last executing test programs: 5.294351449s ago: executing program 2 (id=6372): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="210f0000000000000000200000000800", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20008081}, 0x44000) (async, rerun: 32) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r2, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x21f670f5, 0x5d}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48080}, 0x4000) (async, rerun: 32) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000013c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000002940)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001400)={0x54, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x401}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}}]}, 0x54}}, 0x4000000) 4.871497646s ago: executing program 2 (id=6375): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) (async, rerun: 32) r2 = socket$unix(0x1, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (rerun: 64) socket$inet(0x2, 0x6, 0x3) (async, rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x2c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}}, 0x0) (rerun: 32) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) (async) unshare(0x2c020400) pselect6(0x40, &(0x7f00000003c0)={0x4, 0x8, 0x833, 0x1, 0x6, 0x2, 0xd, 0x7}, 0x0, &(0x7f0000000440)={0xc, 0x7, 0x7ffffffd, 0x3, 0x3, 0xfffffffffffffffd, 0x2, 0x2}, &(0x7f0000000480)={0x0, 0x3938700}, 0x0) (async) write(r1, &(0x7f0000000140)="000081004500001c1234", 0xa) 3.992134321s ago: executing program 0 (id=6382): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) (async) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) (async, rerun: 64) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r5) (rerun: 64) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="f5af24bd7000000000000e00000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000340)={@rand_addr, @private, 0x0}, &(0x7f0000000380)=0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@delchain={0x1350, 0x65, 0x801, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x3, 0xd}, {0x5, 0x2}, {0x0, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x10fc, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x7e3}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x6, 0x9}}, @TCA_FLOW_XOR={0x8, 0x7, 0x7}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xa, 0x9}}, @TCA_FLOW_ACT={0x10c8, 0x9, 0x0, 0x1, [@m_gact={0x64, 0x13, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x2701, 0x10000000}}]}, {0x2b, 0x6, "d8c138585e6547735a2a9bc8f98faf60600fde2f6ac2eecb40c1d3b03359ce90146e8fa11d77dd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_pedit={0x1060, 0x19, 0x0, 0x0, {{0xa}, {0xfb0, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xec8, 0x2, {{{0x1ff, 0x0, 0x6, 0xa14, 0xd177}, 0x4, 0x5, [{0x5, 0x25d, 0x1, 0x8001, 0x9, 0xc}, {0x0, 0x5, 0x10001, 0x1b, 0x8, 0x9}, {0xbd9, 0x101, 0x5, 0xffff, 0x0, 0x2}, {0x1, 0x5679, 0x7, 0x1, 0x40, 0x42}, {0x3, 0x3, 0xffff, 0x3, 0x3, 0x5}, {0x4, 0x100, 0x7, 0x8000, 0xff, 0x68}, {0x400, 0x7, 0x7, 0x1, 0x8, 0x6}]}, [{0x3, 0x1ff, 0x4, 0x8, 0xf6cf, 0x5}, {0xffffffff, 0x8, 0x0, 0x0, 0x1, 0x6}, {0xfffffffb, 0x400, 0x9, 0x2, 0x80, 0x2}, {0xe, 0x6, 0x4, 0x80000000, 0xffffffff, 0x9}, {0x7b66, 0x3, 0x28d, 0x7d, 0x5, 0x1}, {0x6, 0x101, 0x9, 0x0, 0x2, 0x5}, {0xdb7, 0x6, 0xfff, 0x10000, 0xff, 0x5}, {0xc4, 0x5, 0x451, 0x1, 0xdc6}, {0x9, 0x3, 0x8, 0x6, 0xe, 0x2}, {0x4, 0x5, 0xda, 0x5, 0x1, 0x1}, {0x15ae50ab, 0x7, 0xb, 0x3, 0x6, 0x5}, {0x1000000, 0x4, 0xa, 0xaa, 0x6, 0x1}, {0x4, 0x4, 0x9, 0x8001, 0x3, 0x2}, {0x11, 0x77d6725, 0x6, 0x0, 0x80000001, 0x7}, {0xfffffff0, 0xe, 0x1c13, 0x1, 0x1, 0x10}, {0xfffffff3, 0x6, 0x9ad35e3, 0x4, 0x0, 0x4}, {0x9, 0x9, 0x400, 0x4, 0x7, 0x400}, {0x1, 0x6b, 0x0, 0x4, 0x7, 0x9}, {0xf9, 0x9, 0x3, 0x83a0, 0x8, 0x1000}, {0x58, 0x893, 0xffff, 0xffffffff, 0xffffffff, 0x7ff}, {0xa, 0x8, 0x6, 0x8, 0x6, 0x8}, {0xe, 0x7ff, 0xd, 0x1, 0x3, 0x323}, {0x4, 0x9, 0x5, 0x0, 0x6, 0x4}, {0xffffffff, 0x100, 0x0, 0x8, 0xffffffff, 0x3}, {0x1, 0x100, 0x5, 0x80000000, 0x9, 0x9}, {0x4, 0xbe, 0x8, 0x0, 0xffffffff, 0x2}, {0x5, 0x8001, 0xfc9e, 0x1, 0x8}, {0x1, 0x4, 0x0, 0xffff, 0x400, 0x2}, {0x7, 0x3, 0x3, 0xfffffff7, 0x8, 0x5}, {0x7db1, 0x1, 0x800, 0x0, 0x9, 0x3}, {0x5, 0x9, 0x8001, 0x9, 0x24f, 0x10001}, {0x80, 0x4, 0x0, 0x4, 0xa, 0xc20}, {0x6, 0x200, 0xfffff800, 0xfffffcd0, 0x200, 0x9}, {0x9, 0x1ff, 0xd00000, 0xfc9, 0x5, 0xa28944af}, {0x8c, 0x9, 0x1000, 0x5, 0x13e00000}, {0x10, 0xfff, 0x8, 0x8000, 0x1, 0xa}, {0x7ff, 0x5, 0x8, 0x6, 0x9, 0x400}, {0x401, 0x8, 0x2, 0x6, 0x7, 0x4}, {0x2, 0x80000001, 0x2, 0x7f, 0xc3, 0x1}, {0x6, 0xe, 0x8, 0x1, 0x4}, {0x80000001, 0x1, 0x2, 0x6, 0x1, 0x1ff}, {0x100, 0x1, 0x9, 0x9, 0x5, 0x2}, {0x0, 0xb, 0xfffffffe, 0x0, 0x4, 0x2}, {0xfffffffd, 0x0, 0xfffffffd, 0xcf, 0x2, 0x7}, {0x9fe, 0x6a38a02e, 0x36cf, 0x9, 0x9, 0x3fc}, {0xf240, 0x10001, 0x3, 0x9, 0x8, 0x7fff}, {0xff, 0x8, 0x3, 0xb, 0x7, 0xfff}, {0x3, 0x9, 0x6, 0xfffffff8, 0x0, 0x3}, {0x0, 0x7, 0x4, 0xc, 0x3, 0x1}, {0x4, 0x0, 0x6, 0xf88f, 0x0, 0xfffffffd}, {0x5, 0x7, 0x0, 0x10001, 0x4, 0x8}, {0x5, 0x6, 0x9, 0x2, 0x9, 0x2}, {0x29, 0x8000, 0x3, 0x5, 0x6fef, 0x2}, {0x10000, 0x2, 0x5951, 0xfffffd08, 0x3, 0x6}, {0x1, 0x100, 0x5, 0xd, 0x3, 0x3}, {0x10001, 0x6, 0x4, 0xfffffd2d, 0xffff, 0x3}, {0x3, 0x2, 0x7, 0x3, 0x7, 0x48}, {0x7, 0x29acf09b, 0x7, 0xd8e, 0x8, 0x5}, {0x3, 0x6, 0x4, 0x6, 0x9, 0x7}, {0x7, 0x1000, 0x80000000, 0xb75, 0x0, 0x1}, {0x5, 0xfe4, 0x2, 0x663, 0x6}, {0xfffffff7, 0x198c, 0x3, 0x200, 0x6, 0x3}, {0x9, 0x6, 0xffff, 0x40, 0xc93}, {0xbe92, 0x9, 0xe0, 0x6, 0x263, 0xffffffa2}, {0xffffffff, 0x7ff, 0x8, 0x9, 0xd71b, 0x2}, {0xfffffffb, 0x0, 0xa, 0x19846b57, 0x9, 0x3}, {0x0, 0x4, 0x0, 0xa, 0x9, 0x8}, {0x3ff, 0xa2, 0x3, 0x9, 0x8, 0x3}, {0x1, 0x1, 0x6d, 0x7, 0x0, 0x4}, {0x10000, 0x80000000, 0x8a7, 0x2aee, 0x460, 0xfffffffa}, {0x43e, 0x58, 0x0, 0x8001, 0x1, 0x5b}, {0x200, 0x2, 0x8, 0xf3, 0x8, 0x5}, {0x8, 0x28000, 0x6, 0x9, 0x6, 0x6}, {0x7, 0xe77, 0x0, 0xdefd, 0x0, 0x4}, {0x10000, 0x20c, 0x10000, 0x6, 0x4, 0x1000}, {0x5c3, 0x2cd, 0x3, 0x9, 0x7f800000, 0x80000000}, {0x0, 0x200, 0x4, 0x0, 0x2, 0x130}, {0x9, 0x0, 0xb, 0x7, 0x1, 0x8}, {0x9, 0x401, 0x3, 0xfffffff7, 0x1}, {0x8, 0x9, 0x4500, 0x6, 0x380, 0x9}, {0x0, 0x396, 0x4, 0x9, 0x8ee8, 0x4}, {0x0, 0x3, 0x3, 0x6, 0x1000, 0x80000000}, {0x0, 0x5, 0x4, 0x0, 0xfffffe01, 0x2}, {0x0, 0x0, 0xf545, 0xffff94db, 0x1, 0x7}, {0xe, 0xfffffffb, 0x945, 0x7ff, 0x1ff, 0x37}, {0x4, 0x4, 0x8, 0x3, 0xfff, 0x80000001}, {0xb, 0x3, 0x4, 0x2, 0x8001, 0xffff}, {0x5, 0xdab9, 0x53f2000, 0x4, 0x12, 0x7}, {0x5, 0x61, 0xffffffff, 0x2, 0xfffffffb, 0xd8}, {0x1, 0x8000, 0x0, 0x2, 0xe7a, 0x80000000}, {0x6, 0x0, 0x1, 0x4, 0x0, 0x80}, {0x0, 0x4, 0x53, 0xfffffbff, 0xbf, 0x3ff}, {0x182, 0x9, 0x0, 0xdcd, 0xdcf, 0x200}, {0xa, 0x4, 0x1, 0x4, 0xb, 0x5}, {0x4, 0x0, 0x3, 0x5, 0x8, 0x1}, {0x6, 0x0, 0x8, 0x0, 0x9, 0x7}, {0x1, 0xfff, 0x2, 0x5, 0x7, 0xc}, {0xecb, 0x489730aa, 0x8c9a, 0x2, 0x4, 0xd}, {0xdc, 0x0, 0x8001, 0x6, 0x3, 0xf6ea}, {0x8607157, 0xffffffff, 0x3, 0x2, 0x8001, 0xe60e}, {0x517f28fe, 0x2, 0x2fc, 0x0, 0x5, 0x7}, {0x8001, 0xa3, 0x1, 0x9, 0x8, 0xffffaa00}, {0xfffffff7, 0xd1, 0x10000, 0x4, 0x0, 0x4cc}, {0x4, 0x80000000, 0x6, 0xa37, 0x214c}, {0x9, 0x5, 0x3ff, 0x8, 0x327, 0x3}, {0x6, 0xcf2d, 0x8, 0x8e, 0x7, 0x5}, {0x5, 0x10000, 0x3ff, 0xffffffff, 0x2, 0x8f}, {0x3ff, 0x6, 0x2, 0x80000000, 0x6a1a, 0x7f}, {0x10000, 0x5, 0x10000, 0xffff, 0x3ff}, {0x33, 0x7, 0xff, 0x82, 0x0, 0x3}, {0x0, 0x4, 0xfffffff9, 0xfffffff7, 0xf9, 0xfffffffa}, {0x6, 0xffffffff, 0x6, 0x6, 0x9, 0x6}, {0x1, 0x101, 0x10000, 0x1ff, 0xf, 0xcc71}, {0x7, 0x4, 0x3, 0x4, 0x5f, 0xac}, {0xc000, 0x8, 0x4, 0xa17c, 0x1, 0x4}, {0xfffffffb, 0x3, 0x8, 0x7fffffff, 0x2, 0x7}, {0x0, 0x8, 0x7, 0x1, 0x5, 0xdd}, {0x2, 0xffffffff, 0x4, 0x4, 0x2, 0x14}, {0x3, 0x8, 0x3ff, 0x1, 0x3, 0x5}, {0x653, 0x9, 0x4, 0x200, 0x9, 0x6}, {0xc, 0xe5, 0x2, 0x0, 0x8, 0x7}, {0xa3, 0x4, 0x5, 0x0, 0x5, 0x1ff}, {0xd1, 0xe, 0x2, 0x0, 0x7, 0x10001}, {0x10001, 0xf88, 0x9, 0xcb12, 0x800, 0x1}, {0x6, 0x8000, 0x6, 0xfffffffa, 0x9, 0xfff}, {0x4, 0x9, 0xfffffffb, 0x5, 0x0, 0x4}, {0x800, 0x7, 0x4, 0x447fae42, 0x7, 0x1ff}, {0x8, 0x1, 0x81, 0x7, 0x9, 0x1}], [{0x4, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {}, {0x5}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {}, {0x5}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x8593d61b7d00b256}, {0x2}, {0x4}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x2}, {0x3}, {0x7}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x6}, {0x3}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x5}, {}, {0x1}, {}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {}, {0x4}, {0x2}, {0x3}, {0x3}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x1}, {}, {0x5}, {0x3}, {0x4, 0x1}, {0x1}, {0x1}, {0x2}, {0x2}, {0x3}, {0x5}, {0x0, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {}, {}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0xe4, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x88, 0x6, "79f06e5f9bc25aa461664e795dae8d993e1be6f9fe21b6fba3f82cbd27cc8b99c2bfe1c40e8f4674d4243b9c19a6a15502387c82e354774347d206d28a4bdf8fd89fe95018b94e6c3707bfb8aa397ae2d27f1e0b28f4e98f39737e15e26628efec93fae67520119c5708c65e5ac5c9b7ed3d5fb486ce534cf1b6513a91402576c8c4571d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xd}, @TCA_FLOW_MODE={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0xa2}, @filter_kind_options=@f_matchall={{0xd}, {0x1e4, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffff, 0xffe5}}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_ACT={0x1b8, 0x2, [@m_mirred={0x1b4, 0xd, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3ff, 0x400, 0x17e292f0d5ffff10, 0x6, 0x10000}, 0x3, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3f, 0x6, 0x0, 0x9e88, 0x1}, 0x4, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xf, 0x6, 0x10000000, 0x200, 0x3}, 0x2, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8000, 0x10, 0x5, 0xfff, 0x1000}, 0x1, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10000, 0xffff, 0x4, 0x200, 0xfffffffe}, 0x1, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x23, 0x1, 0x8001, 0x5}, 0x4, r3}}]}, {0xc8, 0x6, "8cf089f5577ed55258c88241d10dabce4627892ee39cd6aa78974633652dba5e3caa00f2b56235fb49eacfe99686cb12c42826efdd4bef4a24c8cc00723b2c4902151bb745df5848f975ec71cf33d5e4dbf86055687a638f93bfff36ad9e8217caca1a4baa4fa84e6e47c98e4912506a64ecfbec848d424e4af58010ab6b3e85434032b0aefcaaa9f8963afbd87b82d14ac273fcf391e78ce5e751d47547c7bb7c553f5b55acd014f8ee3f97623689eb43e492592996f3c6e023d8b693f4382cf533dd01"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0xef1a35e27aeab71b}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2}}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x3}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0x9}}]}}]}, 0x1350}}, 0x0) (async) r9 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000280)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000300)={r10, 0x1, 0x6}, 0x10) (async) write$tun(r1, &(0x7f0000000240)={@val={0x0, 0xf5}, @void, @ipv6=@generic={0x3, 0x6, "14f75a", 0x0, 0x3b, 0x1, @rand_addr=' \x01\x00', @mcast2}}, 0x2c) 3.87223593s ago: executing program 1 (id=6383): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="280000005e00010000000000000000000c00fe0001000000080000800c00018008000400", @ANYRES32=r1], 0x28}], 0x1, 0x0, 0x0, 0x40004}, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000200)=r4, 0x4) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001404b59501000000000000000a4000fd", @ANYRES32=r6, @ANYBLOB="1400020000000000000000000000000000000001"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x25, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0x8}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x400c000) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x3, 0x50}, {0xffff, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x0, 0x0, 0x80000, 0x0, 0x0, 0xfffffffd}, [@TCA_NETEM_LOSS={0x4}, @TCA_NETEM_RATE={0x14, 0xd, {0x0, 0x0, 0x0, 0x9}}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x70}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r4, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xac, &(0x7f00000008c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000900), &(0x7f0000000240), 0x8, 0xbc, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000c40)={'syztnl1\x00', &(0x7f0000000b40)={'sit0\x00', 0x0, 0x78c0, 0x8, 0xdb1, 0x3, {{0x34, 0x4, 0x1, 0x1d, 0xd0, 0x65, 0x0, 0x1, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0xf, 0x0, [{0x2, 0x9, "ec4a18cb89d37b"}]}, @timestamp_prespec={0x44, 0x4c, 0xc4, 0x3, 0x9, [{@rand_addr=0x64010101, 0x6}, {@loopback, 0x1}, {@rand_addr=0x64010101, 0xffffffff}, {@multicast1, 0x80}, {@remote, 0x6}, {@loopback, 0x7ff}, {@loopback, 0x9}, {@rand_addr=0x64010100, 0x9}, {@broadcast, 0x9}]}, @cipso={0x86, 0x31, 0xffffffffffffffff, [{0x0, 0xf, "75f9885441f8d80594f5f210bd"}, {0x2, 0x2}, {0x3, 0x8, "4ec1ebd296ea"}, {0x2, 0x9, "6b4587ec31849c"}, {0x0, 0x3, "8a"}, {0x6, 0x6, "85357c52"}]}, @timestamp_addr={0x44, 0x2c, 0x97, 0x1, 0xe, [{@empty, 0x4}, {@local, 0x7}, {@broadcast, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc}, {@rand_addr=0x64010100, 0x7}]}, @noop]}}}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'bridge_slave_0\x00', 0x0}) r16 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r16, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a00", @ANYRES32=r17, @ANYBLOB="d4d9628ac35dd43c64d762ea0be1c1d67193d07b92433c7be4fb86c3897a1941a21ee42693b384440a166ea96ea917b15030e2460d6c31534371f9c62e8aaa458b633571bc290c38cd80aff017e1a233e6432ea753a537ea00fafa63e8b58e70d5849091dc331fd2db2107d015bac7d377ed8402bfc270441b402d8f539c27937836"], 0x3c}, 0x1, 0x0, 0x0, 0x45844}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000cc0)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000f00)={&(0x7f0000000f80)=ANY=[@ANYBLOB="b4010000", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fddbdf2504000000500001801400020076657468315f746f5f626f6e640000001400020067656e65766530000000000000000000140002006970366772657461703000000000000008000100", @ANYRES32=r18, @ANYBLOB="08000300000000002000018008000300020000001400020069705f7674693000000000000000000004000180180001801400020000000000000000000000000000000000280001800800030001000000140002006e69637666300000000000000000000008000100", @ANYRES32=r10, @ANYBLOB="4000018008000100", @ANYRES32=r12, @ANYBLOB="08000300030000001400020073797a6b616c6c65723100000000000008000100", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="74000180140002006261746164765f736c6176655f3000001400020076657468315f766972745f776966690008000100", @ANYRES32=r17, @ANYBLOB="080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006970766c616e310000000000000000000800030000000000140002007369743000000000000000000000000038000180080003000200000014000200766c616e3000000000000000000000000800010068b5674ea18185b9c0dc97212b017823309260bb04f559a39e64b83a8642a81b6730194cb1032595cdd79b7ce46076e5d3bfd8810445f8767755f2f9a0708189b0acc3f73742e4397c7a05ac4493cae55d93d5a39de4add5b5c8185e74da2f9008c659e37e26713a8d2e344ce6dc81f942bdf10d54f9bf162273", @ANYRES32=r18, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1b4}, 0x1, 0x0, 0x0, 0x8010}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="38050000", @ANYRES16=r2, @ANYBLOB="030027bd7000fbdbdb250200000008000100", @ANYRES32=r19], 0x538}, 0x1, 0x0, 0x0, 0x8000}, 0x4004044) syz_emit_ethernet(0x82, &(0x7f0000000400)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004500007400000000000190780a010102ac1414aa04009078e000000246100000006400000111a4fc00000000ac141415860600000003443c0001e0000001000000007f00000100000000ac1e010100040000ac1e010100000800e00000020096000000000080000000070a010100000000010000"], 0x0) 3.609845754s ago: executing program 2 (id=6384): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2}, 0x50) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f00000005c0)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX, @ANYBLOB="ac329a3552fb88ee5c890affe40beb9bc1de8225e95d2bedea343b750513ad3186488d86ce8d5b7785748423c55d0fa147650080a3fcd433ec9c41ce6f0b32baaa69e65adf5384461bb2e2c14a622d253b0a291fb92629571e785a2a7ec28693c1fe083c382c8523eb480cd88b086d8f4ab4815f82b1bfc1c353e442c8ba8f8dacf105a7dcc11237163839e7611054b12e0a92df53f22bb68e4ee188e2cadb43fa3a65"], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r2, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000bf030000000000008500000047000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x3a, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x3}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x10}, @map_fd={0x18, 0x7, 0x1, 0x0, 0x1}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb7c7}}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000000}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 3.245093601s ago: executing program 2 (id=6385): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100fffd08000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000012c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000140000001000010000000000000000000300000aca449eee9f094c7d02a8a2c44daf4e16ac2ee1cfda3d9fe47c38cfaa28c799aba9812e7d106769a50714a6c4e469876aec2448906a06e78bbc"], 0xb8}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x30) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) vmsplice(r6, &(0x7f0000002440)=[{&(0x7f0000001040)="05faa1d13aeb87e8c95d3ae29c4589f75608cf4f96f66c23ae2a2e5200909984738c875ae7c648fa34b6c134239aa3a71086aeeab8d0e33bb78ee36adb1ff9ecb91db75ee6048b581b0fa9273005916e6c3bd9f4cb3d44291d503540a24fd7f44566f6969512e8f28be370e9", 0x6c}], 0x1000000000000255, 0x0) setsockopt$inet_buf(r5, 0x0, 0x10, &(0x7f0000000040)="9379", 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newchain={0x144, 0x64, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xd, 0x7}, {0xffe0, 0xfff2}}, [@TCA_CHAIN={0x8, 0xb, 0x85b}, @filter_kind_options=@f_cgroup={{0xb}, {0x9c, 0x2, [@TCA_CGROUP_POLICE={0x34, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xf7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}]}, @TCA_CGROUP_EMATCHES={0x64, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x38, 0x2, 0x0, 0x0, {{0x8}, [@TCA_EM_META_RVALUE={0x26, 0x3, [@TCF_META_TYPE_VAR="7613", @TCF_META_TYPE_VAR="1d57", @TCF_META_TYPE_VAR="ecbe207d0a2b3eaa81bc", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="6d1164647b", @TCF_META_TYPE_VAR="a11ec76efc08c3", @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_LVALUE={0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc}}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xccb9}}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}, @filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xffe0, 0x6}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x7, 0x9c9f12c22e435d0e}}, @TCA_BASIC_POLICE={0xc, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x9a54}]}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_EMATCHES={0x34, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}]}}]}, 0x144}}, 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000000)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0xd}}]}, @qdisc_kind_options=@q_plug={{0x9}, {0x4}}]}, 0x60}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 3.197032924s ago: executing program 3 (id=6386): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x3ff, 0x2, 0x7ff, 0x7}, 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x1, 0x3, 0x9, 0x4, 0x40, 0x8}, @ipv4=@gre={{0x5, 0x4, 0x1, 0x23, 0xbe, 0x66, 0x0, 0x11, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xa}, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x94a, 0x10]}, {0x1, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "7f2b7b3be8e7cba3ec397101233a975c57b6340d490c75144827a96776c761358900102ae3158948f5754249a805378dfe298028e8673d38d19d5c9e558c1f387c350c2bf8acb4bf9900166e6a1d91895f7744b4ac0da332bba0fd9c2c4892823e6c"}, {0x8, 0x88be, 0x4, {{0xd, 0x1, 0x4, 0x3, 0x0, 0x2, 0x6, 0x4}}}, {0x8, 0x22eb, 0x1, {{0x1, 0x2, 0x4c, 0x1, 0x1, 0x2, 0x4, 0xdb}, 0x2, {0xffff, 0x808, 0x1, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}, 0xcc) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x6) 2.943796051s ago: executing program 1 (id=6387): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="916d4777ff4521b0350ed3939cc857fa6df2eb0d61adb2346d9b3051d2c1b492f3a6888d2b9e997f144b639804215a6311edd8d8c1223bba9bb5a24aab5371aaac6901267f5e602edf1300cdae72b5f8bfb24cc665fbf18d37c81784f8a76c42fc5cdcd487ee5e1a40674b8854f9fda058934b384151f206b2b43dfc98ca4396cf1e06b0ea0229b9dcba65d5263f658c9b0c056bad358eb9812ce24f39bbfc0eefb958c30ca961b9644b52e4bd5569b705163d5cdd1b3a72fba2b5d4e3d31dd0bd8e9a49b3617ff621a54f83a896222e3d6820", @ANYRES16=r2, @ANYBLOB="290000000000fedbdf25030000fa5700018044000400200001000a000000f2fffffffeffffff000000000000ffffffffffff00000000200002000a00000000000000ff020000000000030000000000000001000000000d0001007564703a73"], 0x6c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001e00010026bd7000fedbdf250700000057d639732cbe7ac98de8750da049a2aee89caea22a1d5c7da7f67f88b97f4c901f57017fc26e26fdf4d42d776ac23ff4e43a02451a06ebc31e9ff784aa4e39563a4a4921ab7f52f4e022dea87b2796efaa8d2113db4ddf40f0419d82f6baf2432f0d84bceec049f7a761d1840a41eae74aa477f87d1ec12177b44a258b1c751e998ff18178985bb44e6adb183136e8afe7f29a7dbd8d92632983b48a4df02593df1d0dcaf1535e3210d5f6ecd1fee3ca20c06bc404cfdd77", @ANYRES32=0x0, @ANYBLOB="000000000a0002000800168004000180"], 0x28}, 0x1, 0x0, 0x0, 0x4008451}, 0x20000800) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00), 0x0, 0xf00) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x934000, 0x1000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r3}, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000e80)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x16ce60, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) r6 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, 0x0, &(0x7f00000122c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.879492427s ago: executing program 0 (id=6388): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000020007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 2.815190401s ago: executing program 3 (id=6389): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x4, 0x81, 0x4, 0x3, 0x3, 0xbef4, 0x85, 0x38, 0x0}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={r1, 0xfff9, 0x9, 0x3ff, 0x0, 0x1}, &(0x7f00000000c0)=0x14) unshare(0x4000200) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={r2, 0xf, 0xfffa, 0xab8, 0xe, 0x1}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={r3, 0x400, 0x7, 0x6}, 0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000001c0)={r2, 0x101, 0x7fffffff, 0x6d17969e}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r3, 0xf}, &(0x7f0000000280)=0x8) (async) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000002c0)={r2, 0x9}, 0x8) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000300)={r3, @in={{0x2, 0x4e24, @private=0xa010102}}, 0x2417, 0x7}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000400)={r5, 0x92, "04988a4cd10bc950a9db02298db2e8724b04dc9ec269dca337100bc76d37cde45729d0aa5ac9b0ce8fb461d9486bbf3ff67dc35d6ede7fb0f2cd7bfc7bf99c9abcc0b48276a29a0aeb6e7ef33a2421606622fe4ca91fdaf1da049199bdfd85bf241595c4f0ccc7c4ba55c90f54bf50fe6017fbf00848a2f64a9bad205dd08cc39e8cf08cfb6b02b843916a94261f8c5214f5"}, &(0x7f00000004c0)=0x9a) (async) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000500)={0x8, 0x4, 0x4, 0x1, 0x5, 0x0, [{0x922, 0x4, 0x9, '\x00', 0x280e}, {0x4, 0x3ff, 0x12, '\x00', 0x1000}, {0x20000000000000, 0x100000000, 0x8, '\x00', 0x8}, {0x0, 0x649bb8c4, 0x0, '\x00', 0x8}, {0x4, 0x0, 0x2, '\x00', 0x1a00}]}) (async) getsockname$llc(r0, &(0x7f0000000640)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000680)=0x10) (async) r7 = socket$inet6(0xa, 0x800, 0x9) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f00000006c0), &(0x7f0000000700)=0x4) (async) ioctl$OCFS2_IOC_MOVE_EXT(r4, 0x40406f06, &(0x7f0000000740)={0x3, 0x0, 0x7671, 0x4}) (async) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000780)=@assoc_value={r6, 0x3800}, &(0x7f00000007c0)=0x8) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000000800)={0x0, @in6={{0xa, 0x4e24, 0x7ff, @private2, 0x600}}}, 0x84) sendmsg$inet_sctp(r4, &(0x7f0000001980)={&(0x7f00000008c0)=@in={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000001900)=[{&(0x7f0000000900)="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", 0x1000}], 0x1, &(0x7f0000001940)=[@authinfo={0x18, 0x84, 0x6, {0x6}}, @dstaddrv6={0x20, 0x84, 0x8, @local}], 0x38, 0x845}, 0x0) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000001a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001a40)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000001b80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001a80)=@newqdisc={0x9c, 0x24, 0x5b6c626fba5141a0, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0x6, 0x2}, {0x9, 0xd}}, [@TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x10, 0x3, 0x0, 0x1, 0x80000000, 0x7, 0x5}}, {0xe, 0x2, [0xee, 0xfffd, 0xfff8, 0xa6, 0x1]}}, {{0x1c, 0x1, {0x40, 0x80, 0x1, 0x8, 0x1, 0x93, 0xffffffff, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0x7, 0xe5, 0x1, 0x8, 0x2, 0x1, 0x2, 0x2}}, {0x8, 0x2, [0x4, 0xfc00]}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x440c0}, 0x49000) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000001bc0)={r3, 0x7}, 0x8) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7, 0x50, r8, 0x45708000) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000001c00)=@int=0x3, 0x4) (async) close(r4) setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, &(0x7f0000001c40)={0x5, {{0x2, 0x4e23, @multicast2}}}, 0x88) (async) ioctl$NILFS_IOCTL_GET_SUSTAT(r7, 0x80306e85, &(0x7f0000001d00)) (async) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r8, 0x84, 0x5, &(0x7f0000001d40)={r3, @in6={{0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xb1e7}}}, 0x84) 2.712764458s ago: executing program 2 (id=6390): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000040)={0x2c, 0x1, 0x2, 0x5, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004084) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x84, r3, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4f6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8001}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x84}, 0x1, 0x0, 0x0, 0x20044094}, 0x20000014) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x5, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xd}, [@map_fd={0x18, 0x2, 0x1, 0x0, r5}]}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) 2.614639147s ago: executing program 0 (id=6391): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket(0x10, 0xa, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYRES32=r1, @ANYRES32=r1], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x20008824}, 0x4800) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000b000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x5, [@var={0x6, 0x0, 0x0, 0xe, 0x5, 0x6}, @func={0x8, 0x0, 0x0, 0xc, 0x4}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x1, 0x3}]}, {0x0, [0x61, 0x0, 0x2e]}}, &(0x7f0000000340)=""/39, 0x49, 0x27, 0x0, 0x6}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x10, 0x27, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0xe}, @map_fd={0x18, 0x4, 0x1, 0x0, r0}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xd}, @ldst={0x3, 0x1, 0x6, 0x1, 0xb, 0xffffffffffffffe4, 0x1}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10000}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff8001}}, @cb_func={0x18, 0xa}, @call={0x85, 0x0, 0x0, 0x79}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x68a, 0x0, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x79, &(0x7f0000000180)=""/121, 0x41000, 0x4, '\x00', 0x0, 0x0, r3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0xa000000, 0xe, 0x0, &(0x7f00000000c0)="b994bc444b9893b04bf30981fd1a", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) socket(0x10, 0xa, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYRES32=r1, @ANYRES32=r1], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x20008824}, 0x4800) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000b000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x5, [@var={0x6, 0x0, 0x0, 0xe, 0x5, 0x6}, @func={0x8, 0x0, 0x0, 0xc, 0x4}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x1, 0x3}]}, {0x0, [0x61, 0x0, 0x2e]}}, &(0x7f0000000340)=""/39, 0x49, 0x27, 0x0, 0x6}, 0x28) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x10, 0x27, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0xe}, @map_fd={0x18, 0x4, 0x1, 0x0, r0}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xd}, @ldst={0x3, 0x1, 0x6, 0x1, 0xb, 0xffffffffffffffe4, 0x1}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10000}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff8001}}, @cb_func={0x18, 0xa}, @call={0x85, 0x0, 0x0, 0x79}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x68a, 0x0, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x79, &(0x7f0000000180)=""/121, 0x41000, 0x4, '\x00', 0x0, 0x0, r3}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0xa000000, 0xe, 0x0, &(0x7f00000000c0)="b994bc444b9893b04bf30981fd1a", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) (async) 2.252495336s ago: executing program 0 (id=6392): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 32) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000018c0)={0x1c, 0x2f, 0x5, 0x70bd27, 0x25dfdbfb, {0x4}, [@typed={0x4, 0x18}, @typed={0x4, 0x19}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42914}, 0x4000014) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000740)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r2, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffb972}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xdc}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x6c010}, 0x44) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b00736970"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r7, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0xc}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000826bd7000ffdbdf25030000002800038008000500ac14141e14000600ff02000000000000000000000000000106000400020000003c000180080008000200000014000300ac14143f00000000000000000000000008000b00736970000c000700140000000000000008000b007369700008000500c8eb00000800040005000000080004000000008008000600030000002800028014000100ac14141b00000000000000000000000006000f0001040000080007005a730000080006000e00000008000400f40a0000"], 0xd0}, 0x1, 0x0, 0x0, 0x20040800}, 0x4011) (async, rerun: 64) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x24, r5, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x8010) (async, rerun: 64) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async, rerun: 64) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_REGISTER_BEACONS(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010027bd5000fadbdf2555000000080001004f001e0208000300", @ANYRES32=r12], 0x30}, 0x1, 0x0, 0x0, 0x200440c1}, 0x24008000) (async) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000780)={0x1e, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211, @NL80211_ATTR_WPA_VERSIONS={0x0, 0x4b, 0x2}], @NL80211_ATTR_FILS_KEK={0x29, 0xf2, "f92016144e310e6229f7bd25aba01b8d2160130f6a40226365f1c88c35af12f0a0756b8614"}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r14], 0x68}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) r15 = socket$inet6(0xa, 0x3, 0x3c) getsockopt$inet6_buf(r15, 0x29, 0x20, 0x0, &(0x7f0000000200)) (async) r16 = socket(0x10, 0x3, 0x0) sendmmsg(r16, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.252248177s ago: executing program 1 (id=6393): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000040000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000002009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 2.232300818s ago: executing program 3 (id=6394): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d000010000000000000000000000008001200020002000000bd00000000001000330002030000003fff00000000000200000000000000000000570d45f3dd65602100000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000300)="4800000014001d1009074beafd0d8c560284606080ffe020590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b00000000", 0xfffffffffffffe22}], 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) r2 = socket$kcm(0x10, 0x2, 0x0) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000140)=0x4) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000080)={'wg0\x00', &(0x7f00000000c0)=@ethtool_perm_addr={0x20, 0x73, "9280ee1778d96c7636d4d5074c0a736005be3fc267d693c474c99e0fbd334f61726b05eaa8e7d7437c7a36451828db62d3c7cf24396977e84d079213093a1022f26ebe75a3a92fd81307b4c61a6a3940124e5527d781d731a0cdc537af2696b1e0bb494baed98416e52f0a604e2a84e762a88f"}}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f00000002c0)={{r2, &(0x7f0000000180)='@([:\x00', 0x109080, &(0x7f00000001c0)={@align=0x101, {0x5, 0x6, 0x8ce, 0xf}}, 0x10000, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0xa}, {[0x40, 0x4, 0x80000001, 0x81]}, 0xdfb, 0x0, &(0x7f0000000280)}) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000340)={'gretap0\x00', 0x3}) 2.190112921s ago: executing program 2 (id=6395): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f00000000c0)) (async) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f00000000c0)) unshare(0x8040480) r1 = socket(0x2, 0x3, 0xff) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000003c0)) (async) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000003c0)) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0500000001f01f00008000007b00000001"], 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0500000001f01f00008000007b00000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, 0x0, 0x0, 0x7b}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000400)={r3, &(0x7f0000000200)=']\x00', 0x20000, &(0x7f0000000300)={@_ha_fsid={[0x8001, 0x6]}, {0x3b7a, 0x2, 0x818, 0xffff}}, 0x5, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)=0x1}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=@getrule={0x14, 0x22, 0x8, 0x70bd29, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x1c, 0x18, 0x409, 0x0, 0x0, {0xa, 0x10, 0x0, 0x4}}, 0x1c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r8}, &(0x7f00000005c0), 0x0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r8}, &(0x7f00000005c0), 0x0}, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000001180)={0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES64=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x200000}, 0x94) ioctl$BTRFS_IOC_INO_LOOKUP(r7, 0xd0009412, &(0x7f0000000c00)={r10, 0x9}) ioctl$BTRFS_IOC_INO_LOOKUP(r6, 0xd0009412, &(0x7f0000000900)={r10, 0x4}) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x90, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xb}}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x2c, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x90}}, 0x0) ioctl$XFS_IOC_FSCOUNTS(r2, 0x80205871, &(0x7f0000000100)) (async) ioctl$XFS_IOC_FSCOUNTS(r2, 0x80205871, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r13, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000) 2.03466431s ago: executing program 1 (id=6396): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newtaction={0x88, 0x30, 0xb, 0x5, 0x0, {}, [{0x74, 0x1, [@m_ct={0x70, 0x1, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_LABELS={0x14, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8890}, 0x40) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000b80)={0xffffffffffffffff, &(0x7f0000000300)='[m#,$\\&)+3$/])A--.-\x00', 0x503000, &(0x7f0000000ac0)={@align=0x8, {0x200, 0x1, 0xfffffffd, 0xce93}}, 0x3, &(0x7f0000000b00), &(0x7f0000000b40)=0x6}) sendmsg$nl_route_sched(r1, 0xfffffffffffffffe, 0x20000000) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=r2], 0x24}}, 0x0) sendmsg$kcm(r1, &(0x7f00000021c0)={&(0x7f0000000600)=@pppoe={0x18, 0x0, {0x2, @broadcast, 'sit0\x00'}}, 0x80, &(0x7f0000002140)=[{&(0x7f0000000680)="b45627cadc2e6158cff3e55e7c7e5007b140d844d4f6030dcf2748a2fa43391a0b00e2b2e779992862ac6b39e0266b8a30adee025f1e309c79804a25cc2778d567162048f08b03310c", 0x49}, {&(0x7f0000000700)="3ecb3f8a2143b217ffea95e1d9075fdea90d15131035e8885fef0d5b4102c0c91f1f6e03608756456ac117985c6204b6b831e4bd5e85a915e048d6ef2b0802c749326ec465120fbfc4f32123a4ec5b15c1fdde2e7ffab8833b6d207ab3756fd6e418e7f23ff83059a01ffe738df830666a24a91601e22daabccd3888978909b1ca440bc55acffa43ea30466fa7bc13fa", 0x90}, {&(0x7f0000001080)="48d8e34932cf46a10bc340d4956ae38a12a40e12da17c692c1bab6143f7569472f542b0ae7dbbf7d69c84b5931539265d68d348aaeddc485b07e6466f7811f85a2164e294f1526d9e41ece2c487d8c865ed473a96a322f8738fdd64d8bb25f332cf510d4b1e648db52ef059098dff40ff3aa8c849ae846aaf1cfc3eab74a429825b1d2982c85d93d3e48bd3aa8ae4406a63ac594391ea0be688182cd4fbb64f6c6e5a7aaa6ae5250db9ed9d6b5d6a9c435dd84db9f13cc282d7948e7b4c451ea78adba4b3b8fec575ac5f46c5b23ce4e15b732b9073f47e41b87c5aea96186d24f737a603af423bb810ddce4e70f254c606d09e5095589b7467937aabe39bd627a2d0b1d12c3e1000a72a16f7585ac023ebb5664a42f59542656cbc8c40a299c4ab9bb415520ec385a5943c8847781879b0712e139104e17ae2e06500557a101a8e63dbcd86b30346b18a5599f9110dcdca282e00e2f0227a8cb50a11ca455f14419abff30f6e420b12bb858b55a901f6e145750ffc0a9642775bce3d005d53dc44ad25661c8499e79e4b52167359a4a49658a176d2389e70c65916035ece75f11a61c777bb3b8c92114edbbad7526ef2774d4a90ac4deeeca5ce9ffa2dd4e7e2b4bfecccc2a16fe340470d8268003dc0bbb60d24b2625ce316225d3156939e25e4aa0ba18f74da2251d478fcdc9d08932d6c9bfcafc0bbc17e412929c19f4e3abe5161ec5512b78e34f7cfef3f1a781c78c3dcae105e504a4f6cdb6317364da813874d9a0114fd3079cc6a2acdcf11cdb43e914e1751e5fc5538aa933a92097887e35bc9e0748d7af3838b81b4963675c77e080a709b1a0dc282ba02c4bee58b4bfecb5af54d10debe89fe50b002e6896522b8516f788a6da683ff7cd1fa1bf739a1f3e2bbf3e132c73ceee36636babcaf8d48034254dfa1ddd4aada386bb3d60978ed92c93fd6d06db91d9ddc1724533845087aaab3af0c6f762786e0ca852e43748859052a031decfed82de97ec4229b7d098b412d407cef8ef27236819298dde548d5724636416ef9dce815a6fdf1c24dedad9b9b6b524a7ea974a31bf976fda81706e1d4ce75af1bbc86845dd29c02fc1b532927a58f22b3731c245db202f82d8785ace5d40ca986329daffc17992b4f17c19e7f66a5bcd4a700432af408f56a424080530a06ca23771b858f5800492633e1227bf8f51e6e2f6f1d8abde946795f344880abc127d97a126d94e2d140a2491e409a9f764b6b164ef359c7921519481a5032fe3001d31c46f4ea63dc7857b594f7ad6ed4132c3d446d864149108b4adeb655ab912c237ea3eb36297e0e3789d092ebba538567cae7e32b3b75fde84807d8ecbec1b7e4f18d3fe2c17673b88484639b7c7a69ab3bd87b3d4b18cfb0e3161feb04eec8319575dbdb2638e18f5c1b0e00c6fc9a74fd2ba68b98186389c5a8d9182d7ca1163980c7121e70b43838c344d0b174444f05da5b7c40874bffc8de04890ae5d62045db1c621e7dc8f54239e809c8fa2ef6c799313e120c4326f0973668a1b88a35c1839d4bbe21759156e2014c148857f34d48aad3ba0661ab129903ea0a2decde4d5e8995a736bd13277f8298dafb2e034c8148ab3d06588e4c4a334ddb0932a595d41e05277bc0a6676f6c462f5368ac7646d8fe62fbbfc421960985186257aeade1da93fc08c72885bb69d0536e13d6363352d0c1757cc9828f1db3ba68ed83b88aeac9a4a0a8a649b770635a6555b761d3774be9fb1867ab307844ce33a7588e921f35f9fa9617b4357aff8cd2c3731bddd18fb12fa1df22254ae4e124b5b812d942daeed06d6c04605c88148cf2c8ad1a4b5c3051e54c914ded57ee9e731c6cef591f9edc04458b09fb4505ea74d8a27c5caefafc6301cac4801e4b37f40beedd303f3fe44a30d48c22a1baec2733aa74af96b2bbc99c9848c6dfb1c3940479d1a67d6fccf27d0e3bb0a9792cd16fea71bc3b989f643498c45566a5748160a0ec8d60346845704feac999f397ede9a5d8ff021e1cd612f6f7b2664cf976efc80bd6210eac11f3b55411f28a26c0771dcb6c987d3272165cde4c05918b479df893c845a20227c5e7d319ad29f5d3f3c2abe4a26bc9b9e0b0a9ea7ea35c4861fe56cddb285252cdfca2ede718e16fe49cfc18507f1a85e0e67a8b1680a9063216f7140b0dbf672bafc5010538668c70aff5f48e40dcc8b573ed5d1b49cc71f445dd0d1cc2b41a69c0f4e959d25849aee4e82ca4386e8cf76baaf50033ce2c0a4e8e5782d7ec7bcf1cd8d5471ae5bce1278568d847a36e0fd9ad94502e5bf250b47186be0776e4025fed198843f60299eec55de704abcccb4b02b4cb9f4f5d273af6d3caa95194a67e80de2e60c47b48f9d22aaf7c879f361786436b427dcdbf6d4324bd2393be3cf4f833c6fe94ecc42862df90376057348cc93e1c1076f51dd5975113df2a559985ef7716f0cf9e842f413f054bfa8074001b20f4b66cab69d7e0b10c2e3c7011402ce019c21bf8beb8d75520d6e82684640627f64960901dc67780146936331bac405aee74a48f4c6579c7d5708a78e9bacd78bb7e25fa350b8acfa92ee983027cf440a770af83d3c7bd28f707eb2bc5aa3939b79d79a0d841041e16aece76413cd69a81e2f73137e8200e08b289cbade467bdb66bd0adcfba7a5047b8b51f72703625a8dd1124af7b0fddc70ffcb375404d350826b7126f8937e4fcc318f147d53657cab604280fa387a5deb70c636f6afeaf295654d05a163a016a83c6b863b24a280e5779b178240cd9e778fd205685cbd7f59a82a96695dee03f5d39dd55603d72a748f1d6ef9f81d2f9a3336efe6deb461c8b72303f70acb1736d917ad05ed9b5148c94564142c6e2cf29044f670902933d1338fbb0ba8ef853dcf8dbebd875f8b22d19e7add933100d56eb5c9fe9e855fc79cc4277d02dbf69d7984060ccc46aa2b14229bce0e03d3b62d8ca43ac6762e3f3b901723a959851496ab92868982052990d5e4dc469549d2124bf6cbbc7ed2b3af929583efc2b1bb819b57b62e57cf61cf8514dc5bef8a124717a835fcd517f754f057a8c881ca07b2a66747a39a707506055f747a5dc1d5b40106ce2ca468b88d21e668dfb1a8dbb32cb80484045ca1f033607ef7f12590df1d69211569a466a59da65f9babae15e6cff8033af441bfb9d2c882be3b5f4eb29f52868250911f6961901d6735c7c5b47d9dd7f4c09a6e106bb3a119b4c2dfb0cc79256a234f7925a53b38467841652d741446f4cd981c20ffd24238a1f3fb4342d58a5069219292237bd452a46ef37ac84e27f60ff56bc084061c91f330b64681c507bedc9110f5cbbf19d91fc6b67d2fa1a608c7124fffc77ca498fb66f397fff1d2e908e69c3391b24c5547dcdd364305bbd16a661dfba358ed206c19b9631036038dba0eb2c072d5cd89568178ab773e7779074c21ef922dd37a57f249ba6e010bda3e144810148970b65cc7aebd1814d338d4c2972ca1a06869c03cd1776d0bff7f5f6b19abcd2f0724fc6cb1e1d6446d8470f77679ef94565d771caee01e24fdd78a76ac30dfca5c010e0790dec61ca6ebfefbf261ea5bc998c421388beb744dc2e65500bb150d1741305cff4b37089dc8ea08c6143d287c06e4efd03832dc700373264047b6692f313c97c6991998d9627bddb0af001c74f1823ea1296aaf2cdc57d7ad8fc47b10e7a82a09cef386b2a210245b5559dfec88061156fa74a031cf3c9945dfbbd224941d39368055bc7932742bb83aae6e457d551c4a92ff41a340303202e123215bc8170a933e6a1c034937e522d45c41e4d05c0daf054fb204eea84688b207b6d62cff6b88f44cf58a8edf68a41ef5f0cf05ff2edaf9b4e4d0520b877129c2248f2b1b7cbd6dce2439564fc03a9ec0a98bf7ae0eb3c88a0b41429b674b66d0975cd7287fce544865c79748007cb2905445b9c2e3bc92e495494a54b6891348523b7a41a0d56544eff8511e8846331c93040867c03b1cb5581e076d51ad64ba9dc328b4fad5a0313616644433df120f38286b908a4965eb9f1a29f39a4712401e83aab947f31fc742a3ec77c6e718426695c5aa88dad64719f0d6f2894a0191922664ca6c3fcb0fba95fe6759b945b1fd0bc687197c7856e00de25307bddbb682c1e9ec489713e12637b2369cf387e83fb24ef9ce50140371dadfdb48dbee93761a0396138adfa7f5bbcc00f846502eac4fd293f20387e61fdf93747b9b35d1414517e2dc641dff6fb53bb928831482af45fc44d5e0cda3d2b1f4650281ad748d33e17926b92b060285488fbd57de94a311b3c971393d56543f05ab9110913c000aa18171a1d5a6b8ce1d0cebe32ab4b1bcfcb712184370436f57bd3834136323b7007518a2126122dc8efee3ca9df811fa3a4463dbf3c52e0ea0daf164bfdd6b3a367321691082918b1925e5fb316e0ab648cbf1d3de9414048a427781fd2659a8c521a9d412dfe4e2dbdfb99e87290e990a549aa572a77fbd0925a8a06faee12f485e4eb29510304288c004b7bdf82a7343288d7201c20d038f8ae32bb803f8275a79039c449bb514ea04379e35cd80fe2115ed0efe80d8c5f76546d7012253416c0bc97358445f5153be2db649a416bf9b342c6f635ea2b0e56dbc0aa735de785c06d8134aeaa71be9d988d6deee585e8fef292c09dd0bf02e8f18705e946ad0111f52658632e0e21f6e4fb005810b060ad05b6b55b9770bd9a57e15a54f43dcd778757fe667aa9abe18f7d7f4bdef1a660f29e02c1ea36578f5494a9b3455e922ba13b723588cc557a157a3f4142225fc192fb34da6cbdbdfd0aff94384aa84f8e8a05717cd8d66231288ab9d912a620f865dc6896afdec4f2d8c1d5924ec364e042a3bd6a9bee3023c04bbb0a8d64cbfd2a7b49d342b5a35230817f7db7cd52c8b1bad394465fa7a5572fc6d1e98bed1e353d9e35d8c8b07744e3830c7f3e4c88d54b81db915d72d501e8b89ff2e19c9868742ca395242a55b7b086ccb65ffabe3cb3f508a9655e6826143f2e7e82d712a56ed16bcc486f731b5766a54085cf5a27908d3fe98d7f026d5689e0be33c640423da4ba51174579b09858147c723e8e734786ac46fb2c40129939754943f20ac584223b8189e00c19aa44b82f0d1948dc954e72ea3ecf4354c28de3f4609b393f3500d78989271e9b1e8dff51ec4a76ebb045a0674e9e8cbb3d9adf441a63c0a00e3c85b3ce5235c469b0fc1492bd728287027ac478bea33f82a166a1f277bb1e01e0004b85fbef3a0c4981be20cbfe13bb8362fc0447f1b1f39860191c4a01e5efa414e48f03df2d77022c7c65ee07ab766b8c83f676ac012d6613e61fe396333c7609c771efdd5f08e3a6a2e767717381c52fa7bdb03aa123800973fa9283956cd025e8e25dfc9ad1947eb0e43a674c79b88ccd1af8b2fd0ea44ea532a71e3b17888acc4903d37fdd68bf14c50482e777c1fabf765328451532997066257155698d70c745520810bd0c976cdf146f9c0a32ccad4027888977892a3e180c0bdb9d232f31ed17b0ca5abbd490f582905f97a83ee5bb801c199b76aebfb289403d911bed1114e8e66e05929f1d0191fb18ae74b72f6fbfe1b333b59fedcaf3a0009548eca11bf80347d935f6b5342e18e6903778dca0f00169795d8bb41df26ef95895e010a9f142e1463be30868aad417675c7cfb46c02c59e75014d29d6e43d4040d0b5b48f94f7de6bfb4e74af03639f09701f80795b0191a03610b7ee491fcbd651", 0x1000}, {&(0x7f0000002080)="fe0bc10a147c6c6c3444e68f116758097b52c61b37dfa9df26fa4eabf81458d824d96700b238cf1cb8c69cce319e84f1e05bc287d6b90b15d6cf7041b571ee9cc1ae8dbe1f8e97b2462255a7236e625bd781c5feb7b1a33e1c9de6d75ff151cc342dff02cd9b00d6233ac58cd1caca0ff8517444b7a086745c4ce045209562b3530a461bff310fe410c97c43d52e84d650b7f978aebe31f1c677f4aea06410f6bc98c07ebd49cf703c0355f18232b606f5", 0xb1}], 0x4, &(0x7f0000002180)=[{0x20, 0x10b, 0x9, "203cf9b2ff778af77fe94de2f4ef90"}], 0x20}, 0x4041) sendmsg(r2, &(0x7f0000000a80)={&(0x7f0000000040)=@rc={0x1f, @any, 0xe}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="991418884eedc6ed677f8aec2f3f9a42cd97a7a04efb9f34d2df0f39ba932fed4b9a76dcdaae385af7d3b6797f675985e367114c2d203d736144e549b0a9", 0x3e}, {&(0x7f0000000180)="7e87bc11984967e56b7302f0810261472cac85d7265467a935f3c86d1bcaa5f27cd461d2562c1593072f915fce7edccbdac75f56e442660299efa46ded110c33392d97a62fcf29e0977b1e86073f3d3eff9a3f78653e87186f1dae45e335219302763f1dec80e26108417fceb7f751bd08008bf2d0ec1b2ed1056b4554510fee7966d872707722159153f5fa583fd4133e24c3b4c745b6ab1375fc232abd5e8b40fdc00ae08e7f2787a5b197eced71ed5989b57d55159c5649b3a55007305083664eb17463e1befbda94bf416aa40f03b1092401620945163530c6cfa7fa9c9046ca4a9c1fa331f182", 0xe9}, {&(0x7f0000000280)="d0ef3e8fbf90cc3227fc6ba1738919df6ad29dcbdc946ec0714c274691278e5a5d5bbc7454643445561bb0060a65091055088c2a9afdb28d09622305c94265b36c910a0d526a7e682c7b4036cf4a0a4e148a7100461ad182aeee1fa69343614ad938", 0x62}, {&(0x7f0000000380)="c6ebc750c011b7ffac89a52c75db396596e52bc3a33a5ab460583338f15fc00765439dbdb6d7121920430d881f9fafbdc952ba0792a903e4f2ff7bc31e6e1bb3667ebfe3a7c2e3a432f1427d569f49f4d1ca2cde4de6d6d22ee0040453089e5607f7ff527f611f37a8160cf7b12334012afe75a1925c65a2e60593bfce30383b10a5b9c0fa097f0b18bc5e5e8c15f3d08e0f7143c478d2599fd515b1634addbc4fdb5f61de6aad89d6b8f16c9862bb9ae8e8cb6adc912e2b532e7d98b254a97b046e01", 0xc3}, {&(0x7f0000000480)="3d1cf02b0f769c", 0x7}, {&(0x7f00000004c0)="dcb3220b43833090f79549aa97d624d13b4cad2c3d34021503fcf9e259dca4832f452ca1867314ec48ca72a7996dd9129248f2bf224f638cdcf40b129e21f0b97fd88410b8a67d2a019d0aa88ebc08e6eb6d0b7f2b4d704e7cce74fedde3dc94683899c9d349de41ab80118c64ea7a761c2037fd6d9542f3895fed8cd052a8484b0dae8f0c88595ec2b9f982bb", 0x8d}], 0x6, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x450}, 0xa5e12674188c5947) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x4000010, r2, 0x7d1b9000) 2.03245535s ago: executing program 3 (id=6397): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = accept(0xffffffffffffffff, &(0x7f0000000140)=@qipcrtr, &(0x7f00000001c0)=0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r1 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0x43}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x34}, 0x94) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@private1, 0x78, r2}) (async) r3 = epoll_create1(0x80000) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x17a, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) (async) epoll_wait(r3, &(0x7f0000000040)=[{}], 0x1, 0x400) pselect6(0x40, &(0x7f0000000000)={0xa, 0x7ffffffe, 0x2, 0x10000000000006, 0xf, 0x8, 0x80000002, 0x8}, 0x0, 0x0, 0x0, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x3261e) (async) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x8000, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @local}}}}}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000080), 0x4) (async) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xd94ea7173a9f1aac, 0x0}}], 0x40001b6, 0x114) (async) close(r7) (async) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8916, &(0x7f0000000000)) (async) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xc}, 0x8) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0x2, 0x100, 0x1ff, 0xfe, 0x8, 0xa9, 0x1}, 0xc) 2.031357152s ago: executing program 4 (id=6270): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@private1, 0x200000, 0x0, 0xff, 0x1, 0xb, 0xfffe}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@empty, 0x200000, 0x2, 0x0, 0xb, 0x4, 0x2b}, 0x20) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000009100)) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002780)=ANY=[@ANYBLOB="4400000010000104feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="8a470200000000002400128009000100626f6e640000000014000280050001000500000008000200", @ANYRES32=r5, @ANYBLOB="57f31a094a7ad9d3d4648281710100932e56ed6ec5ac9fef4d06f5fe6b0d4d691449"], 0x44}}, 0x80c0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000002380)={@local, @dev, 0x0}, &(0x7f00000023c0)=0xc) sendmmsg$inet(r2, &(0x7f0000002680)=[{{&(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10, &(0x7f0000001ac0)=[{&(0x7f0000001800)="5c2799f453f25fe63436c30ea30105deb8ac9cc13157f0d95ca764568be0989ff0e44e7aaa87360f14c4993669e9da9a9210d1deeb13793b31242d55e1dfaa7ad03c3bb2169ce3e48c26a19bcaa014c6ff6905959d85ec2d6327c71beffb7093001d5060f6e1a1ee1740218e75f85f40ac844a321a811e418a3c5630ba5981ae04190a0d11d437830940c4196e52561e", 0x90}, {&(0x7f00000018c0)="8c5f47e6efba08572469552e55a0d9be35a9128503618b7d60d809932b87f7932275d6bcf7070d4bacbaba2cbe8fbe853b8df88e904199082204c22b091efc700e0bca2759a9906f4cdaf6b1fd0a28142155d2174a9562963c088612d5b72b3bd8a4eda5dd14e6a8b371f6548002a524492f6755ab1854c1a792444cfd5312241d9248da858c4a696d19848a78dde88f2cfffcbd130f719cfe37bc0d7ef33193004b7ecacd3eb9e0e01c3fd4b8e7da45712a0dd71148cb5928a0193c28b4820ffb426087", 0xc4}, {&(0x7f00000019c0)="18fa6200ad542dc8f4", 0x9}, {&(0x7f0000001a00)="a7896423285ae8743270553b6354f6ea24a34cca842f90cbbb45f8664525ba2490591a26744ad8062d37627ada7f9bfdd3653dfcbec41349700c8ee0ae559a62af5e9cb61916cc2894da27745b11942855b75fd696f42d34b845a7dbb51fbf147fb174b498d34c1e8cb2dc0a24170fd3b428054074c244ffbcbc6157c30bb617ed725a1f04708b7aad0a8c1baad31ac572e796110234f76fea425988bd7191d3f9da73fde307a4b36feca05b9a8500a94b28a8dc6e909824f2ea6cf24bebd0", 0xbf}], 0x4, &(0x7f0000001b00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2f}}], 0x18}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001b40)="0bed00065330a27d6d2138de3f89b89a575c1d9d7d67b79e53a970ef59990a04b866f17166e6c0a9994f4e7662eda147bc09ac18bbfb67df6600c98925", 0x3d}], 0x1, &(0x7f0000001bc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_retopts={{0x28, 0x0, 0x7, {[@rr={0x7, 0x17, 0x99, [@private=0xa010100, @remote, @broadcast, @empty, @broadcast]}]}}}], 0x40}}, {{&(0x7f0000001c00)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f0000001fc0)=[{&(0x7f0000001c40)="5f8bde98896527106f7693754cdb8690128664d209123dbb94f878d551f336166cf880650bed8c7564caf10ed0a1dd560aeecae5532ccdcc90cce71735eb4657be68ca5ae3159a1ec18b26e423539d07a77ab1436dc6b9cf4ee34a5154e69fc9d4721371db3d8a9b713aecab33484dcb00e7bfa99dc2d072ffab2596277d8f3a8dc1b0ff7352c42d10e6dd0057b5f8e6f60fc11a68e3417427bb107fcf301654d26e833d0fda427734985c11822c2f95ae3d05d10e74bc37a0f9cdba1ec1eeb61c0d289903ab33bdfcac746b09abc826d307731a314086e0bc4e90f589217056a975", 0xe2}, {&(0x7f0000001d40)="7048ff0854e8a5018ca6fa38f148c61d2ced234c279a3b6e3f0f44a78dd8701c6f66ab358084996f52a352cb69a4d9fb89137b3d386aeec80c820ff435aebfba7e44ad11d05ccdcb3c17d963367cb0f5d6a9d16eca1016c8f4313771306214bd5a5a052f0ba666b333bfac95bb268e6d2d86a7aca13a7c7e8602fca45e94c810965a93f7c33f5be67c3b5728ab08089e0ff5d0424cef0c6b48c8fe3fb58092f6bc4e824f09cf3da5fb32b73fcd36734373", 0xb1}, {&(0x7f0000001e00)="68aae9b76ea36a40151331a5e2914b004366e39994a3fdebe370b7347ec485d0bd56cea256260909ab210c75c2e4a8d7fb9353bac70c165ef97cb832279d1d2aeff7603c96f84678a29560aaa85d19dc19c8eef4925f7c44a97b21f753edb6204133272eb927fd57558fc52ed5ca41ccbd17f4d57943c8ab99ff3e56dc1800fb84f6e68710995f5b788160d4626879", 0x8f}, {&(0x7f0000001ec0)="8fa10ba68640bdaf62fa3b926801b6866ba9f8365041493769c9603bf727380f414ffb54f3b5b9acb83e40db5879cc38988233151e387353aff3943df61d3f1786570416148208309dda4d51ef8c7098904e1c93a84fa91013f62b855a9b335abfad499ed2ec099ad3bfc388df4e36210529ec52f01f09271a89de91d00cb54ccd3c54764ae5f25981f75fb2e02f4b94bac9395e7770ff554cf5bf1a35bfbd698917f02127f1c855bfcf4634e453fd91bbd04a0299d80ff8ef0bf655ae0408f04e16", 0xc2}], 0x4}}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000002000)="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", 0xfd}, {&(0x7f0000002100)="631a77e416aef1a7bdb99fbd056a6a63e0d6361dc73bd0322dc208d1155b7f1b09c0bf9be0a54cf50c7a6858815c699c601f93e466ceed32fdc3da8f", 0x3c}, {&(0x7f0000002140)="642987a7c405a4d02c968a96af0ffb2f3c5cfd741f3e91faf0de108ea6f877307cb4c1f95bdcef118a411f4e4ac5d14f3e2a60f8514536b648f8c427ea9580cc81a441a5e795cee4edb88385e05a083d22b2a1808d82f117cfea396155c9fa93c226af87fd194753e75c04b73740163524662697232b33ed991e08d336c8ae075c9809714284238d1f084e", 0x8b}, {&(0x7f0000002200)="fff58b298506a27d89cd89cf6a53d324d91794b769427f1a3bfff597cbaddf30338cfe1fe1452b8fdd6f781e70b1dc6a77441a0f03fc17ba0f2864240af3224c8f280d1af4eb849a637c2dfc340385b05eeb62c292b665685cf69a", 0x5b}, {&(0x7f0000002280)="79d06ba775da23f57f584a2f63e62ea25921d71b38e29503e6e2f78abe7c005db29f5341965b7f36abccf5f3e6611379ece9ccf97427798249", 0x39}, {&(0x7f00000022c0)="19fcc442786edf012cb77fe348d92fa565e990f589a7ec70892837cb32ebbd6c6d0c2825fcbec783b6", 0x29}], 0x6, &(0x7f0000002400)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast1, @rand_addr=0x64010102}}}, @ip_retopts={{0x178, 0x0, 0x7, {[@cipso={0x86, 0x41, 0x3, [{0x0, 0x10, "16e6268c1b65799ea2c3ff8d74b1"}, {0x2, 0x11, "b5ff7d2e0c0c72e13cb74c2ba0400a"}, {0x3, 0x12, "665a174a50375c8041bcf617cd0b436e"}, {0x0, 0x8, "43f5e8cfa167"}]}, @timestamp={0x44, 0x10, 0xab, 0x0, 0x1, [0x77c20, 0x4, 0x100]}, @cipso={0x86, 0x66, 0xfffffffffffffffc, [{0x6, 0x5, "ce5d38"}, {0x1, 0x2}, {0x5, 0xb, "1aa0007c24e536c444"}, {0x0, 0xc, "8d9e1a66f5c47b1660b1"}, {0x1, 0x10, "c790d5efcf2fcf0da8ea89995f44"}, {0x5, 0xfffffffffffffe1f, "6d3ac28b9b05474319f6"}, {0x2, 0xd, "159e6ff9da6fa268f72569"}, {0x7, 0x6, "9e479163"}, {0x6, 0x9, "8e22fd989d80a9"}, {0x5, 0xa, "10727926c9380e18"}]}, @cipso={0x86, 0x17, 0x1, [{0x7, 0xa, "c2f7d769ac083220"}, {0x2, 0x7, "920b5ebd61"}]}, @cipso={0x86, 0x56, 0x3, [{0x1, 0x6, "d90df1b1"}, {0x5, 0x11, "63eb24ff5fc75018e07300122fbbcf"}, {0x0, 0xd, "5954103ad017816ed4fe27"}, {0x6, 0x8, "3257f728f327"}, {0x7, 0xb, "7ea75d52d20f4f1e71"}, {0x5, 0x10, "cb3700bbdd79032452f6ab081a43"}, {0x5, 0x9, "8be25a43c9c297"}]}, @lsrr={0x83, 0xb, 0xb6, [@multicast1, @multicast1]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0xf, 0x3, [{0x2, 0x5, "0f1269"}, {0x7, 0x4, "7f27"}]}, @timestamp_addr={0x44, 0x24, 0xac, 0x1, 0xa, [{@remote, 0x7}, {@remote, 0x4}, {@empty, 0x6}, {@dev={0xac, 0x14, 0x14, 0xb}, 0xe}]}]}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0xc6, [@local, @rand_addr=0x64010101, @multicast2, @remote]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @multicast1, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x260}}], 0x4, 0x88804) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r8) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x7c, r9, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:modules_object_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bridge\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10008001}, 0x400a0) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1020000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa8, r9, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:lvm_control_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x32, 0x7, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'erspan0\x00'}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4001}, 0x4040010) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000009200), r3) sendmsg$IEEE802154_ADD_IFACE(r10, &(0x7f0000009300)={0x0, 0x0, &(0x7f00000092c0)={&(0x7f0000009240)={0x50, r11, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x20008050) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1a, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000b700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x37, '\x00', 0x0, @tracing=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000feffffff000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000400000008500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000001000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r12, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x18, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0xec5}, {{0x18, 0x1, 0x1, 0x0, r13}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffffff}}, [@call={0x85, 0x0, 0x0, 0x72}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0xf, 0x1002, &(0x7f0000000440)=""/4098, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) writev(r2, &(0x7f0000001780)=[{&(0x7f0000000080)="bb4982628bb13704877b25e692fd", 0xe}, {&(0x7f0000000300)="dd0743b71a7bbf022264a3caca183c1e0f6e5541e3ec997efda35189969d16da2bdc87863d0f5c32a45bd654df124837432ca65bd722bbbf0d1dcc03789e3752f0deb74f60ee55d1c4c370337f726d94087acfd23230abea8c997c2b1977db90b986d28510fbd755c30b34be92dc5c7434f539b23cce4e0baa88c3cbd453676927b1a788018e41dc89d924f53c2524738fdaf53bcdf701ead28908509824", 0x9e}, {&(0x7f00000003c0)="511c8926e5ac7e22505e4db3ab60ef4d0a145e44db166f0c2ba00321d5d222e3692686c4b90c601a38564525cf2bd898c1c79dfe2e82ad62ce78c7947487d2ffc4cdb3960ea7360b0e3c1f30f2df18cccff2a9867406e9ebf31588dfd23bc92563b238df4c8345e4b027d007fa576693f9b729dd3168ccfd67883b6f5caab68661a48ee4c52db3204fc7f8a65655fe1534f85359511801f19929519f8172d680833428f5181a5f17a7ccb69a283aecaa3768", 0xb2}, {&(0x7f0000000480)="c13a5f5354e4e157e52b2b874c0d0b9b5f32a50f61d1fb97e8ccfdc2656921f2e9a39abe890cf4c1189d14d7c19aa9da3d7502df9fcd4c67f2104717945adfe6d071682d35d4dca4fdb04b1372fe975f92037165c33a4d88e06cbe963e99c8806b2ae5f111eb48ebeecfe83efb28b7eb3bd2222caefe75d9b313ecebdcc6862d256a5132965b158ba7cd68f7939980c05379b5442640e60495950148b1b3490e11940afa3c29267977b321e7f1", 0xad}, {&(0x7f0000000540)="a5b36c38b366df7b878041fc211e78a5c3e8054a716487308b0cd03c30a38ac712a205", 0x23}, {&(0x7f0000000700)="e1e3698e05d850235d46a83ac58bd3d236c0225f28e21b5fa6bc10912c16f0e435ad3cbc58e30ee660fa9f9584fd39c90ff7c718f3eeee8379b2b0e49e021d1ffd1e75f59980c82ff9", 0x49}, {&(0x7f0000000780)="d5f699f86e117113a98449a3787d248dff7113691f3cf85cc9bb3398bc64994b93cee3176c83bae2eefe66f54835b79535d961b4474938062a1ae5a52f42491f9ded91ddb2291999f3901c4e959fd62f3619afa3c7a55f22c521f138f605f6e55be5f88252dc42dac49473de55c809af447527d38039fe37a85e32609182ab2603bd94bf646ff247e61ed2d899f68d33e46948efd48768c4bd364535b77f92b1df0d3bd43bb1e76be9678326d88405de215b8f9733b20824ce98c633af0d7575717d6533be69b66852d28ce632047db44902ab04c416d9ee2e1a8ca2d4ada6fc85419fd0b6707761200b1bed32e33f8446abcd40c3665d5a11aa17ccb4e27fad4b273e8c7ca8d5fc573e0facf427583aab9cef404ec3108747a1d8a2f4917e162628c2b3ea921278dffde429b1d6c3b1f25f857d40a670651956fc59a20a7016e889bd430b2c74638d7627f1418e75ee2efebf8c749bf6165c58fa3d417e4370edc025a365e04274fa87bc9a12347bf9c5fab344ea44ec8af159ee53c4253a72dc794903777ee9494a1b5ccabf23861d8bc6f8e24844dbb0de24b79a5804207224f65490dbc3575103b95efc21f252b5dd8d0cb1aeefc4d456c62e0a53feef5610b8b7a422db80711b613147f303872aba97bd4c3853feb8b00486d6f5439987af852bd17d3bc9fbd520f5f6c57961123438a87e943ef0b85e81299492f6cc45ceb71055714f732d84462ba293c785844bea701f70e536dad5a7616cf29d621ec67f6e25017023386963017f5e0523ab2c170cf860264e6b5bede44423516c48af2c29947407be645307da760c52ee0e1905a9bb6181220ee456a621965beb4ae5c8f72d9ee5ae9f9ba5fb73ba660b42e2012945df5d3d0b302e2079ffac7f0fc8a81220c7a426db89584f37897cba6f4b3e2e914daf85146430c08b0c0843230b1da3ab0c61decf41fa734d3a2e33578bd3991b353be61c73f5f1540218d8ad9bd5105e8df1c98968caa483d25cad33cb378b38de201228cf4ec1c2ca9f298ae74f5722bb2b9ae5d683dc1fcc82767df1f775ff58e60087311a56ac75582a4020700de4307ca9da20e2a8011997d4eea15e4e44087a7341c54a79dab0093cf602b11e2e88264d89ad618e94716f52ab207183333bda5e5252f606d52d0401a8eccce7c368d8886f7677da172863d5b2f47d6dedfbd262d00e6ad48e588b003a3557912563367e794cf3039a49ef9696e7d40945f1ae6cf6407447f004397c326ba5b414d7f2d61c091457d14fc25e726e4e2652c6380a403185b2f141f993a2f908813abec113128a8c21021982f77221caa9174602773a273b37b4cb7d9f2117b177fefc78afe0a42f9004887d129ea84f1afba37a7cbbe3571e69a80cce8aad153b02b6c86a5d432b1881e650bcb550e0319f6797dc790a8e1d3523ecf49b73458850c2b03703408f17789fc80e08ce2c21bbd3f55000a04eecfb0008eee5a65803701f88eb8fa2f7926cdd3733f78ebffd578287defe8e333783d70af701314b43006e04d6347347eccb4f8e1736e0954a7c025990e7f09f0c6d0df5a8a46904d2de3c6e00e6163a0d6856dd0f4b25a676020b99115320ae5ff538ab0d5c1556f90bb614e6d65a42f3a6f527e4a849789d153b265d320aee597b22bc0a0d9e98e39b5a859c5d470cfcbe433007aca8a2c3e3bbe0d0f86931aeb75e05ccdc3a18f747fdf5a213e023aff21ad7c0822241f6575c3984e00fc4a88fb1078cda47bb6fe2a0ca550514328ea7e5637c19c8dca788b23cdccf8d04b725892973c7d2f48b3e0145661e737ddb57645743806f0d61be8ba8ccaaf932e419907876a9dede8bafad9d7fb8cb44d1bf58ad3cb91d3190e19132b0bbde64b95c0c07c11a46e5e2b9821c6cb5826a5303054e88e8f9a64b9ce76e8c074ecaf4622479ce37a6ed797bf8ac33b1c999a12504e2e34903b848da59b0b0c6318f15bd7193d411fd44d5ff295922beb5ae42d1658a562ecd998934e6156739cd601720aaf7cfd175313b05edc495d4aae50581def86ffe8b0c85de6dbd56abc81c9a554a446b3d043ac8271a39591cec6cccf7a6f49bb3b0445ee8f66aebe3872813b32c97092b27d655ce4933568df46696f8520f7afb296d0e361aaa0a878bc624d0a0780575224a16654ac64e675bae07d1a7819b95917b0cd24178808e59ab32a7d504785b31e60c5d363b8971da89376c97a2171ef9f8d92f2929586210e9ad7acc2638eacf583447aafb8ff4e7f6e5a0adc8bc12fb77854a505e9576439fa077f0faeafc2e81f60d4c1f72cd976642942a32829c64c8a94d7049acd4ffb694a12ef3c789a106286863454052bdc4fcf3f4a48a62d1fb9b57860758b0f2ec311adb5d8c8779119af839bc49db81b92c66aec22db066bfad3e5f7eab8674b6521376879dd9035debc14d6ea46ce5d584f033599091e47b3cd4c02b8d79cb4c6204a2b451b109aa4f15fddc4045257ace09da104053a3c4eb90f5a766607b4ee1b8b45d1d18930c0868bbb607529387856801a825ad18e62dd2451bbeb8980a6665d6745dd6ae89c309c7e38c61b1099e4d7e95869b9c283e6997ba1b98358218e974247d5eda68da79f97e2f6d959e9193dd484001c676e1e68386ca1df99e1c6fca20908e0686b68690b77c09f41ef705ce347a59098f4082b619c96bff7b7fd30da0dc607bf07756eaf0017719d175ec4f6aace4bb32e8ba9a14001eb6772009fab6bfd047b4b41d74f3bcda1b46f037686346852ec5ad8167c6c398a5751c50e07dfad49de03ba6ea922f751f16dc57f55ad0a0914b384472fd34d5fcfb93f583076b8dd5b97a652de3ea42280e1dc78ff9e21f4b93df352b65150ea63c9b7901aae2b585dfcad9548a7c104681d0c0b1235ba92418eb75251161d06e2eddcfac6ce62ae7e00d470c9e37aa2464010d5a72270e1a0c71b973b2c61389c5bccae488c1ad72f2f7879ded4810ffcb7a6bf9ee1fa6cbe89ff4230306ba33b96f310ce2bd634bdcdb2cadd2ee26cc0070c3f065b5210a1358f7ff1045d6b527c5cc09478fac4016ed77bd408aa3f437e7177524bfd559551fa08042531261c74b411388557c3def7992b52a08e7149b18cdd1b7c8ba48cdfe057c0a690079bcbde132525f740724d2f9a0d9935affe80a4682631a5f9c462dacef96672e2bb4b80a4abce372a6bab39b89b250f29af9ee889a0d693c887010016d8594dd2f5a28f8251b805c30e58b19f1754097c7d2a34a3b2e5a4975321d29570011f0c7989447474ffc5e0610da38e4c97e47a6f31e10283cfdcaa523b4ce72991803f68669a3c1ab2431b96a226f96b4f8eb8d57cf97db24db64715e83ec2f034ec45ee0842fc81607b3b2d3505aaa2b569942b92170da3290d54a78ae21476b8a8630326546374e3c63abcd1c20da8b71f7df537443628fe22cd47e808432d8d9bf260d205c3bf3829a3e33ce191fafb0e8b0f25a288a54891bf21ed6fd1980470186310ae2ee6245cf41fe538ebcf9135e1e71c18c15adac690447a689126a4592d57fbb17e75fc4964f139d179cf10e8000a0a00775f7a19fa58f744eaf8ad1076aba02e93f59deb1f13d8e84f42a5fb0231f91905c6ca1ae21dd66f2dfb50ee60de42284c83503f729b0d907bc86753106a4f089a118ef8eaa3f544c36189f7b4239e9a21794c9d2832089e2b25ddb4111134ef89da3cb6fc5989f4ed4acc29e2829d1d041bdd960443c37d877ab1494462ea1365323bf2ccb9e49766c0cfbc5c71f88ceddc05c78b658bfbac07e16aeeb3140c0b95f5d57701c8790d2a19efbbc9c1d58cc233d551ecb061d727ae8d88ba178194b5a994d82dd28f21d256ae4a22023660b47b7d4f7ce4a83cf07a71302f6f4fb48a38350e29af5529f02d0c885e43dcbd4a559ec80f1bf63ca9c0e3ac9bd96313ca7351deb6fb41e5aef036f474be2b490ca74df8e1e212a78b871e6a28288d4a00714267eef420a8e5e2ad96de001c4e3bce1a9d3f4d607cc73100dce172ba5e7e2959f3e575cc89e23b5a0e5beae3b46858a96485edadeff870a397431c283b081d152439422f667463a0a9b390c74141efffb5450b291c314438a71cc730cff9b064e9361658ed8889cdb2dda75e8855082c63ca6d62d40eb53a2b8e62fb10adb8b029c6b263254d9820d3454d5016bdd9116c1938c1e45cb8d2c528b33f87da887afb3a1b83620c03f47b910d14030520e4c21d338d31e73bfac9dc490fe999b1d024da6ef91ef598dd846673d2c4984072e1dffbad0dd11f9b01bf9289f5bb7d12d6b0076f13ca35c3448ea19d124be417451ba89d4cd0ad8b461a1736c0819e567fd651b3aabbfbaf717ad647736e6d75524d17dff04a2bd494a2f6d16718f26e5f17a7de8711205e58d892f1204ab79e4b3dc6ef9b9ada3b54185c62432e8243025bdac8a68d18e75f4761b01dd8e32c28fd1191720c7f75d2a2dca69e0b5cd21d8bb439247d2fa506e93503b42029330ff6c6921154eb9a2801d64170074de2d0690f30d46e06696dba1884745d3ae0f22254dd88f2f1a9320834c72a5364d56af61e160ca076ab655235c74b55609cbebea792fe1345585765a462464ef7edaea6b49a5df1a3886cb25926ebef513d35a0c61b0100507780a8628f68ba6db774ba5908d727c0cb64c3952f4c2980ceff9711ee86b257be7d5c003642cbe0cc35279ada6fa37ee7ad485087fb3bfeedd3548e9eb4152d3bcee0ca8ad1aba36baef1a241c02d56a422d88fa41bcca7ca7d6b0de4785804ccfa323ba6bba3ac9645468fac9e9bd1ceb01233a56efa6c7b34e46e72443dab731f77d4bbb09f1b4b1b1d2dca7754aa1643e2cf1ad25c15ea015afc3100557e0c9689939381ed7a2d2875c350845caee9f612e58ab9c8b0b278be06ff394511adac89e2539c81725f1a3441bb51fc93ab5cd2df76090a532a2a662f3a5750e92db82c8305b10bca59c2d507952b87e108260ec43cb75e7b6ba80c1998a9033bcf16dfbd79c494af7af3f803eb58993123ccddf8794d41dbc9c0bd7c3d558ffa85f428032cf9c4a47bf91b1a73ea9ab6c35f7a60133b73a0a2e968a4ccb1ab9e48c3e6583a11bd1c23b8425dad844cf2a19242b38f13122e954baaaeb022efb86863c552855f88df8e7a84da11aebe1b495babdf5de2afcae1a1fde3cc7d4c1717e8c748f4270d40dc5196a8192e4fdd2cede5cf481a2e147d9832fd2e1493393ec93ab42633d4ca74f1b939835230b3d6d5297ac3ee397bc56aef555efb5e9802f2527538b93c1bb30e4376bd8c423c60e51e39f03c7fbd9b5c3bc5b3b7c162765e29896d7165dc60b5eeaf43a77705f016fd304735ea3eca40997728ea0712090a0c40344405414bc4b73cfdf6af6ca9893f6421c70f7591ad58c59cee5a32733c019522dca21736cfeec388eddc3b5fd839ef4e826a51533a90be08973fe30e28f3ecb66233614f599e0302ce65340afb1d0d342972fa51c47e5d5ebde4c4834a04c22c4980c9a34fa4a375d7e3ab2d3c08f4aeaee047df159c6350c4066c98a56bd22219c36bf0193cc8536ffc23b450395f442025eb2430e0255c2e5b7b9c0da87090f3bd99b37f4a74cd4b6b475c0748decfe2eb9f37dfff9db1db570dbe0900d036778adfc11bea8bf3eacd2d481525f7e42325b750a77cc5caeb27b54be8c9c9fa9f57cad8b879f64d1861e7a6591d446bc9974fedbba21fbf9915739c79aa80b224b017673003e9fb7598e1082bff96fa0cf4c7ba0", 0x1000}], 0x7) 1.406855866s ago: executing program 1 (id=6398): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1, 0xfffffffd}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000240)={0x0, {{0xa, 0x2, 0x3, @mcast1, 0x4}}, {{0xa, 0x4e1f, 0x7fff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}}}, 0x108) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f00000000c0)=0xffff, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[], 0x40}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8) socket$tipc(0x1e, 0x5, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe000001000000000a00120002", @ANYRES32=r0], 0x30}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) r5 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000600)=ANY=[@ANYRES16=r3, @ANYRES32=r4, @ANYRES64=r5], &(0x7f0000000c00)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, 0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x0, 0x0, 0x0, 0x2005, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000080), &(0x7f0000000240)=r9}, 0x20) write(0xffffffffffffffff, &(0x7f0000000000)="240000001af40700090400020000000100000014d1d34b6eb90504000200000000000000", 0x24) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r10, @ANYBLOB="0000000000000000b705000008739be15c0b4da1cba210648e60e24d0034b91800f0ffffff95000000000000009500195e000000000f1401044e09006d2f244174f29054b2cb76290006000000b6a663cb17807b5228e0adaa0afa84e036389fcf2b8f83546960087bf32779a37e4490d4a46fa0bb3d5b5fa360a75859272071fc07286fd3292ff954b1668ea7fd820700"/160, @ANYRESOCT=r7, @ANYRES8=r3], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff70}, 0x94) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0xfffffffffffffdc5, 0x0, 0x0, &(0x7f0000001740)=""/17, 0x11}}], 0x1, 0x2042, 0x0) 1.383974907s ago: executing program 4 (id=6399): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0xfffffefa, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd8}, @IPSET_ATTR_NETMASK={0x0, 0x14, 0x80}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044040}, 0x40800) 1.177656817s ago: executing program 0 (id=6400): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b70800000000f0007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 1.17049447s ago: executing program 4 (id=6401): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r1, 0x1) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) listen(r1, 0x1) (async) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) 1.118738367s ago: executing program 1 (id=6402): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$packet(0x11, 0x2, 0x300) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x3f9, 0x2, 0x70bd2c, 0x25dfdbfb, {}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x40081}, 0x20000003) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000001000000850000000500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$unix(r9, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={r5, 0x7}, 0x8) r11 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00'}, 0x18) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000006c0)={@fallback=r12, r12, 0x2f, 0x0, 0x0, @void, @value=r12}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r12, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@cgroup=r13, r13, 0x2f, 0x0, 0x4, @void, @value, @void, @void, r14}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000540)=[0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], 0x0, 0x13, &(0x7f00000005c0)=[{}], 0x8, 0x10, &(0x7f0000000600), &(0x7f0000000680), 0x8, 0x28, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@map=r0, 0xffffffffffffffff, 0x31, 0x36, r11, @void, @void, @void, @value=r15, r14}, 0x20) mmap(&(0x7f000086e000/0x4000)=nil, 0x4000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r2, 0x10f, 0x83, &(0x7f00000002c0), &(0x7f0000000640)=0x4) 1.000804746s ago: executing program 4 (id=6403): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x1b}}, {}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x3}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0xf, 0xff4, &(0x7f0000001cc0)=""/4084, 0x41000, 0x4d, '\x00', 0x0, 0x0, r0}, 0x94) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x10f) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000013000500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030073797a6b616c6c65723000000000000008001c00", @ANYRES32=0xc9], 0x3c}}, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000805"], 0x11) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r6, 0x28, 0x6, 0x0, 0x22) write(r5, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r7, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x200000a, 0x12, r7, 0x913e0000) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x1000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) 999.226715ms ago: executing program 0 (id=6404): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x74}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfefbfff, 0x1000, 0x5, 0x1}, 0x20) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000c00)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xfc0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e24, 0x4e20, 0xfac, 0x0, @gue={{0x2, 0x0, 0x1, 0xa, 0x100, @val=0x80}, "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"}}}}, 0xfce) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newtaction={0xcc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x7069, 0x10000000, 0x2, 0x1}}]}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x0) 984.223003ms ago: executing program 3 (id=6405): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x3}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000880)={@in6={{0xa, 0x4e24, 0x4, @mcast1, 0x6}}, 0x0, 0x0, 0x2c, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e24740bd4c0b42a21d7214bff16d2ccd00"}, 0xd8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffefffe, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000204e0000", 0x58}], 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000080), 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r6, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xac7, 0x4c}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c1}, 0x40) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003a00290200800000fadbdf250200000008"], 0x1c}, 0x1, 0x0, 0x0, 0x24000800}, 0x8000) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x420, 0xf0, 0xf0, 0xfeffffff, 0xf0, 0x2d0, 0x388, 0x388, 0xffffffff, 0x388, 0x388, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {0xff}, 0x6, 0x2}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0x8, 0x8}}, @common=@addrtype={{0x30}, {0x8, 0x22b, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0xf, 0x5}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @local, 0xff000000, 0xffffff00, 'wg0\x00', 'syzkaller0\x00', {}, {0xff}, 0x84, 0x1, 0x20}, 0x0, 0x100, 0x138, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000000, 0x4000003]}}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x9, 0x0, 0x2}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x68, @icmp_id=0x67}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2a}, @dev={0xac, 0x14, 0x14, 0x14}, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00', {}, {}, 0x5c}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @gre_key=0x3}}}}, {{@ip={@remote, @private=0xa010101, 0x0, 0x0, 'pim6reg0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x3}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@dev={0xac, 0x14, 0x14, 0x43}, @port, @gre_key=0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) sendfile(r4, r4, 0x0, 0x38c6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 628.044339ms ago: executing program 4 (id=6407): sendmmsg(0xffffffffffffffff, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x4, 0x1}, 0x80, 0x0, 0x0, 0x0, 0xd8}}], 0x1, 0x4000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000240)={'b', ' *:* ', 'm\x00'}, 0x8) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$inet6(0xa, 0x3, 0x1) r3 = socket$inet6(0xa, 0x3, 0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x558, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x488, 0xffffffff, 0xffffffff, 0x488, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62, 0x0, 0x5}, 0x0, 0x358, 0x398, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f4, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'macvlan0\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5b8) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32], 0x50) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="1400000016000b63d2030000000000000724fc60", 0x14}], 0x1}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r5}, 0x38) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={0x0, 0x0, 0x10}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="008001040000000000ebffffff00000000000000", @ANYRES32=0x0, @ANYBLOB="0010000000000000140003007465616d5f736c6176655f3100000000"], 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x0) 473.212831ms ago: executing program 3 (id=6408): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c004dacafe13fc8980e000041000701fefffffffeffffff017c000008004280040008000c000180060006000000000004000280"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x2f, 0x9, 0x70bd24, 0x25dfdbfb, {0x4}, [@typed={0x7, 0xb, 0x0, 0x0, @str='\x05\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x4}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x9b95}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}}, 0x0, 0x66}, 0x28) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1a0008", 0x18, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, @loopback, {[], @mld={0x83, 0x0, 0x0, 0xb, 0xc033, @remote}}}}}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000540)={{&(0x7f0000000380)=""/175, 0xaf}, &(0x7f0000000440), 0x40}, 0x20) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x8000) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000001240)={0x1, 'ip6erspan0\x00', {}, 0x2}) socket(0xa, 0x3, 0x3a) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f0000000200), 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x3}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {0x0, 0x0, 0x3d, 0x0, 0x20000}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x10}, {0x0, 0x404, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0xf}, {0x42, 0x0, 0x400000, 0x0, 0x6}, {}, {0x0, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x400, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x1, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0xffffffff, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff, 0x10000000}, {}, {0x0, 0x0, 0xc, 0xfffffffe, 0x0, 0x6}, {0xffffffff}, {}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x29, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x28e, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x100000, 0x0, 0x0, 0x0, 0x3}, {0x1000000}, {0x0, 0x6, 0x3}, {0x0, 0x15, 0x0, 0x48510}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xcb}, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x4000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {0x0, 0xfffffffe}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x88}, {0x5}, {}, {0x0, 0xfffffffc, 0x0, 0x3ff, 0x40000000}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x5}, {}, {0x0, 0x0, 0x0, 0x4000, 0x0, 0xfb4}, {0x0, 0x54e4}, {0x0, 0x101, 0x0, 0x4, 0x0, 0xffffffff}, {}, {0x2f, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {0x0, 0x0, 0xfffffffd, 0x80000, 0x3}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x6, 0x0, 0x4}, {0x0, 0x80}, {}, {0x0, 0xfffffffd}, {0x6, 0x0, 0x0, 0x0, 0x8}, {0x7f, 0x0, 0xfffffffe, 0xfffffffe}, {}, {}, {0xffffffff, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x8, 0x20000000}, {}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x2000000}, {0x0, 0x80000000, 0x0, 0x0, 0x0, 0x101}, {0x5, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x10000000, 0x2e9c, 0x0, 0x0, 0x7, 0x7f53}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x4, 0x7fffffff}, {}, {0x0, 0x2, 0x0, 0x8}, {}, {0x0, 0x1}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x4000000, 0xfffffffc, 0x2}, {0x0, 0x80000000, 0x0, 0x7dff800}, {0x3, 0x0, 0x0, 0x0, 0xffffffff}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {}, {0x1}, {0x4, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x4}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {0x4}, {0x1}, {0x0, 0x1}, {}, {}, {0x2}, {0x0, 0x1}, {}, {0x4, 0x1}, {}, {0x1}, {0x4}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {0x5}, {}, {}, {0x4}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {0x6}, {0x2, 0x1}, {}, {}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {}, {0x2}, {0x2}, {0x3}, {0x0, 0x1}, {0x4}, {0x3}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/135}, 0x2042) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r9, 0x58, &(0x7f0000000600)}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x70bd25, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000885}, 0x0) 0s ago: executing program 4 (id=6409): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x29, 0x7, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x5, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000009100)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000009300)={0x0, 0x0, &(0x7f00000092c0)={&(0x7f0000009240)={0x50, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x20008050) kernel console output (not intermixed with test programs): 859.397078][T28816] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 3d 67 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 859.397099][T28816] RSP: 0018:ffffc9000409fd58 EFLAGS: 00050212 [ 859.397120][T28816] RAX: 00007ffffffff001 RBX: 0000000000000010 RCX: 0000000000000010 [ 859.397136][T28816] RDX: 0000000000000001 RSI: 0000200000000200 RDI: ffffc9000409fdc0 [ 859.397152][T28816] RBP: ffffc9000409feb8 R08: ffffc9000409fdcf R09: 1ffff92000813fb9 [ 859.397170][T28816] R10: dffffc0000000000 R11: fffff52000813fba R12: 0000200000000200 [ 859.397187][T28816] R13: 1ffff92000813fb4 R14: ffffc9000409fdc0 R15: 0000200000000200 [ 859.397226][T28816] _copy_from_user+0x7a/0xb0 [ 859.397258][T28816] __sys_connect+0x155/0x450 [ 859.397290][T28816] ? __pfx___sys_connect+0x10/0x10 [ 859.397348][T28816] ? __pfx_ksys_write+0x10/0x10 [ 859.397393][T28816] __x64_sys_connect+0x7a/0x90 [ 859.397424][T28816] do_syscall_64+0x166/0x520 [ 859.397455][T28816] ? trace_irq_disable+0x3b/0x140 [ 859.397479][T28816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.397503][T28816] ? clear_bhb_loop+0x70/0xc0 [ 859.397532][T28816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.397555][T28816] RIP: 0033:0x7f3ca059e159 [ 859.397576][T28816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 859.397594][T28816] RSP: 002b:00007f3ca13a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 859.397617][T28816] RAX: ffffffffffffffda RBX: 00007f3ca0825fa0 RCX: 00007f3ca059e159 [ 859.397632][T28816] RDX: 0000000000000010 RSI: 0000200000000200 RDI: 0000000000000003 [ 859.397647][T28816] RBP: 00007f3ca13a8090 R08: 0000000000000000 R09: 0000000000000000 [ 859.397661][T28816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 859.397675][T28816] R13: 00007f3ca0826038 R14: 00007f3ca0825fa0 R15: 00007fff9b1f40b8 [ 859.397713][T28816] [ 859.894152][T28818] tipc: Enabling of bearer rejected, already enabled [ 860.469298][T28848] bond11: option min_links: invalid value (18446744073709551612) [ 860.469327][T28848] bond11: option min_links: allowed values 0 - 2147483647 [ 860.501168][T28856] FAULT_INJECTION: forcing a failure. [ 860.501168][T28856] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 860.501207][T28856] CPU: 1 UID: 0 PID: 28856 Comm: syz.3.5469 Not tainted syzkaller #0 PREEMPT(full) [ 860.501232][T28856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 860.501246][T28856] Call Trace: [ 860.501256][T28856] [ 860.501265][T28856] dump_stack_lvl+0xe8/0x150 [ 860.501304][T28856] should_fail_ex+0x410/0x560 [ 860.501337][T28856] prepare_alloc_pages+0x223/0x600 [ 860.501370][T28856] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 860.501411][T28856] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 860.501443][T28856] ? __pfx_policy_nodemask+0x10/0x10 [ 860.501484][T28856] alloc_pages_mpol+0x21e/0x390 [ 860.501523][T28856] folio_alloc_mpol_noprof+0x39/0x160 [ 860.501556][T28856] shmem_alloc_and_add_folio+0x43e/0xf60 [ 860.501589][T28856] ? filemap_get_entry+0xcd/0x3f0 [ 860.501628][T28856] ? filemap_map_pages+0x1d1/0x2170 [ 860.501662][T28856] ? __pfx_filemap_get_entry+0x10/0x10 [ 860.501692][T28856] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 860.501728][T28856] ? shmem_allowable_huge_orders+0x628/0x6c0 [ 860.501767][T28856] shmem_get_folio_gfp+0x5da/0x16d0 [ 860.501818][T28856] shmem_fault+0x179/0x390 [ 860.501860][T28856] __do_fault+0x138/0x2a0 [ 860.501884][T28856] ? do_pte_missing+0x140c/0x34b0 [ 860.501908][T28856] do_pte_missing+0x2215/0x34b0 [ 860.501937][T28856] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 860.501969][T28856] ? __pmd_alloc+0x40a/0x5c0 [ 860.502005][T28856] handle_mm_fault+0x1a53/0x3750 [ 860.502051][T28856] ? handle_mm_fault+0xf1/0x3750 [ 860.502096][T28856] ? __pfx_handle_mm_fault+0x10/0x10 [ 860.502145][T28856] ? __lock_acquire+0x747/0x2de0 [ 860.502174][T28856] ? lock_mm_and_find_vma+0xa7/0x340 [ 860.502214][T28856] do_user_addr_fault+0x746/0x1340 [ 860.502258][T28856] exc_page_fault+0x6a/0xc0 [ 860.502292][T28856] asm_exc_page_fault+0x26/0x30 [ 860.502315][T28856] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 860.502342][T28856] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 3d 67 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 860.502362][T28856] RSP: 0018:ffffc90004be7d58 EFLAGS: 00050212 [ 860.502392][T28856] RAX: 00007ffffffff001 RBX: 0000000000000010 RCX: 0000000000000010 [ 860.502409][T28856] RDX: 0000000000000001 RSI: 0000200000000200 RDI: ffffc90004be7dc0 [ 860.502426][T28856] RBP: ffffc90004be7eb8 R08: ffffc90004be7dcf R09: 1ffff9200097cfb9 [ 860.502443][T28856] R10: dffffc0000000000 R11: fffff5200097cfba R12: 0000200000000200 [ 860.502460][T28856] R13: 1ffff9200097cfb4 R14: ffffc90004be7dc0 R15: 0000200000000200 [ 860.502499][T28856] _copy_from_user+0x7a/0xb0 [ 860.502532][T28856] __sys_connect+0x155/0x450 [ 860.502566][T28856] ? __pfx___sys_connect+0x10/0x10 [ 860.502611][T28856] ? __pfx_ksys_write+0x10/0x10 [ 860.502657][T28856] __x64_sys_connect+0x7a/0x90 [ 860.502687][T28856] do_syscall_64+0x166/0x520 [ 860.502719][T28856] ? trace_irq_disable+0x3b/0x140 [ 860.502741][T28856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.502766][T28856] ? clear_bhb_loop+0x70/0xc0 [ 860.502794][T28856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.502818][T28856] RIP: 0033:0x7f3ca059e159 [ 860.502840][T28856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 860.502859][T28856] RSP: 002b:00007f3ca13a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 860.502883][T28856] RAX: ffffffffffffffda RBX: 00007f3ca0825fa0 RCX: 00007f3ca059e159 [ 860.502901][T28856] RDX: 0000000000000010 RSI: 0000200000000200 RDI: 0000000000000003 [ 860.502916][T28856] RBP: 00007f3ca13a8090 R08: 0000000000000000 R09: 0000000000000000 [ 860.502930][T28856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 860.502945][T28856] R13: 00007f3ca0826038 R14: 00007f3ca0825fa0 R15: 00007fff9b1f40b8 [ 860.502983][T28856] [ 860.798686][T28848] bond11 (unregistering): Released all slaves [ 861.037824][T13147] net_ratelimit: 17 callbacks suppressed [ 861.037851][T13147] bond2: (slave bridge1): failed to get link speed/duplex [ 861.046284][T28862] xt_CONNSECMARK: invalid mode: 254 [ 861.206403][T28862] netlink: 'syz.2.5472': attribute type 62 has an invalid length. [ 861.214213][ T6255] bond2: (slave bridge1): failed to get link speed/duplex [ 861.317813][T13146] bond2: (slave bridge1): failed to get link speed/duplex [ 861.428386][T13146] bond2: (slave bridge1): failed to get link speed/duplex [ 861.436422][T28876] netlink: 'syz.3.5479': attribute type 32 has an invalid length. [ 861.539765][ T6255] bond2: (slave bridge1): failed to get link speed/duplex [ 861.577865][T28882] netlink: 'syz.2.5478': attribute type 10 has an invalid length. [ 861.577891][T28882] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5478'. [ 861.728675][T28887] syzkaller0: entered promiscuous mode [ 861.728706][T28887] syzkaller0: entered allmulticast mode [ 861.751739][ T6255] bond2: (slave bridge1): failed to get link speed/duplex [ 861.807532][T28887] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5480'. [ 861.857762][ T27] bond2: (slave bridge1): failed to get link speed/duplex [ 862.052594][T28905] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5483'. [ 862.055730][T28910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5486'. [ 862.625974][T28935] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5487'. [ 865.103809][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 866.278168][T13146] bond2: (slave bridge1): failed to get link speed/duplex [ 866.282626][T28957] tipc: Enabling of bearer rejected, failed to enable media [ 866.388258][T13147] bond2: (slave bridge1): failed to get link speed/duplex [ 866.437377][T28961] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 866.500705][ T6255] bond2: (slave bridge1): failed to get link speed/duplex [ 866.536174][T28961] IPVS: set_ctl: invalid protocol: 5678 172.20.20.187:0 [ 866.608528][ T6255] bond2: (slave bridge1): failed to get link speed/duplex [ 866.609327][T28974] lo: entered allmulticast mode [ 866.718418][ T6252] bond2: (slave bridge1): failed to get link speed/duplex [ 866.828816][T13147] bond2: (slave bridge1): failed to get link speed/duplex [ 866.931319][T19915] nci: nci_rx_work: unknown MT 0x6 [ 866.945557][T28998] netlink: 'syz.4.5499': attribute type 4 has an invalid length. [ 866.945580][T28998] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5499'. [ 866.946697][T28999] netlink: 'syz.4.5499': attribute type 4 has an invalid length. [ 866.946717][T28999] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5499'. [ 866.964512][T28998] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 866.966121][T13147] bond2: (slave bridge1): failed to get link speed/duplex [ 866.967016][T28999] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 867.068706][T13146] bond2: (slave bridge1): failed to get link speed/duplex [ 867.600129][T29019] IPv6: NLM_F_CREATE should be specified when creating new route [ 867.941489][T29037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5505'. [ 868.539609][T29054] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5509'. [ 868.662372][T29057] sctp: [Deprecated]: syz.1.5510 (pid 29057) Use of int in max_burst socket option deprecated. [ 868.662372][T29057] Use struct sctp_assoc_value instead [ 868.963889][T29064] netlink: 'syz.1.5513': attribute type 1 has an invalid length. [ 869.815846][T28988] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 870.221720][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 870.268040][T29071] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5514'. [ 870.519122][T29096] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5520'. [ 870.527435][T29096] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5520'. [ 870.790156][T29105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5521'. [ 871.012644][ T32] audit: type=1804 audit(1790443587.248:14): pid=29110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5524" name="/newroot/458/cgroup.controllers" dev="tmpfs" ino=2377 res=1 errno=0 [ 871.013250][ T32] audit: type=1800 audit(1790443587.248:15): pid=29110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5524" name="cgroup.controllers" dev="tmpfs" ino=2377 res=0 errno=0 [ 871.262530][T29114] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.5525'. [ 871.332496][T13143] net_ratelimit: 39 callbacks suppressed [ 871.332522][T13143] bond2: (slave bridge1): failed to get link speed/duplex [ 871.432031][T29130] x_tables: ip6_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 871.433410][T29130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5531'. [ 872.324450][T29127] tipc: Resetting bearer [ 872.326129][T29127] tipc: Resetting bearer [ 873.105865][T29144] tipc: Resetting bearer [ 873.120062][T29144] batman_adv: batadv0: Interface deactivated: macvlan2 [ 873.259714][ T8873] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 873.259755][ T8873] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.259798][ T8873] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 873.259823][ T8873] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 44555 - 0 [ 873.259853][ T8873] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 873.259892][ T8873] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 873.259920][ T8873] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 44555 - 0 [ 873.259947][ T8873] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 873.261887][T28773] syz0: Port: 1 Link DOWN [ 873.378595][T19914] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 873.378635][T19914] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.378677][T19914] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 873.378705][T19914] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 44555 - 0 [ 873.378742][T19914] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 873.378778][T19914] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 873.378806][T19914] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 44555 - 0 [ 873.378833][T19914] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 873.378869][T19914] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 873.378897][T19914] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.378947][T19914] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 873.378976][T19914] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.787918][T29186] __nla_validate_parse: 2 callbacks suppressed [ 873.787941][T29186] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5541'. [ 874.800386][T29235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5550'. [ 874.894494][T29244] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5551'. [ 875.276330][T29252] netlink: 'syz.4.5554': attribute type 23 has an invalid length. [ 875.549674][T29267] netlink: 'syz.2.5558': attribute type 1 has an invalid length. [ 875.549702][T29267] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.5558'. [ 875.549721][T29267] netlink: 2036 bytes leftover after parsing attributes in process `syz.2.5558'. [ 875.664937][T29265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5556'. [ 875.664961][T29265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5556'. [ 875.724236][T29276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5558'. [ 875.724268][T29276] block nbd5: Unsupported socket: should be TCP or UNIX. [ 875.946829][T29261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 875.961505][T29261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 876.174192][T29261] batman_adv: batadv0: Interface deactivated: macvlan2 [ 876.351924][T13143] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 876.351964][T13143] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.352006][T13143] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 876.352034][T13143] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.352072][T13143] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 876.352100][T13143] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.352135][T13143] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 876.352163][T13143] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.222957][T29318] vlan5: entered promiscuous mode [ 877.222982][T29318] bridge0: entered promiscuous mode [ 877.389462][T29324] bond1: left promiscuous mode [ 877.425438][T29324] bridge0: port 2(vlan3) entered blocking state [ 877.427449][T29324] bridge0: port 2(vlan3) entered disabled state [ 877.440189][T29324] vlan3: entered allmulticast mode [ 877.441523][T29324] geneve0: entered allmulticast mode [ 877.468567][T29324] vlan3: entered promiscuous mode [ 877.468592][T29324] geneve0: entered promiscuous mode [ 877.475070][T29324] bond1: entered promiscuous mode [ 877.965245][T29350] FAULT_INJECTION: forcing a failure. [ 877.965245][T29350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 877.965282][T29350] CPU: 0 UID: 0 PID: 29350 Comm: syz.4.5584 Not tainted syzkaller #0 PREEMPT(full) [ 877.965308][T29350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 877.965323][T29350] Call Trace: [ 877.965333][T29350] [ 877.965343][T29350] dump_stack_lvl+0xe8/0x150 [ 877.965385][T29350] should_fail_ex+0x410/0x560 [ 877.965419][T29350] _copy_from_user+0x2d/0xb0 [ 877.965451][T29350] __sys_bpf+0x2e7/0xd90 [ 877.965487][T29350] ? __pfx___sys_bpf+0x10/0x10 [ 877.965526][T29350] ? __fget_files+0x2a/0x420 [ 877.965577][T29350] ? ksys_write+0x242/0x270 [ 877.965624][T29350] ? __pfx_ksys_write+0x10/0x10 [ 877.965665][T29350] __x64_sys_bpf+0xba/0xd0 [ 877.965693][T29350] do_syscall_64+0x166/0x520 [ 877.965723][T29350] ? trace_irq_disable+0x3b/0x140 [ 877.965746][T29350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.965770][T29350] ? clear_bhb_loop+0x70/0xc0 [ 877.965798][T29350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.965821][T29350] RIP: 0033:0x7f22c0b9e159 [ 877.965842][T29350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 877.965862][T29350] RSP: 002b:00007f22c19d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 877.965887][T29350] RAX: ffffffffffffffda RBX: 00007f22c0e25fa0 RCX: 00007f22c0b9e159 [ 877.965904][T29350] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 877.965920][T29350] RBP: 00007f22c19d5090 R08: 0000000000000000 R09: 0000000000000000 [ 877.965935][T29350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 877.965948][T29350] R13: 00007f22c0e26038 R14: 00007f22c0e25fa0 R15: 00007ffe4d17a5d8 [ 877.965985][T29350] [ 878.220132][T29361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5586'. [ 878.221993][T29357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5586'. [ 878.696461][T29362] 8021q: adding VLAN 0 to HW filter on device bond11 [ 878.837187][T29386] __nla_validate_parse: 1 callbacks suppressed [ 878.837210][T29386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5588'. [ 878.837239][T29386] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5588'. [ 878.887112][T29386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5588'. [ 878.887151][T29386] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5588'. [ 878.918648][ T13] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 878.920398][T13143] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 878.920441][T13143] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 878.920480][T13143] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 878.964967][T29389] ip_tables: iptables: counters copy to user failed while replacing table [ 879.004710][T29387] openvswitch: netlink: Missing valid actions attribute. [ 879.007087][T29388] openvswitch: netlink: Missing valid actions attribute. [ 879.802919][T29424] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 879.834939][T29425] netlink: 'syz.0.5598': attribute type 6 has an invalid length. [ 880.315674][T29446] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5602'. [ 880.504075][T29452] netlink: 'syz.1.5604': attribute type 1 has an invalid length. [ 880.905815][T29469] syzkaller0: left promiscuous mode [ 880.905845][T29469] syzkaller0: left allmulticast mode [ 880.915696][T29469] tipc: Resetting bearer [ 881.156318][T29487] bridge7: entered allmulticast mode [ 881.434984][T29503] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5618'. [ 881.447071][T29502] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5618'. [ 881.930988][T29521] FAULT_INJECTION: forcing a failure. [ 881.930988][T29521] name failslab, interval 1, probability 0, space 0, times 0 [ 881.931025][T29521] CPU: 0 UID: 0 PID: 29521 Comm: syz.2.5622 Not tainted syzkaller #0 PREEMPT(full) [ 881.931052][T29521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 881.931067][T29521] Call Trace: [ 881.931077][T29521] [ 881.931088][T29521] dump_stack_lvl+0xe8/0x150 [ 881.931127][T29521] should_fail_ex+0x410/0x560 [ 881.931160][T29521] should_failslab+0xa8/0x100 [ 881.931192][T29521] __kmalloc_noprof+0xfe/0x720 [ 881.931216][T29521] ? sk_prot_alloc+0xe7/0x210 [ 881.931246][T29521] ? sk_prot_alloc+0xe7/0x210 [ 881.931283][T29521] sk_prot_alloc+0xe7/0x210 [ 881.931313][T29521] ? sk_alloc+0x27/0x390 [ 881.931346][T29521] sk_alloc+0x3a/0x390 [ 881.931381][T29521] bpf_prog_test_run_skb+0x3a6/0x2230 [ 881.931419][T29521] ? lock_acquire+0x115/0x350 [ 881.931462][T29521] ? __fget_files+0x3a2/0x420 [ 881.931493][T29521] ? __fget_files+0x2a/0x420 [ 881.931531][T29521] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 881.931569][T29521] bpf_prog_test_run+0x2c5/0x340 [ 881.931602][T29521] __sys_bpf+0xa22/0xd90 [ 881.931638][T29521] ? __pfx___sys_bpf+0x10/0x10 [ 881.931676][T29521] ? __fget_files+0x2a/0x420 [ 881.931737][T29521] ? ksys_write+0x242/0x270 [ 881.931775][T29521] ? __pfx_ksys_write+0x10/0x10 [ 881.931816][T29521] __x64_sys_bpf+0xba/0xd0 [ 881.931843][T29521] do_syscall_64+0x166/0x520 [ 881.931875][T29521] ? trace_irq_disable+0x3b/0x140 [ 881.931898][T29521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.931922][T29521] ? clear_bhb_loop+0x70/0xc0 [ 881.931951][T29521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.931975][T29521] RIP: 0033:0x7f77b519e159 [ 881.931997][T29521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 881.932017][T29521] RSP: 002b:00007f77b6011028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 881.932042][T29521] RAX: ffffffffffffffda RBX: 00007f77b5425fa0 RCX: 00007f77b519e159 [ 881.932060][T29521] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 881.932075][T29521] RBP: 00007f77b6011090 R08: 0000000000000000 R09: 0000000000000000 [ 881.932094][T29521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 881.932108][T29521] R13: 00007f77b5426038 R14: 00007f77b5425fa0 R15: 00007ffcb78483b8 [ 881.932147][T29521] [ 882.315753][T29528] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5627'. [ 882.329485][T29528] batadv_slave_0: entered promiscuous mode [ 882.329962][T29528] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5627'. [ 882.356808][T29530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5625'. [ 882.368325][T29530] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 882.424250][T29543] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 882.836265][T29563] netlink: Unknown nat attribute (0) [ 882.836303][T29563] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 883.141628][T29527] batadv_slave_0: left promiscuous mode [ 883.179215][T29584] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 883.223995][T29580] xt_CT: No such helper "snmp" [ 883.381383][T29598] x_tables: duplicate entry at hook 1 [ 883.382951][T29587] netlink: 'syz.3.5641': attribute type 1 has an invalid length. [ 883.404800][T29594] netlink: 'syz.3.5641': attribute type 1 has an invalid length. [ 883.679878][T29593] bond11: option arp_validate: invalid value (1048579) [ 883.685998][T29593] bond11 (unregistering): Released all slaves [ 883.784236][T29609] bond11: option arp_validate: invalid value (1048579) [ 883.802595][T29609] bond11 (unregistering): Released all slaves [ 883.841973][T29586] bridge5: entered promiscuous mode [ 884.193950][T29642] __nla_validate_parse: 7 callbacks suppressed [ 884.193976][T29642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5653'. [ 884.239137][T29645] netlink: 'syz.2.5655': attribute type 4 has an invalid length. [ 884.245590][T29645] netlink: 'syz.2.5655': attribute type 4 has an invalid length. [ 884.273550][T29646] netlink: 'syz.4.5654': attribute type 10 has an invalid length. [ 884.273597][T29646] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5654'. [ 884.344711][T29645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5655'. [ 884.344754][T29645] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 884.629371][T29658] openvswitch: netlink: IPv6 tunnel dst address is zero [ 884.636622][T29658] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 884.654110][T29658] x_tables: duplicate underflow at hook 3 [ 884.669006][T29658] netlink: 'syz.1.5659': attribute type 1 has an invalid length. [ 884.696219][T29656] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 884.931150][T29674] TC_ACT_REPEAT abuse ? [ 884.932519][T29674] netlink: 35 bytes leftover after parsing attributes in process `syz.0.5666'. [ 885.213905][T29680] bridge0: port 2(macsec2) entered blocking state [ 885.214103][T29680] bridge0: port 2(macsec2) entered disabled state [ 885.214252][T29680] macsec2: entered allmulticast mode [ 885.214272][T29680] bridge0: entered allmulticast mode [ 885.220534][T29680] macsec2: left allmulticast mode [ 885.220559][T29680] bridge0: left allmulticast mode [ 885.298118][T29687] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5671'. [ 885.304353][T29685] netlink: 'syz.3.5669': attribute type 1 has an invalid length. [ 885.578315][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 885.710623][T29709] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5677'. [ 885.824495][T29712] netlink: 'syz.2.5676': attribute type 25 has an invalid length. [ 885.996248][T29717] vlan7: entered promiscuous mode [ 885.996273][T29717] gretap0: entered promiscuous mode [ 886.119893][T29724] vlan7: entered promiscuous mode [ 886.168794][T29728] netlink: 'syz.1.5682': attribute type 9 has an invalid length. [ 886.346741][T29734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5684'. [ 886.443772][T29734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5684'. [ 886.468363][T29734] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5684'. [ 886.476961][T29734] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 886.522173][T29734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5684'. [ 886.603840][T29734] tipc: Resetting bearer [ 886.605296][T29734] hsr_slave_1 (unregistering): left promiscuous mode [ 886.629768][T29734] tipc: Disabling bearer [ 886.891307][T29743] syzkaller0: entered promiscuous mode [ 886.891336][T29743] syzkaller0: entered allmulticast mode [ 887.497917][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 888.537769][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 889.577727][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 890.372539][T29757] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 890.373113][T29757] batman_adv: batadv0: Adding interface: gretap1 [ 890.373127][T29757] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 890.373156][T29757] batman_adv: batadv0: Interface activated: gretap1 [ 890.387853][T29772] mac80211_hwsim hwsim62 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 890.532063][T29776] netlink: 260 bytes leftover after parsing attributes in process `syz.0.5696'. [ 890.606137][T29776] team0 (unregistering): Port device team_slave_0 removed [ 890.617701][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 890.646570][T29776] team0 (unregistering): Port device team_slave_1 removed [ 890.672942][T29786] netlink: 228 bytes leftover after parsing attributes in process `syz.3.5697'. [ 890.672977][T29786] ksmbd: Unknown IPC event: 1, ignore. [ 890.693998][T29778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5695'. [ 890.733829][T29793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5695'. [ 891.078784][T29807] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5700'. [ 891.130085][T29812] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5707'. [ 891.491370][T29834] netlink: 'syz.3.5712': attribute type 10 has an invalid length. [ 891.657700][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 891.879819][T29846] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5717'. [ 891.884135][T29846] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5717'. [ 892.490291][T29880] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5727'. [ 892.536158][T29882] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5728'. [ 892.699171][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 892.993342][T29898] xt_policy: output policy not valid in PREROUTING and INPUT [ 893.153373][T20153] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 893.193915][T20153] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 893.212069][T20153] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 893.215034][T20153] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 893.216444][T20153] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 893.387162][T29903] ip_tables: iptables: counters copy to user failed while replacing table [ 893.442411][ T4934] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 893.461061][ T4934] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 893.462616][ T4934] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 893.483172][ T4934] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 893.492861][ T4934] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 893.737693][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 893.901534][T29929] vlan0: entered promiscuous mode [ 894.086299][T19917] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 894.098951][ T6255] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 894.099001][ T6255] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 894.099040][ T6255] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 894.358710][T29946] netlink: 'syz.2.5744': attribute type 8 has an invalid length. [ 894.388949][T29946] veth1_to_team: entered promiscuous mode [ 894.393876][T29946] gretap0: entered promiscuous mode [ 894.394753][T29946] veth1_to_team: left promiscuous mode [ 894.396937][T29946] gretap0: left promiscuous mode [ 894.608607][T29966] block nbd5: Unsupported socket: should be TCP or UNIX. [ 894.749145][T29960] netlink: 'syz.3.5746': attribute type 1 has an invalid length. [ 894.749173][T29960] netlink: 'syz.3.5746': attribute type 3 has an invalid length. [ 894.777872][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 895.155918][T29985] netlink: 'syz.3.5753': attribute type 4 has an invalid length. [ 895.609008][ T4934] Bluetooth: hci4: command tx timeout [ 895.818686][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 896.220949][T29904] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.221150][T29904] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.221334][T29904] bridge_slave_0: entered allmulticast mode [ 896.239192][T29904] bridge_slave_0: entered promiscuous mode [ 896.247286][T29904] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.247402][T29904] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.247551][T29904] bridge_slave_1: entered allmulticast mode [ 896.259808][T29904] bridge_slave_1: entered promiscuous mode [ 896.262239][T30009] tipc: Invalid UDP bearer configuration [ 896.262333][T30009] tipc: Enabling of bearer rejected, failed to enable media [ 896.541918][T29904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 896.546355][T29904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 896.643711][T29904] team0: Port device team_slave_0 added [ 896.654801][T29904] team0: Port device team_slave_1 added [ 896.746485][T29904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 896.746507][T29904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 896.746536][T29904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 896.806569][T29904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 896.806589][T29904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 896.806618][T29904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 896.857717][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 897.017513][T29904] hsr_slave_0: entered promiscuous mode [ 897.030183][T29904] hsr_slave_1: entered promiscuous mode [ 897.033481][T29904] debugfs: 'hsr0' already exists in 'hsr' [ 897.033507][T29904] Cannot create hsr debugfs directory [ 897.035485][T30031] __nla_validate_parse: 9 callbacks suppressed [ 897.035505][T30031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5761'. [ 897.310192][T30044] FAULT_INJECTION: forcing a failure. [ 897.310192][T30044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 897.310229][T30044] CPU: 1 UID: 0 PID: 30044 Comm: syz.4.5767 Not tainted syzkaller #0 PREEMPT(full) [ 897.310256][T30044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 897.310271][T30044] Call Trace: [ 897.310280][T30044] [ 897.310290][T30044] dump_stack_lvl+0xe8/0x150 [ 897.310329][T30044] should_fail_ex+0x410/0x560 [ 897.310363][T30044] _copy_from_user+0x2d/0xb0 [ 897.310395][T30044] bpf_test_init+0xd8/0x150 [ 897.310424][T30044] bpf_prog_test_run_skb+0x31e/0x2230 [ 897.310462][T30044] ? lock_acquire+0x115/0x350 [ 897.310514][T30044] ? __fget_files+0x3a2/0x420 [ 897.310547][T30044] ? __fget_files+0x2a/0x420 [ 897.310584][T30044] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 897.310622][T30044] bpf_prog_test_run+0x2c5/0x340 [ 897.310655][T30044] __sys_bpf+0xa22/0xd90 [ 897.310695][T30044] ? __pfx___sys_bpf+0x10/0x10 [ 897.310734][T30044] ? __fget_files+0x2a/0x420 [ 897.310787][T30044] ? ksys_write+0x242/0x270 [ 897.310823][T30044] ? __pfx_ksys_write+0x10/0x10 [ 897.310865][T30044] __x64_sys_bpf+0xba/0xd0 [ 897.310893][T30044] do_syscall_64+0x166/0x520 [ 897.310924][T30044] ? trace_irq_disable+0x3b/0x140 [ 897.310948][T30044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.310972][T30044] ? clear_bhb_loop+0x70/0xc0 [ 897.311001][T30044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.311024][T30044] RIP: 0033:0x7f22c0b9e159 [ 897.311045][T30044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 897.311065][T30044] RSP: 002b:00007f22c19d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 897.311090][T30044] RAX: ffffffffffffffda RBX: 00007f22c0e25fa0 RCX: 00007f22c0b9e159 [ 897.311108][T30044] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 897.311123][T30044] RBP: 00007f22c19d5090 R08: 0000000000000000 R09: 0000000000000000 [ 897.311138][T30044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 897.311153][T30044] R13: 00007f22c0e26038 R14: 00007f22c0e25fa0 R15: 00007ffe4d17a5d8 [ 897.311189][T30044] [ 897.658628][ T4934] Bluetooth: hci4: command tx timeout [ 897.797358][T30042] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5766'. [ 897.897695][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 898.375600][T29904] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 898.375644][T29904] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 898.501046][T30057] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 898.505070][T30057] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 898.505284][T30075] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5773'. [ 898.536755][T30077] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5773'. [ 898.613166][T29904] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 898.613206][T29904] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 898.791973][T29904] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 898.792014][T29904] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 898.951592][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 898.976960][T29904] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 898.977001][T29904] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 899.200933][T30091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 899.219067][T23070] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 899.229661][T30091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 899.324592][T30091] veth1_vlan: left promiscuous mode [ 899.326030][T30091] veth0_vlan: left promiscuous mode [ 899.334320][T30091] veth0_vlan: entered promiscuous mode [ 899.347566][T30091] veth1_vlan: entered promiscuous mode [ 899.351655][T23067] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 899.379471][T30091] veth1_macvtap: left promiscuous mode [ 899.384258][T30091] veth0_macvtap: left promiscuous mode [ 899.386073][T30091] veth0_macvtap: entered promiscuous mode [ 899.396632][T30091] veth1_macvtap: entered promiscuous mode [ 899.492509][T30091] mac80211_hwsim hwsim67 wlan0: entered promiscuous mode [ 899.531370][T30091] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 899.572256][T23069] bridge0: port 2(vlan3) entered blocking state [ 899.572506][T23069] bridge0: port 2(vlan3) entered forwarding state [ 899.692648][T23066] syz0: Port: 1 Link ACTIVE [ 899.741227][ T4934] Bluetooth: hci4: command tx timeout [ 899.744324][T19917] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 899.744360][T19917] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.744386][T19917] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 48383 - 0 [ 899.744806][ T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 899.745044][ T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 899.977998][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 900.125618][T23067] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 900.131155][ T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 900.131216][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.131351][ T13] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 48383 - 0 [ 900.160335][ T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 900.160432][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.160524][ T13] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 48383 - 0 [ 900.205541][T19917] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 900.205580][T19917] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.205608][T19917] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 48383 - 0 [ 900.362412][T30121] ip_tables: iptables: counters copy to user failed while replacing table [ 900.572979][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 900.573005][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 900.629804][T29904] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 900.661429][T29904] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 900.662889][T29904] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 900.691478][T29904] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 900.697250][T29904] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 900.724823][T29904] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 900.725830][T29904] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 900.747202][T29904] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 900.911364][T29904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 900.936825][T29904] 8021q: adding VLAN 0 to HW filter on device team0 [ 900.957872][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.957986][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 900.967473][ T8873] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.967571][ T8873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 901.018010][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 901.155546][T30154] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5793'. [ 901.156219][T30154] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5793'. [ 901.281321][T30154] bond12: entered allmulticast mode [ 901.373305][T30163] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5796'. [ 901.425489][T30169] Bluetooth: hci0: unsupported parameter 5135 [ 901.425514][T30169] Bluetooth: hci0: unsupported parameter 8192 [ 901.425529][T30169] Bluetooth: hci0: unsupported parameter 5135 [ 901.425544][T30169] Bluetooth: hci0: unsupported parameter 8192 [ 901.426081][T30169] xt_l2tp: invalid flags combination: 8 [ 901.433261][T30170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5798'. [ 901.433376][T30170] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5798'. [ 901.485667][T30172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5798'. [ 901.505271][T30163] ip6gre1: entered promiscuous mode [ 901.661334][ T1149] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 901.661387][ T1149] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 901.661424][ T1149] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 901.661461][ T1149] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 901.839349][ T4934] Bluetooth: hci4: command tx timeout [ 902.058047][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 902.269265][T30202] tipc: Started in network mode [ 902.269298][T30202] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 902.269353][T30202] tipc: Enabling of bearer rejected, failed to enable media [ 902.271610][T30201] __nla_validate_parse: 3 callbacks suppressed [ 902.271629][T30201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5803'. [ 902.367468][T30189] netlink: 4912 bytes leftover after parsing attributes in process `syz.2.5801'. [ 902.526141][T30204] bond15 (unregistering): Released all slaves [ 902.551612][T30211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5805'. [ 902.600935][T30213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5805'. [ 902.682356][T30217] netlink: 'syz.4.5805': attribute type 1 has an invalid length. [ 902.682380][T30217] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5805'. [ 902.726289][T29904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 902.903092][T29904] veth0_vlan: entered promiscuous mode [ 902.932975][T29904] veth1_vlan: entered promiscuous mode [ 902.956212][T30225] netlink: 'syz.0.5808': attribute type 18 has an invalid length. [ 902.995982][T30225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5808'. [ 903.035603][T29904] veth0_macvtap: entered promiscuous mode [ 903.047122][T29904] veth1_macvtap: entered promiscuous mode [ 903.095906][T30229] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5810'. [ 903.095937][T30229] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5810'. [ 903.097822][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 903.139875][T29904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 903.192514][T29904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 903.278853][ T103] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.370645][ T1149] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.371678][ T1149] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.371725][ T1149] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.645340][T30248] tipc: Enabled bearer , priority 10 [ 903.645601][T19914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 903.645620][T19914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 903.733695][T30257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5815'. [ 903.733731][T30257] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5815'. [ 903.896596][ T8873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 903.896621][ T8873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 903.991301][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 904.079355][T30272] xt_HMARK: proto mask must be zero with L3 mode [ 904.137895][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 904.706256][T30299] ip6gretap2: entered allmulticast mode [ 904.922095][T30309] FAULT_INJECTION: forcing a failure. [ 904.922095][T30309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 904.922134][T30309] CPU: 0 UID: 0 PID: 30309 Comm: syz.1.5822 Not tainted syzkaller #0 PREEMPT(full) [ 904.922160][T30309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 904.922174][T30309] Call Trace: [ 904.922183][T30309] [ 904.922194][T30309] dump_stack_lvl+0xe8/0x150 [ 904.922238][T30309] should_fail_ex+0x410/0x560 [ 904.922271][T30309] _copy_to_user+0x31/0xb0 [ 904.922305][T30309] bpf_test_finish+0x4ea/0x690 [ 904.922341][T30309] ? __pfx_bpf_test_finish+0x10/0x10 [ 904.922380][T30309] bpf_prog_test_run_skb+0x11fe/0x2230 [ 904.922442][T30309] ? __fget_files+0x3a2/0x420 [ 904.922474][T30309] ? __fget_files+0x2a/0x420 [ 904.922512][T30309] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 904.922550][T30309] bpf_prog_test_run+0x2c5/0x340 [ 904.922584][T30309] __sys_bpf+0xa22/0xd90 [ 904.922620][T30309] ? __pfx___sys_bpf+0x10/0x10 [ 904.922660][T30309] ? __fget_files+0x2a/0x420 [ 904.922712][T30309] ? ksys_write+0x242/0x270 [ 904.922750][T30309] ? __pfx_ksys_write+0x10/0x10 [ 904.922796][T30309] __x64_sys_bpf+0xba/0xd0 [ 904.922822][T30309] do_syscall_64+0x166/0x520 [ 904.922853][T30309] ? trace_irq_disable+0x3b/0x140 [ 904.922877][T30309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.922898][T30309] ? clear_bhb_loop+0x70/0xc0 [ 904.922927][T30309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.922951][T30309] RIP: 0033:0x7f24d4d9e159 [ 904.922972][T30309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 904.922992][T30309] RSP: 002b:00007f24d5bb8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 904.923018][T30309] RAX: ffffffffffffffda RBX: 00007f24d5025fa0 RCX: 00007f24d4d9e159 [ 904.923036][T30309] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 904.923053][T30309] RBP: 00007f24d5bb8090 R08: 0000000000000000 R09: 0000000000000000 [ 904.923068][T30309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 904.923082][T30309] R13: 00007f24d5026038 R14: 00007f24d5025fa0 R15: 00007ffffec5ccc8 [ 904.923121][T30309] [ 905.177857][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 905.550688][ T32] audit: type=1800 audit(1790443621.788:16): pid=30318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5827" name="memory.events" dev="tmpfs" ino=2493 res=0 errno=0 [ 905.555085][ T32] audit: type=1804 audit(1790443621.788:17): pid=30318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.5827" name="/newroot/478/memory.events" dev="tmpfs" ino=2493 res=1 errno=0 [ 905.679108][T30322] pim6reg: entered allmulticast mode [ 905.729353][T30327] vcan0: entered promiscuous mode [ 905.750266][T30322] x_tables: duplicate underflow at hook 2 [ 905.771849][T30322] IPv6: NLM_F_CREATE should be specified when creating new route [ 906.217809][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 906.667797][T30343] FAULT_INJECTION: forcing a failure. [ 906.667797][T30343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 906.667839][T30343] CPU: 0 UID: 0 PID: 30343 Comm: syz.1.5833 Not tainted syzkaller #0 PREEMPT(full) [ 906.667865][T30343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 906.667879][T30343] Call Trace: [ 906.667889][T30343] [ 906.667899][T30343] dump_stack_lvl+0xe8/0x150 [ 906.667935][T30343] should_fail_ex+0x410/0x560 [ 906.667967][T30343] _copy_to_user+0x31/0xb0 [ 906.667999][T30343] bpf_test_finish+0x52e/0x690 [ 906.668033][T30343] ? __pfx_bpf_test_finish+0x10/0x10 [ 906.668070][T30343] bpf_prog_test_run_skb+0x11fe/0x2230 [ 906.668128][T30343] ? __fget_files+0x3a2/0x420 [ 906.668170][T30343] ? __fget_files+0x2a/0x420 [ 906.668206][T30343] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 906.668243][T30343] bpf_prog_test_run+0x2c5/0x340 [ 906.668276][T30343] __sys_bpf+0xa22/0xd90 [ 906.668310][T30343] ? __pfx___sys_bpf+0x10/0x10 [ 906.668349][T30343] ? __fget_files+0x2a/0x420 [ 906.668399][T30343] ? ksys_write+0x242/0x270 [ 906.668438][T30343] ? __pfx_ksys_write+0x10/0x10 [ 906.668478][T30343] __x64_sys_bpf+0xba/0xd0 [ 906.668505][T30343] do_syscall_64+0x166/0x520 [ 906.668538][T30343] ? trace_irq_disable+0x3b/0x140 [ 906.668560][T30343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.668583][T30343] ? clear_bhb_loop+0x70/0xc0 [ 906.668611][T30343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.668627][T30343] RIP: 0033:0x7f24d4d9e159 [ 906.668644][T30343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 906.668659][T30343] RSP: 002b:00007f24d5bb8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 906.668677][T30343] RAX: ffffffffffffffda RBX: 00007f24d5025fa0 RCX: 00007f24d4d9e159 [ 906.668689][T30343] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 906.668700][T30343] RBP: 00007f24d5bb8090 R08: 0000000000000000 R09: 0000000000000000 [ 906.668710][T30343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 906.668720][T30343] R13: 00007f24d5026038 R14: 00007f24d5025fa0 R15: 00007ffffec5ccc8 [ 906.668746][T30343] [ 907.051021][T30350] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 0, id = 0 [ 907.257795][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 908.297805][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 908.563268][T30320] pim6reg: left allmulticast mode [ 908.854554][T30361] ip_tables: iptables: counters copy to user failed while replacing table [ 908.940606][T30366] geneve5: entered promiscuous mode [ 909.051459][T30370] Bluetooth: hci0: unsupported parameter 5135 [ 909.051487][T30370] Bluetooth: hci0: invalid length 2, exp 1 for type 31 [ 909.123840][T30361] syzkaller0: entered promiscuous mode [ 909.123866][T30361] syzkaller0: entered allmulticast mode [ 909.161926][T30374] netlink: 'syz.0.5843': attribute type 10 has an invalid length. [ 909.215739][T30381] netlink: 'syz.0.5843': attribute type 10 has an invalid length. [ 909.337694][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 910.042412][T30410] __nla_validate_parse: 1 callbacks suppressed [ 910.042440][T30410] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5850'. [ 910.042780][T30410] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5850'. [ 910.378191][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 910.412691][T23066] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 911.338827][T23066] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 911.417865][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 911.781942][T30466] hsr_slave_0: left promiscuous mode [ 911.797421][T30466] hsr_slave_1: left promiscuous mode [ 911.862413][T30468] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5863'. [ 911.988325][T30468] openvswitch: netlink: IP tunnel TTL not specified. [ 912.010918][T30475] syzkaller1: entered promiscuous mode [ 912.010945][T30475] syzkaller1: entered allmulticast mode [ 912.160954][T30480] netlink: 'syz.2.5866': attribute type 1 has an invalid length. [ 912.222108][T30483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5866'. [ 912.294107][T30480] 8021q: adding VLAN 0 to HW filter on device bond7 [ 912.312222][T30484] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5867'. [ 912.314043][T30480] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5866'. [ 912.357505][T30484] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5867'. [ 912.436257][T30480] 8021q: adding VLAN 0 to HW filter on device bond8 [ 912.457970][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 912.460466][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 912.467926][T30480] bond7: (slave bond8): Enslaving as an active interface with a down link [ 912.581834][T30483] bond7 (unregistering): (slave bond8): Releasing active interface [ 912.606213][T30483] bond7 (unregistering): Released all slaves [ 912.844609][T30496] netlink: 'syz.1.5870': attribute type 1 has an invalid length. [ 912.918415][T30499] netlink: 'syz.3.5871': attribute type 1 has an invalid length. [ 912.918948][T30507] netlink: 'syz.1.5870': attribute type 1 has an invalid length. [ 913.097471][T30501] macvlan0: entered promiscuous mode [ 913.097496][T30501] macvlan0: entered allmulticast mode [ 913.123735][T30501] bond11: entered promiscuous mode [ 913.125753][T30501] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 913.161753][T30501] bond11: left promiscuous mode [ 913.239442][T30423] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 913.497690][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 913.708438][T30537] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 913.803739][T30540] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 913.805666][T30540] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5881'. [ 914.319255][T30571] netlink: 'syz.1.5887': attribute type 4 has an invalid length. [ 914.485172][T30585] macvtap1: entered promiscuous mode [ 914.537685][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 914.723066][T30595] netlink: 'syz.3.5893': attribute type 21 has an invalid length. [ 914.723137][T30595] netlink: 'syz.3.5893': attribute type 6 has an invalid length. [ 914.723153][T30595] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5893'. [ 914.811109][T30598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 915.095562][T30610] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 915.096065][T30610] netlink: 'syz.0.5897': attribute type 1 has an invalid length. [ 915.167295][T30610] 8021q: adding VLAN 0 to HW filter on device bond15 [ 915.241622][T30610] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5897'. [ 915.577697][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 915.841875][T30650] v: renamed from gre0 (while UP) [ 915.843697][T30650] v: entered allmulticast mode [ 915.844246][T30650] A link change request failed with some changes committed already. Interface v may have been left with an inconsistent configuration, please check. [ 916.174042][T30663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5915'. [ 916.617716][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 916.846058][T30685] tipc: Enabled bearer , priority 20 [ 916.867325][T30687] tipc: Enabling of bearer rejected, already enabled [ 917.657699][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 917.768281][T30716] netlink: 208 bytes leftover after parsing attributes in process `syz.2.5925'. [ 917.773101][T30716] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5925'. [ 917.995019][T28775] tipc: Node number set to 4269801488 [ 918.072809][T30723] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5929'. [ 918.202998][T30735] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5932'. [ 918.203079][T30735] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5932'. [ 918.340627][T30736] netlink: 70 bytes leftover after parsing attributes in process `syz.1.5933'. [ 918.401015][T30741] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5934'. [ 918.403326][T30745] netlink: 'syz.0.5936': attribute type 1 has an invalid length. [ 918.574723][T30745] bond16: option mode: invalid value (7) [ 918.630410][T30745] bond16 (unregistering): Released all slaves [ 918.700121][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 918.922722][T30758] syzkaller1: entered promiscuous mode [ 918.922751][T30758] syzkaller1: entered allmulticast mode [ 919.449786][T30771] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5943'. [ 919.737687][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 919.940126][T30801] netlink: 'syz.1.5952': attribute type 1 has an invalid length. [ 920.000184][T30801] bond1: entered promiscuous mode [ 920.000729][T30801] 8021q: adding VLAN 0 to HW filter on device bond1 [ 920.059416][T30801] vlan2: entered allmulticast mode [ 920.086128][T30801] bond1: entered allmulticast mode [ 920.114114][T30805] bond1: (slave bridge1): making interface the new active one [ 920.114143][T30805] bridge1: entered promiscuous mode [ 920.114322][T30805] bridge1: entered allmulticast mode [ 920.115776][T30805] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 920.160550][T30805] netlink: 'syz.1.5952': attribute type 1 has an invalid length. [ 920.193627][T30805] bond1: (slave bridge2): Enslaving as a backup interface with an up link [ 920.666149][T30828] openvswitch: netlink: VLAN attribute unexpected. [ 920.777762][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 920.814019][T30845] __nla_validate_parse: 9 callbacks suppressed [ 920.814043][T30845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5962'. [ 920.987547][T30847] netlink: 'syz.3.5964': attribute type 10 has an invalid length. [ 921.058270][T30847] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5964'. [ 921.097923][T30851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5964'. [ 921.345956][T30861] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 921.347012][T30861] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 921.508800][T30865] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5969'. [ 921.564820][T30872] gre0: entered promiscuous mode [ 921.564847][T30872] gre0: entered allmulticast mode [ 921.579260][T30872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5970'. [ 921.640736][T30875] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5971'. [ 921.817690][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 922.007718][T30891] xt_TCPMSS: Only works on TCP SYN packets [ 922.094241][T30893] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5977'. [ 922.135112][T30898] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5978'. [ 922.151054][T30896] netlink: 'syz.4.5977': attribute type 4 has an invalid length. [ 922.151079][T30896] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5977'. [ 922.311622][T30907] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5978'. [ 922.857765][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 923.105960][T30940] bridge0: port 3(veth0) entered blocking state [ 923.106097][T30940] bridge0: port 3(veth0) entered disabled state [ 923.106303][T30940] veth0: entered allmulticast mode [ 923.125138][T30940] veth0: entered promiscuous mode [ 923.145059][T30940] bridge0: port 3(veth0) entered blocking state [ 923.145185][T30940] bridge0: port 3(veth0) entered forwarding state [ 923.546449][T30957] netlink: 'syz.3.5993': attribute type 1 has an invalid length. [ 923.634710][T30957] bond12: entered promiscuous mode [ 923.635249][T30957] 8021q: adding VLAN 0 to HW filter on device bond12 [ 923.900353][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 923.975563][T30973] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.979111][T30973] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.225551][T30973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 924.244817][T30973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 924.608412][ T1149] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.608702][T19917] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.608742][T19917] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.608779][T19917] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.938573][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 925.171189][T31001] lo: entered promiscuous mode [ 925.173536][T31001] tunl0: entered promiscuous mode [ 925.193770][T31001] v: entered promiscuous mode [ 925.193806][T31001] v: left allmulticast mode [ 925.296511][T31001] erspan0: entered promiscuous mode [ 925.324670][T31001] ip_vti0: entered promiscuous mode [ 925.351935][T31001] ip6_vti0: entered promiscuous mode [ 925.432131][T31001] sit0: entered promiscuous mode [ 925.450925][T31001] ip6tnl0: entered promiscuous mode [ 925.528011][T31001] ip6gre0: entered promiscuous mode [ 925.551993][T31001] ip6gretap0: entered promiscuous mode [ 925.606178][T31014] tipc: Resetting bearer [ 925.618597][T31013] tc_dump_action: action bad kind [ 925.942052][T31038] __nla_validate_parse: 8 callbacks suppressed [ 925.942077][T31038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6013'. [ 925.977841][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 926.123973][ T8873] tipc: Subscription rejected, illegal request [ 926.194910][T31050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6016'. [ 926.194948][T31050] gretap0: left allmulticast mode [ 926.225793][T31050] netlink: zone id is out of range [ 926.225812][T31050] netlink: zone id is out of range [ 926.225823][T31050] netlink: zone id is out of range [ 926.225832][T31050] netlink: zone id is out of range [ 926.225842][T31050] netlink: zone id is out of range [ 926.225851][T31050] netlink: zone id is out of range [ 926.225865][T31050] netlink: zone id is out of range [ 926.225884][T31050] netlink: zone id is out of range [ 926.225893][T31050] netlink: zone id is out of range [ 926.300164][T31052] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6017'. [ 926.406207][T31056] syzkaller0: entered promiscuous mode [ 926.406236][T31056] syzkaller0: entered allmulticast mode [ 926.431408][T31058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6021'. [ 926.461326][T31056] tc mirred: Loop (syzkaller0:egress --> syzkaller0:egress) [ 926.487561][T31064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6021'. [ 926.672649][T31072] netlink: 'syz.4.6024': attribute type 1 has an invalid length. [ 926.764529][T31073] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6024'. [ 926.883020][T31075] gretap1: entered promiscuous mode [ 927.069605][T31085] gretap1: entered allmulticast mode [ 927.110424][T31090] netlink: 'syz.4.6030': attribute type 1 has an invalid length. [ 927.140021][T31082] ip6gretap2: entered allmulticast mode [ 927.520849][T31112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6036'. [ 927.835188][T31128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6042'. [ 927.913099][T31129] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6042'. [ 927.925487][T31128] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 928.043855][T31129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6042'. [ 928.950567][T20153] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 928.956315][T20153] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 928.969731][T20153] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 928.993049][T20153] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 928.993748][T20153] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 929.407934][T28756] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 929.738708][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 929.949132][T28770] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 931.067983][T31212] __nla_validate_parse: 1 callbacks suppressed [ 931.068007][T31212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6057'. [ 931.098003][ T4934] Bluetooth: hci5: command tx timeout [ 931.177825][ C0] net_ratelimit: 489 callbacks suppressed [ 931.177847][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 931.351164][T31219] netlink: 228 bytes leftover after parsing attributes in process `syz.3.6058'. [ 932.139832][T31251] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6065'. [ 932.217841][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 932.301444][T31162] bridge0: port 1(bridge_slave_0) entered blocking state [ 932.301566][T31162] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.301747][T31162] bridge_slave_0: entered allmulticast mode [ 932.304508][T31162] bridge_slave_0: entered promiscuous mode [ 932.339185][T31162] bridge0: port 2(bridge_slave_1) entered blocking state [ 932.339476][T31162] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.339656][T31162] bridge_slave_1: entered allmulticast mode [ 932.342277][T31162] bridge_slave_1: entered promiscuous mode [ 932.490893][T31162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 932.511863][T31162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 932.594579][T31162] team0: Port device team_slave_0 added [ 932.623775][T31162] team0: Port device team_slave_1 added [ 932.761589][T31162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 932.787559][T31162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 932.788842][T31162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 932.790467][T31259] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6067'. [ 932.832813][T31162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 932.832852][T31162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 932.832881][T31162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 933.154757][T31270] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6071'. [ 933.178795][ T4934] Bluetooth: hci5: command tx timeout [ 933.214810][T31162] hsr_slave_0: entered promiscuous mode [ 933.216089][T31162] hsr_slave_1: entered promiscuous mode [ 933.216953][T31162] debugfs: 'hsr0' already exists in 'hsr' [ 933.216975][T31162] Cannot create hsr debugfs directory [ 933.257838][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 933.627507][T31284] netlink: 'syz.2.6074': attribute type 62 has an invalid length. [ 933.712570][T31284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6074'. [ 934.297824][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 934.927668][T31162] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 934.933097][T31162] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 934.934113][T31162] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 934.962384][T31162] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 934.963408][T31162] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 934.983283][T31162] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 934.984297][T31162] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 935.029075][T31162] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 935.262884][T31162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 935.269136][ T4934] Bluetooth: hci5: command tx timeout [ 935.306948][T31162] 8021q: adding VLAN 0 to HW filter on device team0 [ 935.322815][T19917] bridge0: port 1(bridge_slave_0) entered blocking state [ 935.322895][T19917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 935.338490][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 935.358589][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.358667][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 935.835995][T31323] sctp: [Deprecated]: syz.3.6081 (pid 31323) Use of struct sctp_assoc_value in delayed_ack socket option. [ 935.835995][T31323] Use struct sctp_sack_info instead [ 936.377862][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 936.492656][T31162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 936.690582][T31162] veth0_vlan: entered promiscuous mode [ 936.731689][T31162] veth1_vlan: entered promiscuous mode [ 936.881468][T31162] veth0_macvtap: entered promiscuous mode [ 936.881824][T31356] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 936.912295][T31162] veth1_macvtap: entered promiscuous mode [ 936.935729][T31358] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 937.040745][T31162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 937.067117][T31162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 937.110651][T19917] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.110813][T19917] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.110894][T19917] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.111024][T19917] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.349457][ T4934] Bluetooth: hci5: command tx timeout [ 937.418201][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 937.424750][ T6255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 937.424773][ T6255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 937.507539][ T8873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 937.507564][ T8873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 937.792687][T31388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6096'. [ 938.015861][T20153] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 938.032522][T20153] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 938.034233][T20153] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 938.038841][T20153] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 938.063699][T20153] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 938.133699][T19914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 938.133724][T19914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 938.302042][T31395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6098'. [ 938.302155][T31395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6098'. [ 938.457858][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 939.364535][T31410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6101'. [ 939.392267][T31410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6101'. [ 939.497723][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 939.629479][T31416] netlink: 'syz.4.6102': attribute type 1 has an invalid length. [ 940.139294][T31394] Bluetooth: hci3: command tx timeout [ 940.301311][T19917] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 940.301358][T19917] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.483268][T31418] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR [ 940.537730][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 940.585640][T31429] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR [ 940.614601][T31437] bridge10: entered promiscuous mode [ 940.614629][T31437] bridge10: entered allmulticast mode [ 940.853958][T19917] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 940.854001][T19917] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.958415][T19914] wlan1: Trigger new scan to find an IBSS to join [ 940.990312][T31449] netlink: 19 bytes leftover after parsing attributes in process `syz.2.6108'. [ 941.000267][T31449] netlink: 19 bytes leftover after parsing attributes in process `syz.2.6108'. [ 941.339061][T31459] netlink: 'syz.2.6112': attribute type 4 has an invalid length. [ 941.339088][T31459] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6112'. [ 941.486808][T19917] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 941.486847][T19917] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.577806][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 942.230105][T31394] Bluetooth: hci3: command tx timeout [ 942.264756][T19917] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 942.264794][T19917] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.631134][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 942.715756][T31482] syzkaller1: entered promiscuous mode [ 942.715785][T31482] syzkaller1: entered allmulticast mode [ 943.192121][T31505] netlink: 'syz.2.6120': attribute type 2 has an invalid length. [ 943.192146][T31505] netlink: 'syz.2.6120': attribute type 5 has an invalid length. [ 943.192786][T31505] netlink: 'syz.2.6120': attribute type 2 has an invalid length. [ 943.192804][T31505] netlink: 'syz.2.6120': attribute type 5 has an invalid length. [ 943.266787][T31505] netlink: 'syz.2.6120': attribute type 2 has an invalid length. [ 943.266822][T31505] netlink: 'syz.2.6120': attribute type 5 has an invalid length. [ 943.291162][T31505] netlink: 'syz.2.6120': attribute type 2 has an invalid length. [ 943.291185][T31505] netlink: 'syz.2.6120': attribute type 5 has an invalid length. [ 943.594996][T31499] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.620251][T31499] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.657825][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 943.769238][ T103] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 943.789719][T31496] batman_adv: batadv0: Adding interface: syzkaller0 [ 943.789741][T31496] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 943.789773][T31496] batman_adv: batadv0: Interface activated: syzkaller0 [ 943.794047][T31515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6124'. [ 943.978702][ T8873] wlan1: Trigger new scan to find an IBSS to join [ 944.033540][T31512] macsec0: entered promiscuous mode [ 944.035840][T31513] macsec0: left promiscuous mode [ 944.167533][T31515] batadv1: entered promiscuous mode [ 944.181995][T31515] batadv1: entered allmulticast mode [ 944.298429][ T103] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 944.298512][T31394] Bluetooth: hci3: command tx timeout [ 944.697854][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 945.367065][ T6255] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 945.451394][T31495] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 945.572326][T31495] batman_adv: batadv0: Removing interface: syzkaller0 [ 945.737835][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 945.878793][ T103] netdevsim netdevsim3 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 945.898865][T31390] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.899038][T31390] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.899261][T31390] bridge_slave_0: entered allmulticast mode [ 945.909129][T31390] bridge_slave_0: entered promiscuous mode [ 945.921273][T31535] netlink: zone id is out of range [ 945.921362][T31535] netlink: zone id is out of range [ 945.921386][T31535] netlink: zone id is out of range [ 945.921410][T31535] netlink: zone id is out of range [ 945.932776][T31535] netlink: zone id is out of range [ 946.073046][T19917] pim6reg99999999: left allmulticast mode [ 946.377937][T31394] Bluetooth: hci3: command tx timeout [ 946.420915][T31544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6131'. [ 946.420954][T31544] validate_nla: 58 callbacks suppressed [ 946.420968][T31544] netlink: 'syz.4.6131': attribute type 20 has an invalid length. [ 946.420981][T31544] netlink: 'syz.4.6131': attribute type 21 has an invalid length. [ 946.512420][T31549] netlink: 'syz.4.6131': attribute type 4 has an invalid length. [ 946.512448][T31549] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6131'. [ 946.777697][ C0] net_ratelimit: 152 callbacks suppressed [ 946.777722][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 947.779841][T19917] bond5 (unregistering): (slave ip6gre2): Releasing backup interface [ 947.779873][T19917] ip6gre2 (unregistering): left promiscuous mode [ 947.822989][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 947.989925][ T6255] wlan1: Trigger new scan to find an IBSS to join [ 948.192679][T19917] bond0 (unregistering): Released all slaves [ 948.206752][T19917] bond1 (unregistering): (slave veth5): Releasing active interface [ 948.216899][T19917] bond1 (unregistering): (slave veth7): Releasing active interface [ 948.253734][T19917] bond1 (unregistering): Released all slaves [ 948.276346][T19917] bond2 (unregistering): Released all slaves [ 948.334423][T19917] bond3 (unregistering): Released all slaves [ 948.355054][T19917] bond4 (unregistering): Released all slaves [ 948.380764][T19917] bond5 (unregistering): Released all slaves [ 948.407378][T19917] bond6 (unregistering): Released all slaves [ 948.435864][T19917] bond7 (unregistering): (slave veth12): Releasing backup interface [ 948.450126][T19917] bond7 (unregistering): Released all slaves [ 948.470790][T19917] bond8 (unregistering): Released all slaves [ 948.496628][T19917] bond9 (unregistering): Released all slaves [ 948.524184][T19917] bond10 (unregistering): Released all slaves [ 948.554399][T19917] bond11 (unregistering): Released all slaves [ 948.582172][T19917] bond12 (unregistering): Released all slaves [ 948.610210][T31390] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.610351][T31390] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.610530][T31390] bridge_slave_1: entered allmulticast mode [ 948.614735][T31390] bridge_slave_1: entered promiscuous mode [ 948.707006][T31546] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 948.736783][T31549] .`: renamed from bond0 [ 948.857676][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 948.976614][ T103] wlan1: Creating new IBSS network, BSSID 7a:3d:2d:54:af:40 [ 949.107130][T31390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 949.120372][T31574] netlink: 'syz.4.6134': attribute type 1 has an invalid length. [ 949.146530][T31390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 949.278884][T31583] openvswitch: netlink: IP tunnel TTL not specified. [ 949.278923][T31583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 949.420773][T31574] bond0: option mode: invalid value (7) [ 949.441166][T31574] bond0 (unregistering): Released all slaves [ 949.446901][T31587] netlink: 'syz.1.6138': attribute type 5 has an invalid length. [ 949.756053][T19917] tipc: Left network mode [ 949.901990][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 949.978939][T19917] IPVS: stopping master sync thread 27692 ... [ 950.737177][T31588] bridge0: port 3(veth0) entered disabled state [ 950.737485][T31588] bridge0: port 2(vlan3) entered disabled state [ 950.937814][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 951.977727][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 952.285446][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 952.327490][T28770] syz0: Port: 1 Link DOWN [ 952.331402][ T6255] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 952.331500][ T6255] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.331575][ T6255] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 48383 - 0 [ 952.331690][ T6255] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 952.331763][ T6255] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.331828][ T6255] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 48383 - 0 [ 952.331926][ T6255] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 952.331993][ T6255] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.332066][ T6255] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 48383 - 0 [ 952.332115][ T6255] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 952.332179][ T6255] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.332260][ T6255] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 48383 - 0 [ 952.406486][T31390] team0: Port device team_slave_0 added [ 952.455592][T31390] team0: Port device team_slave_1 added [ 952.613643][T31390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 952.613664][T31390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 952.613690][T31390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 952.616802][T31390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 952.616821][T31390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 952.616851][T31390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 952.632134][T31626] SET target dimension over the limit! [ 952.823764][T31634] netlink: 'syz.0.6144': attribute type 9 has an invalid length. [ 952.957323][T31641] FAULT_INJECTION: forcing a failure. [ 952.957323][T31641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 952.957359][T31641] CPU: 1 UID: 0 PID: 31641 Comm: syz.1.6146 Not tainted syzkaller #0 PREEMPT(full) [ 952.957385][T31641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 952.957400][T31641] Call Trace: [ 952.957409][T31641] [ 952.957419][T31641] dump_stack_lvl+0xe8/0x150 [ 952.957458][T31641] should_fail_ex+0x410/0x560 [ 952.957492][T31641] _copy_from_user+0x2d/0xb0 [ 952.957524][T31641] kstrtouint_from_user+0xd6/0x180 [ 952.957552][T31641] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 952.957592][T31641] ? lock_acquire+0x115/0x350 [ 952.957621][T31641] proc_fail_nth_write+0x8e/0x210 [ 952.957644][T31641] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 952.957676][T31641] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 952.957697][T31641] vfs_write+0x296/0xba0 [ 952.957740][T31641] ? __pfx_vfs_write+0x10/0x10 [ 952.957775][T31641] ? __fget_files+0x2a/0x420 [ 952.957813][T31641] ? __fget_files+0x3a2/0x420 [ 952.957844][T31641] ? __fget_files+0x2a/0x420 [ 952.957885][T31641] ksys_write+0x150/0x270 [ 952.957923][T31641] ? __pfx_ksys_write+0x10/0x10 [ 952.957981][T31641] do_syscall_64+0x166/0x520 [ 952.958013][T31641] ? trace_irq_disable+0x3b/0x140 [ 952.958036][T31641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.958060][T31641] ? clear_bhb_loop+0x70/0xc0 [ 952.958090][T31641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.958113][T31641] RIP: 0033:0x7f24d4d5e98e [ 952.958135][T31641] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 952.958155][T31641] RSP: 002b:00007f24d5bb7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 952.958179][T31641] RAX: ffffffffffffffda RBX: 00007f24d5bb86c0 RCX: 00007f24d4d5e98e [ 952.958197][T31641] RDX: 0000000000000001 RSI: 00007f24d5bb80a0 RDI: 0000000000000006 [ 952.958212][T31641] RBP: 00007f24d5bb8090 R08: 0000000000000000 R09: 0000000000000000 [ 952.958227][T31641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 952.958241][T31641] R13: 00007f24d5026038 R14: 00007f24d5025fa0 R15: 00007ffffec5ccc8 [ 952.958280][T31641] [ 953.018742][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 953.430136][T31390] hsr_slave_0: entered promiscuous mode [ 953.436557][T31390] hsr_slave_1: entered promiscuous mode [ 953.445517][T31390] debugfs: 'hsr0' already exists in 'hsr' [ 953.445545][T31390] Cannot create hsr debugfs directory [ 954.038630][T31665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6152'. [ 954.057766][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 954.106781][T31656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6150'. [ 954.300031][T31669] syzkaller0: entered promiscuous mode [ 954.300061][T31669] syzkaller0: entered allmulticast mode [ 954.363932][T19917] hsr_slave_0: left promiscuous mode [ 954.366588][T19917] hsr_slave_1: left promiscuous mode [ 954.434778][T19917] veth1_macvtap: left promiscuous mode [ 954.434822][T19917] veth0_macvtap: left promiscuous mode [ 954.434951][T19917] veth1_vlan: left promiscuous mode [ 954.487409][T31684] ip_tables: iptables: counters copy to user failed while replacing table [ 955.097813][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 956.139305][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 957.177835][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 958.217794][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 959.257809][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 959.287142][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 959.492458][T31390] netdevsim netdevsim3 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 959.697930][T31734] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6160'. [ 959.782296][T31744] netlink: 'syz.4.6163': attribute type 11 has an invalid length. [ 959.820458][T31744] netlink: 'syz.4.6163': attribute type 11 has an invalid length. [ 959.820658][T31744] netlink: 'syz.4.6163': attribute type 11 has an invalid length. [ 959.820807][T31744] netlink: 'syz.4.6163': attribute type 11 has an invalid length. [ 959.820959][T31744] netlink: 'syz.4.6163': attribute type 11 has an invalid length. [ 959.821118][T31744] netlink: 'syz.4.6163': attribute type 11 has an invalid length. [ 959.821273][T31744] netlink: 'syz.4.6163': attribute type 11 has an invalid length. [ 959.821432][T31744] netlink: 'syz.4.6163': attribute type 11 has an invalid length. [ 959.821601][T31744] netlink: 'syz.4.6163': attribute type 11 has an invalid length. [ 959.821760][T31744] netlink: 'syz.4.6163': attribute type 11 has an invalid length. [ 959.916175][T31733] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6161'. [ 959.923588][T31744] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6163'. [ 960.032562][T31390] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 960.297788][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 960.411338][T31757] udevd[31757]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 960.435013][T31727] udevd[31727]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 960.724727][T31775] netlink: 'syz.2.6165': attribute type 1 has an invalid length. [ 961.337787][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 961.576809][T31390] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 961.634071][T31775] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 961.685726][T31778] veth10: entered allmulticast mode [ 961.813981][T31390] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 961.888748][T19917] IPVS: stop unused estimator thread 0... [ 961.963308][T31797] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6168'. [ 962.163667][T19917] bond12: left allmulticast mode [ 962.163697][T19917] bond12: left promiscuous mode [ 962.163944][T19917] bridge0: port 1(bond12) entered disabled state [ 962.354484][T19917] bond5 (unregistering): (slave ip6gre1): Releasing backup interface [ 962.378343][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 962.667379][T19917] gretap0 (unregistering): left promiscuous mode [ 962.960209][T19917] bond0 (unregistering): (slave team0): Releasing backup interface [ 962.961843][T19917] bond0 (unregistering): Released all slaves [ 962.981505][ T103] smbdirect: ib_dev[syz1] removed [ 963.000665][T19917] bond1 (unregistering): Released all slaves [ 963.045737][T19917] bond2 (unregistering): Released all slaves [ 963.072235][T19917] bond3 (unregistering): Released all slaves [ 963.095604][T19917] bond4 (unregistering): Released all slaves [ 963.116121][T19917] bond5 (unregistering): Released all slaves [ 963.152221][T19917] bond6 (unregistering): Released all slaves [ 963.170451][T19917] bond7 (unregistering): (slave veth5): Releasing active interface [ 963.171287][T19917] bond7 (unregistering): Released all slaves [ 963.203622][T19917] bond8 (unregistering): Released all slaves [ 963.223743][T19917] bond9 (unregistering): Released all slaves [ 963.241067][T19917] bond10 (unregistering): Released all slaves [ 963.257768][T19917] bond11 (unregistering): Released all slaves [ 963.267433][T19917] bond12 (unregistering): Released all slaves [ 963.303931][T19917] bond13 (unregistering): Released all slaves [ 963.321370][T19917] bond14 (unregistering): Released all slaves [ 963.338747][T19917] bond15 (unregistering): Released all slaves [ 963.357478][T19917] bond16 (unregistering): Released all slaves [ 963.417753][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 963.719897][T23063] infiniband syz1: ib_query_port failed (-19) [ 963.959263][T31849] netlink: 'syz.4.6177': attribute type 1 has an invalid length. [ 964.061825][T19917] ovs-s!: left promiscuous mode [ 964.366630][T31849] bond0: entered promiscuous mode [ 964.366885][T31849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 964.458334][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 964.544154][T19917] tipc: Left network mode [ 964.619049][T31867] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6180'. [ 964.747472][T31874] netlink: 'syz.0.6181': attribute type 1 has an invalid length. [ 964.758881][T31390] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 964.831778][T31390] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 964.833097][T31390] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 964.882999][T31390] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 964.884154][T31390] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 965.004837][T31390] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 965.009989][T31390] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 965.060461][T31390] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 965.216305][T31880] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 965.497855][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 965.525779][T31894] syzkaller1: entered promiscuous mode [ 965.525806][T31894] syzkaller1: entered allmulticast mode [ 966.173096][T31926] syzkaller0: entered promiscuous mode [ 966.173122][T31926] syzkaller0: entered allmulticast mode [ 966.173358][T31926] tipc: Resetting bearer [ 966.204535][T31909] veth1_vlan: left promiscuous mode [ 966.336805][T31928] xt_CT: No such helper "syz0" [ 966.537948][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 966.737390][T31945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6192'. [ 966.756622][T31390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 967.013502][T31390] 8021q: adding VLAN 0 to HW filter on device team0 [ 967.141534][T13143] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.141649][T13143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 967.179295][T31962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 967.277244][ T6253] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.277339][ T6253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 967.396542][T31957] 8021q: VLANs not supported on syzkaller1 [ 967.404695][T31957] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.6196'. [ 967.577752][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 967.991730][T32001] netlink: 'syz.0.6206': attribute type 10 has an invalid length. [ 967.991758][T32001] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6206'. [ 967.991966][T32001] dummy0: entered promiscuous mode [ 967.993020][T32001] bridge0: port 3(dummy0) entered blocking state [ 967.993210][T32001] bridge0: port 3(dummy0) entered disabled state [ 967.993397][T32001] dummy0: entered allmulticast mode [ 968.314346][T32011] nbd: must specify a size in bytes for the device [ 968.368949][T32015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6209'. [ 968.371224][T32015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6209'. [ 968.433136][T32018] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 968.496903][T32021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6209'. [ 968.617915][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 968.869302][T32016] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6209'. [ 968.974942][T19917] veth1_to_team: left promiscuous mode [ 969.029698][T19917] hsr_slave_0: left promiscuous mode [ 969.037401][T19917] hsr_slave_1: left promiscuous mode [ 969.288347][T32043] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6211'. [ 969.657937][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 969.963610][T19917] team0 (unregistering): Port device wg2 removed [ 970.375244][T32074] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6219'. [ 970.602822][T32074] netlink: 'syz.1.6219': attribute type 1 has an invalid length. [ 970.602850][T32074] netlink: 200 bytes leftover after parsing attributes in process `syz.1.6219'. [ 970.676374][T32086] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 970.697824][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 970.804366][T19917] IPVS: stop unused estimator thread 0... [ 970.984037][T32097] mac80211_hwsim hwsim67 wlan0: left promiscuous mode [ 971.219741][T32103] bond2: entered allmulticast mode [ 971.220838][T32103] 8021q: adding VLAN 0 to HW filter on device bond2 [ 971.251377][T31390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 971.580230][T31390] veth0_vlan: entered promiscuous mode [ 971.604357][T31390] veth1_vlan: entered promiscuous mode [ 971.652900][T31390] veth0_macvtap: entered promiscuous mode [ 971.665308][T31390] veth1_macvtap: entered promiscuous mode [ 971.721853][T32132] netlink: 'syz.1.6235': attribute type 83 has an invalid length. [ 971.737718][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 971.782081][T31390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 971.812671][T31390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 971.938397][T19917] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.938668][T19917] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.938708][T19917] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.938745][T19917] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.037304][T19917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 972.037330][T19917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 972.111167][ T103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 972.111192][ T103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 972.777852][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 972.961615][T32166] x_tables: duplicate entry at hook 2 [ 973.683500][T32190] team0: Port device team_slave_1 removed [ 973.817782][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 974.350436][T32200] __nla_validate_parse: 2 callbacks suppressed [ 974.350461][T32200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6256'. [ 974.595901][T32212] netlink: 'syz.1.6259': attribute type 1 has an invalid length. [ 974.610823][T32212] netlink: 'syz.1.6259': attribute type 1 has an invalid length. [ 974.610867][T32212] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 974.652708][T32212] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6259'. [ 974.744917][T32220] nftables ruleset with unbound chain [ 974.755011][T32220] openvswitch: netlink: Unknown key attributes 1 [ 974.857848][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 975.724609][T32235] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv_slave_0, syncid = 4, id = 0 [ 975.794471][T32234] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 975.798694][T32234] bond3 (unregistering): Released all slaves [ 975.862137][T32240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6269'. [ 975.897759][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 976.215798][T32252] xt_MASQUERADE: bad MAP_IPS. [ 976.303506][T32256] xt_MASQUERADE: bad MAP_IPS. [ 976.373060][T32260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6275'. [ 976.373110][T32260] netlink: 'syz.0.6275': attribute type 10 has an invalid length. [ 976.373130][T32260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6275'. [ 976.456652][T32260] geneve2: entered promiscuous mode [ 976.456677][T32260] geneve2: entered allmulticast mode [ 976.518699][T31165] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 976.525821][T31165] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 976.545426][T31165] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 976.575806][T31165] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 976.578688][T31165] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 976.889858][T32279] netlink: 120 bytes leftover after parsing attributes in process `syz.0.6280'. [ 976.937738][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 977.635440][T32301] netlink: 'syz.0.6286': attribute type 16 has an invalid length. [ 977.635468][T32301] netlink: 'syz.0.6286': attribute type 17 has an invalid length. [ 977.767200][T32301] bridge0: port 3(dummy0) entered blocking state [ 977.767405][T32301] bridge0: port 3(dummy0) entered forwarding state [ 977.850620][T32301] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.850827][T32301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 977.881862][T32301] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.882008][T32301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 977.977795][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 978.181106][T32301] geneve2: left promiscuous mode [ 978.181134][T32301] geneve2: left allmulticast mode [ 978.337313][T32316] sctp: [Deprecated]: syz.3.6289 (pid 32316) Use of int in max_burst socket option deprecated. [ 978.337313][T32316] Use struct sctp_assoc_value instead [ 978.698922][T31394] Bluetooth: hci0: command tx timeout [ 978.831883][T32340] netlink: 'syz.1.6291': attribute type 16 has an invalid length. [ 978.831910][T32340] netlink: 'syz.1.6291': attribute type 17 has an invalid length. [ 978.860053][T32340] gretap0: entered promiscuous mode [ 978.906273][T32340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 978.918632][T32340] 8021q: adding VLAN 0 to HW filter on device team0 [ 978.961921][T32340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 979.002806][ T103] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 979.018601][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 979.576499][T32340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 979.590796][T32340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 979.611648][T32340] veth0_vlan: left promiscuous mode [ 979.613650][T32340] veth0_vlan: entered promiscuous mode [ 979.617126][T32340] veth1_vlan: entered promiscuous mode [ 979.642414][T32340] veth1_macvtap: left promiscuous mode [ 979.643724][T32340] veth0_macvtap: left promiscuous mode [ 979.644986][T32340] veth0_macvtap: entered promiscuous mode [ 979.646259][T32340] veth1_macvtap: entered promiscuous mode [ 979.682777][T32340] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 979.684506][T32340] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 979.685707][T32340] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 979.686977][T32340] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 979.739821][T32340] bond1: left promiscuous mode [ 979.739841][T32340] bridge1: left promiscuous mode [ 979.740758][T32340] 8021q: adding VLAN 0 to HW filter on device bond1 [ 979.741864][T32340] vlan2: left allmulticast mode [ 979.741878][T32340] bond1: left allmulticast mode [ 979.741890][T32340] bridge1: left allmulticast mode [ 979.746183][T32340] gretap1: left promiscuous mode [ 979.748641][T32366] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 979.763196][T32340] bond2: left allmulticast mode [ 979.766637][T32340] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 979.770304][T13143] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 979.770339][T13143] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.770910][ T6255] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 979.770942][ T6255] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.770982][ T6255] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 979.771020][ T6255] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.771060][ T6255] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 979.771088][ T6255] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.918847][ T8873] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.918925][ T8873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 979.927115][ T8873] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.927196][ T8873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 980.057748][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 980.406894][T32392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6301'. [ 980.406950][T32392] bond0: Unable to set up delay as MII monitoring is disabled [ 980.601195][T32397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6302'. [ 980.622474][T32400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6304'. [ 980.627318][T32400] netlink: 'syz.0.6304': attribute type 1 has an invalid length. [ 980.648401][T32398] Bluetooth: MGMT ver 1.23 [ 980.729186][T32403] bond1: entered promiscuous mode [ 980.729208][T32403] bond1: entered allmulticast mode [ 980.729528][T32403] 8021q: adding VLAN 0 to HW filter on device bond1 [ 980.757924][T32400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6304'. [ 980.787696][T31394] Bluetooth: hci0: command tx timeout [ 980.964365][T32406] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6306'. [ 980.978478][T32408] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6306'. [ 981.097737][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 981.270702][T32265] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.270921][T32265] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.271095][T32265] bridge_slave_0: entered allmulticast mode [ 981.273283][T32265] bridge_slave_0: entered promiscuous mode [ 981.308478][T32265] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.308636][T32265] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.308803][T32265] bridge_slave_1: entered allmulticast mode [ 981.312668][T32265] bridge_slave_1: entered promiscuous mode [ 981.573692][T32430] veth0: left allmulticast mode [ 981.573724][T32430] veth0: left promiscuous mode [ 981.573979][T32430] bridge0: port 3(veth0) entered disabled state [ 981.613066][T32430] vlan3: left allmulticast mode [ 981.613095][T32430] geneve0: left allmulticast mode [ 981.613117][T32430] vlan3: left promiscuous mode [ 981.627176][T32430] bridge0: port 2(vlan3) entered disabled state [ 981.645457][T32430] bond1: left promiscuous mode [ 981.670249][T32430] bond1: left allmulticast mode [ 981.670337][T32430] bridge0: port 1(bond1) entered disabled state [ 981.761952][T32265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 981.803383][T32265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 981.967320][T32265] team0: Port device team_slave_0 added [ 982.001823][T32265] team0: Port device team_slave_1 added [ 982.047164][T32265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 982.047185][T32265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 982.047213][T32265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 982.101712][T32453] netlink: 'syz.2.6318': attribute type 1 has an invalid length. [ 982.108074][T32265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 982.108096][T32265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 982.108127][T32265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 982.138123][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 982.428637][T32460] netlink: 'syz.1.6319': attribute type 4 has an invalid length. [ 982.428663][T32460] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6319'. [ 982.451968][T32459] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6319'. [ 982.624952][T32265] hsr_slave_0: entered promiscuous mode [ 982.626141][T32265] hsr_slave_1: entered promiscuous mode [ 982.643217][T32265] debugfs: 'hsr0' already exists in 'hsr' [ 982.643244][T32265] Cannot create hsr debugfs directory [ 982.859752][T31394] Bluetooth: hci0: command tx timeout [ 982.942689][T31394] Bluetooth: hci3: Malformed Event: 0x02 [ 982.946677][T32477] netlink: 67 bytes leftover after parsing attributes in process `syz.3.6323'. [ 983.177815][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 983.589496][T32500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6326'. [ 983.719144][T32265] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 983.719182][T32265] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 984.062517][T32265] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 984.062558][T32265] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 984.212737][T32508] mac80211_hwsim hwsim87 wlan0: entered promiscuous mode [ 984.212760][T32508] mac80211_hwsim hwsim87 wlan0: entered allmulticast mode [ 984.217865][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 984.344978][T32265] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 984.345021][T32265] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 984.533355][T32265] vlan2 (unregistering): left allmulticast mode [ 984.533394][T32265] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 984.554505][T32265] vlan2 (unregistering): left promiscuous mode [ 984.554537][T32265] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 984.557811][T32265] bridge0: port 1(vlan2) entered disabled state [ 984.653817][T32265] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 984.653855][T32265] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 984.885779][T32521] IPVS: Scheduler module ip_vs_ not found [ 984.886102][T32529] batman_adv: batadv0: Adding interface: syzkaller0 [ 984.886117][T32529] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 984.886154][T32529] batman_adv: batadv0: Interface activated: syzkaller0 [ 984.900399][T32529] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 984.940532][T31394] Bluetooth: hci0: command tx timeout [ 984.946288][T32526] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 985.030218][T32531] team0: Port device team_slave_0 removed [ 985.052107][T32528] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 985.111206][T32528] batman_adv: batadv0: Removing interface: syzkaller0 [ 985.257814][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 985.545581][T32541] __nla_validate_parse: 4 callbacks suppressed [ 985.545604][T32541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6335'. [ 985.545625][T32541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6335'. [ 985.576629][T32546] netlink: ct family unspecified [ 985.576663][T32546] openvswitch: netlink: Actions may not be safe on all matching packets [ 985.685173][T32548] netlink: 'syz.1.6337': attribute type 8 has an invalid length. [ 985.685201][T32548] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6337'. [ 985.685221][T32548] netlink: 11 bytes leftover after parsing attributes in process `syz.1.6337'. [ 985.685237][T32548] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6337'. [ 985.685554][T32549] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6337'. [ 986.091106][T32540] bridge0: port 3(dummy0) entered disabled state [ 986.091319][T32540] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.091983][T32540] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.297753][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 986.798129][T32540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 986.874166][T32540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 987.337741][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 987.951268][T32551] dvmrp0: entered allmulticast mode [ 987.958449][ T6255] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.958515][ T6255] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.958556][ T6255] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.958596][ T6255] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.092345][T32265] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 988.131245][T32265] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 988.147552][T32265] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 988.182302][T32265] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 988.198461][T32265] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 988.256238][T32265] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 988.264184][T32265] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 988.303207][T32265] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 988.306211][T32582] netlink: 'syz.1.6345': attribute type 12 has an invalid length. [ 988.306235][T32582] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6345'. [ 988.377708][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 988.489722][T32569] nbd5: detected capacity change from 0 to 63 [ 988.500383][T32570] block nbd2: NBD_DISCONNECT [ 988.500411][T32570] block nbd2: Send disconnect failed -32 [ 988.500441][T32570] block nbd2: shutting down sockets [ 988.568982][T32570] block nbd2: NBD_DISCONNECT [ 988.569319][T32570] block nbd2: NBD_DISCONNECT [ 988.571503][T32570] block nbd2: NBD_DISCONNECT [ 988.573380][T32570] block nbd2: NBD_DISCONNECT [ 988.580794][T32570] block nbd2: NBD_DISCONNECT [ 988.584272][T32570] block nbd2: NBD_DISCONNECT [ 988.590540][T32570] block nbd2: NBD_DISCONNECT [ 988.611940][T32570] block nbd2: NBD_DISCONNECT [ 988.619524][T32570] block nbd2: NBD_DISCONNECT [ 988.620283][T32570] block nbd2: NBD_DISCONNECT [ 988.622761][T32570] block nbd2: NBD_DISCONNECT [ 988.637410][T32570] block nbd2: NBD_DISCONNECT [ 988.646612][T32570] block nbd2: NBD_DISCONNECT [ 988.651871][T32570] block nbd2: NBD_DISCONNECT [ 988.675641][T32570] nbd: device at index 2 is going down [ 988.675802][T32570] nbd: device at index 2 is going down [ 988.675944][T32570] nbd: device at index 2 is going down [ 988.676096][T32570] nbd: device at index 2 is going down [ 988.676268][T32570] nbd: device at index 2 is going down [ 988.676416][T32570] nbd: device at index 2 is going down [ 988.676579][T32570] nbd: device at index 2 is going down [ 988.676717][T32570] nbd: device at index 2 is going down [ 988.676861][T32570] nbd: device at index 2 is going down [ 988.677017][T32570] nbd: device at index 2 is going down [ 988.725377][T32570] nbd: device at index 2 is going down [ 988.725845][T32570] nbd: device at index 2 is going down [ 988.726359][T32570] nbd: device at index 2 is going down [ 988.726720][T32570] nbd: device at index 2 is going down [ 988.764096][T32570] nbd: device at index 2 is going down [ 988.764270][T32570] nbd: device at index 2 is going down [ 988.764409][T32570] nbd: device at index 2 is going down [ 988.764568][T32570] nbd: device at index 2 is going down [ 988.764704][T32570] nbd: device at index 2 is going down [ 988.764846][T32570] nbd: device at index 2 is going down [ 988.764983][T32570] nbd: device at index 2 is going down [ 988.765121][T32570] nbd: device at index 2 is going down [ 988.765289][T32570] nbd: device at index 2 is going down [ 988.765465][T32570] nbd: device at index 2 is going down [ 988.765616][T32570] nbd: device at index 2 is going down [ 988.765759][T32570] nbd: device at index 2 is going down [ 988.765907][T32570] nbd: device at index 2 is going down [ 988.766041][T32570] nbd: device at index 2 is going down [ 988.766180][T32570] nbd: device at index 2 is going down [ 988.766324][T32570] nbd: device at index 2 is going down [ 988.766462][T32570] nbd: device at index 2 is going down [ 988.766619][T32570] nbd: device at index 2 is going down [ 988.766758][T32570] nbd: device at index 2 is going down [ 988.766893][T32570] nbd: device at index 2 is going down [ 988.767034][T32570] nbd: device at index 2 is going down [ 988.767176][T32570] nbd: device at index 2 is going down [ 988.767316][T32570] nbd: device at index 2 is going down [ 988.767451][T32570] nbd: device at index 2 is going down [ 988.854490][T32570] nbd: device at index 2 is going down [ 988.961932][T31394] block nbd5: Receive control failed (result -104) [ 989.051553][T32265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 989.075004][T32600] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6349'. [ 989.155872][T32265] 8021q: adding VLAN 0 to HW filter on device team0 [ 989.185768][T19914] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.185886][T19914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 989.304579][T19914] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.304695][T19914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 989.361563][T32615] netlink: 160 bytes leftover after parsing attributes in process `syz.3.6352'. [ 989.417711][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 990.090650][T32640] bond1: option lp_interval: invalid value (0) [ 990.090678][T32640] bond1: option lp_interval: allowed values 1 - 2147483647 [ 990.103678][T32651] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 990.127220][T32640] bond1 (unregistering): Released all slaves [ 990.226117][T32659] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6363'. [ 990.457749][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 990.783412][T32673] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 990.809717][T32673] bond1 (unregistering): Released all slaves [ 991.106431][T32693] macsec1: entered promiscuous mode [ 991.130801][T32693] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 991.130838][T32693] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 991.135799][T32693] netlink: 830 bytes leftover after parsing attributes in process `syz.2.6368'. [ 991.220306][T32693] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 991.220345][T32693] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 991.289490][T32704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6371'. [ 991.290029][T32706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6371'. [ 991.295976][T32695] netlink: 830 bytes leftover after parsing attributes in process `syz.2.6368'. [ 991.299966][T32703] netlink: 'syz.3.6369': attribute type 12 has an invalid length. [ 991.300378][T32704] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 991.303608][T32704] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 991.322249][T32703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6369'. [ 991.395054][T32709] netlink: 'syz.0.6371': attribute type 83 has an invalid length. [ 991.497743][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 991.658635][T32265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 991.876507][T32729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6374'. [ 991.896489][T32729] veth2: entered allmulticast mode [ 991.922444][T32729] veth3: entered allmulticast mode [ 992.403572][T32751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6378'. [ 992.408660][T32751] netlink: 'syz.1.6378': attribute type 1 has an invalid length. [ 992.537697][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 992.571166][T32754] bond3: entered promiscuous mode [ 992.571233][T32754] bond3: entered allmulticast mode [ 992.571939][T32754] 8021q: adding VLAN 0 to HW filter on device bond3 [ 992.610868][T32751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6378'. [ 993.155034][T32265] veth0_vlan: entered promiscuous mode [ 993.202032][T32265] veth1_vlan: entered promiscuous mode [ 993.354690][ T333] netlink: 1308 bytes leftover after parsing attributes in process `syz.1.6383'. [ 993.551201][T32265] veth0_macvtap: entered promiscuous mode [ 993.555988][T32265] veth1_macvtap: entered promiscuous mode [ 993.577658][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 993.671002][T32265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 993.851994][T32265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 993.858891][ T344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6385'. [ 993.859151][ T344] ip6tnl0: Caught tx_queue_len zero misconfig [ 993.910697][T13143] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.914131][ T103] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.914289][ T103] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.914437][ T103] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.993864][ T347] sctp: [Deprecated]: syz.3.6389 (pid 347) Use of struct sctp_assoc_value in delayed_ack socket option. [ 993.993864][ T347] Use struct sctp_sack_info instead [ 994.058055][ T348] sctp: [Deprecated]: syz.3.6389 (pid 348) Use of int in max_burst socket option deprecated. [ 994.058055][ T348] Use struct sctp_assoc_value instead [ 994.220854][T19914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 994.220881][T19914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 994.461514][ T8873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 994.461539][ T8873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 994.617800][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 994.925292][ T384] bond1: (slave team0): Device is not bonding slave [ 994.925320][ T384] bond1: option active_slave: invalid value (team0) [ 994.970049][ T384] bond1 (unregistering): Released all slaves [ 995.659582][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 995.884811][ T430] x_tables: ip_tables: osf match: only valid for protocol 6 [ 996.134447][ T437] netlink: 'syz.0.6404': attribute type 3 has an invalid length. [ 996.134661][ T437] netlink: 'syz.0.6404': attribute type 3 has an invalid length. [ 996.244503][ T444] xt_hashlimit: size too large, truncated to 1048576 [ 996.567993][ T434] syzkaller1: entered promiscuous mode [ 996.568020][ T434] syzkaller1: entered allmulticast mode [ 996.693825][T31165] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 996.697717][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 996.715446][T31165] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 996.726840][T31165] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 996.734963][T31165] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 996.748056][T31165] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 996.755044][T31394] [ 996.764496][T31394] ====================================================== [ 996.771568][T31394] WARNING: possible circular locking dependency detected [ 996.778659][T31394] syzkaller #0 Not tainted [ 996.783160][T31394] ------------------------------------------------------ [ 996.790220][T31394] kworker/u9:3/31394 is trying to acquire lock: [ 996.796507][T31394] ffff88801c2d4a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4c7/0x5a0 [ 996.807037][T31394] [ 996.807037][T31394] but task is already holding lock: [ 996.814450][T31394] ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0 [ 996.824008][T31394] [ 996.824008][T31394] which lock already depends on the new lock. [ 996.824008][T31394] [ 996.834453][T31394] [ 996.834453][T31394] the existing dependency chain (in reverse order) is: [ 996.843514][T31394] [ 996.843514][T31394] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 996.851686][T31394] down_write+0x96/0x200 [ 996.856515][T31394] kernfs_add_one+0x41/0x6f0 [ 996.861680][T31394] kernfs_create_dir_ns+0x1a1/0x230 [ 996.867452][T31394] internal_create_group+0x440/0x1180 [ 996.873390][T31394] cpuhp_invoke_callback+0x434/0x810 [ 996.879258][T31394] cpuhp_issue_call+0x3f0/0x750 [ 996.884689][T31394] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 996.891513][T31394] __cpuhp_setup_state+0x3f/0x60 [ 996.897028][T31394] do_one_initcall+0x250/0x870 [ 996.902368][T31394] do_initcall_level+0x10a/0x1a0 [ 996.907877][T31394] do_initcalls+0x59/0xa0 [ 996.912787][T31394] kernel_init_freeable+0x29d/0x3e0 [ 996.918646][T31394] kernel_init+0x22/0x1d0 [ 996.923539][T31394] ret_from_fork+0x514/0xb70 [ 996.928690][T31394] ret_from_fork_asm+0x1a/0x30 [ 996.934029][T31394] [ 996.934029][T31394] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 996.941904][T31394] [ 996.941904][T31394] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 996.949685][T31394] cpus_read_lock+0x42/0x160 [ 996.954839][T31394] static_key_slow_inc+0x12/0x30 [ 996.960328][T31394] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 996.966608][T31394] nbd_genl_foreach_sock+0x265/0x450 [ 996.972438][T31394] nbd_genl_reconfigure+0xbbb/0x1040 [ 996.978269][T31394] genl_family_rcv_msg_doit+0x233/0x340 [ 996.984368][T31394] genl_rcv_msg+0x614/0x7a0 [ 996.989413][T31394] netlink_rcv_skb+0x226/0x4a0 [ 996.994716][T31394] genl_rcv+0x28/0x40 [ 996.999240][T31394] netlink_unicast+0x7bd/0x940 [ 997.004557][T31394] netlink_sendmsg+0x813/0xb40 [ 997.009862][T31394] sock_sendmsg_nosec+0x13a/0x180 [ 997.015440][T31394] ____sys_sendmsg+0x54e/0x850 [ 997.020764][T31394] ___sys_sendmsg+0x2a5/0x360 [ 997.025992][T31394] __x64_sys_sendmsg+0x1b1/0x290 [ 997.031490][T31394] do_syscall_64+0x166/0x520 [ 997.036637][T31394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 997.043074][T31394] [ 997.043074][T31394] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 997.050750][T31394] __mutex_lock+0x19d/0x1550 [ 997.055890][T31394] nbd_queue_rq+0x373/0xff0 [ 997.060959][T31394] blk_mq_dispatch_rq_list+0x499/0x1990 [ 997.067059][T31394] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 997.073942][T31394] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 997.080469][T31394] blk_mq_run_work_fn+0x16c/0x300 [ 997.086149][T31394] process_scheduled_works+0xc3d/0x1630 [ 997.092241][T31394] worker_thread+0xa47/0xfb0 [ 997.097381][T31394] kthread+0x38b/0x480 [ 997.101998][T31394] ret_from_fork+0x514/0xb70 [ 997.107135][T31394] ret_from_fork_asm+0x1a/0x30 [ 997.112541][T31394] [ 997.112541][T31394] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 997.119800][T31394] __mutex_lock+0x19d/0x1550 [ 997.124948][T31394] nbd_queue_rq+0xc1/0xff0 [ 997.129911][T31394] blk_mq_dispatch_rq_list+0x499/0x1990 [ 997.136010][T31394] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 997.143249][T31394] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 997.149868][T31394] blk_mq_run_work_fn+0x16c/0x300 [ 997.155458][T31394] process_scheduled_works+0xc3d/0x1630 [ 997.161647][T31394] worker_thread+0xa47/0xfb0 [ 997.166795][T31394] kthread+0x38b/0x480 [ 997.171432][T31394] ret_from_fork+0x514/0xb70 [ 997.176563][T31394] ret_from_fork_asm+0x1a/0x30 [ 997.181883][T31394] [ 997.181883][T31394] -> #4 (set->srcu){.+.+}-{0:0}: [ 997.189037][T31394] __synchronize_srcu+0xc9/0x2f0 [ 997.194636][T31394] elevator_switch+0x1e8/0x7b0 [ 997.199946][T31394] elevator_change+0x2fa/0x480 [ 997.205252][T31394] elevator_set_default+0x375/0x440 [ 997.210993][T31394] blk_register_queue+0x3f3/0x4e0 [ 997.216570][T31394] __add_disk+0x6b8/0xdb0 [ 997.221447][T31394] add_disk_fwnode+0x100/0x3a0 [ 997.226844][T31394] nbd_dev_add+0x733/0xb60 [ 997.231906][T31394] nbd_init+0x168/0x1f0 [ 997.236635][T31394] do_one_initcall+0x250/0x870 [ 997.241952][T31394] do_initcall_level+0x10a/0x1a0 [ 997.247439][T31394] do_initcalls+0x59/0xa0 [ 997.252337][T31394] kernel_init_freeable+0x29d/0x3e0 [ 997.258080][T31394] kernel_init+0x22/0x1d0 [ 997.262956][T31394] ret_from_fork+0x514/0xb70 [ 997.268092][T31394] ret_from_fork_asm+0x1a/0x30 [ 997.273413][T31394] [ 997.273413][T31394] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 997.281694][T31394] __mutex_lock+0x19d/0x1550 [ 997.286841][T31394] elevator_change+0x1af/0x480 [ 997.292242][T31394] elevator_set_none+0xb5/0x140 [ 997.297652][T31394] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 997.304117][T31394] nbd_start_device+0x189/0xb30 [ 997.309722][T31394] nbd_genl_connect+0x167d/0x1cd0 [ 997.315523][T31394] genl_family_rcv_msg_doit+0x233/0x340 [ 997.321640][T31394] genl_rcv_msg+0x614/0x7a0 [ 997.326722][T31394] netlink_rcv_skb+0x226/0x4a0 [ 997.332047][T31394] genl_rcv+0x28/0x40 [ 997.336596][T31394] netlink_unicast+0x7bd/0x940 [ 997.341924][T31394] netlink_sendmsg+0x813/0xb40 [ 997.347413][T31394] sock_sendmsg_nosec+0x13a/0x180 [ 997.352991][T31394] ____sys_sendmsg+0x54e/0x850 [ 997.358420][T31394] ___sys_sendmsg+0x2a5/0x360 [ 997.363711][T31394] __x64_sys_sendmsg+0x1b1/0x290 [ 997.369236][T31394] do_syscall_64+0x166/0x520 [ 997.374423][T31394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 997.381146][T31394] [ 997.381146][T31394] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 997.390483][T31394] blk_alloc_queue+0x544/0x690 [ 997.395800][T31394] __blk_mq_alloc_disk+0x194/0x390 [ 997.401556][T31394] nbd_dev_add+0x494/0xb60 [ 997.406608][T31394] nbd_init+0x168/0x1f0 [ 997.411664][T31394] do_one_initcall+0x250/0x870 [ 997.416987][T31394] do_initcall_level+0x10a/0x1a0 [ 997.422520][T31394] do_initcalls+0x59/0xa0 [ 997.427394][T31394] kernel_init_freeable+0x29d/0x3e0 [ 997.433143][T31394] kernel_init+0x22/0x1d0 [ 997.438023][T31394] ret_from_fork+0x514/0xb70 [ 997.443167][T31394] ret_from_fork_asm+0x1a/0x30 [ 997.448489][T31394] [ 997.448489][T31394] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 997.455725][T31394] fs_reclaim_acquire+0x71/0x100 [ 997.461209][T31394] kmem_cache_alloc_noprof+0x5f/0x600 [ 997.467141][T31394] __kernfs_iattrs+0xdd/0x380 [ 997.472360][T31394] kernfs_iop_setattr+0xe6/0x3f0 [ 997.477851][T31394] notify_change+0xbba/0xea0 [ 997.482996][T31394] do_truncate+0x1c2/0x250 [ 997.487963][T31394] path_openat+0x15b5/0x1d60 [ 997.493116][T31394] do_file_open+0x23e/0x4a0 [ 997.498161][T31394] do_sys_openat2+0x115/0x200 [ 997.503413][T31394] __x64_sys_openat+0x138/0x170 [ 997.508920][T31394] do_syscall_64+0x166/0x520 [ 997.514072][T31394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 997.520513][T31394] [ 997.520513][T31394] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 997.529051][T31394] __lock_acquire+0x164c/0x2de0 [ 997.534446][T31394] lock_acquire+0x115/0x350 [ 997.539492][T31394] down_write+0x96/0x200 [ 997.544295][T31394] kernfs_link_sibling+0x4c7/0x5a0 [ 997.549966][T31394] kernfs_add_one+0x2db/0x6f0 [ 997.555183][T31394] kernfs_create_dir_ns+0x1a1/0x230 [ 997.560933][T31394] sysfs_create_dir_ns+0x12f/0x2a0 [ 997.566696][T31394] kobject_add_internal+0x622/0xcd0 [ 997.572448][T31394] kobject_add+0x163/0x240 [ 997.577416][T31394] device_add+0x3fa/0xb80 [ 997.582548][T31394] hci_conn_add_sysfs+0xd5/0x210 [ 997.588029][T31394] hci_conn_complete_evt+0x8a8/0x1350 [ 997.593947][T31394] hci_event_packet+0x6cd/0xf10 [ 997.599342][T31394] hci_rx_work+0x3ee/0x1020 [ 997.604391][T31394] process_scheduled_works+0xc3d/0x1630 [ 997.610572][T31394] worker_thread+0xa47/0xfb0 [ 997.615904][T31394] kthread+0x38b/0x480 [ 997.620525][T31394] ret_from_fork+0x514/0xb70 [ 997.625698][T31394] ret_from_fork_asm+0x1a/0x30 [ 997.631020][T31394] [ 997.631020][T31394] other info that might help us debug this: [ 997.631020][T31394] [ 997.641272][T31394] Chain exists of: [ 997.641272][T31394] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 997.641272][T31394] [ 997.655757][T31394] Possible unsafe locking scenario: [ 997.655757][T31394] [ 997.663672][T31394] CPU0 CPU1 [ 997.669086][T31394] ---- ---- [ 997.674490][T31394] lock(&root->kernfs_rwsem); [ 997.679374][T31394] lock(cpuhp_state_mutex); [ 997.686510][T31394] lock(&root->kernfs_rwsem); [ 997.693826][T31394] lock(&root->kernfs_iattr_rwsem); [ 997.699167][T31394] [ 997.699167][T31394] *** DEADLOCK *** [ 997.699167][T31394] [ 997.707352][T31394] locks held by kworker/u9:3/31394: 4, last CPU#0: [ 997.713872][T31394] #0: ffff88807c248940 ((wq_completion)hci1#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 997.724915][T31394] #1: ffffc90003f6fc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 997.736960][T31394] #2: ffff888033cd80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_conn_complete_evt+0xba/0x1350 [ 997.746829][T31394] #3: ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0 [ 997.756702][T31394] [ 997.756702][T31394] stack backtrace: [ 997.762626][T31394] CPU: 0 UID: 0 PID: 31394 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 997.772281][T31394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 997.782358][T31394] Workqueue: hci1 hci_rx_work [ 997.787073][T31394] Call Trace: [ 997.790371][T31394] [ 997.793321][T31394] dump_stack_lvl+0xe8/0x150 [ 997.797945][T31394] print_circular_bug+0x2e2/0x300 [ 997.803008][T31394] check_noncircular+0x12f/0x150 [ 997.807974][T31394] __lock_acquire+0x164c/0x2de0 [ 997.812862][T31394] ? __lock_acquire+0x747/0x2de0 [ 997.817832][T31394] lock_acquire+0x115/0x350 [ 997.822388][T31394] ? kernfs_link_sibling+0x4c7/0x5a0 [ 997.827702][T31394] down_write+0x96/0x200 [ 997.831981][T31394] ? kernfs_link_sibling+0x4c7/0x5a0 [ 997.837299][T31394] ? __pfx_down_write+0x10/0x10 [ 997.842179][T31394] ? kernfs_root+0x1c/0x230 [ 997.846884][T31394] ? kernfs_root+0x1c/0x230 [ 997.851410][T31394] ? kernfs_root+0x1c/0x230 [ 997.855936][T31394] ? kernfs_root+0x1ea/0x230 [ 997.860547][T31394] kernfs_link_sibling+0x4c7/0x5a0 [ 997.865693][T31394] kernfs_add_one+0x2db/0x6f0 [ 997.870403][T31394] kernfs_create_dir_ns+0x1a1/0x230 [ 997.875651][T31394] sysfs_create_dir_ns+0x12f/0x2a0 [ 997.880796][T31394] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 997.886461][T31394] ? do_raw_spin_unlock+0xf5/0x200 [ 997.891599][T31394] kobject_add_internal+0x622/0xcd0 [ 997.896821][T31394] kobject_add+0x163/0x240 [ 997.901269][T31394] ? __pfx_kobject_add+0x10/0x10 [ 997.906240][T31394] ? get_device_parent+0x366/0x3a0 [ 997.911466][T31394] device_add+0x3fa/0xb80 [ 997.915822][T31394] hci_conn_add_sysfs+0xd5/0x210 [ 997.920786][T31394] hci_conn_complete_evt+0x8a8/0x1350 [ 997.926286][T31394] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 997.932300][T31394] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 997.938129][T31394] ? skb_pull_data+0xf0/0x200 [ 997.942834][T31394] hci_event_packet+0x6cd/0xf10 [ 997.947723][T31394] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 997.953559][T31394] ? __pfx_hci_event_packet+0x10/0x10 [ 997.958971][T31394] ? audit_filter_rules+0x45f0/0x5d10 [ 997.964386][T31394] ? hci_send_to_monitor+0xe2/0x590 [ 997.969622][T31394] hci_rx_work+0x3ee/0x1020 [ 997.974154][T31394] ? process_scheduled_works+0x97a/0x1630 [ 997.979909][T31394] process_scheduled_works+0xc3d/0x1630 [ 997.985496][T31394] ? __pfx_process_scheduled_works+0x10/0x10 [ 997.991505][T31394] ? assign_work+0x3cf/0x5d0 [ 997.996120][T31394] worker_thread+0xa47/0xfb0 [ 998.000747][T31394] ? __kthread_parkme+0x71/0x1f0 [ 998.005749][T31394] kthread+0x38b/0x480 [ 998.009835][T31394] ? __pfx_worker_thread+0x10/0x10 [ 998.014979][T31394] ? __pfx_kthread+0x10/0x10 [ 998.019606][T31394] ret_from_fork+0x514/0xb70 [ 998.024221][T31394] ? __pfx_ret_from_fork+0x10/0x10 [ 998.029351][T31394] ? __switch_to+0xc89/0x1420 [ 998.034056][T31394] ? __pfx_kthread+0x10/0x10 [ 998.038673][T31394] ret_from_fork_asm+0x1a/0x30 [ 998.043488][T31394] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 998.049962][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 999.097816][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 999.140970][ T103] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.252835][ T103] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.353547][ T103] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.385986][ T103] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.515449][ T103] bridge_slave_1: left allmulticast mode [ 999.515498][ T103] bridge_slave_1: left promiscuous mode [ 999.515679][ T103] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.517371][ T103] bridge_slave_0: left allmulticast mode [ 999.517395][ T103] bridge_slave_0: left promiscuous mode [ 999.517539][ T103] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.635088][ T103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 999.637056][ T103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 999.666207][ T103] bond0 (unregistering): Released all slaves [ 999.687795][ T13] netdevsim netdevsim4 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 999.687843][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 999.687878][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 999.687912][ T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1000.024616][ T103] hsr_slave_0: left promiscuous mode [ 1000.025115][ T103] hsr_slave_1: left promiscuous mode [ 1000.025710][ T103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1000.025730][ T103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1000.026304][ T103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1000.026323][ T103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1000.039946][ T103] veth1_macvtap: left promiscuous mode [ 1000.039979][ T103] veth0_macvtap: left promiscuous mode [ 1000.040048][ T103] veth1_vlan: left promiscuous mode [ 1000.040096][ T103] veth0_vlan: left promiscuous mode [ 1000.139055][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1000.268932][ T103] team0 (unregistering): Port device team_slave_1 removed [ 1000.274463][ T103] team0 (unregistering): Port device team_slave_0 removed [ 1000.373131][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1000.672470][ T103] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1000.672507][ T103] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.730980][ T103] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1000.731019][ T103] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.793846][ T103] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1000.793887][ T103] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.853966][ T103] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1000.854005][ T103] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.856760][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1000.918389][ T1149] netdevsim netdevsim1 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 1000.928691][ T1149] netdevsim netdevsim1 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 1000.928737][ T1149] netdevsim netdevsim1 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 1000.945546][ T8873] netdevsim netdevsim1 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 1000.973544][ T103] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.015408][ T103] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.073860][ T103] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.125241][ T103] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.178068][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1001.201417][ T103] bridge_slave_1: left allmulticast mode [ 1001.201443][ T103] bridge_slave_1: left promiscuous mode [ 1001.201603][ T103] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.205538][ T103] bridge_slave_0: left allmulticast mode [ 1001.205562][ T103] bridge_slave_0: left promiscuous mode [ 1001.205725][ T103] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.251520][ T103] dvmrp0: left allmulticast mode [ 1001.254240][ T103] bridge_slave_1: left allmulticast mode [ 1001.254263][ T103] bridge_slave_1: left promiscuous mode [ 1001.254420][ T103] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.256153][ T103] bridge_slave_0: left allmulticast mode [ 1001.256175][ T103] bridge_slave_0: left promiscuous mode [ 1001.256306][ T103] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.512438][ T103] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 1001.512480][ T103] bond1 (unregistering): (slave bridge1): the permanent HWaddr of slave - 26:e2:31:5f:f7:af - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1001.512504][ T103] bond1 (unregistering): (slave bridge2): making interface the new active one [ 1001.551152][ T103] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 1001.565660][ T103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1001.567182][ T103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1001.571497][ T103] bond0 (unregistering): Released all slaves [ 1001.595667][ T103] bond1 (unregistering): Released all slaves [ 1001.607113][ T103] bond2 (unregistering): Released all slaves [ 1001.616304][ T103] bond3 (unregistering): Released all slaves [ 1001.657324][ T103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1001.676666][ T103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1001.686668][ T103] bond0 (unregistering): Released all slaves [ 1001.696351][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1001.746400][ T8873] netdevsim netdevsim3 eth11: set [0, 0] type 1 family 0 port 8472 - 0 [ 1001.746465][ T8873] netdevsim netdevsim3 eth10: set [0, 0] type 1 family 0 port 8472 - 0 [ 1001.746546][ T8873] netdevsim netdevsim3 eth9: set [0, 0] type 1 family 0 port 8472 - 0 [ 1001.746594][ T8873] netdevsim netdevsim3 eth12: set [0, 0] type 1 family 0 port 8472 - 0 [ 1001.826590][ T103] IPVS: stopping master sync thread 30350 ... [ 1001.836279][ T103] IPVS: stopping backup sync thread 32235 ... [ 1002.186608][ T5279] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1002.218803][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1002.380951][ T103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1002.380975][ T103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1002.383345][ T103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1002.383385][ T103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1002.411634][ T103] hsr_slave_0: left promiscuous mode [ 1002.412236][ T103] hsr_slave_1: left promiscuous mode [ 1002.415308][ T103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1002.415367][ T103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1002.420524][ T103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1002.420543][ T103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1002.462404][ T103] veth1_macvtap: left promiscuous mode [ 1002.462436][ T103] veth0_macvtap: left promiscuous mode [ 1002.462515][ T103] veth1_vlan: left promiscuous mode [ 1002.462561][ T103] veth0_vlan: left promiscuous mode [ 1002.464976][ T103] veth1_macvtap: left promiscuous mode [ 1002.465007][ T103] veth0_macvtap: left promiscuous mode [ 1002.465075][ T103] veth1_vlan: left promiscuous mode [ 1002.465123][ T103] veth0_vlan: left promiscuous mode [ 1002.756282][ T103] team0 (unregistering): Port device team_slave_1 removed [ 1002.895931][ T103] team0 (unregistering): Port device team_slave_1 removed [ 1002.905922][ T103] team0 (unregistering): Port device team_slave_0 removed [ 1002.988681][ T5279] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1003.258062][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1003.425565][ T5279] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1003.754053][ T5279] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1004.035900][ T5279] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1004.297989][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1004.346087][ T5279] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1004.632329][ T5279] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1004.908390][ T5279] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1005.200258][ T5279] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1005.337881][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1006.377762][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available