last executing test programs: 15.289341281s ago: executing program 1 (id=12290): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0x2c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0x7, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x2c}}, 0x24040084) unshare(0x22020600) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r6, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c656400000000000000000000000000050003"], 0x5c}, 0x1, 0xf000, 0x0, 0x4044040}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0x1, &(0x7f0000000000)=ANY=[@ANYRESHEX=r6], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x9, '\x00', 0x0, @sk_msg}, 0x94) 15.150603757s ago: executing program 1 (id=12293): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069001800000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xa4, &(0x7f000000cf3d)=""/164, 0x41000, 0x25, '\x00', 0x0, @sk_reuseport}, 0x94) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000500), &(0x7f0000000540)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xb8}, 0x2160) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c001680"], 0x30}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000940)=@delqdisc={0x24, 0x25, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x1}, {0x0, 0xfff1}, {0xfff4, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20001005}, 0x20040080) bind$xdp(r4, &(0x7f00000000c0)={0x2c, 0x3, r7, 0x10, r3}, 0x10) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={r7, @dev={0xac, 0x14, 0x14, 0x39}, @loopback}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r11 = accept4(r10, 0x0, 0x0, 0x0) sendmmsg$unix(r11, &(0x7f00000033c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="91e5b8fec8115a", 0x7}, {&(0x7f0000000340)='\f', 0x1}], 0x2}}], 0x1, 0x4050) r12 = socket$phonet_pipe(0x23, 0x5, 0x2) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r13, &(0x7f0000000000), 0xffffff6a) sendfile(r12, r13, 0x0, 0xffffffff000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x9, &(0x7f0000000100)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}}], &(0x7f0000000180)='GPL\x00', 0xe47, 0x0, &(0x7f00000001c0), 0x41100, 0x1, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f0000000240)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x10, 0x9, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r13, 0xffffffffffffffff], 0x0, 0x10, 0x100}, 0x94) 14.379948244s ago: executing program 1 (id=12304): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r0, &(0x7f0000002b40)=[{{&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}, 0x1}}, 0x80, 0x0}}], 0x1, 0x8000) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000300)=0x10000015, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20008010) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0xffffffff, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601020000000000000000000000000900020073797a32000000000500010007000000050005000200000014000300686173683a69912c706f72742c69700014000780080006000000000008001340ffffffe40500040003000000"], 0x60}}, 0x20000000) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0x2803, 0xfffff818, 0x2, 0x2, 0xfffffff8, 0x5}}, {0xe, 0x2, [0x8, 0x6, 0x481, 0xfd, 0x7]}}]}]}, 0x60}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000800000000a5c000000060a0b040000000000000000"], 0x84}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100000000090002"], 0x38}, 0x1, 0x0, 0x0, 0x200008d0}, 0x44054) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x6) 13.057250349s ago: executing program 1 (id=12321): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x194}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000880), &(0x7f0000000500)=r1, 0xa2}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x2b, 0x0, &(0x7f0000002900)) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 12.947225201s ago: executing program 1 (id=12325): r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711}, 0x10, 0x80000) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711, @local}, 0x10) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x210, 0x0, 0x4, 0xffff, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000100)={r2, 0x4}, &(0x7f0000000140)=0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r5, 0x20, 0x70bd29, 0x0, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffd0c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x82}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x8}, @FOU_ATTR_PEER_V6={0x14, 0x9, @remote}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000440)={0x7, 0x8, 0x1, 0x2, 0x0, 0x0, 0xfe, 0x3, r2}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f00000004c0)={r8, 0x17, "3bdce95ecbe156ff35fa5a18dda25fc401a7acac43475a"}, &(0x7f0000000500)=0x1f) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x2a, &(0x7f0000000540)={0x8, {{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x8}}}, 0x88) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x54, r5, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x400}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20000040) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r11, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc4}, 0x49000) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@o_path={&(0x7f0000000880)='./file0\x00', 0x0, 0x4010, r0}, 0x18) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r12, 0x89f8, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000900)={'ip_vti0\x00', 0x0, 0x80, 0x7800, 0x6, 0xfffffffd, {{0x14, 0x4, 0x3, 0x3e, 0x50, 0x68, 0x0, 0xa5, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @loopback, {[@ssrr={0x89, 0x27, 0xc4, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x24}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x27}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x14, 0xe5, 0x3, 0x8, [{@remote, 0x6}, {@rand_addr=0x64010100, 0x9}]}]}}}}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, r13, 0x7fffffff, '\x00', r14, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) listen(r1, 0x401) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000a40)={r3, 0x6}, &(0x7f0000000a80)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={r15, 0xfff, 0x10}, 0xc) getsockopt$inet6_mreq(r12, 0x29, 0x1c, &(0x7f0000000b40)={@initdev, 0x0}, &(0x7f0000000b80)=0x14) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000bc0)={0x0, @rand_addr, @multicast1}, &(0x7f0000000c00)=0xc) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f0000000ec0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000c40)={0x228, 0x0, 0x800, 0x70bd29, 0x6, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 12.86689898s ago: executing program 1 (id=12326): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001380)={0x13cc, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0x4, 0x145}, @nested={0x13b4, 0x1, 0x0, 0x1, [@generic="1064598c3382549b51d045c198b8dd44d1d2e0638a3e330986e2a8cbce4d18bb3fe217a3ac833cef2910aeb269", @generic="2e029df8de122d4e72bdd40b4ee9f0f753b3645c6d15fefe4ee276", @typed={0x41, 0xf5, 0x0, 0x0, @binary="26b9a4c058667782000bb6861b67cf785e07f8c7e998c4b2cfc54c7ee94cd599253f951e2266b268ef916c9013e2ba277e161441e5a53fa95470f4ac0b"}, @nested={0x4, 0xe8}, @nested={0x131d, 0x9f, 0x0, 0x1, [@nested={0x8, 0x2f, 0x0, 0x1, [@nested={0x4, 0x15d}]}, @generic="c2ddcd436c46840ffd91109eace01481647c839584490a447e6b08cd79893d2121fbcb965dad9e2dfed8c5d5d60b4cb48ac25c0b514b7e1444cf8eb4638b0cc963534bf3e1c8ea089fea4e834a529e7919ec05082cf59b4750fa1118dfdd5fc6c7617c5140d0791588a5a39358c9b76d19ae31d6636e629cdfba49960af0aab08f02d1a9b4ea5b19c67e386800ec019399c1187dfdca3a897194be19559a47836da931da4226a49554d536a761e887b8a18077ff923c84dfe8e034e85ded43b198688066bceb755eced189756dc79964b099f531e5", @nested={0x1239, 0xb5, 0x0, 0x1, [@generic="60ab77fe1c36ea9f1a3f4fcce07ff3ec190e50d01ac347a2b74fca369a806e7b2d620137931dfd1395a30cc4ff737f4188a36070ae2219f0a085d8faf17198ab82063610a0b097b7d8c1464af48a233c9794f28b55b5c52f9d35adfb2669ce6283073dd3f543d6bd3331a7ed82ede6f5c22384e2ef80e76cb5028eac350a648fce6014cabce7d17a753061685dfaf1ce9c120cebb7d7301a5842ff4d8c2261b27e69", @generic="bf0512d09252fa6d6d2139f5b0872b9976ebb10731f5501612d27235e62a3c6c92049aca97f01ccc9e713a320b3d0eec33fc90968a4bceeeec2bb39b18635f5b95d48bc0ea61cfb353738c88171996967f148889bb90c716d280f7701f0183d3f1de9eee49ec23f38015b06dd2f4d0049a7ca6af53ed4bb2013941788239d7e1397736aeac97ff85bccb27ab2800ac9a07570e", @typed={0xffe, 0x98, 0x0, 0x0, @binary="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"}, @nested={0x100, 0x7e, 0x0, 0x1, [@nested={0x4, 0x137}, @nested={0x8, 0x5c, 0x0, 0x1, [@nested={0x4, 0x22}]}, @nested={0xf0, 0x1e, 0x0, 0x1, [@generic="8af1ca1b890c4ae89e0c04b3823948dad7a9a27a224efa84af75a692eb3b971b9bb9aa37e0c519d351bc14b252e0f0d4182e18a16a771c6107ae306555f30dcfa80ae86f2daea2389cabef6a77e0c683be5d2b5c3dda09bb6eaca81453e22cb78d16fb5907597e9c1bfa2ddb92c0c4df837f12a13c816ba796b6c3854637a1c62ef045c4afaa18fdc82b09fd1cdde2d542b7b3e26ff9f3d89c79eac54b3b83c5770715668934849525fa5e3b5626216aa4222ba6ad923b06d9f660f18404d6c586ae747638c511c83ecf6baf2b0bb9f1", @typed={0x8, 0x6b, 0x0, 0x0, @uid}, @typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@loopback}]}]}]}]}]}]}, 0x13cc}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 7.076919978s ago: executing program 4 (id=12356): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000240)=@raw=[@generic={0x8, 0x0, 0x5, 0x400, 0x2ac}, @alu={0x4, 0x0, 0x9, 0x5, 0x8, 0x4, 0x10}, @ldst={0x1, 0x0, 0x3, 0x6, 0x5, 0xffffffffffffffe0}], &(0x7f0000000280)='syzkaller\x00', 0x7a2, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback=0x51, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x3, 0x1, 0x100, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000300)=[{0x1, 0x3, 0xd, 0x1}, {0x5, 0x4, 0xd, 0x9}], 0x10, 0x3}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@cgroup, 0x10, 0x1, 0x2, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000680), 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@map=r3, r1, 0x33, 0x8, 0x0, @void, @value=r4, @void, @void, r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.933936192s ago: executing program 4 (id=12358): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r3, 0x6, 0x8, 0x3}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000140)='devices.list\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) r8 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TUNSETOFFLOAD(r8, 0x4004743d, 0x110e22fff6) close(r7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 6.7084019s ago: executing program 2 (id=12360): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) (async) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000500)=@can_delroute={0x34, 0x19, 0x1, 0xfffffffe, 0x80000, {0x1d, 0x1, 0x7}, [@CGW_MOD_XOR={0x15, 0x3, {{{0x2, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "49fd003900"}, 0x4}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffff7, 0x4, 0x2, 0xcc}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000500)=@can_delroute={0x34, 0x19, 0x1, 0xfffffffe, 0x80000, {0x1d, 0x1, 0x7}, [@CGW_MOD_XOR={0x15, 0x3, {{{0x2, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "49fd003900"}, 0x4}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffff7, 0x4, 0x2, 0xcc}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x40) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r4, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r5, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x5, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) (async) bind$nfc_llcp(r5, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x5, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) getpid() (async) r7 = getpid() write$cgroup_pid(r1, &(0x7f0000000180)=r7, 0x12) (async) write$cgroup_pid(r1, &(0x7f0000000180)=r7, 0x12) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000380), 0x12) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x8e, 0x0, 0x0) (async) syz_emit_ethernet(0x8e, 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x9}]}}}]}, 0x3c}}, 0x0) 6.529514116s ago: executing program 0 (id=12362): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@ipv4_delrule={0x24, 0x21, 0x1, 0x70bd2a, 0x25dfdbfc, {0x2, 0x80, 0x80, 0x1, 0xa, 0x0, 0x0, 0x5, 0x10005}, [@FRA_SRC={0x8, 0x2, @multicast1}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) write$nci(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES8=r3, @ANYBLOB="11429b63a79f9c7c6d3051c8ca8e6e7c2f2bf1a3795f559736fef0f14313a0177ffb9a3a95e0c7776dcfa059b8956ea18c7a13c53a34241f53d5653ee5f96660cb3dc404437abfd577e3be029a15351d3d2c8d9a3c3ad24000da01a781676231eb6063bda51d08a21e723d1233b4f5bed2fef37c36db09c18260cb80d6a987bbe343a381e823f7657a935a0a5569cac8d850a2e2cb6046fb7b9ea12e62fb7a8de8fe562cd4d4cdd3", @ANYRES64=r0, @ANYRES16=r5, @ANYBLOB="1e9026ba6366f1bda05e3cec6fb2fffa2c"], 0x3b) read(r0, &(0x7f00000006c0)=""/222, 0xde) listen(r1, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000080000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 4.776856476s ago: executing program 2 (id=12363): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={0x0, @sco, @qipcrtr={0x2a, 0x1, 0x7fff}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, 0x7, 0x0, 0x0, 0x0, 0x10, 0x0, 0x10000, 0x8, 0x1}) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, 0x2, 0x5) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b"], 0x54}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)={0xd0, r4, 0x300, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x200}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000001}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x19}}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x50}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0xd0}, 0x1, 0x0, 0x0, 0x48814}, 0x4000001) r6 = accept4(0xffffffffffffffff, &(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @dev}, &(0x7f0000000000)=0x80, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$sock(r7, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x401, @loopback, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000080)=[@mark={{0x18, 0x1, 0x4f, 0xfffffffb}}], 0x18}, 0x0) bind$pptp(r6, &(0x7f00000000c0)={0x18, 0x2, {0x2, @private=0xa010102}}, 0x1e) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x19, 0x0, 0x0, @binary}, @typed={0x4, 0x1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 4.602936805s ago: executing program 4 (id=12366): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r6, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x4008054) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_genetlink_get_family_id$tipc2(&(0x7f0000001ac0), 0xffffffffffffffff) write$nci(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="71050100030180030504040a015c63e7edf8921b7660e9fe4f311d4edef261c309ec23ef3b2996084c8858ebed817d7a6514064eb8e2d7f1cc4ca5a62aebaddc01a8760e21713d863ee896406540a0cc846e030835cd3f1bec534bbc7642cdae8906ec45d79f0092ae0158775b771759d9ea164c37511515"], 0x72) socket(0x2, 0x80805, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) sendfile(r6, r7, 0x0, 0xffffffff000) sendmsg$NFC_CMD_FW_DOWNLOAD(r4, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="192c2dbd7000ffdbdf251500000008000100", @ANYRES32=0x0, @ANYBLOB="0b00140023292e2d21000000"], 0x28}, 0x1, 0x0, 0x0, 0x100040c0}, 0x80) 4.05269354s ago: executing program 3 (id=12369): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r1}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)) close(0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}, {0x7, 0xffe5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x0) close(r2) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000180)={r6, 0x2030}, &(0x7f0000000380)=0x8) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000240)={0x100000011, @multicast2, 0x0, 0x0, 'lc\x00', 0x0, 0xff, 0x13}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r2) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x50, r10, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000050}, 0x4040040) recvmsg$unix(r8, 0x0, 0x40000100) write$cgroup_devices(r2, &(0x7f00000005c0)=ANY=[], 0xfffffeff) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x17, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r12, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x24000010) 3.413059037s ago: executing program 0 (id=12370): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x0, 0x190, 0xffffffff, 0x0, 0x238, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0x0, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1, @dev={0xac, 0x14, 0x14, 0xd}, @remote, @port=0x4e24, @port=0x4e20}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) r4 = accept4(r0, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001200010025bd70000000000007000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400030076657468315f766972745f7769666900084094d4cf000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8400}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x7}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) ioctl$sock_netdev_private(r1, 0x89f1, &(0x7f0000000740)="92cd59e0121252d3129ec81ab88e176f688e375679419ba796adbf299fe7266e431df138ea456f761f00102f12061ea8db567415788c96d99322ec4ca8d0f2c5df072b64b904bd75f41f96472e9a72801a") sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000180)="98ac3c6741a40ce1997f49fba70d946a07f2178b8bc77dc9339505c7", 0x1c}, {&(0x7f0000000140)="f3e41672c645e11018dc0400000000000000a4c47b311e714b5aab5a85ab5f", 0x1f}, {&(0x7f00000002c0)="390ea240d45db5fcbed46fe54ba61b38faa36d565c3ed3685df9f01173ce90c93393750e9e37617c255ddb6d56", 0x2d}], 0x4, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYRESDEC=r4, @ANYRESOCT=r0, @ANYRES8, @ANYRESOCT=r4, @ANYBLOB="ac74988afcd5468a94b83e78259e55bc442422fe431e941b3e5d17cea63c63c8498a3297dca222416dc4a9befc006878e6d332d82d55babf4a5bd76e19a46e53f0b85d58884a7daa0172346e9bc02ea0b521087d7bc3447bba10454821b795b68b953254f29259108165408f47f4540950c5884207f502021b40cf", @ANYRES64=r1], 0x3aa0}, 0x1, 0x0, 0x0, 0x40}, 0x24004015) readv(r4, &(0x7f0000000580)=[{&(0x7f0000000280)=""/198, 0xc6}, {&(0x7f0000002000)=""/21, 0x15}, {&(0x7f0000000480)=""/166, 0xa6}, {&(0x7f00000000c0)=""/54, 0x36}], 0x4) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1, 0x0, 0x8}, 0x0) 3.12327674s ago: executing program 2 (id=12371): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(r2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000023b7040000000000008500000003000000850000007d0000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="300000001900010025bd7008000000000a00a000000300000200000014000200"], 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0xff82}, {0x0, 0x3, 0x78, 0x4, 0x6, 0x0, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$SIOCPNDELRESOURCE(r5, 0x89ef, &(0x7f0000000180)=0x80) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0x7, r11, 0x4003e}, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)="a2", 0x1}], 0x1}, 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc) 3.017913103s ago: executing program 4 (id=12372): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a01040000e76bcb3833f7e2d100080900020073797a32000000002c000480280001800d00010073796e70726f78790000000014000280050002000100000008000340000000010900010073797a310000000014000000110001000000000000000000ba00000a"], 0x80}, 0x1, 0x0, 0x0, 0x80008c1}, 0x24000840) (async) syz_genetlink_get_family_id$ethtool(&(0x7f000000a780), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xc, 0x0, &(0x7f0000000000)="259a53f26d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_emit_ethernet(0x98, &(0x7f0000000980)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaa3b8100100086dd600100f2005e2c00fc000000000000000000000000000080fe8000000000000000000000000000aa06000005", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000ffff90780002f3d98c3502ffad32829a567fa99e64978b6ddecad472010068a74b4d488734e1a1f38ba4ba88a898a883168f949b9eced48b6dbbf7f0a67cc798d8ec98156854d9aa1bed45543e6b44fb"], 0x0) (async) readv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/217, 0xd9}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00', 0x0}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r4], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async, rerun: 32) r6 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r7 = accept4(r0, 0x0, &(0x7f0000000000), 0x800) sendto(r7, &(0x7f0000000040)="a5e965222453418e6456dbbfd73115e553a8f111d03ff969a0611a9ede2bff142974734f7b93726595e8056206da248ce993ecc1cd382b90b32343f33fef5a334dd678a1f8675912be61cb31b5e193881e9afce62e3827d837ad1706d8fd4e57fd0e13422c8212166ae14feb76fbda2a0b2fe383e590f10aa900440a1a43e9c5163661862757f6ecd1b622dafe7218b229b2d5fd2672372217317f55cfe7cbc6e83a", 0xa2, 0x4000000, &(0x7f0000000180)=@in6={0xa, 0x4e24, 0x7, @remote, 0x3}, 0x80) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r8, 0x0, 0x4, &(0x7f0000000580)="8907040400", 0x5) (async) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) (async, rerun: 64) r10 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$802154_dgram(r9, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000180)={&(0x7f00000002c0)="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", 0xfa}, 0x1, 0x0, 0x0, 0x4080}, 0x40) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r11) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r11, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000c80)={0xfffffffffffffdb0, r12, 0x1, 0x170bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x4}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x2}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0xe0307dcb63f859c4}, 0x0) 3.017110088s ago: executing program 3 (id=12373): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)={0x1b, 0x0, 0x0, 0x800000, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x50) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r2, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0xfffe, 0x0, @empty, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="280000000000000029000000390000008402020100000000ff02000000000000000000000000310118000000000000002900000003"], 0x40}, 0x24004800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time_recursive\x00', 0x7a44, 0x1700) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000007, 0x13, r3, 0x607d8000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r3, 0x20, &(0x7f0000000580)={&(0x7f0000000480)=""/91, 0x5b, 0x0, &(0x7f0000000500)=""/75, 0x4b}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016000200071b48013c030000000000009500000000000000bc26000000000000bf67000000000000150200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000bf54000000000000070500000300f9ffad430100000000009516225100000000000000050800000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x2, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="85000000ad000000040000f0ff00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f14a785}, 0x94) r7 = socket$packet(0x11, 0x3, 0x300) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000040)=r8, 0x4) write(r5, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r9, 0x84, 0x71, &(0x7f0000000140)={r0, 0x80000001}, &(0x7f0000000340)=0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x4070bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x48}}, 0x8048802) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000b40)={r12, r14, 0x25, 0x0, @val=@tcx={@void, @value=r12}}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000a40)={'wg2\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000ac0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000b40)=@RTM_NEWMDB={0x138, 0x54, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x2, 0x2, {@ip4=@local, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x2, 0x4, {@ip4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8add}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x3, 0x3, {@in6_addr=@ipv4={'\x00', '\xff\xff', @empty}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x3, {@in6_addr=@remote, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x3, 0x3, {@in6_addr=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x3, {@in6_addr=@private1}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x1, 0x3, 0x3, {@in6_addr=@mcast2}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r14, 0x1, 0x2, 0x3, {@in6_addr=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r15, 0x1, 0x2, 0x0, {@in6_addr=@private2={0xfc, 0x2, '\x00', 0x1}, 0x800}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 2.623492482s ago: executing program 0 (id=12374): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000c00)='sit0\x00', 0x10) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async, rerun: 32) r3 = accept4(r2, 0x0, 0x0, 0x80800) (rerun: 32) sendmmsg$alg(r3, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffe8d}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) setsockopt$sock_int(r3, 0x1, 0x5, &(0x7f0000000080)=0x9, 0x4) (async) bind$xdp(r1, &(0x7f0000000d40)={0x2c, 0x3, 0x0, 0x2f}, 0x10) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async, rerun: 64) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000010000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r9, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e000300000003000000050007"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x40010) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x6}, 0x5f) 2.59801375s ago: executing program 4 (id=12375): syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) sendmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="73f9c98c", 0x4}, {&(0x7f0000000500)="6cfac4e9341e2c683e900d3c0ab4351aec5a32a15a8275fd9b4fa66d5c9df4c5ac3e768f42b87861f578ed862cd006265c3d5dc76a016f4f1035557c6f771fe707e1e52360bd9de0516a18d5fc81cc73b00dff5c82af1c37267afab20779893d6db4d345fb6a5656db91bacb92ea32418b6b", 0x72}, {&(0x7f0000001b00)="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", 0xf8b}], 0x3}, 0x4) splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r4 = openat$cgroup_ro(r0, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) r5 = socket$key(0xf, 0x3, 0x2) ioctl$SIOCGSTAMP(r5, 0x8906, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r6 = gettid() syz_open_procfs$namespace(r6, &(0x7f0000000000)='ns/uts\x00') 2.537510174s ago: executing program 3 (id=12376): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) (async) sendmsg$key(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="0216cb090d0000002bbd7000140000000000050005006c6000000a004e20000004fcff010000000000000000000000000001080000000000000005001a00e0000001000000000000000000000000fe8800000000000000000000000001010f001010"], 0x68}}, 0xc810) (async) sendmmsg$unix(r1, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20048080}}], 0x1, 0x20000000) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xae}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (rerun: 64) 2.480497467s ago: executing program 3 (id=12377): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x10, 0x80002, 0x0) pipe(&(0x7f0000000680)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r0], 0x28}}, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_emit_ethernet(0x2a, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) close(0x3) shutdown(0xffffffffffffffff, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) close(0x4) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000009840)='police\x00', 0x7) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="2400190014000100000000000000000011090d0001006d13a20d015dc921e40000000000"], 0x24}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket(0x2a, 0x2, 0x0) getpeername$packet(r5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xf4}}, 0x0) 2.42861027s ago: executing program 4 (id=12378): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x0, r1}}, 0x40) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bind$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x0, '\x00', [{0xffff7d3e, 0x83f0, 0x8a, 0x1, 0x649, 0x4}, {0xcab5, 0xffffff00, 0x7, 0x0, 0x7, 0x3ff}], ['\x00', '\x00']}) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x1c, r7, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @local}]}}}]}, 0x54}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r9 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_ax25_SIOCADDRT(r9, 0x890b, &(0x7f00000000c0)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null]}) socket$inet6(0xa, 0x80000, 0x2) 311.877712ms ago: executing program 2 (id=12379): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f0000000400eaff030000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008372e4e177dfd85407833df1251dd00000000000000090000007311"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008372e4e177dfd85407833df1251dd00000000000000090000007311"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r2, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @val={@val={0x88a8, 0x3, 0x0, 0x2}, {0x8100, 0x3, 0x1, 0x1}}, {@ipv6={0x86dd, @icmpv6={0xe, 0x6, "f22ada", 0x30, 0x3a, 0xff, @mcast2, @local, {[], @time_exceed={0x3, 0x1, 0x0, 0x1, '\x00', {0x2, 0x6, "40a619", 0x40, 0x33, 0x0, @loopback, @ipv4={'\x00', '\xff\xff', @multicast2}}}}}}}}, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @val={@val={0x88a8, 0x3, 0x0, 0x2}, {0x8100, 0x3, 0x1, 0x1}}, {@ipv6={0x86dd, @icmpv6={0xe, 0x6, "f22ada", 0x30, 0x3a, 0xff, @mcast2, @local, {[], @time_exceed={0x3, 0x1, 0x0, 0x1, '\x00', {0x2, 0x6, "40a619", 0x40, 0x33, 0x0, @loopback, @ipv4={'\x00', '\xff\xff', @multicast2}}}}}}}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x350, 0xffffffff, 0x1b0, 0x0, 0xe0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff, 0x0, 0xff000000, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'ip6erspan0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x23, 0x3, 0x2}, 0x2f2, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x4, 0x3}, {0xffffffffffffffff, 0x1, 0x1}, {0x3, 0x5, 0x6}, 0x10000}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00', [0xff, 0x0, 0xff000000], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'macvtap0\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x2c, 0x79, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@deltfilter={0x9c0, 0x2d, 0x20, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x1f, 0xffff}, {0x6, 0x1}, {0x1, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x6}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8, 0xb, 0x1fc}, @filter_kind_options=@f_bpf={{0x8}, {0x964, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0xfff3, 0xd}}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x944, 0x1, [@m_csum={0x80, 0x1a, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x6, 0x20000000, 0x8, 0x6}, 0x5c}}]}, {0x36, 0x6, "8bc0606ab98a541ed77f7c92b497a286cb3787197ed9b872e9624e0de7ccc29f0f7dcb5c8bf38d0b015660102ebc3fdcd8fb"}, {0xc}, {0xc}}}, @m_bpf={0x88, 0x9, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x53, 0x6, "e6c2fd984de97630b5b8ea32b7ba564380bbb05daa86a0439937a54782745ac1205fc900194d0bc467401698587c6e95992daddaf6039b43a96f18de050cc4e815a55262183f0180b84d413c2e1c78"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_xt={0x264, 0x5, 0x0, 0x0, {{0x7}, {0x1b0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x46, 0x6, {0x0, 'raw\x00', 0x3, 0x4, "09b83e5a56772dd8e1f3f550f48abfd65b78e23437a7269871c6d815"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x101, 0x6, {0x7, 'filter\x00', 0x3, 0x97e1, "4ee6fbbe2c6df931a1cc9cbb203cbd2e4e12dc218c6e19ef72fa2a613391fce272c32c96cc4e8cc82cf2f7d9aca921d59a1aab3b9591135f08646906c9442c931167341acbf3f0a2804371ef85524e06325b88ca3c78b491dd38868da041595d6fecf27e9c40be66af76866ac73c4ddb3c4711b3f0247b50214dc3a067049b9a56480c77272ce2e607a8fb0ea491e007e6b4749da377ff6ecb8b8868cc8bc639767776abd0ebf2a9f10cac5f8a45b16617c8163a4a243b1243609bdc83ffa16f86bfcfc561003dbfdc04d47bed0dff9d1db3403cdf7fca"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x952}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8}]}, {0x90, 0x6, "7dbc2784395c3f59cb160d051147d3d1b13905deeab093c5795c4e867c4ed4615d496f04b78078355d50396053476d5052470621febb8acbec1c50014a43a82881e52e4ff7297ef32a83da48837cf9487d5dd5fe17e234635537b99e13be952bf9af2f7e593f591003491b5e056676353e22700c2b11c1a7710ce30a66a46d210eb1a245e12cdd4fec003250"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ct={0x9c, 0xc, 0x0, 0x0, {{0x7}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_PARMS={0x18, 0x1, {0x42, 0x5, 0x0, 0x0, 0x40}}, @TCA_CT_PARMS={0x18, 0x1, {0xee, 0x0, 0x7, 0x3, 0x14}}, @TCA_CT_ZONE={0x6, 0x4, 0x6}, @TCA_CT_LABELS_MASK={0x14, 0x8, "340b86dac80e8c15cc92d14ff36915fd"}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}]}, {0xe, 0x6, "380cb9c81c958aee93e8"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0x110, 0x2, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @rand_addr=0x64010100}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010100}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @remote}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x4, 0xa, 0x5, 0x6, 0x7}, 0x2}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xda}]}, {0x8f, 0x6, "2a140037b97af77fcff3e59ef16d165a4078fc140e62aacd794b949bcbdd44ca806d297d7e9f4ae98437023313568f895ab2cd6490bb5e3de75ff80ceed854a1818f6cadcb7c97ab0a9c272f2186a26356555d9e61c49ca04bf24774adb70b284a4ecd5cdb2e930e0fcf6ee9787078c480a0c8ce1db245cd2dccddf8f10529f282ce2887146b0f377bad42"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_simple={0x100, 0x1a, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, '&#((\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xf67, 0xffffffffffffffff, 0x4, 0x80000001}}, @TCA_DEF_DATA={0x9, 0x3, 'csum\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x9, 0x5, 0x6, 0x4}}]}, {0x8a, 0x6, "c1822bead258caef02dc1b10d3a558b0b0eca3f321a5f9b5c6ca4b638de5da1a2223cc092eebde1858afd024b4eec6e7231dbdb4dc9e2309ba544579e3ccc36847d420e721c344dd6f93e0b55b2bda39b152eac1cc4d43e8b9efd333cdccba52fe703e79d705507f0b47a0d2a7d004f056901324cdbfe44940d0d73d9e5eb72f29ca5ac2ab2b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_bpf={0xf4, 0x10, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x8000, 0x5, 0x3, 0x2}, {0x9, 0x7f, 0xd, 0x3}, {0xa, 0x8, 0x5, 0xfffffffa}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7ceb, 0xfa9, 0x0, 0xee, 0x9}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x1002, 0xa2, 0x3, 0x9}]}]}, {0x7a, 0x6, "76aa1df7aad4249b1398123a31bd41c3156eced35567bb4fca79d656792e91c51b3a5ca5dda9a9656f471cf638ca3dcb2ff50933179cab05d0ad6d869d1242cb3a70ab8fcb17b288fb3e9b5368f375bbb0bfd944d6ab3be17373dbb67e4fac3a9186a9f9ad73ba6c1734f8ed27b173442d1c09730e59"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ct={0x48, 0x1a, 0x0, 0x0, {{0x7}, {0x4}, {0x1f, 0x6, "05895aa35e4f032ec8a2123c55943717bc79428ebd8f8ee495cf45"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x1ec, 0x17, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x63ad5e62, 0x5, 0x4ec1, 0xe8a4}, 0xfc01}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x31, 0x8500, 0x0, 0x6}, 0xfff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xb03b, 0xfff, 0x10000000, 0x8, 0x4}, 0x1ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x200, 0x4, 0x7, 0x2, 0xc71}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x800, 0x6, 0x1, 0x400}}}, @TCA_CONNMARK_PARMS={0xa, 0x1, {{0x0, 0x0, 0x5, 0x9b8, 0x7}, 0xb}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x0, 0x10000000, 0x42d, 0x7}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0xfbb, 0x10000000, 0x3, 0x9}, 0x8}}]}, {0xdc, 0x6, "5c228e7f304434700eab76f8ee4848e0a5c70faa0ae715c9b0d7c6fcfaeff9a98384833f08b881e4be9c87e35de9b3b5a959125d19bb0605350d457de5efeb671c36dd148b0be4d4add6b8a2647ceac2ec88b71f76163431b64df708f0d92fa1fa4d2273517acf0aa3b70606e69cbfdbad122572ae26ffb4099b192108fb96214dbd6465324ac83d535ed1feebaa3a5dbfdebce12c3342409942e70c2ab3595a2141aac801edab504785288732bea07b094b36e45c2570eb4f08d7b998ccb2690c99557c767d1627b53988fc1b3e7efed99949d63efa40fd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x9c0}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r7, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000240), &(0x7f00000000c0)=@tcp6=r1, 0x2}, 0x20) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r11, 0x11e, 0x12, 0x0, &(0x7f0000000000)) (async) getsockopt$inet_tcp_int(r11, 0x11e, 0x12, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2c, r9, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x1010, r12, 0x7) (async) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x1010, r12, 0x7) 311.41559ms ago: executing program 3 (id=12380): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00007735c4d1ff00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000281c0040000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b6090000002000a80700000050000058bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056000000a80000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x11, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 277.112122ms ago: executing program 0 (id=12381): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8855}, 0x2800) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(r3, 0x0, 0x8000) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 163.621952ms ago: executing program 0 (id=12382): socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000080)=@routing={0x86, 0x0, 0x1, 0xf8}, 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x5, &(0x7f0000000040)=0x8f, 0x4) bind$bt_sco(r1, &(0x7f0000000040), 0x8) (async) bind$bt_sco(r1, &(0x7f0000000040), 0x8) ioctl$int_in(r1, 0x5421, &(0x7f0000002640)=0x9) listen(r1, 0x1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESOCT=r1, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x29, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$unix(0x1, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x6}, &(0x7f0000000140)=0x8) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x6}, &(0x7f0000000140)=0x8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x4, 0x9, 0x4, 0x3, 0x40, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x20, 0x40, 0x4, 0x400}}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000400)={@multicast2, @multicast1, r7}, 0xc) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={r6}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={r6}, 0x8) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f0000000240)=0x8000, 0x4) (async) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f0000000240)=0x8000, 0x4) ioctl$int_in(r5, 0x5421, &(0x7f0000000340)=0xfff) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000440)={0x6, 0x8, 0x4, 0x7fff, 0x5, 0x0, [{0xf, 0x7fffffffffffffff, 0x5, '\x00', 0x2}, {0x8000000000000000, 0x4, 0xa145, '\x00', 0x2d07}, {0xb, 0x0, 0x9c3, '\x00', 0x2808}, {0x800, 0x7, 0x4, '\x00', 0xc08}, {0x3, 0x22e9, 0x9, '\x00', 0x2000}]}) (async) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000440)={0x6, 0x8, 0x4, 0x7fff, 0x5, 0x0, [{0xf, 0x7fffffffffffffff, 0x5, '\x00', 0x2}, {0x8000000000000000, 0x4, 0xa145, '\x00', 0x2d07}, {0xb, 0x0, 0x9c3, '\x00', 0x2808}, {0x800, 0x7, 0x4, '\x00', 0xc08}, {0x3, 0x22e9, 0x9, '\x00', 0x2000}]}) connect$unix(r5, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) connect$unix(r5, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r8 = socket$phonet(0x23, 0x2, 0x1) accept4(r8, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000580)={r6, @in6={{0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00', 0x8}}}, &(0x7f0000000640)=0x84) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) getsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, &(0x7f0000000000)=0xa4) 96.602058ms ago: executing program 2 (id=12383): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x46, "43720705000000004786b89e6fb2be5c3f000000a69e0825471829a0395ebb7bf7b5555f84e55fee49e0e4ba020ffd702b5cd64fd950858238465f49a4e649c3d26ea2b65962"}}) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYRESHEX=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 93.327569ms ago: executing program 3 (id=12384): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r0, 0x89e2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$caif_stream(0x25, 0x1, 0x1) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f00000002c0), &(0x7f0000000300)=0x4) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000100)={'gretap0\x00', 0x0}) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0xb, 0x4, 0x2}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r6, &(0x7f0000000040)}, 0x20) connect$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000001c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000004c0)={'erspan0\x00', 0x0, 0x7800, 0x700, 0xfffffffe, 0x7, {{0x8, 0x4, 0x3, 0x1b, 0x20, 0x67, 0x0, 0xad, 0x4, 0x0, @broadcast, @multicast2, {[@timestamp_prespec={0x44, 0xc, 0xec, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}]}}}}}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@delneigh={0x24, 0x1d, 0x8, 0x70bd29, 0x25dfdbfc, {0x2, 0x0, 0x0, r9, 0x8, 0x8c, 0x8}, [@NDA_MASTER={0x8, 0x9, 0x6}]}, 0x24}}, 0x20044040) 11.431994ms ago: executing program 2 (id=12385): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001e00010027bd7000fcdbdf250a000000", @ANYRES32=r1, @ANYBLOB="00000800140001"], 0x30}}, 0x20000000) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000100)={0x66, 0x3, 0x4, 0x3, 0xe, 0x6c, 0xe, 0x9, 0x6, 0x9, 0x4, 0x56, 0x80, 0xe2}, 0xe) (async) r3 = socket$alg(0x26, 0x5, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd70004400000005000000080009000200000008000c00a80a00000600010008000000050021000000000005"], 0x48}}, 0x4) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10006c00, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) (async) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async, rerun: 32) r5 = accept4(r3, 0x0, 0x0, 0x0) (rerun: 32) sendmsg$alg(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) (async, rerun: 64) recvmsg$unix(r5, &(0x7f0000000840)={0x0, 0xfffffebb, &(0x7f0000000280), 0x48}, 0x0) (rerun: 64) 0s ago: executing program 0 (id=12386): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000200)={0x8, 0x1, 0x8000, 0xb626, 0xfffffff9}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r3, &(0x7f0000000080)="e5f0", 0x0}, 0x20) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0xf8f5, 0x0, 0xfffffffd}, 0x14}, 0x1, 0x0, 0x0, 0x20008814}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000029c0)=ANY=[@ANYBLOB="940000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c000280"], 0x94}}, 0x0) (async, rerun: 64) r6 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x2020}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc845}, 0x0) (async) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) unshare(0x2a020400) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r4) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r7, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xc6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20c0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r8, 0x8946, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r2) (async, rerun: 32) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) (async, rerun: 32) sendmmsg$inet(r2, &(0x7f000000a3c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) kernel console output (not intermixed with test programs): 11330'. [ 1467.795314][T27911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1467.839109][T17988] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11333'. [ 1467.869335][T13186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1467.951257][T31854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1467.989771][T17999] bond0: (slave macvlan3): Opening slave failed [ 1468.048735][T11829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1468.107449][T18005] SET target dimension over the limit! [ 1468.197756][T18005] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11338'. [ 1468.224007][T18005] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11338'. [ 1468.267195][T18005] tipc: Enabled bearer , priority 0 [ 1468.279906][T18004] tipc: Disabling bearer [ 1468.401850][T18003] xfrm0 speed is unknown, defaulting to 1000 [ 1469.008579][T31854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1469.698553][T18052] xfrm0 speed is unknown, defaulting to 1000 [ 1470.354085][T18070] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11355'. [ 1470.394807][T18076] netlink: 'syz.0.11357': attribute type 83 has an invalid length. [ 1470.405404][T18066] xfrm0 speed is unknown, defaulting to 1000 [ 1470.588038][T18082] ip6tnl0: Caught tx_queue_len zero misconfig [ 1470.594425][T18082] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11358'. [ 1470.948585][T18095] netlink: 232 bytes leftover after parsing attributes in process `syz.2.11363'. [ 1470.966942][T18095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11363'. [ 1471.104560][T18097] netlink: 136 bytes leftover after parsing attributes in process `syz.0.11364'. [ 1471.124291][T18097] net_ratelimit: 11 callbacks suppressed [ 1471.124308][T18097] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1471.166128][T11829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1471.229272][T31854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1471.397713][T11829] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1471.437705][T18107] syzkaller0: entered promiscuous mode [ 1471.443216][T18107] syzkaller0: entered allmulticast mode [ 1471.555024][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1471.761939][T18120] pim6reg99999999: entered allmulticast mode [ 1471.807510][T18122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11370'. [ 1471.885092][T11832] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1472.154379][T18138] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1472.200887][T11832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1472.330799][T18140] xfrm0 speed is unknown, defaulting to 1000 [ 1472.340879][T18138] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1472.347318][T13186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1472.414669][T18138] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1472.527903][T18153] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1472.538081][T18153] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.593333][T18138] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1472.652004][T18153] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1472.674495][T18153] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.783323][T13186] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1472.800990][T18153] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1472.820570][T18153] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.888870][T31854] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1472.902224][T18153] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1472.913123][T18153] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.951225][T31854] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1472.969271][T31854] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1473.089951][T18176] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1473.160634][T18176] bond8: Unable to set down delay as MII monitoring is disabled [ 1473.177886][T18176] bond8 (unregistering): Released all slaves [ 1473.235845][T11829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1473.265029][T18180] xfrm0 speed is unknown, defaulting to 1000 [ 1473.288351][T18186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11387'. [ 1473.315540][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1473.391036][T31854] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1473.400919][T31854] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1473.441008][T13186] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1473.453400][T13186] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1473.465668][T31854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1473.494959][T31854] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1473.503149][T31854] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1473.533149][T31854] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1473.541837][T31854] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1473.567897][T18194] nbd: must specify at least one socket [ 1473.633832][T18197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1473.642234][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1473.962090][T18210] batadv_slave_1: entered promiscuous mode [ 1473.976253][T18210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11394'. [ 1474.017986][T18210] batadv_slave_1 (unregistering): left promiscuous mode [ 1474.028654][T18210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1474.196848][T18217] netlink: 'syz.0.11396': attribute type 3 has an invalid length. [ 1474.204691][T18217] netlink: 'syz.0.11396': attribute type 3 has an invalid length. [ 1474.377983][T18220] syzkaller0: entered promiscuous mode [ 1474.396785][T18220] syzkaller0: entered allmulticast mode [ 1474.710464][T18234] geneve3: entered promiscuous mode [ 1474.805246][T31854] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1474.813562][T31854] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1474.895474][T31854] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1474.914776][T31854] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1475.436522][T18266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11410'. [ 1475.559435][T18268] netlink: 148 bytes leftover after parsing attributes in process `syz.0.11411'. [ 1475.590419][T18268] netlink: 116 bytes leftover after parsing attributes in process `syz.0.11411'. [ 1475.613965][T18268] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11411'. [ 1475.693739][T18280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11411'. [ 1475.771456][T18282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11414'. [ 1476.007181][T18292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11417'. [ 1476.046400][T18292] netlink: 'syz.1.11417': attribute type 30 has an invalid length. [ 1476.103759][T18301] netlink: 'syz.2.11418': attribute type 1 has an invalid length. [ 1476.131924][T18298] netlink: 'syz.2.11418': attribute type 1 has an invalid length. [ 1476.150314][T18302] net_ratelimit: 8 callbacks suppressed [ 1476.150329][T18302] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1476.157242][T18305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11418'. [ 1476.268916][T18305] bond8: (slave bridge6): making interface the new active one [ 1476.277180][T18305] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 1476.288064][T18302] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1476.355624][T11832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1476.379540][T18319] netlink: 'syz.1.11423': attribute type 9 has an invalid length. [ 1476.444327][T18314] xfrm0 speed is unknown, defaulting to 1000 [ 1476.676261][T31854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1476.684683][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1476.791014][T18350] Cannot find add_set index 0 as target [ 1476.857115][T18352] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1476.969426][T18358] syzkaller1: entered promiscuous mode [ 1476.984194][T18358] syzkaller1: entered allmulticast mode [ 1477.006514][T31850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1477.395511][T11832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1477.506824][T18385] bridge8: port 1(veth7) entered blocking state [ 1477.513442][T18385] bridge8: port 1(veth7) entered disabled state [ 1477.522492][T18385] veth7: entered allmulticast mode [ 1477.534702][T18385] veth7: entered promiscuous mode [ 1477.595330][T18390] bridge8: port 2(veth0_to_bond) entered blocking state [ 1477.602440][T18390] bridge8: port 2(veth0_to_bond) entered disabled state [ 1477.650380][T18390] veth0_to_bond: entered allmulticast mode [ 1477.678178][T18390] veth0_to_bond: entered promiscuous mode [ 1477.697944][T18385] bridge8: port 3(veth9) entered blocking state [ 1477.704260][T18385] bridge8: port 3(veth9) entered disabled state [ 1477.711273][T18385] veth9: entered allmulticast mode [ 1477.718028][T18385] veth9: entered promiscuous mode [ 1478.011619][T18418] netlink: 'syz.1.11449': attribute type 12 has an invalid length. [ 1478.116609][T13186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1478.148326][T18422] pim6reg: entered allmulticast mode [ 1478.201067][T18417] pim6reg: left allmulticast mode [ 1478.291000][T18436] netlink: 'syz.3.11452': attribute type 2 has an invalid length. [ 1478.299271][T18436] __nla_validate_parse: 6 callbacks suppressed [ 1478.299289][T18436] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11452'. [ 1478.435583][T11829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1478.511884][T18443] SET target dimension over the limit! [ 1478.667148][T18457] --map-set only usable from mangle table [ 1478.776764][T18460] block nbd14: server does not support multiple connections per device. [ 1478.790807][T18460] block nbd14: shutting down sockets [ 1478.826532][T18455] xfrm0 speed is unknown, defaulting to 1000 [ 1478.939052][T18479] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11464'. [ 1478.955301][T18480] netlink: 'syz.4.11459': attribute type 2 has an invalid length. [ 1479.010433][T18480] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11459'. [ 1479.092028][T18485] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11466'. [ 1479.278853][T18495] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11469'. [ 1479.290338][T18495] syzkaller0: entered promiscuous mode [ 1479.305823][T18495] syzkaller0: entered allmulticast mode [ 1479.571799][T18508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11473'. [ 1479.581172][T18505] FAULT_INJECTION: forcing a failure. [ 1479.581172][T18505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1479.581662][T18509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11473'. [ 1479.623723][T18505] CPU: 0 UID: 0 PID: 18505 Comm: syz.0.11472 Not tainted syzkaller #0 PREEMPT(full) [ 1479.623764][T18505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1479.623786][T18505] Call Trace: [ 1479.623794][T18505] [ 1479.623802][T18505] dump_stack_lvl+0xe8/0x150 [ 1479.623828][T18505] should_fail_ex+0x412/0x560 [ 1479.623855][T18505] _copy_from_user+0x2d/0xb0 [ 1479.623880][T18505] do_sock_getsockopt+0x165/0x3f0 [ 1479.623904][T18505] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1479.623928][T18505] ? ksys_write+0x1fc/0x270 [ 1479.623963][T18505] __x64_sys_getsockopt+0x1a4/0x240 [ 1479.623994][T18505] do_syscall_64+0xe2/0xf80 [ 1479.624016][T18505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1479.624032][T18505] ? trace_irq_disable+0x37/0x100 [ 1479.624050][T18505] ? clear_bhb_loop+0x60/0xb0 [ 1479.624070][T18505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1479.624087][T18505] RIP: 0033:0x7fe26619aeb9 [ 1479.624104][T18505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1479.624119][T18505] RSP: 002b:00007fe266f9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1479.624138][T18505] RAX: ffffffffffffffda RBX: 00007fe266415fa0 RCX: 00007fe26619aeb9 [ 1479.624149][T18505] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000004 [ 1479.624159][T18505] RBP: 00007fe266f9c090 R08: 0000200000000000 R09: 0000000000000000 [ 1479.624170][T18505] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 1479.624180][T18505] R13: 00007fe266416038 R14: 00007fe266415fa0 R15: 00007ffff07bc1b8 [ 1479.624206][T18505] [ 1479.808675][T18519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11473'. [ 1479.838861][T18508] team1: entered promiscuous mode [ 1479.882109][T18508] team1: entered allmulticast mode [ 1479.889056][T18508] 8021q: adding VLAN 0 to HW filter on device team1 [ 1479.917720][T18509] team2: entered promiscuous mode [ 1479.922790][T18509] team2: entered allmulticast mode [ 1479.929485][T18509] 8021q: adding VLAN 0 to HW filter on device team2 [ 1480.018622][T18518] geneve3: left promiscuous mode [ 1480.098854][T18519] team3: entered promiscuous mode [ 1480.106534][T18519] team3: entered allmulticast mode [ 1480.112181][T18519] 8021q: adding VLAN 0 to HW filter on device team3 [ 1480.134488][T13186] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1480.145031][T13186] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.175347][T13186] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1480.192782][T13186] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.232177][T18526] syzkaller1: entered promiscuous mode [ 1480.247051][T18526] syzkaller1: entered allmulticast mode [ 1480.267973][T18540] netlink: 'syz.4.11481': attribute type 1 has an invalid length. [ 1480.276135][T18540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11481'. [ 1480.330158][T13186] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1480.354482][T13186] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.401438][T13186] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1480.455238][T13186] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.633512][T18554] netlink: 'syz.4.11485': attribute type 30 has an invalid length. [ 1480.816565][T18549] xfrm0 speed is unknown, defaulting to 1000 [ 1480.856930][T18563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11487'. [ 1481.257702][T18582] netlink: 'syz.2.11493': attribute type 2 has an invalid length. [ 1481.336405][T18583] net_ratelimit: 6 callbacks suppressed [ 1481.336422][T18583] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1481.556837][T31845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1481.585306][T11829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1481.730553][T18601] syzkaller1: entered promiscuous mode [ 1481.750027][T18601] syzkaller1: entered allmulticast mode [ 1481.800830][T31845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1481.809243][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1482.251222][T18631] netlink: 'syz.4.11509': attribute type 3 has an invalid length. [ 1482.263231][T18631] netlink: 'syz.4.11509': attribute type 2 has an invalid length. [ 1482.279197][T18631] netlink: 'syz.4.11509': attribute type 2 has an invalid length. [ 1482.439872][T31845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1482.448074][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1482.456181][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1482.666026][T11832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1482.745531][T31852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1484.059559][T18620] syzkaller0: entered promiscuous mode [ 1484.065213][T18620] syzkaller0: entered allmulticast mode [ 1484.086605][T18624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1484.367104][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1484.406649][T18647] netlink: 'syz.2.11513': attribute type 5 has an invalid length. [ 1484.428405][T18647] __nla_validate_parse: 6 callbacks suppressed [ 1484.428422][T18647] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.11513'. [ 1484.490185][T18647] netlink: 252 bytes leftover after parsing attributes in process `syz.2.11513'. [ 1484.859195][T18671] syzkaller0: entered promiscuous mode [ 1484.864774][T18671] syzkaller0: entered allmulticast mode [ 1484.886412][T18673] vlan0: entered promiscuous mode [ 1484.892641][T18673] dummy0: entered promiscuous mode [ 1485.543844][T18716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11532'. [ 1486.076971][T18725] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11534'. [ 1486.837105][T11839] net_ratelimit: 6 callbacks suppressed [ 1486.837118][T11839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1486.920018][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1486.928179][T31852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1486.936614][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1487.089376][T18725] xfrm0 speed is unknown, defaulting to 1000 [ 1487.195882][T18729] tipc: Enabled bearer , priority 0 [ 1487.202908][T31852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1487.212767][T18729] syzkaller0: entered promiscuous mode [ 1487.220684][T18729] syzkaller0: entered allmulticast mode [ 1487.239916][T18731] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11536'. [ 1487.271629][T18729] tipc: Resetting bearer [ 1487.283936][T18728] tipc: Resetting bearer [ 1487.309401][T18728] tipc: Disabling bearer [ 1487.452171][T18740] No such timeout policy "syz1" [ 1487.515270][T18741] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11541'. [ 1487.633489][T18748] syzkaller0: entered promiscuous mode [ 1487.649510][T18748] syzkaller0: entered allmulticast mode [ 1487.660204][T18755] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11545'. [ 1487.720171][T18755] IPVS: ip_vs_add_dest(): server weight less than zero [ 1487.896572][T11832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1487.982401][T18766] netlink: 'syz.3.11547': attribute type 11 has an invalid length. [ 1488.195469][T31845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1488.203760][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1488.221790][T18787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11551'. [ 1488.231190][T18787] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11551'. [ 1488.263927][T18778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11550'. [ 1488.324284][T18789] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1488.336438][T31848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1488.394152][T18789] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1488.453989][T18795] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1488.494023][T18795] bond9 (unregistering): Released all slaves [ 1489.171090][T18833] xfrm0 speed is unknown, defaulting to 1000 [ 1489.714941][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5350 ms [ 1489.723001][ C0] lec:lec_tx_timeout: lec0 [ 1490.548136][T18914] Cannot find del_set index 4 as target [ 1490.937079][T18928] netlink: 'syz.0.11592': attribute type 58 has an invalid length. [ 1491.036246][T18929] __nla_validate_parse: 6 callbacks suppressed [ 1491.036262][T18929] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11592'. [ 1491.181717][T18937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11595'. [ 1491.212471][T18937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11595'. [ 1491.222378][T18937] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11595'. [ 1491.482753][T18965] FAULT_INJECTION: forcing a failure. [ 1491.482753][T18965] name failslab, interval 1, probability 0, space 0, times 0 [ 1491.510763][T18965] CPU: 0 UID: 0 PID: 18965 Comm: syz.0.11602 Not tainted syzkaller #0 PREEMPT(full) [ 1491.510787][T18965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1491.510798][T18965] Call Trace: [ 1491.510806][T18965] [ 1491.510814][T18965] dump_stack_lvl+0xe8/0x150 [ 1491.510841][T18965] should_fail_ex+0x412/0x560 [ 1491.510868][T18965] should_failslab+0xa8/0x100 [ 1491.510890][T18965] __kmalloc_noprof+0xde/0x7e0 [ 1491.510908][T18965] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1491.510931][T18965] ? rcu_is_watching+0x15/0xb0 [ 1491.510960][T18965] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1491.510989][T18965] genl_family_rcv_msg_doit+0xd9/0x330 [ 1491.511012][T18965] ? __asan_memcpy+0x40/0x70 [ 1491.511039][T18965] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1491.511063][T18965] ? __pfx___mutex_lock+0x10/0x10 [ 1491.511086][T18965] ? __pfx_genl_get_cmd+0x10/0x10 [ 1491.511106][T18965] ? __pfx_nl802154_get_wpan_phy+0x10/0x10 [ 1491.511127][T18965] ? __pfx_nl802154_dump_wpan_phy+0x10/0x10 [ 1491.511147][T18965] ? __pfx_nl802154_dump_wpan_phy_done+0x10/0x10 [ 1491.511169][T18965] ? __lock_acquire+0x6b5/0x2cf0 [ 1491.511200][T18965] genl_rcv_msg+0x61c/0x7a0 [ 1491.511228][T18965] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1491.511248][T18965] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 1491.511266][T18965] ? __pfx_nl802154_get_wpan_phy+0x10/0x10 [ 1491.511285][T18965] ? __pfx_nl802154_post_doit+0x10/0x10 [ 1491.511322][T18965] netlink_rcv_skb+0x232/0x4b0 [ 1491.511343][T18965] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1491.511366][T18965] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1491.511382][T18965] ? genl_rcv+0x19/0x40 [ 1491.511420][T18965] ? down_read+0x272/0x2e0 [ 1491.511434][T18965] ? genl_rcv+0xd/0x40 [ 1491.511456][T18965] genl_rcv+0x28/0x40 [ 1491.511475][T18965] netlink_unicast+0x80f/0x9b0 [ 1491.511502][T18965] ? __pfx_netlink_unicast+0x10/0x10 [ 1491.511522][T18965] ? netlink_sendmsg+0x650/0xb40 [ 1491.511538][T18965] ? skb_put+0x11b/0x210 [ 1491.511563][T18965] netlink_sendmsg+0x813/0xb40 [ 1491.511591][T18965] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1491.511614][T18965] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1491.511635][T18965] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1491.511656][T18965] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1491.511674][T18965] ____sys_sendmsg+0xa68/0xad0 [ 1491.511694][T18965] ? __might_fault+0xaf/0x130 [ 1491.511722][T18965] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1491.511752][T18965] ? import_iovec+0x73/0xa0 [ 1491.511782][T18965] ___sys_sendmsg+0x2a5/0x360 [ 1491.511803][T18965] ? __lock_acquire+0x6b5/0x2cf0 [ 1491.511829][T18965] ? __pfx____sys_sendmsg+0x10/0x10 [ 1491.511884][T18965] ? __fget_files+0x2a/0x420 [ 1491.511902][T18965] ? __fget_files+0x3a0/0x420 [ 1491.511930][T18965] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1491.511962][T18965] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1491.511994][T18965] ? __pfx_ksys_write+0x10/0x10 [ 1491.512029][T18965] do_syscall_64+0xe2/0xf80 [ 1491.512050][T18965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1491.512065][T18965] ? trace_irq_disable+0x37/0x100 [ 1491.512082][T18965] ? clear_bhb_loop+0x60/0xb0 [ 1491.512102][T18965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1491.512117][T18965] RIP: 0033:0x7fe26619aeb9 [ 1491.512133][T18965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1491.512148][T18965] RSP: 002b:00007fe266f9c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1491.512167][T18965] RAX: ffffffffffffffda RBX: 00007fe266415fa0 RCX: 00007fe26619aeb9 [ 1491.512180][T18965] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000004 [ 1491.512191][T18965] RBP: 00007fe266f9c090 R08: 0000000000000000 R09: 0000000000000000 [ 1491.512202][T18965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1491.512211][T18965] R13: 00007fe266416038 R14: 00007fe266415fa0 R15: 00007ffff07bc1b8 [ 1491.512239][T18965] [ 1492.047356][T11832] net_ratelimit: 99 callbacks suppressed [ 1492.047373][T11832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1492.125660][T31845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1492.175524][T18977] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11605'. [ 1492.223690][T18977] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11605'. [ 1492.367662][T18985] netlink: 'syz.0.11607': attribute type 3 has an invalid length. [ 1492.395172][T18985] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11607'. [ 1492.492695][T18985] netlink: 'syz.0.11607': attribute type 1 has an invalid length. [ 1492.507165][T18985] netlink: 'syz.0.11607': attribute type 4 has an invalid length. [ 1492.519262][T18993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11610'. [ 1492.537565][T18985] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.11607'. [ 1492.585916][T18993] macsec1: entered allmulticast mode [ 1492.591226][T18993] macsec0: entered allmulticast mode [ 1492.633262][T18993] netlink: 'syz.2.11610': attribute type 21 has an invalid length. [ 1492.685361][T13186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1492.693661][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1492.719948][T18993] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11610'. [ 1492.921401][T19012] netlink: 'syz.0.11607': attribute type 1 has an invalid length. [ 1492.945079][T19012] netlink: 'syz.0.11607': attribute type 4 has an invalid length. [ 1492.972422][T18985] syzkaller0: entered promiscuous mode [ 1492.997059][T18985] syzkaller0: entered allmulticast mode [ 1493.098761][T11839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1493.237246][T13186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1493.284104][T19040] xfrm0 speed is unknown, defaulting to 1000 [ 1493.533169][T19055] bond4: option resend_igmp: invalid value (2878) [ 1493.550911][T19055] bond4: option resend_igmp: allowed values 0 - 255 [ 1493.588763][T19055] bond4 (unregistering): Released all slaves [ 1493.643573][T19068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1493.744303][T19047] xfrm0 speed is unknown, defaulting to 1000 [ 1493.891792][T19078] tipc: Enabled bearer , priority 0 [ 1493.901448][T19078] netlink: 'syz.2.11634': attribute type 3 has an invalid length. [ 1493.922271][T19080] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1493.929249][T19078] netlink: 'syz.2.11634': attribute type 1 has an invalid length. [ 1493.944571][T19078] syzkaller0: entered promiscuous mode [ 1493.955849][T13186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1493.959714][T19078] syzkaller0: entered allmulticast mode [ 1493.964130][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1494.052940][T19078] tipc: Resetting bearer [ 1494.079617][T19076] tipc: Resetting bearer [ 1494.116813][T11839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1494.133845][T19076] tipc: Disabling bearer [ 1494.192508][T19053] xfrm0 speed is unknown, defaulting to 1000 [ 1494.737852][T19055] xfrm0 speed is unknown, defaulting to 1000 [ 1495.074273][T19115] FAULT_INJECTION: forcing a failure. [ 1495.074273][T19115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1495.105149][T19115] CPU: 1 UID: 0 PID: 19115 Comm: syz.2.11643 Not tainted syzkaller #0 PREEMPT(full) [ 1495.105174][T19115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1495.105185][T19115] Call Trace: [ 1495.105193][T19115] [ 1495.105201][T19115] dump_stack_lvl+0xe8/0x150 [ 1495.105229][T19115] should_fail_ex+0x412/0x560 [ 1495.105256][T19115] _copy_from_user+0x2d/0xb0 [ 1495.105282][T19115] kstrtouint_from_user+0xd6/0x180 [ 1495.105307][T19115] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1495.105346][T19115] proc_fail_nth_write+0x8e/0x210 [ 1495.105370][T19115] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1495.105400][T19115] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1495.105424][T19115] vfs_write+0x29a/0xb90 [ 1495.105457][T19115] ? __pfx_vfs_write+0x10/0x10 [ 1495.105481][T19115] ? __fget_files+0x2a/0x420 [ 1495.105505][T19115] ? __fget_files+0x3a0/0x420 [ 1495.105523][T19115] ? __fget_files+0x2a/0x420 [ 1495.105551][T19115] ksys_write+0x150/0x270 [ 1495.105576][T19115] ? __pfx_ksys_write+0x10/0x10 [ 1495.105612][T19115] do_syscall_64+0xe2/0xf80 [ 1495.105635][T19115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.105651][T19115] ? trace_irq_disable+0x37/0x100 [ 1495.105668][T19115] ? clear_bhb_loop+0x60/0xb0 [ 1495.105696][T19115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.105714][T19115] RIP: 0033:0x7f344135b78e [ 1495.105730][T19115] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1495.105745][T19115] RSP: 002b:00007f3442251fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1495.105764][T19115] RAX: ffffffffffffffda RBX: 00007f34422526c0 RCX: 00007f344135b78e [ 1495.105777][T19115] RDX: 0000000000000001 RSI: 00007f34422520a0 RDI: 0000000000000003 [ 1495.105789][T19115] RBP: 00007f3442252090 R08: 0000000000000000 R09: 0000000000000000 [ 1495.105800][T19115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1495.105811][T19115] R13: 00007f3441616038 R14: 00007f3441615fa0 R15: 00007fff3f7e5688 [ 1495.105844][T19115] [ 1495.724279][T19120] xfrm0 speed is unknown, defaulting to 1000 [ 1496.016929][T19130] wg1: entered promiscuous mode [ 1496.021830][T19130] wg1: entered allmulticast mode [ 1496.385775][T19136] __nla_validate_parse: 8 callbacks suppressed [ 1496.385794][T19136] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11650'. [ 1496.409729][T19136] netlink: 192 bytes leftover after parsing attributes in process `syz.0.11650'. [ 1496.730500][T19134] xfrm0 speed is unknown, defaulting to 1000 [ 1496.852558][T19140] tipc: Enabled bearer , priority 0 [ 1496.860355][T19140] syzkaller0: entered promiscuous mode [ 1496.866826][T19140] syzkaller0: entered allmulticast mode [ 1496.876783][T19140] netlink: 'syz.4.11651': attribute type 1 has an invalid length. [ 1496.884663][T19140] netlink: 224 bytes leftover after parsing attributes in process `syz.4.11651'. [ 1496.932716][T19140] tipc: Resetting bearer [ 1496.943698][T19138] tipc: Resetting bearer [ 1496.960910][T19138] tipc: Disabling bearer [ 1497.558960][T11829] net_ratelimit: 3 callbacks suppressed [ 1497.558976][T11829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1497.578201][T19151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11656'. [ 1497.733647][T19154] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.11657'. [ 1498.269468][T19160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11659'. [ 1498.554113][T19168] netlink: 'syz.3.11665': attribute type 1 has an invalid length. [ 1498.607608][T11839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1498.683766][T19177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11663'. [ 1498.775263][T19177] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1498.838848][T19172] xfrm0 speed is unknown, defaulting to 1000 [ 1498.867553][T11829] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1498.969922][T19192] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.11672'. [ 1498.984147][T19192] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.11672'. [ 1499.195678][T19206] netlink: 56 bytes leftover after parsing attributes in process `syz.0.11677'. [ 1499.313584][T19199] xfrm0 speed is unknown, defaulting to 1000 [ 1499.332213][T31845] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1499.475959][T11829] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1499.637402][T11829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1499.717680][T16540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1499.726393][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1499.751301][T19231] nbd: device at index 64 is going down [ 1499.780023][T19233] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1499.804624][T19233] bond9 (unregistering): Released all slaves [ 1499.950155][T16991] udevd[16991]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1499.980676][T19242] FAULT_INJECTION: forcing a failure. [ 1499.980676][T19242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1499.999425][T19242] CPU: 0 UID: 0 PID: 19242 Comm: syz.3.11686 Not tainted syzkaller #0 PREEMPT(full) [ 1499.999447][T19242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1499.999457][T19242] Call Trace: [ 1499.999464][T19242] [ 1499.999472][T19242] dump_stack_lvl+0xe8/0x150 [ 1499.999500][T19242] should_fail_ex+0x412/0x560 [ 1499.999525][T19242] _copy_from_user+0x2d/0xb0 [ 1499.999548][T19242] do_sock_getsockopt+0x165/0x3f0 [ 1499.999574][T19242] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1499.999599][T19242] ? ksys_write+0x1fc/0x270 [ 1499.999627][T19242] __x64_sys_getsockopt+0x1a4/0x240 [ 1499.999658][T19242] do_syscall_64+0xe2/0xf80 [ 1499.999679][T19242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1499.999694][T19242] ? trace_irq_disable+0x37/0x100 [ 1499.999710][T19242] ? clear_bhb_loop+0x60/0xb0 [ 1499.999731][T19242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1499.999748][T19242] RIP: 0033:0x7f848499aeb9 [ 1499.999763][T19242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1499.999778][T19242] RSP: 002b:00007f8485779028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1499.999796][T19242] RAX: ffffffffffffffda RBX: 00007f8484c15fa0 RCX: 00007f848499aeb9 [ 1499.999809][T19242] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 1499.999819][T19242] RBP: 00007f8485779090 R08: 0000200000000000 R09: 0000000000000000 [ 1499.999831][T19242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1499.999841][T19242] R13: 00007f8484c16038 R14: 00007f8484c15fa0 R15: 00007ffd0df3f1f8 [ 1499.999872][T19242] [ 1500.000846][T17137] udevd[17137]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1500.080513][T19244] netlink: zone id is out of range [ 1500.223400][T19244] netlink: zone id is out of range [ 1500.240121][T19244] netlink: zone id is out of range [ 1500.248051][T19244] netlink: zone id is out of range [ 1500.359348][T13186] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1500.369470][T13186] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1501.015435][T19274] bridge9: entered promiscuous mode [ 1501.199489][T19281] FAULT_INJECTION: forcing a failure. [ 1501.199489][T19281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1501.213329][T19281] CPU: 1 UID: 0 PID: 19281 Comm: syz.2.11699 Not tainted syzkaller #0 PREEMPT(full) [ 1501.213353][T19281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1501.213364][T19281] Call Trace: [ 1501.213372][T19281] [ 1501.213380][T19281] dump_stack_lvl+0xe8/0x150 [ 1501.213408][T19281] should_fail_ex+0x412/0x560 [ 1501.213433][T19281] _copy_from_user+0x2d/0xb0 [ 1501.213458][T19281] do_tcp_getsockopt+0x22e/0x2950 [ 1501.213488][T19281] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 1501.213507][T19281] ? sock_recv_errqueue+0x580/0x590 [ 1501.213527][T19281] ? __lock_acquire+0x6b5/0x2cf0 [ 1501.213553][T19281] ? _parse_integer_limit+0x1ae/0x1f0 [ 1501.213572][T19281] ? aa_label_sk_perm+0x529/0x6d0 [ 1501.213596][T19281] ? kstrtoull+0x12f/0x1d0 [ 1501.213617][T19281] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1501.213636][T19281] ? kstrtouint+0x6e/0xe0 [ 1501.213658][T19281] ? get_pid_task+0x20/0x1f0 [ 1501.213690][T19281] ? __lock_acquire+0x6b5/0x2cf0 [ 1501.213728][T19281] ? aa_sk_perm+0x15a/0x960 [ 1501.213752][T19281] ? __might_fault+0xaf/0x130 [ 1501.213776][T19281] ? __might_fault+0xaf/0x130 [ 1501.213810][T19281] tcp_getsockopt+0x83/0x130 [ 1501.213828][T19281] ? sock_recv_errqueue+0x580/0x590 [ 1501.213847][T19281] ? sock_recv_errqueue+0x580/0x590 [ 1501.213864][T19281] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1501.213886][T19281] do_sock_getsockopt+0x2d3/0x3f0 [ 1501.213911][T19281] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1501.213936][T19281] ? ksys_write+0x1fc/0x270 [ 1501.213964][T19281] __x64_sys_getsockopt+0x1a4/0x240 [ 1501.213995][T19281] do_syscall_64+0xe2/0xf80 [ 1501.214017][T19281] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1501.214035][T19281] ? trace_irq_disable+0x37/0x100 [ 1501.214052][T19281] ? clear_bhb_loop+0x60/0xb0 [ 1501.214072][T19281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1501.214090][T19281] RIP: 0033:0x7f344139aeb9 [ 1501.214106][T19281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1501.214121][T19281] RSP: 002b:00007f3442252028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1501.214140][T19281] RAX: ffffffffffffffda RBX: 00007f3441615fa0 RCX: 00007f344139aeb9 [ 1501.214153][T19281] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 1501.214164][T19281] RBP: 00007f3442252090 R08: 0000200000000000 R09: 0000000000000000 [ 1501.214176][T19281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1501.214187][T19281] R13: 00007f3441616038 R14: 00007f3441615fa0 R15: 00007fff3f7e5688 [ 1501.214217][T19281] [ 1501.476123][T11829] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1501.987518][T19303] xfrm0 speed is unknown, defaulting to 1000 [ 1502.123340][T19314] __nla_validate_parse: 3 callbacks suppressed [ 1502.123357][T19314] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11709'. [ 1502.141045][T19315] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11709'. [ 1502.570694][T19335] xt_hashlimit: size too large, truncated to 1048576 [ 1502.630799][T19336] 8021q: VLANs not supported on sit0 [ 1502.640044][T19335] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1502.688985][T19329] ¾x9ÿ: renamed from bridge_slave_0 [ 1502.755304][T11839] net_ratelimit: 49 callbacks suppressed [ 1502.755322][T11839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1502.785745][T19339] ip6tnl3: entered promiscuous mode [ 1502.796949][T19339] ip6tnl3: entered allmulticast mode [ 1502.814374][T19345] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11716'. [ 1502.885439][T19345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11716'. [ 1502.896535][T19346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11716'. [ 1502.948185][T19345] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11716'. [ 1502.985183][T19345] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11716'. [ 1503.017506][T19345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11716'. [ 1503.029892][T19351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11717'. [ 1503.034385][T19345] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11716'. [ 1503.745210][T19387] syzkaller0: entered promiscuous mode [ 1503.750723][T19387] syzkaller0: entered allmulticast mode [ 1503.815216][T11829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1504.675082][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1504.837055][T11839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1505.354601][T19421] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1505.434186][T19427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1505.475825][T31848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1505.484156][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1505.598974][T19425] syzkaller0: entered promiscuous mode [ 1505.604488][T19425] syzkaller0: entered allmulticast mode [ 1505.690493][T19438] syzkaller1: entered promiscuous mode [ 1505.700331][T19438] syzkaller1: entered allmulticast mode [ 1505.713329][T19438] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96 [ 1505.877199][T11839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1506.917371][T11829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1507.781441][T19461] __nla_validate_parse: 197 callbacks suppressed [ 1507.781459][T19461] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11753'. [ 1507.799683][T19461] netlink: 'syz.3.11753': attribute type 12 has an invalid length. [ 1507.816953][T31845] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1507.817031][T19461] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11753'. [ 1507.834421][T19461] netlink: 'syz.3.11753': attribute type 12 has an invalid length. [ 1507.838914][T31845] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1507.856925][T31852] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1507.865359][T31852] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1507.894449][T19469] netlink: 276 bytes leftover after parsing attributes in process `syz.4.11754'. [ 1507.959083][T11839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1507.968693][T19472] wg1: entered promiscuous mode [ 1507.973562][T19472] wg1: entered allmulticast mode [ 1508.023134][T19475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11757'. [ 1508.226970][T19491] netlink: 'syz.4.11763': attribute type 2 has an invalid length. [ 1508.279287][T19494] xfrm0 speed is unknown, defaulting to 1000 [ 1508.394086][T19506] syzkaller0: entered promiscuous mode [ 1508.410047][T19506] syzkaller0: entered allmulticast mode [ 1508.452203][T19506] tipc: Enabled bearer , priority 0 [ 1508.494127][T19512] netlink: 'syz.2.11768': attribute type 1 has an invalid length. [ 1508.576126][T19504] tipc: Resetting bearer [ 1508.608058][T19519] netlink: 96 bytes leftover after parsing attributes in process `syz.1.11770'. [ 1508.629512][T19504] tipc: Disabling bearer [ 1508.995787][T11839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1509.190255][T19537] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11775'. [ 1509.200654][T19539] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1509.260187][T19539] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11776'. [ 1509.425382][T19555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11779'. [ 1509.595829][T19560] netlink: 165 bytes leftover after parsing attributes in process `syz.1.11782'. [ 1509.606935][T19560] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.11782'. [ 1509.633128][T19563] netlink: 'syz.2.11783': attribute type 9 has an invalid length. [ 1509.860730][T19576] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1510.036742][T11839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1510.456588][T19599] hsr0: entered promiscuous mode [ 1510.470285][T19599] hsr0: entered allmulticast mode [ 1510.477182][T19599] hsr_slave_0: entered allmulticast mode [ 1510.482959][T19599] hsr_slave_1: entered allmulticast mode [ 1510.594073][T19603] xt_bpf: check failed: parse error [ 1510.607310][T31845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1510.615616][T19610] tipc: Enabled bearer , priority 0 [ 1510.615636][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1510.622998][T19610] syzkaller0: entered promiscuous mode [ 1510.638159][T19610] syzkaller0: entered allmulticast mode [ 1510.651635][T19610] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1510.783511][T19609] tipc: Resetting bearer [ 1510.818432][T19609] tipc: Disabling bearer [ 1510.830788][T19617] openvswitch: netlink: IP tunnel dst address not specified [ 1510.872866][T19621] netlink: 'syz.3.11799': attribute type 1 has an invalid length. [ 1510.989323][T19619] netlink: 'syz.4.11798': attribute type 4 has an invalid length. [ 1511.075172][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1511.084807][T11839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1511.259423][T19641] vlan0: entered promiscuous mode [ 1511.264499][T19641] batadv0: entered promiscuous mode [ 1511.767678][T19675] xfrm0 speed is unknown, defaulting to 1000 [ 1512.078538][T19697] vxcan2: entered allmulticast mode [ 1512.308572][T19683] xfrm0 speed is unknown, defaulting to 1000 [ 1512.666853][T19714] syzkaller1: entered promiscuous mode [ 1512.672431][T19714] syzkaller1: entered allmulticast mode [ 1513.036570][T19721] __nla_validate_parse: 9 callbacks suppressed [ 1513.036590][T19721] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11826'. [ 1513.155229][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1513.166651][T11839] net_ratelimit: 1 callbacks suppressed [ 1513.166667][T11839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1513.252658][T19721] bond0: (slave dummy0): Releasing backup interface [ 1513.261214][T19721] dummy0: left promiscuous mode [ 1513.271674][T19721] batman_adv: batadv0: Adding interface: dummy0 [ 1513.283768][T19721] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1513.335694][T19721] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1513.449719][T19731] xfrm0 speed is unknown, defaulting to 1000 [ 1513.496324][T19736] netlink: 80 bytes leftover after parsing attributes in process `syz.1.11830'. [ 1514.197947][T11839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1514.296911][T19755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11834'. [ 1514.335000][T19755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11834'. [ 1514.354645][T19755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11834'. [ 1515.010977][T19785] lo: Caught tx_queue_len zero misconfig [ 1515.053031][T19790] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11843'. [ 1515.181497][T19790] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1515.250613][T11839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1515.418089][T19806] tipc: Enabled bearer , priority 0 [ 1515.433396][T19806] syzkaller0: entered promiscuous mode [ 1515.448155][T19806] syzkaller0: entered allmulticast mode [ 1515.505469][T19806] tipc: Resetting bearer [ 1515.586759][T19815] syzkaller0: entered promiscuous mode [ 1515.592351][T19815] syzkaller0: entered allmulticast mode [ 1515.648416][T19829] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.11850'. [ 1515.673798][T19806] xfrm0 speed is unknown, defaulting to 1000 [ 1515.988950][T19834] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1516.086795][T19841] : renamed from bond_slave_0 [ 1516.178815][T19805] tipc: Resetting bearer [ 1516.195096][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1516.235378][T19805] tipc: Disabling bearer [ 1516.278239][T11839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1516.307948][T19851] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11857'. [ 1516.340744][T19851] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11857'. [ 1516.361128][T31848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1516.370438][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1516.565147][T19867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11861'. [ 1516.611064][T19865] netlink: 'syz.4.11860': attribute type 1 has an invalid length. [ 1516.777238][T19871] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1516.787918][T19871] bond9: (slave bond10): making interface the new active one [ 1516.799307][T19871] bond9: (slave bond10): Enslaving as an active interface with an up link [ 1516.906931][T19873] syzkaller0: entered promiscuous mode [ 1516.920799][T19882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1516.924682][T19873] syzkaller0: entered allmulticast mode [ 1516.941944][T19879] netlink: 'syz.2.11864': attribute type 15 has an invalid length. [ 1516.995065][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1517.315519][T11839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1517.483969][T19901] netlink: 'syz.2.11870': attribute type 13 has an invalid length. [ 1517.707940][T19907] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1518.360646][T11839] net_ratelimit: 1 callbacks suppressed [ 1518.360661][T11839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1519.242580][T19901] macsec0: left allmulticast mode [ 1519.353122][T19910] xfrm0 speed is unknown, defaulting to 1000 [ 1519.395542][T11832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1519.540205][T19927] __nla_validate_parse: 3 callbacks suppressed [ 1519.540224][T19927] netlink: 64 bytes leftover after parsing attributes in process `syz.3.11876'. [ 1519.575271][T19927] netlink: 64 bytes leftover after parsing attributes in process `syz.3.11876'. [ 1519.615672][T19929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11877'. [ 1519.796875][T19932] netlink: 276 bytes leftover after parsing attributes in process `syz.2.11875'. [ 1519.950378][ T7528] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1519.956154][T19932] syzkaller1: entered promiscuous mode [ 1519.964530][ T7528] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1519.973409][ T7528] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1519.981713][ T7528] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1519.990228][ T7528] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1520.006775][T19940] openvswitch: netlink: Multiple metadata blocks provided [ 1520.028477][T19932] syzkaller1: entered allmulticast mode [ 1520.043889][T22510] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1520.052194][T10371] lec:lec_start_xmit: lec0:No lecd attached [ 1520.058984][T22510] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1520.069060][T22510] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1520.091207][T22510] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1520.106108][T22510] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1520.310055][T19936] xfrm0 speed is unknown, defaulting to 1000 [ 1520.446878][T11829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1520.802712][T31848] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1520.814517][T31848] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1520.833499][T19955] sysfs: cannot create duplicate filename '/class/ieee80211/Ï€ã,ÄûÔxµ…üb©)%ë ]ô‚3DûLÌ¥”!!bíÓÙ.˜>„nS‡#^‘§' [ 1520.849352][T19955] CPU: 0 UID: 0 PID: 19955 Comm: syz.0.11882 Not tainted syzkaller #0 PREEMPT(full) [ 1520.849378][T19955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1520.849391][T19955] Call Trace: [ 1520.849400][T19955] [ 1520.849410][T19955] dump_stack_lvl+0xe8/0x150 [ 1520.849441][T19955] sysfs_warn_dup+0x8e/0xa0 [ 1520.849470][T19955] sysfs_do_create_link_sd+0xc0/0x110 [ 1520.849502][T19955] device_add_class_symlinks+0x1cf/0x240 [ 1520.849524][T19955] device_add+0x475/0xb70 [ 1520.849548][T19955] wiphy_register+0x1d73/0x2d50 [ 1520.849588][T19955] ? __pfx_wiphy_register+0x10/0x10 [ 1520.849613][T19955] ? __pfx_netdev_run_todo+0x10/0x10 [ 1520.849642][T19955] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1520.849673][T19955] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1520.849706][T19955] ieee80211_register_hw+0x3571/0x4220 [ 1520.849726][T19955] ? __lock_acquire+0x6b5/0x2cf0 [ 1520.849775][T19955] ? ieee80211_register_hw+0x1421/0x4220 [ 1520.849806][T19955] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1520.849844][T19955] ? __hrtimer_setup+0x181/0x200 [ 1520.849863][T19955] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1520.849895][T19955] mac80211_hwsim_new_radio+0x2f97/0x5330 [ 1520.849954][T19955] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1520.849977][T19955] ? kstrndup+0xbf/0x160 [ 1520.850009][T19955] hwsim_new_radio_nl+0xf35/0x1bd0 [ 1520.850059][T19955] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1520.850104][T19955] ? rcu_is_watching+0x15/0xb0 [ 1520.850127][T19955] ? __nla_parse+0x40/0x60 [ 1520.850156][T19955] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1520.850192][T19955] genl_family_rcv_msg_doit+0x22a/0x330 [ 1520.850227][T19955] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1520.850268][T19955] ? bpf_lsm_capable+0x9/0x20 [ 1520.850293][T19955] ? security_capable+0x7e/0x2c0 [ 1520.850324][T19955] genl_rcv_msg+0x61c/0x7a0 [ 1520.850359][T19955] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1520.850386][T19955] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1520.850428][T19955] netlink_rcv_skb+0x232/0x4b0 [ 1520.850452][T19955] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1520.850481][T19955] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1520.850500][T19955] ? genl_rcv+0x19/0x40 [ 1520.850546][T19955] ? down_read+0x272/0x2e0 [ 1520.850562][T19955] ? genl_rcv+0xd/0x40 [ 1520.850590][T19955] genl_rcv+0x28/0x40 [ 1520.850614][T19955] netlink_unicast+0x80f/0x9b0 [ 1520.850643][T19955] ? __pfx_netlink_unicast+0x10/0x10 [ 1520.850664][T19955] ? netlink_sendmsg+0x650/0xb40 [ 1520.850685][T19955] ? skb_put+0x11b/0x210 [ 1520.850713][T19955] netlink_sendmsg+0x813/0xb40 [ 1520.850747][T19955] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1520.850786][T19955] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1520.850812][T19955] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1520.850835][T19955] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1520.850857][T19955] ____sys_sendmsg+0xa68/0xad0 [ 1520.850884][T19955] ? __might_fault+0xaf/0x130 [ 1520.850919][T19955] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1520.850956][T19955] ? import_iovec+0x73/0xa0 [ 1520.850990][T19955] ___sys_sendmsg+0x2a5/0x360 [ 1520.851014][T19955] ? __lock_acquire+0x6b5/0x2cf0 [ 1520.851046][T19955] ? __pfx____sys_sendmsg+0x10/0x10 [ 1520.851082][T19955] ? futex_wake+0x4ac/0x580 [ 1520.851133][T19955] ? __fget_files+0x2a/0x420 [ 1520.851155][T19955] ? __fget_files+0x3a0/0x420 [ 1520.851189][T19955] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1520.851218][T19955] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1520.851256][T19955] ? rcu_is_watching+0x15/0xb0 [ 1520.851289][T19955] do_syscall_64+0xe2/0xf80 [ 1520.851314][T19955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.851333][T19955] ? trace_irq_disable+0x37/0x100 [ 1520.851353][T19955] ? clear_bhb_loop+0x60/0xb0 [ 1520.851377][T19955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.851396][T19955] RIP: 0033:0x7fe26619aeb9 [ 1520.851414][T19955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1520.851431][T19955] RSP: 002b:00007fe266f9c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1520.851453][T19955] RAX: ffffffffffffffda RBX: 00007fe266415fa0 RCX: 00007fe26619aeb9 [ 1520.851469][T19955] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 1520.851482][T19955] RBP: 00007fe266208c1f R08: 0000000000000000 R09: 0000000000000000 [ 1520.851495][T19955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1520.851507][T19955] R13: 00007fe266416038 R14: 00007fe266415fa0 R15: 00007ffff07bc1b8 [ 1520.851542][T19955] [ 1521.475277][T11829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1521.811786][T31848] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1521.832003][T31848] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.890931][T19980] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11888'. [ 1522.051729][T31848] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1522.072467][T31848] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.116586][T31850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1522.125469][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1522.195304][T22510] Bluetooth: hci0: command tx timeout [ 1522.231529][T31848] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1522.284509][T31848] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.424097][T19984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11890'. [ 1522.531181][T13186] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1522.573176][T11832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1522.628700][T31852] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1522.672596][T19936] chnl_net:caif_netlink_parms(): no params data found [ 1522.843338][T31850] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1522.891499][T31850] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1523.019904][T31848] veth7: left allmulticast mode [ 1523.024801][T31848] veth7: left promiscuous mode [ 1523.030955][T31848] bridge2: port 2(veth7) entered disabled state [ 1523.043930][T31848] ip6gretap1: left allmulticast mode [ 1523.052812][T31848] ip6gretap1: left promiscuous mode [ 1523.061342][T31848] bridge2: port 1(ip6gretap1) entered disabled state [ 1523.447343][T31848] team0: Port device geneve0 removed [ 1523.636728][T11829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1523.686995][T31848] bond6 (unregistering): (slave bridge5): Releasing active interface [ 1523.879970][T31848] bond1 (unregistering): Released all slaves [ 1523.900815][T31848] bond2 (unregistering): Released all slaves [ 1523.921744][T31848] bond3 (unregistering): Released all slaves [ 1523.942938][T31848] bond4 (unregistering): Released all slaves [ 1523.971297][T31848] bond5 (unregistering): Released all slaves [ 1524.002069][T31848] bond0 (unregistering): Released all slaves [ 1524.038885][T31848] bond6 (unregistering): Released all slaves [ 1524.055490][T31848] bond7 (unregistering): Released all slaves [ 1524.171608][T19936] bridge0: port 1(bridge_slave_0) entered blocking state [ 1524.213805][T19936] bridge0: port 1(bridge_slave_0) entered disabled state [ 1524.229014][T19936] bridge_slave_0: entered allmulticast mode [ 1524.245930][T19936] bridge_slave_0: entered promiscuous mode [ 1524.256410][T19936] bridge0: port 2(bridge_slave_1) entered blocking state [ 1524.263529][T19936] bridge0: port 2(bridge_slave_1) entered disabled state [ 1524.270780][T19936] bridge_slave_1: entered allmulticast mode [ 1524.277088][T22510] Bluetooth: hci0: command tx timeout [ 1524.319154][T19936] bridge_slave_1: entered promiscuous mode [ 1524.322492][T20032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11897'. [ 1524.459389][T20030] lo: entered allmulticast mode [ 1524.465536][T20030] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1524.503488][T19936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1524.548391][T19936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1524.653349][T19936] team0: Port device team_slave_0 added [ 1524.678446][T11832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1524.682340][T19936] team0: Port device team_slave_1 added [ 1524.770951][T19936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1524.792727][T19936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1524.868405][T19936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1524.895375][T20051] Bluetooth: MGMT ver 1.23 [ 1524.929780][T20060] netlink: 'syz.4.11902': attribute type 10 has an invalid length. [ 1524.934904][T19936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1524.961354][T19936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1525.035897][T19936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1525.072428][T20057] xfrm0 speed is unknown, defaulting to 1000 [ 1525.483962][T19936] hsr_slave_0: entered promiscuous mode [ 1525.493021][T19936] hsr_slave_1: entered promiscuous mode [ 1525.501371][T19936] debugfs: 'hsr0' already exists in 'hsr' [ 1525.507467][T19936] Cannot create hsr debugfs directory [ 1525.714919][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5660 ms [ 1525.715965][T11829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1525.722933][ C0] lec:lec_tx_timeout: lec0 [ 1525.769176][T20089] "syz.4.11909" (20089) uses obsolete ecb(arc4) skcipher [ 1525.868318][T31848] !©9: left promiscuous mode [ 1525.931602][T20095] syz_tun: entered allmulticast mode [ 1525.977438][T31848] tipc: Disabling bearer [ 1525.984311][T31848] tipc: Left network mode [ 1526.030417][T19936] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.160329][T20106] netlink: zone id is out of range [ 1526.172142][T20106] netlink: zone id is out of range [ 1526.187941][T20106] netlink: zone id is out of range [ 1526.193064][T20106] netlink: zone id is out of range [ 1526.207694][T19936] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.226915][T20106] netlink: zone id is out of range [ 1526.233595][T20106] netlink: zone id is out of range [ 1526.361114][ T7528] Bluetooth: hci0: command tx timeout [ 1526.437415][T19936] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.640129][T19936] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.669387][T20124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11916'. [ 1526.705191][T20127] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.11916'. [ 1526.729873][T20127] bridge_slave_1: default FDB implementation only supports local addresses [ 1526.925026][T22510] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1527.418836][T20134] bond7: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1527.456404][T20134] bond7 (unregistering): Released all slaves [ 1527.536044][T19936] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1527.593916][T19936] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1527.664959][T19936] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1527.701843][T19936] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1527.855291][ T30] audit: type=1800 audit(1770477268.624:48): pid=20160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.11921" name=CB dev="tmpfs" ino=2975 res=0 errno=0 [ 1528.130417][T19936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1528.167613][T20175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11926'. [ 1528.204767][T19936] 8021q: adding VLAN 0 to HW filter on device team0 [ 1528.363330][T20191] netlink: 'syz.4.11930': attribute type 12 has an invalid length. [ 1528.377616][T20191] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.11930'. [ 1528.401300][T31850] bridge0: port 1(bridge_slave_0) entered blocking state [ 1528.408777][T31850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1528.444288][T22510] Bluetooth: hci0: command 0x0419 tx timeout [ 1528.836041][T11832] net_ratelimit: 86 callbacks suppressed [ 1528.836056][T11832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1528.945479][T31848] team0 (unregistering): Port device team_slave_1 removed [ 1528.964612][T31848] team0 (unregistering): Port device team_slave_0 removed [ 1529.119854][T20191] netlink: 'syz.4.11930': attribute type 5 has an invalid length. [ 1529.267579][T20209] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1529.318173][T20209] bond5 (unregistering): Released all slaves [ 1529.479649][T31850] bridge0: port 2(bridge_slave_1) entered blocking state [ 1529.486849][T31850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1529.564120][T20244] netlink: 'syz.0.11936': attribute type 13 has an invalid length. [ 1529.592184][T20245] netlink: zone id is out of range [ 1529.592975][T20242] netlink: 'syz.2.11938': attribute type 8 has an invalid length. [ 1529.640521][T20245] netlink: zone id is out of range [ 1529.660421][T20245] netlink: zone id is out of range [ 1529.709867][T20245] netlink: zone id is out of range [ 1529.727593][T20245] netlink: zone id is out of range [ 1529.732736][T20245] netlink: zone id is out of range [ 1529.776288][T20256] netlink: 64 bytes leftover after parsing attributes in process `syz.4.11939'. [ 1529.790317][T20248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11936'. [ 1529.806688][T20245] netlink: zone id is out of range [ 1529.811826][T20245] netlink: zone id is out of range [ 1529.849689][T20245] netlink: zone id is out of range [ 1530.165998][T20244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1530.184121][T20244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1530.435191][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1530.515316][T22510] Bluetooth: hci0: command 0x0419 tx timeout [ 1530.520339][T31846] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1530.549645][T31846] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.594701][T31846] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1530.603381][T31846] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.647771][T31850] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1530.692575][T31850] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.712605][T31850] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1530.740186][T31850] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.788253][T31848] IPVS: stop unused estimator thread 0... [ 1530.973410][T19936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1531.031316][T19936] veth0_vlan: entered promiscuous mode [ 1531.048087][T19936] veth1_vlan: entered promiscuous mode [ 1531.086662][T19936] veth0_macvtap: entered promiscuous mode [ 1531.112885][T19936] veth1_macvtap: entered promiscuous mode [ 1531.152576][T19936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1531.173324][T19936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1531.190582][T31850] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.209486][T31850] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.230437][T31850] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.262333][T31850] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1533.019161][T20268] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1533.137018][T31846] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1533.177590][T31846] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1533.219500][T31846] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1533.236661][T31846] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1533.274566][T20348] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11958'. [ 1533.303305][T20354] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11959'. [ 1533.346048][T20354] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11959'. [ 1533.655243][T20373] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11965'. [ 1533.925730][T20388] netlink: 292 bytes leftover after parsing attributes in process `syz.0.11968'. [ 1533.945742][ T7528] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1533.959620][ T7528] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1533.967998][ T7528] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1533.996230][ T7528] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1534.007431][ T7528] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1534.065527][T20387] xfrm0 speed is unknown, defaulting to 1000 [ 1534.174617][T20395] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11971'. [ 1534.188690][ T8906] syz_tun (unregistering): left allmulticast mode [ 1534.430699][T20407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11975'. [ 1534.455198][T20407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11975'. [ 1534.537030][T20409] netlink: 'syz.3.11976': attribute type 4 has an invalid length. [ 1534.594783][T20413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11974'. [ 1534.624396][T20413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11974'. [ 1535.139730][T20425] xfrm0 speed is unknown, defaulting to 1000 [ 1535.554689][T20442] veth6: entered allmulticast mode [ 1535.781689][T20387] chnl_net:caif_netlink_parms(): no params data found [ 1536.070491][T20455] tipc: Enabled bearer , priority 0 [ 1536.115392][ T7528] Bluetooth: hci3: command tx timeout [ 1536.124768][T20455] syzkaller0: entered promiscuous mode [ 1536.130324][T20455] syzkaller0: entered allmulticast mode [ 1536.309137][T20462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1536.327594][T20462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1536.351655][T20462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1536.375157][T20462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1536.548292][T20387] bridge0: port 1(bridge_slave_0) entered blocking state [ 1536.567508][T20387] bridge0: port 1(bridge_slave_0) entered disabled state [ 1536.582841][T20387] bridge_slave_0: entered allmulticast mode [ 1536.606872][T20387] bridge_slave_0: entered promiscuous mode [ 1536.632260][T20468] tipc: Enabling of bearer rejected, failed to enable media [ 1536.644380][T20470] tipc: Resetting bearer [ 1536.661088][T20454] tipc: Resetting bearer [ 1536.690678][T20454] tipc: Disabling bearer [ 1536.704278][T20387] bridge0: port 2(bridge_slave_1) entered blocking state [ 1536.721875][T20387] bridge0: port 2(bridge_slave_1) entered disabled state [ 1536.735752][T20387] bridge_slave_1: entered allmulticast mode [ 1536.757988][T20387] bridge_slave_1: entered promiscuous mode [ 1536.911903][T20387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1536.930193][T20387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1536.993515][T20387] team0: Port device team_slave_0 added [ 1537.003075][T20387] team0: Port device team_slave_1 added [ 1537.023197][T20487] xfrm0 speed is unknown, defaulting to 1000 [ 1537.222773][T20387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1537.242721][T20387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1537.307271][T20387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1537.373965][T20387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1537.412126][T20387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1537.503247][T20387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1537.784575][T20387] hsr_slave_0: entered promiscuous mode [ 1537.805788][T20387] hsr_slave_1: entered promiscuous mode [ 1537.816260][T20387] debugfs: 'hsr0' already exists in 'hsr' [ 1537.825968][T20387] Cannot create hsr debugfs directory [ 1537.874134][T20495] xfrm0 speed is unknown, defaulting to 1000 [ 1537.888342][T20505] Cannot find add_set index 3 as target [ 1538.195021][ T7528] Bluetooth: hci3: command tx timeout [ 1538.361561][T20517] bond1: option resend_igmp: invalid value (2878) [ 1538.372054][T20517] bond1: option resend_igmp: allowed values 0 - 255 [ 1538.386028][T20517] bond1 (unregistering): Released all slaves [ 1539.380720][T20557] netlink: 'syz.0.12011': attribute type 30 has an invalid length. [ 1539.535476][T20387] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1539.573126][T20387] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1539.603777][T20387] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1539.667555][T20387] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1539.826448][T20571] syzkaller0: entered promiscuous mode [ 1539.832030][T20571] syzkaller0: entered allmulticast mode [ 1540.276056][ T7528] Bluetooth: hci3: command tx timeout [ 1540.305087][T20597] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1542.009903][T20387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1542.070258][T20387] 8021q: adding VLAN 0 to HW filter on device team0 [ 1542.087006][T20613] net_ratelimit: 79 callbacks suppressed [ 1542.087023][T20613] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1542.123703][T31852] bridge0: port 1(bridge_slave_0) entered blocking state [ 1542.130889][T31852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1542.156670][T20613] __nla_validate_parse: 4 callbacks suppressed [ 1542.156686][T20613] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12023'. [ 1542.193795][T31844] bridge0: port 2(bridge_slave_1) entered blocking state [ 1542.200974][T31844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1542.232542][T20615] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12024'. [ 1542.373905][ T7528] Bluetooth: hci3: command tx timeout [ 1542.381659][T20622] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12024'. [ 1542.400075][T20623] xfrm0 speed is unknown, defaulting to 1000 [ 1542.410669][T20633] syzkaller0: entered promiscuous mode [ 1542.441500][T20622] nbd: device at index 64 is going down [ 1542.451606][T20633] syzkaller0: entered allmulticast mode [ 1542.501823][T20628] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1542.578504][T19944] udevd[19944]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1542.760475][T20387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1542.925695][T20648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12030'. [ 1543.008735][T20652] netlink: 7 bytes leftover after parsing attributes in process `syz.0.12031'. [ 1543.142567][T20656] tipc: Enabled bearer , priority 0 [ 1543.157129][T20387] veth0_vlan: entered promiscuous mode [ 1543.178844][T20656] syzkaller0: entered promiscuous mode [ 1543.186385][T20656] syzkaller0: entered allmulticast mode [ 1543.201627][T20387] veth1_vlan: entered promiscuous mode [ 1543.381990][T20656] tipc: Resetting bearer [ 1543.440020][T20656] tipc: Disabling bearer [ 1543.469310][T20387] veth0_macvtap: entered promiscuous mode [ 1543.483208][T20387] veth1_macvtap: entered promiscuous mode [ 1543.529260][T20387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1543.546791][T20666] netlink: 'syz.1.12034': attribute type 1 has an invalid length. [ 1543.558123][T20667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12034'. [ 1543.563511][T20387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1543.585287][T20667] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12034'. [ 1543.587528][T31850] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1543.624058][T31850] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1543.685407][T20666] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1543.731779][T31850] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1543.763152][T31850] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1543.803076][T20645] infiniband !yz!: set down [ 1543.833471][T20645] infiniband !yz!: added team_slave_0 [ 1543.986182][T20645] RDS/IB: !yz!: added [ 1543.990254][T20645] smc: adding ib device !yz! with port count 1 [ 1544.004745][T20645] smc: ib device !yz! port 1 has no pnetid [ 1544.040057][T16540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1544.051892][T20673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12036'. [ 1544.068205][T16540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1544.146213][T20680] netlink: 'syz.1.12038': attribute type 1 has an invalid length. [ 1544.172693][T31852] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1544.188565][T31852] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1544.197917][T20680] netlink: 224 bytes leftover after parsing attributes in process `syz.1.12038'. [ 1544.448251][T20686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12039'. [ 1545.201038][T20723] gretap4: entered promiscuous mode [ 1545.210222][T20723] batman_adv: batadv0: Adding interface: gretap4 [ 1545.217121][T20723] batman_adv: batadv0: The MTU of interface gretap4 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 1545.243554][T20723] batman_adv: batadv0: Not using interface gretap4 (retrying later): interface not active [ 1545.818389][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1545.837794][T20749] pim6reg: entered allmulticast mode [ 1545.844161][T20749] pim6reg: left allmulticast mode [ 1547.397382][T20785] netlink: 'syz.4.12065': attribute type 1 has an invalid length. [ 1547.407779][T20787] xfrm0 speed is unknown, defaulting to 1000 [ 1547.795670][T20794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1548.859234][T20807] __nla_validate_parse: 6 callbacks suppressed [ 1548.859251][T20807] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12072'. [ 1549.435775][T20818] openvswitch: netlink: Flow actions attr not present in new flow. [ 1549.529250][T20820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12077'. [ 1549.542554][T20820] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12077'. [ 1549.552836][T20820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12077'. [ 1549.562394][T20820] netlink: 'syz.3.12077': attribute type 5 has an invalid length. [ 1550.215688][T20853] netlink: 52 bytes leftover after parsing attributes in process `syz.3.12085'. [ 1550.248458][T20853] netlink: 52 bytes leftover after parsing attributes in process `syz.3.12085'. [ 1550.382233][T20858] netlink: 52 bytes leftover after parsing attributes in process `syz.3.12086'. [ 1550.505446][T20864] netlink: 88 bytes leftover after parsing attributes in process `syz.3.12088'. [ 1550.825204][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1550.833256][ C0] lec:lec_tx_timeout: lec0 [ 1551.196055][T20891] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12094'. [ 1551.206022][T22510] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1551.215361][T22510] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1551.223305][T22510] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1551.232107][T22510] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1551.247141][T22510] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1551.332530][T20897] xfrm0 speed is unknown, defaulting to 1000 [ 1551.564452][T20905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12100'. [ 1552.086958][T20934] xfrm0: entered promiscuous mode [ 1552.125079][T20934] xfrm0: entered allmulticast mode [ 1552.142117][T20935] pim6reg: entered allmulticast mode [ 1552.168729][T20935] netlink: 'syz.4.12106': attribute type 20 has an invalid length. [ 1552.335401][T20932] pim6reg: left allmulticast mode [ 1552.398623][T31850] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.475200][T31845] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.556118][T31845] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.567464][T31845] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.636579][T20946] xfrm0: entered promiscuous mode [ 1553.404988][T22510] Bluetooth: hci4: command tx timeout [ 1553.469593][T31846] batman_adv: batadv0: Removing interface: gretap3 [ 1553.867934][T31846] bond8 (unregistering): (slave bridge6): Releasing active interface [ 1554.190410][T31846] bond0 (unregistering): (slave 32): Releasing backup interface [ 1554.200913][T31846] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1554.216143][T31846] bond0 (unregistering): Released all slaves [ 1554.226996][T31846] bond1 (unregistering): Released all slaves [ 1554.240133][T31846] bond2 (unregistering): Released all slaves [ 1554.255176][T31846] bond3 (unregistering): Released all slaves [ 1554.270462][T31846] bond4 (unregistering): Released all slaves [ 1554.283113][T31846] bond5 (unregistering): Released all slaves [ 1554.299481][T31846] bond6 (unregistering): Released all slaves [ 1554.314143][T31846] bond7 (unregistering): Released all slaves [ 1554.329474][T31846] bond8 (unregistering): Released all slaves [ 1554.352720][T20963] bridge_slave_0: left allmulticast mode [ 1554.361172][T20963] bridge_slave_0: left promiscuous mode [ 1554.368648][T20963] bridge0: port 1(bridge_slave_0) entered disabled state [ 1554.381918][T20963] bridge_slave_1: left allmulticast mode [ 1554.388233][T20963] bridge_slave_1: left promiscuous mode [ 1554.394138][T20963] bridge0: port 2(bridge_slave_1) entered disabled state [ 1554.409001][T20963] bond0: (slave bond_slave_0): Releasing backup interface [ 1554.436158][T20963] bond0: (slave bond_slave_1): Releasing backup interface [ 1554.478673][T20963] team0: Port device team_slave_0 removed [ 1554.503427][T20963] team0: Port device team_slave_1 removed [ 1554.516039][T20963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1554.523448][T20963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1554.534417][T20963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1554.542437][T20963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1554.551209][T20963] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1554.648469][T31846] tipc: Left network mode [ 1554.686521][T20955] xfrm0 speed is unknown, defaulting to 1000 [ 1555.476489][T22510] Bluetooth: hci4: command tx timeout [ 1555.593482][T20897] chnl_net:caif_netlink_parms(): no params data found [ 1556.025766][T20897] bridge0: port 1(bridge_slave_0) entered blocking state [ 1556.033176][T20897] bridge0: port 1(bridge_slave_0) entered disabled state [ 1556.047935][T20897] bridge_slave_0: entered allmulticast mode [ 1556.056300][T21028] __nla_validate_parse: 4 callbacks suppressed [ 1556.056315][T21028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12127'. [ 1556.057427][T20897] bridge_slave_0: entered promiscuous mode [ 1556.108693][T20897] bridge0: port 2(bridge_slave_1) entered blocking state [ 1556.136149][T20897] bridge0: port 2(bridge_slave_1) entered disabled state [ 1556.148908][T20897] bridge_slave_1: entered allmulticast mode [ 1556.166578][T20897] bridge_slave_1: entered promiscuous mode [ 1556.407329][ T30] audit: type=1107 audit(1770477297.174:49): pid=21040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1556.474253][T20897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1556.510149][T20897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1557.148324][T20897] team0: Port device team_slave_0 added [ 1557.187609][T20897] team0: Port device team_slave_1 added [ 1557.514351][T21071] netlink: 'syz.0.12136': attribute type 4 has an invalid length. [ 1557.557392][T22510] Bluetooth: hci4: command tx timeout [ 1557.585449][T20897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1557.592383][T20897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1557.757954][T21080] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1557.759944][T20897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1557.883202][T20897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1557.894737][T20897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1557.922383][T20897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1557.992212][T31846] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1558.103353][T31846] pim6reg99999999 (unregistering): left allmulticast mode [ 1558.407081][T16540] smc: removing ib device !yz! [ 1558.776761][T20897] hsr_slave_0: entered promiscuous mode [ 1558.807279][T20897] hsr_slave_1: entered promiscuous mode [ 1558.814817][T20897] debugfs: 'hsr0' already exists in 'hsr' [ 1558.848786][T21109] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12144'. [ 1558.858128][T20897] Cannot create hsr debugfs directory [ 1558.913196][T21109] ipvlan0: entered promiscuous mode [ 1558.933409][T21109] ipvlan0: left promiscuous mode [ 1558.950986][T21107] xt_limit: Overflow, try lower: 271964/0 [ 1559.404588][T21130] sctp: [Deprecated]: syz.1.12148 (pid 21130) Use of int in maxseg socket option. [ 1559.404588][T21130] Use struct sctp_assoc_value instead [ 1559.486301][T21136] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12149'. [ 1559.550659][T21130] lo: left allmulticast mode [ 1559.635757][T22510] Bluetooth: hci4: command tx timeout [ 1559.980350][T21144] pimreg: entered allmulticast mode [ 1560.107120][T21120] xfrm0 speed is unknown, defaulting to 1000 [ 1560.703821][T20897] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.876514][T20897] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1561.068710][T20897] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1561.486081][T21192] netlink: 'syz.0.12156': attribute type 2 has an invalid length. [ 1561.510754][T20897] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1561.636830][T21192] !: entered promiscuous mode [ 1562.024755][T20897] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1562.125672][T20897] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1562.169044][T20897] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1562.263893][T20897] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1562.604640][T20897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1562.684186][T23140] IPVS: starting estimator thread 0... [ 1562.712456][T20897] 8021q: adding VLAN 0 to HW filter on device team0 [ 1562.785260][T21237] IPVS: using max 33 ests per chain, 79200 per kthread [ 1562.793929][T13186] bridge0: port 1(bridge_slave_0) entered blocking state [ 1562.801103][T13186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1562.858771][T31845] bridge0: port 2(bridge_slave_1) entered blocking state [ 1562.865955][T31845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1563.331879][T21257] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12167'. [ 1563.452009][T31846] IPVS: stop unused estimator thread 0... [ 1564.017745][T21280] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12170'. [ 1564.087776][T21284] : entered promiscuous mode [ 1564.263199][T20897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1564.414047][T20897] veth0_vlan: entered promiscuous mode [ 1564.461908][T20897] veth1_vlan: entered promiscuous mode [ 1564.492903][T21298] netlink: 576 bytes leftover after parsing attributes in process `syz.4.12174'. [ 1564.562755][T21305] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1564.585883][T20897] veth0_macvtap: entered promiscuous mode [ 1564.607506][T21304] batadv1: entered promiscuous mode [ 1564.668914][T20897] veth1_macvtap: entered promiscuous mode [ 1564.724444][T20897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1564.823684][T20897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1564.892053][T31845] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1564.957873][T31845] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1564.986160][T31845] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1565.011399][T31845] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1565.135657][T21337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12181'. [ 1565.190284][T13186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1565.206234][T13186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1565.291286][T16540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1565.301826][T16540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1565.397241][T21342] dummy0: entered promiscuous mode [ 1565.417307][T21342] dummy0: left promiscuous mode [ 1565.635048][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1565.709020][T21353] bond1: option lacp_active: mode dependency failed, not supported in mode balance-tlb(5) [ 1565.767656][T21353] bond1 (unregistering): Released all slaves [ 1565.853136][ T7528] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1565.862524][ T7528] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1565.870381][ T7528] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1565.913807][ T7528] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1565.925552][ T7528] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1566.046600][T21369] xfrm0 speed is unknown, defaulting to 1000 [ 1566.567427][T21403] netlink: 'syz.4.12196': attribute type 1 has an invalid length. [ 1566.591029][T21403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12196'. [ 1566.623178][T21398] syzkaller0: entered promiscuous mode [ 1566.646866][T21398] syzkaller0: entered allmulticast mode [ 1566.666393][T21394] tipc: Started in network mode [ 1566.671402][T21394] tipc: Node identity b6253e67c78d, cluster identity 4711 [ 1566.692285][T21394] tipc: Enabled bearer , priority 0 [ 1566.702094][T21363] xfrm0 speed is unknown, defaulting to 1000 [ 1566.786731][T21394] tipc: Resetting bearer [ 1566.801054][T21393] tipc: Resetting bearer [ 1566.843759][T21393] tipc: Disabling bearer [ 1566.868256][T21409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12197'. [ 1566.947991][T21410] netlink: 212320 bytes leftover after parsing attributes in process `syz.4.12197'. [ 1567.000663][T21412] netlink: 'syz.3.12198': attribute type 10 has an invalid length. [ 1567.046102][T21412] team0: Failed to send options change via netlink (err -105) [ 1567.064984][T21412] team0: Port device dummy0 added [ 1567.080470][T21413] netlink: 'syz.3.12198': attribute type 10 has an invalid length. [ 1567.098221][T21413] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1567.121587][T21413] team0: Failed to send options change via netlink (err -105) [ 1567.132116][T21413] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1567.142345][T21413] team0: Port device dummy0 removed [ 1567.153479][T21413] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1567.171873][T21399] xfrm0 speed is unknown, defaulting to 1000 [ 1567.245363][T31846] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1567.324212][T31845] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1567.391926][T31845] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1567.472647][T31845] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1567.959110][T22510] Bluetooth: hci1: command tx timeout [ 1568.429908][T31844] bond4 (unregistering): (slave gretap1): Releasing active interface [ 1568.481483][T31844] bond6 (unregistering): (slave gretap3): Releasing active interface [ 1568.497179][T31844] batman_adv: batadv0: Removing interface: gretap4 [ 1568.939575][T31844] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1568.952070][T31844] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1568.961815][T31844] bond0 (unregistering): Released all slaves [ 1568.972713][T31844] bond1 (unregistering): Released all slaves [ 1568.987438][T31844] bond2 (unregistering): Released all slaves [ 1569.008704][T31844] bond3 (unregistering): (slave veth5): Releasing active interface [ 1569.017945][T31844] bond3 (unregistering): Released all slaves [ 1569.032517][T31844] bond4 (unregistering): Released all slaves [ 1569.045585][T31844] bond5 (unregistering): Released all slaves [ 1569.059114][T31844] bond6 (unregistering): Released all slaves [ 1569.077493][T31844] bond7 (unregistering): Released all slaves [ 1569.114552][T21445] macsec1: entered promiscuous mode [ 1569.202087][T21433] xfrm0 speed is unknown, defaulting to 1000 [ 1569.222778][T31844] !: left promiscuous mode [ 1569.337017][T31844] tipc: Left network mode [ 1569.862943][T21363] chnl_net:caif_netlink_parms(): no params data found [ 1570.035754][T22510] Bluetooth: hci1: command tx timeout [ 1570.289577][T21363] bridge0: port 1(bridge_slave_0) entered blocking state [ 1570.305266][T21363] bridge0: port 1(bridge_slave_0) entered disabled state [ 1570.312453][T21363] bridge_slave_0: entered allmulticast mode [ 1570.320607][T21363] bridge_slave_0: entered promiscuous mode [ 1570.330565][T21363] bridge0: port 2(bridge_slave_1) entered blocking state [ 1570.340328][T21363] bridge0: port 2(bridge_slave_1) entered disabled state [ 1570.357268][T21363] bridge_slave_1: entered allmulticast mode [ 1570.365877][T21363] bridge_slave_1: entered promiscuous mode [ 1570.716557][T21478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1570.732369][T21478] 8021q: adding VLAN 0 to HW filter on device team0 [ 1570.741532][T21478] batman_adv: batadv0: Interface activated: dummy0 [ 1570.748580][T21478] batadv0: mtu less than device minimum [ 1570.755695][T21478] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1570.767829][T21478] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1570.779553][T21478] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1570.791279][T21478] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1570.803004][T21478] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1570.814737][T21478] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1570.826379][T21478] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1570.838118][T21478] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1570.849826][T21478] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1571.026876][T31848] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 1571.048278][T31848] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 1571.072069][T31848] bond0: now running without any active interface! [ 1571.199591][T31844] hsr_slave_0: left promiscuous mode [ 1571.206188][T31844] hsr_slave_1: left promiscuous mode [ 1571.212024][T31844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1571.219924][T31844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1571.251456][T31844] pim6reg99999999 (unregistering): left allmulticast mode [ 1571.450151][T31844] ` (unregistering): Port device team_slave_1 removed [ 1571.464679][T31844] ` (unregistering): Port device team_slave_0 removed [ 1571.493116][T31850] smc: removing ib device syû [ 1571.569034][T31844] ` (unregistering): Port device dummy0 removed [ 1571.606309][T21363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1571.622896][T21363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1571.821373][T21498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12210'. [ 1571.905855][T21502] netlink: 'syz.1.12211': attribute type 1 has an invalid length. [ 1571.913737][T21502] netlink: 240 bytes leftover after parsing attributes in process `syz.1.12211'. [ 1571.993415][T21363] team0: Port device team_slave_0 added [ 1572.054528][T21507] wg1: entered promiscuous mode [ 1572.072190][T21507] wg1: entered allmulticast mode [ 1572.115160][T22510] Bluetooth: hci1: command tx timeout [ 1572.124692][T21363] team0: Port device team_slave_1 added [ 1572.378666][T21363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1572.390182][T21363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1572.463386][T21363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1572.561882][T21363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1572.600580][T21363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1572.683521][T21363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1572.840448][T21536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12216'. [ 1573.052576][T21363] hsr_slave_0: entered promiscuous mode [ 1573.086490][T21363] hsr_slave_1: entered promiscuous mode [ 1573.092923][T21363] debugfs: 'hsr0' already exists in 'hsr' [ 1573.120094][T21363] Cannot create hsr debugfs directory [ 1573.326558][T21553] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12220'. [ 1573.410341][T21552] tipc: Started in network mode [ 1573.429538][T21552] tipc: Node identity b24b35e49174, cluster identity 4711 [ 1573.457725][T21552] tipc: Enabled bearer , priority 0 [ 1573.508990][T21557] veth0_vlan: left promiscuous mode [ 1573.517870][T21557] veth0_vlan: entered promiscuous mode [ 1573.801524][T21568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12223'. [ 1574.017245][T21552] tipc: Disabling bearer [ 1574.106658][T21363] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1574.195422][T22510] Bluetooth: hci1: command tx timeout [ 1574.405139][T21595] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12227'. [ 1574.847989][T21363] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1575.070920][T21363] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1575.209626][T21363] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1575.268591][T21626] FAULT_INJECTION: forcing a failure. [ 1575.268591][T21626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1575.293251][T21626] CPU: 1 UID: 0 PID: 21626 Comm: syz.2.12231 Not tainted syzkaller #0 PREEMPT(full) [ 1575.293274][T21626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1575.293285][T21626] Call Trace: [ 1575.293293][T21626] [ 1575.293301][T21626] dump_stack_lvl+0xe8/0x150 [ 1575.293328][T21626] should_fail_ex+0x412/0x560 [ 1575.293354][T21626] _copy_to_user+0x31/0xb0 [ 1575.293383][T21626] bpf_prog_test_run_raw_tp+0x511/0x6c0 [ 1575.293406][T21626] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 1575.293426][T21626] ? __fget_files+0x2a/0x420 [ 1575.293450][T21626] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 1575.293470][T21626] bpf_prog_test_run+0x2c7/0x340 [ 1575.293494][T21626] __sys_bpf+0x5cb/0x920 [ 1575.293514][T21626] ? __pfx___sys_bpf+0x10/0x10 [ 1575.293548][T21626] ? ksys_write+0x242/0x270 [ 1575.293573][T21626] ? __pfx_ksys_write+0x10/0x10 [ 1575.293603][T21626] __x64_sys_bpf+0x7c/0x90 [ 1575.293628][T21626] do_syscall_64+0xe2/0xf80 [ 1575.293650][T21626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1575.293667][T21626] ? trace_irq_disable+0x37/0x100 [ 1575.293683][T21626] ? clear_bhb_loop+0x60/0xb0 [ 1575.293705][T21626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1575.293722][T21626] RIP: 0033:0x7fd770b9aeb9 [ 1575.293738][T21626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1575.293753][T21626] RSP: 002b:00007fd771a97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1575.293772][T21626] RAX: ffffffffffffffda RBX: 00007fd770e15fa0 RCX: 00007fd770b9aeb9 [ 1575.293784][T21626] RDX: 000000000000000c RSI: 00002000000003c0 RDI: 000000000000000a [ 1575.293795][T21626] RBP: 00007fd771a97090 R08: 0000000000000000 R09: 0000000000000000 [ 1575.293806][T21626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1575.293815][T21626] R13: 00007fd770e16038 R14: 00007fd770e15fa0 R15: 00007ffc923e99d8 [ 1575.293845][T21626] [ 1576.085569][T21645] veth3: entered promiscuous mode [ 1576.412667][T31844] IPVS: stop unused estimator thread 0... [ 1577.084158][T21683] FAULT_INJECTION: forcing a failure. [ 1577.084158][T21683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1577.099292][T21683] CPU: 1 UID: 0 PID: 21683 Comm: syz.2.12241 Not tainted syzkaller #0 PREEMPT(full) [ 1577.099315][T21683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1577.099327][T21683] Call Trace: [ 1577.099335][T21683] [ 1577.099342][T21683] dump_stack_lvl+0xe8/0x150 [ 1577.099369][T21683] should_fail_ex+0x412/0x560 [ 1577.099396][T21683] _copy_to_user+0x31/0xb0 [ 1577.099423][T21683] simple_read_from_buffer+0xe1/0x170 [ 1577.099448][T21683] proc_fail_nth_read+0x1bb/0x230 [ 1577.099474][T21683] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1577.099500][T21683] ? rw_verify_area+0x2a6/0x4d0 [ 1577.099521][T21683] ? __fget_files+0x2a/0x420 [ 1577.099539][T21683] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1577.099563][T21683] vfs_read+0x20c/0xa70 [ 1577.099583][T21683] ? fdget_pos+0x246/0x320 [ 1577.099607][T21683] ? __pfx___mutex_lock+0x10/0x10 [ 1577.099631][T21683] ? __pfx_vfs_read+0x10/0x10 [ 1577.099655][T21683] ? __fget_files+0x2a/0x420 [ 1577.099678][T21683] ? __fget_files+0x3a0/0x420 [ 1577.099696][T21683] ? __fget_files+0x2a/0x420 [ 1577.099724][T21683] ksys_read+0x150/0x270 [ 1577.099749][T21683] ? __pfx_ksys_read+0x10/0x10 [ 1577.099784][T21683] do_syscall_64+0xe2/0xf80 [ 1577.099806][T21683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1577.099823][T21683] ? trace_irq_disable+0x37/0x100 [ 1577.099839][T21683] ? clear_bhb_loop+0x60/0xb0 [ 1577.099861][T21683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1577.099878][T21683] RIP: 0033:0x7fd770b5b78e [ 1577.099901][T21683] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1577.099916][T21683] RSP: 002b:00007fd771a96fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1577.099936][T21683] RAX: ffffffffffffffda RBX: 00007fd771a976c0 RCX: 00007fd770b5b78e [ 1577.099949][T21683] RDX: 000000000000000f RSI: 00007fd771a970a0 RDI: 0000000000000005 [ 1577.099960][T21683] RBP: 00007fd771a97090 R08: 0000000000000000 R09: 0000000000000000 [ 1577.099971][T21683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1577.099981][T21683] R13: 00007fd770e16038 R14: 00007fd770e15fa0 R15: 00007ffc923e99d8 [ 1577.100010][T21683] [ 1577.379115][T21591] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1577.426685][T21363] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1577.460278][T21363] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1577.484065][T21363] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1577.565007][T21363] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1577.602148][T21690] sctp: [Deprecated]: syz.3.12243 (pid 21690) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1577.602148][T21690] Use struct sctp_sack_info instead [ 1577.786435][T21710] net_ratelimit: 11 callbacks suppressed [ 1577.786455][T21710] netlink: zone id is out of range [ 1577.821837][T21710] netlink: zone id is out of range [ 1577.853867][T21710] netlink: zone id is out of range [ 1577.887885][T21710] netlink: zone id is out of range [ 1577.907463][T21710] netlink: zone id is out of range [ 1577.912661][T21710] netlink: zone id is out of range [ 1577.918195][T21710] netlink: zone id is out of range [ 1577.923369][T21710] netlink: zone id is out of range [ 1577.929082][T21710] netlink: zone id is out of range [ 1577.953147][T21710] netlink: zone id is out of range [ 1578.077494][T21729] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12245'. [ 1578.518843][T21363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1578.800294][T21363] 8021q: adding VLAN 0 to HW filter on device team0 [ 1579.029561][T31846] bridge0: port 1(bridge_slave_0) entered blocking state [ 1579.036846][T31846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1579.094571][T31846] bridge0: port 2(bridge_slave_1) entered blocking state [ 1579.101777][T31846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1579.360107][T21363] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1579.765827][T21778] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12255'. [ 1579.856825][T21363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1579.991606][T21363] veth0_vlan: entered promiscuous mode [ 1580.028582][T21363] veth1_vlan: entered promiscuous mode [ 1580.127190][T21363] veth0_macvtap: entered promiscuous mode [ 1580.169621][T21363] veth1_macvtap: entered promiscuous mode [ 1580.199737][T21794] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12259'. [ 1580.273995][T21363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1580.317042][T21363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1580.363126][T13186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.401918][T13186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.452487][T13186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.491968][T13186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.624752][T21813] pim6reg: entered allmulticast mode [ 1580.648147][T21811] xfrm0 speed is unknown, defaulting to 1000 [ 1580.844507][T31844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1580.880489][T31844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1581.100651][T31846] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1581.137583][T31846] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1581.471368][T21852] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1581.709184][T21875] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.12274'. [ 1581.857792][T21878] tc_dump_action: action bad kind [ 1582.221619][T21882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12276'. [ 1582.446991][T21887] pim6reg: left allmulticast mode [ 1582.818374][T21899] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12280'. [ 1582.843442][T21909] tipc: Started in network mode [ 1582.853072][T21909] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 1582.871785][T21909] tipc: Enabled bearer , priority 10 [ 1582.988274][T21925] netlink: 'syz.1.12285': attribute type 3 has an invalid length. [ 1583.156491][T21932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12286'. [ 1583.282785][T21935] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12289'. [ 1583.337785][T21938] team_slave_1: Caught tx_queue_len zero misconfig [ 1583.349926][T21938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12290'. [ 1583.361328][T21938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12290'. [ 1583.488590][T21943] sctp: [Deprecated]: syz.1.12293 (pid 21943) Use of int in max_burst socket option. [ 1583.488590][T21943] Use struct sctp_assoc_value instead [ 1583.497977][T21944] xfrm0: entered promiscuous mode [ 1583.512287][T21944] xfrm0: entered allmulticast mode [ 1583.540572][T21945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12293'. [ 1583.579084][T21948] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12294'. [ 1584.041399][T21979] netlink: 22 bytes leftover after parsing attributes in process `syz.4.12301'. [ 1584.152390][T21977] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12300'. [ 1584.161319][T23140] tipc: Node number set to 10463914 [ 1584.213777][T10371] lec:lec_start_xmit: lec0:No lecd attached [ 1584.361733][T21977] netlink: 'syz.2.12300': attribute type 4 has an invalid length. [ 1584.465964][T22005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12307'. [ 1584.646605][T22021] syzkaller1: entered promiscuous mode [ 1584.652352][T22021] syzkaller1: entered allmulticast mode [ 1584.793480][T22029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12304'. [ 1584.833785][T22036] net_ratelimit: 406 callbacks suppressed [ 1584.833803][T22036] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1585.074489][T22046] netlink: zone id is out of range [ 1585.080361][T22046] netlink: zone id is out of range [ 1585.088236][T22046] netlink: zone id is out of range [ 1585.093974][T22046] netlink: zone id is out of range [ 1585.099769][T22046] netlink: zone id is out of range [ 1585.105236][T22046] netlink: zone id is out of range [ 1585.110355][T22046] netlink: zone id is out of range [ 1585.116594][T22046] netlink: zone id is out of range [ 1585.121689][T22046] netlink: zone id is out of range [ 1585.191924][T21993] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1585.398648][T22053] x_tables: duplicate underflow at hook 1 [ 1585.532238][T22065] x_tables: duplicate underflow at hook 1 [ 1586.174579][ T7528] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1586.185738][ T7528] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1586.193647][ T7528] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1586.202247][ T7528] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1586.210086][ T7528] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1586.408655][T22082] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1586.538366][T22085] xfrm0 speed is unknown, defaulting to 1000 [ 1586.635646][T22082] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1586.847228][T22082] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1586.951848][T22082] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1587.269361][T16540] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.290533][T22085] chnl_net:caif_netlink_parms(): no params data found [ 1587.342788][T31848] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.430598][T16540] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.463587][T16540] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.490532][T22085] bridge0: port 1(bridge_slave_0) entered blocking state [ 1587.498145][T22085] bridge0: port 1(bridge_slave_0) entered disabled state [ 1587.506256][T22085] bridge_slave_0: entered allmulticast mode [ 1587.513837][T22085] bridge_slave_0: entered promiscuous mode [ 1587.529396][T22085] bridge0: port 2(bridge_slave_1) entered blocking state [ 1587.537898][T22085] bridge0: port 2(bridge_slave_1) entered disabled state [ 1587.556113][T22085] bridge_slave_1: entered allmulticast mode [ 1587.563662][T22085] bridge_slave_1: entered promiscuous mode [ 1587.663664][T31850] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.682316][T31850] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.743523][T31850] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.760167][T22085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1587.777839][T22116] netlink: 'syz.3.12333': attribute type 3 has an invalid length. [ 1587.843822][T22085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1587.867597][T31848] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.884278][T13186] veth1_to_hsr: left allmulticast mode [ 1587.891877][T13186] veth1_to_hsr: left promiscuous mode [ 1587.902437][T13186] bridge0: port 3(veth1_to_hsr) entered disabled state [ 1587.917052][T13186] bridge_slave_1: left allmulticast mode [ 1587.923025][T13186] bridge_slave_1: left promiscuous mode [ 1587.935405][T13186] bridge0: port 2(bridge_slave_1) entered disabled state [ 1587.946628][T13186] bridge_slave_0: left allmulticast mode [ 1587.952325][T13186] bridge_slave_0: left promiscuous mode [ 1587.959615][T13186] bridge0: port 1(bridge_slave_0) entered disabled state [ 1587.986280][T13186] veth9: left allmulticast mode [ 1587.991335][T13186] veth9: left promiscuous mode [ 1587.997137][T13186] bridge8: port 3(veth9) entered disabled state [ 1588.009387][T13186] veth0_to_bond: left allmulticast mode [ 1588.018739][T13186] veth0_to_bond: left promiscuous mode [ 1588.024420][T13186] bridge8: port 2(veth0_to_bond) entered disabled state [ 1588.039702][T13186] veth7: left allmulticast mode [ 1588.044724][T13186] veth7: left promiscuous mode [ 1588.050604][T13186] bridge8: port 1(veth7) entered disabled state [ 1588.147900][T13186] batman_adv: batadv0: Removing interface: ip6gretap1 [ 1588.275081][T22510] Bluetooth: hci2: command tx timeout [ 1588.342749][T13186] bond2 (unregistering): (slave gretap1): Releasing active interface [ 1588.384203][T13186] dvmrp6 (unregistering): left allmulticast mode [ 1588.481951][T13186] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 1588.538854][T13186] bridge2 (unregistering): left promiscuous mode [ 1588.547909][T13186] team0: Port device bridge2 removed [ 1588.899557][T13186] bond0 (unregistering): left promiscuous mode [ 1588.906009][T13186] bond_slave_0: left promiscuous mode [ 1588.911573][T13186] bond_slave_1: left promiscuous mode [ 1588.921001][T13186] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1588.931903][T13186] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1588.948501][T13186] bond0 (unregistering): Released all slaves [ 1588.961525][T13186] bond1 (unregistering): Released all slaves [ 1588.978901][T13186] bond2 (unregistering): Released all slaves [ 1589.002076][T13186] bond3 (unregistering): Released all slaves [ 1589.023930][T13186] bond4 (unregistering): Released all slaves [ 1589.036127][T13186] bond5 (unregistering): Released all slaves [ 1589.072249][T22085] team0: Port device team_slave_0 added [ 1589.093015][T22085] team0: Port device team_slave_1 added [ 1589.127621][T22085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1589.134799][T22085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1589.137328][T22126] sctp: [Deprecated]: syz.4.12335 (pid 22126) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1589.137328][T22126] Use struct sctp_sack_info instead [ 1589.180197][T22085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1589.195553][T22085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1589.202543][T22085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1589.255568][T22085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1589.298001][T13186] m1Ie5nè‹Ò: left promiscuous mode [ 1589.343957][T22092] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1589.404492][T13186] : left promiscuous mode [ 1589.512820][T22085] hsr_slave_0: entered promiscuous mode [ 1589.520214][T22085] hsr_slave_1: entered promiscuous mode [ 1589.529365][T22085] debugfs: 'hsr0' already exists in 'hsr' [ 1589.586400][T22085] Cannot create hsr debugfs directory [ 1589.586734][T22148] __nla_validate_parse: 5 callbacks suppressed [ 1589.586750][T22148] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12338'. [ 1589.701822][T13186] tipc: Left network mode [ 1589.714976][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5500 ms [ 1589.722985][ C0] lec:lec_tx_timeout: lec0 [ 1589.791429][T13186] IPVS: stopping backup sync thread 21305 ... [ 1589.884266][T22164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12342'. [ 1590.254041][T11829] hid-generic 0005:0006:5508.0002: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1590.356128][T22510] Bluetooth: hci2: command tx timeout [ 1590.362752][T22187] fido_id[22187]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci2/hci2:200/report_descriptor': No such file or directory [ 1591.069173][T22200] batadv0: entered promiscuous mode [ 1591.074740][T22200] vlan2: entered promiscuous mode [ 1591.232097][T22085] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1591.375927][T22218] netlink: 'syz.4.12353': attribute type 1 has an invalid length. [ 1591.377288][T22085] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1591.423768][T22218] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1591.536502][T22085] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1591.613954][T22228] ipvlan3: entered promiscuous mode [ 1591.637602][T22228] bridge0: port 3(ipvlan3) entered blocking state [ 1591.645635][T22228] bridge0: port 3(ipvlan3) entered disabled state [ 1591.652425][T22228] ipvlan3: entered allmulticast mode [ 1591.659758][T22228] bridge0: entered allmulticast mode [ 1591.672512][T22228] ipvlan3: left allmulticast mode [ 1591.677876][T22228] bridge0: left allmulticast mode [ 1591.870760][T22085] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1592.437461][T22510] Bluetooth: hci2: command tx timeout [ 1594.011131][T22288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12365'. [ 1594.110284][T22290] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1594.226476][T13186] batadv0: left promiscuous mode [ 1594.238127][T13186] batman_adv: batadv0: Interface deactivated: dummy0 [ 1594.245615][T13186] batman_adv: batadv0: Removing interface: dummy0 [ 1594.269369][T13186] veth0_vlan: left promiscuous mode [ 1594.515644][T22510] Bluetooth: hci2: command tx timeout [ 1594.708252][T22322] net_ratelimit: 827 callbacks suppressed [ 1594.708271][T22322] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1594.708654][ T982] IPVS: starting estimator thread 0... [ 1594.865019][T22325] IPVS: using max 29 ests per chain, 69600 per kthread [ 1594.970014][T13186] team_slave_1 (unregistering): left promiscuous mode [ 1594.982603][T13186] team0 (unregistering): Port device team_slave_1 removed [ 1595.007806][T13186] team_slave_0 (unregistering): left promiscuous mode [ 1595.017101][T13186] team0 (unregistering): Port device team_slave_0 removed [ 1595.069924][T22259] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1595.303666][T22340] netlink: 'syz.0.12370': attribute type 10 has an invalid length. [ 1595.345455][T22340] team0: Failed to send options change via netlink (err -105) [ 1595.352954][T22340] team0: Port device dummy0 added [ 1595.381155][T22342] netlink: 'syz.0.12370': attribute type 10 has an invalid length. [ 1595.422951][T22085] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1595.497290][T22342] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1595.550037][T22342] team0: Failed to send options change via netlink (err -105) [ 1595.583058][T22342] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1595.593850][T22342] team0: Port device dummy0 removed [ 1595.616445][T22342] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1595.642936][ T30] audit: type=1800 audit(1770477336.414:50): pid=22351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.12373" name="blkio.bfq.time_recursive" dev="tmpfs" ino=571 res=0 errno=0 [ 1595.667648][T22340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12370'. [ 1595.707065][T22085] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1595.736631][T22085] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1595.791051][T22085] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1595.792034][T22351] netlink: 'syz.3.12373': attribute type 12 has an invalid length. [ 1595.826032][T22351] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.12373'. [ 1595.895085][T22346] syzkaller0: entered promiscuous mode [ 1595.909222][T22361] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12372'. [ 1595.919824][T22346] syzkaller0: entered allmulticast mode [ 1596.203759][T22386] netlink: 'syz.3.12377': attribute type 10 has an invalid length. [ 1598.169551][T22386] veth0_vlan: left promiscuous mode [ 1598.176468][T22386] veth0_vlan: entered promiscuous mode [ 1598.184451][T22386] team0: Device veth0_vlan failed to register rx_handler [ 1598.291037][T22388] xfrm0 speed is unknown, defaulting to 1000 [ 1598.317588][T22399] netlink: 212324 bytes leftover after parsing attributes in process `syz.2.12379'. [ 1598.466866][T22085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1598.534053][T22085] 8021q: adding VLAN 0 to HW filter on device team0 [ 1598.554198][T31848] bridge0: port 1(bridge_slave_0) entered blocking state [ 1598.561377][T31848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1598.609290][T22416] [ 1598.611635][T22416] ====================================================== [ 1598.618652][T22416] WARNING: possible circular locking dependency detected [ 1598.625676][T22416] syzkaller #0 Not tainted [ 1598.630082][T22416] ------------------------------------------------------ [ 1598.637093][T22416] syz.3.12384/22416 is trying to acquire lock: [ 1598.643239][T22416] ffffffff8fb282d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x40c/0xf90 [ 1598.652398][T22416] [ 1598.652398][T22416] but task is already holding lock: [ 1598.659760][T22416] ffff888144b02970 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 1598.666814][T22085] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1598.668998][T22416] [ 1598.668998][T22416] which lock already depends on the new lock. [ 1598.668998][T22416] [ 1598.669009][T22416] [ 1598.669009][T22416] the existing dependency chain (in reverse order) is: [ 1598.669018][T22416] [ 1598.669018][T22416] -> #2 (&nr_node->node_lock){+...}-{3:3} [ 1598.691626][T22085] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1598.698710][T22416] : [ 1598.698718][T22416] _raw_spin_lock_bh+0x36/0x50 [ 1598.724528][T22416] nr_rt_device_down+0x153/0x860 [ 1598.726748][T31848] bridge0: port 2(bridge_slave_1) entered blocking state [ 1598.729972][T22416] nr_device_event+0x137/0x150 [ 1598.730000][T22416] notifier_call_chain+0x19d/0x3a0 [ 1598.737092][T31848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1598.742256][T22416] __dev_notify_flags+0x16d/0x310 [ 1598.760555][T22416] netif_change_flags+0xe8/0x1a0 [ 1598.766030][T22416] dev_change_flags+0x130/0x260 [ 1598.771407][T22416] dev_ioctl+0x7b4/0x1150 [ 1598.776264][T22416] sock_do_ioctl+0x23e/0x320 [ 1598.781374][T22416] sock_ioctl+0x5c6/0x7f0 [ 1598.786229][T22416] __se_sys_ioctl+0xfc/0x170 [ 1598.791347][T22416] do_syscall_64+0xe2/0xf80 [ 1598.796382][T22416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1598.802793][T22416] [ 1598.802793][T22416] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 1598.810601][T22416] _raw_spin_lock_bh+0x36/0x50 [ 1598.815883][T22416] nr_rt_device_down+0xbe/0x860 [ 1598.821246][T22416] nr_device_event+0x137/0x150 [ 1598.826516][T22416] notifier_call_chain+0x19d/0x3a0 [ 1598.832135][T22416] __dev_notify_flags+0x16d/0x310 [ 1598.837665][T22416] netif_change_flags+0xe8/0x1a0 [ 1598.843110][T22416] dev_change_flags+0x130/0x260 [ 1598.848467][T22416] dev_ioctl+0x7b4/0x1150 [ 1598.853303][T22416] sock_do_ioctl+0x23e/0x320 [ 1598.858395][T22416] sock_ioctl+0x5c6/0x7f0 [ 1598.863228][T22416] __se_sys_ioctl+0xfc/0x170 [ 1598.868325][T22416] do_syscall_64+0xe2/0xf80 [ 1598.873344][T22416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1598.879745][T22416] [ 1598.879745][T22416] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 1598.887637][T22416] __lock_acquire+0x15a5/0x2cf0 [ 1598.893002][T22416] lock_acquire+0x106/0x330 [ 1598.898016][T22416] _raw_spin_lock_bh+0x36/0x50 [ 1598.903283][T22416] nr_rt_ioctl+0x40c/0xf90 [ 1598.908206][T22416] sock_do_ioctl+0x101/0x320 [ 1598.913298][T22416] sock_ioctl+0x5c6/0x7f0 [ 1598.918132][T22416] __se_sys_ioctl+0xfc/0x170 [ 1598.923232][T22416] do_syscall_64+0xe2/0xf80 [ 1598.928249][T22416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1598.934647][T22416] [ 1598.934647][T22416] other info that might help us debug this: [ 1598.934647][T22416] [ 1598.944857][T22416] Chain exists of: [ 1598.944857][T22416] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 1598.944857][T22416] [ 1598.958657][T22416] Possible unsafe locking scenario: [ 1598.958657][T22416] [ 1598.966087][T22416] CPU0 CPU1 [ 1598.971437][T22416] ---- ---- [ 1598.976786][T22416] lock(&nr_node->node_lock); [ 1598.981539][T22416] lock(nr_node_list_lock); [ 1598.988629][T22416] lock(&nr_node->node_lock); [ 1598.995893][T22416] lock(nr_neigh_list_lock); [ 1599.000556][T22416] [ 1599.000556][T22416] *** DEADLOCK *** [ 1599.000556][T22416] [ 1599.008679][T22416] 2 locks held by syz.3.12384/22416: [ 1599.013938][T22416] #0: ffffffff8fb28338 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x15f/0xf90 [ 1599.023416][T22416] #1: ffff888144b02970 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 1599.033067][T22416] [ 1599.033067][T22416] stack backtrace: [ 1599.038940][T22416] CPU: 1 UID: 0 PID: 22416 Comm: syz.3.12384 Not tainted syzkaller #0 PREEMPT(full) [ 1599.038959][T22416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1599.038970][T22416] Call Trace: [ 1599.038976][T22416] [ 1599.038983][T22416] dump_stack_lvl+0xe8/0x150 [ 1599.039004][T22416] print_circular_bug+0x2e1/0x300 [ 1599.039023][T22416] check_noncircular+0x12e/0x150 [ 1599.039041][T22416] __lock_acquire+0x15a5/0x2cf0 [ 1599.039069][T22416] ? nr_rt_ioctl+0x40c/0xf90 [ 1599.039089][T22416] lock_acquire+0x106/0x330 [ 1599.039108][T22416] ? nr_rt_ioctl+0x40c/0xf90 [ 1599.039129][T22416] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1599.039147][T22416] ? nr_rt_ioctl+0x40c/0xf90 [ 1599.039167][T22416] _raw_spin_lock_bh+0x36/0x50 [ 1599.039185][T22416] ? nr_rt_ioctl+0x40c/0xf90 [ 1599.039205][T22416] nr_rt_ioctl+0x40c/0xf90 [ 1599.039229][T22416] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 1599.039253][T22416] ? apparmor_capable+0x137/0x1a0 [ 1599.039278][T22416] ? capable+0x88/0xe0 [ 1599.039291][T22416] ? nr_ioctl+0x1b1/0x3b0 [ 1599.039311][T22416] sock_do_ioctl+0x101/0x320 [ 1599.039328][T22416] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1599.039342][T22416] ? do_futex+0x333/0x420 [ 1599.039367][T22416] sock_ioctl+0x5c6/0x7f0 [ 1599.039383][T22416] ? __pfx_sock_ioctl+0x10/0x10 [ 1599.039397][T22416] ? __fget_files+0x2a/0x420 [ 1599.039414][T22416] ? __fget_files+0x3a0/0x420 [ 1599.039429][T22416] ? __fget_files+0x2a/0x420 [ 1599.039446][T22416] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1599.039463][T22416] ? __pfx_sock_ioctl+0x10/0x10 [ 1599.039477][T22416] __se_sys_ioctl+0xfc/0x170 [ 1599.039498][T22416] do_syscall_64+0xe2/0xf80 [ 1599.039518][T22416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1599.039533][T22416] ? trace_irq_disable+0x37/0x100 [ 1599.039548][T22416] ? clear_bhb_loop+0x60/0xb0 [ 1599.039565][T22416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1599.039580][T22416] RIP: 0033:0x7f42fcb9aeb9 [ 1599.039600][T22416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1599.039614][T22416] RSP: 002b:00007f42fd973028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1599.039631][T22416] RAX: ffffffffffffffda RBX: 00007f42fce15fa0 RCX: 00007f42fcb9aeb9 [ 1599.039642][T22416] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004 [ 1599.039652][T22416] RBP: 00007f42fcc08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1599.039663][T22416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1599.039672][T22416] R13: 00007f42fce16038 R14: 00007f42fce15fa0 R15: 00007ffe840f8f38 [ 1599.039690][T22416] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1599.408364][T22435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12387'. [ 1599.993326][T31852] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1600.156387][T22415] caif:caif_disconnect_client(): nothing to disconnect [ 1600.168279][T31852] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1600.228202][T31852] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1600.288375][T31852] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1600.365201][T31848] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1600.386797][T31850] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1600.397268][T31850] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1600.410163][T31850] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1600.425454][T31852] bridge_slave_1: left allmulticast mode [ 1600.431097][T31852] bridge_slave_1: left promiscuous mode [ 1600.437700][T31852] bridge0: port 2(bridge_slave_1) entered disabled state [ 1600.446370][T31852] bridge_slave_0: left allmulticast mode [ 1600.451993][T31852] bridge_slave_0: left promiscuous mode [ 1600.458441][T31852] bridge0: port 1(bridge_slave_0) entered disabled state [ 1600.618251][T31852] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1600.628821][T31852] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1600.639422][T31852] bond0 (unregistering): Released all slaves [ 1600.730177][T31852] tipc: Left network mode [ 1600.993003][T31852] hsr_slave_0: left promiscuous mode [ 1600.999834][T31852] hsr_slave_1: left promiscuous mode [ 1601.005846][T31852] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1601.013219][T31852] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1601.021268][T31852] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1601.029098][T31852] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1601.042141][T31852] veth1_macvtap: left promiscuous mode [ 1601.047854][T31852] veth0_macvtap: left promiscuous mode [ 1601.053422][T31852] veth1_vlan: left promiscuous mode [ 1601.059704][T31852] veth0_vlan: left promiscuous mode [ 1601.227024][T31852] team0 (unregistering): Port device team_slave_1 removed [ 1601.242383][T31852] team0 (unregistering): Port device team_slave_0 removed [ 1601.799003][T31850] netdevsim netdevsim1 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.810001][T31850] netdevsim netdevsim1 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.836542][T31852] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1601.856717][T31850] netdevsim netdevsim1 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.865365][T13186] netdevsim netdevsim1 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.910242][T31852] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1601.947438][T31852] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1602.001486][T31852] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1602.119309][T31846] netdevsim netdevsim3 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 1602.147532][T31846] netdevsim netdevsim3 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 1602.166874][T31846] netdevsim netdevsim3 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 1602.193205][T31852] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1602.207639][T31850] netdevsim netdevsim3 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 1602.249777][T31852] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1602.289277][T31852] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1602.339742][T31852] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1602.407466][T31848] netdevsim netdevsim0 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 1602.423308][T31850] netdevsim netdevsim0 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 1602.441388][T31850] netdevsim netdevsim0 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 1602.452258][T31852] bridge_slave_1: left allmulticast mode [ 1602.458820][T31852] bridge_slave_1: left promiscuous mode [ 1602.464498][T31852] bridge0: port 2(bridge_slave_1) entered disabled state [ 1602.473779][T31852] bridge_slave_0: left allmulticast mode [ 1602.480013][T31852] bridge_slave_0: left promiscuous mode [ 1602.488196][T31852] bridge0: port 1(bridge_slave_0) entered disabled state [ 1602.498157][T31852] bridge_slave_1: left allmulticast mode [ 1602.503800][T31852] bridge_slave_1: left promiscuous mode [ 1602.509645][T31852] bridge0: port 2(bridge_slave_1) entered disabled state [ 1602.520161][T31852] bridge_slave_0: left allmulticast mode [ 1602.526304][T31852] bridge_slave_0: left promiscuous mode [ 1602.531915][T31852] bridge0: port 1(bridge_slave_0) entered disabled state [ 1602.543861][T31852] bridge_slave_1: left allmulticast mode [ 1602.549964][T31852] bridge_slave_1: left promiscuous mode [ 1602.558345][T31852] bridge0: port 2(bridge_slave_1) entered disabled state [ 1602.567218][T31852] bridge_slave_0: left allmulticast mode [ 1602.572871][T31852] bridge_slave_0: left promiscuous mode [ 1602.579610][T31852] bridge0: port 1(bridge_slave_0) entered disabled state [ 1602.759534][T31852] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1602.769797][T31852] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1602.782393][T31852] bond0 (unregistering): Released all slaves [ 1602.848348][T31852] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1602.858218][T31852] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1602.868210][T31852] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1602.877841][T31852] bond0 (unregistering): Released all slaves [ 1602.922273][T31852] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1602.932387][T31852] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1602.944738][T31852] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1602.953813][T31852] bond0 (unregistering): Released all slaves [ 1602.961184][T31850] netdevsim netdevsim0 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.020662][T31852] tipc: Left network mode [ 1603.459740][T31852] hsr_slave_0: left promiscuous mode [ 1603.480512][T31852] hsr_slave_1: left promiscuous mode [ 1603.497023][T31852] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1603.504607][T31852] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1603.517886][T31852] hsr_slave_0: left promiscuous mode [ 1603.523700][T31852] hsr_slave_1: left promiscuous mode [ 1603.533905][T31852] hsr_slave_0: left promiscuous mode [ 1603.541680][T31852] hsr_slave_1: left promiscuous mode [ 1603.553404][T31852] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1603.565655][T31852] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1603.575472][T31852] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1603.583316][T31852] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1603.603998][T31852] veth1_macvtap: left promiscuous mode [ 1603.609894][T31852] veth0_macvtap: left promiscuous mode [ 1603.617292][T31852] veth1_vlan: left promiscuous mode [ 1603.623336][T31852] veth1_macvtap: left promiscuous mode [ 1603.629339][T31852] veth0_macvtap: left promiscuous mode [ 1603.636011][T31852] veth1_vlan: left promiscuous mode [ 1603.641278][T31852] veth0_vlan: left promiscuous mode [ 1603.793164][T31852] team0 (unregistering): Port device team_slave_1 removed [ 1603.804178][T31852] team0 (unregistering): Port device team_slave_0 removed [ 1603.901371][T31852] team0 (unregistering): Port device team_slave_1 removed [ 1603.912028][T31852] team0 (unregistering): Port device team_slave_0 removed [ 1604.010663][T31852] team0 (unregistering): Port device team_slave_1 removed [ 1604.022108][T31852] team0 (unregistering): Port device team_slave_0 removed [ 1604.565479][T31852] IPVS: stop unused estimator thread 0... [ 1607.239344][ T1300] lec:lec_start_xmit: lec0:No lecd attached