last executing test programs: 6m39.255079277s ago: executing program 3 (id=8785): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001640)="5346f7f875528ef24043c68e04", 0xd}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r5, 0xe6905000) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x14, 0x105, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x24040804) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x14, 0x3, 0x1, 0xd73463eac1b54891, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x24001010}, 0x20008800) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) (async) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl(r7, 0x8983, &(0x7f0000000040)="000000006574683000000000000000000000000000000000000300"/52) ioctl(r7, 0x8983, &(0x7f0000000080)="01000000657468302e3000"/52) recvmmsg(r6, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="20020000300001002dbd70000000000007"], 0x220}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) 6m38.395821093s ago: executing program 3 (id=8790): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x22, 0x0, &(0x7f0000000600)="3d25ff005b19c4cbe601709b080041fe7a8a047963817ba0af112187b35b1bf32219", 0x0, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0xb0, 0x30, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{0x9c, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x0, 0x6, 0xffffffff, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) 6m38.126419034s ago: executing program 3 (id=8791): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd25, 0x25dfdbff, {{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x20}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x1000, 0x200000000000000}, 0x800, 0x6e6bb0, 0x0, 0x1, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x28048890) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x200000000, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 6m38.01068344s ago: executing program 3 (id=8793): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r2, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e22, 0x80000001, @mcast2, 0x6}, {0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3ff}, 0x0, {[0x2ce, 0x5, 0xeec, 0xffffffff, 0x6, 0xffffffff, 0x101, 0x4]}}, 0x5c) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x46, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x8, 0x3, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xffffa888, 0x10001}]}}}}}}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r7], 0x5c}}, 0x40) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, r7, 0x25, 0x8, @void}, 0x10) listen(r3, 0x39b3) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r10, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) close(0x4) 6m37.471902435s ago: executing program 3 (id=8799): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a50000000060a09040000000000000000020000000900020073797a3200000000090001007379000000001c000480180001800e000100627974656f726465720000000400028005000740d1000000140000001100010000000000000000000000000a"], 0x78}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}]}}}]}, 0x5c}}, 0x0) preadv(r4, &(0x7f0000000140)=[{&(0x7f0000000040)=""/225, 0xe1}], 0x1, 0x7, 0x800) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)='0', 0x1}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0xf, r2}, 0x94) mmap(&(0x7f00007bf000/0x1000)=nil, 0x1000, 0x1, 0x40010, r6, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f00000014c0)=""/4071, 0xfe7, 0x17, 0x0, 0x0) writev(r2, &(0x7f0000010b40), 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f00000000c0)=0xc, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x39, &(0x7f00000000c0)={&(0x7f0000000680)=@newlink={0x28, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1ac4, 0x44100}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) 6m36.194276518s ago: executing program 3 (id=8809): syz_emit_ethernet(0x9a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ee527a00643c0020010000000000000000000000000001ff0200000000000000000000000000012f02000000000000000100c910fe8000000000000000000000000000340000000420880b0088ea1334c586b7e0438722be00000000000800000086dd080088be00000000100000000100000000000000080022eb00000000200000080200000000000000000000000800655800000000"], 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r7) r9 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000180), 0x12) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r10, 0xfffe0000) sendmmsg(r10, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2, 0x2}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000008400000005"], 0x18}}], 0x2, 0xc8844) 6m21.116423858s ago: executing program 32 (id=8809): syz_emit_ethernet(0x9a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ee527a00643c0020010000000000000000000000000001ff0200000000000000000000000000012f02000000000000000100c910fe8000000000000000000000000000340000000420880b0088ea1334c586b7e0438722be00000000000800000086dd080088be00000000100000000100000000000000080022eb00000000200000080200000000000000000000000800655800000000"], 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r7) r9 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000180), 0x12) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r10, 0xfffe0000) sendmmsg(r10, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2, 0x2}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000008400000005"], 0x18}}], 0x2, 0xc8844) 17.016202466s ago: executing program 0 (id=12056): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x20c, r1, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}]}, @TIPC_NLA_SOCK={0xec, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f65}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa6f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x18}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xdf7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff02}]}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4004040}, 0x4000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xe8, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xa, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x9, 0x15, 0x8}}]}, @NL80211_ATTR_IE={0xc6, 0x2a, [@measure_req={0x26, 0xb8, {0x1, 0x3, 0x4, "07bb4037cda321cfaca30ff7e8062bbdab220d924da290642c8c63145990995f73ba2c9247b8cc88955a8b90b5769b5f3f3cbeb3a7f20a0be84db94606e2398f908f1fc0cc19ac28f11952f796268fc1c040238557158071535cf5032d1090396930093a6218704b2cf3bb13ed023e0ddcde96aaa0960e17c68435d1e7ea23cb98479d00fa9881586bc4b24df155e4c21173d481a1c8faf0f62799b601d9781e3285e46d072f29b00af708e5159b1b7a384e7decd7"}}, @cf={0x4, 0x6, {0x7, 0x5, 0x1400, 0x1}}]}]}, 0xe8}}, 0xf4) r3 = socket$can_j1939(0x1d, 0x2, 0x7) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000007, 0x50, r3, 0xd1649000) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r5, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r6, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8831}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000740)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r8, &(0x7f00000008c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xdc, r9, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVICE={0x18, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVICE={0x58, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0x555e}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xd160}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_DEVICE={0x18, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0x5bffd059fbe5e250}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40880}, 0x20008801) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000940)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r8, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x3c, r6, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc804}, 0x4000084) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x128, 0x1403, 0x4, 0x70bd2d, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6erspan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_virt_wifi\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gre0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'gre0\x00'}}]}, 0x128}, 0x1, 0x0, 0x0, 0x20000040}, 0x4004) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8a1020}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x30, r6, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x30}}, 0x4001) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000d40), 0x200, 0x0) ioctl$TUNGETDEVNETNS(r12, 0x54e3, 0x0) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000dc0), r8) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000e00)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r5, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x2c, r13, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000841}, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r8, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x38, r9, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x82) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000011c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001180)={&(0x7f0000001040)={0x110, r1, 0x4, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x53}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x400}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffff9}]}, @TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r15 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001240), r8) sendmsg$NLBL_MGMT_C_REMOVE(r5, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x60, r15, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x840) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000001380)=0x1, 0x4) 16.783621881s ago: executing program 0 (id=12058): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001d80), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000140)) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000010000000003000000280001800e0001"], 0x3c}}, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e72119", 0x9d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/195, 0xc3}], 0x1}, 0x0) recvmsg$can_bcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)=""/192, 0xc0}], 0x1}, 0x2103) shutdown(r4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x18, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x104}, 0x10, 0x0, r0}, 0x94) 15.743406554s ago: executing program 0 (id=12068): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) unshare(0x28000600) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000029c0)={r1, 0x0, 0x0, 0x4}, 0x20) r2 = socket(0x1, 0x80802, 0x0) bind$l2tp(r2, &(0x7f0000000000)={0x2, 0x0, @local, 0x4}, 0x10) pipe(&(0x7f0000000080)) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r3, 0x107, 0x7, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720af0fff8ffffff71a400fe000000007110ad00000000001d400500000000004704000001ed00000f03000000ff00006f44000000000000730a00fe000000007203000000000006b500f3ffffff00009500000000000000023bc065b58111c6dfa041b63af4a3912435f18564a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccc99069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad24b89b6a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c87852730a3bd7ac923fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca4856ff03b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec860cde7c79f7b4d4e24c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b450100000001000000393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00400000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd599c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb80610eb37bd2d40ebdfed687f0b093e68f10b72146a0b749ee2105e2da94a288146abbbaf7c0b24fe0000000000000000f1a4f4de6a8d12dc9e71a20cbd412898586843b534d36e21379a8a06133c1babde9e5bd5b6afc5f684aada43ee560e800f58cb33b8483f6518abde7c86bd5d389c1b3c40fdd4bebe4adf87b1025ff57eb50984cc5bad9ea1c15484ea627c3c1501d612ed65939266e7332966f03e0376076e7c5dfe25f367dda7f69db89829b360dd2f59cbaad10f13e269eca792725bbacb96aa0a5c426ca76f84322661"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x400a004}, 0x4000044) 15.388571253s ago: executing program 0 (id=12070): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x21c, 0x21c, 0x4, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xe}, {0xb, 0x2}, {0x9, 0x1}, {0x5, 0x5}, {0xf, 0x5}]}, @enum={0xb, 0x8, 0x0, 0x6, 0x4, [{0x3, 0x7fff}, {0x6, 0x1b4}, {0x4, 0x869}, {0x2, 0xfffffffb}, {0xe}, {0x5, 0x58a}, {0x3, 0x7fff}, {0xe, 0x8001}]}, @fwd={0x2}, @var={0xf, 0x0, 0x0, 0xe, 0x2, 0x6}, @union={0xf, 0x4, 0x0, 0x5, 0x1, 0x3, [{0x1, 0x4, 0x5}, {0xe, 0x1, 0x9}, {0x6, 0x0, 0x7f}, {0xa, 0x2, 0x50d}]}, @func={0xc, 0x0, 0x0, 0xc, 0x1}, @struct={0xa, 0x7, 0x0, 0x4, 0x0, 0xe99b, [{0xa, 0x3, 0x6898e10d}, {0xe, 0x2, 0x2}, {0xc, 0x0, 0xffffffd2}, {0x6, 0x4, 0x81}, {0x2, 0x0, 0xfff}, {0x0, 0x4, 0x7}, {0x1, 0x1, 0x10}]}, @struct={0x7, 0x6, 0x0, 0x4, 0x0, 0x9, [{0xa, 0x4, 0xb}, {0x0, 0x1, 0x9}, {0x9, 0x5}, {0x2, 0x1, 0x2}, {0xf, 0x0, 0x6}, {0xd, 0x5, 0x5}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8000}}, @union={0x9, 0x8, 0x0, 0x5, 0x0, 0x40, [{0x5, 0x3}, {0x3, 0x0, 0x3}, {0x1, 0x2, 0x5}, {0x9, 0x5, 0x1}, {0x6, 0x5, 0x7fffffff}, {0x3, 0x2, 0x2}, {0xc, 0x5, 0x8}, {0x6, 0x0, 0x5}]}]}, {0x0, [0x5f, 0x0]}}, &(0x7f0000000280)=""/110, 0x238, 0x6e, 0x1, 0x6, 0x10000}, 0x28) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000340)=0x4000) (async) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x40001) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb8, 0xa, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_ADT={0x94, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x6}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x4}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xb}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) connect$netlink(0xffffffffffffffff, &(0x7f0000000600)=@kern={0x10, 0x0, 0x0, 0x4}, 0xc) socketpair(0x15, 0x2, 0x40, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000680), &(0x7f00000006c0)=0x4) (async, rerun: 64) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000700)={0x3, 0x5, 0x3, 0x6, 0x607}) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000740)={'gretap0\x00'}) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000780)={0x0, 0xc9}, &(0x7f00000007c0)=0x8) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000800)={0x0, 0x1}, &(0x7f0000000840)=0x8) (rerun: 32) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000880)={r5, 0x0, 0x8, 0xfffd, 0x40, 0x2, 0x88e9, 0x3, {r6, @in6={{0xa, 0x4e21, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x13}, 0x2}}, 0xa21, 0x5, 0x6, 0x1000, 0x8}}, &(0x7f0000000940)=0xb0) (async) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f0000001a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001a40)={&(0x7f00000009c0)={0x1054, 0x13, 0x2, 0x70bd29, 0x25dfdbfb, {0x21, 0x6, 0x5, 0x4, {0x4e21, 0x4e21, [0x4, 0x10001, 0x8, 0x7], [0x559, 0x9, 0x0, 0x5], 0x0, [0x400, 0x2]}, 0x5, 0x800}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "460f1b57620032029616ba12c7170c698b827cf6ea1d75e77a5d5f6e47eba3c75f05a0d8abc69ca5aa912c71f76167d5b3fe605461f7df5e3a4d26ff81c7b6684433061c3c2a2d1fd8ae4b269a7da17e2c2e2d5c6ba4ca5344c324aca9d5a4c2189501f0cea83cf8211373e5199222ca56d8664d5ac3ac8a91151e9e9eee976239ed4e549c1d9a5b466eaf588de04ee9f99e4e9beba57cdf95fef81bbb0930ca8d6ce038679e5c050d8647b72a3ca8924caf356a361fa4e8594cdea3cb2ecc8ead5f7409f7cc3909a4b016d035f41911f61b94b36f42a04f038d6e10308b710348b0a7daceb767c0bbc6c3f8d6898aa7b23da3abd184f28e88920a656002a77df5b24db4ab7f8ba0a4a1c1a203d7d3909e4b9273b6623d117bbd9a0d5f9a6c0d0ed0e6f7c67b0fd231f6437660cbabe568e10322164a4204f421a2757b5fd1b1a2c1d3b4c17bb802395873e6a1811d99e3a278cdbc90cb3c2ed6360534faf01173cc061073b3bee7a3154d5a67247dfeb1a8645d5b684ba4f665d191b7190fdbbff13e20461c6dbe6528a780aad92d0427eb58b1a7dc12fb1ed09f564da583d5af9b4e1bdc71a979a85d352274ee1527d24e9356831ceae47c97564822d31052d9030ae03610d7d79ed1bf05d9da1f5d46195f9e7e5a2d346305b73abd445a5acb35bd770b6b3c1b034ef91849048b664d754c970202c64bc34f974e92a00debb6d05659c7d67a32f47ba1638fcf1a9a20d5d370a5fc8d77aac08b598bc25a658de93dbda57878c700b5c3dfed4e1b026b9b85b74444814e0a38059cb6f7257596940c2bd8206435f3d6e22248fa168eb035b5f6e865e08e03ee2bd0fea5e063a8fef9daceee936252e8e9fe1d41637c94f0c3f02ee99a3944028394450aecdc0451811024f80ef53622d6c8f21feec3da20459f18257aa70b8c272848614171372e0894dbd5fceba96af639d3ee23b003ddf7b9c0a6c5ee3dcc0adef818b02dbdd33e61ffc0140bf8ef7c6fdb459e672b3f5164a3e39b69edbd705ef4703d594a946efcbb18b674a2125e451a0b2d53f819d1a81d884ad21afc6ab52179cf19d32eaeb3365e07d3d10a07c18b3b335a9beb3b8c796cbed37ed31e6c925c5dc8fa94decb3ddf053227c191c04ea5d35181229dad0045c87c556ec6f46b5f5264b21375546fab053d14cd31dc26409fd8b33a40ddb0cbafedc8fd3c4324ef780c41fee960757405842fc4902fa8d1357eaf3b72b03c0b000f20ecf54899894f724c7ae8896c3dbccb308879e360f1f054bd0774975a67fc0217d8985128c4d19084aed4071ad127b3007f73c8a965fa2414affcc425a6112ac1e06f2a34c4ff967d0aee6b6c7f8e68038a277103761662d622319aca4b640a71c9813488ea215d586960978111a10191943e1a3721756444a34515d9ce13d5444169abea9ee0ddef4635ad19c701f32f4f1fdea437a1a167668531cf2143836a27532a959b8e0d5da5cc729d50445da43dd9f747b2baa3e259325c256a136837dffb4f05a9ff9f863e99a8193c61cccb4e870ff8f7c69fdafeab785635f7c88cac1cc47d342c55a9099308b32bfda3686961cc123f8a98e1156f8f5c03ebaf45bb1e1cf10237c368edf91729b5d301c4e3cce397b48bbb0ed1322cceee8bc60436242fdb866787e9ca334cb8be9cf0d9fafae04c3e5282c639a4bd6cfb5f2ba12c4f716d89c8a3230e8acab3b9096313aadf8d6c9840948640fa1c5406b8d36b861f6d7cef531ab457325592d8409a2d4892735377aefb7e9e0978bcfbb9ad8db8bc867c7993ac934d3821ead5b9bd3f3a7b3d990e4fe4bae600f653deb53fc0392e18f755655f75a5c885f1e32d3c73e7972e6f3302b94dae0a6f5538b9311a149ccd68840b04385056ee75dcdeb57b9524165a32fcf8b957e6b630640e7cc83504a889c71099ce88b1e2d75d09c9d3946da7ffb18ec741e4960c7472ff7c7787d6f4297007842dbfe0ac6f62351270d77b6cc1c554b8e5059af95df231286f8ad83842e9193dce8425a1d7d32ba09435124a707a5e1bc12aa7e41867ab65ee153d1fd0c54b9480b09a1a3172808fef325bf742a30778df96bfc6d5b4c8295008f37816bb0a8d0e6eca675a10d2e95be46a805e6d43102228ef8cbc8edb5873c699bb38240732aa53a62449e4aeba2c018165eb769da85c8f125dc7fb007b9eae65b00199a4cceea9526c75e146b8cae7ab318e0db73b81a73f92d056ee9e06f41b201890915b23ae468b81f73a4bc5582fd3eedee950a87e652fbc88b123f7e5410fb53b10ec3fef04007e32573ecbe714a8e02a69770054ba81031be174f126be03428dbeec6d0d56335db9d0a4b9507f1da6e314e9de5f1c061782ca6df16c268016c164daf77eaeb435bfbefc77f69ad02f0889f33c7afc7cd7cf9cb84cb0f98f7e9cd0082555325b10150b14cf4fe2505e5b5e2ca9f040f71d1c21c64a0e4f4dfa79667065d8aee87ca8b58d0d1dec8a2da276195f409b9956e6d7d61f80144506c6f42ddb5675a74b597eb4526ea7e6fa8aa6ce6c4f10131fa90f50e67c72eeefb31ac1b7e659c516d15f13257d3bd248422d2b0de9c5a7732eb5b13fe9552720e1286b93b3fcd26b10f11ce698686f97c68c0ff92c2602863ba4c80382deab4c828a7c9de09f50057546f05e7222da1d0420cbd23fe558de33721878faff0bfd458adf1dc8d9ac643057545b88542e3645460c9a777dac6c16eaeab9561de8a1b2e84c39344e91e2f6384602168381b312b91d32dd35df18443b86327b9f23983fa2577ced5cd3d9e098704dba57f8410d6411edbb62a7ce0f91829ca5440bc066df8bec899caf59522f929dc67b11124f324b7500d10bdaaed12518e5552f7346df459d85e2726c82876b0b32cb84c065e1b657823b8d0ff7be6dca8f8d77ab451e277e07694285a038ff834274b592f62bf95776ad2f7adffab01c19f6528d53d03c9ad8511fb846171196a969b39564f24b948340b960466964e28054a0949ff937629f5070e735f5d1c984e8c922ea2ae70caf3e674c05f0e49ec4222474c2d10e7425ac5b3a25eb3cff232b8e19b5810b865d5ba90253cf5d4977a86dbfc7a069bae003ffa3a661b043e8290cc68b0290cb9f640a1a93192f2b432638bcc4fef90d37deb3127082076e4624804e02b7a2ab366f60eeba5489960bbd9a85fff9d11f44efbf609eb44bd21bc3ebeed44fbeeb088fb33124bf21fec34791d2762929ca24b407cb99ab481cb2b68537fc3a1cbf9a01b942093bd41c05c14a21906d060b8ade4ca21a0c8ebcacdfecd20a71c817befe865fa666820ed38f6f2ff86691d1055e2ad82f6c07ce08a324f4046c2f7d3571a7068f1c3791abee6f798a92cda20a2a8c12dffbbbd389674e2b3b6d668673b2701af786db4e3b73d77d3cace1ce66755438ac181662da966b67a2eedef739cc2089efd72a25544b4c6f422114be832fc7baf46fb6f6b1e740334bd79a96e1e38a3a486e65332194768e5108a0706af06980608377a24e1e443cdc8fd138f290bce78488fa016e5222c5d8e2d46b84e3d490460fb011eb3af4e0cc0c94499cf05bd64b886da1ef03659dd62189f2399a72a9696ac2378145faa48c945c070004cc4b061fddc4bcd54ec4da54b60a1c6dda9ada79888e73fd035886a25bc16e31ac5c349ca83401b7a052b2955e51b46d57d98e38044989e4a1be6144dc91a31139d8a95484ed2337176ad44909b45fa8de2a8dfb28695d30afd55b40e950de973983d14cc54b610113934a62ec6df0b5371152f7091dc2f106cda93503577c96ef34325d352f592d24be37de88b648598466a1006ed38f08e0b1628eb698ff3c900d235852364a527bdf2d833939e652cabf2f1938ea1bebb761b9381450aed13d6e7045223bc57292060deb03f7e54ecae2d2c1881e2dfc6cd746e36831c62ee62760a35828ba58f9bb8135c6754c9b940237fccb56cbfccaf0a066ec295643b405c39996065eb901bfa385a194e5b4163cce0e8e24e83c23517b7c00ed797c5c95ef6310944c0e83025157c19fb12d914a107f6ec3f7eca575a2708166e1679f7c99af37c8901ab618e88a0f0145aaddd283f17137a3a96f14a5f009a3b519eae76561172d2ba7523f43614c732e2a3a53905f09712b4dd41d05127aaa6b7615de77d505dcad3120ff343b0609b6a66e1ea03a2b3ed37d21282a665bbd28f05f1482d89219c2ff826b432f30c0c28b4e7009de2cdb9e987db64c930aadec576cc2460b67745ef269f30d9a067bc5030ae98787a8fdd230d935f4ece23dc305d7b9b9fde6dc697a6caef95ba2ec618de8da97169a0a10fa8c44931bcba758d7d5dc719d2fedeb418a1bf840d7571ac0c315893a3be424a2f6de4e74be9424a29b9bc5c810fc760b02fb3350e885d04d0ca2a5a074fbce40ee4f0fe5a15e900d03dcd37d215ec75c8a7b962b63ba01531109e65ce7b80d8bbe43ac45910f0512f6e3f261b62d0cf16d4a685bfa251190b3c460eef08b2a2e00d8e29e23baa5db866ff038930b29cba086b263642e18c350a3177b1f8ec14ef0814411cca91bf07f177325274f75eae8f672341abb66061aed0faa42ef4971d4ddab2d7f0f57fc0f20bdce2a8dddb12cc7193800fa632468bfb950292a6564c0132811f28311b4373d46bcb7022af6ee10137da32b97486b79ba27d176e54a2bce3caff3a128f19b0b33e94de55c8bd9b9c8cc55b2fa239705f5a9874ad9a2a243540d908528572e345bab760056b7a904c9526ca3e3ee846e5c4de73df9e3e249df9c82aeb3b7756d46fdc82f53c7fc6f85d55beef9240f3bd89fd4ec5b924d2be28355bafeb559d4a27d6245720f4a61c94ed977c31c4fc4f281859e6a3043e9c7694874a16e26a32770823c99ae315130a33ed4e8362696ee5ffc8bf8ce4142f734ca4596b83fe9534e43afa97767d80c53131254f8c30309e55ccaf8e5fe8de77cd8d0d450ed804e26d86d979bb1183ef8a1ae3992509f7fc74055dbb1ce31da94e36c717802e095be2dd65c8564f54e2f1aa9297fd3d87771fa8a7f4c1f18766f3acb1cf75cee514c41947567b56ffd6d6fb62c7762a5ea60c4eb7dda42264dd27a410a66e5dd105d1de63d4295afde5b8956893240b6bc03a8483030ec9ef1ac8f2fa8baa83e6b432a51b76591dca58188e33c9b920c83e007d929e00c8f8b517db3c5cf0181d8088cbf2ee5ad466bb9da6f7ac2cae20fde6287e769ed98d687e3fd195fb8148d027dfca96c2b7639afef19c1ae10cb439c6c517d88fe4037d101cfe1eb13f91410bec4e8824ad86e5beecb99a7c126453a07503a67bb141d9e6318244adcb664bf1269bc652f67e9e1a1e96088154e6e3eb2039b977393b762b3468ac00141d813d269217c3881943ec2fc2fc11c1a5bb44cee254c07a8071ad93699a99747fe9fc170746842914d912aa1d136e46b99933c8a064a45619c7d7cc7b33c971f7315eda29caaa25c5f4dccdd6673269e2d3a87834bfd55bec1d0de9a0bc16f87737305d33e1f40001b94d82777143463663db90f9be334ce8b9922b0d5d8a7c5f5d1c66464039ad55ce00477d75cd4f62a60536561d0290154fc3f03c6a9f7268e86deb93e906eb7ea422ac7ec9ecd1461744077df8cb60b12bb5ea2d1361b57c90cccc0197af7831592bffbf4f126ec99e8fc195635ad2d5bc315ed80f37c64a4a87f7a6084c98463f7152735740ece37e95e7d99ff4ff7d131554258872b3dbff17b4bb1cce9a437f536"}]}, 0x1054}, 0x1, 0x0, 0x0, 0x8011}, 0xc6cf7e58baa21d13) recvmsg(r3, &(0x7f0000001e80)={&(0x7f0000001ac0)=@isdn, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001b40)=""/172, 0xac}, {&(0x7f0000001c00)=""/90, 0x5a}, {&(0x7f0000001c80)=""/86, 0x56}, {&(0x7f0000001d00)=""/41, 0x29}], 0x4, &(0x7f0000001d80)=""/255, 0xff}, 0x22) (async) ioctl$NILFS_IOCTL_GET_CPINFO(r4, 0x80186e82, &(0x7f0000002000)={&(0x7f0000001ec0)=[{0x1, 0x0, 0x0, 0x5, 0xc7, 0x9, 0x6, 0x4}, {0x3, 0x0, 0x9, 0xfffffffffffffffb, 0x3, 0x5, 0x0, 0x41c4}, {0x3, 0x0, 0xd1, 0xc14, 0x90, 0x2, 0x6}, {0x0, 0x0, 0xfff, 0x3, 0xfffffffffffff001, 0x6, 0xffffffffffffffff, 0x100000001}, {0x1, 0x0, 0x7, 0x7, 0x6, 0x101, 0x4, 0xdf4}], 0x5, 0x38, 0x1, 0x1}) (async) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) recvmmsg(r7, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000002040)=""/12, 0xc}, {&(0x7f0000002080)=""/56, 0x38}, {&(0x7f00000020c0)=""/135, 0x87}], 0x3, &(0x7f00000021c0)}, 0x5}, {{&(0x7f0000002200)=@can, 0x80, &(0x7f0000002500)=[{&(0x7f0000002280)}, {&(0x7f00000022c0)=""/240, 0xf0}, {&(0x7f00000023c0)=""/240, 0xf0}, {&(0x7f00000024c0)=""/33, 0x21}], 0x4, &(0x7f0000002540)=""/94, 0x5e}, 0x1}, {{&(0x7f00000025c0)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000002680)=[{&(0x7f0000002640)=""/11, 0xb}], 0x1, &(0x7f00000026c0)=""/136, 0x88}, 0xfffffff8}], 0x3, 0x2, &(0x7f0000002840)={0x77359400}) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000028c0), r4) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f00000029c0)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002980)={&(0x7f0000002900)={0x78, r8, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x48000}, 0x4011) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000002a00)={0x800, 0x7, 0x8004, 0x84, 0x8000, 0x3, 0x1, 0x1, r5}, &(0x7f0000002a40)=0x20) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000003, 0x810, r3, 0xcaf04000) (async, rerun: 64) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000002b80)={r2, &(0x7f0000002a80)='TIPC\x00', 0x8801, &(0x7f0000002ac0)={@_ha_fsid={[0x2, 0x6]}, {0x2, 0x8, 0xbba1, 0x9}}, 0x5, &(0x7f0000002b00), &(0x7f0000002b40)=0x2}) (rerun: 64) sendmsg$nl_generic(r9, &(0x7f0000002d80)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x30000000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002c00)={0x134, 0x2b, 0x100, 0x70bd2c, 0x25dfdbfd, {0x13}, [@generic="0a0a36fefb5c23e49fa17f90abf8ec609c8c827e4e08b5fabafeae7cad7069fc2777f4391496cd243041f6e8091d40c890cf9e3ec8b14a2ff60c554f23abffe0c8a6229df7236c5c78e3d09d221df859e664d57575b3bbd434319012384b44224fcfd82a314646f95e0c6aef9b8a5c3f71fed06397d5b2473d6f4c846db492b61892bbc0c396acb96e21effd08a61784b72bf0dbf5261baf94e6764c1afff5c39e223bb13918a80cd9b17c738430630a67eee49a7b5f6d2f67f44363bb14431f95a48b5bec2b3598845fc1fd8956951a21bbcf661df4", @generic="893102e220624f853054f6ae5817f30d6aee3782a51bb2396632b8bd0a9d26c77a15916c80cba6ef60d2c572a5a82340f24670eb046c1237e51b76f3ef0b6e581288a8c91bf621"]}, 0x134}}, 0x4000) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r9, 0x40106e80, &(0x7f0000002dc0)={0x1, 0x1}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002e00), r10) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r7, 0xc0096616, &(0x7f0000002e40)={0x1, [0x0]}) 15.059475362s ago: executing program 0 (id=12074): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x7c}}, 0x8800) r0 = epoll_create(0x3ff) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000280)={0x2000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff010}, {0x8}]}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r4, 0x25, 0x0, @void}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r6, 0x8912, &(0x7f00000004c0)="1d8e275180a0c2d830") syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[], 0x0) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r7, 0x400, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4048}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r8, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x20044000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc000}, 0x10) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, 0xa, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000084}, 0x44) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000000e0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000001700000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1001000040000100fefffffffddbdf25017c0000040042800c0001800800060064010101872b8e39ada061e6dc948aea0c3661a9d86cbb1a455aeb35e8380ca658cb774ae7fea455e8bdeffd66e9142a7838bd178332eb47a26488fc6b655feb8391e167542895ffaa1ee8248ad1de22fc627f85d16555d15d90ff35d4d268b77338a6af8354d9318a81816e4f36e279643bd64952c8b731a9f85cded62d42eca3b9cf166792d760b1c29fc13f8efe4dc488c9d45285e57371cb18c447ed02276a3e4359c3aecce80eab8fcd3f88252231f0eee5f2f08ac4bf12c68497540a876e5650a88a6f78424bd98ae7a421861b82a7fa91044ab70c60ad902700acf1b071f4000000e4cadc2b6f4003d60deebe6a19d50ae85aec142c160a98f7387eddcfe6a5777776fb373db134a048682c8201fbdaa3daa4b09fefd0c419d44a61b40c3b928c1d4678b0abf32f5204d1d28a6919b787c0c671927a29156a4540d90495065e0f0796d7ae91125aeef89b57a3c71992462376afb74f50c4be43cf97b2b700dc50a5"], 0x110}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) socket$nl_netfilter(0x10, 0x3, 0xc) 14.593544895s ago: executing program 0 (id=12077): socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) pipe(&(0x7f00000001c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) pipe(&(0x7f0000000080)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)={0x14, 0x12, 0x0, 0x101, 0x70bc27, 0x21dfdbfa, {0x7}}, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0xa, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 6.476331591s ago: executing program 2 (id=12119): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020206b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x1, 0x4, 0x0, 0x1, 0x6}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) setsockopt(r1, 0x112, 0x11, &(0x7f0000000100)="00ff000000000000ff0000000500000001000000ff000000050000000100000000000000000000000000000000000000000000000a0000000a000000", 0x3c) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 6.447004051s ago: executing program 5 (id=12120): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x1f) getsockopt$inet_opts(r1, 0x0, 0x4, 0x0, &(0x7f0000000040)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r4, 0x107, 0xb, 0x0, &(0x7f0000000040)) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="40fddbdf25021f00cb", @ANYRES32=r3, @ANYBLOB="080009000700000008000200e0000002080009000600000008000900030000000800090008010000"], 0x40}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000042000100000000000000000003010000000000002600010000010000005566778899aabb0800450000140000000001170000010203040506070800000c00020006000600080600000c0003"], 0x58}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 6.250928356s ago: executing program 4 (id=12121): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x645c, 0x4, 0x40, 0x0, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004000000060018"], 0x4c}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r3, 0x1, 0xfffffffd, 0xffffffff, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '*,'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c001}, 0x20000000) r5 = socket(0x2b, 0x1, 0x7) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="00040000", @ANYRES16=r7, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088018000c8014000b8008000a008fee000008000900feffffff"], 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r2, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xf0, r7, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x37abbf1c20d9b5c4}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x74, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x736dedad}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa260996}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x25}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x53}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x61efeb00}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4de8246a}]}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000240)={r0, &(0x7f0000000080)='%%\'{$)\x00', 0xba440, &(0x7f00000000c0)={@align=0x6, {0x0, 0x1, 0x0, 0x7}}, 0x4, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000200)=0xc0000000}) r9 = socket(0x10, 0x3, 0x0) getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20080000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x74, r3, 0xfb501cc7cfeb3d02, 0x70bd28, 0x5b5a, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fffffff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.055621872s ago: executing program 2 (id=12122): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x3, @mcast2, 0x10001}}, 0x588, 0x104, 0x9, 0xc58d, 0x8}, &(0x7f0000000400)=0x98) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xb0}]}, &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') r3 = socket(0x11, 0x3, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r3, 0x1, 0x53, &(0x7f00000001c0)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000200)=0x28) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x87, 0xe, 0x1}, 0x10) sendmsg$kcm(r3, &(0x7f0000000740)={&(0x7f0000000080)=@hci={0x1f, 0xffffffffffffffff, 0x1}, 0x80, 0x0}, 0x20008003) socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r4, 0x10e, 0x3, &(0x7f00000000c0)=""/28, &(0x7f00000001c0)=0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a00000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0009000000008000000000000000000000000000869885af1b8011c0ee53272ece4fcf048078379c98f236fbcc96aca2af692b97dfceadfb35964d333b3aff0f4a36b941dd410bf90a3a7991b72b0424cfc737d90cc305c6f4d239707ff6337f9d7d232b"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x74, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8, r7}, 0xc) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r6, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r10, @ANYBLOB="2c003080"], 0x48}}, 0x0) r11 = gettid() sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001000030425bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYRES8=r11, @ANYRES32=r11, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x20000804}, 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@deltaction={0x128, 0x31, 0x10, 0x70bd29, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x70, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x74e5f27}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd718}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x128}}, 0x0) 6.041817818s ago: executing program 5 (id=12123): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0xffffffff, 0x25dfdc02, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xe8, 0x4, 0xe, 0x3, 0x81}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x48050}, 0x20004800) recvmsg$unix(r0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}, 0x12061) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002f20702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200020095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x0, 0x1ffffffffffffe30, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000002000/0xd000)=nil, 0xd000, 0x300000c, 0x12, r1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r4, &(0x7f00000009c0)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) getsockopt$MRT(r4, 0x0, 0x0, &(0x7f0000000900), &(0x7f0000000940)=0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r3) setsockopt$inet_group_source_req(r3, 0x0, 0x2f, &(0x7f00000007c0)={0x6, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e24, @loopback}}}, 0x108) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f00000009c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="02fc27bdd51af4c5dbdf255300"/28], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="000229bd7000fedbdf25060000000500530001000000050053000000000008000500000000000a00e800ffffffffffff0000100017800400050004000100040001001c00e700bb9c44d6409a8d610b1e4c46fa86d5b745e3087c95e1546a2400178004000200040005000400060004000300040004000400060004000400040002000500530000000000080005003f3a1fa3080005000900000008000500070000000a0018000303030303030000"], 0x28}}, 0x4810) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(r5, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0x4, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYRES8=r7, @ANYRES16=r10, @ANYRES64=r2], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x940e012af7d64be2) r11 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000b, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r12 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) 5.351960068s ago: executing program 4 (id=12125): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d08020a000000401296a1180002008100000000000e1208000f0100810401a8001600140001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x10}], 0x1, 0x40800) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000300)=0x2) ioctl$PPPIOCSMRRU(r3, 0x4004743b, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) unshare(0x8000000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) sendmsg$rds(r2, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0xd6c1, 0x7, 0x4, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x3fb, 0xffffffffffffdffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x192dbfb5, 0xfffffffffffffffc}, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r1}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x13, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040054) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000340)='memory.numa_stat\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r8, &(0x7f0000000600)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575b43f86dd6067", 0x14}, {&(0x7f00000001c0)="0100"/13, 0xd}, {&(0x7f0000000280)="37a0a6c482b23cba92ffffff3f7b42590e180c07f3c193b532f3080000008c19", 0x20}, {&(0x7f0000000380)="d422b8440c607d46a140ebfce60a67610dd2493961afc1684af41b1820085a974c353f2ff3843617008d627082460020ee4bcac2e32f815419b5d5ddc3cb756fd9", 0x41}], 0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000300)=0x4) 5.24996298s ago: executing program 5 (id=12126): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000001c0)={0x1f, 0x3, 0x6}, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) (async, rerun: 64) r4 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) (async) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) (async) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="e0000000100001002dbd7000fddbdf257874732874776f6669732829"], 0xe0}, 0x1, 0x0, 0x0, 0x44}, 0x80) (async, rerun: 64) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="f9dbdf2500000006", @ANYRES32=0x0, @ANYBLOB="158804000301040008001b000000000008000d0008000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) (async, rerun: 64) unshare(0xe040400) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0xf8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r9, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa9, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xf0, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) (async, rerun: 32) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r7, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) (rerun: 32) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, 0x25, 0x301, 0x670bd22, 0x25dfdbfc, {0x15}, [@typed={0x14, 0x15e, 0x0, 0x0, @binary="4dc3ad498a5608e73f89a6d3681e134b"}]}, 0x28}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000680)=@o_path={&(0x7f0000000640)='./file0\x00', r9, 0x4000, r10}, 0x18) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b20, &(0x7f0000000080)={'wlan1\x00', @random='\x00\x00]\x00N\v'}) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x122}}, 0x0) (rerun: 32) 4.898513287s ago: executing program 5 (id=12127): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f00000001c0), 0x37) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_int(r1, 0x1, 0x28, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) socket$vsock_stream(0x28, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x3, 0x8000003, 0x1, 0x1, 0x8, 0x3}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x9e, 0x7}}, @TCA_NETEM_CORR={0x10, 0x1, {0xa, 0x8, 0xeb04}}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40088c1}, 0x800) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000440), 0x0, 0x20048010, &(0x7f0000000140)={0x11, 0xc, r8, 0x1, 0xd8, 0x6, @remote}, 0x14) socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fcffffff00000000800000af18010000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) 4.852555165s ago: executing program 1 (id=12128): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900196372696467650000917c02800000000000000000400000"], 0x34}, 0x1, 0x0, 0x0, 0x600}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000000102f50000000000000000000a0000003c0001802c00018014"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000040)) (async) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000040)) 4.663921918s ago: executing program 1 (id=12129): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc0000001900010000000000000000001c140000fe0000010000000084001200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005001a000d00000008000400", @ANYRES32, @ANYBLOB='\f\x00\t'], 0xbc}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0xc3}, 0x1, 0x100000000000000}, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async, rerun: 32) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @rand_addr, @multicast2}, &(0x7f0000000140)=0xc) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x17, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000dae5105ef1825f7719bfc388949ae5994e38bb5c161386f88b0db8c84f88a831fd57eb8aa0af32a9886eff17dcbb6bd6f8cd91a98979501fabbbb2a0c58239e383d9e970faabada1aeffc9c71d74d58ecf3d6be9666f23f86b24a73dd9998be1199dc04aef9a0abd4d1ecefb9fe1344619caed8896081120205357448180c933211f7d18ba9126f88b672cd026561257d635efb1009c78f5cf3b1e4c905e35808052a726d77bb85001b767bc7a6a343177ba281130e347fa72a32b4dbd0b6eb9", @ANYRESDEC=r0, @ANYRESDEC=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', r2, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.550809924s ago: executing program 2 (id=12130): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x304}, "39b138d4300bc48f", "ccf149b57883a43d088357d86882e1e4", "f30add4d", "c3d07f5fede7b038"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000440)="e9", 0x1}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 4.442084302s ago: executing program 1 (id=12131): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000040)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}}, 0x14}, 0x1, 0x0, 0x0, 0x20000011}, 0x2404000a) close(0x3) sendmsg$NFT_BATCH(r1, &(0x7f0000001000)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000fc0)={&(0x7f0000001040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x8c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x24, 0x14, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x45}]}, @NFT_MSG_DELTABLE={0x1cc, 0x2, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_TABLE_USERDATA={0xab, 0x6, "7975681b8159d0cf508d225d782d1ed0213762541fc35ccbe240896156483794f8b79515254757dd891ae1f47de0c2a11e6f0bea3400f5727673a307bb9d8383f3370aaeff9cfefc7a820451d2aeb753ed1bc5884c124dc2113b07efc5508a65494dc2a4802edeeaf28c80416e8985d0c1ec365a4cce5a2bcf887cb188f886b3852ebf84176b546b9396af180d2508c1661adfb5c2797fd8a7d4a09b9b2e7997f22c02b77d365c"}, @NFTA_TABLE_USERDATA={0xad, 0x6, "937cb4cb1611e08ed06bcce6e2b90153c5ef4aace957c36feaeb96205647930e0277486bf1e689f9cde1ad9b00cd6eafaae5e5b2f1aa249ca17641da06dfb700c762cd9f01bd0248748e223821f880aa8c5ee35c7cac7e89bc736f996783c6da39944ff572fd301e4242bb4e72e389f97becbe8d9f639268d682266b55e85a297fb1979e549d3d223a222142dcde9170f328067b2dd649967314d856fb4e4ba1c770f80d37afa2a0bc"}, @NFTA_TABLE_USERDATA={0x5c, 0x6, "3d65cf18f63908e0eb4f5e1ce9f897ff4c126ee76e355cba8f65a968e73cc19ea65038f30d59e4190bfba5e6798c23a68e49a86b72f76082dcf6d651c459a9a6912fc1565c148497dbf5b3e34751266c974bfa4c581043d5"}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0xb4, 0x5, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_CHAIN_HOOK={0x3c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'lo\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7a3ab816}, @NFTA_HOOK_DEV={0x14, 0x3, 'wg1\x00'}]}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7f}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3f4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3d4}, 0x1, 0x0, 0x0, 0x40c0}, 0x800) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7", 0x24}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52", 0x1c}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000680)=""/106, 0x6a}], 0x1}, 0x12153) 4.260181717s ago: executing program 1 (id=12132): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000000000fefffffffffffd8000000000000000000000000000bbac1414bb000000000000000000000000ffffff2b6b57a470b83fce00000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c0200000200000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d33c"], 0x1ac}}, 0x0) 4.098223343s ago: executing program 1 (id=12133): socket(0x27, 0x6, 0x8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x37, 0x800, 0x70bd28, 0x25dfdbfd, {0x14}, [@typed={0x8, 0x142, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24841}, 0x4840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000a00)={@random="e33110495bfd", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private1, @private0={0xfc, 0x0, '\x00', 0x1}}}}}}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r4, 0x0, 0x3261e) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x80800) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$NILFS_IOCTL_GET_VINFO(r4, 0xc0186e86, &(0x7f0000000800)={&(0x7f00000006c0)=[{0x2, 0x5, 0x0, 0x9}, {0xdf, 0x0, 0x3, 0xffffffff}, {0xef2f, 0x9, 0x6, 0xc295}, {0x6, 0x6, 0x5, 0xffffffffffffffff}, {0x1, 0x1a, 0x3, 0x7}, {0x8, 0x5, 0x3, 0xa86}], 0x6, 0x20, 0x6, 0xe3cd}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r7}, &(0x7f00000007c0), &(0x7f0000000640)=r3}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYRESHEX=r5, @ANYRES16=r9, @ANYBLOB="417627bd7000fbdbdf250100000000000000014100000018001700190000005d6574683a677203"], 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x4080) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x30, r9, 0xd2440efef0cf245e, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x7ff, 0x4, 0xffffffff, 0x1}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x800) socket$nl_route(0x10, 0x3, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 3.920628014s ago: executing program 4 (id=12134): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\xa6\x7f\x00', 0x14200, &(0x7f0000000040)={@align=0x4, {0x8c16, 0x4, 0x5, 0x6}}, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="34010000170001000000000000000000640101020000000000000000000000000000000097581e58e0000002000000000000000000000000fc020000000000000000000000000000fe8000000000000000000000000000aa0000004000"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000020000000000000000000000000a01010000000000000000000000000000000000020100030200002000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000b10f00000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000004000000b86b6e000000000000000000feffffff0000000000000000000000000c0008"], 0x134}}, 0x4000) sendmsg$nl_generic(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xec, 0x28, 0x2, 0x70bd28, 0x25dfdbfb, {0x18}, [@generic="dafc939ffe17e347eca6dbaf7a4e32458217853c8562aba7285750b4584f952d5ed53a277b1e8554d5f1342f70cc2f2bff94c1b98d5c4aed614d9bf4237f64f52e9185f1cba522a258cb8d5085afc54a2073b9b3616cd71e6a566b47d602fd10841997ad47e7ed6df7f7a1b55b9f8dc81a4b6acac3ec3f", @nested={0x5f, 0xa3, 0x0, 0x1, [@nested={0x4, 0xbd}, @generic="c437f98ac783a7024f6b82c24ca086b109748c4ff3752213636da4d0e41fb867a0bc47bf499d53b23088eea6780ee12c4ef259c9ddae58367085a1e23430fa840feee431921675e049b7c300615549ef59192624c963fa"]}]}, 0xec}}, 0x20048841) 3.894099095s ago: executing program 4 (id=12135): r0 = socket$alg(0x26, 0x5, 0x0) socket$unix(0x1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f0000000f40)=""/4088, 0x0, 0xff8, 0x8, 0xffffffff}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r2, @ANYBLOB="080004"], 0x4c}, 0x1, 0x0, 0x0, 0x280c1}, 0x8000002) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x18}], 0x4924924924924fd, 0x0) r4 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80000) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x2b, 0x400, 0x70bd28, 0x25dfdbff, {0x9}, [@nested={0x8, 0xc8, 0x0, 0x1, [@nested={0x4, 0x110}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x34edf0761192ca7b) 3.804220536s ago: executing program 2 (id=12136): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xb}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4810) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)}, 0x0) 463.526317ms ago: executing program 4 (id=12137): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2000000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000ffffffff010000000000000000000000000057b400000000"], 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008900000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80cc85}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=@newtfilter={0x94, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xe}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x1}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x3}}]}, 0x94}}, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000900)=[{&(0x7f0000000680)="f802f9a32485a6", 0x7}, {&(0x7f0000000780)="4752f5", 0x3}], 0x2, 0x2) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000009c0)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010101}}, 0xffff, 0x0, 0x3, 0x7, 0x2, 0x8, 0x5}, &(0x7f0000000a80)=0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000ac0)={r7, @in6={{0xa, 0x4e21, 0x7, @empty, 0x4}}, 0x0, 0x4, 0x2, 0x3, 0x40, 0x7, 0x2f}, 0x9c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_emit_ethernet(0x1e, &(0x7f00000000c0)={@remote, @empty, @void, {@can={0xc, {{0x4, 0x1, 0x0, 0x1}, 0x2, 0x3, 0x0, 0x0, "c28cf0aa23c9a8aa"}}}}, &(0x7f00000007c0)={0x1, 0x3, [0xd9f, 0x2ab, 0x25c, 0xf0b]}) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xb8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000100003042dbd70003d00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000380012800b00010067656e65766500002800028005000d0001000000140007000000000000000000000000000000000108000f"], 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000300)="e89ceda72b083f2f2fcb2d869fcf0765c39ef470738cfeeb93772807a76f1b5316c165d7706de19f9c4a12a2cef9d6478ffb3ed3579284d38a821a282c466797774f68f309d79abe8a31157acac019c5e2c2ca7c0785e055fb62d6e5acfb73be81469e384d78a9aafccf7782ef65e80b0ee7b72714d33457f01790c2114817a6b05c035feb06f4ba3574dfefe8cc674438ed13f8a3f2daf0c14090d4ee704ed391fa2e828d93e28ba69c730e2a5a0d23c5a92090abad850a023ab2fae4087ebd9911edcc8f2c6dd9a6e61e74209632c26a136b531142f3", 0xd7}, {&(0x7f0000000400)="5b30c9c82272a58fbd1ee66a7886fb6204d8ea5e83907abe514500b7716b2bb19b911e220aebc1bc0034c0570dd50ba9445eacd2158c25e799377d7724995009bb246047a0583b1cdfa3fb0b38a7fc91dd986dfa933fe520885f1db8f9748775ba5ab47b0cf217daff27081f064f2e57c6fb12cf52746273c4054844b8ebacfa06a14d678d6d226dbb10e23592c5f76310e940cdf4160f92db11ebbd7b8db0a4e78c00e0ce078f6801b15ef35e3bfe441624b2054bf04ff68e76089c831cbcebe447bb0863d71d890d187da9248dc87fa08ba38ea857055892", 0xd9}, {&(0x7f0000000500)="52c3bf8e5ac736ffe9d52f4a0e46dab4f14d5f67024c247bc0aae756e825a19ebce8251f03ee45c0d399f7dedb3cf7250d0810dc1be4c5e5db8c54f881adc8bcfa7ba35fc973f731b7f2fcf6f7affa0348f82f206c4cb125d12a5c8f20af01776a8912bf88e680a113447a6089e439dc1b7bc6abd2d860e4cfe5190df5f8f700533fdbf26fd9339658f1a96743784b0f583bc31c14365e39d1e2a4517344596342d9a8879bce0a36a73b11501bf00e8774e7b6d981a57054cc500b17dd2e9ce121253d206bb8595b200bd7756a4b7ecc5c17d8c346b686d7275e03cd3b5944e3c6", 0xe1}, {&(0x7f0000000640)="6d426b1a9cc33fb7e9974da35a0d4dd166ae07d4ce459ae806", 0x19}, {&(0x7f0000000680)="fe20f09f654c86174c299ea391e0326d8b4e9337114a2d1f0bf7bde77123190e0be265ef2913943c217006eab5d42b9659f25c050eebbaac040c870ad67f2ed216cf48a1b00a5414b86c86827a0e40ab47a118166ef4ce05557d9c1c87a3", 0x5e}, {&(0x7f0000000700)="4a33e11a505430e26a3c495cb0", 0xd}, {&(0x7f0000000740)="116f3034a97db3647d58e6b39a262d0bc95421db9ba082567475d62cdc636f874ea1dfcb5a38b727d2b0faad4330bc7a84ed5fae32596824929ea585339c66394d83ece548a020c2cc22aa8799673221", 0x50}, {&(0x7f0000000840)="fde1ed11ac086debbad939d5881db61ab8d9b2ec9b062b60d487037740e38d921dfb3193c93e3802f443794b32f44085147f12bd8eff3704bc31dc058e07085472b3159541f0b356f8e94a3124f5840088a5197b2e5cbc79b47c9dadfa3bf37ac4112afc269a5fbe98d016784a09267b14dc", 0x72}, {&(0x7f00000008c0)="70679560be70aeb315dd404cc9f41e842296942354285360de4ee82c5498fd6bbdc5193c3eef936e072f73de", 0x2c}], 0x9) 463.111238ms ago: executing program 5 (id=12138): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) accept(r0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r1, &(0x7f0000000080)=@file={0x1}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/480], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 449.130095ms ago: executing program 2 (id=12139): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000030101040000000000000000020000002400018014000180080001"], 0x38}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b00000008000840000000000500050000000010050004"], 0x5c}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[@ANYRES8=0x0, @ANYRES16=0x0, @ANYBLOB="99f896299049fb5f79b308ccc3e332a55aa05155a50adcbc51a842171fac040eba2086f114a84f8c4d540ee84e750c8533424b5ce70cc0323e8c7a09c3f41de8c31f97dc5eb90b3773", @ANYRES32=r1], 0xfe33) 388.482172ms ago: executing program 1 (id=12140): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000000)={@val={0xa, 0xb}, @void, @eth={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @val={@void, {0x8100, 0x5, 0x1, 0x6}}, {@ipv6={0x86dd, @tcp={0x7, 0x6, '\x00', 0x36, 0x6, 0xff, @private2, @mcast1, {[], {{0x4e1e, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0xd, 0x80, 0x100, 0x0, 0x9, {[@exp_fastopen={0xfe, 0x4}, @sack={0x5, 0x1a, [0x7ff, 0x80, 0x3544, 0x7, 0xfffffff8, 0x4]}]}}, {"c8d3"}}}}}}}}, 0x74) 198.719637ms ago: executing program 5 (id=12141): r0 = socket(0xa, 0x5, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000080)) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000040)={@dev, @loopback, 0x0}, &(0x7f0000000180)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x18, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="850000000c00000072f7100b9b5e58046245d311b6b81589d1a962b9e231abd3544df9deefcf315b90ea07d0a9ed4197a2d1e16179f494ca70f1f26fa9d349fda2412eacb48b4f963393cb2f2a130492ef50bc862e13da3041aa3e02bb5a0f3face935ece6ca0c2558478287657a8529868cf01a6ed159cf403221a5a646aabf67dc0cdbdfa722e6d8909d066b4985ad82ad74257ef4642ff3b64426d1c0ec6825c475514977af531b26e56a"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x10, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000200)={'nr0\x00', 0x400}) 197.903002ms ago: executing program 2 (id=12142): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x20}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000080) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r3 = accept4$x25(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000340)=0x12, 0x800) setsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f0000000440), 0x4) connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e20, 0x80000000, @mcast2, 0x5}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r4) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000240)="a17aad53f37a5c78cb4ac3917ae62211fc0a9660ac7f8c0d537a77be", 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x800, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_MAP={0x24, 0xe, {0x3, 0x480000, 0x1, 0x7fff, 0x0, 0x1}}]}, 0x44}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000080)={0x24, r7, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044840}, 0x48804) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r10, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x800) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r8, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x401, 0x76}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 0s ago: executing program 4 (id=12143): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x3}, 0x28) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x840000000002, 0x3, 0x100) r2 = socket(0x2, 0x80805, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000002c0)={r4, 0xffff}, &(0x7f0000000300)=0x8) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0xffad) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000000), 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x1c1341, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB="030000000000000017000000020000000500000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\t2\x00'/28]) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$alg(0x26, 0x5, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000040000703fcffffff00000100037c000004"], 0x18}, 0x1, 0x0, 0x0, 0x4008011}, 0xc000) ioctl$TUNSETNOCSUM(r5, 0x400454c8, 0x1) r11 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x42, 0x4, 0x320, 0xffffffff, 0x0, 0x1c0, 0xa8, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x3}, {0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@uncond, 0x287, 0xb8, 0x118, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00', 0x3}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x3, 0x2, 0x0, 0x4], 0x1, 0x3}, {0x0, [0x6, 0x5, 0x6, 0x0, 0x5, 0x4], 0x1, 0x2}}}}, {{@ip={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x35}, 0x0, 0xffffff00, 'ip6gre0\x00', 'veth1_to_team\x00', {}, {0xff}, 0x11, 0x0, 0x1}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0x80, 0x480, 0x0, 0x1}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x380) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3e8, 0xffffffff, 0xf0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3d, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x9, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0xf}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x2, {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) bind$alg(r9, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(twofish-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000200)="2c3c5a2a33c1ff64022462bfd46095097ab1a3b6bc436ab123f0f048c388e0cb", 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {0x0, 0x9}, {0x0, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x20, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x0, 0x0, 0x1}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x3}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x7f}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) kernel console output (not intermixed with test programs): ed [ 1370.320387][T15759] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10709'. [ 1370.392507][ T187] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1370.495720][ T7342] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1370.650123][T15772] netlink: 'syz.0.10712': attribute type 19 has an invalid length. [ 1370.669971][T15772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10712'. [ 1370.715125][T15772] netlink: 'syz.0.10712': attribute type 19 has an invalid length. [ 1370.739961][T27496] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1370.755774][T15772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10712'. [ 1370.777145][T27496] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1370.797377][T27496] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1370.819198][T27496] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1371.042490][T15781] bond8 (unregistering): Released all slaves [ 1371.293051][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1371.528676][T15809] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10720'. [ 1371.620507][T15808] bond8: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 1371.678533][T15808] bond8: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 1371.743229][T15808] bond8: entered allmulticast mode [ 1371.779126][T15808] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1371.905313][T15836] netlink: 'syz.5.10726': attribute type 1 has an invalid length. [ 1371.921038][T15838] netlink: 'syz.4.10728': attribute type 1 has an invalid length. [ 1371.985844][T15838] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1372.071084][T15849] netlink: 'syz.5.10731': attribute type 1 has an invalid length. [ 1372.201417][T15838] bond9: (slave geneve2): making interface the new active one [ 1372.224989][T15838] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 1372.237431][T15856] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1372.332636][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1372.552062][T15873] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10738'. [ 1372.589184][T15873] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10738'. [ 1372.961763][T15895] ip6gre2: entered promiscuous mode [ 1372.985515][T15895] ip6gre2: entered allmulticast mode [ 1373.358606][T15917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10745'. [ 1373.372468][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1373.409765][T15910] netlink: 1012 bytes leftover after parsing attributes in process `syz.1.10745'. [ 1373.536579][T15922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10749'. [ 1373.552452][T15922] openvswitch: netlink: Flow key attribute not present in set flow. [ 1373.642366][T15926] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1373.737473][T15934] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10752'. [ 1373.881929][T15934] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1374.045812][T15943] vlan2: entered allmulticast mode [ 1374.051099][T15943] bridge3: entered allmulticast mode [ 1374.092439][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1374.228240][T15954] netlink: zone id is out of range [ 1374.412474][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1374.553019][T15971] netlink: 'syz.0.10760': attribute type 1 has an invalid length. [ 1374.678207][T15971] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1374.845096][T15991] netlink: 'syz.4.10766': attribute type 4 has an invalid length. [ 1374.895560][T15959] bond9 (unregistering): Released all slaves [ 1375.242001][T16007] sctp: [Deprecated]: syz.2.10772 (pid 16007) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1375.242001][T16007] Use struct sctp_sack_info instead [ 1375.452460][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1375.528390][T16022] sctp: [Deprecated]: syz.0.10777 (pid 16022) Use of int in maxseg socket option. [ 1375.528390][T16022] Use struct sctp_assoc_value instead [ 1375.781846][T16032] syzkaller1: entered allmulticast mode [ 1375.857959][T16037] __nla_validate_parse: 5 callbacks suppressed [ 1375.857980][T16037] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10782'. [ 1375.902031][T16030] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.10780'. [ 1375.917510][T16042] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10782'. [ 1376.091730][T16049] C: renamed from veth1_to_team (while UP) [ 1376.115434][T16049] netlink: 164 bytes leftover after parsing attributes in process `syz.0.10785'. [ 1376.201588][T16057] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 1376.322853][T16066] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10791'. [ 1376.345765][T16064] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10791'. [ 1376.398455][T16070] netlink: 'syz.1.10792': attribute type 22 has an invalid length. [ 1376.442093][T16070] netlink: 'syz.1.10792': attribute type 361 has an invalid length. [ 1376.492608][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1376.550031][T16076] x_tables: duplicate underflow at hook 1 [ 1376.759292][T16088] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10797'. [ 1376.879895][T16099] netlink: 'syz.4.10802': attribute type 1 has an invalid length. [ 1377.532613][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1377.804141][T16116] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10805'. [ 1378.251065][T16138] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10813'. [ 1378.285820][T16138] netlink: 'syz.0.10813': attribute type 1 has an invalid length. [ 1378.324248][T16138] bond9: entered promiscuous mode [ 1378.330144][T16138] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1378.342485][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1378.354181][T16140] netlink: 'syz.2.10814': attribute type 4 has an invalid length. [ 1378.365803][T16140] netlink: 17 bytes leftover after parsing attributes in process `syz.2.10814'. [ 1378.404771][T16138] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1378.425668][T16138] bond9: (slave xfrm1): The slave device specified does not support setting the MAC address [ 1378.459331][T16138] bond9: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 1378.534176][T16138] bond9: (slave xfrm1): making interface the new active one [ 1378.556056][T16138] xfrm1: entered promiscuous mode [ 1378.572470][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1378.580107][T16138] xfrm1: left promiscuous mode [ 1378.651003][T16149] tipc: Enabling of bearer rejected, already enabled [ 1378.887527][T16165] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1379.566002][T16191] netlink: zone id is out of range [ 1379.599658][T16191] netlink: zone id is out of range [ 1379.611445][T16191] netlink: zone id is out of range [ 1379.622608][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1379.634744][T16191] netlink: zone id is out of range [ 1379.647869][T16191] netlink: zone id is out of range [ 1379.661007][T16191] netlink: set zone limit has 8 unknown bytes [ 1379.802173][T16200] netlink: 'syz.5.10828': attribute type 1 has an invalid length. [ 1379.879874][T16204] netlink: 'syz.1.10831': attribute type 1 has an invalid length. [ 1379.917272][T16204] bond4: entered promiscuous mode [ 1379.923243][T16204] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1380.050648][T16204] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1380.065960][T16204] bond4: (slave xfrm1): The slave device specified does not support setting the MAC address [ 1380.091077][T16204] bond4: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 1380.118990][T16217] netlink: 'syz.0.10834': attribute type 2 has an invalid length. [ 1380.130859][T16204] bond4: (slave xfrm1): making interface the new active one [ 1380.154357][T16204] xfrm1: entered promiscuous mode [ 1380.161693][T16204] bond4: (slave xfrm1): Enslaving as an active interface with an up link [ 1380.243631][T16225] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1380.279833][T16225] bond1: left promiscuous mode [ 1380.368961][T16218] team0: Port device team_slave_0 removed [ 1380.873538][T16256] block nbd40: server does not support multiple connections per device. [ 1380.897467][T16264] __nla_validate_parse: 3 callbacks suppressed [ 1380.897488][T16264] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10843'. [ 1380.909722][T16256] block nbd40: shutting down sockets [ 1380.984789][T16262] No such timeout policy "syz0" [ 1381.101358][T16274] tipc: Enabling of bearer rejected, failed to enable media [ 1381.179069][T16279] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 1381.194185][T16279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10852'. [ 1381.223978][T16281] syzkaller0: entered promiscuous mode [ 1381.231117][T16281] syzkaller0: entered allmulticast mode [ 1381.258374][T16281] tipc: Enabled bearer , priority 0 [ 1381.298747][T16281] tipc: Resetting bearer [ 1381.324788][T16280] tipc: Resetting bearer [ 1381.337396][T16284] netlink: 232 bytes leftover after parsing attributes in process `syz.4.10854'. [ 1381.370351][T16286] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10853'. [ 1381.385996][T16280] tipc: Disabling bearer [ 1381.426404][T16286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1381.500390][T16288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1381.531653][T16286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1381.685300][T16297] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10858'. [ 1381.702440][ C1] net_ratelimit: 1 callbacks suppressed [ 1381.702463][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1381.771615][T16306] netlink: 17 bytes leftover after parsing attributes in process `syz.4.10860'. [ 1381.873496][T16309] netlink: NAT attribute has 5 unknown bytes [ 1381.879782][T16309] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1382.537249][T16332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10871'. [ 1382.549313][T16329] x_tables: duplicate underflow at hook 1 [ 1382.721678][T16343] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10876'. [ 1382.732479][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1382.751427][T16343] xt_TCPMSS: Only works on TCP SYN packets [ 1382.812576][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1382.896862][T16343] team0: left allmulticast mode [ 1382.912437][T16343] team_slave_0: left allmulticast mode [ 1382.923412][T16343] team_slave_1: left allmulticast mode [ 1382.952146][T16343] bridge1: left allmulticast mode [ 1382.985414][T16343] team0: left promiscuous mode [ 1383.003328][T16343] team_slave_0: left promiscuous mode [ 1383.014245][T16343] team_slave_1: left promiscuous mode [ 1383.028305][T16343] bridge1: left promiscuous mode [ 1383.038845][T16343] bridge0: port 4(team0) entered disabled state [ 1383.077758][T16343] batadv1: left allmulticast mode [ 1383.094653][T16343] batadv1: left promiscuous mode [ 1383.104613][T16343] bridge0: port 3(batadv1) entered disabled state [ 1383.132042][T16343] bridge_slave_1: left allmulticast mode [ 1383.148273][T16343] bridge_slave_1: left promiscuous mode [ 1383.163249][T16343] bridge0: port 2(bridge_slave_1) entered disabled state [ 1383.195256][T16343] bridge_slave_0: left allmulticast mode [ 1383.213186][T16343] bridge_slave_0: left promiscuous mode [ 1383.219885][T16360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10881'. [ 1383.231758][T16343] bridge0: port 1(bridge_slave_0) entered disabled state [ 1383.303823][T16361] netlink: 830 bytes leftover after parsing attributes in process `syz.2.10882'. [ 1383.330869][T16361] bond_slave_0: entered promiscuous mode [ 1383.440800][T16369] ip6tnl5: entered allmulticast mode [ 1383.678751][T16381] ±ÿ†Ý'É|d<: renamed from lo (while UP) [ 1383.772498][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1384.099958][T16394] xt_CT: No such helper "netbios-ns" [ 1384.230621][T16403] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1384.416513][T16409] netlink: 'syz.0.10895': attribute type 210 has an invalid length. [ 1384.568942][T16409] xt_CT: No such helper "syz0" [ 1384.598132][T16412] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1384.662109][T16417] bond3: (slave bridge0): Enslaving as an active interface with an up link [ 1384.822553][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1385.126191][T16433] netlink: 'syz.0.10901': attribute type 1 has an invalid length. [ 1385.178882][T16433] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1385.191159][T16436] netlink: 'syz.5.10902': attribute type 1 has an invalid length. [ 1385.349479][T16436] bond5: entered promiscuous mode [ 1385.374477][T16436] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1385.454685][T16444] bond5: (slave veth7): making interface the new active one [ 1385.483262][T16444] veth7: entered promiscuous mode [ 1385.495448][T16444] bond5: (slave veth7): Enslaving as an active interface with an up link [ 1385.649609][T16446] wg2 speed is unknown, defaulting to 1000 [ 1385.705366][T16461] xt_connbytes: Forcing CT accounting to be enabled [ 1385.726821][T16461] netlink: 'syz.1.10908': attribute type 4 has an invalid length. [ 1385.742868][T16461] netlink: 'syz.1.10908': attribute type 1 has an invalid length. [ 1385.759728][T16461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1385.790795][T16464] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1385.852583][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1386.012758][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1386.696627][T16501] __nla_validate_parse: 8 callbacks suppressed [ 1386.696647][T16501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10917'. [ 1386.728290][T16505] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10918'. [ 1386.756857][T16508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10917'. [ 1386.757684][T16501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10917'. [ 1386.768034][T16508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10917'. [ 1386.785856][T16508] netlink: 'syz.4.10917': attribute type 19 has an invalid length. [ 1386.795031][T16508] netlink: 'syz.4.10917': attribute type 20 has an invalid length. [ 1386.819815][T16501] netlink: 'syz.4.10917': attribute type 19 has an invalid length. [ 1386.828558][T16501] netlink: 'syz.4.10917': attribute type 20 has an invalid length. [ 1386.892494][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1386.941950][T16515] netlink: 108 bytes leftover after parsing attributes in process `syz.5.10920'. [ 1387.932920][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1388.260834][T16549] netlink: 1347 bytes leftover after parsing attributes in process `syz.1.10931'. [ 1388.335678][T16555] syzkaller0: entered promiscuous mode [ 1388.349904][T16555] syzkaller0: entered allmulticast mode [ 1388.361650][T16560] netlink: 'syz.1.10931': attribute type 11 has an invalid length. [ 1388.391139][T16560] netlink: 140 bytes leftover after parsing attributes in process `syz.1.10931'. [ 1388.776035][T16572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10936'. [ 1388.982495][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1389.164404][T16589] syzkaller1: entered promiscuous mode [ 1389.208799][T16589] syzkaller1: entered allmulticast mode [ 1389.260085][T16592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10941'. [ 1389.291495][T16595] batman_adv: batadv0: Adding interface: vlan0 [ 1389.313962][T16595] batman_adv: batadv0: The MTU of interface vlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1389.385041][T16595] batman_adv: batadv0: Not using interface vlan0 (retrying later): interface not active [ 1389.944470][T16625] vlan1: entered promiscuous mode [ 1389.960555][T16625] hsr0: entered promiscuous mode [ 1389.972067][T16625] vlan1: entered allmulticast mode [ 1389.985676][T16625] hsr0: entered allmulticast mode [ 1390.004798][T16625] hsr_slave_0: entered allmulticast mode [ 1390.012425][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1390.026619][T16625] hsr_slave_1: entered allmulticast mode [ 1390.400426][ T5269] veth0_vlan: left promiscuous mode [ 1390.460042][ T7342] veth0_vlan: entered promiscuous mode [ 1390.493276][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1391.052496][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1391.132613][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1391.238380][T16677] syz_tun: entered promiscuous mode [ 1391.263035][T16677] netlink: 'syz.1.10964': attribute type 5 has an invalid length. [ 1391.432837][T16676] syz_tun: left promiscuous mode [ 1391.681319][T16695] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1391.709908][T16695] bridge0: port 1(veth1_to_bridge) entered blocking state [ 1391.752873][T16695] bridge0: port 1(veth1_to_bridge) entered disabled state [ 1391.792597][T16695] veth1_to_bridge: entered allmulticast mode [ 1391.823895][T16695] veth1_to_bridge: entered promiscuous mode [ 1391.830979][T16695] bridge0: port 1(veth1_to_bridge) entered blocking state [ 1391.838310][T16695] bridge0: port 1(veth1_to_bridge) entered forwarding state [ 1392.092581][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1392.178049][T16722] xt_TCPMSS: Only works on TCP SYN packets [ 1392.208845][T16724] sctp: [Deprecated]: syz.4.10975 (pid 16724) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1392.208845][T16724] Use struct sctp_sack_info instead [ 1392.422043][T16735] __nla_validate_parse: 3 callbacks suppressed [ 1392.422066][T16735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10979'. [ 1392.498743][T16738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10980'. [ 1393.126545][T16773] wg2 speed is unknown, defaulting to 1000 [ 1393.132862][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1393.630008][T16790] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 1394.182559][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1395.212562][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1395.673042][T16751] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1396.063976][T16817] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10998'. [ 1396.108160][T16817] bond0: entered promiscuous mode [ 1396.136833][T16817] bond0: left promiscuous mode [ 1396.191147][T16819] bond10 (unregistering): Released all slaves [ 1396.246613][T16830] ªªªªªª: renamed from vlan0 [ 1396.252564][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1396.379563][T16834] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11002'. [ 1396.408956][T16838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11003'. [ 1396.457095][ T30] audit: type=1800 audit(1786371336.226:44): pid=16845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.11004" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2157 res=0 errno=0 [ 1396.513294][ T7344] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1396.534802][ T7344] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1396.772885][ T7344] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1396.773455][T16857] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11006'. [ 1396.944752][T16864] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11006'. [ 1396.955198][ T7344] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1397.009249][T16879] netlink: 'syz.0.11011': attribute type 21 has an invalid length. [ 1397.047410][T16879] IPv6: NLM_F_CREATE should be specified when creating new route [ 1397.072329][T16879] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1397.079646][T16879] IPv6: NLM_F_CREATE should be set when creating new route [ 1397.086998][T16879] IPv6: NLM_F_CREATE should be set when creating new route [ 1397.094299][T16879] IPv6: NLM_F_CREATE should be set when creating new route [ 1397.292713][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1398.332552][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1398.812470][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1399.372571][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1399.452956][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1400.412919][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1400.436409][T16902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11016'. [ 1400.641409][T16902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11016'. [ 1400.672773][T16902] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11016'. [ 1400.715942][T16902] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11016'. [ 1400.779512][T16913] netlink: 'syz.1.11020': attribute type 1 has an invalid length. [ 1400.892997][T16916] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11020'. [ 1400.898254][T16913] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1401.247577][T16927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11025'. [ 1401.333470][T16933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1401.452555][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1401.659550][T16949] geneve3: entered promiscuous mode [ 1401.683560][T16951] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11032'. [ 1401.874362][T16966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11034'. [ 1401.921308][T16964] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11035'. [ 1401.962836][T16966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11034'. [ 1402.163886][T16978] netlink: 'syz.2.11037': attribute type 1 has an invalid length. [ 1402.208230][T16978] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1402.363095][T16978] netlink: 'syz.2.11037': attribute type 10 has an invalid length. [ 1402.452131][T16990] bond4: (slave veth3): Enslaving as a backup interface with a down link [ 1402.490351][T16978] dummy0: entered promiscuous mode [ 1402.502548][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1403.224736][T17037] netlink: Invalid conntrack timeout [ 1403.238448][T17037] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1403.386510][T17037] bond10 (unregistering): Released all slaves [ 1403.532706][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1404.155703][T17077] block nbd40: shutting down sockets [ 1404.374412][T17087] syzkaller0: entered promiscuous mode [ 1404.392887][T17087] syzkaller0: entered allmulticast mode [ 1404.437941][T17095] netlink: 'syz.0.11062': attribute type 4 has an invalid length. [ 1404.455220][T17087] netlink: 'syz.4.11059': attribute type 11 has an invalid length. [ 1404.483438][T17087] netlink: 'syz.4.11059': attribute type 13 has an invalid length. [ 1404.572814][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1404.686704][T17112] netlink: 'syz.0.11067': attribute type 1 has an invalid length. [ 1404.884384][T17120] netlink: 'syz.2.11070': attribute type 2 has an invalid length. [ 1404.987901][T17122] tipc: Enabled bearer , priority 10 [ 1405.225762][T17144] erspan0: entered promiscuous mode [ 1405.612464][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1406.262114][T17195] __nla_validate_parse: 12 callbacks suppressed [ 1406.262136][T17195] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11091'. [ 1406.457798][T17198] syzkaller0: entered promiscuous mode [ 1406.467946][T17198] syzkaller0: entered allmulticast mode [ 1406.486965][T17209] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11095'. [ 1406.652518][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1407.680514][T17234] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1407.702453][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1407.962650][T17243] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1408.740131][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1409.782485][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1410.699409][T17226] netlink: 320 bytes leftover after parsing attributes in process `syz.5.11101'. [ 1410.709316][T17226] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11101'. [ 1410.719199][T17226] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11101'. [ 1410.728913][T17226] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11101'. [ 1410.751114][T17227] bond0: (slave bond_slave_0): Releasing backup interface [ 1410.765754][T17227] bond0: (slave bond_slave_1): Releasing backup interface [ 1410.784090][T17227] team0: Port device team_slave_0 removed [ 1410.796084][T17227] team0: Port device team_slave_1 removed [ 1410.806601][T17227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1410.814054][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1410.826165][T17227] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1410.845311][T17228] team0: Device xfrm0 is of different type [ 1411.764882][T17294] x_tables: duplicate underflow at hook 2 [ 1411.852511][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1411.990819][T17298] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11119'. [ 1412.011982][T17298] netlink: 43 bytes leftover after parsing attributes in process `syz.1.11119'. [ 1412.041936][T17298] netlink: 43 bytes leftover after parsing attributes in process `syz.1.11119'. [ 1412.046555][T17304] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11119'. [ 1412.157529][T17306] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1412.210913][T17311] syzkaller0: entered promiscuous mode [ 1412.260737][T17311] syzkaller0: entered allmulticast mode [ 1412.286371][T17306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11122'. [ 1412.296916][T17306] openvswitch: netlink: Flow actions attr not present in new flow. [ 1412.740184][T17337] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11131'. [ 1412.864192][T17341] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11131'. [ 1412.892967][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1413.290147][T17357] syz_tun: entered allmulticast mode [ 1413.451655][T17356] syz_tun: left allmulticast mode [ 1413.799475][T17370] netlink: 'syz.2.11139': attribute type 1 has an invalid length. [ 1413.889669][T17384] netlink: 'syz.2.11139': attribute type 11 has an invalid length. [ 1413.933089][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1413.990875][T17370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11139'. [ 1414.027204][T17370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11139'. [ 1414.079646][T17384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11139'. [ 1414.187276][T17413] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 1414.577842][T17444] ip_tables: iptables: counters copy to user failed while replacing table [ 1414.599609][T17445] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1414.621441][T17445] netlink: zone id is out of range [ 1414.640297][T17445] netlink: zone id is out of range [ 1414.650362][T17445] netlink: zone id is out of range [ 1414.663749][T17445] netlink: zone id is out of range [ 1414.678337][T17445] netlink: zone id is out of range [ 1414.695383][T17445] netlink: zone id is out of range [ 1414.709069][T17436] netlink: 'syz.5.11151': attribute type 4 has an invalid length. [ 1414.718881][T17445] netlink: zone id is out of range [ 1414.728081][T17436] netlink: 'syz.5.11151': attribute type 4 has an invalid length. [ 1414.812447][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1415.654306][T17481] team0: Device ipvlan2 failed to register rx_handler [ 1416.251728][T17504] syzkaller0: entered promiscuous mode [ 1416.277892][T17504] syzkaller0: entered allmulticast mode [ 1416.434877][T17501] ovs-system: entered promiscuous mode [ 1416.797929][T17524] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 1416.914474][T17531] syzkaller0: entered promiscuous mode [ 1416.953200][T17531] syzkaller0: entered allmulticast mode [ 1417.160346][T17540] __nla_validate_parse: 5 callbacks suppressed [ 1417.160366][T17540] netlink: 124 bytes leftover after parsing attributes in process `syz.2.11176'. [ 1417.190831][T17540] netlink: 124 bytes leftover after parsing attributes in process `syz.2.11176'. [ 1417.408153][T17553] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11177'. [ 1417.452752][T17553] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11177'. [ 1418.092503][ C1] net_ratelimit: 22 callbacks suppressed [ 1418.092524][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1418.190309][T17586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11185'. [ 1418.265935][T17590] netlink: 'syz.2.11186': attribute type 8 has an invalid length. [ 1418.488813][T17598] netlink: 116 bytes leftover after parsing attributes in process `syz.5.11187'. [ 1418.774423][T17607] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1418.943917][T17614] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11192'. [ 1419.133242][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1419.804797][T17645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11198'. [ 1420.172491][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1420.288299][T17669] netlink: 'syz.1.11203': attribute type 21 has an invalid length. [ 1420.336065][T17669] netlink: 'syz.1.11203': attribute type 22 has an invalid length. [ 1420.359607][T17669] netlink: 'syz.1.11203': attribute type 23 has an invalid length. [ 1420.396388][T17669] netlink: 'syz.1.11203': attribute type 25 has an invalid length. [ 1420.433168][T17669] netlink: 'syz.1.11203': attribute type 26 has an invalid length. [ 1420.468638][T17669] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11203'. [ 1421.212490][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1421.240188][T17703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11212'. [ 1421.937992][T17740] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1422.200483][T17745] syzkaller1: entered promiscuous mode [ 1422.212587][T17745] syzkaller1: entered allmulticast mode [ 1422.252483][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1422.616984][T17769] __nla_validate_parse: 5 callbacks suppressed [ 1422.617005][T17769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11229'. [ 1422.621921][T17768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11229'. [ 1422.662506][T17769] netlink: 'syz.4.11229': attribute type 9 has an invalid length. [ 1422.675890][T17768] netlink: 'syz.4.11229': attribute type 9 has an invalid length. [ 1422.910069][T17788] block nbd1: NBD_DISCONNECT [ 1422.927243][T17788] block nbd1: Send disconnect failed -32 [ 1422.948635][T17788] block nbd1: shutting down sockets [ 1423.021369][T17787] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 1423.292421][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1424.333170][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1424.740934][T17863] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11250'. [ 1424.787193][T17863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11250'. [ 1424.857382][T17873] netlink: 300 bytes leftover after parsing attributes in process `syz.2.11253'. [ 1424.918212][T17873] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11253'. [ 1424.924165][T17871] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1424.963326][T17873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1424.999762][T17873] netlink: 176 bytes leftover after parsing attributes in process `syz.2.11253'. [ 1425.057743][T17873] netlink: 'syz.2.11253': attribute type 15 has an invalid length. [ 1425.079512][T17873] netlink: 346 bytes leftover after parsing attributes in process `syz.2.11253'. [ 1425.138628][T17881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11254'. [ 1425.182879][T17881] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11254'. [ 1425.218901][T17883] geneve3: entered promiscuous mode [ 1425.373353][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1425.604538][T17893] batman_adv: batadv0: Removing interface: vlan0 [ 1426.412431][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1426.633331][T10622] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1426.657682][T10622] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1426.729467][T17929] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1426.770193][T17929] netlink: 'syz.4.11267': attribute type 3 has an invalid length. [ 1426.790706][T17929] netlink: 'syz.4.11267': attribute type 16 has an invalid length. [ 1426.925464][T17941] veth1_to_bridge: left allmulticast mode [ 1426.931472][T17941] veth1_to_bridge: left promiscuous mode [ 1426.938214][T17941] bridge0: port 1(veth1_to_bridge) entered disabled state [ 1427.063602][ T7360] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1427.084251][ T7360] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1427.315583][ T187] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1427.452502][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1427.617431][ T187] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1428.057125][T17974] syzkaller0: entered promiscuous mode [ 1428.085884][T17974] syzkaller0: entered allmulticast mode [ 1428.208808][T17985] __nla_validate_parse: 8 callbacks suppressed [ 1428.208827][T17985] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11281'. [ 1428.310755][ T673] block nbd1: Receive control failed (result -32) [ 1428.492441][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1428.518695][T17996] xt_hashlimit: size too large, truncated to 1048576 [ 1428.611911][T18006] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11286'. [ 1428.645035][T18006] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11286'. [ 1429.183964][T18021] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11291'. [ 1429.341938][T18028] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11291'. [ 1429.417106][T18030] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11294'. [ 1429.497712][T18034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11295'. [ 1429.507863][T18034] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11295'. [ 1429.519053][T18034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11295'. [ 1429.532394][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1429.540254][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1429.659257][T18037] syzkaller1: entered promiscuous mode [ 1429.672936][T18037] syzkaller1: entered allmulticast mode [ 1429.867570][T18051] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 1429.884717][T18053] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 1430.084200][T18059] openvswitch: netlink: IP tunnel attribute has 5377 unknown bytes. [ 1430.283110][T18069] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11305'. [ 1430.400058][T18069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1430.504893][T18084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1430.560190][T18069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1430.572450][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1431.612411][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1431.767582][T18131] veth2: entered promiscuous mode [ 1432.103024][T18149] x_tables: duplicate underflow at hook 2 [ 1432.236254][T18155] vlan8: entered promiscuous mode [ 1432.652435][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1433.625042][T18199] __nla_validate_parse: 5 callbacks suppressed [ 1433.625072][T18199] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11344'. [ 1433.648411][T18202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11343'. [ 1433.692501][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1433.840211][T18206] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11346'. [ 1434.434396][T18233] netlink: 452 bytes leftover after parsing attributes in process `syz.5.11353'. [ 1434.532011][T18240] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11355'. [ 1434.732416][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1434.826385][T18252] bridge0: entered promiscuous mode [ 1434.845811][T18252] bridge0: entered allmulticast mode [ 1434.869579][T18255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11361'. [ 1435.198115][T18278] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11366'. [ 1435.219401][T18276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11363'. [ 1435.234360][T18282] netlink: 56 bytes leftover after parsing attributes in process `syz.4.11365'. [ 1435.254959][T18283] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11366'. [ 1435.442763][T18276] tipc: Enabled bearer , priority 0 [ 1435.596274][T18276] syzkaller0: entered promiscuous mode [ 1435.603873][T18293] xt_bpf: check failed: parse error [ 1435.610982][T18276] syzkaller0: entered allmulticast mode [ 1435.628306][T18276] tipc: Resetting bearer [ 1435.725412][T18266] tipc: Resetting bearer [ 1435.772490][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1435.815193][T18306] netlink: 'syz.0.11372': attribute type 3 has an invalid length. [ 1436.822060][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1437.862436][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1438.901281][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1439.276612][T18266] tipc: Disabling bearer [ 1439.322949][T18314] netpci0: tun_chr_ioctl cmd 1074025678 [ 1439.334527][T18314] netpci0: group set to 0 [ 1439.396301][T18319] __nla_validate_parse: 3 callbacks suppressed [ 1439.396335][T18319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11375'. [ 1439.501752][T18326] netlink: 'syz.5.11376': attribute type 8 has an invalid length. [ 1439.533313][T17408] vlan3: left allmulticast mode [ 1439.543445][T17408] geneve0: left allmulticast mode [ 1439.562078][T17408] vlan3: left promiscuous mode [ 1439.575977][T17408] geneve0: left promiscuous mode [ 1439.583923][T17408] bridge0: port 1(vlan3) entered disabled state [ 1439.606396][T17408] pim6reg99999999: left allmulticast mode [ 1439.612713][T17408] pimreg: left allmulticast mode [ 1439.816251][T18343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11375'. [ 1439.837552][T18343] netlink: 'syz.4.11375': attribute type 1 has an invalid length. [ 1439.932430][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1440.230368][T17408] team0: Port device bridge3 removed [ 1440.244142][T17408] bond1 (unregistering): (slave bridge4): Releasing backup interface [ 1440.335470][T17408] bond6 (unregistering): (slave bridge12): Releasing backup interface [ 1440.343801][T17408] bridge12 (unregistering): left promiscuous mode [ 1440.359717][T17408] bond0 (unregistering): Released all slaves [ 1440.399601][T17408] bond1 (unregistering): Released all slaves [ 1440.435466][T17408] bond2 (unregistering): Released all slaves [ 1440.456654][T17408] bond3 (unregistering): Released all slaves [ 1440.481943][T17408] bond4 (unregistering): Released all slaves [ 1440.514035][T17408] bond5 (unregistering): Released all slaves [ 1440.541724][T17408] bond6 (unregistering): Released all slaves [ 1440.565897][T17408] bond7 (unregistering): Released all slaves [ 1440.688849][T18334] erspan1: entered allmulticast mode [ 1440.972472][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1441.067965][T17408] tipc: Left network mode [ 1441.155884][T18357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11380'. [ 1441.533239][T18387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11385'. [ 1441.652454][T18387] macsec1: entered promiscuous mode [ 1441.667149][T18387] batadv0: entered promiscuous mode [ 1441.674058][T18387] macsec1: entered allmulticast mode [ 1441.689400][T18387] batadv0: entered allmulticast mode [ 1441.724749][T18387] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1441.735467][T18387] batadv0: left allmulticast mode [ 1441.763194][T18387] batadv0: left promiscuous mode [ 1442.004987][T18409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1442.015226][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1442.637668][T18425] erspan0: left promiscuous mode [ 1442.684801][T18425] bridge0: port 2(bridge_slave_1) entered disabled state [ 1442.692717][T18425] bridge0: port 1(bridge_slave_0) entered disabled state [ 1442.880849][T18425] veth1_to_hsr: left promiscuous mode [ 1442.906610][T18442] netlink: 'syz.2.11399': attribute type 3 has an invalid length. [ 1442.924614][T18442] netlink: 'syz.2.11399': attribute type 3 has an invalid length. [ 1442.958929][T18442] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11399'. [ 1443.025157][T18445] netlink: 'syz.5.11398': attribute type 2 has an invalid length. [ 1443.033878][T18445] netlink: 1 bytes leftover after parsing attributes in process `syz.5.11398'. [ 1443.043461][T18445] netlink: 'syz.5.11398': attribute type 2 has an invalid length. [ 1443.052437][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1443.062935][T18445] netlink: 1 bytes leftover after parsing attributes in process `syz.5.11398'. [ 1443.167528][T18425] ip6gre1: left promiscuous mode [ 1443.183204][T18425] ip6gre1: left allmulticast mode [ 1443.191568][T18425] hsr1: left promiscuous mode [ 1443.214431][T18425] bond2: left promiscuous mode [ 1443.219279][T18425] bond2: left allmulticast mode [ 1443.240588][T18425] ip6gre2: left promiscuous mode [ 1443.259213][T18425] ip6gre2: left allmulticast mode [ 1443.296014][T18425] bond4: left promiscuous mode [ 1443.300953][T18425] xfrm1: left promiscuous mode [ 1443.326881][T18425] geneve3: left promiscuous mode [ 1443.343787][T17409] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1443.393489][T17409] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1443.513120][T17409] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1443.551948][T17409] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1443.601796][T17409] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1443.655598][T17409] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1443.710812][T17409] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1443.753337][T17409] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1444.092467][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1444.226915][T17408] hsr_slave_0: left promiscuous mode [ 1444.234668][T18480] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11406'. [ 1444.259962][T17408] hsr_slave_1: left promiscuous mode [ 1444.264152][T18485] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 1444.454519][T18497] netlink: 96 bytes leftover after parsing attributes in process `syz.5.11409'. [ 1444.455126][T18498] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11406'. [ 1444.516599][T18499] netlink: 48 bytes leftover after parsing attributes in process `syz.5.11409'. [ 1445.132507][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1445.180312][T27507] smbdirect: ib_dev[syz2] removed [ 1445.345485][T18497] vlan0: entered allmulticast mode [ 1445.350715][T18497] ip6gretap0: entered allmulticast mode [ 1445.396216][T18501] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1445.709791][T18528] netlink: 'syz.4.11413': attribute type 10 has an invalid length. [ 1445.867768][T18535] pim6reg1: entered promiscuous mode [ 1445.884572][T17408] IPVS: stop unused estimator thread 0... [ 1445.897415][T18535] pim6reg1: entered allmulticast mode [ 1446.172719][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1446.514403][T18541] netlink: 'syz.0.11418': attribute type 10 has an invalid length. [ 1447.120857][T18566] netlink: 'syz.2.11423': attribute type 12 has an invalid length. [ 1447.154015][T18570] netlink: 'syz.5.11425': attribute type 1 has an invalid length. [ 1447.213634][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1447.377022][T18575] bond7: (slave veth9): Enslaving as an active interface with a down link [ 1447.465239][T18578] bond7: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1447.928810][T18596] netlink: 632 bytes leftover after parsing attributes in process `syz.0.11431'. [ 1448.222768][T18604] FAULT_INJECTION: forcing a failure. [ 1448.222768][T18604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1448.240262][T18604] CPU: 1 UID: 0 PID: 18604 Comm: syz.5.11432 Not tainted syzkaller #0 PREEMPT(full) [ 1448.240290][T18604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1448.240303][T18604] Call Trace: [ 1448.240311][T18604] [ 1448.240320][T18604] dump_stack_lvl+0xe8/0x150 [ 1448.240358][T18604] should_fail_ex+0x40c/0x560 [ 1448.240394][T18604] _copy_to_user+0x31/0xb0 [ 1448.240423][T18604] bpf_test_finish+0x1cf/0x690 [ 1448.240537][T18604] ? __pfx____migrate_enable+0x10/0x10 [ 1448.240566][T18604] ? __pfx_bpf_test_finish+0x10/0x10 [ 1448.240591][T18604] ? preempt_schedule_common+0x82/0xd0 [ 1448.240621][T18604] ? preempt_schedule_thunk+0x16/0x40 [ 1448.240643][T18604] ? bpf_test_timer_leave+0x20b/0x290 [ 1448.240672][T18604] bpf_prog_test_run_flow_dissector+0x478/0x610 [ 1448.240709][T18604] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 1448.240736][T18604] ? __fget_files+0x2a/0x420 [ 1448.240772][T18604] ? __fget_files+0x2a/0x420 [ 1448.240805][T18604] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 1448.240834][T18604] bpf_prog_test_run+0x2c5/0x340 [ 1448.240869][T18604] __sys_bpf+0xa22/0xd90 [ 1448.240904][T18604] ? __pfx___sys_bpf+0x10/0x10 [ 1448.240941][T18604] ? __fget_files+0x2a/0x420 [ 1448.240987][T18604] ? ksys_write+0x242/0x270 [ 1448.241021][T18604] ? __pfx_ksys_write+0x10/0x10 [ 1448.241062][T18604] __x64_sys_bpf+0xba/0xd0 [ 1448.241086][T18604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1448.241111][T18604] do_syscall_64+0x174/0x580 [ 1448.241141][T18604] ? trace_irq_disable+0x3b/0x140 [ 1448.241167][T18604] ? clear_bhb_loop+0x70/0xc0 [ 1448.241194][T18604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1448.241215][T18604] RIP: 0033:0x7f8b7e59e0d9 [ 1448.241236][T18604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1448.241254][T18604] RSP: 002b:00007f8b7f388028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1448.241278][T18604] RAX: ffffffffffffffda RBX: 00007f8b7e825fa0 RCX: 00007f8b7e59e0d9 [ 1448.241293][T18604] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 1448.241307][T18604] RBP: 00007f8b7f388090 R08: 0000000000000000 R09: 0000000000000000 [ 1448.241320][T18604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1448.241333][T18604] R13: 00007f8b7e826038 R14: 00007f8b7e825fa0 R15: 00007ffcd850de18 [ 1448.241368][T18604] [ 1448.477688][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1448.525639][T18607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11434'. [ 1448.675334][T18620] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11438'. [ 1448.698735][T18621] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11434'. [ 1448.733412][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1448.741061][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1448.811251][T18621] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11434'. [ 1448.889053][T18621] netlink: 84 bytes leftover after parsing attributes in process `syz.1.11434'. [ 1448.999617][T18621] vlan0: entered allmulticast mode [ 1449.048129][T18621] bond0: entered allmulticast mode [ 1449.091503][T18621] bond_slave_0: entered allmulticast mode [ 1449.138709][T18621] bond_slave_1: entered allmulticast mode [ 1449.294702][T18649] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11443'. [ 1449.326480][T18649] sctp: [Deprecated]: syz.5.11443 (pid 18649) Use of int in max_burst socket option. [ 1449.326480][T18649] Use struct sctp_assoc_value instead [ 1449.401248][T18645] tc_dump_action: action bad kind [ 1449.430494][T18652] tap0: tun_chr_ioctl cmd 1074025672 [ 1449.455254][T18652] tap0: ignored: set checksum enabled [ 1449.534572][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1449.579610][T18642] syzkaller0: entered promiscuous mode [ 1449.594539][T18642] syzkaller0: entered allmulticast mode [ 1449.609451][T18647] tap0: tun_chr_ioctl cmd 1074025677 [ 1449.633835][T18647] tap0: linktype set to 825 [ 1449.744017][ T30] audit: type=1804 audit(1786371389.516:45): pid=18657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.11444" name="/newroot/520/cgroup.controllers" dev="tmpfs" ino=2679 res=1 errno=0 [ 1449.813108][ T30] audit: type=1800 audit(1786371389.516:46): pid=18657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.11444" name="cgroup.controllers" dev="tmpfs" ino=2679 res=0 errno=0 [ 1449.929811][T18662] __nla_validate_parse: 3 callbacks suppressed [ 1449.929834][T18662] netlink: 156 bytes leftover after parsing attributes in process `syz.0.11446'. [ 1450.485809][T18653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1450.525399][T18671] FAULT_INJECTION: forcing a failure. [ 1450.525399][T18671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1450.538693][T18671] CPU: 1 UID: 0 PID: 18671 Comm: syz.1.11448 Not tainted syzkaller #0 PREEMPT(full) [ 1450.538718][T18671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1450.538729][T18671] Call Trace: [ 1450.538738][T18671] [ 1450.538747][T18671] dump_stack_lvl+0xe8/0x150 [ 1450.538778][T18671] should_fail_ex+0x40c/0x560 [ 1450.538802][T18671] _copy_to_user+0x31/0xb0 [ 1450.538829][T18671] bpf_test_finish+0x4ea/0x690 [ 1450.538857][T18671] ? __pfx____migrate_enable+0x10/0x10 [ 1450.538882][T18671] ? __pfx_bpf_test_finish+0x10/0x10 [ 1450.538916][T18671] bpf_prog_test_run_flow_dissector+0x478/0x610 [ 1450.538951][T18671] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 1450.538975][T18671] ? __fget_files+0x2a/0x420 [ 1450.539003][T18671] ? __fget_files+0x2a/0x420 [ 1450.539029][T18671] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 1450.539052][T18671] bpf_prog_test_run+0x2c5/0x340 [ 1450.539080][T18671] __sys_bpf+0xa22/0xd90 [ 1450.539109][T18671] ? __pfx___sys_bpf+0x10/0x10 [ 1450.539141][T18671] ? __fget_files+0x2a/0x420 [ 1450.539183][T18671] ? ksys_write+0x242/0x270 [ 1450.539213][T18671] ? __pfx_ksys_write+0x10/0x10 [ 1450.539244][T18671] __x64_sys_bpf+0xba/0xd0 [ 1450.539264][T18671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1450.539284][T18671] do_syscall_64+0x174/0x580 [ 1450.539310][T18671] ? trace_irq_disable+0x3b/0x140 [ 1450.539331][T18671] ? clear_bhb_loop+0x70/0xc0 [ 1450.539353][T18671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1450.539371][T18671] RIP: 0033:0x7f12fa19e0d9 [ 1450.539389][T18671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1450.539405][T18671] RSP: 002b:00007f12faff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1450.539424][T18671] RAX: ffffffffffffffda RBX: 00007f12fa425fa0 RCX: 00007f12fa19e0d9 [ 1450.539437][T18671] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 1450.539448][T18671] RBP: 00007f12faff7090 R08: 0000000000000000 R09: 0000000000000000 [ 1450.539459][T18671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1450.539469][T18671] R13: 00007f12fa426038 R14: 00007f12fa425fa0 R15: 00007ffd4393a128 [ 1450.539498][T18671] [ 1450.761937][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1451.783522][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1452.821107][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1453.854473][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1453.864380][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1454.031363][T18673] IPVS: Unknown mcast interface: ip6gretap0 [ 1454.252069][T18689] netlink: 'syz.5.11454': attribute type 1 has an invalid length. [ 1454.272999][T18684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11452'. [ 1454.474301][T18701] FAULT_INJECTION: forcing a failure. [ 1454.474301][T18701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1454.488697][T18701] CPU: 0 UID: 0 PID: 18701 Comm: syz.2.11459 Not tainted syzkaller #0 PREEMPT(full) [ 1454.488725][T18701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1454.488738][T18701] Call Trace: [ 1454.488746][T18701] [ 1454.488755][T18701] dump_stack_lvl+0xe8/0x150 [ 1454.488791][T18701] should_fail_ex+0x40c/0x560 [ 1454.488818][T18701] _copy_to_user+0x31/0xb0 [ 1454.488850][T18701] bpf_test_finish+0x52e/0x690 [ 1454.488882][T18701] ? __pfx____migrate_enable+0x10/0x10 [ 1454.488912][T18701] ? __pfx_bpf_test_finish+0x10/0x10 [ 1454.488938][T18701] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 1454.488975][T18701] bpf_prog_test_run_flow_dissector+0x478/0x610 [ 1454.489013][T18701] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 1454.489041][T18701] ? __fget_files+0x2a/0x420 [ 1454.489085][T18701] ? __fget_files+0x2a/0x420 [ 1454.489129][T18701] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 1454.489177][T18701] bpf_prog_test_run+0x2c5/0x340 [ 1454.489209][T18701] __sys_bpf+0xa22/0xd90 [ 1454.489241][T18701] ? __pfx___sys_bpf+0x10/0x10 [ 1454.489303][T18701] ? __fget_files+0x2a/0x420 [ 1454.489345][T18701] ? ksys_write+0x242/0x270 [ 1454.489384][T18701] ? __pfx_ksys_write+0x10/0x10 [ 1454.489420][T18701] __x64_sys_bpf+0xba/0xd0 [ 1454.489444][T18701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1454.489467][T18701] do_syscall_64+0x174/0x580 [ 1454.489500][T18701] ? trace_irq_disable+0x3b/0x140 [ 1454.489528][T18701] ? clear_bhb_loop+0x70/0xc0 [ 1454.489554][T18701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1454.489575][T18701] RIP: 0033:0x7fd55179e0d9 [ 1454.489595][T18701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1454.489612][T18701] RSP: 002b:00007fd552663028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1454.489634][T18701] RAX: ffffffffffffffda RBX: 00007fd551a25fa0 RCX: 00007fd55179e0d9 [ 1454.489650][T18701] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 1454.489663][T18701] RBP: 00007fd552663090 R08: 0000000000000000 R09: 0000000000000000 [ 1454.489676][T18701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1454.489688][T18701] R13: 00007fd551a26038 R14: 00007fd551a25fa0 R15: 00007ffce49acaf8 [ 1454.489721][T18701] [ 1454.798735][T18708] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11460'. [ 1454.892463][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1454.920083][T18712] netlink: 7 bytes leftover after parsing attributes in process `syz.2.11463'. [ 1455.280109][T18737] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11465'. [ 1455.308836][T18737] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11465'. [ 1455.498420][T18742] netlink: 'syz.5.11468': attribute type 3 has an invalid length. [ 1455.566464][T18742] xt_hashlimit: size too large, truncated to 1048576 [ 1455.656060][T18747] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1455.874874][T18750] FAULT_INJECTION: forcing a failure. [ 1455.874874][T18750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1455.910033][T18750] CPU: 0 UID: 0 PID: 18750 Comm: syz.1.11471 Not tainted syzkaller #0 PREEMPT(full) [ 1455.910064][T18750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1455.910079][T18750] Call Trace: [ 1455.910087][T18750] [ 1455.910097][T18750] dump_stack_lvl+0xe8/0x150 [ 1455.910132][T18750] should_fail_ex+0x40c/0x560 [ 1455.910161][T18750] _copy_to_user+0x31/0xb0 [ 1455.910192][T18750] simple_read_from_buffer+0xe1/0x170 [ 1455.910226][T18750] proc_fail_nth_read+0x1bb/0x230 [ 1455.910262][T18750] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1455.910296][T18750] ? rw_verify_area+0x24a/0x4c0 [ 1455.910330][T18750] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1455.910360][T18750] vfs_read+0x213/0xa80 [ 1455.910396][T18750] ? __pfx___mutex_lock+0x10/0x10 [ 1455.910431][T18750] ? __pfx_vfs_read+0x10/0x10 [ 1455.910463][T18750] ? __fget_files+0x2a/0x420 [ 1455.910496][T18750] ? __fget_files+0x3a2/0x420 [ 1455.910526][T18750] ? __fget_files+0x2a/0x420 [ 1455.910563][T18750] ksys_read+0x150/0x270 [ 1455.910596][T18750] ? __pfx_ksys_read+0x10/0x10 [ 1455.910637][T18750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1455.910661][T18750] do_syscall_64+0x174/0x580 [ 1455.910691][T18750] ? trace_irq_disable+0x3b/0x140 [ 1455.910717][T18750] ? clear_bhb_loop+0x70/0xc0 [ 1455.910752][T18750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1455.910774][T18750] RIP: 0033:0x7f12fa15e90e [ 1455.910794][T18750] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1455.910813][T18750] RSP: 002b:00007f12faff6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1455.910835][T18750] RAX: ffffffffffffffda RBX: 00007f12faff76c0 RCX: 00007f12fa15e90e [ 1455.910849][T18750] RDX: 000000000000000f RSI: 00007f12faff70a0 RDI: 0000000000000005 [ 1455.910863][T18750] RBP: 00007f12faff7090 R08: 0000000000000000 R09: 0000000000000000 [ 1455.910875][T18750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1455.910886][T18750] R13: 00007f12fa426038 R14: 00007f12fa425fa0 R15: 00007ffd4393a128 [ 1455.910921][T18750] [ 1455.976086][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1456.276616][T18763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11476'. [ 1456.350731][T18771] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11478'. [ 1456.360074][T18771] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11478'. [ 1456.699879][T18782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1456.910853][T18791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11485'. [ 1456.994938][T18796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11487'. [ 1457.036963][T18798] netlink: 'syz.5.11486': attribute type 1 has an invalid length. [ 1457.052491][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1457.066760][T18798] netlink: 232 bytes leftover after parsing attributes in process `syz.5.11486'. [ 1457.092100][T18798] netlink: 'syz.5.11486': attribute type 1 has an invalid length. [ 1457.376623][T18773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11478'. [ 1457.783016][T17408] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1457.812461][T17408] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1457.828217][T17408] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1457.840080][T17408] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.013198][T18831] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11493'. [ 1458.056451][T18831] bridge0: port 2(veth0) entered blocking state [ 1458.072822][T18831] bridge0: port 2(veth0) entered disabled state [ 1458.082464][T18831] veth0: entered allmulticast mode [ 1458.092914][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1458.103643][T18831] veth0: entered promiscuous mode [ 1458.119136][T18831] bond1: entered promiscuous mode [ 1458.148789][T18831] bridge0: port 2(veth0) entered blocking state [ 1458.155284][T18831] bridge0: port 2(veth0) entered forwarding state [ 1458.435689][T18842] netlink: 'syz.2.11498': attribute type 1 has an invalid length. [ 1458.822951][T18872] netlink: 'syz.2.11504': attribute type 16 has an invalid length. [ 1458.856170][T18862] bridge0: port 2(veth0) entered disabled state [ 1458.880325][T18872] netlink: 'syz.2.11504': attribute type 17 has an invalid length. [ 1458.972863][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1459.024102][ T7344] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1459.110937][T18876] bridge0: port 3(vlan1) entered blocking state [ 1459.152425][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1459.187118][T18876] bridge0: port 3(vlan1) entered disabled state [ 1459.194462][T18876] vlan1: entered allmulticast mode [ 1459.200679][T18876] dummy0: entered allmulticast mode [ 1459.248966][T18876] vlan1: entered promiscuous mode [ 1459.264819][T18876] dummy0: entered promiscuous mode [ 1459.299836][ T7362] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1459.354924][T18872] erspan0: left promiscuous mode [ 1459.419564][T18872] dummy0: left promiscuous mode [ 1459.439661][T18872] bridge0: port 2(veth0) entered blocking state [ 1459.446180][T18872] bridge0: port 2(veth0) entered forwarding state [ 1459.586229][T18872] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1459.663714][ T5804] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1459.684305][T18872] ip6tnl2: left allmulticast mode [ 1459.691054][T18872] ip6tnl3: left allmulticast mode [ 1459.715303][T18872] ip6gretap1: left promiscuous mode [ 1459.738889][T18872] veth0_to_team: entered promiscuous mode [ 1459.745639][ T5804] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1459.776046][T18872] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1459.858778][T17409] bond4: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 1459.913538][T17409] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1459.963530][T17409] bond4: active interface up! [ 1460.004162][T17409] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.034701][T17409] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.069858][T17409] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.107847][T17409] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.172842][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1460.292563][T10622] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1460.322814][T10622] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1460.521835][T18924] __nla_validate_parse: 5 callbacks suppressed [ 1460.521855][T18924] netlink: 60 bytes leftover after parsing attributes in process `syz.5.11518'. [ 1461.212417][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1461.481470][T18959] IPVS: persistence engine module ip_vs_pe_ not found [ 1461.716958][T18970] vlan0: left allmulticast mode [ 1461.722094][T18970] bond0: left allmulticast mode [ 1461.728553][T18970] bond_slave_0: left allmulticast mode [ 1461.734683][T18970] bond_slave_1: left allmulticast mode [ 1461.744333][T18972] netlink: 844 bytes leftover after parsing attributes in process `syz.2.11531'. [ 1462.195351][T18996] netlink: 'syz.4.11537': attribute type 10 has an invalid length. [ 1462.245063][T18996] bond0: (slave bridge0): Enslaving as an active interface with a down link [ 1462.255375][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1462.439076][T19004] netlink: 'syz.4.11539': attribute type 1 has an invalid length. [ 1463.287683][T19034] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11549'. [ 1463.297121][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1463.325007][T17414] IPVS: starting estimator thread 0... [ 1463.414052][T19037] IPVS: using max 38 ests per chain, 91200 per kthread [ 1463.488321][T19039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11550'. [ 1463.554541][T19041] netlink: 220 bytes leftover after parsing attributes in process `syz.2.11551'. [ 1463.828489][T19057] x_tables: duplicate underflow at hook 1 [ 1464.332911][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1464.823922][T19111] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11569'. [ 1464.871019][T19116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11571'. [ 1464.897456][T19116] netlink: 'syz.0.11571': attribute type 30 has an invalid length. [ 1464.906492][T19117] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11570'. [ 1464.927825][T19119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11571'. [ 1464.961627][T19119] netlink: 'syz.0.11571': attribute type 30 has an invalid length. [ 1465.225849][T19126] netlink: 'syz.4.11574': attribute type 1 has an invalid length. [ 1465.274036][T19126] bond10: option mode: invalid value (10) [ 1465.310248][T19126] bond10 (unregistering): Released all slaves [ 1465.353397][T19140] ip_tables: iptables: counters copy to user failed while replacing table [ 1465.372493][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1465.415905][T19146] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11574'. [ 1465.886683][T19167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11585'. [ 1466.121707][T19151] nbd: must specify at least one socket [ 1466.159627][T19173] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1466.190388][T19173] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1466.205351][T19173] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 1466.228162][T27496] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1466.425506][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1466.489625][T19176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1466.610882][T19185] Can't find ip_set type hash:net,po [ 1466.633723][T19190] syzkaller0: entered promiscuous mode [ 1466.649585][T19190] syzkaller0: entered allmulticast mode [ 1466.691050][T19190] tipc: Enabled bearer , priority 0 [ 1466.708043][T19190] tipc: Resetting bearer [ 1466.755762][T19186] tipc: Resetting bearer [ 1466.790530][T19186] tipc: Disabling bearer [ 1467.074704][T19210] xt_hashlimit: size too large, truncated to 1048576 [ 1467.092095][T19206] xt_hashlimit: size too large, truncated to 1048576 [ 1467.112929][T19206] xt_hashlimit: max too large, truncated to 1048576 [ 1467.134759][T19206] syzkaller0: entered promiscuous mode [ 1467.154895][T19206] syzkaller0: entered allmulticast mode [ 1467.421691][T19219] syzkaller0: entered promiscuous mode [ 1467.437851][T19219] syzkaller0: entered allmulticast mode [ 1467.452549][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1467.585428][T19224] Unsupported ieee802154 address type: 0 [ 1468.324634][T19263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11615'. [ 1468.453996][T19267] vlan3: entered allmulticast mode [ 1468.493722][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1468.501357][T19267] bridge4: entered allmulticast mode [ 1468.508911][T19263] bridge4: port 1(erspan0) entered blocking state [ 1468.532569][T19263] bridge4: port 1(erspan0) entered disabled state [ 1468.546817][T19263] erspan0: entered allmulticast mode [ 1468.570218][T19263] erspan0: entered promiscuous mode [ 1468.602502][T19263] bridge4: port 1(erspan0) entered blocking state [ 1468.609162][T19263] bridge4: port 1(erspan0) entered forwarding state [ 1468.660662][T19267] bridge4: port 1(erspan0) entered disabled state [ 1468.784806][T19287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1468.872230][T19292] nbd: nbd4 already in use [ 1468.887898][T19292] block nbd4: NBD_DISCONNECT [ 1468.901476][T19292] block nbd4: Send disconnect failed -104 [ 1468.928012][T19292] block nbd4: shutting down sockets [ 1469.203188][T19287] netlink: 43 bytes leftover after parsing attributes in process `syz.4.11620'. [ 1469.212811][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1469.272692][T19301] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1469.283152][T19301] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1469.342779][T19304] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11624'. [ 1469.532410][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1470.117691][T19327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11630'. [ 1470.158211][T19327] nftables ruleset with unbound set [ 1470.261197][T19334] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 1470.538725][T19346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11636'. [ 1470.572818][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1470.580339][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1471.000849][T19368] xt_hashlimit: size too large, truncated to 1048576 [ 1471.041660][T19371] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1471.118129][T19377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11645'. [ 1471.143342][T19376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11646'. [ 1471.166519][T19376] netlink: 'syz.1.11646': attribute type 1 has an invalid length. [ 1471.315972][T19380] bond0: Caught tx_queue_len zero misconfig [ 1471.551127][T19391] netlink: 'syz.4.11647': attribute type 10 has an invalid length. [ 1471.612368][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1471.792509][T19394] batman_adv: batadv0: Adding interface: macvtap1 [ 1471.809766][T19394] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1471.848866][T19399] netlink: 'syz.4.11650': attribute type 10 has an invalid length. [ 1471.864420][T19394] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 1471.887890][T19399] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1471.907330][T19399] bond0: (slave netdevsim1): Enslaving as an active interface with a down link [ 1471.957995][T19400] batman_adv: batadv0: Removing interface: macvtap1 [ 1471.966569][T19399] netlink: 160 bytes leftover after parsing attributes in process `syz.4.11650'. [ 1472.041467][T19408] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11652'. [ 1472.041954][T19370] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11644'. [ 1472.186002][T19415] netlink: 560 bytes leftover after parsing attributes in process `syz.2.11655'. [ 1472.195993][T19415] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1472.207557][T19415] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11655'. [ 1472.218445][T19415] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1472.264255][T19418] netlink: 'syz.4.11656': attribute type 1 has an invalid length. [ 1472.287401][T19419] netlink: 'syz.4.11656': attribute type 1 has an invalid length. [ 1472.453696][T19418] bond10: entered promiscuous mode [ 1472.469604][T19418] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1472.486443][T19430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11654'. [ 1472.652906][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1472.839966][T19446] netlink: 'syz.1.11661': attribute type 3 has an invalid length. [ 1473.014084][T19455] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 1473.062894][T19455] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 1473.113352][T19455] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 1473.280262][T19468] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11665'. [ 1473.388318][T19469] netlink: 100 bytes leftover after parsing attributes in process `syz.2.11665'. [ 1473.693092][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1473.751674][T19483] netlink: 'syz.2.11669': attribute type 15 has an invalid length. [ 1474.067971][T19487] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1474.099320][T19490] netlink: 'syz.1.11672': attribute type 10 has an invalid length. [ 1474.118214][T19490] team0: Port device dummy0 added [ 1474.310339][T19495] bond_slave_0: left promiscuous mode [ 1474.339088][T19495] bond_slave_0: entered promiscuous mode [ 1474.349199][T19495] bond_slave_0: entered allmulticast mode [ 1474.733450][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1475.772390][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1475.924781][T19558] sctp: [Deprecated]: syz.0.11683 (pid 19558) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1475.924781][T19558] Use struct sctp_sack_info instead [ 1476.140443][T19562] __nla_validate_parse: 12 callbacks suppressed [ 1476.140464][T19562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11686'. [ 1476.222998][T19562] netlink: 4456 bytes leftover after parsing attributes in process `syz.2.11686'. [ 1476.812801][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1477.107928][T19594] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11694'. [ 1477.129415][T19593] veth0: Caught tx_queue_len zero misconfig [ 1477.138444][T19593] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11694'. [ 1477.149430][T19594] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11694'. [ 1477.569667][T19610] syzkaller0: entered promiscuous mode [ 1477.582597][T19610] syzkaller0: entered allmulticast mode [ 1477.597203][T17414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1477.625767][T19610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1477.653027][T19610] tipc: Enabled bearer , priority 0 [ 1477.654779][T19615] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11702'. [ 1477.672700][T19610] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11700'. [ 1477.685185][T19612] mac80211_hwsim hwsim110 syzkaller0: entered promiscuous mode [ 1477.705033][T19612] mac80211_hwsim hwsim110 syzkaller0: entered allmulticast mode [ 1477.723784][T19609] tipc: Resetting bearer [ 1477.738992][T19612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11701'. [ 1477.803969][T19609] tipc: Disabling bearer [ 1477.852400][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1477.997474][T19626] netlink: 48 bytes leftover after parsing attributes in process `syz.5.11705'. [ 1478.219722][T19639] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ1 [ 1478.231093][T19639] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11709'. [ 1478.294746][T19646] netlink: 'syz.0.11711': attribute type 14 has an invalid length. [ 1478.484161][T19654] syzkaller0: entered promiscuous mode [ 1478.490094][T19654] syzkaller0: entered allmulticast mode [ 1478.632150][T19656] vxcan5: entered promiscuous mode [ 1478.694050][T19658] syzkaller0: entered promiscuous mode [ 1478.699760][T19658] syzkaller0: entered allmulticast mode [ 1478.892905][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1478.936520][T19665] tap0: tun_chr_ioctl cmd 2148553947 [ 1479.367205][T19684] netlink: 'syz.5.11725': attribute type 1 has an invalid length. [ 1479.401887][T19684] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1479.453261][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1479.481591][T19688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1479.505152][T19688] bond8: (slave batadv0): Enslaving as an active interface with an up link [ 1479.522386][T19684] xt_CT: No such helper "snmp_trap" [ 1479.719888][T19700] netlink: 'syz.5.11729': attribute type 17 has an invalid length. [ 1479.932457][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1480.606242][T19733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1480.973602][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1481.158513][T19756] __nla_validate_parse: 3 callbacks suppressed [ 1481.158545][T19756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11739'. [ 1481.206037][T19756] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11739'. [ 1481.387887][T19756] block nbd4: server does not support multiple connections per device. [ 1481.410953][T19756] block nbd4: shutting down sockets [ 1481.845031][T19787] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1481.927526][T19790] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11749'. [ 1482.012410][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1482.056836][T19797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11751'. [ 1482.156973][T19802] ip6tnl0: Caught tx_queue_len zero misconfig [ 1482.770659][T17408] veth0: left allmulticast mode [ 1482.790012][T17408] bridge0: port 1(veth0) entered disabled state [ 1482.799701][T19824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11756'. [ 1483.054130][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1483.079775][T19837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1483.219779][T19840] nbd: must specify at least one socket [ 1483.548353][T17408] gretap0 (unregistering): left promiscuous mode [ 1483.698271][T17408] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 1483.753594][T17408] team0: Port device bridge3 removed [ 1483.791953][T17408] bond6 (unregistering): (slave bridge0): Releasing backup interface [ 1483.814187][T17408] bridge0 (unregistering): left promiscuous mode [ 1483.997997][T17408] bond0 (unregistering): Released all slaves [ 1484.017854][T17408] bond1 (unregistering): Released all slaves [ 1484.040097][T17408] bond2 (unregistering): Released all slaves [ 1484.067976][T17408] bond3 (unregistering): Released all slaves [ 1484.092405][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1484.110804][T17408] bond4 (unregistering): Released all slaves [ 1484.138110][T17408] bond5 (unregistering): Released all slaves [ 1484.161494][T17408] bond6 (unregistering): Released all slaves [ 1484.198881][T17408] bond7 (unregistering): Released all slaves [ 1484.236622][T17408] bond8 (unregistering): Released all slaves [ 1484.259623][T17408] bond9 (unregistering): (slave ): Releasing backup interface [ 1484.278638][T17408] bond9 (unregistering): Released all slaves [ 1484.305157][T17408] bond10 (unregistering): Released all slaves [ 1484.327738][T17408] bond11 (unregistering): Released all slaves [ 1484.934658][T17408] IPVS: stopping backup sync thread 19215 ... [ 1484.990625][T19877] netlink: 'syz.0.11775': attribute type 10 has an invalid length. [ 1485.134320][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1485.163877][T19877] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1485.190889][T19878] netlink: 'syz.5.11774': attribute type 4 has an invalid length. [ 1485.243354][T17414] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1485.263034][T17414] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1485.375578][T17409] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1485.406507][T17409] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1485.416095][T19898] netlink: 92 bytes leftover after parsing attributes in process `syz.5.11780'. [ 1485.637589][T19909] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11784'. [ 1485.819007][ T5804] lwtunnel_output(): recursion limit reached on datapath [ 1485.996676][T19930] netlink: 'syz.2.11789': attribute type 1 has an invalid length. [ 1486.024974][T19930] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11789'. [ 1486.172412][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1486.210698][T19936] openvswitch: netlink: IP tunnel attribute has 5405 unknown bytes. [ 1486.326881][T19945] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1486.595591][T19950] batadv1: entered promiscuous mode [ 1486.608073][T19950] batadv1: entered allmulticast mode [ 1486.631315][T17408] veth1_to_team: left promiscuous mode [ 1486.657948][T17408] bridge_slave_1: left promiscuous mode [ 1486.787353][T17408] hsr_slave_0: left promiscuous mode [ 1486.807483][T17408] hsr_slave_1: left promiscuous mode [ 1486.875067][T17408] veth1_macvtap: left promiscuous mode [ 1486.898763][T17408] veth0_macvtap: left promiscuous mode [ 1486.919213][T17408] veth1_vlan: left promiscuous mode [ 1486.937659][T17408] veth0_vlan: left promiscuous mode [ 1487.167529][T19967] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11797'. [ 1487.213690][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1487.290852][T17408] team0 (unregistering): Port device vlan3 removed [ 1487.340299][T19970] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11797'. [ 1487.456214][ T29] lwtunnel_output(): recursion limit reached on datapath [ 1488.252428][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1488.807479][T17408] IPVS: stop unused estimator thread 0... [ 1489.288731][T20017] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11805'. [ 1489.298682][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1489.703128][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1489.939487][T20042] xt_TCPMSS: Only works on TCP SYN packets [ 1490.253920][ C1] lwtunnel_output(): recursion limit reached on datapath [ 1490.332703][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1490.868528][T20078] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1490.970512][T20078] syzkaller1: entered promiscuous mode [ 1490.988923][T20078] syzkaller1: entered allmulticast mode [ 1491.089786][ T30] audit: type=1804 audit(1786371430.856:47): pid=20091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.11821" name="/newroot/503/cgroup.controllers" dev="tmpfs" ino=2612 res=1 errno=0 [ 1491.146366][ T30] audit: type=1800 audit(1786371430.856:48): pid=20091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.11821" name="cgroup.controllers" dev="tmpfs" ino=2612 res=0 errno=0 [ 1491.167740][T20093] xt_l2tp: v2 doesn't support IP mode [ 1491.186733][T20093] netlink: 100 bytes leftover after parsing attributes in process `syz.2.11824'. [ 1491.372819][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1491.513331][T20118] tipc: Enabling of bearer rejected, failed to enable media [ 1491.707260][T20124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11829'. [ 1491.928350][T20130] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 1491.957944][T20130] syzkaller0: entered promiscuous mode [ 1491.974553][T20130] syzkaller0: entered allmulticast mode [ 1492.005138][T20130] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1492.026010][T20133] syzkaller0: entered promiscuous mode [ 1492.043495][T20133] syzkaller0: entered allmulticast mode [ 1492.089779][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1492.114374][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1492.127390][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1492.142931][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1492.167026][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1492.254171][ T673] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1492.285407][ T673] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1492.295949][ T673] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1492.311905][ T673] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1492.323627][ T673] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1492.422429][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1492.591530][T20144] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11834'. [ 1492.811396][T20149] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11835'. [ 1493.453694][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1493.465606][T20181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11844'. [ 1493.591938][T20182] bond6 (unregistering): Released all slaves [ 1493.797728][T20193] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11847'. [ 1494.412450][ T673] Bluetooth: hci1: command tx timeout [ 1494.467153][T20231] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11855'. [ 1494.492742][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1494.611344][T20136] bridge0: port 1(bridge_slave_0) entered blocking state [ 1494.631955][T20136] bridge0: port 1(bridge_slave_0) entered disabled state [ 1494.651509][T20136] bridge_slave_0: entered allmulticast mode [ 1494.670676][T20136] bridge_slave_0: entered promiscuous mode [ 1494.698196][T20136] bridge0: port 2(bridge_slave_1) entered blocking state [ 1494.716072][T20136] bridge0: port 2(bridge_slave_1) entered disabled state [ 1494.724040][T20136] bridge_slave_1: entered allmulticast mode [ 1494.731999][T20136] bridge_slave_1: entered promiscuous mode [ 1494.813769][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1494.844531][T20136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1494.875802][T20136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1494.891107][T20248] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11860'. [ 1495.033237][T20136] team0: Port device team_slave_0 added [ 1495.066467][T20136] team0: Port device team_slave_1 added [ 1495.208670][T20136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1495.222924][T20136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1495.307115][T20136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1495.340824][T20136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1495.352488][T20136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1495.357177][T20269] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11866'. [ 1495.411446][T20136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1495.427024][T20269] netlink: 'syz.4.11866': attribute type 7 has an invalid length. [ 1495.444006][T20269] netlink: 'syz.4.11866': attribute type 8 has an invalid length. [ 1495.452026][T20269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11866'. [ 1495.468944][T20274] sch_fq: defrate 0 ignored. [ 1495.533164][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1495.615577][T20136] hsr_slave_0: entered promiscuous mode [ 1495.626389][T20136] hsr_slave_1: entered promiscuous mode [ 1495.643392][T20136] debugfs: 'hsr0' already exists in 'hsr' [ 1495.650707][T20136] Cannot create hsr debugfs directory [ 1495.921416][T20290] FAULT_INJECTION: forcing a failure. [ 1495.921416][T20290] name failslab, interval 1, probability 0, space 0, times 0 [ 1495.958645][T20290] CPU: 0 UID: 0 PID: 20290 Comm: syz.1.11873 Not tainted syzkaller #0 PREEMPT(full) [ 1495.958674][T20290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1495.958688][T20290] Call Trace: [ 1495.958697][T20290] [ 1495.958707][T20290] dump_stack_lvl+0xe8/0x150 [ 1495.958743][T20290] should_fail_ex+0x40c/0x560 [ 1495.958773][T20290] should_failslab+0xa8/0x100 [ 1495.958806][T20290] __kmalloc_cache_noprof+0xa8/0x660 [ 1495.958832][T20290] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1495.958862][T20290] ? __kmalloc_cache_noprof+0x150/0x660 [ 1495.958887][T20290] ? sctp_add_bind_addr+0x8c/0x370 [ 1495.958914][T20290] ? sctp_add_bind_addr+0x8c/0x370 [ 1495.958948][T20290] sctp_add_bind_addr+0x8c/0x370 [ 1495.958982][T20290] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1495.959012][T20290] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1495.959041][T20290] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1495.959072][T20290] ? sctp_v6_is_any+0x64/0x80 [ 1495.959214][T20290] ? sctp_copy_one_addr+0x93/0x360 [ 1495.959244][T20290] sctp_bind_addr_copy+0xb3/0x3c0 [ 1495.959272][T20290] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1495.959301][T20290] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1495.959360][T20290] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1495.959399][T20290] ? sctp_inet6_send_verify+0x23a/0x300 [ 1495.959430][T20290] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 1495.959467][T20290] __sctp_connect+0x5cb/0xdc0 [ 1495.959514][T20290] ? __pfx___sctp_connect+0x10/0x10 [ 1495.959545][T20290] ? sctp_setsockopt+0x21c/0x12c0 [ 1495.959575][T20290] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1495.959607][T20290] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 1495.959636][T20290] sctp_setsockopt+0x480/0x12c0 [ 1495.959667][T20290] ? sock_common_setsockopt+0x36/0xc0 [ 1495.959700][T20290] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1495.959733][T20290] do_sock_setsockopt+0x17c/0x1b0 [ 1495.959763][T20290] __x64_sys_setsockopt+0x13d/0x1b0 [ 1495.959788][T20290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.959813][T20290] do_syscall_64+0x174/0x580 [ 1495.959844][T20290] ? trace_irq_disable+0x3b/0x140 [ 1495.959870][T20290] ? clear_bhb_loop+0x70/0xc0 [ 1495.959898][T20290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.959919][T20290] RIP: 0033:0x7f12fa19e0d9 [ 1495.959939][T20290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1495.959957][T20290] RSP: 002b:00007f12faff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1495.959979][T20290] RAX: ffffffffffffffda RBX: 00007f12fa425fa0 RCX: 00007f12fa19e0d9 [ 1495.959995][T20290] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000003 [ 1495.960009][T20290] RBP: 00007f12faff7090 R08: 000000000000001c R09: 0000000000000000 [ 1495.960022][T20290] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000002 [ 1495.960036][T20290] R13: 00007f12fa426038 R14: 00007f12fa425fa0 R15: 00007ffd4393a128 [ 1495.960072][T20290] [ 1496.059808][T20294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11874'. [ 1496.096344][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1496.493178][ T673] Bluetooth: hci1: command tx timeout [ 1496.575010][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1496.632626][T20136] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.027929][T20136] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.181508][T20300] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11875'. [ 1497.227825][T20136] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.390735][T20136] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.624321][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1497.761079][T20340] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8 [ 1497.873166][T20347] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11885'. [ 1497.950364][T20347] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1497.965360][T20345] netlink: 'syz.0.11886': attribute type 1 has an invalid length. [ 1498.136598][T20345] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1498.334118][T20136] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1498.369218][T20136] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1498.389744][T20374] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11891'. [ 1498.404737][T20136] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1498.414995][T20373] netlink: 'syz.2.11894': attribute type 1 has an invalid length. [ 1498.433927][T20136] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1498.518267][T20373] bond6: option mode: invalid value (7) [ 1498.559349][T20373] bond6 (unregistering): Released all slaves [ 1498.572290][ T673] Bluetooth: hci1: command tx timeout [ 1498.592644][T20136] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1498.605208][T20136] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1498.613408][T20136] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1498.626333][T20386] netlink: 'syz.2.11894': attribute type 10 has an invalid length. [ 1498.634524][T20386] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11894'. [ 1498.654253][ C1] lwtunnel_output(): recursion limit reached on datapath [ 1498.661870][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1498.694163][T20136] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1498.795413][T20374] tipc: Enabling of bearer rejected, already enabled [ 1498.820376][T17414] tipc: Resetting bearer [ 1498.866257][T20384] syzkaller1: entered promiscuous mode [ 1498.877981][T20384] syzkaller1: entered allmulticast mode [ 1499.229962][T20136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1499.279122][T20136] 8021q: adding VLAN 0 to HW filter on device team0 [ 1499.322101][T17411] bridge0: port 1(bridge_slave_0) entered blocking state [ 1499.329396][T17411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1499.390494][T17409] bridge0: port 2(bridge_slave_1) entered blocking state [ 1499.397780][T17409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1499.419959][T20417] netlink: 'syz.0.11901': attribute type 32 has an invalid length. [ 1499.473894][T20417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11901'. [ 1499.584319][T20417] bond13: option coupled_control: invalid value (12) [ 1499.625167][T20417] bond13 (unregistering): Released all slaves [ 1499.693436][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1500.478857][T20463] xfrm0: Caught tx_queue_len zero misconfig [ 1500.653558][ T673] Bluetooth: hci1: command tx timeout [ 1500.732495][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1500.831360][T20472] sctp: [Deprecated]: syz.4.11914 (pid 20472) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1500.831360][T20472] Use struct sctp_sack_info instead [ 1501.073169][T20136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1501.783366][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1501.874704][T20136] veth0_vlan: entered promiscuous mode [ 1501.913835][T20136] veth1_vlan: entered promiscuous mode [ 1502.065386][T20136] veth0_macvtap: entered promiscuous mode [ 1502.105364][T20136] veth1_macvtap: entered promiscuous mode [ 1502.170304][T20513] netlink: 'syz.4.11922': attribute type 11 has an invalid length. [ 1502.238054][T20136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1502.376022][T20136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1502.539915][T27496] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1502.578504][T27496] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1502.654353][T27495] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1502.673810][T20527] netlink: 'syz.1.11924': attribute type 21 has an invalid length. [ 1502.716770][T20527] netlink: 'syz.1.11924': attribute type 6 has an invalid length. [ 1502.765569][T20527] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11924'. [ 1502.793890][T17409] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1502.810635][T20527] netlink: 'syz.1.11924': attribute type 21 has an invalid length. [ 1502.818903][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1502.855496][T20527] netlink: 'syz.1.11924': attribute type 6 has an invalid length. [ 1502.879385][T20527] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11924'. [ 1502.938781][T20529] netlink: 204 bytes leftover after parsing attributes in process `syz.2.11925'. [ 1502.971765][T20544] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11928'. [ 1503.275771][T20537] netlink: 84 bytes leftover after parsing attributes in process `syz.2.11925'. [ 1503.355576][T20569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11934'. [ 1503.381974][T20569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11934'. [ 1503.614780][T17414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1503.638385][T17414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1503.724393][T17414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1503.742515][T17414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1503.852825][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1503.904417][T20579] ipvlan2: entered promiscuous mode [ 1503.919254][T20579] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1503.953861][T20579] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1503.979938][T20579] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 1503.992818][T20583] xt_hashlimit: overflow, try lower: 18446744073709551614/255 [ 1504.041779][T20583] netlink: 104 bytes leftover after parsing attributes in process `syz.5.11830'. [ 1504.094587][T20560] macvlan0: entered promiscuous mode [ 1504.892509][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1504.997316][T20595] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11940'. [ 1505.562417][T20628] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11949'. [ 1505.750332][T20641] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11952'. [ 1505.933506][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1506.264778][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1506.284841][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1506.299696][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1506.322349][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1506.334242][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1506.754256][T20674] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 1506.972470][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1507.040368][T20689] tipc: Started in network mode [ 1507.064491][T20689] tipc: Node identity ac14140f, cluster identity 4711 [ 1507.115365][T20674] netlink: 'syz.5.11962': attribute type 10 has an invalid length. [ 1507.134558][T20689] tipc: New replicast peer: 255.255.255.255 [ 1507.157139][T20689] tipc: Enabled bearer , priority 10 [ 1507.223323][T20674] 8021q: adding VLAN 0 to HW filter on device team0 [ 1507.259439][T20674] bond0: (slave team0): Enslaving as an active interface with an up link [ 1507.303886][T20696] syzkaller0: entered promiscuous mode [ 1507.314240][T20696] syzkaller0: entered allmulticast mode [ 1507.465935][T17409] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1507.480624][T17409] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1507.593724][T20709] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1507.680699][T20712] netlink: 'syz.2.11970': attribute type 1 has an invalid length. [ 1507.705625][T20712] netlink: 248 bytes leftover after parsing attributes in process `syz.2.11970'. [ 1507.846691][T17409] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1507.876543][T17409] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1508.014527][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1508.354083][T17409] bond0: (slave netdevsim1): Releasing backup interface [ 1508.382564][T17409] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1508.401556][T17409] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1508.424398][ T673] Bluetooth: hci5: command tx timeout [ 1508.442587][ T7362] tipc: Node number set to 2886997007 [ 1508.477954][T20750] __nla_validate_parse: 1 callbacks suppressed [ 1508.477974][T20750] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11979'. [ 1508.495337][T20750] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1508.540186][T20750] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11979'. [ 1508.551868][T20745] syzkaller0: entered promiscuous mode [ 1508.564861][T20745] syzkaller0: entered allmulticast mode [ 1508.607982][T20744] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 1508.745691][T17409] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1508.762365][T17409] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1508.801857][T20745] tipc: Enabled bearer , priority 0 [ 1508.874823][T20745] tipc: Resetting bearer [ 1508.967201][T20764] tipc: Resetting bearer [ 1509.061545][T20764] tipc: Disabling bearer [ 1509.067679][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1509.479094][T20795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11991'. [ 1509.545377][T17409] bond7: left allmulticast mode [ 1509.556125][T17409] bridge0: port 1(bond7) entered disabled state [ 1509.585992][T17409] pim6reg: left allmulticast mode [ 1509.863228][T17409] team0: Port device xfrm0 removed [ 1509.893057][T20776] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1510.081107][T20804] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11992'. [ 1510.096540][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1510.284862][T17409] bond3 (unregistering): (slave gretap1): Releasing active interface [ 1510.415402][T17409] bond9 (unregistering): (slave geneve2): Releasing active interface [ 1510.492428][ T673] Bluetooth: hci5: command tx timeout [ 1510.506038][T17409] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1510.609255][T17409] bond6 (unregistering): (slave bridge4): Releasing backup interface [ 1510.630040][T17409] bridge4 (unregistering): left promiscuous mode [ 1510.877885][T17409] bond0 (unregistering): Released all slaves [ 1510.911857][T17409] bond1 (unregistering): Released all slaves [ 1510.968228][T17409] bond2 (unregistering): Released all slaves [ 1511.018810][T17409] bond3 (unregistering): Released all slaves [ 1511.066867][T17409] bond4 (unregistering): Released all slaves [ 1511.095297][T17409] bond5 (unregistering): Released all slaves [ 1511.132388][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1511.157956][T17409] bond6 (unregistering): Released all slaves [ 1511.206388][T17409] bond7 (unregistering): Released all slaves [ 1511.256590][T17409] bond8 (unregistering): Released all slaves [ 1511.302840][T17409] bond9 (unregistering): Released all slaves [ 1511.325143][T17409] bond10 (unregistering): Released all slaves [ 1511.351446][T17409] bond11 (unregistering): Released all slaves [ 1511.423520][T20821] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1511.437111][T20821] bond6 (unregistering): Released all slaves [ 1511.514435][T20825] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1511.545240][T20825] bond6 (unregistering): Released all slaves [ 1511.690221][T20846] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12005'. [ 1511.800465][T17409] : left promiscuous mode [ 1512.014163][T20663] bridge0: port 1(bridge_slave_0) entered blocking state [ 1512.040384][T20663] bridge0: port 1(bridge_slave_0) entered disabled state [ 1512.054453][T20869] netlink: 104 bytes leftover after parsing attributes in process `syz.2.12008'. [ 1512.064481][T20856] netlink: 'syz.1.12007': attribute type 1 has an invalid length. [ 1512.073135][T20663] bridge_slave_0: entered allmulticast mode [ 1512.078624][T20856] netlink: 224 bytes leftover after parsing attributes in process `syz.1.12007'. [ 1512.105396][T20663] bridge_slave_0: entered promiscuous mode [ 1512.124238][T20663] bridge0: port 2(bridge_slave_1) entered blocking state [ 1512.147100][T20663] bridge0: port 2(bridge_slave_1) entered disabled state [ 1512.171009][T20663] bridge_slave_1: entered allmulticast mode [ 1512.183575][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1512.195075][T20663] bridge_slave_1: entered promiscuous mode [ 1512.349738][T20865] bridge5: entered allmulticast mode [ 1512.478685][T20663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1512.526994][T20663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1512.551295][T17409] tipc: Disabling bearer [ 1512.573087][ T673] Bluetooth: hci5: command tx timeout [ 1512.767692][T17409] tipc: Disabling bearer [ 1512.792301][T17409] tipc: Disabling bearer [ 1512.834407][T17409] tipc: Left network mode [ 1512.935986][T20894] netlink: 'syz.5.12013': attribute type 6 has an invalid length. [ 1513.100368][T20663] team0: Port device team_slave_0 added [ 1513.140361][T20900] netlink: 'syz.5.12014': attribute type 6 has an invalid length. [ 1513.166157][T20899] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12012'. [ 1513.214383][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1513.245503][T20897] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12012'. [ 1513.284087][T20903] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12015'. [ 1513.332097][T20663] team0: Port device team_slave_1 added [ 1513.359828][ T5269] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1513.539795][T17409] IPVS: stopping backup sync thread 12254 ... [ 1513.585725][T20910] gretap0: entered promiscuous mode [ 1513.633454][T20910] __nla_validate_parse: 1 callbacks suppressed [ 1513.633476][T20910] netlink: 5 bytes leftover after parsing attributes in process `syz.5.12016'. [ 1513.676405][T20910] 0ªî{X¹¦: renamed from gretap0 [ 1513.707969][T20910] 0ªî{X¹¦: left promiscuous mode [ 1513.716190][T20910] 0ªî{X¹¦: entered allmulticast mode [ 1513.740591][T20910] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1513.778726][T20663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1513.792873][T20663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1513.892301][T20663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1513.924552][T20663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1513.931682][T20663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1514.014863][T20663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1514.025960][ C1] lwtunnel_output(): recursion limit reached on datapath [ 1514.051420][T20912] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1514.076421][T20912] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1514.094307][T20912] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1514.134103][T20912] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1514.262857][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1514.397621][T20927] SET target dimension over the limit! [ 1514.474345][T20663] hsr_slave_0: entered promiscuous mode [ 1514.513703][T20663] hsr_slave_1: entered promiscuous mode [ 1514.532009][T20663] debugfs: 'hsr0' already exists in 'hsr' [ 1514.550578][T20663] Cannot create hsr debugfs directory [ 1514.576451][T20933] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1514.629702][T20933] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12021'. [ 1514.658688][ T673] Bluetooth: hci5: command tx timeout [ 1514.660890][T20933] block nbd0: NBD_DISCONNECT [ 1514.701398][T20937] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12022'. [ 1514.723734][T20933] block nbd0: Send disconnect failed -32 [ 1514.745989][T20933] block nbd0: shutting down sockets [ 1514.861531][T20942] netlink: 'syz.2.12024': attribute type 5 has an invalid length. [ 1515.293032][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1515.337722][T20962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12028'. [ 1515.746911][T20982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12032'. [ 1515.879088][T20982] bridge0: port 4(macvtap1) entered blocking state [ 1515.887475][T20982] bridge0: port 4(macvtap1) entered disabled state [ 1515.895049][T20982] macvtap1: entered allmulticast mode [ 1515.900722][T20982] bridge0: entered allmulticast mode [ 1515.917168][T20982] macvtap1: left allmulticast mode [ 1515.927349][T20982] bridge0: left allmulticast mode [ 1515.940731][T20994] netlink: 'syz.0.12035': attribute type 8 has an invalid length. [ 1515.949236][T20994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12035'. [ 1515.996741][ T5269] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1516.019005][T17409] veth0_to_team: left promiscuous mode [ 1516.024691][T17409] veth1_macvtap: left promiscuous mode [ 1516.030244][T17409] veth0_macvtap: left promiscuous mode [ 1516.037602][T17409] veth1_vlan: left promiscuous mode [ 1516.044498][T17409] veth0_vlan: left promiscuous mode [ 1516.346462][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1517.060918][T17409] IPVS: stop unused estimator thread 0... [ 1517.171783][T21012] syzkaller0: entered promiscuous mode [ 1517.195820][T21012] syzkaller0: entered allmulticast mode [ 1517.338511][T21012] tipc: Started in network mode [ 1517.343947][T21012] tipc: Node identity 5e9edee5fe57, cluster identity 4711 [ 1517.354724][T21012] tipc: Enabled bearer , priority 0 [ 1517.373022][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1517.395178][T21012] tipc: Resetting bearer [ 1517.410650][T21011] tipc: Resetting bearer [ 1517.471638][T21011] tipc: Disabling bearer [ 1517.675711][T21035] tipc: Cannot configure node identity twice [ 1517.684635][T21035] tipc: Cannot configure node identity twice [ 1518.045249][T21049] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12046'. [ 1518.120152][T21049] ovs-system: left promiscuous mode [ 1518.136357][T21049] Virtual device ovs-system asks to queue packet! [ 1518.161964][T21058] netlink: 'syz.1.12049': attribute type 1 has an invalid length. [ 1518.321933][T21053] ip_tables: iptables: counters copy to user failed while replacing table [ 1518.334638][T21053] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12047'. [ 1518.423280][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1518.486614][T21069] netlink: 'syz.5.12050': attribute type 1 has an invalid length. [ 1518.515536][T21069] netlink: 200 bytes leftover after parsing attributes in process `syz.5.12050'. [ 1518.545874][T20663] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1518.571465][T20663] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1518.609735][T20663] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1518.651030][T20663] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1518.675820][T20663] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1518.758568][T20663] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1518.800804][T20663] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1518.830334][T20663] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1519.124370][T20663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1519.200233][T20663] 8021q: adding VLAN 0 to HW filter on device team0 [ 1519.248789][T17414] bridge0: port 1(bridge_slave_0) entered blocking state [ 1519.256073][T17414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1519.278061][T17414] bridge0: port 2(bridge_slave_1) entered blocking state [ 1519.285343][T17414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1519.452417][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1519.548110][T21116] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12058'. [ 1520.114707][T21145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12064'. [ 1520.296952][T17409] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1520.354396][T21156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12066'. [ 1520.386947][T21156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12066'. [ 1520.492854][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1520.768594][T21176] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12069'. [ 1520.782818][T20663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1520.862693][T21145] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1521.224685][T21196] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12073'. [ 1521.329679][T21201] netlink: 'syz.0.12074': attribute type 1 has an invalid length. [ 1521.360446][T21201] netlink: 236 bytes leftover after parsing attributes in process `syz.0.12074'. [ 1521.532442][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1521.953341][T20663] veth0_vlan: entered promiscuous mode [ 1521.990630][T20663] veth1_vlan: entered promiscuous mode [ 1522.141805][T20663] veth0_macvtap: entered promiscuous mode [ 1522.202413][T21238] bridge0: entered promiscuous mode [ 1522.207829][T21238] bridge0: entered allmulticast mode [ 1522.230773][T20663] veth1_macvtap: entered promiscuous mode [ 1522.487623][T20663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1522.539940][T20663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1522.572848][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1522.670664][T21254] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12083'. [ 1522.680028][T27507] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1522.743854][T17416] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1522.805374][T17409] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1522.964927][T27507] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1523.030461][T17416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1523.040496][T21260] netlink: 36 bytes leftover after parsing attributes in process `syz.5.12084'. [ 1523.078875][T17416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1523.186543][T27495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1523.220646][T27495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1523.405078][T21268] openvswitch: netlink: ct_state flags 806d0004 unsupported [ 1523.432068][T21270] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12086'. [ 1523.612386][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1524.653562][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1524.937856][T21319] siw: device registration error -23 [ 1525.208100][ T673] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1525.250051][ T673] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1525.261715][ T673] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1525.280069][ T673] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1525.288617][ T673] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1525.581205][T21334] veth0_to_bridge: entered promiscuous mode [ 1525.610458][T21334] macsec1: entered allmulticast mode [ 1525.635882][T21334] veth0_to_bridge: entered allmulticast mode [ 1525.686902][T21334] veth0_to_bridge: left allmulticast mode [ 1525.693029][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1525.722746][T21334] veth0_to_bridge: left promiscuous mode [ 1526.101768][T21361] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1526.268373][T21368] netlink: 36 bytes leftover after parsing attributes in process `syz.5.12104'. [ 1526.482940][T27495] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1526.520406][T27495] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.732717][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1526.835252][T27495] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1526.859923][T27495] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1527.150940][T27495] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1527.178697][T27495] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1527.354688][T21403] netlink: 'syz.2.12107': attribute type 10 has an invalid length. [ 1527.374339][ T50] Bluetooth: hci2: command tx timeout [ 1527.406645][T27495] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1527.417276][T27495] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1527.505070][T21403] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1527.772383][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1528.011033][T27495] erspan0: left allmulticast mode [ 1528.025397][T27495] erspan0: left promiscuous mode [ 1528.040935][T27495] bridge4: port 1(erspan0) entered disabled state [ 1528.822856][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1528.873877][T27495] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1528.950961][T27495] bond0 (unregistering): Released all slaves [ 1528.964447][T27495] bond1 (unregistering): Released all slaves [ 1528.990934][T27495] bond2 (unregistering): Released all slaves [ 1529.017031][T27495] bond3 (unregistering): Released all slaves [ 1529.033971][T27495] bond4 (unregistering): Released all slaves [ 1529.051040][T27495] bond5 (unregistering): Released all slaves [ 1529.077734][T27495] bond6 (unregistering): Released all slaves [ 1529.095239][T27495] bond7 (unregistering): Released all slaves [ 1529.119617][T27495] bond8 (unregistering): Released all slaves [ 1529.138669][T27495] bond9 (unregistering): Released all slaves [ 1529.157947][T27495] bond10 (unregistering): Released all slaves [ 1529.191627][T27495] bond11 (unregistering): Released all slaves [ 1529.211997][T27495] bond12 (unregistering): Released all slaves [ 1529.452274][ T50] Bluetooth: hci2: command tx timeout [ 1529.498802][T21458] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1529.533355][T21457] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1529.797561][T27495] tipc: Left network mode [ 1529.852384][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1529.888734][T27495] IPVS: stopping backup sync thread 13988 ... [ 1530.180335][T21475] nbd0: detected capacity change from 0 to 63 [ 1530.196196][T21483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12121'. [ 1530.336008][T21483] bond1: option ad_actor_sys_prio: invalid value (0) [ 1530.352741][T21491] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12124'. [ 1530.362064][T21483] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1530.401226][T21483] bond1 (unregistering): Released all slaves [ 1530.637321][ T50] block nbd0: Receive control failed (result -104) [ 1530.846101][T21506] netlink: 144 bytes leftover after parsing attributes in process `syz.4.12125'. [ 1530.893925][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1531.079334][T21509] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12122'. [ 1531.340605][T21530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12128'. [ 1531.380518][T21530] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12128'. [ 1531.420309][T21325] bridge0: port 1(bridge_slave_0) entered blocking state [ 1531.441124][T21325] bridge0: port 1(bridge_slave_0) entered disabled state [ 1531.475011][T21325] bridge_slave_0: entered allmulticast mode [ 1531.496874][T21325] bridge_slave_0: entered promiscuous mode [ 1531.510349][T21325] bridge0: port 2(bridge_slave_1) entered blocking state [ 1531.528049][T21325] bridge0: port 2(bridge_slave_1) entered disabled state [ 1531.542693][ T50] Bluetooth: hci2: command tx timeout [ 1531.556172][T21325] bridge_slave_1: entered allmulticast mode [ 1531.605325][T21325] bridge_slave_1: entered promiscuous mode [ 1531.783702][T21551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12131'. [ 1531.828698][ T5269] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1531.924397][T21544] syzkaller0: entered promiscuous mode [ 1531.930077][T21544] syzkaller0: entered allmulticast mode [ 1531.944037][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1532.042244][T21325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1532.080522][T21556] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12133'. [ 1532.977814][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1533.622430][ T50] Bluetooth: hci2: command tx timeout [ 1534.017516][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1535.059532][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1535.518633][T21325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1535.769995][T21580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12139'. [ 1535.804444][T21580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12139'. [ 1535.821215][T21325] team0: Port device team_slave_0 added [ 1535.838831][T21325] team0: Port device team_slave_1 added [ 1536.072314][T21325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1536.093254][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1536.115039][T21325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1536.166746][T21325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1536.237243][T27495] [ 1536.239642][T27495] ====================================================== [ 1536.240874][T21598] sctp: [Deprecated]: syz.4.12143 (pid 21598) Use of int in max_burst socket option. [ 1536.240874][T21598] Use struct sctp_assoc_value instead [ 1536.246685][T27495] WARNING: possible circular locking dependency detected [ 1536.246712][T27495] syzkaller #0 Not tainted [ 1536.246723][T27495] ------------------------------------------------------ [ 1536.246733][T27495] kworker/u8:16/27495 is trying to acquire lock: [ 1536.246745][T27495] ffff88801c295210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x6d/0x170 [ 1536.246844][T27495] [ 1536.246844][T27495] but task is already holding lock: [ 1536.246853][T27495] ffff88801c295180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0x76/0x800 [ 1536.246900][T27495] [ 1536.246900][T27495] which lock already depends on the new lock. [ 1536.246900][T27495] [ 1536.324219][T27495] [ 1536.324219][T27495] the existing dependency chain (in reverse order) is: [ 1536.333251][T27495] [ 1536.333251][T27495] -> #11 (&root->kernfs_rwsem){++++}-{4:4}: [ 1536.341356][T27495] down_write+0x96/0x200 [ 1536.346146][T27495] kernfs_add_one+0x41/0x5e0 [ 1536.351280][T27495] kernfs_create_dir_ns+0x1a1/0x230 [ 1536.357025][T27495] internal_create_group+0x440/0x1180 [ 1536.362977][T27495] cpuhp_invoke_callback+0x434/0x810 [ 1536.368810][T27495] cpuhp_issue_call+0x3f0/0x750 [ 1536.374196][T27495] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 1536.380811][T27495] __cpuhp_setup_state+0x3f/0x60 [ 1536.386286][T27495] do_one_initcall+0x250/0x870 [ 1536.391588][T27495] do_initcall_level+0x10a/0x1a0 [ 1536.397189][T27495] do_initcalls+0x59/0xa0 [ 1536.402053][T27495] kernel_init_freeable+0x29d/0x3e0 [ 1536.407810][T27495] kernel_init+0x1d/0x1d0 [ 1536.412684][T27495] ret_from_fork+0x514/0xb70 [ 1536.417859][T27495] ret_from_fork_asm+0x1a/0x30 [ 1536.423186][T27495] [ 1536.423186][T27495] -> #10 (cpuhp_state_mutex){+.+.}-{4:4}: [ 1536.431141][T27495] [ 1536.431141][T27495] -> #9 (cpu_hotplug_lock){++++}-{0:0}: [ 1536.438892][T27495] cpus_read_lock+0x42/0x160 [ 1536.444030][T27495] static_key_slow_inc+0x12/0x30 [ 1536.449545][T27495] ipv6_flowlabel_opt+0x1cb1/0x2ae0 [ 1536.455359][T27495] do_ipv6_setsockopt+0xdff/0x3180 [ 1536.461071][T27495] ipv6_setsockopt+0x59/0x170 [ 1536.466284][T27495] do_sock_setsockopt+0x17c/0x1b0 [ 1536.471843][T27495] __x64_sys_setsockopt+0x13d/0x1b0 [ 1536.477576][T27495] do_syscall_64+0x174/0x580 [ 1536.482716][T27495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.489150][T27495] [ 1536.489150][T27495] -> #8 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1536.496904][T27495] lock_sock_nested+0x41/0x100 [ 1536.502244][T27495] tls_sw_sendmsg+0x15f/0x2b50 [ 1536.507637][T27495] sock_sendmsg_nosec+0x90/0x180 [ 1536.513124][T27495] sock_write_iter+0x2de/0x3e0 [ 1536.518428][T27495] do_iter_readv_writev+0x612/0x8c0 [ 1536.524169][T27495] vfs_writev+0x343/0x990 [ 1536.529043][T27495] do_writev+0x154/0x2e0 [ 1536.533845][T27495] do_syscall_64+0x174/0x580 [ 1536.538995][T27495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.545431][T27495] [ 1536.545431][T27495] -> #7 (&ctx->tx_lock){+.+.}-{4:4}: [ 1536.552925][T27495] __mutex_lock+0x19d/0x1550 [ 1536.558074][T27495] tls_sw_sendmsg+0x13a/0x2b50 [ 1536.563376][T27495] sock_sendmsg_nosec+0x90/0x180 [ 1536.568855][T27495] sock_sendmsg+0x1ca/0x2d0 [ 1536.573912][T27495] __sock_xmit+0x245/0x4f0 [ 1536.579005][T27495] nbd_disconnect+0x3ad/0x560 [ 1536.584243][T27495] nbd_disconnect_and_put+0x32/0x280 [ 1536.590077][T27495] nbd_genl_disconnect+0x4af/0x590 [ 1536.595741][T27495] genl_family_rcv_msg_doit+0x233/0x340 [ 1536.601838][T27495] genl_rcv_msg+0x614/0x7a0 [ 1536.606906][T27495] netlink_rcv_skb+0x226/0x4a0 [ 1536.612213][T27495] genl_rcv+0x28/0x40 [ 1536.616743][T27495] netlink_unicast+0x7bb/0x940 [ 1536.622043][T27495] netlink_sendmsg+0x813/0xb40 [ 1536.627344][T27495] sock_sendmsg_nosec+0x13a/0x180 [ 1536.632912][T27495] ____sys_sendmsg+0x54e/0x850 [ 1536.638219][T27495] ___sys_sendmsg+0x2a5/0x360 [ 1536.643432][T27495] __x64_sys_sendmsg+0x1b1/0x290 [ 1536.648906][T27495] do_syscall_64+0x174/0x580 [ 1536.654042][T27495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.660477][T27495] [ 1536.660477][T27495] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1536.668145][T27495] __mutex_lock+0x19d/0x1550 [ 1536.673285][T27495] nbd_queue_rq+0x373/0x1150 [ 1536.678419][T27495] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1536.684620][T27495] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1536.691529][T27495] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1536.698050][T27495] blk_mq_run_work_fn+0x16c/0x300 [ 1536.703618][T27495] process_scheduled_works+0xa8e/0x14e0 [ 1536.709698][T27495] worker_thread+0xa47/0xfb0 [ 1536.714847][T27495] kthread+0x388/0x470 [ 1536.719459][T27495] ret_from_fork+0x514/0xb70 [ 1536.724592][T27495] ret_from_fork_asm+0x1a/0x30 [ 1536.729901][T27495] [ 1536.729901][T27495] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1536.737133][T27495] __mutex_lock+0x19d/0x1550 [ 1536.742278][T27495] nbd_queue_rq+0xc1/0x1150 [ 1536.747344][T27495] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1536.753474][T27495] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1536.760361][T27495] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1536.766911][T27495] blk_mq_run_work_fn+0x16c/0x300 [ 1536.772497][T27495] process_scheduled_works+0xa8e/0x14e0 [ 1536.778599][T27495] worker_thread+0xa47/0xfb0 [ 1536.783732][T27495] kthread+0x388/0x470 [ 1536.788346][T27495] ret_from_fork+0x514/0xb70 [ 1536.793743][T27495] ret_from_fork_asm+0x1a/0x30 [ 1536.799055][T27495] [ 1536.799055][T27495] -> #4 (set->srcu){.+.+}-{0:0}: [ 1536.806217][T27495] __synchronize_srcu+0xc9/0x2f0 [ 1536.811710][T27495] elevator_switch+0x1e8/0x7b0 [ 1536.817107][T27495] elevator_change+0x2fa/0x480 [ 1536.822444][T27495] elevator_set_default+0x375/0x440 [ 1536.828188][T27495] blk_register_queue+0x3f3/0x4e0 [ 1536.833839][T27495] __add_disk+0x6cb/0xe30 [ 1536.838736][T27495] add_disk_fwnode+0x100/0x3a0 [ 1536.844042][T27495] nbd_dev_add+0x733/0xb60 [ 1536.849010][T27495] nbd_init+0x15f/0x1e0 [ 1536.853790][T27495] do_one_initcall+0x250/0x870 [ 1536.859124][T27495] do_initcall_level+0x10a/0x1a0 [ 1536.864594][T27495] do_initcalls+0x59/0xa0 [ 1536.869462][T27495] kernel_init_freeable+0x29d/0x3e0 [ 1536.875218][T27495] kernel_init+0x1d/0x1d0 [ 1536.880105][T27495] ret_from_fork+0x514/0xb70 [ 1536.885248][T27495] ret_from_fork_asm+0x1a/0x30 [ 1536.890560][T27495] [ 1536.890560][T27495] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1536.898408][T27495] __mutex_lock+0x19d/0x1550 [ 1536.903553][T27495] elevator_change+0x1af/0x480 [ 1536.908860][T27495] elevator_set_none+0xb5/0x140 [ 1536.914258][T27495] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1536.920607][T27495] nbd_start_device+0x189/0xb30 [ 1536.926009][T27495] nbd_genl_connect+0x1597/0x1c10 [ 1536.931572][T27495] genl_family_rcv_msg_doit+0x233/0x340 [ 1536.937682][T27495] genl_rcv_msg+0x614/0x7a0 [ 1536.942740][T27495] netlink_rcv_skb+0x226/0x4a0 [ 1536.948045][T27495] genl_rcv+0x28/0x40 [ 1536.952568][T27495] netlink_unicast+0x7bb/0x940 [ 1536.957878][T27495] netlink_sendmsg+0x813/0xb40 [ 1536.963190][T27495] sock_sendmsg_nosec+0x13a/0x180 [ 1536.968758][T27495] ____sys_sendmsg+0x54e/0x850 [ 1536.974057][T27495] ___sys_sendmsg+0x2a5/0x360 [ 1536.979278][T27495] __x64_sys_sendmsg+0x1b1/0x290 [ 1536.984755][T27495] do_syscall_64+0x174/0x580 [ 1536.989897][T27495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.996332][T27495] [ 1536.996332][T27495] -> #2 (&q->q_usage_counter(io)#93){++++}-{0:0}: [ 1537.004959][T27495] blk_alloc_queue+0x544/0x690 [ 1537.010262][T27495] __blk_mq_alloc_disk+0x194/0x390 [ 1537.015912][T27495] nbd_dev_add+0x494/0xb60 [ 1537.020876][T27495] nbd_genl_connect+0x992/0x1c10 [ 1537.026369][T27495] genl_family_rcv_msg_doit+0x233/0x340 [ 1537.032462][T27495] genl_rcv_msg+0x614/0x7a0 [ 1537.037507][T27495] netlink_rcv_skb+0x226/0x4a0 [ 1537.042810][T27495] genl_rcv+0x28/0x40 [ 1537.047339][T27495] netlink_unicast+0x7bb/0x940 [ 1537.052642][T27495] netlink_sendmsg+0x813/0xb40 [ 1537.057961][T27495] sock_sendmsg_nosec+0x13a/0x180 [ 1537.063527][T27495] ____sys_sendmsg+0x54e/0x850 [ 1537.068833][T27495] ___sys_sendmsg+0x2a5/0x360 [ 1537.074042][T27495] __x64_sys_sendmsg+0x1b1/0x290 [ 1537.079515][T27495] do_syscall_64+0x174/0x580 [ 1537.084651][T27495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1537.091081][T27495] [ 1537.091081][T27495] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1537.098310][T27495] fs_reclaim_acquire+0x71/0x100 [ 1537.103793][T27495] kmem_cache_alloc_noprof+0x64/0x5f0 [ 1537.109786][T27495] __kernfs_iattrs+0xdd/0x380 [ 1537.115002][T27495] kernfs_iop_setattr+0xe6/0x3f0 [ 1537.120502][T27495] notify_change+0xbba/0xea0 [ 1537.125649][T27495] do_truncate+0x1c2/0x250 [ 1537.130607][T27495] path_openat+0x2fed/0x3830 [ 1537.135743][T27495] do_file_open+0x23e/0x4a0 [ 1537.140792][T27495] do_sys_openat2+0x115/0x200 [ 1537.146005][T27495] __x64_sys_openat+0x138/0x170 [ 1537.151390][T27495] do_syscall_64+0x174/0x580 [ 1537.156530][T27495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1537.162964][T27495] [ 1537.162964][T27495] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 1537.171488][T27495] __lock_acquire+0x1520/0x2cf0 [ 1537.176881][T27495] lock_acquire+0x106/0x350 [ 1537.181926][T27495] down_write+0x96/0x200 [ 1537.186723][T27495] kernfs_unlink_sibling+0x6d/0x170 [ 1537.192468][T27495] kernfs_rename_ns+0x48e/0x800 [ 1537.197857][T27495] sysfs_rename_link_ns+0x16e/0x1b0 [ 1537.203594][T27495] device_rename+0x110/0x210 [ 1537.208824][T27495] __dev_change_net_namespace+0x1392/0x1de0 [ 1537.215290][T27495] cfg802154_switch_netns+0xbd/0x410 [ 1537.221166][T27495] cfg802154_pernet_exit+0x75/0xc0 [ 1537.226824][T27495] ops_undo_list+0x43d/0x8d0 [ 1537.231993][T27495] cleanup_net+0x572/0x810 [ 1537.236947][T27495] process_scheduled_works+0xa8e/0x14e0 [ 1537.243027][T27495] worker_thread+0xa47/0xfb0 [ 1537.248152][T27495] kthread+0x388/0x470 [ 1537.252766][T27495] ret_from_fork+0x514/0xb70 [ 1537.257912][T27495] ret_from_fork_asm+0x1a/0x30 [ 1537.263223][T27495] [ 1537.263223][T27495] other info that might help us debug this: [ 1537.263223][T27495] [ 1537.273463][T27495] Chain exists of: [ 1537.273463][T27495] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 1537.273463][T27495] [ 1537.287906][T27495] Possible unsafe locking scenario: [ 1537.287906][T27495] [ 1537.295371][T27495] CPU0 CPU1 [ 1537.300754][T27495] ---- ---- [ 1537.306129][T27495] lock(&root->kernfs_rwsem); [ 1537.310918][T27495] lock(cpuhp_state_mutex); [ 1537.318050][T27495] lock(&root->kernfs_rwsem); [ 1537.325351][T27495] lock(&root->kernfs_iattr_rwsem); [ 1537.330654][T27495] [ 1537.330654][T27495] *** DEADLOCK *** [ 1537.330654][T27495] [ 1537.338809][T27495] 5 locks held by kworker/u8:16/27495: [ 1537.344275][T27495] #0: ffff88801c296140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1537.355173][T27495] #1: ffffc9000fa4fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1537.365717][T27495] #2: ffffffff90019308 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1537.375047][T27495] #3: ffffffff90027ec0 (rtnl_mutex){+.+.}-{4:4}, at: cfg802154_pernet_exit+0x18/0xc0 [ 1537.384641][T27495] #4: ffff88801c295180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0x76/0x800 [ 1537.394666][T27495] [ 1537.394666][T27495] stack backtrace: [ 1537.400569][T27495] CPU: 1 UID: 0 PID: 27495 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT(full) [ 1537.400589][T27495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1537.400602][T27495] Workqueue: netns cleanup_net [ 1537.400621][T27495] Call Trace: [ 1537.400629][T27495] [ 1537.400637][T27495] dump_stack_lvl+0xe8/0x150 [ 1537.400671][T27495] print_circular_bug+0x2e1/0x300 [ 1537.400700][T27495] check_noncircular+0x12e/0x150 [ 1537.400728][T27495] __lock_acquire+0x1520/0x2cf0 [ 1537.400752][T27495] ? __lock_acquire+0x683/0x2cf0 [ 1537.400774][T27495] ? __lock_acquire+0x683/0x2cf0 [ 1537.400798][T27495] ? kernfs_unlink_sibling+0x6d/0x170 [ 1537.400815][T27495] lock_acquire+0x106/0x350 [ 1537.400835][T27495] ? kernfs_unlink_sibling+0x6d/0x170 [ 1537.400857][T27495] down_write+0x96/0x200 [ 1537.400873][T27495] ? kernfs_unlink_sibling+0x6d/0x170 [ 1537.400888][T27495] ? __pfx_down_write+0x10/0x10 [ 1537.400904][T27495] ? kernfs_root+0x1c/0x230 [ 1537.400931][T27495] ? kernfs_root+0x1c/0x230 [ 1537.400953][T27495] ? kernfs_root+0x1c/0x230 [ 1537.400974][T27495] ? kernfs_root+0x1ea/0x230 [ 1537.400997][T27495] kernfs_unlink_sibling+0x6d/0x170 [ 1537.401014][T27495] kernfs_rename_ns+0x48e/0x800 [ 1537.401033][T27495] sysfs_rename_link_ns+0x16e/0x1b0 [ 1537.401058][T27495] device_rename+0x110/0x210 [ 1537.401077][T27495] __dev_change_net_namespace+0x1392/0x1de0 [ 1537.401100][T27495] ? ktime_get+0x45/0x220 [ 1537.401156][T27495] ? __pfx___dev_change_net_namespace+0x10/0x10 [ 1537.401182][T27495] ? irqentry_exit+0x218/0x8f0 [ 1537.401206][T27495] ? lockdep_hardirqs_on+0x7a/0x110 [ 1537.401229][T27495] ? irqentry_exit+0x218/0x8f0 [ 1537.401252][T27495] ? trace_irq_disable+0x3b/0x140 [ 1537.401281][T27495] ? _raw_spin_unlock_irqrestore+0x47/0x80 [ 1537.401305][T27495] ? __mutex_lock+0x1092/0x1550 [ 1537.401332][T27495] ? __mutex_lock+0x5d4/0x1550 [ 1537.401357][T27495] ? cfg802154_pernet_exit+0x18/0xc0 [ 1537.401379][T27495] ? __pfx___mutex_lock+0x10/0x10 [ 1537.401409][T27495] cfg802154_switch_netns+0xbd/0x410 [ 1537.401432][T27495] cfg802154_pernet_exit+0x75/0xc0 [ 1537.401453][T27495] ops_undo_list+0x43d/0x8d0 [ 1537.401471][T27495] ? __pfx_ops_undo_list+0x10/0x10 [ 1537.401487][T27495] ? idr_destroy+0x227/0x290 [ 1537.401513][T27495] cleanup_net+0x572/0x810 [ 1537.401529][T27495] ? __pfx_cleanup_net+0x10/0x10 [ 1537.401546][T27495] ? rcu_is_watching+0x15/0xb0 [ 1537.401571][T27495] ? process_scheduled_works+0xa20/0x14e0 [ 1537.401588][T27495] process_scheduled_works+0xa8e/0x14e0 [ 1537.401616][T27495] ? __pfx_process_scheduled_works+0x10/0x10 [ 1537.401636][T27495] ? assign_work+0x3cf/0x5d0 [ 1537.401654][T27495] worker_thread+0xa47/0xfb0 [ 1537.401678][T27495] ? __kthread_parkme+0x71/0x1f0 [ 1537.401701][T27495] kthread+0x388/0x470 [ 1537.401722][T27495] ? __pfx_worker_thread+0x10/0x10 [ 1537.401745][T27495] ? __pfx_kthread+0x10/0x10 [ 1537.401767][T27495] ret_from_fork+0x514/0xb70 [ 1537.401790][T27495] ? __pfx_ret_from_fork+0x10/0x10 [ 1537.401812][T27495] ? __switch_to+0xc89/0x1420 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1537.401831][T27495] ? __pfx_kthread+0x10/0x10 [ 1537.401853][T27495] ret_from_fork_asm+0x1a/0x30 [ 1537.401883][T27495] [ 1537.706739][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1537.807390][T21600] Cannot find add_set index 0 as target [ 1537.971229][T27495] dummy0: left allmulticast mode [ 1538.000100][T27495] veth1_macvtap: left promiscuous mode [ 1538.005718][T27495] veth0_macvtap: left promiscuous mode [ 1538.011311][T27495] veth1_vlan: left promiscuous mode [ 1538.016615][T27495] veth0_vlan: left promiscuous mode [ 1538.518720][T21325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1538.525771][T21325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1538.552288][T21325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1538.630294][ T5269] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1538.732302][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1539.000370][T27495] IPVS: stop unused estimator thread 0... [ 1539.365015][ T5269] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1539.578147][T27495] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1539.640088][T27495] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1539.688106][T27495] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1539.728061][T27495] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1539.743252][ T5269] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1539.772812][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1539.838061][T27495] vlan1: left allmulticast mode [ 1539.852882][T27495] dummy0: left allmulticast mode [ 1539.864366][T27495] vlan1: left promiscuous mode [ 1539.870336][T27495] dummy0: left promiscuous mode [ 1539.877512][T27495] bridge0: port 3(vlan1) entered disabled state [ 1539.885720][T27495] bridge_slave_1: left allmulticast mode [ 1539.891467][T27495] bridge_slave_1: left promiscuous mode [ 1539.898492][T27495] bridge0: port 2(bridge_slave_1) entered disabled state [ 1539.907119][T27495] bridge_slave_0: left allmulticast mode [ 1539.913731][T27495] bridge_slave_0: left promiscuous mode [ 1539.919505][T27495] bridge0: port 1(bridge_slave_0) entered disabled state [ 1539.935892][T27495] bridge_slave_1: left allmulticast mode [ 1539.941634][T27495] bridge_slave_1: left promiscuous mode [ 1539.949018][T27495] bridge0: port 2(bridge_slave_1) entered disabled state [ 1539.958198][T27495] bridge_slave_0: left allmulticast mode [ 1539.964472][T27495] bridge_slave_0: left promiscuous mode [ 1539.970310][T27495] bridge0: port 1(bridge_slave_0) entered disabled state [ 1540.073894][T27495] bond4 (unregistering): (slave xfrm1): Releasing backup interface [ 1540.142478][T27495] gretap0 (unregistering): left promiscuous mode [ 1540.198660][T17416] smc: removing ib device syz0 [ 1540.206441][T27495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1540.226471][T27495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1540.238433][T27495] bond0 (unregistering): Released all slaves [ 1540.248438][T27495] bond1 (unregistering): Released all slaves [ 1540.265706][T27495] bond3 (unregistering): Released all slaves [ 1540.278075][T27495] bond2 (unregistering): Released all slaves [ 1540.291467][T27495] bond4 (unregistering): Released all slaves [ 1540.311066][T27495] bond5 (unregistering): Released all slaves [ 1540.397315][T17414] smbdirect: ib_dev[syz1] removed [ 1540.406521][T27495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1540.432905][T27495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1540.445861][T27495] bond0 (unregistering): (slave team0): Releasing backup interface [ 1540.461546][T27495] bond0 (unregistering): Released all slaves [ 1540.475190][T27495] bond1 (unregistering): Released all slaves [ 1540.501267][T17416] smbdirect: ib_dev[syz0] removed [ 1540.812449][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1541.852714][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1541.900408][T27495] tipc: Disabling bearer [ 1541.914948][T27495] tipc: Left network mode [ 1541.939409][T27495] tipc: Disabling bearer [ 1541.945032][T27495] tipc: Left network mode [ 1542.340901][T27495] C: left promiscuous mode [ 1542.347643][T27495] hsr_slave_0: left promiscuous mode [ 1542.357875][T27495] hsr_slave_1: left promiscuous mode [ 1542.367479][T27495] hsr_slave_0: left promiscuous mode [ 1542.374109][T27495] hsr_slave_1: left promiscuous mode [ 1542.380032][T27495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1542.388983][T27495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1542.397092][T27495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1542.406338][T27495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1542.419369][T27495] veth1_macvtap: left promiscuous mode [ 1542.425325][T27495] veth0_macvtap: left promiscuous mode [ 1542.430903][T27495] veth1_vlan: left promiscuous mode [ 1542.436273][T27495] veth0_vlan: left promiscuous mode [ 1542.594000][T27495] team0 (unregistering): Port device team_slave_1 removed [ 1542.674543][T27495] team0 (unregistering): Port device dummy0 removed [ 1542.774344][T27495] team0 (unregistering): Port device team_slave_1 removed [ 1542.788715][T27495] team0 (unregistering): Port device team_slave_0 removed [ 1542.839740][ T5269] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1542.892526][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1543.228111][ T5269] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1543.384426][T27495] IPVS: stop unused estimator thread 0... [ 1543.476480][T27495] bridge_slave_1: left allmulticast mode [ 1543.483908][T27495] bridge_slave_1: left promiscuous mode [ 1543.489684][T27495] bridge0: port 2(bridge_slave_1) entered disabled state [ 1543.499391][T27495] bridge_slave_0: left allmulticast mode [ 1543.507209][T27495] bridge_slave_0: left promiscuous mode [ 1543.513457][T27495] bridge0: port 1(bridge_slave_0) entered disabled state [ 1543.549494][T27495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1543.569293][T27495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1543.579614][T27495] bond0 (unregistering): Released all slaves [ 1543.604786][ T5269] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1543.653669][T27495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1543.663082][T27495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1543.684713][T27495] team0 (unregistering): Port device team_slave_1 removed [ 1543.700513][T27495] team0 (unregistering): Port device team_slave_0 removed [ 1543.932957][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1543.973097][ T5269] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1544.092763][ C1] lwtunnel_output(): recursion limit reached on datapath [ 1544.246114][ T5269] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1544.509636][ T5269] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1544.781721][ T5269] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1544.972503][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1545.055068][ T5269] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1546.013921][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available