last executing test programs: 5.866200585s ago: executing program 3 (id=5916): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4a61, 0x2, @loopback, 0xaa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) writev(r0, &(0x7f0000000400)=[{&(0x7f00000006c0)="f0fecb55d93446ef61dea4ee2ff3", 0xe}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) socket(0x2b, 0x1, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x2004c095}, 0x8042) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 5.775758658s ago: executing program 3 (id=5917): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x2, 0x0, 0xd, 0x4101}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) writev(0xffffffffffffffff, &(0x7f0000000180)=[{}], 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x4, 0x5, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x6}, @alu={0x7, 0x1, 0x3, 0xb, 0x0, 0x2, 0x8}]}, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x4010744d, &(0x7f0000000180)) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e97800004700000000000a0000000000000004000400"], 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004804) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000240)={'veth1_vlan\x00', @ifru_names='vcan0\x00'}) ioctl$sock_netdev_private(r4, 0x89fd, &(0x7f0000000500)="8bf1aa09317045e2963f01f6e971d4daa6127e7fb7e3a6a0ced0ce8d69df14cd05000089e001b4974d8194e61022970c35d473d5d44f6d8c791d6f8b8de734b0cd44ea5cabfdb16f6823c0c4128af612e83618167598491c459e64b722be762ea4fce0c322829671bca91b9059f1550be60d67d1be3f0522f512e000000000000000000015001f3e3a0b2e8532402c08a873a215bbb05ab9fe71c3a69a44b812921c8979a392050bb5f4d37cf549129b4c748a81b7a6000000") r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000006800010002000000f9ffff7f00000000000000000c000200c20100000004000000"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) 5.666129822s ago: executing program 2 (id=5918): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x240008c4}, 0x44054) ioctl$NILFS_IOCTL_SYNC(r0, 0x80086e8a, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x1411, 0x200, 0x5, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x840}, 0x24040090) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0xc840) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x8, 0x42, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x2f, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) close(r5) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000006c0)={&(0x7f0000000080)="33cf59c314a62fc5ed89f48e694f7ebebf301f4235036ab98f27abe73ae13efe37193641bd81ebfb160997b4eb2b042ac57b93e18dce8887707d06bbd404937a1631a26270c6697448d6c629915047a53515abc409f551879d", &(0x7f0000000440)=""/196, &(0x7f0000000540)="a2d521e66a43986c9cc09157efd5eb3f28c3503f7a57e805a678959159d565d3d80593458657b31d5b34c2c0c979cafed1e1b527f937cb7085cb84dcc4d5ff9504b3d0f7e790aa97d0d0e2b70f51ab21e2d4b90b7111bb2035f77874ad19effd71bd5336e15504eada053ac647741218112b2bb41b6117896a1ca450b4ba238f67a22023a75231bc5e8af3f920e6d2fe12708812d5ef75c81601d46fdc1c567b3b7f98f46d1587579762df90dbf9c3a61acc9d", &(0x7f0000000600)="3011e5d1dac99fd5c1cabf5e113c37c3b676f11389213a5e7f96544ca0c8cda58f31bb8cc84dc9bf879080006ec95590b9c4e45b9e802e4333a5ee73c2455aca8c19dd88b4d420576ff674ed5d8a147515df5b7f3af7cf34692d799b7c06b42844caca005a66d4bef0dd3e03b1483eb2af7ac2453dd954d3598d33cd7ef76a8dc880c82ff475868f6b0c70ff7b6722dd20e00f6447edbaad183b62abfb7d2a1f6afd843a7645", 0x9, r2}, 0x38) 5.62363516s ago: executing program 2 (id=5919): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r0, 0x0, &(0x7f0000000500)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x44}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.472997555s ago: executing program 2 (id=5923): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$inet(r1, &(0x7f0000002640)={&(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10, 0x0}, 0x4000040) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001800)={0x40, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0xcb, 0x0, 0x1, [@nested={0x4, 0x8}]}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x14, 0x10, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x5}, @typed={0x8, 0x7d, 0x0, 0x0, @uid}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 5.321319863s ago: executing program 2 (id=5925): socket$inet_mptcp(0x2, 0x1, 0x106) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) close(r1) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_genetlink_get_family_id$nfc(0x0, r5) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000002000010029bd700000000000020000000000000200000000080004000500000008000600ffffff"], 0x2c}}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r7, @ANYBLOB="0c0005006c010000000000000c000200ff", @ANYRES32=r7], 0x7c}}, 0x20000000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000811}, 0x400c000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)=ANY=[], 0x20) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0x76635065a07fd17d, 0xb}, {0xffff, 0x7}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xdd0d, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2400c060}, 0x4000000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001804000000000000200000002000000002000000000000000000000d0a0000000000000001004006040000000e0000000300000000004a050914ed6e6a7d286f7a84aeca985e9d99c22e04e9045a95ac383007a3e0dcf6589716ff4164d576c0c260975fe8f4b6570720aef161c0cacecf07b1be82930ffe56a51e02da32ff19a807a2117d857148575fcc98b3eaf4e6448eb95b418e85b3c37d6ae558f6b59033790ef537a4f688108cde73823a5116ba6114830a453b9639d9b27a986ab3038a96d49842eb6a87750a84c7a8954bba33d127ddb4ab46a2658072a61ecb9e290d"], &(0x7f0000000f40)=""/4089, 0x3a, 0xff9, 0xb, 0x1}, 0x28) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r11) sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x8000) 5.05400084s ago: executing program 2 (id=5927): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {&(0x7f0000000780)}], 0x3}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="430000001000030400000000fdffff0000000300", @ANYRES32=r1, @ANYBLOB="080800004000020028001280090001007665746800000000180002801400010000000000", @ANYRES32=r1, @ANYBLOB="20ac01000404000004001a80"], 0x4c}, 0x1, 0x0, 0x0, 0x4894}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(r4, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) ppoll(&(0x7f0000000100)=[{r4, 0x5082}], 0x1, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000040601010000001dc086c3df118d0fcdc30000000000030000050500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000084) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 4.414963691s ago: executing program 2 (id=5930): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="af", 0x1}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000008400000000000000ffff"], 0x18, 0x20000001}, 0x20008000) accept4$inet(r1, 0x0, 0x0, 0x800) accept4$nfc_llcp(r1, 0x0, 0x0, 0x800) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5ee1768810003c00020100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3da400001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605007f71174aa9", 0xb8) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r4) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000390400000000fbdbdf2500000000", @ANYRES32=r5, @ANYBLOB="010f0000419a04002000128008000100736974001400028008000300ac1414bb050004"], 0x40}}, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) epoll_create1(0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={r6, 0xfff2, 0xa18e}, &(0x7f00000003c0)=0x8) pselect6(0x40, &(0x7f00000001c0)={0x7f, 0x0, 0x0, 0xbf1, 0x0, 0xffff7ffffffffffa, 0x8}, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) write$tun(0xffffffffffffffff, 0x0, 0x1d7) sendto$packet(r3, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r5, 0x1, 0x4, 0x6, @local}, 0x14) r10 = socket(0x2b, 0x1, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r10, 0x0, 0x81, 0x0, 0x78) 4.178109881s ago: executing program 3 (id=5932): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) shutdown(r1, 0x1) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x200bac}, {{0x0, 0x0, &(0x7f0000000200), 0x24}, 0x4}], 0x2, 0x60, 0x0) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)={0x14, r2, 0x320, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0xefffffff, @mcast1, 0x9}, 0x80, &(0x7f0000000080)}, 0x400c00c) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xffffffffffffffff}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r6, 0x0, 0x0}, 0x20) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x703, 0x270bd24, 0x25dfdbf8, {0xd}}, 0x14}}, 0x4008800) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_buf(r7, 0x0, 0x29, &(0x7f0000000b00)="578690ff6529e7dba2fe13c1a3f868ba", 0x10) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000a80)="61a8", 0x2}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000400c"], 0x30}], 0x1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r5) 3.996173186s ago: executing program 3 (id=5933): r0 = socket$inet(0xa, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x2c0, 0xffffffff, 0x228, 0x0, 0xb0, 0xffffffff, 0xffffffff, 0x228, 0x228, 0x228, 0xffffffff, 0x4, 0x0, {[{{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'pimreg\x00', 'veth1_to_bond\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x6, 0x4, "8047794a81eae173639d4135d6bd22cb3f0158ee53e6baaceb0b94523bec"}}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, 'veth1_to_bridge\x00', 'pim6reg1\x00', {}, {}, 0x89, 0x0, 0x2}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@icmp={{0x28}, {0xa, '\x00 ', 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x320) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) unshare(0x26020480) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800400001"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r2, &(0x7f0000000500), &(0x7f0000000080)=""/12}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'geneve0\x00', 0x0}) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) unshare(0xc000000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000012000000000000000000000000ac1e000100000000000000000000000000000000000000000a00400000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000a30a000000000000f8ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000800"/112], 0xb8}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) pselect6(0x40, &(0x7f00000006c0)={0x8, 0x3f, 0x1, 0x8965, 0x3ff, 0x100000001, 0x1, 0x7}, &(0x7f0000000700)={0x2d3, 0x0, 0xfffffffffffffff2, 0x2, 0x4, 0x7ff, 0x9, 0x1}, &(0x7f0000000740)={0x16, 0x73, 0x9, 0x98b, 0x0, 0x6, 0xfff, 0x4}, &(0x7f0000000780)={0x77359400}, &(0x7f0000000800)={0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES64=r4], 0x50) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003cc0)={&(0x7f0000000b40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003980)=[{&(0x7f0000000bc0)}, {&(0x7f0000000cc0)="a3de8d32d5ab0a0a59fe576671af9ec07fe6f35fee9f4df463bb0a6284748e49a463f27d0867d7468c60aabf1b458928adf51fd1c957546b6f2bcb1f160b0182ddb1e3820442b3b99e3a59b7712fa069fdf6a3f81e4d490110363dafb3be6f33ccba3b5cd7b471bec347919c0c2e6c540c061f26a56c8445d61405bcacea5f6e49af4eeb7fa017e731036baf37cff8a2ad0ba8b40e5ab85d9d674d4e62cf7efbb244f223a9316221f12c3c43ba0d400823d7a60bde5d4894885eb7785e04200438c0fd5cc251c844bb0bbdc35a446cb30ee019cef5e3eb", 0xd7}, {&(0x7f0000003600)="a2263bd8b7c1fdcc28fa527151403e906d9fe96ef089819df2c3ffddc6386015420666922f3c29351b64dd176d9189ba58f5e5ae10c936af54451f8a628642ec704eef1d0f0445ae4f3bbb69246734f395a8f2764dffcac5360b934d9608fd776a3f4eae76c37cae1c3c14d10c158bc71223def3931ce22526bdc304cda3a861bcd4d1fe5fe7e86de8180384e022026e5be08e4cd3d5", 0x96}, {&(0x7f00000036c0)='}', 0x1}, {&(0x7f0000003700)="feaea0cd7bc722d6f2184e7c272d339886fd20bb52f363a5e40654dee9ba9090710896af49a7e5813d53ddbf6ae30b334c30e172c0d8632ab1", 0x39}, {&(0x7f0000003740)="d88e49cfd75433f7ae502d5a33ecd8d6c6a205", 0x13}, {&(0x7f0000003780)="086c9f8a1f0cd9e2a5c5ce4d63a5c17e97b6d6beab1d8d2c166506cc4cf521c91a97bcdcbc048ce5200921a29b956bd0e98199f097b7e7e7def4d22543d559b57ac99d732bd5d1c2276d51f6dd53e418a22f81703cbb8d8bae679c1089751682f86aacf76311f487d018eea1134d6c69ab27676bc7bd8af56da4c33d69f8a1125776c1a5c05d1483fb94109b0370590aef821c86636722658689193acc6ca4ea35c16694ec44e910956207ea", 0xac}, {&(0x7f0000003840)="8d72992600a557d457c1b1e400682bedb84ddb27333851765c1544201f4b80e1880d57f902a6221517d20e19469245022fcbde40e6", 0x35}, {&(0x7f0000003880)="9260e4df918877b89107f6777d854d8a200d2661c30eeae7be8637635e87fc53d69ae47f7bb05f401b4a6fbaedecef8ad595e9b7f2f69507e36fc3f21979b85d954fed0b12abaa3eb652784f353ac125911de0077e65ed5daf8bf43f5c4bdb249af6bf0da11b27c07047f1de6ba811c121aceea8213fa6f1130b08053319391a4987598137d46cedac241ea584ae240fc1afcb6a60f3548bfcd64a10d65c503f27e831a3a003a159b6555ddc54d4fd864a9f6072270994fa1363e468ca962c9dd1bacca8a39d52ae915a83b183a3f1899860d01d710e341028231a8c9d4da5229a8dcc443196702964238c2ad5aa", 0xee}], 0x9, &(0x7f0000000a80)=ANY=[@ANYBLOB="34000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32, @ANYRES32=r5, @ANYRES32=r5, @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e78cb08818f96563000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x98, 0x801}, 0x4801) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xa7c, r5}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000009000000000000000000000085000000410000008593f500110000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000000000000027bfa7b09303960e2b80"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003a40)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES8=r6, @ANYRES32], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r8, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vxcan0\x00'}) socket$inet_mptcp(0x2, 0x1, 0x106) syz_genetlink_get_family_id$devlink(&(0x7f0000000840), r2) socket$inet6_icmp(0xa, 0x2, 0x3a) recvmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000880)=""/246, 0xf6}, {&(0x7f0000000980)=""/88, 0x58}, {&(0x7f0000000a00)=""/82, 0x52}, {&(0x7f0000000e40)=""/4096, 0x1000}], 0x4}, 0x80000001}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000001e80)=""/161, 0xa1}, {&(0x7f0000001f40)=""/117, 0x75}, {&(0x7f0000001fc0)=""/116, 0x74}, {&(0x7f0000002040)=""/234, 0xea}, {&(0x7f0000002140)=""/7, 0x7}, {&(0x7f0000002180)=""/67, 0x43}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/200, 0xc8}], 0x8, &(0x7f0000003380)=""/195, 0xc3}, 0xfffff800}, {{&(0x7f0000003480)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000005380)=[{&(0x7f0000003500)=""/215, 0xd7}, {&(0x7f0000004000)=""/4096, 0x1000}, {&(0x7f0000005000)=""/208, 0xd0}, {0x0}, {&(0x7f0000005140)=""/110, 0x6e}, {0x0}, {&(0x7f0000005300)=""/74, 0x4a}], 0x7}, 0x3}], 0x3, 0x0, 0x0) 3.862522919s ago: executing program 1 (id=5879): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x13, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008b000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00008500000086000000bf0920000000000055090100000000808700000000000000181a0000", @ANYRES32=r1, @ANYBLOB="0000000000000000180000000080000000000000cb0a0000bf91000000000000b7020000030000008500000084000000b70000000005000095"], &(0x7f0000000000)='GPL\x00', 0xb, 0xfed, &(0x7f0000000780)=""/4077, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)={@fallback, 0xffffffffffffffff, 0xe, 0x21}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="120000000400000004"], 0x48) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) (async) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x1}], 0x23}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000001c0)='}', 0x1}], 0x1}}], 0x2, 0x2400c042) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6801000000010104000000000000000002003a00080003400000100e080007400000000024000280140001800800010000000000080002007f0000010c00028005000100000000001400108008000140000000000800024000000000240001801400018008000100e000000108000200e00000010c000280050001000000000034000f8008000140"], 0x168}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x600, &(0x7f00000002c0)={&(0x7f0000000080)=@newtaction={0xf8, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xe4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x52, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0x10d7, 0xffffffffffffffff}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0xfffffffffffffd10}, {0x4, 0x6, "cf908e4229cef19e929eca7cbee2023dbe49a17287dde768b5fa3ca767f6f13f9cda20f02b48d9d14be259c3b84f6dc8bbfb013c5d4dce55bc18ff7cbae8fba0960aa6b0a25dfc66ca37b699818f1cef29fe753ba9a0820af28fc3538606b004e5c950f1bbd6"}, {0xfffffffffffffd68}, {0xc}}}]}]}, 0xf8}}, 0x0) 3.835639373s ago: executing program 0 (id=5935): r0 = socket(0x15, 0x80005, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1d}]}]}, 0x2c}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010101, @local}, {0x16, 0xff, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}}}}}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="107d08006c4bb1d957dfb9ff4a2387d6abf3b99ff0753b0e7b1500008003f18152", 0x21) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="370525bd7000000000000200000008000300", @ANYRES32, @ANYBLOB="0c009900040000005200000008002600b4090000050018012e00000005001901"], 0x40}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000040000701feffffff00000000037c2000040042801c0001800600060088480000100007"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) getsockopt(r0, 0x200000000114, 0x2718, 0x0, &(0x7f0000000040)) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1000000000000010, 0x80802, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x29}, 0x48) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000000000)=r13, 0x4) sendmsg(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) sendmsg$nl_route(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0x401, 0x4002, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1d188, 0x10130}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x3, 0x1, {0x45f7, 0x7}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x5c}}, 0x24004004) 3.649656799s ago: executing program 1 (id=5937): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet(0x2, 0xa, 0xfffffffe) sendto$inet(r2, 0x0, 0x0, 0x5e, 0x0, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000206010800000000000000000100000a11000300686173683a69702c6d61726b00000000050001000700000005000500020000000900020073797a300000000005000400000000001400078008000840000000d308000b40"], 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000200)='`', 0x1) syz_emit_ethernet(0x1016, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000080)=0x958, 0x4) recvmmsg(r1, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/34, 0x22}, 0xfffffffd}, {{&(0x7f0000000640)=@can, 0x80, &(0x7f00000007c0)=[{&(0x7f00000006c0)=""/196, 0xc4}], 0x1, &(0x7f0000000ac0)=""/147, 0x93}, 0x9}, {{&(0x7f00000008c0)=@alg, 0x80, &(0x7f0000000a80), 0x0, &(0x7f0000000c80)=""/215, 0xd7}, 0x6}], 0x3, 0x40000120, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60fca33f00103c000000000000000000000000fe8000ffffff7f0000000000000000aa0000ff006600000400050001800000000000ff68acc8bbbfb48b151ad8"], 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) r6 = accept(r4, &(0x7f0000000000)=@phonet, &(0x7f00000004c0)=0x6f) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004780)=ANY=[@ANYRES8=0x0, @ANYBLOB="0ee773df19977a356cd840379c13d5c54544b7d1815782e624ed039e4e460ba3acff31e506a237b5b7b535de4bcb2bb5332e57e01f8626cb720331aa2c67fff44f691861f7eae20c739a1cdc7026d1830e47a8d1ab515d3b4baf13452013a1220cb7790ed59b02cbfc3e365839ac492809510abcb6d18cc3de1f0b8d7d3e10e888257b8102debc05b6159bd9902bb52e258ba49a31c5163979611c5c8a40e279fff991dfccb280c48b341519dd47255c9ee99b1c382bd7eba85f8456062a9d244ca0db1b553d47dbdf49ef704d3526023bbd46f01b00fc7d26f69b00ac9289740b6fb6487f111077bcafd5f9c8f2f14622e7294d61b116b39b6e36c0f2289b7687cfaec7f294fbe0260e7e66e796594c607ec3037e0e5b208ac1cadb9076e48239b8f24808e5db739fe3ca18b44ef8ac434ecd14d6a521cc8c40992395d10c286196edc16c215e62e12a11cc3a27e2230272859fd973f352612c39881b33b606fa53012c82d638b62e6099173f0369f53de467ade6fc8415b4955f0eb65f58c18fb80a27faeee26ff11cef882739ec5e86032af0e557b357c1667b5bfa923bae041dd6ba63284b8bd6ec059df0f3d1f20ebcf6491faba0108f87b2630d8e765c8e006a5d68403c2d8085373280888d15464d585f595cd32b3a74ad075f3d6ee4a8a895fe7c9b2345c787cc59b73835c03c471a86422dac2cd0b2ea1d9739e4a8c6b216aac0a6c5ec3ca8e8758bbc7b1d5012379fb48df74c70a1ae6ceb2e6cb0f94b0d87f61ce22d10bf9f8d3b68c0c8e7948758b6b23a64d9ddd76557de0044f22b4c136ade2f2868079f24d81bddc27fd96b2253c1e66b9cf7b1384d96eef00b75519f3753a95f2ba264d59cf1f9fc4bb225838304bc5da332ffe85e4aa616f56eca6e501db13ccae973aad9e1158befe6992aae21ba557323c71cf0272e3cc79e6522dbc86327f1de43eb82cb164af6acef820bc164973aea3226b19216dda987cacce521779c4fc6dfeb0f56b680ae99bc212ff4031b4d8b13b4719070163bc1ce5b3e15618940d64d3e32146b936f4c43c6c492d49ca7e3e4579a99b235bace26e739c2f13861e6ccc764bd95829161ce4fd697926e4cc0feeea029e0c7be2b2d8cdcfb69d6965f11fba11130a86d403c2887f39a0823abbf4b1fc5ddcc389edc076ac62af613aed6a0584924232b1c79adc58091cb969ec8924d739164912da05db64fa10c7a1a5e98cfa7e34e6ece78d0ad93743421f67df44c807432b53dfa2d695f785c406e4bb33656f6ea64c283a01471ea3e7c640d097be60a7621dda7054b0c839b7f84ef0143d24a30af4d3e3f96ce1ac4542b675f1f39d2109ef7d87158447793f7d40271291a8853c11134b1c86a362b31aed4964b67174639b8c0b70f1163f4383c143bed5eeff71a65b2b4b2f16d23f0bc3147d06ec36fb04506a7ef0f1dab88ac80d44a6b8bc0f2b1184692d9d381bf1349d955db192382fcbf378f12c512f383f37e762d3e2715168b87e9af26a44a446671390ff6d850033eb8c3ab396190ef05768355861a1352241e3417f3fba9fdcc6ed93cf1ead542c639538a6cce737f14534ec890e277c9cd54eaae9c12ae288749c73b57dc9a7b566fec8fc085f3c083b85c0d485bc63d96b0dfa3c3513a18d3a291379ae915b0d6ed7f439a52461c88e52559a889508dfffbc731781f9230bc3d9732c256a500ec75933f2e4666b801035118351dc3c37b5c7515a11bc6f7bc60bbd0317dc28b8084cf7aa60115a559ae7860f3072dd2e26ed8c966d718ff5805621b9ab69580888e7c15195e0234a7b413e6b9b91c9fc7126854a75795bad3316761483547bc7dfe68097622479ffe592f0c5bc7bc3e1eee2c922d129e0637650fe74479e9e472c99c4a39677a97829986a5a3652593ca024a9847e04474469f10358a40e83a3a5de0264f55e175c4302b6fbe824ca4919cd0e5f9b88f726db47d2e8f4e0da555a95054843371bf23285bf7e3c51dd6a4de638798e330b30ba27e3ad980faa34501770a9ad70010b82cecb55ac6058f5e9b6e110e30f10faed558b6bd39b7f0eab64b693ef23af1c98be47a8131251ed19a0808734f3ce3ac4e83c54bea5bbdf0e4bbed72e28911aaf2b7b2ba953f462c94f5b9b9236622afd59582d715e4d4d82e7b5b65e65b07019cd7ad4b4904d3bf1f5c97da6d8a6993c7ede5f758b1f4102056e0e89f2b972cfc4cefb409467b6e46689f35a8d11c354ac1475295807df52eff8f87664eb24124c3fedf5edf9b9925bb096e2923acdf5308491454ab2b3ab9126743d08cc549910b9bf67cf10180cd37b3a70f682b4f1a0c4593417f0bdb20af95f7ec3c83f1e4e2bb55a565982c3e5977f8cf77d8315d3851d033c85b8e67899ce828d336298ef70454edd31ec17a186b0543d5cc7e9269dda03008ccc8b126dbe082af0663fc9de99835038445d564e77bec1ac13a90c73c571bad7b8ebe2ac88d670fbf9c095ccb211228f16dd0887f3eacfa5db43c29529cd0461633abd88f0cff3fee08d42e3d0c27a2e4d09f60f47bf817184499cf9a03f14af149525e8ade41258b6ce4e02203ba1b2c518636f7fbae96e7f8e7cc7d6d7795c6003ec10ea14b4e2acbadabb44e7f6863eccef866669f65a7b7a4405eb574de682a153ad468715dcb60f239c20331f4733da20eb9bed98b5ff7b0f253d03d396fffe9d7aed6efae67847e26670d4f7f9df907b2dda895f373e801cc26353e89d862c98993de7367f971b702dcb7f5c6935ed800d17c2d9c19d53ac481443d270e7ca2a067c0e7b99afdaa012860ecd4996999971f946ff41dbae02b2d38a6db582e9629e91aecac3eea9588aa0274f25159f145c2acbe1a1a621a43364c1bb56df2e5db22573fbdb389a0f28418a15fa4b2a2bde6c0fe0eedc4608bec77c4188c9a1b089ee6b5e9e0a4291450cb280f1c8b525bd2da1b24d2daf0aa2b0d5e770c110d73a8da84c041daaf9a8713adbdc15bf6f87a32076efd00602f82c93354409168295d4cc2a767448f518ca7b9489e8786ad1542f2daf1924dd8311ab52605949482f658ea71b75c44a0a75d17b9a7b667880c56a70ce3b246c579fd8dcd75cbf9973a43f6483598abffab8415da22fd1dd3f8bc0220464c7a0117306321014d713f43a109f2e6abe0d5bafe353ea8dbb4564877291208b409ef9469dff7b0ba182f8e0cd0f2e6029c9b80d29e3f0797880d22b891c4dd9c22e759decad080b9e28d2eea7ff444a9591e9823203a77e70b50e0662c0b3b46f37e93b4206d2856d87d9d69700471ea624a23227a495e62fe03848b017623716b666b6c78a49ddab51ae839e9dbc1db36bbcc3e354fe5dd998db255d5e1757e030136585ac3f16d3386047a71f576d22f9e3caa6b1725e0f15ca45563daeb001329557df2aa91f1e6118c56687e47d57270dbeb35e2778bca8c7da5efd1699f29c10d1ef3deb9e677762958a5d2d7915dfa14f865f1b944c35ffed9a99e00d9d909b520637d043838f23c691acd8039863c044824d65fa35b2bfe1d2d69ea969e34a6f837a53e92b2622c3825919787da71fde4e97cf1b86df5d724ff44dae7cfc3d1bf5c76a1d1211bec96208b36949efe9e4fa55d2f59b9b3095b8799ca7e6ddb63d64b2eb71a887310c71fc609e5471bde8088bad6c1edf8120c5e8ebe52158f83cafdd377f48ce71e71374060b9fa1668e05ec9fd8e2078c6a753043ddc1f6c08e8f4a342cab8bbe4f112896b16708719d8b8fe75932b1a4603895fbad75d1b1501c3f8b241e88f42593e447e151464f47e8c0e36e34cb8eca77b3b5837809e7e396342f385fe7366026630ac183ab0d5badcb43aafdef2a830c6a3d238c1e0c4474da582216d20abc18010e2902a65b16e6801058be64d342e440c5fce11b756ba6e2a6bf4265284e88ee4c52e374592beb1df5ba61abfb9d4440943dd4d546e8ab25f47ea50a739ce6d34dc86e77b48e69a7e74bea419d8eeb666d7b196b52f0171a6aaa199fd55134e6d44ab5428da9915f40a6b70d0ea3ada287b12d5dc84bd783974eff17c05e2ff44905bed96622109056a0001aea0af3615dc83a054f433b1df83df1c4e63469b98ad97fbb89029226c8a4d1b992211fd4ecf5e94043c3a46e0544e11c883b707fb491c21813e8f4a215ab0446d1b44d062b6ea7b80d06d222ae9ecfe35f2d5823d168ef34cddb38949208c12b1c93be4dbaeaf1a71082f7ecd226d35e26d1a263c7502d6fd8a2f5f7285737e12760f9b6c11f5b980e2a419f9f2eb9d72a49dad8be1d23eeca38c9ce6b53580a4f873baf784eef04464859d6bc5d31d44175fa61c9aa0d8614cd47c6ba30b494f80e26c6e0eb5909c9bab639fb7acb0e082f2bb369f5eed9afe54d8d14906cc981a827c3804e3dffb20113e5386bcce9d0910cb71af5684d2c16d3a69f2e1e5c8a00526da2b601ebf55be98abd68c1bed45c03b6caa7a823fa39990e1393c9326a9eadf65161a735e8fdb58da8613c12c6142d8063317797384c5f41ca2414723d5e145c64d5eaca54b3b63c216e69862de5284311cb000e3612f371fb80a64c5dc46d9c01936fafc34d257cc14d948f7a2dbc550f21f373349c12df3614d887ce5f679e013d21debfe4e2811b36e03c06cb4531a82255aaefe6eb350dd3fa4891a20d805c36271bc2607cf8f6bb4a9e6a65ea46610be9fc5ff4139d71ba3c5c575dd0279555b809ca9997afe8d102bf51001f34efe391a410b03ad692b9dfae50fc6fe1b05b01544546d7e43c570585081a86641663b2971b9d2f199f9a17b88714e190e4ffdaaf35d73cc815343881e960e3a036013db66a5f03d0c697ba5f3dcfb27131e4030b140143f3b82d23ae839f85824106b434df7a4d06246f6e4ab663c6a531809f3fe31fcfe690c93be4c06d525d6213bf40fc75540cec218953912146860b4bd04f416130fbaffd558c70b77de865714ef8b25573ee21a2f726b089f2a94af8723736e8fa1824273150b33edf1c2fd35535c7b497082c2f8dc1f053c170904fea62a1b20989c3cdb74965f9c5def94b6af4f70b050ef1c7e6572228b3a53162a2fa8f57d0f5c45518632e09b1a777c2b590bcc090cff720b23a104ac6e0444b8b9fce624fda054c9109e82bc52e0ed439db9d1f1533479451451c33ba0eb3057808ef7573db66c16e592e7186ab3ae275ff7c7d9df6f8d9d920901027d48b9f0af76120990f5b81a5b28e69732c6710cdb2e0619e689424e6a546ab5305c07f066635f36f7561e1494edbb31ad1aaa9ddbb56b6b66f14af15c5f522caf513640fa4ace5f00165add06daf94d8112db37fca88ea7f448f792fb02b2eaddf5a1ca737e667d32c4f5db5bd4ade1a55dab29faa83863ac44c48a97ebec79b33f20aada9e97df0b86695b5aba71896d34ba05e1075a524051a7a0a050dd395c76268fb2e421c87c65c86575074ee7db2c724e5e7969237171a9cdce6c29597c2e4999175759f41bbf6e76cc8f5658c7f02a9e67b86b9974dadff9532abe5ac215435f00c3c0a081bfe8222cbbaf68a2b0a9cf1d7fcf312e595a32dc5b70e992bf0f2ec4099041d86d80b893a30bf4517c81d332ba7abf72bb93b2ff6befe4b237778751309b855cabf99b9eebfdd1f797983062203550cff1f89a9d053bd43ffd175490382837edb934d310f26d8c2f0f6411a7a03a0c6c6a91ffd0e2d520609f530be93dbdcee3761b317b35fa0a0fee60e4186b2236e078bbd986c2101734be679f272ba437cc", @ANYBLOB="ddb84a95d1cb6e62cceed0c982d80436b0b65490b2c71c4a56ccf2af717311909e3d4e954f46e9bbb9dad97712fdde8d73aae165bcf68b610eeb683990129d414a79a35a985079f995353bd018df775fc785a351822841c5a07b15402221f4b9d6f00eec62279dbc28ee18be597773073c07de2d851ea64b571208a77a57c6dc12f5ebd4e9001488baa9ca012584ed28b67908e7d2ac2e3aef57a35726c58586e6eb2b6716dec64877a11a8dff8c50"], 0xfc}}, 0x4080800) shutdown(r6, 0x1) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000080)=0x4) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000100)=0x2000004) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r6, 0xf505, 0x0) pwritev(r5, &(0x7f0000000480)=[{&(0x7f0000000380)="00214717a70700000000030600710a5eeb9d0471200000000500000000000000ffff0342844d50e77d0dc450de49c204a803166580ac899c081cb49f1930e7d07fbdf3d8134e72158357ee37fdae", 0x4e}, {&(0x7f0000000540)="cade5b9cc213ae7126ee040435e2ca93a5501074ff92d7a0e884c13b2ca248372578fa8684826d39dd0a2e3d444d6134437203f529b3a1e30261d480ad3a64a118a72c71e3353e0895b76257c560cbd5b055821f0a141e721e2ea54408ede26535e7a6f2ece24d7c45a0ff7c32768c7cebfc438701a9e26ea4d242d6d7fc8647386e347a7696b8ec033cdf76720f65fcb3e0dc9bfbf156324186253e4eecbf77806b28be00ab7df52d396a63ba3493f16db0aed9e9dcfde701d4f65404a3f02e5653572ab8e64dbbf836fca34baa855e3c", 0xd1}], 0x2, 0x84, 0x4) socket$igmp(0x2, 0x3, 0x2) listen(0xffffffffffffffff, 0x4) listen(0xffffffffffffffff, 0x6) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) 2.721435757s ago: executing program 3 (id=5938): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x13, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@alu={0x4, 0x1, 0x3, 0x8, 0x3}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000680)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e24, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x15}}}}, 0x32) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000001a00"/28], 0x48) write$cgroup_int(r2, 0x0, 0x0) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendfile(r3, r2, 0x0, 0x1e2) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x63, 0x24, 0xd0f, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x0, 0x2, 0x5, 0x0, 0x10000}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7fffffffffffffff, 0x0, 0xb, 0x1, 0xffffffff00000000, 0x7}}]}}}]}, 0x78}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000500)={'erspan0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x8000, 0x8, 0x80000000, 0x9, {{0xe, 0x4, 0x1, 0x5, 0x38, 0x65, 0x0, 0x3, 0x2f, 0x0, @multicast1, @broadcast, {[@ssrr={0x89, 0xf, 0x7c, [@multicast2, @multicast2, @private=0xa010100]}, @noop, @rr={0x7, 0xb, 0x6f, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}]}, @ssrr={0x89, 0x7, 0x86, [@multicast1]}]}}}}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000850000005000000018110000000000e02da88cb69d806601d52aa124033b40521a4935cacc1abecfacd735cbac9c27d848051ec7fd45527dc332c52a80ccea80e30b1d1e8aca7c43fa73ea53ce1183e65680c277622ef82ce2bd099effc155ba9365194a34609cbbe13254650cfcce162fe4b8f26def80075b1239cddab73449728f4d3fa99aeeb9cfb4de79e4da94f73b570947e42f442960de2131b0a946c52491d1783c20fe6e21d61c9a", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f7ffffffb703000018000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x10, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x41000, 0x82, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x4, 0x8, 0x0, 0xee4e}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000600)=[r7, r8], &(0x7f0000000640)=[{0x3, 0x3, 0x1, 0x5}, {0x1, 0x4, 0xf, 0x2}], 0x10, 0x5}, 0x94) close(0x4) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@updpolicy={0xc4, 0x19, 0x1, 0xffffffff, 0x0, {{@in=@multicast1=0xe0000002, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0xfffc, 0x0, 0x3, 0xa, 0x0, 0x20}, {0x20000000, 0x7fffffffffffffff, 0x0, 0xffffffffffff0dac, 0x0, 0x14d, 0x0, 0xfffffffffffffffb}, {0x0, 0xfffffffffffffff7, 0x200000000000000}, 0x0, 0x0, 0x0, 0x1, 0x3, 0x2}, [@mark={0xc, 0x15, {0x35075d, 0x2}}]}, 0xc4}}, 0x2c000010) sendmsg$nl_xfrm(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000cc0)=@getae={0x18c, 0x1f, 0x100, 0x70bd2d, 0x25dfdbfc, {{@in=@loopback, 0x4d2, 0x8, 0x2b}, @in=@empty, 0x6, 0x3501}, [@XFRMA_SET_MARK={0x8}, @tmpl={0x144, 0x5, [{{@in6=@empty, 0x4d2, 0x3c}, 0x2, @in6=@remote, 0x0, 0x2, 0x0, 0x9, 0x10, 0x4, 0x8}, {{@in6=@mcast1, 0x4d6, 0xff}, 0x2, @in=@local, 0x3502, 0x4, 0x2, 0x10, 0x7fffffff, 0x4}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6, 0xff}, 0xa, @in6=@empty, 0x3500, 0x3, 0x1, 0x9, 0xfffffff7, 0x2, 0x2}, {{@in=@multicast1, 0x4d6, 0x3c}, 0x2, @in6=@mcast2, 0x0, 0x2, 0x2, 0xd8, 0x1000, 0x5, 0x1}, {{@in=@local, 0x4d2, 0x3c}, 0xa, @in6=@loopback, 0x34ff, 0x1, 0x3, 0x5, 0xffffffff, 0x9, 0xb79}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24020044) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000cc0)=ANY=[], &(0x7f0000000bc0)=""/202, 0x34, 0xca, 0x3, 0x7ffd}, 0x28) unshare(0x6a040000) socket$inet(0x2, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000300), 0x8, 0x10, &(0x7f0000000040), 0x10, 0xffffffffffffffff}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.468231586s ago: executing program 0 (id=5940): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe) listen(r0, 0xa1) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='lp', 0x2) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x4e21, @multicast2}, 0x10) 2.370038665s ago: executing program 1 (id=5941): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000000b0601020000000000000000030000020500010007000000280007801800148014000240ff0200000000000000000000000000010c00018008000140640101000900020073797a31000000002982c676c80bd8b8d99eaac141179ec23d6b637ad6b52984f0c4e3e08105d1176c6db1633bc35583b3a2814e79e4983d42f2fd1fabd5355b1f9ea9df8a6bcacf094dfd519750f91d12a28da3ed38171e0f59e36695e3a328dbda5ad5e24524b174fd1e9387d520d04a2de7889d9dba93f9bfe837e4969ea302d6131c42"], 0x50}, 0x1, 0x0, 0x0, 0x4064}, 0x4800) r1 = socket$key(0xf, 0x3, 0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)=0x801) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001d80)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x41) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0xb, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r5, 0x83, &(0x7f00000010c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/194, 0xc2}}, 0x10) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)=0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305839, &(0x7f00000002c0)={0x0, 0x7, 0xefff, 0xfa64}) getsockopt$XDP_STATISTICS(r6, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000440)=0x30) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x4, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x4040014) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8}, @IFLA_GENEVE_DF={0x5, 0xd, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x3, @dev}, 0x2}}, 0x2e) close(r8) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r11, 0x6, 0xd, &(0x7f0000000400)='illinois', 0x8) getsockopt$inet_tcp_buf(r11, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) bind$inet(r11, &(0x7f0000000100)={0x2, 0x4e23, @multicast2}, 0x10) connect$pppl2tp(r8, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r9, {0x2, 0x4e24, @empty}, 0x2, 0x0, 0x2, 0x2}}, 0x2e) ioctl$PPPIOCSFLAGS(r10, 0x40047459, 0x0) close(r3) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020500060a0000002cd07040fcdbdf25030006000000000002004e2200000000316630842eda51bc02000100000000000000070c00000080030005000000000002004e22ac14140b0000000000000000"], 0x50}, 0x1, 0x7}, 0x0) 2.190010217s ago: executing program 0 (id=5942): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x97}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x76c2}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x8, 0xb2, 0xa8}, 0x39}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) close(r2) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e00000000acc10200000001125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000400000000000003008500000020000000850000000500000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000780)={0x0, @llc={0x1a, 0x305, 0x7, 0x7, 0x0, 0x10, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, @vsock={0x28, 0x0, 0x2710}, @nl=@kern={0x10, 0x0, 0x0, 0x20000000}, 0x7, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000480)='gretap0\x00', 0x7eb7, 0x1000, 0x200}) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000440), 0x8) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r7) r8 = socket(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1000}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0) write$nci(r7, &(0x7f0000000680)=ANY=[@ANYBLOB="710502060102020209080c078a38ddeb481fd8011f0433003b841b908d67a95228be03fc423f603f8edd4e6110701ba2891c5aad4ed233dc7d5d4824ef9fb1d2f12cdff4ffc71e3cfdc0afada4d402c8007301605a5bc0a8c2186ab3230747de507d93ba5fb843550363ae5ac6edd08151357f503a0635ab15856850a7489d5dfc22b600881f2daf71962f938441560b444de611542065d55ed1cdafcc4bca2a632bd49d3241b57845e968faeb78d7937fde2f2e7f5014f675318762b38afdea8929c506a14f93"], 0x18) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) 1.947856265s ago: executing program 4 (id=5943): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="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"], 0x270}}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x25) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r6}, &(0x7f0000000840), &(0x7f0000000880)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r7, r2, 0x25, 0x0, @val=@tcx={@void, @value=r7}}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0x0, 0x0) unshare(0x400) socket(0x15, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) socket(0x8, 0x4, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r9, &(0x7f00000001c0)=[{&(0x7f00000005c0)="afc356bf9b", 0x5}], 0x1, 0x2) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x8}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5}]}}}]}, 0x44}, 0x1, 0xba01}, 0x4000000) close(r8) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000028010000000500000a480000000c0000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001800600010000000000080003400000000114000000c611a896912638970cabdd42470d433011000100000000000000008eec5abe51"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.385017427s ago: executing program 1 (id=5944): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x45}, @rand_addr=' \x01\x00', 0x2, 0x6, 0x1, 0x0, 0x3, 0x2000000, r2}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000180)={r4, 0x1, 0x6}, 0x10) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000540)={0x0, 0x1, 0x6, @broadcast}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r7, 0x0, 0x18, 0x0, &(0x7f00000001c0)) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000800)={'syzkaller0\x00'}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, @private0={0xfc, 0x0, '\x00', 0x3}, 0x1, 0x6, 0x0, 0x0, 0x6, 0x58010a, r2}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r11, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r12 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r12, 0x400448c8, &(0x7f00000000c0)={r11, r11, 0x206, 0x0, 0x0, 0x2, 0x72, 0x1, 0x3, 0x7, 0x0, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r12, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ac0)=@newtfilter={0x26c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xfff3, 0xc}, {0x10, 0x2}, {0x3, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x23c, 0x2, [@TCA_CGROUP_ACT={0x238, 0x1, [@m_ct={0x12c, 0x1a, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "95b974893d351fb1292ac9f37c904aa5"}, @TCA_CT_ACTION={0x6, 0x3, 0x15}]}, {0xe8, 0x6, "86bb5fddc1f77a1a621901ae6214e83e4335466b61fab879d44a508a9131fbf7cddec67dbb4cf946dcb9f15a7e302314a1e4dcfd3ed5a38d96e0f9ff30c0c2978ca76a0f1317daeee026b0a71fe4b9a2c2632cd7a1fa95c3f9a8b0c2f3ccbe14a0147b0663e655dfb7bbcbb1d043fd8316c082191c87afa4b7bdd686fd0c3f3cd7f5cf7896c6b17527915e248378960d7982ee16d73ea4a384565f98371a04e176284dd92b29e74d072be279a5e8ef70bafd1355c36be5583a045feebb3f224eabae7e69a0b2fcc9344ff32875721ffb152bc690297d8bfb737b30a28a13d88f398b5244"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mirred={0x108, 0x2, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffff8, 0x4, 0x0, 0xffff0001, 0xc}, 0x5, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x3, 0x1, 0xd34}, 0x4}}]}, {0x9a, 0x6, "f1546f274559c54c8b304d68701d4736395397fb405272a9b3f2b45bbc7279a47568068f074e763e9740834a7b74e995e62c42354f64698b47d963ffd1767245167ad7561d898995bbebc485898b3383f4ec94bb2c707f61ab5ad327b9854f129acde4d17abfd74e7ae2c774f345f5f9b0b72eabd9bee4cfb3d6901a236f4b4f259d77863f94cc577f38d945cc9750f5f798053f1884"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x26c}, 0x1, 0x0, 0x0, 0x84}, 0x40010) 1.205820067s ago: executing program 4 (id=5945): syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}}, 0x20000800) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000240)={r0, &(0x7f0000000140)='nl80211\x00', 0x101800, &(0x7f0000000180)={@align=0x9, {0x8001, 0xe5dd, 0x8001, 0x4}}, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x9}) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000280)=0x1, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f00000002c0), r3) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000380)={@private0, 0x0}, &(0x7f00000003c0)=0x14) sendto$packet(r2, &(0x7f0000000300)="b444c0820805c3e3c659c10be318edf9c1aca0e8382f9581468a42a670ccd0393969e05c47eb2120bdff3f472a3cd67173e6d1a0f6fa4b0cb923680900caf494eb9c27ae2ef1db06649b04e7afe79aaf016078eaeb4a1f5b0a2aceb27e1ba9330f10602aaf05ba33b2fd534c72d2150349ec8dde8a86a71a1fea85", 0x7b, 0x0, &(0x7f0000000400)={0x11, 0xee, r4, 0x1, 0xe9, 0x6, @multicast}, 0x14) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, r5, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x4c}}, 0x20000000) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r3) sendmsg$IEEE802154_DISASSOCIATE_REQ(r3, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x50, r6, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x84}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x9}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x23}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0xd}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x100) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780), r2) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400009}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x60, r7, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x21}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xd}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x60}}, 0x40) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_SIOCGSKNS(r8, 0x894c, &(0x7f00000008c0)=0x7) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000900)=0x80) getsockopt$llc_int(r8, 0x10c, 0x1, &(0x7f0000000940), &(0x7f0000000980)=0x4) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a00), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0x94, r9, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x40}, {0xc, 0x90, 0x9}}]}, 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x10) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000000b80)=0x4, 0x4) getsockname$netlink(r2, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r0) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x2c, r10, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x4000840) r11 = openat$cgroup_pressure(r2, &(0x7f0000000d80)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r11, &(0x7f0000000dc0)={'some', 0x20, 0x1ff, 0x20, 0x2}, 0x2f) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r1, 0x40786e88, &(0x7f0000000f80)={{&(0x7f0000000e00)=[{0x8001, 0x401, 0x7, {0x6, 0x2}, 0xfffffffffffffff7, 0x7e38629, 0x4}, {0x1ff, 0x47ef0abe, 0xfffffffffffffe00, {0xebb, 0x31f0}, 0x72, 0x400, 0xe}], 0x2, 0x40, 0x3, 0xe4}, {&(0x7f0000000e80), 0x0, 0x10, 0x9, 0x80000000}, {&(0x7f0000000ec0)=[0x5c], 0x1, 0x8, 0x96, 0x64a7a16d}, {&(0x7f0000000f00)=[{0x4, 0x2, 0xfffffffffffffff9, 0x5, 0x76}], 0x1, 0x28, 0x1, 0x8}, {&(0x7f0000000f40)=[0xffffffff7fffffff, 0x7, 0x3, 0x3, 0x9], 0x5, 0x8, 0x4, 0x8}}) sendmsg$nl_route(r2, &(0x7f00000013c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001380)={&(0x7f0000001040)=@newlink={0x338, 0x10, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, 0x800, 0x40400}, [@IFLA_CARRIER={0x5}, @IFLA_VFINFO_LIST={0x2f4, 0x16, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xea5, 0xee9, 0xa4, 0x8100}}]}, @IFLA_VF_RATE={0x10, 0x6, {0x396e4546, 0xfffffffe}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x5, 0x7}}, @IFLA_VF_RATE={0x10, 0x6, {0x63e, 0x3, 0x5}}]}, {0xcc, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x4, 0xd6f, 0x2, 0x88a8}}]}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x9, 0x5}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7, 0x6}}, @IFLA_VF_RATE={0x10, 0x6, {0x8, 0x0, 0x7}}, @IFLA_VF_MAC={0x28, 0x1, {0x7f, @random="25943e10037b"}}, @IFLA_VF_MAC={0x28, 0x1, {0x9, @remote}}, @IFLA_VF_VLAN={0x10, 0x2, {0x4, 0xfb5, 0xd8df}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7f, 0xfffffc00}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x800, 0x5}}]}, {0x9c, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xffffffff, 0x1}}, @IFLA_VF_VLAN={0x10, 0x2, {0x8, 0x356, 0x590}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x3, 0x1}}, @IFLA_VF_VLAN_LIST={0x68, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x7, 0x8a7, 0xffff0001, 0x88a8}}, {0x14, 0x1, {0x251f, 0x451, 0xff, 0x88a8}}, {0x14, 0x1, {0x2, 0xffd, 0xfffffffb, 0x88a8}}, {0x14, 0x1, {0x5, 0x3c9, 0xb7a, 0x8100}}, {0x14, 0x1, {0x200, 0xb00, 0xb, 0x88a8}}]}]}, {0x70, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x4}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x80000001, 0x5}}, @IFLA_VF_VLAN={0x10, 0x2, {0x74f2, 0x50d, 0x2}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x0, 0x6}}, @IFLA_VF_MAC={0x28, 0x1, {0x9}}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x1, 0x668, 0x4601}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xffffffff, 0x3}}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x3, 0x2}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x1, 0x1}}]}, {0x84, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0xd, 0xd67}}, @IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x2, 0x8e0, 0x6000, 0x88a8}}, {0x14, 0x1, {0x4, 0xad2, 0x9b1, 0x4928}}]}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xe33, 0x800}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xf, 0x81}}, @IFLA_VF_RATE={0x10, 0x6, {0xbb97, 0x5, 0x8001}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x7, 0x2}}, @IFLA_VF_TRUST={0xc, 0x9, {0x1, 0xffffcdac}}]}]}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}, @IFLA_IFALIAS={0x14, 0x14, 'wg1\x00'}]}, 0x338}, 0x1, 0x0, 0x0, 0x41}, 0x20000000) 1.141845424s ago: executing program 4 (id=5946): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) (async) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg$alg(r1, &(0x7f0000004ec0)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)='\b', 0x23}], 0x1, 0x0, 0x0, 0x4000004}], 0x1, 0x20) (async) sendmmsg(r1, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000200)}}, {{&(0x7f0000000880)=@in={0x2, 0x4e21, @private=0xa010100}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000b00)="cdc378a0bee7055b19cbab3c651079e85c9bf3529c64e6a21830ec476457830dd265a50baa4d4b8937a10e2f342e53219110d1288b6bf5991d2c395bda2cd47544c671fbd174b8fb3798396c79304cb078e76627e09e36822c5dc8aba39dee1e173cdc1b23751e4dca2c8ec92f1f646ab58af5ef6d9c107f13e5273fb037a3eabc3c1e506bf43f21659f63bf20ecb2005902a428a965777732ec7619ad2f36aab19ea801380ab9842ef5f12f0c6d2743e8f8fd5e9e3cf413e34c2022f74aacd94c149739df6f3a789cd16f251d582de9788c37ce323458e6496c4789fc11f056da73c0a66aeeb3ce78582d606d549a89", 0xf0}, {&(0x7f0000000a40)="0689101cb2a20a32401148037a5c06ddf492b133d5964077ef1bba12295313e454f61cb886d987ab9cb496143be908ba5a4f2bf3e6a73a0e025edc78292e435d6e8b890f8fe3841171f17c3fbc240aeab260a12fce83f67dc3815afbf6a27f4d6f8ad377ec1d36b870670118dca0a7e55dd0d25cd7cb458fabbf9e0ebe01650d1d048a2feb763b309ff9d8d8f8213218c1cc7f1d", 0x94}, {&(0x7f0000000c40)="f12ecf438f3ebd8b56a9f129c1876b7fa9d37a2db4302fbc22f75fe2d571767e84f3f548551f5026f21df2", 0x2b}, {&(0x7f0000000c00)="c2282420ce1ef9ff1d28c40f0f7e7b687bdc55", 0x13}, {&(0x7f0000000900)="16232f82ec7208bce0a6dea53a259bacd2f82a52b2b2197ae393b89e89adabf3c57788a17eae0a7a3bca47db7789c5ad0ec5c6bc065d04a0d1f40322a1eb610417e7404d21cc6673155cc89f9346948f69bed9b1e810ac7a180e25e73b9cfd49", 0x60}], 0x5, &(0x7f0000000d00)=[{0xb8, 0x119, 0xe, "21d19986d8f98be5bf1d06c2ba48cc84835b88e6e986386d2a1fd2a21ed63d508488f7c2660419cfd1678443cdc4516277c8f66e489f7ddfa74313b21c083e38a0e332149921929331baeb02eac534c6e4fd7ab906dd6bfd6860f1e1b623faee052dc14cb8c553b8dd8dc28bfe4a44e43c90a1c8933517059ea9247c4c2b2494faa754e2881a6c5d3cd49954de195e5c9ab33c75186c2f83a2fab498a5d993464af7"}, {0xa8, 0x111, 0x4, "9cf38e09d4e254f66e29c7842046158fa98b3ded8bec56677e3daa820eac0c4820806ff8a737006088388b935e9ec685bb800cb0a5e7cb40d5db0a7c4b664beae99f2423103c827c57d44e574fcc149baefce6912bb0ad68e48757b616bc16c2853c04557a19f3cb9e9ac60b03dd8bf78f7dc16c436a60e3ffb53275d23b99bbfebac98fece86e9ada96f1613328eb9116326a5d0cc5147f"}, {0x40, 0x115, 0x4, "d966c30bd8cc32c55aed6e5e8f6047b137309858b575f19e16d77699ada2599d8921cfa4634378168efe5c7a"}, {0xd0, 0x10a, 0xd, "c3e034bd0e8e31d720140197b8d3f56e41ac0d747884111b38afc88ef35ddbb7d0efa38fadb4f1a87dbcefaf6efd7b28b259352f4580493a9b9041df9cd824631af7908d6e5978a1889b8bc8e06a4bcb5ecc795959e6953517a9d8177279fc59a8b1b1b7ccb0fe47b8dae2d940b289412393795c56a1c45d60ca8effef51f5af01aec5a4679d79bf0fa8b950d17b87de8774dfdacb264101a48031d0b779f690c9964e931b4982e527b29604f2cc63a988aca2866bc87820b12972c159e5185f"}, {0x70, 0x114, 0x8, "09109b7ed2d2d17f4d9b2a343fc1cffb385c91b1c6bdab190a752049a91335ba8b203e9ffc290b40f6483bcc7897ee0da9c666ca4792e65f66e0be49a5f49d9e28fd20f88e0f9f6b2447702b96700fc1f734ac51f488027367f87762"}, {0x48, 0x29, 0x80000001, "4f947063d8eb9683e9b1fc27c3cee18fe6f8ba44cb8e1ed821e3a7300e3c68b8a0b50abb859c368342dfaa6985b8289aa113ae3800f491b2"}, {0xa0, 0x118, 0x401, "928e02d268227ceec9ca23a34ff5f395536635ace2f55d7abc3321f5da331029b6ac9b9410b84fb932609521eb23eca7b1f94cb732303fb2822327341518d7c98f95cd9a6245c7a76d26d413ee7055689c44c265f43eb0b966b6d9b4be24f6379e9a7c0db77980052988e73c645db07043164a152b28304b8cc9aff6966cafc76a7f7825eb043e552e"}], 0x3c8}}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001100)="864127daf618604171d47c1052aa633c7dc7e33cbcb341bb7bb45870d7d3ccd001de174f7570d1f658be138176797463b8399851000000000000", 0x3a}, {&(0x7f0000001140)="fc37ca01610d66284df4743d51cd3d0a63d95d7ff2ef268ad1d23af0d21c9c76ae443b93a6b1381bfab3a0d8c665350f1997c05439a35a414f726841b51b80da581a411b074e7eb241659da5a0230052e9d03f2d31e4a81449bb1ac195b4c4af6433abb2b2513863757b031b17ffdaef7bd2b921bf5ad16329ab2d995b33d4de01c5161f826a78a7da15cf09ca019f316a8f35b2c966d3c154463360ba157b7d1b5b9eb6474754ccde33015e8c9e67c2078b9fb115c3481acda51fc01423174212dfee95ef1d167c18b867e8dedb4164e759", 0xd2}, {&(0x7f0000001240)="6b999c50fd78a0eb209da3cf8d29ddcc6c5cbafebb4f99b4bc0a4e6cf0bb76276c0f2f5e81c79bc36980e6f24002d1493c019ab302b463", 0x37}, {&(0x7f0000001280)="740dc8af61ef6fb72c8e173c0723b1341ec8ad7f51", 0x15}, {&(0x7f00000012c0)="24abc96049903d41e4e6dadbaca267a96dc74ca828da39", 0x17}, {&(0x7f0000001300)="7ce1063555509c8a49acaff7ee6b154abcf22db18a372fae68296c86300af80d2d9bce4c09058bbb79ca56294e547ab91fb948e83594180ddf00bc43b2a0ee9eb4d2adb371b6e6f1b4915976a6df392e734fa9ad853ce0c9570399d3eea4ef265d248819fe13b6b6b2c0f094db0b56b12c855463e2db65852eec33be22bf52e6f43250ab617b", 0x86}], 0x6}}], 0x3, 0x240080d4) (async) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x2f00020b, 0xd, 0x0, &(0x7f00000007c0)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7d15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280), 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x4005804) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000080", @ANYRES16=r5, @ANYBLOB="00012dbd7000fddbdf2501000000000000000c410000000c001473797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x10) r6 = accept$alg(r4, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000002440)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000580)="3222f0476ed4765dc271a2c4fc02", 0xe}], 0x1, &(0x7f0000001a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000801}], 0x1, 0x40) (async) recvmmsg(r6, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x1, 0x2101, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r7}, 0x4) (async) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x60, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'hsr0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bond\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x48845}, 0xc000) (async) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2a, 0x63, &(0x7f0000000080)="5fab413d270cec0465f5fc3f6da4cae37472246135260602e30ec7dc16531b8d0bb99da3dc71504f2176", &(0x7f00000003c0)=""/99, 0x5, 0x0, 0xd4, 0x85, &(0x7f0000000440)="5ae2bb912e49a234ba239fc69950ee7c06cf06fcdffe9a605d42aad4404830fd4ce0fe4bc5499f59528b69eaf04fa334fbe5e0beb95e2fd2b3c199eace71e075a9d5184c34c2f7a7b3a1ece9a4568f9b72cb8e0f4a65a1f0cdfe77586d32064da9e3185148d9431b610b558c094f28185e3187660483528fdcb5a8ae90534537aa1037a34730e02afc2c2c455978ecb0ad06f87fec2b214184ff07c9500cca477061d86a1431c6e5f307d8aeee58cf5928a8fb218d805435663ed681d39f98f7a9dae2def68ad04c413d12e5bd06bf81198841f0", &(0x7f0000000540)="2f4c3e58e889f32f1bb7278987b83562bd5903f37c2239c15ed8c4b48e9d8e6f43efd6306dabbb596e328aa06632c43a7b9e05d89f32957c47bb97f7cfbf4f5cef3c78b318856f1ce78466e4376ace142367efa489f0c8d1ef00cbae898d81cd2e01b9da31a420fb74045e18ff6476e2f6136982a9c59bbadc53b5628cc656f62abfa14fc3", 0x0, 0x0, 0x7f}, 0x50) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bdad, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 1.025526535s ago: executing program 4 (id=5947): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="700000000001010400000000141a000002000010240001801400018000080000e0000085a50a5aa46285b857758fcdc0d1070108000200e00000010c0002610500010000000000240002801400018008000100aca4acca1414aa08000200ac1e00010c00028005000100000000000800074000000001f4ff15400000000200adf8ad9eb2091b00e2d4d9bcdd9d21af6d22192eddf40de036f0994475c2bdde61c951582a94783ecaefb84f329339adb0650d5090252dad246205afbbd453"], 0x70}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x40, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x5]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) (async) r2 = socket(0x2b, 0x3, 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) (async) r4 = socket$inet6(0xa, 0x3, 0xf) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r5, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) (async) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x63, @loopback={0xff00000000000002}, 0xf}, 0x1c) (async) r8 = socket$key(0xf, 0x3, 0x2) (async) r9 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r9, 0x8918, &(0x7f0000000100)={@private0, 0x4b}) (async) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x1}, 0x8) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYRESOCT], 0x48}, 0x1, 0x0, 0x0, 0x24040001}, 0x2000800) (async) tee(r8, r9, 0x6, 0x5) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 953.38756ms ago: executing program 4 (id=5948): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) (async) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1}, 0x6e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'netdevsim0\x00', 0x1}) 827.185743ms ago: executing program 0 (id=5949): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x11, 0x4, 0x4, 0xc}, 0x50) write$nci(0xffffffffffffffff, &(0x7f0000000480)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x0, 0x3, 0x0, 0x7, {0x7, 0xd}}, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb1, 0x7f}, 0x48) r1 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80000) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x804) socket$key(0xf, 0x3, 0x2) ioctl$XFS_IOC_FSGEOMETRY_V1(r1, 0x80705864, &(0x7f0000000240)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000580)={'gre0\x00', &(0x7f0000000780)={'syztnl2\x00', 0x0, 0x20, 0x8, 0x2, 0x5, {{0x1b, 0x4, 0x2, 0x1b, 0x6c, 0x68, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@cipso={0x86, 0x6, 0xffffffffffffffff}, @timestamp_prespec={0x44, 0x1c, 0x81, 0x3, 0x9, [{@rand_addr=0x64010102, 0x9}, {@empty, 0x401}, {@remote, 0xc}]}, @timestamp_addr={0x44, 0xc, 0xd6, 0x1, 0xa, [{@private=0xa010102, 0x9}]}, @timestamp_addr={0x44, 0xc, 0xc8, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x2d}, 0xc}]}, @end, @cipso={0x86, 0x19, 0x3, [{0x1, 0xe, "5825de2e4613e2b67681f185"}, {0x2, 0x5, "ce8cad"}]}, @rr={0x7, 0x3, 0xa3}, @noop]}}}}}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5}, @IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x44}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) connect$pppoe(r6, &(0x7f0000000740)={0x18, 0x0, {0x0, @remote, 'gre0\x00'}}, 0x1e) 657.499517ms ago: executing program 4 (id=5950): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x1c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x6, 0x84) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, &(0x7f0000000480)={0x0, 0x0, 0x9, 0x400, @vifc_lcl_addr=@private=0xa010102, @rand_addr=0x64010101}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0xe0}}, 0x0) sendmsg$nl_crypto(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20000000040a010100000000000000000a0000010900030073797a320000000083df0a63f183422e4215036c08a6377775327d731a22565a505990290b084f38d7af564b530c79f51a3b1c74ad86292d882cae"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$bt_hci(r8, &(0x7f0000000040), 0x6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) listen(r5, 0x3) sendmsg$inet6(r4, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x906, @loopback, 0x7}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000880)="fa", 0x1}], 0x1}, 0x40085) writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000380)="d6", 0x1}], 0x1) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x23, 0x0, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=@updpolicy={0x164, 0x19, 0xfed88d3b47c1f85c, 0x0, 0x25dfdbfc, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2b}, {0x0, 0x4, 0x4, 0x100, 0x1, 0x2, 0x3}, {0x0, 0x3, 0x200000000002}, 0x7, 0x0, 0x1}, [@policy={0xac, 0x7, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x4e22, 0x0, 0x4e20, 0x8000, 0xa, 0x80, 0xa0, 0x33}, {0xffffffffffffffff, 0x5, 0x5, 0x6, 0xb3f1, 0xfffffffffffffffc, 0xffffffffc3a2c01e, 0xff}, {0x9, 0x1, 0xc, 0x6}, 0x1, 0x6e6bbb, 0x2, 0x0, 0x1, 0x3}}]}, 0x164}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) 507.070506ms ago: executing program 3 (id=5951): r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4) (async) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001a0001970000ff7f000000008000", @ANYRES32=0x0], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0xd98e6161ce3c5512}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r3, &(0x7f0000000440)=ANY=[], 0x6e) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd}, 0x94) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed3000000000000000000000000000000000000000000000200"], 0xb8}}, 0x0) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="8801000014"], 0x188}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) (async) r6 = socket(0x40000000015, 0x5, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0x30, 0x1ff}, 0x8) sendto$inet6(r8, &(0x7f00000004c0)="d7", 0x1, 0x10000, &(0x7f0000000000)={0xa, 0x0, 0x4, @private1, 0x8}, 0x1c) getsockopt$bt_hci(r8, 0x84, 0x81, &(0x7f0000002040)=""/4087, &(0x7f00000001c0)=0xff7) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$alg(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@iv={0x18}, @assoc={0x18, 0x117, 0x4, 0x1}], 0x30}, 0x0) (async) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000680)={0x28, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000011}, 0x2404000a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x320, 0x3a8, 0x3a8, 0x320, 0x3a8, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [0xffffff00], [], 'ip6tnl0\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x230, 0x250, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@realm={{0x30}, {0x99ff, 0x1000, 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x5, 0x4}, {0x4, 0x3, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) 342.475673ms ago: executing program 1 (id=5952): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {&(0x7f0000000780)}], 0x3}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="430000001000030400000000fdffff0000000300", @ANYRES32=r1, @ANYBLOB="080800004000020028001280090001007665746800000000180002801400010000000000", @ANYRES32=r1, @ANYBLOB="20ac01000404000004001a80"], 0x4c}, 0x1, 0x0, 0x0, 0x4894}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(r4, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) ppoll(&(0x7f0000000100)=[{r4, 0x5082}], 0x1, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000040601010000001dc086c3df118d0fcdc30000000000030000050500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000084) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 319.972919ms ago: executing program 0 (id=5953): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd, 0x200cc, 0x6, 0x5}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[], 0xa4}}, 0x40810) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x64, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xfe01}, [@IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IFACE={0x14, 0x17, 'batadv_slave_0\x00'}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40c0080) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='D', &(0x7f0000000240), 0x4b2, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f0000000640), &(0x7f0000001740), 0x2, r1}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x27, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000006000000009b988e6432530000004300", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x3, 0xff8, &(0x7f0000000780)=""/4088, 0x41000, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) 194.319571ms ago: executing program 0 (id=5954): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c) (async) socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6e5415445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d8b6d2ccd00"}, 0xd8) r2 = socket$kcm(0x23, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$kcm(0x10, 0x2, 0x4) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000410000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000a2230000095592ba157d27a5e73e81c8211c1f1d8dff969580b2987094304ad4958cb7658f3647e2d902e4b2e5f9d9c31978255e356ae5728f57384bdba6312657634e09f1e43402ac9c", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000001c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000600)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400030015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4040005) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) (async) listen(r2, 0x800) (async) accept4(r2, 0x0, 0x0, 0x80000) (async) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r3, &(0x7f0000000780)=ANY=[], 0x78) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=r3], 0xf0}}, 0x8040) (async) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001800090000000000000000001c140000fe0000010000000005001a"], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x24040810) (async) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r9, 0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6e61670000000000000000000000000000000004000000000000006c1900000004"], &(0x7f0000000080)=0x2c) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000000308010100000000000000000a00000005000300840000001400048008000640000000090800054000000004f59a39aed424f6742cddcd1431a60900adf4a2c30c4ffb25c603b31b73d99b49488b5d2252e0ca5fbeb2498255852ef287e6ad476ac5e26499a58df730978b92d924dadd8f449df6cbd18157ad1c82c256217283f2eeb78f03e80f75b4573a4b0d9f5068ea476e3c00909528b787511b5ad060c62892cde938"], 0x30}}, 0x4000050) 0s ago: executing program 1 (id=5955): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) socket(0x2b, 0x5, 0x2) sendto$packet(r0, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@volatile={0xf, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x61, 0x61, 0x5f, 0x0, 0x5f, 0x61, 0x0, 0x30, 0x30]}}, &(0x7f0000000100)=""/89, 0x2f, 0x59, 0x1, 0x6}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x9, 0x2, 0x5, 0x24180, 0x1, 0x947d, '\x00', r1, r2, 0x1, 0x1, 0x3}, 0x50) r4 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r3, &(0x7f0000000140), 0x0}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r5) kernel console output (not intermixed with test programs): length. [ 548.194221][T22073] lo: Caught tx_queue_len zero misconfig [ 548.421284][T22089] team0: entered promiscuous mode [ 548.421478][T22078] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 548.426611][T22089] team_slave_0: entered promiscuous mode [ 548.451784][T22089] team_slave_1: entered promiscuous mode [ 548.469014][T22089] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 549.057363][T22129] __nla_validate_parse: 10 callbacks suppressed [ 549.057381][T22129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4070'. [ 549.206128][T22129] 8021q: adding VLAN 0 to HW filter on device bond4 [ 549.295837][T22121] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4070'. [ 549.688463][T22176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4083'. [ 549.695258][T22178] sctp: [Deprecated]: syz.3.4082 (pid 22178) Use of int in maxseg socket option. [ 549.695258][T22178] Use struct sctp_assoc_value instead [ 549.719702][T22173] xt_CT: No such helper "netbios-ns" [ 549.895609][T22186] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 549.937697][T22188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4086'. [ 549.954159][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 549.960727][T22191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4087'. [ 549.984167][T22188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4086'. [ 550.201427][T22203] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4091'. [ 550.469274][T22214] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4094'. [ 550.594409][ C1] ip6_tunnel: * xmit: Local address not yet configured! [ 550.709111][T22226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4095'. [ 550.724062][T22214] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4094'. [ 550.977275][T22229] ip6tnl0: Caught tx_queue_len zero misconfig [ 551.034042][T22244] syzkaller0: entered promiscuous mode [ 551.046913][T22244] syzkaller0: entered allmulticast mode [ 551.677958][T22277] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 552.527387][T22336] vlan3: entered promiscuous mode [ 552.532626][T22336] bond_slave_1: entered promiscuous mode [ 552.582624][T22339] validate_nla: 1 callbacks suppressed [ 552.582636][T22339] netlink: 'syz.1.4127': attribute type 3 has an invalid length. [ 552.600140][T22339] netlink: 'syz.1.4127': attribute type 1 has an invalid length. [ 552.609350][T22339] NCSI netlink: No device for ifindex 36 [ 552.877756][T22356] FAULT_INJECTION: forcing a failure. [ 552.877756][T22356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.900557][T22356] CPU: 0 UID: 0 PID: 22356 Comm: syz.4.4133 Not tainted syzkaller #0 PREEMPT(full) [ 552.900581][T22356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 552.900590][T22356] Call Trace: [ 552.900597][T22356] [ 552.900604][T22356] dump_stack_lvl+0xe8/0x150 [ 552.900628][T22356] should_fail_ex+0x412/0x560 [ 552.900653][T22356] _copy_from_iter+0x1d3/0x1670 [ 552.900677][T22356] ? rcu_is_watching+0x15/0xb0 [ 552.900700][T22356] ? __pfx__copy_from_iter+0x10/0x10 [ 552.900725][T22356] ? netlink_sendmsg+0x650/0xb40 [ 552.900740][T22356] ? skb_put+0x11b/0x210 [ 552.900764][T22356] netlink_sendmsg+0x6c0/0xb40 [ 552.900790][T22356] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.900809][T22356] ? aa_sock_msg_perm+0xf1/0x1b0 [ 552.900831][T22356] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 552.900855][T22356] ____sys_sendmsg+0x972/0x9f0 [ 552.900871][T22356] ? __might_fault+0xaf/0x130 [ 552.900897][T22356] ? __pfx_____sys_sendmsg+0x10/0x10 [ 552.900939][T22356] ? import_iovec+0x73/0xa0 [ 552.900964][T22356] ___sys_sendmsg+0x2a5/0x360 [ 552.900978][T22356] ? __lock_acquire+0x6b5/0x2cf0 [ 552.901003][T22356] ? __pfx____sys_sendmsg+0x10/0x10 [ 552.901052][T22356] ? __fget_files+0x2a/0x420 [ 552.901069][T22356] ? __fget_files+0x3a0/0x420 [ 552.901096][T22356] __x64_sys_sendmsg+0x1bd/0x2a0 [ 552.901114][T22356] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 552.901139][T22356] ? __pfx_ksys_write+0x10/0x10 [ 552.901169][T22356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.901186][T22356] do_syscall_64+0x15f/0xf80 [ 552.901208][T22356] ? trace_irq_disable+0x3b/0x140 [ 552.901230][T22356] ? clear_bhb_loop+0x40/0x90 [ 552.901249][T22356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.901264][T22356] RIP: 0033:0x7f536399ce59 [ 552.901280][T22356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.901292][T22356] RSP: 002b:00007f53648a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 552.901309][T22356] RAX: ffffffffffffffda RBX: 00007f5363c15fa0 RCX: 00007f536399ce59 [ 552.901327][T22356] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 552.901341][T22356] RBP: 00007f53648a7090 R08: 0000000000000000 R09: 0000000000000000 [ 552.901350][T22356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.901360][T22356] R13: 00007f5363c16038 R14: 00007f5363c15fa0 R15: 00007ffed49914a8 [ 552.901388][T22356] [ 553.276685][T22369] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 554.062703][T22413] netlink: 'syz.4.4149': attribute type 29 has an invalid length. [ 554.263899][T22418] __nla_validate_parse: 17 callbacks suppressed [ 554.263917][T22418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4152'. [ 554.454550][T22433] netlink: 'syz.2.4154': attribute type 13 has an invalid length. [ 554.511537][T22435] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 554.522480][T22438] netlink: 196 bytes leftover after parsing attributes in process `syz.1.4157'. [ 554.532544][T22428] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 554.766571][T22449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4160'. [ 554.808871][T22449] netlink: 'syz.3.4160': attribute type 1 has an invalid length. [ 554.910674][T22455] bond4: (slave bridge3): making interface the new active one [ 554.919741][T22455] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 554.942802][T22461] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4164'. [ 554.952419][T22449] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 554.972396][T22449] macvlan3: entered promiscuous mode [ 554.977858][T22449] macvlan3: entered allmulticast mode [ 554.985130][T22449] bond4: entered promiscuous mode [ 555.000423][T22449] bridge3: entered promiscuous mode [ 555.026688][T22449] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 555.039047][T22449] bond4: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 555.055799][T22449] bond4: left promiscuous mode [ 555.060664][T22449] bridge3: left promiscuous mode [ 555.135683][T22476] tipc: Started in network mode [ 555.170480][T22476] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 555.196073][T22476] tipc: Enabling of bearer rejected, failed to enable media [ 555.248174][T22477] tipc: Enabling of bearer rejected, failed to enable media [ 555.321193][T22487] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4169'. [ 555.471791][T22498] netlink: 'syz.1.4173': attribute type 1 has an invalid length. [ 555.507710][T22500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4170'. [ 555.525997][T22505] netlink: 'syz.0.4175': attribute type 290 has an invalid length. [ 555.641001][T22513] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4177'. [ 555.671896][T22517] netlink: 'syz.0.4179': attribute type 11 has an invalid length. [ 556.649148][T22564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4195'. [ 556.888169][T22585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4200'. [ 556.898253][T22581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4198'. [ 557.000373][T22590] netlink: 'syz.1.4202': attribute type 11 has an invalid length. [ 557.020918][T22590] netlink: 'syz.1.4202': attribute type 23 has an invalid length. [ 557.859400][T22630] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 558.152762][T22643] netlink: 'syz.2.4218': attribute type 4 has an invalid length. [ 559.342571][T22672] __nla_validate_parse: 5 callbacks suppressed [ 559.342590][T22672] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4220'. [ 559.364439][T22672] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4220'. [ 559.499409][T22688] : renamed from bond0 (while UP) [ 561.216518][T22646] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 561.481960][T22696] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 561.652779][T22706] atomic_op ffff888025f26198 conn xmit_atomic 0000000000000000 [ 562.206699][T22735] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 562.229589][T22735] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 562.349700][T22749] wg2: Caught tx_queue_len zero misconfig [ 562.450391][T22754] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 562.457709][T22754] bridge0: port 3(veth0_virt_wifi) entered forwarding state [ 562.465350][T22754] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.472513][T22754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.498908][T22757] netlink: 'syz.0.4242': attribute type 8 has an invalid length. [ 562.655660][T22754] 8021q: adding VLAN 0 to HW filter on device eth0 [ 562.693012][T22754] 8021q: adding VLAN 0 to HW filter on device eth1 [ 562.711162][T22754] 8021q: adding VLAN 0 to HW filter on device eth2 [ 562.721101][T22754] 8021q: adding VLAN 0 to HW filter on device eth3 [ 562.746530][ T9476] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.753785][ T9476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.952712][T22772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4245'. [ 563.124812][T22780] xt_hashlimit: overflow, try lower: 18446744073709551615/32 [ 563.189314][T22781] syzkaller1: entered promiscuous mode [ 563.198598][T22781] syzkaller1: entered allmulticast mode [ 563.249430][T22781] syzkaller1: left promiscuous mode [ 563.263427][T22781] syzkaller1: left allmulticast mode [ 563.885128][T22819] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 563.912183][T22819] ip6gre1: left promiscuous mode [ 563.918572][T22819] ip6gre1: left allmulticast mode [ 563.927136][T22819] bond5: left promiscuous mode [ 563.933348][T22831] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4261'. [ 563.933479][T22819] veth5: left promiscuous mode [ 563.999675][T22819] bond6: left allmulticast mode [ 564.030154][T22819] 8021q: adding VLAN 0 to HW filter on device bond6 [ 564.348798][T22842] netlink: 136 bytes leftover after parsing attributes in process `syz.2.4264'. [ 564.360225][T22842] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 564.450049][T22842] tipc: Enabling of bearer rejected, failed to enable media [ 564.624765][T22847] netlink: 'syz.2.4266': attribute type 4 has an invalid length. [ 564.684173][T22847] netlink: 'syz.2.4266': attribute type 4 has an invalid length. [ 564.709274][T22847] netlink: 'syz.2.4266': attribute type 4 has an invalid length. [ 564.736554][T22852] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4267'. [ 565.134968][T22884] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 565.281907][T22884] bond3 (unregistering): Released all slaves [ 565.333187][T22899] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 565.722271][T22918] batman_adv: batadv0: Adding interface: dummy0 [ 565.731786][T22918] batman_adv: batadv0: The MTU of interface dummy0 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1312 would solve the problem. [ 565.773517][T22918] batman_adv: batadv0: Interface activated: dummy0 [ 565.954158][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 566.139637][T22928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4290'. [ 566.150516][T22928] syzkaller0: entered promiscuous mode [ 566.158453][T22928] syzkaller0: entered allmulticast mode [ 566.183325][T22928] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4290'. [ 566.238113][T22930] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4291'. [ 566.416515][T22937] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 566.436343][T22939] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4295'. [ 566.519291][T22945] xt_CONNSECMARK: invalid mode: 254 [ 566.778766][T22961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4302'. [ 566.807158][T22966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4303'. [ 566.816931][T22966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4303'. [ 566.827827][T22959] tipc: Enabling of bearer rejected, failed to enable media [ 566.837192][T22966] netlink: 'syz.3.4303': attribute type 14 has an invalid length. [ 566.846833][T22966] netlink: 'syz.3.4303': attribute type 13 has an invalid length. [ 566.864415][T22964] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4304'. [ 567.233858][ C1] ip6_tunnel: * xmit: Local address not yet configured! [ 567.374052][T22995] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 568.602706][T23078] xt_ipcomp: unknown flags 1D [ 568.813325][T23081] syzkaller1: entered promiscuous mode [ 568.833185][T23081] syzkaller1: entered allmulticast mode [ 568.848398][T23088] netlink: 'syz.2.4332': attribute type 1 has an invalid length. [ 568.947528][T23088] 8021q: adding VLAN 0 to HW filter on device bond7 [ 569.022750][T23099] syzkaller0: entered promiscuous mode [ 569.029815][T23099] syzkaller0: entered allmulticast mode [ 569.119738][T23103] netlink: 'syz.0.4337': attribute type 1 has an invalid length. [ 569.142088][T23105] netlink: 'syz.0.4337': attribute type 1 has an invalid length. [ 569.325484][T23111] veth1_to_bond: entered allmulticast mode [ 569.368404][T23111] veth1_to_bond (unregistering): left allmulticast mode [ 569.381791][T23111] : (slave bond_slave_1): Releasing backup interface [ 569.397118][T23111] bond_slave_1 (unregistering): left allmulticast mode [ 569.430934][T23117] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 569.652439][T23134] __nla_validate_parse: 23 callbacks suppressed [ 569.652456][T23134] netlink: 220 bytes leftover after parsing attributes in process `syz.4.4343'. [ 569.693183][T23134] netlink: 'syz.4.4343': attribute type 2 has an invalid length. [ 569.753316][T23140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4346'. [ 569.961139][T23157] netlink: 536 bytes leftover after parsing attributes in process `syz.1.4350'. [ 570.049131][T23163] batman_adv: batadv0: Adding interface: ipvlan2 [ 570.060089][T23163] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1312 would solve the problem. [ 570.088464][T23163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.100355][T23163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.130568][T23163] batman_adv: batadv0: Interface activated: ipvlan2 [ 570.147645][T23171] batadv0: entered promiscuous mode [ 570.154734][T23171] debugfs: 'hsr0' already exists in 'hsr' [ 570.161334][T23171] Cannot create hsr debugfs directory [ 570.231415][T23173] sctp: [Deprecated]: syz.4.4354 (pid 23173) Use of struct sctp_assoc_value in delayed_ack socket option. [ 570.231415][T23173] Use struct sctp_sack_info instead [ 570.272129][T23176] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 570.296317][T23173] netlink: 758 bytes leftover after parsing attributes in process `syz.4.4354'. [ 570.423740][T23181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4358'. [ 570.587018][T23193] netlink: 'syz.4.4361': attribute type 21 has an invalid length. [ 570.792257][T23203] bond7: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 570.859747][T23209] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4364'. [ 571.200535][T23225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4374'. [ 571.971645][T23273] vlan4: entered allmulticast mode [ 571.983111][T23273] bond0: entered allmulticast mode [ 571.988792][T23273] bond_slave_0: entered allmulticast mode [ 571.995284][T23273] bond_slave_1: entered allmulticast mode [ 572.004175][T23273] netlink: 'syz.3.4387': attribute type 1 has an invalid length. [ 572.041541][T23277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4388'. [ 572.054766][T23273] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 572.065331][T23273] bond5: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 572.077846][T23273] bond5: (slave vxcan3): making interface the new active one [ 572.094526][T23273] bond5: (slave vxcan3): Enslaving as an active interface with an up link [ 572.104415][T23281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4387'. [ 572.260372][T23286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4389'. [ 572.269693][T23286] netlink: 'syz.2.4389': attribute type 20 has an invalid length. [ 573.072692][ T30] audit: type=1800 audit(1779116866.749:23): pid=23332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4405" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=1608 res=0 errno=0 [ 573.184904][T23335] bridge_slave_0: Caught tx_queue_len zero misconfig [ 573.325149][T23345] netlink: 'syz.0.4408': attribute type 4 has an invalid length. [ 573.333029][T23345] netlink: 'syz.0.4408': attribute type 8 has an invalid length. [ 573.340992][T23345] netlink: 'syz.0.4408': attribute type 1 has an invalid length. [ 573.358487][T23345] NCSI netlink: No device for ifindex 0 [ 573.409154][T23354] netlink: 'syz.2.4407': attribute type 1 has an invalid length. [ 574.029032][T23354] 8021q: adding VLAN 0 to HW filter on device bond8 [ 574.876340][T23414] __nla_validate_parse: 73 callbacks suppressed [ 574.876357][T23414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4422'. [ 575.116927][T23426] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4424'. [ 575.161731][T23426] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4424'. [ 575.183657][T23427] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4424'. [ 575.248146][T23427] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4424'. [ 575.411791][T23438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4427'. [ 575.775011][T23451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4431'. [ 575.890005][T23451] 8021q: adding VLAN 0 to HW filter on device bond3 [ 575.947348][T23464] 8021q: adding VLAN 0 to HW filter on device bond3 [ 575.955428][T23464] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 575.969956][T23464] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 576.019855][T23456] batadv_slave_0: Caught tx_queue_len zero misconfig [ 576.099439][T23473] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4438'. [ 576.125504][T23473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4438'. [ 576.168326][T23477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4440'. [ 576.243993][T23479] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 576.687250][T23493] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 576.698543][T23493] batman_adv: batadv0: Removing interface: ipvlan2 [ 577.165784][T11597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.186244][T11597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.190534][ T9470] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.212557][ T9470] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.225793][T23524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 577.244500][ T9470] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.277935][ T9470] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.340063][T23527] netlink: 'syz.4.4454': attribute type 1 has an invalid length. [ 577.404993][T23530] netlink: 'syz.3.4455': attribute type 4 has an invalid length. [ 577.517355][T23540] netlink: 'syz.0.4453': attribute type 3 has an invalid length. [ 577.576274][T23540] ip6tnl2: entered allmulticast mode [ 577.835174][T23564] mac80211_hwsim hwsim42 wlan0: Caught tx_queue_len zero misconfig [ 577.931191][T23569] IPv6: NLM_F_CREATE should be specified when creating new route [ 577.945698][T23569] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 577.952954][T23569] IPv6: NLM_F_CREATE should be set when creating new route [ 578.267686][T23591] lo: Caught tx_queue_len zero misconfig [ 578.524202][T23613] netlink: 'syz.2.4480': attribute type 1 has an invalid length. [ 578.578167][T23613] 8021q: adding VLAN 0 to HW filter on device bond9 [ 578.598276][T23616] bond9: (slave geneve3): making interface the new active one [ 578.607771][T23616] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 578.895395][ T8117] IPVS: starting estimator thread 0... [ 578.994410][T23632] IPVS: using max 30 ests per chain, 72000 per kthread [ 579.065364][T23640] 8021q: adding VLAN 0 to HW filter on device bond8 [ 579.072791][T23639] netlink: 'syz.3.4488': attribute type 1 has an invalid length. [ 579.100037][T23640] syzkaller1: entered promiscuous mode [ 579.117010][T23640] syzkaller1: entered allmulticast mode [ 579.186573][T23640] team0: Port device team_slave_0 removed [ 579.544833][T23673] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 579.562399][T23673] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 579.580311][T23673] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 579.628872][T23673] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 579.986784][T23699] netlink: 'syz.1.4507': attribute type 13 has an invalid length. [ 579.995017][T23699] netlink: 'syz.1.4507': attribute type 17 has an invalid length. [ 580.049692][T23699] wg1: left allmulticast mode [ 580.136661][T23699] vlan2: left allmulticast mode [ 580.141577][T23699] : left allmulticast mode [ 580.150114][T23699] bond_slave_0: left allmulticast mode [ 580.159946][T23699] bond1: left allmulticast mode [ 580.175352][T23709] __nla_validate_parse: 32 callbacks suppressed [ 580.175367][T23709] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4508'. [ 580.213255][T23705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4507'. [ 580.463135][T23715] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.4509'. [ 580.477521][T23715] netlink: Conntrack attr has 3 unknown bytes [ 580.593294][T23722] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4511'. [ 580.641900][T23722] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4511'. [ 580.742330][T23727] geneve1: Caught tx_queue_len zero misconfig [ 580.767590][T23729] netlink: 280 bytes leftover after parsing attributes in process `syz.0.4514'. [ 580.818420][T23729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4514'. [ 580.850000][T23729] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4514'. [ 580.926696][T23733] syzkaller0: entered promiscuous mode [ 580.940871][T23733] syzkaller0: entered allmulticast mode [ 581.042200][T23733] netlink: 'syz.2.4516': attribute type 4 has an invalid length. [ 581.068877][T23733] netlink: 'syz.2.4516': attribute type 4 has an invalid length. [ 581.428876][T23756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4524'. [ 581.470138][T23760] macsec1: entered promiscuous mode [ 581.477055][T23760] virt_wifi0: entered promiscuous mode [ 581.870031][T23779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4528'. [ 581.897489][T23770] syzkaller0: entered promiscuous mode [ 581.909006][T23770] syzkaller0: entered allmulticast mode [ 581.960348][T23781] gretap0: entered promiscuous mode [ 581.977197][T23783] 0{X: renamed from gretap0 [ 582.050205][T23783] 0{X: left promiscuous mode [ 582.072046][T23783] 0{X: entered allmulticast mode [ 582.101858][T23783] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 582.358562][T23805] syz_tun: entered promiscuous mode [ 582.365662][T23805] vlan5: entered promiscuous mode [ 582.504116][T23810] syzkaller0: entered promiscuous mode [ 582.518782][T23810] syzkaller0: entered allmulticast mode [ 582.522823][T23815] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 582.717712][T23825] netlink: 'syz.2.4543': attribute type 5 has an invalid length. [ 583.211275][T23856] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 583.212206][T23859] xt_hashlimit: size too large, truncated to 1048576 [ 583.250003][T23859] xt_hashlimit: max too large, truncated to 1048576 [ 583.281503][T23859] netlink: 'syz.0.4555': attribute type 1 has an invalid length. [ 583.330140][T23859] bond4: entered promiscuous mode [ 583.338052][T23859] 8021q: adding VLAN 0 to HW filter on device bond4 [ 583.424399][T23859] bond4: (slave bridge4): making interface the new active one [ 583.431985][T23859] bridge4: entered promiscuous mode [ 583.439028][T23859] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 583.543548][T23882] netlink: 'syz.2.4561': attribute type 1 has an invalid length. [ 583.735806][T23875] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.792220][T23875] batman_adv: batadv0: Interface deactivated: dummy0 [ 583.978229][T23875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 584.001777][T23875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 584.021075][T23875] xfrm0: left allmulticast mode [ 584.178663][T23875] macvtap0: left promiscuous mode [ 584.194410][T23875] bridge1: left promiscuous mode [ 584.204526][T23875] bridge1: left allmulticast mode [ 584.228653][T23875] bond2: left promiscuous mode [ 584.240363][T23875] bridge2: left promiscuous mode [ 584.259786][T23875] ipip0: left promiscuous mode [ 584.269920][T23875] vlan3: left promiscuous mode [ 584.275462][T23875] bridge0: left promiscuous mode [ 584.281018][T23875] gretap0: left allmulticast mode [ 584.287029][T23875] macvlan2: left promiscuous mode [ 584.292128][T23875] macvlan2: left allmulticast mode [ 584.300090][T23875] bond3: left promiscuous mode [ 584.309816][T23875] veth0_to_bond: left promiscuous mode [ 584.315704][T23875] bond3: left allmulticast mode [ 584.321042][T23875] veth0_to_bond: left allmulticast mode [ 584.338900][T23875] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 584.354909][T23875] vlan4: left allmulticast mode [ 584.365414][T23875] bond0: left allmulticast mode [ 584.370293][T23875] bond_slave_0: left allmulticast mode [ 584.376568][T23875] bond_slave_1: left allmulticast mode [ 584.386325][T23882] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 584.453148][T23891] 8021q: adding VLAN 0 to HW filter on device bond5 [ 584.512391][ T9462] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 584.524680][ T9462] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 584.834116][T23921] netlink: del zone limit has 8 unknown bytes [ 585.049680][ T9462] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 585.097113][T23921] tipc: Enabling of bearer rejected, failed to enable media [ 585.118821][ T9462] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 585.333498][T23937] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 585.429933][T23952] netlink: 'syz.1.4579': attribute type 10 has an invalid length. [ 585.453437][T23952] __nla_validate_parse: 17 callbacks suppressed [ 585.453460][T23952] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4579'. [ 585.470495][T23954] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4580'. [ 585.488096][T23954] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 585.554297][ T5627] Bluetooth: hci3: command 0x0406 tx timeout [ 586.458590][T24004] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4593'. [ 586.460049][T23999] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 586.504565][T24006] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 586.514921][T24007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 586.537625][ T5636] Bluetooth: hci3: link tx timeout [ 586.544404][ T5636] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 586.562754][ T5627] Bluetooth: hci3: link tx timeout [ 586.569896][ T5627] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 586.625753][T24009] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4598'. [ 586.704054][T24017] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4598'. [ 586.705155][T24016] xfrm1: entered allmulticast mode [ 587.063256][T24021] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4601'. [ 587.076710][T24021] block nbd1: Unsupported socket: should be TCP or UNIX. [ 587.172447][T24025] xt_HMARK: proto mask must be zero with L3 mode [ 587.612491][T24032] netlink: 'syz.0.4603': attribute type 1 has an invalid length. [ 587.635350][T24032] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4603'. [ 587.647304][T24036] netlink: 'syz.4.4605': attribute type 1 has an invalid length. [ 587.655588][T24036] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4605'. [ 587.834647][T24043] ip6tnl2: entered allmulticast mode [ 587.902567][ T9462] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 587.929361][ T24] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 587.929389][ T9462] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 588.047287][T24053] batadv_slave_0: entered promiscuous mode [ 588.058778][T24054] netlink: 'syz.3.4611': attribute type 10 has an invalid length. [ 588.081218][T24054] gre1: entered promiscuous mode [ 588.203319][T24067] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4615'. [ 588.263787][T24071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4617'. [ 588.372795][T24075] FAULT_INJECTION: forcing a failure. [ 588.372795][T24075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 588.388081][T24075] CPU: 1 UID: 0 PID: 24075 Comm: syz.3.4619 Not tainted syzkaller #0 PREEMPT(full) [ 588.388103][T24075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 588.388112][T24075] Call Trace: [ 588.388118][T24075] [ 588.388125][T24075] dump_stack_lvl+0xe8/0x150 [ 588.388150][T24075] should_fail_ex+0x412/0x560 [ 588.388176][T24075] _copy_from_user+0x2d/0xb0 [ 588.388199][T24075] ___sys_sendmsg+0x1c6/0x360 [ 588.388214][T24075] ? __lock_acquire+0x6b5/0x2cf0 [ 588.388236][T24075] ? __pfx____sys_sendmsg+0x10/0x10 [ 588.388285][T24075] ? __fget_files+0x2a/0x420 [ 588.388302][T24075] ? __fget_files+0x3a0/0x420 [ 588.388330][T24075] __x64_sys_sendmsg+0x1bd/0x2a0 [ 588.388348][T24075] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 588.388373][T24075] ? __pfx_ksys_write+0x10/0x10 [ 588.388403][T24075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.388420][T24075] do_syscall_64+0x15f/0xf80 [ 588.388440][T24075] ? trace_irq_disable+0x3b/0x140 [ 588.388463][T24075] ? clear_bhb_loop+0x40/0x90 [ 588.388482][T24075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.388498][T24075] RIP: 0033:0x7fd708b9ce59 [ 588.388514][T24075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 588.388526][T24075] RSP: 002b:00007fd709acb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 588.388543][T24075] RAX: ffffffffffffffda RBX: 00007fd708e15fa0 RCX: 00007fd708b9ce59 [ 588.388554][T24075] RDX: 0000000024040804 RSI: 0000200000000340 RDI: 0000000000000003 [ 588.388563][T24075] RBP: 00007fd709acb090 R08: 0000000000000000 R09: 0000000000000000 [ 588.388572][T24075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.388581][T24075] R13: 00007fd708e16038 R14: 00007fd708e15fa0 R15: 00007ffe49a83d48 [ 588.388608][T24075] [ 588.581740][T13528] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 588.643556][ T5627] Bluetooth: hci3: command 0x0406 tx timeout [ 588.833911][ T1237] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 588.942028][T24048] batadv_slave_0: left promiscuous mode [ 589.462155][T24124] netlink: 'syz.3.4638': attribute type 4 has an invalid length. [ 589.895813][T24161] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 590.045194][ T30] audit: type=1804 audit(1779116883.729:24): pid=24168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4653" name="/newroot/352/cgroup.controllers" dev="tmpfs" ino=1825 res=1 errno=0 [ 590.092092][T24171] ip6tnl0: Caught tx_queue_len zero misconfig [ 590.110549][ T30] audit: type=1800 audit(1779116883.759:25): pid=24168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4653" name="cgroup.controllers" dev="tmpfs" ino=1825 res=0 errno=0 [ 590.134731][ T30] audit: type=1804 audit(1779116883.779:26): pid=24168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4653" name="/newroot/352/cgroup.controllers" dev="tmpfs" ino=1825 res=1 errno=0 [ 590.371162][T24191] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 590.459935][T24202] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 590.478337][T24202] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 590.493809][T24204] sctp: [Deprecated]: syz.4.4660 (pid 24204) Use of struct sctp_assoc_value in delayed_ack socket option. [ 590.493809][T24204] Use struct sctp_sack_info instead [ 590.541055][T24204] sctp: [Deprecated]: syz.4.4660 (pid 24204) Use of struct sctp_assoc_value in delayed_ack socket option. [ 590.541055][T24204] Use struct sctp_sack_info instead [ 590.616538][T24210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 590.672878][T24204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 590.808229][T24216] syzkaller1: entered promiscuous mode [ 590.827557][T24216] syzkaller1: entered allmulticast mode [ 590.885957][T24218] ip6t_REJECT: ECHOREPLY is not supported [ 591.133296][T24243] __nla_validate_parse: 11 callbacks suppressed [ 591.133312][T24243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4672'. [ 591.556200][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 591.656499][T24265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4678'. [ 591.691276][T24261] bond6: option miimon: invalid value (18446744073709551607) [ 591.698855][T24261] bond6: option miimon: allowed values 0 - 2147483647 [ 591.723074][T24261] bond6 (unregistering): Released all slaves [ 591.779442][T24269] bridge7: entered promiscuous mode [ 591.959157][T24284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4687'. [ 591.969298][T24283] xt_TCPMSS: Only works on TCP SYN packets [ 591.998370][T24289] IPv6: NLM_F_CREATE should be specified when creating new route [ 592.021830][T24290] syzkaller0: entered promiscuous mode [ 592.032404][T24290] syzkaller0: entered allmulticast mode [ 592.069588][T24291] vlan3: entered promiscuous mode [ 592.086753][T24298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4691'. [ 592.086773][T24297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4691'. [ 592.139049][T24296] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4691'. [ 592.282906][T24302] netlink: 'syz.3.4692': attribute type 11 has an invalid length. [ 592.303800][T24302] netlink: 'syz.3.4692': attribute type 11 has an invalid length. [ 592.311999][T24302] netlink: 204 bytes leftover after parsing attributes in process `syz.3.4692'. [ 592.449073][T24312] netlink: 'syz.1.4693': attribute type 8 has an invalid length. [ 592.584247][T24317] bond0: Caught tx_queue_len zero misconfig [ 592.697266][T24324] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4696'. [ 592.974695][T24338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4699'. [ 593.062246][T24338] xt_l2tp: invalid flags combination: 8 [ 593.111386][T24346] netlink: 5000 bytes leftover after parsing attributes in process `syz.2.4698'. [ 593.123821][T24338] netlink: 'syz.4.4699': attribute type 1 has an invalid length. [ 593.154360][T24346] openvswitch: netlink: Flow key attr not present in new flow. [ 593.318338][T24354] x_tables: duplicate underflow at hook 1 [ 593.921619][T24377] netlink: 'syz.4.4711': attribute type 1 has an invalid length. [ 593.930948][T24377] netlink: 'syz.4.4711': attribute type 1 has an invalid length. [ 593.939665][T24377] netlink: 'syz.4.4711': attribute type 1 has an invalid length. [ 593.996397][T24375] nbd: couldn't find a device at index 0 [ 594.520165][T24405] netlink: 'syz.2.4718': attribute type 27 has an invalid length. [ 594.704988][T24420] netlink: 'syz.1.4721': attribute type 4 has an invalid length. [ 595.176310][T24456] tipc: Started in network mode [ 595.194673][T24456] tipc: Node identity 6e68142cb30b, cluster identity 4711 [ 595.215559][T24456] tipc: Enabled bearer , priority 0 [ 595.278190][T24459] syzkaller0: entered promiscuous mode [ 595.327436][T24459] syzkaller0: entered allmulticast mode [ 595.450736][ T5289] veth1_macvtap: left promiscuous mode [ 595.513876][T24445] tipc: Resetting bearer [ 595.555832][T24442] tipc: Resetting bearer [ 595.629580][T24442] tipc: Disabling bearer [ 595.657037][T24478] IPv6: NLM_F_CREATE should be specified when creating new route [ 595.673882][T24470] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 595.802351][T24485] FAULT_INJECTION: forcing a failure. [ 595.802351][T24485] name failslab, interval 1, probability 0, space 0, times 0 [ 595.824875][T24485] CPU: 1 UID: 0 PID: 24485 Comm: syz.3.4734 Not tainted syzkaller #0 PREEMPT(full) [ 595.824897][T24485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 595.824907][T24485] Call Trace: [ 595.824914][T24485] [ 595.824921][T24485] dump_stack_lvl+0xe8/0x150 [ 595.824946][T24485] should_fail_ex+0x412/0x560 [ 595.824971][T24485] should_failslab+0xa8/0x100 [ 595.824996][T24485] __kmalloc_cache_noprof+0x88/0x660 [ 595.825018][T24485] ? ip_fib_metrics_init+0xbe/0x710 [ 595.825040][T24485] ip_fib_metrics_init+0xbe/0x710 [ 595.825055][T24485] ? rcu_is_watching+0x15/0xb0 [ 595.825075][T24485] ? trace_kmalloc+0x2a/0xf0 [ 595.825095][T24485] ? __pfx_ip_fib_metrics_init+0x10/0x10 [ 595.825111][T24485] ? __kmalloc_noprof+0x37d/0x760 [ 595.825136][T24485] ? __asan_memset+0x22/0x50 [ 595.825158][T24485] ip6_route_info_create+0x195/0x860 [ 595.825176][T24485] ? inet6_rtm_newroute+0x391/0x19e0 [ 595.825197][T24485] inet6_rtm_newroute+0x55b/0x19e0 [ 595.825225][T24485] ? is_bpf_text_address+0x26/0x2b0 [ 595.825245][T24485] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 595.825274][T24485] ? kernel_text_address+0xa5/0xe0 [ 595.825296][T24485] ? __kernel_text_address+0xd/0x30 [ 595.825315][T24485] ? unwind_get_return_address+0x4d/0x90 [ 595.825334][T24485] ? arch_stack_walk+0xfb/0x150 [ 595.825376][T24485] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 595.825392][T24485] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 595.825411][T24485] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 595.825431][T24485] ? netlink_sendmsg+0x5d4/0xb40 [ 595.825449][T24485] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 595.825467][T24485] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 595.825489][T24485] ? __lock_acquire+0x6b5/0x2cf0 [ 595.825515][T24485] netlink_rcv_skb+0x232/0x4b0 [ 595.825533][T24485] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 595.825555][T24485] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 595.825588][T24485] ? netlink_deliver_tap+0x2e/0x1b0 [ 595.825603][T24485] ? netlink_deliver_tap+0x2e/0x1b0 [ 595.825624][T24485] netlink_unicast+0x75c/0x8e0 [ 595.825656][T24485] netlink_sendmsg+0x813/0xb40 [ 595.825681][T24485] ? __pfx_netlink_sendmsg+0x10/0x10 [ 595.825701][T24485] ? aa_sock_msg_perm+0xf1/0x1b0 [ 595.825721][T24485] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 595.825744][T24485] ____sys_sendmsg+0x972/0x9f0 [ 595.825759][T24485] ? __might_fault+0xaf/0x130 [ 595.825782][T24485] ? __pfx_____sys_sendmsg+0x10/0x10 [ 595.825805][T24485] ? import_iovec+0x73/0xa0 [ 595.825830][T24485] ___sys_sendmsg+0x2a5/0x360 [ 595.825844][T24485] ? __lock_acquire+0x6b5/0x2cf0 [ 595.825864][T24485] ? __pfx____sys_sendmsg+0x10/0x10 [ 595.825908][T24485] ? __fget_files+0x2a/0x420 [ 595.825925][T24485] ? __fget_files+0x3a0/0x420 [ 595.825950][T24485] __x64_sys_sendmsg+0x1bd/0x2a0 [ 595.825968][T24485] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 595.825991][T24485] ? __pfx_ksys_write+0x10/0x10 [ 595.826019][T24485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.826035][T24485] do_syscall_64+0x15f/0xf80 [ 595.826057][T24485] ? trace_irq_disable+0x3b/0x140 [ 595.826079][T24485] ? clear_bhb_loop+0x40/0x90 [ 595.826097][T24485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.826111][T24485] RIP: 0033:0x7fd708b9ce59 [ 595.826127][T24485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 595.826139][T24485] RSP: 002b:00007fd709acb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 595.826156][T24485] RAX: ffffffffffffffda RBX: 00007fd708e15fa0 RCX: 00007fd708b9ce59 [ 595.826167][T24485] RDX: 0000000024040804 RSI: 0000200000000340 RDI: 0000000000000003 [ 595.826177][T24485] RBP: 00007fd709acb090 R08: 0000000000000000 R09: 0000000000000000 [ 595.826187][T24485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 595.826196][T24485] R13: 00007fd708e16038 R14: 00007fd708e15fa0 R15: 00007ffe49a83d48 [ 595.826222][T24485] [ 596.339469][T24489] __nla_validate_parse: 10 callbacks suppressed [ 596.339486][T24489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4735'. [ 596.503198][T24515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4740'. [ 596.567142][T24489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4735'. [ 596.852234][T24536] xt_hashlimit: size too large, truncated to 1048576 [ 596.968048][T24539] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.968102][T24547] netlink: 'syz.1.4743': attribute type 1 has an invalid length. [ 597.014116][T24551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4744'. [ 597.041489][T24539] bridge_slave_0 (unregistering): left allmulticast mode [ 597.070558][T24547] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4743'. [ 597.095597][T24559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4744'. [ 597.107007][T24539] bridge_slave_0 (unregistering): left promiscuous mode [ 597.186322][T24539] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.828089][T24544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4744'. [ 597.931575][T24560] tipc: Started in network mode [ 597.950120][T24560] tipc: Node identity 080211, cluster identity 4711 [ 597.953838][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 597.972283][T24560] tipc: Enabled bearer , priority 0 [ 598.235013][T24615] FAULT_INJECTION: forcing a failure. [ 598.235013][T24615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 598.281447][T24615] CPU: 1 UID: 0 PID: 24615 Comm: syz.1.4748 Not tainted syzkaller #0 PREEMPT(full) [ 598.281471][T24615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 598.281480][T24615] Call Trace: [ 598.281487][T24615] [ 598.281494][T24615] dump_stack_lvl+0xe8/0x150 [ 598.281518][T24615] should_fail_ex+0x412/0x560 [ 598.281544][T24615] _copy_from_user+0x2d/0xb0 [ 598.281567][T24615] __sys_bind+0x1c6/0x410 [ 598.281589][T24615] ? __pfx___sys_bind+0x10/0x10 [ 598.281621][T24615] ? __pfx_ksys_write+0x10/0x10 [ 598.281647][T24615] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.281664][T24615] __x64_sys_bind+0x7a/0x90 [ 598.281685][T24615] do_syscall_64+0x15f/0xf80 [ 598.281714][T24615] ? trace_irq_disable+0x3b/0x140 [ 598.281736][T24615] ? clear_bhb_loop+0x40/0x90 [ 598.281755][T24615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.281770][T24615] RIP: 0033:0x7fe862f9ce59 [ 598.281786][T24615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 598.281803][T24615] RSP: 002b:00007fe863dc2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 598.281820][T24615] RAX: ffffffffffffffda RBX: 00007fe863215fa0 RCX: 00007fe862f9ce59 [ 598.281832][T24615] RDX: 000000000000006e RSI: 0000200000003040 RDI: 0000000000000003 [ 598.281841][T24615] RBP: 00007fe863dc2090 R08: 0000000000000000 R09: 0000000000000000 [ 598.281850][T24615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.281859][T24615] R13: 00007fe863216038 R14: 00007fe863215fa0 R15: 00007fff690ed178 [ 598.281887][T24615] [ 598.595800][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 598.639344][T24626] IPv6: NLM_F_CREATE should be specified when creating new route [ 598.647321][T24626] FAULT_INJECTION: forcing a failure. [ 598.647321][T24626] name failslab, interval 1, probability 0, space 0, times 0 [ 598.660220][T24626] CPU: 0 UID: 0 PID: 24626 Comm: syz.1.4749 Not tainted syzkaller #0 PREEMPT(full) [ 598.660241][T24626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 598.660250][T24626] Call Trace: [ 598.660257][T24626] [ 598.660263][T24626] dump_stack_lvl+0xe8/0x150 [ 598.660287][T24626] should_fail_ex+0x412/0x560 [ 598.660312][T24626] should_failslab+0xa8/0x100 [ 598.660336][T24626] __kmalloc_noprof+0xe8/0x760 [ 598.660355][T24626] ? lockdep_hardirqs_on+0x7a/0x110 [ 598.660376][T24626] ? fib6_new_table+0x376/0x3f0 [ 598.660391][T24626] ? fib6_info_alloc+0x30/0xf0 [ 598.660410][T24626] fib6_info_alloc+0x30/0xf0 [ 598.660436][T24626] ip6_route_info_create+0x142/0x860 [ 598.660453][T24626] ? inet6_rtm_newroute+0x391/0x19e0 [ 598.660473][T24626] inet6_rtm_newroute+0x55b/0x19e0 [ 598.660495][T24626] ? kasan_quarantine_put+0xbb/0x1f0 [ 598.660515][T24626] ? lockdep_hardirqs_on+0x7a/0x110 [ 598.660538][T24626] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 598.660552][T24626] ? nlmon_xmit+0xb0/0x100 [ 598.660570][T24626] ? kmem_cache_free+0x182/0x650 [ 598.660606][T24626] ? __dev_queue_xmit+0x2b6/0x3950 [ 598.660628][T24626] ? lockdep_hardirqs_on+0x7a/0x110 [ 598.660672][T24626] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 598.660688][T24626] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 598.660712][T24626] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 598.660732][T24626] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 598.660750][T24626] ? ref_tracker_free+0x693/0x840 [ 598.660773][T24626] ? __pfx_ref_tracker_free+0x10/0x10 [ 598.660802][T24626] netlink_rcv_skb+0x232/0x4b0 [ 598.660819][T24626] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 598.660841][T24626] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 598.660854][T24626] ? lockdep_hardirqs_on+0x7a/0x110 [ 598.660896][T24626] netlink_unicast+0x75c/0x8e0 [ 598.660928][T24626] netlink_sendmsg+0x813/0xb40 [ 598.660951][T24626] ? __pfx_netlink_sendmsg+0x10/0x10 [ 598.660970][T24626] ? aa_sock_msg_perm+0xf1/0x1b0 [ 598.660991][T24626] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 598.661014][T24626] ____sys_sendmsg+0x972/0x9f0 [ 598.661029][T24626] ? __might_fault+0xaf/0x130 [ 598.661055][T24626] ? __pfx_____sys_sendmsg+0x10/0x10 [ 598.661079][T24626] ? import_iovec+0x73/0xa0 [ 598.661104][T24626] ___sys_sendmsg+0x2a5/0x360 [ 598.661118][T24626] ? __lock_acquire+0x6b5/0x2cf0 [ 598.661138][T24626] ? __pfx____sys_sendmsg+0x10/0x10 [ 598.661186][T24626] ? __fget_files+0x2a/0x420 [ 598.661203][T24626] ? __fget_files+0x3a0/0x420 [ 598.661230][T24626] __x64_sys_sendmsg+0x1bd/0x2a0 [ 598.661248][T24626] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 598.661272][T24626] ? __pfx_ksys_write+0x10/0x10 [ 598.661301][T24626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.661318][T24626] do_syscall_64+0x15f/0xf80 [ 598.661338][T24626] ? trace_irq_disable+0x3b/0x140 [ 598.661360][T24626] ? clear_bhb_loop+0x40/0x90 [ 598.661379][T24626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.661394][T24626] RIP: 0033:0x7fe862f9ce59 [ 598.661410][T24626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 598.661427][T24626] RSP: 002b:00007fe863dc2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 598.661444][T24626] RAX: ffffffffffffffda RBX: 00007fe863215fa0 RCX: 00007fe862f9ce59 [ 598.661455][T24626] RDX: 0000000024040804 RSI: 0000200000000340 RDI: 0000000000000003 [ 598.661464][T24626] RBP: 00007fe863dc2090 R08: 0000000000000000 R09: 0000000000000000 [ 598.661480][T24626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.661489][T24626] R13: 00007fe863216038 R14: 00007fe863215fa0 R15: 00007fff690ed178 [ 598.661515][T24626] [ 599.219732][T24636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4752'. [ 600.518772][ C1] ip6_tunnel: * xmit: Local address not yet configured! [ 600.798651][T24609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 600.806216][T24609] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 600.820934][T24609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 600.828949][T24609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 600.869062][ T9438] tipc: Node number set to 134353152 [ 601.503002][T24674] FAULT_INJECTION: forcing a failure. [ 601.503002][T24674] name failslab, interval 1, probability 0, space 0, times 0 [ 601.538141][T24674] CPU: 0 UID: 0 PID: 24674 Comm: syz.2.4760 Not tainted syzkaller #0 PREEMPT(full) [ 601.538165][T24674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 601.538174][T24674] Call Trace: [ 601.538181][T24674] [ 601.538187][T24674] dump_stack_lvl+0xe8/0x150 [ 601.538212][T24674] should_fail_ex+0x412/0x560 [ 601.538238][T24674] should_failslab+0xa8/0x100 [ 601.538262][T24674] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 601.538284][T24674] ? __alloc_skb+0x186/0x7d0 [ 601.538304][T24674] ? __alloc_skb+0x1d0/0x7d0 [ 601.538323][T24674] ? __local_bh_enable_ip+0xd0/0x130 [ 601.538347][T24674] __alloc_skb+0x1d0/0x7d0 [ 601.538368][T24674] ? netlink_ack_tlv_len+0x6c/0x210 [ 601.538387][T24674] netlink_ack+0x146/0xa50 [ 601.538400][T24674] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 601.538420][T24674] ? ref_tracker_free+0x693/0x840 [ 601.538443][T24674] ? __pfx_ref_tracker_free+0x10/0x10 [ 601.538472][T24674] netlink_rcv_skb+0x2b6/0x4b0 [ 601.538489][T24674] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 601.538511][T24674] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 601.538545][T24674] ? netlink_deliver_tap+0x2e/0x1b0 [ 601.538560][T24674] ? netlink_deliver_tap+0x2e/0x1b0 [ 601.538581][T24674] netlink_unicast+0x75c/0x8e0 [ 601.538611][T24674] netlink_sendmsg+0x813/0xb40 [ 601.538634][T24674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 601.538652][T24674] ? aa_sock_msg_perm+0xf1/0x1b0 [ 601.538672][T24674] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 601.538694][T24674] ____sys_sendmsg+0x972/0x9f0 [ 601.538708][T24674] ? __might_fault+0xaf/0x130 [ 601.538734][T24674] ? __pfx_____sys_sendmsg+0x10/0x10 [ 601.538759][T24674] ? import_iovec+0x73/0xa0 [ 601.538784][T24674] ___sys_sendmsg+0x2a5/0x360 [ 601.538799][T24674] ? __lock_acquire+0x6b5/0x2cf0 [ 601.538821][T24674] ? __pfx____sys_sendmsg+0x10/0x10 [ 601.538870][T24674] ? __fget_files+0x2a/0x420 [ 601.538887][T24674] ? __fget_files+0x3a0/0x420 [ 601.538915][T24674] __x64_sys_sendmsg+0x1bd/0x2a0 [ 601.538933][T24674] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 601.538958][T24674] ? __pfx_ksys_write+0x10/0x10 [ 601.538988][T24674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.539005][T24674] do_syscall_64+0x15f/0xf80 [ 601.539025][T24674] ? trace_irq_disable+0x3b/0x140 [ 601.539048][T24674] ? clear_bhb_loop+0x40/0x90 [ 601.539067][T24674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.539082][T24674] RIP: 0033:0x7f0cb0b9ce59 [ 601.539098][T24674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 601.539110][T24674] RSP: 002b:00007f0cb1a89028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 601.539126][T24674] RAX: ffffffffffffffda RBX: 00007f0cb0e15fa0 RCX: 00007f0cb0b9ce59 [ 601.539136][T24674] RDX: 0000000024040804 RSI: 0000200000000340 RDI: 0000000000000003 [ 601.539145][T24674] RBP: 00007f0cb1a89090 R08: 0000000000000000 R09: 0000000000000000 [ 601.539154][T24674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.539162][T24674] R13: 00007f0cb0e16038 R14: 00007f0cb0e15fa0 R15: 00007fffe1dd0328 [ 601.539189][T24674] [ 601.930628][T24679] openvswitch: netlink: Key 6 has unexpected len 318 expected 2 [ 601.960758][T24681] netlink: 'syz.2.4763': attribute type 1 has an invalid length. [ 602.037923][T24681] 8021q: adding VLAN 0 to HW filter on device bond11 [ 602.070748][T24681] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4763'. [ 602.407405][T24703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4766'. [ 602.640226][T24718] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4768'. [ 602.646101][T24715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.677547][T24722] netlink: 'syz.3.4771': attribute type 32 has an invalid length. [ 602.686499][T24715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.705319][T24715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.708411][T24722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4771'. [ 602.806646][T24722] bond6: Setting coupled_control to off (0) [ 602.819165][T24728] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4772'. [ 602.967301][T24728] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4772'. [ 603.810237][T24766] netlink: 'syz.4.4780': attribute type 49 has an invalid length. [ 604.056974][T24771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4781'. [ 604.575085][T24790] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4786'. [ 604.575356][T24789] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4784'. [ 604.611925][T24792] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4785'. [ 604.920872][T24805] netlink: 'syz.4.4788': attribute type 1 has an invalid length. [ 604.987377][T24810] netlink: 'syz.1.4791': attribute type 1 has an invalid length. [ 605.160285][T24810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.178909][T24814] bond0: entered allmulticast mode [ 605.267215][T24818] bond9: (slave bridge7): making interface the new active one [ 605.308219][T24818] bond9: (slave bridge7): Enslaving as an active interface with an up link [ 605.375277][T24805] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 605.450909][T24811] macvlan0: entered promiscuous mode [ 605.460942][T24811] macvlan0: entered allmulticast mode [ 605.467793][T24811] bond9: entered promiscuous mode [ 605.477270][T24811] bridge7: entered promiscuous mode [ 605.484621][T24811] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 605.493767][T24811] bond9: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 605.513049][T24811] bond9: left promiscuous mode [ 605.531904][T24811] bridge7: left promiscuous mode [ 605.560502][T24829] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 608.245103][T24887] __nla_validate_parse: 3 callbacks suppressed [ 608.245120][T24887] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4808'. [ 608.268870][T24890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4810'. [ 608.268903][T24890] openvswitch: netlink: Invalid VLAN frame [ 608.275604][T24890] No such timeout policy "syz1" [ 608.490063][ T5636] block nbd1: Receive control failed (result -32) [ 608.571145][T24906] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4815'. [ 608.773791][T24913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4817'. [ 608.986166][T24922] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4819'. [ 609.326010][T24946] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.4824'. [ 609.337468][T24946] openvswitch: netlink: Message has 3 unknown bytes. [ 609.472953][T24953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4828'. [ 609.506159][T24958] veth0: entered promiscuous mode [ 609.521161][T24956] veth0: left promiscuous mode [ 609.638896][T24966] netdevsim netdevsim0: Firmware load for './file0/../file0' refused, path contains '..' component [ 609.676602][T24966] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4830'. [ 610.428572][T24997] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 610.447651][T24998] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4838'. [ 610.487026][T25003] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 610.498156][T25005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.634408][T25009] bond12: entered allmulticast mode [ 610.682312][T25015] netlink: 292 bytes leftover after parsing attributes in process `syz.0.4844'. [ 610.747212][T25020] blkio.reset_stats is deprecated [ 610.868832][T25027] bridge_slave_0: left allmulticast mode [ 610.877432][T25027] bridge_slave_0: left promiscuous mode [ 610.886870][T25027] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.917818][T25027] bond0: (slave bond_slave_0): Releasing backup interface [ 610.965052][T25027] bond0: (slave bond_slave_1): Releasing backup interface [ 610.987196][T25032] netlink: 'syz.2.4848': attribute type 1 has an invalid length. [ 611.006999][T25027] team0: Port device team_slave_1 removed [ 611.028729][T25027] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 611.116379][T25040] netlink: 'syz.2.4848': attribute type 1 has an invalid length. [ 611.146483][T25032] 8021q: adding VLAN 0 to HW filter on device bond13 [ 611.175625][T25040] bond13: (slave batadv1): Opening slave failed [ 611.337332][T25045] netlink: 'syz.4.4851': attribute type 1 has an invalid length. [ 611.991770][T25077] netlink: 'syz.0.4861': attribute type 1 has an invalid length. [ 612.042078][T25071] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 612.049745][T25071] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.261130][T25071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 612.309425][T25071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 612.673920][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 612.837174][T25071] vlan3: left promiscuous mode [ 612.846768][T25071] bond0: left allmulticast mode [ 612.859187][T25078] dummy0: left promiscuous mode [ 612.897799][T25085] bond1: (slave lo): Releasing backup interface [ 612.920354][T25085] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 612.936512][T25085] bond0: (slave team0): Releasing backup interface [ 612.976297][T25085] bridge_slave_0: left allmulticast mode [ 612.992457][T25085] bridge_slave_0: left promiscuous mode [ 613.003107][T25085] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.022153][T25085] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.049387][T25085] bond0: (slave bond_slave_0): Releasing backup interface [ 613.082045][T25085] bond0: (slave bond_slave_1): Releasing backup interface [ 613.096285][T25085] team_slave_0: left promiscuous mode [ 613.103221][T25085] team0: Port device team_slave_0 removed [ 613.110927][T25085] team_slave_1: left promiscuous mode [ 613.119208][T25085] team0: Port device team_slave_1 removed [ 613.131723][T25085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 613.143779][T25085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 613.160067][T25085] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 613.195566][ T9462] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 613.217718][ T9462] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.252757][ T9462] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 613.282019][ T9462] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.348197][T25101] syz_tun: entered allmulticast mode [ 613.422189][T25125] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 613.460072][ T9462] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 613.499661][ T9462] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.541776][T25094] syz_tun: left allmulticast mode [ 613.568586][ T9462] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 613.598927][ T9462] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.624350][T25139] __nla_validate_parse: 6 callbacks suppressed [ 613.624364][T25139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4869'. [ 613.787714][T25150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4871'. [ 613.797057][T25150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4871'. [ 613.916055][T25150] @: option downdelay: invalid value (18446744073709547007) [ 613.923807][T25150] @: option downdelay: allowed values 0 - 2147483647 [ 613.943576][T25150] @ (unregistering): Released all slaves [ 613.989604][T25166] netlink: 'syz.1.4875': attribute type 1 has an invalid length. [ 614.126613][T25166] bond5: entered promiscuous mode [ 614.132704][T25166] bridge_slave_1: left allmulticast mode [ 614.138707][T25166] bridge_slave_1: left promiscuous mode [ 614.144782][T25166] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.164318][T25166] : (slave bond_slave_0): Releasing backup interface [ 614.188394][T25166] team0: Port device team_slave_0 removed [ 614.208228][T25166] team0: Port device team_slave_1 removed [ 614.226691][T25166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.235031][T25166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.242948][T25166] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 614.261833][T25177] syzkaller0: entered promiscuous mode [ 614.268739][T25177] syzkaller0: entered allmulticast mode [ 614.278561][T25186] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4878'. [ 614.698950][T25165] bond5: left promiscuous mode [ 615.019029][T25215] netlink: 'syz.1.4884': attribute type 1 has an invalid length. [ 615.033896][T25213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4883'. [ 615.897188][T25266] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4893'. [ 615.949625][T25266] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4893'. [ 615.973440][T25266] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4893'. [ 615.998543][T25266] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4893'. [ 616.069522][T25279] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4894'. [ 616.198250][T25284] netlink: 'syz.0.4895': attribute type 39 has an invalid length. [ 616.243141][T25289] netlink: 'syz.1.4898': attribute type 1 has an invalid length. [ 616.252933][T25289] netlink: 'syz.1.4898': attribute type 4 has an invalid length. [ 616.259327][T25282] gretap0: entered promiscuous mode [ 616.262096][T25289] netlink: 'syz.1.4898': attribute type 1 has an invalid length. [ 616.274159][T25282] macvlan0: entered allmulticast mode [ 616.282525][T25289] netlink: 'syz.1.4898': attribute type 4 has an invalid length. [ 616.297522][T25282] gretap0: entered allmulticast mode [ 616.429932][T25300] netlink: 'syz.1.4899': attribute type 2 has an invalid length. [ 616.449832][T25300] netlink: 'syz.1.4899': attribute type 49 has an invalid length. [ 616.679525][T25315] IPv6: NLM_F_CREATE should be specified when creating new route [ 616.776026][T25322] netlink: 'syz.1.4905': attribute type 1 has an invalid length. [ 616.938035][T25334] syzkaller1: entered promiscuous mode [ 616.965431][T25334] syzkaller1: entered allmulticast mode [ 617.586274][T25361] ip6gretap1: entered promiscuous mode [ 617.598327][T25367] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 617.647033][T25368] sch_fq: defrate 8 ignored. [ 617.740058][T25374] nbd: couldn't find a device at index 65546 [ 618.399178][T25416] batadv0: left promiscuous mode [ 618.676855][T25430] __nla_validate_parse: 13 callbacks suppressed [ 618.676871][T25430] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4934'. [ 618.939975][T25448] netlink: 'syz.2.4937': attribute type 13 has an invalid length. [ 618.971916][T25448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4937'. [ 619.304058][T25469] ip6erspan0: entered allmulticast mode [ 619.319942][T25469] netlink: 'syz.1.4941': attribute type 10 has an invalid length. [ 619.559976][T25484] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.4946'. [ 620.145043][T25511] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4954'. [ 620.251110][T25515] bond14: entered promiscuous mode [ 620.265298][T25515] 8021q: adding VLAN 0 to HW filter on device bond14 [ 620.330852][T25507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4952'. [ 620.367529][T25507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4952'. [ 620.433088][T25510] bond14: (slave bridge6): making interface the new active one [ 620.445540][T25510] bridge6: entered promiscuous mode [ 620.452610][T25510] bond14: (slave bridge6): Enslaving as an active interface with an up link [ 640.193542][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 642.778755][T25544] pim6reg1: entered allmulticast mode [ 686.418840][T25567] netlink: 'syz.1.4964': attribute type 11 has an invalid length. [ 686.426779][T25558] netlink: 15672 bytes leftover after parsing attributes in process `syz.4.4967'. [ 686.426809][T25558] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4967'. [ 686.426825][T25558] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4967'. [ 686.579107][T25567] 8021q: adding VLAN 0 to HW filter on device  [ 686.621405][T25567] 8021q: adding VLAN 0 to HW filter on device team0 [ 686.666175][T25567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 686.796413][T25567] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 686.822559][T25567] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 686.896012][ T9475] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 686.903343][ T9475] bridge0: port 3(veth0_virt_wifi) entered forwarding state [ 687.291288][T25594] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 687.801699][T25628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4979'. [ 688.116137][T25642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4983'. [ 688.129828][T25642] validate_nla: 1 callbacks suppressed [ 688.129844][T25642] netlink: 'syz.0.4983': attribute type 29 has an invalid length. [ 688.144134][T25642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4983'. [ 688.157701][T25642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4983'. [ 688.166936][T25642] netlink: 'syz.0.4983': attribute type 29 has an invalid length. [ 688.175686][T25642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4983'. [ 688.446783][T25651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4984'. [ 688.679814][T25660] netlink: 'syz.0.4988': attribute type 25 has an invalid length. [ 688.706146][T25660] netlink: 'syz.0.4988': attribute type 3 has an invalid length. [ 688.724181][T25660] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4988'. [ 689.123697][T25681] netlink: 'syz.1.4993': attribute type 1 has an invalid length. [ 689.411695][T25695] syzkaller1: entered allmulticast mode [ 690.107947][T25732] netlink: 'syz.2.5006': attribute type 13 has an invalid length. [ 690.187198][T25732] netlink: 'syz.2.5006': attribute type 17 has an invalid length. [ 690.851446][T25732] 0{X: left allmulticast mode [ 690.941489][T25732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 690.961475][T25732] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.977483][T25732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 691.110723][T25732] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 691.188552][ T9475] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 691.214423][ T9475] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.235373][ T9475] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 691.259518][ T9475] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 691.282753][ T9475] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.306425][ T9475] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 691.476672][T25763] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 691.705921][T25763] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 691.729668][ T9475] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 691.731785][T25749] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 691.750288][T25749] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 691.751920][ T9475] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.760767][T25749] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 691.798018][ T9475] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 691.810229][ T9475] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 691.819602][ T9475] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.832094][T25778] __nla_validate_parse: 4 callbacks suppressed [ 691.832109][T25778] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5015'. [ 691.852438][ T9475] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 692.085699][T25788] ip6erspan0: left allmulticast mode [ 692.210205][T25798] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 692.265955][T25803] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5021'. [ 692.335319][T25807] : renamed from bond_slave_0 (while UP) [ 693.032933][T25849] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5028'. [ 693.106977][T25839] syzkaller1: entered promiscuous mode [ 693.126480][T25839] syzkaller1: entered allmulticast mode [ 693.198290][T25852] netlink: 'syz.1.5030': attribute type 41 has an invalid length. [ 693.361847][T25856] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 693.371239][T25859] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5033'. [ 693.381267][T25856] syzkaller1: linktype set to 769 [ 693.387949][T25856] netlink: 'syz.1.5032': attribute type 1 has an invalid length. [ 693.491729][T25864] gretap1: entered allmulticast mode [ 693.552576][T25864] bond6: (slave gretap1): making interface the new active one [ 693.608498][T25864] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 693.937091][T25890] netlink: 124 bytes leftover after parsing attributes in process `syz.1.5041'. [ 693.975375][T25883] syzkaller1: entered promiscuous mode [ 693.981772][T25883] syzkaller1: entered allmulticast mode [ 694.006315][T25897] netlink: 'syz.1.5041': attribute type 11 has an invalid length. [ 694.032263][T25893] vlan0: entered promiscuous mode [ 694.038249][T25893] bridge0: entered promiscuous mode [ 694.061633][T25890] mac80211_hwsim hwsim41 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 694.159807][T25890] xt_cluster: node mask cannot exceed total number of nodes [ 694.838123][T25953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5054'. [ 694.957796][T25958] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.5056'. [ 694.982959][T25958] netlink: 324 bytes leftover after parsing attributes in process `syz.1.5056'. [ 695.024251][T25961] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5058'. [ 695.155456][T25972] virt_wifi0: left promiscuous mode [ 695.748699][T26016] x_tables: duplicate underflow at hook 1 [ 696.006424][T26033] netlink: 'syz.3.5077': attribute type 7 has an invalid length. [ 696.046420][T26033] : entered promiscuous mode [ 696.418145][T26063] netlink: 'syz.1.5087': attribute type 1 has an invalid length. [ 696.446821][T26062] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5086'. [ 696.575100][T26063] veth5: entered allmulticast mode [ 696.591002][T26063] bond7: (slave veth5): Enslaving as a backup interface with a down link [ 696.599674][T26078] netlink: 'syz.2.5091': attribute type 3 has an invalid length. [ 697.039933][T26096] syzkaller0: entered promiscuous mode [ 697.054752][T26096] syzkaller0: entered allmulticast mode [ 697.080262][T26096] 0: reclassify loop, rule prio 0, protocol 800 [ 697.157424][ T5627] Bluetooth: hci3: command 0x0406 tx timeout [ 697.215689][T26094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 697.368151][T26107] openvswitch: netlink: Tunnel attr 166 out of range max 16 [ 697.369268][T26104] syzkaller0: entered promiscuous mode [ 697.387642][T26104] syzkaller0: entered allmulticast mode [ 697.410392][T26112] syzkaller0: entered promiscuous mode [ 697.424061][T26112] syzkaller0: entered allmulticast mode [ 697.563776][T26118] __nla_validate_parse: 6 callbacks suppressed [ 697.563793][T26118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5101'. [ 697.615845][T26128] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5101'. [ 697.660928][T26130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5104'. [ 697.728748][T26130] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 697.837004][T26139] tipc: Enabling of bearer rejected, failed to enable media [ 698.016297][T26146] sctp: [Deprecated]: syz.2.5110 (pid 26146) Use of struct sctp_assoc_value in delayed_ack socket option. [ 698.016297][T26146] Use struct sctp_sack_info instead [ 698.183167][T26150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5112'. [ 698.477268][T26172] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5117'. [ 698.550518][T26177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5119'. [ 698.567234][T26177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5119'. [ 698.573920][T26179] No such timeout policy "syz0" [ 698.747635][T26194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5124'. [ 698.774022][T26194] netlink: 'syz.3.5124': attribute type 15 has an invalid length. [ 698.781891][T26194] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5124'. [ 698.866880][T26201] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5126'. [ 699.399431][T26225] openvswitch: netlink: Actions may not be safe on all matching packets [ 699.787920][T26266] netlink: 'syz.2.5139': attribute type 4 has an invalid length. [ 700.005250][T26274] netlink: 'syz.2.5140': attribute type 13 has an invalid length. [ 700.042303][T26272] netlink: 'syz.3.5141': attribute type 2 has an invalid length. [ 700.052082][T26272] netlink: 'syz.3.5141': attribute type 1 has an invalid length. [ 700.339381][T26280] netlink: 'syz.0.5142': attribute type 3 has an invalid length. [ 700.993599][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 701.114308][T26319] xt_hashlimit: size too large, truncated to 1048576 [ 701.447574][T26339] vlan5: entered promiscuous mode [ 701.453260][T26339] veth0: entered promiscuous mode [ 701.477461][T26340] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 701.669001][T26347] IPVS: Unknown mcast interface: vcan0 [ 701.677364][T26347] x_tables: duplicate underflow at hook 1 [ 701.708726][T26351] tipc: Enabling of bearer rejected, failed to enable media [ 702.128807][T26383] netlink: 'syz.2.5176': attribute type 14 has an invalid length. [ 702.368323][T26403] dvmrp0: entered allmulticast mode [ 702.840638][T26427] netlink: 'syz.4.5190': attribute type 3 has an invalid length. [ 702.999709][T26428] __nla_validate_parse: 239 callbacks suppressed [ 702.999726][T26428] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5190'. [ 703.747148][T26468] syzkaller0: entered promiscuous mode [ 703.759629][T26468] syzkaller0: entered allmulticast mode [ 703.924998][T26478] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5205'. [ 704.130345][T26485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5206'. [ 706.668837][T26549] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 707.010700][T26583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5230'. [ 707.223989][T26595] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5232'. [ 707.247583][T26601] openvswitch: netlink: Key type 152 is out of range max 32 [ 707.357459][T26610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5237'. [ 707.545707][T26610] 8021q: adding VLAN 0 to HW filter on device bond6 [ 707.618619][T26622] pim6reg: entered allmulticast mode [ 707.639821][T26624] tipc: Enabling of bearer rejected, already enabled [ 707.667681][T26630] pim6reg: left allmulticast mode [ 707.807045][T26639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5242'. [ 707.863055][T26642] netlink: 'syz.3.5243': attribute type 1 has an invalid length. [ 707.872282][T26642] netlink: 352 bytes leftover after parsing attributes in process `syz.3.5243'. [ 707.896032][T26642] netlink: 'syz.3.5243': attribute type 1 has an invalid length. [ 707.910134][T26642] netlink: 352 bytes leftover after parsing attributes in process `syz.3.5243'. [ 707.931358][T26650] netlink: 'syz.0.5246': attribute type 39 has an invalid length. [ 708.040416][T26652] syzkaller1: entered promiscuous mode [ 708.046565][T26652] syzkaller1: entered allmulticast mode [ 708.069287][T26650] netlink: 'syz.0.5246': attribute type 1 has an invalid length. [ 708.150930][T26659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5250'. [ 708.361342][T26672] netlink: 'syz.2.5255': attribute type 1 has an invalid length. [ 708.361479][T26673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5255'. [ 708.383774][T26673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5255'. [ 708.497532][T26683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5257'. [ 709.508513][T26716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5268'. [ 709.536057][T26718] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5269'. [ 709.599761][T26720] bond7: option arp_all_targets: invalid value (129) [ 709.620634][T26720] bond7 (unregistering): Released all slaves [ 709.942067][T26754] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5273'. [ 709.951183][T26754] netlink: 260 bytes leftover after parsing attributes in process `syz.2.5273'. [ 710.563127][T26733] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 710.761515][T26778] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 710.776597][T26779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5281'. [ 711.389099][T26826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5294'. [ 712.397967][T26883] netlink: 'syz.3.5312': attribute type 1 has an invalid length. [ 712.509215][T26887] bond7: (slave geneve2): making interface the new active one [ 712.549680][T26887] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 712.590231][ T9462] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.610942][ T9462] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.653148][ T9462] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.772634][ T9462] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.848342][T26908] mac80211_hwsim hwsim45 syzkaller0: left promiscuous mode [ 712.857892][T26908] mac80211_hwsim hwsim45 syzkaller0: left allmulticast mode [ 713.279364][T26945] macsec0: entered promiscuous mode [ 713.358748][T26931] __nla_validate_parse: 9 callbacks suppressed [ 713.358765][T26931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5324'. [ 713.426833][T26931] macsec0 (unregistering): left promiscuous mode [ 713.479208][T26951] netlink: 1544 bytes leftover after parsing attributes in process `syz.1.5329'. [ 713.503140][T26948] xt_hashlimit: size too large, truncated to 1048576 [ 713.515564][T26951] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5329'. [ 713.547433][T26953] netlink: 'syz.3.5330': attribute type 1 has an invalid length. [ 713.817898][T26962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 713.909620][T26971] netlink: 'syz.3.5336': attribute type 1 has an invalid length. [ 713.976961][T26971] 8021q: adding VLAN 0 to HW filter on device bond8 [ 714.056481][T26977] bond8: (slave veth5): Enslaving as an active interface with an up link [ 714.086573][T26983] x_tables: duplicate underflow at hook 1 [ 714.134880][T26971] netlink: 'syz.3.5336': attribute type 1 has an invalid length. [ 714.152435][T26971] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 714.161547][T26971] bond8: (slave batadv1): Enslaving as an active interface with an up link [ 714.234821][T26988] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5341'. [ 714.263191][T26988] netlink: 'syz.0.5341': attribute type 17 has an invalid length. [ 714.307227][T26988] netlink: 'syz.0.5341': attribute type 27 has an invalid length. [ 714.311436][T26996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5344'. [ 714.317781][T26992] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 714.364256][T26991] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 714.398500][T26996] 8021q: adding VLAN 0 to HW filter on device bond9 [ 714.512855][T27003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5344'. [ 714.560641][T26996] 8021q: adding VLAN 0 to HW filter on device bond10 [ 714.599813][T26996] bond9: (slave bond10): Enslaving as an active interface with an up link [ 714.699394][T27003] bond9 (unregistering): (slave bond10): Releasing backup interface [ 714.732695][T27003] bond9 (unregistering): Released all slaves [ 714.856562][T27025] tap0: tun_chr_ioctl cmd 1074025676 [ 714.862232][T27025] tap0: owner set to 0 [ 714.909665][T27033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5352'. [ 714.931923][T27032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5352'. [ 714.966434][T27036] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5353'. [ 715.147451][T27051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 715.191760][T27056] ip6gretap0: entered promiscuous mode [ 715.199272][T27056] vlan0: entered promiscuous mode [ 715.200449][T27042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 715.351919][T27067] macsec0: entered promiscuous mode [ 715.360232][T27067] macsec0: entered allmulticast mode [ 715.413162][T27069] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5362'. [ 715.415039][T27073] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 715.435667][T27073] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 715.766610][T27101] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 715.880272][T27115] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 715.898440][T27119] netlink: 'syz.1.5375': attribute type 1 has an invalid length. [ 716.145486][T27126] 8021q: adding VLAN 0 to HW filter on device bond8 [ 716.716826][T27167] syzkaller0: entered promiscuous mode [ 716.743525][T27167] syzkaller0: entered allmulticast mode [ 716.757494][T27167] netlink: zone id is out of range [ 717.745395][T27220] gre0: MTU too low for tipc bearer [ 717.784746][T27220] tipc: Enabling of bearer rejected, failed to enable media [ 718.422804][T27257] __nla_validate_parse: 30 callbacks suppressed [ 718.422820][T27257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5411'. [ 718.648351][T27266] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 718.967739][T27282] lo: Caught tx_queue_len zero misconfig [ 718.976329][T27282] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 719.034108][T27283] tunl0: Caught tx_queue_len zero misconfig [ 719.059839][T27282] netlink: 'syz.2.5416': attribute type 30 has an invalid length. [ 719.092074][T27288] geneve3: entered promiscuous mode [ 719.120309][ T9475] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 50509 - 0 [ 719.150272][ T9475] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 50509 - 0 [ 719.203492][ T9475] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 50509 - 0 [ 719.236066][ T9475] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 50509 - 0 [ 719.279937][T27300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5420'. [ 719.537987][T27317] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5421'. [ 719.650095][T27316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5424'. [ 719.711280][T27326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5421'. [ 719.765126][T27323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5423'. [ 719.873886][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.884556][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.892899][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.479824][T27353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5432'. [ 720.507252][T27353] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5432'. [ 720.522145][T27354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5431'. [ 720.543005][T27353] geneve4: entered promiscuous mode [ 720.562858][T27353] geneve4: entered allmulticast mode [ 720.620319][ T9462] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.666069][ T9462] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.732728][ T9462] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.783529][ T9462] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.828919][T27354] netlink: 'syz.1.5431': attribute type 2 has an invalid length. [ 720.858853][T27370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5433'. [ 721.356212][T27404] netlink: 'syz.3.5444': attribute type 1 has an invalid length. [ 721.376410][T27404] netlink: 'syz.3.5444': attribute type 2 has an invalid length. [ 721.397279][T27404] netlink: 'syz.3.5444': attribute type 1 has an invalid length. [ 722.272934][T27433] netlink: 'syz.3.5453': attribute type 18 has an invalid length. [ 722.594867][T27457] netlink: 'syz.3.5458': attribute type 6 has an invalid length. [ 722.788582][T27468] gtp2: entered promiscuous mode [ 722.805321][T27468] gtp2: entered allmulticast mode [ 723.297837][T27503] netlink: 'syz.4.5469': attribute type 1 has an invalid length. [ 723.449895][T27503] __nla_validate_parse: 78 callbacks suppressed [ 723.449913][T27503] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5469'. [ 723.467667][T27508] bond10: (slave geneve4): making interface the new active one [ 723.524114][T27508] bond10: (slave geneve4): Enslaving as an active interface with an up link [ 723.581223][T23892] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 20000 - 0 [ 723.606065][T27503] 8021q: adding VLAN 0 to HW filter on device bond10 [ 723.856935][T23892] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 20000 - 0 [ 723.875345][ T24] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 723.904095][T23892] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 20000 - 0 [ 723.915718][T23892] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 20000 - 0 [ 724.185353][ T24] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 724.324225][T27556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5480'. [ 725.620873][T27564] ip6gre1: left promiscuous mode [ 725.633904][T27564] ip6gre1: left allmulticast mode [ 725.783417][T27564] erspan1: left promiscuous mode [ 725.792574][T27564] erspan1: left allmulticast mode [ 725.806373][T27564] bond3: left promiscuous mode [ 725.819253][T27564] ip6gre2: left promiscuous mode [ 725.850615][T27564] xfrm1: left allmulticast mode [ 725.949283][T27564] ip6tnl2: left allmulticast mode [ 725.980736][T27564] gretap0: left allmulticast mode [ 725.989894][T27564] macvlan0: left allmulticast mode [ 726.010196][T27564] geneve3: left promiscuous mode [ 726.061240][T11596] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 726.109991][T11596] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.128131][T11596] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 50509 - 0 [ 726.137663][T11596] netdevsim netdevsim4 eth0: unset [1, 2] type 2 family 0 port 20000 - 0 [ 726.146537][T11596] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 726.156771][T11596] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.166857][T11596] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 50509 - 0 [ 726.181038][T11596] netdevsim netdevsim4 eth1: unset [1, 2] type 2 family 0 port 20000 - 0 [ 726.214095][T11596] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 726.238185][T11596] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.261768][T11596] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 50509 - 0 [ 726.280760][T11596] netdevsim netdevsim4 eth2: unset [1, 2] type 2 family 0 port 20000 - 0 [ 726.297084][T11596] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 726.316013][T11596] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.338574][T11596] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 50509 - 0 [ 726.357642][T11596] netdevsim netdevsim4 eth3: unset [1, 2] type 2 family 0 port 20000 - 0 [ 726.576079][T27605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5492'. [ 726.625162][T27605] xt_l2tp: invalid flags combination: 8 [ 726.625618][T27607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5493'. [ 729.169507][T27651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5504'. [ 729.669912][T27611] netlink: 'syz.3.5492': attribute type 1 has an invalid length. [ 729.871695][T27660] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5505'. [ 729.894550][T27660] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5505'. [ 730.286513][T27690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5515'. [ 730.386346][T27699] : renamed from bond_slave_0 [ 730.494095][T27704] netlink: 616 bytes leftover after parsing attributes in process `syz.4.5518'. [ 730.506584][T27704] netlink: 'syz.4.5518': attribute type 9 has an invalid length. [ 730.515583][T27704] netlink: 'syz.4.5518': attribute type 11 has an invalid length. [ 730.523890][T27704] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.5518'. [ 730.808063][T27716] openvswitch: netlink: Duplicate or invalid key (type 0). [ 730.846591][T27716] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 730.992869][T27724] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 731.046581][T27724] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5523'. [ 731.072893][T27735] sch_tbf: burst 0 is lower than device sit0 mtu (1480) ! [ 731.348298][T27755] batadv_slave_1: entered promiscuous mode [ 731.373475][T27753] batadv_slave_1: left promiscuous mode [ 731.413884][T27761] openvswitch: netlink: IP tunnel dst address not specified [ 731.750054][T27783] netlink: 408 bytes leftover after parsing attributes in process `syz.4.5538'. [ 731.774063][T27778] netlink: 408 bytes leftover after parsing attributes in process `syz.4.5538'. [ 731.906232][T27793] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5541'. [ 734.328547][T27754] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 734.518538][T27815] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.5545'. [ 734.684834][T27825] netlink: 176 bytes leftover after parsing attributes in process `syz.3.5550'. [ 735.186624][T27843] dvmrp0: entered allmulticast mode [ 735.194667][T27843] geneve0: Caught tx_queue_len zero misconfig [ 735.213639][T27843] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5553'. [ 735.524996][T27862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5559'. [ 735.772341][T27876] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 735.779345][T27876] syzkaller1: linktype set to 825 [ 735.786078][T27876] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5565'. [ 735.893252][T27882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 736.040382][T27895] netlink: 'syz.4.5569': attribute type 10 has an invalid length. [ 736.049758][T27895] netlink: 'syz.4.5569': attribute type 10 has an invalid length. [ 736.281369][T27904] syzkaller1: entered promiscuous mode [ 736.304291][T27904] syzkaller1: entered allmulticast mode [ 736.316246][T27911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5573'. [ 736.422230][T27917] Cannot find del_set index 3 as target [ 736.605483][T27924] IPVS: set_ctl: invalid protocol: 44 100.1.1.1:20000 [ 736.741556][T27931] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5579'. [ 736.844483][T27933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5580'. [ 737.254120][T27948] netlink: 'syz.1.5584': attribute type 1 has an invalid length. [ 737.282312][T27946] tap0: tun_chr_ioctl cmd 1074025681 [ 737.637765][T27968] sctp: [Deprecated]: syz.2.5590 (pid 27968) Use of struct sctp_assoc_value in delayed_ack socket option. [ 737.637765][T27968] Use struct sctp_sack_info instead [ 737.672903][T27968] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5590'. [ 737.805000][T27970] netlink: 'syz.0.5592': attribute type 1 has an invalid length. [ 737.843061][T27970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5592'. [ 737.892312][T27978] netlink: 'syz.4.5596': attribute type 21 has an invalid length. [ 737.907150][T27978] netlink: 'syz.4.5596': attribute type 22 has an invalid length. [ 737.920851][T27978] netlink: 'syz.4.5596': attribute type 23 has an invalid length. [ 737.939208][T27978] netlink: 'syz.4.5596': attribute type 25 has an invalid length. [ 737.953781][T27978] netlink: 'syz.4.5596': attribute type 26 has an invalid length. [ 737.962067][T27980] netlink: 'syz.1.5594': attribute type 4 has an invalid length. [ 738.737201][T28019] syzkaller1: entered promiscuous mode [ 738.780611][T28019] syzkaller1: entered allmulticast mode [ 739.794470][T28051] __nla_validate_parse: 5 callbacks suppressed [ 739.794488][T28051] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5615'. [ 739.843698][T28051] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5615'. [ 739.907988][T28051] batman_adv: batadv0: Removing interface: dummy0 [ 740.299786][T28083] xt_TPROXY: Can be used only with -p tcp or -p udp [ 740.875916][T28096] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5621'. [ 741.391454][T28104] validate_nla: 1 callbacks suppressed [ 741.391471][T28104] netlink: 'syz.3.5629': attribute type 3 has an invalid length. [ 741.437008][T28104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5629'. [ 741.518173][T28104] netlink: 'syz.3.5629': attribute type 3 has an invalid length. [ 741.595772][T28104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5629'. [ 741.780482][T28126] erspan0: entered promiscuous mode [ 741.862664][T28128] xt_hashlimit: size too large, truncated to 1048576 [ 741.972879][T28126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 742.057512][T28126] 8021q: adding VLAN 0 to HW filter on device team0 [ 742.071250][T28146] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5638'. [ 742.153107][T28126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 742.279467][T28126] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 742.294318][T28126] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 742.309375][T28126] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 742.384641][T28157] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5642'. [ 742.419571][T28157] .70X: renamed from veth1_virt_wifi [ 742.436719][T28157] .70X: entered allmulticast mode [ 742.455815][T28157] A link change request failed with some changes committed already. Interface .70X may have been left with an inconsistent configuration, please check. [ 742.512743][T28163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5644'. [ 742.609169][T28168] syzkaller1: entered promiscuous mode [ 742.633586][T28168] syzkaller1: entered allmulticast mode [ 742.648363][T28170] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5647'. [ 742.670689][T28172] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5648'. [ 742.802892][T28174] syzkaller0: entered promiscuous mode [ 742.811504][T28174] syzkaller0: entered allmulticast mode [ 742.861201][T28178] netlink: 'syz.0.5650': attribute type 1 has an invalid length. [ 743.177418][T28200] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048) [ 743.411540][ T1118] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.754431][ T5627] block nbd6: Receive control failed (result -32) [ 743.949550][T23892] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.996953][T23892] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.025468][T23892] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.036051][T23892] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.379683][T28265] FAULT_INJECTION: forcing a failure. [ 744.379683][T28265] name failslab, interval 1, probability 0, space 0, times 0 [ 744.393167][T28265] CPU: 1 UID: 0 PID: 28265 Comm: syz.0.5680 Not tainted syzkaller #0 PREEMPT(full) [ 744.393189][T28265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 744.393198][T28265] Call Trace: [ 744.393205][T28265] [ 744.393212][T28265] dump_stack_lvl+0xe8/0x150 [ 744.393236][T28265] should_fail_ex+0x412/0x560 [ 744.393261][T28265] should_failslab+0xa8/0x100 [ 744.393294][T28265] __kmalloc_noprof+0xe8/0x760 [ 744.393315][T28265] ? bpf_map_meta_alloc+0x189/0x790 [ 744.393340][T28265] bpf_map_meta_alloc+0x189/0x790 [ 744.393369][T28265] array_of_map_alloc+0x38/0xc0 [ 744.393388][T28265] map_create+0xafd/0x16a0 [ 744.393422][T28265] ? security_bpf+0x7e/0x2d0 [ 744.393444][T28265] __sys_bpf+0x6e1/0x950 [ 744.393469][T28265] ? __pfx___sys_bpf+0x10/0x10 [ 744.393506][T28265] ? ksys_write+0x242/0x270 [ 744.393530][T28265] ? __pfx_ksys_write+0x10/0x10 [ 744.393556][T28265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.393575][T28265] __x64_sys_bpf+0x7c/0x90 [ 744.393597][T28265] do_syscall_64+0x15f/0xf80 [ 744.393621][T28265] ? clear_bhb_loop+0x40/0x90 [ 744.393642][T28265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.393658][T28265] RIP: 0033:0x7f837179ce59 [ 744.393675][T28265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 744.393690][T28265] RSP: 002b:00007f8372629028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 744.393707][T28265] RAX: ffffffffffffffda RBX: 00007f8371a15fa0 RCX: 00007f837179ce59 [ 744.393718][T28265] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 0000000000000000 [ 744.393728][T28265] RBP: 00007f8372629090 R08: 0000000000000000 R09: 0000000000000000 [ 744.393738][T28265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.393749][T28265] R13: 00007f8371a16038 R14: 00007f8371a15fa0 R15: 00007ffd1ec01528 [ 744.393776][T28265] [ 744.910063][T28286] netlink: 'syz.4.5687': attribute type 1 has an invalid length. [ 744.941883][T28286] __nla_validate_parse: 11 callbacks suppressed [ 744.941900][T28286] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5687'. [ 745.117421][T28299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5687'. [ 745.266520][T28287] bond12: left allmulticast mode [ 745.271807][T28287] bond14: left promiscuous mode [ 745.276940][T28287] bridge6: left promiscuous mode [ 745.290230][T28287] geneve4: left promiscuous mode [ 745.295445][T28287] geneve4: left allmulticast mode [ 745.305418][T28287] gtp2: left promiscuous mode [ 745.313021][T28287] gtp2: left allmulticast mode [ 745.392382][T11596] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.418707][T11596] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.514323][T11596] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.691250][T28317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5697'. [ 745.724382][T28317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5697'. [ 745.745196][ T8267] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.756045][T28317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5697'. [ 745.765600][ T8267] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.775181][ T8267] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.799859][T28317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5697'. [ 745.810766][ T8267] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 746.160713][T28350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5706'. [ 746.383064][T28361] tipc: Started in network mode [ 746.397120][T28363] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5708'. [ 746.406494][T28361] tipc: Node identity 080211000001, cluster identity 4711 [ 746.406647][T28361] tipc: Enabled bearer , priority 0 [ 746.407107][T28361] mac80211_hwsim hwsim43 syzkaller0: entered promiscuous mode [ 746.454885][T28361] mac80211_hwsim hwsim43 syzkaller0: entered allmulticast mode [ 746.551175][ T30] audit: type=1800 audit(1779117040.229:27): pid=28358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5710" name="memory.events" dev="tmpfs" ino=2956 res=0 errno=0 [ 746.555376][T28372] syzkaller0: entered promiscuous mode [ 746.585255][T28372] syzkaller0: entered allmulticast mode [ 746.618071][T28379] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5713'. [ 746.678432][T28358] hmac(sha2: entered promiscuous mode [ 746.693058][T28381] tipc: Resetting bearer [ 747.009444][T28400] netlink: 'syz.2.5717': attribute type 4 has an invalid length. [ 747.060748][T28404] netlink: 'syz.2.5717': attribute type 4 has an invalid length. [ 747.239852][T28413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5719'. [ 747.496307][ T8102] tipc: Node number set to 134418688 [ 747.650705][T28439] netlink: 'syz.0.5725': attribute type 1 has an invalid length. [ 747.684300][T28436] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR [ 747.906711][T28450] netlink: 'syz.4.5726': attribute type 1 has an invalid length. [ 748.441740][T28480] netlink: 'syz.4.5731': attribute type 9 has an invalid length. [ 748.856276][T28496] openvswitch: netlink: EtherType 80 is less than min 600 [ 749.793791][T28542] xt_CT: No such helper "snmp" [ 750.008617][T28565] tap0: tun_chr_ioctl cmd 1074025677 [ 750.014566][T28565] tap0: linktype set to 6 [ 750.021229][T28565] __nla_validate_parse: 11 callbacks suppressed [ 750.021243][T28565] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.5752'. [ 750.176638][T28580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5756'. [ 750.195987][T28580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5756'. [ 750.389472][T28589] geneve2: entered promiscuous mode [ 750.407173][T28588] netlink: 'syz.3.5759': attribute type 1 has an invalid length. [ 750.431442][T28588] netlink: 'syz.3.5759': attribute type 2 has an invalid length. [ 750.456038][T24827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.476142][T24827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.500339][T24827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.532143][T24827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.911495][T28607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5765'. [ 751.039747][T28615] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5767'. [ 751.082022][T28617] syzkaller0: entered promiscuous mode [ 751.105706][T28617] syzkaller0: entered allmulticast mode [ 751.309486][T28626] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5767'. [ 751.590111][T28642] xt_hashlimit: size too large, truncated to 1048576 [ 751.789100][T28650] bond17: option lacp_active: invalid value (8) [ 751.819812][T28650] bond17 (unregistering): Released all slaves [ 751.980160][T28661] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5779'. [ 752.032782][T28666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5780'. [ 752.116883][T28671] mac80211_hwsim hwsim45 syzkaller0: entered promiscuous mode [ 752.142793][T28671] mac80211_hwsim hwsim45 syzkaller0: entered allmulticast mode [ 752.251122][T28673] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 752.269329][T28673] bond9 (unregistering): Released all slaves [ 752.323925][T28685] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5785'. [ 752.408105][T28685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.471073][T28691] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5787'. [ 752.959243][T28722] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 752.973429][T28722] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 753.026716][T28725] geneve3: entered promiscuous mode [ 753.033046][T28723] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 753.054021][T24827] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 56422 - 0 [ 753.064260][T28723] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 753.083748][T24827] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 56422 - 0 [ 753.125541][T11596] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 56422 - 0 [ 753.176404][T11596] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 56422 - 0 [ 753.411908][T28748] netlink: 'syz.4.5803': attribute type 1 has an invalid length. [ 753.517699][T28752] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 753.842048][T28773] ip6gre1: entered promiscuous mode [ 753.856941][T28773] ip6gre1: entered allmulticast mode [ 753.885567][T28773] netlink: 'syz.1.5811': attribute type 6 has an invalid length. [ 754.021691][T28779] ip6tnl3: entered allmulticast mode [ 754.069834][T11596] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 754.077910][T11596] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 754.094656][ T10] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 754.144399][ T10] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 754.514853][ T10] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 755.225927][T28846] __nla_validate_parse: 17 callbacks suppressed [ 755.225946][T28846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5831'. [ 755.321906][T28853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5831'. [ 755.333455][T28853] netlink: 348 bytes leftover after parsing attributes in process `syz.4.5831'. [ 755.360773][T28853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5831'. [ 755.389703][T28857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5836'. [ 755.392925][T28853] netlink: 348 bytes leftover after parsing attributes in process `syz.4.5831'. [ 755.413787][T28853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5831'. [ 755.506908][T28855] tipc: Enabled bearer , priority 0 [ 755.517400][T28858] mac80211_hwsim hwsim39 syzkaller0: entered promiscuous mode [ 755.533398][T28858] mac80211_hwsim hwsim39 syzkaller0: entered allmulticast mode [ 755.561054][T28862] ip6gre2: entered promiscuous mode [ 755.682488][T28868] netlink: 26 bytes leftover after parsing attributes in process `syz.4.5838'. [ 755.698105][T28871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5839'. [ 755.735888][T28871] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 755.785253][T28871] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 756.012240][T28892] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5842'. [ 757.266391][T28956] netlink: 'syz.2.5858': attribute type 4 has an invalid length. [ 757.292231][T28956] netlink: 'syz.2.5858': attribute type 4 has an invalid length. [ 757.374014][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.498232][T28965] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 757.877775][T28982] ip6tnl0: Caught tx_queue_len zero misconfig [ 757.959827][T28981] xt_hashlimit: size too large, truncated to 1048576 [ 758.124558][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 758.172768][T28997] bond11 (unregistering): Released all slaves [ 758.273544][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.532472][T29014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 758.542904][T29014] netlink: 'syz.0.5873': attribute type 10 has an invalid length. [ 758.551617][T29014] team0: left promiscuous mode [ 758.558074][T29014] 8021q: adding VLAN 0 to HW filter on device team0 [ 758.566993][T29014] bond0: (slave team0): Enslaving as an active interface with an up link [ 758.769043][T29030] netlink: 'syz.4.5876': attribute type 4 has an invalid length. [ 758.784620][T29030] netlink: 'syz.4.5876': attribute type 4 has an invalid length. [ 759.286292][T29035] openvswitch: netlink: Flow key attribute not present in set flow. [ 759.578530][ T4944] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 759.592780][ T4944] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 759.604525][ T4944] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 759.627870][ T4944] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 759.636317][ T4944] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 759.956174][ T4944] Bluetooth: hci3: command 0x0406 tx timeout [ 760.347986][T29039] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.357747][T29039] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.364976][T29039] bridge_slave_0: entered allmulticast mode [ 760.371905][T29039] bridge_slave_0: entered promiscuous mode [ 760.379586][T29039] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.386835][T29039] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.394314][T29039] bridge_slave_1: entered allmulticast mode [ 760.401275][T29039] bridge_slave_1: entered promiscuous mode [ 760.427439][T29039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 760.439130][T29039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 760.466179][T29039] team0: Port device team_slave_0 added [ 760.474311][T29039] team0: Port device team_slave_1 added [ 760.519550][T29039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 760.526731][T29039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 760.554245][T29039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 760.567249][T29039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 760.574449][T29039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 760.602221][T29039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 760.647046][T29039] hsr_slave_0: entered promiscuous mode [ 760.653408][T29039] hsr_slave_1: entered promiscuous mode [ 760.659561][T29039] debugfs: 'hsr0' already exists in 'hsr' [ 760.665655][T29039] Cannot create hsr debugfs directory [ 760.855481][T28980] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 761.356022][T29098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 761.714349][ T5627] Bluetooth: hci1: command tx timeout [ 761.768243][T29039] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 761.790107][T29039] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 761.805742][T29039] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 761.828019][T29039] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 761.837869][T29116] __nla_validate_parse: 19 callbacks suppressed [ 761.837884][T29116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5891'. [ 761.838649][T29039] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 761.900509][T29039] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 761.930541][T29039] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 761.955420][T29039] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 761.990952][T29123] syzkaller0: entered promiscuous mode [ 761.997086][T29123] syzkaller0: entered allmulticast mode [ 762.138229][T29123] netlink: 27 bytes leftover after parsing attributes in process `syz.4.5892'. [ 762.180341][T29135] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5894'. [ 762.300951][T29135] batadv_slave_1: Caught tx_queue_len zero misconfig [ 762.333619][T29142] netlink: 'syz.3.5896': attribute type 1 has an invalid length. [ 762.365610][T29142] netlink: 'syz.3.5896': attribute type 1 has an invalid length. [ 762.423374][T29039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 762.448235][T29039] 8021q: adding VLAN 0 to HW filter on device team0 [ 762.463064][T23892] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.470237][T23892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 762.533226][T23892] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.540434][T23892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 762.579061][T29147] tipc: Enabled bearer , priority 0 [ 762.648898][T29147] veth11: entered promiscuous mode [ 762.867074][T29145] tipc: Disabling bearer [ 763.168619][T29146] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5898'. [ 763.203549][T29146] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5898'. [ 763.472737][T29195] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5908'. [ 763.494327][T29195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5908'. [ 763.558587][T29196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5908'. [ 763.730290][T29199] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5909'. [ 763.770942][T29208] can: request_module (can-proto-0) failed. [ 763.793731][ T5627] Bluetooth: hci1: command tx timeout [ 764.037177][T29039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 764.228475][T29039] veth0_vlan: entered promiscuous mode [ 764.256761][T29039] veth1_vlan: entered promiscuous mode [ 764.427972][T29039] veth0_macvtap: entered promiscuous mode [ 764.475148][T29039] veth1_macvtap: entered promiscuous mode [ 764.532273][T29039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 764.626217][T29039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 764.761449][ T9475] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.771685][ T9475] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.812452][ T9475] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.822310][ T9475] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.031810][T29266] netlink: 'syz.4.5926': attribute type 7 has an invalid length. [ 765.068996][T29265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5927'. [ 765.324117][T29270] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR [ 765.569749][T11596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.652424][T11596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.828732][T24827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.870104][T24827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.880842][ T5627] Bluetooth: hci1: command tx timeout [ 766.273445][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 766.563087][ T4944] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 766.575523][ T4944] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 766.588577][ T4944] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 766.626705][ T4944] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 766.634358][ T4944] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 767.551076][T29342] __nla_validate_parse: 1 callbacks suppressed [ 767.551094][T29342] netlink: 51 bytes leftover after parsing attributes in process `syz.3.5938'. [ 767.881760][T29354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5939'. [ 767.954190][ T4944] Bluetooth: hci1: command tx timeout [ 768.276086][T29365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5942'. [ 768.343043][T29362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5942'. [ 768.573586][T29378] hsr0: entered promiscuous mode [ 768.597502][T29331] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.608120][T29331] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.625165][T29331] bridge_slave_0: entered allmulticast mode [ 768.643734][T29331] bridge_slave_0: entered promiscuous mode [ 768.753477][ T4944] Bluetooth: hci2: command tx timeout [ 768.768734][T29379] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 768.842967][T29384] siw: device registration error -23 [ 768.911327][T29389] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5947'. [ 768.939401][T29389] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5947'. [ 768.955243][T29389] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5947'. [ 768.987000][T29331] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.001819][T29331] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.023546][T29331] bridge_slave_1: entered allmulticast mode [ 769.041071][T29331] bridge_slave_1: entered promiscuous mode [ 769.199515][T29331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 769.214691][T29331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 769.297775][T29403] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5950'. [ 769.339509][T29331] team0: Port device team_slave_0 added [ 769.382605][T29404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 769.396669][T29331] team0: Port device team_slave_1 added [ 769.417427][ T4944] block nbd8: Receive control failed (result -1) [ 769.478348][T29377] hsr0: left promiscuous mode [ 769.508234][T29403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.519075][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.519565][T29331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 769.553516][T29331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 769.583555][T29331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 769.613678][T29411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5951'. [ 769.691119][T29331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 769.708881][T29331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 769.745356][T29422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5952'. [ 769.777439][T29331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 769.979637][T11596] [ 769.982001][T11596] ====================================================== [ 769.989014][T11596] WARNING: possible circular locking dependency detected [ 769.996041][T11596] syzkaller #0 Not tainted [ 770.000459][T11596] ------------------------------------------------------ [ 770.007468][T11596] kworker/u8:41/11596 is trying to acquire lock: [ 770.013785][T11596] ffff88801be8d2a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80 [ 770.023631][T11596] [ 770.023631][T11596] but task is already holding lock: [ 770.030989][T11596] ffffffff8f38de80 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 770.039693][T11596] [ 770.039693][T11596] which lock already depends on the new lock. [ 770.039693][T11596] [ 770.050078][T11596] [ 770.050078][T11596] the existing dependency chain (in reverse order) is: [ 770.059071][T11596] [ 770.059071][T11596] -> #11 (gdp_mutex){+.+.}-{4:4}: [ 770.066260][T11596] __mutex_lock+0x1a3/0x1550 [ 770.071354][T11596] get_device_parent+0x16f/0x3a0 [ 770.076796][T11596] device_add+0x2e1/0xbb0 [ 770.081633][T11596] device_create+0x269/0x300 [ 770.086722][T11596] msr_device_create+0x33/0x50 [ 770.091990][T11596] cpuhp_invoke_callback+0x445/0x860 [ 770.097784][T11596] cpuhp_thread_fun+0x36b/0x780 [ 770.103139][T11596] smpboot_thread_fn+0x541/0xa50 [ 770.108577][T11596] kthread+0x389/0x470 [ 770.113151][T11596] ret_from_fork+0x514/0xb70 [ 770.118241][T11596] ret_from_fork_asm+0x1a/0x30 [ 770.123515][T11596] [ 770.123515][T11596] -> #10 (cpuhp_state-up){+.+.}-{0:0}: [ 770.131141][T11596] cpuhp_thread_fun+0x127/0x780 [ 770.136498][T11596] smpboot_thread_fn+0x541/0xa50 [ 770.141939][T11596] kthread+0x389/0x470 [ 770.146510][T11596] ret_from_fork+0x514/0xb70 [ 770.151603][T11596] ret_from_fork_asm+0x1a/0x30 [ 770.156868][T11596] [ 770.156868][T11596] -> #9 (cpu_hotplug_lock){++++}-{0:0}: [ 770.164576][T11596] cpus_read_lock+0x42/0x160 [ 770.169666][T11596] static_key_slow_inc+0x12/0x30 [ 770.175104][T11596] setup_udp_tunnel_sock+0x2df/0x4f0 [ 770.180897][T11596] l2tp_tunnel_register+0xe72/0x1570 [ 770.186687][T11596] pppol2tp_connect+0x8b7/0x17c0 [ 770.192124][T11596] __sys_connect+0x312/0x450 [ 770.197219][T11596] __x64_sys_connect+0x7a/0x90 [ 770.202485][T11596] do_syscall_64+0x15f/0xf80 [ 770.207580][T11596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.213976][T11596] [ 770.213976][T11596] -> #8 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 770.221686][T11596] lock_sock_nested+0x41/0x100 [ 770.226954][T11596] inet_shutdown+0x6a/0x390 [ 770.231964][T11596] nbd_mark_nsock_dead+0x2e9/0x560 [ 770.237579][T11596] recv_work+0x1c2e/0x1d40 [ 770.242497][T11596] process_scheduled_works+0xb5d/0x1860 [ 770.248545][T11596] worker_thread+0xa53/0xfc0 [ 770.253634][T11596] kthread+0x389/0x470 [ 770.258206][T11596] ret_from_fork+0x514/0xb70 [ 770.263294][T11596] ret_from_fork_asm+0x1a/0x30 [ 770.268561][T11596] [ 770.268561][T11596] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 770.276185][T11596] __mutex_lock+0x1a3/0x1550 [ 770.281274][T11596] nbd_queue_rq+0x37b/0x1100 [ 770.286365][T11596] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 770.292414][T11596] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 770.299245][T11596] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 770.305728][T11596] blk_mq_run_hw_queue+0x348/0x4f0 [ 770.311340][T11596] blk_mq_dispatch_list+0xd16/0xe10 [ 770.317044][T11596] blk_mq_flush_plug_list+0x48d/0x570 [ 770.322919][T11596] __blk_flush_plug+0x3ed/0x4d0 [ 770.328270][T11596] __submit_bio+0x28d/0x580 [ 770.333272][T11596] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 770.339414][T11596] block_read_full_folio+0x599/0x830 [ 770.345197][T11596] filemap_read_folio+0x137/0x3b0 [ 770.350726][T11596] do_read_cache_folio+0x358/0x590 [ 770.356341][T11596] read_part_sector+0xb6/0x2b0 [ 770.361607][T11596] adfspart_check_ICS+0xb1/0x960 [ 770.367047][T11596] bdev_disk_changed+0x817/0x1770 [ 770.372577][T11596] blkdev_get_whole+0x380/0x510 [ 770.377935][T11596] bdev_open+0x31e/0xd30 [ 770.382681][T11596] blkdev_open+0x470/0x610 [ 770.387595][T11596] do_dentry_open+0x785/0x14e0 [ 770.392860][T11596] vfs_open+0x3b/0x340 [ 770.397428][T11596] path_openat+0x2e08/0x3860 [ 770.402523][T11596] do_file_open+0x23e/0x4a0 [ 770.407529][T11596] do_sys_openat2+0x113/0x200 [ 770.412705][T11596] __x64_sys_openat+0x138/0x170 [ 770.418056][T11596] do_syscall_64+0x15f/0xf80 [ 770.423147][T11596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.429537][T11596] [ 770.429537][T11596] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 770.436726][T11596] __mutex_lock+0x1a3/0x1550 [ 770.441814][T11596] nbd_queue_rq+0xc6/0x1100 [ 770.446824][T11596] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 770.452874][T11596] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 770.459704][T11596] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 770.466188][T11596] blk_mq_run_hw_queue+0x348/0x4f0 [ 770.471800][T11596] blk_mq_dispatch_list+0xd16/0xe10 [ 770.477502][T11596] blk_mq_flush_plug_list+0x48d/0x570 [ 770.483378][T11596] __blk_flush_plug+0x3ed/0x4d0 [ 770.488740][T11596] __submit_bio+0x28d/0x580 [ 770.493741][T11596] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 770.499873][T11596] block_read_full_folio+0x599/0x830 [ 770.505657][T11596] filemap_read_folio+0x137/0x3b0 [ 770.511185][T11596] do_read_cache_folio+0x358/0x590 [ 770.516800][T11596] read_part_sector+0xb6/0x2b0 [ 770.522069][T11596] adfspart_check_ICS+0xb1/0x960 [ 770.527507][T11596] bdev_disk_changed+0x817/0x1770 [ 770.533034][T11596] blkdev_get_whole+0x380/0x510 [ 770.538388][T11596] bdev_open+0x31e/0xd30 [ 770.543132][T11596] blkdev_open+0x470/0x610 [ 770.548046][T11596] do_dentry_open+0x785/0x14e0 [ 770.553311][T11596] vfs_open+0x3b/0x340 [ 770.557878][T11596] path_openat+0x2e08/0x3860 [ 770.562970][T11596] do_file_open+0x23e/0x4a0 [ 770.567977][T11596] do_sys_openat2+0x113/0x200 [ 770.573152][T11596] __x64_sys_openat+0x138/0x170 [ 770.578503][T11596] do_syscall_64+0x15f/0xf80 [ 770.583598][T11596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.589990][T11596] [ 770.589990][T11596] -> #5 (set->srcu){.+.+}-{0:0}: [ 770.597092][T11596] __synchronize_srcu+0xca/0x300 [ 770.602534][T11596] elevator_switch+0x1e8/0x7a0 [ 770.607800][T11596] elevator_change+0x2cc/0x450 [ 770.613070][T11596] elevator_set_default+0x36c/0x430 [ 770.618770][T11596] blk_register_queue+0x3e9/0x4e0 [ 770.624294][T11596] __add_disk+0x677/0xd50 [ 770.629123][T11596] add_disk_fwnode+0xfb/0x480 [ 770.634300][T11596] nbd_dev_add+0x72c/0xb50 [ 770.639218][T11596] nbd_init+0x168/0x1f0 [ 770.643872][T11596] do_one_initcall+0x250/0x870 [ 770.649136][T11596] do_initcall_level+0x104/0x190 [ 770.654575][T11596] do_initcalls+0x59/0xa0 [ 770.659408][T11596] kernel_init_freeable+0x2a6/0x3e0 [ 770.665109][T11596] kernel_init+0x1d/0x1d0 [ 770.669939][T11596] ret_from_fork+0x514/0xb70 [ 770.675028][T11596] ret_from_fork_asm+0x1a/0x30 [ 770.680295][T11596] [ 770.680295][T11596] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 770.688098][T11596] __mutex_lock+0x1a3/0x1550 [ 770.693185][T11596] elevator_change+0x1b3/0x450 [ 770.698454][T11596] elevator_set_none+0xb5/0x140 [ 770.703810][T11596] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 770.710119][T11596] nbd_start_device+0x17f/0xb10 [ 770.715468][T11596] nbd_genl_connect+0x165b/0x1cf0 [ 770.720989][T11596] genl_family_rcv_msg_doit+0x22a/0x330 [ 770.727035][T11596] genl_rcv_msg+0x61c/0x7a0 [ 770.732036][T11596] netlink_rcv_skb+0x232/0x4b0 [ 770.737297][T11596] genl_rcv+0x28/0x40 [ 770.741777][T11596] netlink_unicast+0x75c/0x8e0 [ 770.747045][T11596] netlink_sendmsg+0x813/0xb40 [ 770.752308][T11596] ____sys_sendmsg+0x972/0x9f0 [ 770.757572][T11596] ___sys_sendmsg+0x2a5/0x360 [ 770.762748][T11596] __x64_sys_sendmsg+0x1bd/0x2a0 [ 770.768180][T11596] do_syscall_64+0x15f/0xf80 [ 770.773274][T11596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.779669][T11596] [ 770.779669][T11596] -> #3 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 770.788253][T11596] blk_alloc_queue+0x546/0x680 [ 770.793521][T11596] __blk_mq_alloc_disk+0x197/0x390 [ 770.799132][T11596] nbd_dev_add+0x499/0xb50 [ 770.804055][T11596] nbd_init+0x168/0x1f0 [ 770.808720][T11596] do_one_initcall+0x250/0x870 [ 770.813987][T11596] do_initcall_level+0x104/0x190 [ 770.819428][T11596] do_initcalls+0x59/0xa0 [ 770.824258][T11596] kernel_init_freeable+0x2a6/0x3e0 [ 770.829958][T11596] kernel_init+0x1d/0x1d0 [ 770.834790][T11596] ret_from_fork+0x514/0xb70 [ 770.839885][T11596] ret_from_fork_asm+0x1a/0x30 [ 770.845155][T11596] [ 770.845155][T11596] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 770.852341][T11596] fs_reclaim_acquire+0x71/0x100 [ 770.857781][T11596] kmem_cache_alloc_lru_noprof+0x45/0x640 [ 770.864011][T11596] alloc_inode+0xb8/0x1b0 [ 770.868843][T11596] iget_locked+0x131/0x6a0 [ 770.873761][T11596] kernfs_get_inode+0x4f/0x780 [ 770.879030][T11596] kernfs_get_tree+0x5cd/0x980 [ 770.884295][T11596] sysfs_get_tree+0x46/0x110 [ 770.889391][T11596] vfs_get_tree+0x92/0x2a0 [ 770.894311][T11596] do_new_mount+0x341/0xd30 [ 770.899313][T11596] __se_sys_mount+0x31d/0x420 [ 770.904490][T11596] do_syscall_64+0x15f/0xf80 [ 770.909585][T11596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.915980][T11596] [ 770.915980][T11596] -> #1 (&root->kernfs_rwsem){++++}-{4:4}: [ 770.923950][T11596] down_write+0x96/0x200 [ 770.928701][T11596] kernfs_remove_by_name_ns+0x4e/0x140 [ 770.934674][T11596] device_links_driver_bound+0x54f/0x14e0 [ 770.940898][T11596] driver_bound+0xd8/0x2e0 [ 770.945816][T11596] really_probe+0x789/0xaf0 [ 770.950822][T11596] __driver_probe_device+0x1ef/0x380 [ 770.956616][T11596] driver_probe_device+0x4f/0x240 [ 770.962153][T11596] __device_attach_driver+0x279/0x430 [ 770.968028][T11596] bus_for_each_drv+0x258/0x2f0 [ 770.973385][T11596] __device_attach+0x2c5/0x450 [ 770.978652][T11596] device_initial_probe+0xa1/0xd0 [ 770.984179][T11596] bus_probe_device+0x12a/0x220 [ 770.989529][T11596] device_add+0x7e9/0xbb0 [ 770.994363][T11596] faux_device_create_with_groups+0x189/0x290 [ 771.000938][T11596] regulator_dummy_init+0x19/0x40 [ 771.006465][T11596] regulator_init+0xca/0x110 [ 771.011554][T11596] do_one_initcall+0x250/0x870 [ 771.016824][T11596] do_initcall_level+0x104/0x190 [ 771.022266][T11596] do_initcalls+0x59/0xa0 [ 771.027094][T11596] kernel_init_freeable+0x2a6/0x3e0 [ 771.032801][T11596] kernel_init+0x1d/0x1d0 [ 771.037632][T11596] ret_from_fork+0x514/0xb70 [ 771.042720][T11596] ret_from_fork_asm+0x1a/0x30 [ 771.047983][T11596] [ 771.047983][T11596] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 771.056563][T11596] __lock_acquire+0x15a5/0x2cf0 [ 771.061919][T11596] lock_acquire+0x106/0x350 [ 771.066922][T11596] down_read+0x47/0x2e0 [ 771.071577][T11596] kernfs_remove+0x35/0x80 [ 771.076499][T11596] __kobject_del+0xe1/0x330 [ 771.081504][T11596] kobject_del+0x45/0x60 [ 771.086247][T11596] cleanup_glue_dir+0x1a3/0x220 [ 771.091599][T11596] device_del+0x780/0x8f0 [ 771.096426][T11596] unregister_netdevice_many_notify+0x1d5f/0x22c0 [ 771.103343][T11596] unregister_netdevice_queue+0x31f/0x360 [ 771.109564][T11596] nsim_destroy+0x277/0x7f0 [ 771.114568][T11596] __nsim_dev_port_del+0x14f/0x200 [ 771.120183][T11596] nsim_dev_reload_destroy+0x288/0x490 [ 771.126145][T11596] nsim_dev_reload_down+0x8a/0xc0 [ 771.131672][T11596] devlink_reload+0x1eb/0x8c0 [ 771.136849][T11596] devlink_pernet_pre_exit+0x1ff/0x420 [ 771.142806][T11596] ops_undo_list+0x187/0x940 [ 771.147900][T11596] cleanup_net+0x56b/0x800 [ 771.152820][T11596] process_scheduled_works+0xb5d/0x1860 [ 771.158866][T11596] worker_thread+0xa53/0xfc0 [ 771.163955][T11596] kthread+0x389/0x470 [ 771.168527][T11596] ret_from_fork+0x514/0xb70 [ 771.173617][T11596] ret_from_fork_asm+0x1a/0x30 [ 771.178882][T11596] [ 771.178882][T11596] other info that might help us debug this: [ 771.178882][T11596] [ 771.189088][T11596] Chain exists of: [ 771.189088][T11596] &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex [ 771.189088][T11596] [ 771.202450][T11596] Possible unsafe locking scenario: [ 771.202450][T11596] [ 771.209877][T11596] CPU0 CPU1 [ 771.215218][T11596] ---- ---- [ 771.220561][T11596] lock(gdp_mutex); [ 771.224447][T11596] lock(cpuhp_state-up); [ 771.231276][T11596] lock(gdp_mutex); [ 771.237669][T11596] rlock(&root->kernfs_supers_rwsem); [ 771.243106][T11596] [ 771.243106][T11596] *** DEADLOCK *** [ 771.243106][T11596] [ 771.251227][T11596] 7 locks held by kworker/u8:41/11596: [ 771.256659][T11596] #0: ffff88801be8e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 771.267510][T11596] #1: ffffc90004b0fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 771.278011][T11596] #2: ffffffff8fdc2568 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 771.287297][T11596] #3: ffff88807c1bb128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 771.297275][T11596] #4: ffff88807c1bf258 (&devlink->lock_key#6){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 771.308036][T11596] #5: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x16b/0x7f0 [ 771.316972][T11596] #6: ffffffff8f38de80 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 771.326087][T11596] [ 771.326087][T11596] stack backtrace: [ 771.331956][T11596] CPU: 0 UID: 0 PID: 11596 Comm: kworker/u8:41 Not tainted syzkaller #0 PREEMPT(full) [ 771.331971][T11596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 771.331980][T11596] Workqueue: netns cleanup_net [ 771.331999][T11596] Call Trace: [ 771.332005][T11596] [ 771.332010][T11596] dump_stack_lvl+0xe8/0x150 [ 771.332024][T11596] print_circular_bug+0x2e1/0x300 [ 771.332040][T11596] check_noncircular+0x12e/0x150 [ 771.332057][T11596] __lock_acquire+0x15a5/0x2cf0 [ 771.332077][T11596] ? kernfs_remove+0x35/0x80 [ 771.332091][T11596] lock_acquire+0x106/0x350 [ 771.332103][T11596] ? kernfs_remove+0x35/0x80 [ 771.332122][T11596] down_read+0x47/0x2e0 [ 771.332134][T11596] ? kernfs_remove+0x35/0x80 [ 771.332149][T11596] kernfs_remove+0x35/0x80 [ 771.332164][T11596] __kobject_del+0xe1/0x330 [ 771.332176][T11596] kobject_del+0x45/0x60 [ 771.332187][T11596] cleanup_glue_dir+0x1a3/0x220 [ 771.332202][T11596] device_del+0x780/0x8f0 [ 771.332217][T11596] ? __pfx_device_del+0x10/0x10 [ 771.332229][T11596] ? netdev_unregister_kobject+0x344/0x450 [ 771.332245][T11596] unregister_netdevice_many_notify+0x1d5f/0x22c0 [ 771.332264][T11596] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 771.332278][T11596] ? __kfree_rcu_sheaf+0x1f/0x5d0 [ 771.332298][T11596] unregister_netdevice_queue+0x31f/0x360 [ 771.332311][T11596] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 771.332322][T11596] ? kvfree_call_rcu+0x9f/0x430 [ 771.332340][T11596] nsim_destroy+0x277/0x7f0 [ 771.332356][T11596] __nsim_dev_port_del+0x14f/0x200 [ 771.332373][T11596] nsim_dev_reload_destroy+0x288/0x490 [ 771.332390][T11596] nsim_dev_reload_down+0x8a/0xc0 [ 771.332407][T11596] devlink_reload+0x1eb/0x8c0 [ 771.332423][T11596] ? __pfx_devlink_reload+0x10/0x10 [ 771.332435][T11596] ? xa_get_mark+0x6fc/0x7b0 [ 771.332450][T11596] devlink_pernet_pre_exit+0x1ff/0x420 [ 771.332463][T11596] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 771.332477][T11596] ? class_remove_file_ns+0x121/0x160 [ 771.332494][T11596] ops_undo_list+0x187/0x940 [ 771.332511][T11596] ? __pfx_ops_undo_list+0x10/0x10 [ 771.332528][T11596] ? idr_destroy+0x218/0x290 [ 771.332541][T11596] ? do_raw_spin_unlock+0xf5/0x210 [ 771.332558][T11596] cleanup_net+0x56b/0x800 [ 771.332574][T11596] ? __pfx_cleanup_net+0x10/0x10 [ 771.332591][T11596] ? process_scheduled_works+0xa70/0x1860 [ 771.332603][T11596] ? process_scheduled_works+0xa70/0x1860 [ 771.332615][T11596] process_scheduled_works+0xb5d/0x1860 [ 771.332636][T11596] ? __pfx_process_scheduled_works+0x10/0x10 [ 771.332649][T11596] ? assign_work+0x3d5/0x5e0 [ 771.332661][T11596] worker_thread+0xa53/0xfc0 [ 771.332682][T11596] kthread+0x389/0x470 [ 771.332696][T11596] ? __pfx_worker_thread+0x10/0x10 [ 771.332707][T11596] ? __pfx_kthread+0x10/0x10 [ 771.332721][T11596] ret_from_fork+0x514/0xb70 [ 771.332735][T11596] ? __pfx_ret_from_fork+0x10/0x10 [ 771.332746][T11596] ? __switch_to+0xc79/0x1410 [ 771.332763][T11596] ? __pfx_kthread+0x10/0x10 [ 771.332782][T11596] ret_from_fork_asm+0x1a/0x30 [ 771.332800][T11596] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 771.722855][ T4944] Bluetooth: hci2: command tx timeout [ 772.301551][T11596] dvmrp0: left allmulticast mode [ 772.440121][T11596] bond9 (unregistering): (slave geneve3): Releasing active interface [ 772.484837][T11596] bond1 (unregistering): (slave bridge1): Releasing active interface [ 772.513411][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.521704][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.705699][T11596] bond14 (unregistering): (slave bridge6): Releasing backup interface [ 772.845776][T11596] bond0 (unregistering): Released all slaves [ 772.853613][T11596] bond1 (unregistering): Released all slaves [ 772.862554][T11596] bond2 (unregistering): Released all slaves [ 772.871723][T11596] bond3 (unregistering): (slave bond4): Releasing backup interface [ 772.880339][T11596] bond3 (unregistering): Released all slaves [ 772.890493][T11596] bond4 (unregistering): Released all slaves [ 772.902888][T11596] bond5 (unregistering): (slave veth5): Releasing backup interface [ 772.911955][T11596] bond5 (unregistering): Released all slaves [ 772.921312][T11596] bond6 (unregistering): Released all slaves [ 772.930008][T11596] bond7 (unregistering): Released all slaves [ 772.938948][T11596] bond8 (unregistering): Released all slaves [ 772.947773][T11596] bond9 (unregistering): Released all slaves [ 772.956878][T11596] bond10 (unregistering): Released all slaves [ 772.968712][T11596] bond11 (unregistering): Released all slaves [ 772.977586][T11596] bond12 (unregistering): Released all slaves [ 772.986842][T11596] bond13 (unregistering): Released all slaves [ 772.997413][T11596] bond14 (unregistering): Released all slaves [ 773.007439][T11596] bond15 (unregistering): Released all slaves [ 773.016290][T11596] bond16 (unregistering): Released all slaves [ 773.101039][T11596] tipc: Disabling bearer [ 773.124017][T11596] tipc: Disabling bearer [ 773.159990][T11596] tipc: Left network mode [ 773.380440][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 773.643004][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 773.746370][T11596] hsr_slave_0: left promiscuous mode [ 773.752142][T11596] hsr_slave_1: left promiscuous mode [ 773.782776][T11596] pim6reg (unregistering): left allmulticast mode [ 774.012762][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 774.277186][T11596] IPVS: stop unused estimator thread 0... [ 774.279831][ T5289] 8021q: adding VLAN 0 to HW filter on device eth4 [ 774.348926][T11596] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.379575][T11596] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.439022][T11596] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.497112][T11596] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.572969][T11596] bridge_slave_1: left allmulticast mode [ 774.578943][T11596] bridge_slave_1: left promiscuous mode [ 774.585194][T11596] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.594207][T11596] bridge_slave_0: left allmulticast mode [ 774.599871][T11596] bridge_slave_0: left promiscuous mode [ 774.607401][T11596] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.620074][T11596] bridge_slave_1: left allmulticast mode [ 774.626116][T11596] bridge_slave_1: left promiscuous mode [ 774.631789][T11596] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.640614][T11596] bridge_slave_0: left allmulticast mode [ 774.646653][T11596] bridge_slave_0: left promiscuous mode [ 774.652315][T11596] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.740844][T11596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 774.756021][T11596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 774.765650][T11596] bond0 (unregistering): Released all slaves [ 774.840594][T11596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 774.856751][T11596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 774.866665][T11596] bond0 (unregistering): Released all slaves [ 774.875987][ T5289] 8021q: adding VLAN 0 to HW filter on device eth5 [ 775.024542][T11596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 775.032179][T11596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 775.042633][T11596] hsr_slave_0: left promiscuous mode [ 775.051656][T11596] hsr_slave_1: left promiscuous mode [ 775.057532][T11596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 775.065979][T11596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 775.073969][T11596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 775.081390][T11596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 775.096014][T11596] veth1_macvtap: left promiscuous mode [ 775.101522][T11596] veth0_macvtap: left promiscuous mode [ 775.107544][T11596] veth1_vlan: left promiscuous mode [ 775.112804][T11596] veth0_vlan: left promiscuous mode [ 775.176740][T11596] team0 (unregistering): Port device team_slave_1 removed [ 775.186596][T11596] team0 (unregistering): Port device team_slave_0 removed [ 775.276895][T11596] team0 (unregistering): Port device team_slave_1 removed [ 775.295580][T11596] team0 (unregistering): Port device team_slave_0 removed [ 775.332151][ T5289] 8021q: adding VLAN 0 to HW filter on device eth6 [ 775.533083][ T5289] 8021q: adding VLAN 0 to HW filter on device eth7 [ 775.775576][ T5289] 8021q: adding VLAN 0 to HW filter on device eth8