last executing test programs: 8.96352748s ago: executing program 2 (id=8401): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000058000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000409500000000000000b7020000000000007b9af8ff00000000b5090000010000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018090000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007ea000000000000056080000000000008500000081000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.719789264s ago: executing program 2 (id=8405): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r5, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r6, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syzkaller0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'virt_wifi0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0xc840) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x17, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x44004}, 0x8094) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000040)=@routing={0x2f, 0x8, 0x0, 0xff, 0x0, [@local, @loopback, @local, @dev={0xfe, 0x80, '\x00', 0x3b}]}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) (async) socket$igmp6(0xa, 0x3, 0x2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r5, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r6, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syzkaller0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'virt_wifi0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0xc840) (async) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x17, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x44004}, 0x8094) (async) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000040)=@routing={0x2f, 0x8, 0x0, 0xff, 0x0, [@local, @loopback, @local, @dev={0xfe, 0x80, '\x00', 0x3b}]}, 0x48) (async) 8.507978001s ago: executing program 2 (id=8408): unshare(0x6a040000) r0 = socket(0x9, 0x4, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)=ANY=[@ANYBLOB="3800000040000100fcff0700040000000100000004004880140001801000108004000f8005000400000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000000)={0x1, 0x1}, 0x2) unshare(0x20000) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0x20, 0x30bd27, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c011}, 0x48d5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x0, [0x4, 0x400, 0xac5]}, &(0x7f00000003c0)=0x44) 6.168047516s ago: executing program 4 (id=8421): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000001b80)={0x2, 'batadv0\x00', 0x3}, 0x18) (async) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1}, 0x94) 5.929489177s ago: executing program 4 (id=8422): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r0, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780), 0x0, 0x0, 0x61, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r0, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780), 0x0, 0x0, 0x61, 0x8, 0x0, 0x0}}, 0x10) 5.839252041s ago: executing program 4 (id=8424): getpid() r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/1, 0x1}, {&(0x7f0000000180)=""/248, 0xf8}], 0x2}, 0x40001020) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x7, 0x61, 0x11, 0x69}}, &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000}, 0x94) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) 4.868682141s ago: executing program 4 (id=8430): socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r1, &(0x7f0000001940)={0xa, 0xfffe, 0x1005, @mcast2, 0x9}, 0x1c) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000300)=0x2, 0x4) sendmmsg$inet6(r1, &(0x7f0000006440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x48000) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x10, 0x803, 0x2) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f00000002c0)={0x0, 0x101}, &(0x7f0000000340)=0x8) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYRES16=r7], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r4}) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r11, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r8}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r12, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r13 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r13, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 3.986754241s ago: executing program 4 (id=8434): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000004440)=[{{&(0x7f0000000380)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256-ce)\x00'}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000400)="ef0b8f", 0x3}, {&(0x7f00000005c0)="91c708f6c02399172e8414dc1f7d1b0c3fb7194c582c7a72463074ad60a02221b0222bbf2ce66d4659794015521b074720379c448f9c9df662372741847b12694d168e1a080215af0e104346792f7facb6869aaea0e0cc", 0x57}, {&(0x7f0000000640)="7f3c31e532c09effdfc749f999171dd9c18c6a6d5c65ac33e0f375fb2140", 0x1e}, {&(0x7f00000006c0)="7e43ab9fbacb02f5e21b110a16ff7e2cf935ccc857f5b930f7b69b26377d134cbbaa73f4f01d7d286f2d165f5d161a496a51f4113dd41ac73517c371b54d1b178f0f76e0253d6f44fca502c47814af4bc695a833ed793e0ea28ec4b4fd7af47c15502313b2e6bc3d2c6b3dae56a0012e2f98b08b53f267ac64c61e9af459e475fef37a15b589fcc38babf5cbe3ebd6ee3ae6280cc9635a254d49070d817cea5a4c775899dbd92782e67453cc5ef41fc0985f622d30f187bd199dbf834da730ab9f1707d28c33", 0xc6}], 0x4, &(0x7f0000000a00)=[{0x48, 0x1, 0x8, "c00504ba9de66d469af4bba1f34bf76ecb06a605ce48d8a21968f63805625d67c5e66f7bce11e17e8c1fc43af0fc545d1908cdaff355a374"}, {0x88, 0x101, 0x5, "5cb7dc456d3dd8deec3e7e0b147b32435a59494de20d3c9da98a76e28e497f89592df0a3a0622538028262d1d73388ce7a05ea61a73473bb3fa423e83d4cd6797ba879c53a181863c48e44d50c3fe9bce463fd85d440fbd6348bf0fa0f6a05d735da1f860a071bd3cc77fa28b6a890121d57eb595858e7"}, {0x40, 0x118, 0x8, "bef66d5cc7d948131d62811d5c0af2e1779fd1c1e4aa9ea3205d49dd0b848753dd11bf9327212ed51481520f6ad198"}, {0xe8, 0x109, 0x8, "a9247a60a7c68ad98e6e8db1a64e4cc3156bc7db65b8f0da8bbc23b11ff947de0b4faec9907c6289a8976a7596ce716f306e64766ea69c25a017cca73a3b63705682712eb100128e83dbb5bb14c3c4b4ddb8869047a68b4f8cd1c02f408b51049da509d417b9594dc3639897386034356bad71345577931319b069c6805e4fcc69de59b07329c77d43fb820e9a3e251877b59b41f63a1407dbf26a0a9f20de2c03585ae61967837a0458617430954f05065586412538e724f0e43a13dd120437002c7045777f63f2e015f94b3254da6ece7e971672e481"}, {0x18, 0x104, 0x4, "d2fceb"}, {0x1010, 0x10c, 0x80000001, "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"}], 0x1220}}, {{&(0x7f0000001d00)=@x25, 0x80, &(0x7f0000002100)=[{&(0x7f0000001d80)="5ee7e29cc4b91a2cb8c6e1a4a23f418c6dbebb06e55f8044b0b24b64d0b1bce71abfc1998e14ce2425904fdcf2086755cc6708d3342b4a112f57a9e65a6d9de0c7c9c637d4299f9f8f0f6f85b2245e806c22b978b1f2c2119dfc9ae93e81caa0c545388967ac757957687e226d8eca39058e072488c208f868f94219c844e624fee09b8abf8595fde31979c9c2ee42cf5dfbf143adcc6ce4a19d4ef9", 0x9c}, {&(0x7f0000001e40)="3289bd788727bee11c6738cf220365ec3424d158a55210bce8d8301975338c409cce163ff769e42fe1cf40acbf0027a7b368a46a050d17a129ec749a43495ac7673a17da75efb5047ca8addddb73f4e0ca7882779ff87556b1a54b6f599abbf05b4e380f290f030a60b52ad32a6a0da2673edbd9", 0x74}, {&(0x7f0000001f00)="64cd1f092e1198bd2f5e8d63b90fbaa703ec5946e8df20cdfa13469b26ced52358e1c4b97bd551d6b9b43bc8251e351caf61eb7f9ae8e24c7c620d58634c7011514eb47f55b1eb95c45751d44ab8e54b2409b91a0a32ee5c895902d80558690c7ecd0235bc383f17a69b6b2599e6a850bec3c0f714c571137c0fbe7f4787a8270c66f3c637ffa070c36069ede4aaba6d7351edd824a872227db5216f7645976b6da3a456b377a0ba3fd15d021ed451b1c4c3da13d587ec6245b5b1c34a80220220", 0xc1}, {&(0x7f0000002000)="81042a78fe30e7eaac1402d3df4afae29f22cb131bb37d4e5587719c4493f7858e5e1f82002c5fde1c14cb701f6168223a314dc737860f94c8d5d16a09ce9ab3fbcfc0d1e8ffda9c6a2d75d01b22230b9f991ef6e26be655f270462e5f2f89b82ecb7ce5871440ff62087377639a6e327837db363539f8eb7a708206ce6c48063e5b8270614b8632e8b2286219b8a481e65e8520c10e68812bf39f40b9c1ea80e4d16ac28628f992e775dd1c31dd4e6f5775b0f00968ac082234d0e6d28963853c4c4ed9c0f28816e7c5a916b5d7a0f8543f23", 0xd3}], 0x4, &(0x7f00000027c0)=[{0x28, 0x185, 0x1, "b20488ef0e5a5ab0730151a4ba4e87acb6fea0"}, {0x30, 0x10e, 0x7fff, "26d119fc19a225680d6d7ca4daa97d89ba19bf1ac68936601fe6c9f8de1a35f7"}, {0x58, 0x10c, 0x7, "5f29f9642d9aa2554c53b65714cae6c9a23a15a73c7c3b03b741a5b0445fe9981335726eb9473fb07fe8da86108c0b7d7243aec22ef9eccc9c80c59bb13c0196c79307a845"}, {0x100, 0x103, 0x0, "8e5dfd7a94ce97c7934f00160821c5e8368bc706a3e9384c1685748d3039c2d2927e1cb57e4f722291e69aa32c1208d360049f64d6ccc41f61bc9936fef597c944a94c6aa54430d22657518048bd08fe6e1e99cb3bce4aeb6257d7fa656a56f5aa40d5e78084a1a38bcc72e88c6a74811da71dbc8baaebb85df2fb8d275ce52f3a91bb60e9f2d14fe549bd8cc409550a2843618c22dfa618a0a541af8c5bd4a47b454a6cddf3a8fd6ad433fc874df80b726b0098ea18bb0b92276db4156842fbd6cab3a4fef7a57321a4681cd8a4fa9e2a2677edf12eff4d3764a7d17eb7bc1a1760eb6cea2f2a5d93ebad655a86ee"}, {0x38, 0x10c, 0x2, "f162df4433862526b389a87176440fb16fb5f342e94c1021db243500a3625f9d64ba0ae5"}, {0x98, 0x0, 0x0, "a3798c568faf5444616cb074fe2065a56592d715fad2b5ca369fdce9277816cb2728d534fcd06d270f0120e081a39e30aa43a95d1fec90c3465af18ffa17c101329e8bbaf1b309eb3c542f6197f6e906cd962b0c2baa76eb5852876aa3e4843cd22d3a0f2c6b75cc3da5eb82c5c896fbf384b5308f16288f9257771c227eaaf58dde4abbf687"}, {0xd8, 0x110, 0x0, "8e232f57e556fd38b1cba59da8ab9d1d43fba081c865896a94a091183a50b4f645e0efa5b17bcd08cbec3a399814c347fb67da8a0fdeeb3461f5c0dd742703ee44241d210d854050e7fbaf44b92a77c4ca236b6426cb8c93af1e8be0234bc6c297c5098380da0b8b8625c818a070035ba3044ea91af37eb60a3225b0a4efb7fd6e7d009ce29b2cc687102fdf6eeaed02252b2d8851fc687d5e3d4721ff8d6bb4706cfcb5b526a55cb66cff9a744f3a66c3fa43c06641b178fad222f733e44f0e17b81218ea"}, {0x1010, 0x22a, 0x1, "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"}], 0x1368}}, {{&(0x7f0000003cc0)=@hci={0x1f, 0x3}, 0x80, &(0x7f0000003fc0), 0x0, &(0x7f0000004040)=[{0x108, 0x10e, 0x3, "2d14bccb621f28c20e045529b9c89b488a722af42f130bd67d2a898eef6dc21d68b49911e1e5da201719eb48e6bfa4438deb3b3d31638f092720b84ebb50f4f78c79d214daa5cab1db612734747decb028163503ca82a8350dc927360f002a2fd18f103c70bb14da873ab9efc2fe55566b02bdf98b20ccbefccab9398d248a67c89535211c8b984aabdc98f06d1e8a0c34f42fdd0d227fcc33ed47080e0989d199b695a1d2ab6ed83864dc1d6e5d65e5f65fb1d2106a96b697cb1de40bbd0a880a63d3a9df9df0fe2cc0ab7d02b858bdacbbacf20db6b6f4256148ecad02008935c7379f9ef3b4e803da2d3acd9db87f65cb1edb028ff3ab"}], 0x108}}, {{0x0, 0x0, &(0x7f0000004280)=[{&(0x7f0000004180)="28da74424c5638c4f266df26aabb9a93c9bc92d9417cbc5d4aef2609c7a8998dafdffed98cb400a4c6f3767f2e5d8b75a8f561311a75d3af20508948204ed1", 0x3f}, {&(0x7f00000041c0)}, {&(0x7f0000004200)="d28f5ebdfae9318ea20a53015a54870ad6436140278b96b559b0b09c27b7cb1e10e5d8b44d63c2171f2730306b7d215efc3c7be63fe3b36affd7dc73020e601a54c0441714188b73b74247d5056e88e6fe9c913ae28e2b29690b1158724c50eb5a6fdbd991abe58b8b68093949d30ec33654ece413c3362976df5463", 0x7c}], 0x3, &(0x7f00000042c0)=[{0x10, 0x109, 0x9}, {0x20, 0x10e, 0x2, "71f66b69990fab2dbd443e"}, {0x48, 0x196, 0x5, "326101df8d60443cb7d8ed0beb899d5ac7639a3a0b78640901e60fb876a02d12e9483d3fc9556f28a6da35be760d869d5a922f3271bd"}, {0xd0, 0x116, 0x9, "4e23f1ae3178ec51078dea4d991f163340e1169cfe58cefb50be7b1f00ed499e4cb8504d3f35d1da2e08373e627e419cc1a367431644b5609ee6f8c281898254b6dc1711e65ad21c9a8b93380ad9e44a33f268c76c4d7d26ec7535abcf89a79791339eb1dba85322d15b834e859d494daf0792551cd20459072e363af2386d0fb11b98931dbefcea72a3df2f8b2af24bd59396a285ca43ec3b6bd1175761906070afd26d6fb928d0945b64506efd0db55701fa0012cf63f3a3e56aa6f4f8eb"}], 0x148}}], 0x4, 0x800) (async, rerun: 64) sendmmsg$inet(r3, &(0x7f0000002780)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008004) (async, rerun: 64) setsockopt$inet_tcp_buf(r3, 0x6, 0xd, &(0x7f0000000200)="80e4", 0x2) (async) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000006e00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000006dc0)={&(0x7f0000004540)={0x281c, r0, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6d9b0582, 0x7b}}}}, [@NL80211_ATTR_CSA_IES={0x2788, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x6d, 0x5, 0x780]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x9, 0x60, 0xe9a]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x5b, 0x7f, [@link_id={0x65, 0x12, {@from_mac=@broadcast, @broadcast}}, @chsw_timing={0x68, 0x4, {0x7, 0x5}}, @cf={0x4, 0x6, {0x3, 0xa7, 0x5, 0x5}}, @prep={0x83, 0x1f, {{}, 0xf0, 0xb, @device_b, 0x0, @void, 0x401, 0x5, @device_b, 0x8}}, @link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}, @NL80211_ATTR_PROBE_RESP={0x62b, 0x91, "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"}, @NL80211_ATTR_IE={0x19, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0xc, 0x5}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE_PROBE_RESP={0xa, 0x7f, [@chsw_timing={0x68, 0x4, {0xff7f, 0x5}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x12b, 0x80, [@mic={0x8c, 0x18, {0xb15, "6636fa1c703e", @long="0c74b50d67dae632f5fcee643c2130dc"}}, @random={0x0, 0x81, "ea61081c27a7ab9d338cc3b7d2c44e9812208867564544a5e89cc8c7bc87baac9310d4c29ecbbc67f5b12bad68699076719badaa80e62f151ee1bbd6138a5df86b03918797520d6f70cb7bd1097be07dccf4031667d83ae8ef600851bdb8c9deb787fc7f9d55a5f442d23ee6f067bd5e15d85f3a8e3c65ae89c635d58c79ae8978"}, @random_vendor={0xdd, 0x80, "e04f62e14b2c434d3be75f93ca75e0034e2b761a054a5bd4dddbe411b595d864e32a1fabc82830f0c509f35c630cf58c3539c2d2da98fc2bf97a63b86f4991eebb4e1fa10c179fc8ad168af6ca4a36702ba7208b341c798694134aa5bf7877e8563c10224c94f32d4d7c45210a855b23136b8c20750a4ffcd848dff5314d0585"}, @cf={0x4, 0x6, {0x3, 0xc4, 0x2, 0x5}}]}, @NL80211_ATTR_FTM_RESPONDER={0x104c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x3f, 0x3, "18549c9ba058040f4d9d3ba2a90291110c494c29283c33306a7987f26f886b52bcc04b234fb451d27ae4014b68abeeee0477fc0096508821bcd954"}]}, @NL80211_ATTR_BEACON_TAIL={0x107, 0xf, [@measure_req={0x26, 0xaf, {0x0, 0x6, 0x8, "eb237645f1e0618d9445d86bcaf86637911a3e49c03851ee27b1aa4b90c40aa3e377e60b9be7be919a1d9df0e0f83ca3f9680fb80f252d3ef1cf265e6a63c7cd262499586b865c834f0eac02ecf58e5054e45818ada6017e16a34bb5da35fa23c90b211df3345fdc3e533bd0c4031aabb1be8af5a31fbd28c19abb3f7a280f242cfb27e9439fbfd3f6e01eb415fa8ffaa0fabdb667a2feb55ab7d033aaa75e7b2c59a0e6226171aaf85ee146"}}, @peer_mgmt={0x75, 0x8, {0x1, 0x7, @val=0xff, @val=0x11, @void}}, @rann={0x7e, 0x15, {{0x1, 0x5}, 0x3, 0x25, @broadcast, 0x0, 0x8, 0x10001}}, @ibss={0x6, 0x2, 0x3}, @chsw_timing={0x68, 0x4, {0x5, 0x6fea}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @dsss={0x3, 0x1, 0x78}, @prep={0x83, 0x1f, {{}, 0x93, 0x7f, @device_b, 0x3, @void, 0x3, 0x1, @device_b, 0x9}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x16, 0x80, [@chsw_timing={0x68, 0x4, {0x8, 0x5}}, @cf={0x4, 0x6, {0x6, 0xbe, 0x2a0, 0x9}}, @perr={0x84, 0x2, {0x81}}]}, @NL80211_ATTR_PROBE_RESP={0x538, 0x91, "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"}], @beacon_params=[@NL80211_ATTR_PROBE_RESP={0x2a5, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0x7c, 0x80, [@gcr_ga={0xbd, 0x6, @broadcast}, @perr={0x84, 0x35, {0x3, 0x3, [{{}, @broadcast, 0x9, @void, 0x36}, {{0x0, 0x1}, @device_a, 0xfffff262, @value=@device_b, 0x2d}, {{0x0, 0x1}, @broadcast, 0x1, @value, 0x3}]}}, @cf={0x4, 0x6, {0x0, 0x3, 0x2, 0x2}}, @prep={0x83, 0x1f, {{}, 0x1, 0x20, @device_a, 0xa4, @void, 0x1000, 0x52c9, @device_b, 0xaf6f}}, @peer_mgmt={0x75, 0x6, {0x0, 0x3, @void, @val=0x17, @void}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x15, 0x80, [@dsss={0x3, 0x1, 0x28}, @mesh_id={0x72, 0x6}, @ext_channel_switch={0x3c, 0x4, {0x1, 0xb, 0x99, 0x2}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x68, 0x80, [@preq={0x82, 0x62, {{0x0, 0x1, 0x0, 0x0, 0x1}, 0x7, 0x3, 0xe, @device_a, 0x0, @value=@device_b, 0x1, 0x4970, 0x6, [{{0x1, 0x0, 0x1}, @device_a, 0x9}, {{0x1}, @broadcast, 0xfffffbbb}, {{0x1}, @device_b, 0x8000}, {{0x1}, @device_b, 0x5}, {{0x1}, @broadcast, 0x4}, {{}, @device_b, 0x1}]}}]}, @NL80211_ATTR_BEACON_TAIL={0x76, 0xf, [@ht={0x2d, 0x1a, {0x8, 0x1, 0x6, 0x0, {0x6, 0x1800, 0x0, 0xa0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x400, 0x7, 0x4}}, @ibss={0x6, 0x2, 0x3}, @mesh_id={0x72, 0x6}, @chsw_timing={0x68, 0x4, {0xfff7, 0x4}}, @mic={0x8c, 0x10, {0xc67, "719c891603e5", @short="faf42cb84fac6361"}}, @prep={0x83, 0x1f, {{}, 0x0, 0x10, @device_a, 0x7, @void, 0x6, 0x5, @device_a, 0x9}}, @ssid={0x0, 0xf, @random="3dd521084d66703e800738329a83d5"}]}, @NL80211_ATTR_BEACON_TAIL={0x7, 0xf, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xbc, 0x80, [@sec_chan_ofs={0x3e, 0x1, 0x3}, @preq={0x82, 0x5c, {{0x0, 0x1, 0x1}, 0x1, 0x9, 0x4, @device_a, 0x0, @void, 0x9, 0x6, 0x6, [{{}, @device_b, 0x81}, {{0x1, 0x0, 0x1}, @device_a, 0x9}, {{}, @device_a, 0x6}, {{0x1, 0x0, 0x1}, @device_b, 0x3}, {{0x1, 0x0, 0x1}, @broadcast, 0x7b7}, {{0x0, 0x0, 0x1}, @device_b, 0x5}]}}, @ibss={0x6, 0x2}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x2, 0x3, @device_a, 0xa230, @value, 0x0, 0x7, @device_b, 0x1}}, @channel_switch={0x25, 0x3, {0x1, 0x7c, 0x9}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xe, 0x7, @broadcast, 0x9, @value, 0xda, 0xe43f, @device_a, 0x1}}]}, @NL80211_ATTR_PROBE_RESP={0x40a, 0x91, "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"}]]}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x97b}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x59}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x26c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xe3}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x13}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}]]}, 0x281c}, 0x1, 0x0, 0x0, 0x4000880}, 0x80) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbf8, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8006000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x801, 0xfffffffd, 0x8000100, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x9}]}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040040}, 0x8024) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r0, 0x10ada85e65c25359, 0x70bd29, 0x25dfdbfd, {{0x6b}, {@val={0x7}, @val={0xc, 0x99, {0x7431, 0x4e}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f2, 0x200, 0x70bd25, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24040080}, 0x48840) 3.633981878s ago: executing program 4 (id=8438): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r0, 0x40106e80, &(0x7f0000000140)={0x5}) close(0x4) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) r1 = socket(0x22, 0xa, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r2) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="4954de6304ab0b6630c14a4295d324000000", @ANYRES16=r3, @ANYBLOB="08002abd7000fcdbdf251100000005003300ca0000000500350004000000"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ffffffff000000000300000000000000000000000000000203000000000000000000000b02"], 0x0, 0x4a}, 0x20) socket(0x10, 0x803, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6}, 0x10) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0xd, 0x1}, {0x0, 0xffff}, {0x2, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x17c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xfffffffffffffcb1, 0x2, [@TCA_BASIC_EMATCHES={0x148, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x124, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x3, 0x3, 0x80}, {0xffffff7f, 0x9, 0xffff, 0x9}}}, @TCF_EM_CONTAINER={0x104, 0x1, 0x0, 0x0, {{0x1, 0x0, 0x3ff}, "eb5285bb1da1943c6a2373a38951f2e304801dfbaad4886e8f5d5882c7d443f845d5d0e1ccfe38628841f2e21a70e2bb88c5772b9f0e4184faa9ef70cd69cf842a5651a2e0656ac110580016bb2ef46401ac1f5dd7abb831c7bb266fb16f6a773f3f65c4c2cf496d2a119244c0bc82163a5e80bdb7f12482821cd684890f2b179bc8f7d93c391e308da2cecb974975408008148d1b5e9326f79e39cb07034187976524c11b57f72c85b7c33c345f6f2eac98bdc247bee0af89c3ffa4766173bfc1166c05c6ecc0ff0dfc6a071d937920648c43f9d530204e49cbba1864c6d987ccde5f4917fc317cfeb11eb0c07afed72e2a546d6886"}}]}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_RVALUE={0xfffffffffffffc7f}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000328bd7000fedbdf250900000005002e0001000000b3fd0300", @ANYRES32=0x0, @ANYBLOB="08000600", @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x38}}, 0x20048000) r9 = socket$kcm(0xa, 0x2, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2, 0x1}}, 0x44) sendmsg$sock(r9, &(0x7f0000000400)={&(0x7f0000000580)=@l2tp={0x2, 0x0, @loopback, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x5, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 3.374771139s ago: executing program 1 (id=8440): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf03000000000000850000000c0000feb70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x24}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) syz_emit_ethernet(0x76, &(0x7f0000000400)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x40, 0x3a, 0xff, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, '\t\x00', 0x0, 0x11, 0x0, @local, @empty, [@fragment, @dstopts={0x67}]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendto(r3, 0x0, 0x0, 0xbf30ccbe67c3e0fc, &(0x7f00000000c0)=@l2tp={0x2, 0x0, @loopback, 0x4}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x3, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000380)={0x29e9c931, 0x3, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r4], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x0, 0x0}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c00"], 0x28}}, 0x0) 3.110038268s ago: executing program 1 (id=8442): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401000000000000000000090002002f797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.979440365s ago: executing program 2 (id=8443): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r4) sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x10000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@gettaction={0x68, 0x32, 0xe72c5f922f23cad9, 0x70bd27, 0x25dfdbf7, {}, [@action_gd=@TCA_ACT_TAB={0x34, 0x1, [{0x14, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c844}, 0x4000000) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r10, {0x8, 0x7}, {}, {0xa, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x3f}, @TCA_FLOWER_KEY_UDP_DST={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r11, 0x6, 0x1, &(0x7f00000012c0)={0xa415, 0x7f, 0xe7d7, 0x5, 0x5, 0x7, 0xbf04}, 0xc) r12 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000b00)={0x38, r13, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x38}}, 0x4040004) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "7df0"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.868806647s ago: executing program 3 (id=8445): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8044) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="780000001000030400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) write$tun(r0, &(0x7f0000001a00)={@val={0x8, 0x800}, @val={0xb96fcf61716e3bb4, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x2b, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa0100ff, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e24, 0x4e20, 0x17, 0x0, @opaque="c5af91eb588e254a203531f527e909"}}}, 0x39) 2.666773556s ago: executing program 2 (id=8447): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0xdf9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x3, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 2.61436395s ago: executing program 3 (id=8448): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r1, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='westwood', 0x8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r6, &(0x7f0000000400)=[{&(0x7f0000000640)="000393a08e01f1be5841e773da5303a4bf9fb901aad587309c3991ce4c03ea09508e41574161ebe2d3ac6c96e3ef3d9d8c2a89b8cc97a4c3921e4f475571127df89abde5c7b7fb78c06014ca3df5985edea50f3c53704b7120d2f9651ddcd1fc7dc8a2378114466a4647114e6101bf67212a28529e519cba4813a458d054cc9ab6", 0x81}], 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x80, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x403, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r4}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0xfcd1, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00bdad445b31007a46e398828500000000000000002f1bf1f49c08f868fece01955f", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r1, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) (async) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='westwood', 0x8) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async) socket$kcm(0x10, 0x2, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) (async) pipe(&(0x7f00000001c0)) (async) writev(r6, &(0x7f0000000400)=[{&(0x7f0000000640)="000393a08e01f1be5841e773da5303a4bf9fb901aad587309c3991ce4c03ea09508e41574161ebe2d3ac6c96e3ef3d9d8c2a89b8cc97a4c3921e4f475571127df89abde5c7b7fb78c06014ca3df5985edea50f3c53704b7120d2f9651ddcd1fc7dc8a2378114466a4647114e6101bf67212a28529e519cba4813a458d054cc9ab6", 0x81}], 0x1) (async) pipe(&(0x7f0000000080)) (async) splice(r5, 0x0, r7, 0x0, 0x80, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x403, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r4}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0) (async) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0xfcd1, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00bdad445b31007a46e398828500000000000000002f1bf1f49c08f868fece01955f", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) (async) socket$netlink(0x10, 0x3, 0x0) (async) 2.489351227s ago: executing program 0 (id=8449): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4$alg(r1, 0x0, 0x0, 0x800) sendmsg$alg(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000004c0)="3a82188912", 0x5}, {&(0x7f00000005c0)="f422a321c2", 0x5}], 0x2, 0x0, 0x0, 0x4008080}, 0x20044081) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c0001800600060080350000971b02"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000d40)={0x2, 0xb, 0x2, 0x8, 0x5, 0x0, 0x70bd27, 0x25dfdbfc, [@sadb_address={0x3, 0x7, 0x6c, 0x1a0, 0x0, @in={0x2, 0x4e23, @loopback}}]}, 0x28}}, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async) accept4$alg(r1, 0x0, 0x0, 0x800) (async) sendmsg$alg(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000004c0)="3a82188912", 0x5}, {&(0x7f00000005c0)="f422a321c2", 0x5}], 0x2, 0x0, 0x0, 0x4008080}, 0x20044081) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c0001800600060080350000971b02"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000d40)={0x2, 0xb, 0x2, 0x8, 0x5, 0x0, 0x70bd27, 0x25dfdbfc, [@sadb_address={0x3, 0x7, 0x6c, 0x1a0, 0x0, @in={0x2, 0x4e23, @loopback}}]}, 0x28}}, 0x4) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000040)) (async) 2.319112086s ago: executing program 2 (id=8450): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113000000000008510000002000000850000007600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x5c, r6, 0x1, 0x70bd2b, 0x25dfdc06, {}, [{{0x8, 0x1, r7}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}]}, 0x5c}, 0x1, 0x400000000000000}, 0x0) socket$netlink(0x10, 0x3, 0x10) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) socket$netlink(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x10) (async) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113000000000008510000002000000850000007600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000280)) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x5c, r6, 0x1, 0x70bd2b, 0x25dfdc06, {}, [{{0x8, 0x1, r7}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}]}, 0x5c}, 0x1, 0x400000000000000}, 0x0) (async) 2.317091099s ago: executing program 0 (id=8451): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'geneve1\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}}], {0x14}}, 0xb4}, 0x1, 0x0, 0x0, 0x480c0}, 0x0) 2.256483835s ago: executing program 3 (id=8452): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x3, 0x7c}, [@nested={0x9, 0x1, 0x0, 0x1, [@generic="7e0677e606"]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x8e, 0x0, 0x1, [@nested={0x4, 0xe9}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4024000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x80000003}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@fallback=r1, 0x0, 0x0, 0x71d0, &(0x7f00000002c0)=[0x0], 0x1, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0]}, 0x40) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000000306010400000000000000000a000009050001"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x84) sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0xc0}, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="fdffffffffffffff2900120037000000161a95df00000000"], 0x18}}], 0x1, 0x4000000) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)={0xd8, 0x10, 0x509, 0x3, 0x0, "", [@typed={0x8, 0xd2, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0xa5, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b5f44e4ce2871285f2828289423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336"}, @nested={0x18, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x7}, @typed={0x8, 0x6e, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0xd8}], 0x1, 0x0, 0x0, 0x41010}, 0x40040) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00'}) 2.132461988s ago: executing program 0 (id=8453): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100090a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x200c405a) close(0x3) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r2, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100090a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x200c405a) (async) close(0x3) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10) (async) 1.947446098s ago: executing program 0 (id=8454): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000007c0)={0x3, 'vlan1\x00'}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf7", 0x3e}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323", 0x47}, {&(0x7f0000000900)}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000ac0)}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b", 0xf}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x48}}], 0x2, 0x20000044) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e23, 0x101, @private2, 0x8e4}}, 0x0, 0x0, 0x2b, 0x0, "bb02a3c364ca41d6357e54452401400400941292f4925a1e1ea6324d6193fcf19b49f3eefb1f56c54dc46d8b6d2ccd118aa0cc1dc2767bbe000100060000010100"}, 0xd8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x800042, 0x0, 0x3}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) close(r6) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080002000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.818753467s ago: executing program 1 (id=8455): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081054e81f783db4cb9040a1d080006007c03e8fc55a10a0015000600142603600e120800060000000401a8000800a400000001000000035c0461c1d67f6f94007134cf6efb8000a007a290457f010400000700000000ceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bf9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/215, 0xd7}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1a, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000b700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x32, '\x00', 0x0, @tracing=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000000)={0x6, 'veth1\x00', {}, 0x4}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000013c0)={0x0, 'bond_slave_0\x00', {0x2}, 0x8}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 1.656929125s ago: executing program 0 (id=8456): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000012c0)={0x30, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r4}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x30}], 0x1}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@expire={0x128, 0x18, 0x200, 0x70bd2b, 0x25dfdbfc, {{{@in6=@private2, @in6=@private2, 0x4e22, 0xb584, 0x4e21, 0x8001, 0xa, 0x20, 0x80, 0x87, 0x0, r4}, {@in=@private=0xa010101, 0x4d5, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x3, 0x80, 0x1, 0x292, 0x7f, 0x2, 0x81, 0x2000000000000000}, {0x8, 0x5, 0x4, 0x1}, {0xffffffc0, 0x8, 0x4}, 0x70bd2d, 0x3505, 0xa, 0x2, 0x3, 0x1c}, 0x6}, [@encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e21, @in=@multicast1}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xa}, @policy_type={0xa}]}, 0x128}}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x1801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x40000, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r5, &(0x7f0000000200)={0x0, 0x8, 0x2, 0x1, 0x1}, 0x8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x0, 0x0, 0x5, 0x0, 0x7ff}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}}, &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0xa, 0x32e}, 0x28) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 1.187430624s ago: executing program 1 (id=8457): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001002dbd700000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a000000870000000da63650baab0d7c5cbc541d4e6bf0478396f8fc632c3f03f9833cbe2a8bc281ede92b64a537a7c3f8185db99a2d5909276846d39a49932a6507fc3fdaf7437ae398e30b2d1696188ffddd787507346a0992047922decbf1d59025a49eaaa2a950a94678c02b59532e11", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000200"/112], 0xb8}}, 0x2c000010) socket(0x10, 0x803, 0x0) syz_emit_ethernet(0xffba, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa302bd0ac46a208004500005c0000000000339078ac141442ac1e0001000900000000000000000104040000001fa3883e21cd040100035c9b000031d14c91cf0d355079896e44dcf3da017a58f2e6288933307fb477ae5a40740406707740eb6dcb6c5545"], 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) unshare(0x26020480) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800400001"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r2, &(0x7f0000000500), &(0x7f0000000080)=""/12}, 0x20) socket(0x10, 0x14080f, 0x4) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x4800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x24004090}, 0x4000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="0c0100001600010000000000010000000a01010000000000000000000000000000000000000000000000ffff00f300004e24000000000000", @ANYBLOB="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", @ANYRESHEX=r2, @ANYRES16=r0, @ANYRESOCT, @ANYBLOB="0100000008"], 0x10c}, 0x1, 0x0, 0x0, 0x8890}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000402300090122bd7008f9ffffff020000007e092743bd4e923913272bca42d457e0df0319d30633f4f4ac9b594c3e688407aa08f1342db79ff64137fdc417aa3c6b2b93696b1fe8a92cd444767944b9e6f4299840de09cf78"], 0x14}, 0x1, 0x0, 0x0, 0x1004c957}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x715243, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000001c0)=0x3) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000040001000feffffff00000000017c0000040042800c055b50cc16e45a00018006000600800a000008"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000006, 0x4132, 0xffffffffffffffff, 0xab7ee000) socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000001, 0x12, r5, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) socket$alg(0x26, 0x5, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r9, 0x84, 0x21, 0xffffffffffffffff, 0x0) write$cgroup_int(r8, &(0x7f0000000200), 0xffffffc1) 810.591187ms ago: executing program 1 (id=8458): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8044) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="780000001000030400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) write$tun(r0, &(0x7f0000001a00)={@val={0x8, 0x800}, @val={0xb96fcf61716e3bb4, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x2b, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa0100ff, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e24, 0x4e20, 0x17, 0x0, @opaque="c5af91eb588e254a203531f527e909"}}}, 0x39) 693.430421ms ago: executing program 3 (id=8459): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[], 0x48) (async) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[], 0x48) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) splice(r2, 0x0, r4, 0x0, 0x2fff, 0x100000000000000d) (async) splice(r2, 0x0, r4, 0x0, 0x2fff, 0x100000000000000d) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0xc6e9f000) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0xffffe000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r1, 0x100000000) 523.814637ms ago: executing program 3 (id=8460): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1f00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="7000000014007b00000000610baf80102d"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20048884) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x1, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x84c, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x4, 0x9, 0x2, 0x2, 0x1ff, 0x4, 0x4, 0x2, 0xd, 0x11f4, 0xf, 0x100, 0x0, 0xfffffffe, 0x4, 0x7f, 0x9, 0x4, 0xa0000, 0x80, 0xc, 0x0, 0x6, 0xf290, 0x8e3, 0x6, 0x20a, 0x0, 0xfffffff3, 0x2b, 0x4, 0x4, 0x7, 0x6, 0xffff8001, 0x80, 0x7a, 0x7, 0x1, 0x3, 0x4050732b, 0x1, 0xf5c8, 0x5e, 0x4, 0xf0, 0x7, 0x946, 0x5, 0x8001, 0xffff, 0xfffffff5, 0xbf2, 0x10001, 0x2, 0x8, 0xfffffffd, 0x8001, 0x6, 0x1, 0x7fffffff, 0xd05, 0x7a, 0x11dc294f, 0x7, 0x5, 0x0, 0x9, 0x1, 0x7, 0x1e8, 0x4, 0x2, 0x8, 0x20000000, 0x80000000, 0x1, 0x9, 0x5, 0x5, 0x80000000, 0x3e67, 0x5, 0x8, 0x6, 0xfffffff6, 0x4, 0x10, 0x9, 0x8, 0xd, 0x2, 0x2, 0x2941, 0x1000, 0x8, 0xff, 0x4, 0x9, 0xf6e2, 0x5, 0x6, 0x4, 0x1, 0x3, 0x0, 0x2ee, 0x444, 0x2, 0x9, 0xb966, 0xb2000, 0x33, 0x9a6d, 0x9, 0x8, 0x200, 0x8, 0x3, 0x89, 0x8, 0x100e, 0x7, 0x4, 0x3, 0x8, 0x3, 0x0, 0x6, 0xbfe8, 0x5, 0x8, 0x3, 0x6, 0x4, 0x4e8d, 0x2, 0x8e, 0xffffff42, 0x5, 0xe, 0x1, 0x6, 0xe, 0x2, 0x4, 0x8, 0x6, 0x1, 0x5, 0x9, 0xffffffff, 0x7, 0x5, 0x160000, 0x9, 0x8, 0x1640, 0x6, 0x6, 0x0, 0xaa, 0x2, 0xedd5, 0xfff, 0x8, 0x7fffffff, 0x8, 0x1, 0x2, 0x3, 0x8, 0x3, 0x0, 0x3, 0x34, 0x9, 0x3, 0x2, 0xffffcd43, 0x7, 0x8, 0x486, 0x1, 0x2, 0x5ca0, 0x3, 0x1000, 0x4, 0x9, 0x8, 0x5, 0x7, 0xfffffffd, 0x7, 0x8, 0xffffffff, 0x22, 0x4, 0x2, 0x0, 0x3, 0x1e, 0x3, 0x8, 0xa1, 0x81, 0x5, 0x1, 0x2, 0x2, 0x7ff, 0xf43, 0x3, 0x8, 0x3, 0x3, 0x4, 0x100000, 0xffff, 0x66c, 0x7ff, 0x3, 0xfffffff8, 0x10001, 0x5, 0x0, 0x81, 0x6, 0x9, 0x2823, 0x8, 0xffffffff, 0x0, 0xffffffff, 0x8001, 0x0, 0x9, 0x1, 0x1, 0x9, 0x5, 0x1ff, 0xc79, 0x80000001, 0x200, 0xede5, 0x3, 0x3, 0x0, 0x3, 0x9, 0x8, 0x8, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x20000000, 0x7, 0x7, 0x7, {0x4, 0x2, 0xfe00, 0xfe42, 0x4, 0x7}, {0x3, 0x1, 0xcf, 0x1, 0x800, 0x2}, 0x7, 0xa6, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x4, 0x0, 0x7, 0xfffffff1, 0x796, 0x5, 0xd2c1, 0x7ff, 0x20, 0x9, 0x9, 0x101, 0x5, 0x2, 0x9, 0xc, 0x800, 0x695, 0x401, 0x2, 0x7, 0x1000, 0x343d41f0, 0x0, 0x3, 0x3, 0x3, 0xc94, 0xa0, 0x1, 0x5, 0x81a, 0x1666, 0x80c, 0x9, 0xffffffff, 0x2, 0x81, 0x5f82, 0x5ff, 0x3, 0xed, 0x4, 0x81, 0x401, 0x1, 0x5fb2, 0x8, 0xfffffe01, 0xc, 0x6, 0x2, 0x0, 0x6, 0x0, 0xffffffff, 0xb1e5, 0x0, 0x8, 0x4, 0x1, 0x0, 0x3, 0x9, 0x3, 0x1, 0x4b, 0x2, 0x5, 0x1f, 0x7, 0x0, 0x4, 0x3, 0x2, 0x4d, 0xffffffff, 0x4, 0x3, 0x6, 0x40, 0x1, 0x3, 0x2, 0x5, 0x1ff, 0x101, 0x8, 0xf48, 0x9, 0xffffffff, 0x200, 0x5, 0x76, 0x6, 0x3, 0x8000, 0x6, 0x9, 0x9, 0x6, 0x8001, 0xbe39, 0x7b7, 0x5, 0x8001, 0xb, 0x4, 0x1, 0x8, 0x9, 0xb, 0x6, 0xdfcf, 0x0, 0x442ff558, 0xb481, 0x6, 0x3, 0x4, 0xe, 0x10000, 0x0, 0x31fe, 0xfffff2c1, 0xb, 0x3, 0x6, 0x7b, 0x21d, 0x6, 0xc, 0x10, 0xf91, 0x0, 0x62e, 0x2, 0xfffffffc, 0x5d8, 0x4, 0x5, 0x7, 0x1, 0x3, 0x7, 0x9, 0x5, 0xfffffff7, 0x0, 0x2, 0x7fff, 0x9, 0x5, 0x8, 0x3, 0x0, 0x200, 0xdfb, 0x7, 0x9, 0x223ec3e7, 0xdaa, 0x0, 0x101, 0x1000, 0x4, 0x8, 0x8, 0xf, 0xb, 0x4, 0xfffffffb, 0x491, 0xfffffffb, 0xfffffff9, 0x9c, 0x3, 0x1, 0x4005, 0x1, 0x8001, 0x6, 0x10001, 0x1, 0x3, 0x80000000, 0x4, 0x38, 0x401, 0x2, 0x10, 0x3, 0x3, 0xbd, 0x4, 0x4, 0x5, 0x5, 0x81, 0x3, 0x202, 0x5, 0x9, 0x81, 0x6, 0x8, 0x79, 0x6, 0x8, 0x1, 0xea58, 0x29dc6e7b, 0x53ad, 0x7, 0xd77, 0xff, 0x8, 0x5, 0x0, 0x0, 0x12, 0x0, 0xf, 0xbb4f, 0x8, 0xe4, 0xbcba, 0x80, 0x8, 0xc6, 0x9, 0x81, 0x10000, 0x70, 0x3, 0x4, 0x80, 0x3, 0x3ff, 0xffffffff, 0x5, 0x7, 0x6, 0x5, 0x8001, 0x73da, 0x401, 0x7, 0xd, 0x4, 0x7, 0x5, 0xf417, 0x6, 0x5]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f00000001c0)='cpuacct.usage_percpu_sys\x00', 0x7a05, 0x1700) write$cgroup_int(r12, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r11, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r1, 0x1000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="14df250a00"/20], 0x14}, 0x1, 0x0, 0x0, 0x8880}, 0x410) 224.436748ms ago: executing program 0 (id=8461): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x2, &(0x7f00000004c0)=ANY=[@ANYBLOB="bf3886ddff"], &(0x7f0000000540)='GPL\x00', 0x7, 0xb, &(0x7f0000000580)=""/11, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000940)={0x3, 0x4000003, 0x7fffffff, 0xfffffffb}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000680)=[{0x0, 0x2, 0x8, 0x6}, {0x1, 0x5, 0x9, 0xa}, {0x3, 0x6, 0x4, 0xb}, {0x3, 0x1, 0x1, 0x8}, {0x8, 0x5, 0x4, 0xa}], 0x10, 0x8}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES64=r2], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x10060600) r4 = socket$inet6(0xa, 0x80000, 0x0) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @broadcast}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000980)=[@in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e24, @remote}], 0x20) readv(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000840)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r6) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000a40)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000400}, 0xfffffffffffffd4e, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYRES8=r3], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x42cfb6dac5bed63d) ioctl$XFS_IOC_GOINGDOWN(r5, 0x8004587d, &(0x7f0000000500)=0x9) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3a8, 0x268, 0x268, 0x268, 0x1d0, 0x268, 0x310, 0x310, 0x310, 0x310, 0x310, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x24}, 0xffffffff, 0xff, 'veth0_to_bond\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0x88, 0x1, 0x19}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x0, 0x2}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'syzkaller0\x00', 'macvlan0\x00', {0xff}, {}, 0x33, 0x3, 0x1b}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {0xff}, 0x33, 0x0, 0x15}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x3}, {0xffffffffffffffff, 0x5, 0x1}, {0x0, 0x1, 0x3}, 0x1, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) write$cgroup_pid(r6, &(0x7f00000008c0)=0xffffffffffffffff, 0x12) ioctl$SIOCSIFHWADDR(r5, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random='\x00\x00\x00\"\x00'}) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000000c0)=0x800, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0xf, r9}, 0x10) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f00000004c0)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) r10 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r10, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xffffffffffffffa3, &(0x7f0000000600)={&(0x7f0000000a80)={0x10, 0x3e8, 0x200, 0x70bd26, 0x21dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008014}, 0x20000885) socket$inet6_udp(0xa, 0x2, 0x0) 67.775477ms ago: executing program 1 (id=8462): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1, 0x16bf5125}, 0x1c) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f00000017c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, &(0x7f0000000180)=0x8) 0s ago: executing program 3 (id=8463): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe5f, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x10, &(0x7f0000000300), 0x0, 0x0, 0x63, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000500)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x2, 0xd2, &(0x7f00000009c0)=""/210, 0x0, 0x0, '\x00', r2, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYRESHEX=r4], &(0x7f0000000200)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)=ANY=[@ANYBLOB="6000000003140100000000000000000009000280"], 0x60}}, 0x20000000) r6 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IPT_SO_GET_ENTRIES(r6, 0x0, 0x41, &(0x7f00000004c0)={'raw\x00', 0xdd, "cd5f5846fad2dadfe049afeb8b12b81f8c8ff4010bc5ebe1dd9b865a964ffcca19a2db204eab55ccb5c68d944c3cac76487c6758a9a6b729d43b3926aae20120051cde03c62cd7a2af8b3ddb0ff15feb5e73f41046eddb12907052f0b76f36141932b8f8e7dff363286d517cdce250f54420b4975ea4a32a5a3654feddf34541eceded385125d1f693b96d4bf14f5a9094d9b122f5e2bff89016f9bb3ca4b8902b7da830489cda679acb50637e444712361ec7739f242116053cac04c60e51369865aad001d6fe403d3c293666074efa5c1247e9c2772461e69c6bcadf"}, &(0x7f0000000600)=0x101) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xb619, '.\x00'}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000030f6aaaaaaaaaabb0180c200000e88a800008100000208004500001c006800000011907864010100e0000001000017c10008907892ad3a838d9ece5ab10bce8f81f2388ee22ecb5266e5708e20f668b87ab902762a071fce729ccbbff1e7573f59124df32c02480f1c7e1471a4f3f7c40993708dd824f7b623b19f2f94c33667d2a06a89ba2135e48d6c0b2b4296340515141cc1b6b75927d7261681c78e5ce7"], 0x36) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x4e24, 0x0, 'dh\x00', 0x10, 0x8, 0x2d}, 0x2c) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r10, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000001240)=ANY=[@ANYBLOB="5c030000", @ANYRES16=r11, @ANYBLOB="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"], 0x35c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4048000) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) kernel console output (not intermixed with test programs): > [ 1141.644465][ T2955] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7332'. [ 1141.677658][ T2947] syzkaller0 speed is unknown, defaulting to 1000 [ 1141.690773][ T2947] lo speed is unknown, defaulting to 1000 [ 1141.919784][ T2967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7337'. [ 1141.944501][ T2967] netlink: 'syz.0.7337': attribute type 30 has an invalid length. [ 1141.964962][ T2967] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7337'. [ 1142.007023][ T2971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7338'. [ 1142.323109][ T2947] wg1 speed is unknown, defaulting to 1000 [ 1142.546298][ T2994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7346'. [ 1142.584287][ T2994] xt_TCPMSS: Only works on TCP SYN packets [ 1142.976864][ T3003] 8021q: VLANs not supported on vxcan1 [ 1142.993383][ T2996] syzkaller0 speed is unknown, defaulting to 1000 [ 1143.052143][ T2996] lo speed is unknown, defaulting to 1000 [ 1143.439860][ T3017] sctp: [Deprecated]: syz.0.7350 (pid 3017) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1143.439860][ T3017] Use struct sctp_sack_info instead [ 1143.531101][ T3024] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7352'. [ 1143.566195][ T3018] xt_l2tp: v2 doesn't support IP mode [ 1146.436398][ T2996] wg1 speed is unknown, defaulting to 1000 [ 1146.517448][ T3044] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7355'. [ 1146.590878][ T3046] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7356'. [ 1146.683401][ T3046] syzkaller0: entered promiscuous mode [ 1146.698531][ T3046] syzkaller0: entered allmulticast mode [ 1146.725804][ T3046] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7356'. [ 1146.773910][ T3061] netlink: 160 bytes leftover after parsing attributes in process `syz.4.7360'. [ 1146.832455][ T3061] netlink: 'syz.4.7360': attribute type 1 has an invalid length. [ 1146.964599][ T3061] bond1: entered promiscuous mode [ 1146.976726][ T3061] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1147.027499][ T3063] bond1: (slave bridge4): making interface the new active one [ 1147.046758][ T3063] bridge4: entered promiscuous mode [ 1147.055168][ T3063] bond1: (slave bridge4): Enslaving as an active interface with an up link [ 1147.412173][ T3083] netlink: 'syz.0.7366': attribute type 3 has an invalid length. [ 1147.431447][ T3084] syzkaller0 speed is unknown, defaulting to 1000 [ 1147.451261][ T3084] lo speed is unknown, defaulting to 1000 [ 1147.452972][ T3083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7366'. [ 1147.631196][ T3083] tipc: Enabling of bearer rejected, failed to enable media [ 1147.754028][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1147.830478][ T3094] syzkaller0 speed is unknown, defaulting to 1000 [ 1148.133870][ T3098] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7369'. [ 1148.152240][ T3098] syzkaller0: entered promiscuous mode [ 1148.158419][ T3098] syzkaller0: entered allmulticast mode [ 1148.281455][ T3084] wg1 speed is unknown, defaulting to 1000 [ 1148.287775][ T3094] lo speed is unknown, defaulting to 1000 [ 1148.631499][ T3102] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7370'. [ 1148.679293][T30084] hid-generic 0005:16C0:5505.0005: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 1148.756695][ T3110] netlink: 'syz.4.7373': attribute type 1 has an invalid length. [ 1148.756969][ T3104] netlink: 47 bytes leftover after parsing attributes in process `syz.3.7372'. [ 1148.827991][ T3102] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7370'. [ 1148.954068][ T3118] fido_id[3118]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 1149.013626][ T3113] bond2: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 1149.074848][ T3116] veth3: entered promiscuous mode [ 1149.082545][ T3116] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 1149.091470][ T3094] wg1 speed is unknown, defaulting to 1000 [ 1149.314592][ T3126] netlink: 1 bytes leftover after parsing attributes in process `syz.4.7374'. [ 1149.535746][ T3139] netlink: 'syz.0.7378': attribute type 5 has an invalid length. [ 1149.761885][ T3140] syzkaller1: entered promiscuous mode [ 1149.777977][ T3140] syzkaller1: entered allmulticast mode [ 1150.247300][ T3171] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7384'. [ 1150.367280][ T3174] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7384'. [ 1150.452607][ T3177] netlink: 'syz.3.7386': attribute type 1 has an invalid length. [ 1150.983627][ T3205] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1151.402593][ T3222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1151.438356][ T3222] 8021q: adding VLAN 0 to HW filter on device team0 [ 1151.453993][ T3222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1151.506657][ T3222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1151.519761][ T3222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1151.534312][ T3222] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1151.545160][ T3222] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1151.565722][ T3222] veth1_vlan: left promiscuous mode [ 1151.572652][ T3222] veth0_vlan: left promiscuous mode [ 1151.578866][ T3222] veth0_vlan: entered promiscuous mode [ 1151.586515][ T3222] veth1_vlan: entered promiscuous mode [ 1151.599856][ T3222] veth1_macvtap: left promiscuous mode [ 1151.606258][ T3222] veth0_macvtap: left promiscuous mode [ 1151.612720][ T3222] veth0_macvtap: entered promiscuous mode [ 1151.619387][ T3222] veth1_macvtap: entered promiscuous mode [ 1151.630843][ T3222] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1151.639076][ T3222] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1151.646834][ T3222] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1151.655175][ T3222] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1151.702154][ T3222] bond1: left promiscuous mode [ 1151.706924][ T3222] bridge3: left promiscuous mode [ 1151.713694][ T3222] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1151.729416][ T3222] bond2: left promiscuous mode [ 1151.734198][ T3222] ip6gre1: left promiscuous mode [ 1151.740252][ T3222] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1151.751411][ T3222] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1151.762296][ T3222] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1151.785234][ T3206] __nla_validate_parse: 2 callbacks suppressed [ 1151.785375][ T3206] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7391'. [ 1151.825488][T32273] bridge0: port 1(bridge_slave_0) entered blocking state [ 1151.832653][T32273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1151.844226][T32273] bridge0: port 2(bridge_slave_1) entered blocking state [ 1151.851376][T32273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1151.896866][T28952] syz1: Port: 1 Link ACTIVE [ 1151.912716][T32267] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1151.923484][T32267] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.935158][T32267] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1151.944579][T32267] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.967428][T32267] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1151.976741][T32267] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.985800][T32267] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1151.997073][T32267] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.143595][ T3243] netlink: 'syz.4.7400': attribute type 1 has an invalid length. [ 1152.206551][ T3243] bond3: entered promiscuous mode [ 1152.246496][ T3243] bond3: entered allmulticast mode [ 1152.260383][ T3243] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1152.345473][ T3255] lo: entered allmulticast mode [ 1152.411401][ T3255] lo: left allmulticast mode [ 1152.444553][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054f13c00: rx timeout, send abort [ 1152.453052][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888054f13c00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 1152.853075][ T3280] sctp: [Deprecated]: syz.2.7408 (pid 3280) Use of int in maxseg socket option. [ 1152.853075][ T3280] Use struct sctp_assoc_value instead [ 1152.916612][ T3283] batman_adv: batadv0: Adding interface: gretap1 [ 1152.925810][ T3283] batman_adv: batadv0: The MTU of interface gretap1 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1152.957392][ T3283] batman_adv: batadv0: Interface activated: gretap1 [ 1152.974716][ T3286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7411'. [ 1153.187496][ T3294] netlink: 'syz.4.7414': attribute type 1 has an invalid length. [ 1153.284957][ T3284] syzkaller0 speed is unknown, defaulting to 1000 [ 1153.360422][ T3294] bond4: entered promiscuous mode [ 1153.374011][ T3294] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1153.402538][ T3294] bond4: (slave bridge5): making interface the new active one [ 1153.410194][ T3294] bridge5: entered promiscuous mode [ 1153.416605][ T3294] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 1153.462222][ T3284] lo speed is unknown, defaulting to 1000 [ 1153.817643][ T3316] team_slave_0: entered promiscuous mode [ 1153.830588][ T3316] team_slave_0: entered allmulticast mode [ 1154.129553][ T3284] wg1 speed is unknown, defaulting to 1000 [ 1154.618807][ T3354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7430'. [ 1154.679096][ T3358] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20002 [ 1154.709954][ T3358] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20002 [ 1154.754653][ T3358] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20002 [ 1154.787315][ T3358] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20002 [ 1154.809360][ T3358] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20002 [ 1154.825195][ T3358] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20002 [ 1154.838836][ T3358] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20002 [ 1154.846627][ T3358] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20002 [ 1154.862046][ T3358] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20002 [ 1154.897323][ T3358] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20002 [ 1154.909655][ T3358] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20002 [ 1154.943960][ T3358] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20002 [ 1154.956843][ T3358] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20002 [ 1154.980504][ T3369] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7434'. [ 1155.156659][ T3377] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7437'. [ 1155.253725][ T3379] syzkaller0 speed is unknown, defaulting to 1000 [ 1155.323125][ T3379] lo speed is unknown, defaulting to 1000 [ 1155.443677][ T3377] syzkaller0 speed is unknown, defaulting to 1000 [ 1155.513254][ T3385] syzkaller0 speed is unknown, defaulting to 1000 [ 1155.987479][ T3395] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7441'. [ 1156.038224][ T3377] lo speed is unknown, defaulting to 1000 [ 1156.044894][ T3379] wg1 speed is unknown, defaulting to 1000 [ 1156.354309][ T3397] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7442'. [ 1156.532327][ T3385] lo speed is unknown, defaulting to 1000 [ 1156.539278][ T3377] wg1 speed is unknown, defaulting to 1000 [ 1157.256041][ T3427] netlink: 'syz.3.7450': attribute type 1 has an invalid length. [ 1157.266511][ T3428] syzkaller0: entered promiscuous mode [ 1157.296631][ T3428] syzkaller0: entered allmulticast mode [ 1157.345315][ T3432] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7450'. [ 1157.401029][ T3427] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1157.518097][ T3433] bond6: (slave ip6gretap1): making interface the new active one [ 1157.554277][ T3433] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1157.589401][ T3385] wg1 speed is unknown, defaulting to 1000 [ 1157.698564][ T3435] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7451'. [ 1157.902459][ T3438] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7453'. [ 1158.155180][ T3444] netlink: 'syz.2.7452': attribute type 9 has an invalid length. [ 1158.211414][ T3444] bridge5: entered allmulticast mode [ 1158.349195][ T3452] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7458'. [ 1158.399547][ T3454] net_ratelimit: 12 callbacks suppressed [ 1158.399563][ T3454] netlink: del zone limit has 8 unknown bytes [ 1158.566952][ T3457] xt_hashlimit: size too large, truncated to 1048576 [ 1158.622222][ T3457] xt_hashlimit: max too large, truncated to 1048576 [ 1158.670603][ T3457] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1158.709348][ T3465] netlink: 'syz.1.7461': attribute type 1 has an invalid length. [ 1158.772903][ T3468] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7461'. [ 1158.913411][ T3474] netlink: 'syz.2.7462': attribute type 15 has an invalid length. [ 1158.926729][ T3474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7462'. [ 1159.126809][ T3465] bond4: entered promiscuous mode [ 1159.132671][ T3465] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1159.141906][ T3468] bond4: entered allmulticast mode [ 1159.257095][ T3474] netlink: 'syz.2.7462': attribute type 15 has an invalid length. [ 1159.265246][ T3474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7462'. [ 1159.286292][ T3476] bond4: (slave bridge6): making interface the new active one [ 1159.296798][ T3476] bridge6: entered promiscuous mode [ 1159.303534][ T3476] bridge6: entered allmulticast mode [ 1159.310015][ T3476] bond4: (slave bridge6): Enslaving as an active interface with an up link [ 1159.326317][ T1245] netdevsim netdevsim2 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 1159.340660][ T1245] netdevsim netdevsim2 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 1159.360409][ T1245] netdevsim netdevsim2 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 1159.440540][ T1245] netdevsim netdevsim2 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 1159.517481][ T3483] netlink: 'syz.2.7464': attribute type 13 has an invalid length. [ 1159.534907][ T3483] netlink: 'syz.2.7464': attribute type 17 has an invalid length. [ 1159.575928][ T3485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7464'. [ 1159.616744][ T3483] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 1159.834169][ T1245] tipc: Subscription rejected, illegal request [ 1160.023894][ T3499] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7468'. [ 1160.176869][ T3505] FAULT_INJECTION: forcing a failure. [ 1160.176869][ T3505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1160.240699][ T3505] CPU: 0 UID: 0 PID: 3505 Comm: syz.4.7469 Not tainted syzkaller #0 PREEMPT(full) [ 1160.240724][ T3505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1160.240736][ T3505] Call Trace: [ 1160.240744][ T3505] [ 1160.240753][ T3505] dump_stack_lvl+0xe8/0x150 [ 1160.240781][ T3505] should_fail_ex+0x412/0x560 [ 1160.240809][ T3505] _copy_from_user+0x2d/0xb0 [ 1160.240836][ T3505] __copy_msghdr+0x3c5/0x5b0 [ 1160.240864][ T3505] ___sys_sendmsg+0x213/0x360 [ 1160.240886][ T3505] ? __lock_acquire+0x6b5/0x2cf0 [ 1160.240911][ T3505] ? __pfx____sys_sendmsg+0x10/0x10 [ 1160.240969][ T3505] ? __fget_files+0x2a/0x420 [ 1160.240990][ T3505] ? __fget_files+0x3a0/0x420 [ 1160.241030][ T3505] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1160.241056][ T3505] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1160.241089][ T3505] ? __pfx_ksys_write+0x10/0x10 [ 1160.241123][ T3505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.241144][ T3505] do_syscall_64+0x15f/0xf80 [ 1160.241165][ T3505] ? trace_irq_disable+0x3b/0x140 [ 1160.241191][ T3505] ? clear_bhb_loop+0x40/0x90 [ 1160.241214][ T3505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.241232][ T3505] RIP: 0033:0x7f4f5a79cdd9 [ 1160.241249][ T3505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1160.241264][ T3505] RSP: 002b:00007f4f5b63c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1160.241284][ T3505] RAX: ffffffffffffffda RBX: 00007f4f5aa15fa0 RCX: 00007f4f5a79cdd9 [ 1160.241298][ T3505] RDX: 0000000000008000 RSI: 0000200000000540 RDI: 0000000000000003 [ 1160.241310][ T3505] RBP: 00007f4f5b63c090 R08: 0000000000000000 R09: 0000000000000000 [ 1160.241322][ T3505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1160.241332][ T3505] R13: 00007f4f5aa16038 R14: 00007f4f5aa15fa0 R15: 00007ffdb43e7b98 [ 1160.241363][ T3505] [ 1160.513523][T30084] IPVS: starting estimator thread 0... [ 1160.544107][ T29] audit: type=1800 audit(1777804280.541:11): pid=3516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7471" name="r" dev="tmpfs" ino=1643 res=0 errno=0 [ 1160.611520][ T3518] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 1160.648924][ T3520] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7476'. [ 1160.688379][ T3514] IPVS: using max 33 ests per chain, 79200 per kthread [ 1160.793871][T32270] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1160.804937][T32270] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1160.823744][T32270] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1160.833938][T32270] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1160.974784][ T3536] syzkaller0 speed is unknown, defaulting to 1000 [ 1160.989892][ T3536] lo speed is unknown, defaulting to 1000 [ 1161.401680][ T3536] wg1 speed is unknown, defaulting to 1000 [ 1162.044543][ T3570] FAULT_INJECTION: forcing a failure. [ 1162.044543][ T3570] name failslab, interval 1, probability 0, space 0, times 0 [ 1162.089594][ T3570] CPU: 0 UID: 0 PID: 3570 Comm: syz.0.7485 Not tainted syzkaller #0 PREEMPT(full) [ 1162.089619][ T3570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1162.089631][ T3570] Call Trace: [ 1162.089638][ T3570] [ 1162.089646][ T3570] dump_stack_lvl+0xe8/0x150 [ 1162.089673][ T3570] should_fail_ex+0x412/0x560 [ 1162.089701][ T3570] should_failslab+0xa8/0x100 [ 1162.089729][ T3570] __kmalloc_noprof+0xe8/0x760 [ 1162.089754][ T3570] ? sock_kmalloc+0xd6/0x160 [ 1162.089784][ T3570] sock_kmalloc+0xd6/0x160 [ 1162.089810][ T3570] ____sys_sendmsg+0x1c2/0x9f0 [ 1162.089849][ T3570] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1162.089882][ T3570] ? import_iovec+0x73/0xa0 [ 1162.089910][ T3570] ___sys_sendmsg+0x2a5/0x360 [ 1162.089930][ T3570] ? __lock_acquire+0x6b5/0x2cf0 [ 1162.089955][ T3570] ? __pfx____sys_sendmsg+0x10/0x10 [ 1162.090013][ T3570] ? __fget_files+0x2a/0x420 [ 1162.090033][ T3570] ? __fget_files+0x3a0/0x420 [ 1162.090065][ T3570] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1162.090088][ T3570] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1162.090121][ T3570] ? __pfx_ksys_write+0x10/0x10 [ 1162.090153][ T3570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1162.090173][ T3570] do_syscall_64+0x15f/0xf80 [ 1162.090195][ T3570] ? trace_irq_disable+0x3b/0x140 [ 1162.090220][ T3570] ? clear_bhb_loop+0x40/0x90 [ 1162.090242][ T3570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1162.090260][ T3570] RIP: 0033:0x7f208839cdd9 [ 1162.090278][ T3570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1162.090293][ T3570] RSP: 002b:00007f20891ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1162.090313][ T3570] RAX: ffffffffffffffda RBX: 00007f2088615fa0 RCX: 00007f208839cdd9 [ 1162.090325][ T3570] RDX: 0000000000008000 RSI: 0000200000000540 RDI: 0000000000000003 [ 1162.090337][ T3570] RBP: 00007f20891ec090 R08: 0000000000000000 R09: 0000000000000000 [ 1162.090348][ T3570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1162.090357][ T3570] R13: 00007f2088616038 R14: 00007f2088615fa0 R15: 00007ffcf263e618 [ 1162.090386][ T3570] [ 1162.468096][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1162.847853][ T3592] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 1162.905900][ T3592] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1162.968387][ T3600] __nla_validate_parse: 10 callbacks suppressed [ 1162.968406][ T3600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7494'. [ 1163.009519][ T3602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7495'. [ 1163.412953][ T3611] syzkaller0: entered promiscuous mode [ 1163.418564][ T3611] syzkaller0: entered allmulticast mode [ 1163.466024][ T3611] tipc: Enabled bearer , priority 0 [ 1163.475225][ T3611] netlink: 'syz.3.7496': attribute type 13 has an invalid length. [ 1163.483532][ T3611] netlink: 'syz.3.7496': attribute type 17 has an invalid length. [ 1163.684142][ T3611] vlan2: left allmulticast mode [ 1163.692629][ T3611] bond0: left allmulticast mode [ 1163.697644][ T3611] bond_slave_0: left allmulticast mode [ 1163.705596][ T3611] bond_slave_1: left allmulticast mode [ 1163.710788][ T3623] FAULT_INJECTION: forcing a failure. [ 1163.710788][ T3623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1163.724690][ T3623] CPU: 1 UID: 0 PID: 3623 Comm: syz.0.7500 Not tainted syzkaller #0 PREEMPT(full) [ 1163.724713][ T3623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1163.724724][ T3623] Call Trace: [ 1163.724731][ T3623] [ 1163.724739][ T3623] dump_stack_lvl+0xe8/0x150 [ 1163.724765][ T3623] should_fail_ex+0x412/0x560 [ 1163.724793][ T3623] _copy_from_user+0x2d/0xb0 [ 1163.724818][ T3623] ____sys_sendmsg+0x308/0x9f0 [ 1163.724850][ T3623] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1163.724882][ T3623] ? import_iovec+0x73/0xa0 [ 1163.724915][ T3623] ___sys_sendmsg+0x2a5/0x360 [ 1163.724937][ T3623] ? __lock_acquire+0x6b5/0x2cf0 [ 1163.724961][ T3623] ? __pfx____sys_sendmsg+0x10/0x10 [ 1163.725014][ T3623] ? __fget_files+0x2a/0x420 [ 1163.725035][ T3623] ? __fget_files+0x3a0/0x420 [ 1163.725066][ T3623] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1163.725092][ T3623] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1163.725121][ T3623] ? __pfx_ksys_write+0x10/0x10 [ 1163.725155][ T3623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.725174][ T3623] do_syscall_64+0x15f/0xf80 [ 1163.725196][ T3623] ? trace_irq_disable+0x3b/0x140 [ 1163.725221][ T3623] ? clear_bhb_loop+0x40/0x90 [ 1163.725244][ T3623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.725262][ T3623] RIP: 0033:0x7f208839cdd9 [ 1163.725279][ T3623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1163.725293][ T3623] RSP: 002b:00007f20891ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1163.725311][ T3623] RAX: ffffffffffffffda RBX: 00007f2088615fa0 RCX: 00007f208839cdd9 [ 1163.725323][ T3623] RDX: 0000000000008000 RSI: 0000200000000540 RDI: 0000000000000003 [ 1163.725334][ T3623] RBP: 00007f20891ec090 R08: 0000000000000000 R09: 0000000000000000 [ 1163.725346][ T3623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1163.725357][ T3623] R13: 00007f2088616038 R14: 00007f2088615fa0 R15: 00007ffcf263e618 [ 1163.725387][ T3623] [ 1164.033747][ T3611] syzkaller0: left promiscuous mode [ 1164.044787][ T3611] syzkaller0: left allmulticast mode [ 1164.091217][ T3610] tipc: Resetting bearer [ 1164.129319][ T3610] tipc: Disabling bearer [ 1164.150181][ T3632] netlink: 'syz.0.7502': attribute type 4 has an invalid length. [ 1164.322972][ T3644] netlink: 'syz.4.7503': attribute type 32 has an invalid length. [ 1164.342286][ T3644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7503'. [ 1164.377268][ T3644] bond5: option coupled_control: invalid value (12) [ 1164.404389][ T3644] bond5 (unregistering): Released all slaves [ 1164.578830][ T3657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7510'. [ 1164.665775][ T3660] syzkaller1: entered promiscuous mode [ 1164.675267][ T3660] syzkaller1: entered allmulticast mode [ 1164.727321][ T3661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7510'. [ 1164.779802][ T3662] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7510'. [ 1164.997306][ T3666] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7513'. [ 1165.239233][ T3675] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7517'. [ 1165.365249][ T3679] netlink: 'syz.3.7518': attribute type 30 has an invalid length. [ 1165.390162][ T3681] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7519'. [ 1165.642691][ T3687] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7520'. [ 1166.472635][ T3719] netlink: 'syz.0.7532': attribute type 13 has an invalid length. [ 1166.655254][ T3726] netlink: 'syz.0.7533': attribute type 13 has an invalid length. [ 1166.680591][ T3726] netlink: 'syz.0.7533': attribute type 17 has an invalid length. [ 1166.810715][ T3735] netlink: 'syz.3.7536': attribute type 1 has an invalid length. [ 1166.957497][ T3726] bond10: left promiscuous mode [ 1166.965138][ T3726] bond11: left promiscuous mode [ 1166.979688][ T3726] veth5: left promiscuous mode [ 1166.999567][ T3726] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1167.106431][ T3735] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1167.511242][ T3745] wg2: left allmulticast mode [ 1167.530131][ T3754] netlink: 'syz.1.7539': attribute type 10 has an invalid length. [ 1167.539504][ T3745] team_slave_0: left promiscuous mode [ 1167.544971][ T3745] team_slave_0: left allmulticast mode [ 1167.557011][ T3745] veth1_to_batadv: left allmulticast mode [ 1167.564073][ T3745] veth0_virt_wifi: left allmulticast mode [ 1167.573406][ T3745] veth5: left promiscuous mode [ 1167.610304][ T3758] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1167.620036][ T3745] vlan2: left allmulticast mode [ 1167.625280][ T3745] bond0: left allmulticast mode [ 1167.633467][ T3745] bond4: left promiscuous mode [ 1167.638688][ T3745] bridge6: left promiscuous mode [ 1167.643909][ T3745] bond4: left allmulticast mode [ 1167.649467][ T3745] bridge6: left allmulticast mode [ 1167.735680][ T3754] veth1_vlan: left promiscuous mode [ 1167.756795][ T3754] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 1167.780992][ T8504] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1167.796181][ T8504] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1167.832519][ T8504] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1167.867176][ T8504] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1167.888964][ T8504] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1167.898614][ T8504] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1167.925947][ T8504] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1167.935556][ T8504] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1167.945699][ T3773] netlink: 'syz.1.7547': attribute type 11 has an invalid length. [ 1168.513797][ T3792] syzkaller0 speed is unknown, defaulting to 1000 [ 1168.522462][ T3792] lo speed is unknown, defaulting to 1000 [ 1168.531615][ T3800] __nla_validate_parse: 9 callbacks suppressed [ 1168.531630][ T3800] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7553'. [ 1168.560311][ T3801] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7553'. [ 1168.621744][ T3800] syzkaller0: entered promiscuous mode [ 1168.631457][ T3800] syzkaller0: entered allmulticast mode [ 1168.670690][ T3803] syzkaller0: entered promiscuous mode [ 1168.687078][ T3803] syzkaller0: entered allmulticast mode [ 1170.206483][ T3811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7556'. [ 1170.266808][ T3812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7556'. [ 1171.331087][ T3792] wg1 speed is unknown, defaulting to 1000 [ 1171.502876][ T3818] netlink: 'syz.0.7558': attribute type 7 has an invalid length. [ 1171.963443][ T3846] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7565'. [ 1172.031129][ T3846] bond5: entered promiscuous mode [ 1172.036710][ T3846] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1172.046913][ T3842] : renamed from bond_slave_0 (while UP) [ 1172.192944][ T3856] tipc: Enabled bearer , priority 0 [ 1172.201108][ T3856] syzkaller0: entered promiscuous mode [ 1172.206738][ T3856] syzkaller0: entered allmulticast mode [ 1172.235959][ T3850] syzkaller0 speed is unknown, defaulting to 1000 [ 1172.244449][ T3850] lo speed is unknown, defaulting to 1000 [ 1172.601366][ T3870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7567'. [ 1172.801054][ T3866] tipc: Resetting bearer [ 1172.816275][ T3850] wg1 speed is unknown, defaulting to 1000 [ 1172.837220][ T3855] tipc: Resetting bearer [ 1172.904323][ T3855] tipc: Disabling bearer [ 1172.951979][ T3885] netlink: 332 bytes leftover after parsing attributes in process `syz.3.7573'. [ 1172.999545][ T3885] netlink: 'syz.3.7573': attribute type 9 has an invalid length. [ 1173.030719][ T3885] netlink: 108 bytes leftover after parsing attributes in process `syz.3.7573'. [ 1173.084348][ T3885] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7573'. [ 1173.166881][ T3885] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7573'. [ 1173.222506][T20952] hsr0: entered promiscuous mode [ 1174.226165][ T3931] netlink: 'syz.0.7583': attribute type 1 has an invalid length. [ 1174.251221][ T3931] __nla_validate_parse: 2 callbacks suppressed [ 1174.251237][ T3931] netlink: 256 bytes leftover after parsing attributes in process `syz.0.7583'. [ 1175.023577][ T3947] bridge0: port 2(bridge_slave_1) entered disabled state [ 1175.031156][ T3947] bridge0: port 1(bridge_slave_0) entered disabled state [ 1175.081568][ T3970] netlink: 'syz.0.7585': attribute type 10 has an invalid length. [ 1175.153087][ T3977] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7585'. [ 1175.446159][ T3947] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1175.491784][ T3947] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1175.770006][ T3953] bridge_slave_0 (unregistering): left allmulticast mode [ 1175.777252][ T3953] bridge_slave_0 (unregistering): left promiscuous mode [ 1175.785149][ T3953] bridge0: port 1(bridge_slave_0) entered disabled state [ 1175.852077][T20952] syz1: Port: 1 Link DOWN [ 1175.929233][ T8504] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1175.953847][ T8504] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.966109][ T8504] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1175.975733][ T8504] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.988882][ T8504] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1175.998535][ T8504] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.011657][ T3985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7589'. [ 1176.023959][ T8504] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1176.059013][ T8504] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.086426][ T3989] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.7590'. [ 1176.192206][ T3997] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7593'. [ 1176.284856][ T3999] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7595'. [ 1176.327752][ T3999] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1176.576775][ T4014] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7601'. [ 1176.595162][ T4017] netlink: 'syz.4.7602': attribute type 4 has an invalid length. [ 1176.623439][ T4016] netlink: 'syz.4.7602': attribute type 4 has an invalid length. [ 1177.009769][ T4039] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1177.155951][ T4046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7609'. [ 1177.234409][ T4048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7611'. [ 1177.257495][ T4048] netlink: 'syz.0.7611': attribute type 2 has an invalid length. [ 1177.274150][ T4048] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7611'. [ 1177.401814][ T4040] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 1177.419617][ T4048] : renamed from lo (while UP) [ 1177.776800][ T4068] syzkaller0 speed is unknown, defaulting to 1000 [ 1177.831422][ T4068] lo speed is unknown, defaulting to 1000 [ 1178.754583][ T4068] wg1 speed is unknown, defaulting to 1000 [ 1179.222764][ T4128] bridge0: port 2(bridge_slave_1) entered disabled state [ 1179.230065][ T4128] bridge0: port 1(bridge_slave_0) entered disabled state [ 1179.264892][ T4136] __nla_validate_parse: 6 callbacks suppressed [ 1179.264910][ T4136] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7631'. [ 1179.290995][ T4128] batman_adv: batadv0: Interface deactivated: dummy0 [ 1179.470443][ T4128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1179.483653][ T4128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1179.519929][ T4142] netlink: 'syz.0.7634': attribute type 21 has an invalid length. [ 1179.683771][ T4128] bridge5: left allmulticast mode [ 1179.755434][ T4143] macsec1: entered promiscuous mode [ 1179.762194][ T4143] bridge0: entered promiscuous mode [ 1179.769353][ T4142] netlink: 'syz.0.7634': attribute type 6 has an invalid length. [ 1179.778021][ T4142] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7634'. [ 1179.787990][T32270] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1179.814929][T32270] netdevsim netdevsim2 eth0: unset [0, 1] type 1 family 0 port 2816 - 0 [ 1179.851503][T32270] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.938162][T32270] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1179.969264][T32270] netdevsim netdevsim2 eth1: unset [0, 1] type 1 family 0 port 2816 - 0 [ 1180.001225][T32270] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.058034][T32270] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1180.086613][T32270] netdevsim netdevsim2 eth2: unset [0, 1] type 1 family 0 port 2816 - 0 [ 1180.103734][T32270] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.122006][ T4164] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7640'. [ 1180.143419][T32270] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1180.161369][T32270] netdevsim netdevsim2 eth3: unset [0, 1] type 1 family 0 port 2816 - 0 [ 1180.187952][T32270] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.370842][ T4183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7643'. [ 1180.403951][ T4179] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1180.622249][ T4188] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7646'. [ 1180.874030][ T4197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7650'. [ 1180.883878][ T4199] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1181.093042][ T4209] wg1: Master is either lo or non-ether device [ 1181.520479][T31071] Bluetooth: hci3: command 0x040f tx timeout [ 1181.586624][ T4227] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7658'. [ 1182.269148][ T4260] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7665'. [ 1182.502104][ T4273] siw: device registration error -23 [ 1182.537562][ T4273] netlink: 276 bytes leftover after parsing attributes in process `syz.4.7670'. [ 1182.676983][ T1242] batman_adv: batadv0: Removing interface: ip6gretap1 [ 1183.047066][ T1242] bond2 (unregistering): (slave gretap1): Releasing active interface [ 1183.131834][ T1242] bond8 (unregistering): (slave geneve4): Releasing active interface [ 1183.262194][ T1242] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 1183.270712][ T1242] bridge1 (unregistering): left promiscuous mode [ 1183.441841][ T1242] bond14 (unregistering): (slave bridge5): Releasing backup interface [ 1183.531635][ T1242] bond0 (unregistering): Released all slaves [ 1183.541846][ T1242] bond1 (unregistering): Released all slaves [ 1183.555422][ T1242] bond2 (unregistering): Released all slaves [ 1183.569894][ T1242] bond3 (unregistering): (slave veth5): Releasing active interface [ 1183.579299][ T1242] bond3 (unregistering): Released all slaves [ 1183.606711][ T1242] bond4 (unregistering): Released all slaves [ 1183.622825][ T1242] bond5 (unregistering): Released all slaves [ 1183.636009][ T1242] bond6 (unregistering): Released all slaves [ 1183.654072][ T1242] bond7 (unregistering): Released all slaves [ 1183.676087][ T1242] bond8 (unregistering): Released all slaves [ 1183.690428][ T1242] bond9 (unregistering): Released all slaves [ 1183.706617][ T1242] bond10 (unregistering): (slave wireguard1): Releasing backup interface [ 1183.715316][ T1242] wireguard1: left promiscuous mode [ 1183.727226][ T1242] bond10 (unregistering): Released all slaves [ 1183.740923][ T1242] bond11 (unregistering): Released all slaves [ 1183.756279][ T1242] bond12 (unregistering): (slave bond13): Releasing backup interface [ 1183.764983][ T1242] bond13 (unregistering): left promiscuous mode [ 1183.771648][ T1242] bond12 (unregistering): Released all slaves [ 1183.795072][ T1242] bond13 (unregistering): Released all slaves [ 1183.809195][ T1242] bond14 (unregistering): Released all slaves [ 1183.871960][ T4279] syzkaller0 speed is unknown, defaulting to 1000 [ 1183.917011][ T4279] lo speed is unknown, defaulting to 1000 [ 1184.261951][ T1242] tipc: Disabling bearer [ 1184.265073][ T4308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7679'. [ 1184.306539][ T1242] tipc: Left network mode [ 1184.319129][ T4308] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7679'. [ 1184.366268][T32270] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1184.374066][ T4308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7679'. [ 1184.393800][ T4308] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7679'. [ 1184.407816][T32270] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1184.422968][ T4312] netlink: 'syz.0.7681': attribute type 1 has an invalid length. [ 1184.431996][T32270] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1184.461814][T32270] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1184.715728][ T4313] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 1184.981599][ T4334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7684'. [ 1184.987156][ T4279] wg1 speed is unknown, defaulting to 1000 [ 1185.124009][ T4334] netlink: 256 bytes leftover after parsing attributes in process `syz.0.7684'. [ 1185.803673][ T4353] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7689'. [ 1185.994585][ T4355] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7690'. [ 1186.154011][ T4364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7693'. [ 1186.341935][ T4365] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1186.593936][T32272] smbdirect: ib_dev[syz2] removed [ 1186.682500][ T4373] netlink: 203340 bytes leftover after parsing attributes in process `syz.2.7696'. [ 1187.278402][ T4399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7702'. [ 1187.458351][ T4403] netlink: 'syz.1.7704': attribute type 19 has an invalid length. [ 1187.519416][ T4403] netlink: 'syz.1.7704': attribute type 19 has an invalid length. [ 1187.523971][T32270] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1187.572778][T32270] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1187.696492][T32270] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1187.730569][T32270] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1187.810913][ T1242] hsr_slave_0: left promiscuous mode [ 1187.849196][ T1242] hsr_slave_1: left promiscuous mode [ 1187.916479][ T1242] veth1_macvtap: left promiscuous mode [ 1187.951837][ T1242] veth1_vlan: left promiscuous mode [ 1187.958303][ T1242] veth0_vlan: left promiscuous mode [ 1188.662624][ T1242] team0 (unregistering): Port device vlan0 removed [ 1189.171581][ T4415] dummy0: mtu less than device minimum [ 1189.722644][ T4477] __nla_validate_parse: 5 callbacks suppressed [ 1189.722663][ T4477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7718'. [ 1189.784066][ T4468] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1189.798038][ T4477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1189.881336][ T4477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1189.968788][ T4493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7721'. [ 1189.985862][ T4480] lo speed is unknown, defaulting to 1000 [ 1190.017515][ T4493] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7721'. [ 1190.259005][ T4508] netlink: 'syz.3.7725': attribute type 13 has an invalid length. [ 1190.292269][ T4508] netlink: 'syz.3.7725': attribute type 17 has an invalid length. [ 1190.332673][ T4510] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7726'. [ 1190.501616][ T4521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7725'. [ 1190.576484][ T4519] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7727'. [ 1190.824621][ T4520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7727'. [ 1190.944003][ T4508] 8021q: adding VLAN 0 to HW filter on device team0 [ 1191.088574][ T4547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1191.102001][ T4548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7729'. [ 1191.161074][ T4508] veth1_vlan: left promiscuous mode [ 1191.186098][ T4508] veth0_vlan: left promiscuous mode [ 1191.199085][ T4508] veth0_vlan: entered promiscuous mode [ 1191.231276][ T4508] veth1_vlan: entered promiscuous mode [ 1191.260634][ T4508] veth1_macvtap: left promiscuous mode [ 1191.287019][ T4508] veth0_macvtap: left promiscuous mode [ 1191.325727][ T4508] veth0_macvtap: entered promiscuous mode [ 1191.360623][ T4508] veth1_macvtap: entered promiscuous mode [ 1191.390937][ T4508] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1191.406504][ T4508] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1191.419898][ T4508] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1191.433821][ T4508] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1191.506222][ T4508] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1191.532366][ T4508] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1191.546237][ T4508] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1191.561103][ T4508] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1191.580366][ T4508] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1191.617026][ T4508] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1191.634101][ T4508] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1191.645429][ T4508] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1191.658479][ T4508] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1191.681276][ T4480] wg1 speed is unknown, defaulting to 1000 [ 1191.726337][T12978] bridge0: port 2(bridge_slave_1) entered blocking state [ 1191.733554][T12978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1191.820401][ T4548] netlink: 'syz.2.7729': attribute type 1 has an invalid length. [ 1191.836952][ T4548] netlink: 'syz.2.7729': attribute type 2 has an invalid length. [ 1191.859357][T32270] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1191.870661][T32270] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.881982][T32270] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1191.891151][T32270] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.971844][T20950] syz1: Port: 1 Link ACTIVE [ 1192.037429][T32270] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1192.073827][T32270] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.104583][T32270] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1192.139841][T32270] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.274063][ T4586] xt_TCPMSS: Only works on TCP SYN packets [ 1192.382244][ T1242] IPVS: stop unused estimator thread 0... [ 1192.391403][ T4584] netlink: 'syz.1.7734': attribute type 4 has an invalid length. [ 1192.464915][ T4595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7736'. [ 1192.739104][ T4603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7740'. [ 1192.773339][ T4603] veth1_to_batadv: entered allmulticast mode [ 1192.971109][ T4620] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1193.738448][ T4658] xt_TCPMSS: Only works on TCP SYN packets [ 1194.816424][ T4647] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1194.854288][ T4647] A link change request failed with some changes committed already. Interface batadv1 may have been left with an inconsistent configuration, please check. [ 1195.355412][ T4715] __nla_validate_parse: 1 callbacks suppressed [ 1195.355429][ T4715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7755'. [ 1195.398330][ T4721] tipc: Enabling of bearer rejected, failed to enable media [ 1195.791963][ T4730] lo speed is unknown, defaulting to 1000 [ 1195.854862][ T4752] x_tables: duplicate underflow at hook 4 [ 1196.592880][ T4768] lo speed is unknown, defaulting to 1000 [ 1196.592898][ T4730] wg1 speed is unknown, defaulting to 1000 [ 1196.953889][ T4799] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.7771'. [ 1197.230159][ T4804] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7772'. [ 1197.320587][ T4808] netlink: 'syz.2.7773': attribute type 7 has an invalid length. [ 1197.569318][ T4823] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7776'. [ 1197.605840][ T4768] wg1 speed is unknown, defaulting to 1000 [ 1198.154625][ T4837] netlink: 'syz.3.7779': attribute type 29 has an invalid length. [ 1198.258177][ T4848] netlink: 'syz.3.7779': attribute type 29 has an invalid length. [ 1198.470813][ T4856] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7783'. [ 1198.524764][ T4856] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7783'. [ 1198.586082][ T4842] lo speed is unknown, defaulting to 1000 [ 1198.977477][ T4867] netlink: 'syz.4.7785': attribute type 1 has an invalid length. [ 1199.145943][ T4879] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7785'. [ 1199.705325][ T4873] bond5: (slave geneve2): making interface the new active one [ 1199.759346][ T4873] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 1199.846745][ T4879] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1199.911456][ T1245] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1199.933213][ T1245] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1199.955341][ T4908] netlink: 'syz.2.7789': attribute type 1 has an invalid length. [ 1199.982186][ T4842] wg1 speed is unknown, defaulting to 1000 [ 1199.983576][ T4908] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7789'. [ 1200.001719][ T1245] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1200.022750][ T1245] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1200.125929][ T4912] sctp: [Deprecated]: syz.4.7790 (pid 4912) Use of int in max_burst socket option. [ 1200.125929][ T4912] Use struct sctp_assoc_value instead [ 1200.409573][ T4924] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7793'. [ 1201.248625][ T4966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7801'. [ 1201.599104][ T4983] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7802'. [ 1201.900676][ T4994] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7806'. [ 1201.952784][ T4994] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7806'. [ 1202.172936][ T5010] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7809'. [ 1202.208249][ T5010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7809'. [ 1202.355268][ T5005] lo speed is unknown, defaulting to 1000 [ 1202.710242][ T5030] netlink: 'syz.4.7811': attribute type 2 has an invalid length. [ 1202.778984][ T5030] netlink: 'syz.4.7811': attribute type 2 has an invalid length. [ 1202.976465][ T5033] macsec1: entered promiscuous mode [ 1203.026370][ T5039] netlink: 'syz.0.7815': attribute type 1 has an invalid length. [ 1203.092902][ T5036] : renamed from vlan0 [ 1203.384146][ T5005] wg1 speed is unknown, defaulting to 1000 [ 1204.874927][ T5102] bond10: option arp_all_targets: invalid value (129) [ 1204.909219][ T5102] bond10 (unregistering): Released all slaves [ 1205.008922][ T5107] tipc: New replicast peer: 255.255.255.255 [ 1205.019898][ T5107] tipc: Enabled bearer , priority 5 [ 1205.094481][ T5114] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7824'. [ 1205.122015][ T5130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7831'. [ 1205.336481][ T5138] netlink: 276 bytes leftover after parsing attributes in process `syz.1.7833'. [ 1205.486160][ T5147] IPv6: NLM_F_CREATE should be specified when creating new route [ 1205.538572][ T5150] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.7835'. [ 1205.543067][ T5147] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1205.557073][ T5147] IPv6: NLM_F_CREATE should be set when creating new route [ 1205.564360][ T5147] IPv6: NLM_F_CREATE should be set when creating new route [ 1205.571640][ T5147] IPv6: NLM_F_CREATE should be set when creating new route [ 1205.598936][ T5153] netlink: 62967 bytes leftover after parsing attributes in process `syz.3.7835'. [ 1205.726633][ T5150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7835'. [ 1205.862706][ T5147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7835'. [ 1206.046366][ T5174] x_tables: duplicate entry at hook 3 [ 1206.439726][ T5192] netlink: zone id is out of range [ 1206.463449][ T5192] netlink: get zone limit has 4 unknown bytes [ 1206.785297][ T5210] netlink: 80 bytes leftover after parsing attributes in process `syz.1.7846'. [ 1206.855418][ T5209] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7847'. [ 1206.904493][ T5209] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7847'. [ 1206.946093][ T5206] lo speed is unknown, defaulting to 1000 [ 1206.970472][ T5209] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7847'. [ 1207.370723][ T5231] netlink: 'syz.3.7852': attribute type 1 has an invalid length. [ 1207.463546][ T5222] bond15: entered promiscuous mode [ 1207.482586][ T5222] bond15: entered allmulticast mode [ 1207.515791][ T5222] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1207.561600][ T5237] netlink: 'syz.4.7853': attribute type 2 has an invalid length. [ 1207.600965][ T5237] netlink: 'syz.4.7853': attribute type 1 has an invalid length. [ 1207.636878][ T5237] netlink: 'syz.4.7853': attribute type 1 has an invalid length. [ 1207.676821][ T5231] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1207.686802][ T5237] netlink: 'syz.4.7853': attribute type 1 has an invalid length. [ 1207.731651][ T5237] netlink: 'syz.4.7853': attribute type 2 has an invalid length. [ 1207.813277][ T5232] bond10: (slave geneve3): making interface the new active one [ 1207.824814][ T5232] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 1207.881961][ T8504] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1207.895909][ T5206] wg1 speed is unknown, defaulting to 1000 [ 1207.966012][ T8504] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1208.011481][ T8504] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1208.053311][ T8504] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1208.129288][ T5247] gretap2: entered promiscuous mode [ 1208.150354][ T5247] gretap2: entered allmulticast mode [ 1208.163090][ T5244] syzkaller1: entered promiscuous mode [ 1208.173714][ T5249] netlink: zone id is out of range [ 1208.186274][ T5244] syzkaller1: entered allmulticast mode [ 1208.191189][ T5250] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7855'. [ 1208.212925][ T5249] netlink: zone id is out of range [ 1208.230828][ T5249] netlink: zone id is out of range [ 1208.249632][ T5249] netlink: zone id is out of range [ 1208.274055][ T5249] netlink: zone id is out of range [ 1208.308338][ T5249] netlink: zone id is out of range [ 1208.325282][ T5249] netlink: zone id is out of range [ 1208.330783][ T5249] netlink: zone id is out of range [ 1208.378167][ T5258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7859'. [ 1208.816106][ T5272] tipc: Enabled bearer , priority 0 [ 1208.992142][ T5293] netlink: 'syz.4.7865': attribute type 2 has an invalid length. [ 1209.049637][ T5298] SET target dimension over the limit! [ 1209.095291][ T5273] syzkaller0: entered promiscuous mode [ 1209.108132][ T5273] syzkaller0: entered allmulticast mode [ 1209.119735][ T5273] tipc: Resetting bearer [ 1209.279748][ T5273] tipc: Resetting bearer [ 1209.581011][ T5321] netlink: 'syz.2.7872': attribute type 27 has an invalid length. [ 1212.195246][ T5273] tipc: Disabling bearer [ 1212.205908][ T5321] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1212.363403][ T5331] __nla_validate_parse: 4 callbacks suppressed [ 1212.363422][ T5331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7874'. [ 1213.319375][ T5353] netlink: 'syz.0.7878': attribute type 21 has an invalid length. [ 1213.336280][ T5353] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7878'. [ 1213.567194][ T5374] netlink: 'syz.0.7885': attribute type 1 has an invalid length. [ 1213.605205][ T5372] No such timeout policy "syz1" [ 1213.641910][ T5374] bond16: Unable to set up delay as MII monitoring is disabled [ 1213.651984][ T5374] bond16 (unregistering): Released all slaves [ 1213.652285][ T5372] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7884'. [ 1213.677364][ T5381] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7885'. [ 1213.753294][ T5374] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7885'. [ 1213.813954][ T5390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7887'. [ 1213.992261][ T5398] netlink: 34 bytes leftover after parsing attributes in process `syz.0.7889'. [ 1214.213753][ T5409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7893'. [ 1214.259806][ T5409] : entered promiscuous mode [ 1214.281819][ T5409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7893'. [ 1214.295104][ T5409] openvswitch: : Dropping previously announced user features [ 1214.589811][ T5431] netlink: 165 bytes leftover after parsing attributes in process `syz.2.7899'. [ 1214.754404][ T5447] sctp: [Deprecated]: syz.2.7903 (pid 5447) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1214.754404][ T5447] Use struct sctp_sack_info instead [ 1214.776627][ T5446] bridge0: port 3(vlan0) entered blocking state [ 1214.790961][ T5446] bridge0: port 3(vlan0) entered disabled state [ 1214.797939][ T5446] vlan0: entered allmulticast mode [ 1214.803940][ T5446] geneve0: entered allmulticast mode [ 1214.811790][ T5446] vlan0: entered promiscuous mode [ 1214.817004][ T5446] geneve0: entered promiscuous mode [ 1215.078394][ T5461] xt_ecn: cannot match TCP bits for non-tcp packets [ 1215.103745][ T5460] xt_ecn: cannot match TCP bits for non-tcp packets [ 1215.226881][ T5462] bond11 (unregistering): Released all slaves [ 1215.247616][ T5473] net_ratelimit: 380 callbacks suppressed [ 1215.247634][ T5473] IPv6: addrconf: prefix option has invalid lifetime [ 1215.365921][ T5471] netlink: 'syz.1.7912': attribute type 1 has an invalid length. [ 1215.501423][ T5471] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1215.507389][ T5471] syzkaller1: Refused to change device type [ 1215.546775][ T5490] netlink: 'syz.2.7917': attribute type 13 has an invalid length. [ 1215.554883][ T5490] netlink: 'syz.2.7917': attribute type 17 has an invalid length. [ 1215.783172][ T5490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1215.793844][ T5490] 8021q: adding VLAN 0 to HW filter on device team0 [ 1215.805412][ T5490] batman_adv: batadv0: Interface activated: dummy0 [ 1215.816912][ T5490] batadv0: mtu less than device minimum [ 1215.826047][ T5490] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1215.837924][ T5490] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1215.849674][ T5490] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1215.861396][ T5490] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1215.873049][ T5490] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1215.884813][ T5490] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1215.896566][ T5490] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1215.908267][ T5490] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1215.943976][ T5490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1216.201171][ T5490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1216.380174][ T5490] veth1_to_batadv: left allmulticast mode [ 1216.693372][ T5490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1216.750776][ T5490] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1216.769303][ T5490] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1216.799562][ T5490] veth0_macvtap: left promiscuous mode [ 1216.811930][ T5490] veth0_macvtap: entered promiscuous mode [ 1216.857961][ T5490] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1216.869199][ T5490] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1216.882243][ T5490] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1216.896252][ T5490] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1216.921738][ T1242] bridge0: port 1(bridge_slave_0) entered blocking state [ 1216.928914][ T1242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1216.959960][ T1242] bridge0: port 2(bridge_slave_1) entered blocking state [ 1216.967110][ T1242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1217.046851][ T8504] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1217.069972][ T8504] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.089820][ T8504] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1217.100711][ T5531] netlink: 'syz.4.7926': attribute type 1 has an invalid length. [ 1217.107763][ T8504] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.135884][ T8504] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1217.159272][ T8504] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.193599][ T8504] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1217.227096][ T8504] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.375486][ T5544] __nla_validate_parse: 78 callbacks suppressed [ 1217.375506][ T5544] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7932'. [ 1217.424566][ T1242] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1217.481410][ T5548] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7933'. [ 1218.378509][ T5588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7943'. [ 1218.431299][ T5591] sctp: [Deprecated]: syz.0.7943 (pid 5591) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1218.431299][ T5591] Use struct sctp_sack_info instead [ 1218.504203][ T5590] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7944'. [ 1218.534661][ T5591] netlink: 'syz.0.7943': attribute type 1 has an invalid length. [ 1218.550988][ T5590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7944'. [ 1218.576538][ T5591] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7943'. [ 1219.602981][ T5629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7951'. [ 1219.636487][ T5629] veth0_macvtap: left promiscuous mode [ 1219.729517][ T5635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7953'. [ 1219.811882][ T5629] veth0_macvtap: entered promiscuous mode [ 1220.335437][ T5673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7962'. [ 1220.371808][ T5673] netlink: 'syz.1.7962': attribute type 20 has an invalid length. [ 1220.380626][T32270] net_ratelimit: 61 callbacks suppressed [ 1220.380641][T32270] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1220.387048][ T5678] netlink: 'syz.4.7964': attribute type 3 has an invalid length. [ 1220.387237][ T5678] netlink: 'syz.4.7964': attribute type 3 has an invalid length. [ 1220.387264][ T5678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7964'. [ 1220.437431][ T5673] netlink: 'syz.1.7962': attribute type 21 has an invalid length. [ 1220.551351][ T5693] netlink: 'syz.4.7967': attribute type 3 has an invalid length. [ 1220.823813][ T5710] syzkaller0: entered promiscuous mode [ 1220.840873][ T5713] openvswitch: netlink: Flow actions attr not present in new flow. [ 1220.848975][ T5710] syzkaller0: entered allmulticast mode [ 1220.957973][T32267] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1221.107897][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1221.364711][ T5735] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1221.399298][ T5757] bridge0: port 2(bridge_slave_1) entered disabled state [ 1221.521647][ T1245] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1222.079720][ T1245] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1222.106190][ T5774] tipc: Enabled bearer , priority 0 [ 1222.142068][ T5774] syzkaller0: entered promiscuous mode [ 1222.169579][ T5774] syzkaller0: entered allmulticast mode [ 1222.210609][ T5780] tipc: Resetting bearer [ 1222.295612][ T5774] tipc: Resetting bearer [ 1222.388495][ T5774] tipc: Disabling bearer [ 1222.408707][ T5762] __nla_validate_parse: 10 callbacks suppressed [ 1222.408724][ T5762] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7983'. [ 1222.635705][ T8506] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1222.800108][ T5820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7994'. [ 1222.844478][ T5820] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 1223.061784][ T5833] netlink: 'syz.3.7999': attribute type 27 has an invalid length. [ 1223.198711][ T1242] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1223.236517][ T5842] SET target dimension over the limit! [ 1223.254187][ T5828] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7996'. [ 1223.658788][ T5860] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8005'. [ 1223.668947][ T5860] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8005'. [ 1223.685803][ T5860] netlink: 'syz.0.8005': attribute type 49 has an invalid length. [ 1223.737948][ T1245] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1223.860569][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 1223.890792][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 1223.897998][ T5835] bridge0: port 2(bridge_slave_1) entered listening state [ 1223.930283][ T5835] veth1_vlan: left promiscuous mode [ 1223.936215][ T5835] veth0_vlan: left promiscuous mode [ 1223.943250][ T5835] veth0_vlan: entered promiscuous mode [ 1223.953633][ T5835] veth1_vlan: entered promiscuous mode [ 1223.966623][ T5835] veth1_macvtap: left promiscuous mode [ 1223.972901][ T5835] veth0_macvtap: left promiscuous mode [ 1223.980404][ T5835] veth0_macvtap: entered promiscuous mode [ 1223.987294][ T5835] veth1_macvtap: entered promiscuous mode [ 1224.002505][ T5835] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1224.010790][ T5835] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1224.018791][ T5835] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1224.026830][ T5835] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1224.067272][ T5835] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1224.083133][ T5835] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1224.092577][ T5835] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1224.104219][ T5835] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1224.113439][ T5835] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1224.131565][ T5835] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1224.142173][ T5835] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1224.150062][ T5835] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1224.160013][ T5835] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1224.174668][ T5835] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1224.241538][ T5856] bond6: Removing last ns target with arp_interval on [ 1224.279149][ T8506] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1224.500970][ T5868] batadv_slave_1: entered promiscuous mode [ 1224.720477][ T5883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8011'. [ 1224.757166][ T5883] openvswitch: netlink: Flow actions attr not present in new flow. [ 1224.813881][ T5883] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8011'. [ 1224.955722][ T5897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8015'. [ 1225.085468][ T5904] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8018'. [ 1225.137312][ T5904] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8018'. [ 1225.172474][ T5911] netlink: 'syz.1.8020': attribute type 1 has an invalid length. [ 1225.321818][ T5911] bond7: entered promiscuous mode [ 1225.339724][ T5911] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1225.358461][ T5915] bond7: entered allmulticast mode [ 1225.446213][ T5911] bond7: (slave bridge9): making interface the new active one [ 1225.473791][ T5911] bridge9: entered promiscuous mode [ 1225.486572][ T5911] bridge9: entered allmulticast mode [ 1225.496088][ T5911] bond7: (slave bridge9): Enslaving as an active interface with an up link [ 1225.633021][ T5934] syzkaller0: entered promiscuous mode [ 1225.639237][ T5934] syzkaller0: entered allmulticast mode [ 1225.685958][ T5934] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1225.723965][ T5934] bond7 (unregistering): Released all slaves [ 1225.838293][ T1245] net_ratelimit: 4 callbacks suppressed [ 1225.838309][ T1245] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1226.254218][ T5975] syzkaller1: entered promiscuous mode [ 1226.267154][ T5979] netlink: 'syz.0.8037': attribute type 1 has an invalid length. [ 1226.276096][ T5975] syzkaller1: entered allmulticast mode [ 1226.319775][ T5982] netlink: 'syz.0.8037': attribute type 4 has an invalid length. [ 1226.328595][ T5982] netlink: 'syz.0.8037': attribute type 1 has an invalid length. [ 1226.403786][T14627] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1226.721108][ T5973] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1226.804497][ T5998] can: request_module (can-proto-0) failed. [ 1226.826463][ T5997] veth7: entered promiscuous mode [ 1226.880528][ T6004] batadv1: entered promiscuous mode [ 1226.886791][ T6004] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1226.894299][ T5998] can: request_module (can-proto-0) failed. [ 1226.999620][T14627] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1227.020505][ T5998] can: request_module (can-proto-0) failed. [ 1227.102561][ T5998] can: request_module (can-proto-0) failed. [ 1227.210700][ T5998] can: request_module (can-proto-0) failed. [ 1227.309924][ T5998] can: request_module (can-proto-0) failed. [ 1227.414334][ T5998] can: request_module (can-proto-0) failed. [ 1227.522204][ T5998] can: request_module (can-proto-0) failed. [ 1227.537975][T14627] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1228.089823][T32267] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1228.630894][T32267] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1228.646089][ T6065] netlink: 'syz.4.8060': attribute type 1 has an invalid length. [ 1228.888875][ T6080] __nla_validate_parse: 6 callbacks suppressed [ 1228.888894][ T6080] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8065'. [ 1229.011139][ T6086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1229.029862][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1229.053091][ T6088] bond6: entered promiscuous mode [ 1229.075706][ T6088] bond6: entered allmulticast mode [ 1229.185099][ T6093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8067'. [ 1229.201016][ T1245] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1229.531859][ T6107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8071'. [ 1229.545342][ T6101] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1229.770078][T14628] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1230.322439][T14627] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1230.815122][ T6152] IPVS: Error connecting to the multicast addr [ 1230.871333][T14627] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1231.009736][ T6164] netlink: 164 bytes leftover after parsing attributes in process `syz.2.8090'. [ 1231.031091][ T6166] netlink: 164 bytes leftover after parsing attributes in process `syz.2.8090'. [ 1231.373173][ T6183] netlink: 'syz.2.8095': attribute type 10 has an invalid length. [ 1231.419234][ T6183] batman_adv: batadv0: Interface deactivated: dummy0 [ 1231.420510][T14627] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1231.452502][ T6188] netlink: 'syz.2.8095': attribute type 10 has an invalid length. [ 1231.495654][ T6183] batman_adv: batadv0: Removing interface: dummy0 [ 1231.523259][ T6190] netlink: 11 bytes leftover after parsing attributes in process `syz.2.8095'. [ 1231.570183][ T6183] team0: Failed to send options change via netlink (err -105) [ 1231.618944][ T6183] team0: Port device dummy0 added [ 1231.642144][ T6187] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8096'. [ 1231.719057][ T6189] hmac(sha224: entered promiscuous mode [ 1231.741490][ T6188] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1231.781509][ T6188] team0: Failed to send options change via netlink (err -105) [ 1231.810175][ T6188] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1231.864642][ T6188] team0: Port device dummy0 removed [ 1231.929226][ T6188] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1232.076311][ T6210] netlink: 80 bytes leftover after parsing attributes in process `syz.4.8100'. [ 1232.247427][ T6213] lo speed is unknown, defaulting to 1000 [ 1232.465258][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8104'. [ 1232.584999][ T6231] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8104'. [ 1232.710858][ T6230] bridge0: port 2(bridge_slave_1) entered disabled state [ 1232.718359][ T6230] bridge0: port 1(bridge_slave_0) entered disabled state [ 1232.816683][ T6237] netlink: 'syz.0.8105': attribute type 1 has an invalid length. [ 1232.872322][ T5634] Bluetooth: hci3: command 0x040f tx timeout [ 1232.975600][ T6230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1233.005222][ T6230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1233.169950][ T6230] veth7: left promiscuous mode [ 1233.215768][ T6237] bond16: entered promiscuous mode [ 1233.226217][ T6237] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1233.261209][ T6238] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1233.272754][ T6238] bond16: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1233.299657][ T6238] bond16: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1233.348741][ T6238] bond16: (slave wireguard0): making interface the new active one [ 1233.361348][ T6238] wireguard0: entered promiscuous mode [ 1233.375945][ T6238] bond16: (slave wireguard0): Enslaving as an active interface with an up link [ 1233.392846][ T6241] bond16: (slave wireguard1): The slave device specified does not support setting the MAC address [ 1233.408704][ T6241] bond16: (slave wireguard1): Enslaving as a backup interface with an up link [ 1233.417647][ T6213] wg1 speed is unknown, defaulting to 1000 [ 1233.423794][T14627] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1233.432598][T14627] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.462639][T14627] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1233.486204][T14627] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.564652][T14627] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1233.615267][T14627] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.652282][T14627] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1233.697149][T14627] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.207143][ T6297] __nla_validate_parse: 4 callbacks suppressed [ 1234.207162][ T6297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8117'. [ 1234.211292][ T6299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8118'. [ 1234.253269][ T6299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8118'. [ 1234.262143][ T6272] siw: device registration error -23 [ 1234.462777][ T6309] netlink: 'syz.0.8120': attribute type 29 has an invalid length. [ 1234.620678][ T6330] x_tables: duplicate underflow at hook 4 [ 1235.125475][ T6348] syzkaller0: entered promiscuous mode [ 1235.158421][ T6348] syzkaller0: entered allmulticast mode [ 1235.913008][ T6381] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1236.009421][ T6384] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8128'. [ 1236.720443][ T6413] netlink: 820 bytes leftover after parsing attributes in process `syz.4.8136'. [ 1236.743251][ T6413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8136'. [ 1236.759683][ T6413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8136'. [ 1236.768758][ T6413] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8136'. [ 1237.387173][ T6305] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1237.707607][ T6435] netlink: 284 bytes leftover after parsing attributes in process `syz.4.8138'. [ 1237.958732][ T6459] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8141'. [ 1237.985547][ T6436] bond8 (unregistering): Released all slaves [ 1239.104361][ T6503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1239.222221][ T5634] Bluetooth: hci3: link tx timeout [ 1239.234750][ T5634] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1239.269208][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 1239.383811][ T6517] openvswitch: netlink: IP tunnel dst address not specified [ 1239.648697][ T6526] __nla_validate_parse: 3 callbacks suppressed [ 1239.648716][ T6526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8159'. [ 1239.666316][ T6526] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8159'. [ 1239.700113][ T6531] lo speed is unknown, defaulting to 1000 [ 1239.727603][ T6541] netlink: 228 bytes leftover after parsing attributes in process `syz.3.8159'. [ 1239.824926][ T6545] netlink: 'syz.3.8159': attribute type 13 has an invalid length. [ 1239.834142][ T6545] netlink: 'syz.3.8159': attribute type 17 has an invalid length. [ 1239.860056][ T6526] netlink: 'syz.3.8159': attribute type 13 has an invalid length. [ 1239.876864][ T6526] netlink: 'syz.3.8159': attribute type 17 has an invalid length. [ 1239.879379][ T6545] netlink: 'syz.3.8159': attribute type 27 has an invalid length. [ 1239.895516][ T6526] netlink: 'syz.3.8159': attribute type 27 has an invalid length. [ 1240.063039][ T6541] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.133742][ T6558] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8165'. [ 1240.471023][T21201] syz1: Port: 1 Link DOWN [ 1240.471042][ T6531] wg1 speed is unknown, defaulting to 1000 [ 1240.472627][T32267] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1240.500377][T32267] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.509622][T32267] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1240.518976][T32267] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1240.528358][T32267] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.537247][T32267] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1240.575217][T32267] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1240.585164][T32267] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.594507][T32267] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1240.610270][T32267] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1240.651250][T32267] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.671291][T32267] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1240.689609][ T6546] lo speed is unknown, defaulting to 1000 [ 1240.813342][ T6569] netlink: 'syz.1.8166': attribute type 13 has an invalid length. [ 1240.821634][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8166'. [ 1240.867988][ T6569] erspan0: refused to change device tx_queue_len [ 1240.906464][ T6569] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1241.042482][ T6571] xt_CT: No such helper "netbios-ns" [ 1241.183997][ T6579] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8171'. [ 1241.204045][ T6580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8170'. [ 1241.274520][ T6546] wg1 speed is unknown, defaulting to 1000 [ 1241.278179][ T5634] Bluetooth: hci3: command 0x040f tx timeout [ 1241.448329][ T6587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8171'. [ 1241.493701][ T6594] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8174'. [ 1241.493701][ T6595] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8174'. [ 1241.843665][ T6610] netlink: 'syz.4.8178': attribute type 4 has an invalid length. [ 1242.072854][ T6617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1242.105464][ T6617] 8021q: adding VLAN 0 to HW filter on device team0 [ 1242.142580][ T6617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1242.225258][ T6617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1242.249507][ T6617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1242.271789][ T6617] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1242.283569][ T6617] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1242.296632][ T6617] hsr0: left promiscuous mode [ 1242.311497][ T6617] veth1_vlan: left promiscuous mode [ 1242.328647][ T6617] veth0_vlan: left promiscuous mode [ 1242.334811][ T6617] veth0_vlan: entered promiscuous mode [ 1242.355614][ T6617] veth1_vlan: entered promiscuous mode [ 1242.365961][ T6617] veth1_macvtap: left promiscuous mode [ 1242.372598][ T6617] veth0_macvtap: left promiscuous mode [ 1242.379779][ T6617] veth0_macvtap: entered promiscuous mode [ 1242.386536][ T6617] veth1_macvtap: entered promiscuous mode [ 1242.422174][ T6617] bond1: left promiscuous mode [ 1242.426963][ T6617] bridge4: left promiscuous mode [ 1242.433952][ T6617] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1242.435532][T32267] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1242.460823][ T6617] veth3: left promiscuous mode [ 1242.477427][ T6617] bond3: left promiscuous mode [ 1242.489257][ T6617] bond4: left promiscuous mode [ 1242.499806][ T6617] bridge5: left promiscuous mode [ 1242.513104][ T6617] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1242.523870][ T6617] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1242.535749][ T6617] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1242.545682][ T6617] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1242.552397][T32267] bond2: (slave ip6gretap2): link status up again after 0 ms [ 1242.565644][ T6617] gretap2: left promiscuous mode [ 1242.570709][T32267] bond2: (slave ip6gretap2): link status up again after 0 ms [ 1242.582729][ T6617] bond6: left promiscuous mode [ 1242.587923][ T6617] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1242.588002][T14627] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1242.605604][T14627] bond2: (slave ip6gretap2): link status up again after 0 ms [ 1242.623624][ T6617] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1242.639684][T14627] bond2: (slave ip6gretap2): link status up again after 0 ms [ 1242.652137][ T6618] hsr0: entered promiscuous mode [ 1242.687142][T14627] bond2: (slave ip6gretap2): link status up again after 0 ms [ 1242.720731][ T8504] bond2: (slave ip6gretap2): link status up again after 0 ms [ 1242.769442][ T8504] bond2: (slave ip6gretap2): link status up again after 0 ms [ 1242.786940][ T1245] bridge0: port 1(bridge_slave_0) entered blocking state [ 1242.794108][ T1245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1242.822034][ T1245] bridge0: port 2(bridge_slave_1) entered blocking state [ 1242.829247][ T1245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1242.850637][T32270] bond2: (slave ip6gretap2): link status up again after 0 ms [ 1242.888817][ T1242] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1242.897025][ T1242] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1242.915312][ T6609] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1242.923027][ T6609] CPU: 1 UID: 0 PID: 6609 Comm: syz.0.8179 Not tainted syzkaller #0 PREEMPT(full) [ 1242.923042][ T6609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1242.923049][ T6609] Call Trace: [ 1242.923054][ T6609] [ 1242.923059][ T6609] dump_stack_lvl+0xe8/0x150 [ 1242.923078][ T6609] sysfs_warn_dup+0x8e/0xa0 [ 1242.923091][ T6609] sysfs_do_create_link_sd+0xc0/0x110 [ 1242.923105][ T6609] device_add_class_symlinks+0x1cf/0x240 [ 1242.923120][ T6609] device_add+0x475/0xbb0 [ 1242.923133][ T6609] wiphy_register+0x21e8/0x32e0 [ 1242.923156][ T6609] ? __pfx_wiphy_register+0x10/0x10 [ 1242.923169][ T6609] ? __pfx_netdev_run_todo+0x10/0x10 [ 1242.923184][ T6609] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1242.923203][ T6609] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1242.923219][ T6609] ieee80211_register_hw+0x3d82/0x4a70 [ 1242.923241][ T6609] ? ieee80211_register_hw+0x1981/0x4a70 [ 1242.923267][ T6609] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1242.923283][ T6609] ? __asan_memset+0x22/0x50 [ 1242.923295][ T6609] ? __hrtimer_setup+0x1b7/0x260 [ 1242.923307][ T6609] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1242.923322][ T6609] mac80211_hwsim_new_radio+0x3335/0x5aa0 [ 1242.923349][ T6609] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1242.923359][ T6609] ? kstrndup+0xbf/0x160 [ 1242.923375][ T6609] hwsim_new_radio_nl+0xf6a/0x1c00 [ 1242.923398][ T6609] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1242.923414][ T6609] ? rcu_is_watching+0x15/0xb0 [ 1242.923427][ T6609] ? trace_kmalloc+0x2a/0xf0 [ 1242.923444][ T6609] ? __nla_parse+0x40/0x60 [ 1242.923460][ T6609] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1242.923476][ T6609] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1242.923495][ T6609] genl_family_rcv_msg_doit+0x22a/0x330 [ 1242.923515][ T6609] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1242.923543][ T6609] ? bpf_lsm_capable+0x9/0x20 [ 1242.923553][ T6609] ? security_capable+0x7e/0x2c0 [ 1242.923569][ T6609] genl_rcv_msg+0x61c/0x7a0 [ 1242.923587][ T6609] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1242.923601][ T6609] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1242.923620][ T6609] netlink_rcv_skb+0x232/0x4b0 [ 1242.923633][ T6609] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1242.923649][ T6609] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1242.923670][ T6609] ? down_read+0x270/0x2e0 [ 1242.923682][ T6609] ? genl_rcv+0xd/0x40 [ 1242.923697][ T6609] genl_rcv+0x28/0x40 [ 1242.923711][ T6609] netlink_unicast+0x75c/0x8e0 [ 1242.923728][ T6609] netlink_sendmsg+0x813/0xb40 [ 1242.923745][ T6609] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1242.923764][ T6609] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1242.923788][ T6609] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1242.923815][ T6609] ____sys_sendmsg+0x972/0x9f0 [ 1242.923838][ T6609] ? __might_fault+0xaf/0x130 [ 1242.923855][ T6609] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1242.923873][ T6609] ? import_iovec+0x73/0xa0 [ 1242.923890][ T6609] ___sys_sendmsg+0x2a5/0x360 [ 1242.923902][ T6609] ? __lock_acquire+0x6b5/0x2cf0 [ 1242.923916][ T6609] ? __pfx____sys_sendmsg+0x10/0x10 [ 1242.923933][ T6609] ? futex_wait+0x2a2/0x390 [ 1242.923962][ T6609] ? __fget_files+0x2a/0x420 [ 1242.923974][ T6609] ? __fget_files+0x3a0/0x420 [ 1242.923991][ T6609] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1242.924005][ T6609] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1242.924024][ T6609] ? rcu_is_watching+0x15/0xb0 [ 1242.924044][ T6609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.924056][ T6609] do_syscall_64+0x15f/0xf80 [ 1242.924067][ T6609] ? trace_irq_disable+0x3b/0x140 [ 1242.924082][ T6609] ? clear_bhb_loop+0x40/0x90 [ 1242.924095][ T6609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.924105][ T6609] RIP: 0033:0x7f208839cdd9 [ 1242.924116][ T6609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1242.924125][ T6609] RSP: 002b:00007f20891ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1242.924137][ T6609] RAX: ffffffffffffffda RBX: 00007f2088615fa0 RCX: 00007f208839cdd9 [ 1242.924144][ T6609] RDX: 0000000000004340 RSI: 0000200000000040 RDI: 0000000000000005 [ 1242.924151][ T6609] RBP: 00007f2088432d69 R08: 0000000000000000 R09: 0000000000000000 [ 1242.924157][ T6609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1242.924164][ T6609] R13: 00007f2088616038 R14: 00007f2088615fa0 R15: 00007ffcf263e618 [ 1242.924180][ T6609] [ 1243.356354][ T8506] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 1243.365877][ T8506] bond2: active interface up! [ 1243.496229][ T1242] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1243.568260][ T1242] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1243.656086][ T6642] netlink: 'syz.4.8186': attribute type 1 has an invalid length. [ 1243.687110][ T6643] netlink: 'syz.0.8185': attribute type 3 has an invalid length. [ 1243.854025][ T6642] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1244.025667][ T6645] veth9: entered promiscuous mode [ 1244.051189][ T6645] bond9: (slave veth9): Enslaving as an active interface with an up link [ 1244.331206][ T6659] bond17: entered promiscuous mode [ 1244.349753][ T6659] bond17: entered allmulticast mode [ 1244.365714][ T6659] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1244.498852][ T6667] vlan5: entered promiscuous mode [ 1244.513201][ T6667] bridge0: entered promiscuous mode [ 1244.690275][ T6674] __nla_validate_parse: 3 callbacks suppressed [ 1244.690295][ T6674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8191'. [ 1244.774053][ T6670] syzkaller0: entered promiscuous mode [ 1244.779727][ T6670] syzkaller0: entered allmulticast mode [ 1248.363130][T14627] net_ratelimit: 8 callbacks suppressed [ 1248.363150][T14627] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1248.520517][ T6728] validate_nla: 1 callbacks suppressed [ 1248.520537][ T6728] netlink: 'syz.2.8202': attribute type 1 has an invalid length. [ 1248.541108][ T6729] netlink: 148 bytes leftover after parsing attributes in process `syz.1.8201'. [ 1248.548786][ T6730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8200'. [ 1248.560588][ T6722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8199'. [ 1248.561645][T32267] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1248.591497][ T6729] netlink: 116 bytes leftover after parsing attributes in process `syz.1.8201'. [ 1248.603821][ T6722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8199'. [ 1248.624850][ T6722] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8199'. [ 1248.632570][ T6734] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8202'. [ 1248.661267][ T6729] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8201'. [ 1248.674928][ T6722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8199'. [ 1248.732275][ T6728] bond7: entered promiscuous mode [ 1248.738346][ T6728] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1248.745644][ T6734] bond7: entered allmulticast mode [ 1248.835093][ T6738] bond11: entered promiscuous mode [ 1248.847103][ T6738] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1248.854887][ T6738] bridge0: port 1(bond11) entered blocking state [ 1248.861755][ T6738] bridge0: port 1(bond11) entered disabled state [ 1248.870588][ T6738] bond11: entered allmulticast mode [ 1248.918659][T12978] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1249.122377][ T6754] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 1249.147725][ T6728] syzkaller0: entered promiscuous mode [ 1249.167356][ T6728] syzkaller0: entered allmulticast mode [ 1249.870958][ T6782] __nla_validate_parse: 4 callbacks suppressed [ 1249.870977][ T6782] netlink: 67 bytes leftover after parsing attributes in process `syz.0.8212'. [ 1250.110202][ T6787] netlink: 'syz.1.8214': attribute type 3 has an invalid length. [ 1250.118187][ T6787] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8214'. [ 1252.470127][ T6787] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8214'. [ 1252.529280][ T1245] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1252.649377][ T6798] netlink: 'syz.3.8217': attribute type 1 has an invalid length. [ 1252.741470][ T6804] lo speed is unknown, defaulting to 1000 [ 1252.753528][ T1245] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1252.792219][ T6798] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8217'. [ 1252.835871][ T6798] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1252.889654][ T6817] bond10: entered promiscuous mode [ 1252.894912][ T6817] bond10: entered allmulticast mode [ 1252.902392][ T6817] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1252.910518][ T6818] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8221'. [ 1253.097809][T32270] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1253.216411][ T6804] wg1 speed is unknown, defaulting to 1000 [ 1253.228870][T12978] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1253.368024][ T1245] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1253.415936][ T6840] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1253.455569][ T6832] netlink: 'syz.3.8226': attribute type 29 has an invalid length. [ 1253.474855][ T6832] netlink: 'syz.3.8226': attribute type 29 has an invalid length. [ 1253.524866][ T6839] lo speed is unknown, defaulting to 1000 [ 1253.532172][T32267] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1253.599589][ T6845] netlink: 'syz.0.8229': attribute type 1 has an invalid length. [ 1253.731253][ T6843] 8021q: adding VLAN 0 to HW filter on device  [ 1253.741804][ T6843] 8021q: adding VLAN 0 to HW filter on device team0 [ 1253.757021][ T6843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1253.792149][ T6843] team_slave_0: entered promiscuous mode [ 1253.804093][ T6843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1253.815354][ T6843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1253.838558][ T6843] veth0_vlan: left promiscuous mode [ 1253.844430][ T6843] veth0_vlan: entered promiscuous mode [ 1253.852267][ T6843] veth1_vlan: entered promiscuous mode [ 1253.862184][ T6843] veth1_macvtap: left promiscuous mode [ 1253.869736][ T6843] veth0_macvtap: left promiscuous mode [ 1253.876321][ T6843] veth0_macvtap: entered promiscuous mode [ 1253.938650][ T6849] bond18 (unregistering): Released all slaves [ 1253.979051][ T8506] bridge0: port 1(bridge_slave_0) entered blocking state [ 1253.986215][ T8506] bridge0: port 1(bridge_slave_0) entered listening state [ 1254.013195][ T8506] bridge0: port 2(bridge_slave_1) entered blocking state [ 1254.020389][ T8506] bridge0: port 2(bridge_slave_1) entered listening state [ 1254.054884][ T6839] wg1 speed is unknown, defaulting to 1000 [ 1254.351188][T12978] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1254.518306][ T8506] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1254.649344][ T8506] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1254.917814][ T8506] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1255.218446][T12978] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1255.369633][ T6897] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8242'. [ 1255.498278][ T8506] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1255.560989][ T6899] IPVS: Scheduler module ip_vs_ not found [ 1255.678873][ T1245] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1255.962886][ T6912] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8246'. [ 1256.042720][ T6912] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1256.162503][ T6912] bond18: (slave batadv3): Opening slave failed [ 1256.187002][ T6920] netlink: 31 bytes leftover after parsing attributes in process `syz.1.8248'. [ 1256.206446][ T6920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1256.753377][ T6936] syzkaller0: entered promiscuous mode [ 1256.766633][ T6936] syzkaller0: entered allmulticast mode [ 1256.847583][ T6936] tipc: Enabled bearer , priority 0 [ 1256.875624][ T6935] tipc: Resetting bearer [ 1256.963061][ T6935] tipc: Disabling bearer [ 1257.560886][ T6944] bridge9: the hash_elasticity option has been deprecated and is always 16 [ 1257.799498][ T6969] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8264'. [ 1257.801087][ T6967] Bluetooth: MGMT ver 1.23 [ 1257.856428][ T6966] syzkaller1: entered promiscuous mode [ 1257.865354][ T6966] syzkaller1: entered allmulticast mode [ 1258.013699][ T6989] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8269'. [ 1258.038139][ T6991] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8269'. [ 1258.168407][ T6994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8271'. [ 1258.198659][ T6994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8271'. [ 1258.214631][ T6994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8271'. [ 1258.244878][ T6994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8271'. [ 1258.511621][ T6994] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.519136][ T6994] bridge0: port 1(bridge_slave_0) entered disabled state [ 1258.916647][ T6994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1258.951751][ T6994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1259.439203][ T6994] batman_adv: batadv0: Interface deactivated: gretap1 [ 1259.822991][T14627] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1259.877575][T14627] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1259.919355][T14627] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1259.942998][T14627] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1259.964177][T14627] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1259.980056][ T7032] netlink: 'syz.2.8280': attribute type 1 has an invalid length. [ 1259.982068][T14627] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1260.034906][T14627] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1260.056591][T14627] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1260.088697][T14627] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1260.112275][T14627] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1260.138695][T14627] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1260.165860][T14627] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1260.223930][ T7038] lo speed is unknown, defaulting to 1000 [ 1260.531162][ T7064] __nla_validate_parse: 252 callbacks suppressed [ 1260.531180][ T7064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8291'. [ 1260.826779][ T7038] wg1 speed is unknown, defaulting to 1000 [ 1261.138096][ T7083] bond8 (unregistering): Released all slaves [ 1261.353621][ T7089] netlink: 'syz.0.8296': attribute type 1 has an invalid length. [ 1261.453033][ T7089] bond20: (slave bridge8): making interface the new active one [ 1261.479219][ T7089] bond20: (slave bridge8): Enslaving as an active interface with an up link [ 1261.505571][ T7093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8297'. [ 1261.586213][ T7089] macvlan0: entered promiscuous mode [ 1261.609059][ T7089] macvlan0: entered allmulticast mode [ 1261.627347][ T7089] bond20: entered promiscuous mode [ 1261.639320][ T7089] bridge8: entered promiscuous mode [ 1261.651905][ T7089] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1261.664008][ T7089] bond20: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1261.683170][ T7089] bond20: left promiscuous mode [ 1261.689887][ T7089] bridge8: left promiscuous mode [ 1261.715542][ T7104] netlink: 'syz.2.8300': attribute type 10 has an invalid length. [ 1261.725376][ T7092] macvlan0: entered promiscuous mode [ 1261.731710][ T7092] macvlan0: entered allmulticast mode [ 1261.738729][ T7092] bond20: entered promiscuous mode [ 1261.744463][ T7092] bridge8: entered promiscuous mode [ 1261.766374][ T7092] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1261.776380][ T7092] bond20: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1261.808095][ T7092] bond20: left promiscuous mode [ 1261.813143][ T7092] bridge8: left promiscuous mode [ 1261.912826][ T7104] bond0: (slave dummy0): Releasing backup interface [ 1261.937248][ T7104] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1261.954996][ T7104] team0: Failed to send options change via netlink (err -105) [ 1261.965124][ T7104] team0: Port device dummy0 added [ 1262.204617][ T7114] net_ratelimit: 12 callbacks suppressed [ 1262.204637][ T7114] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 1262.226105][ T7114] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1262.449703][ T7120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8304'. [ 1262.496977][ T7120] netlink: 'syz.2.8304': attribute type 5 has an invalid length. [ 1262.522390][ T7120] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8304'. [ 1262.569149][ T7126] netlink: 'syz.0.8306': attribute type 5 has an invalid length. [ 1262.658113][ T7131] netlink: 'syz.2.8304': attribute type 1 has an invalid length. [ 1262.879169][ T7139] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8308'. [ 1263.632878][ T7158] netlink: 232 bytes leftover after parsing attributes in process `syz.4.8313'. [ 1263.914830][ T7171] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 1263.923602][ T7171] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1264.929710][ T7178] lo speed is unknown, defaulting to 1000 [ 1264.959790][ T7180] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8320'. [ 1264.969319][ T7180] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8320'. [ 1264.985915][ T7180] ip6gretap0: entered promiscuous mode [ 1264.993133][ T7180] ip6gretap0: left promiscuous mode [ 1265.078574][ T7178] wg1 speed is unknown, defaulting to 1000 [ 1265.333471][ T7183] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8321'. [ 1265.412401][ T7120] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1266.065018][ T7215] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1266.380688][ T7232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8333'. [ 1266.572802][ T7234] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8334'. [ 1266.614644][ T7236] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8335'. [ 1266.648717][ T7236] netlink: 'syz.0.8335': attribute type 1 has an invalid length. [ 1266.675859][ T7241] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8336'. [ 1266.687180][ T7236] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8335'. [ 1266.721262][ T7243] syzkaller0: entered promiscuous mode [ 1266.732510][ T7243] syzkaller0: entered allmulticast mode [ 1266.745241][ T7243] tc action pedit 'at' offset 1029 out of bounds [ 1266.753763][ T7243] tc action pedit 'at' offset 1029 out of bounds [ 1266.760144][ T7243] tc action pedit 'at' offset 1029 out of bounds [ 1266.766486][ T7243] tc action pedit 'at' offset 1029 out of bounds [ 1266.772848][ T7243] tc action pedit 'at' offset 1029 out of bounds [ 1266.779208][ T7243] tc action pedit 'at' offset 1029 out of bounds [ 1266.785551][ T7243] tc action pedit 'at' offset 1029 out of bounds [ 1266.791921][ T7243] tc action pedit 'at' offset 1029 out of bounds [ 1266.798299][ T7243] tc action pedit 'at' offset 1029 out of bounds [ 1266.804655][ T7243] tc action pedit 'at' offset 1029 out of bounds [ 1266.811028][ T7243] 0: reclassify loop, rule prio 0, protocol 800 [ 1266.910311][ T7250] xt_hashlimit: size too large, truncated to 1048576 [ 1267.230873][ T7268] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8344'. [ 1267.317538][ T7268] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8344'. [ 1267.443033][ T7279] netlink: 'syz.3.8345': attribute type 1 has an invalid length. [ 1267.735382][ T7287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8349'. [ 1267.798029][ T7288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8349'. [ 1267.943620][ T7294] netlink: 'syz.1.8349': attribute type 39 has an invalid length. [ 1267.954424][ T7296] netlink: 'syz.2.8350': attribute type 39 has an invalid length. [ 1268.154482][ T7287] bond8 (unregistering): Released all slaves [ 1268.292224][ T7296] syz_tun (unregistering): left allmulticast mode [ 1268.590905][ T7311] syzkaller0: entered promiscuous mode [ 1268.622038][ T7311] syzkaller0: entered allmulticast mode [ 1269.016418][ T7328] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1269.303358][ T7333] bridge_slave_0: left allmulticast mode [ 1269.328721][ T7333] bridge_slave_0: left promiscuous mode [ 1269.343246][ T7336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8359'. [ 1269.354237][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 1269.359604][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 1269.377943][ T7333] bridge0: port 1(bridge_slave_0) entered disabled state [ 1269.471311][ T7333] bridge_slave_1: left allmulticast mode [ 1269.486622][ T7333] bridge_slave_1: left promiscuous mode [ 1269.521166][ T7333] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.636156][ T7342] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1269.656062][ T7333] : (slave bond_slave_0): Releasing backup interface [ 1269.785235][ T7346] netlink: 'syz.4.8362': attribute type 1 has an invalid length. [ 1269.842559][ T7333] team0: Port device team_slave_0 removed [ 1269.898104][ T7333] team0: Port device team_slave_1 removed [ 1269.921874][ T7333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1269.958656][ T7333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1270.003451][ T7333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1270.029001][ T7333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1270.045022][ T7333] bond2: (slave bridge3): Releasing backup interface [ 1270.078178][ T7333] bond3: (slave geneve2): Releasing active interface [ 1270.102931][ T7333] bond4: (slave bridge6): Releasing backup interface [ 1270.113698][ T7333] vlan0: left allmulticast mode [ 1270.119263][ T7333] geneve0: left allmulticast mode [ 1270.124553][ T7333] vlan0: left promiscuous mode [ 1270.131532][ T7333] geneve0: left promiscuous mode [ 1270.136896][ T7333] bridge0: port 3(vlan0) entered disabled state [ 1270.153999][ T7333] bond7: (slave bridge9): Releasing backup interface [ 1270.160927][ T7333] bridge9: left promiscuous mode [ 1270.166138][ T7333] bridge9: left allmulticast mode [ 1270.185118][ T7339] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1270.207864][ T7339] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1270.228931][ T7339] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1270.418453][ T7369] netlink: 'syz.4.8368': attribute type 13 has an invalid length. [ 1270.420473][ T7371] sctp: [Deprecated]: syz.3.8365 (pid 7371) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1270.420473][ T7371] Use struct sctp_sack_info instead [ 1270.445382][ T7369] netlink: 'syz.4.8368': attribute type 17 has an invalid length. [ 1270.584681][ T7369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1270.599944][ T7369] 8021q: adding VLAN 0 to HW filter on device team0 [ 1270.642541][ T7380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1270.643275][ T7369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1270.654107][ T7380] netlink: 'syz.2.8370': attribute type 18 has an invalid length. [ 1270.728791][ T7369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1270.739208][ T7369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1270.752418][ T7369] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1270.763071][ T7369] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1270.775812][ T7369] hsr0: left promiscuous mode [ 1270.790838][ T7369] veth1_vlan: left promiscuous mode [ 1270.802735][ T7369] veth0_vlan: left promiscuous mode [ 1270.808896][ T7369] veth0_vlan: entered promiscuous mode [ 1270.817462][ T7369] veth1_vlan: entered promiscuous mode [ 1270.828482][ T7369] veth1_macvtap: left promiscuous mode [ 1270.835967][ T7369] veth0_macvtap: left promiscuous mode [ 1270.843553][ T7369] veth0_macvtap: entered promiscuous mode [ 1270.859286][ T7369] veth1_macvtap: entered promiscuous mode [ 1270.914414][ T7369] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1270.924317][ T7369] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1270.937797][T14627] bond2: (slave ip6gretap2): link status up again after 0 ms [ 1270.946616][ T7369] bond3: left allmulticast mode [ 1270.953647][ T7369] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1270.960272][T14628] bond2: (slave ip6gretap2): link status up again after 0 ms [ 1270.973545][ T7369] batman_adv: batadv0: Interface activated: gretap1 [ 1270.977880][ T1245] bond2: (slave ip6gretap2): link status up again after 0 ms [ 1270.992384][ T7369] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1271.006335][ T7369] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1271.007795][ T1245] bond2: (slave ip6gretap2): link status up again after 0 ms [ 1271.034936][ T7369] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1271.046495][ T7369] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1271.047821][T14627] bond2: (slave ip6gretap2): link status up again after 0 ms [ 1271.065361][ T7369] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1271.079238][T14627] bond2: (slave ip6gretap2): link status up again after 0 ms [ 1271.098109][ T1245] bond2: (slave ip6gretap2): link status up again after 0 ms [ 1271.114667][ T7369] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1271.127768][ T8504] bond2: (slave ip6gretap2): link status up again after 0 ms [ 1271.139849][ T7369] gretap2: left allmulticast mode [ 1271.167940][ T8504] bond2: (slave ip6gretap2): link status up again after 0 ms [ 1271.195162][ T7369] bond6: left allmulticast mode [ 1271.202307][ T7369] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1271.212446][ T7369] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1271.234192][ T7369] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1271.245762][ T7369] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1271.259078][ T7369] veth9: left promiscuous mode [ 1271.267253][ T7369] vlan5: left promiscuous mode [ 1271.286956][ T7369] bond10: left promiscuous mode [ 1271.295065][ T7369] bond10: left allmulticast mode [ 1271.301653][ T7369] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1271.323128][ T5752] hsr0: entered promiscuous mode [ 1271.343838][T32270] bridge0: port 1(bridge_slave_0) entered blocking state [ 1271.351015][T32270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1271.389812][T32270] bridge0: port 2(bridge_slave_1) entered blocking state [ 1271.396976][T32270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1271.515810][ T7392] __nla_validate_parse: 2 callbacks suppressed [ 1271.515831][ T7392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8373'. [ 1271.548665][ T7395] tls_set_device_offload: netdev not found [ 1271.563322][ T7383] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8371'. [ 1271.575128][T12978] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1271.594963][T12978] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.604981][ T7397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8373'. [ 1271.614694][T12978] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1271.624009][T12978] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1271.633077][T12978] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.641848][T12978] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1271.722143][ T7402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8376'. [ 1271.933088][ T7392] : entered promiscuous mode [ 1271.962170][T12978] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1271.981118][T12978] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.999242][T12978] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1272.009836][T12978] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1272.018206][T12978] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.029341][T12978] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1272.045718][ T7397] openvswitch: : Dropping previously announced user features [ 1272.069419][ T7420] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8380'. [ 1272.251280][ T7426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8383'. [ 1272.827235][ T7459] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1272.836523][ T7459] CPU: 0 UID: 0 PID: 7459 Comm: syz.0.8391 Not tainted syzkaller #0 PREEMPT(full) [ 1272.836539][ T7459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1272.836547][ T7459] Call Trace: [ 1272.836552][ T7459] [ 1272.836558][ T7459] dump_stack_lvl+0xe8/0x150 [ 1272.836576][ T7459] sysfs_warn_dup+0x8e/0xa0 [ 1272.836591][ T7459] sysfs_do_create_link_sd+0xc0/0x110 [ 1272.836607][ T7459] device_add_class_symlinks+0x1cf/0x240 [ 1272.836622][ T7459] device_add+0x475/0xbb0 [ 1272.836636][ T7459] wiphy_register+0x21e8/0x32e0 [ 1272.836661][ T7459] ? __pfx_wiphy_register+0x10/0x10 [ 1272.836676][ T7459] ? __pfx_netdev_run_todo+0x10/0x10 [ 1272.836695][ T7459] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1272.836716][ T7459] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1272.836732][ T7459] ieee80211_register_hw+0x3d82/0x4a70 [ 1272.836756][ T7459] ? ieee80211_register_hw+0x1981/0x4a70 [ 1272.836787][ T7459] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1272.836804][ T7459] ? __asan_memset+0x22/0x50 [ 1272.836818][ T7459] ? __hrtimer_setup+0x1b7/0x260 [ 1272.836832][ T7459] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1272.836848][ T7459] mac80211_hwsim_new_radio+0x3335/0x5aa0 [ 1272.836877][ T7459] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1272.836888][ T7459] ? kstrndup+0xbf/0x160 [ 1272.836904][ T7459] hwsim_new_radio_nl+0xf6a/0x1c00 [ 1272.836928][ T7459] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1272.836945][ T7459] ? rcu_is_watching+0x15/0xb0 [ 1272.836959][ T7459] ? trace_kmalloc+0x2a/0xf0 [ 1272.836978][ T7459] ? __nla_parse+0x40/0x60 [ 1272.836995][ T7459] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1272.837013][ T7459] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1272.837034][ T7459] genl_family_rcv_msg_doit+0x22a/0x330 [ 1272.837055][ T7459] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1272.837079][ T7459] ? bpf_lsm_capable+0x9/0x20 [ 1272.837089][ T7459] ? security_capable+0x7e/0x2c0 [ 1272.837106][ T7459] genl_rcv_msg+0x61c/0x7a0 [ 1272.837126][ T7459] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1272.837142][ T7459] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1272.837162][ T7459] netlink_rcv_skb+0x232/0x4b0 [ 1272.837176][ T7459] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1272.837193][ T7459] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1272.837216][ T7459] ? down_read+0x270/0x2e0 [ 1272.837230][ T7459] ? genl_rcv+0xd/0x40 [ 1272.837246][ T7459] genl_rcv+0x28/0x40 [ 1272.837261][ T7459] netlink_unicast+0x75c/0x8e0 [ 1272.837279][ T7459] netlink_sendmsg+0x813/0xb40 [ 1272.837298][ T7459] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1272.837314][ T7459] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1272.837329][ T7459] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1272.837346][ T7459] ____sys_sendmsg+0x972/0x9f0 [ 1272.837361][ T7459] ? __might_fault+0xaf/0x130 [ 1272.837378][ T7459] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1272.837397][ T7459] ? import_iovec+0x73/0xa0 [ 1272.837415][ T7459] ___sys_sendmsg+0x2a5/0x360 [ 1272.837428][ T7459] ? __lock_acquire+0x6b5/0x2cf0 [ 1272.837449][ T7459] ? __pfx____sys_sendmsg+0x10/0x10 [ 1272.837468][ T7459] ? futex_wait+0x2a2/0x390 [ 1272.837508][ T7459] ? __fget_files+0x2a/0x420 [ 1272.837529][ T7459] ? __fget_files+0x3a0/0x420 [ 1272.837565][ T7459] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1272.837589][ T7459] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1272.837608][ T7459] ? rcu_is_watching+0x15/0xb0 [ 1272.837627][ T7459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1272.837639][ T7459] do_syscall_64+0x15f/0xf80 [ 1272.837653][ T7459] ? trace_irq_disable+0x3b/0x140 [ 1272.837673][ T7459] ? clear_bhb_loop+0x40/0x90 [ 1272.837698][ T7459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1272.837718][ T7459] RIP: 0033:0x7f208839cdd9 [ 1272.837737][ T7459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1272.837753][ T7459] RSP: 002b:00007f20891ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1272.837775][ T7459] RAX: ffffffffffffffda RBX: 00007f2088615fa0 RCX: 00007f208839cdd9 [ 1272.837789][ T7459] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008 [ 1272.837802][ T7459] RBP: 00007f2088432d69 R08: 0000000000000000 R09: 0000000000000000 [ 1272.837815][ T7459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1272.837827][ T7459] R13: 00007f2088616038 R14: 00007f2088615fa0 R15: 00007ffcf263e618 [ 1272.837859][ T7459] [ 1273.700401][ T7488] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8397'. [ 1273.726346][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8396'. [ 1273.778755][T31071] block nbd5: Receive control failed (result -1) [ 1273.805716][ T7495] erspan1: entered promiscuous mode [ 1273.829834][ T7495] erspan1: entered allmulticast mode [ 1274.283378][ T7519] netlink: 'syz.3.8403': attribute type 1 has an invalid length. [ 1274.299767][ T7518] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8404'. [ 1274.329907][ T7519] gretap4: entered allmulticast mode [ 1274.353314][ T7518] gre4: entered allmulticast mode [ 1274.909310][ T7535] lo speed is unknown, defaulting to 1000 [ 1275.235838][ T7559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8412'. [ 1275.574647][ T7534] lo speed is unknown, defaulting to 1000 [ 1275.589989][ T7535] wg1 speed is unknown, defaulting to 1000 [ 1275.680729][ T135] net_ratelimit: 33 callbacks suppressed [ 1275.680748][ T135] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1275.705489][ T7573] netlink: 'syz.0.8416': attribute type 13 has an invalid length. [ 1275.745378][ T7573] netlink: 'syz.0.8416': attribute type 17 has an invalid length. [ 1275.939318][ T7573] batadv_slave_1: left promiscuous mode [ 1276.179698][ T7578] netlink: 'syz.4.8417': attribute type 21 has an invalid length. [ 1276.257349][ T7573] A link change request failed with some changes committed already. Interface batadv1 may have been left with an inconsistent configuration, please check. [ 1276.277389][ T7534] wg1 speed is unknown, defaulting to 1000 [ 1276.554806][ T7589] __nla_validate_parse: 2 callbacks suppressed [ 1276.554826][ T7589] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.8419'. [ 1276.602508][ T7589] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.8419'. [ 1276.712776][ T7587] syzkaller0: entered promiscuous mode [ 1276.730581][ T7587] syzkaller0: entered allmulticast mode [ 1276.750236][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1276.798531][T32274] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1276.928122][ T1245] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1277.057260][ T7597] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 3, id = 0 [ 1277.071610][T32267] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1277.418508][ T8499] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1277.778201][T32267] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1277.862473][ T7622] netlink: 'syz.0.8428': attribute type 9 has an invalid length. [ 1277.880574][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8428'. [ 1277.968264][ T1245] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1278.107785][T32274] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1278.289595][ T7634] netlink: 'syz.4.8430': attribute type 1 has an invalid length. [ 1278.371256][ T7639] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8430'. [ 1278.462376][ T7642] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8432'. [ 1278.479912][ T7642] netlink: 43 bytes leftover after parsing attributes in process `syz.3.8432'. [ 1278.494386][ T7642] netlink: 'syz.3.8432': attribute type 6 has an invalid length. [ 1278.502825][ T7642] netlink: 'syz.3.8432': attribute type 5 has an invalid length. [ 1278.527214][ T7646] netlink: 'syz.3.8432': attribute type 1 has an invalid length. [ 1278.546106][ T7642] netlink: 43 bytes leftover after parsing attributes in process `syz.3.8432'. [ 1278.728851][ T7634] bond11: entered promiscuous mode [ 1278.734670][ T7634] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1278.745702][ T7639] bond11: entered allmulticast mode [ 1278.838545][ T7647] bond11: (slave bridge9): making interface the new active one [ 1278.857628][ T7647] bridge9: entered promiscuous mode [ 1278.878036][ T7647] bridge9: entered allmulticast mode [ 1278.898743][ T7647] bond11: (slave bridge9): Enslaving as an active interface with an up link [ 1279.155723][ T7646] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1279.691291][ T7678] lo speed is unknown, defaulting to 1000 [ 1279.797312][ T7682] netlink: 332 bytes leftover after parsing attributes in process `syz.4.8438'. [ 1279.822587][ T7692] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8440'. [ 1280.151064][ T7710] netlink: 'syz.2.8443': attribute type 11 has an invalid length. [ 1280.170537][ T7710] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.8443'. [ 1280.446435][ T7725] syzkaller0: entered promiscuous mode [ 1280.466488][ T7725] syzkaller0: entered allmulticast mode [ 1280.599766][ T7678] wg1 speed is unknown, defaulting to 1000 [ 1280.707827][ T8499] net_ratelimit: 14 callbacks suppressed [ 1280.707846][ T8499] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1280.863401][ T7745] netlink: 'syz.3.8452': attribute type 1 has an invalid length. [ 1280.889938][ T7740] team0: Failed to send options change via netlink (err -105) [ 1280.908477][ T7740] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 1280.936404][ T7740] team0: Port device team_slave_0 removed [ 1281.007825][ T1245] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1281.128297][ T8504] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1281.147060][ T7702] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1281.156001][T27540] smc: removing ib device !yz! [ 1281.232102][T27540] smbdirect: ib_dev[!yz!] removed [ 1281.321233][ T7761] workqueue: name exceeds WQ_NAME_LEN. Truncating to: . ΁ *] [ 1282.000060][T32274] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1282.013663][ T7778] __nla_validate_parse: 4 callbacks suppressed [ 1282.013679][ T7778] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8457'. [ 1282.127820][ T8499] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1282.493506][ T7783] netlink: 88 bytes leftover after parsing attributes in process `syz.1.8458'. [ 1282.687172][ T7791] netlink: 88 bytes leftover after parsing attributes in process `syz.3.8460'. [ 1282.907842][ T8504] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1282.972792][ T7800] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1283.026483][T20950] [ 1283.028842][T20950] ====================================================== [ 1283.035858][T20950] WARNING: possible circular locking dependency detected [ 1283.042884][T20950] syzkaller #0 Not tainted [ 1283.047297][T20950] ------------------------------------------------------ [ 1283.054300][T20950] kworker/0:11/20950 is trying to acquire lock: [ 1283.060521][T20950] ffffffff8ea854e0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1283.070344][T20950] [ 1283.070344][T20950] but task is already holding lock: [ 1283.077700][T20950] ffffffff901727e0 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 1283.088241][T20950] [ 1283.088241][T20950] which lock already depends on the new lock. [ 1283.088241][T20950] [ 1283.098637][T20950] [ 1283.098637][T20950] the existing dependency chain (in reverse order) is: [ 1283.107639][T20950] [ 1283.107639][T20950] -> #9 (uevent_sock_mutex){+.+.}-{4:4}: [ 1283.115451][T20950] __mutex_lock+0x1a3/0x1550 [ 1283.120557][T20950] kobject_uevent_net_broadcast+0x27e/0x560 [ 1283.126965][T20950] kobject_uevent_env+0x55c/0x9e0 [ 1283.132508][T20950] device_add+0x557/0xbb0 [ 1283.137351][T20950] device_create+0x269/0x300 [ 1283.142456][T20950] msr_device_create+0x33/0x50 [ 1283.147739][T20950] cpuhp_invoke_callback+0x445/0x860 [ 1283.153536][T20950] cpuhp_thread_fun+0x36b/0x780 [ 1283.158908][T20950] smpboot_thread_fn+0x541/0xa50 [ 1283.164355][T20950] kthread+0x388/0x470 [ 1283.168935][T20950] ret_from_fork+0x514/0xb70 [ 1283.174036][T20950] ret_from_fork_asm+0x1a/0x30 [ 1283.179309][T20950] [ 1283.179309][T20950] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 1283.186857][T20950] cpuhp_thread_fun+0x127/0x780 [ 1283.192225][T20950] smpboot_thread_fn+0x541/0xa50 [ 1283.197674][T20950] kthread+0x388/0x470 [ 1283.202261][T20950] ret_from_fork+0x514/0xb70 [ 1283.207362][T20950] ret_from_fork_asm+0x1a/0x30 [ 1283.212636][T20950] [ 1283.212636][T20950] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 1283.220354][T20950] cpus_read_lock+0x42/0x160 [ 1283.225453][T20950] static_key_slow_inc+0x12/0x30 [ 1283.230901][T20950] setup_udp_tunnel_sock+0x2fd/0x510 [ 1283.236700][T20950] l2tp_tunnel_register+0xde2/0x1490 [ 1283.242496][T20950] pppol2tp_connect+0x8b7/0x17c0 [ 1283.247950][T20950] __sys_connect+0x312/0x450 [ 1283.253046][T20950] __x64_sys_connect+0x7a/0x90 [ 1283.258316][T20950] do_syscall_64+0x15f/0xf80 [ 1283.263421][T20950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.269823][T20950] [ 1283.269823][T20950] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1283.277543][T20950] lock_sock_nested+0x41/0x100 [ 1283.282813][T20950] inet_shutdown+0x6a/0x390 [ 1283.287828][T20950] nbd_mark_nsock_dead+0x2e9/0x560 [ 1283.293447][T20950] recv_work+0x1c2e/0x1d40 [ 1283.298376][T20950] process_scheduled_works+0xb5d/0x1860 [ 1283.304428][T20950] worker_thread+0xa53/0xfc0 [ 1283.309528][T20950] kthread+0x388/0x470 [ 1283.314112][T20950] ret_from_fork+0x514/0xb70 [ 1283.319207][T20950] ret_from_fork_asm+0x1a/0x30 [ 1283.324482][T20950] [ 1283.324482][T20950] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1283.332114][T20950] __mutex_lock+0x1a3/0x1550 [ 1283.337217][T20950] nbd_queue_rq+0x37b/0x1100 [ 1283.342313][T20950] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1283.348378][T20950] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1283.355220][T20950] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1283.361714][T20950] blk_mq_run_hw_queue+0x348/0x4f0 [ 1283.367333][T20950] blk_mq_dispatch_list+0xd16/0xe10 [ 1283.373047][T20950] blk_mq_flush_plug_list+0x48d/0x570 [ 1283.378930][T20950] __blk_flush_plug+0x3ed/0x4d0 [ 1283.384292][T20950] __submit_bio+0x28d/0x580 [ 1283.389304][T20950] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1283.395445][T20950] block_read_full_folio+0x599/0x830 [ 1283.401245][T20950] filemap_read_folio+0x137/0x3b0 [ 1283.406781][T20950] do_read_cache_folio+0x358/0x590 [ 1283.412402][T20950] read_part_sector+0xb6/0x2b0 [ 1283.417679][T20950] adfspart_check_ICS+0xb1/0x960 [ 1283.423128][T20950] bdev_disk_changed+0x817/0x1770 [ 1283.428666][T20950] blkdev_get_whole+0x380/0x510 [ 1283.434045][T20950] bdev_open+0x31e/0xd30 [ 1283.438801][T20950] blkdev_open+0x470/0x610 [ 1283.443723][T20950] do_dentry_open+0x785/0x14e0 [ 1283.448992][T20950] vfs_open+0x3b/0x340 [ 1283.453577][T20950] path_openat+0x2e08/0x3860 [ 1283.458685][T20950] do_file_open+0x23e/0x4a0 [ 1283.463698][T20950] do_sys_openat2+0x113/0x200 [ 1283.468881][T20950] __x64_sys_openat+0x138/0x170 [ 1283.474246][T20950] do_syscall_64+0x15f/0xf80 [ 1283.479350][T20950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.485750][T20950] [ 1283.485750][T20950] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1283.492948][T20950] __mutex_lock+0x1a3/0x1550 [ 1283.498050][T20950] nbd_queue_rq+0xc6/0x1100 [ 1283.503058][T20950] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1283.509112][T20950] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1283.515950][T20950] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1283.522440][T20950] blk_mq_run_hw_queue+0x348/0x4f0 [ 1283.528063][T20950] blk_mq_dispatch_list+0xd16/0xe10 [ 1283.533772][T20950] blk_mq_flush_plug_list+0x48d/0x570 [ 1283.539661][T20950] __blk_flush_plug+0x3ed/0x4d0 [ 1283.545023][T20950] __submit_bio+0x28d/0x580 [ 1283.550036][T20950] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1283.556197][T20950] block_read_full_folio+0x599/0x830 [ 1283.561988][T20950] filemap_read_folio+0x137/0x3b0 [ 1283.567524][T20950] do_read_cache_folio+0x358/0x590 [ 1283.573150][T20950] read_part_sector+0xb6/0x2b0 [ 1283.578422][T20950] adfspart_check_ICS+0xb1/0x960 [ 1283.583873][T20950] bdev_disk_changed+0x817/0x1770 [ 1283.589406][T20950] blkdev_get_whole+0x380/0x510 [ 1283.594768][T20950] bdev_open+0x31e/0xd30 [ 1283.599520][T20950] blkdev_open+0x470/0x610 [ 1283.604440][T20950] do_dentry_open+0x785/0x14e0 [ 1283.609707][T20950] vfs_open+0x3b/0x340 [ 1283.614281][T20950] path_openat+0x2e08/0x3860 [ 1283.619386][T20950] do_file_open+0x23e/0x4a0 [ 1283.624401][T20950] do_sys_openat2+0x113/0x200 [ 1283.629582][T20950] __x64_sys_openat+0x138/0x170 [ 1283.634938][T20950] do_syscall_64+0x15f/0xf80 [ 1283.640037][T20950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.646433][T20950] [ 1283.646433][T20950] -> #3 (set->srcu){.+.+}-{0:0}: [ 1283.653543][T20950] __synchronize_srcu+0xca/0x300 [ 1283.658993][T20950] elevator_switch+0x1e8/0x7a0 [ 1283.664263][T20950] elevator_change+0x2cc/0x450 [ 1283.669538][T20950] elevator_set_default+0x36c/0x430 [ 1283.675249][T20950] blk_register_queue+0x3e9/0x4e0 [ 1283.680783][T20950] __add_disk+0x677/0xd50 [ 1283.685617][T20950] add_disk_fwnode+0xfb/0x480 [ 1283.690798][T20950] nbd_dev_add+0x72c/0xb50 [ 1283.695721][T20950] nbd_init+0x168/0x1f0 [ 1283.700387][T20950] do_one_initcall+0x250/0x870 [ 1283.705659][T20950] do_initcall_level+0x104/0x190 [ 1283.711108][T20950] do_initcalls+0x59/0xa0 [ 1283.715947][T20950] kernel_init_freeable+0x2a6/0x3e0 [ 1283.721654][T20950] kernel_init+0x1d/0x1d0 [ 1283.726494][T20950] ret_from_fork+0x514/0xb70 [ 1283.731595][T20950] ret_from_fork_asm+0x1a/0x30 [ 1283.736868][T20950] [ 1283.736868][T20950] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1283.744674][T20950] __mutex_lock+0x1a3/0x1550 [ 1283.749774][T20950] elevator_change+0x1b3/0x450 [ 1283.755049][T20950] elevator_set_none+0xb5/0x140 [ 1283.760419][T20950] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1283.766727][T20950] nbd_start_device+0x17f/0xb10 [ 1283.772084][T20950] nbd_genl_connect+0x165b/0x1cf0 [ 1283.777613][T20950] genl_family_rcv_msg_doit+0x22a/0x330 [ 1283.783670][T20950] genl_rcv_msg+0x61c/0x7a0 [ 1283.788685][T20950] netlink_rcv_skb+0x232/0x4b0 [ 1283.793955][T20950] genl_rcv+0x28/0x40 [ 1283.798447][T20950] netlink_unicast+0x75c/0x8e0 [ 1283.803716][T20950] netlink_sendmsg+0x813/0xb40 [ 1283.808989][T20950] ____sys_sendmsg+0x972/0x9f0 [ 1283.814260][T20950] ___sys_sendmsg+0x2a5/0x360 [ 1283.819444][T20950] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1283.824889][T20950] do_syscall_64+0x15f/0xf80 [ 1283.829984][T20950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.836384][T20950] [ 1283.836384][T20950] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 1283.844976][T20950] blk_alloc_queue+0x546/0x680 [ 1283.850250][T20950] __blk_mq_alloc_disk+0x197/0x390 [ 1283.855876][T20950] nbd_dev_add+0x499/0xb50 [ 1283.860795][T20950] nbd_init+0x168/0x1f0 [ 1283.865464][T20950] do_one_initcall+0x250/0x870 [ 1283.870735][T20950] do_initcall_level+0x104/0x190 [ 1283.876184][T20950] do_initcalls+0x59/0xa0 [ 1283.881020][T20950] kernel_init_freeable+0x2a6/0x3e0 [ 1283.886728][T20950] kernel_init+0x1d/0x1d0 [ 1283.891570][T20950] ret_from_fork+0x514/0xb70 [ 1283.896663][T20950] ret_from_fork_asm+0x1a/0x30 [ 1283.901936][T20950] [ 1283.901936][T20950] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1283.909132][T20950] __lock_acquire+0x15a5/0x2cf0 [ 1283.914489][T20950] lock_acquire+0x106/0x350 [ 1283.919498][T20950] fs_reclaim_acquire+0x71/0x100 [ 1283.924948][T20950] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1283.931261][T20950] __alloc_skb+0x1d0/0x7d0 [ 1283.936186][T20950] alloc_uevent_skb+0x7d/0x230 [ 1283.941552][T20950] kobject_uevent_net_broadcast+0x2fa/0x560 [ 1283.947955][T20950] kobject_uevent_env+0x55c/0x9e0 [ 1283.953490][T20950] rfkill_uevent_work+0x64/0x190 [ 1283.958937][T20950] process_scheduled_works+0xb5d/0x1860 [ 1283.964985][T20950] worker_thread+0xa53/0xfc0 [ 1283.970078][T20950] kthread+0x388/0x470 [ 1283.974656][T20950] ret_from_fork+0x514/0xb70 [ 1283.979750][T20950] ret_from_fork_asm+0x1a/0x30 [ 1283.985024][T20950] [ 1283.985024][T20950] other info that might help us debug this: [ 1283.985024][T20950] [ 1283.995234][T20950] Chain exists of: [ 1283.995234][T20950] fs_reclaim --> cpuhp_state-up --> uevent_sock_mutex [ 1283.995234][T20950] [ 1284.007909][T20950] Possible unsafe locking scenario: [ 1284.007909][T20950] [ 1284.015338][T20950] CPU0 CPU1 [ 1284.020686][T20950] ---- ---- [ 1284.026033][T20950] lock(uevent_sock_mutex); [ 1284.030641][T20950] lock(cpuhp_state-up); [ 1284.037483][T20950] lock(uevent_sock_mutex); [ 1284.044583][T20950] lock(fs_reclaim); [ 1284.048555][T20950] [ 1284.048555][T20950] *** DEADLOCK *** [ 1284.048555][T20950] [ 1284.056679][T20950] 4 locks held by kworker/0:11/20950: [ 1284.062033][T20950] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1284.072986][T20950] #1: ffffc9000e67fc40 ((work_completion)(&rfkill->uevent_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1284.085496][T20950] #2: ffffffff900dbbe0 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_uevent_work+0x2e/0x190 [ 1284.095675][T20950] #3: ffffffff901727e0 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 1284.106628][T20950] [ 1284.106628][T20950] stack backtrace: [ 1284.112501][T20950] CPU: 0 UID: 0 PID: 20950 Comm: kworker/0:11 Not tainted syzkaller #0 PREEMPT(full) [ 1284.112518][T20950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1284.112534][T20950] Workqueue: events rfkill_uevent_work [ 1284.112551][T20950] Call Trace: [ 1284.112558][T20950] [ 1284.112565][T20950] dump_stack_lvl+0xe8/0x150 [ 1284.112582][T20950] print_circular_bug+0x2e1/0x300 [ 1284.112602][T20950] check_noncircular+0x12e/0x150 [ 1284.112623][T20950] __lock_acquire+0x15a5/0x2cf0 [ 1284.112638][T20950] ? lockdep_unlock+0x5d/0xd0 [ 1284.112651][T20950] ? __lock_acquire+0x146e/0x2cf0 [ 1284.112667][T20950] ? __mutex_trylock_common+0x158/0x260 [ 1284.112688][T20950] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1284.112707][T20950] lock_acquire+0x106/0x350 [ 1284.112721][T20950] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1284.112739][T20950] ? lock_acquire+0x106/0x350 [ 1284.112756][T20950] fs_reclaim_acquire+0x71/0x100 [ 1284.112776][T20950] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1284.112793][T20950] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1284.112812][T20950] ? __alloc_skb+0x1d0/0x7d0 [ 1284.112826][T20950] ? __local_bh_enable_ip+0xd0/0x130 [ 1284.112842][T20950] __alloc_skb+0x1d0/0x7d0 [ 1284.112859][T20950] alloc_uevent_skb+0x7d/0x230 [ 1284.112881][T20950] kobject_uevent_net_broadcast+0x2fa/0x560 [ 1284.112903][T20950] kobject_uevent_env+0x55c/0x9e0 [ 1284.112926][T20950] rfkill_uevent_work+0x64/0x190 [ 1284.112941][T20950] ? process_scheduled_works+0xa70/0x1860 [ 1284.112955][T20950] process_scheduled_works+0xb5d/0x1860 [ 1284.112980][T20950] ? __pfx_process_scheduled_works+0x10/0x10 [ 1284.112997][T20950] ? assign_work+0x3d5/0x5e0 [ 1284.113012][T20950] worker_thread+0xa53/0xfc0 [ 1284.113036][T20950] kthread+0x388/0x470 [ 1284.113054][T20950] ? __pfx_worker_thread+0x10/0x10 [ 1284.113067][T20950] ? __pfx_kthread+0x10/0x10 [ 1284.113085][T20950] ret_from_fork+0x514/0xb70 [ 1284.113101][T20950] ? __pfx_ret_from_fork+0x10/0x10 [ 1284.113115][T20950] ? __switch_to+0xc79/0x1410 [ 1284.113135][T20950] ? __pfx_kthread+0x10/0x10 [ 1284.113152][T20950] ret_from_fork_asm+0x1a/0x30 [ 1284.113174][T20950] [ 1284.364342][ T47] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1284.506377][ T7808] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1284.518713][ T47] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1284.558050][ T7808] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1284.566772][ T7808] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1284.659064][ T47] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1284.798825][ T8504] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1285.817787][ T8504] net_ratelimit: 8 callbacks suppressed [ 1285.817806][ T8504] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1285.948134][ T8504] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1286.057790][T32274] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1286.167778][T27540] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1286.277801][T12988] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1286.388133][T32267] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1286.497808][T32274] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1286.607803][T32267] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1286.717882][T32267] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1286.827881][ T47] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1290.848091][ T8504] net_ratelimit: 35 callbacks suppressed [ 1290.848111][ T8504] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1290.967765][ T47] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1291.087795][ T8504] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1291.197821][ T47] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1291.307935][ T8504] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1291.427814][T32267] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1291.537890][T32267] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1291.647754][T27540] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1291.759099][T32267] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 1291.867804][ T8504] bond2: (slave ip6gretap2): failed to get link speed/duplex