last executing test programs: 2m11.302997568s ago: executing program 3 (id=16686): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="002000000102"}) close(0x3) 2m10.747151768s ago: executing program 3 (id=16691): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f76", 0x3a}], 0x1}}], 0x1, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m10.314584825s ago: executing program 3 (id=16694): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="af", 0x1}], 0x1, &(0x7f00000006c0)=[@init={0x18, 0x84, 0x0, {0xffff, 0x7, 0x7, 0x4}}], 0x18, 0x20000001}, 0x20008000) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, 0x0, 0x0) connect$can_bcm(r0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x6, 0x580, 0x8, {0x77359400}, {}, {0x4, 0x0, 0x1, 0x1}, 0x1, @can={{0x1, 0x0, 0x1, 0x1}, 0x0, 0x1, 0x0, 0x0, "da96af2fcead2a68"}}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20040051) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x28, 0xb, 0xa, 0x401, 0x0, 0x0, {0x6, 0x0, 0x1}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x81}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @multicast, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @empty}}}}, &(0x7f0000000340)={0x1, 0x4, [0x177, 0x9e4, 0x1c5, 0xd5]}) 2m9.170562528s ago: executing program 3 (id=16703): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000400)={'broute\x00', 0x0, 0x0, 0x0, [0x2, 0x10, 0x4, 0x7], 0x0, 0x0}, 0x78) 2m9.053129385s ago: executing program 3 (id=16705): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000040), &(0x7f0000000180)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000200)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 2m8.928127031s ago: executing program 3 (id=16709): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) 1m53.726443902s ago: executing program 32 (id=16709): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) 6.080585955s ago: executing program 0 (id=17161): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010001fff000080000100000000000000", @ANYRES64=r0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000002900)=r5, 0x4) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="240012800b000100627269646765"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 5.371322218s ago: executing program 0 (id=17167): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x11, 0x10, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x20}}, [@jmp={0x5, 0x1, 0x6, 0x0, 0x9, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x2c}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)={0x34, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0x18, 0x1}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast5)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc66", 0x9) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xc, '\x00', 0x0, r4, 0x1, 0x1}, 0x50) r5 = accept4(r3, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0xfffffffffffffdff, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x805}, 0x20040040) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x11, &(0x7f0000000240)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fffffff}, @snprintf, @map_val={0x18, 0x2, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000300)='GPL\x00', 0x9, 0x4, &(0x7f0000000340)=""/4, 0x40f00, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xb, 0xd721, 0xfffffff3}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000400), &(0x7f0000000440)=[{0x2, 0x3, 0x3, 0xa}, {0x2, 0x5, 0x8, 0x7}, {0x3, 0x4, 0x8, 0x9}, {0x2, 0x5, 0xd, 0x1}, {0x4, 0x1, 0x0, 0x8}, {0x5, 0x4, 0x9, 0x1}, {0x2, 0x1, 0x2, 0xc}, {0x1, 0x5, 0x9, 0x6}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r7, 0x0, 0x23, 0x9a, &(0x7f0000000600)="1f279ee581dadb058ccb52b2254ec56552ce8f894e2ae072f58235e8e49c77b3d691a9", &(0x7f0000000700)=""/154, 0x5, 0x0, 0x1e, 0x10, &(0x7f00000007c0)="fd19199f55a0ee6c626ce14f38b9ba76891ff9ca08b78e6c115cd4746321", &(0x7f0000000800)="d21294de664876b4ec0161a758ecaf62", 0x1, 0x0, 0xa}, 0x50) 4.706565387s ago: executing program 2 (id=17170): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) recvmsg$unix(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) syz_emit_ethernet(0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r4, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4096, 0x1000}, {&(0x7f000000bec0)=""/27, 0x1b}], 0x2}, 0x20) 4.268570323s ago: executing program 2 (id=17173): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/177, 0xb1}], 0x1}, 0x9}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000680)=""/77, 0x4d}], 0x1, &(0x7f0000000b80)=""/143, 0x8f}, 0x7}], 0x2, 0x23, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000300)="2ea63d", 0x3}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 3.68416103s ago: executing program 5 (id=17176): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x27, &(0x7f00000000c0)="c1188e19b95d02ff4284860186dd", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x27) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) listen(0xffffffffffffffff, 0xfffffffd) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r5, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) recvmmsg(r4, &(0x7f0000005180)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/61}, {&(0x7f0000000040)=""/37}], 0x0, &(0x7f0000000180)=""/193}}, {{&(0x7f0000000280)=@in={0x2, 0x0, @broadcast}, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000300)=""/22}, {&(0x7f0000000340)=""/122}, {&(0x7f0000000500)=""/4096}, {&(0x7f0000001500)=""/238}, {&(0x7f0000001600)=""/17}, {&(0x7f0000001640)=""/242}, {&(0x7f0000001740)=""/171}, {&(0x7f0000001800)=""/153}, {&(0x7f00000018c0)=""/225}, {&(0x7f00000019c0)=""/44}]}, 0x8}, {{&(0x7f0000001b80)=@rc={0x1f, @fixed}, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001c00)=""/66}, {&(0x7f0000001c80)=""/184}, {&(0x7f0000001d40)=""/116}, {&(0x7f0000001dc0)=""/8, 0xfffffffffffffee3}], 0x0, &(0x7f0000001e40)=""/84, 0x48}, 0x6}, {{&(0x7f0000001ec0)=@in6={0xa, 0x0, 0x0, @private0}, 0x0, &(0x7f0000005480)=[{&(0x7f0000001f40)=""/8}, {&(0x7f0000001f80)=""/43}, {&(0x7f0000001fc0)=""/244}, {&(0x7f00000020c0)=""/54}, {&(0x7f00000000c0)=""/27}, {&(0x7f00000003c0)=""/61}, {&(0x7f0000000400)=""/61}, {&(0x7f0000005340)=""/209}, {&(0x7f0000005440)=""/45}], 0x0, &(0x7f0000002140)=""/59}, 0x401}, {{&(0x7f0000002180)=@tipc, 0x0, &(0x7f0000002300)=[{&(0x7f0000002200)=""/1}, {&(0x7f0000002240)=""/172}], 0x0, &(0x7f0000002340)=""/53}, 0x7fd}, {{&(0x7f0000002380)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x0, &(0x7f0000003880)=[{&(0x7f0000002400)=""/68}, {&(0x7f0000002480)=""/246}, {&(0x7f0000002580)=""/225}, {&(0x7f0000002680)=""/4096}, {&(0x7f0000003680)=""/102}, {&(0x7f0000003700)=""/161}, {&(0x7f00000037c0)=""/135}], 0x0, &(0x7f0000003900)=""/239}, 0x3}, {{&(0x7f0000003a00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0, &(0x7f0000005000)=[{&(0x7f0000003a80)=""/32}, {&(0x7f0000003ac0)=""/246}, {&(0x7f0000003bc0)=""/253}, {&(0x7f0000003cc0)=""/212}, {&(0x7f0000003dc0)=""/127}, {&(0x7f0000003e40)=""/190}, {&(0x7f0000003f00)=""/161}, {&(0x7f0000003fc0)=""/4096}, {&(0x7f0000004fc0)=""/42}], 0x0, &(0x7f00000050c0)=""/173}, 0x16}], 0x400000000000213, 0x40002002, 0x0) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a339f2d30afddbdf4d200f070700000000000025862f00000001ffffffc30000000600", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000140), 0x10) 3.183572248s ago: executing program 5 (id=17180): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000003008000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000002c0)={0x8000000c}) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000003c0)}], 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0xfc}}, 0x0) getpeername$l2tp(r3, 0x0, &(0x7f0000000100)) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xffe0}}}, 0x24}}, 0x0) close(r1) 3.040340153s ago: executing program 2 (id=17181): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008804}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffb, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0x1, 0xb}, {0x4, 0x1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048880}, 0xc000) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000180), 0x4) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.02167443s ago: executing program 0 (id=17182): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x31, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x2) ppoll(0x0, 0x0, 0x0, &(0x7f0000000080)={[0xfffffffffffffffb]}, 0x8) socket$inet6_mptcp(0xa, 0x1, 0x106) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000200)={r2, 0x0, 0x0}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000180)={r1}, 0x2) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@empty, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0xffffff07, &(0x7f0000000540), 0x2}, 0x3b61}], 0x4000048, 0x0, 0x0) 2.995547215s ago: executing program 4 (id=17183): socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x10, 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socket$unix(0x1, 0x2, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$can_raw(0x1d, 0x3, 0x1) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 2.910423107s ago: executing program 1 (id=17184): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r2, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f00000000c0)=0xfe, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x4c040) r4 = openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.bfq.io_service_time\x00', 0x0, 0x0) epoll_wait(r4, &(0x7f0000000140)=[{}, {}], 0x2, 0x9) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0xe6, 0xfc, 0x0, 0x62, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x40, 0x10, 0x4, 0xb23}}) 2.909382153s ago: executing program 4 (id=17185): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0x0, @mcast2, 0xe7a}, 0x1c) socket$inet6_sctp(0xa, 0x801, 0x84) listen(r0, 0x716e) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x7d4165cc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x7d4165c9) listen(r3, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) listen(r6, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e23, 0x0, @remote, 0xe3}}, 0x0, 0x0, 0x17, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 2.795471193s ago: executing program 5 (id=17186): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r9 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.746694255s ago: executing program 4 (id=17187): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8, 0x8, 0x2}]}}]}, 0x44}}, 0x4890) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8005, 0x5, 0xfffffdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.023056732s ago: executing program 1 (id=17188): syz_emit_ethernet(0x11, &(0x7f00000002c0)={@broadcast, @local, @void, {@llc={0x8864, {@llc={0x42, 0x0, '['}}}}}, 0x0) r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xa, 0x5}, {0xffff, 0xffff}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r4], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) accept4$unix(r5, &(0x7f00000001c0)=@abs, 0x0, 0xc1000) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x8000000003c) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x24}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 1.930701207s ago: executing program 0 (id=17189): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000980)={&(0x7f0000000540)={0x43c, 0x3f4, 0x8, 0x70bd26, 0x25dfdbfb, {0x10, 0x2, 0x19, [0x2, 0x10, 0x8, 0x9, 0x7, 0x0, 0x7, 0x5, 0x0, 0x5, 0x2, 0x1, 0x8, 0x13, 0x80, 0x8, 0x6, 0xb2, 0xfffffff7, 0x3ff, 0x75f7, 0x8, 0x9, 0xf, 0xcf6, 0x3, 0x3, 0x7, 0x2c, 0x357, 0xf62, 0xffff, 0x3b7, 0x3, 0x9, 0x8001, 0x3, 0x4, 0x8001, 0x4, 0x5, 0x38, 0x6, 0x5, 0x2f7, 0x2db4, 0x7fffffff, 0x6, 0x9, 0x0, 0x9, 0x512, 0x4, 0xa30, 0xec40, 0xa03c, 0xfffffff8, 0x8000, 0xab, 0x8, 0x16bf, 0x8, 0x4, 0xfff], [0x7, 0xa89, 0x1, 0x9, 0x80000000, 0xfffffff8, 0x7, 0x9, 0x1, 0xff, 0xe74f, 0x99, 0x8, 0x3, 0xfffffff9, 0x9, 0x1, 0x55a, 0x0, 0xfff, 0x7, 0x5, 0x4, 0x606, 0xcd66, 0xfffffffa, 0x34a3, 0x4, 0x9, 0x5, 0x2, 0x0, 0x0, 0x7, 0x3fe00000, 0x0, 0x40000000, 0x3, 0x9, 0x1d, 0x560, 0x3, 0x5, 0x1, 0xfa40, 0x6, 0x8, 0x3, 0x0, 0x1, 0x7f, 0x2, 0x1, 0x3, 0x2, 0x7, 0x9, 0x9, 0x7, 0x2, 0x7, 0x8, 0x118, 0x1], [0x9, 0xb7, 0x10, 0x80000001, 0x81, 0x5d304c42, 0x1, 0x10000, 0x8, 0xfffffffc, 0x7, 0xb1a, 0x1, 0x7, 0x10001, 0x40, 0x200, 0x9, 0x8, 0x0, 0x1, 0x16a0000, 0x10000, 0x8, 0x3, 0x8, 0x2, 0x8, 0x6, 0x957f, 0x7fffffff, 0x0, 0xf8000000, 0x83, 0x6, 0x4b03e2e4, 0x3, 0xfffffffb, 0x8, 0x2, 0xca9e, 0x4, 0x3, 0x7ff, 0xffffffff, 0x200, 0x1f3d, 0x7ff, 0x8, 0x6, 0x8, 0x7, 0x9, 0x1, 0x9, 0x6, 0x4, 0x1, 0xe375, 0x5, 0x3, 0x800, 0x8, 0x1], [0x7, 0x6, 0x4, 0x5, 0x5, 0x10001, 0x4, 0x200, 0x8, 0x4, 0x9, 0x5, 0x8, 0xff, 0x5, 0x4, 0xf, 0xffffffff, 0x1, 0xb3, 0x9, 0x3, 0x9, 0x0, 0x7b, 0x6, 0x9, 0x8, 0x1, 0x100, 0x1000, 0x400, 0x140, 0xffff, 0x5, 0xffffff4e, 0x6, 0xc, 0x2f7, 0x9, 0x3, 0x479, 0x7b, 0x8, 0xf, 0x9, 0x9, 0x3, 0x9f0b, 0x80000000, 0x9, 0x6, 0x8, 0x3, 0x8, 0x3, 0x6, 0x4, 0x7, 0x4, 0x2, 0x7fff, 0x400, 0x400], 0x1c, ['{l@#\x00', '\x00', '\x00', ',\\\\\x00', 'exthdr\x00', 'syz2\x00', 'syz0\x00']}, ["", ""]}, 0x43c}, 0x1, 0x0, 0x0, 0x20000804}, 0x4040840) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xcc}}, 0x2000810) accept4$tipc(0xffffffffffffffff, &(0x7f0000000080)=@id, 0x0, 0x400) socket(0x10, 0x803, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r2) sendmsg$IEEE802154_DISASSOCIATE_REQ(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x60) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0xd, @mcast2, 0x4}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) ioctl$int_in(r1, 0x5452, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x240008c0}, 0x400c854) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b36, &(0x7f0000000000)={'wlan1\x00'}) 1.64001588s ago: executing program 2 (id=17190): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x94) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x80000) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r7) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x67038, 0x882ab}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00000000000000}}, @IFLA_GRE_LOCAL={0x14, 0x6, @loopback}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 1.63889033s ago: executing program 5 (id=17191): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x118) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000020303000000000000080000000000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000100800010001"], 0x1c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000"], 0x1c}}, 0x4048800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9e20300600d0600fb9e34f086f8", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x7, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4b8d}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8090}, 0x4000000) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x64, 0x4, 0x2f0, 0x100000c, 0x148, 0xb0, 0xb0, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x0, 0x1000000000000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x0, "3a2a8fa7d4b22c81086c268084a9c7223d88d322ef00"}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0xfe}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff000000, 0xffffff00, 'veth1_to_bond\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21, 0x0, 0x28}, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@inet=@set4={{0x50}, {{}, {{0x44}, 0x5a}, {{0x2000004}, 0xa}, 0x3}}, @common=@icmp={{0x28}, {0x12, "be45"}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xd, 0xa1, 0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000004c0)=[@in6={0xa, 0x4e24, 0x20b, @loopback, 0x7fff}]}, &(0x7f0000000440)=0x10) getpeername$inet6(r6, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, &(0x7f0000000000)=0x5, 0x4) 1.534738814s ago: executing program 4 (id=17192): sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="110026bd7000fddbdf2507002600"/26, @ANYRES32, @ANYBLOB="0c0099"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20004014) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x7fffffff, 0x800, 0x0, 0x0, 0x7579e159, 0x4, 0xfffffdfc, 0xef4}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b0, 0x130, 0x130, 0x98, 0x130, 0x98, 0x398, 0x398, 0x398, 0x398, 0x398, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0xff, 'macvlan0\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x2, 0x71}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x23}, 0x0, 0xffffffff, 'vlan1\x00', 'nr0\x00', {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xc, 0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000) bind$tipc(r3, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002340)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x7, &(0x7f0000000040)=0x4, 0x4) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) 1.094694288s ago: executing program 4 (id=17193): setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)=',8Z', 0x3) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0x10, 0x2, 0x4) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="78010000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542080005000000000024010880f000008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691ca400098028000080060001000a0000001c000200fe880000000000000000000000000001050003000300000028000080060001000a0000001400020000000000000000000000000000000001050003000000000028000080060001000a00000014000200fc020000000000000000008000000000050003000100000041000080060001000a0000001400020000000000000000000000000000000000050003000100000024000100d1732899f611"], 0x178}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r7], 0x5c}}, 0x40) 749.227246ms ago: executing program 1 (id=17194): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x7) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) 736.659281ms ago: executing program 0 (id=17195): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') socket$pppl2tp(0x18, 0x1, 0x1) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x43}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 677.443097ms ago: executing program 1 (id=17196): socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000480)) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$kcm(0x2, 0x3, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES64=r0], 0x20) 632.001697ms ago: executing program 2 (id=17197): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r3) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x400000000010, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0x3, 0x2}, {0x0, 0x3, 0x2, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r4, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r2, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)="6b46afbe0e1232a8a371039dbee9", 0xe}], 0x1}, 0x20000885) 526.049173ms ago: executing program 0 (id=17198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000000107010200000000000001000500000514000783080001400000ec5e080002400000007fec1dda874d70a8b6cdc133279c37f6da8a70dd07bb1f1553d1f1e5c40c3a9089bec0537c8de966d1b6017bf24573a30ec702568430c4d87f2bfd6bbf2eaf8940fa8963f813bd762f5318784b1feec2ce67a8557bc6dd7df18437defbc3e25b00a2b513851b6c7d509c114a7cd9cd3656ba33e031812c800ccfd7a35e507c7705008be2ea2a6f35446182b31f3176d814a3c9f99bfaac6425159dc45b2d239928fb53047a78072c5a"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x200080c4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c00)={0x0, 0x10f0}, 0x1, 0x0, 0x0, 0x40000c4}, 0x48000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123d00000000009500030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) poll(0x0, 0x0, 0x7) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000001c0)}}, {{0x0, 0x0, &(0x7f0000000d40)=[{0x0}], 0x1, &(0x7f0000000d80)=[@hopopts={{0x20, 0x29, 0x36, {0x3c, 0x1, '\x00', [@padn, @generic={0x9}, @ra={0x5, 0x2, 0x4}]}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x16}}}, @hopopts_2292={{0x40, 0x29, 0x36, {0x33, 0x4, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x41}}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}], 0x78}}], 0x2, 0x4040005) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="016f08008a854b56f8"], 0xfd6c) listen(0xffffffffffffffff, 0x1ad72f7) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000580)={{0x2, 0x4e22, @broadcast}, {0x6, @remote}, 0x18, {0x2, 0x4e24, @remote}, 'macsec0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000061000000b70000004000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38}, 0x48) 524.611282ms ago: executing program 1 (id=17199): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYBLOB="0600"], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000c000000480005800800010065756800070002"], 0x5c}}, 0x0) unshare(0x2020600) r5 = socket$kcm(0x29, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711029000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) setsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x2, 0x0, 0x0) getsockname$netlink(r1, &(0x7f0000000040), &(0x7f0000000080)=0xc) r6 = socket$kcm(0x10, 0x2, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x4c, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0xfff}}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_FLOW={0x8, 0xb, 0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a0679450e88370200c54c1960b89c40ebb373", 0x39}, {&(0x7f0000000840)="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", 0x10c8}, {&(0x7f0000002400)="eda757ad8bb120cc32a1f3850795a01dc8ab7e3791c6340e86a681802a9340bd18fa35eb990721d4c3fd8464363ce48b0db4bcb80c127f2a1e24bf94ef814b6bc68df0debce576b0470500ec4d32f12e14c6ad4e61bc5e9cbdbc47d7664613a03e91b10461bc2ca8518d6ce2da058a987aa7e5cc154644c7d09847b62e32dba771278b5b181ceb22a9c8b891d7914949d163050745360e5ddbf5259cd273795d23e89475a701752b7442eda5691cbbc0528c3259efe65c9ef017695338781c22c0bd22e70199985f8e938db992ea7ffdf75612e478976c3f58e7ac6c8adb8664c5292de4a8e6478d36", 0xe9}], 0x3}, 0x810) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24, 0x80000000, @mcast2, 0x4}, 0x1c) close(r6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'bridge0\x00'}) 390.756675ms ago: executing program 4 (id=17200): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) write$tun(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/177, 0xb1}], 0x1}, 0x9}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000680)=""/77, 0x4d}], 0x1, &(0x7f0000000b80)=""/143, 0x8f}, 0x7}], 0x2, 0x23, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000300)="2ea63d", 0x3}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 315.033986ms ago: executing program 5 (id=17201): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x7) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r7, 0x0) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) 265.659329ms ago: executing program 1 (id=17202): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = socket$inet6_sctp(0xa, 0x6, 0x84) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe0}}, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) sendfile(r0, r3, 0x0, 0x20000000002) 151.99754ms ago: executing program 5 (id=17203): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x24000000) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendto$unix(r1, &(0x7f0000000080)="008e", 0x2, 0xd1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000108000)={{0x0, 0x8, 0x100000000, 0xfffffffffffffffc, 0x0, 0x8, 0x9, 0x400, 0x3, 0x4, 0x36a58e4a, 0xd, 0x2, 0x75, 0x1}}) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000f702010100000000000000000500ab930800044000005932280002800600034000010000060003400005000004000180080001000a010100080002"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) 0s ago: executing program 2 (id=17204): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$sock(r0, &(0x7f00000005c0)={&(0x7f0000000180)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000240)="f0bc369b70f4c1bbfe15d29b8a3760a43d93edfbf04a3bbbc0f05febeab52c5af151dea4509a88873e17dfa24d246d704d3eea785cd1687024f6c7f551103ba756ff57e748e39ab6675768b7f4896b3ccb1efb83", 0x54}, {&(0x7f00000003c0)="a51572d5246ef684b23b021ac65aaf2b385729cb2b02add72bacbe4cc2e59d4b4bfe8e86f35fd965decae35939c90fe484ef688663e325fa9bb0f1de508c7b45617bcbc5f9c5312f80a607cc9e08ae9215cdc923117ca39c7105178c5c653d16d2a524eae487bd067a7df15a59831b3d9d36c099dce7233921d84b56eea69ee3cea84342b3e1a905700608148831690db6ca6cc5f4426262ce2949545bc5d13bf0c3790680f0165c2427e0f912ec8d805ca6af6a4a4c67abbfc4206ee0fb38379145e7d80af38ee8691c0798f29565781fad1420db6d", 0xd6}], 0x2, &(0x7f0000000540)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x48}, 0x4000000) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xc, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000100000079104800000000007b0a00ff0000000095007400"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) unshare(0x2040400) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700200000000000ff3f080000004801001000", 0x1d}], 0x1) ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000390426bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000100000003c0012800b000100697036746e6c00002c00028014000300fe08000000000000000000000000000e14000200fe88"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x40800) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYRES16=r6, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002800800020020000000040001000800"], 0x44}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, 0x0, 0x0) kernel console output (not intermixed with test programs): 712.740:19): pid=5894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.14898" name=20 dev="tmpfs" ino=1755 res=0 errno=0 [ 741.070181][ T5985] bridge5: entered promiscuous mode [ 741.099518][ T5985] bridge5: entered allmulticast mode [ 741.901458][ T6013] __nla_validate_parse: 18 callbacks suppressed [ 741.901479][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14948'. [ 741.938636][ T6013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14948'. [ 741.948259][ T6013] netlink: 'syz.1.14948': attribute type 6 has an invalid length. [ 741.960172][ T6013] netlink: 'syz.1.14948': attribute type 5 has an invalid length. [ 741.969896][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14948'. [ 741.981537][ T6013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14948'. [ 742.000948][ T6013] netlink: 'syz.1.14948': attribute type 6 has an invalid length. [ 742.009060][ T6013] netlink: 'syz.1.14948': attribute type 5 has an invalid length. [ 742.734816][ T6035] net_ratelimit: 44 callbacks suppressed [ 742.734839][ T6035] IPv4: Oversized IP packet from 127.202.26.0 [ 742.974325][ T6042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14961'. [ 743.427932][ T6068] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 743.563459][ T6073] netlink: 'syz.4.14974': attribute type 13 has an invalid length. [ 743.915602][ T6096] netlink: 'syz.3.14984': attribute type 1 has an invalid length. [ 743.974990][ T6096] bond5: entered promiscuous mode [ 743.980401][ T6096] bond5: entered allmulticast mode [ 744.005019][ T6096] 8021q: adding VLAN 0 to HW filter on device bond5 [ 744.064984][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14989'. [ 744.649812][ T6134] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15000'. [ 745.275235][ T6156] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 745.446070][ T6165] netlink: 'syz.0.15015': attribute type 7 has an invalid length. [ 745.489933][ T6167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15016'. [ 745.513106][ T6167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15016'. [ 745.534295][ T6167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15016'. [ 745.551985][ T6165] netlink: 'syz.0.15015': attribute type 7 has an invalid length. [ 746.113353][ T6193] sctp: [Deprecated]: syz.0.15028 (pid 6193) Use of struct sctp_assoc_value in delayed_ack socket option. [ 746.113353][ T6193] Use struct sctp_sack_info instead [ 746.706581][ T6211] netlink: 'syz.4.15036': attribute type 2 has an invalid length. [ 746.956998][ T6224] __nla_validate_parse: 4 callbacks suppressed [ 746.957019][ T6224] netlink: 27 bytes leftover after parsing attributes in process `syz.4.15042'. [ 747.158497][ T6236] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15047'. [ 747.180738][ T6236] netlink: 32 bytes leftover after parsing attributes in process `syz.4.15047'. [ 747.200380][ T6236] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15047'. [ 747.230115][ T6236] netlink: 32 bytes leftover after parsing attributes in process `syz.4.15047'. [ 748.569900][ T6295] bridge4: entered promiscuous mode [ 748.581457][ T6295] bridge4: entered allmulticast mode [ 749.926038][ T6373] block nbd0: Unsupported socket: should be TCP or UNIX. [ 750.095922][ T6377] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 750.241684][ T6385] netlink: 'syz.1.15112': attribute type 1 has an invalid length. [ 750.313196][ T6385] 8021q: adding VLAN 0 to HW filter on device bond2 [ 751.246407][ T6439] 8021q: adding VLAN 0 to HW filter on device .` [ 751.296450][ T6439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 751.407408][ T6439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 751.423110][ T6439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 751.462205][ T6439] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 751.473079][ T6439] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 751.514858][ T6439] 8021q: adding VLAN 0 to HW filter on device bond1 [ 751.516783][ T6461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15138'. [ 751.534312][ T6439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 751.560082][ T6439] 8021q: adding VLAN 0 to HW filter on device bond2 [ 751.577101][ T6439] 8021q: adding VLAN 0 to HW filter on device bond3 [ 751.595019][ T6439] 8021q: adding VLAN 0 to HW filter on device bond4 [ 751.621423][ T6439] 8021q: adding VLAN 0 to HW filter on device eth0 [ 751.632760][ T6439] 8021q: adding VLAN 0 to HW filter on device eth1 [ 751.641724][ T6439] 8021q: adding VLAN 0 to HW filter on device eth2 [ 751.653399][ T6439] 8021q: adding VLAN 0 to HW filter on device eth3 [ 751.663090][ T6439] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 751.673632][ T6439] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 751.685615][ T6439] batman_adv: batadv0: Interface activated: vlan0 [ 751.701188][ T6439] batman_adv: batadv0: Interface activated: macsec0 [ 751.717546][ T6439] 8021q: adding VLAN 0 to HW filter on device bond6 [ 751.730759][ T6439] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 751.836666][T18462] virt_wifi0: entered promiscuous mode [ 751.865637][ T59] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 751.874760][ T59] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.893275][ T59] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 751.902012][ T59] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.012636][ T59] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 752.021260][ T59] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.034889][ T59] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 752.045696][ T59] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.059076][ T6473] netlink: 27 bytes leftover after parsing attributes in process `syz.0.15143'. [ 752.077308][ T12] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 752.085968][ T12] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 752.101664][ T11] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 752.136014][ T12] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 752.155688][ T12] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 752.164640][T18462] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 752.188234][ T12] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 752.213315][ T11] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 752.223189][ T12] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 752.401566][ T5810] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 752.496787][ T6491] netlink: 'syz.3.15150': attribute type 21 has an invalid length. [ 752.508278][ T6491] netlink: 'syz.3.15150': attribute type 22 has an invalid length. [ 752.518577][ T6491] netlink: 'syz.3.15150': attribute type 23 has an invalid length. [ 752.539083][ T6491] netlink: 'syz.3.15150': attribute type 25 has an invalid length. [ 752.556577][ T6491] netlink: 96 bytes leftover after parsing attributes in process `syz.3.15150'. [ 752.886791][ T6511] lo: Caught tx_queue_len zero misconfig [ 753.313268][ T6534] netlink: 'syz.1.15170': attribute type 3 has an invalid length. [ 753.339093][ T6534] netlink: 646 bytes leftover after parsing attributes in process `syz.1.15170'. [ 753.433211][ T6538] only policy match revision 0 supported [ 753.433231][ T6538] unable to load match [ 754.884147][ T6581] netlink: 'syz.0.15188': attribute type 4 has an invalid length. [ 754.895431][ T6581] netlink: 'syz.0.15188': attribute type 4 has an invalid length. [ 755.059008][ T6588] xt_hashlimit: size too large, truncated to 1048576 [ 755.184244][ T6592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 755.201991][ T6592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 755.225873][ T6592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 755.240177][ T6592] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 756.775427][ T6661] netlink: 'syz.2.15214': attribute type 4 has an invalid length. [ 756.828237][ T6662] netlink: 'syz.2.15214': attribute type 4 has an invalid length. [ 758.189273][ T6681] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 759.326837][ T6741] erspan0: entered promiscuous mode [ 759.398381][ T6741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 759.413958][ T6741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 759.512283][ T6741] veth1_macvtap: left promiscuous mode [ 759.531658][ T6741] veth0_macvtap: left promiscuous mode [ 759.538619][ T6741] veth0_macvtap: entered promiscuous mode [ 759.552072][ T6741] veth1_macvtap: entered promiscuous mode [ 759.638024][ T6741] 8021q: adding VLAN 0 to HW filter on device bond1 [ 759.649959][ T6741] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 759.670638][ T6741] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 759.679018][ T6741] A link change request failed with some changes committed already. Interface syztnl2 may have been left with an inconsistent configuration, please check. [ 759.782144][ T6767] netlink: 'syz.1.15250': attribute type 1 has an invalid length. [ 759.804002][ T6757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15247'. [ 759.813722][ T6757] netlink: 'syz.4.15247': attribute type 11 has an invalid length. [ 759.859141][ T6767] bond3: entered promiscuous mode [ 759.865252][ T6767] 8021q: adding VLAN 0 to HW filter on device bond3 [ 759.914359][T19610] ip6_tnl_xmit_ctl: 9 callbacks suppressed [ 759.914379][T19610] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 759.917687][ T6757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15247'. [ 759.921039][T19610] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 759.948615][ T11] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 759.958489][ T6757] netlink: 'syz.4.15247': attribute type 11 has an invalid length. [ 760.023987][ T6767] 8021q: adding VLAN 0 to HW filter on device bond3 [ 760.043683][ T6767] bond3: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 760.057382][ T6767] bond3: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 760.072532][ T11] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 760.084143][ T6767] bond3: (slave ip6gre3): making interface the new active one [ 760.092030][ T6767] ip6gre3: entered promiscuous mode [ 760.099144][ T6767] bond3: (slave ip6gre3): Enslaving as an active interface with an up link [ 760.355736][ T6787] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15258'. [ 760.377822][ T6782] xt_hashlimit: size too large, truncated to 1048576 [ 760.459417][ T6798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15258'. [ 760.567543][ T6787] 8021q: adding VLAN 0 to HW filter on device bond5 [ 760.611474][ T6790] 8021q: adding VLAN 0 to HW filter on device bond6 [ 760.629185][ T6790] bond5: (slave bond6): Enslaving as an active interface with an up link [ 760.665565][ T6798] bond5 (unregistering): (slave bond6): Releasing backup interface [ 760.688416][ T6798] bond5 (unregistering): Released all slaves [ 760.910896][ T5810] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 760.978017][ T6813] netlink: 272 bytes leftover after parsing attributes in process `syz.3.15265'. [ 761.252069][ T6792] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 762.003300][ T6841] wlan0 speed is unknown, defaulting to 1000 [ 762.012363][ T6841] lo speed is unknown, defaulting to 1000 [ 762.541242][ T6857] wlan0 speed is unknown, defaulting to 1000 [ 762.551938][ T6857] lo speed is unknown, defaulting to 1000 [ 762.718216][ T6865] sctp: [Deprecated]: syz.4.15283 (pid 6865) Use of int in max_burst socket option. [ 762.718216][ T6865] Use struct sctp_assoc_value instead [ 763.950645][ C0] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 764.018752][ T6917] netlink: 'syz.0.15303': attribute type 1 has an invalid length. [ 764.053831][ T6917] bond4: entered promiscuous mode [ 764.059247][ T6917] 8021q: adding VLAN 0 to HW filter on device bond4 [ 764.111454][ T6917] 8021q: adding VLAN 0 to HW filter on device bond4 [ 764.124567][ T6917] bond4: (slave ipip3): The slave device specified does not support setting the MAC address [ 764.144884][ T6917] bond4: (slave ipip3): Setting fail_over_mac to active for active-backup mode [ 764.187891][ T6917] bond4: (slave ipip3): making interface the new active one [ 764.206247][ T6917] ipip3: entered promiscuous mode [ 764.220650][ T6917] bond4: (slave ipip3): Enslaving as an active interface with an up link [ 764.256338][ T6927] syzkaller0: entered promiscuous mode [ 764.262241][ T6927] syzkaller0: entered allmulticast mode [ 764.270768][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 765.233993][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 765.800343][ T7005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15337'. [ 765.871825][ C0] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 766.042207][T14312] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 766.288077][ T7021] syzkaller1: entered promiscuous mode [ 766.298533][ T7021] syzkaller1: entered allmulticast mode [ 766.554078][ T7029] netlink: 'syz.2.15348': attribute type 1 has an invalid length. [ 766.616087][ T7029] bond8: entered promiscuous mode [ 766.642483][ T7029] 8021q: adding VLAN 0 to HW filter on device bond8 [ 766.766445][ T7038] 8021q: adding VLAN 0 to HW filter on device bond8 [ 766.775129][ T7038] bond8: (slave gre4): The slave device specified does not support setting the MAC address [ 766.788204][ T7038] bond8: (slave gre4): Setting fail_over_mac to active for active-backup mode [ 766.802793][ T7038] bond8: (slave gre4): making interface the new active one [ 766.810441][ T7038] gre4: entered promiscuous mode [ 766.822181][ T7038] bond8: (slave gre4): Enslaving as an active interface with an up link [ 766.831395][T14312] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 766.955014][ T7042] syzkaller1: entered promiscuous mode [ 766.961582][ T7042] syzkaller1: entered allmulticast mode [ 768.336253][ T6986] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 771.569197][ T7112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15370'. [ 772.865859][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15392'. [ 772.891655][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15392'. [ 772.901294][ T7168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15393'. [ 772.901334][ T7168] netlink: 'syz.1.15393': attribute type 5 has an invalid length. [ 772.901348][ T7168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15393'. [ 772.913895][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 772.964591][ T7168] geneve2: entered promiscuous mode [ 772.975905][ T7168] geneve2: entered allmulticast mode [ 772.997215][ T35] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 33099 - 0 [ 773.006933][ T35] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 33099 - 0 [ 773.036602][ T35] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 33099 - 0 [ 773.072668][ T35] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 33099 - 0 [ 773.146961][ T7170] IPVS: persistence engine module ip_vs_pe_À not found [ 773.197947][ T7175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15396'. [ 773.325916][ T7180] syzkaller1: entered promiscuous mode [ 773.341039][ T7180] syzkaller1: entered allmulticast mode [ 774.845389][ T7234] wlan0 speed is unknown, defaulting to 1000 [ 774.872172][ T7234] lo speed is unknown, defaulting to 1000 [ 775.977644][ T7269] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 776.242778][ T7276] wlan0 speed is unknown, defaulting to 1000 [ 776.293356][ T7276] lo speed is unknown, defaulting to 1000 [ 777.743480][ T7316] gretap1: entered promiscuous mode [ 778.032308][ C0] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 779.767505][ T50] Bluetooth: hci2: link tx timeout [ 779.776084][ T50] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 780.255895][ T7438] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.3.15485:7438 [ 780.645609][ T7459] netlink: 'syz.2.15492': attribute type 1 has an invalid length. [ 780.768296][ T7463] bond9: (slave geneve4): making interface the new active one [ 780.779209][ T7463] bond9: (slave geneve4): Enslaving as an active interface with an up link [ 780.791588][ T133] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 780.814393][ T133] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 780.845589][ T133] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 780.865775][ T133] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 781.155519][ T7473] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 40 [ 781.442345][ T7482] wlan0 speed is unknown, defaulting to 1000 [ 781.498272][ T7482] lo speed is unknown, defaulting to 1000 [ 781.781609][ T1170] nci: nci_ntf_packet: unknown ntf opcode 0x227 [ 781.790470][ T5628] Bluetooth: hci2: command 0x0406 tx timeout [ 781.886090][ T7504] netlink: 40 bytes leftover after parsing attributes in process `syz.3.15508'. [ 782.438522][ T7495] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 782.511427][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 784.431220][ C0] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 784.606150][ T7561] IPv6: Can't replace route, no match found [ 784.621125][ T7561] IPv6: Can't replace route, no match found [ 784.945459][ T7573] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15537'. [ 785.426403][ T7602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15549'. [ 785.446534][ T7602] netlink: 'syz.3.15549': attribute type 5 has an invalid length. [ 785.461750][ T7602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15549'. [ 785.482087][ T7602] geneve4: entered promiscuous mode [ 785.495967][ T7602] geneve4: entered allmulticast mode [ 785.513644][ T35] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 60248 - 0 [ 785.528390][ T35] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 60248 - 0 [ 785.557521][ T35] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 60248 - 0 [ 785.572870][ T35] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 60248 - 0 [ 786.106369][ T7624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15559'. [ 786.173146][ T7626] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15560'. [ 787.492262][ T7667] netlink: 'syz.4.15577': attribute type 10 has an invalid length. [ 787.918766][ T7667] netdevsim netdevsim4 netdevsim1: left allmulticast mode [ 787.942576][ T7667] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 787.952769][ T7667] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 788.136753][ T7677] syzkaller1: entered promiscuous mode [ 788.150416][ T7677] syzkaller1: entered allmulticast mode [ 789.050142][ T7716] lo: Caught tx_queue_len zero misconfig [ 789.515450][ T7746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15609'. [ 789.525609][ T7746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15609'. [ 789.550877][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 789.708062][ T7752] syzkaller1: entered promiscuous mode [ 789.722811][ T7752] syzkaller1: entered allmulticast mode [ 790.358622][ T7767] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 790.872684][ T7775] wlan0 speed is unknown, defaulting to 1000 [ 790.896466][ T7775] lo speed is unknown, defaulting to 1000 [ 792.236340][ T7817] wlan0 speed is unknown, defaulting to 1000 [ 792.258440][ T7817] lo speed is unknown, defaulting to 1000 [ 792.572632][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15642'. [ 792.779473][ T7834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15644'. [ 792.813100][ T7834] team1: entered promiscuous mode [ 792.818359][ T7834] team1: entered allmulticast mode [ 792.824913][ T7834] 8021q: adding VLAN 0 to HW filter on device team1 [ 792.834383][ T7836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15644'. [ 792.867167][ T7836] team2: entered promiscuous mode [ 792.872531][ T7836] team2: entered allmulticast mode [ 792.878453][ T7836] 8021q: adding VLAN 0 to HW filter on device team2 [ 792.967911][ T7838] netlink: 148 bytes leftover after parsing attributes in process `syz.1.15645'. [ 793.223148][ T7844] netlink: 'syz.2.15648': attribute type 1 has an invalid length. [ 793.465954][ T7852] bond10: (slave bridge0): making interface the new active one [ 793.478672][ T7852] bond10: (slave bridge0): Enslaving as an active interface with an up link [ 795.203633][ T7901] netlink: 'syz.0.15668': attribute type 3 has an invalid length. [ 795.410198][T14308] batman_adv: batadv0: Interface deactivated: vlan0 [ 795.669951][ T7935] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15679'. [ 796.523894][ T7970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15690'. [ 796.538642][ T7970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15690'. [ 796.743034][ T7982] netlink: 52 bytes leftover after parsing attributes in process `syz.4.15695'. [ 796.810504][ T7982] netlink: 52 bytes leftover after parsing attributes in process `syz.4.15695'. [ 797.041762][ T8000] netlink: 'syz.2.15704': attribute type 1 has an invalid length. [ 797.082706][ T8000] bond11: entered promiscuous mode [ 797.088521][ T8000] 8021q: adding VLAN 0 to HW filter on device bond11 [ 797.127325][ T8000] 8021q: adding VLAN 0 to HW filter on device bond11 [ 797.139499][ T8000] bond11: (slave vti1): The slave device specified does not support setting the MAC address [ 797.150643][ T8000] bond11: (slave vti1): Setting fail_over_mac to active for active-backup mode [ 797.168438][ T8000] bond11: (slave vti1): making interface the new active one [ 797.176194][ T8000] vti1: entered promiscuous mode [ 797.184639][ T8000] bond11: (slave vti1): Enslaving as an active interface with an up link [ 797.262489][ T7961] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 798.645372][ T8056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15730'. [ 798.665877][ T8056] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 798.693437][ T8056] bridge0: port 1(macvlan0) entered disabled state [ 798.701469][ T8062] netlink: 'syz.4.15733': attribute type 1 has an invalid length. [ 798.712288][ T8056] macvlan0 (unregistering): left allmulticast mode [ 798.729182][ T8056] bridge0: port 1(macvlan0) entered disabled state [ 798.927878][ T8065] gretap1: entered allmulticast mode [ 798.964686][ T8065] bond5: (slave gretap1): making interface the new active one [ 798.991992][ T8065] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 799.007473][ T8073] netlink: 'syz.3.15735': attribute type 1 has an invalid length. [ 799.010961][ T8063] syzkaller1: entered promiscuous mode [ 799.033177][ T8063] syzkaller1: entered allmulticast mode [ 799.098354][ T8073] 8021q: adding VLAN 0 to HW filter on device bond6 [ 799.138953][ T8076] 8021q: adding VLAN 0 to HW filter on device bond6 [ 799.146566][ T8076] bond6: (slave ipip1): The slave device specified does not support setting the MAC address [ 799.163283][ T8076] bond6: (slave ipip1): Error -95 calling set_mac_address [ 799.876134][ T8107] netlink: 'syz.4.15747': attribute type 20 has an invalid length. [ 799.894244][ T8107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15747'. [ 799.946419][ T8108] netlink: 'syz.4.15747': attribute type 20 has an invalid length. [ 799.965175][ T8108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15747'. [ 800.317203][ T8115] syzkaller1: entered promiscuous mode [ 800.335654][ T8115] syzkaller1: entered allmulticast mode [ 800.616189][ T8120] netlink: 'syz.4.15751': attribute type 1 has an invalid length. [ 800.743958][ T8120] bond7: entered promiscuous mode [ 800.765112][ T8120] 8021q: adding VLAN 0 to HW filter on device bond7 [ 800.833159][ T8123] 8021q: adding VLAN 0 to HW filter on device bond7 [ 800.851359][ T8123] bond7: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 800.862840][ T8123] bond7: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 800.877111][ T8123] bond7: (slave ip6gre2): making interface the new active one [ 800.886465][ T8123] ip6gre2: entered promiscuous mode [ 800.899578][ T8123] bond7: (slave ip6gre2): Enslaving as an active interface with an up link [ 802.178539][ T8171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15762'. [ 802.200920][ T8171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15762'. [ 802.212093][ T8171] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 802.371800][ T8174] wlan0 speed is unknown, defaulting to 1000 [ 802.388309][ T8174] lo speed is unknown, defaulting to 1000 [ 805.073974][ T8226] netlink: 'syz.3.15780': attribute type 1 has an invalid length. [ 805.102649][ T8226] netlink: 224 bytes leftover after parsing attributes in process `syz.3.15780'. [ 805.272750][ T8237] netlink: 'syz.0.15783': attribute type 3 has an invalid length. [ 805.504384][ T8239] netlink: 'syz.3.15784': attribute type 1 has an invalid length. [ 805.536831][ T8239] netlink: 'syz.3.15784': attribute type 1 has an invalid length. [ 805.583089][ T8239] netlink: 264 bytes leftover after parsing attributes in process `syz.3.15784'. [ 805.608087][ T8239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15784'. [ 805.625506][ T8239] netlink: 'syz.3.15784': attribute type 1 has an invalid length. [ 805.660025][ T8239] netlink: 'syz.3.15784': attribute type 1 has an invalid length. [ 805.693462][ T8239] netlink: 264 bytes leftover after parsing attributes in process `syz.3.15784'. [ 805.728244][ T8239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15784'. [ 805.931924][ T8261] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15794'. [ 806.190577][ C0] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 806.253756][ T8275] sctp: [Deprecated]: syz.0.15801 (pid 8275) Use of int in maxseg socket option. [ 806.253756][ T8275] Use struct sctp_assoc_value instead [ 806.389933][ T8281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15804'. [ 806.429123][ T8281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15804'. [ 806.906601][ T8298] syzkaller1: entered promiscuous mode [ 806.934832][ T8298] syzkaller1: entered allmulticast mode [ 807.259809][ T8316] __nla_validate_parse: 4 callbacks suppressed [ 807.259829][ T8316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15817'. [ 807.333153][ T8319] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15817'. [ 807.577808][ T8325] sctp: [Deprecated]: syz.2.15822 (pid 8325) Use of struct sctp_assoc_value in delayed_ack socket option. [ 807.577808][ T8325] Use struct sctp_sack_info instead [ 807.695432][ T8328] syzkaller0: entered promiscuous mode [ 807.711550][ T8328] syzkaller0: entered allmulticast mode [ 807.739095][ T8328] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 808.301014][ T8343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15826'. [ 808.778792][ T8361] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15838'. [ 809.679302][ T8399] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15854'. [ 810.011614][ T8415] syzkaller0: entered promiscuous mode [ 810.017261][ T8415] syzkaller0: entered allmulticast mode [ 810.258013][ T8426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15862'. [ 810.543564][ T8434] netlink: 'syz.4.15865': attribute type 3 has an invalid length. [ 811.205733][ T8443] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15869'. [ 811.293808][ T8446] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15870'. [ 811.361487][ T8448] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15870'. [ 813.870580][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 815.014578][ T8463] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15874'. [ 815.062422][ T8466] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15873'. [ 815.209661][ T8473] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15876'. [ 815.564239][ T8486] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15882'. [ 815.691097][ T8491] syzkaller1: entered promiscuous mode [ 815.703416][ T8491] syzkaller1: entered allmulticast mode [ 815.906356][ T8499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15887'. [ 816.141066][ T8509] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15891'. [ 816.247586][ T8509] netlink: 'syz.2.15891': attribute type 1 has an invalid length. [ 816.292605][ T8518] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 816.370535][ T8523] netlink: 'syz.0.15897': attribute type 4 has an invalid length. [ 816.447397][ T8523] netlink: 'syz.0.15897': attribute type 4 has an invalid length. [ 816.668016][ T3339] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 816.816015][T19610] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 816.835381][T19610] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 54509 - 0 [ 816.846178][T19610] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 816.855641][T19610] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 54509 - 0 [ 816.865982][T19610] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 816.875262][T19610] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 54509 - 0 [ 816.884834][T19610] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 816.894126][T19610] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 54509 - 0 [ 817.070510][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 817.166944][ T8545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15902'. [ 819.129969][ T8593] syzkaller1: entered promiscuous mode [ 819.140420][ T8593] syzkaller1: entered allmulticast mode [ 819.396008][ T8602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15916'. [ 819.548084][ T8527] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 819.720191][ T8609] netlink: 'syz.3.15918': attribute type 4 has an invalid length. [ 819.771446][ T8611] netlink: 'syz.3.15918': attribute type 4 has an invalid length. [ 820.270426][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 820.288231][ T8627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15925'. [ 820.899734][ T8640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15932'. [ 821.094989][ T8640] 8021q: adding VLAN 0 to HW filter on device bond12 [ 821.206934][ T8653] sctp: [Deprecated]: syz.1.15936 (pid 8653) Use of struct sctp_assoc_value in delayed_ack socket option. [ 821.206934][ T8653] Use struct sctp_sack_info instead [ 821.223952][ T8644] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 822.265830][ T8684] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15946'. [ 822.832773][ C0] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 822.953238][ T8697] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15951'. [ 823.292374][ T8703] netlink: 'syz.4.15954': attribute type 27 has an invalid length. [ 823.352479][ T8703] lo: left allmulticast mode [ 823.359237][ T8705] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15955'. [ 823.384943][ T8703] tunl0: left allmulticast mode [ 823.413284][ T8703] gre0: left allmulticast mode [ 823.442686][ T8703] gretap0: left allmulticast mode [ 823.456849][ T8703] erspan0: left allmulticast mode [ 823.501640][ T8703] ip_vti0: left allmulticast mode [ 823.517201][ T8703] ip6_vti0: left allmulticast mode [ 823.543762][ T8703] sit0: left allmulticast mode [ 823.577574][ T8703] ip6tnl0: left allmulticast mode [ 823.586909][ T8703] ip6gre0: left allmulticast mode [ 823.610760][ T8703] syz_tun: left allmulticast mode [ 823.696370][ T8703] ip6gretap0: left allmulticast mode [ 823.765225][ T8703] bond0: left allmulticast mode [ 823.772032][ T8703] dummy0: left allmulticast mode [ 823.783702][ T8703] nlmon0: left allmulticast mode [ 823.795991][ T8703] vxcan0: left allmulticast mode [ 823.808729][ T8703] vxcan1: left allmulticast mode [ 823.817101][ T8703] veth0: left allmulticast mode [ 823.825187][ T8703] veth1: left allmulticast mode [ 823.831102][ T8703] wg0: left allmulticast mode [ 823.837206][ T8703] wg2: left allmulticast mode [ 823.843129][ T8703] veth0_to_bridge: left allmulticast mode [ 823.850803][ T8703] veth1_to_bridge: left allmulticast mode [ 823.857020][ T8703] =v: left allmulticast mode [ 823.862678][ T8703] bond_slave_0: left allmulticast mode [ 823.868486][ T8703] veth1_to_team: left allmulticast mode [ 823.875882][ T8703] team_slave_1: left allmulticast mode [ 823.882666][ T8703] veth0_to_batadv: left allmulticast mode [ 823.888934][ T8703] batadv_slave_0: left allmulticast mode [ 823.896213][ T8703] veth1_to_batadv: left allmulticast mode [ 823.903905][ T8703] veth0_to_hsr: left allmulticast mode [ 823.909871][ T8703] veth1_to_hsr: left allmulticast mode [ 823.916582][ T8703] hsr0: left allmulticast mode [ 823.923458][ T8703] hsr_slave_0: left allmulticast mode [ 823.931385][ T8703] hsr_slave_1: left allmulticast mode [ 823.937101][ T8703] veth1_virt_wifi: left allmulticast mode [ 823.943956][ T8703] veth0_virt_wifi: left allmulticast mode [ 823.950009][ T8703] virt_wifi0: left allmulticast mode [ 823.963477][ T8703] veth1_macvtap: left allmulticast mode [ 823.976960][ T8703] veth0_macvtap: left allmulticast mode [ 823.984834][ T8703] macvtap0: left allmulticast mode [ 823.990744][ T8703] macsec0: left allmulticast mode [ 823.996260][ T8703] geneve1: left allmulticast mode [ 824.002040][ T8703] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 824.010147][ T8703] netdevsim netdevsim4 netdevsim2: left allmulticast mode [ 824.021808][ T8703] netdevsim netdevsim4 netdevsim3: left allmulticast mode [ 824.030219][ T8703] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 824.047870][ T8703] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 824.061144][ T8703] mac80211_hwsim hwsim12 wlan2: left allmulticast mode [ 824.075607][ T8703] mac80211_hwsim hwsim13 wlan3: left allmulticast mode [ 824.087583][ T8703] ip6tnl1: left allmulticast mode [ 824.100215][ T8703] geneve2: left allmulticast mode [ 824.126310][ T8703] bridge1: left allmulticast mode [ 824.144854][ T8703] bridge2: left allmulticast mode [ 824.163289][ T8703] mac80211_hwsim hwsim20 wlan4: left allmulticast mode [ 824.190879][ T8703] vti0: left allmulticast mode [ 824.208790][ T8703] bridge3: left allmulticast mode [ 824.224882][ T8703] geneve3: left allmulticast mode [ 824.234743][ T8703] ip6tnl2: left allmulticast mode [ 824.245226][ T8703] mac80211_hwsim hwsim28 wlan5: left allmulticast mode [ 824.258908][ T8703] sit1: left allmulticast mode [ 824.274441][ T8703] bridge4: left allmulticast mode [ 824.285287][ T8703] erspan1: left allmulticast mode [ 824.296586][ T8703] bond1: left allmulticast mode [ 824.306667][ T8703] bond2: left allmulticast mode [ 824.322972][ T8703] bridge5: left allmulticast mode [ 824.338636][ T8703] mac80211_hwsim hwsim35 wlan6: left allmulticast mode [ 824.350805][ T8703] geneve4: left allmulticast mode [ 824.360840][ T8703] ip6tnl3: left allmulticast mode [ 824.367894][ T8703] sit2: left allmulticast mode [ 824.374999][ T8703] bridge6: left allmulticast mode [ 824.381482][ T8703] gtp0: left allmulticast mode [ 824.386745][ T8703] bridge7: left allmulticast mode [ 824.393291][ T8703] batadv1: left allmulticast mode [ 824.398771][ T8703] mac80211_hwsim hwsim39 wlan7: left allmulticast mode [ 824.409562][ T8703] mac80211_hwsim hwsim40 wlan8: left allmulticast mode [ 824.426664][ T8703] ip6gre1: left allmulticast mode [ 824.432519][ T8703] veth2: left allmulticast mode [ 824.438058][ T8703] veth3: left allmulticast mode [ 824.444323][ T8703] bridge8: left allmulticast mode [ 824.461320][ T8703] vxlan0: left allmulticast mode [ 824.471738][ T8703] syztnl0: left allmulticast mode [ 824.485866][ T8703] ipip0: left allmulticast mode [ 824.514387][ T8703] geneve0: left allmulticast mode [ 824.544780][ T8703] vxlan1: left allmulticast mode [ 824.573750][ T8703] syztnl2: left allmulticast mode [ 824.585979][ T8703] batadv0: left allmulticast mode [ 824.599782][ T8703] macsec1: left allmulticast mode [ 824.615711][ T8703] macvtap1: left allmulticast mode [ 824.627587][ T8703] batman_adv: batadv0: Interface deactivated: macvlan2 [ 824.643652][ T8703] batadv_slave_1: left allmulticast mode [ 824.652912][ T8703] macvlan2: left allmulticast mode [ 824.665833][ T8703] macvlan3: left allmulticast mode [ 824.683165][ T8703] vxlan2: left allmulticast mode [ 824.694495][ T8703] vxlan3: left allmulticast mode [ 824.704581][ T8703] gtp1: left allmulticast mode [ 824.717738][ T8703] macvlan4: left allmulticast mode [ 824.731879][ T8703] ip6erspan0: left allmulticast mode [ 824.747891][ T8703] geneve5: left allmulticast mode [ 824.760656][ T8703] vxlan4: left allmulticast mode [ 825.810523][ T8703] gretap1: left allmulticast mode [ 825.824347][ T8703] bond7: left promiscuous mode [ 825.837222][ T8703] ip6gre2: left promiscuous mode [ 825.872299][ T8706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 825.893451][ T8706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 825.931692][ T8706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 825.941511][ T8706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 825.951883][ T8706] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 825.962493][ T8706] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 825.978652][ T8706] veth0_macvtap: left promiscuous mode [ 825.985639][ T8706] veth0_macvtap: entered promiscuous mode [ 825.995385][ T8706] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 826.003777][ T8706] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 826.012073][ T8706] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 826.019855][ T8706] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 826.031039][ T8706] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 826.047008][ T5810] lo speed is unknown, defaulting to 1000 [ 826.079003][ T1170] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 826.091366][ T1170] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 36243 - 0 [ 826.112984][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.120223][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 826.168071][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.175414][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 826.216684][ T1170] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 826.230697][ T5352] lo speed is unknown, defaulting to 1000 [ 826.239768][ T1170] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 36243 - 0 [ 826.264582][ T8758] netlink: 'syz.0.15969': attribute type 1 has an invalid length. [ 826.273841][ T1170] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 826.294499][ T1170] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 36243 - 0 [ 826.337772][ T8764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15969'. [ 826.397551][ T1170] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 826.434569][ T1170] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 36243 - 0 [ 826.464601][ T8764] bond5: entered promiscuous mode [ 826.485830][ T8764] bond5: entered allmulticast mode [ 826.502583][ T8764] 8021q: adding VLAN 0 to HW filter on device bond5 [ 826.822361][ T8778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15974'. [ 826.898048][ T8784] netlink: 'syz.2.15976': attribute type 1 has an invalid length. [ 827.036166][ T8786] gretap1: entered allmulticast mode [ 827.055739][ T8786] bond13: (slave gretap1): making interface the new active one [ 827.076480][ T8786] bond13: (slave gretap1): Enslaving as an active interface with an up link [ 827.573170][ T8776] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 827.602484][ T8815] tipc: Failed to remove unknown binding: 66,1,1/0:2267035055/2267035057 [ 828.130119][ T8800] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 828.433759][ T8833] syzkaller0: entered promiscuous mode [ 828.447839][ T8833] syzkaller0: entered allmulticast mode [ 829.121591][ T8849] netlink: 9 bytes leftover after parsing attributes in process `syz.4.15996'. [ 833.656413][ T8875] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 833.722641][ T8876] wlan0 speed is unknown, defaulting to 1000 [ 833.743170][ T8876] lo speed is unknown, defaulting to 1000 [ 833.878601][ T8888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16010'. [ 834.024387][ T8883] wlan0 speed is unknown, defaulting to 1000 [ 834.044035][ T8883] lo speed is unknown, defaulting to 1000 [ 834.471959][ T8893] wlan0 speed is unknown, defaulting to 1000 [ 834.488959][ T8893] lo speed is unknown, defaulting to 1000 [ 834.859665][ T8919] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16018'. [ 835.304291][ T8939] xfrm0: entered allmulticast mode [ 835.318689][ T8939] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 835.845741][ T8960] wlan0 speed is unknown, defaulting to 1000 [ 835.878974][ T8960] lo speed is unknown, defaulting to 1000 [ 836.111100][ T8975] netlink: 'syz.4.16033': attribute type 30 has an invalid length. [ 836.125640][ T8975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16033'. [ 836.383669][ T8978] netlink: 'syz.4.16033': attribute type 30 has an invalid length. [ 836.407867][ T8978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16033'. [ 836.416429][ T8988] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16040'. [ 836.572885][ T8959] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 836.750109][ T9000] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16045'. [ 836.824938][ T9005] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16047'. [ 837.213343][ T9026] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16054'. [ 837.520357][ T9040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16061'. [ 837.568972][ T9040] netlink: 'syz.3.16061': attribute type 1 has an invalid length. [ 837.801480][ T9056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16068'. [ 838.429556][ T9074] wlan0 speed is unknown, defaulting to 1000 [ 838.462793][ T9074] lo speed is unknown, defaulting to 1000 [ 838.928085][ T5810] IPVS: starting estimator thread 0... [ 839.031695][ T9093] IPVS: using max 36 ests per chain, 86400 per kthread [ 839.403088][ T9110] syzkaller0: entered promiscuous mode [ 839.436080][ T9110] syzkaller0: entered allmulticast mode [ 839.497940][ T9120] __nla_validate_parse: 1 callbacks suppressed [ 839.497964][ T9120] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16088'. [ 839.539420][ T35] IPVS: stop unused estimator thread 0... [ 839.812138][ T9127] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16091'. [ 839.943591][ T9102] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 840.111484][ T9133] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16092'. [ 844.083167][ T9164] wlan0 speed is unknown, defaulting to 1000 [ 844.112526][ T9164] lo speed is unknown, defaulting to 1000 [ 844.873094][ T9182] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16111'. [ 844.933590][ T9182] sch_tbf: burst 88 is lower than device veth15 mtu (1514) ! [ 845.159870][ T9188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16114'. [ 845.279350][ T9198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16116'. [ 845.415966][ T9194] bond6: (slave macvlan1): Enslaving as an active interface with an up link [ 845.456275][ T9199] bond6 (unregistering): (slave macvlan1): Releasing backup interface [ 845.494177][ T9199] bond6 (unregistering): Released all slaves [ 845.544896][ T9201] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16118'. [ 845.558296][ T9201] netlink: 32 bytes leftover after parsing attributes in process `syz.1.16118'. [ 845.570502][ T9201] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16118'. [ 845.597547][ T9201] netlink: 32 bytes leftover after parsing attributes in process `syz.1.16118'. [ 845.623698][ T9193] bridge8: port 1(vlan0) entered blocking state [ 845.647187][ T9193] bridge8: port 1(vlan0) entered disabled state [ 845.664286][ T9193] vlan0: entered allmulticast mode [ 845.685357][ T9193] bridge8: entered allmulticast mode [ 845.716973][ T9193] vlan0: left allmulticast mode [ 845.745224][ T9193] bridge8: left allmulticast mode [ 845.798720][ T9208] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16120'. [ 845.939542][ T9212] netlink: 'syz.4.16122': attribute type 4 has an invalid length. [ 845.946666][ T9225] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16125'. [ 846.015718][ T9222] netlink: 'syz.4.16122': attribute type 4 has an invalid length. [ 846.061452][T14305] lo speed is unknown, defaulting to 1000 [ 846.062061][ T5810] lo speed is unknown, defaulting to 1000 [ 846.289010][ T9237] wlan0 speed is unknown, defaulting to 1000 [ 846.309587][ T9237] lo speed is unknown, defaulting to 1000 [ 846.558249][ T9247] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 846.694675][ T9251] sctp: [Deprecated]: syz.0.16134 (pid 9251) Use of struct sctp_assoc_value in delayed_ack socket option. [ 846.694675][ T9251] Use struct sctp_sack_info instead [ 846.823014][ T9254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16135'. [ 848.863745][ T9215] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 850.940017][ T9275] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 851.078020][ T9293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16151'. [ 851.947648][ T9327] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16161'. [ 852.346536][ T1121] af_packet: tpacket_rcv: packet too big, clamped from 52 to 4294967272. macoff=96 [ 853.418814][ T9361] 8021q: adding VLAN 0 to HW filter on device .` [ 853.443754][ T9361] 8021q: adding VLAN 0 to HW filter on device team0 [ 853.479376][ T9361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 853.612773][ T9361] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 854.276046][ T9401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16185'. [ 854.559297][ T9412] netlink: 'syz.4.16189': attribute type 1 has an invalid length. [ 854.607125][ T9412] 8021q: adding VLAN 0 to HW filter on device bond9 [ 854.651019][ T9414] macvlan0: entered promiscuous mode [ 854.656621][ T9414] macvlan0: entered allmulticast mode [ 854.664017][ T9414] bond9: entered promiscuous mode [ 854.672457][ T9414] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 854.707304][ T9414] bond9: left promiscuous mode [ 854.735555][ T9391] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 854.868562][ T9416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16190'. [ 854.914460][ T9416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16190'. [ 854.939525][ T9421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16190'. [ 854.959061][ T9421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16190'. [ 856.012599][ T9468] netlink: 64 bytes leftover after parsing attributes in process `syz.2.16208'. [ 856.062272][ T9468] syzkaller1: entered promiscuous mode [ 856.076096][ T9468] syzkaller1: entered allmulticast mode [ 856.303154][ T9474] bond6: entered allmulticast mode [ 856.326425][ T9474] macvlan3: entered promiscuous mode [ 856.332241][ T9474] macvlan3: entered allmulticast mode [ 856.339682][ T9474] bond6: (slave macvlan3): Opening slave failed [ 856.542312][ T9483] netlink: 64 bytes leftover after parsing attributes in process `syz.4.16214'. [ 856.568479][ T9483] syzkaller1: entered promiscuous mode [ 856.575081][ T9483] syzkaller1: entered allmulticast mode [ 856.764940][ T9491] xt_hashlimit: size too large, truncated to 1048576 [ 857.661847][ T9519] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 857.689969][ T9519] A link change request failed with some changes committed already. Interface syztnl2 may have been left with an inconsistent configuration, please check. [ 857.714967][ T5352] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 858.125109][ T9534] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16235'. [ 858.153707][ T9534] netlink: 32 bytes leftover after parsing attributes in process `syz.1.16235'. [ 858.182944][ T9534] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16235'. [ 858.202102][ T5352] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 858.205827][ T9534] netlink: 32 bytes leftover after parsing attributes in process `syz.1.16235'. [ 858.354030][ T9539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16236'. [ 859.300732][ T9568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16246'. [ 859.528872][ T9580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16251'. [ 859.636148][ T9582] tipc: Started in network mode [ 859.645114][ T9582] tipc: Node identity ca898976b627, cluster identity 4711 [ 859.663023][ T9582] tipc: Enabled bearer , priority 0 [ 859.765129][ T9582] syzkaller0: entered promiscuous mode [ 859.774361][ T9582] syzkaller0: entered allmulticast mode [ 859.794536][ T9582] tipc: Resetting bearer [ 859.893468][ T9581] tipc: Resetting bearer [ 864.379723][ T9581] tipc: Disabling bearer [ 864.404358][ T9610] gretap0: entered promiscuous mode [ 864.415795][ T8722] tipc: Node number set to 2091813238 [ 864.481466][ T9613] wlan0 speed is unknown, defaulting to 1000 [ 864.510700][ T9613] lo speed is unknown, defaulting to 1000 [ 864.925278][ T9644] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16273'. [ 864.939168][ T9644] siw: device registration error -23 [ 865.070855][ C0] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 865.481121][ T9666] bridge2: entered promiscuous mode [ 865.496801][ T9666] bridge2: entered allmulticast mode [ 865.928587][ T9684] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16287'. [ 866.344246][ T9689] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 866.354921][ T9689] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 866.466639][ T9697] wlan0 speed is unknown, defaulting to 1000 [ 866.498980][ T9697] lo speed is unknown, defaulting to 1000 [ 866.720867][ T9710] bridge0: port 3(vlan1) entered blocking state [ 866.760518][ T9710] bridge0: port 3(vlan1) entered disabled state [ 866.793263][ T9710] vlan1: entered allmulticast mode [ 866.821889][ T9710] geneve0: entered allmulticast mode [ 866.854326][ T9710] vlan1: entered promiscuous mode [ 866.881509][ T9710] geneve0: entered promiscuous mode [ 867.909092][ T9740] syzkaller0: entered promiscuous mode [ 867.920364][ T9740] syzkaller0: entered allmulticast mode [ 868.265308][ T9753] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16310'. [ 873.679635][ T9775] wlan0 speed is unknown, defaulting to 1000 [ 873.706726][ T9775] lo speed is unknown, defaulting to 1000 [ 873.851418][ T9795] bridge_slave_0: left allmulticast mode [ 873.859859][ T9795] bridge_slave_0: left promiscuous mode [ 873.874579][ T9795] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.900206][ T9795] bond0: (slave bond_slave_0): Releasing backup interface [ 873.929189][ T9795] bond0: (slave bond_slave_1): Releasing backup interface [ 873.975013][ T9795] team0: Port device team_slave_0 removed [ 874.011799][ T9795] team0: Port device team_slave_1 removed [ 874.023982][ T9795] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 874.123739][ T9794] syzkaller1: entered promiscuous mode [ 874.141900][ T9794] syzkaller1: entered allmulticast mode [ 874.152227][ T9799] team0: Mode changed to "roundrobin" [ 874.275702][ T9809] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 875.958267][ T9876] wlan0 speed is unknown, defaulting to 1000 [ 875.998508][ T9876] lo speed is unknown, defaulting to 1000 [ 876.150687][ T9846] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 876.346037][ T9891] netlink: 64 bytes leftover after parsing attributes in process `syz.3.16347'. [ 876.402617][ T9893] syzkaller1: entered promiscuous mode [ 876.445545][ T9893] syzkaller1: entered allmulticast mode [ 876.747962][ T9900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16349'. [ 876.773860][ T9900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16349'. [ 876.963984][ T9907] syzkaller1: entered promiscuous mode [ 876.979900][ T9907] syzkaller1: entered allmulticast mode [ 877.042703][ T9912] netlink: 'syz.1.16353': attribute type 4 has an invalid length. [ 877.045935][ T9902] wlan0 speed is unknown, defaulting to 1000 [ 877.108019][ T9917] netlink: 'syz.1.16353': attribute type 4 has an invalid length. [ 877.601244][ T9902] lo speed is unknown, defaulting to 1000 [ 877.853638][ T9933] sctp: [Deprecated]: syz.0.16356 (pid 9933) Use of int in max_burst socket option. [ 877.853638][ T9933] Use struct sctp_assoc_value instead [ 878.045425][ T9941] netlink: 'syz.3.16358': attribute type 1 has an invalid length. [ 878.077165][ T9944] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16361'. [ 878.191453][ T9941] 8021q: adding VLAN 0 to HW filter on device bond7 [ 878.216628][ T9950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16362'. [ 878.539777][ T9961] syzkaller0: entered promiscuous mode [ 878.548017][ T9961] syzkaller0: entered allmulticast mode [ 879.617692][T10001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16382'. [ 879.829516][T10010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16385'. [ 879.843107][T10010] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16385'. [ 884.042058][T10022] tipc: Enabled bearer , priority 0 [ 884.051560][T10027] tipc: Disabling bearer [ 884.098419][T10018] wlan0 speed is unknown, defaulting to 1000 [ 884.123584][T10018] lo speed is unknown, defaulting to 1000 [ 884.436723][T10066] netlink: 'syz.0.16397': attribute type 1 has an invalid length. [ 884.497947][T10065] veth0: entered promiscuous mode [ 884.517242][T10065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16398'. [ 884.657001][T10066] 8021q: adding VLAN 0 to HW filter on device bond7 [ 884.730885][T10069] bond7: (slave veth0_to_bond): making interface the new active one [ 884.744130][T10069] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 884.847127][T10060] macvlan3: entered promiscuous mode [ 884.861711][T10060] macvlan3: entered allmulticast mode [ 884.869367][T10060] bond7: entered promiscuous mode [ 884.875411][T10060] veth0_to_bond: entered promiscuous mode [ 884.883482][T10060] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 884.906288][T10060] bond7: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 884.963373][T10060] bond7: left promiscuous mode [ 884.968203][T10060] veth0_to_bond: left promiscuous mode [ 885.027858][T10077] bridge13: entered promiscuous mode [ 885.034426][T10077] bridge13: entered allmulticast mode [ 885.284412][T10100] netlink: 'syz.0.16406': attribute type 1 has an invalid length. [ 885.322495][T10100] 8021q: adding VLAN 0 to HW filter on device bond8 [ 885.352134][T10100] bond8: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 885.361957][T10100] bond8: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 885.386477][T10099] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 885.436394][T10100] bond8: (slave ip6gretap2): making interface the new active one [ 885.463186][T10100] bond8: (slave ip6gretap2): Enslaving as an active interface with an up link [ 885.550717][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 886.084414][T10123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16414'. [ 886.934548][T10166] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 887.075459][T10172] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16427'. [ 887.092984][T10170] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 887.135303][T10170] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 887.146876][T10170] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 887.294853][T10179] bond5 (unregistering): Released all slaves [ 887.387848][T10187] syzkaller0: entered promiscuous mode [ 887.417735][T10187] syzkaller0: entered allmulticast mode [ 887.739132][T10197] bond5: entered promiscuous mode [ 888.444337][T10230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16443'. [ 888.467852][T10230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16443'. [ 890.507452][T10267] syzkaller0: entered promiscuous mode [ 890.513685][T10267] syzkaller0: entered allmulticast mode [ 890.538048][T10269] syzkaller1: entered promiscuous mode [ 890.544088][T10269] syzkaller1: entered allmulticast mode [ 890.677683][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 891.055640][T10214] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 892.228972][T10276] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 894.815866][T10292] IPv6: sit3: Disabled Multicast RS [ 894.897909][T10295] syzkaller0: entered promiscuous mode [ 894.909312][T10295] syzkaller0: entered allmulticast mode [ 895.007001][T10306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16466'. [ 895.298000][T10319] wlan0 speed is unknown, defaulting to 1000 [ 895.314167][T10319] lo speed is unknown, defaulting to 1000 [ 895.401106][T10326] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16473'. [ 895.646638][T10334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16475'. [ 895.646688][T10331] ip6gre3: entered promiscuous mode [ 895.665052][T10331] ip6gre3: entered allmulticast mode [ 895.689998][T10331] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 895.791637][ C0] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 896.098836][T10346] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16480'. [ 896.156165][T10349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16481'. [ 896.208264][T10353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16483'. [ 896.539791][T10371] tipc: Failed to remove unknown binding: 66,0,0/8432298:2530378953/2530378954 [ 896.566623][T10371] tipc: Failed to remove unknown binding: 66,0,0/8432298:2530378953/2530378954 [ 896.642786][T10377] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16491'. [ 896.654027][T10373] wlan0 speed is unknown, defaulting to 1000 [ 896.704795][T10380] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 896.783874][T10373] lo speed is unknown, defaulting to 1000 [ 896.807687][T10375] wlan0 speed is unknown, defaulting to 1000 [ 896.851432][T10375] lo speed is unknown, defaulting to 1000 [ 898.029600][T10436] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16513'. [ 898.127239][T10436] vlan2: entered promiscuous mode [ 898.134865][T10436] syz_tun: entered promiscuous mode [ 898.346494][T10442] wlan0 speed is unknown, defaulting to 1000 [ 898.383742][T10442] lo speed is unknown, defaulting to 1000 [ 899.328398][T10477] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16528'. [ 899.342734][T10477] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16528'. [ 899.507019][T10469] wlan0 speed is unknown, defaulting to 1000 [ 899.515228][T10469] lo speed is unknown, defaulting to 1000 [ 900.353677][T10519] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16543'. [ 900.416966][T10519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16543'. [ 901.612155][T10551] syzkaller0: entered promiscuous mode [ 901.619487][T10551] syzkaller0: entered allmulticast mode [ 901.627664][T10558] netlink: 'syz.4.16558': attribute type 29 has an invalid length. [ 902.383088][T10479] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 902.650724][T10566] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16560'. [ 905.071320][T10581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16566'. [ 905.320375][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802b915400: rx timeout, send abort [ 905.820422][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802b915c00: rx timeout, send abort [ 905.831923][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802b915400: abort rx timeout. Force session deactivation [ 906.328839][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802b915c00: abort rx timeout. Force session deactivation [ 906.929529][T10588] netlink: 'syz.3.16569': attribute type 1 has an invalid length. [ 907.046184][T10596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16572'. [ 907.074905][T10602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16574'. [ 907.147215][T10599] 8021q: adding VLAN 0 to HW filter on device bond9 [ 907.154288][T10608] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16569'. [ 907.170998][T10599] bond8: (slave bond9): making interface the new active one [ 907.217331][T10599] bond8: (slave bond9): Enslaving as an active interface with an up link [ 907.447079][T10588] bond8: (slave gretap3): Enslaving as a backup interface with an up link [ 907.511203][T10608] 8021q: adding VLAN 0 to HW filter on device bond8 [ 908.255165][T10652] syzkaller1: entered promiscuous mode [ 908.277292][T10652] syzkaller1: entered allmulticast mode [ 908.356640][T10659] netlink: 52 bytes leftover after parsing attributes in process `syz.3.16588'. [ 908.408466][T10663] netlink: 76 bytes leftover after parsing attributes in process `syz.3.16588'. [ 908.432480][T10663] netlink: 52 bytes leftover after parsing attributes in process `syz.3.16588'. [ 913.857034][T10732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16600'. [ 913.874164][T10732] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 914.324222][T10743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16603'. [ 914.356197][T10713] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 914.547125][T10747] wlan0 speed is unknown, defaulting to 1000 [ 914.561305][T10747] lo speed is unknown, defaulting to 1000 [ 914.572109][T10749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16605'. [ 914.862110][T10757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16607'. [ 915.416809][T10759] wlan0 speed is unknown, defaulting to 1000 [ 915.460063][T10759] lo speed is unknown, defaulting to 1000 [ 916.563835][T10806] tipc: Enabled bearer , priority 0 [ 916.764702][T10806] syzkaller0: entered promiscuous mode [ 916.785318][T10806] syzkaller0: entered allmulticast mode [ 916.807625][T10806] tipc: Resetting bearer [ 917.182775][ T3339] tipc: Resetting bearer [ 917.203334][T10805] tipc: Resetting bearer [ 917.272386][T10832] netlink: 'syz.1.16628': attribute type 1 has an invalid length. [ 921.139119][T10805] tipc: Disabling bearer [ 921.152971][T10811] syzkaller0: entered promiscuous mode [ 921.158461][T10811] syzkaller0: entered allmulticast mode [ 921.169828][T10825] tap0: tun_chr_ioctl cmd 1074025677 [ 921.175810][T10825] tap0: linktype set to 823 [ 921.194119][T10832] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 921.201492][T10834] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 921.425436][T10847] syzkaller1: entered promiscuous mode [ 921.465178][T10847] syzkaller1: entered allmulticast mode [ 921.902947][T10866] bond6: option ad_user_port_key: invalid value (65535) [ 921.910101][T10866] bond6: option ad_user_port_key: allowed values 0 - 1023 [ 921.925064][T10866] bond6 (unregistering): Released all slaves [ 922.412696][T10877] netlink: 164 bytes leftover after parsing attributes in process `syz.3.16641'. [ 922.598913][T10884] netlink: 'syz.3.16644': attribute type 11 has an invalid length. [ 922.792087][T10887] syzkaller0: entered promiscuous mode [ 922.809365][T10887] syzkaller0: entered allmulticast mode [ 922.976851][T10896] netlink: 36 bytes leftover after parsing attributes in process `syz.1.16648'. [ 922.999500][T10896] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16648'. [ 923.029693][T10896] netlink: 36 bytes leftover after parsing attributes in process `syz.1.16648'. [ 923.115583][T10902] wlan0 speed is unknown, defaulting to 1000 [ 923.138926][T10902] lo speed is unknown, defaulting to 1000 [ 923.348810][T10909] smbdirect: ib_dev[syz0] removed [ 923.756412][T10926] netlink: 'syz.3.16655': attribute type 11 has an invalid length. [ 923.788481][T10926] netlink: 224 bytes leftover after parsing attributes in process `syz.3.16655'. [ 923.911587][T10924] syzkaller0: entered promiscuous mode [ 923.933431][T10924] syzkaller0: entered allmulticast mode [ 925.206555][T10973] 8021q: adding VLAN 0 to HW filter on device bond11 [ 925.219969][T10973] bond10: (slave bond11): Enslaving as an active interface with an up link [ 925.344121][T10973] bond10: (slave gretap3): Enslaving as an active interface with an up link [ 925.750095][T10999] syzkaller0: entered promiscuous mode [ 925.769321][T10999] syzkaller0: entered allmulticast mode [ 926.073957][T11005] bond9: Unable to set down delay as MII monitoring is disabled [ 926.103117][T11005] bond9 (unregistering): Released all slaves [ 926.163366][T11014] netlink: 'syz.0.16682': attribute type 10 has an invalid length. [ 926.180568][T11014] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16682'. [ 926.696952][T11022] lo speed is unknown, defaulting to 1000 [ 926.703369][T11027] syzkaller0: entered promiscuous mode [ 926.712382][T11027] syzkaller0: entered allmulticast mode [ 927.206108][T11051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16692'. [ 927.262006][T11052] xt_TCPMSS: Only works on TCP SYN packets [ 927.500135][T11051] vlan1: left allmulticast mode [ 927.527467][T11051] geneve0: left allmulticast mode [ 927.545939][T11051] vlan1: left promiscuous mode [ 927.572214][T11051] geneve0: left promiscuous mode [ 927.594886][T11051] bridge0: port 3(vlan1) entered disabled state [ 927.635273][T11051] bridge_slave_1: left allmulticast mode [ 927.662152][T11051] bridge_slave_1: left promiscuous mode [ 927.685121][T11051] bridge0: port 2(bridge_slave_1) entered disabled state [ 927.729328][T11051] bridge_slave_0: left allmulticast mode [ 927.749357][T11051] bridge_slave_0: left promiscuous mode [ 927.765708][T11051] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.852809][T11051] bridge0 (unregistering): left allmulticast mode [ 928.245159][T11078] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 928.612603][T11092] netlink: 'syz.4.16704': attribute type 2 has an invalid length. [ 928.630909][T11092] netlink: 120 bytes leftover after parsing attributes in process `syz.4.16704'. [ 928.648275][T11092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16704'. [ 928.936346][T11109] netlink: 'syz.2.16710': attribute type 1 has an invalid length. [ 928.966298][T11109] 8021q: adding VLAN 0 to HW filter on device bond14 [ 929.010716][T11109] bond14: (slave veth11): Enslaving as an active interface with a down link [ 929.062807][T11109] virt_wifi0: left promiscuous mode [ 929.131431][T14307] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 929.132071][T11109] batman_adv: batadv0: Interface activated: vlan0 [ 929.155093][ T5352] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 929.170549][ T5352] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 929.181193][T11109] virt_wifi0: entered promiscuous mode [ 929.229351][T11109] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 929.323813][T11112] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 929.337126][T11112] bond14: (slave batadv1): making interface the new active one [ 929.355345][T11112] batadv1: entered promiscuous mode [ 929.369839][T11112] bond14: (slave batadv1): Enslaving as an active interface with an up link [ 929.546435][T11120] lo speed is unknown, defaulting to 1000 [ 929.580511][ T5352] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 929.590878][T14304] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 929.927448][T11125] syzkaller0: entered promiscuous mode [ 929.935077][T11125] syzkaller0: entered allmulticast mode [ 930.195999][ T5352] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 931.732606][T11096] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 932.763783][T11171] netlink: 200 bytes leftover after parsing attributes in process `syz.4.16728'. [ 935.874503][T11179] syzkaller0: entered promiscuous mode [ 935.891029][T11179] syzkaller0: entered allmulticast mode [ 935.937872][T11185] netlink: 'syz.1.16734': attribute type 1 has an invalid length. [ 936.003930][T11185] 8021q: adding VLAN 0 to HW filter on device bond6 [ 936.031072][T11190] bond6: (slave veth7): Enslaving as an active interface with a down link [ 936.048010][T11188] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16733'. [ 936.093061][T11185] vlan2: entered allmulticast mode [ 936.106515][T11185] bridge0: entered allmulticast mode [ 936.134386][T11185] bond6: (slave vlan2): Enslaving as an active interface with a down link [ 936.207061][T11193] syzkaller0: entered promiscuous mode [ 936.217799][T11193] syzkaller0: entered allmulticast mode [ 936.389212][T11204] netlink: 10184 bytes leftover after parsing attributes in process `syz.1.16739'. [ 936.409691][T11204] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16739'. [ 936.457859][T11207] syzkaller0: entered promiscuous mode [ 936.463957][T11207] syzkaller0: entered allmulticast mode [ 936.751064][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 936.802860][T11215] tipc: Enabled bearer , priority 0 [ 936.862839][T11215] syzkaller0: entered promiscuous mode [ 936.871905][T11215] syzkaller0: entered allmulticast mode [ 936.880746][T11215] tipc: Resetting bearer [ 936.918302][T11214] tipc: Resetting bearer [ 941.495418][T11214] tipc: Disabling bearer [ 941.541769][ T133] batadv1: left promiscuous mode [ 941.647508][T11255] syzkaller0: entered promiscuous mode [ 941.664102][T11255] syzkaller0: entered allmulticast mode [ 941.731750][ T50] Bluetooth: hci2: link tx timeout [ 941.738891][ T50] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 942.119015][T11266] syzkaller0: entered promiscuous mode [ 942.131077][T11266] syzkaller0: entered allmulticast mode [ 942.142476][T11268] syzkaller0: entered promiscuous mode [ 942.154009][T11268] syzkaller0: entered allmulticast mode [ 942.388336][T11273] netlink: zone id is out of range [ 942.401021][T11273] netlink: zone id is out of range [ 942.414885][T11273] netlink: zone id is out of range [ 942.428538][T11273] netlink: zone id is out of range [ 942.435786][T11273] netlink: zone id is out of range [ 942.441656][T11273] netlink: zone id is out of range [ 942.447052][T11273] netlink: zone id is out of range [ 942.476992][T11274] syzkaller1: entered promiscuous mode [ 942.484069][T11274] syzkaller1: entered allmulticast mode [ 942.618111][T11277] syzkaller0: entered promiscuous mode [ 942.627638][T11277] syzkaller0: entered allmulticast mode [ 942.679190][T11284] netlink: 'syz.2.16760': attribute type 1 has an invalid length. [ 942.785647][T11293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16760'. [ 943.804274][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 944.136624][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 944.151012][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 944.176783][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 944.185140][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 944.193073][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 946.357462][ T50] Bluetooth: hci5: command tx timeout [ 947.257264][T11284] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 947.302441][T11306] tipc: Enabling of bearer rejected, failed to enable media [ 948.372771][T11328] syzkaller0: entered promiscuous mode [ 948.390501][T11328] syzkaller0: entered allmulticast mode [ 948.430637][ T50] Bluetooth: hci5: command tx timeout [ 948.496187][T11348] netlink: 'syz.1.16768': attribute type 83 has an invalid length. [ 948.689242][T11353] tipc: Enabled bearer , priority 0 [ 948.752635][T11352] tipc: Disabling bearer [ 948.919068][T11310] lo speed is unknown, defaulting to 1000 [ 949.105037][T11379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16776'. [ 949.739125][T11368] ip6gre1: left promiscuous mode [ 949.755882][T11368] ip6gre1: left allmulticast mode [ 949.837113][T11368] ip6gre2: left promiscuous mode [ 949.846468][T11368] ip6gre2: left allmulticast mode [ 949.858442][T11368] xfrm1: left promiscuous mode [ 949.868933][T11368] xfrm1: left allmulticast mode [ 950.066001][T11368] bond3: left promiscuous mode [ 950.071873][T11368] ip6gre3: left promiscuous mode [ 950.083525][T11368] geneve2: left promiscuous mode [ 950.088677][T11368] geneve2: left allmulticast mode [ 950.101123][T11368] gretap1: left promiscuous mode [ 950.172901][T11368] team1: left promiscuous mode [ 950.177839][T11368] team1: left allmulticast mode [ 950.185338][T11368] team2: left promiscuous mode [ 950.190187][T11368] team2: left allmulticast mode [ 950.219016][T11368] bridge2: left promiscuous mode [ 950.225072][T11368] bridge2: left allmulticast mode [ 950.245896][T11368] bond5: left promiscuous mode [ 950.296265][T11368] vlan2: left allmulticast mode [ 950.305209][T11368] bridge0: left allmulticast mode [ 950.323275][T11379] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 950.363117][T11377] netlink: 36 bytes leftover after parsing attributes in process `syz.4.16775'. [ 950.386357][ T3335] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 950.422883][ T3335] netdevsim netdevsim1 netdevsim0: unset [0, 1] type 1 family 0 port 4352 - 0 [ 950.444894][ T3335] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.457300][ T3335] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 33099 - 0 [ 950.468511][ T3335] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 950.478179][ T3335] netdevsim netdevsim1 netdevsim1: unset [0, 1] type 1 family 0 port 4352 - 0 [ 950.487741][ T3335] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.497252][ T3335] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 33099 - 0 [ 950.506940][ T3335] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 950.521896][ T50] Bluetooth: hci5: command tx timeout [ 950.536959][ T3335] netdevsim netdevsim1 netdevsim2: unset [0, 1] type 1 family 0 port 4352 - 0 [ 950.553011][ T3335] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.566728][ T3335] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 33099 - 0 [ 950.599288][ T3335] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 950.617892][ T3335] netdevsim netdevsim1 netdevsim3: unset [0, 1] type 1 family 0 port 4352 - 0 [ 950.637385][ T3335] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.648756][ T3335] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 33099 - 0 [ 950.703903][T11374] lo speed is unknown, defaulting to 1000 [ 950.849533][T11405] bridge0: port 1(vlan3) entered blocking state [ 950.864168][T11405] bridge0: port 1(vlan3) entered disabled state [ 950.871176][T11405] vlan3: entered allmulticast mode [ 950.876480][T11405] geneve0: entered allmulticast mode [ 950.893722][T11399] syzkaller0: entered promiscuous mode [ 950.899668][T11399] syzkaller0: entered allmulticast mode [ 952.168394][T11469] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16789'. [ 952.590549][ T50] Bluetooth: hci5: command tx timeout [ 952.674479][T11451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 952.721737][T11451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 953.584626][T11451] batman_adv: batadv0: Interface deactivated: vlan0 [ 953.645878][T11451] batman_adv: batadv0: Interface deactivated: macsec0 [ 953.707536][T11451] bond8: left promiscuous mode [ 953.712658][T11451] gre4: left promiscuous mode [ 953.774282][T11451] bond11: left promiscuous mode [ 953.779334][T11451] vti1: left promiscuous mode [ 953.806728][T11451] gretap1: left allmulticast mode [ 953.906884][ T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 953.934708][ T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.957323][ T12] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 954.008609][ T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 954.053969][ T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.093321][ T12] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 954.169471][ T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 954.186259][ T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.206558][ T12] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 954.289784][ T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 954.311533][ T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.330134][ T12] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 954.386241][T11310] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.405529][T11310] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.426043][T11310] bridge_slave_0: entered allmulticast mode [ 954.448463][T11310] bridge_slave_0: entered promiscuous mode [ 954.507832][T11524] netlink: 'syz.0.16794': attribute type 11 has an invalid length. [ 954.525725][T11310] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.554462][T11310] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.576443][T11310] bridge_slave_1: entered allmulticast mode [ 954.613257][T11310] bridge_slave_1: entered promiscuous mode [ 954.637754][T11531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16795'. [ 954.663008][T11531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16795'. [ 954.767992][T11310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 954.935091][T11546] netlink: 'syz.1.16799': attribute type 1 has an invalid length. [ 954.962808][T11310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 955.081513][T11546] 8021q: adding VLAN 0 to HW filter on device bond7 [ 955.353473][T11543] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 955.431231][T11552] bond7: entered promiscuous mode [ 955.437299][T11552] bond7: entered allmulticast mode [ 955.463054][T11546] macvlan2: entered promiscuous mode [ 955.468548][T11546] macvlan2: entered allmulticast mode [ 955.483289][T11546] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 955.529427][T11310] team0: Port device team_slave_0 added [ 955.548052][T11310] team0: Port device team_slave_1 added [ 955.673305][T11310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 955.692793][T11310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 955.766959][T11310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 955.792993][T11310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 955.807120][T11310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 955.870726][T11310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 955.929366][T11588] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16806'. [ 955.965828][T11578] lo speed is unknown, defaulting to 1000 [ 956.121323][T11580] syzkaller0: entered promiscuous mode [ 956.132196][T11580] syzkaller0: entered allmulticast mode [ 956.154270][T11310] hsr_slave_0: entered promiscuous mode [ 956.166858][T11310] hsr_slave_1: entered promiscuous mode [ 956.176274][T11310] debugfs: 'hsr0' already exists in 'hsr' [ 956.182654][T11310] Cannot create hsr debugfs directory [ 956.951163][T11625] bond7: (slave veth0_to_bond): Releasing active interface [ 957.038648][T11625] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 957.170410][T11627] team0: Device xfrm0 failed to enter team mode [ 957.181932][T11627] team0: Device xfrm0 failed to enter team mode [ 957.408900][T11633] syzkaller0: entered promiscuous mode [ 957.415739][T11633] syzkaller0: entered allmulticast mode [ 957.433241][T11638] syzkaller0: entered promiscuous mode [ 957.449063][T11638] syzkaller0: entered allmulticast mode [ 961.487066][T11310] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 961.513969][T11310] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 961.535035][T11310] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 961.565194][T11310] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 961.585021][T11310] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 961.605818][T11310] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 961.621481][T11656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16825'. [ 961.639589][T11310] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 961.653266][T11310] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 961.665005][T11653] lo speed is unknown, defaulting to 1000 [ 962.068157][T11674] lo speed is unknown, defaulting to 1000 [ 962.102429][ T50] block nbd7: Receive control failed (result -32) [ 962.219928][T11679] syzkaller0: entered promiscuous mode [ 962.230969][T11679] syzkaller0: entered allmulticast mode [ 962.337111][T11679] tipc: Enabled bearer , priority 0 [ 962.385069][T11676] tipc: Resetting bearer [ 962.449329][T11676] tipc: Disabling bearer [ 962.514383][T11690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16834'. [ 962.583013][T11310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 962.663533][T11310] 8021q: adding VLAN 0 to HW filter on device team0 [ 962.741939][T19610] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.749207][T19610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 962.936473][ T3339] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.943871][ T3339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 963.206676][T11704] syzkaller0: entered promiscuous mode [ 963.214712][T11704] syzkaller0: entered allmulticast mode [ 963.239661][T11707] netlink: 'syz.2.16840': attribute type 1 has an invalid length. [ 963.270219][T11707] netlink: 224 bytes leftover after parsing attributes in process `syz.2.16840'. [ 963.716849][T11711] syzkaller0: entered promiscuous mode [ 963.726492][T11711] syzkaller0: entered allmulticast mode [ 965.196312][T11758] netlink: 'syz.0.16850': attribute type 1 has an invalid length. [ 968.375053][T11758] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 968.445093][T11768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16851'. [ 968.814677][T11776] bond15: entered promiscuous mode [ 968.820136][T11776] bond15: entered allmulticast mode [ 969.113112][T11805] netlink: 'syz.1.16856': attribute type 1 has an invalid length. [ 969.142289][T11788] syzkaller0: entered promiscuous mode [ 969.148001][T11788] syzkaller0: entered allmulticast mode [ 969.196201][T11795] syzkaller0: entered promiscuous mode [ 969.201835][T11795] syzkaller0: entered allmulticast mode [ 969.252075][T11805] bond8: entered promiscuous mode [ 969.257645][T11805] 8021q: adding VLAN 0 to HW filter on device bond8 [ 973.369712][T11310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 974.468288][T11836] netlink: 'syz.0.16860': attribute type 1 has an invalid length. [ 977.472356][T11805] bond8: (slave bridge6): making interface the new active one [ 977.479877][T11805] bridge6: entered promiscuous mode [ 977.486518][T11805] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 977.542114][T11836] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 977.623596][T11837] veth19: entered allmulticast mode [ 977.686783][T11850] netlink: 'syz.2.16863': attribute type 1 has an invalid length. [ 977.687878][T11838] bond7: (slave veth0_to_bond): Releasing active interface [ 977.815880][T11859] netlink: 44 bytes leftover after parsing attributes in process `syz.2.16863'. [ 977.944643][T11850] 8021q: adding VLAN 0 to HW filter on device bond16 [ 977.972917][T11856] vlan2: entered promiscuous mode [ 977.978221][T11856] bond16: entered promiscuous mode [ 977.984297][T11856] vlan2: entered allmulticast mode [ 977.989700][T11856] bond16: entered allmulticast mode [ 978.013499][T11859] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 978.023307][T11859] bond16: (slave batadv2): making interface the new active one [ 978.032004][T11859] batadv2: entered promiscuous mode [ 978.037516][T11859] batadv2: entered allmulticast mode [ 978.044608][T11859] bond16: (slave batadv2): Enslaving as an active interface with an up link [ 978.254648][T11310] veth0_vlan: entered promiscuous mode [ 978.274934][T11310] veth1_vlan: entered promiscuous mode [ 978.324962][T11310] veth0_macvtap: entered promiscuous mode [ 978.349640][T11310] veth1_macvtap: entered promiscuous mode [ 978.406554][T11310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 978.437982][T11310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 978.631259][T11885] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16869'. [ 978.686239][T11886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16870'. [ 978.755074][ T1121] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.764400][ T1121] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.805983][ T1121] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.818942][ T1121] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.831101][T11884] lo speed is unknown, defaulting to 1000 [ 979.092246][ T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 979.109917][ T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 979.352303][ T251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 979.373145][T11897] syzkaller0: entered promiscuous mode [ 979.403883][T11897] syzkaller0: entered allmulticast mode [ 979.409624][ T251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 979.563982][T11899] lo speed is unknown, defaulting to 1000 [ 979.754728][T11908] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16875'. [ 979.998096][T11914] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16877'. [ 980.009593][T11914] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16877'. [ 980.493735][T11919] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.501510][T11919] bridge0: port 1(bridge_slave_0) entered disabled state [ 980.683961][T11919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 980.728250][T11919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 981.484120][ T3339] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.615633][ T3339] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.633969][ T3339] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.666062][ T3339] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.786249][T11950] netlink: 'syz.5.16885': attribute type 1 has an invalid length. [ 981.873303][T11958] netlink: 'syz.1.16888': attribute type 13 has an invalid length. [ 981.899291][T11950] bond1 (unregistering): Released all slaves [ 981.905639][T11958] netlink: 'syz.1.16888': attribute type 17 has an invalid length. [ 981.925100][T11962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16888'. [ 981.936807][T11952] netlink: 76 bytes leftover after parsing attributes in process `syz.4.16886'. [ 982.263664][T11958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 982.276153][T11958] 8021q: adding VLAN 0 to HW filter on device team0 [ 982.317327][T11971] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16889'. [ 982.448573][T11958] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 982.472637][T11958] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 982.530086][T11958] veth1_vlan: left promiscuous mode [ 982.543350][T11958] veth0_vlan: left promiscuous mode [ 982.578694][T11958] veth0_vlan: entered promiscuous mode [ 982.604417][T11958] veth1_vlan: entered promiscuous mode [ 982.631370][T11958] veth1_macvtap: left promiscuous mode [ 982.639869][T11958] veth0_macvtap: left promiscuous mode [ 982.648533][T11958] veth0_macvtap: entered promiscuous mode [ 982.669047][T11958] veth1_macvtap: entered promiscuous mode [ 982.689438][T11958] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 982.714102][T11958] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 982.762498][T11958] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 982.786787][T11958] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 982.868901][T11958] 8021q: adding VLAN 0 to HW filter on device bond1 [ 982.928459][T11958] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 983.038904][T11964] syzkaller0: entered promiscuous mode [ 983.048564][T11964] syzkaller0: entered allmulticast mode [ 983.068367][ T5813] bridge0: port 1(vlan3) entered blocking state [ 983.076510][ T5813] bridge0: port 1(vlan3) entered forwarding state [ 983.116073][ T5813] geneve0: entered promiscuous mode [ 983.175738][ T3335] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 983.260954][T11984] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 987.619506][ T1121] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 987.628378][ T1121] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.637685][ T1121] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 987.646585][ T1121] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.696100][T12005] tipc: Enabled bearer , priority 0 [ 987.737275][ T1121] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 987.756573][ T1121] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.773619][T12020] netlink: 104 bytes leftover after parsing attributes in process `syz.0.16898'. [ 987.786278][ T1121] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 987.810347][ T1121] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.839911][T12000] tipc: Disabling bearer [ 987.875278][T12027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16900'. [ 988.095034][T12036] veth23: entered allmulticast mode [ 988.109143][T12036] bond12: (slave veth23): Enslaving as an active interface with an up link [ 988.118568][T12025] syzkaller0: entered promiscuous mode [ 988.125802][T12025] syzkaller0: entered allmulticast mode [ 988.145642][T12027] bond12 (unregistering): (slave veth23): Releasing backup interface [ 988.162145][T12027] bond12 (unregistering): Released all slaves [ 988.179766][T12038] syzkaller0: entered promiscuous mode [ 988.185518][T12038] syzkaller0: entered allmulticast mode [ 988.281581][T12035] syzkaller0: entered promiscuous mode [ 988.287377][T12035] syzkaller0: entered allmulticast mode [ 988.297303][ T251] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 988.551245][T12057] xt_CT: You must specify a L4 protocol and not use inversions on it [ 992.600591][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 993.046262][ T35] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 993.115737][T12092] syzkaller0: entered promiscuous mode [ 993.135565][T12092] syzkaller0: entered allmulticast mode [ 993.145184][T12095] netlink: 'syz.0.16915': attribute type 1 has an invalid length. [ 993.348229][T12105] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16915'. [ 993.373131][T12100] bond9: (slave veth19): Enslaving as an active interface with a down link [ 993.451005][T12095] bond9: (slave veth21): Enslaving as an active interface with a down link [ 993.467827][T12105] 8021q: adding VLAN 0 to HW filter on device bond9 [ 993.545873][T12102] syzkaller0: entered promiscuous mode [ 993.551712][T12102] syzkaller0: entered allmulticast mode [ 993.675869][T12115] netlink: 5 bytes leftover after parsing attributes in process `syz.4.16921'. [ 994.173137][T12131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16924'. [ 996.968144][T12121] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 997.400520][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 998.187428][T12137] syzkaller0: entered promiscuous mode [ 998.198150][T12137] syzkaller0: entered allmulticast mode [ 999.002251][T12164] netlink: 'syz.1.16935': attribute type 1 has an invalid length. [ 999.044266][T12169] nbd: nbd5 already in use [ 999.093508][T12169] block nbd5: NBD_DISCONNECT [ 999.110103][T12169] block nbd5: Send disconnect failed -32 [ 999.149176][T12164] 8021q: adding VLAN 0 to HW filter on device bond9 [ 999.156894][T12169] block nbd5: Send disconnect failed -32 [ 999.187870][T12169] block nbd5: Send disconnect failed -32 [ 999.229505][T12169] block nbd5: shutting down sockets [ 999.256493][T12173] bond9: (slave geneve3): making interface the new active one [ 999.305945][T12173] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 999.324269][T12186] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16941'. [ 999.424270][T12186] vlan5: entered allmulticast mode [ 999.436537][T12186] bridge8: entered allmulticast mode [ 999.455568][T12186] bridge8: port 1(erspan0) entered blocking state [ 999.473158][T12186] bridge8: port 1(erspan0) entered disabled state [ 999.490074][T12186] erspan0: entered allmulticast mode [ 999.504137][T12186] erspan0: left allmulticast mode [ 999.706757][T12196] lo speed is unknown, defaulting to 1000 [ 999.722579][T12203] netlink: 'syz.0.16945': attribute type 1 has an invalid length. [ 999.837993][T12203] 8021q: adding VLAN 0 to HW filter on device bond10 [ 999.887517][T12207] macvlan3: entered promiscuous mode [ 999.896298][T12207] macvlan3: entered allmulticast mode [ 999.904812][T12207] bond10: entered allmulticast mode [ 999.910136][T12207] bond10: entered promiscuous mode [ 999.916619][T12207] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 999.926814][T12207] team0: Port device macvlan3 added [ 999.939071][T12206] syzkaller0: entered promiscuous mode [ 999.947234][T12206] syzkaller0: entered allmulticast mode [ 999.952150][T12213] netlink: 'syz.1.16948': attribute type 9 has an invalid length. [ 1000.035558][T12214] netlink: 144 bytes leftover after parsing attributes in process `syz.1.16948'. [ 1000.597075][T12236] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16954'. [ 1000.772691][T12260] netlink: 40 bytes leftover after parsing attributes in process `syz.4.16956'. [ 1000.853340][T12222] syzkaller0: entered promiscuous mode [ 1000.858989][T12222] syzkaller0: entered allmulticast mode [ 1000.870548][T12240] syzkaller1: entered promiscuous mode [ 1000.881777][T12240] syzkaller1: entered allmulticast mode [ 1001.392649][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1002.066215][T12294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16963'. [ 1002.308517][T12298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16963'. [ 1005.940040][T12318] netlink: 'syz.4.16967': attribute type 1 has an invalid length. [ 1006.069139][T12318] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1006.144045][T12321] veth25: entered allmulticast mode [ 1006.164715][T12321] bond12: (slave veth25): Enslaving as an active interface with a down link [ 1006.259103][T12318] macvlan0: entered promiscuous mode [ 1006.274975][T12318] macvlan0: entered allmulticast mode [ 1006.285615][T12318] bond12: entered promiscuous mode [ 1006.306826][T12318] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1006.322503][T12318] bond12: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1006.351433][T12318] bond12: left promiscuous mode [ 1006.511087][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1006.738372][T12349] tipc: Enabled bearer , priority 0 [ 1006.767918][T12349] syzkaller0: entered promiscuous mode [ 1006.777630][T12349] syzkaller0: entered allmulticast mode [ 1006.841077][T12349] tipc: Resetting bearer [ 1006.899347][T12348] tipc: Resetting bearer [ 1006.964363][T12348] tipc: Disabling bearer [ 1007.166602][T12356] syzkaller0: entered promiscuous mode [ 1007.180558][T12356] syzkaller0: entered allmulticast mode [ 1007.208343][T12356] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16976'. [ 1007.238952][T12356] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16976'. [ 1007.425434][T12369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16981'. [ 1007.700159][T12374] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1007.805355][T12377] 0: reclassify loop, rule prio 0, protocol 700 [ 1008.023162][T12381] tipc: Enabled bearer , priority 0 [ 1008.031886][T12381] syzkaller0: entered promiscuous mode [ 1008.043139][T12381] syzkaller0: entered allmulticast mode [ 1008.107143][T12382] netlink: 44 bytes leftover after parsing attributes in process `syz.2.16985'. [ 1008.112239][T12384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16986'. [ 1008.145332][T12384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1008.247863][T12384] batman_adv: batadv0: Removing interface: macvtap1 [ 1008.288747][T12384] batman_adv: batadv0: Removing interface: macvlan2 [ 1008.342098][T12384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1008.407096][T12381] tipc: Resetting bearer [ 1008.530529][T12380] tipc: Resetting bearer [ 1008.681428][T12380] tipc: Disabling bearer [ 1008.787741][T12389] syzkaller0: entered promiscuous mode [ 1008.807204][T12389] syzkaller0: entered allmulticast mode [ 1008.941895][T12398] syzkaller0: entered promiscuous mode [ 1008.949013][T12398] syzkaller0: entered allmulticast mode [ 1009.684587][T12425] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1013.550512][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1017.554479][T12442] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR [ 1017.709148][T12453] netlink: 'syz.2.17003': attribute type 12 has an invalid length. [ 1018.495727][T12473] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1019.019378][T12483] bridge0: port 1(vlan3) entered disabled state [ 1019.310455][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1019.810118][T12502] tipc: Enabled bearer , priority 0 [ 1019.827166][T12507] syzkaller0: entered promiscuous mode [ 1019.846074][T12507] syzkaller0: entered allmulticast mode [ 1019.866197][ T3339] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1019.877532][ T3339] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.888075][ T3339] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1019.897586][ T3339] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.957064][T12514] tipc: Resetting bearer [ 1019.975854][T12495] tipc: Resetting bearer [ 1020.012689][T12495] tipc: Disabling bearer [ 1020.053771][ T3339] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1020.082969][ T3339] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.114449][ T3339] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1020.141903][ T3339] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.353908][T12555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17019'. [ 1020.481406][T12559] netlink: 'syz.0.17020': attribute type 4 has an invalid length. [ 1022.524547][ T50] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1023.792869][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1024.538994][T12540] dvmrp0: entered allmulticast mode [ 1024.552770][T12539] lo speed is unknown, defaulting to 1000 [ 1024.585416][T12551] lo speed is unknown, defaulting to 1000 [ 1024.766692][T12574] syz_tun: entered allmulticast mode [ 1024.798539][T12576] syzkaller0: entered promiscuous mode [ 1024.806514][T12576] syzkaller0: entered allmulticast mode [ 1024.815886][T12574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17026'. [ 1024.930455][T12572] syz_tun: left allmulticast mode [ 1025.122273][T12584] tipc: Enabled bearer , priority 0 [ 1025.131396][T12586] netlink: 'syz.5.17028': attribute type 12 has an invalid length. [ 1025.144085][T12584] syzkaller0: entered promiscuous mode [ 1025.149648][T12584] syzkaller0: entered allmulticast mode [ 1025.165164][T12586] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1025.175023][T12584] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1025.273284][T12588] scsi_nl_rcv_msg: discarding partial skb [ 1025.352329][T12592] tipc: Resetting bearer [ 1025.466070][T12583] tipc: Resetting bearer [ 1025.542430][T12583] tipc: Disabling bearer [ 1025.642251][T12596] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1025.805053][T12600] syzkaller0: entered promiscuous mode [ 1025.813587][T12600] syzkaller0: entered allmulticast mode [ 1026.611861][T12624] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1026.612998][T12628] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17036'. [ 1030.535976][T12634] tipc: Enabling of bearer rejected, failed to enable media [ 1031.313904][T12670] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1032.727823][T12708] tc action pedit 'at' offset 1629348270 out of bounds [ 1032.737214][T12708] tc action pedit 'at' offset 1629348270 out of bounds [ 1032.744196][T12708] tc action pedit 'at' offset 1629348270 out of bounds [ 1032.751120][T12708] tc action pedit 'at' offset 1629348270 out of bounds [ 1032.758007][T12708] tc action pedit 'at' offset 1629348270 out of bounds [ 1032.764960][T12708] tc action pedit 'at' offset 1629348270 out of bounds [ 1032.772075][T12708] tc action pedit 'at' offset 1629348270 out of bounds [ 1032.777319][T12709] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 1032.778990][T12708] tc action pedit 'at' offset 1629348270 out of bounds [ 1032.801471][T12708] tc action pedit 'at' offset 1629348270 out of bounds [ 1032.808353][T12708] tc action pedit 'at' offset 1629348270 out of bounds [ 1032.815436][T12708] 0: reclassify loop, rule prio 0, protocol 800 [ 1033.213113][T12715] syzkaller0: entered promiscuous mode [ 1033.230562][T12715] syzkaller0: entered allmulticast mode [ 1033.251791][T12715] TC_ACT_REPEAT abuse ? [ 1033.793614][T12738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1035.331920][T12754] netlink: 104 bytes leftover after parsing attributes in process `syz.0.17068'. [ 1038.817923][T12753] veth0_macvtap: entered allmulticast mode [ 1038.824200][T12753] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 1039.054576][T12766] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17073'. [ 1039.075762][T12766] netlink: 12 bytes leftover after parsing attributes in process `syz.5.17073'. [ 1039.223855][T12773] syzkaller0: entered promiscuous mode [ 1039.235270][T12773] syzkaller0: entered allmulticast mode [ 1039.558608][T12779] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17074'. [ 1039.901350][T12792] tipc: Enabled bearer , priority 0 [ 1039.923299][T12792] syzkaller0: entered promiscuous mode [ 1039.940405][T12792] syzkaller0: entered allmulticast mode [ 1039.963416][T12792] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1040.036041][T12792] tipc: Resetting bearer [ 1040.063800][T12791] tipc: Resetting bearer [ 1040.141318][T12791] tipc: Disabling bearer [ 1040.367616][T12799] tipc: Enabled bearer , priority 0 [ 1040.422778][T12798] tipc: Disabling bearer [ 1040.963155][T12811] syzkaller0: entered promiscuous mode [ 1040.990081][T12811] syzkaller0: entered allmulticast mode [ 1041.023901][T12816] tipc: Enabled bearer , priority 0 [ 1041.060801][T12811] tipc: Resetting bearer [ 1041.077730][T12810] tipc: Resetting bearer [ 1041.168626][T12810] tipc: Disabling bearer [ 1041.256365][T12820] syzkaller0: entered promiscuous mode [ 1041.272513][T12820] syzkaller0: entered allmulticast mode [ 1041.662099][T12836] TC_ACT_REPEAT abuse ? [ 1041.717549][T12833] can: request_module (can-proto-0) failed. [ 1042.275479][T12848] bridge0: port 1(vlan3) entered blocking state [ 1042.287646][T12848] bridge0: port 1(vlan3) entered disabled state [ 1042.299972][T12848] vlan3: entered allmulticast mode [ 1042.310185][T12848] geneve0: entered allmulticast mode [ 1042.373478][T12849] bond0: (slave bond_slave_0): Releasing backup interface [ 1042.427000][T12849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1042.450441][T12849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1042.462975][T12849] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1042.700160][T12854] netlink: 'syz.1.17099': attribute type 1 has an invalid length. [ 1042.782071][T12856] bond10: (slave geneve4): making interface the new active one [ 1042.814637][T12856] bond10: (slave geneve4): Enslaving as an active interface with an up link [ 1042.831192][ T3335] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1042.841332][ T3335] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1042.850732][ T3335] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1042.859822][ T3335] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1042.865941][T12854] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17099'. [ 1042.890600][T12854] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1042.895360][ T29] audit: type=1804 audit(1783689016.670:20): pid=12859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.17100" name="/newroot/41/cgroup.controllers" dev="tmpfs" ino=228 res=1 errno=0 [ 1042.963823][ T29] audit: type=1800 audit(1783689016.670:21): pid=12859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.17100" name="cgroup.controllers" dev="tmpfs" ino=228 res=0 errno=0 [ 1043.155367][T12863] syzkaller0: entered promiscuous mode [ 1043.175153][T12863] syzkaller0: entered allmulticast mode [ 1043.275765][T12876] netlink: 'syz.0.17105': attribute type 2 has an invalid length. [ 1043.419403][T12875] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1043.445727][T12875] bridge0: port 1(bond17) entered blocking state [ 1043.464261][T12875] bridge0: port 1(bond17) entered disabled state [ 1043.489299][T12886] netlink: 'syz.1.17107': attribute type 1 has an invalid length. [ 1043.504824][T12875] bond17: entered allmulticast mode [ 1043.519406][T12886] netlink: 756 bytes leftover after parsing attributes in process `syz.1.17107'. [ 1043.563421][T12876] : entered promiscuous mode [ 1043.716671][T12889] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1043.755307][T12891] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17109'. [ 1043.853427][T12898] syzkaller0: entered promiscuous mode [ 1043.859271][T12898] syzkaller0: entered allmulticast mode [ 1043.861393][T12901] siw: device registration error -23 [ 1043.866168][T12895] syzkaller0: entered promiscuous mode [ 1043.883107][T12895] syzkaller0: entered allmulticast mode [ 1043.959514][T12895] simple: basic_1 [ 1043.965766][T12895] simple: basic_2 [ 1043.969492][T12895] simple: basic_3 [ 1043.973201][T12895] simple: basic_4 [ 1043.976869][T12895] simple: basic_5 [ 1043.980565][T12895] simple: basic_6 [ 1043.984243][T12895] simple: basic_7 [ 1043.987896][T12895] simple: basic_8 [ 1043.991617][T12895] simple: basic_9 [ 1043.995268][T12895] simple: basic_10 [ 1043.999008][T12895] simple: basic_11 [ 1044.002807][T12895] simple: basic_12 [ 1044.006575][T12895] simple: basic_13 [ 1044.010354][T12895] simple: basic_14 [ 1044.014096][T12895] simple: basic_15 [ 1044.017829][T12895] simple: basic_16 [ 1044.021721][T12895] simple: basic_17 [ 1044.025465][T12895] 0: reclassify loop, rule prio 0, protocol 800 [ 1044.618715][T12911] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1044.673927][T12911] veth1_vlan: left promiscuous mode [ 1044.691831][T12911] veth0_vlan: left promiscuous mode [ 1044.703891][T12911] veth0_vlan: entered promiscuous mode [ 1044.723082][T12911] tipc: Resetting bearer [ 1044.742155][T12911] veth1_vlan: entered promiscuous mode [ 1044.763745][T12911] veth1_macvtap: left promiscuous mode [ 1044.781458][T12911] veth0_macvtap: left promiscuous mode [ 1044.820621][T12911] veth0_macvtap: entered promiscuous mode [ 1044.899525][T12911] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1045.017103][T12911] geneve0: entered promiscuous mode [ 1045.035432][T12911] erspan0: entered promiscuous mode [ 1045.047275][T12911] geneve4: left promiscuous mode [ 1045.098275][T12911] vxlan0: left promiscuous mode [ 1045.107404][T12911] vxlan1: left promiscuous mode [ 1045.121075][T12911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1045.139041][T12911] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1045.151698][T12911] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1045.170692][T12911] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1045.193123][T12911] bridge5: left promiscuous mode [ 1045.222952][T12911] bond4: left promiscuous mode [ 1045.241145][T12911] ipip3: left promiscuous mode [ 1045.257071][T12911] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1045.345356][T12911] bond5: left promiscuous mode [ 1045.371863][T12911] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1045.404772][T12911] macvlan3: left promiscuous mode [ 1045.423887][T12911] bond10: left promiscuous mode [ 1045.436982][T12911] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1045.471727][T12911] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1045.558843][T12911] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1045.604542][T12911] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1045.659593][ T14] bond9: (slave veth19): link status definitely up, 10000 Mbps full duplex [ 1045.691299][ T14] bond9: (slave veth21): link status definitely up, 10000 Mbps full duplex [ 1045.744855][ T14] bond9: (slave veth19): making interface the new active one [ 1045.785759][ T14] bond9: active interface up! [ 1045.821647][T12932] netlink: 'syz.1.17124': attribute type 1 has an invalid length. [ 1045.949519][ T133] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1045.993105][ T133] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.042038][ T133] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1046.062551][ T133] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 38202 - 0 [ 1046.162295][ T133] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1046.180557][ T133] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.247152][ T133] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1046.270480][ T133] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 38202 - 0 [ 1046.292142][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1046.320677][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.345325][ T12] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1046.354522][T12934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17122'. [ 1046.392387][ T12] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 38202 - 0 [ 1046.525522][T12932] bond11: entered promiscuous mode [ 1046.532081][T12932] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1046.577414][T12945] vlan4: entered allmulticast mode [ 1046.582852][T12945] bond11: entered allmulticast mode [ 1046.606607][T12948] bridge7: entered promiscuous mode [ 1046.612766][T12948] bridge7: entered allmulticast mode [ 1046.619082][T12948] bond11: (slave bridge7): Enslaving as an active interface with an up link [ 1046.629519][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1046.639478][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.648898][ T12] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1046.657899][ T12] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 38202 - 0 [ 1046.993393][T12958] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.17125'. [ 1047.021976][T12958] openvswitch: netlink: Message has 512 unknown bytes. [ 1048.042904][T12988] netlink: 20 bytes leftover after parsing attributes in process `syz.5.17133'. [ 1048.059126][T12987] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17136'. [ 1048.644768][T12995] udevd[12995]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1048.715364][T12995] udevd[12995]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1048.913381][T13016] netlink: 16 bytes leftover after parsing attributes in process `syz.5.17141'. [ 1049.184924][T13023] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17142'. [ 1049.407291][T13025] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17144'. [ 1049.442628][T13025] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17144'. [ 1049.453648][T13025] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17144'. [ 1049.463513][T13025] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17144'. [ 1049.473398][T13025] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17144'. [ 1049.483643][T13025] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17144'. [ 1049.517864][T13022] veth27: entered allmulticast mode [ 1049.556474][T13022] bond14: (slave veth27): Enslaving as an active interface with an up link [ 1049.841155][T13035] syzkaller0: entered promiscuous mode [ 1049.865011][T13035] syzkaller0: entered allmulticast mode [ 1050.092729][T12925] Set syz1 is full, maxelem 65536 reached [ 1050.175904][T13041] openvswitch: netlink: Message has 16 unknown bytes. [ 1050.354302][T13051] Bluetooth: MGMT ver 1.23 [ 1050.595063][T13057] x_tables: duplicate underflow at hook 1 [ 1051.284767][T13073] tipc: Started in network mode [ 1051.323421][T13073] tipc: Node identity 2e04f4e00be5, cluster identity 4711 [ 1051.331809][T13073] tipc: Enabled bearer , priority 0 [ 1051.338732][T13074] syzkaller0: entered promiscuous mode [ 1051.345004][T13074] syzkaller0: entered allmulticast mode [ 1051.358874][T13073] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1051.451736][T13073] tipc: Resetting bearer [ 1051.467529][T13072] tipc: Resetting bearer [ 1051.617536][T13072] tipc: Disabling bearer [ 1051.856224][T13088] bridge0: entered allmulticast mode [ 1051.883345][T13078] syzkaller0: entered promiscuous mode [ 1051.899466][T13078] syzkaller0: entered allmulticast mode [ 1052.019783][T13082] vlan3: left allmulticast mode [ 1052.025040][T13082] geneve0: left allmulticast mode [ 1052.053734][T13082] bridge0: port 1(vlan3) entered disabled state [ 1052.254093][T13100] syzkaller0: entered promiscuous mode [ 1052.264418][T13100] syzkaller0: entered allmulticast mode [ 1052.415756][T13103] syzkaller0: entered promiscuous mode [ 1052.430850][ T50] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1052.430881][T13103] syzkaller0: entered allmulticast mode [ 1052.450072][ T5628] Bluetooth: hci2: command 0x0406 tx timeout [ 1052.622115][T13096] No such timeout policy "syz1" [ 1052.647772][T13096] netlink: zone id is out of range [ 1052.658387][T13096] netlink: zone id is out of range [ 1052.669147][T13096] netlink: zone id is out of range [ 1052.691220][T13096] netlink: zone id is out of range [ 1052.698353][T13096] netlink: zone id is out of range [ 1052.709604][T13096] netlink: zone id is out of range [ 1052.718388][T13096] netlink: zone id is out of range [ 1052.730464][T13096] netlink: zone id is out of range [ 1052.831166][T13113] netlink: 'syz.5.17169': attribute type 30 has an invalid length. [ 1052.895920][T13107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1052.914093][T13107] 8021q: adding VLAN 0 to HW filter on device team0 [ 1053.381899][T13124] syzkaller0: entered promiscuous mode [ 1053.397661][T13124] syzkaller0: entered allmulticast mode [ 1053.431400][T13124] tipc: Enabled bearer , priority 0 [ 1053.466669][T13124] tipc: Resetting bearer [ 1053.487919][T13123] tipc: Resetting bearer [ 1053.544610][T13123] tipc: Disabling bearer [ 1053.594185][T13131] tipc: Enabled bearer , priority 0 [ 1053.614983][T13131] syzkaller0: entered promiscuous mode [ 1053.633001][T13131] syzkaller0: entered allmulticast mode [ 1053.758786][T13131] tipc: Resetting bearer [ 1053.786814][T13135] batman_adv: batadv0: Adding interface: gretap1 [ 1053.802756][T13135] batman_adv: batadv0: The MTU of interface gretap1 is too small (1294) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1053.852840][T13135] batman_adv: batadv0: Interface activated: gretap1 [ 1053.904993][T13130] tipc: Resetting bearer [ 1053.987535][T13130] tipc: Disabling bearer [ 1054.139468][T13129] syzkaller1: entered promiscuous mode [ 1054.149051][T13129] syzkaller1: entered allmulticast mode [ 1054.212186][T13147] mac80211_hwsim hwsim9 wlan1: Caught tx_queue_len zero misconfig [ 1054.428940][T13153] netlink: 'syz.1.17179': attribute type 1 has an invalid length. [ 1054.449859][T13153] __nla_validate_parse: 31 callbacks suppressed [ 1054.449879][T13153] netlink: 220 bytes leftover after parsing attributes in process `syz.1.17179'. [ 1054.561642][T13153] pim6reg1: entered promiscuous mode [ 1054.579857][T13153] pim6reg1: entered allmulticast mode [ 1054.613675][T13156] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17180'. [ 1054.728571][T13160] syzkaller0: entered promiscuous mode [ 1054.743306][T13160] syzkaller0: entered allmulticast mode [ 1055.630675][T13180] tipc: Enabled bearer , priority 0 [ 1055.676010][T13183] syzkaller0: entered promiscuous mode [ 1055.684680][T13183] syzkaller0: entered allmulticast mode [ 1055.697813][T13190] syzkaller0: entered promiscuous mode [ 1055.714016][T13190] syzkaller0: entered allmulticast mode [ 1055.722437][T13200] netlink: 44 bytes leftover after parsing attributes in process `syz.5.17186'. [ 1055.829969][T13209] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 1055.829969][T13209] Please contact the netfilter-devel mailing list or update your nftables rules. [ 1055.905517][T13200] tipc: Resetting bearer [ 1055.948854][T13200] tipc: Disabling bearer [ 1056.283799][T13228] xt_CONNSECMARK: invalid mode: 254 [ 1056.625234][T13232] netlink: 'syz.4.17193': attribute type 1 has an invalid length. [ 1056.773502][T13205] veth0_macvtap: left allmulticast mode [ 1056.794864][T13205] bond7: left promiscuous mode [ 1056.802442][T13205] bond7: left allmulticast mode [ 1056.807713][T13205] bond8: left promiscuous mode [ 1056.812980][T13205] bridge6: left promiscuous mode [ 1056.838603][T13205] bond11: left promiscuous mode [ 1056.846223][T13205] bridge7: left promiscuous mode [ 1056.857246][T13205] vlan4: left allmulticast mode [ 1056.866074][T13205] bond11: left allmulticast mode [ 1056.871477][T13205] bridge7: left allmulticast mode [ 1056.938861][T13224] syzkaller1: entered promiscuous mode [ 1056.957664][T13224] syzkaller1: entered allmulticast mode [ 1057.117033][ T14] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1057.142157][ T14] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1057.234878][T13254] netlink: 292 bytes leftover after parsing attributes in process `syz.1.17199'. [ 1057.254967][ T14] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1057.277768][ T14] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1057.470107][T13263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17202'. [ 1057.755836][T13266] bridge0: entered promiscuous mode [ 1057.816209][T13266] 8021q: adding VLAN 0 to HW filter on device team0 [ 1057.878968][T13266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1057.953756][ T50] block nbd5: Receive control failed (result -1) [ 1057.961490][ T50] [ 1057.963865][ T50] ====================================================== [ 1057.970925][ T50] WARNING: possible circular locking dependency detected [ 1057.978135][ T50] syzkaller #0 Not tainted [ 1057.982572][ T50] ------------------------------------------------------ [ 1057.989638][ T50] kworker/u9:0/50 is trying to acquire lock: [ 1057.995664][ T50] ffff8880545fee60 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 1058.005422][ T50] [ 1058.005422][ T50] but task is already holding lock: [ 1058.012786][ T50] ffff88807ee90c68 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 1058.021819][ T50] [ 1058.021819][ T50] which lock already depends on the new lock. [ 1058.021819][ T50] [ 1058.032210][ T50] [ 1058.032210][ T50] the existing dependency chain (in reverse order) is: [ 1058.041216][ T50] [ 1058.041216][ T50] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1058.049144][ T50] __mutex_lock+0x19d/0x1550 [ 1058.054360][ T50] nbd_queue_rq+0x373/0x1150 [ 1058.059542][ T50] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1058.065698][ T50] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1058.072590][ T50] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1058.079086][ T50] blk_mq_run_work_fn+0x16c/0x300 [ 1058.084711][ T50] process_scheduled_works+0xa8e/0x14e0 [ 1058.090825][ T50] worker_thread+0xa47/0xfb0 [ 1058.095934][ T50] kthread+0x388/0x470 [ 1058.100519][ T50] ret_from_fork+0x514/0xb70 [ 1058.105657][ T50] ret_from_fork_asm+0x1a/0x30 [ 1058.110958][ T50] [ 1058.110958][ T50] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1058.118164][ T50] __mutex_lock+0x19d/0x1550 [ 1058.123278][ T50] nbd_queue_rq+0xc1/0x1150 [ 1058.128479][ T50] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1058.134539][ T50] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1058.141389][ T50] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1058.147890][ T50] blk_mq_run_work_fn+0x16c/0x300 [ 1058.153439][ T50] process_scheduled_works+0xa8e/0x14e0 [ 1058.159497][ T50] worker_thread+0xa47/0xfb0 [ 1058.164646][ T50] kthread+0x388/0x470 [ 1058.169248][ T50] ret_from_fork+0x514/0xb70 [ 1058.174354][ T50] ret_from_fork_asm+0x1a/0x30 [ 1058.179626][ T50] [ 1058.179626][ T50] -> #4 (set->srcu){.+.+}-{0:0}: [ 1058.186741][ T50] __synchronize_srcu+0xc9/0x2f0 [ 1058.192225][ T50] elevator_switch+0x1e8/0x7b0 [ 1058.197624][ T50] elevator_change+0x2fa/0x480 [ 1058.202910][ T50] elevator_set_default+0x375/0x440 [ 1058.208627][ T50] blk_register_queue+0x3f3/0x4e0 [ 1058.214342][ T50] __add_disk+0x6cb/0xe30 [ 1058.219187][ T50] add_disk_fwnode+0xfb/0x4b0 [ 1058.224374][ T50] nbd_dev_add+0x733/0xb60 [ 1058.229313][ T50] nbd_init+0x15f/0x1e0 [ 1058.234090][ T50] do_one_initcall+0x250/0x870 [ 1058.239471][ T50] do_initcall_level+0x10a/0x1a0 [ 1058.245028][ T50] do_initcalls+0x59/0xa0 [ 1058.249872][ T50] kernel_init_freeable+0x29d/0x3e0 [ 1058.255589][ T50] kernel_init+0x1d/0x1d0 [ 1058.260430][ T50] ret_from_fork+0x514/0xb70 [ 1058.265544][ T50] ret_from_fork_asm+0x1a/0x30 [ 1058.270835][ T50] [ 1058.270835][ T50] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1058.278735][ T50] __mutex_lock+0x19d/0x1550 [ 1058.283845][ T50] elevator_change+0x1af/0x480 [ 1058.289123][ T50] elevator_set_none+0xb5/0x140 [ 1058.294486][ T50] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1058.300843][ T50] nbd_start_device+0x189/0xb30 [ 1058.306210][ T50] nbd_genl_connect+0x1597/0x1c10 [ 1058.311755][ T50] genl_family_rcv_msg_doit+0x233/0x340 [ 1058.318022][ T50] genl_rcv_msg+0x614/0x7a0 [ 1058.323131][ T50] netlink_rcv_skb+0x226/0x4a0 [ 1058.328462][ T50] genl_rcv+0x28/0x40 [ 1058.332960][ T50] netlink_unicast+0x7bb/0x940 [ 1058.338242][ T50] netlink_sendmsg+0x813/0xb40 [ 1058.343515][ T50] sock_sendmsg_nosec+0x13a/0x180 [ 1058.349137][ T50] ____sys_sendmsg+0x54e/0x850 [ 1058.354464][ T50] ___sys_sendmsg+0x2a5/0x360 [ 1058.359689][ T50] __x64_sys_sendmsg+0x1b1/0x290 [ 1058.365181][ T50] do_syscall_64+0x174/0x580 [ 1058.370358][ T50] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.376785][ T50] [ 1058.376785][ T50] -> #2 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 1058.385659][ T50] blk_alloc_queue+0x544/0x690 [ 1058.390958][ T50] __blk_mq_alloc_disk+0x194/0x390 [ 1058.396587][ T50] nbd_dev_add+0x494/0xb60 [ 1058.401519][ T50] nbd_init+0x15f/0x1e0 [ 1058.406187][ T50] do_one_initcall+0x250/0x870 [ 1058.411468][ T50] do_initcall_level+0x10a/0x1a0 [ 1058.416923][ T50] do_initcalls+0x59/0xa0 [ 1058.421765][ T50] kernel_init_freeable+0x29d/0x3e0 [ 1058.427569][ T50] kernel_init+0x1d/0x1d0 [ 1058.432415][ T50] ret_from_fork+0x514/0xb70 [ 1058.437526][ T50] ret_from_fork_asm+0x1a/0x30 [ 1058.442802][ T50] [ 1058.442802][ T50] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1058.450027][ T50] fs_reclaim_acquire+0x71/0x100 [ 1058.455550][ T50] __kmalloc_noprof+0xbc/0x720 [ 1058.460938][ T50] tls_sw_sendmsg+0x599/0x2860 [ 1058.466323][ T50] sock_sendmsg_nosec+0x90/0x180 [ 1058.471773][ T50] sock_sendmsg+0x1ca/0x2d0 [ 1058.476789][ T50] splice_to_socket+0xb5e/0x12a0 [ 1058.482314][ T50] direct_splice_actor+0x101/0x160 [ 1058.487960][ T50] splice_direct_to_actor+0x57b/0xcb0 [ 1058.493938][ T50] do_splice_direct+0x195/0x290 [ 1058.499319][ T50] do_sendfile+0x52e/0x7c0 [ 1058.504296][ T50] __se_sys_sendfile64+0x144/0x1a0 [ 1058.509934][ T50] do_syscall_64+0x174/0x580 [ 1058.515078][ T50] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.521490][ T50] [ 1058.521490][ T50] -> #0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 1058.529567][ T50] __lock_acquire+0x1520/0x2cf0 [ 1058.534972][ T50] lock_acquire+0x106/0x350 [ 1058.540011][ T50] lock_sock_nested+0x41/0x100 [ 1058.545386][ T50] inet_shutdown+0x6a/0x390 [ 1058.550424][ T50] nbd_mark_nsock_dead+0x2cb/0x550 [ 1058.556067][ T50] recv_work+0x1cee/0x1e10 [ 1058.561000][ T50] process_scheduled_works+0xa8e/0x14e0 [ 1058.567065][ T50] worker_thread+0xa47/0xfb0 [ 1058.572171][ T50] kthread+0x388/0x470 [ 1058.576763][ T50] ret_from_fork+0x514/0xb70 [ 1058.581875][ T50] ret_from_fork_asm+0x1a/0x30 [ 1058.587156][ T50] [ 1058.587156][ T50] other info that might help us debug this: [ 1058.587156][ T50] [ 1058.597375][ T50] Chain exists of: [ 1058.597375][ T50] sk_lock-AF_INET6-NBD --> &cmd->lock --> &nsock->tx_lock [ 1058.597375][ T50] [ 1058.610409][ T50] Possible unsafe locking scenario: [ 1058.610409][ T50] [ 1058.617926][ T50] CPU0 CPU1 [ 1058.623337][ T50] ---- ---- [ 1058.628758][ T50] lock(&nsock->tx_lock); [ 1058.633172][ T50] lock(&cmd->lock); [ 1058.639666][ T50] lock(&nsock->tx_lock); [ 1058.646711][ T50] lock(sk_lock-AF_INET6-NBD); [ 1058.651643][ T50] [ 1058.651643][ T50] *** DEADLOCK *** [ 1058.651643][ T50] [ 1058.660036][ T50] 3 locks held by kworker/u9:0/50: [ 1058.665221][ T50] #0: ffff88802745a140 ((wq_completion)nbd5-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1058.676519][ T50] #1: ffffc90000ba7c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1058.688352][ T50] #2: ffff88807ee90c68 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 1058.697662][ T50] [ 1058.697662][ T50] stack backtrace: [ 1058.703559][ T50] CPU: 1 UID: 0 PID: 50 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 1058.703590][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1058.703607][ T50] Workqueue: nbd5-recv recv_work [ 1058.703638][ T50] Call Trace: [ 1058.703716][ T50] [ 1058.703781][ T50] dump_stack_lvl+0xe8/0x150 [ 1058.703835][ T50] print_circular_bug+0x2e1/0x300 [ 1058.703852][ T50] check_noncircular+0x12e/0x150 [ 1058.703883][ T50] __lock_acquire+0x1520/0x2cf0 [ 1058.703905][ T50] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1058.703956][ T50] ? try_to_wake_up+0x8c5/0x14d0 [ 1058.703983][ T50] ? inet_shutdown+0x6a/0x390 [ 1058.704002][ T50] lock_acquire+0x106/0x350 [ 1058.704020][ T50] ? inet_shutdown+0x6a/0x390 [ 1058.704040][ T50] ? __queue_work+0x1ea/0x10a0 [ 1058.704059][ T50] lock_sock_nested+0x41/0x100 [ 1058.704075][ T50] ? inet_shutdown+0x6a/0x390 [ 1058.704094][ T50] inet_shutdown+0x6a/0x390 [ 1058.704114][ T50] nbd_mark_nsock_dead+0x2cb/0x550 [ 1058.704138][ T50] recv_work+0x1cee/0x1e10 [ 1058.704152][ T50] ? __lock_acquire+0x683/0x2cf0 [ 1058.704172][ T50] ? register_lock_class+0x31/0x2e0 [ 1058.704191][ T50] ? __lock_acquire+0x683/0x2cf0 [ 1058.704213][ T50] ? __pfx_recv_work+0x10/0x10 [ 1058.704227][ T50] ? do_raw_spin_lock+0x12b/0x2f0 [ 1058.704243][ T50] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1058.704259][ T50] ? process_scheduled_works+0xa20/0x14e0 [ 1058.704278][ T50] ? rcu_is_watching+0x15/0xb0 [ 1058.704301][ T50] ? process_scheduled_works+0xa20/0x14e0 [ 1058.704316][ T50] process_scheduled_works+0xa8e/0x14e0 [ 1058.704343][ T50] ? __pfx_process_scheduled_works+0x10/0x10 [ 1058.704361][ T50] ? assign_work+0x3cf/0x5d0 [ 1058.704378][ T50] worker_thread+0xa47/0xfb0 [ 1058.704404][ T50] kthread+0x388/0x470 [ 1058.704423][ T50] ? __pfx_worker_thread+0x10/0x10 [ 1058.704438][ T50] ? __pfx_kthread+0x10/0x10 [ 1058.704457][ T50] ret_from_fork+0x514/0xb70 [ 1058.704478][ T50] ? __pfx_ret_from_fork+0x10/0x10 [ 1058.704497][ T50] ? __switch_to+0xc89/0x1420 [ 1058.704515][ T50] ? __pfx_kthread+0x10/0x10 [ 1058.704534][ T50] ret_from_fork_asm+0x1a/0x30 [ 1058.704554][ T50] [ 1058.719981][T13266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1058.949112][T13266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1059.039987][T13266] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1059.128897][T13266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1059.178614][T13266] net_ratelimit: 14 callbacks suppressed [ 1059.178635][T13266] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1059.236232][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.243447][ T35] bridge0: port 1(bridge_slave_0) entered listening state [ 1059.271692][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1059.278839][ T35] bridge0: port 2(bridge_slave_1) entered listening state [ 1066.830509][ T5628] Bluetooth: hci5: command 0x0406 tx timeout