last executing test programs: 2m26.194340074s ago: executing program 4 (id=18112): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05032200d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m25.974131359s ago: executing program 4 (id=18118): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000480)=ANY=[], 0xfe1b) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket(0x14, 0x5, 0x4) pipe(0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x61f0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) 2m25.550949159s ago: executing program 3 (id=18125): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001800)={{r0, &(0x7f0000000100)='wg0\x00', 0x301002, &(0x7f0000000140)={@_ha_fsid={[0x8, 0xe]}, {0xfffe, 0x5189, 0x82d}}, 0x0, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x1}, 0x5, &(0x7f0000001740)=[{0x1, 0x1ff, 0x0, 0x0, 0x0, 0x22}, {0x3, 0x3, &(0x7f0000000300)='\x00', &(0x7f0000000380)="08952abe742168f2430f8c973246999e20311b590d84d9c76490759c3db1f258a4bbc1785866a190d6275d10441176cd084ab0b32f2e484f2640c8c2bd861fae031c2f918185370fa66b3de53c2ed0c76f04eac0ba36c4e05f462a1231ef4118d0b692e67fd8081254e54f967a8c4b66abd514f61603d16130ab24031e5b65c02a5c26537731d2b84cd157e34ba46dd49b6879c22f62f7bd58576d22d6c70444a19a521224646b91fd2ce7b6c4ad4b1a241b8b7a35272e58105c0bf5bfb37957ce637da934574e042c198e68ad5c2965f9d662e2d834e5c36a694130d30fa9a94e", 0xe1, 0x3a}, {0x1, 0x89, &(0x7f0000000480)='wg0\x00', &(0x7f0000000540)}, {0x7, 0x8, &(0x7f0000000600)='wg0\x00', &(0x7f0000000640), 0x0, 0x18}, {0x3, 0x8, &(0x7f0000001640)='\x00', &(0x7f0000001680)="a597178aebea121fbd1fb4da28624740bbedc8df55d84bafc5ad0974cc4598eea98138439457888cc37d41736b0a3e302626", 0x32, 0x2}]}) syz_genetlink_get_family_id$tipc(&(0x7f00000018c0), 0xffffffffffffffff) socket(0x27, 0x2, 0x7) r1 = socket$inet6(0xa, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0x5, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1f00) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg0\x00'}) 2m25.426564411s ago: executing program 3 (id=18126): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0) 2m25.175556606s ago: executing program 4 (id=18128): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@delchain={0x24, 0x66, 0x221, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r4) 2m25.085145175s ago: executing program 3 (id=18131): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x25dfdb7c, {0x60, 0x0, 0x0, r3, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2, 0xb, 0x4}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) recvfrom$packet(r0, &(0x7f0000000380)=""/116, 0x74, 0x10061, &(0x7f0000000440)={0x11, 0x16, r3, 0x1, 0x4, 0x6, @random="843c1d9d97ae"}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x20000400) bind$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c0000001000390428bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="80000000800404004c0012800b000100697036746e6c00003c000280140002000000000000000000000000000000000108001400ff01000014000300", @ANYRES64], 0x6c}, 0x1, 0x0, 0x0, 0x81}, 0x2000c8c0) 2m25.057300692s ago: executing program 4 (id=18132): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {}, {0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000022c0)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x8, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x9, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x206, 0x5, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000009, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x3, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000206, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 2m24.883661134s ago: executing program 4 (id=18133): socket$inet6_sctp(0xa, 0x1, 0x84) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socket(0x2, 0x800, 0x0) getsockopt(0xffffffffffffffff, 0xff, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) 2m24.799763415s ago: executing program 3 (id=18135): bind$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000f00)=ANY=[@ANYBLOB="140000001500010300000000000000010a"], 0x14}}, 0x0) recvmsg(r3, &(0x7f0000002b00)={0x0, 0x0, 0x0}, 0x10002) 2m24.548995804s ago: executing program 4 (id=18139): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x61f0, 0x0) sendto$unix(r0, &(0x7f0000000240), 0x0, 0x4000000, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0xfff, 0x0, &(0x7f0000000280)=""/218, &(0x7f0000000380)=0xda) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000140)=@buf={0x0, &(0x7f00000000c0)}) 2m24.458358231s ago: executing program 3 (id=18141): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r3 = socket(0x1000000010, 0x80002, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r2, 0x3, {0x2, 0xff, 0x6}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x1, {0x0, 0x1, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x2000000000000}, 0x18, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 2m24.318626727s ago: executing program 3 (id=18143): syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[], 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}, 0x1, 0x0, 0x0, 0x420c4}, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r2, 0x215eb000) socket(0x14, 0x2, 0x4) listen(r0, 0x0) 2m9.486257888s ago: executing program 32 (id=18139): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x61f0, 0x0) sendto$unix(r0, &(0x7f0000000240), 0x0, 0x4000000, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0xfff, 0x0, &(0x7f0000000280)=""/218, &(0x7f0000000380)=0xda) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000140)=@buf={0x0, &(0x7f00000000c0)}) 2m9.14317476s ago: executing program 33 (id=18143): syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[], 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}, 0x1, 0x0, 0x0, 0x420c4}, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r2, 0x215eb000) socket(0x14, 0x2, 0x4) listen(r0, 0x0) 1m39.980258302s ago: executing program 6 (id=18330): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r5], 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6400000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="3c0012800b000100626174616476"], 0x64}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 1m39.362407791s ago: executing program 6 (id=18333): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getpid() r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, 0x0, 0x0) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x25dedbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) readv(r1, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/174, 0xae}], 0x1) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x60, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x40, 0x3, "fd02b21edf8b721e23f25f47a7af48fbb07c400f2ffd8d27130601205b56f46dc2de1fa3d7afb2f185d0371736af66032ae4eed98dbb95537f4f247a"}]}], {0x14}}, 0xa8}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a30000000000900030000000000000003000c00"], 0x60}}, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r6, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 1m38.226698157s ago: executing program 6 (id=18337): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 1m37.70071735s ago: executing program 6 (id=18340): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=@newtfilter={0x84, 0x2c, 0xd2f, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfff5, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x10002, 0x40, 0x5, 0x7, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 1m37.062469415s ago: executing program 6 (id=18343): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1070bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000cc0)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x57f}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4e3, 0xca0b, 0x6, 0x3}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40800}, 0x44000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) 1m36.376345375s ago: executing program 6 (id=18345): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0xf) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e20}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) clock_gettime(0x4, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) 1m21.113146154s ago: executing program 34 (id=18345): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0xf) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e20}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) clock_gettime(0x4, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) 22.645481035s ago: executing program 7 (id=18611): setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) clock_gettime(0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) socket(0x80000000000000a, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) socket(0x10, 0x800, 0x1200000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r3, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) 20.348462334s ago: executing program 7 (id=18617): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) socket$packet(0x11, 0x3, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000180)={'some', 0x20, 0x5, 0x20, 0x8}, 0x2f) close(0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b40000000000000079a0fffd000000006200000000000000950074000000000002bf7ac06b0bba6dae5599772183b0be1ce6508a4bcdfe52782f28f91e7fdaa8e2e6dbedd2309cbbdb7835c610f677b40089f20c12"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 20.051663417s ago: executing program 7 (id=18619): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 19.698509267s ago: executing program 7 (id=18621): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000001c0)={0x1f, 0x3, 0x6}, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="e0000000100001002dbd7000fddbdf257874732874776f6669732829"], 0xe0}, 0x1, 0x0, 0x0, 0x44}, 0x80) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) unshare(0xe040400) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r6, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b20, &(0x7f0000000080)={'wlan1\x00', @random='\x00\x00]\x00N\v'}) 17.889455814s ago: executing program 7 (id=18627): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x2) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYRES16=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r3}) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r7}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r10, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) socket$inet6(0xa, 0x3, 0x1) 16.898024187s ago: executing program 7 (id=18632): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r3}, 0xc) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x40, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="700000001000ffff2bbd700001dcdf2500000000", @ANYRES32=0x0, @ANYBLOB="01000000230800004800128009000100766c616e000000003800028006000100030000001c0004800c000100ffffffff04000000030001000300000028070000100003800c003900070000000700000008000500", @ANYRES32=r7], 0x70}, 0x1, 0x0, 0x0, 0x20048045}, 0x40000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) 14.940941983s ago: executing program 1 (id=18638): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="0a000000010001", 0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_DATA={0x8, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x9e}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {}, {0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4, 0x27}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x260580e9}, 0x810) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 14.623259037s ago: executing program 1 (id=18640): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c102fe00ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 14.108841847s ago: executing program 1 (id=18642): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a00)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xcdd68600331fc8b7}, @TCA_TBF_PARMS={0x28, 0x1, {{0x10, 0x1, 0x0, 0x5, 0x0, 0x1}, {0x8, 0x2, 0xd, 0xf, 0x8, 0x7}, 0x0, 0x2, 0xde4}}, @TCA_TBF_PBURST={0x8, 0x7, 0x13de}, @TCA_TBF_RATE64={0xc, 0x4, 0x2ef0682d0c86cfd3}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0xdd86}], 0x2}, 0x5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000500), 0x0, 0x100, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) 13.532354945s ago: executing program 1 (id=18644): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r1 = socket(0x1e, 0x4, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1, 0x0, 0xfffffffffffffe68}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, 0x0, 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x10000008ebc, 0x0) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) close(0x4) 13.256049921s ago: executing program 0 (id=18646): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x18, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$XFS_IOC_SET_RESBLKS(r1, 0xc0105872, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000280)="01000000f3ffffffde31c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x80) socket(0x10, 0x3, 0x0) 13.015278321s ago: executing program 0 (id=18647): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x6}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8d0}, 0x8000) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1000]}}}}]}, 0x88}}, 0x20000000) 12.500391249s ago: executing program 1 (id=18650): setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)=',8Z', 0x3) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0x10, 0x2, 0x4) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="78010000", @ANYRES16=r2, @ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r9], 0x5c}}, 0x40) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}}, 0x884) 11.244148523s ago: executing program 1 (id=18652): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r4 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) writev(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvfrom(r2, &(0x7f00000003c0)=""/71, 0xfffffffffffffe83, 0x122, 0x0, 0x0) 8.886582211s ago: executing program 5 (id=18662): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0xffffffffffffff01, 0x2}, @TCA_FQ_PLIMIT={0x0, 0x1, 0x5}]}}]}, 0x48}}, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r6 = socket$inet6(0xa, 0x3, 0x2f) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x0, 0x0, 0x0, r8}, {0x0, 0x0, 0x101}, {0x0, 0x3, 0x42}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x34ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x200042, 0x4}, 0x10) bind$tipc(r0, 0x0, 0x0) close(r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x800, 0x1}, 0x20) 8.830449578s ago: executing program 2 (id=18663): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x25dfdbfb, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x100, @private0, 0xc3}}, @sadb_x_policy={0x8, 0x12, 0x3, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast1, @in6=@private2={0xfc, 0x2, '\x00', 0xff}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}]}, 0xa0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r0) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r3, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x200}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x7}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x7ff}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x3}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xf}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x4800) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x37, 0x3, 0x280, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x318, 0xffffffff, 0xffffffff, 0x318, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0x0, 0xffffffff, 0xff000000], 'veth0\x00', 'bridge0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x1, 0x9, 0x4, 0x3, 0x5, 0x1, 0x0, 0x6]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x10, 0x3, 0x8) getsockname$packet(r5, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000000000", @ANYRES32=r6, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000003c0)={0x10, 0x0, 0x25dfdbff, 0x9001004}, 0xc) r8 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002380)=@delchain={0x8a0, 0x2c, 0x10, 0x0, 0x2000, {0x0, 0x0, 0x0, r9, {0xffe0}, {0xfff2, 0xffff}, {0x2, 0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x874, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_POLICE={0x868, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0xb, 0x7, 0x5, 0x6, 0x9, 0x40, 0x459f84e5, 0x2, 0x5, 0x2, 0x8001, 0x17d936e9, 0x3, 0xa01, 0xe7, 0x7, 0x800, 0x10, 0x0, 0x80000001, 0x6, 0x4, 0x38, 0x4, 0x401, 0x67, 0x9, 0xf7f, 0x4, 0x1, 0x925d, 0x1, 0x2, 0xfffffffe, 0xecd, 0xd8a, 0x0, 0xfffffffb, 0xfffffffc, 0x702a, 0x6, 0x8, 0x10, 0x4, 0xeff4, 0x5, 0x7, 0x5, 0x0, 0x0, 0x2a8a59ef, 0xffffffff, 0x5, 0xfc, 0x1, 0x49c53607, 0x2, 0x80000001, 0x2f, 0x8, 0xfffffffa, 0x4fa, 0x8, 0xfffff801, 0x3, 0x800, 0x7, 0xffffff7a, 0x0, 0x7f, 0x80000000, 0x9, 0x2, 0x22c, 0x4, 0x180, 0xab, 0x954c, 0x2, 0x0, 0x5, 0x7, 0x5, 0x4, 0x3, 0x7, 0x1, 0x2eda, 0x7f, 0x3, 0x7, 0x540, 0x9, 0x80, 0x180000, 0x2, 0x401, 0x10001, 0x0, 0x0, 0x1, 0x8, 0x9, 0x5, 0x7ff, 0x2, 0x3, 0xfa42, 0xfffffff7, 0x9, 0x7fff800, 0x3, 0x6, 0x6, 0x5, 0x10000, 0x6, 0x9, 0x6cd, 0xa08, 0xe821, 0x8000, 0x5, 0x2, 0x5, 0xc1, 0x6, 0x200, 0x1, 0x7, 0x2, 0x5, 0x7ff, 0x4, 0x4, 0x2, 0xfff, 0x8, 0x78c16f5b, 0x1, 0x4ad9f223, 0x81, 0x1, 0x1, 0x0, 0x3, 0x4, 0xfff, 0x1ff, 0x9, 0xfff, 0xffffff75, 0x9, 0x5b5c142a, 0x8, 0x9, 0x8e73, 0x101, 0x7, 0x1, 0x9, 0x1, 0xe, 0x7, 0x5, 0x1ff, 0xf6, 0x0, 0x3, 0x4, 0x6, 0x57, 0x3, 0x4d80, 0x2, 0xfffff376, 0x61, 0x10000, 0x2, 0x4, 0x74be, 0x7, 0x8001, 0x5, 0x7, 0x8c000000, 0x4, 0x9, 0x6, 0x4, 0x9, 0x5, 0x99f, 0x80000001, 0x7, 0x9, 0x6, 0x10001, 0x200, 0x8, 0x2, 0x8000, 0xcd53, 0x1, 0xc0000, 0x4, 0x6, 0x10000, 0x5, 0x9, 0xe1, 0x8, 0x81, 0x80a1, 0x1, 0x0, 0x6, 0xffffff10, 0x78dcb124, 0x3, 0xd7d0, 0x9, 0xfffffffd, 0x5, 0x9, 0xffff4e05, 0x80, 0x10001, 0x5, 0x5, 0x658bfd45, 0x6, 0x3f6e3ed6, 0x20, 0x3, 0x3, 0x5, 0x2, 0x959, 0x3, 0x9, 0x7, 0x71, 0x3, 0x9, 0x6, 0x7fffffff, 0x1, 0x4, 0x8000, 0x1, 0xb47, 0x1, 0x5, 0x7fff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x2, 0x3, 0x5, 0x8f, {0x1, 0x1, 0x9, 0x10, 0x3, 0x5}, {0x10, 0x1, 0x8, 0xaad6, 0x1000}, 0xfffffffc, 0x1ff, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x5b01, 0x4, 0xffff0000, 0x0, 0xfffffd0a, 0xfff, 0x0, 0x7, 0xf9b, 0xb, 0x0, 0xe, 0x4, 0x49, 0x6, 0x400, 0x1, 0x7, 0x9, 0x7, 0x8001, 0x2, 0x1, 0x2, 0x6, 0x1d7, 0x0, 0x7fffffff, 0x80, 0x400, 0x6cb7, 0x7, 0x9, 0x8, 0x9, 0x4, 0x1, 0x2, 0x8, 0xe261, 0xffff, 0x9, 0x6, 0xe, 0x25a, 0x4, 0x1000, 0x80000001, 0x4, 0x5, 0x0, 0x9, 0xfffffff7, 0x0, 0x8, 0x1000, 0xb4a, 0x6, 0x1, 0x4c, 0xa, 0xd, 0x7, 0x7, 0x8, 0x8000000, 0xc3a, 0x8001, 0x7, 0x6, 0x7, 0x0, 0x41, 0x7, 0x9, 0x0, 0x2, 0x80000001, 0x7, 0x31bb69ea, 0xfff, 0xfd, 0xd, 0x3, 0x9, 0x6, 0xb3, 0x7, 0x80, 0x3, 0x2e8000, 0x4d0b, 0x8001, 0x9, 0x1, 0x7, 0x390, 0x401, 0x6, 0x0, 0x7, 0x7, 0x2, 0x6, 0x80000001, 0x80000000, 0x7, 0xc, 0x0, 0xae24, 0x7, 0x8, 0x8000, 0x7, 0x5a3, 0x5, 0x7ff, 0x8, 0x1ff, 0x4c, 0x9, 0xabb, 0x9, 0x5, 0x0, 0x9, 0x7f, 0x5, 0x0, 0x8000, 0x4, 0x10, 0x1, 0x88, 0x81, 0x1, 0x950b, 0x400, 0xb7d, 0x1, 0x30c1, 0x3, 0x5, 0x9, 0x38, 0x8001, 0x5c, 0x1, 0x2, 0x7, 0x6, 0x4, 0x10, 0x4, 0xd, 0x4, 0x9, 0x7f, 0x9, 0x909, 0x4, 0xaf7, 0x2ce40000, 0xfffffffc, 0x36b, 0x8, 0x7, 0xfffffff8, 0x9, 0x2, 0x4, 0x2, 0x3, 0x5, 0xfff, 0x2, 0x3, 0x4, 0x5, 0x8, 0xffff, 0x0, 0x4, 0xfffffff7, 0x2, 0x5, 0xed7, 0x6, 0xd, 0xb, 0x7, 0xcb2, 0x1ff, 0x9, 0x60000000, 0x0, 0x2, 0x4, 0x53, 0x8001, 0x9, 0x3fbe, 0x0, 0x9d, 0x7, 0x9, 0x81, 0x40, 0x6, 0x442a, 0x80000001, 0x80, 0x900, 0x5, 0x1, 0x7fffffff, 0x1, 0xf, 0x9, 0x90000000, 0x3c3e0f69, 0x5, 0x4, 0x8, 0x1ff, 0x9, 0x1, 0x2, 0x3, 0x10, 0x5, 0xd133, 0x8, 0x40, 0x8, 0x1, 0x7fff, 0x7, 0x2, 0xfffffffe, 0x8, 0x5, 0x80000000, 0xa0, 0x7, 0x9, 0x9, 0x4d0, 0x8, 0x4, 0x7, 0x8, 0x2, 0x1]}]}]}}]}, 0x8a0}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, 0xb, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4064}, 0x4800) 8.626131619s ago: executing program 5 (id=18664): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01"], 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r4, @ANYBLOB="000014000a000100aaaaaaaeaaaa000008000f00010000003e11859a3351e595fc6522303ecd2fe041"], 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0) 8.431074316s ago: executing program 2 (id=18665): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002480)=ANY=[@ANYBLOB="b1e89de5f90c58874c60583a1f815b2abec3d966ed5e58647d465af5b3601e4d55c268c667c6b0f3e18586362cb39dab10369515b187615978046ec1a45f9192cb36845a6e9ec021d7c78439"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, r6, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r3, &(0x7f0000000240)="3b826a86871d9a3d70e7c44b615e", 0xe, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r6, 0x1, 0x4, 0x6, @multicast}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2e0, 0x3c, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e0cf086dd0de0ffff00184000630677fbac141414e000000162079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) 8.072704785s ago: executing program 2 (id=18666): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60d1}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB], 0x14}, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="525eb52724d8e9afa919cf57a0c0ad528511e9a3f2931ebb1e5b98c34d33a53a1a354652e2ac56f3e506ad9c6479a98cbc3101cbeafde77b3335bcc7248a2a3ac2c33f0fba1e37d334497ba513fdb799f824962cec57be790f4ab10c2180d4ecb29bb247aa7ae26be5949d696940e698"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 7.634448076s ago: executing program 5 (id=18667): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000006c0), &(0x7f0000000700), 0x0, 0x20000000000000c4}}, 0x40) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x14}, 0x800, 0x0, 0x103, 0x1}, 0x20) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) socket$kcm(0x21, 0x2, 0xa) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="1855789b63fbce774d0d"], 0x8) r3 = socket(0x2b, 0x1, 0x1) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) listen(r3, 0x5) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept4$tipc(r3, &(0x7f0000000040), 0x0, 0x0) 7.302109304s ago: executing program 0 (id=18668): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'sit0\x00'}) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socket$unix(0x1, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048840}, 0x40004) syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000a80)={'syztnl0\x00', &(0x7f00000009c0)={'ip_vti0\x00', 0x0, 0x8, 0x8000, 0x2, 0x6, {{0xe, 0x4, 0x1, 0x3, 0x38, 0x65, 0x0, 0x0, 0x29, 0x0, @empty, @local, {[@lsrr={0x83, 0x17, 0x94, [@dev={0xac, 0x14, 0x14, 0xa}, @remote, @rand_addr=0x64010101, @remote, @multicast2]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x6, 0x2}, @lsrr={0x83, 0x3, 0x20}]}}}}}) r3 = socket$nl_route(0x10, 0x3, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x7, 0x72}, 0x2c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d60, 0x9}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54000000100003040007057007c78d9292cb0000", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r6, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20002040) 7.150482366s ago: executing program 5 (id=18669): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @local}, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x20000014) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x4, &(0x7f00000000c0)=""/206, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x810) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x14, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=0x1, @ANYBLOB="fcffffff0000000000", @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) setsockopt$sock_int(r2, 0x1, 0x7, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffffa9}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94"}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd"}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0"}], 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xb0, 0x1403, 0x20, 0x70bd2d, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'caif0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dvmrp1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_batadv\x00'}}]}, 0xb0}}, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 6.93269304s ago: executing program 5 (id=18670): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e20, @rand_addr=0x64010101}}, 0x0, 0x0, 0x1d, 0x0, "bb02a3c364ca41d6e5415445244744bd4c0b42a21d7214dc92594e654dc534a6324d4993f4f19b2df3ee818a118a7c49462189316d8b6d7800001eb922fe1000000000008000"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r0, 0x800) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x620, 0x0, 0x540, 0x540, 0x540, 0x1d0, 0x610, 0x610, 0x610, 0x610, 0x610, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xffffffff, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x188, 0x1d0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x80]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@empty, 0xa, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xffffff00], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x2f, 0x9}, 0x0, 0xa8, 0xe0, 0x48000000}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0x0, 0x4, 0x2}, 0xfffffffe}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x80000}, 0x8000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000002100), &(0x7f0000000000)=0x30) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r7, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080c0}, 0x20040000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r5}, 0x4) 6.837267397s ago: executing program 0 (id=18671): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000001c0)={0x1f, 0x3, 0x6}, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="e0000000100001002dbd7000fddbdf257874732874776f6669732829"], 0xe0}, 0x1, 0x0, 0x0, 0x44}, 0x80) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) unshare(0xe040400) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r6, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b20, &(0x7f0000000080)={'wlan1\x00', @random='\x00\x00]\x00N\v'}) 6.373081421s ago: executing program 2 (id=18672): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000280)={r4, 0x7, 0x104, 0x7ff}) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001500)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000005000000020000000000000f8300000044942d050000000400000f01000000050000000900000000000000040000000400000004000000830000000100000080002e616100"/105], &(0x7f00000014c0)=""/2, 0x69, 0x2, 0x1}, 0x28) socket$kcm(0x2, 0xa, 0x2) writev(r3, 0x0, 0x0) 5.020816526s ago: executing program 0 (id=18673): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) socket$unix(0x1, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x1000000, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x6, 0x2, 0x80000000, 0x0, 0x10001, 0x2, 0x0, 0x86b}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) unshare(0x20000400) socket$nl_crypto(0x10, 0x3, 0x15) gettid() socket$xdp(0x2c, 0x3, 0x0) 4.924395315s ago: executing program 5 (id=18674): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) unshare(0x6020400) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001640)=ANY=[@ANYRES32, @ANYBLOB="2f000000180000000400000004245fabc2bca51d186015c77b633aa22d6a1eabfff581594c5be63bc93502082204100ee3e8ee16c99806c213670e5b3dde3d0d8f093d5fd16c0d08e6130cde79385af2f556b926b442852bf69ee26a527a5e7792ee92ecc154507855462fb212b10a503b6b8d9077b2277455f09009c6c420a5047363263c21f7707db5a7ddff3f", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x800) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x237a, 0x4) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000700)=0xebb4, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0x10) socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20000001) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000005"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 4.403731639s ago: executing program 2 (id=18675): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000050000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket(0x2, 0x3, 0xff) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r6, 0x0, 0x1, &(0x7f0000000040)=0x2, 0xbd) sendmsg$802154_dgram(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x24, @long={0x3, 0x1}}, 0x14, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20005014}, 0x20004840) sendmmsg$inet(r5, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="281effe935fdca249b2f00000000000000556eabdca3f6729b0ec1218002a6e5", 0x20}], 0x1, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty}}}], 0x20}}], 0x1, 0x4800) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000340)={r9, 0xe55}, 0x8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockopt$inet6_opts(r8, 0x29, 0x36, &(0x7f00000003c0), &(0x7f0000000400)) 1.509372326s ago: executing program 35 (id=18632): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r3}, 0xc) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x40, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="700000001000ffff2bbd700001dcdf2500000000", @ANYRES32=0x0, @ANYBLOB="01000000230800004800128009000100766c616e000000003800028006000100030000001c0004800c000100ffffffff04000000030001000300000028070000100003800c003900070000000700000008000500", @ANYRES32=r7], 0x70}, 0x1, 0x0, 0x0, 0x20048045}, 0x40000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) 37.902804ms ago: executing program 0 (id=18677): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r0, 0x8b1b, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x43, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3e}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x4b, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 2 (id=18678): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$kcm(0x2, 0x3, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000300)='cgroup.controllers\x00', 0x275a, 0xfffe) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES64=r2, @ANYRES64=0x0, @ANYRESHEX=r0], 0x20) kernel console output (not intermixed with test programs): : Schedule: port zero only supported in persistent services, check your ipvs configuration [ 958.665745][T11448] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 958.679816][T11448] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 958.704813][T11448] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 958.746819][T11448] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 958.789846][T11448] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 958.808068][T11448] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 958.820552][T11448] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 958.836091][T11451] bond16: entered promiscuous mode [ 958.842458][T11451] 8021q: adding VLAN 0 to HW filter on device bond16 [ 958.851046][T11448] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 958.873101][T11448] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 958.884412][T11448] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 958.917082][T11448] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 958.943716][T11448] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 958.970399][T11448] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 958.991250][T11454] bond16: (slave bridge12): making interface the new active one [ 958.999046][T11448] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 959.003241][T11448] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 959.019551][T11454] bridge12: entered promiscuous mode [ 959.038231][T11454] bond16: (slave bridge12): Enslaving as an active interface with an up link [ 959.063154][T11448] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 959.079202][ T1168] net_ratelimit: 19 callbacks suppressed [ 959.079221][ T1168] bond11: (slave syz_tun): failed to get link speed/duplex [ 959.110230][T11448] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 959.158706][T11448] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 959.208894][ T144] bond11: (slave syz_tun): failed to get link speed/duplex [ 959.369132][ T144] bond11: (slave syz_tun): failed to get link speed/duplex [ 960.565055][T11491] RDS: rds_bind could not find a transport for 0:b3::, load rds_tcp or rds_rdma? [ 962.636504][T11495] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 962.676307][T11489] xfrm0 speed is unknown, defaulting to 1000 [ 962.685503][ T144] bond11: (slave syz_tun): failed to get link speed/duplex [ 962.719068][ T13] batadv1: left promiscuous mode [ 962.820346][ T13] bond11: (slave syz_tun): failed to get link speed/duplex [ 962.948234][T11511] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 963.042475][T11514] syzkaller1: entered promiscuous mode [ 963.048015][T11514] syzkaller1: entered allmulticast mode [ 963.079074][ T156] bond11: (slave syz_tun): failed to get link speed/duplex [ 963.095294][T11516] IPv6: NLM_F_CREATE should be specified when creating new route [ 963.168230][T11518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17192'. [ 963.201086][ T144] bond11: (slave syz_tun): failed to get link speed/duplex [ 963.414698][ T156] bond11: (slave syz_tun): failed to get link speed/duplex [ 963.486625][T11529] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17196'. [ 963.659535][ T156] bond11: (slave syz_tun): failed to get link speed/duplex [ 963.968936][ T144] bond11: (slave syz_tun): failed to get link speed/duplex [ 964.219739][ T144] bond11: (slave syz_tun): failed to get link speed/duplex [ 964.335155][T11547] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.17202'. [ 964.339517][ T156] bond11: (slave syz_tun): failed to get link speed/duplex [ 964.494955][T11553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17205'. [ 964.570891][ T144] bond11: (slave syz_tun): failed to get link speed/duplex [ 964.699314][ T156] bond11: (slave syz_tun): failed to get link speed/duplex [ 964.822044][ T156] bond11: (slave syz_tun): failed to get link speed/duplex [ 964.955868][T11561] netlink: 64 bytes leftover after parsing attributes in process `syz.3.17209'. [ 965.048429][T11569] syzkaller1: entered promiscuous mode [ 965.058933][T11569] syzkaller1: entered allmulticast mode [ 965.496507][T11590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17216'. [ 965.609535][ T144] bond11: (slave syz_tun): failed to get link speed/duplex [ 965.693745][T11593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17217'. [ 965.800290][ T135] bond11: (slave syz_tun): failed to get link speed/duplex [ 965.820135][T11596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17218'. [ 966.140965][T11886] bond11: (slave syz_tun): failed to get link speed/duplex [ 966.289090][T11624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17222'. [ 966.298302][ T62] bond11: (slave syz_tun): failed to get link speed/duplex [ 966.538949][ T62] bond11: (slave syz_tun): failed to get link speed/duplex [ 966.608549][T11632] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17224'. [ 967.013854][T11645] xfrm0 speed is unknown, defaulting to 1000 [ 967.028303][T11617] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 967.298460][T11650] bond9: entered allmulticast mode [ 967.329661][T11657] macvlan5: entered promiscuous mode [ 967.343162][T11657] macvlan5: entered allmulticast mode [ 967.368072][T11657] bond9: entered promiscuous mode [ 967.386423][T11657] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 967.432418][T11657] bond9: left promiscuous mode [ 967.728275][T11676] syzkaller1: entered promiscuous mode [ 967.741396][T11676] syzkaller1: entered allmulticast mode [ 969.268921][ T62] net_ratelimit: 18 callbacks suppressed [ 969.268943][ T62] bond11: (slave syz_tun): failed to get link speed/duplex [ 969.409014][ T62] bond11: (slave syz_tun): failed to get link speed/duplex [ 969.530626][T11886] bond11: (slave syz_tun): failed to get link speed/duplex [ 969.608993][T11712] netlink: 'syz.2.17248': attribute type 39 has an invalid length. [ 969.758996][ T62] bond11: (slave syz_tun): failed to get link speed/duplex [ 969.879588][T11880] bond11: (slave syz_tun): failed to get link speed/duplex [ 969.979135][T11719] bond10: entered promiscuous mode [ 969.987821][T11723] netlink: 'syz.2.17253': attribute type 1 has an invalid length. [ 970.248623][T11723] 8021q: adding VLAN 0 to HW filter on device bond17 [ 970.264838][T11727] vlan4: entered allmulticast mode [ 970.270352][T11727] bond17: entered allmulticast mode [ 970.290988][T11660] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 970.300036][T11880] bond11: (slave syz_tun): failed to get link speed/duplex [ 970.353367][T11734] __nla_validate_parse: 2 callbacks suppressed [ 970.353385][T11734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17255'. [ 970.368990][T11734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17255'. [ 970.423003][ T62] bond11: (slave syz_tun): failed to get link speed/duplex [ 970.516924][T11740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17257'. [ 970.539928][ T1168] bond11: (slave syz_tun): failed to get link speed/duplex [ 970.682684][T11740] 8021q: adding VLAN 0 to HW filter on device bond11 [ 970.722763][T11745] ipvlan1: entered allmulticast mode [ 970.736524][T11745] bond11: entered allmulticast mode [ 970.786243][T11748] bond11: (slave ipip3): refused to change device type [ 970.829647][T11752] bond18: entered allmulticast mode [ 970.843318][T11753] bond18: entered promiscuous mode [ 970.850318][T11753] macvlan1: entered promiscuous mode [ 970.856085][T11753] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 970.898932][ T62] bond11: (slave syz_tun): failed to get link speed/duplex [ 971.020962][ T144] bond11: (slave syz_tun): failed to get link speed/duplex [ 971.233140][T11775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17269'. [ 971.452718][T11785] bond8: (slave lo): Releasing backup interface [ 971.465477][T11785] bond8: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 971.504233][T11785] bond11: (slave syz_tun): Removing an active aggregator [ 971.529266][T11785] bond11: (slave syz_tun): Releasing backup interface [ 971.591119][T11785] bond13: (slave veth0_to_bond): Releasing active interface [ 971.635252][T11788] team0: Device xfrm0 is of different type [ 971.667278][T11790] tipc: Enabled bearer , priority 0 [ 971.856072][T11794] netlink: 840 bytes leftover after parsing attributes in process `syz.2.17274'. [ 971.991109][T11797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17275'. [ 972.427950][T11807] geneve6: entered promiscuous mode [ 972.437142][T11880] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 47435 - 0 [ 972.459738][T11880] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 47435 - 0 [ 972.503177][T11809] netlink: 64 bytes leftover after parsing attributes in process `syz.0.17280'. [ 972.572179][T11880] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 47435 - 0 [ 972.585258][T11880] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 47435 - 0 [ 972.668558][T11813] syzkaller1: entered promiscuous mode [ 972.699390][T11813] syzkaller1: entered allmulticast mode [ 972.944842][T11833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17286'. [ 972.976146][T11835] netlink: 'syz.0.17288': attribute type 4 has an invalid length. [ 973.028486][T11839] netlink: 'syz.0.17288': attribute type 4 has an invalid length. [ 973.056893][T11831] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma? [ 973.136064][T11842] syzkaller1: entered promiscuous mode [ 973.150988][T11842] syzkaller1: entered allmulticast mode [ 973.190086][T11837] xfrm0 speed is unknown, defaulting to 1000 [ 973.283811][T11844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17290'. [ 973.309241][T11844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17290'. [ 974.193189][T11865] netlink: 'syz.3.17298': attribute type 4 has an invalid length. [ 974.249121][T11865] netlink: 'syz.3.17298': attribute type 4 has an invalid length. [ 974.714698][T11876] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 975.624149][T11899] tipc: Enabling not permitted [ 975.642556][T11899] tipc: Enabling of bearer rejected, failed to enable media [ 977.076942][T11927] netlink: 'syz.2.17321': attribute type 1 has an invalid length. [ 977.286521][T11927] 8021q: adding VLAN 0 to HW filter on device bond19 [ 977.308550][T11931] netlink: 'syz.2.17321': attribute type 10 has an invalid length. [ 977.346672][T11931] __nla_validate_parse: 2 callbacks suppressed [ 977.346695][T11931] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17321'. [ 977.534698][T11929] bond19: (slave veth17): Enslaving as a backup interface with a down link [ 977.584448][T11930] bond19: (slave dummy0): Enslaving as a backup interface with an up link [ 977.613990][T11931] dummy0: entered promiscuous mode [ 977.649392][ T1168] net_ratelimit: 5 callbacks suppressed [ 977.649411][ T1168] bond19: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 977.701915][T11931] bond19: (slave dummy0): Removing an active aggregator [ 977.720857][T11931] bond19: (slave dummy0): Releasing backup interface [ 977.958667][T11941] bridge10: entered promiscuous mode [ 977.970205][T11941] bridge10: entered allmulticast mode [ 978.615892][T11967] sctp: [Deprecated]: syz.0.17337 (pid 11967) Use of int in max_burst socket option. [ 978.615892][T11967] Use struct sctp_assoc_value instead [ 979.008516][T11984] netlink: 27 bytes leftover after parsing attributes in process `syz.1.17344'. [ 979.098296][T11996] xfrm0 speed is unknown, defaulting to 1000 [ 980.787910][T11880] nci: nci_rx_work: unknown MT 0x1 [ 981.062041][T12046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17366'. [ 981.480178][T12035] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 982.584011][T12077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17378'. [ 983.336283][T12097] netlink: 'syz.1.17385': attribute type 4 has an invalid length. [ 983.389181][T12101] netlink: 'syz.1.17385': attribute type 4 has an invalid length. [ 984.398104][T12128] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17398'. [ 984.525244][T12132] netlink: 1484 bytes leftover after parsing attributes in process `syz.4.17400'. [ 984.536529][T12132] netlink: 1484 bytes leftover after parsing attributes in process `syz.4.17400'. [ 985.050025][T12150] netlink: 76 bytes leftover after parsing attributes in process `syz.4.17406'. [ 985.402094][T12164] netlink: set zone limit has 4 unknown bytes [ 985.585134][T12170] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 985.806940][T12176] tipc: Failed to remove unknown binding: 66,1,1/0:3289834611/3289834613 [ 985.818324][T12176] tipc: Failed to remove unknown binding: 66,1,1/0:3289834611/3289834613 [ 985.833896][T12176] tipc: Failed to remove unknown binding: 66,1,1/0:3289834611/3289834613 [ 986.960722][T12215] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 986.968344][T12215] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 987.685147][T12145] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 987.927702][T12224] netlink: 'syz.1.17431': attribute type 1 has an invalid length. [ 987.946070][T12225] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17432'. [ 987.967577][T12225] netlink: 'syz.2.17432': attribute type 7 has an invalid length. [ 987.980660][T12225] netlink: 'syz.2.17432': attribute type 8 has an invalid length. [ 987.998603][T12225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17432'. [ 988.013486][T12224] 8021q: adding VLAN 0 to HW filter on device bond8 [ 988.083898][T12224] bond8: (slave geneve5): making interface the new active one [ 988.095777][T12224] bond8: (slave geneve5): Enslaving as an active interface with an up link [ 988.105427][T11886] netdevsim netdevsim1 €Â: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.139711][T11886] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.212369][T11886] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.240532][T11886] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.275638][T12227] xfrm0 speed is unknown, defaulting to 1000 [ 990.385587][T12283] xfrm0 speed is unknown, defaulting to 1000 [ 991.189334][T12285] netlink: 'syz.1.17454': attribute type 4 has an invalid length. [ 992.875978][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.237986][T12329] xfrm0 speed is unknown, defaulting to 1000 [ 996.682768][T12391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17495'. [ 996.961708][T12405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17501'. [ 996.994524][T12405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17501'. [ 997.299781][T12416] bond20: entered allmulticast mode [ 997.332319][T12419] tipc: Started in network mode [ 997.344504][T12419] tipc: Node identity 080211000001, cluster identity 16 [ 997.394016][T12419] tipc: Enabled bearer , priority 0 [ 997.418568][T12423] mac80211_hwsim hwsim13 syzkaller0: entered promiscuous mode [ 997.465004][T12423] mac80211_hwsim hwsim13 syzkaller0: entered allmulticast mode [ 997.647102][T12433] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17512'. [ 997.678895][T12433] netlink: 32 bytes leftover after parsing attributes in process `syz.0.17512'. [ 997.700329][T12433] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17512'. [ 997.739287][T12433] netlink: 32 bytes leftover after parsing attributes in process `syz.0.17512'. [ 998.424105][ T144] netdevsim netdevsim1 €Â: unset [0, 0] type 1 family 0 port 8472 - 0 [ 998.452260][ T144] netdevsim netdevsim1 €Â: unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.471628][ T144] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 998.491144][ T144] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.508314][T32760] tipc: Node number set to 134418688 [ 998.516721][ T144] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 998.532303][ T144] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.541864][ T144] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 998.554648][ T144] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.671514][T12470] netlink: 'syz.3.17526': attribute type 11 has an invalid length. [ 998.696416][T12471] netlink: 192 bytes leftover after parsing attributes in process `syz.4.17525'. [ 998.723808][T12470] erspan0: left promiscuous mode [ 998.752361][T12470] bridge0: left promiscuous mode [ 998.763004][T12470] 8021q: adding VLAN 0 to HW filter on device .` [ 998.778349][T12470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 998.852053][T12470] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 998.881579][T12470] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 998.937392][T12472] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 998.937936][T12467] xfrm0 speed is unknown, defaulting to 1000 [ 998.967659][T12472] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 999.103445][T32760] xfrm0 speed is unknown, defaulting to 1000 [ 999.131960][T32760] syz0: Port: 1 Link ACTIVE [ 999.297904][T32760] xfrm0 speed is unknown, defaulting to 1000 [ 999.796187][T12504] xfrm0 speed is unknown, defaulting to 1000 [ 1000.312597][T12516] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17543'. [ 1000.435067][T12518] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17543'. [ 1001.291181][T12538] pimreg: entered allmulticast mode [ 1001.314622][T12538] pimreg: left allmulticast mode [ 1003.175254][T12564] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17560'. [ 1004.087073][T12578] netlink: 220 bytes leftover after parsing attributes in process `syz.1.17562'. [ 1004.103417][T12578] NCSI netlink: No device for ifindex 566712438 [ 1004.578227][T12592] syzkaller1: entered promiscuous mode [ 1004.599530][T12592] syzkaller1: entered allmulticast mode [ 1004.820043][T12595] syzkaller1: entered promiscuous mode [ 1004.836515][T12595] syzkaller1: entered allmulticast mode [ 1005.023575][T12600] bridge0: left promiscuous mode [ 1005.104379][T12606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17570'. [ 1005.170608][T12610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17570'. [ 1005.366226][T12610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17570'. [ 1005.873303][T12644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17584'. [ 1005.885047][T12644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17584'. [ 1005.941280][T12650] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17587'. [ 1006.201661][T12663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17592'. [ 1006.390069][T12635] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1006.557236][T12682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17597'. [ 1009.350973][T12668] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1009.522178][T12703] netlink: 'syz.3.17606': attribute type 1 has an invalid length. [ 1009.583723][T12703] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1010.506551][T12737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17617'. [ 1010.562868][T12741] netlink: 76 bytes leftover after parsing attributes in process `syz.3.17619'. [ 1010.728186][T12750] xt_policy: output policy not valid in PREROUTING and INPUT [ 1010.887443][T12756] xfrm0 speed is unknown, defaulting to 1000 [ 1010.895554][T12760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17626'. [ 1011.058392][T12766] netlink: 52 bytes leftover after parsing attributes in process `syz.3.17629'. [ 1011.103707][T12766] netlink: 76 bytes leftover after parsing attributes in process `syz.3.17629'. [ 1011.117617][T12766] netlink: 52 bytes leftover after parsing attributes in process `syz.3.17629'. [ 1012.051833][T12790] mac80211_hwsim hwsim13 syzkaller0: Caught tx_queue_len zero misconfig [ 1012.408407][T12795] xfrm0 speed is unknown, defaulting to 1000 [ 1012.619269][ T1168] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 1013.016930][T12812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17645'. [ 1013.403618][T12818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17647'. [ 1013.423844][T12818] hsr_slave_0: left promiscuous mode [ 1013.437406][T12818] hsr_slave_1: left promiscuous mode [ 1013.633380][T12823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17649'. [ 1013.764863][T12823] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1014.034306][T12831] IPv6: NLM_F_CREATE should be specified when creating new route [ 1014.488154][T12848] netlink: 64 bytes leftover after parsing attributes in process `syz.3.17656'. [ 1014.549250][T12848] syzkaller1: entered promiscuous mode [ 1014.569989][T12848] syzkaller1: entered allmulticast mode [ 1015.362692][T12856] netlink: 'syz.2.17658': attribute type 13 has an invalid length. [ 1015.479500][T12803] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1016.438046][T12882] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17667'. [ 1016.510581][T12882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17667'. [ 1016.962187][T12904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17678'. [ 1016.973083][T12902] syzkaller0: entered promiscuous mode [ 1016.978647][T12902] syzkaller0: entered allmulticast mode [ 1017.374591][T12923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17683'. [ 1017.455187][T12925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17684'. [ 1017.516375][T12925] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1017.698230][T12933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17687'. [ 1017.772243][T12937] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17689'. [ 1017.835785][T12937] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17689'. [ 1017.929192][T12946] netlink: zone id is out of range [ 1017.934399][T12946] netlink: zone id is out of range [ 1017.939792][T12946] netlink: zone id is out of range [ 1017.945041][T12946] netlink: zone id is out of range [ 1017.950515][T12946] netlink: zone id is out of range [ 1017.959242][T12946] netlink: zone id is out of range [ 1017.975556][T12946] netlink: zone id is out of range [ 1017.987434][T12946] netlink: zone id is out of range [ 1017.998273][T12946] netlink: zone id is out of range [ 1018.010714][T12946] netlink: zone id is out of range [ 1018.288807][T12965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17699'. [ 1018.498558][T12973] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 1018.531388][T12973] netlink: 44 bytes leftover after parsing attributes in process `syz.2.17702'. [ 1019.044847][T13001] netlink: 'syz.3.17715': attribute type 1 has an invalid length. [ 1022.759904][T13113] tun0: tun_chr_ioctl cmd 1074812118 [ 1022.794172][T13111] tun0: tun_chr_ioctl cmd 1074033169 [ 1022.957132][T13117] tipc: Enabled bearer , priority 0 [ 1023.138959][T13117] syzkaller0: entered promiscuous mode [ 1023.158872][T13117] syzkaller0: entered allmulticast mode [ 1023.178521][T13117] tipc: Resetting bearer [ 1023.446356][ T1168] tipc: Resetting bearer [ 1023.507276][T13116] tipc: Resetting bearer [ 1026.063954][T13116] tipc: Disabling bearer [ 1026.185320][T13152] __nla_validate_parse: 8 callbacks suppressed [ 1026.185362][T13152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17768'. [ 1026.531217][T13177] netlink: 'syz.2.17777': attribute type 10 has an invalid length. [ 1026.657629][T13176] geneve6: entered promiscuous mode [ 1026.676476][ T1168] netdevsim netdevsim1 €Â: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.703473][ T1168] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.723392][ T1168] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.745604][ T1168] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.800680][T13183] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17779'. [ 1026.999279][T13194] netlink: 'syz.1.17783': attribute type 21 has an invalid length. [ 1027.324836][T13206] tipc: Enabled bearer , priority 0 [ 1027.411915][T13206] syzkaller0: entered promiscuous mode [ 1027.425955][T13206] syzkaller0: entered allmulticast mode [ 1027.444297][T13206] tipc: Resetting bearer [ 1027.477854][T13205] tipc: Resetting bearer [ 1027.847365][T13191] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1028.280423][T13230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17795'. [ 1030.295858][T13205] tipc: Disabling bearer [ 1030.486168][T13244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17798'. [ 1030.712082][T13262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17805'. [ 1030.721368][T13262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17805'. [ 1030.826489][T13267] can: request_module (can-proto-0) failed. [ 1030.979742][T13276] vlan0: entered promiscuous mode [ 1031.007921][T13276] vlan0: entered allmulticast mode [ 1031.026333][T13276] veth0_vlan: entered allmulticast mode [ 1031.051770][T13276] team0: Port device vlan0 added [ 1031.167485][T13284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17812'. [ 1031.303825][T13247] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1031.514539][T13293] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.17817'. [ 1031.542085][T13296] IPv6: sit2: Disabled Multicast RS [ 1031.628707][T13303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17816'. [ 1032.783446][T13336] syzkaller1: entered promiscuous mode [ 1032.802962][T13336] syzkaller1: entered allmulticast mode [ 1032.962181][T13341] net_ratelimit: 44 callbacks suppressed [ 1032.962203][T13341] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1034.794413][T13407] netlink: 'syz.3.17846': attribute type 1 has an invalid length. [ 1034.834102][T13407] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1034.931033][T13407] bond18: (slave veth0_to_bond): making interface the new active one [ 1034.976772][T13407] bond18: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1035.056141][T13417] macvlan0: entered promiscuous mode [ 1035.063260][T13417] macvlan0: entered allmulticast mode [ 1035.071459][T13417] bond18: entered promiscuous mode [ 1035.076881][T13417] veth0_to_bond: entered promiscuous mode [ 1035.096440][T13417] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1035.130389][T13417] bond18: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1035.186813][T13417] bond18: left promiscuous mode [ 1035.202820][T13417] veth0_to_bond: left promiscuous mode [ 1035.326013][T13428] netlink: 192 bytes leftover after parsing attributes in process `syz.1.17852'. [ 1035.348604][T13428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17852'. [ 1035.476454][T13433] xfrm0 speed is unknown, defaulting to 1000 [ 1035.652498][T13448] netlink: 44 bytes leftover after parsing attributes in process `syz.0.17857'. [ 1035.679974][T13448] netlink: 35 bytes leftover after parsing attributes in process `syz.0.17857'. [ 1035.701305][T13448] netlink: 'syz.0.17857': attribute type 5 has an invalid length. [ 1035.748378][T13448] netlink: 'syz.0.17857': attribute type 6 has an invalid length. [ 1035.778844][T13448] netlink: 35 bytes leftover after parsing attributes in process `syz.0.17857'. [ 1037.085687][T13493] netlink: 76 bytes leftover after parsing attributes in process `syz.0.17874'. [ 1037.321816][T13496] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17876'. [ 1037.705095][T13507] xfrm0 speed is unknown, defaulting to 1000 [ 1039.560072][T13521] syzkaller0: entered promiscuous mode [ 1039.566940][T13521] syzkaller0: entered allmulticast mode [ 1039.718673][T13483] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1042.159812][T13544] tipc: Enabling of bearer rejected, failed to enable media [ 1042.434357][T13563] xfrm0 speed is unknown, defaulting to 1000 [ 1042.447738][T13565] netlink: 'syz.3.17894': attribute type 4 has an invalid length. [ 1042.514342][T13565] netlink: 'syz.3.17894': attribute type 4 has an invalid length. [ 1042.938391][T13584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17898'. [ 1043.033775][T13580] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1044.229460][ T10] xfrm0 speed is unknown, defaulting to 1000 [ 1044.253932][ T10] syz0: Port: 1 Link DOWN [ 1044.320823][T13603] syzkaller0: entered promiscuous mode [ 1044.333403][T13603] syzkaller0: entered allmulticast mode [ 1044.350607][ T1168] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1044.369096][ T1168] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.379384][ T1168] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1044.388030][ T1168] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.437535][ T10] xfrm0 speed is unknown, defaulting to 1000 [ 1044.582681][T13616] tls_set_device_offload: netdev not found [ 1044.621914][T13619] netlink: 'syz.0.17903': attribute type 4 has an invalid length. [ 1046.759609][ T1168] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1046.768201][ T1168] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.898988][ T13] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1046.920322][ T13] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.117489][T13650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17915'. [ 1047.160905][T13650] xt_TCPMSS: Only works on TCP SYN packets [ 1047.723110][T13680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17922'. [ 1048.854305][T13723] netlink: 'syz.2.17928': attribute type 10 has an invalid length. [ 1048.866307][T13723] team0: Port device veth1_to_hsr added [ 1049.169821][T13728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17929'. [ 1050.270369][T13656] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1050.480826][ T130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1050.500787][ T130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1051.526120][T13775] syzkaller0: entered promiscuous mode [ 1051.550883][T13775] syzkaller0: entered allmulticast mode [ 1052.339416][T13817] xfrm0 speed is unknown, defaulting to 1000 [ 1054.312322][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.968064][T13803] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1054.978513][T13798] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1055.323461][T13844] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17956'. [ 1055.339459][T13840] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1055.567665][T13844] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1055.665493][T13844] bond16 (unregistering): Released all slaves [ 1055.838125][T13867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17962'. [ 1056.025119][T13873] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17964'. [ 1056.597368][T13898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17970'. [ 1057.464192][T13920] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1057.512415][T13920] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1057.593878][T13920] debugfs: 'netdev:syzkaller0' already exists in 'phy14' [ 1057.935434][T13952] tipc: Failed to remove unknown binding: 66,0,0/134418688:1406721680/1406721682 [ 1057.963991][T13952] tipc: Failed to remove unknown binding: 66,0,0/134418688:1406721680/1406721681 [ 1057.980182][T13951] netlink: 180 bytes leftover after parsing attributes in process `syz.2.17986'. [ 1057.996917][T13952] tipc: Failed to remove unknown binding: 66,0,0/134418688:1406721680/1406721682 [ 1058.015400][T13952] tipc: Failed to remove unknown binding: 66,0,0/134418688:1406721680/1406721681 [ 1058.701137][T13970] batadv_slave_1: entered promiscuous mode [ 1058.900028][T13969] batadv_slave_1: left promiscuous mode [ 1059.622325][T14001] netlink: 'syz.4.17999': attribute type 4 has an invalid length. [ 1059.632678][T13999] tipc: Enabled bearer , priority 0 [ 1059.674855][T14004] syzkaller0: entered promiscuous mode [ 1059.693115][T14004] syzkaller0: entered allmulticast mode [ 1059.798283][T14006] tipc: Enabled bearer , priority 0 [ 1059.837296][T14003] tipc: Resetting bearer [ 1059.905858][T14003] tipc: Disabling bearer [ 1060.233180][T14022] xfrm0 speed is unknown, defaulting to 1000 [ 1060.505119][T14031] tipc: Resetting bearer [ 1060.936541][T14039] 1ªX¹¦À: left allmulticast mode [ 1061.060627][T14039] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 1061.097085][T14039] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 1061.149641][T14039] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1061.205584][T14047] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 1061.668369][T14069] syzkaller0: entered promiscuous mode [ 1061.682826][T14069] syzkaller0: entered allmulticast mode [ 1061.847900][T14076] netlink: 'syz.2.18021': attribute type 11 has an invalid length. [ 1062.207681][T14087] syzkaller0: entered promiscuous mode [ 1062.223205][T14087] syzkaller0: entered allmulticast mode [ 1062.620626][T14109] netlink: 'syz.3.18031': attribute type 1 has an invalid length. [ 1062.782274][T14109] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1062.813973][T14119] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18033'. [ 1062.856544][T14115] bond19: entered allmulticast mode [ 1062.944631][T14117] bond19: (slave ip6gretap2): making interface the new active one [ 1062.953210][T14117] ip6gretap2: entered allmulticast mode [ 1062.962299][T14117] bond19: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1063.098115][T14129] hmó3)ó: entered promiscuous mode [ 1063.423552][T14143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18039'. [ 1063.436431][T14141] syzkaller0: entered promiscuous mode [ 1063.450721][T14141] syzkaller0: entered allmulticast mode [ 1063.459684][T14143] team0: No ports can be present during mode change [ 1064.251813][T14154] netlink: 'syz.4.18044': attribute type 1 has an invalid length. [ 1064.502666][T14154] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18044'. [ 1064.746743][T14156] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1064.796537][T14156] bond16: (slave bond17): making interface the new active one [ 1064.827260][T14156] bond16: (slave bond17): Enslaving as an active interface with an up link [ 1065.013672][T14161] bond16: (slave gretap2): Enslaving as a backup interface with an up link [ 1065.049776][T14154] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1065.098559][T14177] tipc: Started in network mode [ 1065.115862][T14177] tipc: Node identity dec261aef09c, cluster identity 4711 [ 1065.132236][T14177] tipc: Enabled bearer , priority 0 [ 1065.150781][T14181] tap0: tun_chr_ioctl cmd 2148553947 [ 1065.237591][T14167] syzkaller0: entered promiscuous mode [ 1065.248974][T14167] syzkaller0: entered allmulticast mode [ 1065.275192][T14157] tipc: Resetting bearer [ 1065.359316][T14157] tipc: Disabling bearer [ 1065.543409][T14192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18051'. [ 1066.995042][T14229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18066'. [ 1067.191964][T14242] netlink: 20 bytes leftover after parsing attributes in process `syz.3.18068'. [ 1067.293386][T14246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18068'. [ 1067.308213][T14247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18069'. [ 1067.324264][T14247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18069'. [ 1067.480092][T14225] team0: left promiscuous mode [ 1067.485089][T14225] team_slave_0: left promiscuous mode [ 1067.499618][T14225] team_slave_1: left promiscuous mode [ 1067.507182][T14225] team0: left allmulticast mode [ 1067.528573][T14225] team_slave_0: left allmulticast mode [ 1067.540946][T14225] team_slave_1: left allmulticast mode [ 1067.564181][T14225] vlan0: left allmulticast mode [ 1067.586828][T14225] veth0_vlan: left allmulticast mode [ 1067.814180][T14225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1068.003645][T14225] vlan0: left promiscuous mode [ 1068.031909][T14225] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1068.371500][T14225] ip6gre2: left promiscuous mode [ 1068.376554][T14225] ip6gre2: left allmulticast mode [ 1068.393085][T14225] 0ªî{X¹¦: left allmulticast mode [ 1068.398540][T14225] macvlan2: left promiscuous mode [ 1068.404421][T14225] macvlan2: left allmulticast mode [ 1068.415239][T14225] hsr1: left allmulticast mode [ 1068.421214][T14225] batadv0: left allmulticast mode [ 1068.426320][T14225] veth1_to_hsr: left allmulticast mode [ 1068.442693][T14225] geneve3: left promiscuous mode [ 1068.447739][T14225] geneve3: left allmulticast mode [ 1068.458260][T14225] geneve4: left promiscuous mode [ 1068.463538][T14225] geneve4: left allmulticast mode [ 1068.472817][T14225] geneve5: left promiscuous mode [ 1068.526402][T14225] gretap1: left allmulticast mode [ 1068.604105][T14225] gretap3: left promiscuous mode [ 1068.612270][T14225] bond9: left allmulticast mode [ 1068.617377][T14225] bond10: left promiscuous mode [ 1068.625147][T14225] ipvlan1: left allmulticast mode [ 1068.632144][T14225] bond11: left allmulticast mode [ 1068.740089][ T5966] syz2: Port: 1 Link DOWN [ 1068.745962][ T13] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1068.784500][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.816649][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 1068.854926][ T13] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1068.887662][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.916230][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 1069.014153][T14254] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 47435 - 0 [ 1069.052619][T14266] netlink: 36 bytes leftover after parsing attributes in process `syz.4.18073'. [ 1069.071259][ T13] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1069.087628][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.115951][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 1069.173949][ T13] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1069.202092][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.225491][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 1069.307923][T14254] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 47435 - 0 [ 1069.810525][T14254] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 47435 - 0 [ 1070.027116][T14254] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 47435 - 0 [ 1070.027906][T14284] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18080'. [ 1070.898656][T14290] bond18: entered promiscuous mode [ 1070.927236][T14290] bond18: entered allmulticast mode [ 1071.281519][ T130] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 47435 - 0 [ 1071.326301][ T144] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 47435 - 0 [ 1071.386080][T14304] tipc: Enabling of bearer rejected, already enabled [ 1071.412670][ T130] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 47435 - 0 [ 1071.460608][ T130] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 47435 - 0 [ 1071.652321][T14318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18086'. [ 1071.728512][T14318] netlink: 'syz.2.18086': attribute type 5 has an invalid length. [ 1071.754526][T14318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18086'. [ 1071.991771][T14327] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 1072.009129][T14327] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 1072.731879][T14343] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18092'. [ 1072.741828][T14343] netlink: 'syz.1.18092': attribute type 7 has an invalid length. [ 1072.751231][T14343] netlink: 'syz.1.18092': attribute type 8 has an invalid length. [ 1072.760453][T14343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18092'. [ 1073.373024][T14359] syzkaller0: entered promiscuous mode [ 1073.388968][T14359] syzkaller0: entered allmulticast mode [ 1073.580896][T14361] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1074.480606][T14383] syzkaller0: entered promiscuous mode [ 1074.486921][T14383] syzkaller0: entered allmulticast mode [ 1074.880187][T14388] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 1074.887640][T14388] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 1076.766359][T14365] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1077.002543][T14409] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18114'. [ 1077.333309][T14428] netlink: 76 bytes leftover after parsing attributes in process `syz.0.18120'. [ 1077.355279][T14430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18121'. [ 1077.378457][T14430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18121'. [ 1077.568173][T14436] syzkaller0: entered promiscuous mode [ 1077.582303][T14436] syzkaller0: entered allmulticast mode [ 1077.608164][T14436] tipc: Enabled bearer , priority 0 [ 1077.622629][T14435] tipc: Resetting bearer [ 1077.641419][T14441] netlink: 'syz.3.18126': attribute type 1 has an invalid length. [ 1077.671757][T14435] tipc: Disabling bearer [ 1077.735524][T14443] bond20: (slave bridge13): Enslaving as a backup interface with an up link [ 1077.789651][T14441] macvlan0: entered promiscuous mode [ 1077.795045][T14441] macvlan0: entered allmulticast mode [ 1077.801589][T14441] bond20: entered promiscuous mode [ 1077.807039][T14441] bridge13: entered promiscuous mode [ 1077.831885][T14441] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1077.845279][T14441] bond20: left promiscuous mode [ 1077.860119][T14441] bridge13: left promiscuous mode [ 1078.062150][T14449] syzkaller0: entered promiscuous mode [ 1078.067825][T14449] syzkaller0: entered allmulticast mode [ 1078.092553][T14449] tipc: Enabled bearer , priority 0 [ 1078.103843][T14448] tipc: Resetting bearer [ 1078.110266][T14455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18131'. [ 1078.156386][T14448] tipc: Disabling bearer [ 1078.483536][T14471] syzkaller0: entered promiscuous mode [ 1078.490711][T14471] syzkaller0: entered allmulticast mode [ 1078.647525][T14478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18140'. [ 1078.665699][T14478] hsr_slave_0: left promiscuous mode [ 1078.689230][T14478] hsr_slave_1: left promiscuous mode [ 1079.061310][T14495] xfrm0 speed is unknown, defaulting to 1000 [ 1079.600937][T14501] syzkaller0: entered promiscuous mode [ 1079.615548][T14501] syzkaller0: entered allmulticast mode [ 1080.536280][T14505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18149'. [ 1080.574138][T14507] veth0_macvtap: Caught tx_queue_len zero misconfig [ 1082.250173][T14534] syzkaller0: entered promiscuous mode [ 1082.255830][T14534] syzkaller0: entered allmulticast mode [ 1082.907842][T14549] syzkaller0: entered promiscuous mode [ 1082.920232][T14549] syzkaller0: entered allmulticast mode [ 1083.143425][T14561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18168'. [ 1084.060136][T14578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18172'. [ 1084.445997][T14591] netlink: 'syz.1.18177': attribute type 13 has an invalid length. [ 1084.601960][T14598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18177'. [ 1084.641187][T14594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18178'. [ 1085.018102][T14603] syzkaller0: entered promiscuous mode [ 1085.025098][T14603] syzkaller0: entered allmulticast mode [ 1090.836894][T14666] bond4: option mode: unable to set because the bond device has slaves [ 1090.874263][T14666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18191'. [ 1090.899012][T14666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18191'. [ 1090.927009][T14667] netlink: 'syz.0.18191': attribute type 4 has an invalid length. [ 1090.949231][T14667] netlink: 152 bytes leftover after parsing attributes in process `syz.0.18191'. [ 1090.987472][T14667] .`: renamed from bond0 [ 1092.107695][T14681] xfrm0 speed is unknown, defaulting to 1000 [ 1093.071352][T14658] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1093.314646][T14688] syzkaller0: entered promiscuous mode [ 1093.328800][T14688] syzkaller0: entered allmulticast mode [ 1093.824174][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1093.847763][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1093.856181][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1093.866383][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1093.885233][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1094.301623][ T5875] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1094.319092][ T5875] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1094.330425][ T5875] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1094.341542][ T5875] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1094.349464][ T5875] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1094.527037][T14717] lo: Caught tx_queue_len zero misconfig [ 1094.987515][T14724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18206'. [ 1095.024025][T14724] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18206'. [ 1095.227707][T14698] xfrm0 speed is unknown, defaulting to 1000 [ 1095.260837][T14732] syzkaller0: entered promiscuous mode [ 1095.283669][T14732] syzkaller0: entered allmulticast mode [ 1095.629778][T14737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18208'. [ 1095.665293][T14739] netlink: 'syz.1.18209': attribute type 1 has an invalid length. [ 1095.929605][T14739] bond12: entered promiscuous mode [ 1095.947255][T14739] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1095.970742][T14742] bond21: entered promiscuous mode [ 1095.982348][T14742] bond21: entered allmulticast mode [ 1095.989721][ T50] Bluetooth: hci5: command tx timeout [ 1096.041666][T14743] vlan6: entered allmulticast mode [ 1096.058929][T14743] bond12: entered allmulticast mode [ 1096.090746][T14744] bond12: (slave bridge16): making interface the new active one [ 1096.098624][T14744] bridge16: entered promiscuous mode [ 1096.104413][T14744] bridge16: entered allmulticast mode [ 1096.112766][T14744] bond12: (slave bridge16): Enslaving as an active interface with an up link [ 1096.207572][T14708] xfrm0 speed is unknown, defaulting to 1000 [ 1096.342571][T14751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18211'. [ 1096.443672][T14751] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1096.469058][ T50] Bluetooth: hci6: command tx timeout [ 1096.483339][T14754] bond13: entered promiscuous mode [ 1096.519431][T14754] bond13: entered allmulticast mode [ 1096.576109][T14754] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1096.601847][T14754] team0: Port device bond13 added [ 1096.646573][T14751] team_slave_1: entered promiscuous mode [ 1096.669366][T14751] team0: Port device team_slave_1 removed [ 1096.708166][T14751] team_slave_1: entered allmulticast mode [ 1096.745387][T14751] bond13: (slave team_slave_1): Enslaving as an active interface with an up link [ 1097.905720][T14772] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18215'. [ 1098.069802][ T50] Bluetooth: hci5: command tx timeout [ 1098.163079][T14784] netlink: 'syz.0.18217': attribute type 1 has an invalid length. [ 1098.301983][T14784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1098.447288][T14789] bond0: (slave veth11): Enslaving as an active interface with a down link [ 1098.481265][T14791] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1098.494865][T14794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18218'. [ 1098.504075][T14791] bond0: (slave batadv1): making interface the new active one [ 1098.511981][T14791] batadv1: entered promiscuous mode [ 1098.517863][T14791] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 1098.548886][ T50] Bluetooth: hci6: command tx timeout [ 1098.614195][T14784] bond0 (unregistering): (slave veth11): Releasing active interface [ 1098.673085][T14784] bond0 (unregistering): (slave batadv1): Releasing active interface [ 1098.700984][T14784] bond0 (unregistering): Released all slaves [ 1098.962772][T14802] netlink: 'syz.2.18222': attribute type 1 has an invalid length. [ 1099.061530][T14802] bond22: entered promiscuous mode [ 1099.073263][T14802] 8021q: adding VLAN 0 to HW filter on device bond22 [ 1099.210335][T14802] bond22: (slave bridge18): making interface the new active one [ 1099.240444][T14802] bridge18: entered promiscuous mode [ 1099.286518][T14802] bond22: (slave bridge18): Enslaving as an active interface with an up link [ 1099.492372][T14814] netlink: 'syz.2.18224': attribute type 1 has an invalid length. [ 1099.635194][T14814] bond23: entered promiscuous mode [ 1099.648295][T14814] 8021q: adding VLAN 0 to HW filter on device bond23 [ 1099.679972][T14816] vlan5: entered allmulticast mode [ 1099.685298][T14816] bond23: entered allmulticast mode [ 1099.775777][T14818] bond23: (slave bridge19): making interface the new active one [ 1099.799115][T14818] bridge19: entered promiscuous mode [ 1099.809455][T14818] bridge19: entered allmulticast mode [ 1099.823095][T14818] bond23: (slave bridge19): Enslaving as an active interface with an up link [ 1100.056413][T14832] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18229'. [ 1100.149414][ T50] Bluetooth: hci5: command tx timeout [ 1100.493106][T14698] bridge0: port 1(bridge_slave_0) entered blocking state [ 1100.513320][T14698] bridge0: port 1(bridge_slave_0) entered disabled state [ 1100.532905][T14698] bridge_slave_0: entered allmulticast mode [ 1100.561631][T14698] bridge_slave_0: entered promiscuous mode [ 1100.575989][T14698] bridge0: port 2(bridge_slave_1) entered blocking state [ 1100.595295][T14698] bridge0: port 2(bridge_slave_1) entered disabled state [ 1100.609248][T14698] bridge_slave_1: entered allmulticast mode [ 1100.627483][T14698] bridge_slave_1: entered promiscuous mode [ 1100.633738][ T50] Bluetooth: hci6: command tx timeout [ 1100.838973][T14698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1100.889098][T14698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1101.091090][T14698] team0: Port device team_slave_0 added [ 1101.165714][T14698] team0: Port device team_slave_1 added [ 1101.250978][T14846] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 47435 - 0 [ 1101.316504][T14698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1101.335694][T14698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1101.364076][T14698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1101.402844][T14846] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 47435 - 0 [ 1101.431783][T14852] bond4: (slave lo): Releasing backup interface [ 1101.439436][T14852] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1101.456423][T14852] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1101.472658][T14853] syzkaller0: entered promiscuous mode [ 1101.482670][T14853] syzkaller0: entered allmulticast mode [ 1101.492231][T14698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1101.501405][T14698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1101.528817][T14698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1101.565927][T14854] team0: No ports can be present during mode change [ 1101.906145][T14846] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 47435 - 0 [ 1102.090210][T14846] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 47435 - 0 [ 1102.128848][T14698] hsr_slave_0: entered promiscuous mode [ 1102.143239][T14698] hsr_slave_1: entered promiscuous mode [ 1102.165315][T14698] debugfs: 'hsr0' already exists in 'hsr' [ 1102.180140][T14698] Cannot create hsr debugfs directory [ 1102.228780][ T50] Bluetooth: hci5: command tx timeout [ 1102.379058][T14708] bridge0: port 1(bridge_slave_0) entered blocking state [ 1102.396308][T14708] bridge0: port 1(bridge_slave_0) entered disabled state [ 1102.415094][T14708] bridge_slave_0: entered allmulticast mode [ 1102.430219][T14708] bridge_slave_0: entered promiscuous mode [ 1102.473631][T14708] bridge0: port 2(bridge_slave_1) entered blocking state [ 1102.488918][T14708] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.506407][T14708] bridge_slave_1: entered allmulticast mode [ 1102.520864][T14708] bridge_slave_1: entered promiscuous mode [ 1102.614109][ T130] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 47435 - 0 [ 1102.709141][ T50] Bluetooth: hci6: command tx timeout [ 1102.715892][ T156] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 47435 - 0 [ 1102.728502][T14869] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18236'. [ 1102.738463][T14869] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18236'. [ 1102.783087][T14708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1102.916836][T14708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1102.929195][ T130] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 47435 - 0 [ 1103.121897][ T1168] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 47435 - 0 [ 1103.176944][T14708] team0: Port device team_slave_0 added [ 1103.198156][T14708] team0: Port device team_slave_1 added [ 1103.396166][T14708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1103.415940][T14708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1103.444948][T14708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1103.462021][T14878] syzkaller0: entered promiscuous mode [ 1103.469227][T14878] syzkaller0: entered allmulticast mode [ 1103.484565][T14708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1103.494898][T14708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1103.523491][T14708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1103.916915][T14708] hsr_slave_0: entered promiscuous mode [ 1103.938377][T14708] hsr_slave_1: entered promiscuous mode [ 1103.956264][T14708] debugfs: 'hsr0' already exists in 'hsr' [ 1103.969337][T14708] Cannot create hsr debugfs directory [ 1103.983878][T14891] netlink: 'syz.1.18242': attribute type 2 has an invalid length. [ 1104.002379][T14891] tipc: Cannot configure node identity twice [ 1104.157880][T14698] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1104.194243][T14698] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1104.262317][T14899] pimreg: entered allmulticast mode [ 1104.286388][T14698] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1104.315099][T14698] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1104.402634][T14698] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1104.434433][T14698] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1104.461416][T14698] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1104.496118][T14698] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1104.839048][T14927] netlink: 'syz.0.18251': attribute type 4 has an invalid length. [ 1104.882550][T14929] netlink: 76 bytes leftover after parsing attributes in process `syz.2.18252'. [ 1104.883703][T14927] netlink: 'syz.0.18251': attribute type 4 has an invalid length. [ 1105.321007][T14708] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1105.359763][T14708] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1105.373379][T14708] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1105.387692][T14708] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1105.412099][T14946] netlink: 'syz.0.18256': attribute type 1 has an invalid length. [ 1105.440527][T14708] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1105.590555][T14708] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1105.610038][T14708] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1105.624094][T14708] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1105.644886][T14938] netlink: 'syz.0.18256': attribute type 1 has an invalid length. [ 1105.771252][T14698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1105.833715][T14698] 8021q: adding VLAN 0 to HW filter on device team0 [ 1105.873965][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 1105.881216][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1105.891856][T14956] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1105.952630][ T130] bridge0: port 2(bridge_slave_1) entered blocking state [ 1105.959871][ T130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1106.252789][T14708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1106.322079][T14708] 8021q: adding VLAN 0 to HW filter on device team0 [ 1106.378251][T13374] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.385506][T13374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1106.453944][T13374] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.461197][T13374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1107.046941][T14980] tipc: Enabled bearer , priority 0 [ 1107.073577][T14980] syzkaller0: entered promiscuous mode [ 1107.095964][T14980] syzkaller0: entered allmulticast mode [ 1107.164328][T14980] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 1107.199105][T14980] tipc: Resetting bearer [ 1107.235391][T14977] tipc: Resetting bearer [ 1107.332866][T14977] tipc: Disabling bearer [ 1107.428143][T14698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1107.649890][T14996] tipc: Enabled bearer , priority 0 [ 1107.697260][T14996] syzkaller0: entered promiscuous mode [ 1107.729231][T14996] syzkaller0: entered allmulticast mode [ 1107.853960][T15003] team_slave_1: Caught tx_queue_len zero misconfig [ 1107.917895][T14999] tipc: Resetting bearer [ 1107.977350][T14993] tipc: Resetting bearer [ 1108.052450][T14993] tipc: Disabling bearer [ 1108.112335][T14708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1108.190958][T15010] syzkaller0: entered promiscuous mode [ 1108.217952][T15010] syzkaller0: entered allmulticast mode [ 1108.390452][T15010] tipc: Enabled bearer , priority 0 [ 1108.430876][T15009] tipc: Resetting bearer [ 1108.523252][T15009] tipc: Disabling bearer [ 1108.641340][T14698] veth0_vlan: entered promiscuous mode [ 1108.686410][T14698] veth1_vlan: entered promiscuous mode [ 1108.833344][T14698] veth0_macvtap: entered promiscuous mode [ 1108.873351][T15030] syzkaller0: entered promiscuous mode [ 1108.890338][T15030] syzkaller0: entered allmulticast mode [ 1108.904202][T14698] veth1_macvtap: entered promiscuous mode [ 1109.204592][T15035] syzkaller0: entered promiscuous mode [ 1109.219029][T15035] syzkaller0: entered allmulticast mode [ 1109.250202][T15040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18274'. [ 1109.275309][T14698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1109.313929][T14698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1109.393233][ T1168] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.404299][ T1168] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.416900][T15042] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18276'. [ 1109.885628][T14708] veth0_vlan: entered promiscuous mode [ 1109.892278][ T1168] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.908596][ T1168] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.014815][T14708] veth1_vlan: entered promiscuous mode [ 1111.227647][T15051] syzkaller0: entered promiscuous mode [ 1111.250440][T15051] syzkaller0: entered allmulticast mode [ 1111.308146][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1111.332883][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1111.501728][T15065] syzkaller0: entered promiscuous mode [ 1111.518065][T15065] syzkaller0: entered allmulticast mode [ 1111.562415][T14708] veth0_macvtap: entered promiscuous mode [ 1111.684783][T14708] veth1_macvtap: entered promiscuous mode [ 1111.707676][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1111.738676][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1111.794663][T14708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1111.845593][T14708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1111.886989][T15079] netlink: 'syz.2.18287': attribute type 1 has an invalid length. [ 1111.898333][ T1168] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.932516][ T1168] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.963329][ T1168] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.108763][T15079] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18287'. [ 1112.141364][T15080] bond24: (slave veth21): Enslaving as an active interface with a down link [ 1112.159927][ T1168] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.974298][T15082] bond24: (slave veth23): Enslaving as an active interface with a down link [ 1113.027650][T15079] 8021q: adding VLAN 0 to HW filter on device bond24 [ 1113.172313][T15089] syzkaller0: entered promiscuous mode [ 1113.200520][T15089] syzkaller0: entered allmulticast mode [ 1113.456119][T15095] netlink: 'syz.0.18290': attribute type 1 has an invalid length. [ 1113.544698][T15100] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18290'. [ 1113.639155][T15100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1113.709509][T15102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1113.746579][T15102] bond0: (slave geneve6): making interface the new active one [ 1113.769200][T15102] bond0: (slave geneve6): Enslaving as an active interface with an up link [ 1113.802497][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1113.824866][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1113.867109][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1113.875217][T13374] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1113.901466][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1113.918215][T13374] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1114.064984][ T130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1114.092021][ T130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1114.167890][T15110] netlink: 52 bytes leftover after parsing attributes in process `syz.1.18295'. [ 1114.209230][T15110] netlink: 'syz.1.18295': attribute type 1 has an invalid length. [ 1114.230823][T15114] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18296'. [ 1114.398507][T15114] veth3: entered allmulticast mode [ 1114.501065][T15122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18298'. [ 1114.537829][T15121] syzkaller0: entered promiscuous mode [ 1114.555689][T15121] syzkaller0: entered allmulticast mode [ 1114.669214][T15126] netlink: 'syz.1.18298': attribute type 10 has an invalid length. [ 1114.712246][T15126] netlink: 40 bytes leftover after parsing attributes in process `syz.1.18298'. [ 1114.840365][T15129] netlink: 140 bytes leftover after parsing attributes in process `syz.5.18301'. [ 1114.867246][T15129] netlink: 28 bytes leftover after parsing attributes in process `syz.5.18301'. [ 1115.123580][T15142] netlink: 20 bytes leftover after parsing attributes in process `syz.6.18303'. [ 1115.213058][T15142] netlink: 20 bytes leftover after parsing attributes in process `syz.6.18303'. [ 1115.265351][T15138] tipc: Resetting bearer [ 1115.466388][T15154] netlink: 'syz.1.18307': attribute type 1 has an invalid length. [ 1115.936178][T15154] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1116.120558][T15159] vlan7: entered allmulticast mode [ 1116.141744][T15159] veth0_to_bond: entered allmulticast mode [ 1116.171266][T15159] bond14: (slave vlan7): Opening slave failed [ 1117.437567][T15204] netlink: 284 bytes leftover after parsing attributes in process `syz.6.18313'. [ 1117.496259][T15195] syzkaller0: entered promiscuous mode [ 1117.520543][T15195] syzkaller0: entered allmulticast mode [ 1117.682215][T15210] syzkaller0: entered promiscuous mode [ 1117.709303][T15210] syzkaller0: entered allmulticast mode [ 1122.015905][T15265] xfrm0 speed is unknown, defaulting to 1000 [ 1122.023896][T15276] tipc: Enabled bearer , priority 0 [ 1122.042517][T15276] syzkaller0: entered promiscuous mode [ 1122.066475][T15276] syzkaller0: entered allmulticast mode [ 1122.105294][T15273] syzkaller0: entered promiscuous mode [ 1122.118673][T15273] syzkaller0: entered allmulticast mode [ 1122.139063][T15276] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1122.600769][T15283] tipc: Resetting bearer [ 1122.772517][T15274] tipc: Resetting bearer [ 1122.892839][T15274] tipc: Disabling bearer [ 1122.992005][T15285] xfrm0 speed is unknown, defaulting to 1000 [ 1123.110541][T15290] netlink: zone id is out of range [ 1123.131667][T15290] netlink: zone id is out of range [ 1123.158929][T15290] netlink: zone id is out of range [ 1123.183709][T15294] netlink: 'syz.6.18330': attribute type 1 has an invalid length. [ 1123.187894][T15290] netlink: zone id is out of range [ 1123.223587][T15290] netlink: zone id is out of range [ 1123.239017][T15290] netlink: zone id is out of range [ 1123.246106][T15290] netlink: zone id is out of range [ 1123.266620][T15290] netlink: zone id is out of range [ 1123.297756][T15290] netlink: zone id is out of range [ 1123.317523][T15296] vlan2: entered promiscuous mode [ 1123.325775][T15290] netlink: zone id is out of range [ 1123.336156][T15296] veth0_to_bridge: entered promiscuous mode [ 1123.336729][T15294] netlink: 44 bytes leftover after parsing attributes in process `syz.6.18330'. [ 1123.358456][T15296] vlan2: entered allmulticast mode [ 1123.385355][T15296] veth0_to_bridge: entered allmulticast mode [ 1123.631289][T15300] syzkaller0: entered promiscuous mode [ 1123.652885][T15300] syzkaller0: entered allmulticast mode [ 1124.011266][T15306] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.020726][T15306] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.258312][T15306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1124.292194][T15306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1124.614819][T15314] tipc: Enabled bearer , priority 0 [ 1124.655249][ T144] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.699368][ T144] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.736548][T15317] syzkaller0: entered promiscuous mode [ 1124.756740][T15317] syzkaller0: entered allmulticast mode [ 1124.776225][ T1168] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.809903][ T1168] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.910519][T15309] tipc: Resetting bearer [ 1124.946993][T15333] netlink: 'syz.6.18337': attribute type 1 has an invalid length. [ 1125.019997][T15309] tipc: Disabling bearer [ 1125.131887][T15333] gretap1: entered promiscuous mode [ 1125.487868][T15340] syzkaller0: entered promiscuous mode [ 1125.504483][T15340] syzkaller0: entered allmulticast mode [ 1126.433242][T15346] netlink: 24 bytes leftover after parsing attributes in process `syz.5.18342'. [ 1127.209472][T15362] syzkaller0: entered promiscuous mode [ 1127.228803][T15362] syzkaller0: entered allmulticast mode [ 1127.519137][T15357] xfrm0 speed is unknown, defaulting to 1000 [ 1127.736861][T15359] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18345'. [ 1128.715419][T15380] syzkaller0: entered promiscuous mode [ 1128.736720][T15380] syzkaller0: entered allmulticast mode [ 1130.630484][T15370] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1131.065367][T15400] tipc: Started in network mode [ 1131.095293][T15400] tipc: Node identity 46d297fddf1d, cluster identity 4711 [ 1131.150598][T15400] tipc: Enabled bearer , priority 0 [ 1131.193639][T15405] syzkaller0: entered promiscuous mode [ 1131.225467][T15405] syzkaller0: entered allmulticast mode [ 1131.312659][T15400] tipc: Resetting bearer [ 1131.355808][T15399] tipc: Resetting bearer [ 1131.433222][T15413] netlink: 'syz.2.18357': attribute type 10 has an invalid length. [ 1131.449518][T15399] tipc: Disabling bearer [ 1131.460886][T15413] netlink: 228 bytes leftover after parsing attributes in process `syz.2.18357'. [ 1131.515226][T15404] xfrm0 speed is unknown, defaulting to 1000 [ 1131.694402][T15413] lo: Caught tx_queue_len zero misconfig [ 1131.733291][T15416] netlink: 'syz.5.18358': attribute type 1 has an invalid length. [ 1131.861907][T15416] vlan2: entered promiscuous mode [ 1131.924037][T15416] vlan2: entered allmulticast mode [ 1131.975356][T15416] veth0_macvtap: entered allmulticast mode [ 1132.685072][T15430] syzkaller0: entered promiscuous mode [ 1132.705938][T15430] syzkaller0: entered allmulticast mode [ 1132.786757][T15429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18362'. [ 1133.499797][T15443] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18365'. [ 1133.538955][T15443] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18365'. [ 1134.423245][T15457] xt_hashlimit: size too large, truncated to 1048576 [ 1137.315263][T15480] syzkaller0: entered promiscuous mode [ 1137.329525][T15480] syzkaller0: entered allmulticast mode [ 1137.352218][T15480] tipc: Enabled bearer , priority 0 [ 1137.380677][T15480] tipc: Resetting bearer [ 1137.413417][T15479] tipc: Resetting bearer [ 1137.501282][T15479] tipc: Disabling bearer [ 1138.174911][T15496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18381'. [ 1138.211071][T15495] netlink: 'syz.5.18384': attribute type 83 has an invalid length. [ 1138.283990][T15496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1138.768004][T15504] netlink: 'syz.5.18387': attribute type 17 has an invalid length. [ 1139.043688][T15513] tipc: Enabled bearer , priority 5 [ 1139.546658][T15521] tipc: Enabled bearer , priority 0 [ 1139.574408][T15521] syzkaller0: entered promiscuous mode [ 1139.596986][T15521] syzkaller0: entered allmulticast mode [ 1139.634567][T15521] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1139.705770][T15521] tipc: Resetting bearer [ 1139.730396][T15520] tipc: Resetting bearer [ 1139.802035][T15520] tipc: Disabling bearer [ 1140.100901][T15533] netlink: 550 bytes leftover after parsing attributes in process `syz.2.18395'. [ 1140.178367][ T5797] tipc: Node number set to 2580518909 [ 1142.118590][ T5875] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1142.146802][ T5875] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1142.155854][ T5875] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1142.176854][ T5875] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1142.205045][ T5875] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1143.969345][T15566] netlink: 'syz.5.18400': attribute type 16 has an invalid length. [ 1144.274410][T15578] netlink: 'syz.0.18403': attribute type 10 has an invalid length. [ 1144.284118][T15570] netlink: 196 bytes leftover after parsing attributes in process `syz.2.18401'. [ 1144.320515][ T5875] Bluetooth: hci7: command tx timeout [ 1144.344666][T15578] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1144.373517][T15578] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 1144.430994][T15578] team0: Failed to send options change via netlink (err -105) [ 1144.476520][T15578] team0: Port device netdevsim1 added [ 1144.518820][T15573] tipc: Enabled bearer , priority 0 [ 1144.535889][T15579] syzkaller0: entered promiscuous mode [ 1144.562248][T15579] syzkaller0: entered allmulticast mode [ 1144.670237][T15577] xfrm0 speed is unknown, defaulting to 1000 [ 1144.723347][T15573] tipc: Resetting bearer [ 1144.797163][T15572] tipc: Resetting bearer [ 1144.949181][T15572] tipc: Disabling bearer [ 1145.423525][T15556] xfrm0 speed is unknown, defaulting to 1000 [ 1145.432885][T15595] tipc: Enabled bearer , priority 0 [ 1145.473847][T15593] syzkaller0: entered promiscuous mode [ 1145.490771][T15593] syzkaller0: entered allmulticast mode [ 1145.646284][T15593] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1145.748252][T15595] tipc: Resetting bearer [ 1145.883699][T15592] tipc: Resetting bearer [ 1145.939955][T15592] tipc: Disabling bearer [ 1146.362770][T13374] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.389364][ T5875] Bluetooth: hci7: command tx timeout [ 1146.403434][T15611] syzkaller0: entered promiscuous mode [ 1146.412975][T15611] syzkaller0: entered allmulticast mode [ 1146.686090][T11880] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.803076][T13374] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.024149][T11880] netdevsim netdevsim6 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.128400][ T144] bridge_slave_1: left allmulticast mode [ 1147.171502][ T144] bridge_slave_1: left promiscuous mode [ 1147.210914][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 1147.256287][ T144] bridge_slave_0: left allmulticast mode [ 1147.270859][ T144] bridge_slave_0: left promiscuous mode [ 1147.283153][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 1147.682611][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1147.703638][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1147.724521][ T144] bond0 (unregistering): Released all slaves [ 1147.773068][T15638] netlink: 84 bytes leftover after parsing attributes in process `syz.0.18413'. [ 1147.800874][ T5295] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1148.296920][T15653] netlink: 'syz.0.18417': attribute type 27 has an invalid length. [ 1148.470530][ T5875] Bluetooth: hci7: command tx timeout [ 1148.700778][T15662] syzkaller0: entered promiscuous mode [ 1148.738987][T15662] syzkaller0: entered allmulticast mode [ 1148.924479][T15668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18420'. [ 1149.642735][T15689] netlink: 'syz.2.18423': attribute type 10 has an invalid length. [ 1150.549460][ T5875] Bluetooth: hci7: command tx timeout [ 1153.930619][T15725] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1155.357652][ T5295] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1155.375738][T15697] tipc: Disabling bearer [ 1155.383927][T15697] team0 (unregistering): Port device geneve1 removed [ 1155.422627][T15697] team0 (unregistering): Port device veth1_to_hsr removed [ 1155.468915][ T144] hsr_slave_0: left promiscuous mode [ 1155.481915][ T144] hsr_slave_1: left promiscuous mode [ 1155.501064][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1155.515703][T15727] netlink: 64 bytes leftover after parsing attributes in process `syz.0.18429'. [ 1155.529821][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1155.574352][T15729] netlink: 'syz.2.18430': attribute type 1 has an invalid length. [ 1155.906306][ T144] team0 (unregistering): Port device team_slave_1 removed [ 1155.940866][ T144] team0 (unregistering): Port device team_slave_0 removed [ 1156.251899][T15731] bond25: (slave geneve7): Opening slave failed [ 1156.268389][T15733] bond25 (unregistering): Released all slaves [ 1156.905612][T15755] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18434'. [ 1156.987934][T15755] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18434'. [ 1157.196391][T15556] bridge0: port 1(bridge_slave_0) entered blocking state [ 1157.203983][T15556] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.211920][T15556] bridge_slave_0: entered allmulticast mode [ 1157.220459][T15556] bridge_slave_0: entered promiscuous mode [ 1157.238976][T15556] bridge0: port 2(bridge_slave_1) entered blocking state [ 1157.246306][T15556] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.254281][T15556] bridge_slave_1: entered allmulticast mode [ 1157.262799][T15556] bridge_slave_1: entered promiscuous mode [ 1157.332300][T15556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1157.346521][T15556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1157.454650][T15556] team0: Port device team_slave_0 added [ 1157.482469][T15556] team0: Port device team_slave_1 added [ 1157.584715][T15556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1157.606116][T15556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1157.651060][T15556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1157.677871][T15772] netlink: 76 bytes leftover after parsing attributes in process `syz.2.18437'. [ 1157.711137][T15556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1157.726505][T15556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1157.808106][T15556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1157.887173][T15776] syzkaller0: entered promiscuous mode [ 1157.893569][T15776] syzkaller0: entered allmulticast mode [ 1158.226641][T15781] xfrm0 speed is unknown, defaulting to 1000 [ 1158.284467][T15556] hsr_slave_0: entered promiscuous mode [ 1158.304986][T15556] hsr_slave_1: entered promiscuous mode [ 1158.327658][T15556] debugfs: 'hsr0' already exists in 'hsr' [ 1158.338555][T15556] Cannot create hsr debugfs directory [ 1158.358971][ T5295] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1158.392636][T15788] syzkaller0: entered promiscuous mode [ 1158.416079][T15788] syzkaller0: entered allmulticast mode [ 1159.115949][T15803] netlink: 'syz.5.18442': attribute type 1 has an invalid length. [ 1159.295679][T15803] bond1: entered promiscuous mode [ 1159.301471][T15803] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1159.363310][T15809] macvtap1: entered allmulticast mode [ 1159.415419][T15812] macvtap2: entered allmulticast mode [ 1159.549873][T15803] bond1: (slave bridge1): making interface the new active one [ 1159.582584][T15803] bridge1: entered promiscuous mode [ 1159.617991][T15803] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1159.648410][T15817] netlink: 132 bytes leftover after parsing attributes in process `syz.2.18444'. [ 1160.204792][T15821] bond2: entered promiscuous mode [ 1160.364163][T15834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18447'. [ 1160.525782][ T5295] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1160.558019][T15556] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1160.637139][T15556] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1160.662886][T15556] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1160.682788][T15556] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1160.691572][T15837] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18448'. [ 1160.702797][T15556] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1160.732076][T15556] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1160.751600][T15556] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1160.782189][T15556] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1160.805587][T15837] ipvlan2: entered allmulticast mode [ 1160.812545][T15837] syz_tun: entered allmulticast mode [ 1161.246910][T15854] tipc: Enabled bearer , priority 0 [ 1161.284818][T15854] syzkaller0: entered promiscuous mode [ 1161.303149][T15854] syzkaller0: entered allmulticast mode [ 1161.355144][T15556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1161.492540][T15854] tipc: Resetting bearer [ 1161.526823][T15860] xfrm0 speed is unknown, defaulting to 1000 [ 1161.551578][T15852] tipc: Resetting bearer [ 1161.629576][T15852] tipc: Disabling bearer [ 1161.702021][T15556] 8021q: adding VLAN 0 to HW filter on device team0 [ 1161.781551][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1161.788795][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1161.993512][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1162.000858][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1162.041514][T15872] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18453'. [ 1162.067167][T15869] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18454'. [ 1162.119418][T15871] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18454'. [ 1162.421481][T15876] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18455'. [ 1162.643464][T15878] vlan2: entered allmulticast mode [ 1162.667097][T15878] bridge11: entered allmulticast mode [ 1162.685476][T15876] bridge11: port 1(erspan0) entered blocking state [ 1162.719380][T15876] bridge11: port 1(erspan0) entered disabled state [ 1162.737262][T15876] erspan0: entered allmulticast mode [ 1162.764234][T15876] erspan0: left allmulticast mode [ 1162.995287][T15888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18458'. [ 1163.045645][T15888] netlink: 'syz.0.18458': attribute type 10 has an invalid length. [ 1163.346809][T15897] netlink: 52 bytes leftover after parsing attributes in process `syz.5.18459'. [ 1163.664276][T15902] syzkaller0: entered promiscuous mode [ 1163.684175][T15902] syzkaller0: entered allmulticast mode [ 1163.733400][T15556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1164.603688][T15556] veth0_vlan: entered promiscuous mode [ 1164.640869][T15556] veth1_vlan: entered promiscuous mode [ 1164.909060][T15923] syz_tun: entered promiscuous mode [ 1164.929876][T15923] macsec1: entered promiscuous mode [ 1164.952970][T15923] syz_tun: left promiscuous mode [ 1165.117827][T15924] tun0: tun_chr_ioctl cmd 1074025675 [ 1165.130506][T15924] tun0: persist enabled [ 1165.144693][T15920] tun0: tun_chr_ioctl cmd 1074025675 [ 1165.158327][T15920] tun0: persist enabled [ 1165.164188][T15556] veth0_macvtap: entered promiscuous mode [ 1165.173061][T15921] tun0: tun_chr_ioctl cmd 1074025673 [ 1165.188184][T15556] veth1_macvtap: entered promiscuous mode [ 1165.307813][T15556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1165.346184][T15556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1165.427803][T11878] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.473819][T11878] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.535048][T11878] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.573158][T11878] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.907772][T15937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18470'. [ 1165.978405][T15940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18470'. [ 1166.313632][T13374] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1166.324703][T15940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18470'. [ 1166.397739][T13374] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1166.431683][T13374] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1166.476639][T11886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1166.485117][T13374] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1166.512577][T11886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1167.081974][T15967] tipc: Enabled bearer , priority 0 [ 1167.118830][T15970] syzkaller0: entered promiscuous mode [ 1167.130143][T15970] syzkaller0: entered allmulticast mode [ 1167.146106][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1167.176326][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1167.293076][T15966] tipc: Resetting bearer [ 1167.368163][T15963] tipc: Resetting bearer [ 1167.471369][T15963] tipc: Disabling bearer [ 1167.820031][T15980] tipc: Started in network mode [ 1167.836828][T15980] tipc: Node identity a22a1dfb808f, cluster identity 4711 [ 1167.878031][T15980] tipc: Enabled bearer , priority 0 [ 1167.915721][T15985] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18476'. [ 1167.932607][T15987] syzkaller0: entered promiscuous mode [ 1167.948413][T15987] syzkaller0: entered allmulticast mode [ 1167.957710][T15991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18477'. [ 1168.094118][T15980] netlink: 44 bytes leftover after parsing attributes in process `syz.7.18398'. [ 1168.122589][T15989] tipc: Resetting bearer [ 1168.153307][T15979] tipc: Resetting bearer [ 1168.276646][T15979] tipc: Disabling bearer [ 1168.341313][T15999] syzkaller0: entered promiscuous mode [ 1168.364150][T15999] syzkaller0: entered allmulticast mode [ 1168.540320][T16008] netlink: 120 bytes leftover after parsing attributes in process `syz.2.18483'. [ 1168.724976][T16006] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.732740][T16006] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.924226][T16006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1168.960659][T16006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1169.454898][T16019] syzkaller0: entered promiscuous mode [ 1169.492609][T16019] syzkaller0: entered allmulticast mode [ 1169.539952][ T130] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.574534][ T130] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.705749][ T130] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.716787][ T130] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.731636][T16034] tipc: Enabling of bearer rejected, already enabled [ 1169.804081][T16038] tipc: Enabled bearer , priority 0 [ 1169.845881][T16038] syzkaller0: entered promiscuous mode [ 1169.866533][T16038] syzkaller0: entered allmulticast mode [ 1169.987643][T16038] tipc: Resetting bearer [ 1170.022279][ C1] net_ratelimit: 392 callbacks suppressed [ 1170.022299][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1170.038022][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1170.059309][T16036] tipc: Resetting bearer [ 1170.122008][T16036] tipc: Disabling bearer [ 1170.161752][T16051] syzkaller0: entered promiscuous mode [ 1170.175406][T16051] syzkaller0: entered allmulticast mode [ 1170.618425][T16067] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1170.662889][T16067] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1170.777269][T16072] netlink: 8 bytes leftover after parsing attributes in process `syz.7.18495'. [ 1171.711197][T16084] bridge_slave_0: left allmulticast mode [ 1171.726852][ T29] audit: type=1800 audit(1780962850.283:18): pid=16096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.18501" name="memory.events" dev="tmpfs" ino=18288 res=0 errno=0 [ 1171.770263][T16084] bridge_slave_0: left promiscuous mode [ 1171.799199][T16084] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.922406][T16104] netlink: 732 bytes leftover after parsing attributes in process `syz.5.18502'. [ 1171.958860][T16104] netlink: 732 bytes leftover after parsing attributes in process `syz.5.18502'. [ 1172.063360][T16115] netlink: 'syz.5.18502': attribute type 10 has an invalid length. [ 1172.779958][T16084] bridge_slave_1: left allmulticast mode [ 1172.802114][T16084] bridge_slave_1: left promiscuous mode [ 1172.819044][T16084] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.903630][T16084] bond0: (slave bond_slave_0): Releasing backup interface [ 1172.930537][T16084] bond0: (slave bond_slave_1): Releasing backup interface [ 1172.945212][T16084] team0: Port device team_slave_0 removed [ 1172.960879][T16084] team0: Port device team_slave_1 removed [ 1172.967320][T16084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1172.976325][T16084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1172.984993][T16084] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1173.061169][T16113] tipc: Enabled bearer , priority 0 [ 1173.090227][ T29] audit: type=1804 audit(1780962851.653:19): pid=16147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.18505" name="/newroot/3700/memory.events" dev="tmpfs" ino=18637 res=1 errno=0 [ 1173.148607][T16115] team0: Port device dummy0 added [ 1173.180244][ T29] audit: type=1800 audit(1780962851.653:20): pid=16147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.18505" name="memory.events" dev="tmpfs" ino=18637 res=0 errno=0 [ 1173.181486][T16117] syzkaller0: entered promiscuous mode [ 1173.252794][T16117] syzkaller0: entered allmulticast mode [ 1173.464233][T16138] tipc: Resetting bearer [ 1173.628562][T16138] tipc: Disabling bearer [ 1174.199093][T16171] tipc: Enabled bearer , priority 0 [ 1174.321206][T16168] tipc: Resetting bearer [ 1174.375117][T16173] syzkaller0: entered promiscuous mode [ 1174.427381][T16173] syzkaller0: entered allmulticast mode [ 1174.715545][T16217] netlink: 'syz.5.18514': attribute type 1 has an invalid length. [ 1174.900019][T16223] netlink: 28 bytes leftover after parsing attributes in process `syz.5.18514'. [ 1175.253854][T16167] tipc: Resetting bearer [ 1175.400694][T16167] tipc: Disabling bearer [ 1175.486524][T16228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18516'. [ 1175.517735][T16217] bond3: entered allmulticast mode [ 1175.588077][T16219] bond3: (slave ip6gretap1): making interface the new active one [ 1175.610423][T16219] ip6gretap1: entered allmulticast mode [ 1175.636025][T16219] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1175.702704][T16230] netlink: 'syz.7.18517': attribute type 1 has an invalid length. [ 1175.734192][T16221] veth3: entered promiscuous mode [ 1175.744113][T16221] bond3: (slave veth3): Enslaving as an active interface with a down link [ 1175.766658][T16223] bond3: left allmulticast mode [ 1175.781857][T16223] ip6gretap1: left allmulticast mode [ 1175.794144][T16223] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1175.804041][T32748] tipc: Node number set to 581246459 [ 1175.951846][T16239] IPv6: addrconf: prefix option has invalid lifetime [ 1175.967575][T16239] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18519'. [ 1179.344667][T16225] xfrm0 speed is unknown, defaulting to 1000 [ 1179.672335][T32748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.750233][T32746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.843374][T16285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.853990][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.879344][T16287] netlink: 52 bytes leftover after parsing attributes in process `syz.7.18524'. [ 1179.911624][T16288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.921566][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.992824][T16285] netlink: 'syz.5.18525': attribute type 1 has an invalid length. [ 1180.007808][T16288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1180.016824][T11886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1180.038869][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1180.073022][T16288] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18525'. [ 1180.125386][T16288] netlink: 20 bytes leftover after parsing attributes in process `syz.5.18525'. [ 1180.639799][T16308] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18527'. [ 1181.430648][ T29] audit: type=1804 audit(1780962859.983:21): pid=16331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.18532" name="/newroot/66/cgroup.controllers" dev="tmpfs" ino=362 res=1 errno=0 [ 1181.529314][ T29] audit: type=1800 audit(1780962859.983:22): pid=16331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.18532" name="cgroup.controllers" dev="tmpfs" ino=362 res=0 errno=0 [ 1181.633318][T16338] syzkaller0: entered promiscuous mode [ 1181.640839][T16338] syzkaller0: entered allmulticast mode [ 1181.655830][T16334] xfrm0 speed is unknown, defaulting to 1000 [ 1181.749317][T13588] net_ratelimit: 4 callbacks suppressed [ 1181.749338][T13588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1181.829060][T32746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1182.198570][T16343] syzkaller0: entered promiscuous mode [ 1182.216968][T16343] syzkaller0: entered allmulticast mode [ 1182.789175][T13588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1182.949749][T13588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.286342][T16362] dummy0: left promiscuous mode [ 1183.331564][T16362] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 1183.378271][T16362] bond2: left allmulticast mode [ 1183.400474][T16362] bridge2: left allmulticast mode [ 1183.429411][T16362] vti0: left allmulticast mode [ 1183.447843][T16362] veth3: left allmulticast mode [ 1183.471556][T16362] gre1: left allmulticast mode [ 1183.489643][T16362] geneve5: left promiscuous mode [ 1183.515356][T16362] xfrm1: left allmulticast mode [ 1183.543264][T16362] vlan0: left promiscuous mode [ 1183.560553][T16362] macsec1: left promiscuous mode [ 1183.575325][T16362] veth7: left promiscuous mode [ 1183.582162][T16362] vlan2: left promiscuous mode [ 1183.599148][T16362] ip6erspan1: left allmulticast mode [ 1183.609632][T16362] gretap1: left allmulticast mode [ 1183.619254][T16362] bridge8: left promiscuous mode [ 1183.627711][T16362] bridge8: left allmulticast mode [ 1183.642546][T16362] bridge9: left promiscuous mode [ 1183.654240][T16362] bridge9: left allmulticast mode [ 1183.661559][T16362] ip6gre1: left promiscuous mode [ 1183.666618][T16362] ip6gre1: left allmulticast mode [ 1183.674007][T16362] bond10: left promiscuous mode [ 1183.680498][T16362] ip6gre2: left promiscuous mode [ 1183.703733][T16362] gretap2: left allmulticast mode [ 1183.721152][T16362] bond13: left promiscuous mode [ 1183.735413][T16362] bond13: left allmulticast mode [ 1183.817811][T16362] bond16: left promiscuous mode [ 1183.823818][T16362] bridge12: left promiscuous mode [ 1183.837669][T13588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.880883][T16362] vlan4: left allmulticast mode [ 1183.895399][T16362] bond17: left allmulticast mode [ 1183.902062][T16362] bond18: left allmulticast mode [ 1183.907492][T16362] bond18: left promiscuous mode [ 1183.914415][T16362] macvlan1: left promiscuous mode [ 1183.930021][T16362] geneve6: left promiscuous mode [ 1183.974409][T16362] bond20: left allmulticast mode [ 1184.096667][T16362] bond21: left promiscuous mode [ 1184.108770][T16362] bond21: left allmulticast mode [ 1184.129828][T16362] bond22: left promiscuous mode [ 1184.139139][T16362] bridge18: left promiscuous mode [ 1184.197507][T16362] bond23: left promiscuous mode [ 1184.211538][T16362] bridge19: left promiscuous mode [ 1184.221944][T16362] vlan5: left allmulticast mode [ 1184.237283][T16362] bond23: left allmulticast mode [ 1184.245043][T16362] bridge19: left allmulticast mode [ 1184.351967][T11880] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 47435 - 0 [ 1184.382545][T11880] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 47435 - 0 [ 1184.463152][T11880] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 47435 - 0 [ 1184.509033][T11880] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 47435 - 0 [ 1184.659697][T16377] syzkaller0: entered promiscuous mode [ 1184.692131][T16377] syzkaller0: entered allmulticast mode [ 1184.742686][T16381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1184.781021][T16381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1184.803655][T16381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1184.833031][T16383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1184.858431][T16383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1185.156114][T16388] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1185.182630][T16388] batman_adv: batadv0: Adding interface: gretap1 [ 1185.191489][T16388] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1185.221706][T16388] batman_adv: batadv0: Interface activated: gretap1 [ 1186.944894][T16425] netlink: 200 bytes leftover after parsing attributes in process `syz.5.18559'. [ 1186.954886][T13588] net_ratelimit: 3 callbacks suppressed [ 1186.954905][T13588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1187.047323][T16425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1187.103333][T16425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1187.141849][T16425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1187.179048][T16425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1187.218266][T16425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1187.249817][T16425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1187.291695][T16425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1187.333816][T16425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1187.368956][T16425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1187.636127][T16438] netlink: 56 bytes leftover after parsing attributes in process `syz.0.18564'. [ 1188.110056][T16439] tipc: Enabled bearer , priority 0 [ 1188.144395][T16443] syzkaller0: entered promiscuous mode [ 1188.185540][T16443] syzkaller0: entered allmulticast mode [ 1188.352710][T16448] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1188.477329][T16436] tipc: Resetting bearer [ 1188.538010][T16435] tipc: Resetting bearer [ 1188.610987][T16435] tipc: Disabling bearer [ 1188.780627][T16460] syzkaller0: entered promiscuous mode [ 1188.801562][T16460] syzkaller0: entered allmulticast mode [ 1189.336677][T16477] netlink: 68 bytes leftover after parsing attributes in process `syz.2.18570'. [ 1192.082328][T32757] net_ratelimit: 257 callbacks suppressed [ 1192.082368][T32757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1192.149191][T32748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1192.506079][T16469] netlink: 36 bytes leftover after parsing attributes in process `syz.7.18568'. [ 1192.530490][T16469] netlink: 36 bytes leftover after parsing attributes in process `syz.7.18568'. [ 1192.549446][T16469] netlink: 36 bytes leftover after parsing attributes in process `syz.7.18568'. [ 1192.562534][T16469] netlink: 36 bytes leftover after parsing attributes in process `syz.7.18568'. [ 1192.577050][T16469] netlink: 36 bytes leftover after parsing attributes in process `syz.7.18568'. [ 1192.602466][T16469] netlink: 36 bytes leftover after parsing attributes in process `syz.7.18568'. [ 1192.612678][T16469] netlink: 36 bytes leftover after parsing attributes in process `syz.7.18568'. [ 1192.648591][T16469] netlink: 36 bytes leftover after parsing attributes in process `syz.7.18568'. [ 1192.657962][T16469] netlink: 36 bytes leftover after parsing attributes in process `syz.7.18568'. [ 1192.682403][T16469] netlink: 36 bytes leftover after parsing attributes in process `syz.7.18568'. [ 1193.207390][T32748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1193.300782][T16511] netlink: 'syz.5.18575': attribute type 1 has an invalid length. [ 1193.359278][T16511] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1193.416113][T16514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1194.067122][T16502] syzkaller0: entered promiscuous mode [ 1194.109449][T16502] syzkaller0: entered allmulticast mode [ 1194.233710][ T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1194.315121][T16528] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1194.448252][ T810] IPVS: starting estimator thread 0... [ 1194.520299][T16537] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 1194.549770][T16536] IPVS: using max 24 ests per chain, 57600 per kthread [ 1194.694110][T16533] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1194.948475][ T135] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 1195.109051][ T8538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1195.272854][T32748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1195.549967][T16569] bridge0: port 3(team0) entered blocking state [ 1195.579277][T16569] bridge0: port 3(team0) entered disabled state [ 1195.606890][T16569] team0: entered allmulticast mode [ 1195.635374][T16569] team_slave_0: entered allmulticast mode [ 1195.648581][T16566] tipc: Failed to remove unknown binding: 66,0,0/2886997007:637065987/637065989 [ 1195.674272][T16569] team_slave_1: entered allmulticast mode [ 1195.716552][T16566] tipc: Failed to remove unknown binding: 66,0,0/2886997007:637065987/637065988 [ 1195.789131][T16569] dummy0: entered allmulticast mode [ 1195.976877][T16569] team0: entered promiscuous mode [ 1196.007476][T16569] team_slave_0: entered promiscuous mode [ 1196.043512][T16569] team_slave_1: entered promiscuous mode [ 1196.059597][T16577] tipc: Failed to remove unknown binding: 66,0,0/2886997007:637065987/637065989 [ 1196.077155][T16569] dummy0: entered promiscuous mode [ 1196.082529][T16577] tipc: Failed to remove unknown binding: 66,0,0/2886997007:637065987/637065988 [ 1196.168314][T16569] bridge0: port 3(team0) entered blocking state [ 1196.174798][T16569] bridge0: port 3(team0) entered forwarding state [ 1196.310441][ T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1197.196361][T16596] bridge0: port 1(bridge_slave_0) entered disabled state [ 1197.257290][T16596] bridge_slave_0 (unregistering): left allmulticast mode [ 1197.278252][T16596] bridge_slave_0 (unregistering): left promiscuous mode [ 1197.302718][T16596] bridge0: port 1(bridge_slave_0) entered disabled state [ 1197.350779][ T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1197.908242][T16619] __nla_validate_parse: 141 callbacks suppressed [ 1197.908265][T16619] netlink: 64 bytes leftover after parsing attributes in process `syz.0.18599'. [ 1198.149050][ T8538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1198.246926][T16631] 0: reclassify loop, rule prio 0, protocol 700 [ 1198.390215][ T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1198.697131][T16641] netlink: 'syz.0.18605': attribute type 1 has an invalid length. [ 1198.729392][T16641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18605'. [ 1199.221586][T16653] syzkaller0: entered promiscuous mode [ 1199.241497][T16653] syzkaller0: entered allmulticast mode [ 1199.429883][ T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1199.590920][T32741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.470177][ T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1200.689448][T16670] netlink: 'syz.7.18611': attribute type 13 has an invalid length. [ 1200.731899][T16670] netlink: 'syz.7.18611': attribute type 17 has an invalid length. [ 1201.241267][T32741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1201.328168][T16676] netlink: 136 bytes leftover after parsing attributes in process `syz.2.18613'. [ 1201.347763][T16676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18613'. [ 1201.372932][T16676] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18613'. [ 1201.420627][ T29] audit: type=1804 audit(1780962879.983:23): pid=16677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.18612" name="/newroot/3652/cgroup.controllers" dev="tmpfs" ino=18422 res=1 errno=0 [ 1201.502360][ T29] audit: type=1800 audit(1780962879.983:24): pid=16677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.18612" name="cgroup.controllers" dev="tmpfs" ino=18422 res=0 errno=0 [ 1201.534264][T32748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1201.546487][T13588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1202.200538][T16670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1202.233917][T16670] 8021q: adding VLAN 0 to HW filter on device team0 [ 1202.281523][T16670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1202.400876][T16670] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1202.413535][T16670] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1202.464216][T16701] netlink: 14 bytes leftover after parsing attributes in process `syz.0.18616'. [ 1202.473462][T16670] veth1_vlan: left promiscuous mode [ 1202.481297][T16670] veth0_vlan: left promiscuous mode [ 1202.487945][T16670] veth0_vlan: entered promiscuous mode [ 1202.504262][T16670] veth1_vlan: entered promiscuous mode [ 1202.525555][T16670] veth1_macvtap: left promiscuous mode [ 1202.534686][T16670] veth0_macvtap: left promiscuous mode [ 1202.544670][T16670] veth0_macvtap: entered promiscuous mode [ 1202.551352][T32748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1202.585226][T16670] veth1_macvtap: entered promiscuous mode [ 1202.601592][T16670] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1202.616078][T16670] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1202.630493][T16670] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1202.645238][T16670] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1202.772851][T16684] tipc: Enabled bearer , priority 0 [ 1202.791827][T16686] syzkaller0: entered promiscuous mode [ 1202.810853][T16686] syzkaller0: entered allmulticast mode [ 1202.822481][T16704] netlink: 8 bytes leftover after parsing attributes in process `syz.7.18617'. [ 1202.840407][T16695] tipc: Resetting bearer [ 1202.867042][T16704] netlink: 8 bytes leftover after parsing attributes in process `syz.7.18617'. [ 1202.913033][ T135] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.946802][ T135] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.994323][T16680] tipc: Resetting bearer [ 1203.087236][T16680] tipc: Disabling bearer [ 1203.129805][ T135] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1203.154230][ T135] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1203.591025][T13588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.319019][T32741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.605466][T16741] netlink: 'syz.1.18624': attribute type 1 has an invalid length. [ 1204.629041][ T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1204.689376][T16740] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18624'. [ 1204.919155][T16741] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1204.972293][T16740] bond15: entered allmulticast mode [ 1205.244955][T16748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18625'. [ 1205.284109][T16748] hsr_slave_0: left promiscuous mode [ 1205.317496][T16752] netlink: 'syz.7.18627': attribute type 1 has an invalid length. [ 1205.327936][T16748] hsr_slave_1: left promiscuous mode [ 1205.367855][T16748] smc: removing net device hsr0 with user defined pnetid SYZ2 [ 1205.414041][T16753] netlink: 28 bytes leftover after parsing attributes in process `syz.7.18627'. [ 1205.498231][T16752] bond1: entered promiscuous mode [ 1205.531232][T16752] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1205.570845][T16753] bond1: entered allmulticast mode [ 1205.617314][T16758] sctp: [Deprecated]: syz.5.18628 (pid 16758) Use of int in max_burst socket option. [ 1205.617314][T16758] Use struct sctp_assoc_value instead [ 1205.669874][T13588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1205.775555][T16752] bond1: (slave bridge1): making interface the new active one [ 1205.811688][T16752] bridge1: entered promiscuous mode [ 1205.834229][T16752] bridge1: entered allmulticast mode [ 1205.880066][T16752] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1206.117560][T16761] xfrm0 speed is unknown, defaulting to 1000 [ 1206.524993][T16784] netlink: 12 bytes leftover after parsing attributes in process `syz.7.18632'. [ 1206.629704][ T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1206.708968][ T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.205877][T16792] netdevsim netdevsim1 €Â: left allmulticast mode [ 1207.252805][T16792] xfrm1: left allmulticast mode [ 1207.276827][T16792] bridge8: left promiscuous mode [ 1207.304551][T16792] bridge8: left allmulticast mode [ 1207.322243][T16792] ip6tnl3: left promiscuous mode [ 1207.335621][T16792] ip6tnl3: left allmulticast mode [ 1207.358909][ T8538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.373893][T16792] gtp0: left promiscuous mode [ 1207.379310][T16792] gtp0: left allmulticast mode [ 1207.386832][T16792] geneve4: left promiscuous mode [ 1207.392780][T16792] geneve4: left allmulticast mode [ 1207.408503][T16792] bond5: left promiscuous mode [ 1207.418991][T16792] vti0: left promiscuous mode [ 1207.671226][T16792] geneve6: left promiscuous mode [ 1207.750172][ T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.788505][T16792] bond12: left promiscuous mode [ 1207.809187][T16792] bridge16: left promiscuous mode [ 1207.835716][T16792] vlan6: left allmulticast mode [ 1207.846986][T16792] bond12: left allmulticast mode [ 1207.857972][T16792] bridge16: left allmulticast mode [ 1207.887236][T16792] bond13: left promiscuous mode [ 1207.904004][T16792] team_slave_1: left promiscuous mode [ 1207.920699][T16792] bond13: left allmulticast mode [ 1207.933119][T16792] team_slave_1: left allmulticast mode [ 1208.011906][T16792] bond15: left allmulticast mode [ 1208.027111][ T130] netdevsim netdevsim1 €Â: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.036424][T16782] xfrm0 speed is unknown, defaulting to 1000 [ 1208.059169][ T130] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.141314][ T130] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.164806][ T130] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.281857][T16802] netlink: 44 bytes leftover after parsing attributes in process `syz.2.18637'. [ 1208.550133][ T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1208.789062][ T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1209.106229][T16826] syzkaller0: entered promiscuous mode [ 1209.125190][T16826] syzkaller0: entered allmulticast mode [ 1209.203342][ T8538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1209.829007][ T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1209.842251][T16834] syzkaller0: entered promiscuous mode [ 1209.858930][T16834] syzkaller0: entered allmulticast mode [ 1210.357627][T16841] xfrm0 speed is unknown, defaulting to 1000 [ 1210.389022][ T8538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1210.693397][T16855] netlink: 'syz.1.18650': attribute type 1 has an invalid length. [ 1210.869055][T32748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1211.224368][T16861] bond16: (slave gretap3): making interface the new active one [ 1211.272287][T16861] bond16: (slave gretap3): Enslaving as an active interface with an up link [ 1211.384028][T16855] macvlan0: entered promiscuous mode [ 1211.408828][T16855] macvlan0: entered allmulticast mode [ 1211.432791][T16855] bond16: entered promiscuous mode [ 1211.438215][T16855] gretap3: entered promiscuous mode [ 1211.449777][T16855] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1211.458119][T16855] bond16: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1211.512671][T16855] bond16: left promiscuous mode [ 1211.530394][T16855] gretap3: left promiscuous mode [ 1211.909314][ T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.354652][T16875] xfrm0 speed is unknown, defaulting to 1000 [ 1212.827066][T16887] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18654'. [ 1212.871388][T16887] ipvlan0: entered allmulticast mode [ 1212.885094][T16887] gretap0: entered allmulticast mode [ 1212.950566][T13588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.962304][T16890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.972158][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.045102][T13374] tipc: Subscription rejected, illegal request [ 1213.261841][T16894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.302927][T16897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.440006][ T8538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1213.995867][ T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1214.260834][T16910] tipc: Failed to remove unknown binding: 66,0,0/2580518909:11656568/11656570 [ 1214.277059][T16910] tipc: Failed to remove unknown binding: 66,0,0/2580518909:11656568/11656569 [ 1214.295246][T16910] tipc: Failed to remove unknown binding: 66,0,0/2580518909:11656568/11656570 [ 1214.315946][T16910] tipc: Failed to remove unknown binding: 66,0,0/2580518909:11656568/11656569 [ 1214.509341][T16916] netlink: 'syz.5.18664': attribute type 1 has an invalid length. [ 1214.625256][T16919] netlink: 28 bytes leftover after parsing attributes in process `syz.5.18664'. [ 1214.751079][T16918] bond5: (slave geneve2): making interface the new active one [ 1214.792026][T16918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1214.830242][T16918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1214.850428][T16918] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 1214.877728][T16919] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1214.926428][T11886] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1214.955160][T11886] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1215.029810][T13588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1215.241534][T11886] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1215.273952][T11886] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1215.509672][T16927] ref_ctr_offset mismatch. inode: 0x1fe offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 1216.028225][T16933] bridge12: entered promiscuous mode [ 1216.044393][T16933] bridge12: entered allmulticast mode [ 1216.074189][T16933] team0: Port device bridge12 added [ 1216.389981][T16928] netlink: 32 bytes leftover after parsing attributes in process `syz.2.18666'. [ 1216.434487][T16928] netlink: 32 bytes leftover after parsing attributes in process `syz.2.18666'. [ 1216.717213][T16944] erspan0: left promiscuous mode [ 1216.873751][T16944] ip6gretap0: left promiscuous mode [ 1216.934425][T16949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18672'. [ 1216.948265][T16944] 8021q: adding VLAN 0 to HW filter on device .` [ 1217.024575][T16950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18672'. [ 1217.037252][T16944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1217.386531][T16944] veth1_vlan: left promiscuous mode [ 1217.424501][T16944] veth0_vlan: left promiscuous mode [ 1217.464452][T16944] veth0_vlan: entered promiscuous mode [ 1217.507152][T16944] veth1_vlan: entered promiscuous mode [ 1217.582796][T16944] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1217.635651][T16944] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1217.682753][T16944] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1217.784930][T16944] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1217.805960][T16944] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1217.857945][T16944] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1217.871657][T16944] ip6gretap0: entered promiscuous mode [ 1217.891468][T16944] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 1217.904756][T16944] erspan0: entered promiscuous mode [ 1217.911397][T16944] hsr1: Slave B (veth1_to_hsr) is not up; please bring it up to get a fully working HSR network [ 1217.966736][T16944] net_ratelimit: 26 callbacks suppressed [ 1217.966759][T16944] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 1218.073155][ T135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.121979][T16948] : renamed from bond0 [ 1218.154499][T32748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.223244][T16949] team0: entered promiscuous mode [ 1218.242830][T16949] team0: entered allmulticast mode [ 1218.260422][T16949] 8021q: adding VLAN 0 to HW filter on device team0 [ 1218.354348][T16950] team1: entered promiscuous mode [ 1218.370964][T16950] team1: entered allmulticast mode [ 1218.380445][T16950] 8021q: adding VLAN 0 to HW filter on device team1 [ 1218.456116][ T8538] syz2: Port: 1 Link ACTIVE [ 1218.456135][ T130] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1218.490404][ T130] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 20003 - 0 [ 1218.513036][ T130] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1218.534631][ T130] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 20003 - 0 [ 1218.556214][ T130] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1218.575360][ T130] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 20003 - 0 [ 1218.735947][ T130] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1218.769962][ T130] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 20003 - 0 [ 1218.791506][ T8538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.804940][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.843326][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.916978][T16970] netlink: 'syz.2.18675': attribute type 1 has an invalid length. [ 1218.941470][T16955] syzkaller0: entered promiscuous mode [ 1218.947109][T16955] syzkaller0: entered allmulticast mode [ 1218.970658][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1219.006895][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1219.037354][ T8538] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1219.045558][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1219.195219][T32748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1219.210554][T11878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1219.520857][T32741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1219.844667][T32741] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1219.880950][T32741] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1220.239736][ T5875] Bluetooth: hci5: command 0x0406 tx timeout [ 1221.694147][ T5875] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1221.722167][ T5875] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1221.732516][ T5875] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1221.779834][ T5875] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1221.802321][ T5875] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1222.793544][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1222.930950][T16970] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 1223.004812][ T13] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1223.047636][T32741] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1223.071157][T32741] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1223.080917][ T13] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1223.109182][ C1] net_ratelimit: 12 callbacks suppressed [ 1223.109203][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.272340][ T30] INFO: task syz.3.18143:14485 blocked for more than 143 seconds. [ 1223.304695][ T30] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1223.330535][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1223.349035][T32748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.360278][T16982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18677'. [ 1223.390371][ T30] task:syz.3.18143 state:D stack:26184 pid:14485 tgid:14483 ppid:5884 task_flags:0x400140 flags:0x00080002 [ 1223.447354][ T30] Call Trace: [ 1223.457351][T16985] xfrm0 speed is unknown, defaulting to 1000 [ 1223.460505][ T30] [ 1223.487687][ T30] __schedule+0x1821/0x5740 [ 1223.527627][ T30] ? sock_def_readable+0xae/0x550 [ 1223.557614][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 1223.580364][ T30] ? __pfx___schedule+0x10/0x10 [ 1223.600336][ T30] ? schedule+0x90/0x360 [ 1223.624648][ T30] schedule+0x164/0x360 [ 1223.644783][ T30] svc_listen+0x2c3/0x500 [ 1223.679933][ T30] ? __pfx_svc_listen+0x10/0x10 [ 1223.724453][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1223.752529][T16982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18677'. [ 1223.765300][ T130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.775242][ T30] ? __fget_files+0x3a0/0x420 [ 1223.778992][T11886] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1223.814900][ T30] ? __fget_files+0x2a/0x420 [ 1223.833437][ T30] ? apparmor_socket_listen+0xde/0x180 [ 1223.852702][ T30] __x64_sys_listen+0x1c7/0x240 [ 1223.859023][T11886] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1223.900389][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1223.908192][T11886] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1223.922910][T14701] Bluetooth: hci6: command tx timeout [ 1223.939191][ T30] do_syscall_64+0x174/0x580 [ 1223.951612][T11886] netdevsim netdevsim6 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 1223.967721][ T30] ? trace_irq_disable+0x3b/0x140 [ 1223.979467][ T30] ? clear_bhb_loop+0x40/0x90 [ 1223.985247][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1223.991609][ T30] RIP: 0033:0x7fefded9ce59 [ 1223.996103][ T30] RSP: 002b:00007fefdfc37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 1224.005128][ T30] RAX: ffffffffffffffda RBX: 00007fefdf015fa0 RCX: 00007fefded9ce59 [ 1224.013488][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1224.034044][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1224.073183][ T30] RBP: 00007fefdee32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1224.098622][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1224.134151][ T30] R13: 00007fefdf016038 R14: 00007fefdf015fa0 R15: 00007ffc7f41ad88 [ 1224.170193][ T30] [ 1224.188127][ T30] [ 1224.188127][ T30] Showing all locks held in the system: [ 1224.264515][ T30] 1 lock held by khungtaskd/30: [ 1224.294704][ T30] #0: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1224.360829][ T30] 2 locks held by getty/5390: [ 1224.389672][T32748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1224.401579][ T30] #0: ffff888036cbf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1224.465211][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 1224.481082][T11886] ip6_tnl_xmit_ctl: 9 callbacks suppressed [ 1224.481101][T11886] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1224.506949][ T30] 1 lock held by syz-executor/5868: [ 1224.538268][ T30] 1 lock held by syz-executor/5869: [ 1224.563617][ T30] 2 locks held by syz-executor/5872: [ 1224.570977][T11886] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1224.578442][ T30] #0: ffff88807c14cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 1224.639583][ T30] #1: ffffffff8e962f28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1224.668398][ T30] 1 lock held by syz-executor/5878: [ 1224.684427][ T30] #0: ffff888024e6cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 1224.731112][ T30] 2 locks held by kworker/1:2/32741: [ 1224.741044][ T30] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1224.787182][ T30] #1: ffffc90012647c40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1224.842018][ T30] 3 locks held by kworker/0:17/13588: [ 1224.883576][ T30] #0: ffff8880b863b0e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 1224.913139][ T30] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 1224.949474][T11878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1224.980191][ T30] #2: ffffffff8ea81140 (vmap_purge_lock){+.+.}-{4:4}, at: drain_vmap_area_work+0x17/0x40 [ 1225.025230][ T30] 2 locks held by syz.4.18139/14474: [ 1225.030828][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1225.093261][ T30] 1 lock held by syz.3.18143/14485: [ 1225.124979][ T30] #0: ffff88803213a260 (sk_lock-AF_ATMSVC){+.+.}-{0:0}, at: svc_listen+0x13f/0x500 [ 1225.164350][ T30] 2 locks held by syz-executor/14698: [ 1225.174730][ T30] #0: ffff8880aab38ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 1225.197070][ T30] #1: ffffffff8e962f28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1225.208514][ T30] 1 lock held by syz.7.18632/16782: [ 1225.214278][ T30] #0: ffff888067aacea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 1225.224757][ T30] 5 locks held by syz.0.18677/16985: [ 1225.232978][ T30] 1 lock held by dhcpcd-run-hook/16994: [ 1225.246194][ T30] [ 1225.257788][ T30] ============================================= [ 1225.257788][ T30] [ 1225.280252][ T30] NMI backtrace for cpu 0 [ 1225.280272][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1225.280295][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1225.280308][ T30] Call Trace: [ 1225.280316][ T30] [ 1225.280326][ T30] dump_stack_lvl+0xe8/0x150 [ 1225.280357][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1225.280453][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1225.280487][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1225.280528][ T30] sys_info+0x135/0x170 [ 1225.280589][ T30] watchdog+0xfd3/0x1030 [ 1225.280637][ T30] ? watchdog+0x1c9/0x1030 [ 1225.280675][ T30] kthread+0x389/0x470 [ 1225.280705][ T30] ? __pfx_watchdog+0x10/0x10 [ 1225.280733][ T30] ? __pfx_kthread+0x10/0x10 [ 1225.280763][ T30] ret_from_fork+0x514/0xb70 [ 1225.280804][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1225.280828][ T30] ? __switch_to+0xc79/0x1410 [ 1225.280862][ T30] ? __pfx_kthread+0x10/0x10 [ 1225.280892][ T30] ret_from_fork_asm+0x1a/0x30 [ 1225.280936][ T30] [ 1225.280944][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1225.396548][ C1] NMI backtrace for cpu 1 [ 1225.396563][ C1] CPU: 1 UID: 0 PID: 5000 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 1225.396582][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1225.396592][ C1] RIP: 0010:__kasan_check_read+0x0/0x20 [ 1225.396620][ C1] Code: 22 8e 48 89 de e8 90 9b f6 fe 31 ed eb cf cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 89 f6 48 8b 0c 24 31 d2 e9 8f e5 ff ff 66 66 66 66 66 [ 1225.396634][ C1] RSP: 0018:ffffc9000248f8a0 EFLAGS: 00000246 [ 1225.396649][ C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88807f8d3e00 [ 1225.396661][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88802c05c030 [ 1225.396671][ C1] RBP: ffff88802c05c010 R08: ffff88802c05c037 R09: 1ffff1100580b806 [ 1225.396683][ C1] R10: dffffc0000000000 R11: ffffed100580b807 R12: ffff88802c05c030 [ 1225.396695][ C1] R13: 0000000000000007 R14: 0000000000000006 R15: 0000000000000001 [ 1225.396705][ C1] FS: 00007f2805999880(0000) GS:ffff88812538a000(0000) knlGS:0000000000000000 [ 1225.396719][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1225.396730][ C1] CR2: 00007f9c21cab662 CR3: 000000007f894000 CR4: 00000000003526f0 [ 1225.396745][ C1] Call Trace: [ 1225.396751][ C1] [ 1225.396757][ C1] tomoyo_check_acl+0x2df/0x400 [ 1225.396844][ C1] ? __pfx_tomoyo_check_path_acl+0x10/0x10 [ 1225.396868][ C1] tomoyo_path_permission+0x1b4/0x380 [ 1225.396893][ C1] tomoyo_path_perm+0x3f3/0x560 [ 1225.396914][ C1] ? tomoyo_path_perm+0x251/0x560 [ 1225.396935][ C1] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 1225.396983][ C1] security_inode_getattr+0x12b/0x310 [ 1225.397078][ C1] vfs_getattr+0x23/0x70 [ 1225.397098][ C1] vfs_statx_path+0x2b/0x230 [ 1225.397118][ C1] ? vfs_statx+0x107/0x200 [ 1225.397136][ C1] vfs_statx+0x12e/0x200 [ 1225.397154][ C1] ? __pfx_vfs_statx+0x10/0x10 [ 1225.397170][ C1] ? strncpy_from_user+0x150/0x2b0 [ 1225.397224][ C1] ? do_getname+0x151/0x250 [ 1225.397244][ C1] vfs_fstatat+0x11b/0x170 [ 1225.397263][ C1] __x64_sys_newfstatat+0x151/0x200 [ 1225.397284][ C1] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 1225.397314][ C1] ? rcu_is_watching+0x15/0xb0 [ 1225.397348][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.397365][ C1] do_syscall_64+0x174/0x580 [ 1225.397384][ C1] ? clear_bhb_loop+0x40/0x90 [ 1225.397410][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.397426][ C1] RIP: 0033:0x7f2805311b0a [ 1225.397439][ C1] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 1225.397453][ C1] RSP: 002b:00007fff7983eed8 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 1225.397469][ C1] RAX: ffffffffffffffda RBX: 0000561f8882a410 RCX: 00007f2805311b0a [ 1225.397481][ C1] RDX: 00007fff7983eee0 RSI: 0000561f888182a8 RDI: 00000000ffffff9c [ 1225.397492][ C1] RBP: 0000561fb4a07148 R08: 00063478c1c69200 R09: 3fffffffffffffff [ 1225.397504][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1225.397514][ C1] R13: 00007fff7983eee0 R14: 0000000000000000 R15: 00063478c1c69200 [ 1225.397536][ C1] [ 1225.446628][T32741] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1225.463975][T13588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1225.727299][T13588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1225.800295][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1225.807245][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1225.816413][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1225.826509][ T30] Call Trace: [ 1225.829831][ T30] [ 1225.832789][ T30] vpanic+0x56c/0xa60 [ 1225.836816][ T30] ? __pfx___schedule+0x10/0x10 [ 1225.841704][ T30] ? __pfx_vpanic+0x10/0x10 [ 1225.846243][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 1225.852462][ T30] panic+0xc5/0xd0 [ 1225.856221][ T30] ? __pfx_panic+0x10/0x10 [ 1225.861991][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1225.867425][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1225.873637][ T30] watchdog+0x102c/0x1030 [ 1225.878024][ T30] ? watchdog+0x1c9/0x1030 [ 1225.882501][ T30] kthread+0x389/0x470 [ 1225.886620][ T30] ? __pfx_watchdog+0x10/0x10 [ 1225.891342][ T30] ? __pfx_kthread+0x10/0x10 [ 1225.895979][ T30] ret_from_fork+0x514/0xb70 [ 1225.900618][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1225.905775][ T30] ? __switch_to+0xc79/0x1410 [ 1225.910506][ T30] ? __pfx_kthread+0x10/0x10 [ 1225.915140][ T30] ret_from_fork_asm+0x1a/0x30 [ 1225.919972][ T30]