last executing test programs: 4.351545845s ago: executing program 0 (id=2617): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) syz_emit_ethernet(0x82, &(0x7f0000000280)={@link_local, @random="1704b45adbde", @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3, 0x9a}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa011100, 0x1000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast}, {@dev}, {@private}, {@empty}, {@private}]}]}}}}}}}, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYRES32=r3, @ANYRES16=r2, @ANYRES64=r6, @ANYRES32=r3, @ANYBLOB="08001d00", @ANYRES32=r4, @ANYRESDEC=r5], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) 3.813051837s ago: executing program 0 (id=2622): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x9, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x22048814}, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x6) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x70bd25, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000005}, 0x100) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) r10 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000) recvmmsg(r9, &(0x7f00000056c0)=[{{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000005780)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/4080, 0xff0}], 0x3, 0x0, 0xfffffc5a}, 0xfff}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x7}], 0x3, 0x10022, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000080)={r7, 0x4, 0x81}) bind$llc(r11, &(0x7f00000000c0)={0x1a, 0x206, 0x2, 0x8, 0x8, 0xff, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r12, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r12, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r12, &(0x7f0000000300)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r12, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r12, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000019c0)="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", 0xffc}, {&(0x7f00000029c0)='`+u', 0x3}], 0x2, &(0x7f0000000000)=ANY=[], 0xa}}], 0x1, 0x4044805) socket(0x1e, 0x1, 0x0) 3.505166068s ago: executing program 0 (id=2625): r0 = socket$inet(0x2, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$XFS_IOC_EXCHANGE_RANGE(r1, 0x40285881, &(0x7f00000000c0)={r0, 0x0, 0x9, 0x7fff, 0x7ca, 0x8}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$tcp_congestion(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000d0ff0000000000003e00000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180100002028782500000000002020207b1bf0ff00000000bfa10000000000000701000000feffffb702000008000000b50afbff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0xc}, 0x94) 3.072540058s ago: executing program 3 (id=2630): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff5656d, 0x70bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0x1, 0xb}, {0xf, 0xfff0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240048e4}, 0x44890) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$int_in(r9, 0x5421, &(0x7f0000000100)=0x9) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r10, 0x8983, &(0x7f0000000040)) connect$inet(r9, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r9) r11 = socket$nl_crypto(0x10, 0x3, 0x15) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x810, r11, 0xbd4bd000) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r12, 0x84, 0x21, &(0x7f00000000c0)=0x7, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r12, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x4e24, @private=0xa010101}], 0x10) setsockopt(r12, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 2.780115944s ago: executing program 4 (id=2633): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0xbb171, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x9) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) (async) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000180)={@private, @remote, 0x0}, &(0x7f00000001c0)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000095000000000000f3ffffff00"/32], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', r2, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0}, 0x94) 2.704497335s ago: executing program 4 (id=2634): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200)=0xffffffffffffffff, 0x4) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000001c0)={r0}, 0x8) close(r1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0xc2, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x4000, 0x1, 0xffff, 0x0, 0x1, 0x7, @empty, @broadcast, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x9, "02270e000042eb"}, {0x2, 0x12, "01008548c8ee4a000000000000000000"}, {0x0, 0x9, "00de6c83d50000"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x5, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x1, 0xd, "c8f46976e79ea788f03d9d"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) r2 = gettid() syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/uts\x00') r3 = getpid() syz_open_procfs$namespace(r3, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x60, '\x00', 0x0, 0x24}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x2a208000000000, 0x1000, 0x3, 0x8, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0x2, 0xb}, {0xffff, 0xffe9}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r10, &(0x7f0000000180)="05032200d3fc140000004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0xf8, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4008, r5}, 0x18) r12 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001200010000000000000000000a03000000004e2200000100ffff00"/56, @ANYRES32=0x0, @ANYBLOB="0500000003ffff000800000000000000"], 0x4c}}, 0x20004010) 2.623947228s ago: executing program 1 (id=2636): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @remote}, 0x9, 0x1, 0x0, 0x5, 0x2, 0x37ec}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2000c000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x47, 0xc, 0x0, {0x10, @esp_ip6_spec={@private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x1000, 0x8}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, 0x5, 0x200, [0xf2, 0x7]}, @tcp_ip4_spec={@local, @remote, 0x4e23, 0x4e20, 0x1}, {0x0, @remote, 0x4, 0x3, [0x7, 0x401]}, 0x3, 0x7}}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x5, 0x5}, @window={0x3, 0x0, 0x6}, @mss={0x2, 0x8007}, @window={0x3, 0x0, 0xd}, @mss={0x2, 0x2}, @mss={0x2, 0x7f}, @window={0x3, 0x80, 0x7e}, @window={0x3, 0x218, 0xfff}], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) (async) sendto$inet(r1, &(0x7f0000000080)='<', 0xfffffffffffffda9, 0x4894, 0x0, 0xfe8d) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0x2, &(0x7f0000001180)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1190e95fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a202304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a8640724a5f4e12ad99012a2e01ce79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b6ff9f372fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe50151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa332482e6137e994d3f5259b7f51544cdc6d8cb4becc20dd3a57545b0c2621e4c5f94a23f73ee02c22ee7e27c2cc491a85947baac523c347c9b9ede5d6265997f2ad6e9719aafdb323988e62b7ec84545cd63b7a77b8e0d544dde856d395af5b8fb0905f9e4ca0bdda3b7590f8aee73f1a07478b29fcf2db9cf9ef547949ca7b58e90e2165933356bcdb3287959dd51cbcf65126e36a45a31af8303b096ba7d1d7f7615a7e50aa1a0dbfb06ee6b46a92edb2b7dff4228f8b919806d1a7f0e5512924f02441b3f722ab7e83df2233a8dcda8a81a18e23572b015c94c8f25fcc05aa3c6926f45be24487e"], &(0x7f0000000000)='GPL\x00', 0x3, 0xbc, &(0x7f000000cf3d)=""/188, 0x0, 0x20, '\x00', 0x0, @fallback=0x2b}, 0x94) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000380)={'wg1\x00'}) (async) r5 = socket$tipc(0x1e, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f00000001c0)={0x1d, r6}, 0x10) (async) r7 = socket(0x10, 0x3, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) (async) write(r7, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e000000000000ea08000f0001000000", 0x24) (async) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000180)={r3, r2, 0x29}, 0xc) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x9, 0x31, 0xffffffffffffffff, 0x0) (async) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r2) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYRES16=r9, @ANYBLOB="10002bbd7000fbdbdf250b000000080001007063690011000200303030303a30303a31302e300000000008000b0005000000", @ANYBLOB='5\x00\x00\x00', @ANYRESDEC=r0], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x1) (async) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYRESHEX=r7, @ANYRESDEC=0x0, @ANYRESHEX=r5, @ANYRESHEX=r8], 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) read(r5, &(0x7f0000000300)=""/39, 0x27) (async) connect$inet(r1, &(0x7f0000000540)={0x2, 0xe22, @remote}, 0x10) 2.467658812s ago: executing program 1 (id=2637): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 64) r1 = accept4(r0, 0x0, 0x0, 0x0) (rerun: 64) ioctl$int_in(r1, 0x5452, &(0x7f0000000500)=0x7) (async) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x20000600}, 0x1, 0x0, 0x0, 0x800}, 0x40000) recvmsg(r1, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1}, 0x40000020) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000006609010000000000060000000b000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000500000056000000060000002d93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.457323291s ago: executing program 2 (id=2638): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe4d, 0x10, 0x0, 0x0, 0x0}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x60, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@map=r2, 0x36, 0x0, 0x9, &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0]}, 0x40) recvfrom$unix(r0, &(0x7f0000000240)=""/180, 0xb4, 0x40010043, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) sendmmsg$unix(r0, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40209c0}}, {{&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000000}}], 0x2, 0x20000000) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000dc0)=@mangle={'mangle\x00', 0x2, 0x6, 0x758, 0x190, 0x360, 0x450, 0x0, 0x0, 0x688, 0x688, 0x688, 0x688, 0x688, 0x6, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x32, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xffffffff], 0x4000, 0x50}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x8000007f], 'bridge0\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x3}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xff], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xf0, 0x48000000}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@loopback, 0x5, 0xc}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x210, 0x238, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d3], 0x1, 0x9, 0x3}}, @common=@rt={{0x138}, {0x0, [0x0, 0xc], 0x0, 0x0, 0x1, [@empty, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, @empty, @remote, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7b8) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000)) 2.311824047s ago: executing program 4 (id=2639): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x5, 0x44, &(0x7f0000000000)="460e12ce69aac1b7bb0032cd325f8f193d4ca4d87558d2abf920877b574d893cf1312061ba99e34e84d117d9e52ad261fb29485050258fbd36856b6615e80efe6ea28248"}, {0x8, 0x74, &(0x7f0000000080)="c59a58d08ff9b44e6935d91897714d62648c6d6f48ce2df0e49f548b142fd55103853a60a4f3e11d4c4afa4359070f9437c7a1880775267a43c44ac412fb7c68965bed1a566fecb14d5d4e4d48664b72144574af2b62896227bc89fa5a6258d4b378d4205ec04777d7e76d251a2de78bdb370597", 0x1}]}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000180)) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x1ff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@gettclass={0x24, 0x2a, 0x300, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff1, 0x4}, {0xfff2, 0xffe0}, {0x10, 0x10}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x0) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x8, r1}, 0x18) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r3, r4, 0x4, 0x0, @val=@netfilter={0x3, 0x0, 0x5, 0x1}}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xac, 0x0, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_TUPLE_MASTER={0x5c, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}]}, @CTA_TUPLE_MASTER={0x3c, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x9051}, 0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) preadv(r4, &(0x7f0000001a40)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/75, 0x4b}, {&(0x7f0000001600)=""/130, 0x82}, {&(0x7f00000016c0)=""/54, 0x36}, {&(0x7f0000001700)=""/181, 0xb5}, {&(0x7f00000017c0)=""/176, 0xb0}, {&(0x7f0000001880)=""/69, 0x45}, {&(0x7f0000001900)=""/243, 0xf3}, {&(0x7f0000001a00)=""/39, 0x27}], 0x9, 0x4, 0x5) epoll_create(0x2) r6 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r6, &(0x7f0000003080)={&(0x7f0000001b00)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001b80)=""/223, 0xdf}, {&(0x7f0000001c80)=""/24, 0x18}, {&(0x7f0000001cc0)=""/152, 0x98}, {&(0x7f0000001d80)=""/221, 0xdd}, {&(0x7f0000001e80)=""/161, 0xa1}, {&(0x7f0000001f40)=""/88, 0x58}, {&(0x7f0000001fc0)=""/46, 0x2e}], 0x7, &(0x7f0000002080)=""/4096, 0x1000}, 0x10000) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000030c0)={0x2, 'batadv_slave_0\x00', {0x5}, 0xe}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000003100)={'batadv_slave_0\x00', 0x100}) getsockopt(r5, 0x8, 0x200, &(0x7f0000003140)=""/232, &(0x7f0000003240)=0xe8) r7 = socket$netlink(0x10, 0x3, 0x15) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000032c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000003380)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003340)={&(0x7f0000003300)={0x2c, r8, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x800}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4001) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003400), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000003440)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000003600)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000035c0)={&(0x7f0000003480)={0x108, r9, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x108}}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000004740)={r5, &(0x7f0000003640)="722cd7375a71befb34333c4ee9bdf2e848aa1ab6c9d829e7308cdc3d8051fd27cd72528c59480c4e8d6a64ffb1d16c48a3b18098661ec55777a07ad8906e23787fa194a132565a983cddd8318cbbd0b118f38f25a2ce6c763bf453960c63816549f200c42c02462fb81a3e7577f58be6784bdb084471874e46c70a043f8fbd8f111496eb977bfae27c0d866a4d759a0280e39315f94852d07a86c507f3c9f5f70f9c6b8140674c100cb1619f69f6f1f4cdc40865e4b6f6b0a0f3bef538949d1ef17620fb4ad714917dc9228f52903694220b9ac8f5ca581c4387d52a3a780f9294", &(0x7f0000003740)=""/4096}, 0x20) r11 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000004780)={0x0}, &(0x7f00000047c0)=0xc) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000004980)={&(0x7f0000004800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000004940)={&(0x7f00000048c0)={0x58, 0x0, 0x404, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r12}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x28000010) 2.309028499s ago: executing program 0 (id=2640): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x61, @private0, 0x3}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4ea0, 0x10, @private0, 0x9}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000000)="95", 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000005c0)={0x0, 0x3}, 0x8) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000000000000ffd00000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000d0ffffff66080000d0ffffff180000000006000000000000000000009500000000000000360a0200000000081801000020207825f5000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200a2ef000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000140)=""/234, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff1c}, 0x78) pipe(&(0x7f0000000040)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000030000"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xf, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000004b180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8bfffffb702000008000000b7030000000000008500000007000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000"], &(0x7f0000000180)='syzkaller\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f00000010c0)=ANY=[@ANYBLOB="1a000000003e920a04d01b6bf9bf6bf8be4a00000000000000000000000f00000018110000e15a685dbb0f454411565f2557dcee55", @ANYRES32=r2, @ANYRES8=r3], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000840)={'syztnl2\x00', &(0x7f0000000780)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x3, 0x57, {{0x21, 0x4, 0x3, 0x32, 0x84, 0x67, 0x0, 0xc, 0x4, 0x0, @loopback, @private=0xa010100, {[@lsrr={0x83, 0x7, 0x46, [@private=0xa010102]}, @timestamp_addr={0x44, 0x24, 0x14, 0x1, 0x6, [{@multicast2, 0xc3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@broadcast, 0x7}, {@multicast2, 0x6}]}, @end, @timestamp_prespec={0x44, 0x44, 0xce, 0x3, 0x1, [{@broadcast, 0x842}, {@rand_addr=0x64010100, 0x8}, {@dev={0xac, 0x14, 0x14, 0xa}, 0xc000}, {@rand_addr=0x64010100, 0x72}, {@multicast2, 0xd}, {@empty, 0x9}, {@remote, 0xb0}, {@private=0xa010101, 0x8}]}]}}}}}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a28000000000a010304000000000000000100000008000240000000030900010073797a310000000054000000030a01020000000000000000010000000900030073797a300000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000014000000110001"], 0xa4}}, 0x0) close(0x3) write$cgroup_devices(r4, &(0x7f0000000080)=ANY=[@ANYBLOB='b '], 0x9) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000900)={0x8}, 0x8) r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r6, 0x0, 0x2, &(0x7f0000000180)=0x3, 0x4) sendto$l2tp(r6, 0x0, 0x0, 0x30000040, &(0x7f0000000900)={0x2, 0x0, @empty, 0x3}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000980)=@generic={&(0x7f0000000940)='./file0\x00'}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1c, 0x100, 0x10001, 0x1ff, 0x30700, 0xffffffffffffffff, 0xffffffc0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x50) 2.298766304s ago: executing program 2 (id=2641): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, 0x0, 0x0) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x2, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x10000}], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x6f, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_0\x00', 0x0}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) (async) r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000000000000100000008000100", @ANYRES32=r5, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3], 0x5c}, 0x1, 0xf000, 0x0, 0x3000000}, 0x10) (async, rerun: 32) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'geneve1\x00', &(0x7f00000000c0)=@ethtool_modinfo={0x42, 0x1000, 0x1}}) (rerun: 32) 2.140053576s ago: executing program 2 (id=2642): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0xfff, 0x7, 0x88, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000040)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_fd={0x18, 0x2, 0x1, 0x0, r1}], &(0x7f0000000080)='GPL\x00', 0x8, 0x7f, &(0x7f0000000180)=""/127, 0x41000, 0x7, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x0, 0x6, 0x101, 0x47c4daf7}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000540)=[r1, r1, r1, r1, r1], &(0x7f0000000580)=[{0x2, 0x4, 0x6, 0x8}, {0x3, 0x1, 0x5, 0x6}, {0x4, 0x1, 0x2, 0x1}, {0x1, 0x3, 0x3, 0x5}, {0x4, 0x3, 0x10}, {0x2, 0x4, 0x4, 0x5}, {0x4, 0x2, 0x1, 0x7}, {0x1, 0x3, 0x9, 0x1}, {0x3, 0x2, 0x7, 0xa}, {0x1, 0x3, 0xe, 0x6}], 0x10, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) recvmmsg(r0, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}, 0xd99b}, {{0x0, 0x0, &(0x7f0000002500)=[{0xfffffffffffffffd}, {0x0}], 0x2}}], 0x2, 0x20, 0x0) 1.959326665s ago: executing program 2 (id=2643): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x60ff, 0x0, &(0x7f0000000000), 0x0, 0x5043, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}, {0x0, @struct}}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000a40)={r2, "49c06bfda9e0513d90980a93b9f03610"}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000ffff0000000000008510000003000000180000000000000000000000000000009500e900000040000f000000000000000000000000000000930400799ec619ac78fc12c2c390374de255e3e3682cb1a53f"], 0x0, 0x5}, 0x90) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) pipe(0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000140)=0xbc8) r5 = socket(0x11, 0x3, 0x0) setsockopt(r5, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg(r5, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r6, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="020195ff002d3922ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f00000001c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) bpf$MAP_CREATE(0x0, 0x0, 0x0) connect$unix(r4, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r3}, 0xc) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200003e00005200000000060040008500000020000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850002007b0000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$sock_inet_sctp_SIOCINQ(r8, 0x541b, &(0x7f0000000140)) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000380)={'veth1_virt_wifi\x00', 0x1}) 1.958986937s ago: executing program 3 (id=2644): syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @remote}, "090086ddffff0000"}}}}}, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x80000001) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x4}, 0x8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0xe, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect(r3, &(0x7f0000000000)=@ieee802154={0x24, @short={0x2, 0xffff, 0xfffe}}, 0x80) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x0, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0xfd}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x4, 0x7ff, 0x7f}) 1.824640805s ago: executing program 3 (id=2645): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast2, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f00000015c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2}}}, @dstopts_2292={{0x18, 0x29, 0x3b}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x5e}}}], 0x48}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00001700000000001c0037800b0000006970768a616e08000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x4008851}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$inet6(r1, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast2, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f00000015c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2}}}, @dstopts_2292={{0x18, 0x29, 0x3b}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x5e}}}], 0x48}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00001700000000001c0037800b0000006970768a616e08000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x4008851}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) 1.794769957s ago: executing program 2 (id=2646): unshare(0x22020600) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000008000000000a30000000060aef010400000000000000000a0000040900010073797a3100000000040004800900020073797a3200000000140000001100010000000000000000000000000a"], 0x58}, 0x1, 0x0, 0x0, 0x140080d1}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000300)={r6, 0xf}, 0x8) writev(0xffffffffffffffff, &(0x7f0000003140)=[{0x0}, {&(0x7f00000002c0)="ca7bfc8312c923f10ba562dc1d03c7230742000000fd0fd6f81f4f5fe80bb3ebaa7484bfba214d00000000", 0x2b}, {0x0}, {&(0x7f0000001000)="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", 0x463}], 0x10000000000000e8) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r8, @ANYRES16=0x0], 0x48) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000940)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000281c96c98cc3103834b899f26bd7038fe2fdbdf252fffffec08000300", @ANYRES32=0x0, @ANYBLOB="0c009900f0502a7f31000000060036003f000000060036003e000000060036003c00000006003600410000000600360033000000060036003300000006003600090000000600360028000000060036000a000000"], 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x5) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc0000000301010200000000000000000a000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c000180140003000000000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001008800000006000340000400000c00028005000100060000000c00028005000100010000000c001980080002002e"], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_raw(r3, 0x0, 0x0) r10 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r11, &(0x7f0000000040)={0x1f, 0x0, @any, 0xb}, 0xe) socket$inet_smc(0x2b, 0x1, 0x0) r12 = socket(0x10, 0x3, 0x0) write(r12, &(0x7f00000000c0)="240000005a001f001007f4f90023", 0xe) sendmmsg$inet(r10, &(0x7f0000005900)=[{{&(0x7f0000000c40)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000002780)=[{&(0x7f0000000c80)="2f6a2ed487be34337fe2007f9bb53c02c8c1df9ff6409a9ed8842815c459cb789e9faced1f8c45f0a91ed9db964e9271089c09ba35ba65fcb749271fc82fa1c11c68752a1e4112c64b40a76edd791eb1b4b91a5c6a03ae0dccd375d3e4c581acfbf333ef22ffbd65f2a3b86246e856a2886062c8", 0x74}, {&(0x7f0000001480)="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", 0xffe}, {&(0x7f0000002480)="ac47a41c1d9726dc8afd9fdcd47d0fa47d3861c59d57c1ecd454f3464498586f1847b3a27ee39b1f399c2409e9896c091b88e207a6a9051ad4170a01719e96b54a45703d5f7cb165a0574be27627e2c220f0d2d6a6dc28bffa7596074f76d424d9ab2802d5cd977a11a434f818c8ab4688f145905bcd095f4d88f11d3e40c49d8bb6030c80c9db406dddd3f0003dbeaf16334dc807d5c0b23512b6ce8da3fff783b7c6050d9bca3e3ea5c763dc098a87f67a722526642cc6130bc30a366e0ebfaa5f8854c77b48c513adf3a7aff1bbde7d1e950cf0b097e2f61e8d864f8f588f5c1b206715f435a5aa", 0xe9}, {&(0x7f0000002580)="cecd00c5c698a1ba2140a9f00d554db371afe72b0425abad0124163cee4d02db05fe4735e6ec44e718481a24b6ce7dccb12150881f4c82e394459544815c438fc757fd611ee16228cb7f15118ad60aee47963f30910896354b7db74c3db05ea44cee4f7a8602", 0x66}, {&(0x7f0000002600)="59e4d3d93019194ea1a9a9fb9b1d9c978bda90d1f3b2cef576446115c3d78c0f64cddeeebfd1641504fed9d71df484459e478b794725412cc89c1b5b7ccd35a10e8a", 0x42}, {&(0x7f0000002680)="31bdc23c9e8a9acb06dbafc37f90642a18c303679666a426416d2374dd6d13fb74fe2daffd1d19314953939cd7f73c9d333300b6d5", 0x35}, {&(0x7f0000000d80)="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", 0x176}], 0x7, &(0x7f0000002800)=ANY=[@ANYBLOB="14000000000000000000000002000000060000000000000060000000000000000000000062b87dc20f9c5d06d307000000444c3671e000000200000003e000000100000001ac1e010100000006e0000001000000037f000001000000047f00000100003e6764010100000000087f0000010000000364010102000000088303dc0014000000000000000000000002000000050000000000000014000000000000000000000001000000ff7f000000000000380000000000000000000000070000000711be1e01261c34bfb3e2e4fbbc310601071385ac1e01010a010101640101006401010244043851180000000000000000000000020000"], 0xf8}}, {{&(0x7f0000002940)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000002a80)=[{&(0x7f0000000640)="71234ec805773b128951cf2564af043d0bf131d585bb0ede940210512db2a022f8ef7118e696f6cb01289585303d04e9db13fc8696254d7afdcf1adab6e2225ee38b948b0d2cee55d754871f2d289fc6237a3696cf6bfc8c0102963b474bb99d547af41be8f15f8a5b9decd159d002ddc3af96e1c23d64eaea764cd0a8144426cde1b8b0461b86fedd32383cc3229f6134fe1535c8278acbe967821c39ec0c57e4343beeeb35699e1b359f1586b1f87d6e046298b6dab023897536b3a23b859d44f292939767b0eca8b0eb1929e1d94e0b6f7e377f1d60357bc8b28eedfb4d8c72deaf0adb539dcd00fcae0b57f3e825", 0xf0}], 0x1, &(0x7f0000000740)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x31}}}}], 0x20}}, {{&(0x7f0000002b80)={0x2, 0x2cd5, @local}, 0x10, &(0x7f0000004340)=[{&(0x7f0000005a80)="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", 0x1000}, {&(0x7f0000004180)="76554fba22303b4bc732f39391530e1ea9508a529209ae12619d025fe0ae9760056b895d8f6f841595cace87db050422e86b64961d8f824d684e175dbb5952e6c3a2243174914eb83172274e83ee68565675651cc50511bfc464e956e6bd5e12658a63fcaf72652b8ede5dc5d2b118defeeb7f76cadf6624a2aaf0689b17339ff3f16ae2572c1c43874b1c9da4f49d0ba4aae4b01d4ee82c096b3abaf3d17439fbcc4c4d622474f84e89a89151a7c212c8624e93e123700e74111801fcf7d20ad2d2d57530ea12bd9330b946b60648237036cd45", 0xd4}, {&(0x7f0000004280)="fcb0268503c55008c836325423760ea2179154344a85efd7f257a41caf3c16593767e587fa", 0x25}, {&(0x7f00000042c0)="4c4a058db506f38e", 0x8}, {&(0x7f0000004300)}], 0x5, &(0x7f0000000380)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7fff}}], 0x18}}, {{&(0x7f0000004540)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000004600)=[{&(0x7f0000004580)="2f7de529282174a9e0dbe167a0e20ef7c44477122ca73d55976c1c62e99195c302dc23eb28f9b30a81bffe4d293cfac91af838e19c3ca409d72c73d0ca38f9dee2cf2c", 0x43}], 0x1, &(0x7f0000000600)}}, {{&(0x7f0000004680)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000004840)}}, {{0x0, 0x0, &(0x7f00000058c0)=[{&(0x7f0000000340)="0d2e50c30b1eb2fe90131cc5fe1bc891d59e3a5053178ad6a663c878974d0868ceddf09878", 0x25}, {&(0x7f0000006a80)="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", 0x10d2}], 0x2}}], 0x6, 0x40040) 1.482610871s ago: executing program 3 (id=2647): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x2000000, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x80, 0x5, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_USERDATA={0x4d, 0xc, "9250deb427bc6e42b1b5f2d157e44b2227bd3ba77c35159c87173ff906e18972592f69602faf297dfb2795c83c3abc9095e321c43168f56a46ce85cf4478af886b4398dbe9006a3da1"}]}, @NFT_MSG_DELFLOWTABLE={0x40, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}], {0x14, 0x10}}, 0x108}}, 0x0) 1.42829471s ago: executing program 1 (id=2648): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) syz_emit_ethernet(0x12, &(0x7f0000000080)={@random="659b3dfadf01", @link_local, @void, {@llc={0x4, {@llc={0x0, 0x0, "e3", "dd"}}}}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) (async) r4 = socket(0x2, 0x80805, 0x0) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0x1, &(0x7f00000004c0)={&(0x7f0000000400)={0xb4, r5, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:mail_spool_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8c0}, 0x40000) (async) sendmmsg$inet(r4, &(0x7f0000001d80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010104}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}, {{&(0x7f0000000380)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000b00)='>', 0x1}], 0x1, &(0x7f0000001f40)=ANY=[@ANYBLOB="110000000000000000000000010000000b000000000000001400000000000000000000000200000001000080000000004c"], 0x80}}], 0x3, 0x48000) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000240)={0xffff, 0x1, 0x1, 0x1, r6}, 0x10) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000540)) (async) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f00000002c0)=0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1c, 0xc, &(0x7f0000000680)=ANY=[@ANYRESOCT=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 1.417393007s ago: executing program 0 (id=2649): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r2, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x1000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb006}, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_DELRULE={0x2ac, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_USERDATA={0xae, 0x7, 0x1, 0x0, "cfdc64e7186f4af46c6dd772be75b7c5c5bd647763f1244c8123e4a583b3390c2bc24535a5af7a51a94252f98920d7f150f3abde4ac211a6f554feca92f642cc158858ad8b4d18b35f2fa694c226ab03abc5cb14300ecd7916aefb4dd410e3e11578396dc3a3ed32e8dd1a2a98bf20d2a7590cbbd26a749332876797277e12f7df830c010a816cad48c3c05caf720737e37a2a73cae8dcb8b4f4edb4516daf0643db334d4d6785a3bbf4"}, @NFTA_RULE_EXPRESSIONS={0x124, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_PORT={0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_PORT={0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xd}]}}}, {0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x17}]}}}, {0x54, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x5}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x6}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xa}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x40}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_RULE_USERDATA={0x5c, 0x7, 0x1, 0x0, "9f81d931168bc78b928c2834f98eebb08c2615110cabd71432138ce771cf94f6cbd019385d806f2a1970cdbbf243197be820e8ad7db533614f85727361e78ad1a11da18d3803328dbb26c169a87bfbabb932d7aebed149e9"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x54, 0x16, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x54, 0x16, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_KEY_TYPE={0x8}]}, @NFT_MSG_NEWCHAIN={0x1c4, 0x3, 0xa, 0x80, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x2c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'nr0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan1\x00'}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_CHAIN_USERDATA={0x1a, 0xc, "0062e66cb0fac24d4c06896959e86f96123aa85a8855"}, @NFTA_CHAIN_USERDATA={0x3e, 0xc, "0b61b0dbd03a070895346c31866beb1fd22c67a4a8a4a0d9989cca6547c50d5abf686c811a10370249db868cfda38c223d299ce7554cf39a68dd"}, @NFTA_CHAIN_USERDATA={0xfb, 0xc, "fdd8a5e34f31b6cdf4f7f627432864e616d431808f50381351aeb1311d6f7b7bf5394738dc01af3f7f5fd918b2def6ebc4b4e1de3b47e6b0816eeed1fdaed7314d5da788a3ef315b15dea5833fe0b6181b83f4151bfbad5980760cf5c5c8b2d80e2c9f31d1ffb4f5390f4a2e4ca7f7ada15ef097b546c4412e084c405c89667fc7bb5f41bc78824babe1e8daef0cf3334f7fa27380c55020f69cc99b807286abc76122ad7cc4b0733d526afdc24ec0bef2c1e8ca9ab598a8436ca87ca9cecf6fb2c28ea3892579d92e512a5b1f85f1a4edc2d288e8e1707e95d5fb5e471aae13a1138519a4d8e219a4093a09c66d9485ee1ca49ac31143"}]}, @NFT_MSG_DELTABLE={0x38, 0x2, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x608}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) r5 = socket(0x40000000015, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) sendto$l2tp6(r5, 0x0, 0x0, 0x4000000, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x20) sendmsg$nl_generic(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x32, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@typed={0x8, 0x157, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0xc, 0xcb, 0x0, 0x0, @u64}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000085}, 0x4040000) 1.363906455s ago: executing program 3 (id=2650): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001740)=@raw={'raw\x00', 0x3c1, 0x3, 0x1350, 0x1168, 0x111, 0x4b4, 0x0, 0x700, 0x12a8, 0x278, 0x278, 0x12a8, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0x10d8, 0x1140, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x1, './cgroup.cpu/syz0\x00', 0x5, {0x8000000000000001}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1c, 0xfffe, 0x5, 0x0, '\x00', 'syz1\x00', {0x3}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, [0xffffffff, 0xff], [0xff0000ff], 'geneve1\x00', 'tunl0\x00', {}, {}, 0x0, 0x8, 0x2, 0x5}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x7, 0x3, 0x6, 'snmp_trap\x00', {0x10}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x13b0) setsockopt$inet_int(r0, 0x0, 0x2, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000380)='\x00'/14, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(r3, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) r6 = socket(0x2a, 0x2, 0x0) connect$l2tp(r6, &(0x7f0000000000)={0x2, 0x0, @loopback, 0x3}, 0x10) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020a010100000000000000000000000920000000080a010100000000000000000a0000020900010073797a31"], 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x4000014) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES8=r9, @ANYRES16=r4, @ANYBLOB="c5cf1763ae87f259595f3cc07cbddf2f9ec00491cdc391e515d748d333cebf4273e119dcdb9670efd1e7c3ea34a2b232e5116ad5b121ca12827c156a2cc6d06d6480e3d78491a07d2559ece654ac1f6b920b0552e4ecca6ea0a34f64bf742c2c4432f930ce625c53bd5444f949f3099992daf8325de620cfd324384f2fdf076de9507f42efe6"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES64=r2, @ANYBLOB="0000000000000000b7080000810000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f00000000c0)=r13, 0x4) sendmsg$unix(r12, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x4000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r7, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x48, 0x2, [@TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x3}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffffff, 0xff000000, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_ETH_DST={0xa}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @mcast1}]}}]}, 0x78}}, 0x4000) socket$netlink(0x10, 0x3, 0x0) 1.359809804s ago: executing program 4 (id=2651): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000140)={r1, 0x0, 0x0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000700000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000000)="09000300010001", 0x7) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001240)=ANY=[@ANYBLOB="14010000300001000000000000000000010100800c0002000000000000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) setsockopt$MRT6_PIM(r7, 0x29, 0xcf, &(0x7f0000000180)=0x1, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0xe, 0x0, &(0x7f0000000380)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 1.315827122s ago: executing program 2 (id=2652): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xd, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="180000007f000000000000000a00000018010000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000090000000b70900000000000055090100000000009500000000000000bf91000000000000b70200000000000085000000c4000000b70000000000000095"], &(0x7f0000000480)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) r1 = socket$inet(0xa, 0x801, 0x6) connect$inet(r1, &(0x7f0000000280)={0x2, 0x3, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000004c0)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x2}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r3, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0x21, 0x0, 0x1, 0x0, 0x0, 0x20008010}, 0x240000c5) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000580)=@nat={'nat\x00', 0x2, 0x5, 0x508, 0x368, 0x220, 0xffffffff, 0xf0, 0x0, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0xff0000ff]}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @port=0x4e21, @gre_key=0xa2}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x9, 0xe], 0x3166, 0x1e, 0x1}}, @common=@unspec=@cgroup0={{0x28}, {0xff}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @port=0x4e22}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x6, 0x104}}, 0x10) bind$tipc(r6, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt(r4, 0x9, 0x7, &(0x7f0000000040)="70f5521bdd00ec", 0x7) bind$tipc(r8, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0xfffffffb}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r10, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050006000000140004"], 0x58}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) 1.119415372s ago: executing program 3 (id=2653): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x43, &(0x7f00000000c0)=[{}], 0x8, 0x10, &(0x7f0000000100), &(0x7f0000000200), 0x8, 0x808f, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="80000000", @ANYRES16=r3, @ANYBLOB="a18300000000000000dd0400000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000025d00000057000e0088800900080211000001080211000000ec03f3b85ad3000004008181a1ffffffffffffff040000000006010101010101030100060243832a0100720603030303030371070100ff0101040876060ff42200040000"], 0x80}, 0x1, 0x0, 0x0, 0x8810}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRES32=r1, @ANYRESOCT=r0, @ANYRES32=r1, @ANYRES8=r2, @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x8080) socket$unix(0x1, 0x2, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r6, &(0x7f0000004040)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0xff}], 0x2, 0x40000002, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000280)=ANY=[@ANYBLOB="00bbbb86dd600000000000000000ffffac141400ff02000016000188009078fe0066f5fe80000000000000000000000000000076d7e009fd6e89b5d26a8d5bbfbcb19e80000000000000000000"], 0x0) setsockopt$inet_mreqsrc(r5, 0x0, 0x28, &(0x7f0000000040)={@multicast1, @empty, @loopback}, 0xc) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000400200025410b007010fddbdf250a0000cdff00000102000100"], 0x1c}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r11, {0x0, 0x2}, {0xb, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f00000002c0)="05031620d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockopt$inet_buf(r5, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) 1.048274567s ago: executing program 1 (id=2654): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x75) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c58206007e4af65430442b25b36f0000000054c7be", 0x18) (async) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$rds(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/85, 0x55}], 0x1, 0x0, 0x0, 0x4041814}, 0x24048044) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000140)={0x1d, r4}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001640)={'syztnl1\x00', &(0x7f00000015c0)={'syztnl0\x00', 0x0, 0x2f, 0x7, 0x2, 0xaa7, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x700, 0x1, 0x1, 0xffffff80}}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000016c0)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) (async) r8 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r8, &(0x7f0000004a80)=[{{&(0x7f0000000080)={0x2, 0x4e1d, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_ttl={{0x14, 0x0, 0x34, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @multicast2}}}], 0x38}}], 0x1, 0x40048c0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="03920000004000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008000) sendmmsg$inet(r2, &(0x7f0000001880)=[{{&(0x7f0000000080)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)="a87b7fc9564436d7633e3e010d0bdad18d408f61e5e333a793396d", 0x1b}, {&(0x7f0000000180)="28ee5ed5729d143a637c7b42af5a60a2b0ec6eacd330d44fc1f3f7463e33a0123454e61c909c960b8b1b1db73aaf7c0d094be0171036fbf7bdc9d70607aa289d7939b2848a06cda12705a4972a31317e181d214870a145ceac036e3f0667fc08dbf6768423858737ec1c93b479c4b34308fb776de32a7c26", 0x78}, {&(0x7f0000000200)="8810d714", 0x4}], 0x3}}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="6958f8bcde6ffe4cadd51e83f28ffbc1c3a56e09b5d1436af92a03c96b5c5f90347ccd7b69858cedd91520a7187645039f1445109a3ef563fe0beb6ea481f0426ae36cd575ed373e2ef57ae1308de840cda298d1e45d35afef8e4d85087c45f39833a39f1ab32c21929f823966efa5ebfffbdcd89066dc03a2eb28885652993916f36a6f6c7bd848aeedd51c81cfb63d47a993ddae43553c1215d75c9d60487ac696bdb02a76bc5d0c6bb8eb8b63e6b8882e7ccc5759fb18552e2045321ac6a4681832528c6b6555c28081002d8f404563027e592fb8d1e905bc6e3a89", 0xdd}, {&(0x7f0000000380)="8d66b75c235fc9836c42c214076ae582ae224596a5874d8ec4f359b850b63fc7fe3aef9bf36af07b302b18b6f9b9239dbfb4114ef04f6ad7bd2b4ff8e0ba477af53786641c0809789a9c4771605de9a70a3c3c6e5413d2dba396155b669ec66bc5792c0a381a411f29ea655e4afb2ea560ab9297287c3ba9578b46989e884dd8124ee19f92351ae5eed7166b797a4c9446fb7f5031af4ca016f5308c1e9176687f811b91faf174721bab34b98910481296ee7e4e3b8d61a74a7dbc4c2462a194800c2b1eb7c227c04871c4720a4d7ec272b2a047be11820789c38661670a2c3dfdbe05df0a965b092430ffae85c27cab879bc0c68bf9c6", 0xf7}, {&(0x7f0000001700)="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", 0x14a}, {&(0x7f0000000580)="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", 0x1000}], 0x4, &(0x7f0000001900)=ANY=[@ANYBLOB="1c000000000000000000000008000000f1c0fa5609c8784520b2184c50211bf597ebb7ccee644298e0c19e5b803834f8dd9f57392c5e3b1e051d66b64e017d5726143e4596aefc1a40104fca92fa606d586c25edc495e63abef6f12c4b2a3bc3", @ANYRESHEX=r3, @ANYBLOB="0a010100ac1414bb000000001400000000000000000000000100000000000000000000001c000000000000000000000008000000", @ANYRES8, @ANYBLOB="ac1e0001ac141419000000006000000000000000000000000700000000891b780a0101027f000001ac1414bbe0000002ac14140b7f000001440cda21ac1414aa000000ff9404000083231364010102e0000002e0000002ffffffffac1414bb64010102ffffffffe00000020040000000000000000000000007000000000001071be7ffffffffac1414bbffffffffac1e000164010102ffffffff070f1600000000ac1414317f00000100000014000000000000000000000002000000a12a8d75000000001c000000000000000000000008000000", @ANYRES32=r5, @ANYBLOB="ac1414aa64010100000000001c000000000000000000000008000000", @ANYRESDEC=r5, @ANYBLOB="0a010101ffffffff00000000"], 0x150}}], 0x2, 0x840) (async) r10 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000006c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x3, 0x1ff, 0x8, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9, 0x1ffe1, 0x7, 0x2}}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000480)={0x0, 0x0, 0x30, 0x4, 0x2}, &(0x7f00000004c0)=0x18) setsockopt$inet_sctp6_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000000500)={r11, 0x7f, 0x3, 0x1}, 0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000000)={0x0, 0xff}, &(0x7f0000000040)=0x8) (async) r12 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r12, 0x89fb, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@empty, @empty, 0x18, 0x19}}) 676.256218ms ago: executing program 0 (id=2655): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000003600)={0x0, 0x0, &(0x7f00000035c0)={&(0x7f0000003540)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x4) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, 0x0, 0x54) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x64, 0x6, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004000}, 0x8804) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0x2}], 0x1, 0x0, 0x0, 0x800300}, 0x20004801) recvmsg(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) recvmsg(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x101) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x204000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x3c1, 0x3, 0x550, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x480, 0x2e0, 0x2e0, 0x480, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {0x3d}, {}, {}, {0x60}, {}, {}, {}, {}, {0x0, 0x0, 0x6}, {0x2}, {0x0, 0x7}, {0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0x16, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0xffff, 0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x80, 0x0, 0xffffffff}, {}, {}, {0xffff}, {}, {}, {0x2, 0xb8}, {}, {}, {}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {0x4000, 0x0, 0x80}, {}, {}, {}, {0x0, 0x0, 0x7, 0x10000}, {0x0, 0x0, 0x0, 0x200000}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}, {0x3, 0x0, 0x0, 0x1}, {}, {0x2000}]}}, @common=@mh={{0x28}, {"e4bd"}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00', {0xffff}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x1a, 0xfffffff6, 0x81, 'syz1\x00', 'syz1\x00', {0xfffffffffffffffc}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) 596.05981ms ago: executing program 1 (id=2656): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r6}, &(0x7f0000000280), &(0x7f0000000140)=r3}, 0x22) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000380)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="71490e00"], 0x10f) close(r0) ioctl$XFS_IOC_ERROR_INJECTION(r0, 0x40085874, &(0x7f0000000000)={r3, 0x7}) 260.049129ms ago: executing program 4 (id=2657): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000100001000000e290a8162cd3e79c000a20000000000a09040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000007000000006"], 0xe4}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a310000000014000580080001401b008917080002"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) readv(r5, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0xffffffffffffffff, 0x400, 0x10}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x1d, 0x11, &(0x7f0000000140)=@raw=[@cb_func={0x18, 0x8, 0x4, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xd1}, @ldst={0x0, 0x2, 0x4, 0xb, 0x3, 0x20, 0xfffffffffffffff0}, @map_idx, @alu={0x4, 0x1, 0x4, 0x2, 0x2, 0x100, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x10}, @generic={0x77, 0x9, 0x3, 0xe2a7}, @generic={0xfd, 0x4, 0x5, 0x2, 0x9}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000000200)='syzkaller\x00', 0xfffffff7, 0x0, 0x0, 0x41000, 0x25, '\x00', r3, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xd, 0x4, 0xd16f}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000005c0)=[r0, r5, r0, r0, r0, r6], &(0x7f0000000600)=[{0x2, 0x3, 0x7, 0x7}, {0x0, 0x2, 0x1, 0x5}, {0x4, 0x5, 0x6, 0xa}], 0x10, 0xffffffff}, 0x94) 62.48501ms ago: executing program 1 (id=2659): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x60bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7, 0x1, 0x80000401, 0x8b, 0x200000b, 0x3, 0x1, 0x5, 0x5d0}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x80) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYRES64=r7], 0x9c}}, 0x0) 0s ago: executing program 4 (id=2660): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, 0x0, &(0x7f0000000000)) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x84}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000270001002bbd7000dc4878fcdbdf25100000000a493f7f75484907669183673325a0e134284480ca9d1b7633aed736579877d1290f5ce1993464a7fc736bb57f99d9b64e982e5bc124443c0c58dfeb509fd026dc5313b7a3ca6fcc14a30794ce99a549722415d59ee4dece49145c9a7fb47f8a7d5a89ca78782e638a59fd9049825fd66a476b8519f4c9222c6ff3cc100576c274a9875fb20d6ad85a7fd9b53c751b81f189483899d4fa5ddf7fa5a52b7015078468c739ee724b3fadfb761cee99d175a74e22e1e3f495"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004844) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4], 0x18}, 0x0) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000a000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r5, 0x92, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc95, 0x8000, 0x8, 0xffffffffffffffde, &(0x7f0000001e40)}}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x17, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="54000000000000000000000400000000000000010000000100010001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030"], 0x88}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'veth0_to_batadv\x00', &(0x7f0000000300)=@ethtool_regs={0x4, 0xfff, 0x5e, "a9863cc0f1e004fb195844a847b880360cf44cae2d2eee33fcdd86c9c71168b2c951a7314f6dff652eba2d5c4888b45b6d2574c88f4a03257c3eeecd81bdcd3069ee83e0a57d58ad454ecad302e3dc8754aa3687f397cf764f007bc4001f"}}) close(r3) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)=0xfffffdfd) socket$netlink(0x10, 0x3, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, 0x0, &(0x7f0000000000)) (async) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x84}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000270001002bbd7000dc4878fcdbdf25100000000a493f7f75484907669183673325a0e134284480ca9d1b7633aed736579877d1290f5ce1993464a7fc736bb57f99d9b64e982e5bc124443c0c58dfeb509fd026dc5313b7a3ca6fcc14a30794ce99a549722415d59ee4dece49145c9a7fb47f8a7d5a89ca78782e638a59fd9049825fd66a476b8519f4c9222c6ff3cc100576c274a9875fb20d6ad85a7fd9b53c751b81f189483899d4fa5ddf7fa5a52b7015078468c739ee724b3fadfb761cee99d175a74e22e1e3f495"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004844) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) sendmsg$unix(r4, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4], 0x18}, 0x0) (async) close(r4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000a000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r5, 0x92, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc95, 0x8000, 0x8, 0xffffffffffffffde, &(0x7f0000001e40)}}, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x17, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) (async) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="54000000000000000000000400000000000000010000000100010001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030"], 0x88}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'veth0_to_batadv\x00', &(0x7f0000000300)=@ethtool_regs={0x4, 0xfff, 0x5e, "a9863cc0f1e004fb195844a847b880360cf44cae2d2eee33fcdd86c9c71168b2c951a7314f6dff652eba2d5c4888b45b6d2574c88f4a03257c3eeecd81bdcd3069ee83e0a57d58ad454ecad302e3dc8754aa3687f397cf764f007bc4001f"}}) (async) close(r3) (async) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)=0xfffffdfd) (async) kernel console output (not intermixed with test programs): .162294][ T9742] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 242.213604][ T9742] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 242.238136][ T9742] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 242.462085][ T9780] netlink: 'syz.1.948': attribute type 1 has an invalid length. [ 242.597960][ T9780] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 242.809624][ T9803] netlink: 12 bytes leftover after parsing attributes in process `syz.3.951'. [ 242.951327][ T9813] netlink: 'syz.0.954': attribute type 1 has an invalid length. [ 242.975184][ T9816] netlink: 20 bytes leftover after parsing attributes in process `syz.3.951'. [ 243.147284][ T9813] 8021q: adding VLAN 0 to HW filter on device bond5 [ 243.293387][ T9832] tc_dump_action: action bad kind [ 244.246361][ T9875] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 244.338544][ T9865] bond7: option xmit_hash_policy: invalid value (10) [ 244.412449][ T9865] bond7 (unregistering): Released all slaves [ 244.508614][ T9871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.964'. [ 244.519283][ T9871] netlink: 40 bytes leftover after parsing attributes in process `syz.4.964'. [ 244.528843][ T9871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.964'. [ 244.867362][ T9845] infiniband syz1: set active [ 244.899068][ T9845] infiniband syz1: added syz_tun [ 245.067050][ T9845] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 245.156648][ T9845] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 245.253961][ T9845] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 245.463321][ T9845] RDS/IB: syz1: added [ 245.486123][ T9845] smc: adding ib device syz1 with port count 1 [ 245.500951][ T9845] smc: ib device syz1 port 1 has no pnetid [ 245.949168][ T9951] netlink: 28 bytes leftover after parsing attributes in process `syz.4.979'. [ 246.024392][ T9953] Cannot find del_set index 0 as target [ 246.411276][ T9968] netlink: 68 bytes leftover after parsing attributes in process `syz.4.981'. [ 246.425956][ T9969] Bluetooth: MGMT ver 1.23 [ 246.653097][ T30] audit: type=1800 audit(1784737514.267:5): pid=9948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.978" name="memory.events" dev="tmpfs" ino=1154 res=0 errno=0 [ 247.139055][ T9991] netlink: 'syz.4.984': attribute type 13 has an invalid length. [ 247.174367][ T9991] netlink: 24 bytes leftover after parsing attributes in process `syz.4.984'. [ 247.214820][ T9991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.984'. [ 247.239800][ T9997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.986'. [ 247.437751][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 247.503652][T10008] netlink: 36 bytes leftover after parsing attributes in process `syz.2.988'. [ 249.023708][T10054] syzkaller0: entered promiscuous mode [ 249.046349][T10054] syzkaller0: entered allmulticast mode [ 249.075896][T10056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.998'. [ 249.124449][T10063] netlink: 528 bytes leftover after parsing attributes in process `syz.4.997'. [ 249.200615][T10066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.996'. [ 249.240470][T10066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.996'. [ 250.212714][T10113] gretap0: entered promiscuous mode [ 250.981352][T10149] bridge6: entered promiscuous mode [ 251.015586][T10149] bridge6: entered allmulticast mode [ 251.714246][T10188] __nla_validate_parse: 4 callbacks suppressed [ 251.714267][T10188] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1029'. [ 252.279934][T10234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1037'. [ 252.299044][T10234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1037'. [ 252.629347][T10247] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1039'. [ 252.956674][T10262] bond4: (slave lo): Releasing backup interface [ 252.997207][T10262] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 253.024423][T10262] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 253.504114][T10280] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1049'. [ 253.631685][T10285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1050'. [ 253.641083][T10285] netlink: set zone limit has 4 unknown bytes [ 253.740017][T10287] macsec0: left promiscuous mode [ 253.745242][T10287] macsec0: left allmulticast mode [ 253.750622][T10287] geneve1: left promiscuous mode [ 253.756481][T10287] bond6: left allmulticast mode [ 253.794132][ T77] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.813291][ T77] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.838659][T10213] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.864947][T10213] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.116974][T10301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1055'. [ 254.274380][T10311] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1058'. [ 254.311322][T10309] syzkaller1: entered promiscuous mode [ 254.321459][T10309] syzkaller1: entered allmulticast mode [ 254.340880][T10310] syzkaller0: entered allmulticast mode [ 254.356013][T10310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1057'. [ 254.461621][T10318] syzkaller0: entered promiscuous mode [ 254.475824][T10318] syzkaller0: entered allmulticast mode [ 254.835953][T10329] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1062'. [ 255.590309][T10361] netlink: 'syz.2.1073': attribute type 2 has an invalid length. [ 255.617090][T10361] : entered promiscuous mode [ 255.764102][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.115231][T10372] mac80211_hwsim hwsim2 wlan0: Caught tx_queue_len zero misconfig [ 256.740443][T10388] __nla_validate_parse: 1 callbacks suppressed [ 256.740465][T10388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1078'. [ 256.782057][T10388] syzkaller0: entered promiscuous mode [ 256.795327][T10388] syzkaller0: entered allmulticast mode [ 257.082621][T10406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1083'. [ 257.343950][T10415] syzkaller0: entered promiscuous mode [ 257.365449][T10415] syzkaller0: entered allmulticast mode [ 257.446346][T10422] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1087'. [ 257.507667][T10424] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1088'. [ 257.571633][T10427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1089'. [ 257.628583][T10427] bond5 (unregistering): Released all slaves [ 257.747234][T10434] xfrm0 speed is unknown, defaulting to 1000 [ 257.755307][T10434] xfrm0 speed is unknown, defaulting to 1000 [ 257.779205][T10434] xfrm0 speed is unknown, defaulting to 1000 [ 258.360643][ T187] xfrm0 speed is unknown, defaulting to 1000 [ 258.368519][T10434] infiniband syz0: set down [ 258.394416][T10434] infiniband syz0: added xfrm0 [ 258.492076][T10434] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 258.511006][T10434] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 258.601527][T10434] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 258.854156][T10434] RDS/IB: syz0: added [ 258.861312][T10434] smc: adding ib device syz0 with port count 1 [ 258.883982][T10434] smc: ib device syz0 port 1 has no pnetid [ 258.908738][ T187] xfrm0 speed is unknown, defaulting to 1000 [ 258.926398][T10434] xfrm0 speed is unknown, defaulting to 1000 [ 259.185000][T10500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1107'. [ 259.210478][T10498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1106'. [ 259.238044][T10498] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1106'. [ 259.262294][T10499] xt_bpf: check failed: parse error [ 259.312760][T10500] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 259.329685][T10500] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 259.378253][T10493] syzkaller0: entered promiscuous mode [ 259.393956][T10493] syzkaller0: entered allmulticast mode [ 259.903531][T10521] tc action pedit 'at' offset 5 out of bounds [ 259.910832][T10521] tc action pedit 'at' offset 5 out of bounds [ 259.917119][T10521] tc action pedit 'at' offset 5 out of bounds [ 259.923304][T10521] tc action pedit 'at' offset 5 out of bounds [ 259.929472][T10521] tc action pedit 'at' offset 5 out of bounds [ 259.935617][T10521] tc action pedit 'at' offset 5 out of bounds [ 259.941756][T10521] tc action pedit 'at' offset 5 out of bounds [ 259.947894][T10521] tc action pedit 'at' offset 5 out of bounds [ 259.954039][T10521] tc action pedit 'at' offset 5 out of bounds [ 259.960219][T10521] tc action pedit 'at' offset 5 out of bounds [ 259.966354][T10521] 0: reclassify loop, rule prio 0, protocol 800 [ 260.114430][T10434] xfrm0 speed is unknown, defaulting to 1000 [ 260.306272][T10531] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1116'. [ 260.337837][T10531] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1116'. [ 260.775946][T10556] lo: Caught tx_queue_len zero misconfig [ 261.072178][T10569] netlink: 'syz.0.1128': attribute type 1 has an invalid length. [ 261.298907][T10569] 8021q: adding VLAN 0 to HW filter on device bond6 [ 261.378718][T10573] vlan3: entered promiscuous mode [ 261.397097][T10573] bond6: entered promiscuous mode [ 261.407446][T10573] vlan3: entered allmulticast mode [ 261.426379][T10573] bond6: entered allmulticast mode [ 261.467266][T10580] bond6: (slave bridge2): making interface the new active one [ 261.488490][T10580] bridge2: entered promiscuous mode [ 261.504206][T10580] bridge2: entered allmulticast mode [ 261.526584][T10580] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 261.594755][T10434] xfrm0 speed is unknown, defaulting to 1000 [ 261.606103][T10589] netlink: 'syz.1.1132': attribute type 5 has an invalid length. [ 261.744896][T10593] netlink: 'syz.3.1133': attribute type 1 has an invalid length. [ 261.892755][T10597] bond4: (slave veth5): Enslaving as an active interface with a down link [ 261.974647][T10604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.984862][T10604] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.047037][T10604] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 262.058170][T10604] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 262.077421][T10604] veth0_macvtap: left promiscuous mode [ 262.085517][T10604] veth0_macvtap: entered promiscuous mode [ 262.100432][T10604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 262.109414][T10604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 262.117465][T10604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 262.125797][T10604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 262.146653][T10604] 8021q: adding VLAN 0 to HW filter on device bond1 [ 262.158401][T10604] 8021q: adding VLAN 0 to HW filter on device bond2 [ 262.172062][T10604] 8021q: adding VLAN 0 to HW filter on device bond3 [ 262.185216][T10604] 8021q: adding VLAN 0 to HW filter on device bond4 [ 262.213539][T10593] bond4: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 262.306658][ T76] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.315768][ T76] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.327881][ T76] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.336651][ T76] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.346260][ T76] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.346269][T10529] xfrm0 speed is unknown, defaulting to 1000 [ 262.355723][ T76] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.374251][ T76] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.384605][ T76] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.409558][ T77] bond2: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 262.440448][ T77] bond2: (slave veth5): making interface the new active one [ 262.478903][ T77] bond2: active interface up! [ 262.661818][T10615] __nla_validate_parse: 2 callbacks suppressed [ 262.661839][T10615] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1139'. [ 262.917841][ T1240] IPVS: starting estimator thread 0... [ 263.018852][T10623] IPVS: using max 27 ests per chain, 64800 per kthread [ 263.126709][T10628] syzkaller0: entered promiscuous mode [ 263.132547][T10628] syzkaller0: entered allmulticast mode [ 263.167706][T10434] xfrm0 speed is unknown, defaulting to 1000 [ 263.181263][T10622] netlink: 'syz.0.1142': attribute type 1 has an invalid length. [ 263.437973][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 263.493773][T10643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1145'. [ 265.060204][T10643] sit1: entered promiscuous mode [ 265.068373][T10434] xfrm0 speed is unknown, defaulting to 1000 [ 265.634545][T10659] xt_CT: You must specify a L4 protocol and not use inversions on it [ 266.075825][T10650] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1147'. [ 266.355339][T10671] netlink: 'syz.0.1154': attribute type 2 has an invalid length. [ 266.378232][T10671] netlink: 'syz.0.1154': attribute type 2 has an invalid length. [ 266.388916][T10671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1154'. [ 266.566741][T10674] netlink: 'syz.0.1155': attribute type 1 has an invalid length. [ 266.823547][T10674] bond7: entered promiscuous mode [ 266.848059][T10674] 8021q: adding VLAN 0 to HW filter on device bond7 [ 266.902513][T10680] sit1: entered allmulticast mode [ 266.988466][T10681] bond7: (slave bridge3): making interface the new active one [ 267.005945][T10681] bridge3: entered promiscuous mode [ 267.014766][T10681] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 267.584482][T10702] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 267.596842][T10698] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1160'. [ 267.751106][T10707] tipc: Enabled bearer , priority 0 [ 267.779907][T10707] syzkaller0: entered promiscuous mode [ 267.797661][T10707] syzkaller0: entered allmulticast mode [ 267.805374][T10713] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1164'. [ 267.880364][T10707] tipc: Resetting bearer [ 267.906607][T10705] tipc: Resetting bearer [ 267.992437][T10705] tipc: Disabling bearer [ 268.108346][T10698] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1160'. [ 268.124544][T10698] 0ªî{X¹¦: renamed from eql (while UP) [ 268.139444][T10698] 0ªî{X¹¦: entered allmulticast mode [ 268.164617][T10698] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 268.460934][T10736] xfrm0: entered allmulticast mode [ 268.483251][T10736] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 268.629556][T10742] veth1_to_batadv: entered promiscuous mode [ 269.197229][T10777] netlink: 'syz.2.1178': attribute type 1 has an invalid length. [ 269.300844][T10783] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1179'. [ 269.656956][T10799] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1185'. [ 269.708048][T10793] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1181'. [ 269.740945][T10793] netlink: 'syz.2.1181': attribute type 7 has an invalid length. [ 269.757851][ C0] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96 [ 269.772084][T10793] netlink: 'syz.2.1181': attribute type 8 has an invalid length. [ 269.799862][T10806] netlink: 'syz.2.1181': attribute type 1 has an invalid length. [ 269.823899][T10793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1181'. [ 269.852603][T10806] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1181'. [ 269.866965][T10813] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1184'. [ 269.904101][T10813] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1184'. [ 269.945376][T10813] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1184'. [ 271.266583][T10835] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 271.332489][T10835] iwpm_mapping_info_cb: Unable to parse nlmsg [ 271.519336][T10853] netlink: 'syz.0.1197': attribute type 41 has an invalid length. [ 272.408928][T10857] tipc: Enabling of bearer rejected, failed to enable media [ 272.801656][T10899] ksmbd: Unknown IPC event: 4, ignore. [ 272.936473][T10902] syzkaller0: entered promiscuous mode [ 272.954175][T10902] syzkaller0: entered allmulticast mode [ 273.298208][T10907] __nla_validate_parse: 5 callbacks suppressed [ 273.298229][T10907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1208'. [ 273.347982][T10907] netlink: 'syz.1.1208': attribute type 29 has an invalid length. [ 273.375882][T10907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1208'. [ 273.543991][T10915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.593901][T10915] xt_l2tp: v2 doesn't support IP mode [ 273.633166][T10881] xfrm0 speed is unknown, defaulting to 1000 [ 274.483084][T10948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.252757][T10975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1224'. [ 275.420607][T10983] netlink: 'syz.1.1226': attribute type 30 has an invalid length. [ 276.334663][T11018] netlink: 'syz.3.1232': attribute type 1 has an invalid length. [ 276.582990][T11018] bond5: entered promiscuous mode [ 276.618382][T11018] 8021q: adding VLAN 0 to HW filter on device bond5 [ 276.682674][T11033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1234'. [ 276.733638][T11021] vlan4: entered allmulticast mode [ 276.764328][T11021] bond5: entered allmulticast mode [ 276.807627][T11022] bond5: (slave bridge2): making interface the new active one [ 276.824020][T11022] bridge2: entered promiscuous mode [ 276.837887][T11022] bridge2: entered allmulticast mode [ 276.855387][T11022] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 277.274043][T11043] IPVS: Scheduler module ip_vs_sip not found [ 277.448326][T11053] netlink: 'syz.2.1241': attribute type 4 has an invalid length. [ 277.490258][T11051] veth0: entered promiscuous mode [ 277.533293][T11051] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 277.838555][T11065] netlink: 'syz.0.1244': attribute type 1 has an invalid length. [ 277.920197][T11050] veth0: left promiscuous mode [ 278.149554][T11071] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1246'. [ 278.430340][T11078] netlink: 'syz.0.1248': attribute type 1 has an invalid length. [ 278.505877][T11078] bond8: option mode: invalid value (8) [ 278.516107][T11078] bond8 (unregistering): Released all slaves [ 279.026680][T11097] netlink: 'syz.0.1256': attribute type 2 has an invalid length. [ 279.057921][T11097] netlink: 'syz.0.1256': attribute type 1 has an invalid length. [ 279.512888][T11125] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1262'. [ 279.714222][T11129] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1265'. [ 280.063018][T11141] : renamed from veth1_virt_wifi (while UP) [ 280.153182][T11148] x_tables: duplicate underflow at hook 2 [ 280.507100][T11171] tipc: Enabling of bearer rejected, failed to enable media [ 280.606671][T11177] netlink: 45 bytes leftover after parsing attributes in process `syz.3.1279'. [ 280.971159][T11190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1282'. [ 281.524917][T11219] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1289'. [ 281.818965][T11227] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1291'. [ 282.062533][T11243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1295'. [ 282.096216][T11243] syzkaller0: entered promiscuous mode [ 282.125355][T11243] syzkaller0: entered allmulticast mode [ 282.195995][T11243] netlink: 'syz.4.1295': attribute type 10 has an invalid length. [ 282.301642][T11243] team0: Port device vlan0 added [ 282.313653][T11261] netlink: 'syz.3.1298': attribute type 3 has an invalid length. [ 282.331863][T11261] netlink: 'syz.3.1298': attribute type 3 has an invalid length. [ 282.461274][T11262] bridge_slave_0: left allmulticast mode [ 282.491834][T11262] bridge_slave_0: left promiscuous mode [ 282.526033][T11262] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.609369][T11262] bridge_slave_1: left allmulticast mode [ 282.643132][T11262] bridge_slave_1: left promiscuous mode [ 282.669509][T11262] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.713393][T11262] bond0: (slave bond_slave_0): Releasing backup interface [ 282.754170][T11278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1300'. [ 282.772063][T11262] bond0: (slave bond_slave_1): Releasing backup interface [ 282.807658][T11262] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.815818][T11262] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.824810][T11262] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 282.868752][T11277] vlan3: entered allmulticast mode [ 282.874111][T11277] bridge1: entered allmulticast mode [ 283.064791][T11291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1305'. [ 283.103241][T11295] IPVS: set_ctl: invalid protocol: 137 255.255.255.255:20000 [ 283.155374][T11299] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1305'. [ 283.183079][T11291] bond8: entered promiscuous mode [ 283.189235][T11291] 8021q: adding VLAN 0 to HW filter on device bond8 [ 283.509634][T11319] dummy0: mtu less than device minimum [ 284.129057][T11335] bond6: entered promiscuous mode [ 284.142269][T11335] 8021q: adding VLAN 0 to HW filter on device bond6 [ 284.230325][T11343] netlink: 'syz.4.1319': attribute type 1 has an invalid length. [ 284.242680][T11343] openvswitch: netlink: Message has 4 unknown bytes. [ 284.249725][T11343] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.352782][T11339] 8021q: adding VLAN 0 to HW filter on device bond7 [ 284.361248][T11339] bond7: entered promiscuous mode [ 284.368686][T11339] bond6: (slave bond7): Enslaving as an active interface with an up link [ 284.421041][T11335] bridge3: entered promiscuous mode [ 284.438825][T11335] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 284.470570][T11345] netlink: 'syz.1.1320': attribute type 12 has an invalid length. [ 284.489842][T11345] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 284.496028][T11345] syzkaller1: linktype set to 823 [ 284.665348][T11359] __nla_validate_parse: 9 callbacks suppressed [ 284.665368][T11359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1323'. [ 284.697836][T11359] netlink: 'syz.1.1323': attribute type 20 has an invalid length. [ 284.722737][T11359] netlink: 'syz.1.1323': attribute type 21 has an invalid length. [ 285.048727][T11375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1325'. [ 285.094877][T11378] C: renamed from veth1_to_team (while UP) [ 285.105384][T11375] netlink: 558 bytes leftover after parsing attributes in process `syz.2.1325'. [ 285.134250][T11378] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1327'. [ 285.339085][T11384] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1328'. [ 285.396456][T11390] netlink: 'syz.0.1330': attribute type 1 has an invalid length. [ 285.437758][T11390] bond9: entered promiscuous mode [ 285.443607][T11390] 8021q: adding VLAN 0 to HW filter on device bond9 [ 285.625808][T11390] 8021q: adding VLAN 0 to HW filter on device bond9 [ 285.636072][T11372] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1326'. [ 285.665427][T11390] bond9: (slave vti0): The slave device specified does not support setting the MAC address [ 285.698804][T11390] bond9: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 285.726069][T11390] bond9: (slave vti0): making interface the new active one [ 285.739174][T11390] vti0: entered promiscuous mode [ 285.764711][T11390] bond9: (slave vti0): Enslaving as an active interface with an up link [ 285.939933][T11404] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1333'. [ 286.052203][T11404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.083080][T11404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.520064][T11422] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1337'. [ 286.585231][T11427] netlink: 'syz.1.1340': attribute type 8 has an invalid length. [ 286.608359][T11427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1340'. [ 286.662503][T11433] netlink: 'syz.1.1340': attribute type 8 has an invalid length. [ 286.691301][T11433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1340'. [ 286.773991][T11427] bond0: entered promiscuous mode [ 286.789939][T11427] gretap0: entered promiscuous mode [ 286.796709][T11427] veth0_to_bond: entered promiscuous mode [ 286.804792][T11427] hsr1: entered promiscuous mode [ 287.124431][T11446] bridge_slave_1: Caught tx_queue_len zero misconfig [ 287.393449][ T5282] veth0_vlan: left promiscuous mode [ 287.432591][ T5353] veth0_vlan: entered promiscuous mode [ 287.669292][T11479] netlink: 'syz.0.1353': attribute type 4 has an invalid length. [ 287.730672][T11479] netlink: 'syz.0.1353': attribute type 4 has an invalid length. [ 287.758692][T11473] sctp: [Deprecated]: syz.4.1349 (pid 11473) Use of struct sctp_assoc_value in delayed_ack socket option. [ 287.758692][T11473] Use struct sctp_sack_info instead [ 288.835553][T11521] macsec4: entered promiscuous mode [ 289.085966][T11550] bond5: option lp_interval: invalid value (0) [ 289.092531][T11550] bond5: option lp_interval: allowed values 1 - 2147483647 [ 289.105897][T11550] bond5 (unregistering): Released all slaves [ 289.195792][T11559] syzkaller0: entered promiscuous mode [ 289.232362][T11559] syzkaller0: entered allmulticast mode [ 289.792419][T11576] syzkaller0: entered promiscuous mode [ 289.800794][T11576] syzkaller0: entered allmulticast mode [ 289.906930][T11576] __nla_validate_parse: 4 callbacks suppressed [ 289.906950][T11576] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1371'. [ 290.055830][T11593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1378'. [ 290.065012][T11593] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1378'. [ 290.238793][T11602] syzkaller0: entered promiscuous mode [ 290.258171][T11602] syzkaller0: entered allmulticast mode [ 290.276674][T11606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1380'. [ 290.300764][T11603] tipc: Enabled bearer , priority 0 [ 290.358253][T11603] tipc: Resetting bearer [ 290.434543][T11603] tipc: Disabling bearer [ 290.591131][T11619] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1383'. [ 290.609925][T11619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1383'. [ 290.619607][T11619] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1383'. [ 290.787931][T11621] netlink: 'syz.2.1385': attribute type 3 has an invalid length. [ 291.255953][T11629] xfrm0 speed is unknown, defaulting to 1000 [ 291.589407][T11644] netlink: 'syz.4.1392': attribute type 6 has an invalid length. [ 291.955147][T11652] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 292.016363][T11663] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1399'. [ 292.200182][T11671] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1400'. [ 292.209663][T11672] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1400'. [ 293.176952][T11703] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 293.211208][T11703] bond2 (unregistering): Released all slaves [ 293.319742][T11710] bridge4: entered allmulticast mode [ 293.496113][T11719] erspan0: entered promiscuous mode [ 293.580974][T11729] netlink: 'syz.4.1413': attribute type 1 has an invalid length. [ 293.693724][T11719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.731875][T11719] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.887055][T11719] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 293.900603][T11719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 293.947301][T11719] veth1_vlan: left promiscuous mode [ 293.982130][T11719] veth0_vlan: left promiscuous mode [ 293.989662][T11719] veth0_vlan: entered promiscuous mode [ 294.000679][T11719] veth1_vlan: entered promiscuous mode [ 294.016607][T11719] veth1_macvtap: left promiscuous mode [ 294.024711][T11719] veth0_macvtap: left promiscuous mode [ 294.043202][T11719] veth0_macvtap: entered promiscuous mode [ 294.060996][T11719] veth1_macvtap: entered promiscuous mode [ 294.077029][T11719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 294.086235][T11719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 294.095320][T11719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 294.106891][T11719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 294.126651][T11719] 8021q: adding VLAN 0 to HW filter on device bond1 [ 294.142111][T11719] 8021q: adding VLAN 0 to HW filter on device bond2 [ 294.177012][T11719] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 294.197203][T11728] ip6tnl0: Caught tx_queue_len zero misconfig [ 294.212230][T11736] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 294.275507][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.282802][ T1115] bridge0: port 1(bridge_slave_0) entered listening state [ 294.352108][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.359443][ T1115] bridge0: port 2(bridge_slave_1) entered listening state [ 294.611826][T10204] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.653881][T10204] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.753331][T10204] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.784386][T10204] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.871243][ T1115] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 294.906965][ T1115] bond1: (slave veth3): making interface the new active one [ 294.965253][ T1115] bond1: active interface up! [ 295.164477][T11780] netlink: 'syz.3.1421': attribute type 1 has an invalid length. [ 295.460413][T11788] bond8: (slave bridge5): making interface the new active one [ 295.505190][T11788] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 295.532270][T11798] __nla_validate_parse: 2 callbacks suppressed [ 295.532290][T11798] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1423'. [ 295.562701][T11796] tipc: Enabled bearer , priority 0 [ 295.586007][T11796] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1424'. [ 295.656811][T11793] tipc: Disabling bearer [ 295.834529][T11811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.978345][T11811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.077710][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 296.320010][T11822] syzkaller0: entered promiscuous mode [ 296.337353][T11822] syzkaller0: entered allmulticast mode [ 296.859881][T11853] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1435'. [ 296.926635][T11855] syzkaller0: entered promiscuous mode [ 296.955206][T11855] syzkaller0: entered allmulticast mode [ 297.131562][T11867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1438'. [ 297.192527][T11867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1438'. [ 297.324128][T11867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1438'. [ 297.399892][T11867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1438'. [ 297.416460][T11871] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 297.447384][T11877] netlink: 'syz.0.1440': attribute type 142 has an invalid length. [ 297.864195][T11898] netlink: 'syz.2.1445': attribute type 1 has an invalid length. [ 297.897873][T11898] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1445'. [ 297.924633][T11898] netlink: 'syz.2.1445': attribute type 1 has an invalid length. [ 297.983829][T11898] netlink: 'syz.2.1445': attribute type 1 has an invalid length. [ 298.044026][T11898] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1445'. [ 298.359236][T11926] FAULT_INJECTION: forcing a failure. [ 298.359236][T11926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.374311][T11926] CPU: 1 UID: 0 PID: 11926 Comm: syz.4.1449 Not tainted syzkaller #0 PREEMPT(full) [ 298.374342][T11926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 298.374364][T11926] Call Trace: [ 298.374373][T11926] [ 298.374382][T11926] dump_stack_lvl+0xe8/0x150 [ 298.374421][T11926] should_fail_ex+0x40c/0x560 [ 298.374452][T11926] _copy_from_iter+0x1d3/0x1660 [ 298.374479][T11926] ? kmem_cache_alloc_node_noprof+0x1d1/0x610 [ 298.374507][T11926] ? rcu_is_watching+0x15/0xb0 [ 298.374541][T11926] ? trace_kmem_cache_alloc+0x29/0xe0 [ 298.374569][T11926] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 298.374595][T11926] ? __pfx__copy_from_iter+0x10/0x10 [ 298.374624][T11926] ? __alloc_skb+0x276/0x7a0 [ 298.374654][T11926] ? __alloc_skb+0x276/0x7a0 [ 298.374692][T11926] ? netlink_sendmsg+0x650/0xb40 [ 298.374716][T11926] ? skb_put+0x112/0x210 [ 298.374752][T11926] netlink_sendmsg+0x6c0/0xb40 [ 298.374796][T11926] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.374826][T11926] ? aa_sock_msg_perm+0xf1/0x1b0 [ 298.374854][T11926] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.374878][T11926] sock_sendmsg_nosec+0x13a/0x180 [ 298.374910][T11926] ____sys_sendmsg+0x54e/0x850 [ 298.374939][T11926] ? __pfx_____sys_sendmsg+0x10/0x10 [ 298.374971][T11926] ? import_iovec+0x73/0xa0 [ 298.375007][T11926] ___sys_sendmsg+0x2a5/0x360 [ 298.375029][T11926] ? __lock_acquire+0x683/0x2cf0 [ 298.375063][T11926] ? __pfx____sys_sendmsg+0x10/0x10 [ 298.375124][T11926] ? __fget_files+0x2a/0x420 [ 298.375151][T11926] ? __fget_files+0x3a2/0x420 [ 298.375191][T11926] __x64_sys_sendmsg+0x1b1/0x290 [ 298.375217][T11926] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 298.375259][T11926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.375284][T11926] do_syscall_64+0x174/0x580 [ 298.375306][T11926] ? trace_irq_disable+0x3b/0x140 [ 298.375334][T11926] ? clear_bhb_loop+0x40/0x90 [ 298.375361][T11926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.375383][T11926] RIP: 0033:0x7f419ef9de99 [ 298.375403][T11926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.375423][T11926] RSP: 002b:00007f419fe9a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.375447][T11926] RAX: ffffffffffffffda RBX: 00007f419f225fa0 RCX: 00007f419ef9de99 [ 298.375463][T11926] RDX: 0000000000040050 RSI: 0000200000000100 RDI: 0000000000000003 [ 298.375478][T11926] RBP: 00007f419fe9a090 R08: 0000000000000000 R09: 0000000000000000 [ 298.375492][T11926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.375504][T11926] R13: 00007f419f226038 R14: 00007f419f225fa0 R15: 00007ffee5cbd208 [ 298.375539][T11926] [ 299.047103][T11941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1451'. [ 299.785638][ T5353] IPVS: starting estimator thread 0... [ 299.877602][T11983] IPVS: using max 26 ests per chain, 62400 per kthread [ 300.109218][T10212] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.125899][T10212] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.156403][T10212] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.192698][T10212] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.086421][T12025] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 301.152322][T12025] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 301.172239][T12027] __nla_validate_parse: 6 callbacks suppressed [ 301.172262][T12027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1471'. [ 301.276924][T12027] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1471'. [ 301.992459][T12059] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1478'. [ 302.184703][T12067] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1479'. [ 302.495208][T12074] syzkaller0: entered promiscuous mode [ 302.511837][T12074] syzkaller0: entered allmulticast mode [ 302.620975][T12080] netlink: 'syz.1.1484': attribute type 1 has an invalid length. [ 302.631290][T12080] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1484'. [ 302.641968][T12080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1484'. [ 302.781311][T12053] xfrm0 speed is unknown, defaulting to 1000 [ 303.354480][T12101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1490'. [ 303.368833][T12101] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1490'. [ 303.542373][T12105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1491'. [ 303.555327][T12108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1491'. [ 303.613073][T12112] netlink: 'syz.1.1493': attribute type 1 has an invalid length. [ 303.744264][T12112] 8021q: adding VLAN 0 to HW filter on device bond5 [ 304.036996][T12094] xfrm0 speed is unknown, defaulting to 1000 [ 304.417360][T12126] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 304.743092][T12126] bond8 (unregistering): Released all slaves [ 304.868806][T12135] netlink: 'syz.1.1499': attribute type 7 has an invalid length. [ 304.878844][T12135] netlink: 'syz.1.1499': attribute type 8 has an invalid length. [ 305.098678][T12148] FAULT_INJECTION: forcing a failure. [ 305.098678][T12148] name failslab, interval 1, probability 0, space 0, times 0 [ 305.111458][T12148] CPU: 0 UID: 0 PID: 12148 Comm: syz.4.1501 Not tainted syzkaller #0 PREEMPT(full) [ 305.111485][T12148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 305.111498][T12148] Call Trace: [ 305.111507][T12148] [ 305.111516][T12148] dump_stack_lvl+0xe8/0x150 [ 305.111564][T12148] should_fail_ex+0x40c/0x560 [ 305.111596][T12148] should_failslab+0xa8/0x100 [ 305.111629][T12148] kmem_cache_alloc_bulk_noprof+0x8b/0x7b0 [ 305.111661][T12148] ? pfn_valid+0x125/0x4c0 [ 305.111687][T12148] ? pfn_valid+0x125/0x4c0 [ 305.111722][T12148] ? pfn_valid+0x125/0x4c0 [ 305.111751][T12148] bpf_test_run_xdp_live+0x16e9/0x1c20 [ 305.111799][T12148] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 305.111857][T12148] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 305.111882][T12148] ? 0xffffffffa02057c0 [ 305.111956][T12148] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 305.111990][T12148] ? _copy_from_user+0x94/0xb0 [ 305.112022][T12148] ? bpf_test_init+0x113/0x150 [ 305.112043][T12148] ? xdp_convert_md_to_buff+0x5b/0x330 [ 305.112071][T12148] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 305.112112][T12148] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 305.112143][T12148] ? __fget_files+0x2a/0x420 [ 305.112177][T12148] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 305.112209][T12148] bpf_prog_test_run+0x2c5/0x340 [ 305.112245][T12148] __sys_bpf+0xa22/0xd90 [ 305.112282][T12148] ? __pfx___sys_bpf+0x10/0x10 [ 305.112322][T12148] ? __fget_files+0x2a/0x420 [ 305.112369][T12148] ? ksys_write+0x242/0x270 [ 305.112404][T12148] ? __pfx_ksys_write+0x10/0x10 [ 305.112443][T12148] __x64_sys_bpf+0xba/0xd0 [ 305.112468][T12148] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.112492][T12148] do_syscall_64+0x174/0x580 [ 305.112516][T12148] ? trace_irq_disable+0x3b/0x140 [ 305.112543][T12148] ? clear_bhb_loop+0x40/0x90 [ 305.112569][T12148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.112591][T12148] RIP: 0033:0x7f419ef9de99 [ 305.112611][T12148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.112629][T12148] RSP: 002b:00007f419fe9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 305.112652][T12148] RAX: ffffffffffffffda RBX: 00007f419f225fa0 RCX: 00007f419ef9de99 [ 305.112668][T12148] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 305.112683][T12148] RBP: 00007f419fe9a090 R08: 0000000000000000 R09: 0000000000000000 [ 305.112697][T12148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 305.112709][T12148] R13: 00007f419f226038 R14: 00007f419f225fa0 R15: 00007ffee5cbd208 [ 305.112745][T12148] [ 305.774323][T12161] gre2: entered promiscuous mode [ 305.786836][T12154] syzkaller1: entered promiscuous mode [ 305.802665][T12154] syzkaller1: entered allmulticast mode [ 306.366366][T12181] __nla_validate_parse: 3 callbacks suppressed [ 306.366388][T12181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1511'. [ 306.721418][T12196] FAULT_INJECTION: forcing a failure. [ 306.721418][T12196] name failslab, interval 1, probability 0, space 0, times 0 [ 306.734170][T12196] CPU: 1 UID: 0 PID: 12196 Comm: syz.2.1516 Not tainted syzkaller #0 PREEMPT(full) [ 306.734198][T12196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 306.734212][T12196] Call Trace: [ 306.734220][T12196] [ 306.734230][T12196] dump_stack_lvl+0xe8/0x150 [ 306.734268][T12196] should_fail_ex+0x40c/0x560 [ 306.734300][T12196] should_failslab+0xa8/0x100 [ 306.734333][T12196] kmem_cache_alloc_bulk_noprof+0x8b/0x7b0 [ 306.734365][T12196] ? pfn_valid+0x125/0x4c0 [ 306.734390][T12196] ? pfn_valid+0x125/0x4c0 [ 306.734414][T12196] ? pfn_valid+0x125/0x4c0 [ 306.734444][T12196] bpf_test_run_xdp_live+0x16e9/0x1c20 [ 306.734482][T12196] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 306.734524][T12196] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 306.734548][T12196] ? 0xffffffffa02057c0 [ 306.734620][T12196] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 306.734655][T12196] ? _copy_from_user+0x94/0xb0 [ 306.734687][T12196] ? bpf_test_init+0x113/0x150 [ 306.734708][T12196] ? xdp_convert_md_to_buff+0x5b/0x330 [ 306.734736][T12196] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 306.734778][T12196] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 306.734808][T12196] ? __fget_files+0x2a/0x420 [ 306.734843][T12196] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 306.734869][T12196] bpf_prog_test_run+0x2c5/0x340 [ 306.734903][T12196] __sys_bpf+0xa22/0xd90 [ 306.734941][T12196] ? __pfx___sys_bpf+0x10/0x10 [ 306.734986][T12196] ? __fget_files+0x2a/0x420 [ 306.735029][T12196] ? ksys_write+0x242/0x270 [ 306.735064][T12196] ? __pfx_ksys_write+0x10/0x10 [ 306.735104][T12196] __x64_sys_bpf+0xba/0xd0 [ 306.735129][T12196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.735154][T12196] do_syscall_64+0x174/0x580 [ 306.735177][T12196] ? trace_irq_disable+0x3b/0x140 [ 306.735204][T12196] ? clear_bhb_loop+0x40/0x90 [ 306.735231][T12196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.735253][T12196] RIP: 0033:0x7f7881b9de99 [ 306.735292][T12196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.735311][T12196] RSP: 002b:00007f7882a41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 306.735335][T12196] RAX: ffffffffffffffda RBX: 00007f7881e25fa0 RCX: 00007f7881b9de99 [ 306.735351][T12196] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 306.735365][T12196] RBP: 00007f7882a41090 R08: 0000000000000000 R09: 0000000000000000 [ 306.735379][T12196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 306.735392][T12196] R13: 00007f7881e26038 R14: 00007f7881e25fa0 R15: 00007ffe4cf760b8 [ 306.735427][T12196] [ 307.359649][T12205] veth0: entered promiscuous mode [ 307.375671][T12204] veth0: left promiscuous mode [ 307.574105][T12211] netlink: 'syz.4.1521': attribute type 1 has an invalid length. [ 307.594311][T12211] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1521'. [ 307.610214][T12211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1521'. [ 307.704350][T12217] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 307.704350][T12217] Please contact the netfilter-devel mailing list or update your nftables rules. [ 307.992580][T12221] netlink: 'syz.3.1523': attribute type 2 has an invalid length. [ 308.226547][T12229] syzkaller0: entered promiscuous mode [ 308.232706][T12229] syzkaller0: entered allmulticast mode [ 308.251291][T12228] TC_ACT_REPEAT abuse ? [ 308.261817][T12229] TC_ACT_REPEAT abuse ? [ 308.280170][T12229] netlink: 191600 bytes leftover after parsing attributes in process `syz.3.1525'. [ 308.646273][T12244] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1532'. [ 308.818329][T12254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1534'. [ 308.891736][T12254] gretap1: entered allmulticast mode [ 309.403081][T12282] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1542'. [ 309.440451][T12290] netlink: 'syz.1.1542': attribute type 1 has an invalid length. [ 309.468345][T12287] syzkaller0: entered promiscuous mode [ 309.484759][T12287] syzkaller0: entered allmulticast mode [ 309.632242][T12290] 8021q: adding VLAN 0 to HW filter on device bond6 [ 309.806291][T12282] bond6: (slave geneve2): making interface the new active one [ 309.816435][T12282] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 310.386121][T12295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.481096][T12295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1544'. [ 310.857215][T12358] sctp: [Deprecated]: syz.0.1555 (pid 12358) Use of struct sctp_assoc_value in delayed_ack socket option. [ 310.857215][T12358] Use struct sctp_sack_info instead [ 310.882466][T12355] nbd: socks must be embedded in a SOCK_ITEM attr [ 310.924079][T12355] xt_NFQUEUE: number of queues (3633) out of range (got 69161) [ 311.301036][T12371] ip_vti0: entered promiscuous mode [ 311.309315][T12371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1559'. [ 311.706981][T12381] xt_CT: You must specify a L4 protocol and not use inversions on it [ 312.091821][T12398] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1567'. [ 312.235591][T12413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1573'. [ 313.630072][T12474] syzkaller0: entered promiscuous mode [ 313.635767][T12474] syzkaller0: entered allmulticast mode [ 313.660255][T12474] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1587'. [ 313.916596][T12478] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1590'. [ 314.031671][T12494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1590'. [ 314.081069][T12478] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 314.095381][T12494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1590'. [ 314.107451][T12478] bond8 (unregistering): Released all slaves [ 314.116458][T12498] netlink: 292 bytes leftover after parsing attributes in process `syz.2.1590'. [ 314.161580][T12491] netlink: 616 bytes leftover after parsing attributes in process `syz.3.1593'. [ 314.273203][T12502] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1592'. [ 314.570110][T12510] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1596'. [ 315.094264][ T30] audit: type=1800 audit(1784737582.707:6): pid=12534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1600" name=CB dev="tmpfs" ino=1574 res=0 errno=0 [ 315.276356][T12538] xt_hashlimit: size too large, truncated to 1048576 [ 316.848090][T12572] tipc: Enabled bearer , priority 0 [ 316.869387][T12572] syzkaller0: entered promiscuous mode [ 316.885311][T12572] syzkaller0: entered allmulticast mode [ 316.903849][T12572] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 316.963777][T12572] tipc: Resetting bearer [ 316.991421][T12571] tipc: Resetting bearer [ 317.041717][T12571] tipc: Disabling bearer [ 317.048947][T12578] netlink: 'syz.3.1611': attribute type 1 has an invalid length. [ 317.145866][T12582] openvswitch: netlink: Actions may not be safe on all matching packets [ 317.268960][T12578] 8021q: adding VLAN 0 to HW filter on device bond9 [ 317.409798][T12584] bond9: (slave geneve4): making interface the new active one [ 317.426333][T12584] bond9: (slave geneve4): Enslaving as an active interface with an up link [ 317.612896][T12591] __nla_validate_parse: 5 callbacks suppressed [ 317.612915][T12591] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1618'. [ 317.928359][T12612] xt_bpf: check failed: parse error [ 318.035196][T12618] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1623'. [ 318.191491][T12623] sctp: [Deprecated]: syz.2.1626 (pid 12623) Use of struct sctp_assoc_value in delayed_ack socket option. [ 318.191491][T12623] Use struct sctp_sack_info instead [ 318.521483][T12640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.944224][T12646] syzkaller0: entered promiscuous mode [ 318.964981][T12646] syzkaller0: entered allmulticast mode [ 318.984743][T12650] veth0_macvtap: Caught tx_queue_len zero misconfig [ 319.099165][T12654] netlink: 'syz.0.1644': attribute type 2 has an invalid length. [ 319.123548][T12654] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1644'. [ 319.148174][T12658] openvswitch: netlink: Actions may not be safe on all matching packets [ 319.293826][T12658] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 319.321638][T12658] batman_adv: batadv0: Adding interface: gretap2 [ 319.335487][T12658] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.392478][T12658] batman_adv: batadv0: Interface activated: gretap2 [ 319.405335][T12621] xfrm0 speed is unknown, defaulting to 1000 [ 320.780234][T12713] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 320.975311][T12725] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1656'. [ 321.018314][T12725] tipc: Enabling of bearer rejected, media not registered [ 321.392880][T12741] netlink: 'syz.2.1661': attribute type 1 has an invalid length. [ 321.430573][T12741] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 322.039212][T12769] blkio.reset_stats is deprecated [ 322.156426][T12771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1669'. [ 322.877633][ T76] wlan1: Trigger new scan to find an IBSS to join [ 323.001886][T12811] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1681'. [ 323.271539][T12818] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1684'. [ 323.573740][T12840] veth0_macvtap: entered allmulticast mode [ 323.589888][T12840] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 324.110133][T12823] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 324.349314][T12860] netlink: 'syz.2.1697': attribute type 3 has an invalid length. [ 324.406857][T12862] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 324.545555][T12862] xt_connbytes: Forcing CT accounting to be enabled [ 324.865540][T12859] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1694'. [ 324.880503][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 324.887107][T12859] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1694'. [ 324.889747][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 324.926919][T12867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1694'. [ 324.948028][T12867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1694'. [ 325.265768][T12890] netlink: 'syz.2.1704': attribute type 1 has an invalid length. [ 325.925470][ T76] wlan1: Trigger new scan to find an IBSS to join [ 326.195347][T12924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1712'. [ 326.230687][T12924] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 326.271668][T12933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1713'. [ 326.314300][T12933] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1713'. [ 326.361426][T12933] ip6gre1: entered promiscuous mode [ 326.375852][T12933] ip6gre1: entered allmulticast mode [ 326.810006][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.061680][T12957] sctp: [Deprecated]: syz.3.1719 (pid 12957) Use of int in max_burst socket option. [ 327.061680][T12957] Use struct sctp_assoc_value instead [ 327.211527][T12962] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1722'. [ 327.240216][T12962] netlink: 'syz.4.1722': attribute type 3 has an invalid length. [ 327.268431][T12960] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 327.296685][T12965] netlink: 'syz.1.1723': attribute type 1 has an invalid length. [ 327.372881][T12965] netlink: 'syz.1.1723': attribute type 7 has an invalid length. [ 327.625484][T12984] netlink: 'syz.4.1728': attribute type 1 has an invalid length. [ 327.636717][T12980] netlink: 'syz.0.1726': attribute type 1 has an invalid length. [ 327.702293][T12984] 8021q: adding VLAN 0 to HW filter on device bond2 [ 327.737690][T12980] 8021q: adding VLAN 0 to HW filter on device bond10 [ 327.761960][T12987] vlan4: entered allmulticast mode [ 327.767398][T12987] bond2: entered allmulticast mode [ 327.853861][T12984] bond2: (slave geneve2): making interface the new active one [ 327.873901][T12984] geneve2: entered allmulticast mode [ 327.883750][T12984] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 328.268108][T13012] team0: Port device xfrm0 removed [ 328.289555][T13012] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 328.822690][T13047] __nla_validate_parse: 4 callbacks suppressed [ 328.822711][T13047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1744'. [ 329.042926][T13055] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1746'. [ 329.355882][T13066] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1749'. [ 329.417334][T13065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1748'. [ 329.441675][T13065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1748'. [ 329.473396][T13069] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1750'. [ 329.559514][T13065] bond10: Removing last arp target with arp_interval on [ 329.859185][T13095] IPVS: set_ctl: invalid protocol: 59 172.20.20.46:20003 [ 329.871173][T13092] netlink: 'syz.1.1752': attribute type 30 has an invalid length. [ 330.000869][T13100] netlink: 'syz.0.1754': attribute type 1 has an invalid length. [ 330.078500][T13101] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1754'. [ 330.150274][T13104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1755'. [ 330.231667][T13100] bond11: entered promiscuous mode [ 330.246359][T13100] 8021q: adding VLAN 0 to HW filter on device bond11 [ 330.272886][T13101] bond11: entered allmulticast mode [ 330.329176][T13052] xfrm0 speed is unknown, defaulting to 1000 [ 330.524603][T13120] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 330.714206][T13126] bond11: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 330.747234][T13131] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1759'. [ 330.760086][T13126] bond11 (unregistering): Released all slaves [ 331.259287][T13148] xt_hashlimit: size too large, truncated to 1048576 [ 331.436526][T13157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1763'. [ 332.290598][T13189] ip6gre1: entered promiscuous mode [ 332.313395][T13189] ip6gre1: entered allmulticast mode [ 332.333677][T13199] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 332.413849][T10204] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 332.466411][ T7750] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 332.475273][T10204] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 332.524408][T13199] smc: removing ib device syz0 [ 332.658317][ T7750] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 332.689999][ T7750] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 332.894540][T13199] smbdirect: ib_dev[syz0] removed [ 332.993046][ T36] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 333.143393][T13216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 333.150757][T13216] IPv6: NLM_F_CREATE should be set when creating new route [ 333.158105][T13216] IPv6: NLM_F_CREATE should be set when creating new route [ 335.154818][T13294] __nla_validate_parse: 3 callbacks suppressed [ 335.154838][T13294] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1787'. [ 335.227854][T13294] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1787'. [ 335.245726][T13288] IPVS: Scheduler module ip_vs_sip not found [ 335.287843][T13290] netlink: 1712 bytes leftover after parsing attributes in process `syz.1.1788'. [ 335.381763][T13290] veth0: entered promiscuous mode [ 335.433041][T13290] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 335.838457][T13311] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1791'. [ 335.899838][T13289] veth0: left promiscuous mode [ 336.278501][T13324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1794'. [ 336.398060][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 339.958913][T13369] kthread_run failed with err -4 [ 340.224574][T13385] xt_CT: No such helper "netbios-ns" [ 340.301356][T13390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1809'. [ 340.336428][T13390] netlink: 'syz.4.1809': attribute type 1 has an invalid length. [ 340.618054][T13409] syzkaller0: entered promiscuous mode [ 340.634454][T13409] syzkaller0: entered allmulticast mode [ 340.825941][T13427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1816'. [ 341.103385][T13430] syzkaller0: entered promiscuous mode [ 341.120831][T13430] veth0: entered promiscuous mode [ 341.129436][T13430] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1817'. [ 341.145233][T13430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1817'. [ 341.184040][T13440] tipc: Enabled bearer , priority 0 [ 341.334368][T13446] nbd: must specify a device to reconfigure [ 341.396331][T13440] tipc: Resetting bearer [ 341.421446][T13428] veth0: left promiscuous mode [ 341.460444][T13446] block nbd0: NBD_DISCONNECT [ 341.480413][T13446] block nbd0: Send disconnect failed -32 [ 341.490080][T13446] block nbd0: shutting down sockets [ 341.975915][T13434] tipc: Resetting bearer [ 342.404681][T13498] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1834'. [ 342.434407][T13498] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1834'. [ 342.509268][T13502] xt_TPROXY: Can be used only with -p tcp or -p udp [ 344.079423][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 344.392842][T13434] tipc: Disabling bearer [ 344.415971][ T7755] tipc: Node number set to 3765305342 [ 344.690560][T13527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1841'. [ 344.732864][T13530] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1842'. [ 344.781972][T13530] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1842'. [ 344.818735][T13542] netlink: 'syz.0.1842': attribute type 1 has an invalid length. [ 344.887739][T13541] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1845'. [ 345.016365][T13530] bond12 (unregistering): Released all slaves [ 345.051615][T13551] nbd0: detected capacity change from 0 to 127 [ 345.070355][ T5628] block nbd0: Receive control failed (result -32) [ 345.090005][ T1615] block nbd0: Dead connection, failed to find a fallback [ 345.099207][ T1615] block nbd0: shutting down sockets [ 345.106030][ T1615] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 345.117512][ T1615] Buffer I/O error on dev nbd0, logical block 0, async page read [ 345.139177][ T1615] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 345.148611][ T1615] Buffer I/O error on dev nbd0, logical block 1, async page read [ 345.158846][ T1615] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 345.168352][ T1615] Buffer I/O error on dev nbd0, logical block 2, async page read [ 345.176440][ T1615] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 345.186209][ T1615] Buffer I/O error on dev nbd0, logical block 3, async page read [ 345.195314][ T1615] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 345.205040][ T1615] Buffer I/O error on dev nbd0, logical block 0, async page read [ 345.215873][ T1615] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 345.227377][ T1615] Buffer I/O error on dev nbd0, logical block 1, async page read [ 345.235446][ T1615] Buffer I/O error on dev nbd0, logical block 2, async page read [ 345.245327][ T1615] Buffer I/O error on dev nbd0, logical block 3, async page read [ 345.255840][ T1615] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 345.265239][ T1615] Buffer I/O error on dev nbd0, logical block 0, async page read [ 345.273277][ T1615] Buffer I/O error on dev nbd0, logical block 1, async page read [ 345.283614][ T1615] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 345.293633][ T1615] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 345.305083][ T1615] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 345.323716][T10551] ldm_validate_partition_table(): Disk read failed. [ 345.349957][T10551] Dev nbd0: unable to read RDB block 0 [ 345.386276][T13547] __nla_validate_parse: 6 callbacks suppressed [ 345.386298][T13547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1847'. [ 345.436825][T10551] nbd0: unable to read partition table [ 345.505313][T10551] ldm_validate_partition_table(): Disk read failed. [ 345.515041][T10551] Dev nbd0: unable to read RDB block 0 [ 345.526961][T10551] nbd0: unable to read partition table [ 345.694356][T13561] syzkaller0: entered promiscuous mode [ 345.701107][T13561] syzkaller0: entered allmulticast mode [ 345.708871][T13566] syzkaller1: entered promiscuous mode [ 345.714581][T13566] syzkaller1: entered allmulticast mode [ 345.811849][T13567] ip6gre1: left promiscuous mode [ 345.836389][T13567] ip6gre1: left allmulticast mode [ 345.889397][ T76] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.931242][ T76] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.971075][ T76] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.006948][ T76] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.115013][T13577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1855'. [ 346.136612][T13577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1855'. [ 346.363274][T13583] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1857'. [ 346.481116][ T76] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 346.546330][T13585] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 346.553670][T13585] IPv6: NLM_F_CREATE should be set when creating new route [ 346.561091][T13585] IPv6: NLM_F_CREATE should be set when creating new route [ 346.748660][T13598] netlink: 'syz.3.1860': attribute type 1 has an invalid length. [ 347.422849][T13610] netlink: 'syz.2.1861': attribute type 1 has an invalid length. [ 347.430761][T13610] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1861'. [ 348.747172][T13583] lo speed is unknown, defaulting to 1000 [ 348.774163][T13598] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 348.836407][T13583] lo speed is unknown, defaulting to 1000 [ 348.887386][T13583] lo speed is unknown, defaulting to 1000 [ 348.926144][T13583] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 348.993754][T13583] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 349.063200][T13583] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 349.166550][T13583] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 349.244190][T13630] netlink: 'syz.1.1864': attribute type 1 has an invalid length. [ 349.275248][T13630] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.1864'. [ 349.288243][T13628] FAULT_INJECTION: forcing a failure. [ 349.288243][T13628] name failslab, interval 1, probability 0, space 0, times 0 [ 349.301044][T13628] CPU: 0 UID: 0 PID: 13628 Comm: syz.2.1866 Not tainted syzkaller #0 PREEMPT(full) [ 349.301072][T13628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 349.301085][T13628] Call Trace: [ 349.301162][T13628] [ 349.301228][T13628] dump_stack_lvl+0xe8/0x150 [ 349.301375][T13628] should_fail_ex+0x40c/0x560 [ 349.301491][T13628] should_failslab+0xa8/0x100 [ 349.301556][T13628] kmem_cache_alloc_bulk_noprof+0x8b/0x7b0 [ 349.301595][T13628] ? pfn_valid+0x125/0x4c0 [ 349.301717][T13628] ? pfn_valid+0x125/0x4c0 [ 349.301742][T13628] ? pfn_valid+0x125/0x4c0 [ 349.301770][T13628] bpf_test_run_xdp_live+0x16e9/0x1c20 [ 349.301808][T13628] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 349.301845][T13628] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 349.301870][T13628] ? 0xffffffffa02057c0 [ 349.301938][T13628] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 349.301972][T13628] ? _copy_from_user+0x94/0xb0 [ 349.302059][T13628] ? bpf_test_init+0x113/0x150 [ 349.302079][T13628] ? xdp_convert_md_to_buff+0x5b/0x330 [ 349.302107][T13628] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 349.302148][T13628] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 349.302177][T13628] ? __fget_files+0x2a/0x420 [ 349.302223][T13628] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 349.302249][T13628] bpf_prog_test_run+0x2c5/0x340 [ 349.302304][T13628] __sys_bpf+0xa22/0xd90 [ 349.302341][T13628] ? __pfx___sys_bpf+0x10/0x10 [ 349.302390][T13628] ? __fget_files+0x2a/0x420 [ 349.302443][T13628] ? ksys_write+0x242/0x270 [ 349.302486][T13628] ? __pfx_ksys_write+0x10/0x10 [ 349.302525][T13628] __x64_sys_bpf+0xba/0xd0 [ 349.302551][T13628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.302595][T13628] do_syscall_64+0x174/0x580 [ 349.302681][T13628] ? trace_irq_disable+0x3b/0x140 [ 349.302715][T13628] ? clear_bhb_loop+0x40/0x90 [ 349.302742][T13628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.302764][T13628] RIP: 0033:0x7f7881b9de99 [ 349.302791][T13628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.302810][T13628] RSP: 002b:00007f7882a41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 349.302841][T13628] RAX: ffffffffffffffda RBX: 00007f7881e25fa0 RCX: 00007f7881b9de99 [ 349.302857][T13628] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 349.302871][T13628] RBP: 00007f7882a41090 R08: 0000000000000000 R09: 0000000000000000 [ 349.302885][T13628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 349.302897][T13628] R13: 00007f7881e26038 R14: 00007f7881e25fa0 R15: 00007ffe4cf760b8 [ 349.302933][T13628] [ 349.571023][T13583] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 349.675571][T13633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1867'. [ 349.702599][T13583] lo speed is unknown, defaulting to 1000 [ 349.773822][T13583] lo speed is unknown, defaulting to 1000 [ 349.836177][T13583] lo speed is unknown, defaulting to 1000 [ 349.862408][T13583] lo speed is unknown, defaulting to 1000 [ 349.933587][T13647] FAULT_INJECTION: forcing a failure. [ 349.933587][T13647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.982757][T13647] CPU: 0 UID: 0 PID: 13647 Comm: syz.2.1870 Not tainted syzkaller #0 PREEMPT(full) [ 349.982787][T13647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 349.982800][T13647] Call Trace: [ 349.982811][T13647] [ 349.982821][T13647] dump_stack_lvl+0xe8/0x150 [ 349.982858][T13647] should_fail_ex+0x40c/0x560 [ 349.982888][T13647] _copy_from_user+0x2d/0xb0 [ 349.982920][T13647] kstrtouint_from_user+0xd6/0x180 [ 349.982951][T13647] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 349.983016][T13583] lo speed is unknown, defaulting to 1000 [ 349.983003][T13647] proc_fail_nth_write+0x8e/0x210 [ 349.983099][T13647] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 349.983153][T13647] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 349.983258][T13647] vfs_write+0x296/0xba0 [ 349.983380][T13647] ? __pfx_vfs_write+0x10/0x10 [ 349.983478][T13647] ? __fget_files+0x2a/0x420 [ 349.983579][T13647] ? __fget_files+0x3a2/0x420 [ 349.983664][T13647] ? __fget_files+0x2a/0x420 [ 349.983769][T13647] ksys_write+0x150/0x270 [ 349.983851][T13647] ? __pfx_ksys_write+0x10/0x10 [ 349.983966][T13647] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.984030][T13647] do_syscall_64+0x174/0x580 [ 349.984101][T13647] ? trace_irq_disable+0x3b/0x140 [ 349.984162][T13647] ? clear_bhb_loop+0x40/0x90 [ 349.984237][T13647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.984333][T13647] RIP: 0033:0x7f7881b5e6ce [ 349.984388][T13647] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 349.984432][T13647] RSP: 002b:00007f7882a40fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 349.984499][T13647] RAX: ffffffffffffffda RBX: 00007f7882a416c0 RCX: 00007f7881b5e6ce [ 349.984554][T13647] RDX: 0000000000000001 RSI: 00007f7882a410a0 RDI: 0000000000000004 [ 349.984594][T13647] RBP: 00007f7882a41090 R08: 0000000000000000 R09: 0000000000000000 [ 349.984648][T13647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 349.984695][T13647] R13: 00007f7881e26038 R14: 00007f7881e25fa0 R15: 00007ffe4cf760b8 [ 349.984795][T13647] [ 350.255655][T13583] lo speed is unknown, defaulting to 1000 [ 350.982127][T13677] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1877'. [ 351.022991][T13677] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1877'. [ 351.185110][T13688] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1877'. [ 351.450170][T13696] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1883'. [ 351.461563][T13696] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1883'. [ 351.623967][T13698] vlan5: entered promiscuous mode [ 351.649277][T13698] bridge0: entered promiscuous mode [ 351.919467][T13708] bond0: Caught tx_queue_len zero misconfig [ 351.926201][T13708] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1887'. [ 351.936168][T13706] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1886'. [ 351.946640][T13706] netlink: 'syz.2.1886': attribute type 9 has an invalid length. [ 351.956229][T13706] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1886'. [ 351.979400][T13706] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1886'. [ 352.274199][T13724] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1892'. [ 352.289321][T13714] pimreg: entered allmulticast mode [ 352.334995][T13727] netlink: 'syz.2.1893': attribute type 21 has an invalid length. [ 352.347895][T13727] IPv6: NLM_F_CREATE should be specified when creating new route [ 352.358088][T13727] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 352.365380][T13727] IPv6: NLM_F_CREATE should be set when creating new route [ 352.372718][T13727] IPv6: NLM_F_CREATE should be set when creating new route [ 352.380039][T13727] IPv6: NLM_F_CREATE should be set when creating new route [ 352.400594][T13724] team0 (unregistering): Port device team_slave_0 removed [ 352.449243][T13724] team0 (unregistering): Port device team_slave_1 removed [ 352.483583][T13714] pimreg: left allmulticast mode [ 352.527180][T13728] tipc: Enabling of bearer rejected, failed to enable media [ 352.527214][T13733] netlink: 'syz.1.1894': attribute type 4 has an invalid length. [ 352.575290][T13734] netlink: 'syz.1.1894': attribute type 4 has an invalid length. [ 352.789493][T13743] xt_TCPMSS: Only works on TCP SYN packets [ 354.443400][T10205] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.488045][T10205] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.520009][T10205] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.559855][T10205] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.604276][T10205] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.632521][T10205] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.814540][T10205] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.856338][T10205] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.957815][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.965129][ C0] bridge0: topology change detected, propagating [ 354.975837][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.983185][ C0] bridge0: topology change detected, propagating [ 355.172581][T13817] --map-set only usable from mangle table [ 355.216174][T13813] siw: device registration error -23 [ 355.791848][T13835] syzkaller0: entered promiscuous mode [ 355.811304][T13835] syzkaller0: entered allmulticast mode [ 356.269928][T13870] __nla_validate_parse: 6 callbacks suppressed [ 356.270005][T13870] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1922'. [ 359.440185][ T77] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 363.278060][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 391.438603][ T76] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 395.743423][T13926] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1926'. [ 395.828166][T13930] netlink: 'syz.4.1931': attribute type 1 has an invalid length. [ 395.908273][T13930] 8021q: adding VLAN 0 to HW filter on device bond3 [ 395.970509][T13936] macvlan4: entered promiscuous mode [ 395.976173][T13936] macvlan4: entered allmulticast mode [ 395.983682][T13936] bond3: entered promiscuous mode [ 395.992673][T13936] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 396.003416][T13936] bond3: left promiscuous mode [ 396.174018][T13942] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 396.201783][T13942] netlink: 'syz.1.1933': attribute type 10 has an invalid length. [ 396.213874][T13942] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 396.224639][T13942] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 396.266252][T13942] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 396.285478][T13945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.473594][T13927] lo speed is unknown, defaulting to 1000 [ 396.853079][T13962] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1938'. [ 397.190166][T13971] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1942'. [ 397.739383][T13982] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1945'. [ 398.012887][T13985] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 398.039901][T13998] netlink: 'syz.4.1947': attribute type 3 has an invalid length. [ 398.514473][T14018] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1952'. [ 398.550640][T14011] syzkaller0: entered promiscuous mode [ 398.578134][T14011] syzkaller0: entered allmulticast mode [ 398.619435][T14011] tipc: Enabled bearer , priority 0 [ 398.724719][T14030] tipc: Resetting bearer [ 398.812273][T14011] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1948'. [ 398.900463][T14010] tipc: Resetting bearer [ 398.980939][T14010] tipc: Disabling bearer [ 398.996627][T14034] netlink: 'syz.0.1953': attribute type 1 has an invalid length. [ 399.306815][T14034] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1953'. [ 399.342707][T14044] bond12: (slave veth5): Enslaving as an active interface with a down link [ 399.399153][T14047] bond12: (slave veth7): Enslaving as an active interface with a down link [ 399.442566][T14034] 8021q: adding VLAN 0 to HW filter on device bond12 [ 399.459086][T14057] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 399.964878][T14083] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1962'. [ 400.006622][T14083] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1962'. [ 400.020868][T14086] tipc: Enabling of bearer rejected, already enabled [ 400.039711][T14086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1961'. [ 400.219743][T14091] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 400.504074][T14055] lo speed is unknown, defaulting to 1000 [ 401.024064][T14123] __nla_validate_parse: 3 callbacks suppressed [ 401.024084][T14123] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1967'. [ 401.331335][T14138] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1968'. [ 401.550406][T14101] dvmrp0: entered allmulticast mode [ 401.852703][T14149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1971'. [ 401.927763][T14149] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1971'. [ 402.111274][T14096] lo speed is unknown, defaulting to 1000 [ 402.458432][T14170] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1976'. [ 402.484784][T14170] siw: device registration error -23 [ 402.512015][T14170] smc: removing ib device syz1 [ 402.744939][T14170] smbdirect: ib_dev[syz1] removed [ 403.080415][T14187] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1980'. [ 403.279046][T14191] pim6reg: entered allmulticast mode [ 403.575453][T14206] --map-set only usable from mangle table [ 404.042480][T14224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1992'. [ 404.133958][T14225] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 404.397057][T14232] syzkaller0: entered promiscuous mode [ 404.426686][T14232] syzkaller0: entered allmulticast mode [ 404.434528][T14232] PF_CAN: dropped non conform CAN FD skbuff: dev type 3, len 65487 [ 404.666085][T14243] netlink: 516 bytes leftover after parsing attributes in process `syz.2.1998'. [ 404.729113][T14245] syzkaller0: entered promiscuous mode [ 404.737167][T14245] syzkaller0: entered allmulticast mode [ 404.759743][T14245] tipc: Enabled bearer , priority 0 [ 404.788795][T14245] tipc: Resetting bearer [ 404.805634][T14245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1997'. [ 404.828084][T14248] x_tables: duplicate underflow at hook 2 [ 404.841715][T14245] vlan5: entered allmulticast mode [ 404.846910][T14245] bond0: entered allmulticast mode [ 404.864566][T14244] tipc: Resetting bearer [ 404.967408][T14244] tipc: Disabling bearer [ 405.373426][T14262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2003'. [ 406.114102][T14290] netlink: 'syz.4.2011': attribute type 11 has an invalid length. [ 406.537772][T14314] __nla_validate_parse: 4 callbacks suppressed [ 406.537793][T14314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2013'. [ 406.553312][T14314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2013'. [ 406.562820][T14314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2013'. [ 406.579316][T14314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2013'. [ 406.588576][T14314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2013'. [ 406.604159][T14315] bond0: entered promiscuous mode [ 406.609483][T14314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2013'. [ 406.620042][T14315] bond0: left promiscuous mode [ 406.668034][T14314] bond0: entered promiscuous mode [ 406.674537][T14314] bond0: left promiscuous mode [ 406.721675][T14314] geneve1: Caught tx_queue_len zero misconfig [ 408.704222][T14276] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 408.937107][T14324] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2016'. [ 408.966390][T14332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2018'. [ 409.014534][T14331] netlink: 'syz.3.2017': attribute type 30 has an invalid length. [ 409.039891][T14342] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2016'. [ 409.050010][T14341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2019'. [ 409.056896][T14333] netlink: 'syz.3.2017': attribute type 30 has an invalid length. [ 409.207710][T14333] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 409.501685][T14360] syzkaller1: entered promiscuous mode [ 409.531403][T14360] syzkaller1: entered allmulticast mode [ 409.698255][T14371] netlink: 'syz.3.2027': attribute type 2 has an invalid length. [ 409.755405][T14371] : entered promiscuous mode [ 410.002752][T14384] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.018175][T14384] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.027264][T14384] bridge_slave_0: entered allmulticast mode [ 410.040136][T14384] bridge_slave_0: entered promiscuous mode [ 410.049770][T14384] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.057094][T14384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.680118][T14422] netlink: 'syz.4.2039': attribute type 5 has an invalid length. [ 410.716138][T14422] netlink: 'syz.4.2039': attribute type 5 has an invalid length. [ 410.788277][T14424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.152599][T14445] geneve0: Caught tx_queue_len zero misconfig [ 411.299512][T14445] veth7: entered allmulticast mode [ 411.589845][T14474] hsr0: entered promiscuous mode [ 411.895187][T14473] hsr0: left promiscuous mode [ 412.156006][T14489] __nla_validate_parse: 23 callbacks suppressed [ 412.156029][T14489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2056'. [ 412.372679][T14497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2059'. [ 412.589546][T14509] tipc: Can't bind to reserved service type 1 [ 412.808941][T14517] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 412.905695][T14527] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2066'. [ 413.072227][ T36] tipc: Subscription rejected, illegal request [ 413.316223][T14540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2069'. [ 413.398525][T14542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2070'. [ 413.520678][T14545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2071'. [ 413.539915][T14545] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2071'. [ 413.761514][T14551] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2072'. [ 414.040023][T14562] bond0: (slave vlan0): Opening slave failed [ 414.110270][T14566] netlink: 'syz.4.2077': attribute type 1 has an invalid length. [ 414.149174][T14566] netlink: 'syz.4.2077': attribute type 2 has an invalid length. [ 414.246898][T14575] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2079'. [ 414.299818][T14566] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2077'. [ 414.371287][T14577] syzkaller0: entered promiscuous mode [ 414.399721][T14577] syzkaller0: entered allmulticast mode [ 415.409471][T14629] geneve3: entered promiscuous mode [ 415.592094][ T30] audit: type=1804 audit(1784737683.207:7): pid=14636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2096" name="/newroot/413/cgroup.controllers" dev="tmpfs" ino=2132 res=1 errno=0 [ 415.690764][ T30] audit: type=1800 audit(1784737683.207:8): pid=14636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2096" name="cgroup.controllers" dev="tmpfs" ino=2132 res=0 errno=0 [ 416.853327][T14681] netlink: 'syz.4.2108': attribute type 1 has an invalid length. [ 416.901265][T14692] sctp: [Deprecated]: syz.1.2110 (pid 14692) Use of struct sctp_assoc_value in delayed_ack socket option. [ 416.901265][T14692] Use struct sctp_sack_info instead [ 416.994625][T14681] 8021q: adding VLAN 0 to HW filter on device bond4 [ 417.029662][T14698] xt_hashlimit: size too large, truncated to 1048576 [ 417.142590][T14686] bond4: (slave veth9): Enslaving as an active interface with a down link [ 417.223314][T14687] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 417.243719][T14687] bond4: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 417.317100][T14704] xfrm0 speed is unknown, defaulting to 1000 [ 417.355978][T14710] team0: Device xfrm0 is of different type [ 417.389370][T14704] xfrm0 speed is unknown, defaulting to 1000 [ 417.396938][T14704] xfrm0 speed is unknown, defaulting to 1000 [ 417.626150][T14718] bridge0: entered promiscuous mode [ 417.636495][T14718] bridge0: entered allmulticast mode [ 417.814736][T14728] syzkaller0: entered promiscuous mode [ 417.834311][T14728] syzkaller0: entered allmulticast mode [ 417.889514][T14735] netlink: 'syz.3.2117': attribute type 1 has an invalid length. [ 417.952720][T14736] __nla_validate_parse: 6 callbacks suppressed [ 417.952755][T14736] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2118'. [ 418.148736][T14741] netlink: 'syz.2.2120': attribute type 11 has an invalid length. [ 418.167785][T14741] netlink: 'syz.2.2120': attribute type 11 has an invalid length. [ 418.176285][T14741] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2120'. [ 418.257255][T14704] infiniband syz0: set down [ 418.262467][ T7745] xfrm0 speed is unknown, defaulting to 1000 [ 418.269040][T14704] infiniband syz0: added xfrm0 [ 418.275999][T14704] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 418.281075][T14704] infiniband syz0: Couldn't open port 1 [ 418.295633][T14704] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 418.323121][T14704] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 418.340955][T14704] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 418.484353][T14752] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.499833][T14704] RDS/IB: syz0: added [ 418.509580][T14704] smc: adding ib device syz0 with port count 1 [ 418.527388][T14704] smc: ib device syz0 port 1 has no pnetid [ 418.540073][T14755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2123'. [ 418.543481][ T7733] xfrm0 speed is unknown, defaulting to 1000 [ 418.571632][T14755] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2123'. [ 418.578324][T14704] xfrm0 speed is unknown, defaulting to 1000 [ 419.072405][T14776] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2131'. [ 419.097974][T14776] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 419.207939][T14704] xfrm0 speed is unknown, defaulting to 1000 [ 419.760168][T14803] netlink: 'syz.3.2134': attribute type 11 has an invalid length. [ 419.790331][T14803] netlink: 'syz.3.2134': attribute type 4 has an invalid length. [ 419.829802][T14808] netlink: 'syz.2.2137': attribute type 30 has an invalid length. [ 419.838354][T14803] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2134'. [ 420.221746][T14807] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2136'. [ 420.237176][T14826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2138'. [ 420.346989][T14825] lo speed is unknown, defaulting to 1000 [ 420.474061][T14704] xfrm0 speed is unknown, defaulting to 1000 [ 421.139058][T14837] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2143'. [ 421.189008][T14825] xfrm0 speed is unknown, defaulting to 1000 [ 421.383422][T14845] lo speed is unknown, defaulting to 1000 [ 421.389915][T14840] netlink: 'syz.0.2144': attribute type 1 has an invalid length. [ 421.411266][T14840] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.2144'. [ 422.746223][T14857] tipc: Enabled bearer , priority 0 [ 422.748652][T14704] xfrm0 speed is unknown, defaulting to 1000 [ 422.821509][T14831] tipc: Disabling bearer [ 423.281707][T14845] xfrm0 speed is unknown, defaulting to 1000 [ 423.754024][T14704] xfrm0 speed is unknown, defaulting to 1000 [ 423.874433][T14888] __nla_validate_parse: 3 callbacks suppressed [ 423.874453][T14888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2153'. [ 426.416902][T14973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2176'. [ 426.424441][T14972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2178'. [ 426.543434][T14966] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2176'. [ 426.554456][T14966] NCSI netlink: No device for ifindex 566712438 [ 426.562562][T14973] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2176'. [ 426.572002][T14973] NCSI netlink: No device for ifindex 566712438 [ 426.610972][T14989] netlink: 'syz.1.2181': attribute type 61 has an invalid length. [ 426.661174][T14983] lo speed is unknown, defaulting to 1000 [ 426.673543][T14983] xfrm0 speed is unknown, defaulting to 1000 [ 427.400571][T14987] dvmrp0: entered allmulticast mode [ 427.826692][T15028] netlink: 'syz.3.2188': attribute type 6 has an invalid length. [ 428.091591][T15037] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.104606][T15035] xt_hashlimit: size too large, truncated to 1048576 [ 429.369597][T14972] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 429.653028][T15061] netlink: 'syz.0.2198': attribute type 3 has an invalid length. [ 429.685348][T15061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2198'. [ 429.799060][T15079] netlink: 'syz.4.2201': attribute type 1 has an invalid length. [ 429.827040][T15079] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2201'. [ 429.890631][T15061] 8021q: adding VLAN 0 to HW filter on device bond13 [ 429.935888][T15069] 8021q: adding VLAN 0 to HW filter on device bond13 [ 429.946913][T15069] bond13: (slave nlmon0): The slave device specified does not support setting the MAC address [ 429.986305][T15069] bond13: (slave nlmon0): Error -95 calling set_mac_address [ 430.136469][T15070] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 430.715998][T15113] syzkaller1: left promiscuous mode [ 430.732697][T15113] syzkaller1: left allmulticast mode [ 430.990423][T15120] lo speed is unknown, defaulting to 1000 [ 431.001388][T15126] syzkaller0: entered promiscuous mode [ 431.019077][T15126] syzkaller0: entered allmulticast mode [ 431.037182][T15120] xfrm0 speed is unknown, defaulting to 1000 [ 431.082463][T15126] tipc: Enabled bearer , priority 0 [ 431.114232][T15124] tipc: Resetting bearer [ 431.192342][T15124] tipc: Disabling bearer [ 431.375349][T15144] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2222'. [ 431.404234][T15144] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2222'. [ 431.986187][T15127] TCP: TCP_TX_DELAY enabled [ 432.310661][T15162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2227'. [ 432.332489][T15162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2227'. [ 432.568708][T15162] bond9: entered promiscuous mode [ 432.593579][T15162] 8021q: adding VLAN 0 to HW filter on device bond9 [ 432.743938][T15163] ipvlan0: entered allmulticast mode [ 432.764167][T15163] bond9: entered allmulticast mode [ 432.890226][T15175] netlink: 'syz.0.2230': attribute type 1 has an invalid length. [ 433.803229][T15195] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2237'. [ 433.813672][T15195] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2237'. [ 433.999155][T15202] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2238'. [ 434.020913][T15202] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2238'. [ 434.036462][T15205] syzkaller0: entered promiscuous mode [ 434.049256][T15205] syzkaller0: entered allmulticast mode [ 434.154940][T15209] bridge7: entered allmulticast mode [ 434.542632][T15217] netlink: 'syz.0.2243': attribute type 1 has an invalid length. [ 434.583011][T15217] 8021q: adding VLAN 0 to HW filter on device bond14 [ 434.714778][T15222] bond14: (slave geneve4): making interface the new active one [ 434.750602][T15222] bond14: (slave geneve4): Enslaving as an active interface with an up link [ 434.996757][T15224] pim6reg1: entered promiscuous mode [ 435.007809][T15224] pim6reg1: entered allmulticast mode [ 435.706176][T15238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2248'. [ 436.100278][T15238] 8021q: adding VLAN 0 to HW filter on device bond10 [ 436.460037][T15260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2253'. [ 437.235147][T15282] syzkaller0: entered promiscuous mode [ 437.241073][T15282] syzkaller0: entered allmulticast mode [ 437.250992][T15282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2262'. [ 437.284461][T15282] netlink: 'syz.3.2262': attribute type 10 has an invalid length. [ 437.300906][T15282] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2262'. [ 437.311267][T15282] dummy0: entered promiscuous mode [ 437.628568][T15285] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 437.659194][T15287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2264'. [ 437.687575][T15287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2264'. [ 438.111261][T15291] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2265'. [ 438.173318][T15299] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2266'. [ 438.213416][T15299] netlink: 'syz.4.2266': attribute type 2 has an invalid length. [ 438.222587][T15299] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2266'. [ 438.233093][T15299] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 438.373123][T15305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2269'. [ 438.680739][T15324] netlink: 'syz.0.2272': attribute type 1 has an invalid length. [ 438.783743][T15323] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 438.946167][T15332] syzkaller0: entered promiscuous mode [ 438.952007][T15332] syzkaller0: entered allmulticast mode [ 439.352498][T15343] sctp: [Deprecated]: syz.3.2281 (pid 15343) Use of int in maxseg socket option. [ 439.352498][T15343] Use struct sctp_assoc_value instead [ 439.601671][T15354] bond11: Unable to set down delay as MII monitoring is disabled [ 439.781708][T15341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.822212][T15354] bond11 (unregistering): Released all slaves [ 440.244497][T15382] netlink: 'syz.4.2288': attribute type 1 has an invalid length. [ 440.260858][T15382] netlink: 'syz.4.2288': attribute type 1 has an invalid length. [ 440.817329][T15404] __nla_validate_parse: 5 callbacks suppressed [ 440.817350][T15404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2292'. [ 441.096419][T15418] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 442.064039][T15465] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2309'. [ 442.112928][T15465] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2309'. [ 442.205827][T15471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2312'. [ 442.257818][T15471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2312'. [ 442.376759][T15480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2314'. [ 442.612428][T15495] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2317'. [ 442.657395][T15495] IPv6: NLM_F_CREATE should be specified when creating new route [ 442.669844][T15495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.670417][T15500] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2318'. [ 442.741399][T15503] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2318'. [ 442.946055][T15511] netlink: 'syz.0.2321': attribute type 1 has an invalid length. [ 442.991446][T15509] syzkaller0: entered promiscuous mode [ 443.006243][T15509] syzkaller0: entered allmulticast mode [ 443.235780][T15527] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2324'. [ 443.507405][T15537] netlink: 'syz.1.2326': attribute type 1 has an invalid length. [ 443.749307][T15537] 8021q: adding VLAN 0 to HW filter on device bond10 [ 443.824514][T15562] syzkaller1: entered promiscuous mode [ 443.869642][T15562] syzkaller1: entered allmulticast mode [ 444.055224][T15569] bond11: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 444.077368][T15569] bond11 (unregistering): Released all slaves [ 444.782948][T15599] openvswitch: netlink: IP tunnel dst address not specified [ 445.627241][T15637] netlink: 'syz.3.2352': attribute type 10 has an invalid length. [ 446.001766][T15656] __nla_validate_parse: 14 callbacks suppressed [ 446.001788][T15656] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2357'. [ 446.058374][T15659] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2356'. [ 446.081888][T15657] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2356'. [ 446.211465][T15664] xt_hashlimit: max too large, truncated to 1048576 [ 446.231317][T15664] xt_hashlimit: overflow, try lower: 2/0 [ 446.241941][T15664] syzkaller0: entered promiscuous mode [ 446.249685][T15664] syzkaller0: entered allmulticast mode [ 446.706354][T15686] syzkaller0: entered promiscuous mode [ 446.721206][T15686] syzkaller0: entered allmulticast mode [ 446.840657][T15691] sctp: [Deprecated]: syz.3.2367 (pid 15691) Use of struct sctp_assoc_value in delayed_ack socket option. [ 446.840657][T15691] Use struct sctp_sack_info instead [ 447.317633][T15709] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2373'. [ 447.454756][T15719] lo speed is unknown, defaulting to 1000 [ 447.462098][T15724] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2376'. [ 447.515558][T15719] xfrm0 speed is unknown, defaulting to 1000 [ 447.630874][T15734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2377'. [ 448.257450][T15742] syzkaller0: entered promiscuous mode [ 448.270240][T15742] syzkaller0: entered allmulticast mode [ 450.882610][T15766] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 450.906018][T15766] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 450.926508][T15766] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 451.690326][T15809] syzkaller0: entered promiscuous mode [ 451.713291][T15809] syzkaller0: entered allmulticast mode [ 451.827114][T15815] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 451.868385][T15815] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 452.376692][T15838] netlink: 'syz.0.2400': attribute type 21 has an invalid length. [ 452.423137][T15838] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2400'. [ 452.484905][T15838] netlink: 'syz.0.2400': attribute type 4 has an invalid length. [ 452.501219][T15838] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2400'. [ 452.523169][T15841] syzkaller0: entered promiscuous mode [ 452.532094][T15838] netlink: 'syz.0.2400': attribute type 21 has an invalid length. [ 452.543610][T15841] syzkaller0: entered allmulticast mode [ 452.553092][T15838] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2400'. [ 452.580551][T15838] netlink: 'syz.0.2400': attribute type 4 has an invalid length. [ 452.607753][T15838] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2400'. [ 452.630569][T15838] netlink: 'syz.0.2400': attribute type 21 has an invalid length. [ 452.652174][T15838] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2400'. [ 452.698037][T15838] netlink: 'syz.0.2400': attribute type 4 has an invalid length. [ 452.747934][T15838] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2400'. [ 452.780835][T15838] netlink: 'syz.0.2400': attribute type 21 has an invalid length. [ 452.807258][T15838] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2400'. [ 452.850489][T15838] netlink: 'syz.0.2400': attribute type 4 has an invalid length. [ 452.871010][T15838] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2400'. [ 452.890273][T15838] netlink: 'syz.0.2400': attribute type 21 has an invalid length. [ 452.900994][T15850] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2404'. [ 452.912980][T15838] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2400'. [ 452.925030][T15838] netlink: 'syz.0.2400': attribute type 4 has an invalid length. [ 454.386843][T15921] lo speed is unknown, defaulting to 1000 [ 454.408626][T15921] xfrm0 speed is unknown, defaulting to 1000 [ 456.269405][T15968] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 457.111717][T15996] lo speed is unknown, defaulting to 1000 [ 457.285024][T15996] xfrm0 speed is unknown, defaulting to 1000 [ 457.502394][T16008] validate_nla: 57 callbacks suppressed [ 457.502438][T16008] netlink: 'syz.3.2445': attribute type 24 has an invalid length. [ 457.803961][T16019] IPVS: set_ctl: invalid protocol: 98 10.1.1.0:20003 [ 457.827684][T16019] 8021q: VLANs not supported on vxcan1 [ 458.114040][T16028] FAULT_INJECTION: forcing a failure. [ 458.114040][T16028] name failslab, interval 1, probability 0, space 0, times 0 [ 458.146242][T16028] CPU: 0 UID: 0 PID: 16028 Comm: syz.3.2452 Not tainted syzkaller #0 PREEMPT(full) [ 458.146272][T16028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 458.146297][T16028] Call Trace: [ 458.146307][T16028] [ 458.146316][T16028] dump_stack_lvl+0xe8/0x150 [ 458.146359][T16028] should_fail_ex+0x40c/0x560 [ 458.146394][T16028] should_failslab+0xa8/0x100 [ 458.146430][T16028] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 458.146458][T16028] ? skb_clone+0x212/0x3a0 [ 458.146575][T16028] ? skb_clone+0x212/0x3a0 [ 458.146607][T16028] skb_clone+0x212/0x3a0 [ 458.146644][T16028] __netlink_deliver_tap+0x413/0x860 [ 458.146710][T16028] ? netlink_deliver_tap+0x2e/0x1b0 [ 458.146734][T16028] netlink_deliver_tap+0x19c/0x1b0 [ 458.146759][T16028] netlink_sendskb+0x68/0x140 [ 458.146795][T16028] netlink_rcv_skb+0x2a4/0x4a0 [ 458.146818][T16028] ? __pfx_genl_rcv_msg+0x10/0x10 [ 458.146861][T16028] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 458.146907][T16028] ? down_read+0x2be/0x330 [ 458.146980][T16028] genl_rcv+0x28/0x40 [ 458.147008][T16028] netlink_unicast+0x7bb/0x940 [ 458.147053][T16028] netlink_sendmsg+0x813/0xb40 [ 458.147089][T16028] ? __pfx_netlink_sendmsg+0x10/0x10 [ 458.147128][T16028] ? aa_sock_msg_perm+0xf1/0x1b0 [ 458.147220][T16028] ? __pfx_netlink_sendmsg+0x10/0x10 [ 458.147243][T16028] sock_sendmsg_nosec+0x13a/0x180 [ 458.147328][T16028] ____sys_sendmsg+0x54e/0x850 [ 458.147359][T16028] ? __pfx_____sys_sendmsg+0x10/0x10 [ 458.147394][T16028] ? import_iovec+0x73/0xa0 [ 458.147455][T16028] ___sys_sendmsg+0x2a5/0x360 [ 458.147476][T16028] ? __lock_acquire+0x683/0x2cf0 [ 458.147533][T16028] ? __pfx____sys_sendmsg+0x10/0x10 [ 458.147599][T16028] ? __fget_files+0x2a/0x420 [ 458.147636][T16028] ? __fget_files+0x3a2/0x420 [ 458.147681][T16028] __x64_sys_sendmsg+0x1b1/0x290 [ 458.147709][T16028] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 458.147753][T16028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.147780][T16028] do_syscall_64+0x174/0x580 [ 458.147802][T16028] ? trace_irq_disable+0x3b/0x140 [ 458.147830][T16028] ? clear_bhb_loop+0x40/0x90 [ 458.147858][T16028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.147880][T16028] RIP: 0033:0x7f05f779de99 [ 458.147902][T16028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.147921][T16028] RSP: 002b:00007f05f86d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 458.147945][T16028] RAX: ffffffffffffffda RBX: 00007f05f7a25fa0 RCX: 00007f05f779de99 [ 458.147962][T16028] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000012 [ 458.147975][T16028] RBP: 00007f05f86d7090 R08: 0000000000000000 R09: 0000000000000000 [ 458.147988][T16028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.148001][T16028] R13: 00007f05f7a26038 R14: 00007f05f7a25fa0 R15: 00007ffc26ea6f88 [ 458.148038][T16028] [ 458.440590][T16031] __nla_validate_parse: 68 callbacks suppressed [ 458.440612][T16031] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2453'. [ 458.776151][T16039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2454'. [ 458.806817][T16042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2456'. [ 458.826171][T16042] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2456'. [ 458.846927][T16044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2454'. [ 458.904727][T16039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2454'. [ 459.720487][T16072] netlink: 'syz.2.2462': attribute type 83 has an invalid length. [ 459.893943][T16074] netlink: 'syz.0.2463': attribute type 11 has an invalid length. [ 459.921706][T16074] netlink: 4320 bytes leftover after parsing attributes in process `syz.0.2463'. [ 460.038794][T16076] FAULT_INJECTION: forcing a failure. [ 460.038794][T16076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.065962][T16076] CPU: 0 UID: 0 PID: 16076 Comm: syz.1.2464 Not tainted syzkaller #0 PREEMPT(full) [ 460.065992][T16076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 460.066005][T16076] Call Trace: [ 460.066014][T16076] [ 460.066023][T16076] dump_stack_lvl+0xe8/0x150 [ 460.066062][T16076] should_fail_ex+0x40c/0x560 [ 460.066094][T16076] _copy_from_user+0x2d/0xb0 [ 460.066129][T16076] kstrtouint_from_user+0xd6/0x180 [ 460.066161][T16076] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 460.066209][T16076] proc_fail_nth_write+0x8e/0x210 [ 460.066241][T16076] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 460.066281][T16076] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 460.066311][T16076] vfs_write+0x296/0xba0 [ 460.066355][T16076] ? __pfx_vfs_write+0x10/0x10 [ 460.066390][T16076] ? __fget_files+0x2a/0x420 [ 460.066424][T16076] ? __fget_files+0x3a2/0x420 [ 460.066450][T16076] ? __fget_files+0x2a/0x420 [ 460.066489][T16076] ksys_write+0x150/0x270 [ 460.066529][T16076] ? __pfx_ksys_write+0x10/0x10 [ 460.066572][T16076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.066597][T16076] do_syscall_64+0x174/0x580 [ 460.066621][T16076] ? trace_irq_disable+0x3b/0x140 [ 460.066649][T16076] ? clear_bhb_loop+0x40/0x90 [ 460.066677][T16076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.066699][T16076] RIP: 0033:0x7f8ff695e6ce [ 460.066719][T16076] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 460.066738][T16076] RSP: 002b:00007f8ff7817fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 460.066761][T16076] RAX: ffffffffffffffda RBX: 00007f8ff78186c0 RCX: 00007f8ff695e6ce [ 460.066777][T16076] RDX: 0000000000000001 RSI: 00007f8ff78180a0 RDI: 0000000000000013 [ 460.066791][T16076] RBP: 00007f8ff7818090 R08: 0000000000000000 R09: 0000000000000000 [ 460.066805][T16076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.066818][T16076] R13: 00007f8ff6c26038 R14: 00007f8ff6c25fa0 R15: 00007fff366d5aa8 [ 460.066855][T16076] [ 460.366300][T16080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2467'. [ 460.382418][T16081] openvswitch: netlink: IPv4 tun info is not correct [ 460.483686][T16083] syzkaller0: entered promiscuous mode [ 460.514045][T16083] syzkaller0: entered allmulticast mode [ 460.579926][T16083] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2466'. [ 460.653778][T16083] x_tables: duplicate underflow at hook 1 [ 460.739057][T16098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2471'. [ 461.471974][T16118] tipc: Enabled bearer , priority 0 [ 461.626780][T16118] tipc: Resetting bearer [ 461.675601][T16116] tipc: Resetting bearer [ 462.126375][T16151] xt_hl: Unknown Hop Limit match mode: 206 [ 464.124534][T16116] tipc: Disabling bearer [ 464.140840][T16154] __nla_validate_parse: 4 callbacks suppressed [ 464.140861][T16154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2483'. [ 464.159156][T16154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2483'. [ 464.169485][T16154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2483'. [ 464.178792][T16154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2483'. [ 464.434198][T16174] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2486'. [ 464.717281][T16189] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2490'. [ 465.415634][T16183] ipvlan0: entered promiscuous mode [ 465.422076][T16183] bridge0: port 1(ipvlan0) entered blocking state [ 465.440787][T16183] bridge0: port 1(ipvlan0) entered disabled state [ 465.451233][T16183] ipvlan0: entered allmulticast mode [ 465.456824][T16183] bridge0: entered allmulticast mode [ 465.466377][T16183] ipvlan0: left allmulticast mode [ 465.473438][T16183] bridge0: left allmulticast mode [ 465.625957][T16198] syzkaller0: entered promiscuous mode [ 465.632033][T16198] syzkaller0: entered allmulticast mode [ 465.832898][T16205] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2496'. [ 465.954980][T16210] netdevsim netdevsim4: Direct firmware load for .® failed with error -2 [ 465.966104][T16210] netdevsim netdevsim4: Falling back to sysfs fallback for: .® [ 466.036357][T16215] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2499'. [ 466.065623][T16215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2499'. [ 466.119074][T16215] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 466.367286][T16232] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2504'. [ 466.482831][T10214] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.504386][T10214] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.525334][T10214] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.553637][T10214] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.491516][T16279] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 467.672168][T16286] netlink: 'syz.2.2520': attribute type 1 has an invalid length. [ 467.724051][T16293] xt_nat: multiple ranges no longer supported [ 467.786460][ T76] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.818695][ T76] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.861567][ T76] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.880564][T16291] xt_hashlimit: size too large, truncated to 1048576 [ 467.898283][ T76] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.840840][T16341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.633278][T16358] __nla_validate_parse: 5 callbacks suppressed [ 470.633304][T16358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2538'. [ 470.795989][T16365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2541'. [ 470.857893][T16368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2541'. [ 470.886211][T16370] netlink: 'syz.0.2539': attribute type 13 has an invalid length. [ 470.904700][T16366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2540'. [ 470.946942][T16373] netlink: 'syz.2.2542': attribute type 1 has an invalid length. [ 471.107119][T16376] bond11: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 471.120585][T16376] bond11 (unregistering): Released all slaves [ 471.153774][T16378] syzkaller0: entered promiscuous mode [ 471.159878][T16378] syzkaller0: entered allmulticast mode [ 471.489702][T16400] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2547'. [ 471.571235][T16400] bond12: option downdelay: invalid value (18446744073374007297) [ 471.585607][T16386] x_tables: duplicate underflow at hook 1 [ 471.592177][T16400] bond12: option downdelay: allowed values 0 - 2147483647 [ 471.619927][T16400] bond12 (unregistering): Released all slaves [ 472.338796][T16431] lo speed is unknown, defaulting to 1000 [ 472.383608][T16431] xfrm0 speed is unknown, defaulting to 1000 [ 472.410044][T16432] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2557'. [ 472.456259][T16440] lo speed is unknown, defaulting to 1000 [ 472.509685][T16442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2559'. [ 472.752764][T16450] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2562'. [ 472.768412][T16449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2561'. [ 473.236916][T16440] xfrm0 speed is unknown, defaulting to 1000 [ 473.763460][T16490] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2570'. [ 473.782087][T16489] xt_hashlimit: size too large, truncated to 1048576 [ 474.127999][T16495] netlink: 'syz.1.2571': attribute type 11 has an invalid length. [ 475.333773][T16540] 8021q: VLANs not supported on sit0 [ 476.431848][T16568] __nla_validate_parse: 4 callbacks suppressed [ 476.431867][T16568] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2580'. [ 476.618139][T16580] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2585'. [ 476.653334][T16580] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2585'. [ 476.766377][T16581] bond12: option ad_user_port_key: invalid value (65535) [ 476.776625][T16581] bond12: option ad_user_port_key: allowed values 0 - 1023 [ 476.793090][T16581] bond12 (unregistering): Released all slaves [ 476.832855][T16585] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2587'. [ 476.873356][T16584] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 476.945742][T16581] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2586'. [ 476.985363][T16585] team0: Device xfrm0 is of different type [ 477.042209][T16584] tipc: Enabled bearer , priority 0 [ 477.052799][ T5723] xfrm0 speed is unknown, defaulting to 1000 [ 477.087846][ T7735] xfrm0 speed is unknown, defaulting to 1000 [ 477.110468][ T8279] xfrm0 speed is unknown, defaulting to 1000 [ 477.396341][T16614] netlink: 47 bytes leftover after parsing attributes in process `syz.0.2594'. [ 477.398345][T16611] nbd: socks must be embedded in a SOCK_ITEM attr [ 477.500083][T16611] block nbd2: shutting down sockets [ 477.534251][T16621] block nbd0: reconnected socket [ 477.546954][ T5628] block nbd0: Receive control failed (result -32) [ 477.578943][T16619] vlan4: entered allmulticast mode [ 477.581544][T16623] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2594'. [ 477.584487][T16619] bond0: entered allmulticast mode [ 477.599385][T16619] bond_slave_0: entered allmulticast mode [ 477.605205][T16619] bond_slave_1: entered allmulticast mode [ 477.706616][T16623] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 477.733108][T16630] x_tables: duplicate underflow at hook 2 [ 477.765049][T16623] bond_slave_0: left allmulticast mode [ 477.788641][T16623] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 477.814180][T16623] bond_slave_1: left allmulticast mode [ 477.853628][T16623] bond0 (unregistering): Released all slaves [ 477.977894][T16625] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 477.985561][T16625] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 478.032162][T16625] tipc: Enabled bearer , priority 0 [ 478.048515][T16625] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 478.213871][ T8279] tipc: Node number set to 3401021112 [ 478.500427][T16668] netlink: 'syz.1.2608': attribute type 1 has an invalid length. [ 478.562983][T16673] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 478.683859][T16668] 8021q: adding VLAN 0 to HW filter on device bond12 [ 478.779749][T16683] netlink: 'syz.0.2611': attribute type 13 has an invalid length. [ 478.846052][T16680] hsr1: left promiscuous mode [ 478.868384][T16691] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 478.891061][T16676] xt_CT: No such helper "netbios-ns" [ 478.897131][T16680] ip6gre1: left promiscuous mode [ 478.913737][T16680] ip6gre1: left allmulticast mode [ 478.959379][T16693] IPVS: rr: FWM 3 0x00000003 - no destination available [ 479.283510][T16703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2614'. [ 479.302030][ T202] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.328720][ T202] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.352889][ T7742] tipc: Node number set to 2825622204 [ 479.496507][ T202] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.525981][ T202] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.562927][T16711] tipc: Enabling of bearer rejected, already enabled [ 479.624347][T16700] tipc: Resetting bearer [ 479.766492][T16720] macsec0: entered promiscuous mode [ 479.780132][T16720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2618'. [ 479.818839][T16720] veth1_macvtap: left promiscuous mode [ 479.890261][T16720] macsec0 (unregistering): left promiscuous mode [ 480.062094][T16740] netlink: 'syz.3.2621': attribute type 10 has an invalid length. [ 480.072537][T16735] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2619'. [ 480.343667][T16747] siw: device registration error -23 [ 481.112264][T16787] syzkaller0: entered promiscuous mode [ 481.124440][T16787] syzkaller0: entered allmulticast mode [ 481.463010][T16797] syzkaller0: entered promiscuous mode [ 481.471273][T16797] syzkaller0: entered allmulticast mode [ 481.678883][T16810] ip6t_srh: unknown srh match flags 4000 [ 482.153797][T16831] IPv6: Can't replace route, no match found [ 482.274522][T16834] __nla_validate_parse: 1 callbacks suppressed [ 482.274542][T16834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2645'. [ 482.299595][T16834] netlink: 'syz.3.2645': attribute type 2 has an invalid length. [ 482.315147][T16836] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2646'. [ 482.843244][T16848] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 482.898501][T16860] netlink: 'syz.4.2651': attribute type 1 has an invalid length. [ 482.914880][T16860] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2651'. [ 482.975214][T16856] netlink: 'syz.2.2652': attribute type 11 has an invalid length. [ 483.051558][T16863] syzkaller0: entered promiscuous mode [ 483.066017][T16863] syzkaller0: entered allmulticast mode [ 483.170773][T16865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.248002][T16865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.493500][T16865] bond_slave_0: entered promiscuous mode [ 483.564638][T16865] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 483.607657][T16865] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 483.648715][T16865] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 483.778828][T16887] xt_bpf: check failed: parse error [ 484.041069][ T5818] [ 484.043501][ T5818] ====================================================== [ 484.050641][ T5818] WARNING: possible circular locking dependency detected [ 484.057786][ T5818] syzkaller #0 Not tainted [ 484.062232][ T5818] ------------------------------------------------------ [ 484.069334][ T5818] kworker/1:6/5818 is trying to acquire lock: [ 484.075847][ T5818] ffff88801c295180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 484.086340][ T5818] [ 484.086340][ T5818] but task is already holding lock: [ 484.093739][ T5818] ffff88801c2952a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 484.104716][ T5818] [ 484.104716][ T5818] which lock already depends on the new lock. [ 484.104716][ T5818] [ 484.115139][ T5818] [ 484.115139][ T5818] the existing dependency chain (in reverse order) is: [ 484.124172][ T5818] [ 484.124172][ T5818] -> #10 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 484.132975][ T5818] down_read+0x4a/0x330 [ 484.137696][ T5818] kernfs_remove_by_name_ns+0x3f/0x140 [ 484.143712][ T5818] internal_create_group+0x58e/0x1180 [ 484.149634][ T5818] sysfs_update_groups+0x60/0x130 [ 484.155214][ T5818] pmu_dev_alloc+0x29b/0x300 [ 484.160368][ T5818] perf_event_sysfs_init+0x76/0x100 [ 484.166203][ T5818] do_one_initcall+0x250/0x870 [ 484.171513][ T5818] do_initcall_level+0x10a/0x1a0 [ 484.177269][ T5818] do_initcalls+0x59/0xa0 [ 484.182155][ T5818] kernel_init_freeable+0x29d/0x3e0 [ 484.187913][ T5818] kernel_init+0x1d/0x1d0 [ 484.192820][ T5818] ret_from_fork+0x514/0xb70 [ 484.198007][ T5818] ret_from_fork_asm+0x1a/0x30 [ 484.203313][ T5818] [ 484.203313][ T5818] -> #9 (pmus_lock){+.+.}-{4:4}: [ 484.210462][ T5818] __mutex_lock+0x19d/0x1550 [ 484.215590][ T5818] perf_event_init_cpu+0x1d1/0x7a0 [ 484.221247][ T5818] cpuhp_invoke_callback+0x434/0x810 [ 484.227106][ T5818] cpuhp_thread_fun+0x362/0x780 [ 484.232501][ T5818] smpboot_thread_fn+0x57c/0xa80 [ 484.238017][ T5818] kthread+0x388/0x470 [ 484.242649][ T5818] ret_from_fork+0x514/0xb70 [ 484.247793][ T5818] ret_from_fork_asm+0x1a/0x30 [ 484.253105][ T5818] [ 484.253105][ T5818] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 484.260687][ T5818] cpuhp_thread_fun+0x127/0x780 [ 484.266090][ T5818] smpboot_thread_fn+0x57c/0xa80 [ 484.271564][ T5818] kthread+0x388/0x470 [ 484.276201][ T5818] ret_from_fork+0x514/0xb70 [ 484.281334][ T5818] ret_from_fork_asm+0x1a/0x30 [ 484.286638][ T5818] [ 484.286638][ T5818] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 484.294388][ T5818] cpus_read_lock+0x42/0x160 [ 484.299543][ T5818] static_key_slow_inc+0x12/0x30 [ 484.305056][ T5818] nbd_genl_reconfigure+0x1301/0x1e80 [ 484.311081][ T5818] genl_family_rcv_msg_doit+0x233/0x340 [ 484.317178][ T5818] genl_rcv_msg+0x614/0x7a0 [ 484.322237][ T5818] netlink_rcv_skb+0x226/0x4a0 [ 484.327555][ T5818] genl_rcv+0x28/0x40 [ 484.332093][ T5818] netlink_unicast+0x7bb/0x940 [ 484.337444][ T5818] netlink_sendmsg+0x813/0xb40 [ 484.342760][ T5818] sock_sendmsg_nosec+0x13a/0x180 [ 484.348334][ T5818] ____sys_sendmsg+0x54e/0x850 [ 484.353643][ T5818] ___sys_sendmsg+0x2a5/0x360 [ 484.358863][ T5818] __x64_sys_sendmsg+0x1b1/0x290 [ 484.364335][ T5818] do_syscall_64+0x174/0x580 [ 484.369466][ T5818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.375897][ T5818] [ 484.375897][ T5818] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 484.383561][ T5818] __mutex_lock+0x19d/0x1550 [ 484.388692][ T5818] nbd_queue_rq+0x373/0x1150 [ 484.393835][ T5818] blk_mq_dispatch_rq_list+0x499/0x1990 [ 484.400029][ T5818] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 484.406946][ T5818] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 484.413474][ T5818] blk_mq_run_work_fn+0x16c/0x300 [ 484.419064][ T5818] process_scheduled_works+0xa8e/0x14e0 [ 484.425155][ T5818] worker_thread+0xa47/0xfb0 [ 484.430289][ T5818] kthread+0x388/0x470 [ 484.434907][ T5818] ret_from_fork+0x514/0xb70 [ 484.440155][ T5818] ret_from_fork_asm+0x1a/0x30 [ 484.445468][ T5818] [ 484.445468][ T5818] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 484.452766][ T5818] __mutex_lock+0x19d/0x1550 [ 484.457916][ T5818] nbd_queue_rq+0xc1/0x1150 [ 484.463050][ T5818] blk_mq_dispatch_rq_list+0x499/0x1990 [ 484.469163][ T5818] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 484.476046][ T5818] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 484.482592][ T5818] blk_mq_run_work_fn+0x16c/0x300 [ 484.488253][ T5818] process_scheduled_works+0xa8e/0x14e0 [ 484.494341][ T5818] worker_thread+0xa47/0xfb0 [ 484.499491][ T5818] kthread+0x388/0x470 [ 484.504104][ T5818] ret_from_fork+0x514/0xb70 [ 484.509241][ T5818] ret_from_fork_asm+0x1a/0x30 [ 484.514563][ T5818] [ 484.514563][ T5818] -> #4 (set->srcu){.+.+}-{0:0}: [ 484.521738][ T5818] __synchronize_srcu+0xc9/0x2f0 [ 484.527279][ T5818] elevator_switch+0x1e8/0x7b0 [ 484.532677][ T5818] elevator_change+0x2fa/0x480 [ 484.538003][ T5818] elevator_set_default+0x375/0x440 [ 484.543768][ T5818] blk_register_queue+0x3f3/0x4e0 [ 484.549417][ T5818] __add_disk+0x6cb/0xe30 [ 484.554293][ T5818] add_disk_fwnode+0x100/0x3a0 [ 484.559604][ T5818] nbd_dev_add+0x733/0xb60 [ 484.564584][ T5818] nbd_init+0x15f/0x1e0 [ 484.569419][ T5818] do_one_initcall+0x250/0x870 [ 484.574754][ T5818] do_initcall_level+0x10a/0x1a0 [ 484.580245][ T5818] do_initcalls+0x59/0xa0 [ 484.585130][ T5818] kernel_init_freeable+0x29d/0x3e0 [ 484.590900][ T5818] kernel_init+0x1d/0x1d0 [ 484.595773][ T5818] ret_from_fork+0x514/0xb70 [ 484.600907][ T5818] ret_from_fork_asm+0x1a/0x30 [ 484.606206][ T5818] [ 484.606206][ T5818] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 484.614043][ T5818] __mutex_lock+0x19d/0x1550 [ 484.619175][ T5818] elevator_change+0x1af/0x480 [ 484.624840][ T5818] elevator_set_none+0xb5/0x140 [ 484.630252][ T5818] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 484.636618][ T5818] nbd_start_device+0x189/0xb30 [ 484.642048][ T5818] nbd_genl_connect+0x1597/0x1c10 [ 484.647645][ T5818] genl_family_rcv_msg_doit+0x233/0x340 [ 484.653739][ T5818] genl_rcv_msg+0x614/0x7a0 [ 484.658794][ T5818] netlink_rcv_skb+0x226/0x4a0 [ 484.664100][ T5818] genl_rcv+0x28/0x40 [ 484.668630][ T5818] netlink_unicast+0x7bb/0x940 [ 484.673942][ T5818] netlink_sendmsg+0x813/0xb40 [ 484.679260][ T5818] sock_sendmsg_nosec+0x13a/0x180 [ 484.684858][ T5818] ____sys_sendmsg+0x54e/0x850 [ 484.690184][ T5818] ___sys_sendmsg+0x2a5/0x360 [ 484.695419][ T5818] __x64_sys_sendmsg+0x1b1/0x290 [ 484.700996][ T5818] do_syscall_64+0x174/0x580 [ 484.706140][ T5818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.713309][ T5818] [ 484.713309][ T5818] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 484.721952][ T5818] blk_alloc_queue+0x544/0x690 [ 484.727273][ T5818] __blk_mq_alloc_disk+0x194/0x390 [ 484.733028][ T5818] nbd_dev_add+0x494/0xb60 [ 484.738090][ T5818] nbd_init+0x15f/0x1e0 [ 484.742793][ T5818] do_one_initcall+0x250/0x870 [ 484.748114][ T5818] do_initcall_level+0x10a/0x1a0 [ 484.753597][ T5818] do_initcalls+0x59/0xa0 [ 484.758560][ T5818] kernel_init_freeable+0x29d/0x3e0 [ 484.764324][ T5818] kernel_init+0x1d/0x1d0 [ 484.769201][ T5818] ret_from_fork+0x514/0xb70 [ 484.774358][ T5818] ret_from_fork_asm+0x1a/0x30 [ 484.779745][ T5818] [ 484.779745][ T5818] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 484.786987][ T5818] fs_reclaim_acquire+0x71/0x100 [ 484.792514][ T5818] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 484.798785][ T5818] alloc_inode+0xb8/0x1b0 [ 484.803658][ T5818] iget_locked+0x131/0x6a0 [ 484.808632][ T5818] kernfs_get_inode+0x4f/0x770 [ 484.813940][ T5818] kernfs_get_tree+0x5cd/0x980 [ 484.819251][ T5818] vfs_get_tree+0x92/0x2a0 [ 484.824208][ T5818] do_new_mount+0x319/0xdc0 [ 484.829276][ T5818] __se_sys_mount+0x31d/0x420 [ 484.834505][ T5818] do_syscall_64+0x174/0x580 [ 484.839638][ T5818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.846074][ T5818] [ 484.846074][ T5818] -> #0 (&root->kernfs_rwsem){++++}-{4:4}: [ 484.854116][ T5818] __lock_acquire+0x1520/0x2cf0 [ 484.859537][ T5818] lock_acquire+0x106/0x350 [ 484.864585][ T5818] down_write+0x96/0x200 [ 484.869368][ T5818] kernfs_remove_by_name_ns+0x4e/0x140 [ 484.875379][ T5818] _cfg80211_unregister_wdev+0x133/0x5a0 [ 484.881648][ T5818] ieee80211_if_remove+0x289/0x340 [ 484.887360][ T5818] ieee80211_del_iface+0x19/0x30 [ 484.892903][ T5818] cfg80211_remove_virtual_intf+0x221/0x3f0 [ 484.899382][ T5818] cfg80211_destroy_ifaces+0x23f/0x300 [ 484.905410][ T5818] cfg80211_destroy_iface_wk+0x21/0x30 [ 484.911427][ T5818] process_scheduled_works+0xa8e/0x14e0 [ 484.917554][ T5818] worker_thread+0xa47/0xfb0 [ 484.922689][ T5818] kthread+0x388/0x470 [ 484.927305][ T5818] ret_from_fork+0x514/0xb70 [ 484.932443][ T5818] ret_from_fork_asm+0x1a/0x30 [ 484.937755][ T5818] [ 484.937755][ T5818] other info that might help us debug this: [ 484.937755][ T5818] [ 484.948119][ T5818] Chain exists of: [ 484.948119][ T5818] &root->kernfs_rwsem --> pmus_lock --> &root->kernfs_supers_rwsem [ 484.948119][ T5818] [ 484.962065][ T5818] Possible unsafe locking scenario: [ 484.962065][ T5818] [ 484.969601][ T5818] CPU0 CPU1 [ 484.975045][ T5818] ---- ---- [ 484.980433][ T5818] rlock(&root->kernfs_supers_rwsem); [ 484.985922][ T5818] lock(pmus_lock); [ 484.992539][ T5818] lock(&root->kernfs_supers_rwsem); [ 485.000478][ T5818] lock(&root->kernfs_rwsem); [ 485.005278][ T5818] [ 485.005278][ T5818] *** DEADLOCK *** [ 485.005278][ T5818] [ 485.013581][ T5818] 5 locks held by kworker/1:6/5818: [ 485.018795][ T5818] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 485.029836][ T5818] #1: ffffc90004d4fc40 ((work_completion)(&rdev->destroy_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 485.042306][ T5818] #2: ffffffff9002d040 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_destroy_iface_wk+0x19/0x30 [ 485.052271][ T5818] #3: ffff8880581407a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_destroy_ifaces+0x233/0x300 [ 485.062751][ T5818] #4: ffff88801c2952a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 485.074110][ T5818] [ 485.074110][ T5818] stack backtrace: [ 485.080041][ T5818] CPU: 1 UID: 0 PID: 5818 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 485.080067][ T5818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 485.080080][ T5818] Workqueue: events cfg80211_destroy_iface_wk [ 485.080114][ T5818] Call Trace: [ 485.080124][ T5818] [ 485.080133][ T5818] dump_stack_lvl+0xe8/0x150 [ 485.080168][ T5818] print_circular_bug+0x2e1/0x300 [ 485.080188][ T5818] check_noncircular+0x12e/0x150 [ 485.080219][ T5818] __lock_acquire+0x1520/0x2cf0 [ 485.080245][ T5818] ? __lock_acquire+0x13e8/0x2cf0 [ 485.080275][ T5818] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 485.080302][ T5818] lock_acquire+0x106/0x350 [ 485.080324][ T5818] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 485.080358][ T5818] down_write+0x96/0x200 [ 485.080377][ T5818] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 485.080404][ T5818] ? __pfx_down_write+0x10/0x10 [ 485.080428][ T5818] kernfs_remove_by_name_ns+0x4e/0x140 [ 485.080457][ T5818] _cfg80211_unregister_wdev+0x133/0x5a0 [ 485.080477][ T5818] ieee80211_if_remove+0x289/0x340 [ 485.080502][ T5818] ieee80211_del_iface+0x19/0x30 [ 485.080520][ T5818] cfg80211_remove_virtual_intf+0x221/0x3f0 [ 485.080549][ T5818] cfg80211_destroy_ifaces+0x23f/0x300 [ 485.080576][ T5818] ? process_scheduled_works+0xa20/0x14e0 [ 485.080595][ T5818] cfg80211_destroy_iface_wk+0x21/0x30 [ 485.080621][ T5818] process_scheduled_works+0xa8e/0x14e0 [ 485.080654][ T5818] ? __pfx_process_scheduled_works+0x10/0x10 [ 485.080676][ T5818] ? assign_work+0x3cf/0x5d0 [ 485.080695][ T5818] worker_thread+0xa47/0xfb0 [ 485.080721][ T5818] ? __kthread_parkme+0x71/0x1f0 [ 485.080747][ T5818] kthread+0x388/0x470 [ 485.080770][ T5818] ? __pfx_worker_thread+0x10/0x10 [ 485.080788][ T5818] ? __pfx_kthread+0x10/0x10 [ 485.080812][ T5818] ret_from_fork+0x514/0xb70 [ 485.080838][ T5818] ? __pfx_ret_from_fork+0x10/0x10 [ 485.080862][ T5818] ? __switch_to+0xc89/0x1420 [ 485.080883][ T5818] ? __pfx_kthread+0x10/0x10 [ 485.080907][ T5818] ret_from_fork_asm+0x1a/0x30 [ 485.080930][ T5818] [ 485.596242][ T5638] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 485.605442][ T5638] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 485.613616][ T5638] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 485.623836][ T5638] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 485.631742][ T5638] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 485.880435][T10214] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.907609][T10214] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.175041][T10214] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.197545][T10214] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.320928][T10214] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.332769][T10214] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.363193][T16902] lo speed is unknown, defaulting to 1000 [ 486.370224][T16902] xfrm0 speed is unknown, defaulting to 1000 [ 486.396914][T10214] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.406888][T10214] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.530538][T10214] pim6reg: left allmulticast mode [ 486.535722][T10214] dvmrp0: left allmulticast mode [ 486.696225][T10214] bond2 (unregistering): (slave gre1): Releasing backup interface [ 486.733169][T10214] bond9 (unregistering): (slave geneve4): Releasing active interface [ 486.763130][T10214] bond5 (unregistering): (slave bridge2): Releasing backup interface [ 486.771974][T10214] bridge2 (unregistering): left promiscuous mode [ 486.778758][T10214] bridge2 (unregistering): left allmulticast mode [ 486.789204][T10214] bond6 (unregistering): (slave bridge3): Releasing backup interface [ 486.800494][T10214] bridge3 (unregistering): left promiscuous mode [ 486.815031][T10214] bond8 (unregistering): (slave bridge5): Releasing active interface [ 486.855346][T10214] bond0 (unregistering): Released all slaves [ 486.870998][T10214] bond1 (unregistering): (slave batadv1): Releasing active interface [ 486.880266][T10214] batadv1: left allmulticast mode [ 486.886620][T10214] bond1 (unregistering): Released all slaves [ 486.897946][T10214] bond2 (unregistering): Released all slaves [ 486.908555][T10214] bond3 (unregistering): Released all slaves [ 486.920533][T10214] bond4 (unregistering): (slave veth5): Releasing active interface [ 486.930659][T10214] bond4 (unregistering): Released all slaves [ 486.943072][T10214] bond5 (unregistering): Released all slaves [ 486.954400][T10214] bond6 (unregistering): (slave bond7): Releasing backup interface [ 486.963018][T10214] bond7 (unregistering): left promiscuous mode [ 486.969675][T10214] bond6 (unregistering): Released all slaves [ 486.981559][T10214] bond7 (unregistering): Released all slaves [ 486.993269][T10214] bond8 (unregistering): Released all slaves [ 487.004454][T10214] bond9 (unregistering): Released all slaves [ 487.014902][T10214] bond10 (unregistering): Released all slaves [ 487.025461][T10214] bond11 (unregistering): Released all slaves [ 487.037078][T10214] bond12 (unregistering): Released all slaves [ 487.166077][T10214] : left promiscuous mode [ 487.268525][T10214] tipc: Left network mode [ 487.299701][T10214] IPVS: stopping master sync thread 13120 ... [ 487.388790][T16902] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.397553][T16902] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.404784][T16902] bridge_slave_0: entered allmulticast mode [ 487.412234][T16902] bridge_slave_0: entered promiscuous mode [ 487.429119][T16902] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.436359][T16902] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.446145][T16902] bridge_slave_1: entered allmulticast mode [ 487.455431][T16902] bridge_slave_1: entered promiscuous mode [ 487.516896][T16902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.529603][T16902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.590147][T16902] team0: Port device team_slave_0 added [ 487.606750][T16902] team0: Port device team_slave_1 added [ 487.633599][T16902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.641034][T16902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.671352][T16902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.682116][ T5638] Bluetooth: hci1: command tx timeout [ 487.689316][T16902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.696928][T16902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.723131][T16902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.735362][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 487.772717][T16902] hsr_slave_0: entered promiscuous mode [ 487.779505][T16902] hsr_slave_1: entered promiscuous mode [ 487.785677][T16902] debugfs: 'hsr0' already exists in 'hsr' [ 487.791965][T16902] Cannot create hsr debugfs directory [ 487.897190][T10214] hsr_slave_0: left promiscuous mode [ 487.903103][T10214] hsr_slave_1: left promiscuous mode [ 487.915809][T10214] veth1_to_batadv: left promiscuous mode [ 487.922648][T10214] batadv0: left allmulticast mode [ 487.927852][T10214] batadv0: left promiscuous mode [ 487.932891][T10214] veth1_macvtap: left promiscuous mode [ 487.938589][T10214] veth0_macvtap: left promiscuous mode [ 487.944168][T10214] veth1_vlan: left promiscuous mode [ 487.949597][T10214] veth0_vlan: left promiscuous mode [ 488.258979][T16902] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.316143][T16902] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.383065][T16902] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.483412][T16902] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.586731][T16902] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 488.603404][T16902] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 488.613047][T16902] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 488.622236][T10214] IPVS: stop unused estimator thread 0... [ 488.631161][T16902] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 488.649899][T16902] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 488.670284][T16902] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 488.684626][T16902] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 488.695120][T16902] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 488.762503][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 488.791177][T16902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.823217][T16902] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.834733][T10213] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.841929][T10213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.854205][T10204] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.861365][T10204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.891337][T10214] bond0: (slave netdevsim1): Releasing backup interface [ 488.901848][T10214] netdevsim netdevsim1 netdevsim1 (unregistering): left promiscuous mode [ 489.066518][T10214] dvmrp0: left allmulticast mode [ 489.163802][T10206] smc: removing ib device syz0 [ 489.181736][T10206] smbdirect: ib_dev[syz0] removed [ 489.264754][T10214] gretap0 (unregistering): left promiscuous mode [ 489.315800][T10214] bond6 (unregistering): (slave geneve2): Releasing active interface [ 489.385809][T10214] team0: Port device bridge1 removed [ 489.406656][T10214] team0: Port device bridge2 removed [ 489.448541][T10214] bond3 (unregistering): (slave bridge3): Releasing active interface [ 489.516136][T10214] bond0 (unregistering): left promiscuous mode [ 489.531747][T10214] bond0 (unregistering): Released all slaves [ 489.541848][T10214] bond1 (unregistering): Released all slaves [ 489.555959][T10214] bond2 (unregistering): (slave veth5): Releasing active interface [ 489.565728][T10214] bond2 (unregistering): Released all slaves [ 489.582574][T10214] bond3 (unregistering): Released all slaves [ 489.608407][T10214] bond4 (unregistering): Released all slaves [ 489.625674][T10214] bond5 (unregistering): Released all slaves [ 489.642915][T10214] bond6 (unregistering): Released all slaves [ 489.685652][T10214] bond7 (unregistering): Released all slaves [ 489.705134][T10214] bond8 (unregistering): Released all slaves [ 489.738672][T10214] bond9 (unregistering): Released all slaves [ 489.754183][T10214] bond10 (unregistering): Released all slaves [ 489.760969][ T5638] Bluetooth: hci1: command tx timeout [ 489.783076][T10214] bond11 (unregistering): Released all slaves [ 489.806615][T10214] bond12 (unregistering): Released all slaves [ 489.853561][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3 [ 490.105079][T10214] tipc: Disabling bearer [ 490.125296][T10214] tipc: Left network mode [ 490.241124][T16902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.311467][T16902] veth0_vlan: entered promiscuous mode [ 490.353368][T16902] veth1_vlan: entered promiscuous mode [ 490.397126][T10214] veth0_to_bond: left promiscuous mode [ 490.406544][T10214] hsr_slave_0: left promiscuous mode [ 490.417218][T10214] hsr_slave_1: left promiscuous mode [ 490.630639][ T5282] 8021q: adding VLAN 0 to HW filter on device eth4 [ 490.639781][T16902] veth0_macvtap: entered promiscuous mode [ 490.653199][T16902] veth1_macvtap: entered promiscuous mode [ 490.688309][T16902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.704856][T16902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.755674][T10213] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.771461][T10213] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.792806][T10213] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.814063][T10213] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.849615][T16902] ieee80211 phy27: Selected rate control algorithm 'minstrel_ht' [ 490.912701][T10206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.924885][T10214] IPVS: stop unused estimator thread 0... [ 490.932461][T16902] ieee80211 phy28: Selected rate control algorithm 'minstrel_ht' [ 490.940898][T10206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.991453][T10213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.000088][T10213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.203368][T10213] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.433681][T10213] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.682541][T10213] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.791230][ T5282] 8021q: adding VLAN 0 to HW filter on device eth5 [ 492.832538][T10213] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.939572][T10213] bridge_slave_1: left allmulticast mode [ 492.949321][T10213] bridge_slave_1: left promiscuous mode [ 492.955393][T10213] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.965281][T10213] bridge_slave_0: left allmulticast mode [ 492.971371][T10213] bridge_slave_0: left promiscuous mode [ 492.977153][T10213] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.068895][T10213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.082067][T10213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.092602][T10213] bond0 (unregistering): Released all slaves [ 493.184391][ T5282] 8021q: adding VLAN 0 to HW filter on device eth6 [ 493.271993][T10213] hsr_slave_0: left promiscuous mode [ 493.277954][T10213] hsr_slave_1: left promiscuous mode [ 493.283949][T10213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 493.291897][T10213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.302688][T10213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 493.310435][T10213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.324323][T10213] veth1_macvtap: left promiscuous mode [ 493.331250][T10213] veth0_macvtap: left promiscuous mode [ 493.336887][T10213] veth1_vlan: left promiscuous mode [ 493.342547][T10213] veth0_vlan: left promiscuous mode [ 493.505987][T10213] team0 (unregistering): Port device team_slave_1 removed [ 493.533579][T10213] team0 (unregistering): Port device team_slave_0 removed [ 493.642049][ T5282] 8021q: adding VLAN 0 to HW filter on device eth7 [ 493.924752][ T5282] 8021q: adding VLAN 0 to HW filter on device eth8