last executing test programs: 23m56.799855184s ago: executing program 1 (id=2838): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) (fail_nth: 2) 23m56.607910664s ago: executing program 1 (id=2842): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000140)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0xba, 0x2, 0xefff}]}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) 23m56.268250732s ago: executing program 1 (id=2847): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x3, {{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {0x7000000}, 0x0, 0x200}, [@tmpl={0x144, 0x5, [{{@in=@multicast1, 0x4d6, 0x3c}, 0x2, @in=@multicast1, 0x3507, 0x4, 0x3, 0x7, 0x8, 0x4, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d3, 0x6c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x2, 0x0, 0x73, 0x8001, 0x4, 0x7}, {{@in6=@mcast2, 0x4d3, 0x3c}, 0x2, @in=@multicast1, 0x3506, 0x2, 0x3, 0x7, 0x5, 0x3, 0x7}, {{@in6=@loopback, 0x4d4, 0x32}, 0x2, @in6=@mcast1, 0x3502, 0x3, 0x1, 0x7, 0x5, 0x3, 0x7}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x80000001, 0x3c}, 0xa, @in=@remote, 0x0, 0x1, 0x1, 0x9, 0x8, 0xe7, 0x7}]}]}, 0x1fc}}, 0x0) 23m56.107207394s ago: executing program 1 (id=2849): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000004900010000000000000000000a00076e08000000e0000001140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x40}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000004900010000000000000000000a00076e08000000e0000001140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x40}}, 0x0) 23m55.914577073s ago: executing program 1 (id=2852): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) (fail_nth: 3) 23m55.634550273s ago: executing program 1 (id=2855): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000480), 0x2, 0x0) (async) r2 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000480), 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000380)='blkio.bfq.time_recursive\x00', 0x0, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000400), 0x4) (async) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000400), 0x4) r5 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="465406f6863ed37c54474c4ed7b613c0c6115a8d21ab97fa2af0e3af714cd6376488880f1dc590885f416eb4087a3bd4dfbe21891c10edb4ce7100403a44c28aed6da8a28663edc800984a4a0986eb65af3e7a98ff4a07017b2e7264c9f2f3bf22c6983741a3b660a6bfa2b4eeb5ab37552016b3ed5dbfa3cb09167beb03d042e8e8bae38de964da6d319deef262d0f2b0e825ccb85e138e376af79e937ab3b562a7fbc14f9580ec64a87d695c0a9b01ff2c024a3765deed4f543ca680433872766037a0c3e1e2b1f67b", @ANYRES8=r6, @ANYRES32=r0, @ANYBLOB="98356cb86aa175db6f7d62eb4e18b4ff6f941c0e8c8cad6c8eb05e3a048425f8eb79e1e90af474bffd8238216de008b680fbe739c23ddc353175b518cd00cb36f62f96b29ba173ef71f804439dd53d0058624d0ab0d7ce844bc18539034f2c795be81ac74975d72da280779e006234878915bab897219ac861981116fa0cd208ca7bec8ff829f59fcd5379", @ANYRES16=r8, @ANYRESOCT=0x0], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x20000080) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r7) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r7) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) (async) r9 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYRES16=r2], 0x15c}}, 0x0) close(0x4) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="050001004dbc3081942dd86115e4d38ceb82b7a3dbb7a5f86722a327d096d24eb4a8cfba5db92aed28dd1caa531a8e74bffaf39a1c2426df2ef21cde6ca36f1999d6564765ee1a630640153bc826b67d08af0738613a83ec64466b381236a4f7cb71cd731da238c4384ca7c0d3f773903375744f8d6bbe9d74e949504bf4e00dbbefc3f783b1cea1f9c8f2f5cfc2d2bf0b4ca296b20135ee1e5f4bec6c700eae5b8251214b501a6605047e4e59147f6a36f59ccd2389", @ANYRES16=r11, @ANYBLOB="010000f2fffffb00000039000000000000005ee2be25bc9d17a7290bc44be68c55e69993", @ANYRES32=r12, @ANYBLOB="10005a800c0001800600020008340000"], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x20000850) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="050001004dbc3081942dd86115e4d38ceb82b7a3dbb7a5f86722a327d096d24eb4a8cfba5db92aed28dd1caa531a8e74bffaf39a1c2426df2ef21cde6ca36f1999d6564765ee1a630640153bc826b67d08af0738613a83ec64466b381236a4f7cb71cd731da238c4384ca7c0d3f773903375744f8d6bbe9d74e949504bf4e00dbbefc3f783b1cea1f9c8f2f5cfc2d2bf0b4ca296b20135ee1e5f4bec6c700eae5b8251214b501a6605047e4e59147f6a36f59ccd2389", @ANYRES16=r11, @ANYBLOB="010000f2fffffb00000039000000000000005ee2be25bc9d17a7290bc44be68c55e69993", @ANYRES32=r12, @ANYBLOB="10005a800c0001800600020008340000"], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x20000850) write$cgroup_pid(r9, &(0x7f0000000180), 0x12) r14 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r14, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) (async) setsockopt$netlink_NETLINK_TX_RING(r14, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001f0009"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 23m40.584699425s ago: executing program 32 (id=2855): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000480), 0x2, 0x0) (async) r2 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000480), 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000380)='blkio.bfq.time_recursive\x00', 0x0, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000400), 0x4) (async) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000400), 0x4) r5 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="465406f6863ed37c54474c4ed7b613c0c6115a8d21ab97fa2af0e3af714cd6376488880f1dc590885f416eb4087a3bd4dfbe21891c10edb4ce7100403a44c28aed6da8a28663edc800984a4a0986eb65af3e7a98ff4a07017b2e7264c9f2f3bf22c6983741a3b660a6bfa2b4eeb5ab37552016b3ed5dbfa3cb09167beb03d042e8e8bae38de964da6d319deef262d0f2b0e825ccb85e138e376af79e937ab3b562a7fbc14f9580ec64a87d695c0a9b01ff2c024a3765deed4f543ca680433872766037a0c3e1e2b1f67b", @ANYRES8=r6, @ANYRES32=r0, @ANYBLOB="98356cb86aa175db6f7d62eb4e18b4ff6f941c0e8c8cad6c8eb05e3a048425f8eb79e1e90af474bffd8238216de008b680fbe739c23ddc353175b518cd00cb36f62f96b29ba173ef71f804439dd53d0058624d0ab0d7ce844bc18539034f2c795be81ac74975d72da280779e006234878915bab897219ac861981116fa0cd208ca7bec8ff829f59fcd5379", @ANYRES16=r8, @ANYRESOCT=0x0], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x20000080) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r7) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r7) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) (async) r9 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYRES16=r2], 0x15c}}, 0x0) close(0x4) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="050001004dbc3081942dd86115e4d38ceb82b7a3dbb7a5f86722a327d096d24eb4a8cfba5db92aed28dd1caa531a8e74bffaf39a1c2426df2ef21cde6ca36f1999d6564765ee1a630640153bc826b67d08af0738613a83ec64466b381236a4f7cb71cd731da238c4384ca7c0d3f773903375744f8d6bbe9d74e949504bf4e00dbbefc3f783b1cea1f9c8f2f5cfc2d2bf0b4ca296b20135ee1e5f4bec6c700eae5b8251214b501a6605047e4e59147f6a36f59ccd2389", @ANYRES16=r11, @ANYBLOB="010000f2fffffb00000039000000000000005ee2be25bc9d17a7290bc44be68c55e69993", @ANYRES32=r12, @ANYBLOB="10005a800c0001800600020008340000"], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x20000850) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="050001004dbc3081942dd86115e4d38ceb82b7a3dbb7a5f86722a327d096d24eb4a8cfba5db92aed28dd1caa531a8e74bffaf39a1c2426df2ef21cde6ca36f1999d6564765ee1a630640153bc826b67d08af0738613a83ec64466b381236a4f7cb71cd731da238c4384ca7c0d3f773903375744f8d6bbe9d74e949504bf4e00dbbefc3f783b1cea1f9c8f2f5cfc2d2bf0b4ca296b20135ee1e5f4bec6c700eae5b8251214b501a6605047e4e59147f6a36f59ccd2389", @ANYRES16=r11, @ANYBLOB="010000f2fffffb00000039000000000000005ee2be25bc9d17a7290bc44be68c55e69993", @ANYRES32=r12, @ANYBLOB="10005a800c0001800600020008340000"], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x20000850) write$cgroup_pid(r9, &(0x7f0000000180), 0x12) r14 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r14, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) (async) setsockopt$netlink_NETLINK_TX_RING(r14, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001f0009"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3m56.969823682s ago: executing program 3 (id=11233): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffdf41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xc3}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/114, 0x72}, {&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f0000000100)=""/141, 0x8d}], 0x11}, 0xfffffffe}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffdf41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xc3}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async) recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/114, 0x72}, {&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f0000000100)=""/141, 0x8d}], 0x11}, 0xfffffffe}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) 3m56.59299995s ago: executing program 3 (id=11238): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB, @ANYRES16=r0, @ANYRES32=r2], 0x44}}, 0x2000800) 3m56.437365582s ago: executing program 3 (id=11242): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="5d5800000000000009001a8018000a8014000700fc020000000000000000000000000000140003006970766c616e30000000000000000000"], 0x50}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r4, 0x0, 0x400000008000f28, 0x0) close(0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r5, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/203, 0xcb}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000140)=""/197, 0xc5}, {&(0x7f0000000000)=""/75, 0x4b}], 0x4}, 0x9af}], 0x2, 0x0, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r5, 0xc0285840, &(0x7f0000000300)={0x8, 0x8, 0x1, 0x0, 0x5, 0xa, 0x0, &(0x7f0000000240)=[{0x14, 0xfe, 0x1}, {0x14, 0xfe, 0xff}, {0x1a, 0x1ff, 0x4}, {0x6, 0x101, 0xf9}, {0x6, 0x1ff, 0x1}, {0x8, 0x101, 0xffffffff}, {0x1b, 0x101, 0x8}, {0x13, 0x1ff, 0x1}, {0x12, 0x101}, {0x13, 0x101, 0x5}]}) splice(r3, 0x0, r2, 0x0, 0x114, 0xe) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005002100000000080500010004"], 0x4c}}, 0x0) 3m55.796292043s ago: executing program 3 (id=11252): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r0, @ANYRES32=r2], 0x44}}, 0x2000800) 3m55.574725057s ago: executing program 3 (id=11255): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x6, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000000}, 0x44010) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) sendmsg$netlink(r2, &(0x7f0000004200)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000040c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r3}}}], 0x20}, 0x80000) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x110, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, r3}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @mark={0xc, 0x15, {0x35075b, 0x3b}}]}, 0x110}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000600)=[0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x4f, &(0x7f0000000680)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0xbe, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000007}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@cgroup, r5, 0x24}, 0x14) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007002abd70000000000000000000000000001be0000001000000000000000000000000ffff00004e2200000000f0ff0200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000005a0000000000000000b40000000000000200000000000000010000007ffffffe0000000000000000000006000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x2, 0x0, 0x8000}) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r7, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r8, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x585}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2c3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x25}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40020}, 0x8080) 3m55.292132197s ago: executing program 3 (id=11259): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x100, 0x100, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xd, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r5, &(0x7f0000000c00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000940)={0x23c, r7, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x1}, @NL80211_ATTR_IE={0x21, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x6}, 0xf8, 0x8, @broadcast, 0x2, 0x9, 0x2}}, @challenge={0x10, 0x1, 0x4e}, @challenge={0x10, 0x1, 0x8b}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xa}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x9}, @NL80211_ATTR_IE={0x1db, 0x2a, [@ht={0x2d, 0x1a, {0x300, 0x0, 0x4, 0x0, {0x8, 0x5, 0x0, 0x5, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x0, 0x8, 0x7}}, @tim={0x5, 0xf3, {0x9, 0x57, 0x0, "cf146dc3c8e2fed7c201a7651ced0197885d5b028c145df32938f4a6ddea996270215e2ae08043ea073f74e34728937a416997e6eb7721ab7d10477bbd23dca5829f1d094b24385d2ccbca63542e591c5951f5eeabd2c3e3472c7b2556ce8919af5eb9276c16a45355acc2d2d4a824c24ba5657abc579a8d925b7c180c50b0d1f13c669782ed6a2daf73520ab27acf418f92d8da2fc5943ad60a728976f6ef17eba29cd6cc0062b4723f2c4ca34165600c3ef26524064c85630f35c24b8d00d262f3fe2b50b137afce3f5507ec400e10ed820cc65f6ecf29af482291a1d312ef9a1aee99633e85e3238c86a87a50e1b7"}}, @perr={0x84, 0xa1, {0x8, 0x9, [{{0x0, 0x1}, @device_b, 0x7, @value, 0x42}, {{0x0, 0x1}, @device_b, 0xa4, @value=@broadcast, 0x2b}, {{0x0, 0x1}, @device_b, 0x101, @value=@device_b, 0x22}, {{0x0, 0x1}, @device_a, 0x1, @value=@device_b, 0x1f}, {{0x0, 0x1}, @broadcast, 0xd36, @value, 0xf}, {{0x0, 0x1}, @device_b, 0x9c30, @value=@device_b, 0x38}, {{0x0, 0x1}, @device_b, 0x7fffffff, @value=@broadcast, 0x2e}, {{}, @device_a, 0x7, @void, 0xc}, {{}, @broadcast, 0x10001, @void, 0x5}]}}, @mic={0x8c, 0x18, {0x212, "a25997ab4a89", @long="e8b1411a2cf29ee6a2b1381c9e7022e4"}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x1, 0x1, 0x6}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xff}]}, 0x23c}, 0x1, 0x0, 0x0, 0x440}, 0x4810) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000880)={&(0x7f0000000540)="396b32681a810752ce63e2e78f05d42521115a429fa7bf4e4e5917d34e6d69d449ba19b99fed5770cd9aefe7555a14060cab9c2fdb8ae17022f07db1a2eab3dd0dd2af0aee5a8ff38d153691b0aeec89a511b759c9173bccfe459f995427ee29fe85ea9ac39862d71256efccef43f0d498b3fcb5f663ad48181adb272612c5ddeb14", &(0x7f0000000600)=""/93, &(0x7f0000000740)="794270637e953b5f2bddb65829f80fc4b384f680da43c93499acf0b6680de5afc51dced367728dc8afbb540334021bba59a8ee4cb625c8852b354b6327c603faa97ec7a668144ddeab8e8fb438db801a8b4f2f94e33e456f672bd6d371aa55597805dc11bdda2d6e793171ad9ccffad245c6ae61b5f0f0a204b00eb2a4cfa33d4b6633cde2b12afce08c00c4866dee5c586dfbcef4049a40a03f596bd603cb33493c38ac756977", &(0x7f0000000800)="4567f982736832f2f2d3894c379b3c04354fcf768d63b05a8ebdd3a386196b1fad53e7e2c473b1176a8b3aebd6450926b194f9a7837d2a3954e0150c10292e95ff30e1305263d7a94c07b4fa7401378e3390352f6337b21b766f0154ea09c94067f3c4b12f2df389c4fd261deea07ba3ab61b0a0bf", 0xffffffff, r1}, 0x38) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0xff1f0000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r10 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r10, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f00000000c0)="c4", 0x1}], 0x1}, 0x40) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180006ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000680), r5) sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 3m40.056932301s ago: executing program 33 (id=11259): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x100, 0x100, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xd, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r5, &(0x7f0000000c00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000940)={0x23c, r7, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x1}, @NL80211_ATTR_IE={0x21, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x6}, 0xf8, 0x8, @broadcast, 0x2, 0x9, 0x2}}, @challenge={0x10, 0x1, 0x4e}, @challenge={0x10, 0x1, 0x8b}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xa}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x9}, @NL80211_ATTR_IE={0x1db, 0x2a, [@ht={0x2d, 0x1a, {0x300, 0x0, 0x4, 0x0, {0x8, 0x5, 0x0, 0x5, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x0, 0x8, 0x7}}, @tim={0x5, 0xf3, {0x9, 0x57, 0x0, "cf146dc3c8e2fed7c201a7651ced0197885d5b028c145df32938f4a6ddea996270215e2ae08043ea073f74e34728937a416997e6eb7721ab7d10477bbd23dca5829f1d094b24385d2ccbca63542e591c5951f5eeabd2c3e3472c7b2556ce8919af5eb9276c16a45355acc2d2d4a824c24ba5657abc579a8d925b7c180c50b0d1f13c669782ed6a2daf73520ab27acf418f92d8da2fc5943ad60a728976f6ef17eba29cd6cc0062b4723f2c4ca34165600c3ef26524064c85630f35c24b8d00d262f3fe2b50b137afce3f5507ec400e10ed820cc65f6ecf29af482291a1d312ef9a1aee99633e85e3238c86a87a50e1b7"}}, @perr={0x84, 0xa1, {0x8, 0x9, [{{0x0, 0x1}, @device_b, 0x7, @value, 0x42}, {{0x0, 0x1}, @device_b, 0xa4, @value=@broadcast, 0x2b}, {{0x0, 0x1}, @device_b, 0x101, @value=@device_b, 0x22}, {{0x0, 0x1}, @device_a, 0x1, @value=@device_b, 0x1f}, {{0x0, 0x1}, @broadcast, 0xd36, @value, 0xf}, {{0x0, 0x1}, @device_b, 0x9c30, @value=@device_b, 0x38}, {{0x0, 0x1}, @device_b, 0x7fffffff, @value=@broadcast, 0x2e}, {{}, @device_a, 0x7, @void, 0xc}, {{}, @broadcast, 0x10001, @void, 0x5}]}}, @mic={0x8c, 0x18, {0x212, "a25997ab4a89", @long="e8b1411a2cf29ee6a2b1381c9e7022e4"}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x1, 0x1, 0x6}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xff}]}, 0x23c}, 0x1, 0x0, 0x0, 0x440}, 0x4810) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000880)={&(0x7f0000000540)="396b32681a810752ce63e2e78f05d42521115a429fa7bf4e4e5917d34e6d69d449ba19b99fed5770cd9aefe7555a14060cab9c2fdb8ae17022f07db1a2eab3dd0dd2af0aee5a8ff38d153691b0aeec89a511b759c9173bccfe459f995427ee29fe85ea9ac39862d71256efccef43f0d498b3fcb5f663ad48181adb272612c5ddeb14", &(0x7f0000000600)=""/93, &(0x7f0000000740)="794270637e953b5f2bddb65829f80fc4b384f680da43c93499acf0b6680de5afc51dced367728dc8afbb540334021bba59a8ee4cb625c8852b354b6327c603faa97ec7a668144ddeab8e8fb438db801a8b4f2f94e33e456f672bd6d371aa55597805dc11bdda2d6e793171ad9ccffad245c6ae61b5f0f0a204b00eb2a4cfa33d4b6633cde2b12afce08c00c4866dee5c586dfbcef4049a40a03f596bd603cb33493c38ac756977", &(0x7f0000000800)="4567f982736832f2f2d3894c379b3c04354fcf768d63b05a8ebdd3a386196b1fad53e7e2c473b1176a8b3aebd6450926b194f9a7837d2a3954e0150c10292e95ff30e1305263d7a94c07b4fa7401378e3390352f6337b21b766f0154ea09c94067f3c4b12f2df389c4fd261deea07ba3ab61b0a0bf", 0xffffffff, r1}, 0x38) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0xff1f0000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r10 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r10, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f00000000c0)="c4", 0x1}], 0x1}, 0x40) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180006ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000680), r5) sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 6.173219353s ago: executing program 2 (id=12545): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000a80)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 5.921487845s ago: executing program 2 (id=12549): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x25dfdbfb, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x20000000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}}}]]}, {0x4}, {0xc, 0xb, {0x0, 0x1}}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="db8017"], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newrule={0x28, 0x20, 0x100, 0x0, 0xfffffffe, {0x2, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10018}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x3}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a80)={0x14, 0x3c, 0x100, 0x20000002, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20000081}, 0x4004000) 5.604992791s ago: executing program 2 (id=12553): r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000280)=0x10) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000002c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = accept4(r1, 0x0, &(0x7f00000000c0), 0x1800) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000180)=0x6, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb0100180000002800000003000000000000000000000300000000030000000200000006000000010000000000000e05000000010000000061000000000000000000"], 0x0, 0x43, 0x0, 0x1, 0x4}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89b0, &(0x7f0000000540)={'macvlan0\x00', @random="00009e0c1100"}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = accept4$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14, 0x80800) getsockopt$IP_SET_OP_GET_BYINDEX(r6, 0x1, 0x53, &(0x7f0000000440)={0x7, 0x7, 0xffffffffffffffff}, &(0x7f0000000480)=0x28) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000002d000900fffffffffddbdf2502000000f07e209d9a3809000000001265e000eb5a83221d85f81eff0c1d9e1822bf6090d8f10ade9115a4b94afd473786db120f470e41e9ba2daf9e634eeab849ef9a1a7b781e7d97db46f50a50468435f3a10200000000000000000000000000000000000000000000000000000000000000004eb3"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000880)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000780)={"6da55df82db929b1196cded393fbd671", r9, 0x0, {0x7, 0x6}, {0x200, 0x5}, 0x0, [0xff, 0x7, 0x8000000000000000, 0xffffffff, 0x9, 0x7, 0x0, 0x2, 0x7, 0x3, 0xfffffffffffffffe, 0xffffffffffffff01, 0x3, 0x6c34, 0x3, 0x101]}) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r10, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r10, 0x29, 0x39, 0x0, 0x0) setsockopt$inet6_opts(r10, 0x29, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="3a06010700000000fe8000000000000000000000000000bbfe8000000000000000000000000000bbfe80000000000000000000000000001818a05d44cceb46d0e1bf6b8b0eb7e430da89038321182d3716cd21e9ab8d7b86a84c09fe69e5c87a8af97ac568ec3d2f8ead895b9088ef7c0e390b1a1fc45ef3ac5b8cf92ad4c622df260f669064ed3fc1b55e8761cee5f8f51ccf5128b972b57767c3e526cfc02b9bada7f466ff72e8e9ec53f486919c2d97720a916b8e2fb3"], 0x38) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000080000000030a01030000000000000000050000000900010073797a30000000000900030073797a30000000004c0004800800024067b33f2808000140000000001400030076657468305f746f5f62617461647600080001400000000108000140000000031400030076657468315f746f496873720000000008000540fffffffc14"], 0xc8}}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x0) socket$l2tp(0x2, 0x2, 0x73) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r7) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="000229bd7000fedbdf257b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f470000000a000600ffffffffffff00000a00060008021100000000000a00060008021100000100001400fe0087bd412582e11f1786c63ea968a8036c1400020139a19a9b63a54341337e77a04d981cd2"], 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000040) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="20000000150001002abd7000ffdbdf2502180100", @ANYRESHEX=r8, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x804) 4.92996196s ago: executing program 2 (id=12558): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r1, 0x9) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r2, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) readv(r1, &(0x7f0000000b40)=[{&(0x7f0000000780)=""/150, 0x96}], 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) nanosleep(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r4, @ANYRES16=r4, @ANYBLOB="05f60000000000000000000000000000000053f0470cf584022ca9c899453f76ef9bfea14a834a89cf042382e33a19236024a044744c583caa93a0731603b7dc1f6eba9299a26bb39c17bcc5617856caf59940cb67dcaab32d0a59e7863936bb8fbc8e3c71b030ee72d3a395d56240868c35182d0c4dd4851cf17d6a7ee67cdb20004fe2db3e998403e31be70b14a962341cff9a6f734df0bf3c8f1de5170a3d2af286dc123322b0255008617636e12be489158a9117c5228e995b78d50a08564a5086a3640a2cf2dc871cfa4bc0b4afdab35dcd69e0696105af351aec34baf2187a9e4482306f0d217d07f86cdc6267a1159218475fd18685f6801afde7ba7fee9967abfc20db0582e4cd18e38c11552f49d78112101edcbff9d92dd4ff9316d67575914cd4c42714520d3f0f5ac396379d422a", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x840) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa, {0xe4ffffff}}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) sendmsg$NFT_BATCH(r6, 0x0, 0x40) unshare(0x20400) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_TEST_RUN(0x26, 0x0, 0x0) write$nci(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="610501"], 0x10e6) 4.718797268s ago: executing program 0 (id=12561): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x8}, &(0x7f0000000240)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000280)={r3, 0x100, 0x1, [0x5]}, &(0x7f00000002c0)=0xa) r5 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x10) sendto$phonet(r5, &(0x7f00000015c0)="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", 0xfd, 0x20000001, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={r4, 0xa, 0x5, 0xb}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x1, {0x4e21, 0x4}}, 0x10, &(0x7f0000001500)=[{&(0x7f0000000080)="811f9d5b2e7710b18b3ab2103facb6405b642ce321a7701a1c5cb86a7a8f6db9348e62e64eb45aa9f2449b2f7c845b7e32967aca45bedda55e11e4fd816b85330cec017a1051e1bcf8500362600739501e8c167b8cb164d058f4a35d3b4946cdee2b2f15b3a781fd532d8565312473f18db25cc1", 0x74}, {&(0x7f0000000340)="245fbed2a80f039d9d7f88e4ee5f73f847c95ae9b510c6209ceb8d805ccf481e950b90f0f6e251948e7d25121a7c048cc97a0ca187b53f4eef8da4da82797c21f0d8e75b83102497e87931e822b6a8e9d0ea9a5b2ea443c24ef7d9ada7c05fc03fe0fd0a6ec9dd1bed25e207802f41ceaab579168e77ca3cde3cccbba27cd594553620aa3700f7b1533df4f80f90d1ed173f128c4eb1206ae0dd9c273730bbc6fc1277b684fbee8984e6ba685cbc192b231cf52fd41d4c29b920c1621b3841f6af05a2311eb13b3481129853e0b7ee34b9955c23eebe2a855b69008df15c311754e60ab03afdcdaa661bc9337027ce1d13e9", 0xf2}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="b5a0cc28f232e7c9c6f0bc9d6ec89b8494867eef3844ee67b26a9522c1a620978dcea44b00439a475e0b9c20fa4ca310c5c93c5afaf864f24aa2f57a3c83e8b25263f3c2171770faef8aef02b947f1", 0x4f}, {&(0x7f00000014c0)="313d9f0ebee4957ddb9d3fc145ad0c979b6631f106b3e6cfea463f8224a9bcb4272249da0a8a19e3cdb123651590778fce62bae0", 0x34}], 0x5, 0x0, 0x0, 0x4009008}, 0x4000004) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) 4.444618228s ago: executing program 6 (id=12564): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRESHEX=r2, @ANYBLOB="010000000000008000250258ee0b00000500000000", @ANYRESOCT=r2], 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x88) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000540)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x10, 0x8, 0x62cf, 0x3, {{0x5, 0x4, 0x3, 0x6, 0x14, 0x0, 0x0, 0x5, 0x4, 0x0, @private=0xa010100, @local}}}}) write$nci(r0, &(0x7f0000000700)=@NCI_OP_NFCEE_DISCOVER_RSP={0x2, 0x0, 0x2, 0x0, 0x2, {0x1, 0x3}}, 0x5) 4.250286769s ago: executing program 5 (id=12566): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x20, 0x0, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0x6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x200001c1}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002740)={0x3c, r2, 0x79964d8cba2f455d, 0xa070bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x800000000001}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000010) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x8000, 0x10, 0x7a470e14, 0x3, {{0xf, 0x4, 0x0, 0x17, 0x3c, 0x68, 0x0, 0xf, 0x2f, 0x0, @multicast1, @broadcast, {[@generic={0x7, 0x9, "53b263fccf768b"}, @generic={0x94, 0x4, "f494"}, @noop, @ssrr={0x89, 0xb, 0xd5, [@multicast2, @broadcast]}, @end, @rr={0x7, 0xb, 0x9e, [@local, @rand_addr=0x64010101]}, @generic={0x86, 0x2}]}}}}}) getsockopt(r0, 0xc9, 0x0, &(0x7f0000000340)=""/143, &(0x7f0000000400)=0x8f) ioctl(r0, 0x6, &(0x7f00000002c0)="af9778f842be18bdf0a715080d76038c4f77a24b164882c8b320a8d6e836032a52c638edcb20ba08a396c9addec281178027fc54a6fdfb896ccde93c9734b47725df5374cbaa10833756e074") sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x564}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x50}, 0x1, 0x0, 0x0, 0x890}, 0x6004) 4.159902205s ago: executing program 6 (id=12567): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x31, &(0x7f0000000000)={0x0, 0x0}, 0x10) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x10001, @empty, 0x3}, 0x1c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x1}, 0x14}}, 0x24004044) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) splice(r1, 0x0, r2, 0x0, 0x10500, 0x0) r4 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r4, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 3.889293512s ago: executing program 5 (id=12568): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000013c0)=@newtfilter={0x114, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_u32={{0x8}, {0xe8, 0x2, [@TCA_U32_SEL={0xe4, 0x5, {0x3, 0x6, 0xd, 0x5, 0x4, 0x1, 0x5, 0x9, [{0x8, 0x1, 0x19, 0x7}, {0x0, 0x7, 0xfe000000, 0x1}, {0x9, 0x4, 0x4, 0x4}, {0x7, 0x7, 0xd, 0x1}, {0x5, 0x0, 0x3, 0xffffffff}, {0x101, 0x398, 0x8, 0x2}, {0x9, 0x0, 0x8, 0x36}, {0x4, 0xe8c, 0xcc, 0x5}, {0xff, 0x40, 0x347c, 0x1a80}, {0xc, 0x80, 0xffffffff, 0x1ff}, {0x7, 0xe, 0xcf1713ac, 0x35ad5b6d}, {0x1, 0x6, 0xff, 0x4}, {0x0, 0xffff, 0x78e, 0x400}]}}]}}]}, 0x114}}, 0x0) write$tun(r1, &(0x7f0000000280)=ANY=[], 0xfd6c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x2a1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8020}, 0x800) write$tun(r0, &(0x7f0000000040)={@val={0x2000}, @void, @eth={@broadcast, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @multicast, @empty, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}, 0x2e) 3.644041256s ago: executing program 2 (id=12570): r0 = socket$inet(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r1, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x41) (async) r2 = socket(0x10, 0x3, 0x0) getsockopt$SO_NETNS_COOKIE(r0, 0x1, 0x47, &(0x7f0000000440), &(0x7f00000004c0)=0x8) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x24040880}, 0x800) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x1, &(0x7f0000000480)=@raw=[@kfunc={0x85, 0x0, 0x2, 0xa000, 0x2}], &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000000)=0x1, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}, [0xa7f, 0x6, 0xc, 0x5, 0x9, 0x4, 0xffff, 0x3, 0x2, 0x2, 0x7f, 0x1e76, 0x7fff, 0x10, 0x10000]}, &(0x7f0000000700)=0x100) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000880)={r10, @in={{0x2, 0x4e24, @loopback}}, 0xaf, 0x3}, &(0x7f0000000940)=0x90) sendmsg$NL80211_CMD_DISCONNECT(r7, &(0x7f0000000400)={&(0x7f0000000140), 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000429bd7000fedbdf253000000008000300", @ANYRES32=r9, @ANYBLOB="0c009900030000005b0000004e76232a617968d36d60290c2eb951032d8cd857f074df08996e88e7fe08f614bba5959f7eab6b97ae69bef954d09eddc7a4fbcf1a0b0e661962d43face5f1409066d2b66f98cb6197dd0bee31cd1961f5c4d1d8068bb853cdf92cdee906efc851a31f13b8a9e5baecf7161d23a7975ce3e541422cf57593f387decb2a2cff87994742f89b0696861369b16e758986eef5dbf565967b3d9e5997a41a93bf00f7309fba73a935c01302d645efbbc5d1aaa7ebcb76c5ee8ea463d12f5821215d925be50c5e7caad11ffaf71bf8c49adea8403f42eb5f9fe1af6d8c86e12b529b26037ec1935103e179ca94"], 0x28}, 0x1, 0x0, 0x0, 0x18}, 0x40001) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=0x1, @empty}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) write(r11, &(0x7f0000000080)="340000001a000100000000000000000002202000000000000000000008000100e001020308000200ac1414bb0800030001000000", 0x34) (async) r12 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r12, 0x6, 0x13, 0x0, 0x0) (async) r13 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r13, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r13, &(0x7f0000000000)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) setsockopt$inet6_IPV6_ADDRFORM(r13, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$SO_BINDTODEVICE(r13, 0x1, 0x19, 0x0, 0x0) 3.522497427s ago: executing program 0 (id=12571): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007a000000850000000e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4}, 0x90) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1f, 0x4, 0xba2e, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv4_newaddr={0x30, 0x14, 0x509, 0x70bd26, 0x25dfdbfc, {0x2, 0x1f, 0x1, 0xff, r2}, [@IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x580}, @IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040014}, 0x4010088) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x8c}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.520322065s ago: executing program 6 (id=12572): select(0xe, &(0x7f0000000000)={0x7}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000005c0)={0x1, &(0x7f0000000340)="09c199e65d2c861072b3b8d58d75c98fe53d09886f364309f7416b101cae61a37f2738d89b60dd252e017ed4f046910e216a7b30c5a2f2e1af8897c2cb7e139d3b9dea629ba2aa7d90effc77d4779ea291dfa2e461aaa7dd615e22eefa5652c485e26a7e0c081b851c5c23f94982faf25db77521b90cc90abfe7c46a5d087c3b458ea106213539ce8220b0d3156ab08215a378828faf294fb22d1de12956cda7d8c7c5a9d0f48e1ad17b5c761073e6e5f565", &(0x7f0000000400)=""/18}, 0x20) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000540)={'sit0\x00', &(0x7f0000002940)={'syztnl2\x00', 0x0, 0x40, 0x7800, 0x21ae, 0x7ff, {{0x5, 0x4, 0x3, 0x3d, 0x14, 0x65, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102}}}}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = socket(0x1d, 0x802, 0x6) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000340)=@ethtool_regs={0x4, 0x6}}) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x23}}, 0x5, 0x0, 0x0, 0x0, 0x5685, &(0x7f0000000040)='pimreg\x00', 0x1, 0x7f}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x2, 0x6, 0x6e8, 0x148, 0x2f8, 0x228, 0x228, 0x228, 0x618, 0x618, 0x618, 0x618, 0x618, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0x0, 0x0, 0xff000000], 'pimreg0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x120, 0x148, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [], [], 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3}}}, {{@ipv6={@mcast2, @dev, [0x0, 0x0, 0x0, 0xffffffff], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x8}, {}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @empty, [], [0x0, 0x0, 0x0, 0xffffff00], '\x00', 'bond_slave_0\x00', {}, {}, 0x84}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xff000000, 0x0, 0xff000000], [0x0, 0x0, 0xff000000, 0xffffffff], 'veth1_to_hsr\x00', '\x00', {0xff}, {}, 0x62, 0x35, 0x1, 0x10}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv4=@remote, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [0x400], 0x0, 0x0, 0x0, [@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x10, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0], 0xff}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x748) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6) sendmsg$ETHTOOL_MSG_WOL_SET(r6, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x60c00200}, 0xc, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="03002dbd70000000000003000000100001800b0001006574683a6c6f00000e14e05a111b6b2682b675746010c6decbf3d941f9306f7dd813134c413805be92cf"], 0x24}}, 0x4044844) r9 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r9, 0x6b, 0x5, 0x0, &(0x7f00000023c0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f00000000c0), &(0x7f00000001c0)=r3}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0xffe1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x58, 0x2, {{0x8000, 0x9, 0xf, 0x4, 0x3, 0xac}, [@TCA_NETEM_CORR={0x10, 0x1, {0x6, 0x10, 0x8}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x200, 0xfffffffffffffffc, 0x8cb, 0x7, 0x8, 0x2}}]}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8004001}, 0x20000000) 3.517974683s ago: executing program 4 (id=12573): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000a80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf258100000008000300", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 3.246095347s ago: executing program 2 (id=12574): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x304, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r0) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000001) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)="130aed3cf70fee13c815395db28e88c7f6e67db12b199dd0ab666efdd139ba0e87a39fa8dc8bebd009d9176c07411b67df45396da0ba5738c1c203721da61c738d217d1195afe5fe1c8c9f4d71944ac6452e1cda80fd7680ee7606cf0b2128655356165b2dc7607f89", 0x69}, {&(0x7f0000000300)="fe779f659e1a519e0411501fb7658ff7c255f46d56abbe3305dc45ba9d2010dc8188ecd22692ff60055cd9988002d4ef4002f23ec4451802b5d1ea43524a28c4f140ca421e86d670bfdd62a93344c33871505810a8baccde2afe9609e82038384a517cfcb0226f49f91ad2bb4231795630f40a68367fa3ec1c090bac17a94e043f980d5b74be1d08b79ecbbbe9b01beb5ddddd4db8d606998dbb6da94fd4161e88511e9066d928bbb97404c4d266138c4584ee3de53d9f2cdfae51ab4c463c32b454281d9f86671c7dd57637a2a67ab1401056d76787cc07c9a17d0d", 0xdc}, {&(0x7f0000000400)="ee289c896816eee1784c9dd89485219c0f4790d1dc2773e34f035dc5dff6cbe1da4043823077f70fbb7a866dc4182dd4345d9a4ddd57d86edfdc553bf6b043d20430a5e34031d1e78943a522b53069a50cd586945b78ddc54b0be6c2075564c531ef66f5e8d116ba493c57fb79b03a89d8161999fed93eae8215a66ad4862751d84e1c49f054717b44ca3b6617ce60c945a7144f7b3d16e8a87975b5e68153ef90d0d6ff7886f8d4024d62233f", 0xad}], 0x3, &(0x7f0000000500)=[@hopopts={{0x70, 0x29, 0x36, {0x0, 0xa, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @calipso={0x7, 0x10, {0x2, 0x2, 0x2, 0x18a3, [0xfff]}}, @enc_lim={0x4, 0x1, 0x99}, @pad1, @generic={0x7f, 0x37, "1cb6e4a434d5f5909679973f4c2095d861e3769e1be32d1e5f43b62fa22884d589c208602a6592c0ee2b8cc2069c73042ad8873ab1a1a9"}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xfffffffb}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x33, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0x8}]}}}, @hopopts={{0x100, 0x29, 0x36, {0x33, 0x1c, '\x00', [@ra={0x5, 0x2, 0x3}, @calipso={0x7, 0x30, {0x1, 0xa, 0xf8, 0xfffa, [0x7, 0xf, 0xd55, 0x7, 0x9]}}, @generic={0x8, 0xaa, "168750b67e37192bddb29365c62139151f142d42899f9c13a580210ff60338de3d4bcd94e6760d3c76ed05530d36e856423093c314c3bd9ffa89d438a6758a3c19a3e8333f8457949c0bd4d6e3531a101fdca76e6d4bb419c8edd36a0698c0a61f5f95536f9719b614296ad6efc655d2cf9e3767527e668c2339c0ef504c7e4495d611a59ac1dfb2e01982415905944809bc20937d5bff8b6e167e7609793aa8df767dab536c759cbfe4"}]}}}, @rthdr={{0xa8, 0x29, 0x39, {0x2, 0x12, 0x1, 0x2, 0x0, [@remote, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @dev={0xfe, 0x80, '\x00', 0x44}, @ipv4={'\x00', '\xff\xff', @local}, @loopback]}}}, @hopopts={{0x38, 0x29, 0x36, {0x1d, 0x3, '\x00', [@padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @private0}, @ra={0x5, 0x2, 0x81}, @pad1]}}}, @dstopts={{0x38, 0x29, 0x37, {0x3c, 0x3, '\x00', [@pad1, @ra={0x5, 0x2, 0xf}, @pad1, @enc_lim={0x4, 0x1, 0x4}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x2}, @pad1]}}}], 0x2f0}, 0x50) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x1) syz_genetlink_get_family_id$net_dm(&(0x7f0000000940), r0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000980), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={0xffffffffffffffff, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x10, &(0x7f0000000a80)=[{}], 0x8, 0x10, &(0x7f0000000ac0), &(0x7f0000000b00), 0x8, 0x58, 0x8, 0x8, &(0x7f0000000b40)}}, 0x10) connect$can_bcm(r4, &(0x7f0000000cc0)={0x1d, r5}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000d00), r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000d40)={0x0, @in6={{0xa, 0x4e23, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10}}, 0x2, 0xf, 0x8615, 0x8d7f, 0x60, 0x3, 0x1}, 0x9c) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e40), r0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x14, r6, 0x8, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000005}, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000001100)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000f40)=""/186, 0xba, 0x1, &(0x7f0000001000)=""/207, 0xcf}, &(0x7f0000001140)=0x40) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f00000011c0), r4) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x28, r7, 0x2, 0x70bd26, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x2d91c37c5b621a4e) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r8, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x50, r6, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x44004}, 0x4040) ioctl$FAT_IOCTL_GET_VOLUME_ID(r3, 0x80047213, &(0x7f0000001400)) setsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f0000001440)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001480)="70d51462a8a5335b980aceb6ea8f54", 0xf}, {&(0x7f00000014c0)="d5033aeabed7a1709c9e78d437ee4acd73409fd96c2eefbf6009482168d806a8bcb0d86d76557ab14a8f6d8a6feedb10141309f5bdd45ddf3e709ef7854cae03690b005e4303bcce35b1415340b8512fb7bff0675e2bf1b5076991e3737c8f34ebb2b68739eac14c3025d9531d7ed4b15f3c9f1e2b97e85a83268a7e6fe53522607838b9d84ab7d68f729831311713cdbb579dd6223b02cde20efd9a19cb7c386a413fece59936dac21453f09a37f0aafa632621905c0d5c394b41b0f88fb100", 0xc0}, {&(0x7f0000001580)="88956f33c95641362ae2cd2f771f6cf4485746881adfec60870fa815a7567e485da1446d3ccc8c2a7bc657c4aebbc941a8ffa415cfbfd12bd97051f94021745c7c5f890f99d26a1bd1cb0daf71608dae52631ebd210b1db42856c8e9203024", 0x5f}], 0x3, &(0x7f0000001640)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8000}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80000000}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1000}}, @ip_retopts={{0x44, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0x15, [@local, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x94, 0xb, "b908508fd0efed1844"}, @rr={0x7, 0x17, 0xe0, [@empty, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast2]}]}}}], 0xd8}, 0x40) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x6c, 0x1, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x49, 0x6, "51fe0a8eee6d087554824aca7de35869704bd57485b4b27728a605e8d8745ada13893b38d998302c93275412ee2727ab59dfab888188200d98994ec60263db6d166331b358"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4840}, 0x8091) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000018c0)="409fb6297ea90ecf225db584a199333642f09ec88c480337a9d11151e42fbf261e6e74db3f5ecc70e361187ed653754317f49157267ea50981397d85cfccd731c86c6c53afd3187548e4de9a9ebaab83898ba1cdc95e278b89b57b391c2f7c0a4cc3336b76e6de422cfae73bbe92531d4cfcf4e360e36417818480e6b934dca188d54f338e", 0x85) r9 = openat$cgroup_subtree(r4, &(0x7f0000001980), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f00000019c0)={[{0x0, 'memory'}, {0x2d, 'net_cls'}, {0x2b, 'perf_event'}, {0x2b, 'perf_event'}, {0x2d, 'pids'}, {0x2b, 'hugetlb'}, {0x2d, 'freezer'}, {0x2d, 'cpuacct'}, {0x2b, 'net_prio'}]}, 0x54) sendmsg$NFNL_MSG_CTHELPER_DEL(r4, &(0x7f0000001b40)={&(0x7f0000001a40), 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x50, 0x2, 0x9, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40040}, 0x50) recvmsg(r3, &(0x7f0000002240)={&(0x7f0000001b80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000002100)=[{&(0x7f0000001c00)=""/74, 0x4a}, {&(0x7f0000001c80)=""/142, 0x8e}, {&(0x7f0000001d40)=""/86, 0x56}, {&(0x7f0000001dc0)=""/98, 0x62}, {&(0x7f0000001e40)=""/69, 0x45}, {&(0x7f0000001ec0)=""/230, 0xe6}, {&(0x7f0000001fc0)=""/116, 0x74}, {&(0x7f0000002040)}, {&(0x7f0000002080)=""/60, 0x3c}, {&(0x7f00000020c0)=""/22, 0x16}], 0xa, &(0x7f00000021c0)=""/95, 0x5f}, 0x20) 3.213265623s ago: executing program 0 (id=12575): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x24000800) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x2, 0x2, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x80) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x1f, 0x24, 0x1}, 0x24}}, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)={0x28, 0x2d, 0x107, 0x70bd2b, 0x25dfdbfe, {0x6, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x6, 0x9, 0x0, 0x0, @str='[\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000004}, 0x4008030) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x17, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x80) syz_emit_ethernet(0x32, &(0x7f0000000a00)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast1}, {0x4000, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0x6, 0x100}}}}}}}, 0x0) sendmmsg$inet6(r2, &(0x7f00000071c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='H', 0x1}], 0x1}}], 0x1, 0x0) 3.211201428s ago: executing program 4 (id=12576): r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000080)=0x5, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)=@delsa={0x280, 0x11, 0x8, 0x70bd2d, 0x25dfdbfc, {@in6=@mcast2, 0x4d4, 0x2, 0x32}, [@replay_val={0x10, 0xa, {0x70bd25, 0x70bd28}}, @mark={0xc, 0x15, {0x35075c, 0xe72}}, @tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d2, 0xff}, 0x0, @in=@multicast2, 0x3504, 0x2, 0x3, 0xb, 0xffffffff, 0x8, 0xfddf}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, 0x4d4}, 0xa, @in6=@mcast2, 0x3503, 0x4, 0x1, 0x9, 0x37, 0x2}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d3, 0x33}, 0x2, @in6=@rand_addr=' \x01\x00', 0x3505, 0x5, 0x0, 0x94, 0x1, 0xc9c1}]}, @algo_comp={0xd2, 0x3, {{'lzjh\x00'}, 0x450, "71eb3bb23652e35e707761d1e5cc886eacc3387af4eddd723e16bd89d334e12364e86eb8f40732da8726db482113e54e9a3665840a9d1fa85647f268c3929bab4cc34cac5fb5080fd74d60d76178e8c962fe4945f5231055597c14b7434bd11b2730944a42637634d7666607913f4f5461b33248f6daec2dde412782d10c7f01725a1bfc1b8050c98d88"}}, @migrate={0x9c, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x2b}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x2b, 0x5, 0x0, 0x3502, 0xa, 0x2}, {@in=@rand_addr=0x64010102, @in=@empty, @in6=@mcast1, @in6=@mcast2, 0x3c, 0x3, 0x0, 0x3504, 0xa, 0xa}]}, @sa_dir={0x5, 0x21, 0x1}]}, 0x280}, 0x1, 0x0, 0x0, 0xc1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x8044}, 0x8000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000580)={'ipvlan1\x00', &(0x7f0000000540)=@ethtool_modinfo={0x42, 0x957, 0xc}}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000005c0)={0x0, 0x1, 0x30}, &(0x7f0000000600)=0xc) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000640)={r3, 0x75}, &(0x7f0000000680)=0x8) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, r6, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40448d4}, 0x4044884) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000840)={0xffffffffffffffff}) setsockopt$packet_int(r7, 0x107, 0xc, &(0x7f00000008c0)=0xc, 0x4) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000900)={0x1, 'veth0_to_bridge\x00', {}, 0x2}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f0000000940)={0x3, 'veth1_to_hsr\x00', {0x7}, 0x7f}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000009c0)={'dvmrp1\x00', &(0x7f0000000980)=@ethtool_cmd={0x3f, 0x400, 0x4, 0xffff, 0xfc, 0x9, 0x7, 0x58, 0x7, 0xe, 0x3, 0x7, 0x4, 0xd6, 0x81, 0x8, [0x100, 0x3]}}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000a00)={r4, 0x7}, &(0x7f0000000a40)=0x8) r9 = socket$inet_sctp(0x2, 0x5, 0x84) recvmmsg(r9, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000a80)=""/247, 0xf7}, {&(0x7f0000000b80)=""/23, 0x17}, {&(0x7f0000000bc0)=""/151, 0x97}, {&(0x7f0000000c80)=""/203, 0xcb}, {&(0x7f0000000d80)=""/206, 0xce}, {&(0x7f0000000e80)=""/208, 0xd0}, {&(0x7f0000000f80)=""/137, 0x89}], 0x7, &(0x7f00000010c0)=""/221, 0xdd}, 0x2}, {{&(0x7f00000011c0)=@hci, 0x80, &(0x7f00000012c0)=[{&(0x7f0000001240)}, {&(0x7f0000001280)=""/60, 0x3c}], 0x2, &(0x7f0000001300)=""/154, 0x9a}, 0x8}, {{&(0x7f00000013c0)=@nfc, 0x80, &(0x7f0000002600)=[{&(0x7f0000001440)=""/179, 0xb3}, {&(0x7f0000001500)=""/210, 0xd2}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x3, &(0x7f0000002640)=""/22, 0x16}, 0x5}, {{&(0x7f0000002680)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000002c80)=[{&(0x7f0000002700)=""/187, 0xbb}, {&(0x7f00000027c0)=""/105, 0x69}, {&(0x7f0000002840)=""/207, 0xcf}, {&(0x7f0000002940)=""/125, 0x7d}, {&(0x7f00000029c0)=""/126, 0x7e}, {&(0x7f0000002a40)=""/240, 0xf0}, {&(0x7f0000002b40)=""/2, 0x2}, {&(0x7f0000002b80)=""/249, 0xf9}], 0x8, &(0x7f0000002d00)=""/208, 0xd0}, 0xffffffff}, {{&(0x7f0000002e00)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003080)=[{&(0x7f0000002e80)=""/215, 0xd7}, {&(0x7f0000002f80)=""/202, 0xca}], 0x2, &(0x7f00000030c0)=""/32, 0x20}, 0x4}], 0x5, 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000003240), 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000003280)={r3, 0x40000000}, &(0x7f00000032c0)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r9, 0x84, 0x71, &(0x7f0000003300)={r8, 0x7ee}, 0x8) sendmsg$NFT_MSG_GETOBJ_RESET(r7, &(0x7f0000003400)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000033c0)={&(0x7f0000003380)={0x34, 0x15, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xe907005bb02c5b88}, 0x40000) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f0000003440)=[@in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e22, @private=0xa010102}], 0x30) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000003540)={&(0x7f0000003480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003500)={&(0x7f00000034c0)={0x30, r2, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x8}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x441}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x11) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000035c0), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000003600)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f00000036c0)={&(0x7f0000003580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003680)={&(0x7f0000003640)={0x30, r10, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0xc011}, 0x4008000) 2.728048712s ago: executing program 5 (id=12577): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x890b, 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) 2.678708305s ago: executing program 0 (id=12578): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a000100000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="eb"], 0x30}}, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0) close(0x3) socket(0x1, 0x1, 0x3) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}, @NFT_MSG_DELRULE={0x5c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_USERDATA={0x47, 0x7, 0x1, 0x0, "7864efcb6b8a8a78e0159f66e59659f04fe8b8b9077ac18983431e07f4a5ebb0aa7c76f8883e74872e2d463b0d742395cdce4cd78a3fa6be35b65cdb7ff01d7cee82db"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xfc}}, 0x40) r10 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r10, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) setsockopt$inet6_int(r10, 0x29, 0x1000000000021, &(0x7f0000000000)=0x4, 0x4) connect$l2tp6(r10, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) socket(0x1, 0x803, 0x0) 2.651581963s ago: executing program 6 (id=12579): getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r2) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029b87000fedbdf254500000008000300", @ANYRES32=r5, @ANYBLOB], 0x30}}, 0x10000010) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req3={0x10000, 0x1, 0x100, 0x100, 0x100, 0x3, 0x4}, 0x1c) write(0xffffffffffffffff, &(0x7f0000000014)="050001", 0x3) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x0, 0x0, {0x2}}, 0x1c}}, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xc2, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x4002, 0x1, 0xffff, 0x0, 0x1, 0x7, @empty, @remote, {[@cipso={0x86, 0x77, 0x1, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x0, 0x9, "02270e000042eb"}, {0x2, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "00de6c83d50000"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x1, 0x11, "c8f46976e79ea788f03d9d3205927e"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) 2.447278506s ago: executing program 5 (id=12580): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) nanosleep(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001640)={0x20, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x138, r5, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x34, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xb0f}]}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x40, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffffe11c}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x98, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffff}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}]}, 0x138}, 0x1, 0x0, 0x0, 0x20008886}, 0x20000080) sendmsg$NFT_BATCH(r4, 0x0, 0x40) write$nci(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="610501"], 0x10e6) 2.363680483s ago: executing program 4 (id=12581): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/250, &(0x7f0000000100)=0xfa) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000140)=0x10000, 0x4) tee(r0, r0, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, 0x5, 0xfc, 0x0, 0x400, 0x2, 0x210, r1}) write(r0, &(0x7f0000000240)="2558f739f6b608ba28cdc0942d354c2fa19be971e3ee233b5aced907a063dc10baf654f84dd006c073108a2ff6e822a498a9e334c8fb5649605621a8ba9da027cfce4b9c34abbdf15489e7b9ee20f73a73103e0bc8807948cd4ce5c864d6dbb896b56ed8e7e231e47691991b88fded3e9699fd1672a0f31b15f94ee925820ab4baa6b32233aa2d873395f58071661f795084bb46e9ef6375cb48671f4a3c2668dbfe0cb31aa765a2c487", 0xaa) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000300)={0x0, 0xfc}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000440)={r3, 0xb0, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0xd}, @in6={0xa, 0x4e23, 0x1d, @private1, 0x3}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @private=0xa010101}, @in6={0xa, 0x4e24, 0x601, @loopback, 0xd}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e21, 0xf, @private1, 0x1}]}, &(0x7f0000000480)=0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r5, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r6, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20004010}, 0x840) syz_emit_ethernet(0x1b0, &(0x7f0000000640)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @local, @void, {@ipv4={0x800, @icmp={{0x2e, 0x4, 0x3, 0x8, 0x1a2, 0x64, 0x0, 0x2, 0x1, 0x0, @multicast2, @loopback, {[@noop, @end, @timestamp={0x44, 0x20, 0x7d, 0x0, 0x2, [0x4, 0x964, 0x1, 0x3, 0xd, 0x9, 0x7]}, @timestamp={0x44, 0x10, 0x75, 0x0, 0x5, [0x5, 0x7, 0xff]}, @cipso={0x86, 0x70, 0x3, [{0x2, 0x3, 'q'}, {0x2, 0x10, "4f9c3e0735c1adc0588a1773d942"}, {0x1, 0xf, "8542bc7564ef15f5cb77f96faa"}, {0x0, 0xa, "f23cfbe3a65d2909"}, {0x0, 0x7, "8d26ca190c"}, {0x5, 0xd, "b3467b2630582c69f11cc2"}, {0x1, 0xa, "5f0307aaa9f550a4"}, {0x0, 0x10, "5d11d3d29f5b3a146f5228f390ea"}, {0x2, 0x10, "3a497f528b11b05bfc13fb6c40f1"}]}]}}, @echo_reply={0x0, 0x0, 0x0, 0x66, 0x3, "e0d832df3bc68176dc22f8abb19e121f14e73efc29a53f70579dd0cd7aa7954811d39aa60bcf6bf5589eabdf7df4b551e2eac0f096c6e7a423f3ab7381fcb03e54c4751e229d59c3bd7656b5dd393517849ed32b0a3d193e8225ca24db8be54288d29768b3070226a1a11050f3ea809cb1c1273b8de4c364da9c991edb2a9f5f081cb6206d915546582ea8499a0f34d59adaa8ef3bdea98675b50e69ad81be9c6ead0888f16696bf3c856356deaeb1f7d09dfd1edf1cd03b65abdea24dc0f77419d12b3702ce92bfabbd92ecc9f17071e94d3ac427b752c8b169f3f22204efe8d0d5"}}}}}, &(0x7f0000000800)={0x0, 0x1, [0x256, 0x46, 0x5da, 0xd5c]}) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$FIDEDUPERANGE(r8, 0xc0189436, &(0x7f0000000840)={0x75f, 0x9, 0x3, 0x0, 0x0, [{{r2}, 0xffffffff7fffffff}, {{r8}, 0x2}, {{r5}, 0x2}]}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r5, &(0x7f0000002180)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002140)={&(0x7f0000000900)={0x1818, r6, 0xa02, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IE={0xa5, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x6, 0x6c, 0x5}}, @fast_bss_trans={0x37, 0x69, {0xb, 0x1, "f9270f84f45e48228d5ffa7be054f6b9", "b54e76a8d4251f55b6bf23c6f5b3a6c29fb33dac1e3faad99d2dc5344208eca4", "c907cd97b3c4981d2920a4056fde03044c3066b7953eb9ed4111c27c800b82ce", [{0x1, 0x15, "8e735e936a41e0219bb7d2c5c95b3c651ab1bed70c"}]}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0, 0x2, 0x1e, 0x28}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x0, 0x8, @broadcast, 0x6000, @value, 0x8000, 0x1e0, @device_b}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xc, 0xf9, "c52f54dab7bfd7db"}, @NL80211_ATTR_FILS_ERP_REALM={0x5e, 0xfa, "87d155fdcd210b412adcc149a669d5de5a958d91d0f111eb3774dd6c3f0bb14b3d4765a721629d68b8c322be267dd6a580b3fed5d8f99747a4bc0003cd68efc5f3f960d05b96fe7d5dc322d34e13861eec61a2ef1075953b3acd"}, @NL80211_ATTR_FILS_ERP_REALM={0x76, 0xfa, "4915f9bda1234efbd43fb1db4559e2ffb1615ae2eeb383da148d223cf3d0b6c105f609d4c937854abc0a918b8faaf5c9b8430d3bfd19d1bd6dbc3d2494180692a9593b17bb9ee9c8c80386c0ce261e292964dbbb74bfbedd456cdd1f2380d5e765ef0faea7a0d86cebf1de0ca524fe26ba84"}], @NL80211_ATTR_IE={0x89, 0x2a, [@ibss={0x6, 0x2}, @channel_switch={0x25, 0x3, {0x1, 0x38, 0x6}}, @challenge={0x10, 0x1, 0xa8}, @channel_switch={0x25, 0x3, {0x1, 0x28, 0x12}}, @link_id={0x65, 0x12, {@initial, @broadcast, @device_b}}, @mesh_chsw={0x76, 0x6, {0x4, 0x9, 0x31, 0x5}}, @cf={0x4, 0x6, {0x3, 0x9, 0xe1f, 0x9}}, @mesh_id={0x72, 0x6}, @preq={0x82, 0x46, {{0x0, 0x1}, 0x14, 0x0, 0xfffffffe, @broadcast, 0x29, @void, 0x3800, 0xc1, 0x4, [{{0x0, 0x0, 0x1}, @broadcast, 0x6}, {{0x1}, @broadcast, 0xffffffff}, {{}, @device_b, 0xfb7e}, {{}, @device_b, 0x4}]}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x1}, @NL80211_ATTR_FILS_ERP_USERNAME={0xd, 0xf9, "c31f7fc9f2bb161386"}, @NL80211_ATTR_FILS_ERP_RRK={0xe5, 0xfc, "a069c2ddbd52102c02b095d8c2af5b52c53af70f977502e487fead6a5e65e515809efcda5a57f8bb9abee9b41024f9bed32baa5deb6e64a2ae0adba13b64f7690129759a2ba222f5eeecf8a3db21d392e8436d91508cdb19e79523bb4e8b4f898d37c348417bec4fc176dca2d0787dcc45d0a380e46fb13d6a1d5edfe15854723bcdfcdde7848dd53083698ed06f66b4f38fac65b9eaf4405b2da3eba6b683ec7faa816f83d3e7cb054695e6488619ae984eea4bc41ba0ea5c6e750ef7ac8c00bac269cbfa39b6879f64d495762dc7d4ae96380c926dc61d150cbf5b561a7701c0"}, @NL80211_ATTR_FILS_ERP_RRK={0x14, 0xfc, "c046ba9285c724dd971c40d433a79c70"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x4}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9}, @NL80211_ATTR_FILS_ERP_RRK={0xa, 0xfc, "dbf9e8b0c788"}, @NL80211_ATTR_FILS_ERP_REALM={0xa5, 0xfa, "c16e731d2f8c7a76450fdf748684b08c28d61a564f44f2baa59c2294de88be0150822e8385c725d3d0098ae3ff1cece35d1aaa73143e2d9080c9413f963b7833e3e19d0feb09cd20301a433b77344deae371761fb3bc3986b516c768ef12f8aeafef3c14f6e88d087330a19879c42a6e3bfe9f24633de7a42e0e7da38c3fbeda2e2ef61a7befdf0a519e3f7ca47dafab56a45358823044e16e642b06d6c73c9d65"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6339}], @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x100, 0xfa, "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"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xf, 0xf9, "20babc3321ae20e99630fa"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x13, 0xf9, "552a7ffe785abd534df13e21ee6757"}], @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xd1, 0xfc, "a4b570612c4c6314d9a37122e2ff06ec95eedc97510667e694deaad18d44d8af7db0e1eda40fe8af5d6b282579c1d42c01cb896ed4f3cc76cb3a001d5e5f92c67d5a153fe3bdde491e76baf7214bc14f4cfa1544faf91ba6583b92f60f19679af9415d943b6131b3a578f7ab71e8e1e23da1cf1784a7a71e3f65a9c21b64ff973cd9d3dae5b51417f8b5383deee8e422b1a41f21f683e274a5244fa620acfd39c6e7852933878cc23db31b2de900d04ff4504e41495dbfda5b08d05a3eb5108b70e1f521bb2f083dba1e65ffa6"}, @NL80211_ATTR_FILS_ERP_REALM={0xaa, 0xfa, "9be19274926c1f95baebd437a3b61bb391ad9fdd80c15236f84b1d5ce735555deec1121229c4cee16a3dd9a789b36ec9e01e2b400596512ed6a5e8a1cd21fc38a1a60ebbc740df7a385f7f64f31d37b90217ce4140ab044f609dc595f10803ad8a3bef5c55564f9470fccd8652add93884477f619ce5cd37f0188818a0805b9ae2f87727ffe75a8cb4b778fa67a4ca9d835df642343589de7a614a8820cf5ae4b3bb82f2a3a2"}, @NL80211_ATTR_FILS_ERP_RRK={0x58, 0xfc, "363fe5a1144ec1654fb296a6f3482287039204bccf286b1f6f81df163c44aaaf17131807fcfbc8a9766a2bd9cd1263cb0fcb09b5ae9a1c7adb95ba52315c5cac6b4213ec4521e0b01d61ef589397667ecc2fbd4c"}, @NL80211_ATTR_FILS_ERP_RRK={0xf3, 0xfc, "735dc1bbf240978522356fd8b91404038a804067a26c9ba31829684e6553ae9cd24f536b8067382139712a2cd32cdb62e4936397e8ab7993cb5cd7b841a323f462a9ec3beab7b3c000a3455f22b3726ee8d2a0c013f86cb1c657506d68eefbfddf25fd81865bc6ecb9dd1c6e563786aa81cf93e8568ada9f9f185a72afd636263fc3743c4156bc56f1bcc72f5b8b01a3587d6eb3be658f568161ef8ac5ddd713e05b6bbf3af905d1b14888c2a331500fca39e3daf0f65502c95375071b383189b2b40552dae8045da843a08d07b53de63bd6378806f9fc12285c01f6176e01b1fd22e8e67afec550299ef110ccd020"}, @NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "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"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x5}], @fils_params]}, 0x1818}}, 0x20000000) r9 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000021c0), 0x1, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r9, 0x4004662b, &(0x7f0000002200)=0x5) ioctl$XFS_IOC_FSINUMBERS(r5, 0xc0205867, &(0x7f0000002380)={&(0x7f0000002240)=0x5, 0x8cb, &(0x7f0000002280)=[{}], &(0x7f0000002340)}) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000023c0), 0x10) getsockopt$inet_mtu(r9, 0x0, 0xa, &(0x7f0000002400), &(0x7f0000002440)=0x4) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000002480)={r4, 0xfffffffc}, &(0x7f00000024c0)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r10, 0x84, 0x78, &(0x7f0000002500)=r11, 0x4) sendmsg$NL80211_CMD_GET_REG(r5, &(0x7f0000002600)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002580)={0x18, r6, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000002640)=@sack_info={r11, 0xffffff01, 0x81}, &(0x7f0000002680)=0xc) syz_emit_ethernet(0xc5, &(0x7f00000026c0)={@remote, @empty, @val={@val={0x88a8, 0x4, 0x0, 0x3}, {0x8100, 0x0, 0x1, 0x3}}, {@mpls_mc={0x8848, {[{0xff, 0x0, 0x1}], @llc={@snap={0xaa, 0x155, 'X\r', "3a92c2", 0x4, "04cd92ffb22b6fd87a15a0d260585e31be0de860685898e3735238804dd5cc339fabaeec21da15625039b9f5bcee0888278e591b0ebf3ad836e4b39572d4ab9e6b7404f00b569bbc24fdce42814f656faedd50680694232df804555d0d0d16397af3802f965d765f998fec74a785fa8f168a11973c848408bbb52fae8f6036add2a18a4ed75c86c3d3d68cb4709584ec172c4f5d3e9333a705bb7d466e1cef681b9e"}}}}}}, &(0x7f00000027c0)={0x1, 0x3, [0xc35, 0xbfb, 0x502, 0x954]}) ioctl$BTRFS_IOC_SCRUB(r10, 0xc400941b, &(0x7f0000002800)={0x0, 0xe6b, 0x9f}) 1.922759368s ago: executing program 6 (id=12583): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) (async) sendmsg$sock(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) r2 = socket(0x2b, 0x1, 0x0) listen(r2, 0x0) ioctl$sock_TIOCOUTQ(r2, 0x5411, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) (async, rerun: 64) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x31, &(0x7f0000000000)={0x0, 0x0}, 0x10) (rerun: 64) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x18800, 0x0) write$tun(r3, &(0x7f0000000080)={@val={0x0, 0x9100}, @val={0x2, 0x1, 0x1, 0x7f, 0x1, 0x200}, @x25={0x3, 0x3d, 0x1, "40bd948ef4a8ce060c54e34a7755831ca80d68e689593286397f96f8f6ba969b188bd2e015556f20ecf02b3957ff96dd5f2cfd95b95a2412c4c38ae41a57e8f96b8689875167b6a6f5d786d48ea98294375205c2d6857521c05433b78a8439553a2e4277e7f3f7864d2c9db1b377e8b75fd05c2ef81d7fcdd0265787dc61fbcb16ef7e441c469108f26ffe33cdffffacd44651ebe9e234ea276402362ff962611f2a18d37611691a7a7c89"}}, 0xbc) (async) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x10001, @empty, 0x3}, 0x1c) (async, rerun: 64) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x3, 0x3, 0x2, 0x2, {0xa, 0x4e22, 0xf, @loopback, 0x3}}}, 0x32) (async, rerun: 64) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000440)={0x0, 0x1000, "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"}, &(0x7f0000001480)=0x1008) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000014c0)={r4, 0x1ff, 0x8, 0xe, 0x3, 0x9}, 0x14) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r6, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) (async) sendfile(r5, r6, &(0x7f0000000040)=0x7c3c, 0xecc7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) (async) connect$can_j1939(r6, &(0x7f00000001c0)={0x1d, r7, 0x3, {0x2, 0x1}}, 0x18) (async) write(r5, &(0x7f0000000300)="f2eb20067aef158200065a4a6005d9d09fe9d6db93d9aa24cf11661df29142414235f161d1bc2bf0292bdb4828e1c677ec639cf7cf811d3c40cd32452f2f3e7534f11b7e5447a54b39f4fe22c870f3e2a4d09d9390d1586f981bdb2fa00955fa51cfe3af0c53af9e05eeafe7d87874e1337bc27ecf6fc8d683eeb3af5542166e82533026dc931b32c487d37ab0c2e645f6", 0x91) 1.902352865s ago: executing program 4 (id=12584): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x27}, 0x5, 0x0, 0x0, 0x2, 0x8, 0xb}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001a006da800000000000000001c6f"], 0x24}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b32, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x1, 0x10000, 0xffffd61c, 0x7, 0xa}, &(0x7f0000000300)=0x98) (rerun: 64) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000340)={r3, 0xfff}, &(0x7f0000000440)=0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) (async) close(r2) (async, rerun: 64) syz_emit_ethernet(0x3e, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd60300dce00082b00fc020000000000000000000000000000fe8000000000000000000000000000aa4e2100000008907884c96fb10a35d1329177a8f929a8fb9ddcfe281234c582b7bc80effe57313ebe3c2aa6e780b256089772cbe46fec7cae3e9a8aadba73bbdcd4ffff24dd403ee8a32ca8ea538cadd8eb2f2b1043b37a6cf87458c8b4ffc359ce22f62bb52032d5668815"], 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, r7, 0x1, 0x0, 0x25dfdbfc, {0x23}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}}, 0x8000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000a80)={'syztnl1\x00', &(0x7f0000000a00)={'ip6gre0\x00', 0x0, 0x29, 0x1, 0x5, 0x3, 0x4c, @private1, @rand_addr=' \x01\x00', 0x20, 0x700, 0x3220, 0x7}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000c00)={'syztnl2\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x40, 0x8, 0x7f, 0x7f, {{0x3a, 0x4, 0x1, 0x2, 0xe8, 0x66, 0x0, 0x9, 0x2d, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x27}, {[@cipso={0x86, 0x49, 0x1, [{0x7, 0x10, "52678db3763f74ef264597708ef8"}, {0x2, 0x3, "f2"}, {0x2, 0x10, "8143229cd6113a00b533a3efc0b0"}, {0x5, 0x8, "238ea62f4246"}, {0x1, 0x3, "f8"}, {0x2, 0xa, "0d47ba3f941370d8"}, {0x5, 0xb, "0ddf5b66e957df81c0"}]}, @generic={0x94, 0x8, "e84876dd20b8"}, @generic={0x44, 0x2}, @rr={0x7, 0x7, 0x13, [@multicast1]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x1b, 0x90, [@remote, @loopback, @loopback, @private=0xa010101, @empty, @broadcast]}, @ssrr={0x89, 0x17, 0xfb, [@loopback, @loopback, @broadcast, @private=0xa010101, @remote]}, @timestamp_prespec={0x44, 0x44, 0x60, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x12}, 0x141}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@remote, 0x8000}, {@empty, 0x7}, {@broadcast, 0x9}, {@rand_addr=0x64010102, 0x17}, {@loopback, 0x6a}, {@multicast1, 0xffff}]}]}}}}}) (async) getsockname$packet(r0, &(0x7f0000000c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000c80)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000d40)={'ip6tnl0\x00', &(0x7f0000000cc0)={'syztnl0\x00', 0x0, 0x6, 0xc5, 0x2, 0xfffffffb, 0x40, @remote, @mcast2, 0x7800, 0x8000, 0x9, 0xd5c}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000d80)={0x230, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async, rerun: 32) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r5, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) 1.800085289s ago: executing program 0 (id=12585): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'team0\x00', {0x2, 0x0, @broadcast}}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x8004800}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a0002000000836b00000000ac"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x16, 0x34, @random="42271d27de8ba354418c06a20ac8d69a4cf0"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x30}}, 0x4000) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x6c, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x9, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{}, [@TCA_NETEM_LOSS={0x4}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}]}]}}}]}, 0x6c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x1}]}}}]}, 0x3c}}, 0x0) 1.475830375s ago: executing program 5 (id=12586): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000a80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf258100000008000300", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 1.145026904s ago: executing program 4 (id=12587): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x30}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.008599099s ago: executing program 0 (id=12588): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x2, @private1, 0x28}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)="dc", 0x1}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x280}}], 0x1, 0x880) shutdown(r0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x3, 0x0, 0x4, 0x0, 0x44}, 0x48) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000b00)={0x0, 0x2}, &(0x7f0000000b40)=0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x1d80, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e23}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 616.828232ms ago: executing program 5 (id=12589): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv4_delrule={0x2c, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_FLOW={0x8, 0x18, 0x3}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e20}}]}, 0x2c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000100)=0xf, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000180)=""/135, 0x87}], 0x1) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180090a7e5cd2f000000000001000000000000000000000000000000000000000000005e6d250000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x6, 0x7, 0x1ff, "fac16a590b17"}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getuid() getgid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) sendmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r4, r5}}}], 0x20}, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x18, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff0000000079a100fe0000000007010000f8ffffffb702000008000020b703000001000000850000006900000095"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20}, 0x94) 439.543209ms ago: executing program 6 (id=12590): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x28000) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, @empty, @empty, 0x700, 0x20, 0x400000}}) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x40}}]}, 0x2c}}, 0x4800) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt(r6, 0x0, 0x483, &(0x7f0000000300)="060000007f00000100150000000000006d682000"/44, 0x2c) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x170bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x78bd25, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x8c90}]}}]}, 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x4, 0x1f, 0x7fffffff}, @IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r5, 0x29, 0x1, 0x1, 0x7, 0x4, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x7800, 0x81, 0x81}}) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r7) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r9, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, r10, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x3, @bearer=@udp='udp:syz0\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x80) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="09180000000000000000010000000800020002000000080001"], 0x24}}, 0x0) r12 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r12, 0x29, 0x6, &(0x7f0000000140)={0x21, {{0x29, 0x0, 0x2000000, @private2}}}, 0x88) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000005"], 0x114}], 0x1}, 0x0) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711053000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r13}, 0x20) r15 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r15, &(0x7f0000000000)={0x0, 0x1500, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000600014002020a600e41b0000900ac00060211000000120012000a00ff110048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000002c0)={r13, r14}, 0xc) 0s ago: executing program 4 (id=12591): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00040000000000001c0012800e000100697036677265746170000000080002800400120008000a00", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) kernel console output (not intermixed with test programs): 0398][T15348] Call Trace: [ 1593.300407][T15348] [ 1593.300418][T15348] dump_stack_lvl+0xe8/0x150 [ 1593.300457][T15348] should_fail_ex+0x410/0x560 [ 1593.300500][T15348] should_failslab+0xa8/0x100 [ 1593.300539][T15348] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 1593.300565][T15348] ? __d_lookup+0x66/0x790 [ 1593.300588][T15348] ? __d_alloc+0x37/0x6f0 [ 1593.300607][T15348] ? __d_alloc+0x37/0x6f0 [ 1593.300636][T15348] __d_alloc+0x37/0x6f0 [ 1593.300729][T15348] d_alloc+0x4b/0x190 [ 1593.300750][T15348] ? lookup_one_qstr_excl+0xc4/0x360 [ 1593.300777][T15348] lookup_one_qstr_excl+0xd8/0x360 [ 1593.300800][T15348] ? lookup_noperm_common+0x245/0x430 [ 1593.300837][T15348] start_dirop+0x5c/0x90 [ 1593.300871][T15348] simple_start_creating+0xcc/0x110 [ 1593.300896][T15348] ? __pfx_simple_start_creating+0x10/0x10 [ 1593.300921][T15348] ? do_raw_spin_unlock+0xf5/0x200 [ 1593.300956][T15348] ? mntput+0x65/0xc0 [ 1593.300989][T15348] debugfs_start_creating+0xca/0x1b0 [ 1593.301118][T15348] __debugfs_create_file+0x6f/0x400 [ 1593.301144][T15348] debugfs_create_file_full+0x3f/0x60 [ 1593.301172][T15348] ref_tracker_dir_debugfs+0x197/0x360 [ 1593.301203][T15348] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1593.301260][T15348] ? __kvmalloc_node_noprof+0x52f/0x820 [ 1593.301288][T15348] ? __kvmalloc_node_noprof+0x345/0x820 [ 1593.301319][T15348] ? __raw_spin_lock_init+0x45/0x100 [ 1593.301354][T15348] alloc_netdev_mqs+0x275/0x12a0 [ 1593.301409][T15348] ? __pfx_snprintf+0x10/0x10 [ 1593.301433][T15348] ? __pfx_vlan_setup+0x10/0x10 [ 1593.301498][T15348] rtnl_create_link+0x321/0xd70 [ 1593.301531][T15348] rtnl_newlink_create+0x258/0x7b0 [ 1593.301572][T15348] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1593.301610][T15348] ? __pfx___mutex_lock+0x10/0x10 [ 1593.301655][T15348] ? ns_capable+0x89/0xe0 [ 1593.301701][T15348] rtnl_newlink+0x166d/0x1c30 [ 1593.301750][T15348] ? __pfx_rtnl_newlink+0x10/0x10 [ 1593.301783][T15348] ? nlmon_xmit+0xb0/0x100 [ 1593.301843][T15348] ? kmem_cache_free+0x182/0x650 [ 1593.301882][T15348] ? do_raw_spin_lock+0x12b/0x2f0 [ 1593.301918][T15348] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1593.301961][T15348] ? fq_dequeue+0x157/0x21e0 [ 1593.302025][T15348] ? sch_direct_xmit+0x32e/0x4c0 [ 1593.302086][T15348] ? lockdep_hardirqs_on+0x7b/0x110 [ 1593.302124][T15348] ? __pfx_sch_direct_xmit+0x10/0x10 [ 1593.302162][T15348] ? ktime_get+0x1b0/0x220 [ 1593.302191][T15348] ? rcu_is_watching+0x16/0xb0 [ 1593.302225][T15348] ? __lock_acquire+0x747/0x2de0 [ 1593.302262][T15348] ? __local_bh_enable_ip+0xd6/0x140 [ 1593.302293][T15348] ? lockdep_hardirqs_on+0x7b/0x110 [ 1593.302324][T15348] ? __dev_queue_xmit+0x29b/0x3920 [ 1593.302379][T15348] ? __local_bh_enable_ip+0xd6/0x140 [ 1593.302419][T15348] ? lock_acquire+0x115/0x350 [ 1593.302462][T15348] ? __pfx_rtnl_newlink+0x10/0x10 [ 1593.302491][T15348] rtnetlink_rcv_msg+0x802/0xc00 [ 1593.302527][T15348] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1593.302557][T15348] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1593.302587][T15348] ? ref_tracker_free+0x689/0x830 [ 1593.302620][T15348] ? __pfx_ref_tracker_free+0x10/0x10 [ 1593.302670][T15348] netlink_rcv_skb+0x226/0x4a0 [ 1593.302696][T15348] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1593.302729][T15348] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1593.302769][T15348] ? netlink_deliver_tap+0x2e/0x1b0 [ 1593.302791][T15348] ? netlink_deliver_tap+0x2e/0x1b0 [ 1593.302819][T15348] netlink_unicast+0x7bd/0x940 [ 1593.302902][T15348] netlink_sendmsg+0x813/0xb40 [ 1593.302939][T15348] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1593.302974][T15348] ? apparmor_socket_sendmsg+0x98/0x360 [ 1593.303006][T15348] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1593.303030][T15348] sock_sendmsg_nosec+0x13a/0x180 [ 1593.303060][T15348] ____sys_sendmsg+0x54e/0x850 [ 1593.303102][T15348] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1593.303148][T15348] ? import_iovec+0x73/0xa0 [ 1593.303184][T15348] ___sys_sendmsg+0x2a5/0x360 [ 1593.303217][T15348] ? __lock_acquire+0x747/0x2de0 [ 1593.303248][T15348] ? __pfx____sys_sendmsg+0x10/0x10 [ 1593.303326][T15348] ? __fget_files+0x2a/0x420 [ 1593.303358][T15348] ? __fget_files+0x3a2/0x420 [ 1593.303404][T15348] __x64_sys_sendmsg+0x1b1/0x290 [ 1593.303443][T15348] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1593.303504][T15348] do_syscall_64+0x166/0x520 [ 1593.303536][T15348] ? trace_irq_disable+0x3b/0x140 [ 1593.303560][T15348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.303585][T15348] ? clear_bhb_loop+0x70/0xc0 [ 1593.303614][T15348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.303637][T15348] RIP: 0033:0x7f64e539e159 [ 1593.303669][T15348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1593.303689][T15348] RSP: 002b:00007f64e61d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1593.303715][T15348] RAX: ffffffffffffffda RBX: 00007f64e5625fa0 RCX: 00007f64e539e159 [ 1593.303733][T15348] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 1593.303748][T15348] RBP: 00007f64e61d3090 R08: 0000000000000000 R09: 0000000000000000 [ 1593.303762][T15348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1593.303777][T15348] R13: 00007f64e5626038 R14: 00007f64e5625fa0 R15: 00007ffc3224c2f8 [ 1593.303815][T15348] [ 1594.671050][T15381] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1594.684590][T15372] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1594.839916][ T5633] Bluetooth: hci2: command tx timeout [ 1595.130207][T15384] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1595.157999][T15390] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1595.261389][T15204] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1595.296652][T15204] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1595.302566][T15204] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1595.326562][T15204] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1595.340998][T15204] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1595.369574][T15204] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1595.370367][T15204] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1595.400690][T15204] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1595.550554][T15401] __nla_validate_parse: 68 callbacks suppressed [ 1595.550574][T15401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11465'. [ 1596.916205][ T5633] Bluetooth: hci2: command tx timeout [ 1598.080416][T15390] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1598.487923][T15443] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11473'. [ 1598.651403][T15443] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1598.707668][T15204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1598.859353][T15204] 8021q: adding VLAN 0 to HW filter on device team0 [ 1598.965366][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1598.965480][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1599.014540][T15459] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11479'. [ 1599.033738][T16884] bridge0: port 2(bridge_slave_1) entered blocking state [ 1599.033853][T16884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1599.398669][T15463] veth1_macvtap: left promiscuous mode [ 1599.963194][T15482] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11485'. [ 1599.963231][T15482] openvswitch: netlink: IPv4 frag type 5 is out of range max 2 [ 1600.333196][T15501] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11491'. [ 1600.357411][T15504] nbd: couldn't find a device at index 458752 [ 1601.332540][T15204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1601.621660][T15530] ip_tables: iptables: counters copy to user failed while replacing table [ 1601.653618][T15530] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11499'. [ 1601.701061][T15533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11502'. [ 1601.852548][T15533] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1602.198105][T15548] ip_tables: iptables: counters copy to user failed while replacing table [ 1602.205070][T15548] netlink: 'syz.0.11505': attribute type 4 has an invalid length. [ 1602.283789][T15557] nbd: couldn't find a device at index 2097152 [ 1602.372323][T15552] netlink: 76 bytes leftover after parsing attributes in process `syz.2.11508'. [ 1602.507428][T15560] netlink: 'syz.4.11510': attribute type 4 has an invalid length. [ 1602.507453][T15560] netlink: 17 bytes leftover after parsing attributes in process `syz.4.11510'. [ 1602.559868][T15204] veth0_vlan: entered promiscuous mode [ 1602.590183][T15204] veth1_vlan: entered promiscuous mode [ 1602.748864][T15204] veth0_macvtap: entered promiscuous mode [ 1602.754472][T15204] veth1_macvtap: entered promiscuous mode [ 1602.880740][T15204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1602.886367][T15204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1603.161240][T15579] netlink: 'syz.5.11512': attribute type 83 has an invalid length. [ 1603.205733][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.205784][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.205822][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.205860][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.357398][T15580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11515'. [ 1603.357495][T15580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11515'. [ 1603.435884][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1603.435907][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1603.536360][ T6132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1603.536385][ T6132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1603.604557][T15580] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11515'. [ 1603.616554][T15590] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11518'. [ 1604.292292][T15614] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11523'. [ 1604.894107][T15631] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11525'. [ 1605.005470][T15631] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1605.093999][T15641] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1605.344603][T15648] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 1605.370011][T15650] netlink: 'syz.4.11531': attribute type 4 has an invalid length. [ 1605.432922][T15650] netlink: 'syz.4.11531': attribute type 4 has an invalid length. [ 1605.545102][T15655] syzkaller1: entered promiscuous mode [ 1605.545128][T15655] syzkaller1: entered allmulticast mode [ 1605.716436][ T5633] block nbd1: Receive control failed (result -32) [ 1605.720077][T15661] block nbd5: not configured, cannot reconfigure [ 1606.096818][T15680] 8021q: VLANs not supported on ip6tnl0 [ 1606.336586][T15672] ip_tables: iptables: counters copy to user failed while replacing table [ 1606.569715][T15689] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1606.571106][T15693] FAULT_INJECTION: forcing a failure. [ 1606.571106][T15693] name failslab, interval 1, probability 0, space 0, times 0 [ 1606.571140][T15693] CPU: 0 UID: 0 PID: 15693 Comm: syz.4.11541 Not tainted syzkaller #0 PREEMPT(full) [ 1606.571166][T15693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1606.571181][T15693] Call Trace: [ 1606.571190][T15693] [ 1606.571201][T15693] dump_stack_lvl+0xe8/0x150 [ 1606.571240][T15693] should_fail_ex+0x410/0x560 [ 1606.571275][T15693] should_failslab+0xa8/0x100 [ 1606.571309][T15693] __kmalloc_cache_noprof+0xa3/0x600 [ 1606.571336][T15693] ? vlan_vid_add+0x303/0x750 [ 1606.571362][T15693] ? vlan_vid_add+0x303/0x750 [ 1606.571396][T15693] vlan_vid_add+0x303/0x750 [ 1606.571434][T15693] register_vlan_dev+0x9f/0x850 [ 1606.571465][T15693] ? vlan_changelink+0x4ac/0x560 [ 1606.571503][T15693] vlan_newlink+0x4b2/0x610 [ 1606.571539][T15693] ? __pfx_vlan_newlink+0x10/0x10 [ 1606.571576][T15693] rtnl_newlink_create+0x305/0x7b0 [ 1606.571619][T15693] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1606.571658][T15693] ? __pfx___mutex_lock+0x10/0x10 [ 1606.571704][T15693] ? ns_capable+0x89/0xe0 [ 1606.571741][T15693] rtnl_newlink+0x166d/0x1c30 [ 1606.571791][T15693] ? __pfx_rtnl_newlink+0x10/0x10 [ 1606.571820][T15693] ? do_syscall_64+0x166/0x520 [ 1606.571858][T15693] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1606.571924][T15693] ? kasan_quarantine_put+0xbb/0x1f0 [ 1606.571950][T15693] ? lockdep_hardirqs_on+0x7b/0x110 [ 1606.571986][T15693] ? nlmon_xmit+0xb0/0x100 [ 1606.572013][T15693] ? kmem_cache_free+0x182/0x650 [ 1606.572052][T15693] ? __lock_acquire+0x747/0x2de0 [ 1606.572090][T15693] ? __local_bh_enable_ip+0xd6/0x140 [ 1606.572120][T15693] ? lockdep_hardirqs_on+0x7b/0x110 [ 1606.572151][T15693] ? __dev_queue_xmit+0x29b/0x3920 [ 1606.572172][T15693] ? __local_bh_enable_ip+0xd6/0x140 [ 1606.572227][T15693] ? lock_acquire+0x115/0x350 [ 1606.572270][T15693] ? __pfx_rtnl_newlink+0x10/0x10 [ 1606.572300][T15693] rtnetlink_rcv_msg+0x802/0xc00 [ 1606.572336][T15693] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1606.572377][T15693] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1606.572407][T15693] ? ref_tracker_free+0x689/0x830 [ 1606.572441][T15693] ? __pfx_ref_tracker_free+0x10/0x10 [ 1606.572484][T15693] netlink_rcv_skb+0x226/0x4a0 [ 1606.572510][T15693] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1606.572552][T15693] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1606.572593][T15693] ? netlink_deliver_tap+0x2e/0x1b0 [ 1606.572617][T15693] ? netlink_deliver_tap+0x2e/0x1b0 [ 1606.572649][T15693] netlink_unicast+0x7bd/0x940 [ 1606.572696][T15693] netlink_sendmsg+0x813/0xb40 [ 1606.572732][T15693] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1606.572766][T15693] ? apparmor_socket_sendmsg+0x98/0x360 [ 1606.572797][T15693] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1606.572820][T15693] sock_sendmsg_nosec+0x13a/0x180 [ 1606.572856][T15693] ____sys_sendmsg+0x54e/0x850 [ 1606.572897][T15693] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1606.572942][T15693] ? import_iovec+0x73/0xa0 [ 1606.572977][T15693] ___sys_sendmsg+0x2a5/0x360 [ 1606.573008][T15693] ? __lock_acquire+0x747/0x2de0 [ 1606.573039][T15693] ? __pfx____sys_sendmsg+0x10/0x10 [ 1606.573114][T15693] ? __fget_files+0x2a/0x420 [ 1606.573146][T15693] ? __fget_files+0x3a2/0x420 [ 1606.573191][T15693] __x64_sys_sendmsg+0x1b1/0x290 [ 1606.573229][T15693] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1606.573288][T15693] do_syscall_64+0x166/0x520 [ 1606.573319][T15693] ? trace_irq_disable+0x3b/0x140 [ 1606.573345][T15693] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1606.573369][T15693] ? clear_bhb_loop+0x70/0xc0 [ 1606.573400][T15693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1606.573423][T15693] RIP: 0033:0x7f06a2f9e159 [ 1606.573446][T15693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1606.573467][T15693] RSP: 002b:00007f06a3f0c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1606.573493][T15693] RAX: ffffffffffffffda RBX: 00007f06a3226090 RCX: 00007f06a2f9e159 [ 1606.573511][T15693] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 1606.573526][T15693] RBP: 00007f06a3f0c090 R08: 0000000000000000 R09: 0000000000000000 [ 1606.573542][T15693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1606.573557][T15693] R13: 00007f06a3226128 R14: 00007f06a3226090 R15: 00007ffc4178a058 [ 1606.573595][T15693] [ 1607.622972][T15711] bridge0: port 1(veth1_to_bridge) entered blocking state [ 1607.623162][T15711] bridge0: port 1(veth1_to_bridge) entered disabled state [ 1607.623366][T15711] veth1_to_bridge: entered allmulticast mode [ 1607.651669][T15711] veth1_to_bridge: entered promiscuous mode [ 1607.683970][T15714] netlink: 'syz.5.11548': attribute type 10 has an invalid length. [ 1607.686916][T15714] bridge0: port 3(syz_tun) entered disabled state [ 1607.687612][T15714] bridge0: port 2(bridge_slave_1) entered disabled state [ 1607.687900][T15714] bridge0: port 1(bridge_slave_0) entered disabled state [ 1607.857258][T15714] team0: Port device bridge0 removed [ 1607.859392][T15714] bridge0: port 3(syz_tun) entered blocking state [ 1607.859501][T15714] bridge0: port 3(syz_tun) entered forwarding state [ 1607.859763][T15714] bridge0: port 2(bridge_slave_1) entered blocking state [ 1607.859900][T15714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1607.860129][T15714] bridge0: port 1(bridge_slave_0) entered blocking state [ 1607.860259][T15714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1607.926877][T15714] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1607.988652][T15718] __nla_validate_parse: 8 callbacks suppressed [ 1607.988679][T15718] netlink: 80 bytes leftover after parsing attributes in process `syz.6.11550'. [ 1608.011760][T15714] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11548'. [ 1608.012464][T15724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11551'. [ 1608.091871][T15715] bridge0: port 3(syz_tun) entered disabled state [ 1608.246739][T15715] syz_tun (unregistering): left allmulticast mode [ 1608.246772][T15715] syz_tun (unregistering): left promiscuous mode [ 1608.246870][T15715] bridge0: port 3(syz_tun) entered disabled state [ 1608.324917][T15714] vlan2: left allmulticast mode [ 1608.324947][T15714] geneve0: left allmulticast mode [ 1608.324969][T15714] vlan2: left promiscuous mode [ 1608.324984][T15714] geneve0: left promiscuous mode [ 1608.325366][T15714] bridge0: port 4(vlan2) entered disabled state [ 1608.328192][T15714] bridge_slave_1: left promiscuous mode [ 1608.328423][T15714] bridge0: port 2(bridge_slave_1) entered disabled state [ 1608.331042][T15714] bridge_slave_0: left allmulticast mode [ 1608.331069][T15714] bridge_slave_0: left promiscuous mode [ 1608.331286][T15714] bridge0: port 1(bridge_slave_0) entered disabled state [ 1608.565024][T15714] bond0: (slave bridge0): Releasing backup interface [ 1608.587069][T15734] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11554'. [ 1608.662803][T15724] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1608.755187][T15734] 8021q: VLANs not supported on vxcan1 [ 1608.766384][T15734] FAULT_INJECTION: forcing a failure. [ 1608.766384][T15734] name failslab, interval 1, probability 0, space 0, times 0 [ 1608.766412][T15734] CPU: 1 UID: 0 PID: 15734 Comm: syz.6.11554 Not tainted syzkaller #0 PREEMPT(full) [ 1608.766431][T15734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1608.766442][T15734] Call Trace: [ 1608.766449][T15734] [ 1608.766456][T15734] dump_stack_lvl+0xe8/0x150 [ 1608.766485][T15734] should_fail_ex+0x410/0x560 [ 1608.766509][T15734] should_failslab+0xa8/0x100 [ 1608.766535][T15734] ? skb_clone+0x212/0x3a0 [ 1608.766562][T15734] kmem_cache_alloc_noprof+0xa1/0x600 [ 1608.766580][T15734] ? skb_clone+0x212/0x3a0 [ 1608.766609][T15734] skb_clone+0x212/0x3a0 [ 1608.766637][T15734] __netlink_deliver_tap+0x413/0x860 [ 1608.766663][T15734] ? netlink_deliver_tap+0x2e/0x1b0 [ 1608.766681][T15734] netlink_deliver_tap+0x19c/0x1b0 [ 1608.766699][T15734] netlink_sendskb+0x68/0x140 [ 1608.766726][T15734] netlink_rcv_skb+0x2a4/0x4a0 [ 1608.766743][T15734] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1608.766767][T15734] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1608.766794][T15734] ? netlink_deliver_tap+0x2e/0x1b0 [ 1608.766810][T15734] ? netlink_deliver_tap+0x2e/0x1b0 [ 1608.766832][T15734] netlink_unicast+0x7bd/0x940 [ 1608.766864][T15734] netlink_sendmsg+0x813/0xb40 [ 1608.766889][T15734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1608.766913][T15734] ? apparmor_socket_sendmsg+0x98/0x360 [ 1608.766935][T15734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1608.766951][T15734] sock_sendmsg_nosec+0x13a/0x180 [ 1608.766972][T15734] ____sys_sendmsg+0x54e/0x850 [ 1608.767001][T15734] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1608.767032][T15734] ? import_iovec+0x73/0xa0 [ 1608.767057][T15734] ___sys_sendmsg+0x2a5/0x360 [ 1608.767080][T15734] ? __lock_acquire+0x747/0x2de0 [ 1608.767138][T15734] ? __pfx____sys_sendmsg+0x10/0x10 [ 1608.767208][T15734] ? __fget_files+0x2a/0x420 [ 1608.767241][T15734] ? __fget_files+0x3a2/0x420 [ 1608.767293][T15734] __x64_sys_sendmsg+0x1b1/0x290 [ 1608.767331][T15734] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1608.767390][T15734] do_syscall_64+0x166/0x520 [ 1608.767422][T15734] ? trace_irq_disable+0x3b/0x140 [ 1608.767446][T15734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1608.767471][T15734] ? clear_bhb_loop+0x70/0xc0 [ 1608.767499][T15734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1608.767523][T15734] RIP: 0033:0x7fa66d59e159 [ 1608.767545][T15734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1608.767566][T15734] RSP: 002b:00007fa66e3c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1608.767592][T15734] RAX: ffffffffffffffda RBX: 00007fa66d825fa0 RCX: 00007fa66d59e159 [ 1608.767610][T15734] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 1608.767626][T15734] RBP: 00007fa66e3c6090 R08: 0000000000000000 R09: 0000000000000000 [ 1608.767642][T15734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1608.767656][T15734] R13: 00007fa66d826038 R14: 00007fa66d825fa0 R15: 00007ffca8aa8848 [ 1608.767695][T15734] [ 1609.216840][T15741] IPVS: length: 2176 != 8 [ 1609.447377][T15756] netlink: 'syz.6.11559': attribute type 1 has an invalid length. [ 1609.453386][T15760] netlink: 'syz.4.11560': attribute type 1 has an invalid length. [ 1609.557265][T15764] netlink: 'syz.2.11562': attribute type 23 has an invalid length. [ 1609.558732][T15765] netlink: 'syz.2.11562': attribute type 23 has an invalid length. [ 1609.839379][T15776] netlink: 64 bytes leftover after parsing attributes in process `syz.2.11564'. [ 1609.988804][T15776] syzkaller1: entered promiscuous mode [ 1609.988828][T15776] syzkaller1: entered allmulticast mode [ 1610.025565][T15776] 8021q: VLANs not supported on ip6gre1 [ 1610.442609][T15790] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11569'. [ 1610.594366][T15797] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1610.645700][T15800] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11573'. [ 1610.751588][T15800] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1611.368338][T15827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11582'. [ 1611.390068][ T5633] block nbd2: Receive control failed (result -107) [ 1611.510783][T15831] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.11583'. [ 1611.894554][T15844] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11588'. [ 1612.202563][T15855] netlink: 'syz.6.11592': attribute type 6 has an invalid length. [ 1612.248214][T15857] syz_tun: entered allmulticast mode [ 1612.315316][T15857] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1612.446252][T15864] 8021q: VLANs not supported on ip_vti0 [ 1612.702286][T15874] veth0_to_bridge: entered promiscuous mode [ 1612.947198][T15870] veth0_to_bridge: left promiscuous mode [ 1613.006027][T15884] __nla_validate_parse: 5 callbacks suppressed [ 1613.006049][T15884] netlink: 108 bytes leftover after parsing attributes in process `syz.6.11601'. [ 1613.007040][T15887] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11602'. [ 1613.340144][T15891] netlink: 'syz.0.11603': attribute type 39 has an invalid length. [ 1613.494714][T15895] x_tables: duplicate underflow at hook 1 [ 1613.717109][T15911] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11607'. [ 1613.995642][T15914] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11609'. [ 1614.158427][T15926] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11611'. [ 1614.563068][T15935] Unsupported ieee802154 address type: 0 [ 1614.733098][T15928] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11611'. [ 1614.775775][T15944] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11617'. [ 1615.056312][T15944] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1615.080327][T15950] tc_dump_action: action bad kind [ 1615.113373][T15961] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11619'. [ 1615.176939][T15970] sctp: [Deprecated]: syz.2.11619 (pid 15970) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1615.176939][T15970] Use struct sctp_sack_info instead [ 1615.217118][T15970] netlink: 'syz.2.11619': attribute type 10 has an invalid length. [ 1615.274854][T15960] tc_dump_action: action bad kind [ 1615.351570][T15970] team0: Port device dummy0 added [ 1615.383708][T15961] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11619'. [ 1615.741699][T16905] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1615.741744][T16905] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1615.749530][T16905] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 40842 - 0 [ 1615.785983][T15986] netlink: 260 bytes leftover after parsing attributes in process `syz.0.11625'. [ 1615.860736][T15961] team0: Port device dummy0 removed [ 1616.011973][T15989] netlink: 'syz.0.11627': attribute type 3 has an invalid length. [ 1616.132803][T16905] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1616.132844][T16905] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1616.132874][T16905] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 40842 - 0 [ 1616.529497][T16001] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1616.736247][T16905] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1616.736291][T16905] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1616.736321][T16905] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 40842 - 0 [ 1616.809220][T16008] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1617.072151][T16016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1617.134356][T16004] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1617.221538][T16016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1617.423714][T16905] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1617.423755][T16905] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1617.423784][T16905] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 40842 - 0 [ 1617.426085][T16022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1617.536181][T16024] netlink: 'syz.2.11641': attribute type 1 has an invalid length. [ 1617.734456][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1618.299719][T16050] netlink: 'syz.4.11646': attribute type 1 has an invalid length. [ 1618.315282][T16905] bridge_slave_1: left allmulticast mode [ 1618.315309][T16905] bridge_slave_1: left promiscuous mode [ 1618.315504][T16905] bridge0: port 2(bridge_slave_1) entered disabled state [ 1618.344629][T16905] bridge_slave_0: left allmulticast mode [ 1618.344671][T16905] bridge_slave_0: left promiscuous mode [ 1618.344940][T16905] bridge0: port 1(bridge_slave_0) entered disabled state [ 1618.561597][T16905] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1619.259667][T16076] __nla_validate_parse: 7 callbacks suppressed [ 1619.259693][T16076] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11650'. [ 1619.690243][T16905] batman_adv: batadv0: Removing interface: gretap0 [ 1619.853142][T16905] batman_adv: batadv0: Removing interface: syzkaller0 [ 1619.976872][T16905] bond10 (unregistering): (slave bridge4): Releasing active interface [ 1619.976903][T16905] bond10 (unregistering): (slave bridge4): the permanent HWaddr of slave - aa:17:70:d5:a1:f3 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1619.984645][T16905] bond10 (unregistering): (slave bridge5): Releasing active interface [ 1620.101243][T16905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1620.156823][T16905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1620.220284][T16905] bond0 (unregistering): Released all slaves [ 1620.233587][T16905] bond1 (unregistering): Released all slaves [ 1620.263625][T16905] bond2 (unregistering): Released all slaves [ 1620.298239][T16905] bond3 (unregistering): Released all slaves [ 1620.323044][T16905] bond4 (unregistering): Released all slaves [ 1620.349728][T16905] bond5 (unregistering): Released all slaves [ 1620.392457][T16905] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1620.395275][T16905] bond6 (unregistering): Released all slaves [ 1620.435306][T16905] bond7 (unregistering): Released all slaves [ 1620.472032][T16905] bond8 (unregistering): Released all slaves [ 1620.504661][T16905] bond9 (unregistering): Released all slaves [ 1620.534592][T16905] bond10 (unregistering): Released all slaves [ 1620.564514][T16905] bond11 (unregistering): Released all slaves [ 1620.592143][T16905] bond12 (unregistering): Released all slaves [ 1620.651920][T16905] bond13 (unregistering): Released all slaves [ 1620.694480][T16050] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 1620.740271][T16052] veth7: entered promiscuous mode [ 1620.892987][T16057] bridge2: entered promiscuous mode [ 1620.893017][T16057] bridge2: entered allmulticast mode [ 1620.947122][T16056] bridge3: entered promiscuous mode [ 1620.947150][T16056] bridge3: entered allmulticast mode [ 1621.064843][T16076] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 1621.390009][T16905] ovs-s: left promiscuous mode [ 1621.572484][T16094] tipc: Enabling not permitted [ 1621.572524][T16094] tipc: Enabling of bearer rejected, failed to enable media [ 1622.090590][T16109] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11660'. [ 1622.142925][T16112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11661'. [ 1622.243169][T16109] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1622.439514][T16118] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11662'. [ 1622.441443][T16123] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11664'. [ 1622.555926][T16125] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11662'. [ 1622.659100][T16113] FAULT_INJECTION: forcing a failure. [ 1622.659100][T16113] name failslab, interval 1, probability 0, space 0, times 0 [ 1622.659138][T16113] CPU: 0 UID: 0 PID: 16113 Comm: syz.6.11660 Not tainted syzkaller #0 PREEMPT(full) [ 1622.659164][T16113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1622.659178][T16113] Call Trace: [ 1622.659187][T16113] [ 1622.659198][T16113] dump_stack_lvl+0xe8/0x150 [ 1622.659237][T16113] should_fail_ex+0x410/0x560 [ 1622.659272][T16113] should_failslab+0xa8/0x100 [ 1622.659302][T16113] ? __kernfs_new_node+0xe6/0x980 [ 1622.659329][T16113] kmem_cache_alloc_noprof+0xa1/0x600 [ 1622.659353][T16113] ? kstrdup+0x81/0x100 [ 1622.659377][T16113] ? __kernfs_new_node+0xe6/0x980 [ 1622.659410][T16113] __kernfs_new_node+0xe6/0x980 [ 1622.659458][T16113] ? __pfx___kernfs_new_node+0x10/0x10 [ 1622.659485][T16113] ? kernfs_root+0x1c/0x230 [ 1622.659516][T16113] ? kernfs_root+0x1c/0x230 [ 1622.659538][T16113] ? kernfs_root+0x1c/0x230 [ 1622.659559][T16113] ? kernfs_root+0x1c/0x230 [ 1622.659589][T16113] kernfs_create_dir_ns+0xfe/0x230 [ 1622.659623][T16113] sysfs_create_dir_ns+0x12f/0x2a0 [ 1622.659663][T16113] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1622.659706][T16113] ? do_raw_spin_unlock+0xf5/0x200 [ 1622.659746][T16113] kobject_add_internal+0x622/0xcd0 [ 1622.659860][T16113] kobject_add+0x163/0x240 [ 1622.659892][T16113] ? __pfx_kobject_add+0x10/0x10 [ 1622.659913][T16113] ? kobject_put+0x50f/0x550 [ 1622.659941][T16113] ? get_device_parent+0x366/0x3a0 [ 1622.660010][T16113] device_add+0x3fa/0xb80 [ 1622.660040][T16113] netdev_register_kobject+0x197/0x350 [ 1622.660107][T16113] register_netdevice+0x1433/0x1eb0 [ 1622.660150][T16113] ? __pfx_register_netdevice+0x10/0x10 [ 1622.660175][T16113] ? __kasan_kmalloc+0x93/0xb0 [ 1622.660210][T16113] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1622.660235][T16113] ? register_vlan_dev+0x34f/0x850 [ 1622.660272][T16113] register_vlan_dev+0x3a0/0x850 [ 1622.660318][T16113] vlan_newlink+0x4b2/0x610 [ 1622.660356][T16113] ? __pfx_vlan_newlink+0x10/0x10 [ 1622.660393][T16113] rtnl_newlink_create+0x305/0x7b0 [ 1622.660449][T16113] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1622.660489][T16113] ? __pfx___mutex_lock+0x10/0x10 [ 1622.660536][T16113] ? ns_capable+0x89/0xe0 [ 1622.660573][T16113] rtnl_newlink+0x166d/0x1c30 [ 1622.660624][T16113] ? __pfx_rtnl_newlink+0x10/0x10 [ 1622.660654][T16113] ? do_syscall_64+0x166/0x520 [ 1622.660686][T16113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1622.660753][T16113] ? kasan_quarantine_put+0xbb/0x1f0 [ 1622.660780][T16113] ? lockdep_hardirqs_on+0x7b/0x110 [ 1622.660816][T16113] ? nlmon_xmit+0xb0/0x100 [ 1622.660844][T16113] ? kmem_cache_free+0x182/0x650 [ 1622.660884][T16113] ? __lock_acquire+0x747/0x2de0 [ 1622.660921][T16113] ? __local_bh_enable_ip+0xd6/0x140 [ 1622.660953][T16113] ? lockdep_hardirqs_on+0x7b/0x110 [ 1622.660985][T16113] ? __dev_queue_xmit+0x29b/0x3920 [ 1622.661007][T16113] ? __local_bh_enable_ip+0xd6/0x140 [ 1622.661048][T16113] ? lock_acquire+0x115/0x350 [ 1622.661091][T16113] ? __pfx_rtnl_newlink+0x10/0x10 [ 1622.661121][T16113] rtnetlink_rcv_msg+0x802/0xc00 [ 1622.661157][T16113] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1622.661189][T16113] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1622.661220][T16113] ? ref_tracker_free+0x689/0x830 [ 1622.661255][T16113] ? __pfx_ref_tracker_free+0x10/0x10 [ 1622.661299][T16113] netlink_rcv_skb+0x226/0x4a0 [ 1622.661326][T16113] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1622.661360][T16113] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1622.661400][T16113] ? netlink_deliver_tap+0x2e/0x1b0 [ 1622.661431][T16113] ? netlink_deliver_tap+0x2e/0x1b0 [ 1622.661463][T16113] netlink_unicast+0x7bd/0x940 [ 1622.661510][T16113] netlink_sendmsg+0x813/0xb40 [ 1622.661546][T16113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1622.661581][T16113] ? apparmor_socket_sendmsg+0x98/0x360 [ 1622.661612][T16113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1622.661636][T16113] sock_sendmsg_nosec+0x13a/0x180 [ 1622.661667][T16113] ____sys_sendmsg+0x54e/0x850 [ 1622.661706][T16113] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1622.661751][T16113] ? import_iovec+0x73/0xa0 [ 1622.661787][T16113] ___sys_sendmsg+0x2a5/0x360 [ 1622.661820][T16113] ? __lock_acquire+0x747/0x2de0 [ 1622.661850][T16113] ? __pfx____sys_sendmsg+0x10/0x10 [ 1622.661924][T16113] ? __fget_files+0x2a/0x420 [ 1622.661958][T16113] ? __fget_files+0x3a2/0x420 [ 1622.662005][T16113] __x64_sys_sendmsg+0x1b1/0x290 [ 1622.662043][T16113] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1622.662104][T16113] do_syscall_64+0x166/0x520 [ 1622.662136][T16113] ? trace_irq_disable+0x3b/0x140 [ 1622.662161][T16113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1622.662186][T16113] ? clear_bhb_loop+0x70/0xc0 [ 1622.662216][T16113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1622.662240][T16113] RIP: 0033:0x7fa66d59e159 [ 1622.662263][T16113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1622.662284][T16113] RSP: 002b:00007fa66e3a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1622.662310][T16113] RAX: ffffffffffffffda RBX: 00007fa66d826090 RCX: 00007fa66d59e159 [ 1622.662328][T16113] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 1622.662344][T16113] RBP: 00007fa66e3a5090 R08: 0000000000000000 R09: 0000000000000000 [ 1622.662359][T16113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1622.662373][T16113] R13: 00007fa66d826128 R14: 00007fa66d826090 R15: 00007ffca8aa8848 [ 1622.662418][T16113] [ 1622.662462][T16113] kobject: kobject_add_internal failed for vlan4 (error: -12 parent: net) [ 1622.727450][T16116] syzkaller0: entered promiscuous mode [ 1622.727475][T16116] syzkaller0: entered allmulticast mode [ 1622.930302][T16116] tipc: Resetting bearer [ 1623.456685][T16123] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 1623.713076][T16144] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11667'. [ 1623.713143][T16144] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11667'. [ 1624.143787][T16154] ip_tables: iptables: counters copy to user failed while replacing table [ 1624.360107][T16154] C: renamed from lo (while UP) [ 1624.379797][T16154] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1624.382290][T16154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11670'. [ 1624.595103][T16145] bond12: option arp_all_targets: invalid value (18446744073709551613) [ 1624.632206][T16145] bond12 (unregistering): Released all slaves [ 1624.776994][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1625.499504][T16189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11678'. [ 1626.105942][T16189] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1626.329897][T16197] veth0: entered promiscuous mode [ 1626.425645][T16196] veth0: left promiscuous mode [ 1626.654416][T16207] dvmrp8: entered allmulticast mode [ 1627.006640][T16217] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 1627.084355][T16221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11684'. [ 1627.275124][T16231] netlink: 'syz.5.11687': attribute type 1 has an invalid length. [ 1627.275153][T16231] netlink: 228 bytes leftover after parsing attributes in process `syz.5.11687'. [ 1627.566556][T16221] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1627.720531][T16246] netlink: 'syz.5.11687': attribute type 1 has an invalid length. [ 1627.720558][T16246] netlink: 228 bytes leftover after parsing attributes in process `syz.5.11687'. [ 1628.321445][T16905] hsr_slave_0: left promiscuous mode [ 1628.549803][T16905] hsr_slave_1: left promiscuous mode [ 1628.550915][T16905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1628.550943][T16905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1628.595465][T16905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1628.595493][T16905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1628.733722][T16279] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11692'. [ 1628.784993][T16905] veth1_macvtap: left promiscuous mode [ 1628.812761][T16905] veth0_macvtap: left promiscuous mode [ 1628.813682][T16905] veth1_vlan: left promiscuous mode [ 1628.850460][T16905] veth0_vlan: left promiscuous mode [ 1629.632872][T16905] team0 (unregistering): Port device team_slave_1 removed [ 1629.671069][T16905] team0 (unregistering): Port device team_slave_0 removed [ 1630.070319][T16279] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1630.155600][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1630.555063][T16299] netlink: 11 bytes leftover after parsing attributes in process `syz.4.11696'. [ 1630.642351][T16300] netlink: 'syz.4.11696': attribute type 64 has an invalid length. [ 1630.642378][T16300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11696'. [ 1631.841558][T16905] IPVS: stop unused estimator thread 0... [ 1632.785210][T16337] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1632.895616][ T5279] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1633.073800][T16364] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11706'. [ 1633.209520][T16364] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1633.494983][T16373] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1633.521018][T16371] netlink: 'syz.4.11709': attribute type 2 has an invalid length. [ 1633.601711][T16372] sctp: [Deprecated]: syz.0.11708 (pid 16372) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1633.601711][T16372] Use struct sctp_sack_info instead [ 1633.683813][T16373] netlink: 'syz.2.11710': attribute type 2 has an invalid length. [ 1633.683840][T16373] netlink: 'syz.2.11710': attribute type 11 has an invalid length. [ 1633.683857][T16373] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11710'. [ 1634.250199][T16398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11713'. [ 1634.319259][T16398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1634.370137][T16400] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1634.715640][T16398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1634.822021][T16411] netlink: 'syz.5.11719': attribute type 153 has an invalid length. [ 1636.679132][T14383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1636.729943][T16445] syzkaller0: entered promiscuous mode [ 1636.729975][T16445] syzkaller0: entered allmulticast mode [ 1636.777179][ T5279] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1636.850824][T16448] sit0: entered promiscuous mode [ 1636.860094][T16448] netlink: 'syz.6.11725': attribute type 1 has an invalid length. [ 1636.860126][T16448] netlink: 1 bytes leftover after parsing attributes in process `syz.6.11725'. [ 1636.942612][T14383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1637.213032][T16460] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11728'. [ 1637.218753][T16460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11728'. [ 1637.218784][T16460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11728'. [ 1638.505015][T16478] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1638.505060][T16478] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1638.505091][T16478] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1639.207344][T31273] tipc: Resetting bearer [ 1639.804510][T31273] tipc: Disabling bearer [ 1640.099962][T31273] bond2 (unregistering): (slave bridge2): Releasing active interface [ 1640.099992][T31273] bond2 (unregistering): (slave bridge2): the permanent HWaddr of slave - ce:a9:98:d5:20:de - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1640.155759][T31273] bond2 (unregistering): (slave bridge3): Releasing active interface [ 1640.206897][T31273] bond3 (unregistering): (slave bridge6): Releasing backup interface [ 1640.286217][T31273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1640.286594][T31273] bond_slave_0: left allmulticast mode [ 1640.290264][T31273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1640.290946][T31273] bond_slave_1: left allmulticast mode [ 1640.293159][T31273] bond0 (unregistering): Released all slaves [ 1640.358159][T31273] bond1 (unregistering): Released all slaves [ 1640.385614][T31273] bond2 (unregistering): Released all slaves [ 1640.424175][T31273] bond3 (unregistering): Released all slaves [ 1640.465189][T31273] bond4 (unregistering): Released all slaves [ 1640.536881][T31273] bond5 (unregistering): Released all slaves [ 1640.572043][T31273] bond6 (unregistering): Released all slaves [ 1640.603324][T31273] bond7 (unregistering): Released all slaves [ 1641.150800][T31273] tipc: Left network mode [ 1641.202604][T16528] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11740'. [ 1641.239560][T16530] syzkaller1: left promiscuous mode [ 1641.239587][T16530] syzkaller1: left allmulticast mode [ 1641.256576][T16530] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11741'. [ 1641.759969][T16550] netlink: 60 bytes leftover after parsing attributes in process `syz.6.11745'. [ 1643.122009][T16578] netlink: 'syz.5.11748': attribute type 1 has an invalid length. [ 1643.369896][T16599] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11750'. [ 1643.527702][T16599] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1644.046315][T16551] netlink: 60 bytes leftover after parsing attributes in process `syz.6.11745'. [ 1644.435918][ T5279] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1644.883167][T16632] geneve3: entered promiscuous mode [ 1644.883383][T16632] geneve3: entered allmulticast mode [ 1644.989679][T16900] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 1644.989814][T16900] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 1644.989911][T16900] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 1644.990005][T16900] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 1645.140985][T16646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11759'. [ 1645.652864][T16650] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11757'. [ 1646.499752][T31273] hsr_slave_0: left promiscuous mode [ 1646.512744][T31273] hsr_slave_1: left promiscuous mode [ 1646.616162][T31273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1646.616237][T31273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1646.787963][T31273] veth1_macvtap: left promiscuous mode [ 1646.788010][T31273] veth0_macvtap: left promiscuous mode [ 1646.788123][T31273] veth1_vlan: left promiscuous mode [ 1646.788197][T31273] veth0_vlan: left promiscuous mode [ 1646.940801][T16678] openvswitch: netlink: IPv4 tun info is not correct [ 1647.226379][T16684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11763'. [ 1647.230538][T16690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11766'. [ 1648.146226][T31273] team0 (unregistering): Port device team_slave_1 removed [ 1650.409032][T16747] netlink: 92 bytes leftover after parsing attributes in process `syz.6.11779'. [ 1650.771597][T16750] block nbd0: reconnected socket [ 1650.816205][ T5633] block nbd0: Receive control failed (result -107) [ 1651.020974][T31273] IPVS: stop unused estimator thread 0... [ 1651.077826][T16769] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1651.494870][T16780] sctp: [Deprecated]: syz.2.11785 (pid 16780) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1651.494870][T16780] Use struct sctp_sack_info instead [ 1652.241657][T16797] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11790'. [ 1652.322991][T16805] netlink: 64 bytes leftover after parsing attributes in process `syz.2.11794'. [ 1652.447172][T16815] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11790'. [ 1652.994103][T16825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11797'. [ 1653.153295][T16825] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1653.316973][T16831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1655.207172][T16906] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11808'. [ 1655.207217][T16906] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11808'. [ 1655.258977][T16906] erspan0: entered promiscuous mode [ 1655.277926][T16906] gretap0: entered promiscuous mode [ 1655.326940][T16889] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xb1 [ 1657.835868][T16891] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1660.259022][T17019] netlink: 'syz.6.11829': attribute type 64 has an invalid length. [ 1662.440751][T16994] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1662.910372][T17066] netlink: 'syz.6.11836': attribute type 2 has an invalid length. [ 1663.051906][T17071] FAULT_INJECTION: forcing a failure. [ 1663.051906][T17071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1663.051946][T17071] CPU: 0 UID: 0 PID: 17071 Comm: syz.5.11838 Not tainted syzkaller #0 PREEMPT(full) [ 1663.051972][T17071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1663.051987][T17071] Call Trace: [ 1663.052072][T17071] [ 1663.052109][T17071] dump_stack_lvl+0xe8/0x150 [ 1663.052152][T17071] should_fail_ex+0x410/0x560 [ 1663.052191][T17071] _copy_from_iter+0x1d3/0x1660 [ 1663.052223][T17071] ? __alloc_skb+0x27a/0x7a0 [ 1663.052284][T17071] ? __alloc_skb+0x27a/0x7a0 [ 1663.052317][T17071] ? __alloc_skb+0x27a/0x7a0 [ 1663.052348][T17071] ? __pfx__copy_from_iter+0x10/0x10 [ 1663.052375][T17071] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 1663.052407][T17071] ? __alloc_skb+0x27a/0x7a0 [ 1663.052436][T17071] ? __alloc_skb+0x27a/0x7a0 [ 1663.052472][T17071] ? netlink_sendmsg+0x650/0xb40 [ 1663.052498][T17071] ? skb_put+0x112/0x210 [ 1663.052533][T17071] netlink_sendmsg+0x6c0/0xb40 [ 1663.052568][T17071] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1663.052603][T17071] ? apparmor_socket_sendmsg+0x98/0x360 [ 1663.052635][T17071] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1663.052660][T17071] sock_sendmsg_nosec+0x13a/0x180 [ 1663.052690][T17071] ____sys_sendmsg+0x54e/0x850 [ 1663.052732][T17071] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1663.052776][T17071] ? import_iovec+0x73/0xa0 [ 1663.052811][T17071] ___sys_sendmsg+0x2a5/0x360 [ 1663.052846][T17071] ? __lock_acquire+0x747/0x2de0 [ 1663.052877][T17071] ? __pfx____sys_sendmsg+0x10/0x10 [ 1663.052951][T17071] ? __fget_files+0x2a/0x420 [ 1663.052984][T17071] ? __fget_files+0x3a2/0x420 [ 1663.053029][T17071] __x64_sys_sendmsg+0x1b1/0x290 [ 1663.053067][T17071] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1663.053125][T17071] do_syscall_64+0x166/0x520 [ 1663.053191][T17071] ? trace_irq_disable+0x3b/0x140 [ 1663.053217][T17071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1663.053242][T17071] ? clear_bhb_loop+0x70/0xc0 [ 1663.053272][T17071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1663.053296][T17071] RIP: 0033:0x7f0f40d9e159 [ 1663.053319][T17071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1663.053339][T17071] RSP: 002b:00007f0f41d21028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1663.053365][T17071] RAX: ffffffffffffffda RBX: 00007f0f41025fa0 RCX: 00007f0f40d9e159 [ 1663.053384][T17071] RDX: 0000000000048040 RSI: 0000200000001300 RDI: 0000000000000005 [ 1663.053408][T17071] RBP: 00007f0f41d21090 R08: 0000000000000000 R09: 0000000000000000 [ 1663.053424][T17071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1663.053439][T17071] R13: 00007f0f41026038 R14: 00007f0f41025fa0 R15: 00007ffc951b2b18 [ 1663.053476][T17071] [ 1663.529035][T17077] netlink: 'syz.2.11840': attribute type 1 has an invalid length. [ 1663.687724][T17077] bond17: entered promiscuous mode [ 1663.688152][T17077] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1663.748519][T17101] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11842'. [ 1664.207035][T17121] FAULT_INJECTION: forcing a failure. [ 1664.207035][T17121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1664.207075][T17121] CPU: 0 UID: 0 PID: 17121 Comm: syz.2.11846 Not tainted syzkaller #0 PREEMPT(full) [ 1664.207102][T17121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1664.207116][T17121] Call Trace: [ 1664.207127][T17121] [ 1664.207138][T17121] dump_stack_lvl+0xe8/0x150 [ 1664.207179][T17121] should_fail_ex+0x410/0x560 [ 1664.207215][T17121] _copy_from_user+0x2d/0xb0 [ 1664.207384][T17121] do_sock_getsockopt+0x462/0x7e0 [ 1664.207434][T17121] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1664.207488][T17121] ? __fget_files+0x3a2/0x420 [ 1664.207522][T17121] ? __fget_files+0x2a/0x420 [ 1664.207564][T17121] __x64_sys_getsockopt+0x1a4/0x240 [ 1664.207610][T17121] do_syscall_64+0x166/0x520 [ 1664.207645][T17121] ? trace_irq_disable+0x3b/0x140 [ 1664.207671][T17121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1664.207697][T17121] ? clear_bhb_loop+0x70/0xc0 [ 1664.207726][T17121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1664.207749][T17121] RIP: 0033:0x7fed9439e159 [ 1664.207772][T17121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1664.207792][T17121] RSP: 002b:00007fed952b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1664.207818][T17121] RAX: ffffffffffffffda RBX: 00007fed94625fa0 RCX: 00007fed9439e159 [ 1664.207837][T17121] RDX: 0000000000002721 RSI: 0000200000000114 RDI: 0000000000000003 [ 1664.207853][T17121] RBP: 00007fed952b1090 R08: 0000200000000400 R09: 0000000000000000 [ 1664.207870][T17121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1664.207884][T17121] R13: 00007fed94626038 R14: 00007fed94625fa0 R15: 00007ffd98cbdbc8 [ 1664.207923][T17121] [ 1664.343067][T17101] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1664.893332][T17147] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11849'. [ 1665.105087][T17153] ip_tables: iptables: counters copy to user failed while replacing table [ 1665.728197][T17164] netlink: 'syz.4.11853': attribute type 21 has an invalid length. [ 1665.728225][T17164] netlink: 128 bytes leftover after parsing attributes in process `syz.4.11853'. [ 1665.728305][T17164] netlink: 'syz.4.11853': attribute type 5 has an invalid length. [ 1665.728322][T17164] netlink: 3 bytes leftover after parsing attributes in process `syz.4.11853'. [ 1665.961442][T17174] FAULT_INJECTION: forcing a failure. [ 1665.961442][T17174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1665.961481][T17174] CPU: 0 UID: 0 PID: 17174 Comm: syz.4.11857 Not tainted syzkaller #0 PREEMPT(full) [ 1665.961508][T17174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1665.961524][T17174] Call Trace: [ 1665.961534][T17174] [ 1665.961545][T17174] dump_stack_lvl+0xe8/0x150 [ 1665.961584][T17174] should_fail_ex+0x410/0x560 [ 1665.961620][T17174] _copy_to_user+0x31/0xb0 [ 1665.961654][T17174] do_sock_getsockopt+0x6ea/0x7e0 [ 1665.961698][T17174] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1665.961749][T17174] ? __fget_files+0x3a2/0x420 [ 1665.961783][T17174] ? __fget_files+0x2a/0x420 [ 1665.961824][T17174] __x64_sys_getsockopt+0x1a4/0x240 [ 1665.961868][T17174] do_syscall_64+0x166/0x520 [ 1665.961900][T17174] ? trace_irq_disable+0x3b/0x140 [ 1665.961935][T17174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1665.961959][T17174] ? clear_bhb_loop+0x70/0xc0 [ 1665.961989][T17174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1665.962012][T17174] RIP: 0033:0x7f06a2f9e159 [ 1665.962034][T17174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1665.962055][T17174] RSP: 002b:00007f06a3f2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1665.962080][T17174] RAX: ffffffffffffffda RBX: 00007f06a3225fa0 RCX: 00007f06a2f9e159 [ 1665.962097][T17174] RDX: 0000000000002721 RSI: 0000200000000114 RDI: 0000000000000003 [ 1665.962113][T17174] RBP: 00007f06a3f2d090 R08: 0000200000000400 R09: 0000000000000000 [ 1665.962130][T17174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1665.962145][T17174] R13: 00007f06a3226038 R14: 00007f06a3225fa0 R15: 00007ffc4178a058 [ 1665.962182][T17174] [ 1666.407303][T17177] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11856'. [ 1666.408138][T17177] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11856'. [ 1666.654860][T17179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11859'. [ 1666.748602][T17179] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1667.039401][T17200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11863'. [ 1667.039471][T17200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11863'. [ 1667.047901][T17202] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11863'. [ 1667.063187][T17188] openvswitch: netlink: IP tunnel dst address not specified [ 1667.144577][T17188] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1667.406039][T17210] SET target dimension over the limit! [ 1667.626299][T17219] syzkaller0: entered promiscuous mode [ 1667.626327][T17219] syzkaller0: entered allmulticast mode [ 1667.910735][T17221] netlink: 'syz.5.11867': attribute type 24 has an invalid length. [ 1667.993715][T17224] FAULT_INJECTION: forcing a failure. [ 1667.993715][T17224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1667.993754][T17224] CPU: 0 UID: 0 PID: 17224 Comm: syz.4.11868 Not tainted syzkaller #0 PREEMPT(full) [ 1667.993782][T17224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1667.993798][T17224] Call Trace: [ 1667.993808][T17224] [ 1667.993819][T17224] dump_stack_lvl+0xe8/0x150 [ 1667.993860][T17224] should_fail_ex+0x410/0x560 [ 1667.993895][T17224] _copy_to_user+0x31/0xb0 [ 1667.993931][T17224] simple_read_from_buffer+0xe1/0x170 [ 1667.993972][T17224] proc_fail_nth_read+0x1bb/0x230 [ 1667.994003][T17224] ? common_file_perm+0x20e/0x2b0 [ 1667.994038][T17224] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1667.994067][T17224] ? rw_verify_area+0x24a/0x4c0 [ 1667.994106][T17224] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1667.994130][T17224] vfs_read+0x213/0xa80 [ 1667.994172][T17224] ? __pfx___mutex_lock+0x10/0x10 [ 1667.994208][T17224] ? __pfx_vfs_read+0x10/0x10 [ 1667.994246][T17224] ? __fget_files+0x2a/0x420 [ 1667.994285][T17224] ? __fget_files+0x3a2/0x420 [ 1667.994317][T17224] ? __fget_files+0x2a/0x420 [ 1667.994370][T17224] ksys_read+0x150/0x270 [ 1667.994396][T17224] ? __pfx_ksys_read+0x10/0x10 [ 1667.994416][T17224] ? fput+0xa0/0xd0 [ 1667.994457][T17224] do_syscall_64+0x166/0x520 [ 1667.994490][T17224] ? trace_irq_disable+0x3b/0x140 [ 1667.994515][T17224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1667.994539][T17224] ? clear_bhb_loop+0x70/0xc0 [ 1667.994569][T17224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1667.994593][T17224] RIP: 0033:0x7f06a2f5e98e [ 1667.994615][T17224] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1667.994636][T17224] RSP: 002b:00007f06a3f2cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1667.994661][T17224] RAX: ffffffffffffffda RBX: 00007f06a3f2d6c0 RCX: 00007f06a2f5e98e [ 1667.994679][T17224] RDX: 000000000000000f RSI: 00007f06a3f2d0a0 RDI: 0000000000000004 [ 1667.994695][T17224] RBP: 00007f06a3f2d090 R08: 0000000000000000 R09: 0000000000000000 [ 1667.994710][T17224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1667.994725][T17224] R13: 00007f06a3226038 R14: 00007f06a3225fa0 R15: 00007ffc4178a058 [ 1667.994763][T17224] [ 1669.640008][T17183] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1670.146288][T17255] netlink: 'syz.4.11871': attribute type 14 has an invalid length. [ 1670.780345][T17266] __nla_validate_parse: 1 callbacks suppressed [ 1670.780498][T17266] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11875'. [ 1671.524177][T17305] xt_l2tp: invalid flags combination: 8 [ 1671.591869][T17305] xt_NFQUEUE: number of total queues is 0 [ 1672.215543][T17315] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11884'. [ 1672.280524][T17318] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11886'. [ 1672.480162][T17318] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1673.302228][T17350] IPv6: NLM_F_CREATE should be specified when creating new route [ 1673.302368][T17350] netlink: 'syz.2.11892': attribute type 1 has an invalid length. [ 1673.353405][T17342] syzkaller0: entered promiscuous mode [ 1673.353430][T17342] syzkaller0: entered allmulticast mode [ 1674.141849][T17370] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11898'. [ 1674.312608][T16905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1674.312636][T16905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1674.814903][T17384] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11903'. [ 1674.945363][T17388] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11904'. [ 1675.349436][T17397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11906'. [ 1675.352822][T17402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11906'. [ 1675.395956][T17414] ip_tables: iptables: counters copy to user failed while replacing table [ 1675.478982][T17416] FAULT_INJECTION: forcing a failure. [ 1675.478982][T17416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1675.479019][T17416] CPU: 0 UID: 0 PID: 17416 Comm: syz.2.11910 Not tainted syzkaller #0 PREEMPT(full) [ 1675.479045][T17416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1675.479057][T17416] Call Trace: [ 1675.479066][T17416] [ 1675.479074][T17416] dump_stack_lvl+0xe8/0x150 [ 1675.479105][T17416] should_fail_ex+0x410/0x560 [ 1675.479132][T17416] _copy_from_user+0x2d/0xb0 [ 1675.479158][T17416] ___sys_sendmsg+0x1c6/0x360 [ 1675.479192][T17416] ? __lock_acquire+0x747/0x2de0 [ 1675.479216][T17416] ? __pfx____sys_sendmsg+0x10/0x10 [ 1675.479272][T17416] ? __fget_files+0x2a/0x420 [ 1675.479298][T17416] ? __fget_files+0x3a2/0x420 [ 1675.479332][T17416] __x64_sys_sendmsg+0x1b1/0x290 [ 1675.479360][T17416] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1675.479404][T17416] do_syscall_64+0x166/0x520 [ 1675.479430][T17416] ? trace_irq_disable+0x3b/0x140 [ 1675.479450][T17416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1675.479469][T17416] ? clear_bhb_loop+0x70/0xc0 [ 1675.479490][T17416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1675.479508][T17416] RIP: 0033:0x7fed9439e159 [ 1675.479526][T17416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1675.479542][T17416] RSP: 002b:00007fed952b1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1675.479561][T17416] RAX: ffffffffffffffda RBX: 00007fed94625fa0 RCX: 00007fed9439e159 [ 1675.479575][T17416] RDX: 000000000400c000 RSI: 0000200000000880 RDI: 0000000000000003 [ 1675.479587][T17416] RBP: 00007fed952b1090 R08: 0000000000000000 R09: 0000000000000000 [ 1675.479599][T17416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1675.479610][T17416] R13: 00007fed94626038 R14: 00007fed94625fa0 R15: 00007ffd98cbdbc8 [ 1675.479637][T17416] [ 1676.166845][T17432] tipc: Trying to set illegal importance in message [ 1676.270527][T17432] netlink: 'syz.5.11914': attribute type 2 has an invalid length. [ 1676.270554][T17432] netlink: 100 bytes leftover after parsing attributes in process `syz.5.11914'. [ 1676.427167][T17432] bridge0: entered promiscuous mode [ 1676.427245][T17432] bridge0: entered allmulticast mode [ 1676.514664][ T5633] block nbd0: Receive control failed (result -107) [ 1676.514839][T17443] block nbd0: reconnected socket [ 1677.185310][T17454] IPv6: addrconf: prefix option has invalid lifetime [ 1677.299755][T17462] FAULT_INJECTION: forcing a failure. [ 1677.299755][T17462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1677.299796][T17462] CPU: 0 UID: 0 PID: 17462 Comm: syz.2.11923 Not tainted syzkaller #0 PREEMPT(full) [ 1677.299822][T17462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1677.299838][T17462] Call Trace: [ 1677.299848][T17462] [ 1677.299859][T17462] dump_stack_lvl+0xe8/0x150 [ 1677.299899][T17462] should_fail_ex+0x410/0x560 [ 1677.299935][T17462] _copy_from_user+0x2d/0xb0 [ 1677.299969][T17462] __copy_msghdr+0x390/0x590 [ 1677.300010][T17462] ___sys_sendmsg+0x213/0x360 [ 1677.300043][T17462] ? __lock_acquire+0x747/0x2de0 [ 1677.300075][T17462] ? __pfx____sys_sendmsg+0x10/0x10 [ 1677.300148][T17462] ? __fget_files+0x2a/0x420 [ 1677.300184][T17462] ? __fget_files+0x3a2/0x420 [ 1677.300229][T17462] __x64_sys_sendmsg+0x1b1/0x290 [ 1677.300267][T17462] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1677.300324][T17462] do_syscall_64+0x166/0x520 [ 1677.300359][T17462] ? trace_irq_disable+0x3b/0x140 [ 1677.300385][T17462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1677.300410][T17462] ? clear_bhb_loop+0x70/0xc0 [ 1677.300440][T17462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1677.300463][T17462] RIP: 0033:0x7fed9439e159 [ 1677.300486][T17462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1677.300508][T17462] RSP: 002b:00007fed952b1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1677.300543][T17462] RAX: ffffffffffffffda RBX: 00007fed94625fa0 RCX: 00007fed9439e159 [ 1677.300561][T17462] RDX: 000000000400c000 RSI: 0000200000000880 RDI: 0000000000000003 [ 1677.300578][T17462] RBP: 00007fed952b1090 R08: 0000000000000000 R09: 0000000000000000 [ 1677.300593][T17462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1677.300609][T17462] R13: 00007fed94626038 R14: 00007fed94625fa0 R15: 00007ffd98cbdbc8 [ 1677.300646][T17462] [ 1677.776781][T17472] gtp2: entered promiscuous mode [ 1677.776809][T17472] gtp2: entered allmulticast mode [ 1678.400680][T17496] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11931'. [ 1678.704897][T17499] netlink: 40 bytes leftover after parsing attributes in process `syz.6.11933'. [ 1678.954668][T17510] netlink: 'syz.2.11936': attribute type 27 has an invalid length. [ 1679.384156][T17521] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11938'. [ 1679.470678][T17513] bridge0: port 2(bridge_slave_1) entered disabled state [ 1679.628594][T17531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11938'. [ 1679.628632][T17531] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11938'. [ 1679.913480][T17540] netlink: 'syz.6.11940': attribute type 4 has an invalid length. [ 1680.482977][T17554] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11947'. [ 1680.483010][T17554] block nbd3: Unsupported socket: should be TCP or UNIX. [ 1680.801356][T17558] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1680.802263][T17558] bridge0: port 3(bond16) entered blocking state [ 1680.802464][T17558] bridge0: port 3(bond16) entered disabled state [ 1680.802626][T17558] bond16: entered allmulticast mode [ 1680.805201][T17558] bond16: entered promiscuous mode [ 1680.805910][T17558] bridge0: port 3(bond16) entered blocking state [ 1680.806029][T17558] bridge0: port 3(bond16) entered forwarding state [ 1681.039701][T17569] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11951'. [ 1681.039991][T17569] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1681.042177][T17569] netlink: 152 bytes leftover after parsing attributes in process `syz.6.11951'. [ 1681.557027][T17584] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11954'. [ 1681.683677][ T13] bridge0: port 3(bond16) entered disabled state [ 1682.045651][T17602] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 1682.249878][T17606] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1683.148949][T17635] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1683.271093][T17642] netlink: 'syz.6.11968': attribute type 9 has an invalid length. [ 1683.548801][T17650] netlink: 'syz.5.11969': attribute type 11 has an invalid length. [ 1683.548828][T17650] netlink: 'syz.5.11969': attribute type 11 has an invalid length. [ 1683.548844][T17650] netlink: 228 bytes leftover after parsing attributes in process `syz.5.11969'. [ 1683.677676][T17658] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11972'. [ 1683.678768][T17658] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11972'. [ 1683.678901][T17658] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1683.679808][T17658] netlink: 152 bytes leftover after parsing attributes in process `syz.5.11972'. [ 1683.681471][T17658] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11972'. [ 1684.129191][T17669] netlink: 666 bytes leftover after parsing attributes in process `syz.5.11976'. [ 1684.807461][T17675] bond18: Unable to set peer notification delay as MII monitoring is disabled [ 1684.856401][T17679] netlink: 'syz.5.11979': attribute type 39 has an invalid length. [ 1684.856966][T17680] netlink: 'syz.5.11979': attribute type 39 has an invalid length. [ 1684.929831][T17675] bond18 (unregistering): Released all slaves [ 1685.032233][T17691] FAULT_INJECTION: forcing a failure. [ 1685.032233][T17691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1685.032271][T17691] CPU: 1 UID: 0 PID: 17691 Comm: syz.4.11981 Not tainted syzkaller #0 PREEMPT(full) [ 1685.032296][T17691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1685.032310][T17691] Call Trace: [ 1685.032319][T17691] [ 1685.032328][T17691] dump_stack_lvl+0xe8/0x150 [ 1685.032536][T17691] should_fail_ex+0x410/0x560 [ 1685.032617][T17691] _copy_to_user+0x31/0xb0 [ 1685.032703][T17691] simple_read_from_buffer+0xe1/0x170 [ 1685.032752][T17691] proc_fail_nth_read+0x1bb/0x230 [ 1685.032776][T17691] ? common_file_perm+0x20e/0x2b0 [ 1685.032810][T17691] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1685.032845][T17691] ? rw_verify_area+0x24a/0x4c0 [ 1685.032881][T17691] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1685.032905][T17691] vfs_read+0x213/0xa80 [ 1685.032946][T17691] ? __pfx___mutex_lock+0x10/0x10 [ 1685.033008][T17691] ? __pfx_vfs_read+0x10/0x10 [ 1685.033046][T17691] ? __fget_files+0x2a/0x420 [ 1685.033083][T17691] ? __fget_files+0x3a2/0x420 [ 1685.033115][T17691] ? __fget_files+0x2a/0x420 [ 1685.033159][T17691] ksys_read+0x150/0x270 [ 1685.033183][T17691] ? __pfx_ksys_read+0x10/0x10 [ 1685.033219][T17691] do_syscall_64+0x166/0x520 [ 1685.033276][T17691] ? trace_irq_disable+0x3b/0x140 [ 1685.033300][T17691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1685.033324][T17691] ? clear_bhb_loop+0x70/0xc0 [ 1685.033353][T17691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1685.033376][T17691] RIP: 0033:0x7f06a2f5e98e [ 1685.033423][T17691] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1685.033472][T17691] RSP: 002b:00007f06a3f2cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1685.033528][T17691] RAX: ffffffffffffffda RBX: 00007f06a3f2d6c0 RCX: 00007f06a2f5e98e [ 1685.033545][T17691] RDX: 000000000000000f RSI: 00007f06a3f2d0a0 RDI: 0000000000000004 [ 1685.033560][T17691] RBP: 00007f06a3f2d090 R08: 0000000000000000 R09: 0000000000000000 [ 1685.033575][T17691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1685.033589][T17691] R13: 00007f06a3226038 R14: 00007f06a3225fa0 R15: 00007ffc4178a058 [ 1685.033626][T17691] [ 1685.581684][T17699] openvswitch: netlink: Port 196609 exceeds max allowable 65535 [ 1685.962605][T17681] syzkaller1: entered promiscuous mode [ 1685.962633][T17681] syzkaller1: entered allmulticast mode [ 1686.936005][T17738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11990'. [ 1687.209384][T17738] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1688.235304][T17781] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11999'. [ 1688.433289][T17791] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12003'. [ 1688.586882][T17793] ovs-system: entered promiscuous mode [ 1688.636734][T17802] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12004'. [ 1688.736823][T17802] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1688.875531][T17813] syzkaller0: left promiscuous mode [ 1688.875561][T17813] syzkaller0: left allmulticast mode [ 1688.876122][T17813] tipc: Resetting bearer [ 1689.812588][T17840] netlink: 'syz.5.12014': attribute type 1 has an invalid length. [ 1689.868918][T17840] bond15: entered promiscuous mode [ 1689.869459][T17840] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1689.871481][T17844] ip_tables: iptables: counters copy to user failed while replacing table [ 1689.998830][T17840] ipvlan2: entered allmulticast mode [ 1689.998858][T17840] bond15: entered allmulticast mode [ 1690.050627][T17840] bond15: (slave bridge3): making interface the new active one [ 1690.050660][T17840] bridge3: entered promiscuous mode [ 1690.050855][T17840] bridge3: entered allmulticast mode [ 1690.053509][T17840] bond15: (slave bridge3): Enslaving as an active interface with an up link [ 1690.562119][T17860] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1691.488689][T17794] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1692.018622][T17897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12027'. [ 1692.158644][T17898] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12026'. [ 1692.294182][T17898] bridge0: port 2(bridge_slave_1) entered disabled state [ 1692.433149][T17898] bridge_slave_1 (unregistering): left allmulticast mode [ 1692.433539][T17898] bridge_slave_1 (unregistering): left promiscuous mode [ 1692.434002][T17898] bridge0: port 2(bridge_slave_1) entered disabled state [ 1692.561595][T17935] xt_bpf: check failed: parse error [ 1692.562180][T17933] xt_bpf: check failed: parse error [ 1693.712978][T17957] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12038'. [ 1695.649348][T18020] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12051'. [ 1696.090290][T18018] ovs-s: entered promiscuous mode [ 1696.119344][T18021] openvswitch: ovs-s: Dropping previously announced user features [ 1696.138280][T18022] openvswitch: ovs-s: Dropping previously announced user features [ 1696.218847][T18024] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12053'. [ 1696.463950][T18024] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1696.576213][ T5616] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1696.602232][ T5616] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1696.603241][ T5616] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1696.636114][ T5616] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1696.636842][ T5616] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1697.469809][T16596] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1697.469852][T16596] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1697.469883][T16596] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1697.806653][T16596] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1697.806702][T16596] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1697.806737][T16596] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1697.813950][T18063] netlink: 'syz.0.12060': attribute type 13 has an invalid length. [ 1697.813980][T18063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12060'. [ 1697.916955][T18063] netlink: 'syz.0.12060': attribute type 13 has an invalid length. [ 1697.916986][T18063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12060'. [ 1697.944656][ T986] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1697.944721][ T986] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1697.944762][ T986] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1697.944803][ T986] netdevsim netdevsim0 : set [0, 0] type 1 family 0 port 8472 - 0 [ 1697.947306][T18063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12060'. [ 1697.947905][T18063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12060'. [ 1697.947943][T18063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12060'. [ 1698.130834][T16596] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1698.130877][T16596] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1698.130909][T16596] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1698.757979][ T5616] Bluetooth: hci3: command tx timeout [ 1698.793472][T16596] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1698.793564][T16596] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1698.793635][T16596] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1698.827620][T18078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12064'. [ 1698.896931][T18080] tipc: Enabled bearer , priority 0 [ 1699.600014][T18084] syzkaller0: entered promiscuous mode [ 1699.600080][T18084] syzkaller0: entered allmulticast mode [ 1699.604896][T18084] tipc: Resetting bearer [ 1699.696410][T18096] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1699.727603][T18074] tipc: Resetting bearer [ 1699.948676][T18103] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12068'. [ 1700.854657][ T5616] Bluetooth: hci3: command tx timeout [ 1702.918139][ T5616] Bluetooth: hci3: command tx timeout [ 1705.014230][ T5616] Bluetooth: hci3: command tx timeout [ 1707.452905][T18074] tipc: Disabling bearer [ 1707.470506][T18098] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1707.513965][T18102] kthread_run failed with err -4 [ 1707.617234][T18111] pimreg: entered allmulticast mode [ 1708.354995][T18111] pimreg: left allmulticast mode [ 1708.494027][T18134] syzkaller1: left promiscuous mode [ 1708.494055][T18134] syzkaller1: left allmulticast mode [ 1709.147014][T18155] netlink: 76 bytes leftover after parsing attributes in process `syz.6.12076'. [ 1709.239138][T18157] netlink: 56 bytes leftover after parsing attributes in process `syz.6.12076'. [ 1710.163217][T16596] erspan0 (unregistering): left promiscuous mode [ 1710.211402][T16596] gretap0 (unregistering): left promiscuous mode [ 1710.399778][T16596] bond3 (unregistering): (slave geneve2): Releasing active interface [ 1710.564403][T16596] bond15 (unregistering): (slave bridge3): Releasing backup interface [ 1710.564434][T16596] bridge3 (unregistering): left promiscuous mode [ 1710.564457][T16596] bridge3 (unregistering): left allmulticast mode [ 1710.639614][T16596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1710.640963][T16884] smbdirect: ib_dev[syz1] removed [ 1710.687825][T16596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1710.734357][T16596] bond0 (unregistering): (slave team0): Releasing backup interface [ 1710.749856][T16596] bond0 (unregistering): Released all slaves [ 1710.757433][T16596] bond1 (unregistering): Released all slaves [ 1710.824372][T16596] bond2 (unregistering): Released all slaves [ 1710.839309][T16596] bond3 (unregistering): Released all slaves [ 1710.880924][T16596] bond4 (unregistering): Released all slaves [ 1710.917628][T16596] bond5 (unregistering): Released all slaves [ 1710.945561][T16596] bond6 (unregistering): Released all slaves [ 1710.983653][T16596] bond7 (unregistering): Released all slaves [ 1711.014804][T16596] bond8 (unregistering): Released all slaves [ 1711.058882][T16596] bond9 (unregistering): Released all slaves [ 1711.093839][T16596] bond10 (unregistering): Released all slaves [ 1711.139363][T16596] bond11 (unregistering): Released all slaves [ 1711.186119][T16596] bond12 (unregistering): Released all slaves [ 1711.227983][T16596] bond13 (unregistering): Released all slaves [ 1711.288936][T16596] bond14 (unregistering): Released all slaves [ 1711.341070][T16596] bond15 (unregistering): Released all slaves [ 1711.623156][ T5279] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1711.877102][T18178] netlink: 56 bytes leftover after parsing attributes in process `syz.2.12077'. [ 1711.878794][T18178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12077'. [ 1711.879886][T18178] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1711.993734][T16596] tipc: Disabling bearer [ 1711.994061][T16596] tipc: Disabling bearer [ 1711.994368][T16596] tipc: Disabling bearer [ 1712.144259][T16596] tipc: Left network mode [ 1712.291560][T18194] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1712.619361][T18031] bridge0: port 1(bridge_slave_0) entered blocking state [ 1712.630811][T18031] bridge0: port 1(bridge_slave_0) entered disabled state [ 1712.631019][T18031] bridge_slave_0: entered allmulticast mode [ 1712.736105][T18031] bridge_slave_0: entered promiscuous mode [ 1712.762559][T18031] bridge0: port 2(bridge_slave_1) entered blocking state [ 1712.762683][T18031] bridge0: port 2(bridge_slave_1) entered disabled state [ 1712.762849][T18031] bridge_slave_1: entered allmulticast mode [ 1712.764763][T18031] bridge_slave_1: entered promiscuous mode [ 1713.014555][T18213] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12083'. [ 1713.082896][T18031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1713.086547][T18031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1713.213341][T18031] team0: Port device team_slave_0 added [ 1713.228281][T18031] team0: Port device team_slave_1 added [ 1713.297663][T18031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1713.297686][T18031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1713.297718][T18031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1713.299763][T18031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1713.299779][T18031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1713.299810][T18031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1713.888046][T18226] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12087'. [ 1713.888193][T18227] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12087'. [ 1715.088105][T18031] hsr_slave_0: entered promiscuous mode [ 1715.089176][T18031] hsr_slave_1: entered promiscuous mode [ 1715.089943][T18031] debugfs: 'hsr0' already exists in 'hsr' [ 1715.089969][T18031] Cannot create hsr debugfs directory [ 1715.245894][ T5279] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1715.280912][T18252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12090'. [ 1715.685899][T18257] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 1715.970053][T18261] xfrm0: entered promiscuous mode [ 1716.321364][T18277] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12097'. [ 1716.648687][T16596] hsr_slave_0: left promiscuous mode [ 1716.649636][T16596] hsr_slave_1: left promiscuous mode [ 1716.655733][T16596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1716.655760][T16596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1716.788981][T16596] veth1_macvtap: left promiscuous mode [ 1716.789670][T16596] veth1_vlan: left promiscuous mode [ 1716.791289][T16596] veth0_vlan: left promiscuous mode [ 1716.834642][T18292] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12098'. [ 1716.834793][T18293] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12098'. [ 1716.853673][T18289] netlink: 220 bytes leftover after parsing attributes in process `syz.4.12099'. [ 1716.856349][T18289] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12099'. [ 1717.253469][T18301] netlink: 48 bytes leftover after parsing attributes in process `syz.4.12100'. [ 1717.256593][T18301] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1718.144565][T16596] team0 (unregistering): Port device team_slave_1 removed [ 1718.175211][T16596] team0 (unregistering): Port device team_slave_0 removed [ 1718.551839][T18288] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1718.688940][ T5279] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1720.323145][T16596] IPVS: stop unused estimator thread 0... [ 1720.495984][T18353] netlink: 236 bytes leftover after parsing attributes in process `syz.0.12110'. [ 1720.496020][T18353] netlink: 236 bytes leftover after parsing attributes in process `syz.0.12110'. [ 1721.541342][T18381] netlink: 'syz.0.12116': attribute type 3 has an invalid length. [ 1721.541366][T18381] netlink: 'syz.0.12116': attribute type 9 has an invalid length. [ 1721.541382][T18381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12116'. [ 1722.497314][T18407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12121'. [ 1722.498160][T18409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12121'. [ 1723.245301][T18031] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1723.276821][T18031] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1723.305036][T18031] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1723.336133][T18031] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1723.337128][T18031] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1723.379282][T18031] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1723.380293][T18031] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1723.463903][T18031] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1724.062094][T18031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1724.220470][T18031] 8021q: adding VLAN 0 to HW filter on device team0 [ 1724.308695][T17276] bridge0: port 1(bridge_slave_0) entered blocking state [ 1724.308800][T17276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1724.314798][T17276] bridge0: port 2(bridge_slave_1) entered blocking state [ 1724.314890][T17276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1724.500771][T18031] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1724.500801][T18031] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1725.070967][T18477] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12134'. [ 1725.312715][T18483] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1725.453877][T18477] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1726.306632][T18508] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12140'. [ 1726.574797][T18524] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1727.154600][T18546] netlink: 'syz.2.12147': attribute type 32 has an invalid length. [ 1727.434512][T18557] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12149'. [ 1727.542972][T18557] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1727.582055][T18031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1729.174384][T18031] veth0_vlan: entered promiscuous mode [ 1729.359463][T18031] veth1_vlan: entered promiscuous mode [ 1729.473498][T18620] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1729.781796][T18031] veth0_macvtap: entered promiscuous mode [ 1729.854363][T18031] veth1_macvtap: entered promiscuous mode [ 1729.917830][T18632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12162'. [ 1730.144241][T18031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1730.301683][T18031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1730.485925][T16905] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1730.486393][T16905] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1730.486784][T16905] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1730.772159][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1731.466207][T16900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1731.466236][T16900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1731.733036][T16596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1731.733062][T16596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1731.967113][T18671] bond12 (unregistering): Released all slaves [ 1732.163580][T18682] hsr0: entered allmulticast mode [ 1732.163604][T18682] hsr_slave_0: entered allmulticast mode [ 1732.165053][T18682] hsr_slave_1: entered allmulticast mode [ 1732.185159][T18679] hsr0: left allmulticast mode [ 1732.185184][T18679] hsr_slave_0: left allmulticast mode [ 1732.185539][T18679] hsr_slave_1: left allmulticast mode [ 1732.711163][T18697] netlink: 'syz.2.12176': attribute type 21 has an invalid length. [ 1732.777051][T18697] bond18: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 1732.815393][T18697] bond18 (unregistering): Released all slaves [ 1732.998076][T18707] netlink: 'syz.4.12177': attribute type 14 has an invalid length. [ 1733.405194][T18716] netlink: 72 bytes leftover after parsing attributes in process `syz.0.12181'. [ 1733.457561][T18716] 0: reclassify loop, rule prio 0, protocol 03 [ 1733.464560][T18718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12180'. [ 1733.636532][T18729] x_tables: duplicate underflow at hook 1 [ 1733.865553][T18737] block nbd4: not configured, cannot reconfigure [ 1733.900044][T18734] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12185'. [ 1734.128798][T18755] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12189'. [ 1736.808030][T18737] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1736.946404][T18774] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12193'. [ 1737.176050][T18778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12196'. [ 1737.304802][T18778] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1737.444424][T18788] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12199'. [ 1737.444598][T18788] netlink: 6 bytes leftover after parsing attributes in process `syz.5.12199'. [ 1738.162774][T18804] veth9: entered promiscuous mode [ 1739.255596][T18865] netlink: 'syz.6.12216': attribute type 2 has an invalid length. [ 1739.255621][T18865] netlink: 188 bytes leftover after parsing attributes in process `syz.6.12216'. [ 1739.494709][T18877] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12218'. [ 1739.791309][T18877] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1739.826346][T18885] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1739.911107][T18886] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1740.323545][T18863] xt_CT: No such helper "netbios-ns" [ 1740.835587][T16596] erspan0: left allmulticast mode [ 1740.835857][T16596] bridge6: port 1(erspan0) entered disabled state [ 1740.945534][T16596] pimreg: left allmulticast mode [ 1740.945652][T16596] dvmrp8: left allmulticast mode [ 1741.115027][T18936] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12231'. [ 1741.814349][T16596] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 1741.817184][T16596] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1741.817211][T16596] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 1a:74:d9:ea:8d:63 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1741.987889][T16596] team0: Port device xfrm0 removed [ 1742.128554][T16596] bond4 (unregistering): (slave gretap1): Releasing backup interface [ 1742.379925][T16596] bond6 (unregistering): (slave bridge9): Releasing backup interface [ 1742.379958][T16596] bridge9 (unregistering): left promiscuous mode [ 1742.469638][T16596] bond0 (unregistering): Released all slaves [ 1742.479316][T16596] bond1 (unregistering): (slave veth5): Releasing backup interface [ 1742.514475][T16596] bond1 (unregistering): Released all slaves [ 1742.559312][T16596] bond2 (unregistering): Released all slaves [ 1742.585499][T16596] bond3 (unregistering): Released all slaves [ 1742.625492][T16596] bond4 (unregistering): (slave bond5): Releasing backup interface [ 1742.626462][T16596] bond4 (unregistering): Released all slaves [ 1742.690583][T16596] bond5 (unregistering): Released all slaves [ 1742.716082][T16596] bond6 (unregistering): Released all slaves [ 1742.757542][T16596] bond7 (unregistering): Released all slaves [ 1742.797400][T16596] bond8 (unregistering): Released all slaves [ 1742.826183][T18929] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1743.099851][T16596] tipc: Left network mode [ 1743.253094][T18960] netlink: 13 bytes leftover after parsing attributes in process `syz.0.12236'. [ 1743.304961][T18957] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12235'. [ 1744.421977][T18980] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1745.016589][T18994] netlink: 'syz.4.12246': attribute type 1 has an invalid length. [ 1745.171570][T18999] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12246'. [ 1745.194979][T18999] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1745.284733][T19004] netlink: 'syz.4.12246': attribute type 1 has an invalid length. [ 1745.285186][T19002] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12246'. [ 1745.376149][T19005] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12248'. [ 1745.397544][T19012] netlink: 'syz.2.12250': attribute type 1 has an invalid length. [ 1745.397570][T19012] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12250'. [ 1745.517081][T18998] bond14 (unregistering): Released all slaves [ 1745.688659][T18994] bond13: (slave gretap1): making interface the new active one [ 1745.689693][T18994] bond13: (slave gretap1): Enslaving as an active interface with an up link [ 1745.883347][T19017] netlink: 'syz.0.12251': attribute type 1 has an invalid length. [ 1745.883376][T19017] netlink: 240 bytes leftover after parsing attributes in process `syz.0.12251'. [ 1745.883394][T19017] netlink: 'syz.0.12251': attribute type 1 has an invalid length. [ 1745.883562][T19016] netlink: 'syz.6.12249': attribute type 1 has an invalid length. [ 1745.883579][T19016] netlink: 1 bytes leftover after parsing attributes in process `syz.6.12249'. [ 1747.159521][T19036] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12257'. [ 1748.066023][T19069] sctp: [Deprecated]: syz.0.12267 (pid 19069) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1748.066023][T19069] Use struct sctp_sack_info instead [ 1748.138965][T19069] netlink: 'syz.0.12267': attribute type 10 has an invalid length. [ 1748.304429][T19072] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12267'. [ 1748.428498][T19069] team0: Port device dummy0 added [ 1748.476243][T19070] netlink: 14 bytes leftover after parsing attributes in process `syz.0.12267'. [ 1748.602362][T19070] team0: Port device dummy0 removed [ 1748.725380][T17276] IPVS: starting estimator thread 0... [ 1748.728204][T19083] netlink: 'syz.5.12271': attribute type 29 has an invalid length. [ 1748.728228][T19083] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12271'. [ 1748.768114][T19083] netlink: 'syz.5.12271': attribute type 29 has an invalid length. [ 1748.832107][T19084] IPVS: using max 23 ests per chain, 55200 per kthread [ 1748.907804][T19085] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 1749.504277][T19101] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1749.526015][T19101] netlink: 'syz.2.12276': attribute type 3 has an invalid length. [ 1750.477773][T19119] __nla_validate_parse: 2 callbacks suppressed [ 1750.477796][T19119] netlink: 92 bytes leftover after parsing attributes in process `syz.6.12282'. [ 1750.694529][T19116] ovs0: entered promiscuous mode [ 1751.000677][ T5633] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1751.030219][ T5633] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1751.033819][ T5633] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1751.075376][ T5633] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1751.093230][ T5633] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1751.580820][T19145] netlink: 68 bytes leftover after parsing attributes in process `syz.5.12286'. [ 1751.580848][T19145] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12286'. [ 1751.710220][T19145] ip_tables: iptables: counters copy to user failed while replacing table [ 1751.771548][T19145] ip_tables: iptables: counters copy to user failed while replacing table [ 1752.040322][T19153] netlink: 76 bytes leftover after parsing attributes in process `syz.6.12290'. [ 1752.369321][T16596] hsr_slave_0: left promiscuous mode [ 1752.448227][T16596] veth1_macvtap: left promiscuous mode [ 1752.448274][T16596] veth0_macvtap: left promiscuous mode [ 1752.448558][T16596] veth1_vlan: left promiscuous mode [ 1752.448660][T16596] veth0_vlan: left promiscuous mode [ 1752.633553][T19169] netlink: 'syz.4.12294': attribute type 24 has an invalid length. [ 1752.735169][T19175] netlink: 'syz.4.12294': attribute type 24 has an invalid length. [ 1753.155447][ T5633] Bluetooth: hci4: command tx timeout [ 1753.957808][T19188] netlink: 244 bytes leftover after parsing attributes in process `syz.6.12299'. [ 1754.765128][T19200] bond0: entered promiscuous mode [ 1755.131252][T16596] IPVS: stop unused estimator thread 0... [ 1755.262246][ T5633] Bluetooth: hci4: command tx timeout [ 1755.822089][T19217] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12306'. [ 1755.883619][T19221] syz.4.12307 (19221) used greatest stack depth: 17448 bytes left [ 1755.937300][T19217] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1756.393252][T19241] v: renamed from veth0_vlan (while UP) [ 1756.686437][T19248] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12311'. [ 1756.686498][T19248] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 1756.698549][T19245] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12311'. [ 1756.780830][T19247] netlink: 'syz.6.12312': attribute type 9 has an invalid length. [ 1756.920577][T19124] bridge0: port 1(bridge_slave_0) entered blocking state [ 1756.922933][T19124] bridge0: port 1(bridge_slave_0) entered disabled state [ 1756.923310][T19124] bridge_slave_0: entered allmulticast mode [ 1756.948029][T19124] bridge_slave_0: entered promiscuous mode [ 1756.969669][T19124] bridge0: port 2(bridge_slave_1) entered blocking state [ 1756.970132][T19124] bridge0: port 2(bridge_slave_1) entered disabled state [ 1756.970465][T19124] bridge_slave_1: entered allmulticast mode [ 1756.972612][T19124] bridge_slave_1: entered promiscuous mode [ 1757.071982][T19254] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12314'. [ 1757.231423][T19258] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12314'. [ 1757.316941][ T5633] Bluetooth: hci4: command tx timeout [ 1757.347344][T19274] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12321'. [ 1757.427669][T19274] team0 (unregistering): Port device team_slave_0 removed [ 1757.477438][T19274] team0 (unregistering): Port device team_slave_1 removed [ 1757.594318][T19124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1757.662711][T19124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1757.713923][T19124] team0: Port device team_slave_0 added [ 1757.717056][T19124] team0: Port device team_slave_1 added [ 1757.769985][T19124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1757.770006][T19124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1757.770037][T19124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1757.772142][T19124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1757.772159][T19124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1757.772199][T19124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1757.942264][T19124] hsr_slave_0: entered promiscuous mode [ 1757.943420][T19124] hsr_slave_1: entered promiscuous mode [ 1757.944203][T19124] debugfs: 'hsr0' already exists in 'hsr' [ 1757.944225][T19124] Cannot create hsr debugfs directory [ 1758.125133][T19281] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1758.411806][T19283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12324'. [ 1758.412666][T19284] batman_adv: batadv0: Removing interface: macvtap1 [ 1758.710362][T19124] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1758.710405][T19124] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1758.759105][T19294] IPVS: set_ctl: invalid protocol: 137 10.1.1.0:20004 [ 1758.759470][T19294] netlink: 80 bytes leftover after parsing attributes in process `syz.2.12325'. [ 1759.224365][T19124] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1759.224434][T19124] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1759.387556][T19124] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1759.387607][T19124] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1759.400756][ T5633] Bluetooth: hci4: command tx timeout [ 1759.758698][T19124] netdevsim netdevsim0  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1759.758741][T19124] netdevsim netdevsim0  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1760.019966][T19337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12339'. [ 1760.237892][T19344] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12341'. [ 1760.359730][T19352] bond5: entered promiscuous mode [ 1760.359947][T19352] bond5: entered allmulticast mode [ 1760.907262][T19124] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1760.973387][T19124] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1760.974734][T19124] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1761.026129][T19124] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1761.033082][T19124] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1761.071135][T19124] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1761.072162][T19124] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1761.082530][T19362] openvswitch: netlink: Unexpected mask (mask=100000090, allowed=100010058) [ 1761.142438][T19124] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1761.605583][T19383] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1761.811762][T19388] ip_tables: iptables: counters copy to user failed while replacing table [ 1762.116703][T19400] netlink: 'syz.4.12355': attribute type 2 has an invalid length. [ 1762.600891][T19124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1762.865858][T19124] 8021q: adding VLAN 0 to HW filter on device team0 [ 1762.904699][T16889] bridge0: port 1(bridge_slave_0) entered blocking state [ 1762.904816][T16889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1762.950277][T16889] bridge0: port 2(bridge_slave_1) entered blocking state [ 1762.950398][T16889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1763.010012][T19411] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 1763.142394][T19415] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1763.207535][T19418] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12361'. [ 1763.668433][T19428] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12364'. [ 1763.668464][T19428] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12364'. [ 1763.668501][T19428] netlink: 'syz.6.12364': attribute type 3 has an invalid length. [ 1764.074642][T19124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1764.172163][T19124] veth0_vlan: entered promiscuous mode [ 1764.180801][T19124] veth1_vlan: entered promiscuous mode [ 1764.255286][T19124] veth0_macvtap: entered promiscuous mode [ 1764.262017][T19124] veth1_macvtap: entered promiscuous mode [ 1764.321460][T19124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1764.331243][T19124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1764.375505][ T6130] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1764.375560][ T6130] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1764.375601][ T6130] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1764.375641][ T6130] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1764.798923][T19388] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1765.138745][T16884] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1765.138772][T16884] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1765.265752][T17280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1765.265777][T17280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1765.583831][T19451] xt_hl: Unknown Hop Limit match mode: 206 [ 1765.584012][T19451] xt_hl: Unknown Hop Limit match mode: 206 [ 1765.584151][T19451] xt_hl: Unknown Hop Limit match mode: 206 [ 1765.584289][T19451] xt_hl: Unknown Hop Limit match mode: 206 [ 1765.584426][T19451] xt_hl: Unknown Hop Limit match mode: 206 [ 1765.584570][T19451] xt_hl: Unknown Hop Limit match mode: 206 [ 1765.584714][T19451] xt_hl: Unknown Hop Limit match mode: 206 [ 1765.584851][T19451] xt_hl: Unknown Hop Limit match mode: 206 [ 1765.584986][T19451] xt_hl: Unknown Hop Limit match mode: 206 [ 1765.585122][T19451] xt_hl: Unknown Hop Limit match mode: 206 [ 1766.279598][T19466] netlink: 'syz.5.12369': attribute type 1 has an invalid length. [ 1766.570859][T19466] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12369'. [ 1766.671265][T19466] bond2: (slave bridge1): making interface the new active one [ 1766.671760][T19466] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 1766.672002][T19475] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12371'. [ 1766.672349][T19481] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12371'. [ 1766.672485][T19480] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1766.776528][T19475] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1766.921260][T19484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12375'. [ 1766.921588][T19484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12375'. [ 1766.921880][T19484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12375'. [ 1766.922170][T19484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12375'. [ 1767.365165][T19492] netlink: 'syz.0.12378': attribute type 21 has an invalid length. [ 1767.371239][T19492] netlink: 'syz.0.12378': attribute type 5 has an invalid length. [ 1767.371316][T19492] netlink: 'syz.0.12378': attribute type 6 has an invalid length. [ 1767.787571][T19498] macvlan0: entered promiscuous mode [ 1768.858032][T19539] __nla_validate_parse: 32 callbacks suppressed [ 1768.858056][T19539] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12391'. [ 1768.995667][T19538] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12392'. [ 1769.076082][T19542] netlink: 56 bytes leftover after parsing attributes in process `syz.5.12392'. [ 1769.304588][T19530] ovs-s: entered promiscuous mode [ 1769.310741][T19535] netlink: 'syz.6.12391': attribute type 3 has an invalid length. [ 1769.974941][T19567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12400'. [ 1770.343978][ T5633] block nbd3: Receive control failed (result -32) [ 1770.344967][ T5616] block nbd3: Receive control failed (result -32) [ 1770.755419][T19585] Bluetooth: hci0: unsupported parameter 5135 [ 1770.755447][T19585] Bluetooth: hci0: unsupported parameter 8192 [ 1770.755490][T19585] Bluetooth: hci0: unsupported parameter 5135 [ 1770.755506][T19585] Bluetooth: hci0: unsupported parameter 8192 [ 1771.155405][T19604] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20003 [ 1771.599407][T19618] netlink: 32 bytes leftover after parsing attributes in process `syz.6.12413'. [ 1772.585998][T19637] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12419'. [ 1772.630796][T19637] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12419'. [ 1772.654416][T17276] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1772.666175][ T6132] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1772.668336][ T6132] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1772.668380][ T6132] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1772.761927][T19641] netlink: 196 bytes leftover after parsing attributes in process `syz.5.12422'. [ 1773.913193][T19673] netlink: 120 bytes leftover after parsing attributes in process `syz.4.12430'. [ 1773.913257][T19673] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12430'. [ 1773.953824][T19671] netlink: 120 bytes leftover after parsing attributes in process `syz.4.12430'. [ 1773.953891][T19671] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12430'. [ 1774.127438][T19686] netlink: 'syz.5.12433': attribute type 2 has an invalid length. [ 1774.973895][T19707] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12440'. [ 1775.250891][T19706] syz_tun (unregistering): left allmulticast mode [ 1775.530407][T19721] tc_dump_action: action bad kind [ 1775.635635][T19732] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12444'. [ 1775.691717][T19733] ip6gre1: entered allmulticast mode [ 1775.739930][T17280] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1775.865949][T19736] netlink: 52 bytes leftover after parsing attributes in process `syz.6.12445'. [ 1776.504041][T19750] netlink: 88 bytes leftover after parsing attributes in process `syz.0.12451'. [ 1776.510190][T19752] netlink: 88 bytes leftover after parsing attributes in process `syz.0.12451'. [ 1776.740493][T19757] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12450'. [ 1776.950006][ T5616] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1776.952983][ T5616] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1776.983958][ T5616] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1776.993832][ T5616] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1777.008599][ T5616] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1777.336648][T19773] netlink: 'syz.6.12454': attribute type 1 has an invalid length. [ 1778.708587][T19801] ip6gre2: entered promiscuous mode [ 1779.075883][ T5633] Bluetooth: hci5: command tx timeout [ 1779.475406][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1779.600338][T19825] __nla_validate_parse: 2 callbacks suppressed [ 1779.600361][T19825] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12466'. [ 1779.600390][T19825] netlink: 'syz.6.12466': attribute type 9 has an invalid length. [ 1779.600406][T19825] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12466'. [ 1779.702752][T19825] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12466'. [ 1779.702797][T19825] netlink: 'syz.6.12466': attribute type 9 has an invalid length. [ 1779.702812][T19825] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12466'. [ 1779.703804][T19829] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12466'. [ 1779.703830][T19829] netlink: 'syz.6.12466': attribute type 9 has an invalid length. [ 1779.703845][T19829] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12466'. [ 1779.706036][ T6132] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1779.791105][T19829] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12466'. [ 1779.791146][T19829] netlink: 'syz.6.12466': attribute type 9 has an invalid length. [ 1779.791162][T19829] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12466'. [ 1779.844509][T16905] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1779.845248][T16905] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1779.867471][T17276] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1780.163812][T19836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12469'. [ 1780.500522][T19836] team0: Port device team_slave_0 removed [ 1781.106438][T19856] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12475'. [ 1781.106505][T19856] netlink: 'syz.5.12475': attribute type 1 has an invalid length. [ 1781.156019][ T5633] Bluetooth: hci5: command tx timeout [ 1781.285249][T19861] atomic_op ffff88807bece1e0 conn xmit_atomic 0000000000000000 [ 1781.557761][T19866] bridge2: entered promiscuous mode [ 1781.557807][T19866] bridge2: entered allmulticast mode [ 1781.559731][T19861] tipc: Started in network mode [ 1781.559794][T19861] tipc: Node identity bec4952fda6, cluster identity 4711 [ 1781.560005][T19861] tipc: Enabled bearer , priority 0 [ 1782.215713][T19861] syzkaller0: entered promiscuous mode [ 1782.215752][T19861] syzkaller0: entered allmulticast mode [ 1782.254027][T19885] openvswitch: netlink: Multiple metadata blocks provided [ 1782.286117][T19861] tipc: Resetting bearer [ 1782.330763][T19860] tipc: Resetting bearer [ 1783.235555][ T5633] Bluetooth: hci5: command tx timeout [ 1785.322541][ T5633] Bluetooth: hci5: command tx timeout [ 1787.315413][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1789.160669][T19860] tipc: Disabling bearer [ 1789.226567][T19762] bridge0: port 1(bridge_slave_0) entered blocking state [ 1789.226766][T19762] bridge0: port 1(bridge_slave_0) entered disabled state [ 1789.227255][T19762] bridge_slave_0: entered allmulticast mode [ 1789.229234][T19762] bridge_slave_0: entered promiscuous mode [ 1789.272884][T19762] bridge0: port 2(bridge_slave_1) entered blocking state [ 1789.272978][T19762] bridge0: port 2(bridge_slave_1) entered disabled state [ 1789.273348][T19762] bridge_slave_1: entered allmulticast mode [ 1789.275007][T19762] bridge_slave_1: entered promiscuous mode [ 1789.536665][T16872] tipc: Node number set to 1688507695 [ 1789.799295][T19762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1789.802734][T19762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1789.905759][T19762] team0: Port device team_slave_0 added [ 1789.909053][T19762] team0: Port device team_slave_1 added [ 1789.995537][T19762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1789.995557][T19762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1789.995587][T19762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1789.997702][T19762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1789.997719][T19762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1789.997749][T19762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1790.246452][T19762] hsr_slave_0: entered promiscuous mode [ 1790.248594][T19762] hsr_slave_1: entered promiscuous mode [ 1790.249369][T19762] debugfs: 'hsr0' already exists in 'hsr' [ 1790.249391][T19762] Cannot create hsr debugfs directory [ 1790.320814][T19918] sctp: [Deprecated]: syz.6.12488 (pid 19918) Use of int in maxseg socket option. [ 1790.320814][T19918] Use struct sctp_assoc_value instead [ 1790.706842][T19935] netdevsim netdevsim5: Direct firmware load for ÿ failed with error -2 [ 1790.706877][T19935] netdevsim netdevsim5: Falling back to sysfs fallback for: ÿ [ 1790.892841][T19940] IPVS: set_ctl: invalid protocol: 98 172.20.20.187:20001 [ 1791.649712][T19762] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1791.649756][T19762] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1791.649788][T19762] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1792.607610][T19974] netlink: 'syz.5.12498': attribute type 1 has an invalid length. [ 1792.607641][T19974] netlink: 'syz.5.12498': attribute type 1 has an invalid length. [ 1793.159838][T19982] __nla_validate_parse: 1 callbacks suppressed [ 1793.159863][T19982] netlink: 56 bytes leftover after parsing attributes in process `syz.6.12500'. [ 1793.190869][T19762] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1793.190915][T19762] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1793.190951][T19762] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1793.910982][T19762] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1793.911024][T19762] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1793.911055][T19762] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1794.004307][T20002] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12506'. [ 1794.185266][T19762] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1794.185308][T19762] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1794.185339][T19762] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1794.685432][T19762] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1794.704501][T19762] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1794.705763][T19762] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1794.736253][T19762] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1794.737240][T19762] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1794.746237][T19762] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1794.751403][T19762] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1794.791451][T19762] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1795.125071][T20025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12512'. [ 1795.125096][T20025] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12512'. [ 1795.126135][T19762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1795.233010][T19762] 8021q: adding VLAN 0 to HW filter on device team0 [ 1795.309190][T16905] bridge0: port 1(bridge_slave_0) entered blocking state [ 1795.309306][T16905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1795.312955][T16905] bridge0: port 2(bridge_slave_1) entered blocking state [ 1795.313076][T16905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1795.533206][T20035] Bluetooth: hci0: unsupported parameter 5135 [ 1795.533233][T20035] Bluetooth: hci0: unsupported parameter 8192 [ 1795.533247][T20035] Bluetooth: hci0: unsupported parameter 5135 [ 1795.533262][T20035] Bluetooth: hci0: unsupported parameter 8192 [ 1795.625498][T20035] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12514'. [ 1795.631982][T20035] netlink: 76 bytes leftover after parsing attributes in process `syz.5.12514'. [ 1795.747317][T19762] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1795.911262][T20042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12516'. [ 1796.087584][T20042] bridge_slave_1 (unregistering): left allmulticast mode [ 1796.087915][T20042] bridge_slave_1 (unregistering): left promiscuous mode [ 1796.088017][T20042] bridge0: port 2(bridge_slave_1) entered disabled state [ 1796.151571][T17276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1796.151595][T17276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1796.870160][T20070] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12520'. [ 1797.369217][T20092] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12525'. [ 1797.925206][T20103] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20002 [ 1798.333301][T19762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1798.767020][T20137] netlink: Unknown NAT attribute (type=2049, max=9) [ 1798.767068][T20137] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1798.856257][T20137] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12531'. [ 1799.164900][T19762] veth0_vlan: entered promiscuous mode [ 1799.212261][T19762] veth1_vlan: entered promiscuous mode [ 1799.466379][T19762] veth0_macvtap: entered promiscuous mode [ 1799.589084][T19762] veth1_macvtap: entered promiscuous mode [ 1799.720875][T19762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1799.822819][T19762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1799.926899][T17276] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1799.926953][T17276] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1799.926993][T17276] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1799.962218][T17284] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1800.389696][T20093] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1800.567786][ T6132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1800.567813][ T6132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1800.888339][T17276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1800.888365][T17276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1801.242640][T20172] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1801.547578][T20172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12537'. [ 1801.786291][T20188] netlink: 80 bytes leftover after parsing attributes in process `syz.6.12541'. [ 1801.859540][T20188] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12541'. [ 1802.129169][T20199] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12543'. [ 1802.176834][T20200] IPVS: length: 167 != 8 [ 1802.603485][T20211] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12546'. [ 1802.989375][T20242] IPv6: NLM_F_CREATE should be specified when creating new route [ 1803.075063][T20242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12553'. [ 1803.261762][T20248] IPVS: set_ctl: invalid protocol: 179 172.20.20.170:20002 [ 1803.315388][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1804.141236][T20276] nbd4: detected capacity change from 0 to 274877906944 [ 1804.269985][ T5633] block nbd4: Receive control failed (result -104) [ 1804.468045][T20275] netlink: 'syz.6.12567': attribute type 5 has an invalid length. [ 1804.850920][T20287] C: entered allmulticast mode [ 1804.872293][T20286] C: left allmulticast mode [ 1804.891551][T20294] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12573'. [ 1805.423541][T20295] tipc: Enabling not permitted [ 1805.423583][T20295] tipc: Enabling of bearer rejected, failed to enable media [ 1805.706700][T20313] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12578'. [ 1805.708794][T20313] netlink: 'syz.0.12578': attribute type 1 has an invalid length. [ 1805.818350][T20313] veth3: entered allmulticast mode [ 1805.842387][T20318] netlink: 20 bytes leftover after parsing attributes in process `syz.6.12579'. [ 1807.117411][T20355] netlink: 40 bytes leftover after parsing attributes in process `syz.5.12586'. [ 1807.738289][ T5616] Bluetooth: hci5: command 0x0405 tx timeout [ 1808.062025][T17280] IPVS: starting estimator thread 0... [ 1808.212150][ T5616] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1808.218964][ T5616] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1808.243408][ T5616] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1808.244542][ T5616] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1808.264456][ T5616] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1808.300352][ T5633] [ 1808.302760][ T5633] ====================================================== [ 1808.309842][ T5633] WARNING: possible circular locking dependency detected [ 1808.316939][ T5633] syzkaller #0 Not tainted [ 1808.321407][ T5633] ------------------------------------------------------ [ 1808.328487][ T5633] kworker/u9:4/5633 is trying to acquire lock: [ 1808.334722][ T5633] ffff88801c2d4a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4c7/0x5a0 [ 1808.345526][ T5633] [ 1808.345526][ T5633] but task is already holding lock: [ 1808.353381][ T5633] ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0 [ 1808.362902][ T5633] [ 1808.362902][ T5633] which lock already depends on the new lock. [ 1808.362902][ T5633] [ 1808.373352][ T5633] [ 1808.373352][ T5633] the existing dependency chain (in reverse order) is: [ 1808.382464][ T5633] [ 1808.382464][ T5633] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 1808.390663][ T5633] down_write+0x96/0x200 [ 1808.395515][ T5633] kernfs_add_one+0x41/0x6f0 [ 1808.400701][ T5633] kernfs_create_dir_ns+0x1a1/0x230 [ 1808.406539][ T5633] internal_create_group+0x440/0x1180 [ 1808.412547][ T5633] cpuhp_invoke_callback+0x434/0x810 [ 1808.418472][ T5633] cpuhp_issue_call+0x3f0/0x750 [ 1808.424295][ T5633] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 1808.430990][ T5633] __cpuhp_setup_state+0x3f/0x60 [ 1808.436549][ T5633] do_one_initcall+0x250/0x870 [ 1808.441955][ T5633] do_initcall_level+0x10a/0x1a0 [ 1808.448153][ T5633] do_initcalls+0x59/0xa0 [ 1808.453089][ T5633] kernel_init_freeable+0x29d/0x3e0 [ 1808.458919][ T5633] kernel_init+0x22/0x1d0 [ 1808.463846][ T5633] ret_from_fork+0x514/0xb70 [ 1808.469057][ T5633] ret_from_fork_asm+0x1a/0x30 [ 1808.474509][ T5633] [ 1808.474509][ T5633] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 1808.482456][ T5633] [ 1808.482456][ T5633] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 1808.490289][ T5633] cpus_read_lock+0x42/0x160 [ 1808.495551][ T5633] static_key_slow_inc+0x12/0x30 [ 1808.501103][ T5633] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 1808.507513][ T5633] nbd_genl_foreach_sock+0x265/0x450 [ 1808.513432][ T5633] nbd_genl_reconfigure+0xbbb/0x1040 [ 1808.519807][ T5633] genl_family_rcv_msg_doit+0x233/0x340 [ 1808.526436][ T5633] genl_rcv_msg+0x614/0x7a0 [ 1808.531582][ T5633] netlink_rcv_skb+0x226/0x4a0 [ 1808.537067][ T5633] genl_rcv+0x28/0x40 [ 1808.541706][ T5633] netlink_unicast+0x7bd/0x940 [ 1808.547172][ T5633] netlink_sendmsg+0x813/0xb40 [ 1808.552549][ T5633] sock_sendmsg_nosec+0x13a/0x180 [ 1808.558352][ T5633] ____sys_sendmsg+0x54e/0x850 [ 1808.563815][ T5633] ___sys_sendmsg+0x2a5/0x360 [ 1808.569127][ T5633] __x64_sys_sendmsg+0x1b1/0x290 [ 1808.574725][ T5633] do_syscall_64+0x166/0x520 [ 1808.579952][ T5633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1808.586458][ T5633] [ 1808.586458][ T5633] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1808.594213][ T5633] __mutex_lock+0x19d/0x1550 [ 1808.599457][ T5633] nbd_queue_rq+0x373/0xff0 [ 1808.604566][ T5633] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1808.610783][ T5633] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1808.617768][ T5633] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1808.624368][ T5633] blk_mq_run_work_fn+0x16c/0x300 [ 1808.630050][ T5633] process_scheduled_works+0xc3d/0x1630 [ 1808.636329][ T5633] worker_thread+0xa47/0xfb0 [ 1808.641537][ T5633] kthread+0x38b/0x480 [ 1808.646635][ T5633] ret_from_fork+0x514/0xb70 [ 1808.651820][ T5633] ret_from_fork_asm+0x1a/0x30 [ 1808.657229][ T5633] [ 1808.657229][ T5633] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1808.664536][ T5633] __mutex_lock+0x19d/0x1550 [ 1808.669736][ T5633] nbd_queue_rq+0xc1/0xff0 [ 1808.674760][ T5633] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1808.680924][ T5633] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1808.687879][ T5633] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1808.694519][ T5633] blk_mq_run_work_fn+0x16c/0x300 [ 1808.700303][ T5633] process_scheduled_works+0xc3d/0x1630 [ 1808.706498][ T5633] worker_thread+0xa47/0xfb0 [ 1808.711686][ T5633] kthread+0x38b/0x480 [ 1808.716347][ T5633] ret_from_fork+0x514/0xb70 [ 1808.721516][ T5633] ret_from_fork_asm+0x1a/0x30 [ 1808.726995][ T5633] [ 1808.726995][ T5633] -> #4 (set->srcu){.+.+}-{0:0}: [ 1808.734196][ T5633] __synchronize_srcu+0xc9/0x2f0 [ 1808.739766][ T5633] elevator_switch+0x1e8/0x7b0 [ 1808.745205][ T5633] elevator_change+0x2fa/0x480 [ 1808.750590][ T5633] elevator_set_default+0x375/0x440 [ 1808.756392][ T5633] blk_register_queue+0x3f3/0x4e0 [ 1808.762114][ T5633] __add_disk+0x6b8/0xdb0 [ 1808.767074][ T5633] add_disk_fwnode+0x100/0x3a0 [ 1808.772449][ T5633] nbd_dev_add+0x733/0xb60 [ 1808.777465][ T5633] nbd_init+0x168/0x1f0 [ 1808.782314][ T5633] do_one_initcall+0x250/0x870 [ 1808.787686][ T5633] do_initcall_level+0x10a/0x1a0 [ 1808.793250][ T5633] do_initcalls+0x59/0xa0 [ 1808.798162][ T5633] kernel_init_freeable+0x29d/0x3e0 [ 1808.803968][ T5633] kernel_init+0x22/0x1d0 [ 1808.808901][ T5633] ret_from_fork+0x514/0xb70 [ 1808.814054][ T5633] ret_from_fork_asm+0x1a/0x30 [ 1808.819423][ T5633] [ 1808.819423][ T5633] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1808.827325][ T5633] __mutex_lock+0x19d/0x1550 [ 1808.832528][ T5633] elevator_change+0x1af/0x480 [ 1808.837889][ T5633] elevator_set_none+0xb5/0x140 [ 1808.843449][ T5633] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1808.849883][ T5633] nbd_start_device+0x189/0xb30 [ 1808.855311][ T5633] nbd_genl_connect+0x167d/0x1cd0 [ 1808.860953][ T5633] genl_family_rcv_msg_doit+0x233/0x340 [ 1808.867128][ T5633] genl_rcv_msg+0x614/0x7a0 [ 1808.872236][ T5633] netlink_rcv_skb+0x226/0x4a0 [ 1808.877576][ T5633] genl_rcv+0x28/0x40 [ 1808.882171][ T5633] netlink_unicast+0x7bd/0x940 [ 1808.887554][ T5633] netlink_sendmsg+0x813/0xb40 [ 1808.892911][ T5633] sock_sendmsg_nosec+0x13a/0x180 [ 1808.898526][ T5633] ____sys_sendmsg+0x54e/0x850 [ 1808.903914][ T5633] ___sys_sendmsg+0x2a5/0x360 [ 1808.909191][ T5633] __x64_sys_sendmsg+0x1b1/0x290 [ 1808.914746][ T5633] do_syscall_64+0x166/0x520 [ 1808.919938][ T5633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1808.926416][ T5633] [ 1808.926416][ T5633] -> #2 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 1808.935141][ T5633] blk_alloc_queue+0x544/0x690 [ 1808.940502][ T5633] __blk_mq_alloc_disk+0x194/0x390 [ 1808.946227][ T5633] nbd_dev_add+0x494/0xb60 [ 1808.951258][ T5633] nbd_init+0x168/0x1f0 [ 1808.956080][ T5633] do_one_initcall+0x250/0x870 [ 1808.961656][ T5633] do_initcall_level+0x10a/0x1a0 [ 1808.967198][ T5633] do_initcalls+0x59/0xa0 [ 1808.972129][ T5633] kernel_init_freeable+0x29d/0x3e0 [ 1808.977923][ T5633] kernel_init+0x22/0x1d0 [ 1808.982849][ T5633] ret_from_fork+0x514/0xb70 [ 1808.988056][ T5633] ret_from_fork_asm+0x1a/0x30 [ 1808.993449][ T5633] [ 1808.993449][ T5633] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1809.000759][ T5633] fs_reclaim_acquire+0x71/0x100 [ 1809.006315][ T5633] kmem_cache_alloc_noprof+0x5f/0x600 [ 1809.012310][ T5633] __kernfs_iattrs+0xdd/0x380 [ 1809.017585][ T5633] kernfs_iop_setattr+0xe6/0x3f0 [ 1809.023110][ T5633] notify_change+0xbba/0xea0 [ 1809.028314][ T5633] do_truncate+0x1c2/0x250 [ 1809.033292][ T5633] path_openat+0x15b5/0x1d60 [ 1809.038458][ T5633] do_file_open+0x23e/0x4a0 [ 1809.043584][ T5633] do_sys_openat2+0x115/0x200 [ 1809.048858][ T5633] __x64_sys_openat+0x138/0x170 [ 1809.054329][ T5633] do_syscall_64+0x166/0x520 [ 1809.059518][ T5633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1809.066026][ T5633] [ 1809.066026][ T5633] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 1809.074624][ T5633] __lock_acquire+0x164c/0x2de0 [ 1809.080101][ T5633] lock_acquire+0x115/0x350 [ 1809.085192][ T5633] down_write+0x96/0x200 [ 1809.090056][ T5633] kernfs_link_sibling+0x4c7/0x5a0 [ 1809.095751][ T5633] kernfs_add_one+0x2db/0x6f0 [ 1809.101037][ T5633] kernfs_create_dir_ns+0x1a1/0x230 [ 1809.106837][ T5633] sysfs_create_dir_ns+0x12f/0x2a0 [ 1809.112602][ T5633] kobject_add_internal+0x622/0xcd0 [ 1809.118401][ T5633] kobject_add+0x163/0x240 [ 1809.123415][ T5633] device_add+0x3fa/0xb80 [ 1809.128328][ T5633] hci_conn_add_sysfs+0xd5/0x210 [ 1809.133885][ T5633] hci_conn_complete_evt+0x8a8/0x1350 [ 1809.139891][ T5633] hci_event_packet+0x6cd/0xf10 [ 1809.145390][ T5633] hci_rx_work+0x3ee/0x1020 [ 1809.150551][ T5633] process_scheduled_works+0xc3d/0x1630 [ 1809.156713][ T5633] worker_thread+0xa47/0xfb0 [ 1809.161999][ T5633] kthread+0x38b/0x480 [ 1809.166656][ T5633] ret_from_fork+0x514/0xb70 [ 1809.171831][ T5633] ret_from_fork_asm+0x1a/0x30 [ 1809.177301][ T5633] [ 1809.177301][ T5633] other info that might help us debug this: [ 1809.177301][ T5633] [ 1809.187613][ T5633] Chain exists of: [ 1809.187613][ T5633] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 1809.187613][ T5633] [ 1809.202172][ T5633] Possible unsafe locking scenario: [ 1809.202172][ T5633] [ 1809.209714][ T5633] CPU0 CPU1 [ 1809.215325][ T5633] ---- ---- [ 1809.220758][ T5633] lock(&root->kernfs_rwsem); [ 1809.225564][ T5633] lock(cpuhp_state_mutex); [ 1809.232730][ T5633] lock(&root->kernfs_rwsem); [ 1809.240080][ T5633] lock(&root->kernfs_iattr_rwsem); [ 1809.245406][ T5633] [ 1809.245406][ T5633] *** DEADLOCK *** [ 1809.245406][ T5633] [ 1809.253609][ T5633] locks held by kworker/u9:4/5633: 4, last CPU#0: [ 1809.260295][ T5633] #0: ffff888057a91140 ((wq_completion)hci1#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1809.271494][ T5633] #1: ffffc90004477c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1809.283687][ T5633] #2: ffff8880345d40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_conn_complete_evt+0xba/0x1350 [ 1809.293876][ T5633] #3: ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0 [ 1809.303953][ T5633] [ 1809.303953][ T5633] stack backtrace: [ 1809.309922][ T5633] CPU: 0 UID: 0 PID: 5633 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 1809.319454][ T5633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1809.329588][ T5633] Workqueue: hci1 hci_rx_work [ 1809.334346][ T5633] Call Trace: [ 1809.337664][ T5633] [ 1809.340637][ T5633] dump_stack_lvl+0xe8/0x150 [ 1809.345310][ T5633] print_circular_bug+0x2e2/0x300 [ 1809.350451][ T5633] check_noncircular+0x12f/0x150 [ 1809.355654][ T5633] __lock_acquire+0x164c/0x2de0 [ 1809.360563][ T5633] ? __lock_acquire+0x747/0x2de0 [ 1809.365596][ T5633] lock_acquire+0x115/0x350 [ 1809.370180][ T5633] ? kernfs_link_sibling+0x4c7/0x5a0 [ 1809.375539][ T5633] down_write+0x96/0x200 [ 1809.379885][ T5633] ? kernfs_link_sibling+0x4c7/0x5a0 [ 1809.385236][ T5633] ? __pfx_down_write+0x10/0x10 [ 1809.390119][ T5633] ? kernfs_root+0x1c/0x230 [ 1809.394656][ T5633] ? kernfs_root+0x1c/0x230 [ 1809.399200][ T5633] ? kernfs_root+0x1c/0x230 [ 1809.403730][ T5633] ? kernfs_root+0x1ea/0x230 [ 1809.408368][ T5633] kernfs_link_sibling+0x4c7/0x5a0 [ 1809.413538][ T5633] kernfs_add_one+0x2db/0x6f0 [ 1809.418368][ T5633] kernfs_create_dir_ns+0x1a1/0x230 [ 1809.423606][ T5633] sysfs_create_dir_ns+0x12f/0x2a0 [ 1809.428762][ T5633] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1809.434451][ T5633] ? do_raw_spin_unlock+0xf5/0x200 [ 1809.439603][ T5633] kobject_add_internal+0x622/0xcd0 [ 1809.444854][ T5633] kobject_add+0x163/0x240 [ 1809.449307][ T5633] ? __pfx_kobject_add+0x10/0x10 [ 1809.454277][ T5633] ? get_device_parent+0x366/0x3a0 [ 1809.459418][ T5633] device_add+0x3fa/0xb80 [ 1809.463772][ T5633] hci_conn_add_sysfs+0xd5/0x210 [ 1809.468739][ T5633] hci_conn_complete_evt+0x8a8/0x1350 [ 1809.474154][ T5633] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1809.480172][ T5633] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 1809.486016][ T5633] ? skb_pull_data+0xf0/0x200 [ 1809.490800][ T5633] hci_event_packet+0x6cd/0xf10 [ 1809.495680][ T5633] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 1809.501521][ T5633] ? __pfx_hci_event_packet+0x10/0x10 [ 1809.506931][ T5633] ? audit_filter_rules+0x36b0/0x5d10 [ 1809.512343][ T5633] ? hci_send_to_monitor+0xe2/0x590 [ 1809.517634][ T5633] hci_rx_work+0x3ee/0x1020 [ 1809.522163][ T5633] ? process_scheduled_works+0x97a/0x1630 [ 1809.528003][ T5633] process_scheduled_works+0xc3d/0x1630 [ 1809.533613][ T5633] ? __pfx_process_scheduled_works+0x10/0x10 [ 1809.539629][ T5633] ? assign_work+0x3cf/0x5d0 [ 1809.544261][ T5633] worker_thread+0xa47/0xfb0 [ 1809.548895][ T5633] kthread+0x38b/0x480 [ 1809.553005][ T5633] ? __pfx_worker_thread+0x10/0x10 [ 1809.558152][ T5633] ? __pfx_kthread+0x10/0x10 [ 1809.562762][ T5633] ret_from_fork+0x514/0xb70 [ 1809.567377][ T5633] ? __pfx_ret_from_fork+0x10/0x10 [ 1809.572509][ T5633] ? __switch_to+0xc89/0x1420 [ 1809.577249][ T5633] ? __pfx_kthread+0x10/0x10 [ 1809.581870][ T5633] ret_from_fork_asm+0x1a/0x30 [ 1809.586695][ T5633] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1809.819664][T20360] IPVS: Scheduler module ip_vs_mh not found [ 1809.819744][T20364] IPVS: using max 25 ests per chain, 60000 per kthread [ 1809.994297][T20360] netlink: 232 bytes leftover after parsing attributes in process `syz.6.12590'. [ 1810.526756][ T8660] bridge0: port 3(syz_tun) entered disabled state [ 1810.556910][ T8660] syz_tun (unregistering): left allmulticast mode [ 1810.556938][ T8660] syz_tun (unregistering): left promiscuous mode [ 1810.557006][ T8660] bridge0: port 3(syz_tun) entered disabled state [ 1811.272060][T17276] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1811.540116][T17276] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1811.746005][T17276] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1811.986852][T17276] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1812.262375][T17276] bridge_slave_1: left allmulticast mode [ 1812.262403][T17276] bridge_slave_1: left promiscuous mode [ 1812.262557][T17276] bridge0: port 2(bridge_slave_1) entered disabled state [ 1812.264444][T17276] bridge_slave_0: left allmulticast mode [ 1812.264466][T17276] bridge_slave_0: left promiscuous mode [ 1812.264613][T17276] bridge0: port 1(bridge_slave_0) entered disabled state [ 1812.829630][T17276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1812.831750][T17276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1812.833247][T17276] bond0 (unregistering): Released all slaves [ 1812.836470][T17276] bond1 (unregistering): Released all slaves [ 1812.843113][ T5279] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1813.003755][T17276] ovs-s: left promiscuous mode [ 1813.393259][T17276] hsr_slave_0: left promiscuous mode [ 1813.394286][T17276] hsr_slave_1: left promiscuous mode [ 1813.413939][T17276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1813.413979][T17276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1813.431367][T17276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1813.431409][T17276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1813.479323][T17276] veth1_macvtap: left promiscuous mode [ 1813.479387][T17276] veth0_macvtap: left promiscuous mode [ 1813.479539][T17276] veth1_vlan: left promiscuous mode [ 1813.479675][T17276] veth0_vlan: left promiscuous mode [ 1814.010106][T17276] team0 (unregistering): Port device team_slave_1 removed [ 1814.048823][T17276] team0 (unregistering): Port device team_slave_0 removed [ 1814.108045][ T5279] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1814.692597][ T5279] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1815.193538][ T5279] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1815.351756][T16905] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1815.461011][T16905] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1815.546763][T16905] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1815.650461][T16905] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1815.826906][T16905] bridge_slave_1: left allmulticast mode [ 1815.826935][T16905] bridge_slave_1: left promiscuous mode [ 1815.827123][T16905] bridge0: port 2(bridge_slave_1) entered disabled state [ 1815.828870][T16905] bridge_slave_0: left allmulticast mode [ 1815.828894][T16905] bridge_slave_0: left promiscuous mode [ 1815.829076][T16905] bridge0: port 1(bridge_slave_0) entered disabled state [ 1815.958175][T16905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1815.960201][T16905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1815.961598][T16905] bond0 (unregistering): Released all slaves [ 1816.503230][T16905] hsr_slave_0: left promiscuous mode [ 1816.504256][T16905] hsr_slave_1: left promiscuous mode [ 1816.518544][T16905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1816.518567][T16905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1816.519270][T16905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1816.519289][T16905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1816.523058][T16905] veth1_macvtap: left promiscuous mode [ 1816.523091][T16905] veth0_macvtap: left promiscuous mode [ 1816.523162][T16905] veth1_vlan: left promiscuous mode [ 1816.523210][T16905] veth0_vlan: left promiscuous mode [ 1816.799976][T16905] team0 (unregistering): Port device team_slave_1 removed [ 1816.844569][T16905] team0 (unregistering): Port device team_slave_0 removed [ 1816.990396][ T5279] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1818.033387][ T5279] 8021q: adding VLAN 0 to HW filter on device eth11