last executing test programs: 7.417985535s ago: executing program 3 (id=5065): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200000009000200737900640000000008000440000000000900010073797a30000000000800034000000001"], 0x64}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x440, 0x0, 0x0, 0xfeffffff, 0xf0, 0x2d0, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x4e23], 0x0, 0x4, 0x2, 0xf}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000000, 0x4000000], 0x0, 0x4}}}, @common=@unspec=@connlabel={{0x28}, {0x6, 0x2}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x13, @multicast1, @multicast1, @icmp_id=0x67, @icmp_id=0x67}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @broadcast, @multicast1, @gre_key=0x6, @gre_key=0x7}}}}, {{@ip={@private=0xa010101, @broadcast, 0x0, 0x0, 'veth0_virt_wifi\x00', 'wlan0\x00', {}, {}, 0x0, 0x0, 0x48}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@dev, @port, @icmp_id=0x65}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r3, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6bbb5ea80cba3c", @ANYRES16=0x0, @ANYBLOB="000327bd7000fbdbdf256200000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990001000000280000000600b400e40c00000600b400770700000600b300000000000600b30000000000"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000f01000000000000", 0x20}], 0x1}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0x2, 0x4, 0x348, 0xffffffff, 0x1a8, 0x1a8, 0x0, 0xfeffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1, 0x65}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @empty, [], [], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x6}, {0x0, 0x4, 0x2}, 0x0, 0xd}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xff, 0xff000000], [0xffffff00, 0x0, 0x0, 0xff], 'veth0_to_bond\x00', 'erspan0\x00', {0xff}, {}, 0x29, 0x4, 0x0, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) 6.984068701s ago: executing program 3 (id=5069): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x90, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc}, {0xc, 0x90, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x1ff8000}, {0xc, 0x90, 0x8}}]}, 0x90}}, 0x1) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001840)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001800)={&(0x7f0000000340)={0x1498, r2, 0x800, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xbd, 0x5, "5b1896f943aaf3f6806e53699c6667dc8c87d0b7eb1e4480fabe5567caffdccb6b96146abf76cd1945aa68e8358ff0a4679a01795b577dcfc69217e60322f6233cb6702826295048f82f28ca1606fc8814062c33f279aaaad2345c3eee5635d0ed013821fe6f1b1d54614b9d630d4b0a5e967a4f42b50e1c9dd7e766952aa6b15bf27103f9cb31c957b27f8cafbaa7db6c89e80017aff5afbbd946ea248a5c9abdf0169fc2a21685f9e3ba50e4582bd2d489e2ae2342f45fa9"}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x139c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_VALUE={0xf9, 0x4, "6960518601b852ae3078e3bcc2fc6e7250cfb75ed2f034cd20bb58e7bf6a75176ca3798d662509257d7dbb0a387695c6a428565bbe048ce9a89838a0b395d853a6a6d06532750689d8f57a023800ea31191afc55b543f02886ef2421a9243f02578fba302042bae4c1152ebb5ebf4e8c4d9e65bda48f82b026010d92ca9287abf845325c0c6f793a9a63e3868339b4cfebfe73bb5672a0f0f49aa22049ec72f048fec1eaa8d7a58cf0ea65d042da593753e276442652d1e3cb898c39b5b3fd793c6efbb4bac32cd847b40ed67f30d7921ff95a7894d3fb14827cbe9cae6c94475b442c17a582e263130c7591fb2ae75c8a0b9ed801"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "31563db03abeb02e977278d540f5b6b29b543db8c1ec83214bcec76610a57628d5f3811e225ba1e3c3f4448c93893345be4b9706d9380d6cc3e892ff8c5b8e24703b6355d97ad4bad2e812b6231efeded94e6bb2b781ce4f876985fe859421c35282a9c2d595726b95c1fea88b35fa6d8ecd624b2f4b0cdd02e50ce4456c92ab2787658875b810540b615fba0369811aa48b0d3c7aa278b386c5a9d5e11626eab43e6f57f94fe6bcc92220717dbc5f30b78b09633f0a8da929d3de6796315785674a9e31d6071a748e2a2974c706083ffc62dbdd4dc1349d237ed1ca28615bba3b0a71a9813cf22db6b6822930e5707ef6bdacdcb065afa577b5098f2e6d71a3efe03de0f67828e2853e96a078fd47e72c344f09e2041562ad2321337c1c613f9a9b6becad71a75c6835f251c3ab62663e75b52334a855859e14d99cb7655dbd276d6edafa38e2bc33ac7dd45e372b4312d1ac6f1be70cd124173c74c9a36569394f84611b18d3555040bb342ffd78dd864ef11c12a44dd13e86f6cbc9468ee12df9427ab8d3c5994427ee3162c2279de49e1d2c2c9e0e6b1310ee48629ca122cd396461e22172dee6fccc33aed7912923b429a171144b3b720c1249f86ce180dadbca0bbacfc4bec96c8ec328ab6012e326982a7f756dd8181dacda9bc9149a098fe987d593f491aa93f80b648c44e23e75bf409480b0ae842857731eca8790c8e32f9d24ae269a4e4f5a967f19d341e6ca3a7534d8ef6c09d710796c0189819ce032c8465100ca1d7150fa7b312b38beca73fe0ca6cb20f13c3007d43f69ff14ab09fd7e78d56c2b20f73cafc4dbeeb85154cb6406d7babea97ec9c053f25d995082e62dcc15a4439dec7c697f5500bd7607464d9e3a1e2317a6ccdaa5254dd0076c1478b48810c582128954fd8b4c2dc5ff1cb2c6408881d7267b8cf0e798d847f4f7a60159e05425c61167607b7b7039eb1ce2b170fa476bfb51c7cf9be3accd77fe36e47fe1fd71b59e7ef2da704e3d27fa57c6adc6a3d650d42fbb56889a49af0ee28fca783a78d7b0431de3b82617cb64294d477b575468d9218b77f820adccb8907a3d79d1a59ad42f7efb3e1bd1466fa7b258506e2cb6f1c8d69e3a8c84fb117d4e4d7d96334cd880744186e378be808a7aef2349ee3b795cd6ec67433074f53bffd482d6736660ec44bd60bdc087b9632e1e4c2134af25a92068cacff6324b448ce95df95449f7c6083a1f92e95965eb432ec3c765d16899cbbff09c2963b5b7f5fba353166969783d0c64c2862ba1bdcd3a26259e1ecaefb2bab3ba9c9ffa5595827334ffac84b3b834f96985b710deb3d27ef790998fb5cccab4caf59a0734b607c03b03a02a4f40ad22329ee98aa284b5bd68f33c7ee50cd4086991b7dfcd1c60f1ee9207b29657583a26b875dcadf1fade8828c03a4de53fb1f28a78ae869c2c2d78238716b1b3b59aad494e3eccdcb6af86e4ee924110ffd61ae6dc003e6b7022bcfcf0df9c28e9816125ae7b87ea27669b430de8a1950f4a15cc0093137f0c99b642f9a005a1b82adc02710875ebad59aa2ee6842b74d58543ec5dac6889c86c9c7ccb2f3e7c624e940a6c662333f9f2350aceb5f94f89d700c4b29fb6eb0e4b3418604c9ac4037ebb0f27705c8315ecdf841d3da9e13c200fcc84a91a923a66471cdace8fcaa073050f6703012c4f401db3c86cd8a516cd49ec6be5dcf357151be40d030e0bcd872bd23be7a56ed42ad8e2d07ad0758e7e299fb2623f2b957a3f7b7d917b715901cd69ad6aa50da5e1c9150e94a37eef31821baf1cdd06d24f044e3a279bc960b0eadea65b60f697739973744fe64c976168244885224bbeb3203b826d841c814d1341e034c7eb3214f80dd01f9af3b084cb1133910a526261de72f45005854e3562e13129e15afb63ee1f1b1b2c7c9ad9d8a9bb0283b2657efe4402160227b2f057895c055ec0d93799526d9306dcb7efd2901be9b570b1902582e24f2a3ad56d4fbe443d1aa50f58397091bc22862b47ae2f04636f3005ec5f45e50a816741f9e19786e7d738df5c9bf74284eff7957069375aab90ea89499566ab8e7512c4a8b7a35157290bb61f7bec4da6cecefb6ab18e87f2dda1112841414c48b7ddd9510554406f2f7952ba195e456c433524139d6c6302ff2881d9e0759ac24dd77759b63a2b8dcfb084cae09edeeff4657d2ba585e5da1167b7d277399dc48f936ec9ff51aeeb09d80927a65db9687a5824eadecb21ad5027dd20a700c06776f22ed73c41eee1820530eb899fad4236453640c0da8fb7c60d8873877536cdcee117472327e787df3962ec62edd7442601fdcdd6348a9b71cfe3963389310abbef5e1814810ca3d3dcd64cd3326a84e43985eb394f5158bc263fc69a3311975edbb1084a1f38794e1d89af1a46c9117e57ec84e63f44ee71a0a57bd86626810152452a7ad59e7edf89dcbe54641ca4deffe9c46c694307423757eb37db38e76bd24cb679d9fee376f28df0ad5e7ef62af4fde91d89fe5a0269df99d7f42dd537e4a829230470652f4f699e8da9e2726763a5c145221f088127c6a0aeeda1edfac2eda8fde16c8b49e69290b547b36e391e119869b2b4ee169e5349a224ef35d9d359f2538c36c6bbf509a636b59563e66623b1f2eb5dcbe85554343ac3c7480b96f5211e6736f0ae5d8121e6fbc51c1965437f6c6bad0ad39ded8327e55a5b60a74f110eb6685287a3e3dba304a9ccfe6c732a2a481216f5363db5bfc8836f0a326fe7cc6b7933b3b88a2de5b64e3d14f8b58ab20521bc2cb49b88f41d5ccc383147430e4345a3af4bd73fce46f92c5eb84118bb96bf53ef9019024037b346dfb46c3983b1a65ead5290915bc9985b6d971afae67e3c6e147bdeed359268005d6beddf80a371d693e2c57a9119791dcccd5512617daf014fb899ff05393857842c0c5c65967948133747418cfb9470bbf62c9e3785d44a2c5a0ed3d1028f6b4b126f16eda922e36769596ca8e890336bfee7f75eb78f36ef3ccfea1cd078e23b5ec0daeb1d782d7c6d1f34d218b3bbad89c29ba6034247586630f85b84c055af882f42d11b56b7e3ddc594e0e14dd4b484922ddd2f64b87a64c48adc636c20bf2c43af6b1829951c2621c6546c0ab9b4407230c25c2240413b2b11a31c831d1f2c40d8b1998d00f58ea0fe75cb6183ce36fe1e7798deb67292e10bc90050b51cbcd15699c7399330c5dded35abbb9880659fa688d4096384ec182ac46d61f6361e9f641a1ef88b8b9e2bf833ffa4e75749f0d41fc592e276385d9ee1b79a7a6f12f7cfe800fb8e8b2c77ed6321dd16576df178c6a99ebc806a237f1cc5e2004307ada67836694a3cb94bbc3250f8ba5f49fb8ca0eb04244d47033061d5bdc81814270afbcf1cbe8559db5d93fe42df46e01f05fc0a25fa54420dce227405ae7e9a31c07c138e8b2eeaf6e6400ff3f973c12098f585096d56362667b8d01727a80e77e6ba14f61fae830bfa4071c65287e2de369bc8e411ea715a5b8a1bb51550aa619197f84cd09dc25d120d68389c8362abac445fa4609ee212c8e4d027c12b1e480cd5e0ea6559556e841072cc4e2190e7fc9eabde2ec96d7b9db6b81bc5caef4c6b110208bc1b0f19fde013ab75eeeba951693bda244027261f168fccdd189f8dff186468412e4e772ce4dae4f833b12ab366a853ea1fa42eb8241767bdcbc4a7742a6d074b0e10fc7f48b42050975d019324b4a47dc51ba7814e9b5055254d297c3011c1980613c29449daf28a956d268988abd06c771f59e096cb56c60c523d859c755339329b839ac9b7e4c0a4aa396945505dbbe63dbec7e8d07a3e0be2d80d42176971d6afa2cf4f480482258f05d69e494ae65c7e6e27cab85401b047bdc95414f5607e0aa62d743ed7629f12450794da40a436cebbb896cdbde824b3a57dc79b16873e6376f2aa31a5db46bd4b263b399864ca1ee04ae87d938b7b653f5214c741fb54eb34cf09c072d0063d200fc7344249f84720bd196430caa12ec45aebf63cd0b3e1269ceb77139b1416bd0597f61adad40f5a412c358f00b50507c37b9f3b84b0fd926464e0afe7226a6b2f4933d18c37263ac0ecaaaa576f37c11bb11d402f1cf014da81f382a89f16224841c3f438d064b1a34be455629c8c3d0f8983395b98ef0dbc0174e2ae34fecb032e3a32d3a4551a9f5facb727c85151b19faf9a997532f9f017e08ada88076f78f9473cb6b9d9df04a40d101c964d9a00a5bb07d03f37db02260c989be2d04cb9d4790e4aa28cd9c9a27aec55fdd1d3c11b23656e8f2db5fbc889c631aa454b9a02d1086cbe65cb2ec3c1594ee9bda4063a325947e8d51920bbafd01a6e599bdb1bf8d92c6caf47bfeabed6c27a68ceb7071405e00c555a2d255200b42d4ddb09ba9057dbb3c5a90a6d12383eb95c2393e5825c743042946ab3f983b1909c01a56f59ce05f12b9a481d7fa679d76fd67d3252f0ec9b51241bd4971f994318882a578c42805743102a6a4ed09a472d163aada90422874891957e2fdc8813c740a3b7dd6e5900c7a731d36931ad72db72f571358540e4a0d4635480fc4e85c9e47566432d60b41cb3488b6836b027b183a08abbdf43c97c6d29de9798a68abdd722ab76277fef981872ce7dd3a4ed1f56e92f27b340e52526a380863a9000363a181278de4cab4ef49dcb43c8d21382538eb26c42df1b61341b77c7437edeef93424f8518b6c556fde3d910b181612b23efef1158583612ddbbfdc22175d5c070639148b93baec70ef0fbe33a2567d3caa2a4d018953f2ab8543c13ed7ffb05835fcc7ee72693108c7ce84784ff16d0ef166db05423f026fba3098f4facb7f77e9eb1749be834bc0e3d7f0562c1c807737421945cf5627de0fba17de9e4b10532ad31c884d832e18abdcb0e30928e1b8bbb43f3611f56932c0c1282505418dd0bbc2942c1bd661e61c10dfed76b8646e59692a6734951c9f7353b0e10d5c74afac5637ff3b0a87a20b90d33f93433c8cd60a6e5d2c06efd551ae6b02b08a2b823842361fb579600c5864f38ae02e251e8d9c8ad12537fa43e0c7e551d50d983fa4cd5ee22fcb8fb65d82888e4dacc78ef39fe575557eda15824f071ab9352aee5f769fe5bfbe40fdc7f35e9171f46a8828b87f7b6496963c3d67ac214e56bb36ecd74ad3dd6fb0a597c159561d73ca00bbe9126c6cffcac31482bb861f358b2ab0a0e46ddc1d338e5e562df52ca1586af86b2b654a83d8eea349080b9900fa3112d05787010bb0b874d0ddabba341d59918308d3cb51bc64b3db64fbfc02e90c0fa1412f8534bf0dc498bb8fc28c3ee5b3d0e1a2f5d0f8a3a35592d971a840e713d23d427ca8c61f361830ba95802dd84a76f68a27bf939109ee9e9bc0dfc736c853e143fd388162e2983185e9ee315ae94baa9a1dff76b6319074c8733ccc7c74e1df50ec77033ecca74b40545025d238508b531ec7826244370c02e6f98a39b9baf25d645f0061326a1c41699b3a897141f1c3f41200bb35c06707a185680c19403654461975d018f1943942867be412039b68c59372f25d04459143fc6d0e25b43a9dc8c26fa900b59dc39c21e7ca29b1c679e13d4b1f3e2a88455288a85e941ce6cf203704c7fe518cba62063da46b6fd1d0eaf3a7460c361fb59b7a8c434659718b4d0c6a74234843b4ed6901ea62eab6936e8794694e5d8db65b41f428d0cb1aa0263191ec8ba3abcef5f22f78392d17fca89486c5d94df6df05a5e358bb5"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x2d, 0x5, "872eaf789f349666b42240acd46d767cefd2d8d67c6708fe582c7118deb80d7ab25d5af5913e5f9067"}, @ETHTOOL_A_BITSET_VALUE={0xd0, 0x4, "8ffc238604fc66d96798e031776af562376604418182e645424520fad7ccccb951d62dbb751b74d542e6920294b5735c6a3e5a894215b9c306d56a7fe437946eab620b170e5cb245549c084e592834e0b7b609e0b29901ca2d7f1e817d04708b7103740b9978628323b03029ccbfa39bd10c10703884b55b663322faa72cb011d4d1a7ba633bf309b993f17558c2d39657b482c58c5de7b07cf8f06eece62ea7883c29b474882b09205e2cf7c52ba57a3acec840c3065240f20352593af34cfe033324880b41908695cfba6a"}, @ETHTOOL_A_BITSET_BITS={0x18c, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'netdevsim\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xf2\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ']]x\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff67b}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'netdevsim'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'pci\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, ')}!*.(]*):-+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'pci\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(:\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4865}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'pci\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1498}, 0x1, 0x0, 0x0, 0x12}, 0x20008061) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000018c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1}, 0x50) (async) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001b00), 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001bc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{0x1, 0xffffffffffffffff}, &(0x7f0000001c00), &(0x7f0000001c40)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d40)={{0x1, 0xffffffffffffffff}, &(0x7f0000001cc0), &(0x7f0000001d00)}, 0x20) (async) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001d80)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4}, 0x50) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001e00)={0xffffffffffffffff, 0x8, 0x18}, 0xc) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001f00)={0x6, 0x23, &(0x7f0000001940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0xb}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0xd}, @ldst={0x1, 0x1, 0x5, 0x3, 0x1, 0x1}, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x63}, @exit]}, &(0x7f0000001a80)='GPL\x00', 0x0, 0x25, &(0x7f0000001ac0)=""/37, 0x41000, 0x1, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000001b40)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000001b80)={0x4, 0x4, 0x0, 0x401}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001e40)=[0xffffffffffffffff, r6, r7, r8, r9, 0x1, r10], &(0x7f0000001e80)=[{0x5, 0x2, 0xc, 0x2}, {0x3, 0x1, 0x9, 0x1}, {0x4, 0x5, 0xc, 0xd}, {0x2, 0x5, 0x10, 0xc}, {0x5, 0x5, 0x8, 0x2}, {0x4, 0x5, 0x2, 0x4}], 0x10, 0xe8df}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000002180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000021c0)=0x14) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003300)={r5, 0x20, &(0x7f00000032c0)={&(0x7f0000002240)=""/4096, 0x1000, 0x0, &(0x7f0000003240)=""/79, 0x4f}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000033c0)={{r8, 0xffffffffffffffff}, &(0x7f0000003340), &(0x7f0000003380)=r11}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000003480)={0x18, 0x14, &(0x7f0000001fc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@jmp={0x5, 0x0, 0x1, 0xb, 0x9, 0x80, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002080)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191, 0x40f00, 0x40, '\x00', r12, @fallback=0x15, r5, 0x8, &(0x7f0000002200)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, r13, r11, 0x3, &(0x7f0000003400)=[r10, r9, r10, r14, r6], &(0x7f0000003440)=[{0x4, 0x3, 0x0, 0x5}, {0x5, 0x4, 0xf, 0x7}, {0x4, 0x3, 0xf, 0x4}], 0x10, 0x69}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003540)={0x2, 0x4, 0x8, 0x1, 0x80, r10, 0xd, '\x00', r12, r5, 0x4, 0x1, 0x3}, 0x50) (async) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000035c0), r15) (async, rerun: 32) r16 = openat$cgroup(0xffffffffffffffff, &(0x7f0000003600)='syz0\x00', 0x200002, 0x0) (rerun: 32) openat$cgroup_netprio_ifpriomap(r16, &(0x7f0000003640), 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000036c0)=0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r17, &(0x7f0000003780)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003740)={&(0x7f0000003700)={0x2c, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r18}, @NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x50) (async, rerun: 64) syz_genetlink_get_family_id$devlink(&(0x7f00000037c0), r10) (rerun: 64) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000038c0)={&(0x7f0000003800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003880)={&(0x7f0000003840)={0x30, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x8056) 6.871689058s ago: executing program 0 (id=5071): socket$nl_route(0x10, 0x3, 0x0) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x14, r3, 0x333, 0x0, 0x4}, 0x14}}, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0xa00}, {0x0, 0x100000000000000}]}, 0x68) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000003c0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [{{0x254, 0x1, {{0x3, 0x5}, 0xc, 0x3, 0xa000, 0x3, 0x14, 'syz0\x00', "3f5a4b4b07bb6dc6429ecc6c43cd068b28d2d2e51689a1d99c2d42a59fdc62b8", "fcd24d468918b853e8e0df8098bd105f3f60dfbdad018ac95bd5c7f2c26cb5d7", [{0x2, 0x33, {0x3, 0x4}}, {0x2, 0x28, {0x2, 0x7}}, {0x78, 0x200, {0x1}}, {0x3ff, 0xb76, {0x3, 0x10}}, {0x2000, 0xa, {0x3}}, {0x5, 0x8e7, {0x1, 0x2}}, {0x4, 0x8000, {0x0, 0x5}}, {0xfffa, 0x0, {0x3, 0x80000001}}, {0x3, 0x7, {0x0, 0x722c}}, {0x4, 0x3ff, {0xfea97feaefd65298, 0x40}}, {0x800, 0x5, {0x2, 0x523490a8}}, {0x7, 0xbd9, {0x3, 0x5}}, {0x7, 0x5, {0x2}}, {0x4, 0x4, {0x1, 0x8b8}}, {0xf74, 0x800, {0x0, 0x1}}, {0x5, 0x1, {0x3, 0x7}}, {0x1, 0xfff, {0x0, 0x1}}, {0x6, 0x2, {0x1}}, {0x7, 0x2, {0x0, 0x1}}, {0x9, 0xe5, {0x0, 0x5}}, {0x4, 0x6b, {0x3}}, {0x2, 0x800, {0x1, 0x45f}}, {0xfff9, 0x4, {0x0, 0xa}}, {0x1, 0x56ee, {0x3, 0xfffff5a5}}, {0x2, 0xfffb, {0x3, 0x3}}, {0x33, 0x806, {0x1, 0xf8f4}}, {0xfff2, 0x1, {0x0, 0xd6b}}, {0x40, 0x7e7e, {0x1, 0xa0}}, {0x9, 0xb, {0x1, 0x800}}, {0x8, 0xffff, {0x2}}, {0xfffd, 0x3, {0x3, 0x2}}, {0x2, 0x5, {0x3, 0x6a}}, {0x4, 0x0, {0x3, 0x3}}, {0x8000, 0x2, {0x3, 0x8001}}, {0x101, 0x6, {0x1, 0x10000}}, {0x5, 0x8000, {0x2, 0x36}}, {0x3ff, 0x81, {0x1}}, {0x4, 0x7f, {0x1, 0x89}}, {0x1, 0xfff5, {0x0, 0x9}}, {0x1, 0x7, {0x0, 0x6}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x20001}, 0x44008) mmap(&(0x7f0000278000/0x2000)=nil, 0x2000, 0xb635773f04ebbee0, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$netlink(0x10, 0x3, 0xb) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0xde, 0x8, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r8, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r7}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r9, &(0x7f0000000500), 0x0}, 0x20) sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a3000000000"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r10, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1000000}}, 0x20) 4.514794181s ago: executing program 1 (id=5072): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="ed3a000000000000280012800b0001006272696467650000180003"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20000040) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000030000000000f45e6cb3f91cf63c000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000006200028008004040", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x4) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000073"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.46866423s ago: executing program 0 (id=5073): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0xb, &(0x7f00000000c0)={0xfffffff6}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) pipe(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000206010800000000000000000000000014000780080012400000000305001500090000000500010006000000050005000a00000005000400000000000900020073798530000000000c000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x20015051}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaabb018014b6a4c1d83cc200000108004a5d0038006800000c21907864010100ac1414aa89135d640002000000000000000002e0000001004e214e2204b1907840740e234b310000"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRESHEX=r2, @ANYRES32=r3], 0x54}, 0x1, 0x0, 0x0, 0x41}, 0x881) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x7, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000440)=ANY=[@ANYRES64=r6, @ANYRES16=r2, @ANYRES32=r2, @ANYRESDEC=r3, @ANYRESHEX=0x0, @ANYBLOB="cd5942f78f9e33ad13ca91a8b5ff102a503adf0a06f517eb0baa29c4ba8fe4f12b0e217c63de2527209ebbf884ccaba0bb2eb14048942c2eb18f28398d1ccdf66883cda0f307b961b5fffc78888ba69ba2585b04ba3ce205dc0a1396dc906994b064847a659d7ed1baf21492d428b1b2a23036f24975cb3e66f326fc98b929a56cf5a6e8f7dc94888326af4ac1a6ed94e83145c91a97d91dbcaac2200dd74c26c6ca317de021274b8edc918d947306e10b4d557d3570324feb6d955e4eaf264bcb276413ec3465100a", @ANYRES8=r4], 0xfdef) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_proto_private(r4, 0x89ee, &(0x7f0000000540)="a595636b5ec7b007903b01535fa82042a38f018331c7330318c3b72629b204781184e0bc60d7e12ad1c95757ec0dbfd70c2271b164cc9ba007a32def89210f715924794462ca0b7267ea4da842f70070ba98d2362149e43ac67d147683f61c9a1cde4f1332eb") write$cgroup_int(r4, &(0x7f0000000200)=0x10001, 0x12) sendfile(r4, r3, 0x0, 0xf03a0005) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.throttle.io_serviced_recursive\x00', 0x7a44, 0x1700) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x14, 0x32, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r9, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x1c000}, 0x800) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) getsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$cgroup_type(r11, &(0x7f00000000c0), 0x9) sendfile(r11, r7, 0x0, 0x10000) 4.450915786s ago: executing program 3 (id=5074): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='!\x00'}]}, 0x1c}}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480ef441000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000040) 4.290649025s ago: executing program 1 (id=5077): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000100)="e9f584f2300b82e8ab4522c5a3bc374e", 0x10) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$sock_proto_private(r0, 0x89e3, &(0x7f00000002c0)="781fea2669237e9a48eb6370b334284f405f9ca11bdeaa00160201cdb4d54b91e6bf07faeb8c0633c96a51e58be4e3627b745235af0e6d4bcce6f1dc70b8725e4873a3e266180dc0f60390d21a4150edee8e98b6ff9287f59c208144365f2944f3f01d67d3") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000003000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x14, 0x2d, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f00000010c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000002c0)='cubic', 0xb) setsockopt$inet_tcp_int(r7, 0x6, 0x25, &(0x7f0000000380)=0xffffffff, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}, 0x3f01) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x3, 0x0, 0x0, '\x00', {0x0, 0x6, "ed906b", 0x38, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c811ee12e"}}}}}}}, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xdfb}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x30}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 4.155008069s ago: executing program 3 (id=5078): r0 = socket(0x10, 0x803, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}, {{&(0x7f0000000540)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000980)='\x00S', 0x2}], 0x1}}], 0x2, 0x4000800) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c030000", @ANYRES16=r1, @ANYBLOB="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"], 0x31c}, 0x1, 0x0, 0x0, 0x4050}, 0x4800) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r5) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x4008000) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000780)=ANY=[@ANYBLOB='d\x00\x00\b', @ANYRESOCT=r3, @ANYBLOB="7829eca9de9891203eea18280016be21fb1777a31659615d286ff72b61ee23d917c0a562eb690e0edae8640d240035af4f5cfc43550338d69083452f062554692a1e87be0d", @ANYRES64=r4, @ANYBLOB="48002f8008000100030000000c0002000203aa8aaaaaaaaa3000038024000380060001000200000006000300a1aa0000060001000000e9ff0700020001000000080001"], 0x64}}, 0x24000050) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, 0x0, 0x0) r8 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x16, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x69}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r9) sendmsg$NLBL_CIPSOV4_C_REMOVE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r10, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB="00174000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd29, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r12 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r12, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r12, &(0x7f00000092c0), 0x4ff, 0xffd8) 4.088889599s ago: executing program 1 (id=5080): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000140)={0x2, 'veth1_to_bond\x00', {0xe}, 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newlink={0x40, 0x10, 0x401, 0x400, 0x0, {0x0, 0x0, 0x2}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c8e5}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0x4, 0x0, 0xeff, 0x0, [@sadb_key={0x2, 0x18, 0x8, 0x0, "88"}]}, 0x20}, 0x1, 0x7}, 0x0) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r4) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x34, r6, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x34}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r6, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xf9}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xa}, @SEG6_ATTR_SECRET={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044010}, 0x8410) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x19, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0xec5}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffffff}}, [@map_fd={0x18, 0x9, 0x1, 0x0, r7}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0xf, 0x1002, &(0x7f0000000440)=""/4098, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) 3.992581145s ago: executing program 3 (id=5082): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01072cbd7000fedbdf2506000000080003000e"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x12, 0x32, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) socket(0x26, 0x1, 0xfffffffa) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000f00)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0xff, 0x0, 0x0, 0x2], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f2, 0x20, 0x70bd29, 0x25dfdbfd, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x81}, 0x2400c850) 3.966068302s ago: executing program 1 (id=5083): socket$nl_route(0x10, 0x3, 0x0) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x14, r3, 0x333, 0x0, 0x4}, 0x14}}, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0xa00}, {0x0, 0x100000000000000}]}, 0x68) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000003c0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [{{0x254, 0x1, {{0x3, 0x5}, 0xc, 0x3, 0xa000, 0x3, 0x14, 'syz0\x00', "3f5a4b4b07bb6dc6429ecc6c43cd068b28d2d2e51689a1d99c2d42a59fdc62b8", "fcd24d468918b853e8e0df8098bd105f3f60dfbdad018ac95bd5c7f2c26cb5d7", [{0x2, 0x33, {0x3, 0x4}}, {0x2, 0x28, {0x2, 0x7}}, {0x78, 0x200, {0x1}}, {0x3ff, 0xb76, {0x3, 0x10}}, {0x2000, 0xa, {0x3}}, {0x5, 0x8e7, {0x1, 0x2}}, {0x4, 0x8000, {0x0, 0x5}}, {0xfffa, 0x0, {0x3, 0x80000001}}, {0x3, 0x7, {0x0, 0x722c}}, {0x4, 0x3ff, {0xfea97feaefd65298, 0x40}}, {0x800, 0x5, {0x2, 0x523490a8}}, {0x7, 0xbd9, {0x3, 0x5}}, {0x7, 0x5, {0x2}}, {0x4, 0x4, {0x1, 0x8b8}}, {0xf74, 0x800, {0x0, 0x1}}, {0x5, 0x1, {0x3, 0x7}}, {0x1, 0xfff, {0x0, 0x1}}, {0x6, 0x2, {0x1}}, {0x7, 0x2, {0x0, 0x1}}, {0x9, 0xe5, {0x0, 0x5}}, {0x4, 0x6b, {0x3}}, {0x2, 0x800, {0x1, 0x45f}}, {0xfff9, 0x4, {0x0, 0xa}}, {0x1, 0x56ee, {0x3, 0xfffff5a5}}, {0x2, 0xfffb, {0x3, 0x3}}, {0x33, 0x806, {0x1, 0xf8f4}}, {0xfff2, 0x1, {0x0, 0xd6b}}, {0x40, 0x7e7e, {0x1, 0xa0}}, {0x9, 0xb, {0x1, 0x800}}, {0x8, 0xffff, {0x2}}, {0xfffd, 0x3, {0x3, 0x2}}, {0x2, 0x5, {0x3, 0x6a}}, {0x4, 0x0, {0x3, 0x3}}, {0x8000, 0x2, {0x3, 0x8001}}, {0x101, 0x6, {0x1, 0x10000}}, {0x5, 0x8000, {0x2, 0x36}}, {0x3ff, 0x81, {0x1}}, {0x4, 0x7f, {0x1, 0x89}}, {0x1, 0xfff5, {0x0, 0x9}}, {0x1, 0x7, {0x0, 0x6}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x20001}, 0x44008) mmap(&(0x7f0000278000/0x2000)=nil, 0x2000, 0xb635773f04ebbee0, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$netlink(0x10, 0x3, 0xb) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0xde, 0x8, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r8, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r7}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r9, &(0x7f0000000500), 0x0}, 0x20) sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a3000000000"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r10, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1000000}}, 0x20) 3.89681263s ago: executing program 0 (id=5084): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) r5 = getpid() write$cgroup_pid(r4, &(0x7f00000000c0)=r5, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$XFS_IOC_GETPARENTS(0xffffffffffffffff, 0xc028583e, &(0x7f00000002c0)={{[0x5, 0x5e17, 0x7, 0xffff]}, 0x0, 0x1, 0x7fff, 0x0, &(0x7f0000000180)=[{{@_ha_fsid={[0x9, 0x77ef]}, {0x9, 0x2, 0x6, 0x13f}}, 0x4, 0x0, 'cgroup.procs\x00'}, {{@align=0x6, {0xd, 0x5681, 0x0, 0x7}}, 0x5, 0x0, 'memory.events\x00'}, {{@align=0x401, {0xad, 0x3, 0xd}}, 0x5, 0x0, './cgroup.cpu/syz1\x00'}]}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x3) r7 = openat$cgroup_procs(r6, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000002980), 0x12) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x54, r2, 0x1, 0x1070bd28, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xfdfdcd34cf8e51c8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_DATA_SEQ={0x0, 0x4, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_macvtap\x00'}, @L2TP_ATTR_PEER_COOKIE={0xfffffc20, 0x10, 0xffffffffffffffff}]}, 0xa3}, 0x1, 0x0, 0x0, 0x8010}, 0x30) 3.228353614s ago: executing program 2 (id=5089): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@loopback, {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2}, {}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@delsa={0x28, 0x11, 0x1, 0x0, 0x0, {@in6=@mcast2, 0x4d4, 0x2, 0x6c}}, 0x28}, 0x1, 0x0, 0x0, 0x8801}, 0xfc01000000000000) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000640)={{r1, &(0x7f0000000080)='):!-\'#E\x00', 0x4000, &(0x7f00000000c0)={@align, {0x7, 0x3ff, 0x8, 0x2}}, 0x60, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x200}, 0x3, &(0x7f00000005c0)=[{0x2, 0x97f3, &(0x7f00000001c0)='/:*-+\x00', &(0x7f0000000340)="4d18d5628104a22f0161f5c0050aea18566ced5fead46726ddfc5193850b2ade3eb29e20354dafe56ad913f9c18123c3beaf83b5334d2806a8c12ebe273022fe61d8b06fe71e27880ef68d8753f94c8c3d26fd49a4deca1574bcfe8ada804636793e9ec02c2ff44e285eca267832b967770a3b772fd4b62dc6769bf2d087597ab222747265ef85d835899a1b940a79604cb4a97c8f6e6fd8351c46e6ca6b11b2c51f60a706160e335f450d70894e544c1fa50a004f384b046d18f8d17779b3f47839912d3af183a8e74278f0efd0f8c0b920", 0xd2, 0x12}, {0x2, 0x1, &(0x7f0000000440)='deflate\x00', &(0x7f0000000480)="cd70391ddada21008f04fee815dfb60fe6440eed15de5214ab68d36506c966e17683ebf61708e477567f0a764ad74e7308e0b0ed1493d76c457fa2fb4cdeff3baa90b0d270f4e12ed793623615d61109520558bba53427cf5c1f95392a09c83be1f2a84d90798bccb5ca0f2af690979e7d9a705616f2f0188a8ef2b5c72a133f9756971baf5e1cfb18791ab5bf5f53e85574a7c9f60d83a41c74f58e268ba3d5e8301d5784aa77ad894b9fa325c2c52e88e815d8dfebe02560652f8a89ed", 0xbe}, {0x3, 0x2d, &(0x7f0000000540)='\x00', &(0x7f0000000580)="ad251be07e9642c14cd31e3fd888bc876d989d296ae3fea1f4e2a783bbc663451a0f3c903fed65", 0x27, 0x28}]}) 3.22789971s ago: executing program 2 (id=5090): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) read(r1, &(0x7f00000018c0)=""/4115, 0x1013) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) r3 = socket(0xa, 0x4, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) write(r4, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x40, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newlink={0x28, 0x10, 0x2, 0x70bd2a, 0x25dfdbf9, {0x0, 0x0, 0x0, r2, 0xc6da5938055b8655, 0x45000}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x88af}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000054}, 0x4c844) 3.092260957s ago: executing program 2 (id=5091): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r1, &(0x7f0000000000)="4c00000011000f14001100020000190002000000200000", 0x17) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000140)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x10, 0x5}]}, 0x10) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @empty, 0xfffffffc}, 0x1c) (async) listen(r0, 0x40) 3.058506219s ago: executing program 2 (id=5092): r0 = socket(0x10, 0x803, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}, {{&(0x7f0000000540)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000980)='\x00S', 0x2}], 0x1}}], 0x2, 0x4000800) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c030000", @ANYRES16=r1, @ANYBLOB="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"], 0x31c}, 0x1, 0x0, 0x0, 0x4050}, 0x4800) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r5) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x4008000) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000780)=ANY=[@ANYBLOB='d\x00\x00\b', @ANYRESOCT=r3, @ANYBLOB="7829eca9de9891203eea18280016be21fb1777a31659615d286ff72b61ee23d917c0a562eb690e0edae8640d240035af4f5cfc43550338d69083452f062554692a1e87be0d", @ANYRES64=r4, @ANYBLOB="48002f8008000100030000000c0002000203aa8aaaaaaaaa3000038024000380060001000200000006000300a1aa0000060001000000e9ff0700020001000000080001"], 0x64}}, 0x24000050) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, 0x0, 0x0) r8 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x16, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x69}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r9) sendmsg$NLBL_CIPSOV4_C_REMOVE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r10, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB="00174000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd29, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r12 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r12, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r12, &(0x7f00000092c0), 0x4ff, 0xffd8) 1.023464098s ago: executing program 3 (id=5093): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vlan1\x00', 0x0}) socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) pipe(&(0x7f00000001c0)) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$unix(0x1, 0x3, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) getsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r7, r9, 0x25, 0x2, @void}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x130, 0x0, 0x130, 0xffffffff, 0xffffffff, 0x340, 0x340, 0x340, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xff, 0xff000000, 'veth0_to_team\x00', 'dummy0\x00', {0xff}, {}, 0x11, 0x3, 0x1}, 0x0, 0xc0, 0x130, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "37ae"}}, @common=@icmp={{0x28}, {0xd, "ebb7"}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xfffffbff, 0x0, 0xfff, 0x0, 0x0, "547db91f21928601a2e4ff007573e09dd067af4f49badcd6efdcc93597255b241969cee314899593f28230d62b8ba6ebd4df9a576bb3e8a20f9105be7739b6f7"}}}, {{@uncond, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x1, 0x2}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xfffffffd, 0x6, 0xc, 0xff, 0x8, 0x3, 0x100, 0x400]}}}, {{@ip={@empty, @remote, 0xffffff00, 0xff, 'macsec0\x00', 'bond_slave_1\x00', {}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4}}, @common=@ttl={{0x28}, {0x1, 0x2}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xf, 0x9, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x438) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x24000840}, 0x4000084) write$tun(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="016f0800010027000000270000004500002c00000000008490783fffff20ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6a00aa958a4ca82006060090"], 0x3a) (async) write$tun(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="016f0800010027000000270000004500002c00000000008490783fffff20ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6a00aa958a4ca82006060090"], 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000002a80)=[{&(0x7f0000000080)="c2", 0x1}], 0x1) (async) writev(r4, &(0x7f0000002a80)=[{&(0x7f0000000080)="c2", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r11, 0x0, 0xf3a, 0x0) (async) splice(r10, 0x0, r11, 0x0, 0xf3a, 0x0) splice(r3, 0x0, r11, 0x0, 0x80, 0x8) vmsplice(r3, &(0x7f0000008ac0)=[{&(0x7f0000007a80)='u', 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r15, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r14, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) (async) recvmsg$unix(r14, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) 1.022194131s ago: executing program 1 (id=5094): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x5, &(0x7f0000000240)=ANY=[@ANYRES16=r0, @ANYRES8=r0, @ANYRESHEX=r0, @ANYRESHEX=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f00000000c0)={0x4, 0x746, 0x3, 0x3, 0xfb, 0x8, 0xb}, 0xc) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r4 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3, 0x8, 0x4e24, 0x10, 0x2, 0x180}, {0x0, 0x0, 0x2000000, 0x2, 0xfffffffffffffff6, 0x2, 0x1, 0xfffffffffffffffd}, {0x1ff, 0x800000000000, 0x4, 0xbfffffffffffff7f}, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in=@remote, 0xffffffff, 0x2b}, 0xa, @in=@loopback, 0x3501, 0x4, 0x0, 0x0, 0x9, 0x6, 0x9}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) sendmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000180)="fbecb183a9cffc0ee5d1d434a494db587414a63ef7fed2175c894997b4760cede524e40ae9a937434e1756f7b60d81a7da87fa2614c509b671a7bf8557275e807e7af1c65c1860dcd7b32c", 0x4b}, {&(0x7f0000000340)="36da21ba0be270a73a76b0b2c1b08b0aa7b634bde7b42b05fff77a1bd375fa61812e0a3df2dc7fea643e6cf5ef23233fe2b752a206d9be7865e37ef0b528cde3720d51a67f20caab530191c4", 0x4c}, {&(0x7f00000006c0)="8b3e97e66c34520fa8e2a370f6233f47fa505952ceaf6714d4030cf71b06d9c227e92f4a323b6ebf087032d4498fdc03e86e62f25a610270568c2c7147975019b3fa481fe21ab4ed149068e364b45ddd86efa6b28b42f1977be3937c8b1edf121d5defd4180ca936d2169e6734570a3e713fb30c4e18c13d66b17b808cad9e8c9af357cb504fbec0bf4cb07af24b4d49049ad0b80472ce7e307a5b4892afbe4edb5ec566ae52aac0ea58afb19188f9161d0a12fba2e42b9cdbeec498cebe3698e1bdd29ebfbe8237fc0e", 0xca}, {&(0x7f00000007c0)="259c1e0da026f141b18e0c546887d455a791e379a60024c5ad2fbb", 0x1b}, {&(0x7f0000000800)="f1f90ee8d3a476eafbc79faa69937cde26a691e03e6ceed21bf980b72b9f21463b3821266ad276f81429b7f50c09b18445106c2a77a8787e813e50cb0fdc2d4b67f07fed507e5fc76d", 0x49}, {0x0}], 0x6}}], 0x1, 0x20000000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x7c, 0x30, 0x9, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_MPLS_TTL={0x5, 0x7, 0x8}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtfilter={0x84, 0x2c, 0x100, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r9, {0xc}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x54, 0x5, {0x10, 0x9, 0x4, 0x10da, 0xa760, 0x0, 0x10, 0x9, [{0x1000, 0xe, 0x4, 0x9f6}, {0xdeb2, 0x3, 0x100, 0x3}, {0x1, 0xfffffffb, 0x80, 0x3ff}, {0x200, 0x3ff, 0x3, 0x4}]}}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0xfff2}, 0x24040084) ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000280)='GPL\x00', 0x2, 0xda, &(0x7f00000005c0)=""/218}, 0x94) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x18050}, 0x44014) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000", @ANYRES16=r11, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r12, @ANYBLOB="10002d800a000000020202020202000004002a0040002d800a"], 0x80}}, 0x0) recvmmsg(r0, &(0x7f0000004480), 0x40000c2, 0x12, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) 957.338923ms ago: executing program 0 (id=5095): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x1, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x6d47}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000300)=@ccm_128={{0x304}, "d946b27954cc921c", "ad66ad46926d2ded206d82ffb02ae9f8", "8cb080e9", "0f482e74abd5a670"}, 0x28) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000004c0), 0x4a) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x304}, "de944ea5a36ac627", "edf577c5ea1b89127b1b4fbbddaa00", "8dda8620", "f6635b1d1ae04523"}, 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r5 = accept4(r4, &(0x7f0000000440)=@generic, &(0x7f0000000380)=0xfffffffffffffd33, 0x80800) recvmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000000640)=""/16, 0x10}, 0x3}], 0x1, 0x40000023, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) sendto$inet6(r2, &(0x7f0000000140)="d0", 0x1, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000ff0f000000000000", @ANYRES32=r3, @ANYBLOB="0100000000000000000000000002000000000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="03000000040000000200"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r3}, &(0x7f0000000740), &(0x7f0000000780)=r3}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={r3, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000009c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000a00)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0, 0x36, &(0x7f0000000a80)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000b40), 0x8, 0xd0, 0x8, 0x8, &(0x7f0000000b80)}}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000d80)={r4, 0x5, 0x5, 0x5}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0x7, &(0x7f0000000500)=ANY=[@ANYBLOB="18120000", @ANYRES32=r6, @ANYBLOB="0005a9000000000000850000000c000000b70000000000000018380000feffffffffffffff0000000000000027137c717883d22885800dcf19bb00baa7012894208c7ab649dc95e2fc3be961c814a9a3790a11573f1300a5b5f92b36302c5ba5ae04d4e994d8415d61e24ed92b693ffca809669d15a4e4c4099f405912f9dfd8b5a54399117290b6b1660ac165fbd28108b46109d4308fb642a1190ef821a64cae9d"], &(0x7f00000008c0)='GPL\x00', 0x101, 0x94, &(0x7f0000000900)=""/148, 0x41100, 0x8, '\x00', r7, 0x25, r3, 0x8, &(0x7f0000000d00)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000d40)={0x1, 0xa, 0x40, 0x3}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000dc0)=[r3, r2, r3, r8, r3, r3, r3], &(0x7f0000000e00)=[{0x3, 0x5, 0xf, 0x7}, {0x4, 0x5, 0x1, 0x4}, {0x1, 0x5, 0xb, 0x4}, {0x0, 0x2, 0x9, 0xc}, {0x3, 0x101, 0x8, 0xb}, {0x4, 0x3, 0x3}, {0x2, 0x3, 0x6, 0x7}]}, 0x94) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) 956.903718ms ago: executing program 4 (id=5096): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) (async) ioctl$sock_netdev_private(r0, 0x8943, &(0x7f0000000000)) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000012c0)={{r0, &(0x7f0000000040)='*-{%\x1a/*K$&)#.\x00', 0x602200, &(0x7f0000000080)={@align=0x1000, {0x6, 0x6, 0xda, 0xbde5}}, 0xea, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x3}, 0x2, &(0x7f0000001280)=[{0x3, 0x7, &(0x7f0000000140)='veth0_vlan\x00', &(0x7f0000000180)="565ba26bb0bbe15e791e20d3a935f73fa0f6668fedb24347d7aa9801753faf09da565d732605d5db77a420be04a081301bfcac33de01f7b65b4c64d70e968089a9f1fffb647f0d7d9b55037af50312b2996bf54ae1dc613b8d21e2ce4bb1fc525e1a43cfc07cafdcde8cc09eef62140ca44a5ed51c57c36cdb691b5e7ee263fe87c51a08a2f57fa1dc9368ab231f87591143435a259d2c59028ffb9a6d66f0890d459de3b1cf293e5e25c60d0bbef65748b598473a4b9193b908d282cd38b7", 0xbf, 0x2}, {0x2, 0x5, &(0x7f0000000240)='\xf5&\x00', &(0x7f0000000280)="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", 0x1000, 0x10}]}) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000001340)=0x4) 956.244762ms ago: executing program 2 (id=5097): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000001c0), 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7002}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x2}, @IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_NF_CALL_IPTABLES={0x5}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8880}, 0x410) 740.653783ms ago: executing program 2 (id=5098): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000728000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100738d909ad5f9513fb016bca7000014000001110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4c880}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(0xffffffffffffffff) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1", 0x70}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0x15}], 0x3}, 0xc854) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendfile(r3, r4, 0x0, 0xffffffff000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x0, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x14, r7, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r9 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r12 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r11, &(0x7f0000000100)={0xc0002011}) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r9, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000980)=[{r12, 0x1}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r11, &(0x7f0000000140)={0x4}) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 605.509474ms ago: executing program 4 (id=5099): syz_emit_ethernet(0x7a, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x13, 0x4, 0x0, 0x5, 0x4000, 0x1, 0xffff, 0x0, 0x1, 0x7, @empty, @rand_addr=0x64010100, {[@cipso={0x86, 0x36, 0xffffffffffffffff, [{0x0, 0x8, "00020000da6e"}, {0x5, 0x9, "02270e000042eb"}, {0x2, 0x12, '\x00'/16}, {0x0, 0x9, "00de6c83d50800"}, {0x0, 0x2}, {0x1, 0x2}]}]}}}}}}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @local}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400b59527bd7000ffdbdf250a0800ff", @ANYRES32, @ANYBLOB="1400020000000000000000000000000000000001"], 0x48}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x10, 0x0, 0x0, 0x4, {[@sack_perm={0x4, 0x2}]}}}}}}}, 0x0) 550.087511ms ago: executing program 4 (id=5100): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0xfffffffd, 0xfffffffd}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) getsockname$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, &(0x7f00000000c0)=0x1c) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000100)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000240)=0x2c) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r3, 0x0, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000007b40)) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x1}}, 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0xfffffffc}, 0x1c) socket(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) recvfrom$inet6(r6, &(0x7f00000006c0)=""/222, 0xde, 0x10100, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) 436.904314ms ago: executing program 4 (id=5101): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000003240)=ANY=[@ANYBLOB="240000002300090425bd7000ffd3df250200000008000100ac1414bb08"], 0x24}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000003240)=ANY=[@ANYBLOB="240000002300090425bd7000ffd3df250200000008000100ac1414bb08"], 0x24}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xb, 0x3, "91abc12404cf37"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x88}}, 0x0) 363.931291ms ago: executing program 4 (id=5102): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0xfffffcf1, @private1, 0x8001}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e23, 0xc000, @local, 0x1}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000000c0)="bd", 0x1}], 0x1}}], 0x2, 0x42) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000000540)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e22, 0xfff1, 0x4e23, 0x4, 0xa, 0xa0, 0x20, 0x2, 0x0, r1}, {0x3, 0xd02b, 0xc, 0xc000000000000000, 0x7fff, 0x7fffffffffffffff, 0x9, 0xffff}, {0xe6, 0xffffffffffffffff, 0x2, 0x7}, 0x10001, 0x6e6bb5, 0x0, 0x0, 0x2, 0x3}, {{@in=@empty, 0x4d6, 0x6c}, 0x41acee5edf59716d, @in=@multicast1, 0x3500, 0x1, 0x1, 0x1, 0x2, 0x0, 0xf705}}, 0xe8) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x6020400) vmsplice(r2, &(0x7f0000000380)=[{&(0x7f0000002040)="162dd3cad75f87", 0x7}], 0x1, 0x6) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x82, &(0x7f00000002c0)="1af3050013000000", 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x13, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}, {0x85, 0x0, 0x0, 0x72}}, @printk={@lld, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x41}, {0x5}}]}, &(0x7f0000000340)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 227.693004ms ago: executing program 4 (id=5103): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r2, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x1458}, 0x20048811) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008666dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xd9}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50020000", @ANYRES16=r13, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b800800"], 0x250}}, 0x2000c000) 209.082329ms ago: executing program 0 (id=5104): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5b0}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x86}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x2a}}, {0x95, 0x0, 0xfe}}, &(0x7f0000000000)='syzkaller\x00', 0xf, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x2b}, 0x94) 3.409276ms ago: executing program 1 (id=5105): r0 = socket(0x10, 0x803, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}, {{&(0x7f0000000540)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000980)='\x00S', 0x2}], 0x1}}], 0x2, 0x4000800) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c030000", @ANYRES16=r1, @ANYBLOB="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"], 0x31c}, 0x1, 0x0, 0x0, 0x4050}, 0x4800) syz_emit_ethernet(0xf4, &(0x7f00000009c0)=ANY=[@ANYBLOB="ffffffffffff0180c20000000004d4ff0b5cd9e5f63744c0376392f0197eeaa0eff6cba6377e6724f3657001b48d47cbcb0e0d8972088a6df313122cfef9d6204658c3eeef1fc774bfb129530681f7efa3a52e124ec242f8674265f7fc2b9d5c1bfd455e1f2faf711cefdbe51cedc475fe2e080e561f5cdab7961855da1a7bb8240ee2b536eb9957ae48380c2501258839669f001707138acb8a046c68bef8de20c1592ce49ac9d0c6035cbc25195ef62dc8794c8e4e18e474c5f5836a83f3211b7e3090c2d5c4ef02f773e4b642e99e20930d09f2993ffbd4124ecf9d060f41e95ffb7ebde300000000"], 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r5) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x4008000) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000780)=ANY=[@ANYBLOB='d\x00\x00\b', @ANYRESOCT=r3, @ANYBLOB="7829eca9de9891203eea18280016be21fb1777a31659615d286ff72b61ee23d917c0a562eb690e0edae8640d240035af4f5cfc43550338d69083452f062554692a1e87be0d", @ANYRES64=r4, @ANYBLOB="48002f8008000100030000000c0002000203aa8aaaaaaaaa3000038024000380060001000200000006000300a1aa0000060001000000e9ff0700020001000000080001"], 0x64}}, 0x24000050) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, 0x0, 0x0) r8 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x16, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x69}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r9) sendmsg$NLBL_CIPSOV4_C_REMOVE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r10, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB="00174000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd29, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r12 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r12, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r12, &(0x7f00000092c0), 0x4ff, 0xffd8) 0s ago: executing program 0 (id=5106): r0 = socket$xdp(0x2c, 0x3, 0x0) close(0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap$xdp(0x0, 0x1000, 0x3, 0x11, r0, 0x80000000) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000000)={0x8, 'ip_vti0\x00', {'veth0_virt_wifi\x00'}, 0xfff7}) kernel console output (not intermixed with test programs): s [ 446.159683][ T5877] bond7 (unregistering): (slave veth5): Releasing active interface [ 446.179611][ T5877] bond7 (unregistering): Released all slaves [ 446.190864][ T5877] bond8 (unregistering): Released all slaves [ 446.200866][ T5877] bond9 (unregistering): Released all slaves [ 446.211064][ T5877] bond10 (unregistering): Released all slaves [ 446.223418][ T5877] bond11 (unregistering): Released all slaves [ 446.235372][ T5877] bond12 (unregistering): Released all slaves [ 446.252082][ T5877] bond13 (unregistering): (slave veth17): Releasing active interface [ 446.269919][ T5877] bond13 (unregistering): Released all slaves [ 446.331018][T20133] ipvlan2: entered promiscuous mode [ 446.339520][T20133] team0: Device ipvlan2 failed to register rx_handler [ 446.429574][ T12] smbdirect: ib_dev[syz0] removed [ 446.445541][T20137] tipc: Enabling of bearer rejected, failed to enable media [ 446.459832][ T6849] wg2 speed is unknown, defaulting to 1000 [ 446.459888][ T6849] syz2: Port: 1 Link DOWN [ 446.681294][T20149] __nla_validate_parse: 8 callbacks suppressed [ 446.696838][T20149] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3470'. [ 446.922567][T20151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3471'. [ 447.108993][T20157] netlink: 'syz.3.3473': attribute type 1 has an invalid length. [ 447.109033][T20157] netlink: 'syz.3.3473': attribute type 4 has an invalid length. [ 447.109070][T20157] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3473'. [ 447.639337][ T5875] IPVS: starting estimator thread 0... [ 447.683381][T20178] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 447.728973][T20177] IPVS: using max 32 ests per chain, 76800 per kthread [ 447.837652][T20185] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3480'. [ 447.906237][T20181] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3481'. [ 448.146047][T20204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3486'. [ 448.386628][T20209] syzkaller0: entered allmulticast mode [ 448.979674][T20233] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 448.990235][T20229] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3497'. [ 450.074281][T20269] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3505'. [ 450.143110][T20269] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3505'. [ 450.472664][ T1169] tipc: Subscription rejected, illegal request [ 452.858334][T20293] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 452.977767][T20300] : renamed from veth0_to_bond [ 453.053203][ T5877] ovs-s!: left promiscuous mode [ 453.114008][T20306] netlink: 'syz.4.3518': attribute type 1 has an invalid length. [ 453.131604][T20300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3518'. [ 453.184509][ T5877] D†'|o: left promiscuous mode [ 453.240680][ T5877] : left promiscuous mode [ 453.330288][T20289] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3513'. [ 453.375604][ T5877] tipc: Disabling bearer [ 453.401916][ T5877] tipc: Disabling bearer [ 453.402040][ T5877] tipc: Left network mode [ 453.665893][T20320] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 453.703629][T20320] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3522'. [ 453.716367][T20320] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3522'. [ 454.061798][T20327] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3522'. [ 454.071183][T20327] netlink: 'syz.0.3522': attribute type 13 has an invalid length. [ 454.924045][T20363] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3530'. [ 454.942728][T20363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3530'. [ 454.942779][T20363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3530'. [ 454.969079][T20363] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3530'. [ 455.020430][T20359] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3529'. [ 455.025120][T20359] syzkaller1: entered promiscuous mode [ 455.025142][T20359] syzkaller1: entered allmulticast mode [ 455.234781][T20366] netlink: 'syz.3.3532': attribute type 4 has an invalid length. [ 455.261336][T20366] netlink: 'syz.3.3532': attribute type 4 has an invalid length. [ 455.567146][ T5877] hsr_slave_0: left promiscuous mode [ 455.573131][ T5877] hsr_slave_1: left promiscuous mode [ 456.446904][ T1129] smbdirect: ib_dev[syz2] removed [ 456.882359][T20431] sctp: [Deprecated]: syz.1.3543 (pid 20431) Use of int in maxseg socket option. [ 456.882359][T20431] Use struct sctp_assoc_value instead [ 457.296042][ T5877] IPVS: stop unused estimator thread 0... [ 457.509759][T20463] netlink: 'syz.4.3552': attribute type 4 has an invalid length. [ 457.535188][T20463] netlink: 'syz.4.3552': attribute type 4 has an invalid length. [ 458.083111][T20484] veth1_to_team: entered promiscuous mode [ 458.108991][T20484] veth1_to_team: left promiscuous mode [ 458.365484][T20490] __nla_validate_parse: 6 callbacks suppressed [ 458.365563][T20490] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3562'. [ 458.560623][T20509] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3568'. [ 458.643622][T20509] veth3: entered allmulticast mode [ 458.651882][T20516] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3568'. [ 458.674426][T20515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3570'. [ 458.674477][T20515] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3570'. [ 458.674799][T20515] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3570'. [ 458.702789][T20516] veth5: entered allmulticast mode [ 459.066707][T20547] veth0_to_bridge: entered promiscuous mode [ 459.068122][T20547] macvtap1: entered allmulticast mode [ 459.068142][T20547] veth0_to_bridge: entered allmulticast mode [ 459.089976][T20547] veth0_to_bridge: left allmulticast mode [ 459.090013][T20547] veth0_to_bridge: left promiscuous mode [ 459.396073][T20559] syzkaller0: entered promiscuous mode [ 459.396118][T20559] syzkaller0: entered allmulticast mode [ 459.498008][T20562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3582'. [ 459.540704][T20564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3583'. [ 459.739357][T20536] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 459.957162][T20578] bond0: invalid NS target ff00:0:0:f9:: specified for addition [ 459.957210][T20578] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 459.986130][T20580] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 459.992701][T20580] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3586'. [ 459.992724][T20580] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3586'. [ 460.222821][T20596] FAULT_INJECTION: forcing a failure. [ 460.222821][T20596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.240510][T20596] CPU: 0 UID: 0 PID: 20596 Comm: syz.1.3593 Not tainted syzkaller #0 PREEMPT(full) [ 460.240536][T20596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 460.240556][T20596] Call Trace: [ 460.240567][T20596] [ 460.240576][T20596] dump_stack_lvl+0xe8/0x150 [ 460.240608][T20596] should_fail_ex+0x410/0x560 [ 460.240642][T20596] _copy_from_user+0x2d/0xb0 [ 460.240663][T20596] ipv6_flowlabel_opt+0x153/0x2ae0 [ 460.240684][T20596] ? register_lock_class+0x31/0x2e0 [ 460.240706][T20596] ? __lock_acquire+0x6df/0x2e50 [ 460.240726][T20596] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 460.240763][T20596] ? do_raw_spin_lock+0x12b/0x2f0 [ 460.240788][T20596] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 460.240814][T20596] ? do_ipv6_setsockopt+0x8cc/0x2960 [ 460.240835][T20596] ? __local_bh_enable_ip+0xd6/0x140 [ 460.240862][T20596] do_ipv6_setsockopt+0x16de/0x2960 [ 460.240889][T20596] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 460.240904][T20596] ? aa_inet_opt_perm+0xae4/0xcf0 [ 460.240923][T20596] ? get_pid_task+0x20/0x1f0 [ 460.240949][T20596] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 460.240985][T20596] ? ksys_write+0x1e6/0x270 [ 460.241018][T20596] ? lock_acquire+0x115/0x350 [ 460.241049][T20596] ? aa_sock_opt_perm+0xe1/0x1e0 [ 460.241072][T20596] ipv6_setsockopt+0x59/0x170 [ 460.241090][T20596] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 460.241118][T20596] do_sock_setsockopt+0x17c/0x1b0 [ 460.241141][T20596] __x64_sys_setsockopt+0x13d/0x1b0 [ 460.241164][T20596] do_syscall_64+0x166/0x520 [ 460.241188][T20596] ? trace_irq_disable+0x3b/0x140 [ 460.241205][T20596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.241224][T20596] ? clear_bhb_loop+0x70/0xc0 [ 460.241246][T20596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.241263][T20596] RIP: 0033:0x7f692bd9e159 [ 460.241281][T20596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.241297][T20596] RSP: 002b:00007f692cbd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 460.241318][T20596] RAX: ffffffffffffffda RBX: 00007f692c025fa0 RCX: 00007f692bd9e159 [ 460.241330][T20596] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 460.241340][T20596] RBP: 00007f692cbd5090 R08: 0000000000000020 R09: 0000000000000000 [ 460.241351][T20596] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 460.241363][T20596] R13: 00007f692c026038 R14: 00007f692c025fa0 R15: 00007ffd80a2db68 [ 460.241393][T20596] [ 461.038416][T20614] syzkaller0: entered promiscuous mode [ 461.038455][T20614] syzkaller0: entered allmulticast mode [ 461.364781][T20643] netlink: 'syz.2.3602': attribute type 9 has an invalid length. [ 461.644926][T20662] netlink: 'syz.2.3609': attribute type 3 has an invalid length. [ 461.803091][T20665] bond2: entered allmulticast mode [ 461.827900][T20669] macvlan0: entered promiscuous mode [ 461.827944][T20669] macvlan0: entered allmulticast mode [ 461.829052][T20669] bond2: (slave macvlan0): Opening slave failed [ 462.164248][T20687] netlink: 'syz.1.3616': attribute type 1 has an invalid length. [ 462.255093][T20689] netlink: 'syz.3.3614': attribute type 2 has an invalid length. [ 462.281782][T20687] bond3: entered promiscuous mode [ 462.289203][T20687] 8021q: adding VLAN 0 to HW filter on device bond3 [ 462.401388][T20691] 8021q: adding VLAN 0 to HW filter on device bond3 [ 462.401811][T20691] bond3: (slave ipip0): The slave device specified does not support setting the MAC address [ 462.401829][T20691] bond3: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 462.448560][T20691] bond3: (slave ipip0): making interface the new active one [ 462.448597][T20691] ipip0: entered promiscuous mode [ 462.456084][T20691] bond3: (slave ipip0): Enslaving as an active interface with an up link [ 462.512300][T20709] syzkaller0: entered promiscuous mode [ 462.519789][T20709] syzkaller0: entered allmulticast mode [ 463.004813][T20731] netlink: 'syz.2.3629': attribute type 2 has an invalid length. [ 463.470126][T20755] x_tables: duplicate underflow at hook 3 [ 463.517432][T20759] veth0_macvtap: left promiscuous mode [ 463.525330][T20759] macvtap0: entered promiscuous mode [ 464.136346][T20799] __nla_validate_parse: 11 callbacks suppressed [ 464.136394][T20799] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3641'. [ 464.136424][T20799] netlink: 'syz.0.3641': attribute type 8 has an invalid length. [ 464.136438][T20799] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3641'. [ 464.194023][T20806] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3641'. [ 464.204868][T20806] netlink: 'syz.0.3641': attribute type 8 has an invalid length. [ 464.212985][T20806] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3641'. [ 464.281367][T20803] ovs-s: entered promiscuous mode [ 464.749600][T20835] pim6reg: entered allmulticast mode [ 464.831192][T20843] netlink: 'syz.2.3655': attribute type 2 has an invalid length. [ 464.890304][T20845] netlink: 'syz.1.3656': attribute type 1 has an invalid length. [ 465.380206][T20880] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3665'. [ 465.531583][T20891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3667'. [ 465.541864][ T1129] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.543733][T20891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3667'. [ 465.561620][ T1129] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.586807][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 465.587895][ T38] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.588397][ T38] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.728977][T20907] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3670'. [ 468.209728][T20864] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 468.413492][T20931] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 468.431682][T20930] netlink: 'syz.1.3676': attribute type 3 has an invalid length. [ 468.469185][T20934] netlink: 'syz.2.3675': attribute type 11 has an invalid length. [ 468.553699][T20937] syzkaller1: entered promiscuous mode [ 468.553744][T20937] syzkaller1: entered allmulticast mode [ 468.650172][T20953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3680'. [ 468.666762][T20953] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3680'. [ 468.719677][T20958] netlink: 'syz.4.3682': attribute type 4 has an invalid length. [ 469.423066][ T52] block nbd0: Receive control failed (result -1) [ 469.482643][T20988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3684'. [ 469.741601][T20995] TCP: TCP_TX_DELAY enabled [ 469.970455][T21011] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3692'. [ 470.014928][T21011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3692'. [ 470.412350][T21037] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 470.612524][T21045] netlink: 'syz.4.3704': attribute type 4 has an invalid length. [ 470.805856][T21051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3705'. [ 470.858992][ T138] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.859061][ T138] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.859090][ T138] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.859114][ T138] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.953010][T21062] netlink: 'syz.2.3709': attribute type 1 has an invalid length. [ 471.044872][T21062] 8021q: adding VLAN 0 to HW filter on device bond3 [ 471.183187][T21066] bond3: (slave veth3): Enslaving as an active interface with a down link [ 471.199764][T21080] netlink: 'syz.2.3709': attribute type 10 has an invalid length. [ 471.199811][T21080] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3709'. [ 471.258486][T21062] bond3: (slave dummy0): making interface the new active one [ 471.266143][T21062] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 471.298058][T21080] dummy0: entered promiscuous mode [ 471.329970][T21080] bond3: (slave dummy0): Releasing active interface [ 471.456427][T21095] FAULT_INJECTION: forcing a failure. [ 471.456427][T21095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.457185][T21095] CPU: 1 UID: 0 PID: 21095 Comm: syz.1.3714 Not tainted syzkaller #0 PREEMPT(full) [ 471.457211][T21095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 471.457220][T21095] Call Trace: [ 471.457227][T21095] [ 471.457233][T21095] dump_stack_lvl+0xe8/0x150 [ 471.457273][T21095] should_fail_ex+0x410/0x560 [ 471.457305][T21095] _copy_from_user+0x2d/0xb0 [ 471.457325][T21095] ___sys_recvmsg+0x173/0x5a0 [ 471.457351][T21095] ? __pfx____sys_recvmsg+0x10/0x10 [ 471.457375][T21095] ? lock_acquire+0x115/0x350 [ 471.457408][T21095] ? __fget_files+0x3a2/0x420 [ 471.457441][T21095] do_recvmmsg+0x31a/0x7f0 [ 471.457468][T21095] ? __pfx_do_recvmmsg+0x10/0x10 [ 471.457499][T21095] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 471.457527][T21095] ? __fget_files+0x3a2/0x420 [ 471.457558][T21095] __x64_sys_recvmmsg+0x198/0x250 [ 471.457581][T21095] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 471.457612][T21095] do_syscall_64+0x166/0x520 [ 471.457636][T21095] ? trace_irq_disable+0x3b/0x140 [ 471.457652][T21095] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.457671][T21095] ? clear_bhb_loop+0x70/0xc0 [ 471.457692][T21095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.457710][T21095] RIP: 0033:0x7f692bd9e159 [ 471.457726][T21095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.457741][T21095] RSP: 002b:00007f692cbb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 471.457760][T21095] RAX: ffffffffffffffda RBX: 00007f692c026090 RCX: 00007f692bd9e159 [ 471.457772][T21095] RDX: 000000000400030f RSI: 0000200000005c80 RDI: 0000000000000009 [ 471.457783][T21095] RBP: 00007f692cbb4090 R08: 0000000000000000 R09: 0000000000000000 [ 471.457797][T21095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.457807][T21095] R13: 00007f692c026128 R14: 00007f692c026090 R15: 00007ffd80a2db68 [ 471.457837][T21095] [ 471.473709][T21095] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3714'. [ 471.600669][T21099] bridge_slave_0: left allmulticast mode [ 471.600694][T21099] bridge_slave_0: left promiscuous mode [ 471.600892][T21099] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.644637][T21099] bridge_slave_1: left allmulticast mode [ 471.644660][T21099] bridge_slave_1: left promiscuous mode [ 471.644889][T21099] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.710489][T21099] bond0: (slave bond_slave_0): Releasing backup interface [ 471.730603][T21099] bond0: (slave bond_slave_1): Releasing backup interface [ 471.757449][T21099] team0: Port device team_slave_0 removed [ 471.762228][T21102] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3718'. [ 471.781453][T21099] team0: Port device team_slave_1 removed [ 471.788439][T21099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.796027][T21099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.805744][T21099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.813445][T21099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.824884][T21099] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 471.861881][T21105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3718'. [ 471.881629][T21069] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 472.128394][T21113] vlan3: entered promiscuous mode [ 472.130413][T21115] xt_TCPMSS: Only works on TCP SYN packets [ 472.139914][T21113] hsr0: entered promiscuous mode [ 472.145768][T21113] vlan3: entered allmulticast mode [ 472.153252][T21113] hsr0: entered allmulticast mode [ 472.160735][T21113] hsr_slave_0: entered allmulticast mode [ 472.160786][T21113] hsr_slave_1: entered allmulticast mode [ 472.192274][T21113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3720'. [ 472.205675][T21113] hsr_slave_0: left promiscuous mode [ 472.216060][T21113] hsr_slave_1: left promiscuous mode [ 472.341213][T21118] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3722'. [ 472.697210][ T5875] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.698918][ T38] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.698957][ T38] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.698988][ T38] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.403666][T21163] bond4 (unregistering): Released all slaves [ 473.757656][T21179] netlink: 'syz.3.3738': attribute type 9 has an invalid length. [ 473.757700][T21179] netlink: 'syz.3.3738': attribute type 5 has an invalid length. [ 474.031382][T21168] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 474.041172][T21168] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 474.041198][T21168] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 474.088688][T21191] netlink: 'syz.2.3743': attribute type 13 has an invalid length. [ 474.258965][T21195] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 475.035603][T21239] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 475.494803][T21246] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.495217][T21246] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.609009][T21246] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.621880][T21246] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.733912][ T6867] s`z1: Port: 1 Link DOWN [ 475.738494][ T1169] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.738524][ T1169] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.746708][ T1169] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.746740][ T1169] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.766636][ T38] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.766667][ T38] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.766705][ T38] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.766727][ T38] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.889569][T21266] __nla_validate_parse: 9 callbacks suppressed [ 475.889621][T21266] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3764'. [ 476.090638][T21277] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3765'. [ 476.243307][T21286] FAULT_INJECTION: forcing a failure. [ 476.243307][T21286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 476.243362][T21286] CPU: 1 UID: 0 PID: 21286 Comm: syz.1.3770 Not tainted syzkaller #0 PREEMPT(full) [ 476.243382][T21286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 476.243391][T21286] Call Trace: [ 476.243397][T21286] [ 476.243403][T21286] dump_stack_lvl+0xe8/0x150 [ 476.243429][T21286] should_fail_ex+0x410/0x560 [ 476.243459][T21286] _copy_from_user+0x2d/0xb0 [ 476.243480][T21286] ___sys_recvmsg+0x173/0x5a0 [ 476.243506][T21286] ? __pfx____sys_recvmsg+0x10/0x10 [ 476.243530][T21286] ? lock_acquire+0x115/0x350 [ 476.243575][T21286] do_recvmmsg+0x31a/0x7f0 [ 476.243602][T21286] ? __pfx_do_recvmmsg+0x10/0x10 [ 476.243633][T21286] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 476.243660][T21286] ? __fget_files+0x3a2/0x420 [ 476.243693][T21286] __x64_sys_recvmmsg+0x198/0x250 [ 476.243716][T21286] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 476.243747][T21286] do_syscall_64+0x166/0x520 [ 476.243772][T21286] ? trace_irq_disable+0x3b/0x140 [ 476.243789][T21286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.243808][T21286] ? clear_bhb_loop+0x70/0xc0 [ 476.243829][T21286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.243846][T21286] RIP: 0033:0x7f692bd9e159 [ 476.243863][T21286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.243878][T21286] RSP: 002b:00007f692cbd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 476.243897][T21286] RAX: ffffffffffffffda RBX: 00007f692c025fa0 RCX: 00007f692bd9e159 [ 476.243910][T21286] RDX: 000000000400030f RSI: 0000200000005c80 RDI: 0000000000000008 [ 476.243922][T21286] RBP: 00007f692cbd5090 R08: 0000000000000000 R09: 0000000000000000 [ 476.243933][T21286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.243943][T21286] R13: 00007f692c026038 R14: 00007f692c025fa0 R15: 00007ffd80a2db68 [ 476.243972][T21286] [ 476.252540][T21286] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3770'. [ 476.736064][T21311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3777'. [ 476.736236][T21311] bond0: option miimon: invalid value (18446744073675997440) [ 476.737443][T21311] bond0: option miimon: allowed values 0 - 2147483647 [ 476.925071][T21315] ip6gretap1: entered allmulticast mode [ 476.943445][T21319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3779'. [ 476.943595][T21319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.061466][T21319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.293806][T21325] wg2 speed is unknown, defaulting to 1000 [ 477.293911][T21325] wg2 speed is unknown, defaulting to 1000 [ 477.298071][T21325] wg2 speed is unknown, defaulting to 1000 [ 477.302889][T21325] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 477.302921][T21325] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 477.302955][T21325] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 477.340867][T21334] FAULT_INJECTION: forcing a failure. [ 477.340867][T21334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 477.340900][T21334] CPU: 0 UID: 0 PID: 21334 Comm: syz.3.3783 Not tainted syzkaller #0 PREEMPT(full) [ 477.340919][T21334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 477.340930][T21334] Call Trace: [ 477.340938][T21334] [ 477.340945][T21334] dump_stack_lvl+0xe8/0x150 [ 477.340975][T21334] should_fail_ex+0x410/0x560 [ 477.341007][T21334] _copy_from_user+0x2d/0xb0 [ 477.341027][T21334] ___sys_recvmsg+0x173/0x5a0 [ 477.341052][T21334] ? __pfx____sys_recvmsg+0x10/0x10 [ 477.341077][T21334] ? lock_acquire+0x115/0x350 [ 477.341123][T21334] do_recvmmsg+0x31a/0x7f0 [ 477.341150][T21334] ? __pfx_do_recvmmsg+0x10/0x10 [ 477.341189][T21334] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 477.341216][T21334] ? __fget_files+0x3a2/0x420 [ 477.341249][T21334] __x64_sys_recvmmsg+0x198/0x250 [ 477.341272][T21334] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 477.341304][T21334] do_syscall_64+0x166/0x520 [ 477.341328][T21334] ? trace_irq_disable+0x3b/0x140 [ 477.341348][T21334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.341365][T21334] ? clear_bhb_loop+0x70/0xc0 [ 477.341386][T21334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.341403][T21334] RIP: 0033:0x7f251c39e159 [ 477.341420][T21334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.341436][T21334] RSP: 002b:00007f251d2d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 477.341455][T21334] RAX: ffffffffffffffda RBX: 00007f251c625fa0 RCX: 00007f251c39e159 [ 477.341468][T21334] RDX: 000000000400030f RSI: 0000200000005c80 RDI: 0000000000000008 [ 477.341480][T21334] RBP: 00007f251d2d3090 R08: 0000000000000000 R09: 0000000000000000 [ 477.341491][T21334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.341502][T21334] R13: 00007f251c626038 R14: 00007f251c625fa0 R15: 00007fffc8f80318 [ 477.341532][T21334] [ 477.346304][T21334] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3783'. [ 477.391518][T21325] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 477.447667][T21335] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3782'. [ 477.515838][T21310] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 477.822358][T21350] netlink: 'syz.1.3784': attribute type 7 has an invalid length. [ 477.842901][T21350] netlink: 'syz.1.3784': attribute type 7 has an invalid length. [ 477.846409][T21325] wg2 speed is unknown, defaulting to 1000 [ 477.997075][T21325] wg2 speed is unknown, defaulting to 1000 [ 478.017179][T21325] wg2 speed is unknown, defaulting to 1000 [ 478.033341][T21342] sctp: [Deprecated]: syz.3.3785 (pid 21342) Use of int in max_burst socket option. [ 478.033341][T21342] Use struct sctp_assoc_value instead [ 478.035901][T21325] wg2 speed is unknown, defaulting to 1000 [ 478.054389][T21325] wg2 speed is unknown, defaulting to 1000 [ 478.116140][T21325] wg2 speed is unknown, defaulting to 1000 [ 478.125160][T21325] wg2 speed is unknown, defaulting to 1000 [ 478.135065][T21325] wg2 speed is unknown, defaulting to 1000 [ 478.598259][T21376] IPv6: addrconf: prefix option has invalid lifetime [ 478.706866][ T52] Bluetooth: hci3: command 0x0401 tx timeout [ 478.758802][T21382] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3793'. [ 479.127175][T21390] FAULT_INJECTION: forcing a failure. [ 479.127175][T21390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.141669][T21390] CPU: 1 UID: 0 PID: 21390 Comm: syz.4.3795 Not tainted syzkaller #0 PREEMPT(full) [ 479.141696][T21390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 479.141707][T21390] Call Trace: [ 479.141715][T21390] [ 479.141723][T21390] dump_stack_lvl+0xe8/0x150 [ 479.141757][T21390] should_fail_ex+0x410/0x560 [ 479.141790][T21390] _copy_from_user+0x2d/0xb0 [ 479.141811][T21390] ___sys_recvmsg+0x173/0x5a0 [ 479.141839][T21390] ? __pfx____sys_recvmsg+0x10/0x10 [ 479.141865][T21390] ? lock_acquire+0x115/0x350 [ 479.141913][T21390] do_recvmmsg+0x31a/0x7f0 [ 479.141941][T21390] ? __pfx_do_recvmmsg+0x10/0x10 [ 479.141974][T21390] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 479.142003][T21390] ? __fget_files+0x3a2/0x420 [ 479.142044][T21390] __x64_sys_recvmmsg+0x198/0x250 [ 479.142067][T21390] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 479.142099][T21390] do_syscall_64+0x166/0x520 [ 479.142125][T21390] ? trace_irq_disable+0x3b/0x140 [ 479.142143][T21390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.142162][T21390] ? clear_bhb_loop+0x70/0xc0 [ 479.142184][T21390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.142203][T21390] RIP: 0033:0x7fc06b99e159 [ 479.142221][T21390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.142236][T21390] RSP: 002b:00007fc06c792028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 479.142256][T21390] RAX: ffffffffffffffda RBX: 00007fc06bc25fa0 RCX: 00007fc06b99e159 [ 479.142269][T21390] RDX: 000000000400030f RSI: 0000200000005c80 RDI: 0000000000000008 [ 479.142281][T21390] RBP: 00007fc06c792090 R08: 0000000000000000 R09: 0000000000000000 [ 479.142293][T21390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.142304][T21390] R13: 00007fc06bc26038 R14: 00007fc06bc25fa0 R15: 00007fffc3e27be8 [ 479.142336][T21390] [ 479.211907][T21390] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3795'. [ 480.276220][T21428] dvmrp0: entered allmulticast mode [ 480.292670][T21428] dvmrp0: left allmulticast mode [ 480.292793][T21428] pimreg: left allmulticast mode [ 480.681904][T21448] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3813'. [ 480.793930][T21450] syzkaller1: entered promiscuous mode [ 480.793969][T21450] syzkaller1: entered allmulticast mode [ 481.038241][T21468] netlink: 'syz.1.3818': attribute type 1 has an invalid length. [ 481.093409][T21468] veth3: entered allmulticast mode [ 481.106053][T21468] bond4: (slave veth3): Enslaving as an active interface with a down link [ 481.130585][T21468] bond2: (slave veth0_to_bond): Releasing backup interface [ 481.130635][T21468] bond2: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 481.171724][T21468] bond4: (slave veth0_to_bond): making interface the new active one [ 481.221863][T21468] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 481.495891][T21498] __nla_validate_parse: 1 callbacks suppressed [ 481.496161][T21498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3825'. [ 481.985283][T21517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3831'. [ 482.146010][T21525] netlink: 'syz.3.3832': attribute type 1 has an invalid length. [ 482.287075][T21525] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3832'. [ 482.315181][T21531] veth3: entered allmulticast mode [ 482.340715][T21525] macvlan3: entered promiscuous mode [ 482.340781][T21525] macvlan3: entered allmulticast mode [ 482.364810][T21525] bond2: entered promiscuous mode [ 482.373118][T21525] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 482.409298][T21525] bond2: left promiscuous mode [ 482.430910][T21540] tipc: Invalid UDP bearer configuration [ 482.430951][T21540] tipc: Enabling of bearer rejected, failed to enable media [ 482.926748][T21575] netlink: 'syz.4.3846': attribute type 1 has an invalid length. [ 483.100357][T21588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3849'. [ 483.313375][T21599] x_tables: duplicate underflow at hook 3 [ 483.335824][T21602] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 483.787710][T21627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3864'. [ 484.106019][T21641] FAULT_INJECTION: forcing a failure. [ 484.106019][T21641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 484.106069][T21641] CPU: 0 UID: 0 PID: 21641 Comm: syz.1.3868 Not tainted syzkaller #0 PREEMPT(full) [ 484.106091][T21641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 484.106100][T21641] Call Trace: [ 484.106108][T21641] [ 484.106116][T21641] dump_stack_lvl+0xe8/0x150 [ 484.106146][T21641] should_fail_ex+0x410/0x560 [ 484.106178][T21641] _copy_from_user+0x2d/0xb0 [ 484.106199][T21641] ___sys_recvmsg+0x173/0x5a0 [ 484.106225][T21641] ? __pfx____sys_recvmsg+0x10/0x10 [ 484.106249][T21641] ? lock_acquire+0x115/0x350 [ 484.106298][T21641] do_recvmmsg+0x31a/0x7f0 [ 484.106324][T21641] ? __pfx_do_recvmmsg+0x10/0x10 [ 484.106356][T21641] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 484.106383][T21641] ? __fget_files+0x3a2/0x420 [ 484.106415][T21641] __x64_sys_recvmmsg+0x198/0x250 [ 484.106436][T21641] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 484.106459][T21641] do_syscall_64+0x166/0x520 [ 484.106479][T21641] ? trace_irq_disable+0x3b/0x140 [ 484.106494][T21641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.106511][T21641] ? clear_bhb_loop+0x70/0xc0 [ 484.106532][T21641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.106550][T21641] RIP: 0033:0x7f692bd9e159 [ 484.106567][T21641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.106583][T21641] RSP: 002b:00007f692cbd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 484.106610][T21641] RAX: ffffffffffffffda RBX: 00007f692c025fa0 RCX: 00007f692bd9e159 [ 484.106623][T21641] RDX: 000000000400030f RSI: 0000200000005c80 RDI: 0000000000000008 [ 484.106633][T21641] RBP: 00007f692cbd5090 R08: 0000000000000000 R09: 0000000000000000 [ 484.106642][T21641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 484.106651][T21641] R13: 00007f692c026038 R14: 00007f692c025fa0 R15: 00007ffd80a2db68 [ 484.106678][T21641] [ 484.112904][T21641] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3868'. [ 484.506862][T21662] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3874'. [ 484.701806][T21671] netlink: 'syz.3.3876': attribute type 16 has an invalid length. [ 484.701846][T21671] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.3876'. [ 484.890024][T21684] tipc: Enabled bearer , priority 0 [ 484.898486][T21684] mac80211_hwsim hwsim48 syzkaller0: entered promiscuous mode [ 484.898537][T21684] mac80211_hwsim hwsim48 syzkaller0: entered allmulticast mode [ 484.919934][T21684] tipc: Resetting bearer [ 485.166265][T21695] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 485.258208][T21684] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 485.375554][T21684] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 485.879112][T21717] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3889'. [ 485.927917][T13981] tipc: Node number set to 3921144799 [ 485.986063][T21730] netlink: 'syz.2.3891': attribute type 11 has an invalid length. [ 486.031664][T21732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3892'. [ 486.304255][T21748] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 487.439325][T21808] wg2 speed is unknown, defaulting to 1000 [ 488.147280][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 493.266754][T18175] Bluetooth: hci3: command 0x0401 tx timeout [ 500.487726][T21864] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 500.628653][T21872] __nla_validate_parse: 3 callbacks suppressed [ 500.628700][T21872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3918'. [ 500.650071][T21885] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3920'. [ 500.761743][T21875] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3919'. [ 500.999685][T21876] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3920'. [ 501.585535][T21924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3933'. [ 501.716846][T21930] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3936'. [ 501.798167][T21931] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3936'. [ 502.109902][T21948] netlink: 204 bytes leftover after parsing attributes in process `syz.4.3943'. [ 502.138346][T21948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3943'. [ 502.163649][T21948] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3943'. [ 502.363622][ T5871] tipc: Subscription rejected, illegal request [ 502.367034][T21959] 8021q: adding VLAN 0 to HW filter on device bond2 [ 502.367627][T21959] bridge0: port 3(bond2) entered blocking state [ 502.370211][T21959] bridge0: port 3(bond2) entered disabled state [ 502.370388][T21959] bond2: entered allmulticast mode [ 502.374375][T21959] bond2: entered promiscuous mode [ 502.417643][T21966] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 503.507039][T18175] Bluetooth: hci4: command 0x0406 tx timeout [ 504.234242][T22045] 8021q: VLANs not supported on ip_vti0 [ 506.023559][T22143] __nla_validate_parse: 74 callbacks suppressed [ 506.023611][T22143] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3997'. [ 506.124324][T22149] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 506.159878][T22153] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4001'. [ 506.169712][T22145] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3998'. [ 506.340411][T22164] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4006'. [ 506.435364][T22167] netlink: 'syz.0.4005': attribute type 1 has an invalid length. [ 506.625903][T22182] netlink: 'syz.3.4009': attribute type 1 has an invalid length. [ 506.904429][T22195] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 507.115280][T22205] netlink: 'syz.2.4015': attribute type 21 has an invalid length. [ 507.211431][T22213] IPVS: set_ctl: invalid protocol: 92 172.20.20.63:20000 [ 507.264387][T22214] syzkaller0: entered promiscuous mode [ 507.264414][T22214] syzkaller0: entered allmulticast mode [ 507.288040][T22214] tipc: Enabled bearer , priority 0 [ 507.347979][T22220] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4020'. [ 507.432952][T22214] tipc: Resetting bearer [ 507.507765][T22214] tipc: Disabling bearer [ 507.793784][T22241] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 507.994146][T22253] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4027'. [ 508.363310][T22269] Unknown options in mask 6 [ 508.380400][T22270] FAULT_INJECTION: forcing a failure. [ 508.380400][T22270] name failslab, interval 1, probability 0, space 0, times 0 [ 508.380458][T22270] CPU: 0 UID: 0 PID: 22270 Comm: syz.4.4031 Not tainted syzkaller #0 PREEMPT(full) [ 508.380489][T22270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 508.380503][T22270] Call Trace: [ 508.380513][T22270] [ 508.380519][T22270] dump_stack_lvl+0xe8/0x150 [ 508.380548][T22270] should_fail_ex+0x410/0x560 [ 508.380581][T22270] should_failslab+0xa8/0x100 [ 508.380604][T22270] __kmalloc_cache_noprof+0xa3/0x600 [ 508.380633][T22270] ? genl_start+0x1c9/0x6d0 [ 508.380654][T22270] ? genl_start+0x1c9/0x6d0 [ 508.380683][T22270] genl_start+0x1c9/0x6d0 [ 508.380709][T22270] __netlink_dump_start+0x442/0x7b0 [ 508.380734][T22270] genl_family_rcv_msg_dumpit+0x213/0x310 [ 508.380765][T22270] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 508.380789][T22270] ? genl_get_cmd+0x4d6/0x960 [ 508.380819][T22270] ? __pfx_genl_start+0x10/0x10 [ 508.380843][T22270] ? __pfx_genl_dumpit+0x10/0x10 [ 508.380866][T22270] ? __pfx_genl_done+0x10/0x10 [ 508.380893][T22270] ? __lock_acquire+0x6df/0x2e50 [ 508.380915][T22270] ? __lock_acquire+0x6df/0x2e50 [ 508.380938][T22270] genl_rcv_msg+0x5e1/0x7a0 [ 508.380970][T22270] ? __pfx_genl_rcv_msg+0x10/0x10 [ 508.380994][T22270] ? __pfx_ctrl_dumpfamily+0x10/0x10 [ 508.381040][T22270] netlink_rcv_skb+0x226/0x4a0 [ 508.381061][T22270] ? __pfx_genl_rcv_msg+0x10/0x10 [ 508.381088][T22270] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 508.381129][T22270] ? down_read+0x2be/0x330 [ 508.381150][T22270] genl_rcv+0x28/0x40 [ 508.381173][T22270] netlink_unicast+0x7bd/0x940 [ 508.381203][T22270] netlink_sendmsg+0x813/0xb40 [ 508.381233][T22270] ? __pfx_netlink_sendmsg+0x10/0x10 [ 508.381263][T22270] ? apparmor_socket_sendmsg+0x98/0x360 [ 508.381291][T22270] ? __pfx_netlink_sendmsg+0x10/0x10 [ 508.381311][T22270] sock_sendmsg_nosec+0x13a/0x180 [ 508.381338][T22270] ____sys_sendmsg+0x54e/0x850 [ 508.381363][T22270] ? __pfx_____sys_sendmsg+0x10/0x10 [ 508.381391][T22270] ? import_iovec+0x73/0xa0 [ 508.381413][T22270] ___sys_sendmsg+0x2a5/0x360 [ 508.381431][T22270] ? __lock_acquire+0x6df/0x2e50 [ 508.381452][T22270] ? __pfx____sys_sendmsg+0x10/0x10 [ 508.381505][T22270] ? __fget_files+0x2a/0x420 [ 508.381526][T22270] ? __fget_files+0x3a2/0x420 [ 508.381558][T22270] __x64_sys_sendmsg+0x1b1/0x290 [ 508.381581][T22270] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 508.381620][T22270] do_syscall_64+0x166/0x520 [ 508.381644][T22270] ? trace_irq_disable+0x3b/0x140 [ 508.381661][T22270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.381680][T22270] ? clear_bhb_loop+0x70/0xc0 [ 508.381702][T22270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.381720][T22270] RIP: 0033:0x7fc06b99e159 [ 508.381737][T22270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.381753][T22270] RSP: 002b:00007fc069bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 508.381771][T22270] RAX: ffffffffffffffda RBX: 00007fc06bc26090 RCX: 00007fc06b99e159 [ 508.381783][T22270] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 000000000000000a [ 508.381795][T22270] RBP: 00007fc069bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 508.381806][T22270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.381817][T22270] R13: 00007fc06bc26128 R14: 00007fc06bc26090 R15: 00007fffc3e27be8 [ 508.381847][T22270] [ 508.772636][T22273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4033'. [ 508.830377][T22275] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 508.856820][T22273] syzkaller1: entered allmulticast mode [ 508.894294][T22277] netlink: 'syz.2.4035': attribute type 1 has an invalid length. [ 509.036207][T22279] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 509.051307][T22279] bond5 (unregistering): Released all slaves [ 509.065957][T22287] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 509.183319][T22290] bridge2: entered promiscuous mode [ 509.221814][T22290] bond4: (slave bridge2): making interface the new active one [ 509.273560][T22290] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 509.292320][T22301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4040'. [ 509.305580][T22301] block nbd5: Unsupported socket: should be TCP or UNIX. [ 509.319269][T22302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4040'. [ 509.328534][T22302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4040'. [ 510.069696][T22348] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 510.128046][T22352] gretap2: entered allmulticast mode [ 510.154380][T22354] FAULT_INJECTION: forcing a failure. [ 510.154380][T22354] name failslab, interval 1, probability 0, space 0, times 0 [ 510.154435][T22354] CPU: 0 UID: 0 PID: 22354 Comm: syz.4.4051 Not tainted syzkaller #0 PREEMPT(full) [ 510.154455][T22354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 510.154465][T22354] Call Trace: [ 510.154471][T22354] [ 510.154478][T22354] dump_stack_lvl+0xe8/0x150 [ 510.154504][T22354] should_fail_ex+0x410/0x560 [ 510.154533][T22354] ? __alloc_skb+0x1db/0x7a0 [ 510.154560][T22354] should_failslab+0xa8/0x100 [ 510.154585][T22354] ? __alloc_skb+0x1db/0x7a0 [ 510.154609][T22354] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 510.154635][T22354] ? __alloc_skb+0x18d/0x7a0 [ 510.154661][T22354] ? __alloc_skb+0x1db/0x7a0 [ 510.154692][T22354] __alloc_skb+0x1db/0x7a0 [ 510.154722][T22354] netlink_dump+0x1e7/0xee0 [ 510.154756][T22354] ? __pfx_netlink_dump+0x10/0x10 [ 510.154789][T22354] ? genl_start+0x497/0x6d0 [ 510.154820][T22354] __netlink_dump_start+0x589/0x7b0 [ 510.154848][T22354] genl_family_rcv_msg_dumpit+0x213/0x310 [ 510.154879][T22354] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 510.154904][T22354] ? genl_get_cmd+0x4d6/0x960 [ 510.154934][T22354] ? __pfx_genl_start+0x10/0x10 [ 510.154957][T22354] ? __pfx_genl_dumpit+0x10/0x10 [ 510.154980][T22354] ? __pfx_genl_done+0x10/0x10 [ 510.155007][T22354] ? __lock_acquire+0x6df/0x2e50 [ 510.155027][T22354] ? __lock_acquire+0x6df/0x2e50 [ 510.155051][T22354] genl_rcv_msg+0x5e1/0x7a0 [ 510.155083][T22354] ? __pfx_genl_rcv_msg+0x10/0x10 [ 510.155109][T22354] ? __pfx_ctrl_dumpfamily+0x10/0x10 [ 510.155147][T22354] netlink_rcv_skb+0x226/0x4a0 [ 510.155170][T22354] ? __pfx_genl_rcv_msg+0x10/0x10 [ 510.155198][T22354] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 510.155234][T22354] ? down_read+0x2be/0x330 [ 510.155256][T22354] genl_rcv+0x28/0x40 [ 510.155280][T22354] netlink_unicast+0x7bd/0x940 [ 510.155316][T22354] netlink_sendmsg+0x813/0xb40 [ 510.155347][T22354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.155377][T22354] ? apparmor_socket_sendmsg+0x98/0x360 [ 510.155407][T22354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.155427][T22354] sock_sendmsg_nosec+0x13a/0x180 [ 510.155453][T22354] ____sys_sendmsg+0x54e/0x850 [ 510.155478][T22354] ? __pfx_____sys_sendmsg+0x10/0x10 [ 510.155507][T22354] ? import_iovec+0x73/0xa0 [ 510.155530][T22354] ___sys_sendmsg+0x2a5/0x360 [ 510.155548][T22354] ? __lock_acquire+0x6df/0x2e50 [ 510.155570][T22354] ? __pfx____sys_sendmsg+0x10/0x10 [ 510.155625][T22354] ? __fget_files+0x2a/0x420 [ 510.155647][T22354] ? __fget_files+0x3a2/0x420 [ 510.155680][T22354] __x64_sys_sendmsg+0x1b1/0x290 [ 510.155703][T22354] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 510.155744][T22354] do_syscall_64+0x166/0x520 [ 510.155768][T22354] ? trace_irq_disable+0x3b/0x140 [ 510.155785][T22354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.155803][T22354] ? clear_bhb_loop+0x70/0xc0 [ 510.155826][T22354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.155843][T22354] RIP: 0033:0x7fc06b99e159 [ 510.155861][T22354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.155877][T22354] RSP: 002b:00007fc069bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.155897][T22354] RAX: ffffffffffffffda RBX: 00007fc06bc26090 RCX: 00007fc06b99e159 [ 510.155911][T22354] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 000000000000000a [ 510.155923][T22354] RBP: 00007fc069bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 510.155935][T22354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.155945][T22354] R13: 00007fc06bc26128 R14: 00007fc06bc26090 R15: 00007fffc3e27be8 [ 510.155976][T22354] [ 510.446296][T22358] tipc: Enabled bearer , priority 0 [ 510.475870][ T52] Bluetooth: hci4: SCO packet too small [ 510.493976][T22358] tipc: Disabling bearer [ 511.040649][T22384] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 511.310386][T22403] siw: device registration error -23 [ 511.539934][T22416] __nla_validate_parse: 13 callbacks suppressed [ 511.539973][T22416] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4072'. [ 511.602512][T22418] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4073'. [ 511.689904][T22421] netlink: 'syz.0.4074': attribute type 3 has an invalid length. [ 511.690694][T22421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4074'. [ 512.052024][T22431] FAULT_INJECTION: forcing a failure. [ 512.052024][T22431] name failslab, interval 1, probability 0, space 0, times 0 [ 512.052081][T22431] CPU: 1 UID: 0 PID: 22431 Comm: syz.1.4077 Not tainted syzkaller #0 PREEMPT(full) [ 512.052101][T22431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 512.052110][T22431] Call Trace: [ 512.052116][T22431] [ 512.052123][T22431] dump_stack_lvl+0xe8/0x150 [ 512.052149][T22431] should_fail_ex+0x410/0x560 [ 512.052181][T22431] should_failslab+0xa8/0x100 [ 512.052203][T22431] ? skb_clone+0x212/0x3a0 [ 512.052223][T22431] kmem_cache_alloc_noprof+0xa1/0x600 [ 512.052251][T22431] ? skb_clone+0x212/0x3a0 [ 512.052275][T22431] skb_clone+0x212/0x3a0 [ 512.052299][T22431] __netlink_deliver_tap+0x413/0x860 [ 512.052333][T22431] ? netlink_deliver_tap+0x2e/0x1b0 [ 512.052355][T22431] netlink_deliver_tap+0x19c/0x1b0 [ 512.052378][T22431] netlink_dump+0x95b/0xee0 [ 512.052411][T22431] ? __pfx_netlink_dump+0x10/0x10 [ 512.052444][T22431] ? genl_start+0x497/0x6d0 [ 512.052476][T22431] __netlink_dump_start+0x589/0x7b0 [ 512.052503][T22431] genl_family_rcv_msg_dumpit+0x213/0x310 [ 512.052534][T22431] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 512.052558][T22431] ? genl_get_cmd+0x4d6/0x960 [ 512.052591][T22431] ? __pfx_genl_start+0x10/0x10 [ 512.052615][T22431] ? __pfx_genl_dumpit+0x10/0x10 [ 512.052638][T22431] ? __pfx_genl_done+0x10/0x10 [ 512.052664][T22431] ? __dev_queue_xmit+0x29b/0x3820 [ 512.052695][T22431] genl_rcv_msg+0x5e1/0x7a0 [ 512.052727][T22431] ? __pfx_genl_rcv_msg+0x10/0x10 [ 512.052752][T22431] ? __pfx_ctrl_dumpfamily+0x10/0x10 [ 512.052777][T22431] ? __pfx_ref_tracker_free+0x10/0x10 [ 512.052811][T22431] netlink_rcv_skb+0x226/0x4a0 [ 512.052833][T22431] ? __pfx_genl_rcv_msg+0x10/0x10 [ 512.052861][T22431] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 512.052896][T22431] ? down_read+0x2be/0x330 [ 512.052918][T22431] genl_rcv+0x28/0x40 [ 512.052941][T22431] netlink_unicast+0x7bd/0x940 [ 512.052972][T22431] netlink_sendmsg+0x813/0xb40 [ 512.053009][T22431] ? __pfx_netlink_sendmsg+0x10/0x10 [ 512.053039][T22431] ? apparmor_socket_sendmsg+0x98/0x360 [ 512.053068][T22431] ? __pfx_netlink_sendmsg+0x10/0x10 [ 512.053088][T22431] sock_sendmsg_nosec+0x13a/0x180 [ 512.053115][T22431] ____sys_sendmsg+0x54e/0x850 [ 512.053140][T22431] ? __pfx_____sys_sendmsg+0x10/0x10 [ 512.053169][T22431] ? import_iovec+0x73/0xa0 [ 512.053192][T22431] ___sys_sendmsg+0x2a5/0x360 [ 512.053209][T22431] ? __lock_acquire+0x6df/0x2e50 [ 512.053235][T22431] ? __pfx____sys_sendmsg+0x10/0x10 [ 512.053290][T22431] ? __fget_files+0x2a/0x420 [ 512.053312][T22431] ? __fget_files+0x3a2/0x420 [ 512.053345][T22431] __x64_sys_sendmsg+0x1b1/0x290 [ 512.053368][T22431] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 512.053408][T22431] do_syscall_64+0x166/0x520 [ 512.053434][T22431] ? trace_irq_disable+0x3b/0x140 [ 512.053452][T22431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.053471][T22431] ? clear_bhb_loop+0x70/0xc0 [ 512.053493][T22431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.053511][T22431] RIP: 0033:0x7f692bd9e159 [ 512.053529][T22431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.053545][T22431] RSP: 002b:00007f692cbb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 512.053565][T22431] RAX: ffffffffffffffda RBX: 00007f692c026090 RCX: 00007f692bd9e159 [ 512.053579][T22431] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 000000000000000a [ 512.053591][T22431] RBP: 00007f692cbb4090 R08: 0000000000000000 R09: 0000000000000000 [ 512.053602][T22431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.053613][T22431] R13: 00007f692c026128 R14: 00007f692c026090 R15: 00007ffd80a2db68 [ 512.053644][T22431] [ 512.134191][T22434] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 512.184065][T22436] nbd: must specify at least one socket [ 512.604640][T22454] netlink: 'syz.4.4086': attribute type 1 has an invalid length. [ 512.676208][T22454] 8021q: adding VLAN 0 to HW filter on device bond3 [ 512.717263][T22459] bond3: (slave gretap2): Enslaving as a backup interface with an up link [ 512.735752][T22454] bond3 (unregistering): (slave gretap2): Releasing backup interface [ 512.755155][T22454] bond3 (unregistering): Released all slaves [ 512.891530][T22471] netlink: 'syz.1.4090': attribute type 4 has an invalid length. [ 512.891567][T22471] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4090'. [ 512.914960][T22474] netlink: 'syz.1.4090': attribute type 4 has an invalid length. [ 512.915000][T22474] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4090'. [ 512.928356][T22471] syzkaller1: entered promiscuous mode [ 512.928386][T22471] syzkaller1: entered allmulticast mode [ 512.938069][T22461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4088'. [ 513.017319][T22461] vlan1: entered promiscuous mode [ 513.022583][T22461] 0ªî{X¹¦: entered promiscuous mode [ 513.105131][T22481] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 513.431522][T22500] syzkaller0: entered promiscuous mode [ 513.431575][T22500] syzkaller0: entered allmulticast mode [ 513.433283][T22504] TC_ACT_REPEAT abuse ? [ 513.451256][T22501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 513.470798][T22500] netlink: 'syz.2.4101': attribute type 29 has an invalid length. [ 513.922986][T22524] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 517.194633][T22559] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4115'. [ 517.221718][T22553] syzkaller0: entered promiscuous mode [ 517.221765][T22553] syzkaller0: entered allmulticast mode [ 517.227540][T22558] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4115'. [ 517.227563][T22558] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4115'. [ 517.227578][T22558] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4115'. [ 517.227749][T22558] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4115'. [ 517.287525][T22553] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4114'. [ 517.346871][T22567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4116'. [ 517.347596][T22567] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4116'. [ 517.358159][T22567] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4116'. [ 517.358194][T22567] netlink: 'syz.1.4116': attribute type 8 has an invalid length. [ 517.358207][T22567] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4116'. [ 517.434347][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880564b4c00: rx timeout, send abort [ 517.612332][T22578] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 517.734199][T22582] 8021q: adding VLAN 0 to HW filter on device bond5 [ 517.746793][T22582] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 517.934407][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880564b4c00: abort rx timeout. Force session deactivation [ 517.938032][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880569cc400: rx timeout, send abort [ 518.119384][T22603] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 518.314373][T22616] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 518.438089][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880569cc400: abort rx timeout. Force session deactivation [ 518.674280][T22641] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 518.876533][T18175] Bluetooth: hci0: command 0x0406 tx timeout [ 519.012592][T22662] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 519.344069][T22687] openvswitch: netlink: Multiple metadata blocks provided [ 519.500589][T22688] 8021q: adding VLAN 0 to HW filter on device bond6 [ 519.519999][T22694] vlan3: entered promiscuous mode [ 519.520037][T22694] hsr0: entered promiscuous mode [ 519.520540][T22694] vlan3: entered allmulticast mode [ 519.522306][T22694] hsr0: entered allmulticast mode [ 519.522324][T22694] hsr_slave_0: entered allmulticast mode [ 519.522340][T22694] hsr_slave_1: entered allmulticast mode [ 519.573221][T22694] hsr_slave_0: left promiscuous mode [ 519.579338][T22694] hsr_slave_1: left promiscuous mode [ 520.084357][T22728] netlink: 'syz.1.4169': attribute type 11 has an invalid length. [ 520.109558][T22728] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 520.414781][T22737] netlink: 'syz.1.4171': attribute type 1 has an invalid length. [ 520.440697][T22737] 8021q: adding VLAN 0 to HW filter on device bond5 [ 520.472857][T22737] bond5: (slave veth5): Enslaving as an active interface with a down link [ 520.489836][T22737] bond5: (slave dummy0): making interface the new active one [ 520.499716][T22737] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 520.535201][T22737] netlink: 'syz.1.4171': attribute type 10 has an invalid length. [ 520.558500][T22737] dummy0: entered promiscuous mode [ 520.564593][T22737] bond5: (slave dummy0): Releasing active interface [ 520.750575][T22753] vlan3: entered promiscuous mode [ 520.755781][T22753] hsr0: entered promiscuous mode [ 520.755983][T22753] vlan3: entered allmulticast mode [ 520.755998][T22753] hsr0: entered allmulticast mode [ 520.756011][T22753] hsr_slave_0: entered allmulticast mode [ 520.756025][T22753] hsr_slave_1: entered allmulticast mode [ 520.764258][T22753] hsr_slave_0: left promiscuous mode [ 520.770713][T22753] hsr_slave_1: left promiscuous mode [ 521.284416][T22771] netlink: 'syz.3.4181': attribute type 4 has an invalid length. [ 521.701610][T22792] netlink: 'syz.1.4187': attribute type 1 has an invalid length. [ 521.701655][T22792] netlink: 'syz.1.4187': attribute type 2 has an invalid length. [ 522.193454][T22828] IPVS: set_ctl: invalid protocol: 115 127.0.0.1:20004 [ 522.260698][T22834] __nla_validate_parse: 14 callbacks suppressed [ 522.260750][T22834] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4196'. [ 522.288657][T22834] netlink: 'syz.4.4196': attribute type 1 has an invalid length. [ 522.288701][T22834] netlink: 200 bytes leftover after parsing attributes in process `syz.4.4196'. [ 522.371736][T22839] netlink: 'syz.4.4197': attribute type 1 has an invalid length. [ 522.431128][T22839] bond3: (slave geneve2): making interface the new active one [ 522.438824][T22839] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 522.467017][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 522.467079][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 522.467107][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 522.467131][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 522.546246][T22843] netlink: 'syz.1.4198': attribute type 1 has an invalid length. [ 522.554477][T22843] netlink: 'syz.1.4198': attribute type 1 has an invalid length. [ 522.575278][T22846] netlink: 'syz.2.4199': attribute type 13 has an invalid length. [ 522.713525][T22851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4202'. [ 522.747731][T22854] xt_hashlimit: size too large, truncated to 1048576 [ 522.902772][T22862] xt_hashlimit: size too large, truncated to 1048576 [ 523.718195][T22904] geneve2: entered allmulticast mode [ 524.025503][T22911] netlink: 2136 bytes leftover after parsing attributes in process `syz.1.4215'. [ 524.025831][T22912] syzkaller1: entered promiscuous mode [ 524.025848][T22912] syzkaller1: entered allmulticast mode [ 524.238194][T22916] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4216'. [ 524.551323][T22930] smbdirect: ib_dev[syz1] removed [ 524.612893][T22932] netlink: 'syz.2.4221': attribute type 1 has an invalid length. [ 524.653122][T22932] 8021q: adding VLAN 0 to HW filter on device bond7 [ 524.693621][T22932] macvlan0: entered promiscuous mode [ 524.699200][T22932] macvlan0: entered allmulticast mode [ 524.707563][T22932] bond7: entered promiscuous mode [ 524.713701][T22932] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 524.736786][T22932] bond7: left promiscuous mode [ 524.942468][T22942] netlink: 'syz.2.4223': attribute type 1 has an invalid length. [ 524.983494][T22942] 8021q: adding VLAN 0 to HW filter on device bond8 [ 525.011041][T22942] bond8: (slave gretap0): making interface the new active one [ 525.019168][T22942] bond8: (slave gretap0): Enslaving as an active interface with an up link [ 528.491504][T22977] wg2 speed is unknown, defaulting to 1000 [ 528.491584][T22977] wg2 speed is unknown, defaulting to 1000 [ 528.492286][T22977] wg2 speed is unknown, defaulting to 1000 [ 528.498007][T22977] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 528.498038][T22977] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 528.498073][T22977] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 528.535494][T22977] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 531.434725][T22977] wg2 speed is unknown, defaulting to 1000 [ 531.490555][T23007] netlink: 'syz.4.4238': attribute type 8 has an invalid length. [ 531.519895][T22977] wg2 speed is unknown, defaulting to 1000 [ 531.578919][T22977] wg2 speed is unknown, defaulting to 1000 [ 531.585781][T22977] wg2 speed is unknown, defaulting to 1000 [ 531.594744][T22977] wg2 speed is unknown, defaulting to 1000 [ 531.603504][T22977] wg2 speed is unknown, defaulting to 1000 [ 531.628187][T22977] wg2 speed is unknown, defaulting to 1000 [ 531.635540][T22977] wg2 speed is unknown, defaulting to 1000 [ 531.780526][T23021] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 532.237949][T23055] netlink: 'syz.2.4254': attribute type 1 has an invalid length. [ 532.237988][T23055] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4254'. [ 532.238022][T23055] netlink: 'syz.2.4254': attribute type 1 has an invalid length. [ 532.253749][T23055] netlink: 'syz.2.4254': attribute type 1 has an invalid length. [ 532.311172][T23055] bond9: entered promiscuous mode [ 532.311712][T23055] 8021q: adding VLAN 0 to HW filter on device bond9 [ 532.354895][T23062] 8021q: adding VLAN 0 to HW filter on device bond10 [ 532.364765][T23062] bond9: (slave bond10): making interface the new active one [ 532.364800][T23062] bond10: entered promiscuous mode [ 532.372583][T23062] bond9: (slave bond10): Enslaving as an active interface with an up link [ 532.698229][T23077] syzkaller0: entered promiscuous mode [ 532.698272][T23077] syzkaller0: entered allmulticast mode [ 532.719422][T23077] netlink: 'syz.2.4259': attribute type 13 has an invalid length. [ 532.740788][T23077] netlink: 'syz.2.4259': attribute type 13 has an invalid length. [ 532.836898][ T5871] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.846878][ T5871] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.855725][ T5871] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.869439][ T5871] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.130577][T23092] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4266'. [ 533.194205][T23095] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 533.329245][ T52] Bluetooth: hci1: link tx timeout [ 533.330103][ T52] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 533.814642][T23119] netlink: 'syz.0.4273': attribute type 13 has an invalid length. [ 534.087363][T23136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4277'. [ 534.097616][T23136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4277'. [ 534.102309][T23138] FAULT_INJECTION: forcing a failure. [ 534.102309][T23138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 534.102347][T23138] CPU: 0 UID: 0 PID: 23138 Comm: syz.0.4278 Not tainted syzkaller #0 PREEMPT(full) [ 534.102368][T23138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 534.102379][T23138] Call Trace: [ 534.102387][T23138] [ 534.102395][T23138] dump_stack_lvl+0xe8/0x150 [ 534.102426][T23138] should_fail_ex+0x410/0x560 [ 534.102458][T23138] _copy_to_user+0x31/0xb0 [ 534.102479][T23138] simple_read_from_buffer+0xe1/0x170 [ 534.102509][T23138] proc_fail_nth_read+0x1bb/0x230 [ 534.102538][T23138] ? common_file_perm+0x20e/0x2b0 [ 534.102559][T23138] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 534.102589][T23138] ? rw_verify_area+0x24a/0x4c0 [ 534.102612][T23138] ? tun_chr_write_iter+0x18a/0x200 [ 534.102637][T23138] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 534.102663][T23138] vfs_read+0x213/0xa80 [ 534.102692][T23138] ? __pfx___mutex_lock+0x10/0x10 [ 534.102719][T23138] ? __pfx_vfs_read+0x10/0x10 [ 534.102746][T23138] ? __fget_files+0x2a/0x420 [ 534.102774][T23138] ? __fget_files+0x3a2/0x420 [ 534.102795][T23138] ? __fget_files+0x2a/0x420 [ 534.102826][T23138] ksys_read+0x150/0x270 [ 534.102854][T23138] ? __pfx_ksys_read+0x10/0x10 [ 534.102890][T23138] do_syscall_64+0x166/0x520 [ 534.102914][T23138] ? trace_irq_disable+0x3b/0x140 [ 534.102932][T23138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.102951][T23138] ? clear_bhb_loop+0x70/0xc0 [ 534.102973][T23138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.102991][T23138] RIP: 0033:0x7f164095e98e [ 534.103009][T23138] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 534.103025][T23138] RSP: 002b:00007f1641866fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 534.103045][T23138] RAX: ffffffffffffffda RBX: 00007f16418676c0 RCX: 00007f164095e98e [ 534.103059][T23138] RDX: 000000000000000f RSI: 00007f16418670a0 RDI: 0000000000000003 [ 534.103071][T23138] RBP: 00007f1641867090 R08: 0000000000000000 R09: 0000000000000000 [ 534.103083][T23138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.103094][T23138] R13: 00007f1640c26038 R14: 00007f1640c25fa0 R15: 00007ffdf74d98a8 [ 534.103126][T23138] [ 534.106858][T23136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4277'. [ 534.283104][T23140] wg2 speed is unknown, defaulting to 1000 [ 534.292349][T23140] wg2 speed is unknown, defaulting to 1000 [ 534.379682][T23143] netlink: 67 bytes leftover after parsing attributes in process `syz.1.4280'. [ 534.800634][T23156] batadv_slave_1: entered promiscuous mode [ 534.802231][T23155] batadv_slave_1: left promiscuous mode [ 534.952157][T23160] tipc: Enabling of bearer rejected, failed to enable media [ 535.062485][T23160] bridge1: entered promiscuous mode [ 535.062574][T23160] bridge1: entered allmulticast mode [ 535.353752][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 535.391187][T23164] vcan0: entered promiscuous mode [ 535.397344][T23164] vcan0: entered allmulticast mode [ 535.595473][T23190] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 535.595500][T23190] pim6reg0: persist disabled [ 535.729909][T23195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4300'. [ 535.774610][T23195] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4300'. [ 536.143951][T23206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 536.209188][T23206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 536.277855][T23221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4309'. [ 536.384140][T23228] netlink: 200 bytes leftover after parsing attributes in process `syz.3.4310'. [ 536.421051][T23231] netlink: 'syz.4.4311': attribute type 3 has an invalid length. [ 536.734068][ T52] block nbd5: Receive control failed (result -32) [ 536.734068][T18175] block nbd5: Receive control failed (result -32) [ 536.911735][T23247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 536.998352][T23252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 537.296296][T23269] netlink: 'syz.2.4324': attribute type 10 has an invalid length. [ 537.311793][T23269] team0: Port device bond_slave_0 added [ 537.334181][T23271] netlink: 'syz.2.4324': attribute type 10 has an invalid length. [ 537.431165][T23280] __nla_validate_parse: 67 callbacks suppressed [ 537.439660][T23280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4327'. [ 537.451630][T23281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4327'. [ 537.474686][T23281] ip6gre1: entered promiscuous mode [ 537.480212][T23281] ip6gre1: entered allmulticast mode [ 537.787500][T23284] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4328'. [ 537.913910][T23303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4335'. [ 537.997400][T23310] syzkaller1: entered allmulticast mode [ 538.006100][T23311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4337'. [ 538.044365][T23311] team0: Port device team_slave_0 removed [ 538.070298][T23309] syzkaller1: entered promiscuous mode [ 538.070341][T23309] syzkaller1: entered allmulticast mode [ 538.154234][ T5874] tipc: Subscription rejected, illegal request [ 538.360341][T23329] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4340'. [ 538.639131][T23337] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 538.725982][T23339] netlink: 'syz.3.4346': attribute type 1 has an invalid length. [ 538.793111][T23339] 8021q: adding VLAN 0 to HW filter on device bond4 [ 539.383478][T23341] bond4: (slave veth5): Enslaving as an active interface with a down link [ 539.485031][T23355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4348'. [ 539.535301][T23342] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 539.547870][T23342] bond4: (slave batadv1): making interface the new active one [ 539.552202][T23342] batadv1: entered promiscuous mode [ 539.556393][T23342] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 539.754272][T23361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4350'. [ 539.778479][T23361] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4350'. [ 539.815959][T23361] bond5: entered allmulticast mode [ 539.816408][T23361] 8021q: adding VLAN 0 to HW filter on device bond5 [ 539.921576][T23368] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4354'. [ 540.234441][T23384] syzkaller0: entered promiscuous mode [ 540.234472][T23384] syzkaller0: entered allmulticast mode [ 540.931495][T23408] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 543.454467][T23395] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.455183][T23395] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.488058][T23395] dummy0: left promiscuous mode [ 543.570516][T23395] macvtap0: left promiscuous mode [ 543.591768][T23395] vlan2: left promiscuous mode [ 543.591801][T23395] macvlan0: left promiscuous mode [ 543.613244][T23395] bridge2: left promiscuous mode [ 543.623019][T23395] mac80211_hwsim hwsim48 syzkaller0: left promiscuous mode [ 543.623050][T23395] mac80211_hwsim hwsim48 syzkaller0: left allmulticast mode [ 543.630516][T23395] bond3: left promiscuous mode [ 543.630535][T23395] ipip0: left promiscuous mode [ 543.640440][T23395] ip6gretap1: left allmulticast mode [ 543.647933][T23395] veth3: left allmulticast mode [ 543.662469][T23395] geneve2: left allmulticast mode [ 543.831981][T18175] Bluetooth: hci3: unexpected event 0x0f length: 124 > 4 [ 543.832889][T18175] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 543.863105][T23412] vxcan2: entered allmulticast mode [ 543.928175][ T38] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.928270][ T38] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.928299][ T38] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.928328][ T38] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.937622][T23425] __nla_validate_parse: 2 callbacks suppressed [ 543.937639][T23425] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4365'. [ 544.000555][T23431] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4368'. [ 544.053048][T23432] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4368'. [ 544.115208][T23439] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4369'. [ 544.251326][T23436] gre1: entered promiscuous mode [ 544.251370][T23436] gre1: entered allmulticast mode [ 544.284570][T23431] netlink: 'syz.3.4368': attribute type 10 has an invalid length. [ 544.284608][T23431] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4368'. [ 544.641711][T23468] netlink: 'syz.3.4382': attribute type 1 has an invalid length. [ 544.650845][T23470] netlink: 'syz.3.4382': attribute type 1 has an invalid length. [ 544.792310][T23484] netlink: 'syz.3.4385': attribute type 2 has an invalid length. [ 544.885567][T23488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.894682][T23488] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.931183][T23489] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4386'. [ 545.028660][T23488] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 545.089207][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.089300][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.096292][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.096384][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.150792][T23497] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4389'. [ 545.163980][T23497] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4389'. [ 545.177197][T23497] netlink: 'syz.3.4389': attribute type 21 has an invalid length. [ 545.193995][T23497] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4389'. [ 545.733077][T23536] netlink: 'syz.3.4398': attribute type 4 has an invalid length. [ 545.740937][T23537] netlink: 'syz.3.4398': attribute type 4 has an invalid length. [ 545.777129][T13984] wg2 speed is unknown, defaulting to 1000 [ 545.783838][T10941] wg2 speed is unknown, defaulting to 1000 [ 547.908706][T18175] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 547.908883][T18175] Bluetooth: hci3: Injecting HCI hardware error event [ 547.911304][ T52] Bluetooth: hci3: hardware error 0x00 [ 549.139050][T23585] netlink: 'syz.3.4410': attribute type 2 has an invalid length. [ 549.151259][T23585] : entered promiscuous mode [ 549.185511][T23587] syzkaller0: entered promiscuous mode [ 549.185560][T23587] syzkaller0: entered allmulticast mode [ 549.888034][T23573] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 550.028244][T23603] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4413'. [ 550.139751][T23609] nbd: must specify an index to disconnect [ 550.141135][T23609] nbd: must specify an index to disconnect [ 550.141262][T23609] nbd: must specify an index to disconnect [ 550.141383][T23609] nbd: must specify an index to disconnect [ 550.141510][T23609] nbd: must specify an index to disconnect [ 550.141624][T23609] nbd: must specify an index to disconnect [ 550.141744][T23609] nbd: must specify an index to disconnect [ 550.141859][T23609] nbd: must specify an index to disconnect [ 550.141975][T23609] nbd: must specify an index to disconnect [ 550.145412][T23609] nbd: must specify an index to disconnect [ 550.145560][T23609] nbd: must specify an index to disconnect [ 550.147432][T23609] nbd: must specify an index to disconnect [ 550.148484][T23609] nbd: must specify an index to disconnect [ 550.148608][T23609] nbd: must specify an index to disconnect [ 550.148913][T23609] nbd: must specify an index to disconnect [ 550.149030][T23609] nbd: must specify an index to disconnect [ 550.149150][T23609] nbd: must specify an index to disconnect [ 550.149269][T23609] nbd: must specify an index to disconnect [ 550.149388][T23609] nbd: must specify an index to disconnect [ 550.149514][T23609] nbd: must specify an index to disconnect [ 550.149664][T23609] nbd: must specify an index to disconnect [ 550.156165][T23609] nbd: must specify an index to disconnect [ 550.160323][T23609] nbd: must specify an index to disconnect [ 550.160449][T23609] nbd: must specify an index to disconnect [ 550.160565][T23609] nbd: must specify an index to disconnect [ 550.161064][T23609] nbd: must specify an index to disconnect [ 550.161193][T23609] nbd: must specify an index to disconnect [ 550.161309][T23609] nbd: must specify an index to disconnect [ 550.161425][T23609] nbd: must specify an index to disconnect [ 550.161539][T23609] nbd: must specify an index to disconnect [ 550.161667][T23609] nbd: must specify an index to disconnect [ 550.163890][T23609] nbd: must specify an index to disconnect [ 550.164099][T23609] nbd: must specify an index to disconnect [ 550.442116][T23622] netlink: 'syz.0.4418': attribute type 1 has an invalid length. [ 550.682939][T23634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4422'. [ 550.695784][T23634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4422'. [ 550.729654][T23637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4421'. [ 550.729705][T23637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4421'. [ 550.796652][ T38] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0 [ 550.796718][ T38] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 550.796746][ T38] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 550.796771][ T38] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0 [ 550.840108][T23637] 8021q: adding VLAN 0 to HW filter on device bond3 [ 550.840781][T23637] bridge0: port 4(bond3) entered blocking state [ 550.840947][T23637] bridge0: port 4(bond3) entered disabled state [ 550.841079][T23637] bond3: entered allmulticast mode [ 550.843490][T23637] bond3: entered promiscuous mode [ 550.881949][T23637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4421'. [ 550.881997][T23637] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4421'. [ 550.883091][T23637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4421'. [ 550.883113][T23637] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4421'. [ 550.883357][T23637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4421'. [ 550.939887][ T5875] batadv1: left promiscuous mode [ 551.028881][ T52] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 551.085533][T23645] mac80211_hwsim hwsim48 syzkaller0: entered promiscuous mode [ 551.085590][T23645] mac80211_hwsim hwsim48 syzkaller0: entered allmulticast mode [ 551.120882][T23652] netlink: 'syz.0.4426': attribute type 1 has an invalid length. [ 551.244222][T23652] bond4: option xmit_hash_policy: invalid value (10) [ 551.269270][T23652] bond4 (unregistering): Released all slaves [ 551.526826][T23678] netlink: 'syz.4.4432': attribute type 10 has an invalid length. [ 551.667838][T23681] tipc: Enabling of bearer rejected, already enabled [ 552.446027][T23720] syzkaller0: entered promiscuous mode [ 552.446071][T23720] syzkaller0: entered allmulticast mode [ 553.960476][T23761] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 556.414510][T23768] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 556.633000][T23779] veth1_to_bond: entered allmulticast mode [ 556.663457][T23779] veth1_to_bond: entered promiscuous mode [ 556.672285][T23779] __nla_validate_parse: 6 callbacks suppressed [ 556.672332][T23779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4455'. [ 556.742012][T23779] veth1_to_bond (unregistering): left allmulticast mode [ 556.742081][T23779] veth1_to_bond (unregistering): left promiscuous mode [ 556.781544][T23779] bond0: (slave bond_slave_1): Releasing backup interface [ 557.198225][T23805] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 557.288336][T23804] syzkaller0: entered promiscuous mode [ 557.288381][T23804] syzkaller0: entered allmulticast mode [ 557.322452][T23810] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 557.340573][T23804] netlink: 'syz.3.4464': attribute type 13 has an invalid length. [ 557.448746][T23815] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 557.829484][T23804] netlink: 'syz.3.4464': attribute type 13 has an invalid length. [ 557.837276][T23816] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4466'. [ 557.933734][T23823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4471'. [ 558.438423][T23835] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 558.591678][T23838] netlink: 564 bytes leftover after parsing attributes in process `syz.0.4475'. [ 558.652413][T23846] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 558.739851][T23846] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 558.815562][T23846] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 558.928522][T23853] syzkaller0: entered promiscuous mode [ 558.928562][T23853] syzkaller0: entered allmulticast mode [ 558.949115][T23846] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8 [ 558.980674][T23865] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4479'. [ 559.112784][T23846] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input9 [ 559.193366][T23867] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 559.255536][T23846] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input10 [ 559.263478][T23871] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4481'. [ 559.290774][T23876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4481'. [ 559.389671][T23846] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input11 [ 559.736933][T23897] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 559.922601][T23911] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 560.358437][T23920] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4489'. [ 560.657306][T23926] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 561.749928][T23966] netlink: 'syz.4.4501': attribute type 2 has an invalid length. [ 562.195213][T23981] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20003 [ 562.357698][T23999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4511'. [ 562.541949][T24014] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4513'. [ 562.772519][T24018] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 562.865037][T24020] netlink: 'syz.4.4515': attribute type 10 has an invalid length. [ 563.031256][T24029] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4517'. [ 563.099794][T24029] veth0: entered promiscuous mode [ 563.101473][T24028] veth0: left promiscuous mode [ 563.245816][T24037] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 563.262039][T24037] bond4 (unregistering): Released all slaves [ 563.288359][T24046] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 563.461007][T24057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4526'. [ 563.580272][T24067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4528'. [ 563.580701][T24067] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4528'. [ 563.585095][T24067] IPVS: length: 24 != 189148777176 [ 563.593481][T24067] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4528'. [ 563.709923][T24059] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 563.756231][T24077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4532'. [ 563.848051][T24082] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 564.002690][T24091] netlink: 400 bytes leftover after parsing attributes in process `syz.1.4534'. [ 564.002740][T24091] netlink: 400 bytes leftover after parsing attributes in process `syz.1.4534'. [ 564.176277][T24095] tipc: Enabling of bearer rejected, already enabled [ 564.208327][T24092] syzkaller0: entered promiscuous mode [ 564.208380][T24092] syzkaller0: entered allmulticast mode [ 564.445875][T24107] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 564.474326][T24112] x_tables: duplicate underflow at hook 2 [ 564.818499][T24133] netlink: 'syz.1.4545': attribute type 1 has an invalid length. [ 565.183916][T24149] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20004 [ 565.186974][T24151] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20004 [ 565.233529][T24149] x_tables: duplicate underflow at hook 1 [ 565.390690][T24167] syzkaller0: entered promiscuous mode [ 565.396305][T24167] syzkaller0: entered allmulticast mode [ 565.411635][T24167] tipc: Started in network mode [ 565.411680][T24167] tipc: Node identity ceb4551dfe62, cluster identity 9 [ 565.411936][T24167] tipc: Enabled bearer , priority 0 [ 565.441824][T24167] tipc: Resetting bearer [ 566.171984][T24162] tipc: Resetting bearer [ 566.214177][T24162] tipc: Disabling bearer [ 566.415636][T24211] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 567.050482][T24242] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 567.493207][T24257] netlink: 'syz.4.4578': attribute type 12 has an invalid length. [ 567.502935][T24257] __nla_validate_parse: 8 callbacks suppressed [ 567.509822][T24257] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4578'. [ 567.510310][T24257] block nbd0: reconnected socket [ 567.582541][T24266] netlink: 'syz.0.4581': attribute type 2 has an invalid length. [ 567.583077][T24266] netlink: 'syz.0.4581': attribute type 2 has an invalid length. [ 567.647857][ T52] block nbd0: Receive control failed (result -32) [ 567.697726][T24269] netlink: 'syz.1.4580': attribute type 1 has an invalid length. [ 567.697752][T24269] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4580'. [ 567.697784][T24269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4580'. [ 567.845438][T24278] netlink: 'syz.0.4583': attribute type 1 has an invalid length. [ 567.970117][T24278] 8021q: adding VLAN 0 to HW filter on device bond4 [ 567.977313][T24288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4586'. [ 567.985162][T24273] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 568.030167][T24273] bridge4: entered promiscuous mode [ 568.040844][T24273] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 568.206296][T24294] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4588'. [ 568.475440][T24306] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4592'. [ 568.612085][T24312] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 568.704233][T24315] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 568.759318][T24317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4597'. [ 568.902420][T24324] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4601'. [ 569.469896][T24348] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4610'. [ 569.603112][T24354] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4612'. [ 569.785208][T24367] netlink: 'syz.3.4616': attribute type 1 has an invalid length. [ 570.218847][T24381] syzkaller0: entered promiscuous mode [ 570.218887][T24381] syzkaller0: entered allmulticast mode [ 570.295765][T24379] netlink: 'syz.4.4621': attribute type 13 has an invalid length. [ 570.295812][T24379] netlink: 'syz.4.4621': attribute type 17 has an invalid length. [ 570.499992][T24379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.502174][T24379] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.535871][T24379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.674505][T24379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 570.691681][T24379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 570.721038][T24379] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 570.721088][T24379] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 570.749594][T24379] veth1_vlan: left promiscuous mode [ 570.759417][T24379] veth0_vlan: left promiscuous mode [ 570.771486][T24379] veth0_vlan: entered promiscuous mode [ 570.818548][T24379] veth1_vlan: entered promiscuous mode [ 570.877435][T24379] veth1_macvtap: left promiscuous mode [ 570.889872][T24379] veth0_macvtap: left promiscuous mode [ 570.901692][T24379] veth0_macvtap: entered promiscuous mode [ 570.945850][T24379] veth1_macvtap: entered promiscuous mode [ 570.993117][T24379] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 571.011532][T24379] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 571.025581][T24379] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 571.046914][T24379] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 571.062985][T24379] mac80211_hwsim hwsim44 wlan0: left promiscuous mode [ 571.070228][T24379] mac80211_hwsim hwsim44 wlan0: left allmulticast mode [ 571.077611][T24379] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 571.128977][T24025] dummy0: entered promiscuous mode [ 571.146133][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.146227][ T5874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.159325][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.159423][ T5874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 571.254317][ T5732] wg2 speed is unknown, defaulting to 1000 [ 571.254420][ T5732] syz2: Port: 1 Link ACTIVE [ 571.271526][T24425] syzkaller0: entered promiscuous mode [ 571.271569][T24425] syzkaller0: entered allmulticast mode [ 571.318579][ T5871] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 571.500689][ T5871] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 571.502926][ T5874] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 571.586737][ T5871] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 572.169457][T24507] netlink: 'syz.4.4646': attribute type 1 has an invalid length. [ 572.244915][T24507] 8021q: adding VLAN 0 to HW filter on device bond4 [ 572.263947][T24512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 572.270944][T24512] bond4: (slave batadv0): making interface the new active one [ 572.272374][T24512] bond4: (slave batadv0): Enslaving as an active interface with an up link [ 572.354358][T24515] netlink: 'syz.2.4647': attribute type 1 has an invalid length. [ 572.462628][T24521] bond11: (slave geneve3): making interface the new active one [ 572.470948][T24521] bond11: (slave geneve3): Enslaving as an active interface with an up link [ 572.486584][ T12] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 572.486650][ T12] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 572.486677][ T12] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 572.486705][ T12] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 572.498538][T24515] 8021q: adding VLAN 0 to HW filter on device bond11 [ 572.710613][T24541] __nla_validate_parse: 11 callbacks suppressed [ 572.710664][T24541] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4652'. [ 572.759623][T24537] syzkaller0: entered promiscuous mode [ 572.765615][T24537] syzkaller0: entered allmulticast mode [ 573.010335][T24552] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4657'. [ 573.106354][T24555] ip_tables: iptables: counters copy to user failed while replacing table [ 573.206022][T24562] netlink: 'syz.3.4660': attribute type 11 has an invalid length. [ 573.284617][T24566] dummy0: entered promiscuous mode [ 573.448539][T24565] dummy0: left promiscuous mode [ 573.763660][T24585] syzkaller1: entered promiscuous mode [ 573.763700][T24585] syzkaller1: entered allmulticast mode [ 573.938166][T24571] wg2 speed is unknown, defaulting to 1000 [ 573.954101][T24571] wg2 speed is unknown, defaulting to 1000 [ 573.975914][T24593] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4670'. [ 574.087851][T24596] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 574.119261][T24596] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4671'. [ 574.225981][T24600] sctp: [Deprecated]: syz.1.4672 (pid 24600) Use of struct sctp_assoc_value in delayed_ack socket option. [ 574.225981][T24600] Use struct sctp_sack_info instead [ 574.375777][T24614] netlink: 564 bytes leftover after parsing attributes in process `syz.0.4674'. [ 574.376002][T24615] netlink: 564 bytes leftover after parsing attributes in process `syz.0.4674'. [ 574.504632][T24615] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input12 [ 574.819567][T24622] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4675'. [ 574.839293][T24610] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.839579][T24610] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.934087][T24610] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 574.954678][T24610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 574.996387][T24638] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 575.155034][T24610] erspan2: left allmulticast mode [ 575.164910][T24610] bond1: left promiscuous mode [ 575.170287][T24610] bond1: left allmulticast mode [ 575.246709][ T1169] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 575.246754][ T1169] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 575.246788][ T1169] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 575.246826][ T1169] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 575.246852][ T1169] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 575.246875][ T1169] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 575.246916][ T1169] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 575.246936][ T1169] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 575.246953][ T1169] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 575.246981][ T1169] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 575.247002][ T1169] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 575.247024][ T1169] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 575.250156][T24625] macvlan0: entered promiscuous mode [ 575.371399][T10941] wg2 speed is unknown, defaulting to 1000 [ 575.371436][T10941] syz2: Port: 1 Link DOWN [ 575.624944][T24645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4679'. [ 576.132298][T24667] No such timeout policy "syz1" [ 576.157599][T24667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4688'. [ 576.261359][T24670] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 576.501160][T24674] bond5: invalid ARP target 0.0.0.0 specified for addition [ 576.501200][T24674] bond5: option arp_ip_target: invalid value (0) [ 576.527513][T24674] bond5 (unregistering): Released all slaves [ 576.853665][T24690] bond5: peer notification delay (2686) is not a multiple of miimon (100), value rounded to 2600 ms [ 576.853700][T24690] bond5: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 576.874258][T24690] bond5 (unregistering): Released all slaves [ 576.913360][T24687] netlink: 'syz.0.4696': attribute type 3 has an invalid length. [ 577.089900][T24700] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4700'. [ 577.272658][T24712] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 577.520032][T24727] openvswitch: netlink: Message has 8 unknown bytes. [ 577.520088][T24727] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 577.783077][T24742] netlink: NAT attribute has 4 unknown bytes [ 577.783130][T24742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 577.783840][T24744] netlink: NAT attribute has 4 unknown bytes [ 577.783867][T24744] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 578.226663][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 578.491470][T24782] wg2 speed is unknown, defaulting to 1000 [ 578.509545][T24782] wg2 speed is unknown, defaulting to 1000 [ 578.614892][T24794] tipc: Enabling of bearer rejected, failed to enable media [ 578.797600][T24801] netlink: 'syz.4.4729': attribute type 2 has an invalid length. [ 578.797655][T24801] __nla_validate_parse: 3 callbacks suppressed [ 578.797667][T24801] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4729'. [ 579.119517][T24782] syzkaller0: entered promiscuous mode [ 579.125112][T24782] syzkaller0: entered allmulticast mode [ 580.267706][T24821] netlink: 'syz.3.4734': attribute type 1 has an invalid length. [ 580.432909][T24821] 8021q: adding VLAN 0 to HW filter on device bond6 [ 580.454547][T24823] macvlan3: entered promiscuous mode [ 580.454719][T24823] macvlan3: entered allmulticast mode [ 580.455352][T24823] bond6: entered allmulticast mode [ 580.455586][T24823] bond6: entered promiscuous mode [ 580.457027][T24823] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 580.463544][T24823] team0: Port device macvlan3 added [ 580.483909][T24820] bond6: (slave ip6gretap1): making interface the new active one [ 580.483930][T24820] ip6gretap1: entered promiscuous mode [ 580.484070][T24820] ip6gretap1: entered allmulticast mode [ 580.489018][T24820] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 580.536307][T24831] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 580.798891][T24848] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4742'. [ 581.152350][T24858] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 581.227951][T24862] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 581.291083][T24864] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4750'. [ 581.431309][T24876] netlink: 724 bytes leftover after parsing attributes in process `syz.3.4753'. [ 581.440844][T24876] openvswitch: netlink: Flow key attr not present in new flow. [ 581.514247][T24880] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 581.591721][T24884] tipc: Enabled bearer , priority 0 [ 581.631287][T24882] tipc: Disabling bearer [ 581.807018][T24894] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 582.620875][ T5877] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.620918][ T5877] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.628830][T24937] openvswitch: netlink: Missing valid actions attribute. [ 582.818138][T24949] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 583.059411][T24967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4773'. [ 583.193061][T24976] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 583.314268][T24968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 583.317064][T24968] 8021q: adding VLAN 0 to HW filter on device team0 [ 583.321980][T24968] dummy0: left promiscuous mode [ 583.325339][T24968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 583.380887][T24968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 583.394622][T24968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 583.468269][T24968] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 583.468315][T24968] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 583.477137][T24968] veth1_vlan: left promiscuous mode [ 583.480046][T24968] veth0_vlan: left promiscuous mode [ 583.485667][T24968] veth0_vlan: entered promiscuous mode [ 583.491817][T24968] veth1_vlan: entered promiscuous mode [ 583.513042][T24968] veth1_macvtap: left promiscuous mode [ 583.515998][T24968] veth0_macvtap: left promiscuous mode [ 583.520064][T24968] veth0_macvtap: entered promiscuous mode [ 583.530460][T24968] veth1_macvtap: entered promiscuous mode [ 583.563052][T24968] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 583.564453][T24968] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 583.579432][T24968] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 583.581054][T24968] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 583.595385][T24994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4777'. [ 583.675633][T24968] batman_adv: batadv0: Interface activated: gretap1 [ 583.711932][T24968] 8021q: adding VLAN 0 to HW filter on device bond1 [ 583.724750][T24968] 8021q: adding VLAN 0 to HW filter on device bond2 [ 583.730068][T24968] 8021q: adding VLAN 0 to HW filter on device bond3 [ 583.734844][T24968] 8021q: adding VLAN 0 to HW filter on device bond4 [ 583.747325][ T1153] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.747370][ T1153] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.747412][ T1153] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 583.748127][ T1169] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.748158][ T1169] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.748184][ T1169] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 583.748315][ T1169] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.748342][ T1169] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.748368][ T1169] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 583.748440][ T1169] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.748465][ T1169] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.748490][ T1169] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 583.757044][T13980] dummy0: entered promiscuous mode [ 583.766142][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.766247][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 583.781386][ T138] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.781486][ T138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.914405][T13984] wg2 speed is unknown, defaulting to 1000 [ 583.914466][T13984] syz2: Port: 1 Link ACTIVE [ 584.009341][ T5877] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 584.021228][ T5877] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 584.037209][T13981] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 584.076267][T10941] team_slave_0: entered promiscuous mode [ 584.076329][T10941] team_slave_1: entered promiscuous mode [ 584.113344][T25007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4782'. [ 584.410037][ T9] team_slave_0: left promiscuous mode [ 584.410083][ T9] team_slave_1: left promiscuous mode [ 584.590445][T25029] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 584.867710][T24025] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 585.031540][T13984] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 585.040366][T25048] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4795'. [ 585.041248][T25048] siw: device registration error -23 [ 585.236816][T25060] sctp: [Deprecated]: syz.2.4800 (pid 25060) Use of struct sctp_assoc_value in delayed_ack socket option. [ 585.236816][T25060] Use struct sctp_sack_info instead [ 585.371903][T25059] ip6gre2: entered allmulticast mode [ 585.634172][T25079] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4808'. [ 585.655236][T25082] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 586.020528][T25108] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4813'. [ 586.384479][T25120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4818'. [ 586.427227][T25120] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 586.578554][T25132] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4823'. [ 586.650051][T25136] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4825'. [ 586.650122][T25136] tipc: Enabling of bearer rejected, failed to enable media [ 586.729026][T25138] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 586.743159][T25144] wg2 speed is unknown, defaulting to 1000 [ 586.751066][T25144] wg2 speed is unknown, defaulting to 1000 [ 586.864626][T25154] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4829'. [ 587.129610][T25144] wg2 speed is unknown, defaulting to 1000 [ 587.131519][T25144] wg2 speed is unknown, defaulting to 1000 [ 587.216306][T25142] syzkaller1: entered promiscuous mode [ 587.224001][T25142] syzkaller1: entered allmulticast mode [ 587.479404][T25144] wg2 speed is unknown, defaulting to 1000 [ 587.491647][T25144] wg2 speed is unknown, defaulting to 1000 [ 587.697748][T25180] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4834'. [ 587.917727][T25187] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4836'. [ 587.986829][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 588.044483][T25192] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 588.619937][T25226] ipvlan3: entered allmulticast mode [ 588.619979][T25226] macvlan1: entered allmulticast mode [ 588.663936][T25231] netlink: 'syz.0.4848': attribute type 8 has an invalid length. [ 588.767431][T25233] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 589.179830][T25237] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.180310][T25237] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.741985][T25256] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 589.884807][T25261] __nla_validate_parse: 7 callbacks suppressed [ 589.884858][T25261] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4860'. [ 589.946996][T25271] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 590.375612][T25297] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4875'. [ 590.378096][T25297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4875'. [ 590.565344][T25304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4878'. [ 590.645460][T25309] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 590.734023][T25303] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.734980][T25303] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.147877][T25303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 591.168210][T25303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 591.429879][T25303] batman_adv: batadv0: Interface deactivated: gretap1 [ 591.663605][T25303] ip6gre2: left allmulticast mode [ 591.803839][ T9] wg2 speed is unknown, defaulting to 1000 [ 591.803878][ T9] syz2: Port: 1 Link DOWN [ 591.810757][ T1169] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 591.810791][ T1169] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.810814][ T1169] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 591.810935][ T1169] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 591.810959][ T1169] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.810982][ T1169] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 591.811048][ T1169] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 591.811071][ T1169] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.811093][ T1169] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 591.816766][ T5877] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 591.816796][ T5877] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.816819][ T5877] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 591.971238][T25333] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4885'. [ 592.025327][T25333] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4885'. [ 592.033610][T25333] netlink: 'syz.3.4885': attribute type 1 has an invalid length. [ 592.033630][T25333] netlink: 'syz.3.4885': attribute type 2 has an invalid length. [ 592.126644][ T5871] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.128659][ T138] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.128732][ T138] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.128764][ T138] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.307987][T25347] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4889'. [ 592.384954][T25353] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 592.483525][T25357] A link change request failed with some changes committed already. Interface 04±ÿ)”ëfl may have been left with an inconsistent configuration, please check. [ 592.540018][T25355] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4890'. [ 592.664069][ T5877] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.664108][ T5877] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.667958][T25361] openvswitch: netlink: Duplicate or invalid key (type 0). [ 592.672326][T25361] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4895'. [ 592.989541][T25381] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 593.344475][T25400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4906'. [ 593.375617][T25401] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 593.506535][T25405] xt_CT: You must specify a L4 protocol and not use inversions on it [ 593.774597][T25408] bond12 (unregistering): Released all slaves [ 594.213218][T25437] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 594.395838][T25446] syzkaller0: entered promiscuous mode [ 594.395866][T25446] syzkaller0: entered allmulticast mode [ 594.920477][T25475] xt_IDLETIMER: timeout value is zero [ 594.981383][T25475] xt_IDLETIMER: timeout value is zero [ 594.988814][T25475] xt_IDLETIMER: timeout value is zero [ 595.048325][T25475] xt_IDLETIMER: timeout value is zero [ 595.055765][T25475] xt_IDLETIMER: timeout value is zero [ 595.076057][T25475] xt_IDLETIMER: timeout value is zero [ 595.142658][T25475] xt_IDLETIMER: timeout value is zero [ 595.146962][T25474] bond5 (unregistering): Released all slaves [ 595.162098][T25475] xt_IDLETIMER: timeout value is zero [ 595.168352][T25475] xt_IDLETIMER: timeout value is zero [ 595.175356][T25475] xt_IDLETIMER: timeout value is zero [ 595.328536][T25487] __nla_validate_parse: 4 callbacks suppressed [ 595.328581][T25487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4933'. [ 595.430106][T25495] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4936'. [ 595.502007][T25493] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 595.780396][T24470] udevd[24470]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 595.998102][T25515] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4941'. [ 596.145166][T25531] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4948'. [ 596.175952][T25534] netlink: 'syz.2.4949': attribute type 5 has an invalid length. [ 596.188792][ T31] audit: type=1800 audit(1788990370.795:23): pid=25533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4947" name=B702 dev="tmpfs" ino=2463 res=0 errno=0 [ 596.327078][T25538] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 596.411287][T25547] netlink: 'syz.0.4955': attribute type 21 has an invalid length. [ 596.419811][T25547] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4955'. [ 596.434261][T25541] batadv0: entered promiscuous mode [ 596.434483][T25541] macvtap1: entered promiscuous mode [ 596.434662][T25541] macvtap1: entered allmulticast mode [ 596.434675][T25541] batadv0: entered allmulticast mode [ 596.440766][T25541] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 596.461150][T25541] batadv0: left allmulticast mode [ 596.461362][T25541] batadv0: left promiscuous mode [ 596.531008][T25547] netlink: 'syz.0.4955': attribute type 5 has an invalid length. [ 596.531035][T25547] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4955'. [ 596.729961][T25560] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4960'. [ 596.865465][T25566] bridge5: entered promiscuous mode [ 596.870157][T25573] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4964'. [ 596.886117][T25566] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 596.905967][T25567] bridge6: entered promiscuous mode [ 596.916814][T25567] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 597.148941][T25581] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4968'. [ 597.158365][T25581] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4968'. [ 597.158531][T25577] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 597.172374][T25575] ip_tables: iptables: counters copy to user failed while replacing table [ 597.620175][T25603] netlink: 'syz.3.4972': attribute type 4 has an invalid length. [ 597.968745][T25622] hsr0 speed is unknown, defaulting to 1000 [ 597.968821][T25622] hsr0 speed is unknown, defaulting to 1000 [ 597.972964][T25622] hsr0 speed is unknown, defaulting to 1000 [ 597.974662][T25622] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 597.974692][T25622] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 597.974728][T25622] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 598.097082][T25622] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 598.101410][T25625] Bluetooth: hci0: unsupported parameter 512 [ 598.101429][T25625] Bluetooth: hci0: invalid length 0, exp 2 for type 27 [ 598.213701][T25622] hsr0 speed is unknown, defaulting to 1000 [ 598.221912][T25622] hsr0 speed is unknown, defaulting to 1000 [ 598.231755][T25622] hsr0 speed is unknown, defaulting to 1000 [ 598.253656][T25622] hsr0 speed is unknown, defaulting to 1000 [ 598.263439][T25622] hsr0 speed is unknown, defaulting to 1000 [ 598.276240][T25622] hsr0 speed is unknown, defaulting to 1000 [ 598.289721][T25622] hsr0 speed is unknown, defaulting to 1000 [ 598.291873][T25622] hsr0 speed is unknown, defaulting to 1000 [ 598.364650][T25635] x_tables: duplicate underflow at hook 1 [ 598.491119][T25645] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 598.767337][T25655] wg2 speed is unknown, defaulting to 1000 [ 598.775357][T25655] wg2 speed is unknown, defaulting to 1000 [ 598.789783][T25655] hsr0 speed is unknown, defaulting to 1000 [ 599.210894][T25687] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 599.366190][T25696] batman_adv: batadv0: Adding interface: gretap4 [ 599.366236][T25696] batman_adv: batadv0: Interface activated: gretap4 [ 599.781323][ T5871] nci: nci_rx_work: unknown MT 0x6 [ 599.794066][T25707] netlink: 'syz.4.5004': attribute type 4 has an invalid length. [ 599.809943][T25707] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 599.851058][T25721] netlink: 'syz.1.5007': attribute type 5 has an invalid length. [ 599.851101][T25721] netlink: 'syz.1.5007': attribute type 9 has an invalid length. [ 600.138651][T25742] bridge0: port 1(veth1_to_bridge) entered blocking state [ 600.138826][T25742] bridge0: port 1(veth1_to_bridge) entered disabled state [ 600.139017][T25742] veth1_to_bridge: entered allmulticast mode [ 600.141114][T25742] veth1_to_bridge: entered promiscuous mode [ 600.142377][T25742] bridge0: port 1(veth1_to_bridge) entered blocking state [ 600.142583][T25742] bridge0: port 1(veth1_to_bridge) entered forwarding state [ 600.510369][T25747] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 602.461390][T25704] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 602.718793][T25775] erspan0: entered promiscuous mode [ 602.724329][T25775] __nla_validate_parse: 14 callbacks suppressed [ 602.731044][T25775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5019'. [ 602.878562][T25783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5024'. [ 603.026142][T25788] wg2 speed is unknown, defaulting to 1000 [ 603.035069][T25788] wg2 speed is unknown, defaulting to 1000 [ 603.041115][T25788] hsr0 speed is unknown, defaulting to 1000 [ 603.089330][T25791] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 603.214933][T25796] pim6reg: entered allmulticast mode [ 603.239954][T25796] pim6reg: left allmulticast mode [ 604.014223][T25820] syzkaller1: tun_chr_ioctl cmd 1074025681 [ 604.015398][T25819] syzkaller1: tun_chr_ioctl cmd 1074025681 [ 604.468258][T25843] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5043'. [ 604.505721][T25844] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 604.625538][T25852] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5046'. [ 604.734770][T25857] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5049'. [ 604.799937][T25863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5051'. [ 604.855261][T25869] pimreg: entered allmulticast mode [ 604.862253][T25869] pimreg: left allmulticast mode [ 604.868376][T25869] syz_tun: left allmulticast mode [ 604.943553][T25875] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5055'. [ 604.995925][T25876] syzkaller0: entered promiscuous mode [ 604.995969][T25876] syzkaller0: entered allmulticast mode [ 605.009268][T25876] tipc: Enabled bearer , priority 0 [ 605.021024][T25875] netlink: 'syz.4.5055': attribute type 5 has an invalid length. [ 605.021060][T25875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5055'. [ 605.054193][T25873] tipc: Resetting bearer [ 605.071381][T25880] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5056'. [ 605.099201][T25873] tipc: Disabling bearer [ 605.140716][T25883] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5059'. [ 605.364332][T25893] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 605.401614][T25896] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 605.622698][T25911] syzkaller0: entered promiscuous mode [ 605.622743][T25911] syzkaller0: entered allmulticast mode [ 605.640837][T25910] xt_TCPMSS: Only works on TCP SYN packets [ 605.650278][T25911] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 605.737972][T25910] bridge_slave_1: left allmulticast mode [ 605.738019][T25910] bridge_slave_1: left promiscuous mode [ 605.738240][T25910] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.770898][T25910] bridge_slave_0: left allmulticast mode [ 605.776999][T25910] bridge_slave_0: left promiscuous mode [ 605.783139][T25910] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.792064][T25913] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 605.845723][T25911] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 605.982095][T25923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.020598][T25927] erspan0: entered promiscuous mode [ 608.346381][T25899] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 608.519807][T25941] __nla_validate_parse: 8 callbacks suppressed [ 608.526958][T25941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5072'. [ 608.535986][T25941] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5072'. [ 608.536192][T25941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5072'. [ 608.536212][T25941] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5072'. [ 608.583088][T25946] netlink: 'syz.3.5074': attribute type 10 has an invalid length. [ 608.639276][T25947] pim6reg: entered allmulticast mode [ 608.645600][T25952] netlink: 'syz.1.5077': attribute type 10 has an invalid length. [ 608.657939][T25952] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 608.667023][T25952] team0: Port device netdevsim1 added [ 608.672675][T25947] pim6reg: left allmulticast mode [ 608.743587][T25957] tc_dump_action: action bad kind [ 608.862522][T25959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5079'. [ 608.896588][T25963] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 608.970902][T25968] netlink: 'syz.2.5081': attribute type 2 has an invalid length. [ 609.045159][T25968] : entered promiscuous mode [ 609.440893][T25983] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 609.663809][T25995] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5089'. [ 609.993727][T26011] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 611.819613][T25959] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 612.070896][T26026] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 612.125016][T26028] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5094'. [ 612.239549][T26035] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5098'. [ 612.239617][T26035] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5098'. [ 612.958211][T26057] nbd4: detected capacity change from 0 to 63 [ 612.970577][ T2383] [ 612.972937][ T2383] ====================================================== [ 612.979950][ T2383] WARNING: possible circular locking dependency detected [ 612.986986][ T2383] syzkaller #0 Not tainted [ 612.991402][ T2383] ------------------------------------------------------ [ 612.994634][T26061] block nbd4: NBD_DISCONNECT [ 612.994714][T26061] block nbd4: Disconnected due to user request. [ 612.994732][T26061] block nbd4: shutting down sockets [ 613.014393][ T2383] kworker/1:1H/2383 is trying to acquire lock: [ 613.020546][ T2383] ffff888032688868 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x373/0xff0 [ 613.029529][ T2383] [ 613.029529][ T2383] but task is already holding lock: [ 613.036898][ T2383] ffff88804c37e178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 613.045623][ T2383] [ 613.045623][ T2383] which lock already depends on the new lock. [ 613.045623][ T2383] [ 613.056021][ T2383] [ 613.056021][ T2383] the existing dependency chain (in reverse order) is: [ 613.065029][ T2383] [ 613.065029][ T2383] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 613.072243][ T2383] __mutex_lock+0x19d/0x1550 [ 613.077358][ T2383] nbd_queue_rq+0xc1/0xff0 [ 613.082290][ T2383] blk_mq_dispatch_rq_list+0x499/0x1990 [ 613.088349][ T2383] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 613.095180][ T2383] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 613.101664][ T2383] blk_mq_run_work_fn+0x16c/0x300 [ 613.107195][ T2383] process_scheduled_works+0xc3d/0x1630 [ 613.113251][ T2383] worker_thread+0xa47/0xfb0 [ 613.118351][ T2383] kthread+0x38b/0x480 [ 613.122923][ T2383] ret_from_fork+0x514/0xb70 [ 613.128017][ T2383] ret_from_fork_asm+0x1a/0x30 [ 613.133295][ T2383] [ 613.133295][ T2383] -> #5 (set->srcu){.+.+}-{0:0}: [ 613.140435][ T2383] __synchronize_srcu+0xc9/0x2f0 [ 613.145879][ T2383] elevator_switch+0x1e8/0x7b0 [ 613.151149][ T2383] elevator_change+0x2fa/0x480 [ 613.156426][ T2383] elevator_set_default+0x375/0x440 [ 613.162136][ T2383] blk_register_queue+0x3f3/0x4e0 [ 613.167664][ T2383] __add_disk+0x6cb/0xe30 [ 613.172502][ T2383] add_disk_fwnode+0x100/0x3a0 [ 613.177779][ T2383] nbd_dev_add+0x733/0xb60 [ 613.182703][ T2383] nbd_init+0x168/0x1f0 [ 613.187370][ T2383] do_one_initcall+0x250/0x870 [ 613.192648][ T2383] do_initcall_level+0x10a/0x1a0 [ 613.198093][ T2383] do_initcalls+0x59/0xa0 [ 613.202930][ T2383] kernel_init_freeable+0x29d/0x3e0 [ 613.208635][ T2383] kernel_init+0x22/0x1d0 [ 613.213472][ T2383] ret_from_fork+0x514/0xb70 [ 613.218568][ T2383] ret_from_fork_asm+0x1a/0x30 [ 613.223842][ T2383] [ 613.223842][ T2383] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 613.231646][ T2383] __mutex_lock+0x19d/0x1550 [ 613.236747][ T2383] elevator_change+0x1af/0x480 [ 613.242023][ T2383] elevator_set_none+0xb5/0x140 [ 613.247388][ T2383] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 613.253724][ T2383] nbd_start_device+0x189/0xb30 [ 613.259086][ T2383] nbd_genl_connect+0x167d/0x1cd0 [ 613.264625][ T2383] genl_family_rcv_msg_doit+0x233/0x340 [ 613.270681][ T2383] genl_rcv_msg+0x614/0x7a0 [ 613.275698][ T2383] netlink_rcv_skb+0x226/0x4a0 [ 613.280967][ T2383] genl_rcv+0x28/0x40 [ 613.285459][ T2383] netlink_unicast+0x7bd/0x940 [ 613.290726][ T2383] netlink_sendmsg+0x813/0xb40 [ 613.295996][ T2383] sock_sendmsg_nosec+0x13a/0x180 [ 613.301527][ T2383] ____sys_sendmsg+0x54e/0x850 [ 613.306796][ T2383] ___sys_sendmsg+0x2a5/0x360 [ 613.311976][ T2383] __x64_sys_sendmsg+0x1b1/0x290 [ 613.317417][ T2383] do_syscall_64+0x166/0x520 [ 613.322519][ T2383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.328917][ T2383] [ 613.328917][ T2383] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 613.337503][ T2383] blk_alloc_queue+0x544/0x690 [ 613.342786][ T2383] __blk_mq_alloc_disk+0x194/0x390 [ 613.348402][ T2383] nbd_dev_add+0x494/0xb60 [ 613.353333][ T2383] nbd_init+0x168/0x1f0 [ 613.357999][ T2383] do_one_initcall+0x250/0x870 [ 613.363367][ T2383] do_initcall_level+0x10a/0x1a0 [ 613.368824][ T2383] do_initcalls+0x59/0xa0 [ 613.373662][ T2383] kernel_init_freeable+0x29d/0x3e0 [ 613.379366][ T2383] kernel_init+0x22/0x1d0 [ 613.384211][ T2383] ret_from_fork+0x514/0xb70 [ 613.389311][ T2383] ret_from_fork_asm+0x1a/0x30 [ 613.394589][ T2383] [ 613.394589][ T2383] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 613.401783][ T2383] fs_reclaim_acquire+0x71/0x100 [ 613.407230][ T2383] __kmalloc_noprof+0xbc/0x720 [ 613.412504][ T2383] tls_sw_sendmsg+0x59b/0x2b50 [ 613.417775][ T2383] sock_sendmsg_nosec+0x90/0x180 [ 613.423219][ T2383] sock_sendmsg+0x1ca/0x2d0 [ 613.428231][ T2383] splice_to_socket+0xb5e/0x12a0 [ 613.433679][ T2383] direct_splice_actor+0x101/0x160 [ 613.439302][ T2383] splice_direct_to_actor+0x57b/0xcb0 [ 613.445184][ T2383] do_splice_direct+0x195/0x290 [ 613.450545][ T2383] do_sendfile+0x52e/0x7c0 [ 613.455465][ T2383] __se_sys_sendfile64+0x144/0x1a0 [ 613.461078][ T2383] do_syscall_64+0x166/0x520 [ 613.466180][ T2383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.472580][ T2383] [ 613.472580][ T2383] -> #1 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 613.480643][ T2383] lock_sock_nested+0x41/0x100 [ 613.485915][ T2383] inet_shutdown+0x6a/0x390 [ 613.490926][ T2383] nbd_mark_nsock_dead+0x2cb/0x550 [ 613.496548][ T2383] recv_work+0x1cee/0x1e10 [ 613.501478][ T2383] process_scheduled_works+0xc3d/0x1630 [ 613.507533][ T2383] worker_thread+0xa47/0xfb0 [ 613.512633][ T2383] kthread+0x38b/0x480 [ 613.517204][ T2383] ret_from_fork+0x514/0xb70 [ 613.522299][ T2383] ret_from_fork_asm+0x1a/0x30 [ 613.527573][ T2383] [ 613.527573][ T2383] -> #0 (&nsock->tx_lock){+.+.}-{4:4}: [ 613.535200][ T2383] __lock_acquire+0x15ff/0x2e50 [ 613.540556][ T2383] lock_acquire+0x115/0x350 [ 613.545563][ T2383] __mutex_lock+0x19d/0x1550 [ 613.550664][ T2383] nbd_queue_rq+0x373/0xff0 [ 613.555678][ T2383] blk_mq_dispatch_rq_list+0x499/0x1990 [ 613.561735][ T2383] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 613.568567][ T2383] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 613.575054][ T2383] blk_mq_run_work_fn+0x16c/0x300 [ 613.580585][ T2383] process_scheduled_works+0xc3d/0x1630 [ 613.586644][ T2383] worker_thread+0xa47/0xfb0 [ 613.591744][ T2383] kthread+0x38b/0x480 [ 613.596314][ T2383] ret_from_fork+0x514/0xb70 [ 613.601406][ T2383] ret_from_fork_asm+0x1a/0x30 [ 613.606681][ T2383] [ 613.606681][ T2383] other info that might help us debug this: [ 613.606681][ T2383] [ 613.616891][ T2383] Chain exists of: [ 613.616891][ T2383] &nsock->tx_lock --> set->srcu --> &cmd->lock [ 613.616891][ T2383] [ 613.628950][ T2383] Possible unsafe locking scenario: [ 613.628950][ T2383] [ 613.636378][ T2383] CPU0 CPU1 [ 613.641727][ T2383] ---- ---- [ 613.647073][ T2383] lock(&cmd->lock); [ 613.651041][ T2383] lock(set->srcu); [ 613.657438][ T2383] lock(&cmd->lock); [ 613.663924][ T2383] lock(&nsock->tx_lock); [ 613.668323][ T2383] [ 613.668323][ T2383] *** DEADLOCK *** [ 613.668323][ T2383] [ 613.676448][ T2383] locks held by kworker/1:1H/2383: 4, last CPU#1: [ 613.682846][ T2383] #0: ffff88801f2e3d40 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 613.693887][ T2383] #1: ffffc90007367c40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 613.706744][ T2383] #2: ffff88802af27418 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x144/0x300 [ 613.716125][ T2383] #3: ffff88804c37e178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 613.724989][ T2383] [ 613.724989][ T2383] stack backtrace: [ 613.730869][ T2383] CPU: 1 UID: 0 PID: 2383 Comm: kworker/1:1H Not tainted syzkaller #0 PREEMPT(full) [ 613.740311][ T2383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 613.750351][ T2383] Workqueue: kblockd blk_mq_run_work_fn [ 613.755888][ T2383] Call Trace: [ 613.759154][ T2383] [ 613.762079][ T2383] dump_stack_lvl+0xe8/0x150 [ 613.766664][ T2383] print_circular_bug+0x2e2/0x300 [ 613.771681][ T2383] check_noncircular+0x12f/0x150 [ 613.776609][ T2383] __lock_acquire+0x15ff/0x2e50 [ 613.781447][ T2383] ? irqentry_exit+0x218/0x910 [ 613.786203][ T2383] ? __pfx___schedule+0x10/0x10 [ 613.791044][ T2383] ? irqentry_exit+0x218/0x910 [ 613.795800][ T2383] lock_acquire+0x115/0x350 [ 613.800288][ T2383] ? nbd_queue_rq+0x373/0xff0 [ 613.804960][ T2383] __mutex_lock+0x19d/0x1550 [ 613.809545][ T2383] ? nbd_queue_rq+0x373/0xff0 [ 613.814210][ T2383] ? hrtimer_start_range_ns_common+0x83b/0xb90 [ 613.820356][ T2383] ? nbd_queue_rq+0x373/0xff0 [ 613.825023][ T2383] ? __pfx___mutex_lock+0x10/0x10 [ 613.830039][ T2383] ? rcu_is_watching+0x16/0xb0 [ 613.834797][ T2383] ? trace_sched_exit_tp+0x3a/0x130 [ 613.840016][ T2383] nbd_queue_rq+0x373/0xff0 [ 613.844517][ T2383] ? __pfx_nbd_queue_rq+0x10/0x10 [ 613.849534][ T2383] ? irqentry_exit+0x218/0x910 [ 613.854290][ T2383] ? __pfx___schedule+0x10/0x10 [ 613.859125][ T2383] ? irqentry_exit+0x218/0x910 [ 613.863885][ T2383] blk_mq_dispatch_rq_list+0x499/0x1990 [ 613.869429][ T2383] ? sbitmap_get+0x229/0x390 [ 613.874008][ T2383] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 613.879981][ T2383] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 613.885787][ T2383] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 613.892106][ T2383] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 613.898859][ T2383] ? lock_acquire+0x115/0x350 [ 613.903526][ T2383] ? process_scheduled_works+0x97a/0x1630 [ 613.909235][ T2383] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 613.915211][ T2383] ? blk_mq_run_work_fn+0x144/0x300 [ 613.920397][ T2383] blk_mq_run_work_fn+0x16c/0x300 [ 613.925409][ T2383] ? process_scheduled_works+0x97a/0x1630 [ 613.931115][ T2383] process_scheduled_works+0xc3d/0x1630 [ 613.936661][ T2383] ? __pfx_process_scheduled_works+0x10/0x10 [ 613.942736][ T2383] ? assign_work+0x3cf/0x5d0 [ 613.947327][ T2383] worker_thread+0xa47/0xfb0 [ 613.951912][ T2383] ? __kthread_parkme+0x71/0x1f0 [ 613.956843][ T2383] kthread+0x38b/0x480 [ 613.960900][ T2383] ? __pfx_worker_thread+0x10/0x10 [ 613.965998][ T2383] ? __pfx_kthread+0x10/0x10 [ 613.970573][ T2383] ret_from_fork+0x514/0xb70 [ 613.975150][ T2383] ? __pfx_ret_from_fork+0x10/0x10 [ 613.980250][ T2383] ? __switch_to+0xc89/0x1420 [ 613.984917][ T2383] ? __pfx_kthread+0x10/0x10 [ 613.989492][ T2383] ret_from_fork_asm+0x1a/0x30 [ 613.994254][ T2383] [ 614.020516][ T2383] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 614.020557][ T2383] Buffer I/O error on dev nbd4, logical block 0, async page read [ 614.036563][T26075] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 614.074529][T26080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5107'. [ 614.108044][ T2010] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 614.108086][ T2010] Buffer I/O error on dev nbd4, logical block 1, async page read [ 614.108104][ T2010] Buffer I/O error on dev nbd4, logical block 2, async page read [ 614.108119][ T2010] Buffer I/O error on dev nbd4, logical block 3, async page read [ 614.145728][ T2010] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 614.145761][ T2010] Buffer I/O error on dev nbd4, logical block 0, async page read [ 614.145779][ T2010] Buffer I/O error on dev nbd4, logical block 1, async page read [ 614.145791][ T2010] Buffer I/O error on dev nbd4, logical block 2, async page read [ 614.145802][ T2010] Buffer I/O error on dev nbd4, logical block 3, async page read [ 614.145908][ T2010] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 614.145929][ T2010] Buffer I/O error on dev nbd4, logical block 0, async page read [ 614.145942][ T2010] Buffer I/O error on dev nbd4, logical block 1, async page read [ 614.146034][ T2010] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 614.146136][ T2010] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 614.146252][ T2010] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 614.146363][ T2010] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 614.146629][ T2010] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 614.146681][T24470] ldm_validate_partition_table(): Disk read failed. [ 614.146755][ T2010] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 614.147278][T24470] Dev nbd4: unable to read RDB block 0 [ 614.148209][T24470] nbd4: unable to read partition table [ 614.172808][T24470] ldm_validate_partition_table(): Disk read failed. [ 614.173657][T24470] Dev nbd4: unable to read RDB block 0 [ 614.176528][T24470] nbd4: unable to read partition table [ 614.267161][T26057] netlink: 'syz.4.5103': attribute type 1 has an invalid length. [ 614.286626][T26057] 8021q: adding VLAN 0 to HW filter on device bond5 [ 614.326734][T26057] bond5: (slave veth7): Enslaving as an active interface with a down link