entered allmulticast mode [ 449.055281][T14618] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2416'. [ 449.349235][T14625] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 449.381030][T14625] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 449.604144][T14639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2424'. [ 449.621799][ T5895] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 449.641057][T14639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2424'. [ 449.665050][T14639] netlink: 'syz.3.2424': attribute type 6 has an invalid length. [ 449.687627][T14639] netlink: 'syz.3.2424': attribute type 5 has an invalid length. [ 449.949413][T14646] syzkaller0: entered promiscuous mode [ 449.960660][T14646] syzkaller0: entered allmulticast mode [ 449.973678][T14650] syzkaller0: entered promiscuous mode [ 449.984692][T14650] syzkaller0: entered allmulticast mode [ 451.354499][T14673] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2431'. [ 451.642729][T14696] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2436'. [ 451.664265][T14696] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2436'. [ 451.686749][T14698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2438'. [ 451.694387][T14696] netlink: 31 bytes leftover after parsing attributes in process `syz.4.2436'. [ 451.700935][T14698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2438'. [ 451.723186][T14698] netlink: 'syz.1.2438': attribute type 6 has an invalid length. [ 451.723738][T14696] netlink: 'syz.4.2436': attribute type 3 has an invalid length. [ 451.740005][T14698] netlink: 'syz.1.2438': attribute type 5 has an invalid length. [ 451.754397][T14696] netlink: 'syz.4.2436': attribute type 2 has an invalid length. [ 451.769943][T14696] netlink: 'syz.4.2436': attribute type 2 has an invalid length. [ 451.827284][T14655] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 452.347667][T14710] netlink: 'syz.0.2443': attribute type 30 has an invalid length. [ 453.232234][T14711] ip6tnl2: left allmulticast mode [ 453.247476][T14711] ip6gre1: left promiscuous mode [ 453.257255][T14711] ip6gre1: left allmulticast mode [ 453.284616][T14710] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 453.287211][T14713] syzkaller0: entered promiscuous mode [ 453.311582][T14713] syzkaller0: entered allmulticast mode [ 453.703906][T14742] tipc: Enabled bearer , priority 0 [ 453.967982][T14742] syzkaller0: entered promiscuous mode [ 453.986533][T14742] syzkaller0: entered allmulticast mode [ 454.006945][T14742] tipc: Resetting bearer [ 454.230247][T14740] tipc: Resetting bearer [ 457.217363][T14740] tipc: Disabling bearer [ 457.315366][T14794] bridge_slave_0: left allmulticast mode [ 457.331824][T14794] bridge_slave_0: left promiscuous mode [ 457.345526][T14794] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.373022][T14794] bridge_slave_1: left allmulticast mode [ 457.385872][T14794] bridge_slave_1: left promiscuous mode [ 457.400103][T14794] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.456244][T14805] netlink: 'syz.0.2458': attribute type 1 has an invalid length. [ 457.456547][T14794] bond0: (slave bond_slave_0): Releasing backup interface [ 457.480845][T14794] bond0: (slave bond_slave_1): Releasing backup interface [ 457.503863][T14794] team0: Port device team_slave_0 removed [ 457.514474][T14794] team0: Port device team_slave_1 removed [ 457.528743][T14794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.537233][T14794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.545128][T14794] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 457.567658][T14795] team0: Device xfrm0 is of different type [ 457.689280][T14805] 8021q: adding VLAN 0 to HW filter on device bond5 [ 457.763015][T14810] bond5: (slave geneve3): making interface the new active one [ 457.798303][T14810] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 457.858358][T14825] __nla_validate_parse: 6 callbacks suppressed [ 457.858396][T14825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2463'. [ 457.919663][T14825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2463'. [ 457.949294][T14809] syzkaller0: entered promiscuous mode [ 457.956699][T14809] syzkaller0: entered allmulticast mode [ 457.964208][ T76] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.976508][ T76] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.996651][ T76] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.020540][ T76] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.878515][T14840] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 460.887060][T14850] gretap2: entered allmulticast mode [ 461.461400][T14912] syzkaller0: entered promiscuous mode [ 461.466940][T14912] syzkaller0: entered allmulticast mode [ 461.547963][T14879] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 461.558111][T14911] netlink: 'syz.2.2479': attribute type 2 has an invalid length. [ 461.566261][T14911] netlink: 'syz.2.2479': attribute type 2 has an invalid length. [ 461.579287][T14914] netlink: 'syz.2.2479': attribute type 4 has an invalid length. [ 461.587514][T14914] netlink: 'syz.2.2479': attribute type 8 has an invalid length. [ 461.595612][T14914] netlink: 212 bytes leftover after parsing attributes in process `syz.2.2479'. [ 461.641552][T14911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2479'. [ 461.801294][T14917] syzkaller0: entered promiscuous mode [ 461.821349][T14917] syzkaller0: entered allmulticast mode [ 461.844370][T14921] netlink: 'syz.1.2482': attribute type 13 has an invalid length. [ 461.844617][T14917] tipc: Enabled bearer , priority 0 [ 461.938954][T14917] tipc: Resetting bearer [ 461.949737][T14923] syzkaller0: entered promiscuous mode [ 461.956052][T14923] syzkaller0: entered allmulticast mode [ 461.963197][T14921] tipc: Enabled bearer , priority 0 [ 461.970769][T14916] tipc: Resetting bearer [ 461.986955][T14916] tipc: Disabling bearer [ 461.997856][T14926] syzkaller0: entered promiscuous mode [ 462.003442][T14926] syzkaller0: entered allmulticast mode [ 462.012225][T14921] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 462.026736][T14921] syzkaller0: entered promiscuous mode [ 462.033123][T14921] syzkaller0: entered allmulticast mode [ 462.039113][T14924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2482'. [ 462.128558][T14926] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2484'. [ 462.149717][T14921] tipc: Resetting bearer [ 462.170869][T14920] tipc: Resetting bearer [ 462.195988][T14920] tipc: Disabling bearer [ 462.246996][T14934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2487'. [ 462.434257][T14934] netlink: 'syz.2.2487': attribute type 5 has an invalid length. [ 462.450738][T14934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2487'. [ 462.524429][T14938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.548275][T14938] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.598696][T14938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.666302][T14938] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 462.679636][T14938] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 462.720201][T14938] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 462.731096][T14938] veth1_vlan: left promiscuous mode [ 462.737735][T14938] veth0_vlan: left promiscuous mode [ 462.745309][T14938] veth0_vlan: entered promiscuous mode [ 462.754172][T14938] veth1_vlan: entered promiscuous mode [ 462.767487][T14938] veth1_macvtap: left promiscuous mode [ 462.781824][T14938] veth0_macvtap: left promiscuous mode [ 462.791522][T14938] veth0_macvtap: entered promiscuous mode [ 462.807893][T14938] veth1_macvtap: entered promiscuous mode [ 462.832212][T14938] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 462.845540][T14938] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 462.854349][T14938] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 462.864374][T14938] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 462.883227][T14938] batman_adv: batadv0: Interface activated: gretap1 [ 462.896158][T14938] 8021q: adding VLAN 0 to HW filter on device bond1 [ 462.959754][T14938] 8021q: adding VLAN 0 to HW filter on device bond2 [ 462.972605][T14938] 8021q: adding VLAN 0 to HW filter on device bond3 [ 462.981344][T14938] 8021q: adding VLAN 0 to HW filter on device bond4 [ 463.032209][T14938] 8021q: adding VLAN 0 to HW filter on device bond5 [ 463.043717][T14938] 8021q: adding VLAN 0 to HW filter on device bond6 [ 463.058935][T14938] 8021q: adding VLAN 0 to HW filter on device bond7 [ 463.074075][T14938] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 463.083826][T14938] 8021q: adding VLAN 0 to HW filter on device bond8 [ 463.097254][T14938] 8021q: adding VLAN 0 to HW filter on device bond9 [ 463.111218][T14938] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 463.133431][ T5625] dummy0: entered promiscuous mode [ 463.140541][ T5911] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 463.142485][T14945] batadv0: entered promiscuous mode [ 463.164674][ T5911] bond5: (slave bridge1): link status up again after 0 ms [ 463.173203][T14945] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 463.221160][ T5904] bond5: (slave bridge1): link status up again after 0 ms [ 463.240702][ T5911] bond5: (slave bridge1): link status up again after 0 ms [ 463.271050][ T5911] bond5: (slave bridge1): link status up again after 0 ms [ 463.301450][ T5911] bond5: (slave bridge1): link status up again after 0 ms [ 463.343845][ T3326] bond5: (slave bridge1): link status up again after 0 ms [ 463.365763][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.375540][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.384926][ T5911] bond5: (slave bridge1): link status up again after 0 ms [ 463.408437][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.419815][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.729484][T14975] syzkaller0: entered promiscuous mode [ 463.740841][T14975] syzkaller0: entered allmulticast mode [ 465.905195][T14986] syzkaller0: entered promiscuous mode [ 465.910840][T14986] syzkaller0: entered allmulticast mode [ 465.917469][T14989] syzkaller0: entered promiscuous mode [ 465.923094][T14989] syzkaller0: entered allmulticast mode [ 466.239477][T15005] syzkaller0: entered promiscuous mode [ 466.261286][T15005] syzkaller0: entered allmulticast mode [ 466.315623][T15010] erspan0: left promiscuous mode [ 466.322342][T15010] tipc: Resetting bearer [ 466.403932][T15003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.537667][T15008] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2516'. [ 466.843213][T15010] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 466.862402][T15010] batman_adv: batadv0: Interface deactivated: gretap2 [ 466.882964][T15010] bond2: left promiscuous mode [ 466.887848][T15010] bridge3: left promiscuous mode [ 466.896338][T15010] ipvlan2: left allmulticast mode [ 466.908963][T15010] ipvlan3: left allmulticast mode [ 466.921269][T15010] bond2: left allmulticast mode [ 466.931290][T15010] bridge3: left allmulticast mode [ 466.963536][T15010] veth9: left allmulticast mode [ 466.990281][T15010] geneve3: left promiscuous mode [ 467.002747][T15010] geneve3: left allmulticast mode [ 467.019008][T15010] batman_adv: batadv0: Interface deactivated: gretap3 [ 467.034059][T15005] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2505'. [ 467.058871][ T36] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.071268][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.129773][T15025] lo speed is unknown, defaulting to 1000 [ 467.135966][ T36] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.152334][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.164590][ T36] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.180584][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.258266][ T36] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.278394][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.200614][ T5911] net_ratelimit: 13 callbacks suppressed [ 468.200630][ T5911] bond5: (slave bridge1): failed to get link speed/duplex [ 468.334520][T15057] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2518'. [ 468.373836][T15057] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2518'. [ 468.412034][ T5895] bond5: (slave bridge1): failed to get link speed/duplex [ 468.518627][T15062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2520'. [ 468.582373][T15063] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2520'. [ 468.667715][T15062] hsr_slave_1 (unregistering): left promiscuous mode [ 468.795055][ T5902] bond5: (slave bridge1): failed to get link speed/duplex [ 468.932265][ T5902] bond5: (slave bridge1): failed to get link speed/duplex [ 469.070526][ T76] bond5: (slave bridge1): failed to get link speed/duplex [ 469.127383][T15077] bond8: (slave bond0): Releasing backup interface [ 469.156117][T15077] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 469.230940][ T5908] bond5: (slave bridge1): failed to get link speed/duplex [ 469.255126][T15083] team0: Device xfrm0 failed to enter team mode [ 469.275323][T15083] team0: Device xfrm0 failed to enter team mode [ 469.283284][T15077] tipc: Enabled bearer , priority 0 [ 469.341718][ T5902] bond5: (slave bridge1): failed to get link speed/duplex [ 469.475233][T15091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.484984][T15091] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.493252][T15091] tipc: Resetting bearer [ 469.531896][T15091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.608357][T15091] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 469.655851][T15091] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 469.712514][T15091] veth1_vlan: left promiscuous mode [ 469.719175][T15091] veth0_vlan: left promiscuous mode [ 469.740211][T15091] veth0_vlan: entered promiscuous mode [ 469.751810][T15091] veth1_vlan: entered promiscuous mode [ 469.767545][T15091] veth1_macvtap: left promiscuous mode [ 469.776459][T15091] veth0_macvtap: left promiscuous mode [ 469.783884][T15091] veth0_macvtap: entered promiscuous mode [ 469.791433][T15091] veth1_macvtap: entered promiscuous mode [ 469.807284][T15091] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 469.818192][T15091] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 469.827485][T15091] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 469.863613][T15091] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 469.894254][T15091] 8021q: adding VLAN 0 to HW filter on device bond1 [ 469.957877][T15091] bridge0: port 1(macvlan2) entered blocking state [ 469.964565][T15091] bridge0: port 1(macvlan2) entered forwarding state [ 469.975186][T15091] gretap0: entered promiscuous mode [ 469.982321][T15091] batman_adv: batadv0: Interface activated: gretap2 [ 469.992060][T15091] 8021q: adding VLAN 0 to HW filter on device bond2 [ 470.000197][T15091] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 470.010888][T15091] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 470.024093][T15091] 8021q: adding VLAN 0 to HW filter on device bond3 [ 470.036452][T15091] 8021q: adding VLAN 0 to HW filter on device bond4 [ 470.047454][T15091] 8021q: adding VLAN 0 to HW filter on device bond5 [ 470.056773][T15091] batman_adv: batadv0: Interface activated: gretap3 [ 470.119987][ T5908] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.139168][ T5908] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.160115][ T5908] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 38824 - 0 [ 470.182169][ T5908] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.205334][ T5908] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.223924][ T5908] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 38824 - 0 [ 470.285345][ T5908] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.309286][ T5908] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.348380][ T5908] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 38824 - 0 [ 470.395699][ T5913] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.417716][T15123] siw: device registration error -23 [ 470.427843][ T5913] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.455818][ T5913] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 38824 - 0 [ 470.461046][T15122] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2533'. [ 470.485699][T15122] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2533'. [ 470.639466][T15118] tipc: Enabled bearer , priority 0 [ 470.815570][T15137] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2538'. [ 470.834368][T15121] syzkaller0: entered promiscuous mode [ 470.860548][T15121] syzkaller0: entered allmulticast mode [ 470.872136][T15137] siw: device registration error -23 [ 470.886921][ T5911] bond5: (slave bridge1): failed to get link speed/duplex [ 470.918470][T15118] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 473.133752][T15142] tipc: Resetting bearer [ 473.162087][T15115] tipc: Resetting bearer [ 473.224421][T15115] tipc: Disabling bearer [ 473.246963][T15146] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 473.283558][T15147] team0: Device xfrm0 is of different type [ 473.293597][T15151] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2540'. [ 473.304819][T15151] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2540'. [ 473.335488][T15148] tipc: Enabled bearer , priority 0 [ 473.369973][ T5911] bond3: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 473.405292][ T5911] bond3: (slave veth9): making interface the new active one [ 473.458302][ T5911] bond3: active interface up! [ 473.672275][T15168] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2545'. [ 473.698831][T15156] syzkaller0: entered promiscuous mode [ 473.708283][T15156] syzkaller0: entered allmulticast mode [ 473.734941][ T5895] bond5: (slave bridge1): failed to get link speed/duplex [ 474.186244][T15198] RDS: rds_bind could not find a transport for ::fcff:ffff:8000:0:20:0, load rds_tcp or rds_rdma? [ 476.046889][T15186] team0: Device vxcan1 is of different type [ 476.243793][ T76] bond5: (slave bridge1): failed to get link speed/duplex [ 476.276250][T15204] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2552'. [ 476.346159][T15209] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2553'. [ 476.379095][T15209] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2553'. [ 476.416050][T15208] team0: Port device xfrm0 removed [ 476.445574][T15208] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 476.496686][T15212] netlink: 'syz.4.2556': attribute type 4 has an invalid length. [ 476.522957][T15214] team0: Port device xfrm0 added [ 476.548106][T15215] netlink: 'syz.4.2556': attribute type 4 has an invalid length. [ 476.556087][ T5895] bond5: (slave bridge1): failed to get link speed/duplex [ 476.591216][T15208] tipc: Enabled bearer , priority 0 [ 476.630016][T15212] netlink: 'syz.4.2556': attribute type 4 has an invalid length. [ 477.295825][ T5911] bond5: (slave bridge1): failed to get link speed/duplex [ 477.413751][ T5913] bond5: (slave bridge1): failed to get link speed/duplex [ 477.554738][T15232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2562'. [ 477.560601][ T76] bond5: (slave bridge1): failed to get link speed/duplex [ 477.565224][T15232] netlink: 'syz.2.2562': attribute type 14 has an invalid length. [ 477.579171][T15232] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2562'. [ 477.618456][T15230] bridge2: entered promiscuous mode [ 477.645221][T15230] bridge2: entered allmulticast mode [ 477.677625][T15230] team0: Port device bridge2 added [ 477.700922][ T5911] bond5: (slave bridge1): failed to get link speed/duplex [ 477.709164][T15234] openvswitch: netlink: Message has 8 unknown bytes. [ 477.742922][T15237] tipc: Resetting bearer [ 477.792198][ T5745] lo speed is unknown, defaulting to 1000 [ 477.888381][T15245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2564'. [ 477.950043][T15244] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2566'. [ 478.243937][T15239] 8021q: adding VLAN 0 to HW filter on device bond7 [ 478.289154][T15239] bond7 (unregistering): Released all slaves [ 478.411006][ T76] net_ratelimit: 2 callbacks suppressed [ 478.411048][ T76] bond5: (slave bridge1): failed to get link speed/duplex [ 478.481614][T15271] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 478.540842][ T76] bond5: (slave bridge1): failed to get link speed/duplex [ 478.568077][T15271] team0: Device xfrm0 is of different type [ 478.594721][T15276] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 478.616808][T15271] tipc: Enabled bearer , priority 0 [ 478.661157][ T3326] bond5: (slave bridge1): failed to get link speed/duplex [ 478.746046][T15278] 8021q: adding VLAN 0 to HW filter on device bond6 [ 478.781043][ T5913] bond5: (slave bridge1): failed to get link speed/duplex [ 478.891365][ T76] bond5: (slave bridge1): failed to get link speed/duplex [ 478.917760][T15287] team0: Port device xfrm0 removed [ 478.924548][T15287] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 478.946030][ T76] tipc: Resetting bearer [ 478.972433][T15287] xt_socket: unknown flags 0x4 [ 478.982469][T15287] team0: Port device xfrm0 added [ 479.000989][ T5902] bond5: (slave bridge1): failed to get link speed/duplex [ 479.131472][ T76] bond5: (slave bridge1): failed to get link speed/duplex [ 479.211875][T15295] netlink: 'syz.3.2579': attribute type 13 has an invalid length. [ 479.219756][T15295] netlink: 'syz.3.2579': attribute type 17 has an invalid length. [ 479.509350][T15294] bridge0: port 1(macvlan2) entered disabled state [ 479.568518][T15294] tipc: Resetting bearer [ 479.626877][T15312] __nla_validate_parse: 2 callbacks suppressed [ 479.626896][T15312] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2581'. [ 479.976950][T15321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2583'. [ 480.846643][T15294] batman_adv: batadv0: Interface deactivated: gretap2 [ 481.049638][T15294] batman_adv: batadv0: Interface deactivated: gretap3 [ 481.083298][T15295] gretap0: left promiscuous mode [ 481.115612][T15295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.124405][T15295] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.131551][T15295] tipc: Resetting bearer [ 481.137236][T15295] tipc: Resetting bearer [ 481.146623][T15295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.191149][T15295] veth1_vlan: left promiscuous mode [ 481.197331][T15295] veth0_vlan: left promiscuous mode [ 481.204717][T15295] veth0_vlan: entered promiscuous mode [ 481.214875][T15295] veth1_vlan: entered promiscuous mode [ 481.225121][T15295] veth1_macvtap: left promiscuous mode [ 481.232246][T15295] veth0_macvtap: left promiscuous mode [ 481.238928][T15295] veth0_macvtap: entered promiscuous mode [ 481.251795][T15295] veth1_macvtap: entered promiscuous mode [ 481.264741][T15295] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 481.275501][T15295] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 481.286514][T15295] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 481.297905][T15295] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 481.313561][T15295] 8021q: adding VLAN 0 to HW filter on device bond1 [ 481.351936][T15295] bridge0: port 1(macvlan2) entered blocking state [ 481.358545][T15295] bridge0: port 1(macvlan2) entered forwarding state [ 481.367830][T15295] gretap0: entered promiscuous mode [ 481.374467][T15295] batman_adv: batadv0: Interface activated: gretap2 [ 481.386957][T15295] 8021q: adding VLAN 0 to HW filter on device bond2 [ 481.395602][T15295] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 481.404325][T15295] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 481.419237][T15295] 8021q: adding VLAN 0 to HW filter on device bond3 [ 481.428742][T15295] 8021q: adding VLAN 0 to HW filter on device bond4 [ 481.438600][T15295] 8021q: adding VLAN 0 to HW filter on device bond5 [ 481.447930][T15295] batman_adv: batadv0: Interface activated: gretap3 [ 481.459237][T15295] 8021q: adding VLAN 0 to HW filter on device bond6 [ 481.516255][T15320] bridge0: entered promiscuous mode [ 481.536868][T15320] bridge0: entered allmulticast mode [ 481.576716][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 38824 - 0 [ 481.607746][ T36] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 41940 - 0 [ 481.701324][T15351] IPVS: ip_vs_add_dest(): server weight less than zero [ 481.724224][T15351] IPVS: rr: FWM 3 0x00000003 - no destination available [ 481.774311][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 38824 - 0 [ 481.798031][ T36] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 41940 - 0 [ 481.823013][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 38824 - 0 [ 481.846080][ T36] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 41940 - 0 [ 481.884331][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 38824 - 0 [ 481.920312][ T36] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 41940 - 0 [ 481.999447][T15360] lo speed is unknown, defaulting to 1000 [ 482.018173][T15363] syzkaller0: entered promiscuous mode [ 482.024586][T15363] syzkaller0: entered allmulticast mode [ 482.163321][T15369] syzkaller0: entered promiscuous mode [ 482.169314][T15369] syzkaller0: entered allmulticast mode [ 484.767060][T15393] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 484.816564][T15396] team0: Device xfrm0 is of different type [ 484.821536][T15403] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2603'. [ 484.832759][T15403] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2603'. [ 484.875123][T15403] geneve2: entered promiscuous mode [ 485.018732][T15408] syzkaller0: entered promiscuous mode [ 485.033628][T15408] syzkaller0: entered allmulticast mode [ 485.200764][ T36] bond5: (slave bridge1): failed to get link speed/duplex [ 485.686735][T15416] bridge0: port 1(macvlan2) entered disabled state [ 485.805940][T15416] tipc: Resetting bearer [ 486.845495][T15416] batman_adv: batadv0: Interface deactivated: gretap2 [ 486.976858][T15416] batman_adv: batadv0: Interface deactivated: gretap3 [ 487.035439][T15421] syz_tun: left promiscuous mode [ 487.059669][T15421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.076900][T15421] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.085291][T15421] tipc: Resetting bearer [ 487.099763][T15421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.124829][T15421] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 487.135394][T15421] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 487.149117][T15421] veth1_vlan: left promiscuous mode [ 487.155911][T15421] veth0_vlan: left promiscuous mode [ 487.162630][T15421] veth0_vlan: entered promiscuous mode [ 487.169638][T15421] veth1_vlan: entered promiscuous mode [ 487.178838][T15421] veth1_macvtap: left promiscuous mode [ 487.185427][T15421] veth0_macvtap: left promiscuous mode [ 487.191941][T15421] veth0_macvtap: entered promiscuous mode [ 487.198629][T15421] veth1_macvtap: entered promiscuous mode [ 487.209456][T15421] 8021q: adding VLAN 0 to HW filter on device €Â [ 487.216910][T15421] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 487.225056][T15421] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 487.233154][T15421] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 487.247931][T15421] 8021q: adding VLAN 0 to HW filter on device bond1 [ 487.278495][T15421] 8021q: adding VLAN 0 to HW filter on device bond2 [ 487.288414][T15421] 8021q: adding VLAN 0 to HW filter on device bond3 [ 487.296217][T15421] macvtap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 487.307555][T15421] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 487.319892][T15421] 8021q: adding VLAN 0 to HW filter on device bond4 [ 487.329821][T15421] 8021q: adding VLAN 0 to HW filter on device bond5 [ 487.337858][T15421] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 487.347165][T15421] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 487.355987][T15421] 8021q: adding VLAN 0 to HW filter on device bond6 [ 487.364208][T15421] 8021q: adding VLAN 0 to HW filter on device bond7 [ 487.372628][T15421] 8021q: adding VLAN 0 to HW filter on device bond8 [ 487.381222][T15421] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 487.389937][T15421] syz_tun: entered promiscuous mode [ 487.397753][T15421] ip6gretap0: entered promiscuous mode [ 487.411763][T15421] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 487.427596][T15423] netlink: 'syz.0.2611': attribute type 12 has an invalid length. [ 487.594096][T15436] veth0: entered promiscuous mode [ 487.599237][T15436] veth0: left promiscuous mode [ 487.610793][T15438] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 487.627671][T15455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2616'. [ 487.724997][ T5902] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.747871][ T5902] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.780630][ T5902] netdevsim netdevsim3 netdevsim0: unset [1, 2] type 2 family 0 port 41940 - 0 [ 487.790162][ T5902] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.803455][ T5902] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.812550][ T5902] netdevsim netdevsim3 netdevsim1: unset [1, 2] type 2 family 0 port 41940 - 0 [ 487.828776][T15446] team0: Port device xfrm0 removed [ 487.835173][T15446] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 487.854755][T15447] tipc: Enabling of bearer rejected, already enabled [ 487.916928][ T5902] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.945973][ T5902] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.984364][ T5902] netdevsim netdevsim3 netdevsim2: unset [1, 2] type 2 family 0 port 41940 - 0 [ 488.006570][ T5902] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.030031][ T5902] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.044496][ T5902] netdevsim netdevsim3 netdevsim3: unset [1, 2] type 2 family 0 port 41940 - 0 [ 488.205833][T15465] syzkaller0: entered promiscuous mode [ 488.223424][T15465] syzkaller0: entered allmulticast mode [ 488.247617][ T5902] netdevsim netdevsim4 €Â: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.278240][T15484] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2621'. [ 488.281394][ T5902] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.306276][T15484] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2621'. [ 490.268281][ T76] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 490.276539][ T76] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 490.284613][ T5902] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.300988][ T7876] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 490.331774][T15470] gretap0: left promiscuous mode [ 490.374474][T15470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.383976][T15470] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.385088][T15496] netlink: 'syz.0.2624': attribute type 1 has an invalid length. [ 490.391544][T15470] tipc: Resetting bearer [ 490.408615][T15470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.437276][T15470] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 490.447877][T15470] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 490.461739][T15470] veth1_vlan: left promiscuous mode [ 490.467704][T15470] veth0_vlan: left promiscuous mode [ 490.474571][T15470] veth0_vlan: entered promiscuous mode [ 490.482040][T15470] veth1_vlan: entered promiscuous mode [ 490.490217][T15470] veth1_macvtap: left promiscuous mode [ 490.496797][T15470] veth0_macvtap: left promiscuous mode [ 490.503732][T15470] veth0_macvtap: entered promiscuous mode [ 490.510246][T15470] veth1_macvtap: entered promiscuous mode [ 490.520167][T15470] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 490.527954][T15470] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 490.536895][T15470] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 490.545403][T15470] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 490.558236][T15470] 8021q: adding VLAN 0 to HW filter on device bond1 [ 490.589909][T15470] bridge0: port 1(macvlan2) entered blocking state [ 490.596530][T15470] bridge0: port 1(macvlan2) entered forwarding state [ 490.604266][T15470] gretap0: entered promiscuous mode [ 490.610279][T15470] batman_adv: batadv0: Interface activated: gretap2 [ 490.621088][T15470] 8021q: adding VLAN 0 to HW filter on device bond2 [ 490.629030][T15470] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 490.638639][T15470] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 490.649519][T15470] 8021q: adding VLAN 0 to HW filter on device bond3 [ 490.658623][T15470] 8021q: adding VLAN 0 to HW filter on device bond4 [ 490.668116][T15470] 8021q: adding VLAN 0 to HW filter on device bond5 [ 490.676536][T15470] batman_adv: batadv0: Interface activated: gretap3 [ 490.684163][T15470] 8021q: adding VLAN 0 to HW filter on device bond6 [ 490.773745][T15491] tipc: Resetting bearer [ 490.789528][T15491] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 490.811012][T15492] team0: Device xfrm0 failed to enter team mode [ 490.820622][T15492] team0: Device xfrm0 failed to enter team mode [ 490.831192][ T76] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 490.851517][ T76] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 490.860650][ T7873] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 490.876883][ T76] bond2: (slave veth13): link status definitely up, 10000 Mbps full duplex [ 490.914004][ T76] bond2: (slave veth13): making interface the new active one [ 490.967616][ T76] bond2: active interface up! [ 490.982251][ T5902] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.091012][ T7874] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 491.096003][T15498] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 491.129152][ T5902] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.143178][ T5902] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.156027][ T5902] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 44370 - 0 [ 491.172173][ T7869] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 491.241715][T15512] tipc: Resetting bearer [ 491.258817][T15512] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 491.308225][ T5902] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.350075][ T5902] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.396064][ T5902] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 44370 - 0 [ 491.429046][T15515] tipc: Enabling of bearer rejected, already enabled [ 491.451703][ T5902] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.481744][ T5902] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.502384][ T5902] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 44370 - 0 [ 491.519392][T15524] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2632'. [ 491.532674][ T5902] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.543850][T15524] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2632'. [ 491.553563][ T5902] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.574976][ T5902] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 44370 - 0 [ 491.650817][ T7869] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 491.692326][T15521] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2631'. [ 491.731084][ T7869] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 491.822932][ T76] bond5: (slave bridge1): failed to get link speed/duplex [ 491.940695][ T3326] bond5: (slave bridge1): failed to get link speed/duplex [ 492.013050][ T3326] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 492.082890][T15543] team0: Port device xfrm0 removed [ 492.104594][T15542] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2637'. [ 492.118807][T15543] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 492.202671][T15548] tipc: Enabling of bearer rejected, already enabled [ 492.241456][ T5913] bond5: (slave bridge1): failed to get link speed/duplex [ 492.365305][T15553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2640'. [ 492.383644][ T3326] bond5: (slave bridge1): failed to get link speed/duplex [ 492.397322][T15553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2640'. [ 492.408108][T15553] netlink: 'syz.0.2640': attribute type 6 has an invalid length. [ 492.419726][T15553] netlink: 'syz.0.2640': attribute type 5 has an invalid length. [ 492.436870][T15553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2640'. [ 492.446549][T15553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2640'. [ 492.460345][T15553] netlink: 'syz.0.2640': attribute type 6 has an invalid length. [ 492.468772][T15553] netlink: 'syz.0.2640': attribute type 5 has an invalid length. [ 492.500657][ T5902] bond5: (slave bridge1): failed to get link speed/duplex [ 492.520265][T15551] tipc: Resetting bearer [ 492.734266][ T5902] bond5: (slave bridge1): failed to get link speed/duplex [ 492.938862][T15567] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2644'. [ 492.963899][T15567] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2644'. [ 493.066957][T15574] ªªªªªª: renamed from vlan0 (while UP) [ 493.463769][T15588] tipc: Resetting bearer [ 493.514926][T15594] team0: Device xfrm0 failed to enter team mode [ 493.540367][T15594] team0: Device xfrm0 failed to enter team mode [ 493.570158][T15588] tipc: Enabling of bearer rejected, already enabled [ 493.723154][ T5895] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 493.913244][T15612] tipc: Resetting bearer [ 494.314474][T15627] netlink: 'syz.3.2663': attribute type 1 has an invalid length. [ 494.336148][T15630] netlink: 'syz.0.2665': attribute type 12 has an invalid length. [ 494.428779][T15627] bond7: (slave dummy0): making interface the new active one [ 494.437315][T15627] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 497.533207][T15656] __nla_validate_parse: 6 callbacks suppressed [ 497.533228][T15656] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2669'. [ 497.549023][T15656] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2669'. [ 497.593442][T15634] bridge0: port 1(macvlan2) entered disabled state [ 497.661915][T15658] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2670'. [ 497.662648][T15634] tipc: Resetting bearer [ 497.671433][T15658] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2670'. [ 497.723064][T15634] bond7: (slave dummy0): Releasing active interface [ 497.970363][T15634] net_ratelimit: 2318 callbacks suppressed [ 497.983934][T15634] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 498.000121][T15636] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 498.019177][T15641] tipc: Enabling of bearer rejected, already enabled [ 498.081350][ T5911] bond5: (slave bridge1): failed to get link speed/duplex [ 498.220931][ T5895] bond5: (slave bridge1): failed to get link speed/duplex [ 498.361852][ T5911] bond5: (slave bridge1): failed to get link speed/duplex [ 498.467136][T15682] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2680'. [ 498.500507][ T5902] bond5: (slave bridge1): failed to get link speed/duplex [ 498.503891][T15682] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2680'. [ 498.573839][T15683] netlink: 199784 bytes leftover after parsing attributes in process `syz.3.2673'. [ 498.600963][T15683] netlink: 'syz.3.2673': attribute type 1 has an invalid length. [ 498.610937][ T5895] bond5: (slave bridge1): failed to get link speed/duplex [ 498.735489][T15694] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2681'. [ 498.758112][T15694] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2681'. [ 498.780713][T15691] batadv0: left promiscuous mode [ 499.208285][T15691] veth0_macvtap: left allmulticast mode [ 499.225292][T15691] team1: left promiscuous mode [ 499.230115][T15691] team1: left allmulticast mode [ 499.236200][T15691] team2: left promiscuous mode [ 499.241142][T15691] team2: left allmulticast mode [ 499.246275][T15691] veth15: left allmulticast mode [ 499.276012][T15691] xfrm1: left allmulticast mode [ 499.353997][T15704] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 499.456392][T15705] team0: Port device xfrm0 added [ 499.477036][ T76] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.507953][ T76] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.535212][T15706] tipc: Enabling of bearer rejected, already enabled [ 499.583435][ T76] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.605534][ T76] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.640807][ T76] bond5: (slave bridge1): failed to get link speed/duplex [ 499.780961][ T76] bond5: (slave bridge1): failed to get link speed/duplex [ 499.882530][T15712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2687'. [ 500.093189][T15731] syzkaller0: entered promiscuous mode [ 500.123648][T15731] syzkaller0: entered allmulticast mode [ 500.283826][T15740] tipc: New replicast peer: 255.255.255.255 [ 500.292892][T15740] tipc: Enabled bearer , priority 10 [ 500.362118][T15744] netlink: 'syz.4.2695': attribute type 1 has an invalid length. [ 500.426585][T15738] bond11: option min_links: invalid value (18446744073709551612) [ 500.496536][T15738] bond11: option min_links: allowed values 0 - 2147483647 [ 500.529912][T15738] bond11 (unregistering): Released all slaves [ 500.757804][T15744] bond9: entered promiscuous mode [ 500.788700][T15744] 8021q: adding VLAN 0 to HW filter on device bond9 [ 500.837718][T15746] bond9: entered allmulticast mode [ 501.010115][T15740] bond9: (slave bridge10): making interface the new active one [ 501.033756][T15740] bridge10: entered promiscuous mode [ 501.047576][T15740] bridge10: entered allmulticast mode [ 501.064504][T15740] bond9: (slave bridge10): Enslaving as an active interface with an up link [ 501.134978][T15776] lo speed is unknown, defaulting to 1000 [ 501.389393][T15781] tipc: Resetting bearer [ 501.408155][T15786] team0: Device xfrm0 failed to enter team mode [ 501.415816][T15786] team0: Device xfrm0 failed to enter team mode [ 501.495760][T15781] tipc: Enabling of bearer rejected, already enabled [ 501.671427][T15788] syzkaller0: entered promiscuous mode [ 501.689223][T15788] syzkaller0: entered allmulticast mode [ 501.892730][ C1] ip6_tnl_xmit_ctl: 6 callbacks suppressed [ 501.892749][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 501.923416][T15810] netlink: 'syz.3.2706': attribute type 62 has an invalid length. [ 503.817515][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 504.081871][ T5895] net_ratelimit: 6 callbacks suppressed [ 504.081899][ T5895] bond5: (slave bridge1): failed to get link speed/duplex [ 504.385840][T15820] batman_adv: batadv0: Adding interface: dummy0 [ 504.441815][T15820] batman_adv: batadv0: The MTU of interface dummy0 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1312 would solve the problem. [ 504.481756][T15836] netlink: 'syz.0.2712': attribute type 13 has an invalid length. [ 504.494839][T15840] netlink: 'syz.4.2710': attribute type 2 has an invalid length. [ 504.507248][T15820] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 504.520788][ T5895] bond5: (slave bridge1): failed to get link speed/duplex [ 504.608877][T15836] gretap0: refused to change device tx_queue_len [ 504.647040][T15836] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 504.928804][T15854] netlink: 'syz.1.2715': attribute type 1 has an invalid length. [ 504.953990][T15825] lo speed is unknown, defaulting to 1000 [ 505.127652][T15860] bond10: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 505.175775][T15861] veth17: entered promiscuous mode [ 505.179941][T15865] netlink: 'syz.0.2717': attribute type 1 has an invalid length. [ 505.210899][T15854] __nla_validate_parse: 3 callbacks suppressed [ 505.210918][T15854] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2715'. [ 505.216310][T15865] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2717'. [ 505.234240][T15861] bond10: (slave veth17): Enslaving as a backup interface with a down link [ 505.295617][T15870] netlink: 'syz.3.2718': attribute type 1 has an invalid length. [ 505.355963][ T5911] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 505.373828][T15854] 8021q: adding VLAN 0 to HW filter on device bond10 [ 505.422597][T15870] 8021q: adding VLAN 0 to HW filter on device bond8 [ 505.459367][T15871] bond8: (slave gretap4): Enslaving as a backup interface with an up link [ 505.532345][ T5902] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 505.544280][ T5911] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 505.676302][T15873] bond8 (unregistering): (slave gretap4): Removing an active aggregator [ 505.701150][T15873] bond8 (unregistering): (slave gretap4): Releasing backup interface [ 505.744681][T15873] bond8 (unregistering): Released all slaves [ 505.834038][ T76] bond5: (slave bridge1): failed to get link speed/duplex [ 506.004931][T15888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2721'. [ 506.214573][ T5911] bond5: (slave bridge1): failed to get link speed/duplex [ 506.553714][T15915] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2723'. [ 506.564720][T15891] syzkaller0: entered promiscuous mode [ 506.578444][T15891] syzkaller0: entered allmulticast mode [ 506.640601][ T5895] bond5: (slave bridge1): failed to get link speed/duplex [ 506.659026][T15919] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2723'. [ 506.742050][T15915] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2723'. [ 506.845345][T15930] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 509.232684][T15912] syzkaller0: entered promiscuous mode [ 509.238311][T15912] syzkaller0: entered allmulticast mode [ 509.264720][T15907] tipc: Enabled bearer , priority 0 [ 509.280645][ T36] bond5: (slave bridge1): failed to get link speed/duplex [ 509.306210][T15932] tipc: Resetting bearer [ 509.345173][T15904] tipc: Resetting bearer [ 509.428135][T15904] tipc: Disabling bearer [ 509.491089][ T5895] bond5: (slave bridge1): failed to get link speed/duplex [ 509.525831][T15978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2731'. [ 509.631474][ T76] bond5: (slave bridge1): failed to get link speed/duplex [ 509.762540][T15989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2732'. [ 509.773628][ T5902] bond5: (slave bridge1): failed to get link speed/duplex [ 509.790911][T15989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2732'. [ 509.858045][T15989] netlink: 'syz.2.2732': attribute type 6 has an invalid length. [ 509.873081][T15989] netlink: 'syz.2.2732': attribute type 5 has an invalid length. [ 509.921073][T15994] batman_adv: batadv0: Adding interface: ip6gretap1 [ 509.955648][T15994] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 510.000752][T15998] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2734'. [ 510.046210][ T36] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.076927][ T36] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.116389][ T36] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.162454][ T76] bond5: (slave bridge1): failed to get link speed/duplex [ 510.189929][ T36] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.316726][T16001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.341239][T16009] gretap0: entered promiscuous mode [ 510.352706][T16009] vlan3: entered promiscuous mode [ 510.397299][ T5895] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.420761][ T5895] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.435800][ T5895] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.455160][ T5895] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.490681][ T5895] bond5: (slave bridge1): failed to get link speed/duplex [ 510.591938][T16020] syzkaller0: entered promiscuous mode [ 510.597634][T16020] syzkaller0: entered allmulticast mode [ 511.124995][T16035] __nla_validate_parse: 1 callbacks suppressed [ 511.125014][T16035] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2740'. [ 513.761072][T16052] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 513.770530][ T5895] bond5: (slave bridge1): link status up again after 0 ms [ 513.850723][ T5911] bond5: (slave bridge1): link status up again after 0 ms [ 513.881145][ T5911] bond5: (slave bridge1): link status up again after 0 ms [ 513.897942][T16069] netlink: 'syz.0.2744': attribute type 1 has an invalid length. [ 514.099990][T16076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2747'. [ 514.127781][T16076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2747'. [ 514.142019][T16082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2750'. [ 514.169940][T16076] netlink: 'syz.2.2747': attribute type 6 has an invalid length. [ 514.190810][T16076] netlink: 'syz.2.2747': attribute type 5 has an invalid length. [ 514.251497][T16089] netlink: 'syz.4.2749': attribute type 49 has an invalid length. [ 514.344181][ T36] net_ratelimit: 3 callbacks suppressed [ 514.344199][ T36] bond5: (slave bridge1): failed to get link speed/duplex [ 514.517397][T16089] ip6gretap0: left promiscuous mode [ 514.533032][T16089] ip6gretap0: entered promiscuous mode [ 514.555437][T16089] ip6gretap0: entered allmulticast mode [ 515.060872][ T5895] bond5: (slave bridge1): failed to get link speed/duplex [ 515.313408][T16111] syzkaller0: entered promiscuous mode [ 515.319501][T16111] syzkaller0: entered allmulticast mode [ 515.337186][T16118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2756'. [ 515.496547][T16123] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2758'. [ 516.620592][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 518.299314][T16134] tipc: Enabled bearer , priority 0 [ 518.327736][T16135] syzkaller0: entered promiscuous mode [ 518.355944][T16135] syzkaller0: entered allmulticast mode [ 518.393665][T16145] tipc: Resetting bearer [ 518.430617][ T5895] bond5: (slave bridge1): failed to get link speed/duplex [ 518.457620][T16154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2765'. [ 518.561876][T16145] tipc: Resetting bearer [ 518.631929][T16162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2767'. [ 518.666872][T16145] tipc: Disabling bearer [ 518.695953][T16162] xt_hashlimit: size too large, truncated to 1048576 [ 518.729416][T16169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2767'. [ 518.783140][T16169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2767'. [ 518.869364][T16169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2767'. [ 518.929150][T16169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2767'. [ 518.966647][T16169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2767'. [ 519.004209][T16169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2767'. [ 519.141829][ T5913] bond5: (slave bridge1): failed to get link speed/duplex [ 519.284427][ T76] bond5: (slave bridge1): failed to get link speed/duplex [ 519.432922][ T76] bond5: (slave bridge1): failed to get link speed/duplex [ 519.546213][T16192] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 519.613311][T16199] team0: Device xfrm0 is of different type [ 519.666078][T16203] tipc: Enabling of bearer rejected, already enabled [ 519.730619][ T5902] bond5: (slave bridge1): failed to get link speed/duplex [ 519.875185][ T5913] bond5: (slave bridge1): failed to get link speed/duplex [ 519.926804][T16211] geneve0: Caught tx_queue_len zero misconfig [ 520.276399][T16215] syzkaller0: entered promiscuous mode [ 520.309081][T16215] syzkaller0: entered allmulticast mode [ 520.349589][T16223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2777'. [ 520.363023][ T76] bond5: (slave bridge1): failed to get link speed/duplex [ 520.408252][T16223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2777'. [ 520.442251][T16223] netlink: 'syz.4.2777': attribute type 6 has an invalid length. [ 520.477195][T16223] netlink: 'syz.4.2777': attribute type 5 has an invalid length. [ 521.093942][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 521.247505][T16230] netlink: 'syz.1.2778': attribute type 4 has an invalid length. [ 521.298555][T16231] netlink: 'syz.1.2778': attribute type 4 has an invalid length. [ 523.084102][ T36] netdevsim netdevsim4 €Â: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.094020][ T36] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.212162][ T36] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.236971][ T36] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.291026][ T36] bond5: (slave bridge1): failed to get link speed/duplex [ 523.421464][ T76] bond5: (slave bridge1): failed to get link speed/duplex [ 523.536647][T16243] __nla_validate_parse: 1 callbacks suppressed [ 523.536667][T16243] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2780'. [ 523.552324][ T5913] bond5: (slave bridge1): failed to get link speed/duplex [ 523.560888][T16243] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2780'. [ 523.724920][ T5913] bond5: (slave bridge1): failed to get link speed/duplex [ 523.880754][T16269] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 523.938513][T16269] team0: Port device xfrm0 added [ 523.952779][T16269] tipc: Enabling of bearer rejected, already enabled [ 524.144191][T16282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2790'. [ 524.153874][T16282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2790'. [ 524.165804][T16282] netlink: 'syz.4.2790': attribute type 6 has an invalid length. [ 524.174715][T16282] netlink: 'syz.4.2790': attribute type 5 has an invalid length. [ 524.188903][T16282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2790'. [ 524.217829][T16282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2790'. [ 524.260068][T16282] netlink: 'syz.4.2790': attribute type 6 has an invalid length. [ 524.322540][T16282] netlink: 'syz.4.2790': attribute type 5 has an invalid length. [ 524.435943][T16280] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 524.468716][T16280] netlink: 'syz.2.2789': attribute type 1 has an invalid length. [ 524.510227][T16280] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2789'. [ 524.613593][T16296] netlink: 'syz.3.2793': attribute type 13 has an invalid length. [ 524.698973][T16292] syzkaller0: entered promiscuous mode [ 524.719692][T16292] syzkaller0: entered allmulticast mode [ 525.010069][T16313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2797'. [ 527.398039][T16311] syzkaller0: entered promiscuous mode [ 527.403735][T16311] syzkaller0: entered allmulticast mode [ 527.705539][T16345] netlink: 'syz.2.2801': attribute type 1 has an invalid length. [ 527.714139][T16345] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2801'. [ 527.726577][T16345] netlink: 'syz.2.2801': attribute type 1 has an invalid length. [ 527.949197][T16350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2803'. [ 529.840574][ T5911] net_ratelimit: 4 callbacks suppressed [ 529.840595][ T5911] bond5: (slave bridge1): failed to get link speed/duplex [ 530.001478][ T5911] bond5: (slave bridge1): failed to get link speed/duplex [ 530.053473][T16361] team0: Port device xfrm0 removed [ 530.096204][T16361] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 530.167616][T16370] team0: Port device xfrm0 added [ 530.194701][T16372] tipc: Enabling of bearer rejected, already enabled [ 530.232470][T16368] tipc: Enabled bearer , priority 0 [ 530.261762][ T36] bond5: (slave bridge1): failed to get link speed/duplex [ 530.273927][T16368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 530.324523][T16373] syzkaller0: entered promiscuous mode [ 530.346853][T16373] syzkaller0: entered allmulticast mode [ 530.387678][T16384] __nla_validate_parse: 1 callbacks suppressed [ 530.387698][T16384] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2810'. [ 530.410490][ T5902] bond5: (slave bridge1): failed to get link speed/duplex [ 530.554136][T16391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2810'. [ 530.582036][T16384] vlan5: entered promiscuous mode [ 530.590295][T16384] hsr0: entered promiscuous mode [ 530.598226][T16384] vlan5: entered allmulticast mode [ 530.604280][T16384] hsr0: entered allmulticast mode [ 530.609458][T16384] hsr_slave_0: entered allmulticast mode [ 530.618277][T16384] hsr_slave_1: entered allmulticast mode [ 530.703220][ T36] bond5: (slave bridge1): failed to get link speed/duplex [ 530.723912][T16391] hsr_slave_0: left promiscuous mode [ 530.742674][T16391] hsr_slave_1: left promiscuous mode [ 530.824037][T16373] tipc: Resetting bearer [ 530.839064][T16373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.897834][T16367] tipc: Resetting bearer [ 531.020012][T16367] tipc: Disabling bearer [ 531.252091][T16412] syzkaller0: entered promiscuous mode [ 531.270734][T16412] syzkaller0: entered allmulticast mode [ 531.310574][ T5895] bond5: (slave bridge1): failed to get link speed/duplex [ 531.332673][T16424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2815'. [ 531.344652][T16424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2815'. [ 531.354059][T16424] netlink: 'syz.3.2815': attribute type 6 has an invalid length. [ 531.362578][T16424] netlink: 'syz.3.2815': attribute type 5 has an invalid length. [ 531.440576][ T5913] bond5: (slave bridge1): failed to get link speed/duplex [ 531.808871][T16439] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2819'. [ 534.106164][T16430] netlink: 'syz.3.2817': attribute type 12 has an invalid length. [ 534.122676][ T5913] bond5: (slave bridge1): failed to get link speed/duplex [ 534.215917][T16448] syzkaller0: entered promiscuous mode [ 534.227616][T16448] syzkaller0: entered allmulticast mode [ 536.453221][ T5902] bond5: (slave bridge1): failed to get link speed/duplex [ 536.591643][ T3326] bond5: (slave bridge1): failed to get link speed/duplex [ 536.627034][T16471] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 536.651001][T16475] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2824'. [ 536.694592][T16468] can: request_module (can-proto-0) failed. [ 536.732883][T16477] batman_adv: batadv0: Interface activated: dummy0 [ 536.744477][T16477] batadv0: mtu less than device minimum [ 536.756482][T16477] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 536.770646][T16477] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 536.782441][T16477] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 536.794204][T16477] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 536.805998][T16477] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 536.817762][T16477] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 536.865484][T16471] tipc: Enabling of bearer rejected, already enabled [ 537.445341][T16521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2830'. [ 538.825917][T16552] syzkaller0: entered promiscuous mode [ 538.836732][T16552] syzkaller0: entered allmulticast mode [ 541.484923][T16571] tipc: Resetting bearer [ 541.509657][T16571] net_ratelimit: 32 callbacks suppressed [ 541.509677][T16571] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 541.603626][T16571] tipc: Enabling of bearer rejected, already enabled [ 541.641106][ T5911] bond5: (slave bridge1): failed to get link speed/duplex [ 541.785567][ T76] bond5: (slave bridge1): failed to get link speed/duplex [ 541.881991][T16587] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2845'. [ 541.986502][ T5911] bond5: (slave bridge1): failed to get link speed/duplex [ 542.121022][ T5895] bond5: (slave bridge1): failed to get link speed/duplex [ 542.308668][T16606] syzkaller0: entered promiscuous mode [ 542.314371][T16606] syzkaller0: entered allmulticast mode [ 542.387332][T16612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2851'. [ 544.137074][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 544.675956][T16615] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.684306][T16615] tipc: Resetting bearer [ 544.716690][T16615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.821545][T16615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.838325][T16615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 544.856339][T16615] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 544.873937][T16615] veth1_vlan: left promiscuous mode [ 544.880081][T16615] veth0_vlan: left promiscuous mode [ 544.886552][T16615] veth0_vlan: entered promiscuous mode [ 544.893604][T16615] veth1_vlan: entered promiscuous mode [ 544.905292][T16615] hsr1: Slave B (erspan0) is not up; please bring it up to get a fully working HSR network [ 544.919352][T16615] 8021q: adding VLAN 0 to HW filter on device bond1 [ 544.930276][T16636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2855'. [ 544.939610][T16615] 8021q: adding VLAN 0 to HW filter on device bond2 [ 544.954735][T16615] 8021q: adding VLAN 0 to HW filter on device bond3 [ 544.971323][T16615] 8021q: adding VLAN 0 to HW filter on device bond4 [ 544.983374][T16638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2854'. [ 544.996636][T16615] batman_adv: batadv0: Interface activated: gretap2 [ 545.006981][T16615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.016080][T16615] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 545.026834][T16615] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 545.037383][T16615] batman_adv: batadv0: Interface activated: gretap3 [ 545.048169][T16615] 8021q: adding VLAN 0 to HW filter on device eth0 [ 545.061490][T16615] 8021q: adding VLAN 0 to HW filter on device eth1 [ 545.083154][T16615] 8021q: adding VLAN 0 to HW filter on device eth2 [ 545.105371][T16615] 8021q: adding VLAN 0 to HW filter on device eth3 [ 545.133782][T16615] 8021q: adding VLAN 0 to HW filter on device bond5 [ 545.136292][T16649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2853'. [ 545.188173][T16615] 8021q: adding VLAN 0 to HW filter on device bond6 [ 545.215687][T15340] bridge6: entered promiscuous mode [ 545.305153][ T5913] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.315584][ T5913] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.346888][T16636] bond10: (slave ip6gretap0): Removing an active aggregator [ 545.356083][T16636] bond10: (slave ip6gretap0): Releasing backup interface [ 545.363431][T16636] bond10: (slave ip6gretap0): the permanent HWaddr of slave - a6:57:f4:08:1b:d4 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 545.387018][ T5895] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 545.395038][ T5895] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 545.404654][T16642] syzkaller1: entered promiscuous mode [ 545.410876][T15340] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 545.417891][T16642] syzkaller1: entered allmulticast mode [ 545.436664][T16652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2856'. [ 545.477876][T16652] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2856'. [ 545.512668][ T5913] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.522896][ T5913] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.532093][ T5913] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.540774][ T5913] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.549770][ T5913] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.560053][ T5913] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.603106][T16656] tipc: Enabling of bearer rejected, already enabled [ 545.671652][T15338] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 545.742940][ T5908] bond2: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 545.779195][ T5908] bond2: (slave veth0_to_bond): making interface the new active one [ 545.792105][ T5908] bond2: active interface up! [ 545.851392][T15338] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 545.872380][ T76] bond5: (slave bridge1): failed to get link speed/duplex [ 545.992010][ T5908] bond5: (slave bridge1): failed to get link speed/duplex [ 546.122212][ T76] bond5: (slave bridge1): failed to get link speed/duplex [ 546.242955][ T5908] bond5: (slave bridge1): failed to get link speed/duplex [ 546.294033][T16683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2862'. [ 546.337823][T16684] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2863'. [ 546.372068][ T5911] bond5: (slave bridge1): failed to get link speed/duplex [ 546.516035][T16687] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 546.579408][T16687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2864'. [ 546.601371][ T5902] net_ratelimit: 1 callbacks suppressed [ 546.601389][ T5902] bond5: (slave bridge1): failed to get link speed/duplex [ 546.742437][T16697] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 546.754703][ T76] bond5: (slave bridge1): failed to get link speed/duplex [ 546.762795][T16693] syzkaller1: entered promiscuous mode [ 546.775794][T16693] syzkaller1: entered allmulticast mode [ 547.082941][T16700] syzkaller0: entered promiscuous mode [ 547.096389][T16700] syzkaller0: entered allmulticast mode [ 547.134546][T16698] batman_adv: batadv0: Interface deactivated: gretap2 [ 547.160044][T16698] batadv0: mtu less than device minimum [ 547.183324][T16698] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 547.196943][T16698] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 547.208622][T16698] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 547.220259][T16698] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 547.221466][T16711] __nla_validate_parse: 1 callbacks suppressed [ 547.221482][T16711] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2870'. [ 547.231974][T16698] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 547.253504][T16711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2870'. [ 547.257647][T16698] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 547.277031][T16698] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 547.292387][T16711] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2870'. [ 547.346907][T16698] batman_adv: batadv0: Removing interface: gretap2 [ 547.361215][T16698] batman_adv: batadv0: Interface deactivated: gretap3 [ 547.408569][T16698] batman_adv: batadv0: Removing interface: gretap3 [ 547.417745][T16698] batman_adv: batadv0: Interface deactivated: dummy0 [ 547.440811][T16698] batman_adv: batadv0: Removing interface: dummy0 [ 547.447994][T16698] batman_adv: batadv0: Removing interface: ip6gretap1 [ 548.054513][T16723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2871'. [ 549.656380][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 550.549423][ T76] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.593855][ T76] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.636998][ T76] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.693335][ T76] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.717661][T16737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2875'. [ 550.858401][T16744] team0: Device xfrm0 failed to enter team mode [ 550.870552][T16744] team0: Device xfrm0 failed to enter team mode [ 553.278586][T16744] tipc: Enabling of bearer rejected, already enabled [ 553.310563][ T5908] net_ratelimit: 33 callbacks suppressed [ 553.310587][ T5908] bond5: (slave bridge1): failed to get link speed/duplex [ 553.470615][ T5908] bond5: (slave bridge1): failed to get link speed/duplex [ 553.484116][T16774] netlink: 'syz.1.2884': attribute type 4 has an invalid length. [ 553.582728][T16774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2884'. [ 553.607887][T16776] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2887'. [ 553.736115][T16778] syzkaller0: entered promiscuous mode [ 553.743459][T16778] syzkaller0: entered allmulticast mode [ 553.752341][T16774] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 553.837020][T16793] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2889'. [ 553.850226][T16793] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2889'. [ 555.654158][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 556.276428][T16800] syzkaller1: entered promiscuous mode [ 556.282072][T16800] syzkaller1: entered allmulticast mode [ 556.471635][ T5911] bond5: (slave bridge1): failed to get link speed/duplex [ 556.512090][T16810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2893'. [ 556.529577][T16815] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2894'. [ 556.650549][ T5908] bond5: (slave bridge1): failed to get link speed/duplex [ 556.913310][T16838] netlink: 'syz.0.2897': attribute type 13 has an invalid length. [ 557.082262][ T76] bond5: (slave bridge1): failed to get link speed/duplex [ 558.211194][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 560.167791][T16858] lo: Caught tx_queue_len zero misconfig [ 560.174180][T16858] netlink: 'syz.1.2901': attribute type 14 has an invalid length. [ 560.200150][ T5281] veth0_macvtap: left promiscuous mode [ 560.341226][ T3326] bond5: (slave bridge1): failed to get link speed/duplex [ 560.471029][ T5895] bond5: (slave bridge1): failed to get link speed/duplex [ 560.586861][T16888] netlink: 'syz.3.2904': attribute type 1 has an invalid length. [ 560.619321][T16888] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.2904'. [ 560.636956][ T5911] bond5: (slave bridge1): failed to get link speed/duplex [ 560.668615][T16904] netlink: 'syz.2.2906': attribute type 1 has an invalid length. [ 560.816684][T16920] netlink: 'syz.4.2907': attribute type 2 has an invalid length. [ 560.834461][T16904] 8021q: adding VLAN 0 to HW filter on device bond11 [ 560.847329][T16920] netlink: 'syz.4.2907': attribute type 2 has an invalid length. [ 560.861565][ T3326] bond5: (slave bridge1): failed to get link speed/duplex [ 560.867599][T16920] netlink: 1347 bytes leftover after parsing attributes in process `syz.4.2907'. [ 560.906344][T16897] lo speed is unknown, defaulting to 1000 [ 560.947313][T16915] bond11: (slave geneve3): making interface the new active one [ 560.976067][T16915] bond11: (slave geneve3): Enslaving as an active interface with an up link [ 561.000659][T16913] team0: Device xfrm0 is of different type [ 561.228583][T16902] netlink: 'syz.2.2906': attribute type 4 has an invalid length. [ 561.258429][T16921] tipc: Enabling of bearer rejected, already enabled [ 561.294492][ T5895] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.317139][ T5895] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.528885][ T5895] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.615614][ T5895] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.725833][T16937] syzkaller0: entered promiscuous mode [ 561.740839][T16937] syzkaller0: entered allmulticast mode [ 561.851186][ T3326] bond5: (slave bridge1): failed to get link speed/duplex [ 561.893391][T16942] nbd4: detected capacity change from 0 to 63 [ 561.916003][T16943] block nbd4: NBD_DISCONNECT [ 561.994030][ T5902] bond5: (slave bridge1): failed to get link speed/duplex [ 562.013724][T16943] block nbd4: Disconnected due to user request. [ 562.048661][T16943] block nbd4: shutting down sockets [ 562.070532][ C0] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 562.080053][ C0] Buffer I/O error on dev nbd4, logical block 1, async page read [ 562.087963][ C0] Buffer I/O error on dev nbd4, logical block 2, async page read [ 562.095803][ C0] Buffer I/O error on dev nbd4, logical block 3, async page read [ 562.117448][ C0] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 562.126678][ C0] Buffer I/O error on dev nbd4, logical block 0, async page read [ 562.153820][ T25] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 562.168504][ T25] Buffer I/O error on dev nbd4, logical block 0, async page read [ 562.178680][ T25] Buffer I/O error on dev nbd4, logical block 1, async page read [ 562.188859][ T25] Buffer I/O error on dev nbd4, logical block 2, async page read [ 562.197891][ T25] Buffer I/O error on dev nbd4, logical block 3, async page read [ 562.208308][ T25] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 562.217410][ T76] bond5: (slave bridge1): failed to get link speed/duplex [ 562.227426][ T25] Buffer I/O error on dev nbd4, logical block 0, async page read [ 562.235331][ T25] Buffer I/O error on dev nbd4, logical block 1, async page read [ 562.246819][ T25] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 562.258566][ T25] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 562.271616][ T25] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 562.281282][ T25] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 562.291077][ T25] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 562.300605][ T5846] ldm_validate_partition_table(): Disk read failed. [ 562.311940][ T25] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 562.321058][ T5911] bond5: (slave bridge1): failed to get link speed/duplex [ 562.338497][ T5846] Dev nbd4: unable to read RDB block 0 [ 562.351794][ T5846] nbd4: unable to read partition table [ 562.371220][ T5846] ldm_validate_partition_table(): Disk read failed. [ 562.384513][ T5846] Dev nbd4: unable to read RDB block 0 [ 562.392957][ T5846] nbd4: unable to read partition table [ 562.430855][ T5911] bond5: (slave bridge1): failed to get link speed/duplex [ 562.497754][T16950] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2913'. [ 562.591428][ T5902] bond5: (slave bridge1): failed to get link speed/duplex [ 562.723832][T16966] netlink: 'syz.0.2916': attribute type 13 has an invalid length. [ 562.766206][T16961] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2915'. [ 562.793458][T16961] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2915'. [ 562.892213][T16971] vlan3: entered promiscuous mode [ 562.906297][T16971] hsr0: entered promiscuous mode [ 562.913849][T16971] vlan3: entered allmulticast mode [ 562.919266][T16971] hsr0: entered allmulticast mode [ 562.927317][T16973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2920'. [ 562.927471][T16971] hsr_slave_0: entered allmulticast mode [ 562.942689][T16971] hsr_slave_1: entered allmulticast mode [ 563.031084][T16971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2919'. [ 563.059415][T16971] hsr_slave_0: left promiscuous mode [ 563.083025][T16971] hsr_slave_1: left promiscuous mode [ 563.338879][T16990] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2923'. [ 564.074563][T17005] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2925'. [ 564.106175][T16989] bridge0: left allmulticast mode [ 564.119062][T16989] tipc: Resetting bearer [ 564.260686][T16989] batman_adv: batadv0: Interface deactivated: gretap1 [ 564.369285][T16989] veth15: left allmulticast mode [ 564.380254][T16989] bridge2: left allmulticast mode [ 564.396037][T16978] lo speed is unknown, defaulting to 1000 [ 564.419346][T17001] bridge11: entered promiscuous mode [ 564.425020][T17001] bridge11: entered allmulticast mode [ 564.435120][T17001] team0: Device bridge11 is of different type [ 564.488236][ T5911] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.515869][ T5911] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.528803][ T5911] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.544613][T17014] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 564.551640][ T5911] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.579452][T17011] bridge11: entered promiscuous mode [ 564.608382][T17014] block nbd0: must specify backend [ 564.616881][T17011] bridge11: entered allmulticast mode [ 564.657343][T17011] team0: Device bridge11 is of different type [ 564.758870][ T5911] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.776512][ T5911] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.794879][ T5911] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.804339][ T5911] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.839720][T17028] netlink: 'syz.3.2931': attribute type 13 has an invalid length. [ 565.006559][T17033] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2932'. [ 565.473467][T17049] netlink: 'syz.0.2937': attribute type 1 has an invalid length. [ 565.526206][T17049] 8021q: adding VLAN 0 to HW filter on device bond7 [ 565.699208][T17057] bond7: (slave veth11): Enslaving as an active interface with a down link [ 565.711817][T17061] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 565.718512][T17049] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 565.728297][T17061] __nla_validate_parse: 2 callbacks suppressed [ 565.728383][T17061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2939'. [ 565.745055][T17061] unsupported nla_type 216 [ 565.752342][T17049] bond7: (slave batadv1): making interface the new active one [ 565.773762][T17049] batadv1: entered promiscuous mode [ 565.783090][T17049] bond7: (slave batadv1): Enslaving as an active interface with an up link [ 566.043217][T17064] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2941'. [ 566.379925][T17075] tipc: Resetting bearer [ 566.529626][T17075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.558681][T17075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.574685][T17089] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2948'. [ 566.602221][T17089] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2948'. [ 566.788963][T17075] batman_adv: batadv0: Interface deactivated: gretap2 [ 566.845710][T17075] batman_adv: batadv0: Interface deactivated: gretap3 [ 566.903411][T17077] team0: Port device xfrm0 removed [ 566.912318][T17077] bond2: (slave gretap1): Releasing active interface [ 566.923057][T17077] bond3: (slave veth11): Releasing backup interface [ 566.938999][T17077] vlan1: left allmulticast mode [ 566.945233][T17077] geneve0: left allmulticast mode [ 566.951637][T17077] vlan1: left promiscuous mode [ 566.956588][T17077] geneve0: left promiscuous mode [ 566.962334][T17077] bridge0: port 1(vlan1) entered disabled state [ 566.973429][T17077] bond4: (slave bridge5): Releasing backup interface [ 566.982824][T17077] bond5: (slave bridge6): Removing an active aggregator [ 566.990214][T17077] bond5: (slave bridge6): Releasing backup interface [ 566.997680][T17077] bond5: (slave bridge6): the permanent HWaddr of slave - 56:d9:9f:59:0e:5f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 567.018130][T17099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2950'. [ 567.027351][T17099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2950'. [ 567.037314][T17077] bond5: (slave bridge7): Releasing backup interface [ 567.047249][T17077] bond6: (slave geneve2): Releasing active interface [ 567.057413][T17077] bond7: (slave veth15): Releasing active interface [ 567.068235][T17077] bond11: (slave geneve3): Releasing active interface [ 567.092006][T17099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2950'. [ 567.102079][T17101] bond8: left allmulticast mode [ 567.117185][T17101] bond8: left promiscuous mode [ 567.125976][T17099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2950'. [ 567.153061][T17101] bridge0: port 3(bond8) entered disabled state [ 567.246831][T17099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2950'. [ 567.263297][T17099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2950'. [ 567.307643][T17079] team0: Port device xfrm0 added [ 567.353689][ T76] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.377006][ T76] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.389932][ T76] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.399834][ T76] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.409487][ T76] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.419937][ T76] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.450122][ T76] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.459662][ T76] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.495265][ T76] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.512739][ T76] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.549305][ T76] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.584815][ T76] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.645260][T17114] netlink: 'syz.0.2953': attribute type 1 has an invalid length. [ 567.739457][T17114] 8021q: adding VLAN 0 to HW filter on device bond8 [ 567.759553][T17122] netlink: 'syz.4.2955': attribute type 2 has an invalid length. [ 567.838013][T17122] : entered promiscuous mode [ 567.860670][T17114] tipc: Enabled bearer , priority 10 [ 567.918869][T17114] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 567.959566][T17114] bond8: (slave batadv2): making interface the new active one [ 567.999981][T17114] bond8: (slave batadv2): Enslaving as an active interface with an up link [ 568.472465][T17144] net_ratelimit: 3 callbacks suppressed [ 568.472483][T17144] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 568.504991][ T5846] udevd[5846]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 568.592238][T17144] team0: Device xfrm0 is of different type [ 569.019531][T17162] lo speed is unknown, defaulting to 1000 [ 569.239607][T17172] syzkaller0: entered promiscuous mode [ 569.248309][T17172] syzkaller0: entered allmulticast mode [ 569.891985][T17192] netlink: 'syz.3.2971': attribute type 1 has an invalid length. [ 570.058135][T17188] lo speed is unknown, defaulting to 1000 [ 570.511015][T17205] xt_CT: You must specify a L4 protocol and not use inversions on it [ 570.546990][T17188] dvmrp0: entered allmulticast mode [ 570.614674][T17203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 570.921728][ T76] dvmrp0: left allmulticast mode [ 570.996724][T17213] __nla_validate_parse: 18 callbacks suppressed [ 570.996742][T17213] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2977'. [ 571.061984][T17213] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2977'. [ 571.183852][T17228] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2978'. [ 571.216853][T17228] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2978'. [ 571.443185][T17237] syzkaller0: entered promiscuous mode [ 571.451982][T17237] syzkaller0: entered allmulticast mode [ 571.466331][T17241] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2981'. [ 571.520273][T17237] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2980'. [ 571.563364][T17241] tipc: Resetting bearer [ 571.608441][T17245] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 571.629186][T17241] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 571.774539][T17257] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2984'. [ 571.922016][T17265] netlink: 'syz.4.2986': attribute type 9 has an invalid length. [ 571.982901][T17267] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2988'. [ 571.994679][T17267] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2988'. [ 572.075314][T17269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2989'. [ 572.084406][T17269] netlink: 'syz.1.2989': attribute type 6 has an invalid length. [ 572.092689][T17269] netlink: 'syz.1.2989': attribute type 5 has an invalid length. [ 572.112146][T17269] netlink: 'syz.1.2989': attribute type 6 has an invalid length. [ 572.129497][T17269] netlink: 'syz.1.2989': attribute type 5 has an invalid length. [ 572.829483][T17296] lo speed is unknown, defaulting to 1000 [ 572.987192][T17300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.012035][T17300] 8021q: adding VLAN 0 to HW filter on device team0 [ 573.027281][T17300] tipc: Resetting bearer [ 573.043658][T17300] dummy0: left promiscuous mode [ 573.060994][T17300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 573.247336][T17300] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 573.280940][T17300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 573.324895][T17300] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 573.788247][T17331] syzkaller0: entered promiscuous mode [ 573.811684][T17331] syzkaller0: entered allmulticast mode [ 574.016478][T17360] netlink: 'syz.2.3001': attribute type 6 has an invalid length. [ 574.028388][T17360] netlink: 'syz.2.3001': attribute type 5 has an invalid length. [ 574.636613][T17349] tipc: Started in network mode [ 574.663546][T17349] tipc: Node identity 7f000001, cluster identity 4711 [ 574.702451][T17349] tipc: Enabled bearer , priority 10 [ 574.782045][T17349] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 574.827377][T17349] tipc: Enabled bearer , priority 10 [ 575.034700][T17410] netlink: 'syz.1.3007': attribute type 1 has an invalid length. [ 575.062622][T17410] netlink: 'syz.1.3007': attribute type 8 has an invalid length. [ 575.413912][T17421] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 575.759653][T17437] netlink: 'syz.0.3012': attribute type 6 has an invalid length. [ 575.925755][T17442] syzkaller0: entered promiscuous mode [ 575.935989][T17442] syzkaller0: entered allmulticast mode [ 575.948480][ T5745] tipc: Node number set to 2130706433 [ 576.198811][T17444] __nla_validate_parse: 18 callbacks suppressed [ 576.198831][T17444] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3015'. [ 576.640889][T17459] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3018'. [ 576.728701][T17459] tipc: Resetting bearer [ 576.792595][T17464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3021'. [ 576.808239][T17463] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3019'. [ 576.819842][T17459] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 576.845935][T17464] team0: entered allmulticast mode [ 576.869694][T17464] team_slave_0: entered allmulticast mode [ 576.907617][T17464] team_slave_1: entered allmulticast mode [ 576.949772][T17473] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3022'. [ 576.996402][T17473] Bluetooth: MGMT ver 1.23 [ 577.297544][T17488] syzkaller0: entered promiscuous mode [ 577.316854][T17488] syzkaller0: entered allmulticast mode [ 577.350022][T17488] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3025'. [ 577.398924][T17493] syzkaller1: entered promiscuous mode [ 577.424866][T17493] syzkaller1: entered allmulticast mode [ 577.508379][T17498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3027'. [ 577.611516][T17496] lo speed is unknown, defaulting to 1000 [ 577.854255][ T30] audit: type=1800 audit(1784803944.353:14): pid=17478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3022" name="memory.events" dev="tmpfs" ino=3244 res=0 errno=0 [ 578.019426][T17511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3030'. [ 578.028721][T17511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3030'. [ 578.038233][T17511] validate_nla: 3 callbacks suppressed [ 578.038248][T17511] netlink: 'syz.1.3030': attribute type 6 has an invalid length. [ 578.058290][T17511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3030'. [ 578.068175][T17511] netlink: 'syz.1.3030': attribute type 6 has an invalid length. [ 578.423011][T17514] netdevsim netdevsim1: Direct firmware load for .. failed with error -2 [ 578.451222][T17514] netdevsim netdevsim1: Falling back to sysfs fallback for: .. [ 578.908226][T17521] netlink: 'syz.2.3032': attribute type 1 has an invalid length. [ 578.992107][T17521] bond12: option ad_actor_sys_prio: invalid value (0) [ 579.000517][T17521] bond12: option ad_actor_sys_prio: allowed values 1 - 65535 [ 579.018576][T17521] bond12 (unregistering): Released all slaves [ 579.439303][T17540] syzkaller0: entered promiscuous mode [ 579.468345][T17540] syzkaller0: entered allmulticast mode [ 579.647587][T17545] netlink: 'syz.2.3041': attribute type 6 has an invalid length. [ 579.661230][T17545] netlink: 'syz.2.3041': attribute type 6 has an invalid length. [ 580.813049][T17607] syzkaller0: entered promiscuous mode [ 580.818745][T17607] syzkaller0: entered allmulticast mode [ 580.878274][T17610] netlink: 'syz.2.3054': attribute type 5 has an invalid length. [ 580.901248][T17610] netlink: 'syz.2.3054': attribute type 5 has an invalid length. [ 581.436403][T17627] syz_tun: entered allmulticast mode [ 581.471298][T15340] IPVS: starting estimator thread 0... [ 581.477892][T17625] syz_tun: left allmulticast mode [ 581.572051][T17634] IPVS: using max 30 ests per chain, 72000 per kthread [ 581.956208][T17658] __nla_validate_parse: 18 callbacks suppressed [ 581.956228][T17658] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3063'. [ 582.028536][T17658] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3063'. [ 582.207851][T17664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3066'. [ 582.231776][T17664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3066'. [ 582.249539][T17666] syzkaller0: entered promiscuous mode [ 582.256407][T17664] netlink: 'syz.1.3066': attribute type 5 has an invalid length. [ 582.266559][T17666] syzkaller0: entered allmulticast mode [ 582.281999][T17666] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3067'. [ 582.492519][T17676] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 582.585998][T17681] lo speed is unknown, defaulting to 1000 [ 583.592263][T17718] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20000 [ 583.674318][T17725] syzkaller0: entered promiscuous mode [ 583.689853][T17725] syzkaller0: entered allmulticast mode [ 583.713182][T17725] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3083'. [ 584.167051][T17750] tipc: Resetting bearer [ 584.192549][T17750] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 584.457637][T17760] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3091'. [ 584.514698][T17760] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3091'. [ 584.542603][T17760] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3091'. [ 584.693568][T17776] syzkaller0: entered promiscuous mode [ 584.699095][T17776] syzkaller0: entered allmulticast mode [ 584.749402][T17779] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.757029][T17779] tipc: Resetting bearer [ 584.765367][T17779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 584.772845][T17779] tipc: Resetting bearer [ 584.837244][T17779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 584.849041][T17779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 584.874855][T17779] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 584.891872][T17779] veth1_vlan: left promiscuous mode [ 584.908650][T17779] veth0_vlan: left promiscuous mode [ 584.951632][T17779] veth0_vlan: entered promiscuous mode [ 584.972465][T17779] veth1_vlan: entered promiscuous mode [ 584.989251][T17779] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 585.059245][ T3326] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.070004][ T3326] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.081214][T17788] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3097'. [ 585.094707][ T3326] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.109487][ T3326] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.178789][T17792] syzkaller0: entered promiscuous mode [ 585.185650][T17792] syzkaller0: entered allmulticast mode [ 586.831003][T17830] tipc: Resetting bearer [ 586.856328][T15339] lo speed is unknown, defaulting to 1000 [ 587.388563][T17760] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 587.664401][T17835] syzkaller0: entered promiscuous mode [ 587.687375][T17835] syzkaller0: entered allmulticast mode [ 587.720145][T17841] __nla_validate_parse: 2 callbacks suppressed [ 587.720163][T17841] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3105'. [ 587.804934][T17839] tipc: Resetting bearer [ 587.954531][T17839] bond2: (slave veth13): Releasing active interface [ 587.992877][T17839] bond5: (slave bridge8): Releasing backup interface [ 588.026308][T17839] bond9: (slave bridge10): Releasing backup interface [ 588.034453][T17839] bridge10: left promiscuous mode [ 588.040144][T17839] bridge10: left allmulticast mode [ 588.046796][T15339] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 588.058517][T15339] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 588.122963][T17843] team0: Device xfrm0 failed to enter team mode [ 588.148694][T17843] team0: Device xfrm0 failed to enter team mode [ 588.181369][T17846] tipc: Enabling of bearer rejected, already enabled [ 588.225503][T17858] syzkaller0: entered promiscuous mode [ 588.267651][T17858] syzkaller0: entered allmulticast mode [ 588.289558][T17863] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3109'. [ 588.330679][T15339] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 588.730279][T17883] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3117'. [ 588.819762][T17886] tipc: Resetting bearer [ 588.853296][T15339] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 588.903804][T17886] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 589.087673][T17904] netlink: 4456 bytes leftover after parsing attributes in process `syz.1.3119'. [ 589.148154][T17909] netlink: 'syz.0.3122': attribute type 2 has an invalid length. [ 589.225907][T17890] syzkaller0: entered promiscuous mode [ 589.247389][T17890] syzkaller0: entered allmulticast mode [ 589.272630][T17911] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3121'. [ 589.383839][T17916] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3122'. [ 589.422307][T17916] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3122'. [ 589.551587][T17924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3124'. [ 592.059817][T17933] syzkaller0: entered promiscuous mode [ 592.069929][T17937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3128'. [ 592.083865][T17933] syzkaller0: entered allmulticast mode [ 592.098083][T17937] xt_TCPMSS: Only works on TCP SYN packets [ 592.115796][T17933] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3126'. [ 592.243070][T17939] syzkaller0: entered promiscuous mode [ 592.256748][T17939] syzkaller0: entered allmulticast mode [ 592.323946][T17947] erspan0: entered promiscuous mode [ 592.336893][T17947] erspan0: entered allmulticast mode [ 592.661599][T17961] tipc: Resetting bearer [ 592.679076][T17961] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 592.793772][T17966] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3135'. [ 592.978252][T17970] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3136'. [ 592.988046][T17970] openvswitch: netlink: EtherType 0 is less than min 600 [ 593.142338][T17973] syzkaller0: entered promiscuous mode [ 593.171229][T17973] syzkaller0: entered allmulticast mode [ 593.275801][T17978] syzkaller0: entered promiscuous mode [ 593.294561][T17978] syzkaller0: entered allmulticast mode [ 593.405217][T17981] bridge4: entered promiscuous mode [ 593.410924][T17981] bridge4: entered allmulticast mode [ 593.498903][T17983] syzkaller0: entered promiscuous mode [ 593.512650][T17983] syzkaller0: entered allmulticast mode [ 593.532159][T17983] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3142'. [ 593.544043][T17985] syzkaller0: entered promiscuous mode [ 593.549584][T17985] syzkaller0: entered allmulticast mode [ 593.791798][T17994] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3145'. [ 593.810765][T17994] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3145'. [ 594.007264][T18004] tipc: Resetting bearer [ 594.061990][T18004] team0: Device xfrm0 failed to enter team mode [ 594.078160][T15339] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 594.085855][T18004] team0: Device xfrm0 failed to enter team mode [ 594.094291][T15339] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 594.182934][T15339] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 594.310717][T15339] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 594.854302][T18007] syzkaller0: entered promiscuous mode [ 594.859988][T18007] syzkaller0: entered allmulticast mode [ 595.398419][T17949] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 597.468522][T18017] syzkaller0: entered promiscuous mode [ 597.491249][T18017] syzkaller0: entered allmulticast mode [ 597.653809][T18039] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3154'. [ 597.719405][T18045] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3154'. [ 597.782492][T18047] block nbd0: must specify backend [ 599.183419][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 600.038616][T18027] wlan0: renamed from sit0 [ 600.044462][T18027] wlan0: entered promiscuous mode [ 600.049600][T18027] wlan0: entered allmulticast mode [ 600.056268][T18027] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3154'. [ 600.065831][T18027] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 600.083516][T18053] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3155'. [ 600.430954][T18073] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3160'. [ 600.451015][T18073] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3160'. [ 600.629795][T18074] netlink: 'syz.3.3159': attribute type 10 has an invalid length. [ 600.714422][T18069] lo: entered allmulticast mode [ 600.952866][T18091] team0: Port device xfrm0 removed [ 600.971172][T18091] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 600.997780][T18091] team0: Port device xfrm0 added [ 601.009667][T18091] tipc: Enabling of bearer rejected, already enabled [ 601.096081][T18096] syzkaller0: entered promiscuous mode [ 601.107344][T18096] syzkaller0: entered allmulticast mode [ 601.245756][T18101] syzkaller0: entered promiscuous mode [ 601.253092][T18101] syzkaller0: entered allmulticast mode [ 601.460696][T18106] syzkaller0: entered promiscuous mode [ 601.468773][T18106] syzkaller0: entered allmulticast mode [ 601.486788][T18106] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3169'. [ 601.740271][T18113] tipc: Enabled bearer , priority 0 [ 601.895920][T18112] tipc: Resetting bearer [ 601.967812][T18122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3171'. [ 601.989286][T18122] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3171'. [ 601.999865][T18112] tipc: Disabling bearer [ 602.020711][T18119] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3172'. [ 602.041558][T18125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3174'. [ 602.043115][T18119] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3172'. [ 602.108159][ T50] block nbd3: Receive control failed (result -107) [ 602.141975][T18131] netlink: 'syz.1.3175': attribute type 1 has an invalid length. [ 602.207004][T18131] bond11: entered promiscuous mode [ 602.212353][T18131] bond11: entered allmulticast mode [ 602.218844][T18131] 8021q: adding VLAN 0 to HW filter on device bond11 [ 602.280620][T18133] erspan1: entered allmulticast mode [ 602.327622][T18133] bond11: (slave erspan1): making interface the new active one [ 602.335403][T18133] erspan1: entered promiscuous mode [ 602.353582][T18133] bond11: (slave erspan1): Enslaving as an active interface with an up link [ 602.391133][T18135] syz.1.3175 (18135) used obsolete PPPIOCDETACH ioctl [ 602.424073][T18138] syzkaller0: entered promiscuous mode [ 602.429752][T18138] syzkaller0: entered allmulticast mode [ 602.566822][T18143] syzkaller0: entered promiscuous mode [ 602.574669][T18143] syzkaller0: entered allmulticast mode [ 602.587060][T18146] syzkaller0: entered promiscuous mode [ 602.595311][T18146] syzkaller0: entered allmulticast mode [ 602.798243][T18153] syzkaller0: entered promiscuous mode [ 602.815422][T18153] syzkaller0: entered allmulticast mode [ 602.984291][T18162] syzkaller0: entered promiscuous mode [ 603.005664][T18162] syzkaller0: entered allmulticast mode [ 603.657492][T18183] syzkaller0: entered promiscuous mode [ 603.668632][T18183] syzkaller0: entered allmulticast mode [ 603.778091][T18186] syzkaller0: entered promiscuous mode [ 603.785185][T18186] syzkaller0: entered allmulticast mode [ 603.928134][T18189] netlink: 'syz.2.3195': attribute type 4 has an invalid length. [ 603.948236][T18189] netlink: 'syz.2.3195': attribute type 4 has an invalid length. [ 603.966188][ T7875] lo speed is unknown, defaulting to 1000 [ 603.972261][ T7875] syz2: Port: 1 Link ACTIVE [ 604.040950][T18190] bridge4: entered promiscuous mode [ 604.053988][T18190] bridge4: entered allmulticast mode [ 604.082540][T18193] syzkaller0: entered promiscuous mode [ 604.093834][T18193] syzkaller0: entered allmulticast mode [ 604.642078][T18215] team0: Port device xfrm0 removed [ 604.663943][T18215] team0: Port device xfrm0 added [ 604.675352][T18215] tipc: Enabling of bearer rejected, already enabled [ 604.848007][T18224] syzkaller0: entered promiscuous mode [ 604.855523][T18224] syzkaller0: entered allmulticast mode [ 605.035846][T18231] bond10: Unable to set up delay as MII monitoring is disabled [ 605.044974][T18231] bond10 (unregistering): Released all slaves [ 605.062556][T18230] syzkaller0: entered promiscuous mode [ 605.068773][T18230] syzkaller0: entered allmulticast mode [ 605.360155][T18247] syzkaller0: entered promiscuous mode [ 605.366746][T18247] syzkaller0: entered allmulticast mode [ 605.387976][T18247] __nla_validate_parse: 19 callbacks suppressed [ 605.388003][T18247] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3211'. [ 605.811796][T18260] team0: Port device xfrm0 removed [ 605.825455][T18260] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 605.857583][T18260] team0: Port device xfrm0 added [ 605.863619][T18260] tipc: Enabling of bearer rejected, already enabled [ 606.384829][T18283] syzkaller0: create flow: hash 1273618192 index 1 [ 606.390164][ T5911] syzkaller0: tun_net_xmit 76 [ 606.402446][ T5911] syzkaller0: tun_net_xmit 48 [ 606.410739][ T5625] syzkaller0: tun_net_xmit 76 [ 606.425755][T18281] syzkaller0: entered promiscuous mode [ 606.436265][T18281] syzkaller0: entered allmulticast mode [ 606.535241][ T7875] syzkaller0: tun_net_xmit 76 [ 606.555824][T18285] netlink: 'syz.2.3224': attribute type 11 has an invalid length. [ 606.564279][T18278] syzkaller0: delete flow: hash 1273618192 index 1 [ 606.734067][T18289] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3225'. [ 609.107460][T18280] lo speed is unknown, defaulting to 1000 [ 609.126112][T18296] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3226'. [ 609.288504][T18307] tipc: Resetting bearer [ 609.302698][T18307] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 609.386338][T18307] team0: Device xfrm0 is of different type [ 609.404288][T18309] syzkaller0: entered promiscuous mode [ 609.409915][T18309] syzkaller0: entered allmulticast mode [ 609.425741][T18310] tipc: Enabling of bearer rejected, already enabled [ 609.776458][T18329] syzkaller0: entered promiscuous mode [ 609.799423][T18329] syzkaller0: entered allmulticast mode [ 610.056030][T18343] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3238'. [ 610.101323][T18344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3239'. [ 610.301550][T18352] lo speed is unknown, defaulting to 1000 [ 610.749754][T18366] xt_hashlimit: max too large, truncated to 1048576 [ 610.883323][T18352] x_tables: duplicate underflow at hook 3 [ 611.167118][T18378] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 611.368606][T18384] syzkaller0: entered promiscuous mode [ 611.376114][T18384] syzkaller0: entered allmulticast mode [ 611.543025][T18393] netlink: 'syz.1.3252': attribute type 13 has an invalid length. [ 611.606491][T18393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3252'. [ 611.946338][T18403] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 611.979126][T18405] netlink: 'syz.2.3256': attribute type 13 has an invalid length. [ 612.002869][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.012844][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.022295][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.024995][T18407] nbd: nbd1 already in use [ 612.032565][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.079815][T18411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3254'. [ 612.096324][T18407] block nbd1: NBD_DISCONNECT [ 612.106470][T18409] syzkaller0: entered promiscuous mode [ 612.117472][T18407] block nbd1: Send disconnect failed -104 [ 612.136232][T18409] syzkaller0: entered allmulticast mode [ 612.148036][T18407] block nbd1: shutting down sockets [ 612.213556][T18418] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3256'. [ 612.628082][T18389] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 612.874535][T18435] syzkaller0: entered promiscuous mode [ 612.895231][T18435] syzkaller0: entered allmulticast mode [ 612.992345][T18443] GUP no longer grows the stack in syz.1.3264 (18443): 200000003000-20000000a000 (200000001000) [ 613.024889][T18443] CPU: 0 UID: 0 PID: 18443 Comm: syz.1.3264 Not tainted syzkaller #0 PREEMPT(full) [ 613.024922][T18443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 613.024946][T18443] Call Trace: [ 613.025018][T18443] [ 613.025065][T18443] dump_stack_lvl+0xe8/0x150 [ 613.025187][T18443] __get_user_pages+0x238c/0x2720 [ 613.025256][T18443] ? __gup_longterm_locked+0xc3b/0x15c0 [ 613.025334][T18443] __gup_longterm_locked+0xd52/0x15c0 [ 613.025361][T18443] ? lock_acquire+0x106/0x350 [ 613.025436][T18443] gup_fast_fallback+0x1d8c/0x20e0 [ 613.025488][T18443] ? __pfx_gup_fast_fallback+0x10/0x10 [ 613.025509][T18443] ? futex_unqueue+0x22/0x240 [ 613.025557][T18443] ? is_valid_gup_args+0x11f/0x200 [ 613.025579][T18443] ? get_user_pages_fast+0x4d/0xb0 [ 613.025603][T18443] __iov_iter_get_pages_alloc+0x378/0xa40 [ 613.025741][T18443] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 613.025789][T18443] iov_iter_get_pages2+0x5e/0xa0 [ 613.025820][T18443] __se_sys_vmsplice+0x7b5/0x1660 [ 613.025866][T18443] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 613.025893][T18443] ? __pfx_futex_wait+0x10/0x10 [ 613.025945][T18443] ? 0xffffffffff600000 [ 613.025996][T18443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.026038][T18443] do_syscall_64+0x174/0x580 [ 613.026138][T18443] ? clear_bhb_loop+0x40/0x90 [ 613.026163][T18443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.026182][T18443] RIP: 0033:0x7fa63299de99 [ 613.026229][T18443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 613.026246][T18443] RSP: 002b:00007fa63382c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 613.026279][T18443] RAX: ffffffffffffffda RBX: 00007fa632c25fa0 RCX: 00007fa63299de99 [ 613.026294][T18443] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000008 [ 613.026306][T18443] RBP: 00007fa632a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 613.026318][T18443] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 613.026330][T18443] R13: 00007fa632c26038 R14: 00007fa632c25fa0 R15: 00007fffbc18aed8 [ 613.026361][T18443] [ 613.419472][T18453] batadv_slave_1: entered promiscuous mode [ 613.927215][T18467] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3271'. [ 613.938721][T18467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3271'. [ 613.948838][T18467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3271'. [ 613.987277][T18467] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3271'. [ 614.134361][T18446] batadv_slave_1: left promiscuous mode [ 614.352965][T18474] syzkaller0: entered promiscuous mode [ 614.391963][T18474] syzkaller0: entered allmulticast mode [ 614.474560][T18484] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3274'. [ 614.496555][T18484] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3274'. [ 614.851149][T18489] syzkaller0: entered promiscuous mode [ 614.866307][T18489] syzkaller0: entered allmulticast mode [ 614.930142][T18491] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3278'. [ 615.014591][T18491] bond12: option min_links: invalid value (18446744073709551612) [ 615.051397][T18491] bond12: option min_links: allowed values 0 - 2147483647 [ 615.107357][T18491] bond12 (unregistering): Released all slaves [ 615.180673][T18493] debugfs: '!' already exists in 'ieee80211' [ 615.737232][T18514] xt_hashlimit: size too large, truncated to 1048576 [ 615.888658][T18513] bridge0: left promiscuous mode [ 615.902520][T18513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 615.914103][T18513] tipc: Resetting bearer [ 615.921872][T18513] 8021q: adding VLAN 0 to HW filter on device team0 [ 615.960721][T18513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 616.428765][T18536] syzkaller0: entered promiscuous mode [ 616.447808][T18536] syzkaller0: entered allmulticast mode [ 616.619859][T18555] __nla_validate_parse: 2 callbacks suppressed [ 616.619879][T18555] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3289'. [ 616.661678][T18555] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3289'. [ 619.670411][T18552] [ 619.672776][T18552] ====================================================== [ 619.679812][T18552] WARNING: possible circular locking dependency detected [ 619.686915][T18552] syzkaller #0 Not tainted [ 619.691337][T18552] ------------------------------------------------------ [ 619.698482][T18552] syz.3.3289/18552 is trying to acquire lock: [ 619.704556][T18552] ffff88801c295180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 619.715038][T18552] [ 619.715038][T18552] but task is already holding lock: [ 619.722415][T18552] ffff88801c2952a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 619.733443][T18552] [ 619.733443][T18552] which lock already depends on the new lock. [ 619.733443][T18552] [ 619.743844][T18552] [ 619.743844][T18552] the existing dependency chain (in reverse order) is: [ 619.752848][T18552] [ 619.752848][T18552] -> #12 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 619.761665][T18552] down_read+0x4a/0x330 [ 619.766404][T18552] kernfs_remove_by_name_ns+0x3f/0x140 [ 619.772428][T18552] internal_create_group+0x58e/0x1180 [ 619.778342][T18552] sysfs_update_groups+0x60/0x130 [ 619.783899][T18552] pmu_dev_alloc+0x29b/0x300 [ 619.789042][T18552] perf_event_sysfs_init+0x76/0x100 [ 619.794751][T18552] do_one_initcall+0x250/0x870 [ 619.800033][T18552] do_initcall_level+0x10a/0x1a0 [ 619.805485][T18552] do_initcalls+0x59/0xa0 [ 619.810324][T18552] kernel_init_freeable+0x29d/0x3e0 [ 619.816072][T18552] kernel_init+0x1d/0x1d0 [ 619.820917][T18552] ret_from_fork+0x514/0xb70 [ 619.826047][T18552] ret_from_fork_asm+0x1a/0x30 [ 619.831322][T18552] [ 619.831322][T18552] -> #11 (pmus_lock){+.+.}-{4:4}: [ 619.838530][T18552] __mutex_lock+0x19d/0x1550 [ 619.843632][T18552] perf_event_init_cpu+0x1d1/0x7a0 [ 619.849264][T18552] cpuhp_invoke_callback+0x434/0x810 [ 619.855088][T18552] cpuhp_thread_fun+0x362/0x780 [ 619.860457][T18552] smpboot_thread_fn+0x57c/0xa80 [ 619.865928][T18552] kthread+0x388/0x470 [ 619.870511][T18552] ret_from_fork+0x514/0xb70 [ 619.875612][T18552] ret_from_fork_asm+0x1a/0x30 [ 619.880969][T18552] [ 619.880969][T18552] -> #10 (cpuhp_state-up){+.+.}-{0:0}: [ 619.888603][T18552] cpuhp_thread_fun+0x127/0x780 [ 619.893971][T18552] smpboot_thread_fn+0x57c/0xa80 [ 619.899421][T18552] kthread+0x388/0x470 [ 619.904002][T18552] ret_from_fork+0x514/0xb70 [ 619.909105][T18552] ret_from_fork_asm+0x1a/0x30 [ 619.914375][T18552] [ 619.914375][T18552] -> #9 (cpu_hotplug_lock){++++}-{0:0}: [ 619.922098][T18552] cpus_read_lock+0x42/0x160 [ 619.927200][T18552] static_key_slow_inc+0x12/0x30 [ 619.932673][T18552] udp_tunnel_encap_enable+0x86/0xb0 [ 619.938578][T18552] udp_lib_setsockopt+0x5b6/0x6b0 [ 619.944118][T18552] udpv6_setsockopt+0x67/0xb0 [ 619.949397][T18552] do_sock_setsockopt+0x17c/0x1b0 [ 619.954983][T18552] __x64_sys_setsockopt+0x13d/0x1b0 [ 619.960687][T18552] do_syscall_64+0x174/0x580 [ 619.965798][T18552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.972200][T18552] [ 619.972200][T18552] -> #8 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 619.979941][T18552] lock_sock_nested+0x41/0x100 [ 619.985328][T18552] tls_sw_sendmsg+0x161/0x2860 [ 619.990693][T18552] sock_sendmsg_nosec+0x90/0x180 [ 619.996242][T18552] __sys_sendto+0x408/0x5a0 [ 620.001354][T18552] __x64_sys_sendto+0xde/0x100 [ 620.006646][T18552] do_syscall_64+0x174/0x580 [ 620.011756][T18552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.018173][T18552] [ 620.018173][T18552] -> #7 (&ctx->tx_lock){+.+.}-{4:4}: [ 620.025637][T18552] __mutex_lock+0x19d/0x1550 [ 620.030739][T18552] tls_sw_sendmsg+0x13c/0x2860 [ 620.036016][T18552] sock_sendmsg_nosec+0x90/0x180 [ 620.041471][T18552] sock_sendmsg+0x1ca/0x2d0 [ 620.046482][T18552] __sock_xmit+0x245/0x4f0 [ 620.051490][T18552] nbd_disconnect+0x3ad/0x560 [ 620.056699][T18552] nbd_disconnect_and_put+0x32/0x280 [ 620.062507][T18552] nbd_genl_disconnect+0x4af/0x590 [ 620.068227][T18552] genl_family_rcv_msg_doit+0x233/0x340 [ 620.074369][T18552] genl_rcv_msg+0x614/0x7a0 [ 620.079395][T18552] netlink_rcv_skb+0x226/0x4a0 [ 620.084671][T18552] genl_rcv+0x28/0x40 [ 620.089228][T18552] netlink_unicast+0x7bb/0x940 [ 620.094508][T18552] netlink_sendmsg+0x813/0xb40 [ 620.099799][T18552] sock_sendmsg_nosec+0x13a/0x180 [ 620.105339][T18552] ____sys_sendmsg+0x54e/0x850 [ 620.110707][T18552] ___sys_sendmsg+0x2a5/0x360 [ 620.115905][T18552] __x64_sys_sendmsg+0x1b1/0x290 [ 620.121357][T18552] do_syscall_64+0x174/0x580 [ 620.126463][T18552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.132877][T18552] [ 620.132877][T18552] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 620.140521][T18552] __mutex_lock+0x19d/0x1550 [ 620.145641][T18552] nbd_queue_rq+0x373/0x1150 [ 620.150751][T18552] blk_mq_dispatch_rq_list+0x499/0x1990 [ 620.156919][T18552] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 620.163808][T18552] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 620.170309][T18552] blk_mq_run_work_fn+0x16c/0x300 [ 620.175844][T18552] process_scheduled_works+0xa8e/0x14e0 [ 620.181905][T18552] worker_thread+0xa47/0xfb0 [ 620.187046][T18552] kthread+0x388/0x470 [ 620.191631][T18552] ret_from_fork+0x514/0xb70 [ 620.196739][T18552] ret_from_fork_asm+0x1a/0x30 [ 620.202010][T18552] [ 620.202010][T18552] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 620.209207][T18552] __mutex_lock+0x19d/0x1550 [ 620.214311][T18552] nbd_queue_rq+0xc1/0x1150 [ 620.219331][T18552] blk_mq_dispatch_rq_list+0x499/0x1990 [ 620.225388][T18552] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 620.232231][T18552] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 620.238721][T18552] blk_mq_run_work_fn+0x16c/0x300 [ 620.244253][T18552] process_scheduled_works+0xa8e/0x14e0 [ 620.250320][T18552] worker_thread+0xa47/0xfb0 [ 620.255440][T18552] kthread+0x388/0x470 [ 620.260036][T18552] ret_from_fork+0x514/0xb70 [ 620.265179][T18552] ret_from_fork_asm+0x1a/0x30 [ 620.270451][T18552] [ 620.270451][T18552] -> #4 (set->srcu){.+.+}-{0:0}: [ 620.277650][T18552] __synchronize_srcu+0xc9/0x2f0 [ 620.283124][T18552] elevator_switch+0x1e8/0x7b0 [ 620.288459][T18552] elevator_change+0x2fa/0x480 [ 620.293732][T18552] elevator_set_default+0x375/0x440 [ 620.299440][T18552] blk_register_queue+0x3f3/0x4e0 [ 620.305019][T18552] __add_disk+0x6cb/0xe30 [ 620.309885][T18552] add_disk_fwnode+0x100/0x3a0 [ 620.315151][T18552] nbd_dev_add+0x733/0xb60 [ 620.320105][T18552] nbd_init+0x15f/0x1e0 [ 620.324775][T18552] do_one_initcall+0x250/0x870 [ 620.330055][T18552] do_initcall_level+0x10a/0x1a0 [ 620.335515][T18552] do_initcalls+0x59/0xa0 [ 620.340362][T18552] kernel_init_freeable+0x29d/0x3e0 [ 620.346071][T18552] kernel_init+0x1d/0x1d0 [ 620.350913][T18552] ret_from_fork+0x514/0xb70 [ 620.356016][T18552] ret_from_fork_asm+0x1a/0x30 [ 620.361373][T18552] [ 620.361373][T18552] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 620.369180][T18552] __mutex_lock+0x19d/0x1550 [ 620.374278][T18552] elevator_change+0x1af/0x480 [ 620.379553][T18552] elevator_set_none+0xb5/0x140 [ 620.384914][T18552] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 620.391237][T18552] nbd_start_device+0x189/0xb30 [ 620.396603][T18552] nbd_genl_connect+0x1597/0x1c10 [ 620.402140][T18552] genl_family_rcv_msg_doit+0x233/0x340 [ 620.408207][T18552] genl_rcv_msg+0x614/0x7a0 [ 620.413221][T18552] netlink_rcv_skb+0x226/0x4a0 [ 620.418496][T18552] genl_rcv+0x28/0x40 [ 620.422985][T18552] netlink_unicast+0x7bb/0x940 [ 620.428265][T18552] netlink_sendmsg+0x813/0xb40 [ 620.433534][T18552] sock_sendmsg_nosec+0x13a/0x180 [ 620.439068][T18552] ____sys_sendmsg+0x54e/0x850 [ 620.444336][T18552] ___sys_sendmsg+0x2a5/0x360 [ 620.449520][T18552] __x64_sys_sendmsg+0x1b1/0x290 [ 620.454965][T18552] do_syscall_64+0x174/0x580 [ 620.460068][T18552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.466466][T18552] [ 620.466466][T18552] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 620.475057][T18552] blk_alloc_queue+0x544/0x690 [ 620.480338][T18552] __blk_mq_alloc_disk+0x194/0x390 [ 620.485977][T18552] nbd_dev_add+0x494/0xb60 [ 620.490996][T18552] nbd_init+0x15f/0x1e0 [ 620.495669][T18552] do_one_initcall+0x250/0x870 [ 620.500950][T18552] do_initcall_level+0x10a/0x1a0 [ 620.506404][T18552] do_initcalls+0x59/0xa0 [ 620.511241][T18552] kernel_init_freeable+0x29d/0x3e0 [ 620.516951][T18552] kernel_init+0x1d/0x1d0 [ 620.521797][T18552] ret_from_fork+0x514/0xb70 [ 620.526909][T18552] ret_from_fork_asm+0x1a/0x30 [ 620.532187][T18552] [ 620.532187][T18552] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 620.539388][T18552] fs_reclaim_acquire+0x71/0x100 [ 620.544837][T18552] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 620.551110][T18552] alloc_inode+0xb8/0x1b0 [ 620.555955][T18552] iget_locked+0x131/0x6a0 [ 620.560882][T18552] kernfs_get_inode+0x4f/0x770 [ 620.566156][T18552] kernfs_get_tree+0x5cd/0x980 [ 620.571435][T18552] vfs_get_tree+0x92/0x2a0 [ 620.576354][T18552] do_new_mount+0x319/0xdc0 [ 620.581367][T18552] __se_sys_mount+0x31d/0x420 [ 620.586553][T18552] do_syscall_64+0x174/0x580 [ 620.591651][T18552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.598055][T18552] [ 620.598055][T18552] -> #0 (&root->kernfs_rwsem){++++}-{4:4}: [ 620.606045][T18552] __lock_acquire+0x1520/0x2cf0 [ 620.611496][T18552] lock_acquire+0x106/0x350 [ 620.616512][T18552] down_write+0x96/0x200 [ 620.621270][T18552] kernfs_remove_by_name_ns+0x4e/0x140 [ 620.627261][T18552] sysfs_remove_group+0x101/0x2e0 [ 620.632794][T18552] sysfs_remove_groups+0x54/0xb0 [ 620.638243][T18552] net_rx_queue_update_kobjects+0x6b7/0x780 [ 620.644747][T18552] netdev_unregister_kobject+0xff/0x450 [ 620.650832][T18552] unregister_netdevice_many_notify+0x1be4/0x2150 [ 620.657828][T18552] unregister_netdevice_queue+0x2f5/0x340 [ 620.664063][T18552] register_netdevice+0x19e2/0x1eb0 [ 620.669769][T18552] cfg80211_register_netdevice+0x138/0x2d0 [ 620.676153][T18552] ieee80211_if_add+0x108d/0x1600 [ 620.681763][T18552] ieee80211_register_hw+0x3e79/0x4a50 [ 620.687764][T18552] mac80211_hwsim_new_radio+0x3238/0x5680 [ 620.694075][T18552] hwsim_new_radio_nl+0xd8b/0xf90 [ 620.699614][T18552] genl_family_rcv_msg_doit+0x233/0x340 [ 620.705677][T18552] genl_rcv_msg+0x614/0x7a0 [ 620.710693][T18552] netlink_rcv_skb+0x226/0x4a0 [ 620.715965][T18552] genl_rcv+0x28/0x40 [ 620.720460][T18552] netlink_unicast+0x7bb/0x940 [ 620.725741][T18552] netlink_sendmsg+0x813/0xb40 [ 620.731027][T18552] sock_sendmsg_nosec+0x13a/0x180 [ 620.736563][T18552] ____sys_sendmsg+0x54e/0x850 [ 620.741843][T18552] ___sys_sendmsg+0x2a5/0x360 [ 620.747047][T18552] __x64_sys_sendmsg+0x1b1/0x290 [ 620.752516][T18552] do_syscall_64+0x174/0x580 [ 620.757633][T18552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.764038][T18552] [ 620.764038][T18552] other info that might help us debug this: [ 620.764038][T18552] [ 620.774350][T18552] Chain exists of: [ 620.774350][T18552] &root->kernfs_rwsem --> pmus_lock --> &root->kernfs_supers_rwsem [ 620.774350][T18552] [ 620.788173][T18552] Possible unsafe locking scenario: [ 620.788173][T18552] [ 620.795686][T18552] CPU0 CPU1 [ 620.801080][T18552] ---- ---- [ 620.806436][T18552] rlock(&root->kernfs_supers_rwsem); [ 620.811912][T18552] lock(pmus_lock); [ 620.818318][T18552] lock(&root->kernfs_supers_rwsem); [ 620.826195][T18552] lock(&root->kernfs_rwsem); [ 620.830949][T18552] [ 620.830949][T18552] *** DEADLOCK *** [ 620.830949][T18552] [ 620.839075][T18552] 5 locks held by syz.3.3289/18552: [ 620.844298][T18552] #0: ffffffff9009d9e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 620.852538][T18552] #1: ffffffff9009d820 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 620.861498][T18552] #2: ffffffff9002d100 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_register_hw+0x3d6d/0x4a50 [ 620.871407][T18552] #3: ffff8880433d07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_register_hw+0x3d8b/0x4a50 [ 620.881837][T18552] #4: ffff88801c2952a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 620.893149][T18552] [ 620.893149][T18552] stack backtrace: [ 620.899027][T18552] CPU: 1 UID: 0 PID: 18552 Comm: syz.3.3289 Not tainted syzkaller #0 PREEMPT(full) [ 620.899044][T18552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 620.899053][T18552] Call Trace: [ 620.899061][T18552] [ 620.899068][T18552] dump_stack_lvl+0xe8/0x150 [ 620.899091][T18552] print_circular_bug+0x2e1/0x300 [ 620.899113][T18552] check_noncircular+0x12e/0x150 [ 620.899137][T18552] __lock_acquire+0x1520/0x2cf0 [ 620.899159][T18552] ? lockdep_unlock+0x5d/0xd0 [ 620.899181][T18552] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 620.899202][T18552] lock_acquire+0x106/0x350 [ 620.899220][T18552] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 620.899247][T18552] down_write+0x96/0x200 [ 620.899264][T18552] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 620.899286][T18552] ? __pfx_down_write+0x10/0x10 [ 620.899304][T18552] ? down_read+0x2be/0x330 [ 620.899321][T18552] kernfs_remove_by_name_ns+0x4e/0x140 [ 620.899344][T18552] sysfs_remove_group+0x101/0x2e0 [ 620.899364][T18552] sysfs_remove_groups+0x54/0xb0 [ 620.899384][T18552] net_rx_queue_update_kobjects+0x6b7/0x780 [ 620.899409][T18552] netdev_unregister_kobject+0xff/0x450 [ 620.899429][T18552] unregister_netdevice_many_notify+0x1be4/0x2150 [ 620.899453][T18552] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 620.899477][T18552] ? kfree+0x1c5/0x640 [ 620.899496][T18552] unregister_netdevice_queue+0x2f5/0x340 [ 620.899514][T18552] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 620.899534][T18552] register_netdevice+0x19e2/0x1eb0 [ 620.899555][T18552] ? __pfx_register_netdevice+0x10/0x10 [ 620.899570][T18552] ? debugfs_create_file_short+0x3f/0x60 [ 620.899666][T18552] ? ieee80211_debugfs_recreate_netdev+0x102b/0x14c0 [ 620.899770][T18552] cfg80211_register_netdevice+0x138/0x2d0 [ 620.899789][T18552] ieee80211_if_add+0x108d/0x1600 [ 620.899812][T18552] ieee80211_register_hw+0x3e79/0x4a50 [ 620.899831][T18552] ? ieee80211_register_hw+0x1971/0x4a50 [ 620.899855][T18552] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 620.899871][T18552] ? __asan_memset+0x22/0x50 [ 620.899893][T18552] ? __hrtimer_setup+0x1b7/0x260 [ 620.899912][T18552] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 620.899936][T18552] mac80211_hwsim_new_radio+0x3238/0x5680 [ 620.899966][T18552] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 620.899988][T18552] ? trace_kmalloc+0x2a/0xf0 [ 620.900007][T18552] hwsim_new_radio_nl+0xd8b/0xf90 [ 620.900032][T18552] genl_family_rcv_msg_doit+0x233/0x340 [ 620.900056][T18552] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 620.900080][T18552] ? bpf_lsm_capable+0x9/0x20 [ 620.900098][T18552] ? security_capable+0x7e/0x2c0 [ 620.900183][T18552] genl_rcv_msg+0x614/0x7a0 [ 620.900204][T18552] ? __pfx_genl_rcv_msg+0x10/0x10 [ 620.900222][T18552] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 620.900247][T18552] netlink_rcv_skb+0x226/0x4a0 [ 620.900262][T18552] ? __pfx_genl_rcv_msg+0x10/0x10 [ 620.900282][T18552] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 620.900301][T18552] ? down_read+0x2be/0x330 [ 620.900319][T18552] genl_rcv+0x28/0x40 [ 620.900337][T18552] netlink_unicast+0x7bb/0x940 [ 620.900366][T18552] netlink_sendmsg+0x813/0xb40 [ 620.900385][T18552] ? __pfx_netlink_sendmsg+0x10/0x10 [ 620.900402][T18552] ? aa_sock_msg_perm+0xf1/0x1b0 [ 620.900446][T18552] ? __pfx_netlink_sendmsg+0x10/0x10 [ 620.900461][T18552] sock_sendmsg_nosec+0x13a/0x180 [ 620.900481][T18552] ____sys_sendmsg+0x54e/0x850 [ 620.900497][T18552] ? __pfx_____sys_sendmsg+0x10/0x10 [ 620.900514][T18552] ? import_iovec+0x73/0xa0 [ 620.900536][T18552] ___sys_sendmsg+0x2a5/0x360 [ 620.900550][T18552] ? __lock_acquire+0x683/0x2cf0 [ 620.900570][T18552] ? __pfx____sys_sendmsg+0x10/0x10 [ 620.900586][T18552] ? futex_wait+0x2a2/0x390 [ 620.900612][T18552] ? __fget_files+0x2a/0x420 [ 620.900631][T18552] ? __fget_files+0x3a2/0x420 [ 620.900652][T18552] __x64_sys_sendmsg+0x1b1/0x290 [ 620.900667][T18552] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 620.900688][T18552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.900703][T18552] do_syscall_64+0x174/0x580 [ 620.900720][T18552] ? trace_irq_disable+0x3b/0x140 [ 620.900746][T18552] ? clear_bhb_loop+0x40/0x90 [ 620.900762][T18552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.900778][T18552] RIP: 0033:0x7f016839de99 [ 620.900793][T18552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.900807][T18552] RSP: 002b:00007f016924f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 620.900823][T18552] RAX: ffffffffffffffda RBX: 00007f0168625fa0 RCX: 00007f016839de99 [ 620.900834][T18552] RDX: 0000000020000004 RSI: 0000200000000100 RDI: 0000000000000003 [ 620.900844][T18552] RBP: 00007f0168433eaf R08: 0000000000000000 R09: 0000000000000000 [ 620.900853][T18552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 620.900862][T18552] R13: 00007f0168626038 R14: 00007f0168625fa0 R15: 00007ffcb7eb5cd8 [ 620.900878][T18552] [ 621.384427][T18552] ieee80211 phy84: Failed to add default virtual iface [ 621.433122][T18594] nbd: nbd0 already in use [ 621.438875][T18594] block nbd0: NBD_DISCONNECT [ 621.445121][T18594] block nbd0: Send disconnect failed -32 [ 621.451101][T18594] block nbd0: Send disconnect failed -32 [ 621.456876][T18594] block nbd0: shutting down sockets