last executing test programs: 33.194157508s ago: executing program 2 (id=4034): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x3f799000) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) (async) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000440)="e9", 0x1}], 0x1) (async) writev(r0, &(0x7f0000000980)=[{&(0x7f0000000300)='v', 0x1}], 0x1) r3 = socket$key(0xf, 0x3, 0x2) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000040)="9321", 0x2}, {0x0}], 0x2) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 31.762096562s ago: executing program 2 (id=4044): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRES8=r0], 0x184}, 0x1, 0x0, 0x0, 0x24000000}, 0x4080) bpf$MAP_CREATE(0x0, 0x0, 0x48) unshare(0x22020400) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="070600000000000000002d0000000c0005000201aaaaaaaaaaaa0a0001007770616e3000000008002f0005"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8090) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 31.494051527s ago: executing program 2 (id=4047): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8992, &(0x7f0000000000)={'bond0\x00', @ifru_names='tunl0\x00'}) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2717, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="0dac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) sendmsg$can_bcm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x401, 0x20000, 0x10, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x901b, 0x8181}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40008c4}, 0x20044854) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) r6 = accept(r0, 0x0, &(0x7f0000000080)) getsockopt$inet6_udp_int(r6, 0x11, 0xb, &(0x7f00000000c0), &(0x7f0000000140)=0x4) 29.677767386s ago: executing program 2 (id=4057): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRES8=r0], 0x184}, 0x1, 0x0, 0x0, 0x24000000}, 0x4080) bpf$MAP_CREATE(0x0, 0x0, 0x48) unshare(0x22020400) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="070600000000000000002d0000000c0005000201aaaaaaaaaaaa0a0001007770616e3000000008002f0005"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8090) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 29.283820718s ago: executing program 2 (id=4059): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @host}, 0x10) (async) bind$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @host}, 0x10) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r2, 0x0, 0x0, 0x800) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xf, 0x19, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@jmp={0x5, 0x0, 0x7, 0x1, 0x9, 0xffffffffffffffe0, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x5, 0x2, 0x3, 0x100}, @initr0={0x18, 0x0, 0x0, 0x0, 0x46eb, 0x0, 0x0, 0x0, 0x2}, @exit]}, &(0x7f0000000300)='syzkaller\x00', 0x8, 0xd, &(0x7f0000000680)=""/13, 0x41000, 0x40, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x3, 0x4000a, 0x2, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000740)=[r4, r0, r0, r0, r0, r0, r0], &(0x7f0000000780)=[{0x2, 0x5, 0x4, 0xa}, {0x3, 0x5, 0x1, 0x5}, {0x2, 0x4, 0x9, 0x4}, {0x4, 0x2, 0x4, 0x448dec9665d82498}], 0x10, 0x80000000}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000900)={&(0x7f0000000340), 0xc, &(0x7f00000008c0)={&(0x7f0000000640)=@ipv4_newaddr={0x34, 0x14, 0x200, 0x70bd29, 0x25dfdbfe, {0x2, 0x40, 0x2, 0xfd}, [@IFA_LABEL={0x14, 0x3, 'dvmrp1\x00'}, @IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map=r6, 0x35, 0x0, 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map=r6, 0x35, 0x0, 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000002c0)={0x7, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup=r6, 0xffffffffffffffff, 0x34, 0x2029, r6, @void, @void, @value=r8, @void, r7}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000880)={@map=r0, r4, 0x17, 0x0, r5, @void, @value, @void, @void, r7}, 0x20) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000880)={@map=r0, r4, 0x17, 0x0, r5, @void, @value, @void, @void, r7}, 0x20) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x4060881) recvfrom$l2tp6(r3, &(0x7f00000003c0)=""/237, 0xed, 0x2060, 0x0, 0x0) (async) recvfrom$l2tp6(r3, &(0x7f00000003c0)=""/237, 0xed, 0x2060, 0x0, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r9) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@broadcast, @local, @val={@void, {0x8100, 0x2, 0x1, 0x3}}, {@generic={0x88f5, "999ebf984d6e00f140e301e57af3c0985f23afd83df36c39c712a0be77acb971e7b21202b1402d5d606a038e0ef31c7197d1516df0f84117"}}}, &(0x7f0000000280)={0x0, 0x2, [0x9e2, 0xe13, 0x77a, 0xf2f]}) (async) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@broadcast, @local, @val={@void, {0x8100, 0x2, 0x1, 0x3}}, {@generic={0x88f5, "999ebf984d6e00f140e301e57af3c0985f23afd83df36c39c712a0be77acb971e7b21202b1402d5d606a038e0ef31c7197d1516df0f84117"}}}, &(0x7f0000000280)={0x0, 0x2, [0x9e2, 0xe13, 0x77a, 0xf2f]}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r1, 0x28, 0x6, &(0x7f0000000140)={0x0, 0xea60}, 0x10) connect$vsock_stream(r1, &(0x7f0000000940)={0x28, 0x0, 0xffffd8ee}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@alu={0x4, 0x1, 0x9, 0x8, 0x6, 0x1}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 28.524750938s ago: executing program 2 (id=4062): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6tnl0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x8397cfd36601e9d7}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x635d, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40c8844}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f00000002c0)=r8) 13.312828289s ago: executing program 32 (id=4062): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6tnl0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x8397cfd36601e9d7}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x635d, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40c8844}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f00000002c0)=r8) 7.058963556s ago: executing program 0 (id=4081): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000004ffffe50084000009000000013b2bc59b81b17c64", @ANYRES32=r0], 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x304}, "7f3900005200", "9a5d38a17f00c500000000feff00", "a1e3837f", "542924b4eab9743a"}, 0x28) recvfrom(r2, &(0x7f0000000440)=""/4070, 0xfe6, 0x117, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000002, 0x12, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe07}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 5.942441104s ago: executing program 0 (id=4084): syz_emit_ethernet(0x3e, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000100), &(0x7f0000000200)=""/166}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0xe, 0x0, 0x0, 0x41100, 0x1d, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x725, 0x0, 0x0, 0x0, 0xd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000380), &(0x7f00000001c0)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000100)=r5, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000010000700"/20, @ANYRES32=0x0, @ANYBLOB="04010100010a0000140035007767310000000000000000000000000008000a00", @ANYRES32=r9, @ANYBLOB="080065d705000300"], 0x44}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f000000c640)={0x0, 0x0, &(0x7f000000c600)={&(0x7f00000007c0)=@ipv4_newrule={0x38, 0x20, 0x1, 0x70bd2d, 0x25dfdbfb, {0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1e}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_SRC={0x8, 0x2, @local}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xe9}]}, 0x38}, 0x1, 0x0, 0x0, 0x6044001}, 0x4000054) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r11, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x40000) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060200040c01001c00128009000100626f6e64000000000c0002800800090003001000"], 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x4) socket$kcm(0x29, 0x2, 0x0) epoll_create1(0x0) 5.594645316s ago: executing program 1 (id=4085): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff01010000260000000019e1b6950000000000000018100000", @ANYRES32, @ANYBLOB="100000000000002505000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x1, 0xec, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff75, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4720}, 0x37) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x1abe1019, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2004c04}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x48, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_SEQ={0x7, 0xa, "dc1fe5"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x3}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e0f14f7f55"}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "d95c4d62c959c9dcbd"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004800}, 0x4000001) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r3], 0x3c}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$xdp(0x2c, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000000d14015590bd3000fbdb08003e00020010202ac42ae3f22ebdf43e9ddacf76da21c5b0885abacf6477079391391bebc382d0d9de0ef976c89de961e43ab39772e5e8db719738062bd38a4ab6a1d0e86834"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000004) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1d, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000b700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x37, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e000000030100000000040000000000000008001f0001"], 0xd4}}, 0x0) 5.516058871s ago: executing program 3 (id=4086): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x404c019}, 0xc080) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x100, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r3, 0x40047438, &(0x7f0000000040)) ioctl(r3, 0x7434, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001800ffff00000000000000000a000000fd00c8090000000014000500fe8000000000000000000000000000aa0c00090008"], 0x3c}, 0x1, 0x0, 0x0, 0x2048800}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r10 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x1, 0x9}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x9, 0x7, 0x5, 0x1}, @multicast2, @multicast2, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) write$tun(r7, &(0x7f0000000500)=ANY=[], 0xfdef) sendmmsg(r4, &(0x7f0000001980)=[{{&(0x7f0000000140)=@sco, 0x80, &(0x7f0000001500)=[{&(0x7f00000001c0)="311587347f26abbafc92486b5b6f44ae1e987838", 0x14}, {&(0x7f0000000300)="193a26224090e17accbbec967ada4d5fe87c211487a9a4714bc6aa082b504714e2fd527c083649fa8537eef5341167906ef84e706b87ac443c271dd0abf411dc241fe7515d1e116de04479e75e4f71220bd4d8994fe632227f58ebc59b5a492b5b859c7879cbf4b2d59a61e5b754ef3c4bc3610270859a8c54face114913ea05c553971c238df02a0b0801f8b12d0b9899807da5c8aa094059b9fb6894b541465a0a5b18af27561e60d54ed02621db9870b1da9b6e21b1b385dd5ad48c52e8bda0422931026049207b8cad79", 0xcc}, {&(0x7f0000000440)='G', 0x1}, {&(0x7f00000004c0)="180199482e303d53b5f5677a094c", 0xe}, {&(0x7f0000000500)="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", 0x1000}], 0x5, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"/832], 0x340}}, {{&(0x7f0000001840)=@nl=@unspec, 0x80, &(0x7f0000001940)=[{&(0x7f00000018c0)="9cfafce9e0c056f1663b52397733309e636ff77c152589ed2fdcdbddc024d0374bc6f909fecdac433c57a5d5a1897ef4e6b8a995604b5164d769b452f2ec4f7ea9cf86770b48bd", 0x47}], 0x1}}], 0x2, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r12], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_LLC_SDREQ(r11, &(0x7f0000001d40)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001800)={&(0x7f0000001740)={0x8c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_SDP={0x40, 0x13, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [{0x11, 0x1, '/dev/net/tun\x00'}, {0x11, 0x1, '/dev/net/tun\x00'}, {0x8, 0x1, 'nat\x00'}, {0x5, 0x1, '\x00'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f0000000080)) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r10, 0xc0805841, &(0x7f0000001580)={0x8, 0x40, 0xfffffe00, 0x1e60}) 4.70885595s ago: executing program 0 (id=4088): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRES8=r0], 0x184}, 0x1, 0x0, 0x0, 0x24000000}, 0x4080) bpf$MAP_CREATE(0x0, 0x0, 0x48) unshare(0x22020400) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="070600000000000000002d0000000c0005000201aaaaaaaaaaaa0a0001007770616e3000000008002f000500000005002e00"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8090) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 3.830311239s ago: executing program 0 (id=4089): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r2, 0x7, 0x0, @val=@netkit}, 0x1c) close(0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r3, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000fff000/0x1000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc8, 0x1, 0x0}, &(0x7f0000000780)=0x40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@deltclass={0x24, 0x29, 0x4, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xffff, 0xa}, {0x8, 0x5}, {0x14, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x7}, {0xfff1, 0xffff}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x5}}]}, 0x88}}, 0x0) 3.75522152s ago: executing program 4 (id=4090): r0 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x64, 0x6, 0x638, 0x3b0, 0x1d0, 0x480, 0x2e0, 0x2e0, 0x568, 0x568, 0x568, 0x568, 0x568, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0x110, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1, 0x3, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x15}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, [0x0, 0xffff00, 0x7f, 0xffffff00], [0xff000000, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x1, 0x3, 0x2, 0x22}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x698) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x2, 0xb, 0x2, 0x3, 0x2}, 0x10}}, 0x0) unshare(0x22020400) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000500000000000f000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.609464815s ago: executing program 1 (id=4091): r0 = socket(0x2b, 0x80801, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1, 0xffffffffffffffff}, 0x1) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000000)={0x0, 0x5, [0x9, 0x9, 0x8, 0x33, 0x6, 0x9b5f]}) ioctl$XFS_IOC_EXCHANGE_RANGE(r2, 0x40285881, &(0x7f0000000040)={r2, 0x0, 0x4, 0xfffffffffffffff4, 0x941, 0x4}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000e3f9ffff00000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800450800280000000000069078ac1414bbe00000014e224001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000c2bfd94d96d8ec4811e21d7efacf3229df34e2ed330060596a105e1c3ebe012dd3d215f23216ef419bea00de1319abbb4f66fe"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) shutdown(r0, 0x0) 3.602070027s ago: executing program 3 (id=4092): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0x3, {0x1}, 0x2}, 0x18, &(0x7f0000000140)={&(0x7f0000000080)="90cc2ea643144f88ad7cc69e87a3742cf72e09ce73803cf1e8627d2ef57eab4169937ed96c1516af83c330147113e9a52985e772e2b87bc223de68c3e0423c9f509cc58a6546b7862b5058b5afd3510888a76f5be5e8a21c66e86766e286ba8ba73f2fbd16f49815f4d462b2c5ed5eb66246daf3d8292af619ca59e25e5198a4bd73c63abe4c4904ac8cd342e1d54528a6872636a5edb34e704d57517854d650b647b858cf", 0xa5}, 0x1, 0x0, 0x0, 0x44}, 0x20004004) (async) sendmsg$can_j1939(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, 0x0, 0x3, {0x1}, 0x2}, 0x18, &(0x7f0000000140)={&(0x7f0000000080)="90cc2ea643144f88ad7cc69e87a3742cf72e09ce73803cf1e8627d2ef57eab4169937ed96c1516af83c330147113e9a52985e772e2b87bc223de68c3e0423c9f509cc58a6546b7862b5058b5afd3510888a76f5be5e8a21c66e86766e286ba8ba73f2fbd16f49815f4d462b2c5ed5eb66246daf3d8292af619ca59e25e5198a4bd73c63abe4c4904ac8cd342e1d54528a6872636a5edb34e704d57517854d650b647b858cf", 0xa5}, 0x1, 0x0, 0x0, 0x44}, 0x20004004) socket$kcm(0x29, 0x5, 0x0) (async) r2 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000001c0)="57c8409f6b94afa41b8247", 0xb}, {&(0x7f0000000200)="5f369339a613ca00f930b9460a57b4808da63ed3720f67c5b603fa72ccc41bed8df5c4584c9c70591554a38ddaabab3b9fa4df7ac81e65f70458ca0d8bb51e6372c9f4f82c638a82e74eb0eee06b8d8216d68d69603c54a2f9aa62a5ea45cfb237ae32ac074bc027eb982ac4b4b03990d13b4bd138b8d6bc658a55509541fcbc2a5667d12edfa39766c380cb09df1769efbcdc5f4ac8b31ed246aef2bfce3a8b42551eadc563c12c7ab2715f45a4f0878b5236f76d76608da1a26b6323d7627e35dc796ce374371ee52a4a76c382d81ca2424a5f1683f4fdfa333c6306de641dfbd47069623f2f5c8f4af019335b9391659fce9ebdc0e77fb503861d9d6719d1c0dad75c6df7161a387225fb6feb0a015e61552f3145d3c413d1b864ed44355b63dc38d42c83fe666f3185392e4337ed8d5fdc4624198212f92915dc65b382f84d9662b0ba73159888a78af9ff6676ce46b947ff8c8e5f41dc911b855c202f830b907b1e358ee297b748320f22b0e35755abda2ada101a33a72789122731de2f0e7c7cb464b79243d27c39d813c5566dd013fb90571552854fe186a3a971a3f8ac2b5b2cfb105219648acdda421784ea5e945ea75434bfa7141ccfd847ad0bd30d46dedd379c3377823ab85f378689286c9392dbb3bd671048102163401d65366e3ae608d2ddbdb3494337e9f0d92046f341fc16f08976d449439861678bac0ce53cf085e57619b77351e70658aebf88ed0d9b3d85d745b12f74a1d4cd3b081f6f44f5af3b72835193911d2f4598414cec4cede963753b940a7920bf413ef3091efb1dc053382c88a68d356152e578fa03a55ea24f2507c43ca429d1752af8d504d9f2ee12578f587195d726dc10a0bc294a63ed2d9d53999bb1bbfed33d9e714c190326c64b6a30884bb563bed36d7ed4edf645d3c9ae969b9c89c58e3129c837c40b28f3e29839d4ffd0670e37f4b9cf3a95bb694fb24cc3c72fb71f12c9bb98914065f3155cab3f3fe18389813ddc0e581716960d599901d88a4da13343b47ed365c1bb5755ced4c8db2a42588655f24a9930d085fb90f9f836f7b82a64629c12efc17ab2b5f186bba2de065712375e1c345dfb4504bb5adeb40addbb2df565667a7eb2bdf62adb79ea6557a658aa61baa30c32306f7e85cff4230daab63c205cb5502993d1cbdefb92541ad4cf58a8ec99da813bb8e18c2caad2c96cb738d5db02cc9a66404037629f99bc802b57375a092433e61ba22a2af9c46b126b0498621e8f712c03c3cb21ebe9420b2a2bd12860273f495d63599d281a1741cbbb14369db1b8e862363e2596892c04ff6f827ec497b7532374caf0852c883dbaff494b58ca4a4be76a95f5d6516703691f6672bb1a760e4904d3c95209b567b14b588b0d7ccd28502b153bb19d13f8a013c77a64bcd70ddda4b05a6b849be55133814e779540229e601ac6d2780e3c14c3f6fab944f63a59ca0d5694ea8c112b207d3df96bfa2fbc86f5123eeb9067e39989f8422d3c1acd3f3afcdd2b82bdddc6e447c275e9f0e3b9c2bdb9e4fc2df1a97d1c73a6d99f681b0e775df9dfc7e1b59599717f519af32b327433038189f5a445701988a4df176fb4d8376dd5c49f9b9b2c094596b637ae3347593f5cac5f5750864b8204adc00e3dece12d2836144927eee9b3606cd203f08fff7b008f3bcf6073d9edd6c0ad9fdb68f70bb324da0449756dd7ef47ab9509a216623c29fae449ac3886689de5831b50f4a98f0675b6386a998265e03fd150882c10dc22e685394fd0e0467bbfecc89f003fcf3dc1d7d7d2a3589e6f47b1a480c27abc909e206d1609e0e5f36e61274a7df28bd7f8ad54375fad5952e59909efd91d6cc9ee39799553907953c8be5e8060e01fd41b626deeb9fe8591e8a10816271f840912d0117d7793fae481dcb1f8b4710e61908dbb6cdeed588f90efd7b0566351f2fe40d1c9f76cc455564d0ae77f10beaf7e5a0bbfeecb459a0af3e99f3e8e132e6e00563e393c750634bd7e276a66ea12e87fb406d67415d6789f0acf40fb01f88ebd35c0c96aef194d5f309b61c8e7b7c710ab623f74531600e4017a01b48bde7c115e5399a0bd0be9d6bf03678175a72d9246683caab26b61b0a4073937b4ba3147de9992d8cbc343986f78a34351a8defbbcd70189c9a8b2fd125e282c44cfac43569b6a5babc2e312a129ac4ab8768fe86bc6e0532ccd5d0457fd9be5f6f4f65f1f1051d6bca356b8625bf88f851d1447c5861121b8c97fdef90f1d74d8bfe7e2ddd1aa900c623598fc749bc305d53c931e8912b8b599449ba28471c2ad2325868775b0d428b25a9e456b9be2757c127c7dcb35f29c81dc4c6048d30f78a14807524eed2be613da45f0c6cac04bf0f4534719b4222c59c0f67a370c6793dbbc669c27acb0137ef2861667c920c3e3ad2456a63f1b05e24480d3639ee352dc5c0d81c4ebe3546b86b5bd38e8d6792b7a173e67983057f5b91d1d1942c42ed4fe7e1992eb4057737a9e9c8534626dc9035835c84df3459dc733276ff3a3d38d783e6e96c4d74a76478d650a6adc511ed3f6b8c3725aa25657edb5b88be873b25bd994a44c48f1125079544ca72beb6baa2fcab892b7b6fb75a7418f6cd5b16ba34e969667579c78b6477dfa4fedb19a97beb5812949ff5314d919beee5753a3f6aaa9286af8ab24fb6be51f76fc9aa6d07abee7220a270d4c648d1e8907ac63b68b11d05bae46643f3bccc029f2e39304b5f50b4c73bccfb5e25b17e64fc95dc106d1beacae07ad3572ef2ea91bc9246877d37b15053fa46dc9376dcb1b13c2237fed4e1304715b2f4f6852745c92d03668cd7090307e5e5e7054fbc7fb04e82bd05677a40e378cb23845887f2cd71753b284ef060116d012846edd81365afc863819ff323c0c92fcf8cf8938da5b9b9d23a1ae0a18ee4b5a490867bef6bbce2f314952642f658c2d17f01c3a008fa145a141d04fffb453c2f5818e845ce51cb289c85c915d7af993e51fe4d3be7e90665f25981f30004f75c9a6a62793bc5dddee5a20dcd40be366b503c509a6cde28b61708a7b96c50929536981056cf19105f08a0fbddfae7ec6aec086ad0e25c1aa7b1223f21478c543394aea3401b2cb76e187a09c58d6f168b156f7daeb2406f1df90e47762484b49d8f660f1573eeeabf0ed84503db89a42b235d24f4098253ea04a2240af864da88f973b62ecfedbd889b6bb9b774458a44e371fbb12ecf93b72e90a99d167f7832c7051ef1308937df0da319f1a7f085729ec38fe45190720dddf591a381e5113d05c6d6d8ab7b7a81fe88c915e8474001881f13d382135e66d99e282bb251ea94a3033e068d58e1f5e332d11a6722ef15f7bb6f0f225e875e8511650d6fb412dbb541287a64bf6ced5f5ea6f6aa747dddbd3118379b28f5395b1cd7a7f2b63d01b6e8fad7d5829bc2006bdd36da815837d9f10acf0d89bc1cfa91dc774da2325073d2c5c5f7ac90f41127a7b8f8c2e0dc1339ad7e59b4a892c62b0ea9baceacb8170444e2d8f1bb09a07fadc238643b72ff86d5c8bfd0f6969d8108f774a04fed0d0bedafca34eb15071a5d18614c589744fc12e46800291ce95022f5746f93a00661d6e8570ad000c3195b9a07e9d69725a196cb937700b516bef36dfbeecd28e96b75411073d870e2cf25d8c934da07b22d0caff5aee20768f79bd10bde3e4541348ec42204d053ce53df0b948d757efd3b060b77f2941a44e3a2e287785b3603dfded4beeac208ee884525d69f83afc458cede241e91a708300035eb50290e64292083e47e2c09de716fddf0b587bc138a8903d1f9ecafdf155bd87c06b0b050c236d910c8b258a2c3b7b416d6e0845eb10ebdaefe02834d932ab7bde02f7b3675a2d93437938e44c3f85f67f12a0ce467aea1b101b7c21248390a12daf9621b0fdd94d1d0200f47895ef3df610b3be577ecc00bd4ecac47463ba494c57fed35e84c2e111f7e4186e315b0549aeab90f74009938b628d90f0a8f701ecc87660d24b70aba8e361f8d6bb2cef79019e0761e6f8ec3746ddd1316ca2e3d93cdd38b784bdc8da3377d6322af0016962311b74cf5bd93c5bbfef477e0e58b1cb03c741c2c4684bfd191bd5ed54ae31ceaea0983b4207530f8900e703bc70af7cc8966ab216a49ae90802fc155f87d2b51a12d780ca2a732d50597f6ad222feb5a3abf4181065cc3efcfe2b03fc30b6b1cb87bbfd15927a827376a07d1177839b295d5772b636d1beb61e1f499c52c2bcdecbc5ead4e023970feab1c7beb059502e0e5df4f74345cc3c82dff7f039b7b02d36325dedb2e9ded2a9113f09c9611c17f1ebb4de46c9cc8fdc3feff247785918326e366a5e2c9b2447c959cd07ef152f1cd5456e99ae3cfc948acccc7e45a4f76ecd2fd76dba114c3909663377f477d26fc53be29b3be9964f7702f3b6a962b02df9e5ca3ecb6b010cd9618136fba4629839e254cc873d68f185001f8df61a3e5ee1ad7cfcd8564e850b0ccd139a035d4457ec4d4a44da1eb6f2458f50be4ff7eb6634b27192ba60977bba251c6ab70a2d5bc4c3ea77796a359670241af955a5765c55d08f8e0de34a38592b73b56a120885a848043e9b105bfaf2da7b70bd986fe94555f81feb2e391e22a7515553a2205dcd291bc2e334f600aea7ca09d41166b6ed3117e20fca2ed89d7fb0a5c2b5395a9feffa3d0e68fee48d8177376a610302d68ecd27f201680fea6ad149700d808d9ccaadd7647f70864e4f4c1a8fe47696c0617eb42b5e21171b6df92edbc5a86ca77df470bb06c5cff8a42988a73629ee923b9fea05ad0bb2314c3f0ea8360fb1bcc7dc36b084703e3466cbe4a6345ad94376e02e14cd58997c020c556c7b11aa515924df394f254037fb4614390abe2b4fd9859021ab4f229529698c9b88af6f24fd8da40a9193c16bbb8e7e9cd37efdb69eff463669b1b3a5c8d5e6fc1de63920bd1c8ca829b8388d075c42640aaa44c8af9b14c89bf85eb66389f739530222ffe9efe127ee2a4e7da979076f667aa127f89c49123db461d2d0a580ac80067fc753fd55de0ef531d4ce3662704a71377031697cb185087bf604051361c7b976b90c608cdd1020b1ab3d2d8d283bd26a617ced45e64e303845ffa89c489e426a8e04a64bf0ae3e18075524a95c11f8055a5966d342641805d9c20546a09921deccd9056b79e2edfaa578c49826daa5451c1bf3775af74dc90b3c56e014c20a9f47dc251d2ba9582565fb47b04ddb484081bf14362b73588b74afefbee7a9d0f90deb146e26712252154cd2cb3cc982943a63c8f9a6166af443a2b632e1350d615183253cae27eeb2d332bff0255bfe93b51c9572db2d34c505a0a25f9fa862979212f476327e8e3eee0721d9ef24ba36d4717caa42bf69e5739a1431129dc13f64126f16b347d42485ecc9fb2523dc5b5057e10b3929474f5c4783a07478cf197f7470048d0d80fb557174c2abd1b0fecbb12c4bba172f4259fd9281304998a0947d3ed17add4fdfdf10097daeae55309ca5e6b6151f86db98b8fae75f966b97f45597743b4149a58650f970a7a39bf76c9a01f76de2f1d76576c234a5a6674110caf258f6cb7e9c185756e6c48a58ca01c690507c4cc074935e2a2376f548efbd762fcf3cf042502f9e3797f410976335add6191c3124549e545a7b024c7b3e5c1699797d16549f5b0f865d673b0e50d832b23a0a07c16ab5df872b6b36054fedd9fbcfc2016e6cc14cb5dc6a5dd4b17017a2152182a1", 0x1000}, {&(0x7f0000001200)="93bd619e94df336115863bd580d5a00219b104909a78dd6458a67f65fb79ed5bd3c6180b5cfd186ce48934f261d457b889e7aa1fbd97c91b89399f866c365edf69ad16aef3b0e8bb935439e565adecd20401e7abeabf98", 0x57}], 0x3, &(0x7f00000012c0)=[{0xc8, 0x117, 0x0, "2e1c839afbc4c40b505aa9ce1a6a32d0cddbc95ed248fa44bc40aa8c645b3760195404cd27de078d949d159204ea6f7811c9bdfd0fd9a72703c49bc1f49e8406f4e7cea81181feba65c8c9b80886346efba2492449723354f51b1335e4d73016ee643c3a194ffc092cc9cc63ed8055a7929759508ef370cbe060dcb2ef9b1f72db552cfd50dde3622c2766fc90d407b477870f010f27431a8ce21bb10a9c853b57e19d8485c88744d5b76f3a22cf86e333cf42fc5a"}, {0x100, 0x11, 0x8, "fb02a006ce6d17ceabad4cf822169f1119aedfc0b768b76775fa1828900cb64fa9bd91bcb82dc45a3d7fb859d2d1e4c7216465d513a3cad9480004179fa8ea4ed107477998e353c50e7980b6d9da107e7464a534ee0c5aaca22d6e8ee301ea4c5039625f557a3f12b21e4e0f2ce85fe4053118e1f537cfed9aa71435340719a546fbce89b7f606e3d4a53fa34dd936918cb55e26a08496fe80c49f671ca006f0f7e09985b37dfa7c6c0ca68b7acb0d5bff3d328632eee191408f979327bde8a2614ca884beef67f9b83298b425783cdc1cbd4dcc2aa3d7bf86902007ca4fa335fe3fd04c17856bbc805248ff"}, {0xf8, 0x122, 0x8001, "db75d8d2f24626d3feb49d36f462ca1ead3dab0d8fd8cdae33d8b82f27668ceb157ea1c125d578b32bd6838664be27664bd3b23e59512bb1d13d1af866b0182937eba0ab94796bdc61b209a83920c7b32aaec7df935c4120e14098c135d729eb58eeda264fe0b2652b1519aea199b367d97302e6c1b19df11bcc65bd1f99479f998652c75be5bbc09fa9fbe01ec7b1d60c4cddb8f617b668655a3c587cf6ba2b88792332f0de40cc9b2fd138e97ccf4ec92893c970bda408d068deec94201228261c3a13c78bf6244479070c3987a69f70264facc2b303baacd11cbb1a5f0b852d3e4b868f"}], 0x2c0}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000001800)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x300000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001640)={0x144, r4, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x38}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf4a4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x21}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xa4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x100}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x20004004}, 0x800) (async) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000001800)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x300000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001640)={0x144, r4, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x38}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf4a4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x21}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xa4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x100}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x20004004}, 0x800) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000001840)={'security\x00', 0x0, [0x96f4, 0x5, 0x7d, 0x7fffffff, 0x2]}, &(0x7f00000018c0)=0x54) writev(r2, &(0x7f0000001980)=[{&(0x7f0000001900)="fd118e6fce5e81c59220c367e565771d4ddd077081dd69ef93e6c30dabe3b7103e02ac8354d8b46cd69ea67cb4103fbea6748b8fbd9db4609318bfca94cf6d569f75c447345accd6d7b6daee4bb3d55e690dec0336a89bedacd7743a0786d0af5d5a8794ea2f1c724b03b3f68596d5", 0x6f}], 0x1) (async) writev(r2, &(0x7f0000001980)=[{&(0x7f0000001900)="fd118e6fce5e81c59220c367e565771d4ddd077081dd69ef93e6c30dabe3b7103e02ac8354d8b46cd69ea67cb4103fbea6748b8fbd9db4609318bfca94cf6d569f75c447345accd6d7b6daee4bb3d55e690dec0336a89bedacd7743a0786d0af5d5a8794ea2f1c724b03b3f68596d5", 0x6f}], 0x1) splice(r0, &(0x7f00000019c0)=0x2, r0, &(0x7f0000001a00)=0x2, 0x3, 0x5) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000001a40)=0x1, 0x4) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000001ac0), r3) sendmsg$FOU_CMD_GET(r3, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x4c, r6, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_PEER_V6={0x14, 0x9, @remote}]}, 0x4c}}, 0x8020) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000001c00)={'mangle\x00', 0x26, "3b4ae2d3303eb1e16bb1dcb2efc16f66eb8001297b3da5af47973ca7e4ba5badc41e012ef340"}, &(0x7f0000001c80)=0x4a) (async) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000001c00)={'mangle\x00', 0x26, "3b4ae2d3303eb1e16bb1dcb2efc16f66eb8001297b3da5af47973ca7e4ba5badc41e012ef340"}, &(0x7f0000001c80)=0x4a) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000001cc0)={'nat\x00', 0x0, [0x7, 0x7, 0x91a8, 0x5, 0x3]}, &(0x7f0000001d40)=0x54) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_QUOTA_RESCAN(r5, 0x4040942c, &(0x7f0000001d80)={0x0, 0x8000, [0x0, 0x5, 0xfffffffffffffff7, 0x3, 0x1ff, 0x7]}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000001e00), r3) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x1c, r8, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}}, 0x880) bpf$PROG_LOAD_XDP(0x5, 0xfffffffffffffffe, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f00), r3) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f00), r3) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000001f40), 0x8) sendmsg$NFNL_MSG_CTHELPER_DEL(r9, &(0x7f0000002080)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002040)={&(0x7f0000001fc0)={0x78, 0x2, 0x9, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xffff}}, @NFCTH_TUPLE={0x38, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20048811}, 0x4000) bind$inet(0xffffffffffffffff, &(0x7f00000020c0)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r7, 0x4002f516, &(0x7f0000002100)={0x81, 0x8}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000021c0)={r9, 0x58, &(0x7f0000002140)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002200)={r10, 0x7, 0x8}, 0xc) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002200)={r10, 0x7, 0x8}, 0xc) 3.29587849s ago: executing program 4 (id=4093): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000002480)={'sit0\x00', &(0x7f00000023c0)={'sit0\x00', 0x0, 0x8, 0x40, 0xfffffffc, 0x95b, {{0x5, 0x4, 0x1, 0x1a, 0x14, 0x68, 0x0, 0x9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xa}, @multicast2}}}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d2419540"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r3) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32], 0x24}}, 0x4) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="14678e7cfe43f1c263530400a45c3d5f640deb75013b32e70e9f2c826597b80720d420312839de825c89e02798b66e5d0dcbafbe7f8fda6786211ff24dce1793ac714f84e6db0b6fc3654bf67ac230209fdcac1d17acd91f7def2e0c8f261bc3741500b7e2affa5068", 0x69}, {&(0x7f0000002780)="21acaf08334a264ef994c92e7de95d40305bdfc3621e2fe6ff27e203fd7b457202dc0078c6f14ce3", 0x28}], 0x2}, 0x200440c4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="040000000200060000000000e5bd", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000780)=ANY=[], 0x0, 0x1, 0xcf, &(0x7f00000003c0)=""/207, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000300)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0x6, 0xff, 0x42}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@fallback=r2, 0x3c, 0x0, 0x8000, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r5}, 0x38) 3.024345071s ago: executing program 1 (id=4094): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000001040)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000000)=""/4096, 0x1000}, &(0x7f0000001000), 0x26}, 0xa0) (async, rerun: 32) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000001100)={'bridge0\x00', @ifru_addrs=@nl=@unspec}) (rerun: 32) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x30, 0x140d, 0x300, 0x70bd2d, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8084}, 0x8000) (async) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x20, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4860) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002780)={&(0x7f0000001340), 0x6e, &(0x7f0000002600)=[{&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/131, 0x83}, {&(0x7f0000002480)=""/121, 0x79}, {&(0x7f0000002500)=""/20, 0x14}, {&(0x7f0000002540)=""/141, 0x8d}], 0x5, &(0x7f0000002680)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}, 0x2) r11 = openat$cgroup_ro(r7, &(0x7f00000027c0)='cpuacct.usage_all\x00', 0x0, 0x0) getsockopt$SO_COOKIE(r6, 0x1, 0x39, &(0x7f0000002800), &(0x7f0000002840)=0x8) (async, rerun: 64) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 64) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000002880)='wg1\x00', 0x4) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT(r10, 0x4004f506, &(0x7f00000028c0)) (async, rerun: 32) ioctl$XFS_IOC_SET_RESBLKS(r2, 0xc0105872, &(0x7f0000002900)={0x3, 0xeb7}) (async, rerun: 32) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002980), r9) sendmsg$NL80211_CMD_STOP_AP(r9, &(0x7f0000002a40)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200e00}, 0xc, &(0x7f0000002a00)={&(0x7f00000029c0)={0x14, r12, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x10000010) r13 = socket$nl_generic(0x10, 0x3, 0x10) (async) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002ac0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r13, &(0x7f0000002b80)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0xab90b8801684668f}, 0xc, &(0x7f0000002b40)={&(0x7f0000002b00)={0x3c, r14, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0xdf}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000880}, 0x15) r15 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002c00), r11) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000002cc0)={'syztnl2\x00', &(0x7f0000002c40)={'ip6gre0\x00', 0x0, 0x29, 0x2e, 0xe7, 0xffffff00, 0x43, @loopback, @private0, 0x80, 0x8, 0x4, 0x4}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000002d40)={'gre0\x00', &(0x7f0000002d00)={'tunl0\x00', 0x0, 0x8000, 0x10, 0x2, 0x7, {{0x7, 0x4, 0x0, 0x11, 0x1c, 0x66, 0x0, 0x0, 0x2f, 0x0, @local, @remote, {[@noop, @ra={0x94, 0x4}]}}}}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000002ec0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002e80)={&(0x7f0000002d80)={0xe0, r15, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xefb1ebaac16c10c8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x39}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r16}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfe}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r17}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4008000}, 0x1) (async) vmsplice(r5, &(0x7f00000033c0)=[{&(0x7f0000002f00)="e740707ccdf2bbdc6d52962691611f4e0350829d7b4a8c5510ba3fc59d622d20ef5aac31bfce995126a7e6764243d802b2795ed458a6269e18c0ad1880fff39d326557689af5275b31952d631e861a38c9c37fd0fc579a74c9f3a9e20962b4297e8878a8af6ed1dfb6e0f87d0ad80271e524f55141e5c091b73f3078c4bacd05f6a2c30ff72390c6943d8031ce9e07493cb1b3c1c10f40a2975233152a90b0a5ee64fcf303dbf9b70e2151c1e335df02a86891b6c232bd14757cbe0fdd70da3598a66e0c9ffa4b7fba0365f7a20b", 0xce}, {&(0x7f0000003000)="45c7ce42f46d550c33c0eb40cfaefa3ce76682aa429709c0c48fe1894577a6def6427f3bb885bc7bd20095b62db555f20854908352bb5c803b886de12a632634818fa2a0305210a7c7c9e4f229456e0c5cc6ef38925f6cdd2f95679c7f268b5ef1f4637faa075933f127e4bb6d543a5200adf48fd87cacb0fdea3064bb5a06a1550fabf3d9b677253f1ba36ea4ec6263c492b8541d1f44f6e0159bef66d1ad5a0dd2d2855bdafb60ee55871ea56d52395f619f4faada6cd49883b8b4ac", 0xbd}, {&(0x7f00000030c0)="60d4ca18686a67f96a58cccced57f8b1ea8b2a99f758da758d8902a3b2a50b9604852e80f6071931fe39f129", 0x2c}, {&(0x7f0000003100)="ed69", 0x2}, {&(0x7f0000003140)="6526881e9923e98e3e81716a50105ffbcd46a4adf72926306bdd7e285ea5ff6eb7a393a386ecaf5a7e33600ff42be0efe4eeb16b43a119168ca1ee8ee58425023ec303c049b165e86f99ff84b3b060eea6ad4c63eb9b19c7d0577b8bb2d7df21fca3cf58ffb58c3e8b2d948fb36a320d171e4e1e4414dc013dc0ca7de14afa9e877aeb08a5acbaae3cc3f687d80a53f4b3f956cb5e3bba", 0x97}, {&(0x7f0000003200)="414711d1dc9dafb524c9bb66ad058df3efb3e6620d03e1732ffe36a6b2fd1c86c108063e91a01ead01a2476598cbf6a720cc9834ba467649f22d81b104b8a74a28da84c96fc03fc39cfd27cd7752e62521bb30bb8782346b22cd1e6f936458dc24930fac349d51d6bdfa297b44c92c708527e3ba827f57f6dec84e12e7a35c4478142d6007828b94dbe1", 0x8a}, {&(0x7f00000032c0)="c537b51a30db1f670faf5a3ae5d69c163f0a2422c40ce72ebce99bfcd3bd05844ff68e49561f9b4657c05238807f598fd5c2a432a5f2bf505a39266850c9e23e2507ab14c052801ad48e52b00219eaf55bec866a7cf6351574a521df13ad269e2279e39fc1bf6185b32343f6bd093a62e76391b5ffdb698ea5af0f799154cb1de5d8d7bfc2d7b4710defbf5deb939f58d64bfc004b7ad59aa0624d505f939d423223a7e5b2fd69bd3ba878e0f2c92c20052031fa20798cc392c223f9ef17b115bf12adeb7de92fbc4877b6e8dc18cb3b1b3f4989e64ee910a5a1786102e3ba5ef93606363166e13190784d37ac4fb19ae9377ea9e5898209", 0xf8}], 0x7, 0x2) (async) r18 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r18, &(0x7f0000003680)={&(0x7f0000003440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003640)={&(0x7f0000003480)={0x18c, 0x0, 0x0, 0x70bd2a, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xd}, {0x8, 0x15, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x21e61977}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfffffff8}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0xbbd}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0xd7b}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xf3d}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x9}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x8c4}, 0x4800) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000036c0)={'wg0\x00'}) socket$nl_route(0x10, 0x3, 0x0) (async) r19 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003740), r4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000003840)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003800)={&(0x7f0000003780)={0x5c, r19, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x3ff}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x8000}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x8}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x5}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x3}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x7fff}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000841}, 0x8001) (async) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000003a00)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x800002}, 0xc, &(0x7f00000039c0)={&(0x7f0000003940)={0x60, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x9}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x9}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044000}, 0x41) 3.014252152s ago: executing program 3 (id=4095): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 32) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYRESHEX=r4, @ANYRES32=r3, @ANYBLOB="00000000000000002c001a000600000002000000200004801c000180080001000100000008000200", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=r5], 0x4c}}, 0x0) 2.635974454s ago: executing program 4 (id=4096): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000000)='\x00\x00\x00\x00') r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000100)="05000000010001", 0x7) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) pipe(&(0x7f00000000c0)) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000000)=0x8, 0x4) read(r1, &(0x7f0000000400)=""/128, 0x80) write(r1, &(0x7f0000000140)="0d000000010001", 0x7) read(r1, &(0x7f0000000400)=""/128, 0x80) write(r1, &(0x7f0000000180)="3300000008000102030405060101", 0xe) read(r1, &(0x7f0000000400)=""/128, 0x80) write(r1, &(0x7f0000000200)="34000000070001020304050601", 0xd) read(r1, &(0x7f0000000400)=""/128, 0x80) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x100) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in=@private=0xa010102, 0x0, 0x1, 0x4e23, 0x0, 0xa}, {0x0, 0x0, 0x9}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x31}, 0x3507, 0x3, 0x1, 0x7, 0xffffffff}}, 0xe8) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) write(r1, &(0x7f0000000280)='4\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00', 0xd) read(r1, &(0x7f0000000400)=""/128, 0x80) close(r1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000200), 0x3) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "00001f880000dbaa", "a504eb69a751e9d7e9fb434d1665e900000000ffffff7f00", '\x00\t\x00', "a301fbcf1fe65504"}, 0x38) 2.46912122s ago: executing program 3 (id=4097): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x24, 0x2, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x8b4}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x1ff}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x3994}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40488d1}, 0x50) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000afd7959a0416000000000002001045118ffb44f46eb32700fe040001040000"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x15c15b04}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000224bd7000fbdbdf250200000005003d00060000000800610000000100"], 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x20040000) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x110) sendto$inet(r0, &(0x7f0000000140)='^', 0x1, 0x11, &(0x7f0000004ff0)={0x2, 0xfffe, @local}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(0xca, &(0x7f0000000040)="04ffffff", 0x4) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000100)={'ip6_vti0\x00'}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b40)={0x1254, r11, 0x1, 0x70bd25, 0x25dfdbf7, {}, [@TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x99, 0x3, "6f0f71be322d7308000200000000008794acb684a519a0bbfa2f0bad5de9b6cd9ca0f1d568ffc2fc8f7e88342f3493c0c28a1723d7c87d7af63862a16fe10b83e47e201ad7d50d7ca22919dfea413684f15ec816bf8691b4abd3b4eb6b10640104b65e3ea0f8837153c47dfb73788875c0c2a4e8ef7b910a2f2676cf64b10c9b0613d9d47767876d793969db2bd275ef1ec4008ca9"}, @TIPC_NLA_NODE_ID={0x9, 0x3, "932cf0d8cf"}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_NODE={0x1178, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "4f6932ef3b560079c281e04cdd3a2236ecb48532560a129503dbf246968c"}}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x57c}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xcc, 0x3, "056f2f6e0ff2253ce38b4b53088fcc306b765b88fa3ea7794ed664bf0bcaf71556db689f696b84c4d9c345c03f504a04e680f4d398abfbf5972ab74b849db97e68380edec27f97fb2a0e162b41042693152df4c147bb21f81923ccdd02e3fb535d16ea5909525cc1d32263cec427c8c99e92bb7904e113858f6b75913e967ca36c55f78d2d367487e0148ce886b8d8f3e8d38742df3630c27d289d2603e05bb6f24d17eb2ed910d39557f6ce4523ac900d9059784ab7cfddec4201d17e6cd6be402509bfcbeeba27"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "eb69a0e72343f153d9b194fcc04af3e03fe6b9973a0e7cb01874caac0993591957da"}}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0x4}]}, 0x1254}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) listen(r0, 0xda90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, 0x0, 0x0) accept4(r12, 0x0, 0x0, 0x80000) 2.051728896s ago: executing program 1 (id=4098): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRES8=r0], 0x184}, 0x1, 0x0, 0x0, 0x24000000}, 0x4080) bpf$MAP_CREATE(0x0, 0x0, 0x48) unshare(0x22020400) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="070600000000000000002d0000000c0005000201aaaaaaaaaaaa0a0001007770616e3000000008002f000500000005002e0015000000"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8090) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.74830747s ago: executing program 3 (id=4099): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001440)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001640)={{r2, 0x7, 0x7, 0xc9, 0x7, 0x0, 0x9, 0x7bc, 0x9, 0x1000, 0x10, 0x1000, 0xbdb7, 0x7, 0xd}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x304}, "7f3900005200", "9a5d38a17f00c500000000feff00", "a1e3837f", "542924b4eab9743a"}, 0x28) recvfrom(r3, &(0x7f0000000440)=""/4070, 0xfe6, 0x117, 0x0, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe07}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 1.612825251s ago: executing program 1 (id=4100): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000001c0)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r6, &(0x7f0000000680)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}], 0x1, 0x4040040) bind$can_raw(r4, &(0x7f00000005c0), 0x10) socket$inet_smc(0x2b, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c001000", @ANYRES16, @ANYBLOB="010000000000000000000100000038000180060001000200000008000500000000000c"], 0x4c}}, 0x0) sendmsg$IPVS_CMD_SET_DEST(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="010015be4c385af31d4911"], 0x14}, 0x1, 0x0, 0x0, 0x40084}, 0x40000) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, &(0x7f00000000c0), &(0x7f0000000440)=0x4) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) pwritev(r9, &(0x7f00000007c0)=[{&(0x7f0000000600)="7e908846ea946bf7fa9814c042ababa38bef0e83c9b5b04aeeb5e892e381e178c694a77742dad0716c251a5d84a536e29e837aba9bc015b41f136585a4715a086c4cf02584694a0c554fa8e1515e674b6abee2f0c83d970cf837ea61b92451ad7dfee030b5cbf95f53da989bcd1ebf31404e675017e82061fb46de385985801e69295e285ab042413d8562118ef05f8be4a9a2acbdc6ec653cf5024f99f5c211840deb32b898cd43adabaea1b13eedd342f1d91736d3fae9fe39184abb94279b12364cbdd1394f9aca59214b67801907d5cfbe89220890685151871cb388b538f3470e", 0xe3}, {&(0x7f0000000700)="e7022b6896d1eb9da36a11eeeed9e82df8de5958507244fc5665f2847215ae3cf5bbd724d4441e3503a352fa3a3ebeec97a229877f105d31e8cb68f1423a09f4f153ff919313390c9fc2dc30af8750f036642442424d8387babd1a644eb485d40596aee8e58269923b366faf882ca07d07888bd178fe78b57015558fdc351ce4aec397b6ef6002b0a845a1d7", 0x8c}], 0x2, 0xb, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000130005002cbd70000000000000000000", @ANYRES32=r10, @ANYBLOB="12030000000000000a000100aaaaaaaaaabb0000a37a654c471ee0646a1be0d9ae5b94acd51d332502148737c5ca3acbc5086987162a36213d42c958ba83394480fac8d11ce3eecadb66423b3c7bf99d3d7e7b2955976412ad09241e532b1c702c8bbeb776a0f684f4f45954df80605ffb1a84ea8f4a06339321d6eeb27bc4833317dffce0d6e3949bf583ece4df5dd752d910121001da94cea2eb43d55e6cc2cd6acefa2ae931e1222a8589f4584f1301dcaad00db2891ae3268d12469563c0bd95b2acb55a1e0409a219de0ea2e593058743d07ce60bf4"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r11 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) close(r9) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}}, 0x884) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffffffff000000002f0000000e0001006e657464657673696d1000000f0002006e657464657673696d300000080003000200000014497c97fe088e6aed00d9a194a3a3f576ed3d81ae38577b51deb30b26f314f41f1e15e937e7541eae785a16d98a1a97cbe8d98529c1888455c6f146944bdbadb122c6eb52efe0c9328544a62c34b75b"], 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) 1.523861176s ago: executing program 0 (id=4101): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) socket$inet(0x2, 0x3, 0x4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000400)={r6, @in6={{0xa, 0x3, 0x4, @mcast1, 0x4}}}, &(0x7f0000000040)=0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x84, &(0x7f0000000000), 0x90) r7 = openat$cgroup_int(r3, &(0x7f00000006c0)='cpu.idle\x00', 0x2, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1703, 0x1081b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x29, '\x00', 0x0, 0x0}, 0x50) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000004000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9000000000000b5090100000000009500000000000000b509000002000000639a04fe00000000b509000000000000c39a04fe41000000bf86000000000000070a0000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608f8ff000000008500000007000000b70000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYRESDEC=r8], 0x5e) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403, 0x14112}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000040000701fefffffffcdbdf25037c00000ce84780070003"], 0x20}}, 0xc000) 1.45116041s ago: executing program 4 (id=4102): r0 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r0, &(0x7f0000000000)="4c00000012001f15b9409b849ac00a0038c88cc055c5ac271fafb068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1eb0cefc8792cd8000080000000000000000000007e80", 0x4c, 0x20, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000980)=@nat={'nat\x00', 0x670, 0x5, 0x458, 0x218, 0x218, 0xfeffffff, 0xf0, 0x218, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x4e23], 0x0, 0x0, 0x2, 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000000, 0x4000000]}}}, @common=@set={{0x40}, {{0x0, [0x218]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@private=0xa010102, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) 1.111743558s ago: executing program 4 (id=4103): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xb, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffef41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xaf}]}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000680)={0x14, r1, 0x8c24381a3d4a0b6f, 0x0, 0x0, {0x2f}}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r3 = gettid() syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/mnt\x00') r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(r4, &(0x7f0000001ac0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001b00)=ANY=[@ANYBLOB="100271d3cf6f5564f8de0825bc79673157d0fc6fe6b61c1cfbb36207c325401a4b9323ea16944c59c3d1b7090d628480e95f16fd8db136541fe2a5fce61061dc79b541a60cf0eb80e0a416aee6627b898a57d1c041b33cdb944d0619dd63fba75b3fdd1ca7844d5ca4e0bee49d6ecbb4abc33658e6b91ead6c7406323991ebab0b17e773594b332311408851bc1e241b8beb4d", @ANYRES16=r5, @ANYBLOB="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"], 0x210}, 0x1, 0x0, 0x0, 0x400}, 0x20000000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r6}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r6, &(0x7f0000000000), &(0x7f0000000340)=""/89}, 0x20) r7 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r7, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) sendto$inet(r7, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendmmsg(r7, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=':', 0x1}], 0x1}}], 0x1, 0x80) sendto$inet(r7, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x1524, 0x3b, 0x301, 0x2270bd24, 0x25dfdbff, {0x1}, [@nested={0x0, 0x77, 0x0, 0x1, [@nested={0x0, 0x1, 0x0, 0x1, [@nested={0x0, 0x79}, @typed={0x0, 0x27, 0x0, 0x0, @u64=0x1}, @generic="979b45880b2ad6daec2fa9388f9402005399f3e0a554634e1308041b0e5a57fb92e5c4b6f045001ec6e81e9dada3d8edbd91acd02a4bf23b9772f9a02a4cd9c1ff563226a92552a6936e539520ea7f3cefa0b6a554289bad558879ed05c1a95b0bb5cdee196e365d9cd5fd3d135b", @typed={0x0, 0x55}, @nested={0x0, 0x99}, @generic="1f5be6fb2b18e892570cf549eb1e4d38c41fce6daf9550f1cc7b608fa81d2cb02b66c4f368cc14aa4153b5229434ac35d52c737a596008b0b99aeb50a454faccde215674d0439c25309ef7959c1b39addf5702130f391412323ddbca13dd972ab1ee34"]}, @nested={0x0, 0x11d, 0x0, 0x1, [@nested={0x0, 0xb4}, @typed={0x0, 0xf5, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}]}, @typed={0x0, 0x14f}, @generic="8ac75177685e21196196aaaf796cdc02b0f31ba7289f01ad5738", @nested={0x0, 0x6e, 0x0, 0x1, [@generic="69d3e097c65176b08feb5f0157338421a9208f951efc2afd943a7dc61f2977978057aa22a8ad742cf424576502b8bc7b28f9b546c825da4e784d9771a8065340e72729afae8752729b0cd7ff83b1c389af5b3b8c396f313059b05f48bcceb6d56b9a816c1cb101b81e4168261517bb3a656bca51cb3e7552641d9591e41486a1fc4c87346740e7a8be345f0bb76850445ff50bbbd6e34670ac890219fadfaf47d27d597ac625ed0acb99212e971c2f3cae27fb571de521254efbc0914a68e10254a7bba45252a6833e524084e65567fdd4ba3c79b4054a13cc42d355be6643bbe8e79220e185d16000e41112e038576cd158ca6c6e", @typed={0x0, 0x14c, 0x0, 0x0, @pid=r3}]}, @typed={0x0, 0x8e, 0x0, 0x0, @u64=0x4}, @generic="ab"]}, @generic="e331042f19a394d4c2b20e3b4d719daa406e9692c9a1c73053bf4a694c5245a7825f97d4efa3997033a85d8666914d7c5541f6a507bcf6563c7251792e0383d7398ff7ab1e5f7109a3c78384c48409b7cab887fef6319d0c73ff042f8c8ceedfd4a1a5b0f61785dd0cabadcbc3ddef94fbba424bc71a1b5b37cf51e29c6bea54a7f5307e34cb5870c8902fa0144edde922e4529d36325e14976431da7e02dc1eeb519156fa7b6f3aeaab7092bbef930c49a64c726160a9b55429f18c2e72b1d215d03ff7f32445e665f77b55ee26c25d33bf1dfb12ee1988955771645ae339017de9cadec2877ba6c13e5435777bca4e0045", @nested={0x0, 0x13, 0x0, 0x1, [@nested={0x0, 0x12, 0x0, 0x1, [@nested={0x0, 0xc5}, @typed={0x0, 0x8b, 0x0, 0x0, @u64=0x2}, @nested={0x0, 0x55}, @generic="8d7d56de55ef5bd1f41ba0859ec659472814cdccf2859167be4e8ac094fb99bd98a1d3648c8ce59b2691321b5f04db6ea6b1653fe57b234d979fc5307b2d2942d3b605aff01efd8d892ee360ec95f3ec8c9e1b4e2ddd579e199f0cfa58003ed8f724c3d8258a2e9314143f7f659a3b95baf99a249d70df9e59742c529f96454853a85c61a4", @generic="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", @generic="faf80c5d499a2d88c250ba89d52865914aefddd005d10b9ce760c3cae19cac59df5a36a707ef010612898c31a3dbf383612cbfb3663229d8ebde4e5aa7221acd8281111324c573f12d25f61489b80c98dd96597578ffb9d1d08c11146ccd84fd7ce20250da953fb2db0e019000c0297e", @nested={0x0, 0xc0}, @generic="46c226501deb1ca4238a6849d6271cb6768760b0a896b76624199d7b13837fa9f9", @generic="93e844318f01261357913dfa5f5736b832eb9a78e88521d7405ae3fc0ce4fff89adf82fc3bed51e684a53d758b57637e378d1512503770dc7adef5195d1d946fcdb830a9fc0617514b63926e4be0449fbb421a81b6be228f4b8a19bc1fcefa18aa1d436edf50cec80d9b05fc5ebcdc241d2768978abab47ecad28398b9c7a3f2b5b6fee132accf329d5a6f1b1d4351ea2674b00c7d00edb65237f5d639be9c099e8533ab0292d049462dff0c670ad5ddd5b549d16f1d28847df63fdf62f063b85140d69a73b180ed9a51ac7a8a4bee2179e693b85483f9cdf605c76b4a29d7cb04c6696f58b8b099e95f84bc"]}, @typed={0x0, 0x8f, 0x0, 0x0, @binary="9281f13358e819574c5788c37d978e1297c0e6cee655c9942308978416fb88b977e4b7a5efae"}]}]}, 0x1524}}, 0x4044000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) 808.396482ms ago: executing program 3 (id=4104): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x262282, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @private=0xa010100}}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) (async) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x5, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29e}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x2, 0x7, 0x7, 0x2c}, 0x79}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc8c0}, 0x2) (async) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r10, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff8807c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x20040000) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) r11 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r11, &(0x7f0000000000)={0xa000000c}) (async) r12 = socket$inet(0x2, 0x1, 0x8) sendto$inet(r12, &(0x7f0000000a40)="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", 0x1000, 0x4004004, 0x0, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r13) sendmsg$IEEE802154_LIST_IFACE(r13, &(0x7f0000000a00)={0x0, 0x15, &(0x7f00000009c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001787e0b5e14b4f09d4", @ANYRES16=r14, @ANYBLOB="010029bd7000ffdbdf251f000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000084}, 0x8042) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f00000000000000000900003c"], 0x6a) 395.419906ms ago: executing program 1 (id=4105): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003f000500010000000000000001010000000000000f0001006f76732d7302082100000000080002"], 0x30}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="297afe7c58093b14000d26cbf619f858ae000000910cb208532b6cf3bb8da327f9a04acab75a4c89ba12efaf6ea7f83c8c4392fa17905509e3e0f3777411c3", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800800010067726500140002800500170001000000080005000500000008000a00", @ANYRES32=r3, @ANYBLOB], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6000000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000003000128009000100766c616e00000000200002800c0002001e0000001f00000006000100fc0f00000600050088a8000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x60}}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x80000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000f00009500000000000000b1f8306e05d1e4aab09bf06b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca093f5024a110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bca4e9e5011201a2"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@fallback, r8, 0x11}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[], 0x10) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) sendmsg$DEVLINK_CMD_PORT_SPLIT(r6, &(0x7f0000000a80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)={0x188, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x6}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x4}}]}, 0x188}, 0x1, 0x0, 0x0, 0x20004880}, 0x10) connect$inet(r10, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r10, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r10, 0x0, 0x13, &(0x7f0000000000)=0x45, 0x4) r11 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38000d2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50) pipe(&(0x7f0000000140)) 236.644385ms ago: executing program 0 (id=4106): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x4f26c}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x3, 0x3}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x48080) 0s ago: executing program 4 (id=4107): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x12, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6e, '\x00', 0x0, 0x13}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x4004810) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x4004810) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)="80", 0x1}], 0x1, 0x0, 0x18}}], 0x1, 0x40000000) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) preadv(r2, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/14, 0xe}], 0x27, 0x0, 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="016f0800010027000000270000004600003f00000000008490783fffff20ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0007009078001809c40005060000000000000b000002d58838000391010000"], 0xfd6c) (async) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="016f0800010027000000270000004600003f00000000008490783fffff20ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0007009078001809c40005060000000000000b000002d58838000391010000"], 0xfd6c) kernel console output (not intermixed with test programs): ][T18707] veth0_macvtap: entered promiscuous mode [ 614.724252][T18707] veth1_macvtap: entered promiscuous mode [ 614.858184][T18707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 614.884791][T18707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 615.467173][ T1047] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.711475][ T83] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.711571][ T83] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.859521][T19308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3107'. [ 616.035037][T10790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.035063][T10790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.035919][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.163750][T19312] netlink: 'syz.2.3108': attribute type 2 has an invalid length. [ 617.170841][T19312] : entered promiscuous mode [ 617.171262][T19314] tipc: Enabling of bearer rejected, already enabled [ 617.237192][T10790] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.237216][T10790] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.585137][T19338] bridge0: port 1(veth0_virt_wifi) entered blocking state [ 617.585385][T19338] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 617.585569][T19338] veth0_virt_wifi: entered allmulticast mode [ 617.591664][T19338] veth0_virt_wifi: entered promiscuous mode [ 617.595466][T19338] bridge0: port 1(veth0_virt_wifi) entered blocking state [ 617.595585][T19338] bridge0: port 1(veth0_virt_wifi) entered forwarding state [ 617.868848][ T4934] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 617.883153][ T4934] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 617.899204][ T4934] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 617.916126][ T4934] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 617.934917][ T4934] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 618.594063][T19363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 618.697233][T19366] 8021q: adding VLAN 0 to HW filter on device bond1 [ 618.813417][T19362] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3119'. [ 619.138226][T19388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.186983][T19388] netlink: 5408 bytes leftover after parsing attributes in process `syz.0.3125'. [ 619.187039][T19388] net_ratelimit: 224 callbacks suppressed [ 619.187051][T19388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 619.204273][T19394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3127'. [ 619.268814][T19393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.626238][T19418] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3135'. [ 619.976656][ T4934] Bluetooth: hci1: command tx timeout [ 620.143992][T19347] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.146451][T19347] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.148305][T19347] bridge_slave_0: entered allmulticast mode [ 620.152358][T19347] bridge_slave_0: entered promiscuous mode [ 620.186335][T19347] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.188681][T19347] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.188876][T19347] bridge_slave_1: entered allmulticast mode [ 620.190996][T19347] bridge_slave_1: entered promiscuous mode [ 620.296456][T19347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.300510][T19347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 620.447938][T19347] team0: Port device team_slave_0 added [ 620.454568][T19347] team0: Port device team_slave_1 added [ 620.519642][T19347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 620.519663][T19347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.519699][T19347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.522311][T19347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.522326][T19347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.522353][T19347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.667627][T19347] hsr_slave_0: entered promiscuous mode [ 620.668764][T19347] hsr_slave_1: entered promiscuous mode [ 620.712367][T19449] ip_tables: iptables: counters copy to user failed while replacing table [ 620.804379][T19451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3140'. [ 620.957256][T19464] sctp: [Deprecated]: syz.4.3144 (pid 19464) Use of struct sctp_assoc_value in delayed_ack socket option. [ 620.957256][T19464] Use struct sctp_sack_info instead [ 621.130391][T19469] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3146'. [ 621.719155][T19474] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3147'. [ 622.056030][ T5617] Bluetooth: hci1: command tx timeout [ 623.549409][T19347] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.628047][T19347] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.649979][T19481] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3149'. [ 623.744602][T19347] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.777913][T19483] TC_ACT_REPEAT abuse ? [ 623.839588][T19347] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.871339][T19486] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 624.076460][T19496] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3153'. [ 624.076485][T19496] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3153'. [ 624.136316][ T4934] Bluetooth: hci1: command tx timeout [ 624.337703][T19347] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 624.348601][T19347] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 624.349783][T19347] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 624.355089][T19505] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3153'. [ 624.355109][T19505] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3153'. [ 624.366262][T19347] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 624.367188][T19347] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 624.388216][T19347] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 624.411069][T19347] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 624.443449][T19347] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 624.741286][T19347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.794399][T19347] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.816507][T18511] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.816633][T18511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.833913][T18511] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.834045][T18511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.042866][T19540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3158'. [ 625.263002][T19548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3159'. [ 625.523778][T19554] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3160'. [ 625.680447][T19561] netlink: 'syz.2.3162': attribute type 16 has an invalid length. [ 625.680473][T19561] netlink: 'syz.2.3162': attribute type 17 has an invalid length. [ 625.706790][T19561] 0{X: left allmulticast mode [ 625.722240][T19561] bridge0: port 3(syz_tun) entered blocking state [ 625.722376][T19561] bridge0: port 3(syz_tun) entered forwarding state [ 625.722745][T19561] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.722875][T19561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.723104][T19561] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.723242][T19561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.763401][T19561] bridge0: left promiscuous mode [ 625.763699][T19561] bridge0: left allmulticast mode [ 625.848722][T19574] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3166'. [ 625.878877][T19561] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 625.879363][T19561] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 625.889120][T19577] IPv6: addrconf: prefix option has invalid lifetime [ 625.920476][T10299] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 625.947153][ T6329] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 625.962653][T19561] gtp2: left promiscuous mode [ 625.962676][T19561] gtp2: left allmulticast mode [ 625.963718][T19580] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 625.966212][T19561] macsec0: left promiscuous mode [ 625.966394][T19561] macsec0: left allmulticast mode [ 625.966405][T19561] virt_wifi0: left allmulticast mode [ 625.975133][T19561] ip6gre1: left promiscuous mode [ 625.976821][T19561] ip6gre1: left allmulticast mode [ 625.986960][T19561] A link change request failed with some changes committed already. Interface geneve5 may have been left with an inconsistent configuration, please check. [ 626.007700][T10299] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 626.007894][T10299] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 626.034244][T19570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 626.035606][ T25] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 626.145562][T10299] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 626.171948][T19586] xt_hashlimit: size too large, truncated to 1048576 [ 626.216539][ T4934] Bluetooth: hci1: command tx timeout [ 626.231443][T10299] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 626.245747][T19589] xt_hashlimit: size too large, truncated to 1048576 [ 626.768212][T19597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3169'. [ 626.794437][T10299] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 627.266826][T19618] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3175'. [ 627.672870][T19347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 627.673207][T19638] netlink: 'syz.4.3178': attribute type 29 has an invalid length. [ 627.857289][T19644] sch_tbf: burst 7 is lower than device bridge0 mtu (32783) ! [ 627.893414][T19649] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 627.894830][T19347] veth0_vlan: entered promiscuous mode [ 627.896536][T19644] sch_tbf: peakrate 896 is lower than or equals to rate 3850 ! [ 627.897881][T19649] ip_tables: iptables: counters copy to user failed while replacing table [ 627.952121][T19347] veth1_vlan: entered promiscuous mode [ 628.065626][T19347] veth0_macvtap: entered promiscuous mode [ 628.087201][T19347] veth1_macvtap: entered promiscuous mode [ 628.116756][T19347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 628.151519][T19347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 628.185850][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.188921][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.189118][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.189185][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.313253][T19659] ip_tables: iptables: counters copy to user failed while replacing table [ 628.317397][T18510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.317415][T18510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.502296][T10490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.502321][T10490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.636067][T19689] bridge0: port 3(batadv1) entered blocking state [ 629.638453][T19689] bridge0: port 3(batadv1) entered disabled state [ 629.638660][T19689] batadv1: entered allmulticast mode [ 629.642589][T19689] batadv1: entered promiscuous mode [ 629.841024][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 629.848826][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 629.854276][ T5617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 629.870210][ T5617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 629.876437][ T5617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 630.091142][T19707] __nla_validate_parse: 7 callbacks suppressed [ 630.091163][T19707] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3194'. [ 630.091179][T19707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3194'. [ 630.122505][T10490] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 630.122527][T10490] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 630.426658][ T1047] IPVS: starting estimator thread 0... [ 630.453411][T19716] tc_dump_action: action bad kind [ 630.537077][T19719] IPVS: using max 23 ests per chain, 55200 per kthread [ 630.545384][T19722] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 630.601713][T19721] IPVS: stopping master sync thread 19722 ... [ 630.603601][T19727] netlink: zone id is out of range [ 630.870776][T19735] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3200'. [ 631.638471][T19765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3206'. [ 631.668591][T19764] IPVS: lc: FWM 3 0x00000003 - no destination available [ 631.692963][T19764] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3205'. [ 631.731992][T19758] netlink: 'syz.3.3203': attribute type 5 has an invalid length. [ 631.754948][T19764] vlan2: entered promiscuous mode [ 631.754975][T19764] syz_tun: entered promiscuous mode [ 631.975464][ T4934] Bluetooth: hci2: command tx timeout [ 631.987632][ T83] IPVS: starting estimator thread 0... [ 632.084335][T19779] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3207'. [ 632.107501][T19780] IPVS: using max 23 ests per chain, 55200 per kthread [ 632.113232][T19774] debugfs: '.P'G!DES' already exists in 'ieee80211' [ 632.745833][T19698] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.746068][T19698] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.746218][T19698] bridge_slave_0: entered allmulticast mode [ 632.748272][T19698] bridge_slave_0: entered promiscuous mode [ 632.797747][T19698] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.797882][T19698] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.798069][T19698] bridge_slave_1: entered allmulticast mode [ 632.800325][T19698] bridge_slave_1: entered promiscuous mode [ 632.932331][T19698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.947674][T19698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.996461][T19698] team0: Port device team_slave_0 added [ 632.999893][T19698] team0: Port device team_slave_1 added [ 633.050243][T19698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 633.050262][T19698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.050289][T19698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 633.087246][T19698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 633.087264][T19698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.087288][T19698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.301697][T19698] hsr_slave_0: entered promiscuous mode [ 633.303418][T19698] hsr_slave_1: entered promiscuous mode [ 633.305079][T19698] debugfs: 'hsr0' already exists in 'hsr' [ 633.305101][T19698] Cannot create hsr debugfs directory [ 633.310706][T19817] syzkaller0: entered promiscuous mode [ 633.310726][T19817] syzkaller0: entered allmulticast mode [ 633.400877][T19817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3213'. [ 633.400902][T19817] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 633.947826][T19848] netlink: 15 bytes leftover after parsing attributes in process `syz.2.3218'. [ 633.947852][T19848] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3218'. [ 634.062061][ T4934] Bluetooth: hci2: command tx timeout [ 634.087253][T19698] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.087291][T19698] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 634.087316][T19698] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.304889][T19698] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.304930][T19698] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 634.306891][T19698] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.438298][T19698] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.438337][T19698] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 634.438408][T19698] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.492162][T19871] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3220'. [ 636.136600][ T4934] Bluetooth: hci2: command tx timeout [ 636.863529][T19841] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 636.903888][T19867] debugfs: '.P'G!DES' already exists in 'ieee80211' [ 636.942844][T19698] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 637.008337][T19698] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 637.010279][T19698] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 637.046253][T19698] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 637.048271][T19698] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 637.078720][T19698] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 637.079713][T19698] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 637.103747][T19698] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 637.151838][T19933] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3223'. [ 637.188817][T19942] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3224'. [ 637.358802][T19698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 637.405776][T19949] netlink: 312 bytes leftover after parsing attributes in process `syz.2.3226'. [ 637.410573][T19698] 8021q: adding VLAN 0 to HW filter on device team0 [ 637.445577][T19949] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3226'. [ 637.454634][T10790] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.454750][T10790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 637.551173][T10790] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.551311][T10790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 637.575070][T19954] netlink: 'syz.3.3227': attribute type 3 has an invalid length. [ 637.575096][T19954] netlink: 'syz.3.3227': attribute type 1 has an invalid length. [ 637.575110][T19954] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3227'. [ 638.035411][T19698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 638.081842][T19698] veth0_vlan: entered promiscuous mode [ 638.092791][T19698] veth1_vlan: entered promiscuous mode [ 638.125068][T19698] veth0_macvtap: entered promiscuous mode [ 638.130726][T19698] veth1_macvtap: entered promiscuous mode [ 638.152376][T19698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 638.159949][T19698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 638.195389][ T1047] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.217693][ T4934] Bluetooth: hci2: command tx timeout [ 638.275883][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.276016][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.306558][T10790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.306584][T10790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.352668][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.352693][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.357104][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.458472][T19968] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 638.460722][T19968] bond1: (slave macvlan2): making interface the new active one [ 638.461661][T19968] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 638.461751][T18486] bond_slave_0: entered promiscuous mode [ 638.461775][T18486] bond_slave_1: entered promiscuous mode [ 650.215539][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 670.695502][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 679.721147][T19974] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3229'. [ 679.874962][T19978] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES' [ 679.874982][T19978] CPU: 0 UID: 0 PID: 19978 Comm: syz.3.3231 Not tainted syzkaller #0 PREEMPT(full) [ 679.875007][T19978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 679.875020][T19978] Call Trace: [ 679.875029][T19978] [ 679.875038][T19978] dump_stack_lvl+0xe8/0x150 [ 679.875090][T19978] sysfs_warn_dup+0x8e/0xa0 [ 679.875129][T19978] sysfs_do_create_link_sd+0xc0/0x110 [ 679.875162][T19978] device_add_class_symlinks+0x1cf/0x240 [ 679.875193][T19978] device_add+0x467/0xb80 [ 679.875217][T19978] wiphy_register+0x1fc8/0x2ff0 [ 679.875260][T19978] ? __pfx_wiphy_register+0x10/0x10 [ 679.875282][T19978] ? __pfx_netdev_run_todo+0x10/0x10 [ 679.875314][T19978] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 679.875351][T19978] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 679.875381][T19978] ieee80211_register_hw+0x3d7c/0x4b40 [ 679.875423][T19978] ? ieee80211_register_hw+0x1981/0x4b40 [ 679.875476][T19978] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 679.875505][T19978] ? __asan_memset+0x22/0x50 [ 679.875527][T19978] ? __hrtimer_setup+0x1b7/0x260 [ 679.875556][T19978] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 679.875585][T19978] mac80211_hwsim_new_radio+0x3264/0x5720 [ 679.875647][T19978] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 679.875668][T19978] ? kstrndup+0xbd/0x160 [ 679.875695][T19978] ? kstrndup+0xbd/0x160 [ 679.875720][T19978] hwsim_new_radio_nl+0xd8b/0xf90 [ 679.875763][T19978] genl_family_rcv_msg_doit+0x233/0x340 [ 679.875797][T19978] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 679.875837][T19978] ? bpf_lsm_capable+0x9/0x20 [ 679.875855][T19978] ? security_capable+0x7e/0x2c0 [ 679.875892][T19978] genl_rcv_msg+0x614/0x7a0 [ 679.875926][T19978] ? __pfx_genl_rcv_msg+0x10/0x10 [ 679.875948][T19978] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 679.875991][T19978] netlink_rcv_skb+0x226/0x4a0 [ 679.876023][T19978] ? __pfx_genl_rcv_msg+0x10/0x10 [ 679.876049][T19978] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 679.876108][T19978] ? down_read+0x2be/0x330 [ 679.876147][T19978] genl_rcv+0x28/0x40 [ 679.876171][T19978] netlink_unicast+0x7bd/0x940 [ 679.876213][T19978] netlink_sendmsg+0x813/0xb40 [ 679.876245][T19978] ? __pfx_netlink_sendmsg+0x10/0x10 [ 679.876276][T19978] ? apparmor_socket_sendmsg+0x98/0x360 [ 679.876304][T19978] ? __pfx_netlink_sendmsg+0x10/0x10 [ 679.876324][T19978] sock_sendmsg_nosec+0x14e/0x190 [ 679.876348][T19978] ____sys_sendmsg+0x54e/0x850 [ 679.876383][T19978] ? __pfx_____sys_sendmsg+0x10/0x10 [ 679.876424][T19978] ? import_iovec+0x73/0xa0 [ 679.876458][T19978] ___sys_sendmsg+0x2a5/0x360 [ 679.876485][T19978] ? __lock_acquire+0x747/0x2de0 [ 679.876513][T19978] ? __pfx____sys_sendmsg+0x10/0x10 [ 679.876544][T19978] ? futex_wait+0x2a2/0x390 [ 679.876609][T19978] ? __fget_files+0x2a/0x420 [ 679.876636][T19978] ? __fget_files+0x3a2/0x420 [ 679.876677][T19978] __x64_sys_sendmsg+0x1b1/0x290 [ 679.876707][T19978] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 679.876756][T19978] do_syscall_64+0x166/0x520 [ 679.876782][T19978] ? trace_irq_disable+0x3b/0x140 [ 679.876802][T19978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.876826][T19978] ? clear_bhb_loop+0x70/0xc0 [ 679.876852][T19978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.876873][T19978] RIP: 0033:0x7f556939e159 [ 679.876892][T19978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 679.876909][T19978] RSP: 002b:00007f556a29f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 679.876932][T19978] RAX: ffffffffffffffda RBX: 00007f5569625fa0 RCX: 00007f556939e159 [ 679.876947][T19978] RDX: 0000000000000850 RSI: 0000200000000100 RDI: 0000000000000003 [ 679.876961][T19978] RBP: 00007f556943506b R08: 0000000000000000 R09: 0000000000000000 [ 679.876974][T19978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 679.876987][T19978] R13: 00007f5569626038 R14: 00007f5569625fa0 R15: 00007ffc74240388 [ 679.877025][T19978] [ 679.996278][T19983] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3231'. [ 680.233921][T19986] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3233'. [ 680.261637][ T5617] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 680.283976][ T5617] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 680.321610][ T5617] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 680.341781][ T5617] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 680.342656][ T5617] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 680.719591][T20003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 681.336042][ T5622] tipc: Resetting bearer [ 681.380724][ T5622] bridge0: port 3(syz_tun) entered disabled state [ 681.453342][ T5622] syz_tun (unregistering): left allmulticast mode [ 681.453376][ T5622] syz_tun (unregistering): left promiscuous mode [ 681.453466][ T5622] bridge0: port 3(syz_tun) entered disabled state [ 681.478673][ T5622] tipc: Disabling bearer [ 681.591698][T20018] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3237'. [ 681.638955][T20018] veth0_to_bridge: entered promiscuous mode [ 681.645060][T20018] macvtap1: entered allmulticast mode [ 681.645086][T20018] veth0_to_bridge: entered allmulticast mode [ 681.680314][T20018] veth0_to_bridge: left allmulticast mode [ 681.680349][T20018] veth0_to_bridge: left promiscuous mode [ 682.455663][ T4934] Bluetooth: hci4: command tx timeout [ 682.514050][T20041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3241'. [ 682.615652][T20046] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 682.761563][T20057] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3246'. [ 682.815735][T20068] IPVS: starting estimator thread 0... [ 682.906263][T20072] IPVS: using max 23 ests per chain, 55200 per kthread [ 683.249906][T20043] debugfs: '.P'G!DES' already exists in 'ieee80211' [ 683.909909][T20103] netlink: 'syz.0.3250': attribute type 1 has an invalid length. [ 683.909936][T20103] netlink: 'syz.0.3250': attribute type 2 has an invalid length. [ 684.360896][T20114] bond1: option xmit_hash_policy: invalid value (10) [ 684.373422][T20114] bond1 (unregistering): Released all slaves [ 684.457058][T19987] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.457180][T19987] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.457342][T19987] bridge_slave_0: entered allmulticast mode [ 684.459686][T19987] bridge_slave_0: entered promiscuous mode [ 684.502282][T19987] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.502413][T19987] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.502609][T19987] bridge_slave_1: entered allmulticast mode [ 684.512360][T19987] bridge_slave_1: entered promiscuous mode [ 684.514365][T20120] team0: No ports can be present during mode change [ 684.539054][ T4934] Bluetooth: hci4: command tx timeout [ 684.636717][T19987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.655088][T19987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.793055][T20128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3255'. [ 684.830935][T19987] team0: Port device team_slave_0 added [ 684.836121][T19987] team0: Port device team_slave_1 added [ 684.894071][T19987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.894090][T19987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.894114][T19987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.895827][T20128] syzkaller0: entered promiscuous mode [ 684.895846][T20128] syzkaller0: entered allmulticast mode [ 684.937107][T19987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.937125][T19987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.937148][T19987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.447448][T19987] hsr_slave_0: entered promiscuous mode [ 685.453524][T19987] hsr_slave_1: entered promiscuous mode [ 685.468256][T19987] debugfs: 'hsr0' already exists in 'hsr' [ 685.468281][T19987] Cannot create hsr debugfs directory [ 685.504830][T20153] pim6reg: entered allmulticast mode [ 686.395548][T19987] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 686.395588][T19987] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 686.395614][T19987] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.503315][T20153] pim6reg: left allmulticast mode [ 686.619685][ T4934] Bluetooth: hci4: command tx timeout [ 686.796800][T19987] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 686.796857][T19987] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 686.796883][T19987] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.018009][T19987] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 687.018049][T19987] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 687.018073][T19987] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.109333][T20187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3266'. [ 687.167624][T20196] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3269'. [ 687.192140][T19987] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 687.192176][T19987] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 687.192201][T19987] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.230576][T20194] netlink: zone id is out of range [ 687.230666][T20194] netlink: zone id is out of range [ 687.230671][T20194] netlink: zone id is out of range [ 687.230722][T20194] netlink: zone id is out of range [ 687.230879][T20194] netlink: zone id is out of range [ 687.231076][T20194] netlink: zone id is out of range [ 687.231256][T20194] netlink: zone id is out of range [ 687.231279][T20194] netlink: zone id is out of range [ 687.231283][T20194] netlink: zone id is out of range [ 687.330694][T20191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3268'. [ 687.502658][T20206] netlink: 'syz.0.3271': attribute type 10 has an invalid length. [ 687.502683][T20206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3271'. [ 687.641184][T20210] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3272'. [ 687.676565][T20210] netlink: 592 bytes leftover after parsing attributes in process `syz.1.3272'. [ 687.952946][T20226] netlink: 'syz.4.3277': attribute type 2 has an invalid length. [ 688.020182][T20226] : entered promiscuous mode [ 688.300683][T20218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3275'. [ 688.336775][T19987] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 688.352327][T19987] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 688.353388][T19987] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 688.380603][T19987] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 688.449629][T20218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3275'. [ 688.453590][T19987] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 688.488222][T19987] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 688.489653][T19987] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 688.493755][T19987] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 688.634148][T20256] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3280'. [ 688.669031][ T4934] Bluetooth: hci5: unexpected event 0x04 length: 0 < 10 [ 688.695529][ T4934] Bluetooth: hci4: command tx timeout [ 688.722275][T19987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.752652][T19987] 8021q: adding VLAN 0 to HW filter on device team0 [ 688.776171][T18513] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.776290][T18513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.801412][T18513] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.801523][T18513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 688.942017][T20260] tipc: Enabling of bearer rejected, failed to enable media [ 689.853835][T20296] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3287'. [ 689.896674][T20296] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3287'. [ 690.151690][T20302] xt_TPROXY: Can be used only with -p tcp or -p udp [ 690.576158][T19987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 690.598358][T20312] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3291'. [ 690.671933][T20322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3293'. [ 690.681321][T20322] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 690.697960][T19987] veth0_vlan: entered promiscuous mode [ 690.724181][T19987] veth1_vlan: entered promiscuous mode [ 690.772143][T19987] veth0_macvtap: entered promiscuous mode [ 690.780125][T19987] veth1_macvtap: entered promiscuous mode [ 690.809105][T19987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 690.827091][T19987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 690.851697][T18509] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.852140][T18509] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.867222][T18509] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.877805][T18513] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.211266][T20058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.211290][T20058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.328063][T13609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.328088][T13609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.393382][T20345] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3299'. [ 692.092984][T20383] netlink: 'syz.1.3304': attribute type 4 has an invalid length. [ 692.093015][T20383] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3304'. [ 692.155733][T20386] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3308'. [ 692.524270][T20383] net_ratelimit: 51 callbacks suppressed [ 692.524294][T20383] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 692.613038][T20397] netlink: 'syz.4.3309': attribute type 21 has an invalid length. [ 692.613065][T20397] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3309'. [ 692.856990][T20397] netlink: 'syz.4.3309': attribute type 4 has an invalid length. [ 692.857015][T20397] netlink: 'syz.4.3309': attribute type 3 has an invalid length. [ 692.857027][T20397] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3309'. [ 693.092635][T20418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3314'. [ 693.106089][ T4934] block nbd2: Receive control failed (result -1) [ 693.182530][T20420] Bluetooth: hci0: unsupported parameter 5134 [ 693.182557][T20420] Bluetooth: hci0: unsupported parameter 8192 [ 693.182570][T20420] Bluetooth: hci0: unsupported parameter 5134 [ 693.182583][T20420] Bluetooth: hci0: unsupported parameter 8192 [ 693.350874][T20424] team0: Port device team_slave_0 removed [ 693.431781][T20426] tipc: Started in network mode [ 693.431827][T20426] tipc: Node identity 0e613232f54c, cluster identity 4711 [ 693.432025][T20426] tipc: Enabled bearer , priority 0 [ 693.920576][T20451] syzkaller0: entered promiscuous mode [ 693.920603][T20451] syzkaller0: entered allmulticast mode [ 694.390412][T20459] ip6gre1: entered promiscuous mode [ 694.390438][T20459] ip6gre1: entered allmulticast mode [ 694.545733][T10534] tipc: Node number set to 4214043186 [ 694.911286][T20490] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 694.960425][T20490] __nla_validate_parse: 5 callbacks suppressed [ 694.960452][T20490] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3333'. [ 694.960467][T20490] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3333'. [ 695.032228][T20502] netlink: 'syz.3.3333': attribute type 4 has an invalid length. [ 695.032256][T20502] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3333'. [ 695.135499][T20502] .`: renamed from bond0 (while UP) [ 695.263881][T20510] smc: net device lo applied user defined pnetid SYZ2 [ 695.288913][T20510] smc: net device lo erased user defined pnetid SYZ2 [ 695.410953][T20529] xt_MASQUERADE: bad rangesize 20224 [ 695.662699][T20536] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3341'. [ 695.757251][T20536] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3341'. [ 695.845929][T20544] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 695.847451][T20543] netlink: 'syz.3.3344': attribute type 18 has an invalid length. [ 695.847673][T20543] netlink: 'syz.3.3344': attribute type 18 has an invalid length. [ 695.847884][T20543] netlink: 'syz.3.3344': attribute type 18 has an invalid length. [ 695.848075][T20543] netlink: 'syz.3.3344': attribute type 18 has an invalid length. [ 695.848279][T20543] netlink: 'syz.3.3344': attribute type 18 has an invalid length. [ 695.882474][T20541] debugfs: '.P'G!DES' already exists in 'ieee80211' [ 695.937524][ T1121] IPVS: starting estimator thread 0... [ 695.974543][T20547] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3345'. [ 696.029181][T20549] IPVS: using max 25 ests per chain, 60000 per kthread [ 696.186858][T20561] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 696.712381][T20581] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3351'. [ 696.849229][T20589] Bluetooth: MGMT ver 1.23 [ 696.849268][T20589] Bluetooth: hci1: too big key_count value 29096 [ 697.166013][T20600] syzkaller0: entered promiscuous mode [ 697.166038][T20600] syzkaller0: entered allmulticast mode [ 697.619988][T20627] validate_nla: 29 callbacks suppressed [ 697.620011][T20627] netlink: 'syz.4.3365': attribute type 1 has an invalid length. [ 697.620026][T20627] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3365'. [ 697.671808][T20627] pim6reg1: entered promiscuous mode [ 697.671833][T20627] pim6reg1: entered allmulticast mode [ 698.449140][T20656] can: request_module (can-proto-3) failed. [ 698.489164][T20655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3374'. [ 699.472469][T20700] syzkaller0: entered promiscuous mode [ 699.472495][T20700] syzkaller0: entered allmulticast mode [ 699.615721][T20708] netlink: 212 bytes leftover after parsing attributes in process `syz.3.3387'. [ 699.690239][T20710] netlink: 'syz.4.3386': attribute type 1 has an invalid length. [ 699.939402][T20710] bond1: entered promiscuous mode [ 699.939905][T20710] 8021q: adding VLAN 0 to HW filter on device bond1 [ 700.361995][T20726] 8021q: adding VLAN 0 to HW filter on device bond1 [ 700.362605][T20726] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 700.362628][T20726] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 700.591760][T20747] __nla_validate_parse: 2 callbacks suppressed [ 700.591782][T20747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3392'. [ 700.655582][T20726] bond1: (slave wireguard0): making interface the new active one [ 700.655611][T20726] wireguard0: entered promiscuous mode [ 700.687898][T20726] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 700.690148][T20713] veth1_macvtap: left promiscuous mode [ 700.690176][T20713] macsec0: entered promiscuous mode [ 700.772808][T20713] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 700.931371][T20748] tipc: Started in network mode [ 700.931406][T20748] tipc: Node identity eab0e612b06c, cluster identity 4711 [ 700.931598][T20748] tipc: Enabled bearer , priority 0 [ 700.969232][T20743] syzkaller0: entered promiscuous mode [ 700.969261][T20743] syzkaller0: entered allmulticast mode [ 701.048753][T20728] tipc: Resetting bearer [ 701.240113][T20728] tipc: Disabling bearer [ 701.503592][T20762] geneve2: entered promiscuous mode [ 701.777480][T20776] bridge_slave_0: left allmulticast mode [ 701.777508][T20776] bridge_slave_0: left promiscuous mode [ 701.782774][T20776] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.843721][T20786] ip_tables: iptables: counters copy to user failed while replacing table [ 701.851542][T20776] bridge_slave_1: left allmulticast mode [ 701.851566][T20776] bridge_slave_1: left promiscuous mode [ 701.851782][T20776] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.880489][T20785] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3400'. [ 701.901599][T20789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3399'. [ 701.901627][T20789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3399'. [ 701.938629][T20788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3399'. [ 701.938660][T20788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3399'. [ 701.943276][T20776] bond0: (slave bond_slave_0): Releasing backup interface [ 701.959801][T20776] bond_slave_0: left promiscuous mode [ 701.988869][T20776] bond0: (slave bond_slave_1): Releasing backup interface [ 701.997638][T20776] bond_slave_1: left promiscuous mode [ 702.020482][T20795] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3399'. [ 702.090343][T20797] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20001 [ 702.091448][T20776] team0: Port device team_slave_0 removed [ 702.172929][T20776] team0: Port device team_slave_1 removed [ 702.173960][T20776] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 702.173983][T20776] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 702.188249][T20776] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 702.188274][T20776] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 702.226800][T20776] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 702.407127][T20806] x_tables: duplicate underflow at hook 1 [ 702.503333][T20786] C: renamed from lo (while UP) [ 702.517903][T20786] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 702.610178][T20812] netlink: 'syz.4.3404': attribute type 23 has an invalid length. [ 702.962837][T20828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3408'. [ 702.962920][T20828] netlink: 'syz.3.3408': attribute type 1 has an invalid length. [ 702.962934][T20828] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3408'. [ 703.066401][T20834] netlink: 480 bytes leftover after parsing attributes in process `syz.2.3411'. [ 703.102750][T18513] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 703.103164][T18513] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 703.103203][T18513] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 703.128787][T13609] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 703.773437][T20869] x_tables: duplicate underflow at hook 1 [ 704.468431][T20882] geneve2: entered promiscuous mode [ 704.507161][T20875] netlink: 'syz.3.3422': attribute type 3 has an invalid length. [ 704.549383][T20878] netlink: 'syz.3.3422': attribute type 3 has an invalid length. [ 704.719488][T20884] syzkaller0: entered promiscuous mode [ 704.719518][T20884] syzkaller0: entered allmulticast mode [ 705.063285][T20905] block nbd3: not configured, cannot reconfigure [ 706.944594][T20929] netlink: 'syz.0.3435': attribute type 2 has an invalid length. [ 706.944614][T20929] __nla_validate_parse: 4 callbacks suppressed [ 706.944621][T20929] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3435'. [ 707.183000][T20931] netlink: 'syz.0.3435': attribute type 10 has an invalid length. [ 707.368438][T20937] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 708.972583][T20931] team0: Port device dummy0 added [ 709.197064][T20947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 709.330135][T20951] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3438'. [ 709.531765][T20950] can: request_module (can-proto-5) failed. [ 709.733139][T20974] bond2: entered allmulticast mode [ 709.738760][T20977] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3446'. [ 709.803584][T20974] openvswitch: netlink: IPv4 tun info is not correct [ 709.842531][T20985] netlink: 'syz.1.3448': attribute type 1 has an invalid length. [ 710.028782][T20985] bond2: entered promiscuous mode [ 710.030567][T20985] 8021q: adding VLAN 0 to HW filter on device bond2 [ 710.049382][T20977] bridge1: entered promiscuous mode [ 710.049409][T20977] bridge1: entered allmulticast mode [ 710.059891][T20977] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 710.088145][T20987] ipvlan2: entered allmulticast mode [ 710.088168][T20987] bond2: entered allmulticast mode [ 710.358554][T21009] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 711.086205][T21051] netlink: 'syz.4.3461': attribute type 3 has an invalid length. [ 711.130380][T21051] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3461'. [ 711.652877][T21081] syzkaller0: entered promiscuous mode [ 711.652903][T21081] syzkaller0: entered allmulticast mode [ 711.676276][T18509] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 711.676322][T18509] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 711.676352][T18509] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 711.676382][T18509] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 711.962236][T21096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3477'. [ 712.028262][T21095] IPVS: Scheduler module ip_vs_ not found [ 712.029846][T21102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3478'. [ 712.152557][T21108] IPVS: length: 190 != 8 [ 712.645916][T21123] netlink: 'syz.0.3484': attribute type 6 has an invalid length. [ 712.688299][T21123] pim6reg: entered allmulticast mode [ 712.708291][T21121] pim6reg: left allmulticast mode [ 713.708619][T21157] netlink: 'syz.0.3495': attribute type 1 has an invalid length. [ 713.708955][T21156] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3493'. [ 713.711880][T21156] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3493'. [ 713.753435][T21157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3495'. [ 713.754508][T21150] veth0: entered promiscuous mode [ 714.658171][T21181] netlink: 'syz.0.3500': attribute type 1 has an invalid length. [ 714.669887][T21148] veth0: left promiscuous mode [ 714.789844][T21185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3503'. [ 714.800491][T21181] 8021q: adding VLAN 0 to HW filter on device bond3 [ 714.814660][T21180] bond3: entered allmulticast mode [ 714.817545][T21180] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3500'. [ 714.856083][T21192] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3502'. [ 714.881558][T21183] bond3: (slave ip6gretap1): making interface the new active one [ 714.881585][T21183] ip6gretap1: entered allmulticast mode [ 714.882776][T21183] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 714.882926][T21185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 714.882947][T21185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 714.929657][T21185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 714.929683][T21185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 715.121964][T21192] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3502'. [ 715.142496][T21192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3502'. [ 715.199879][T21209] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 715.509867][T21210] gre0: entered promiscuous mode [ 715.509894][T21210] gre0: entered allmulticast mode [ 716.156453][T21212] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 716.677272][T21286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 717.424433][T21359] __nla_validate_parse: 3 callbacks suppressed [ 717.424456][T21359] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3527'. [ 718.964683][T21422] smc: net device lo applied user defined pnetid SYZ2 [ 719.125798][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.125823][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.213358][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.213384][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.298367][T21430] openvswitch: netlink: Flow actions attr not present in new flow. [ 719.621502][T21441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3537'. [ 720.092006][T21452] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3539'. [ 720.188560][T21452] veth3: entered allmulticast mode [ 720.442638][T21463] 8021q: VLANs not supported on vxcan1 [ 720.510621][T21461] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3540'. [ 720.573363][T21467] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 720.573412][T21467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 720.618086][T21469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3544'. [ 720.996677][T21479] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 721.219250][T21486] netlink: 'syz.3.3550': attribute type 1 has an invalid length. [ 721.219277][T21486] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3550'. [ 721.219294][T21486] netlink: 'syz.3.3550': attribute type 2 has an invalid length. [ 721.219307][T21486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3550'. [ 721.447491][T21502] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3555'. [ 721.810258][T21515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3558'. [ 721.843657][T21515] ip6gre1: entered promiscuous mode [ 721.843702][T21515] ip6gre1: entered allmulticast mode [ 722.019800][T21518] netlink: zone id is out of range [ 722.985579][T21543] netlink: 'syz.1.3568': attribute type 10 has an invalid length. [ 723.047692][T21548] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3570'. [ 723.363072][T21560] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 723.663341][T21574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3574'. [ 723.663976][T21574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3574'. [ 723.901962][T21582] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 723.925665][T21581] IPVS: Unknown mcast interface: netpci0 [ 724.146423][T21593] macsec0: entered promiscuous mode [ 724.150082][T21593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3579'. [ 724.161548][T21593] veth1_macvtap: left promiscuous mode [ 724.195523][T21593] macsec0 (unregistering): left promiscuous mode [ 724.299945][T21604] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3583'. [ 724.484213][T21602] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3582'. [ 724.925589][T21625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3590'. [ 724.926576][T21625] syzkaller1: entered promiscuous mode [ 724.926595][T21625] syzkaller1: entered allmulticast mode [ 725.360670][T21661] netlink: 'syz.3.3600': attribute type 1 has an invalid length. [ 725.406479][T21661] 8021q: adding VLAN 0 to HW filter on device bond2 [ 725.553377][T21661] bridge2: entered promiscuous mode [ 725.707211][T21661] bridge2: entered promiscuous mode [ 725.723634][T21677] netlink: 'syz.0.3604': attribute type 1 has an invalid length. [ 725.723661][T21677] netlink: 'syz.0.3604': attribute type 2 has an invalid length. [ 725.893628][T21661] bridge2: entered promiscuous mode [ 726.041808][T21661] bridge2: entered promiscuous mode [ 726.243477][T21661] bridge2: entered promiscuous mode [ 726.439942][T21704] team0: No ports can be present during mode change [ 726.586255][T21710] sctp: [Deprecated]: syz.1.3611 (pid 21710) Use of struct sctp_assoc_value in delayed_ack socket option. [ 726.586255][T21710] Use struct sctp_sack_info instead [ 726.738823][T21719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3612'. [ 727.174131][T21715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3612'. [ 727.647938][T21754] tipc: Enabled bearer , priority 0 [ 727.654548][T21754] syzkaller0: entered promiscuous mode [ 727.654573][T21754] syzkaller0: entered allmulticast mode [ 727.681239][T21754] tipc: Resetting bearer [ 727.713599][T21754] tipc: Resetting bearer [ 727.736771][T21754] tipc: Disabling bearer [ 727.982715][T21777] netlink: 'syz.4.3622': attribute type 1 has an invalid length. [ 728.009256][T21779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3623'. [ 728.098601][T21778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3622'. [ 728.118143][T21783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3622'. [ 728.175232][T21787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3622'. [ 728.405599][T21799] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 729.284354][T21816] syzkaller0: Caught tx_queue_len zero misconfig [ 729.539056][T21833] syzkaller0: entered promiscuous mode [ 729.539083][T21833] syzkaller0: entered allmulticast mode [ 729.842276][T21844] tipc: New replicast peer: 172.20.20.187 [ 729.855346][T21844] tipc: Enabled bearer , priority 10 [ 730.113331][T21854] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3640'. [ 730.224189][T21863] 8021q: VLANs not supported on ipvlan1 [ 730.378065][T21874] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3645'. [ 730.440298][T21882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3649'. [ 730.609863][T21888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3652'. [ 730.611015][T21889] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3653'. [ 730.739889][T21900] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3655'. [ 730.821179][T21900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3655'. [ 730.855003][T21904] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 730.894432][T21911] IPVS: set_ctl: invalid protocol: 58 172.30.1.5:20003 [ 730.955266][T10534] tipc: Node number set to 1524426258 [ 731.437033][T21929] xt_hashlimit: max too large, truncated to 1048576 [ 731.613710][ T6332] hid-generic 0005:0008:0009.0001: item fetching failed at offset 2/3 [ 731.623712][ T6332] hid-generic 0005:0008:0009.0001: probe with driver hid-generic failed with error -22 [ 731.896063][ T4934] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 732.044941][T21953] vlan2: left promiscuous mode [ 732.044968][T21953] syz_tun: left promiscuous mode [ 732.068176][T21953] ip6gre1: left promiscuous mode [ 732.084418][T21953] 8021q: adding VLAN 0 to HW filter on device bond2 [ 732.093054][T21953] 8021q: adding VLAN 0 to HW filter on device bond3 [ 732.098960][T21953] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 732.720300][T21969] x_tables: duplicate underflow at hook 3 [ 733.099665][T21979] syzkaller0: left promiscuous mode [ 733.099690][T21979] syzkaller0: left allmulticast mode [ 733.138659][T21984] x_tables: duplicate entry at hook 1 [ 733.524169][T22005] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES' [ 733.534778][T22005] CPU: 0 UID: 0 PID: 22005 Comm: syz.1.3682 Not tainted syzkaller #0 PREEMPT(full) [ 733.534809][T22005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 733.534822][T22005] Call Trace: [ 733.534832][T22005] [ 733.534842][T22005] dump_stack_lvl+0xe8/0x150 [ 733.534879][T22005] sysfs_warn_dup+0x8e/0xa0 [ 733.534911][T22005] sysfs_do_create_link_sd+0xc0/0x110 [ 733.534945][T22005] device_add_class_symlinks+0x1cf/0x240 [ 733.534966][T22005] device_add+0x467/0xb80 [ 733.534981][T22005] wiphy_register+0x1fc8/0x2ff0 [ 733.535006][T22005] ? __pfx_wiphy_register+0x10/0x10 [ 733.535019][T22005] ? __pfx_netdev_run_todo+0x10/0x10 [ 733.535038][T22005] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 733.535061][T22005] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 733.535079][T22005] ieee80211_register_hw+0x3d7c/0x4b40 [ 733.535123][T22005] ? ieee80211_register_hw+0x1981/0x4b40 [ 733.535176][T22005] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 733.535216][T22005] ? __asan_memset+0x22/0x50 [ 733.535234][T22005] ? __hrtimer_setup+0x1b7/0x260 [ 733.535260][T22005] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 733.535290][T22005] mac80211_hwsim_new_radio+0x3264/0x5720 [ 733.535360][T22005] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 733.535383][T22005] ? kstrndup+0xbd/0x160 [ 733.535411][T22005] ? kstrndup+0xbd/0x160 [ 733.535436][T22005] hwsim_new_radio_nl+0xd8b/0xf90 [ 733.535486][T22005] genl_family_rcv_msg_doit+0x233/0x340 [ 733.535522][T22005] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 733.535560][T22005] ? bpf_lsm_capable+0x9/0x20 [ 733.535577][T22005] ? security_capable+0x7e/0x2c0 [ 733.535607][T22005] genl_rcv_msg+0x614/0x7a0 [ 733.535647][T22005] ? __pfx_genl_rcv_msg+0x10/0x10 [ 733.535671][T22005] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 733.535709][T22005] netlink_rcv_skb+0x226/0x4a0 [ 733.535738][T22005] ? __pfx_genl_rcv_msg+0x10/0x10 [ 733.535763][T22005] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 733.535809][T22005] ? down_read+0x2be/0x330 [ 733.535840][T22005] genl_rcv+0x28/0x40 [ 733.535863][T22005] netlink_unicast+0x7bd/0x940 [ 733.535905][T22005] netlink_sendmsg+0x813/0xb40 [ 733.535935][T22005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 733.535965][T22005] ? apparmor_socket_sendmsg+0x98/0x360 [ 733.535992][T22005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 733.536010][T22005] sock_sendmsg_nosec+0x14e/0x190 [ 733.536034][T22005] ____sys_sendmsg+0x54e/0x850 [ 733.536067][T22005] ? __pfx_____sys_sendmsg+0x10/0x10 [ 733.536105][T22005] ? import_iovec+0x73/0xa0 [ 733.536134][T22005] ___sys_sendmsg+0x2a5/0x360 [ 733.536159][T22005] ? __lock_acquire+0x747/0x2de0 [ 733.536184][T22005] ? __pfx____sys_sendmsg+0x10/0x10 [ 733.536217][T22005] ? futex_wait+0x2a2/0x390 [ 733.536278][T22005] ? __fget_files+0x2a/0x420 [ 733.536305][T22005] ? __fget_files+0x3a2/0x420 [ 733.536356][T22005] __x64_sys_sendmsg+0x1b1/0x290 [ 733.536387][T22005] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 733.536441][T22005] do_syscall_64+0x166/0x520 [ 733.536468][T22005] ? trace_irq_disable+0x3b/0x140 [ 733.536489][T22005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.536510][T22005] ? clear_bhb_loop+0x70/0xc0 [ 733.536535][T22005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.536556][T22005] RIP: 0033:0x7f0f9ad9e159 [ 733.536578][T22005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.536597][T22005] RSP: 002b:00007f0f9bd15028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 733.536622][T22005] RAX: ffffffffffffffda RBX: 00007f0f9b025fa0 RCX: 00007f0f9ad9e159 [ 733.536635][T22005] RDX: 0000000000000850 RSI: 0000200000000100 RDI: 0000000000000003 [ 733.536649][T22005] RBP: 00007f0f9ae3506b R08: 0000000000000000 R09: 0000000000000000 [ 733.536661][T22005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 733.536672][T22005] R13: 00007f0f9b026038 R14: 00007f0f9b025fa0 R15: 00007ffc8576c238 [ 733.536706][T22005] [ 733.641904][T22010] __nla_validate_parse: 3 callbacks suppressed [ 733.641924][T22010] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3682'. [ 734.200013][T22025] xt_hashlimit: size too large, truncated to 1048576 [ 734.200038][T22025] xt_hashlimit: max too large, truncated to 1048576 [ 734.384639][T22032] netlink: 'syz.4.3689': attribute type 2 has an invalid length. [ 734.438511][T22036] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3691'. [ 734.682111][T22049] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES' [ 734.682132][T22049] CPU: 1 UID: 0 PID: 22049 Comm: syz.4.3696 Not tainted syzkaller #0 PREEMPT(full) [ 734.682158][T22049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 734.682171][T22049] Call Trace: [ 734.682180][T22049] [ 734.682190][T22049] dump_stack_lvl+0xe8/0x150 [ 734.682228][T22049] sysfs_warn_dup+0x8e/0xa0 [ 734.682263][T22049] sysfs_do_create_link_sd+0xc0/0x110 [ 734.682300][T22049] device_add_class_symlinks+0x1cf/0x240 [ 734.682333][T22049] device_add+0x467/0xb80 [ 734.682360][T22049] wiphy_register+0x1fc8/0x2ff0 [ 734.682406][T22049] ? __pfx_wiphy_register+0x10/0x10 [ 734.682429][T22049] ? __pfx_netdev_run_todo+0x10/0x10 [ 734.682463][T22049] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 734.682504][T22049] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 734.682537][T22049] ieee80211_register_hw+0x3d7c/0x4b40 [ 734.682585][T22049] ? ieee80211_register_hw+0x1981/0x4b40 [ 734.682645][T22049] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 734.682677][T22049] ? __asan_memset+0x22/0x50 [ 734.682700][T22049] ? __hrtimer_setup+0x1b7/0x260 [ 734.682728][T22049] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 734.682758][T22049] mac80211_hwsim_new_radio+0x3264/0x5720 [ 734.682819][T22049] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 734.682842][T22049] ? kstrndup+0xbd/0x160 [ 734.682872][T22049] ? kstrndup+0xbd/0x160 [ 734.682897][T22049] hwsim_new_radio_nl+0xd8b/0xf90 [ 734.682953][T22049] genl_family_rcv_msg_doit+0x233/0x340 [ 734.682991][T22049] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 734.683035][T22049] ? bpf_lsm_capable+0x9/0x20 [ 734.683054][T22049] ? security_capable+0x7e/0x2c0 [ 734.683089][T22049] genl_rcv_msg+0x614/0x7a0 [ 734.683124][T22049] ? __pfx_genl_rcv_msg+0x10/0x10 [ 734.683149][T22049] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 734.683193][T22049] netlink_rcv_skb+0x226/0x4a0 [ 734.683228][T22049] ? __pfx_genl_rcv_msg+0x10/0x10 [ 734.683257][T22049] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 734.683310][T22049] ? down_read+0x2be/0x330 [ 734.683345][T22049] genl_rcv+0x28/0x40 [ 734.683369][T22049] netlink_unicast+0x7bd/0x940 [ 734.683414][T22049] netlink_sendmsg+0x813/0xb40 [ 734.683445][T22049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 734.683475][T22049] ? apparmor_socket_sendmsg+0x98/0x360 [ 734.683502][T22049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 734.683521][T22049] sock_sendmsg_nosec+0x14e/0x190 [ 734.683548][T22049] ____sys_sendmsg+0x54e/0x850 [ 734.683585][T22049] ? __pfx_____sys_sendmsg+0x10/0x10 [ 734.683625][T22049] ? import_iovec+0x73/0xa0 [ 734.683658][T22049] ___sys_sendmsg+0x2a5/0x360 [ 734.683685][T22049] ? __lock_acquire+0x747/0x2de0 [ 734.683713][T22049] ? __pfx____sys_sendmsg+0x10/0x10 [ 734.683747][T22049] ? futex_wait+0x2a2/0x390 [ 734.683817][T22049] ? __fget_files+0x2a/0x420 [ 734.683845][T22049] ? __fget_files+0x3a2/0x420 [ 734.683884][T22049] __x64_sys_sendmsg+0x1b1/0x290 [ 734.683916][T22049] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 734.683981][T22049] do_syscall_64+0x166/0x520 [ 734.684006][T22049] ? trace_irq_disable+0x3b/0x140 [ 734.684025][T22049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.684045][T22049] ? clear_bhb_loop+0x70/0xc0 [ 734.684070][T22049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.684089][T22049] RIP: 0033:0x7f3873f9e159 [ 734.684111][T22049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 734.684129][T22049] RSP: 002b:00007f3874f13028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 734.684151][T22049] RAX: ffffffffffffffda RBX: 00007f3874225fa0 RCX: 00007f3873f9e159 [ 734.684166][T22049] RDX: 0000000000000850 RSI: 0000200000000100 RDI: 0000000000000003 [ 734.684179][T22049] RBP: 00007f387403506b R08: 0000000000000000 R09: 0000000000000000 [ 734.684191][T22049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 734.684203][T22049] R13: 00007f3874226038 R14: 00007f3874225fa0 R15: 00007ffd1239f828 [ 734.684242][T22049] [ 734.778949][T22052] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3696'. [ 734.868217][T22054] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3697'. [ 734.915085][T22054] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3697'. [ 734.915307][T22054] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3697'. [ 735.258951][T22071] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3698'. [ 735.342918][T22057] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 735.386633][T22068] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3701'. [ 735.700713][T22090] netlink: 'syz.4.3705': attribute type 12 has an invalid length. [ 735.700736][T22090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3705'. [ 735.700760][T22090] bond0: option primary_reselect: invalid value (239) [ 735.743047][T22096] netlink: 'syz.0.3707': attribute type 10 has an invalid length. [ 735.743071][T22096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3707'. [ 735.744528][T22095] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES' [ 735.744550][T22095] CPU: 1 UID: 0 PID: 22095 Comm: syz.1.3708 Not tainted syzkaller #0 PREEMPT(full) [ 735.744574][T22095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 735.744587][T22095] Call Trace: [ 735.744596][T22095] [ 735.744605][T22095] dump_stack_lvl+0xe8/0x150 [ 735.744640][T22095] sysfs_warn_dup+0x8e/0xa0 [ 735.744672][T22095] sysfs_do_create_link_sd+0xc0/0x110 [ 735.744711][T22095] device_add_class_symlinks+0x1cf/0x240 [ 735.744741][T22095] device_add+0x467/0xb80 [ 735.744767][T22095] wiphy_register+0x1fc8/0x2ff0 [ 735.744818][T22095] ? __pfx_wiphy_register+0x10/0x10 [ 735.744841][T22095] ? __pfx_netdev_run_todo+0x10/0x10 [ 735.744871][T22095] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 735.744910][T22095] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 735.744941][T22095] ieee80211_register_hw+0x3d7c/0x4b40 [ 735.744984][T22095] ? ieee80211_register_hw+0x1981/0x4b40 [ 735.745039][T22095] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 735.745068][T22095] ? __asan_memset+0x22/0x50 [ 735.745089][T22095] ? __hrtimer_setup+0x1b7/0x260 [ 735.745113][T22095] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 735.745139][T22095] mac80211_hwsim_new_radio+0x3264/0x5720 [ 735.745196][T22095] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 735.745217][T22095] ? kstrndup+0xbd/0x160 [ 735.745242][T22095] ? kstrndup+0xbd/0x160 [ 735.745267][T22095] hwsim_new_radio_nl+0xd8b/0xf90 [ 735.745306][T22095] genl_family_rcv_msg_doit+0x233/0x340 [ 735.745341][T22095] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 735.745380][T22095] ? bpf_lsm_capable+0x9/0x20 [ 735.745399][T22095] ? security_capable+0x7e/0x2c0 [ 735.745430][T22095] genl_rcv_msg+0x614/0x7a0 [ 735.745462][T22095] ? __pfx_genl_rcv_msg+0x10/0x10 [ 735.745485][T22095] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 735.745525][T22095] netlink_rcv_skb+0x226/0x4a0 [ 735.745558][T22095] ? __pfx_genl_rcv_msg+0x10/0x10 [ 735.745583][T22095] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 735.745632][T22095] ? down_read+0x2be/0x330 [ 735.745667][T22095] genl_rcv+0x28/0x40 [ 735.745690][T22095] netlink_unicast+0x7bd/0x940 [ 735.745729][T22095] netlink_sendmsg+0x813/0xb40 [ 735.745761][T22095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 735.745801][T22095] ? apparmor_socket_sendmsg+0x98/0x360 [ 735.745829][T22095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 735.745847][T22095] sock_sendmsg_nosec+0x14e/0x190 [ 735.745871][T22095] ____sys_sendmsg+0x54e/0x850 [ 735.745907][T22095] ? __pfx_____sys_sendmsg+0x10/0x10 [ 735.745945][T22095] ? import_iovec+0x73/0xa0 [ 735.745975][T22095] ___sys_sendmsg+0x2a5/0x360 [ 735.745998][T22095] ? __lock_acquire+0x747/0x2de0 [ 735.746016][T22095] ? __pfx____sys_sendmsg+0x10/0x10 [ 735.746034][T22095] ? futex_wake+0x51b/0x5f0 [ 735.746071][T22095] ? __fget_files+0x2a/0x420 [ 735.746087][T22095] ? __fget_files+0x3a2/0x420 [ 735.746109][T22095] __x64_sys_sendmsg+0x1b1/0x290 [ 735.746127][T22095] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 735.746157][T22095] do_syscall_64+0x166/0x520 [ 735.746171][T22095] ? trace_irq_disable+0x3b/0x140 [ 735.746183][T22095] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.746196][T22095] ? clear_bhb_loop+0x70/0xc0 [ 735.746210][T22095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.746222][T22095] RIP: 0033:0x7f0f9ad9e159 [ 735.746236][T22095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 735.746247][T22095] RSP: 002b:00007f0f9bd15028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 735.746262][T22095] RAX: ffffffffffffffda RBX: 00007f0f9b025fa0 RCX: 00007f0f9ad9e159 [ 735.746271][T22095] RDX: 0000000000000850 RSI: 0000200000000100 RDI: 0000000000000003 [ 735.746279][T22095] RBP: 00007f0f9ae3506b R08: 0000000000000000 R09: 0000000000000000 [ 735.746287][T22095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 735.746297][T22095] R13: 00007f0f9b026038 R14: 00007f0f9b025fa0 R15: 00007ffc8576c238 [ 735.746317][T22095] [ 735.750405][T22097] netlink: 'syz.0.3707': attribute type 10 has an invalid length. [ 736.231814][T22110] SET target dimension over the limit! [ 736.242832][T22110] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 736.296158][ T4934] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 736.354006][T22079] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 736.704260][T22129] debugfs: '!' already exists in 'ieee80211' [ 736.714956][T22125] netlink: 'syz.0.3717': attribute type 21 has an invalid length. [ 736.758209][T22125] netlink: 'syz.0.3717': attribute type 5 has an invalid length. [ 737.259490][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 737.259931][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 737.401279][T22148] tc_dump_action: action bad kind [ 737.852686][T22166] netlink: 'syz.4.3728': attribute type 1 has an invalid length. [ 738.417048][T22166] bond3: entered promiscuous mode [ 738.418906][T22166] 8021q: adding VLAN 0 to HW filter on device bond3 [ 738.495814][T22168] 8021q: adding VLAN 0 to HW filter on device bond3 [ 738.496233][T22168] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address [ 738.496254][T22168] bond3: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 738.512068][T22168] bond3: (slave xfrm1): making interface the new active one [ 738.512094][T22168] xfrm1: entered promiscuous mode [ 738.558501][T22177] sctp: [Deprecated]: syz.1.3730 (pid 22177) Use of struct sctp_assoc_value in delayed_ack socket option. [ 738.558501][T22177] Use struct sctp_sack_info instead [ 738.570130][T22177] sctp: [Deprecated]: syz.1.3730 (pid 22177) Use of struct sctp_assoc_value in delayed_ack socket option. [ 738.570130][T22177] Use struct sctp_sack_info instead [ 738.601709][T22168] xfrm1: left promiscuous mode [ 739.214272][T22201] __nla_validate_parse: 13 callbacks suppressed [ 739.214296][T22201] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3735'. [ 739.303144][T22207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3735'. [ 740.058855][T22237] netlink: 'syz.2.3747': attribute type 39 has an invalid length. [ 740.333197][T22250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 740.394998][T22254] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3753'. [ 740.395029][T22254] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3753'. [ 740.395045][T22254] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3753'. [ 740.595432][T22264] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3754'. [ 740.719935][T22263] siw: device registration error -23 [ 741.173530][T22276] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3758'. [ 741.581409][T22293] gre1: entered promiscuous mode [ 741.581434][T22293] gre1: entered allmulticast mode [ 741.713959][T22302] FAULT_INJECTION: forcing a failure. [ 741.713959][T22302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 741.713995][T22302] CPU: 1 UID: 0 PID: 22302 Comm: syz.4.3764 Not tainted syzkaller #0 PREEMPT(full) [ 741.714018][T22302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 741.714030][T22302] Call Trace: [ 741.714038][T22302] [ 741.714048][T22302] dump_stack_lvl+0xe8/0x150 [ 741.714083][T22302] should_fail_ex+0x410/0x560 [ 741.714115][T22302] _copy_from_user+0x2d/0xb0 [ 741.714143][T22302] ___sys_sendmsg+0x1c6/0x360 [ 741.714170][T22302] ? __lock_acquire+0x747/0x2de0 [ 741.714197][T22302] ? __pfx____sys_sendmsg+0x10/0x10 [ 741.714263][T22302] ? __fget_files+0x2a/0x420 [ 741.714289][T22302] ? __fget_files+0x3a2/0x420 [ 741.714326][T22302] __x64_sys_sendmsg+0x1b1/0x290 [ 741.714366][T22302] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 741.714416][T22302] do_syscall_64+0x166/0x520 [ 741.714439][T22302] ? trace_irq_disable+0x3b/0x140 [ 741.714458][T22302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.714477][T22302] ? clear_bhb_loop+0x70/0xc0 [ 741.714499][T22302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.714518][T22302] RIP: 0033:0x7f3873f9e159 [ 741.714536][T22302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.714552][T22302] RSP: 002b:00007f3874f13028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 741.714575][T22302] RAX: ffffffffffffffda RBX: 00007f3874225fa0 RCX: 00007f3873f9e159 [ 741.714589][T22302] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 741.714601][T22302] RBP: 00007f3874f13090 R08: 0000000000000000 R09: 0000000000000000 [ 741.714614][T22302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 741.714625][T22302] R13: 00007f3874226038 R14: 00007f3874225fa0 R15: 00007ffd1239f828 [ 741.714659][T22302] [ 741.992997][T22311] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3767'. [ 742.097840][T22315] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 742.238440][T22326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3770'. [ 742.264568][T22305] syzkaller0: entered promiscuous mode [ 742.264595][T22305] syzkaller0: entered allmulticast mode [ 742.437515][T22326] bond4: option lacp_active: invalid value (5) [ 742.453056][T22326] bond4 (unregistering): Released all slaves [ 744.455222][ T4934] Bluetooth: hci1: command 0x0406 tx timeout [ 746.051557][T22349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3775'. [ 746.186852][T22353] ipvlan2: entered promiscuous mode [ 746.196355][T22353] team0: Device ipvlan2 failed to register rx_handler [ 746.386551][T22368] IPVS: set_ctl: invalid protocol: 136 172.30.1.2:20002 [ 746.697433][T22373] netlink: 928 bytes leftover after parsing attributes in process `syz.1.3783'. [ 746.889739][T22373] tipc: Enabling of bearer rejected, failed to enable media [ 746.915676][T22378] syzkaller1: entered allmulticast mode [ 747.180996][T22382] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3785'. [ 747.181034][T22382] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 747.506241][T22397] ip6gretap0: entered promiscuous mode [ 747.506394][T22397] macsec1: entered allmulticast mode [ 747.506408][T22397] ip6gretap0: entered allmulticast mode [ 747.655888][T22401] syzkaller0: entered promiscuous mode [ 747.655905][T22401] syzkaller0: entered allmulticast mode [ 747.669998][T22401] tipc: Started in network mode [ 747.670026][T22401] tipc: Node identity 461331612f42, cluster identity 4711 [ 747.670365][T22401] tipc: Enabled bearer , priority 0 [ 747.675809][T22404] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3792'. [ 747.689942][T22401] tipc: Resetting bearer [ 747.871227][T22400] tipc: Resetting bearer [ 747.960612][T22400] tipc: Disabling bearer [ 748.183466][T22415] netlink: 'syz.0.3795': attribute type 2 has an invalid length. [ 748.183492][T22415] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3795'. [ 748.202952][T22415] : entered promiscuous mode [ 748.261794][T22416] tunl0: entered allmulticast mode [ 748.313783][T22416] batadv1: left allmulticast mode [ 748.313812][T22416] batadv1: left promiscuous mode [ 748.328951][T22416] bridge0: port 3(batadv1) entered disabled state [ 748.353550][T22416] bridge_slave_1: left allmulticast mode [ 748.353582][T22416] bridge_slave_1: left promiscuous mode [ 748.354336][T22423] ip_tables: iptables: counters copy to user failed while replacing table [ 748.354684][T22416] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.406192][T22416] bridge_slave_0: left allmulticast mode [ 748.406224][T22416] bridge_slave_0: left promiscuous mode [ 748.406471][T22416] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.554320][T22430] syzkaller0: entered promiscuous mode [ 748.554346][T22430] syzkaller0: entered allmulticast mode [ 748.577611][T22430] tipc: Started in network mode [ 748.577632][T22430] tipc: Node identity , cluster identity 4711 [ 748.577648][T22430] tipc: Failed to obtain node identity [ 748.577676][T22430] tipc: Enabling of bearer rejected, failed to enable media [ 748.849534][T22440] netlink: 'syz.1.3803': attribute type 1 has an invalid length. [ 748.897899][T22440] 8021q: adding VLAN 0 to HW filter on device bond3 [ 748.924416][T22440] bond3: (slave geneve2): making interface the new active one [ 748.934521][T22440] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 749.150224][T22448] syzkaller1: entered promiscuous mode [ 749.150251][T22448] syzkaller1: entered allmulticast mode [ 749.390584][T22467] bond3: option min_links: invalid value (18446744073709551612) [ 749.390616][T22467] bond3: option min_links: allowed values 0 - 2147483647 [ 749.400318][T22467] bond3 (unregistering): Released all slaves [ 749.578100][T22475] sctp: [Deprecated]: syz.1.3811 (pid 22475) Use of int in max_burst socket option. [ 749.578100][T22475] Use struct sctp_assoc_value instead [ 749.765080][T22479] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3812'. [ 750.016551][T22491] openvswitch: netlink: Unknown key attributes 1 [ 750.210525][T22498] netlink: 6442 bytes leftover after parsing attributes in process `syz.1.3817'. [ 750.611703][T22511] netlink: 'syz.3.3825': attribute type 17 has an invalid length. [ 750.664546][T22516] netlink: 'syz.0.3823': attribute type 1 has an invalid length. [ 750.797719][T22529] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3823'. [ 750.825535][T22516] 8021q: adding VLAN 0 to HW filter on device bond4 [ 750.956980][T22516] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3823'. [ 751.028160][T22516] bond4 (unregistering): Released all slaves [ 751.216420][T22543] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3831'. [ 751.282646][T22545] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3830'. [ 751.282686][T22545] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3830'. [ 751.310699][T22545] gretap0: entered promiscuous mode [ 751.314273][T22545] gretap0: left promiscuous mode [ 751.364028][T22546] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3830'. [ 751.364069][T22546] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3830'. [ 751.604388][T22546] gretap0: entered promiscuous mode [ 751.611267][T22546] gretap0: left promiscuous mode [ 751.723316][T22559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3836'. [ 751.960854][T22571] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES' [ 751.960876][T22571] CPU: 1 UID: 0 PID: 22571 Comm: syz.0.3841 Not tainted syzkaller #0 PREEMPT(full) [ 751.960900][T22571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 751.960913][T22571] Call Trace: [ 751.960922][T22571] [ 751.960931][T22571] dump_stack_lvl+0xe8/0x150 [ 751.960972][T22571] sysfs_warn_dup+0x8e/0xa0 [ 751.961009][T22571] sysfs_do_create_link_sd+0xc0/0x110 [ 751.961043][T22571] device_add_class_symlinks+0x1cf/0x240 [ 751.961074][T22571] device_add+0x467/0xb80 [ 751.961100][T22571] wiphy_register+0x1fc8/0x2ff0 [ 751.961149][T22571] ? __pfx_wiphy_register+0x10/0x10 [ 751.961171][T22571] ? __pfx_netdev_run_todo+0x10/0x10 [ 751.961206][T22571] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 751.961248][T22571] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 751.961277][T22571] ieee80211_register_hw+0x3d7c/0x4b40 [ 751.961321][T22571] ? ieee80211_register_hw+0x1981/0x4b40 [ 751.961378][T22571] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 751.961408][T22571] ? __asan_memset+0x22/0x50 [ 751.961430][T22571] ? __hrtimer_setup+0x1b7/0x260 [ 751.961458][T22571] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 751.961491][T22571] mac80211_hwsim_new_radio+0x3264/0x5720 [ 751.961553][T22571] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 751.961586][T22571] ? kstrndup+0xbd/0x160 [ 751.961617][T22571] ? kstrndup+0xbd/0x160 [ 751.961644][T22571] hwsim_new_radio_nl+0xd8b/0xf90 [ 751.961690][T22571] genl_family_rcv_msg_doit+0x233/0x340 [ 751.961729][T22571] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 751.961773][T22571] ? bpf_lsm_capable+0x9/0x20 [ 751.961794][T22571] ? security_capable+0x7e/0x2c0 [ 751.961833][T22571] genl_rcv_msg+0x614/0x7a0 [ 751.961870][T22571] ? __pfx_genl_rcv_msg+0x10/0x10 [ 751.961896][T22571] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 751.961940][T22571] netlink_rcv_skb+0x226/0x4a0 [ 751.961977][T22571] ? __pfx_genl_rcv_msg+0x10/0x10 [ 751.962004][T22571] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 751.962054][T22571] ? down_read+0x2be/0x330 [ 751.962089][T22571] genl_rcv+0x28/0x40 [ 751.962113][T22571] netlink_unicast+0x7bd/0x940 [ 751.962153][T22571] netlink_sendmsg+0x813/0xb40 [ 751.962185][T22571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 751.962215][T22571] ? apparmor_socket_sendmsg+0x98/0x360 [ 751.962242][T22571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 751.962260][T22571] sock_sendmsg_nosec+0x14e/0x190 [ 751.962286][T22571] ____sys_sendmsg+0x54e/0x850 [ 751.962317][T22571] ? __pfx_____sys_sendmsg+0x10/0x10 [ 751.962355][T22571] ? import_iovec+0x73/0xa0 [ 751.962387][T22571] ___sys_sendmsg+0x2a5/0x360 [ 751.962413][T22571] ? __lock_acquire+0x747/0x2de0 [ 751.962444][T22571] ? __pfx____sys_sendmsg+0x10/0x10 [ 751.962477][T22571] ? futex_wait+0x2a2/0x390 [ 751.962542][T22571] ? __fget_files+0x2a/0x420 [ 751.962580][T22571] ? __fget_files+0x3a2/0x420 [ 751.962621][T22571] __x64_sys_sendmsg+0x1b1/0x290 [ 751.962651][T22571] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 751.962703][T22571] do_syscall_64+0x166/0x520 [ 751.962728][T22571] ? trace_irq_disable+0x3b/0x140 [ 751.962749][T22571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.962770][T22571] ? clear_bhb_loop+0x70/0xc0 [ 751.962793][T22571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.962813][T22571] RIP: 0033:0x7f9f7dd9e159 [ 751.962832][T22571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 751.962850][T22571] RSP: 002b:00007f9f7ebff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 751.962874][T22571] RAX: ffffffffffffffda RBX: 00007f9f7e025fa0 RCX: 00007f9f7dd9e159 [ 751.962889][T22571] RDX: 0000000000000850 RSI: 0000200000000100 RDI: 0000000000000003 [ 751.962903][T22571] RBP: 00007f9f7de3506b R08: 0000000000000000 R09: 0000000000000000 [ 751.962915][T22571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 751.962928][T22571] R13: 00007f9f7e026038 R14: 00007f9f7e025fa0 R15: 00007fff41897108 [ 751.962968][T22571] [ 752.109014][T22578] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3841'. [ 752.378576][T22586] netlink: 'syz.1.3843': attribute type 4 has an invalid length. [ 752.587625][T22590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3846'. [ 752.589544][T22590] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3846'. [ 752.749857][T10490] bridge_slave_1: left allmulticast mode [ 752.749885][T10490] bridge_slave_1: left promiscuous mode [ 752.751491][T10490] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.783148][T10490] bridge_slave_0: left allmulticast mode [ 752.783177][T10490] bridge_slave_0: left promiscuous mode [ 752.790381][T10490] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.827205][T22599] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3850'. [ 753.233138][T10490] bond9 (unregistering): (slave ip6gretap2): Releasing active interface [ 753.597767][T10490] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 753.602477][T10490] bond0 (unregistering): Released all slaves [ 753.617435][T10490] bond1 (unregistering): Released all slaves [ 753.635854][T10490] bond2 (unregistering): Released all slaves [ 753.653638][T10490] bond3 (unregistering): Released all slaves [ 753.689748][T10490] bond4 (unregistering): Released all slaves [ 753.709206][T10490] bond5 (unregistering): Released all slaves [ 753.728047][T10490] bond6 (unregistering): Released all slaves [ 753.739880][T10490] bond7 (unregistering): Released all slaves [ 753.753755][T10490] bond8 (unregistering): Released all slaves [ 753.781762][T10490] bond9 (unregistering): Released all slaves [ 753.793456][T10490] bond10 (unregistering): Released all slaves [ 753.983830][T10490] ovs-dp0: left promiscuous mode [ 754.244908][T10490] : left promiscuous mode [ 754.450565][T10490] tipc: Left network mode [ 754.610388][ T30] audit: type=1804 audit(1790798889.591:76): pid=22645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3858" name="/newroot/132/cgroup.controllers" dev="tmpfs" ino=686 res=1 errno=0 [ 754.610669][ T30] audit: type=1800 audit(1790798889.591:77): pid=22645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3858" name="cgroup.controllers" dev="tmpfs" ino=686 res=0 errno=0 [ 754.707430][ T4934] Bluetooth: hci2: command 0x0406 tx timeout [ 754.797945][T18511] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 754.814813][T18513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 754.814835][T18513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 754.833009][T22650] openvswitch: netlink: Flow actions attr not present in new flow. [ 755.110093][T22657] syzkaller0: entered promiscuous mode [ 755.110118][T22657] syzkaller0: entered allmulticast mode [ 755.545302][T22660] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 755.857329][T22668] hsr_slave_0 (unregistering): left promiscuous mode [ 755.992512][T22680] batman_adv: batadv0: Adding interface: syzkaller0 [ 755.992532][T22680] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 755.992762][T22680] batman_adv: batadv0: Interface activated: syzkaller0 [ 756.263382][T22685] __nla_validate_parse: 7 callbacks suppressed [ 756.263407][T22685] netlink: 64587 bytes leftover after parsing attributes in process `syz.3.3870'. [ 756.600994][T22694] netlink: 'syz.4.3872': attribute type 1 has an invalid length. [ 756.632987][T22679] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 756.713972][T22679] batman_adv: batadv0: Removing interface: syzkaller0 [ 756.883518][T22705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3876'. [ 756.883543][T22705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3876'. [ 756.883568][T22705] netlink: 'syz.2.3876': attribute type 19 has an invalid length. [ 756.883581][T22705] netlink: 'syz.2.3876': attribute type 20 has an invalid length. [ 756.938773][T22709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3876'. [ 756.938800][T22709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3876'. [ 756.938824][T22709] netlink: 'syz.2.3876': attribute type 19 has an invalid length. [ 756.938839][T22709] netlink: 'syz.2.3876': attribute type 20 has an invalid length. [ 757.231478][T22705] 0: renamed from bond_slave_1 (while UP) [ 757.854604][T22749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3888'. [ 758.320523][T22764] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3890'. [ 758.498076][T22775] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3894'. [ 758.531197][T22775] netlink: 'syz.1.3894': attribute type 1 has an invalid length. [ 758.578101][T10490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 758.578128][T10490] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 758.580915][T10490] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 758.580940][T10490] batman_adv: batadv0: Removing interface: ipvlan3 [ 758.605487][T10490] batman_adv: batadv0: Interface deactivated: ipvlan4 [ 758.605513][T10490] batman_adv: batadv0: Removing interface: ipvlan4 [ 758.882940][T10490] veth1_vlan: left promiscuous mode [ 758.883803][T10490] veth0_vlan: left promiscuous mode [ 759.531078][T10490] team0 (unregistering): Port device team_slave_1 removed [ 759.791871][T22775] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 759.816367][ T4934] Bluetooth: hci5: command 0x0406 tx timeout [ 760.033241][T22817] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3898'. [ 760.051041][T22817] netlink: 276 bytes leftover after parsing attributes in process `syz.1.3898'. [ 760.294166][T10490] IPVS: stop unused estimator thread 0... [ 760.583813][T22840] ip_tables: iptables: counters copy to user failed while replacing table [ 760.856492][T22842] bond4: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 760.899602][T22842] bond4 (unregistering): Released all slaves [ 761.244122][T22865] netlink: zone id is out of range [ 761.244143][T22865] netlink: zone id is out of range [ 761.244151][T22865] netlink: zone id is out of range [ 761.244159][T22865] netlink: zone id is out of range [ 761.244168][T22865] netlink: zone id is out of range [ 761.244175][T22865] netlink: zone id is out of range [ 761.244188][T22865] netlink: zone id is out of range [ 761.244195][T22865] netlink: zone id is out of range [ 761.244202][T22865] netlink: zone id is out of range [ 761.382547][T22860] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.383806][T22860] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.709917][T22860] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 761.752993][T22860] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 761.883723][T22880] xt_CT: No such helper "snmp" [ 762.146640][T22860] veth3: left allmulticast mode [ 762.237548][ T8518] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 762.237595][ T8518] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.237874][T10490] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 762.237899][T10490] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.237932][T10490] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 762.237956][T10490] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.237987][T10490] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 762.238011][T10490] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.424243][T22894] netlink: 'syz.4.3914': attribute type 1 has an invalid length. [ 762.424266][T22894] netlink: 'syz.4.3914': attribute type 2 has an invalid length. [ 762.566831][T22906] netlink: 'syz.1.3918': attribute type 4 has an invalid length. [ 762.567537][T22906] netlink: 'syz.1.3918': attribute type 4 has an invalid length. [ 762.674028][T22910] netlink: 'syz.2.3919': attribute type 16 has an invalid length. [ 762.674055][T22910] netlink: 'syz.2.3919': attribute type 17 has an invalid length. [ 762.784814][T22913] __nla_validate_parse: 3 callbacks suppressed [ 762.784840][T22913] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3920'. [ 762.831805][T22910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 762.838269][T22910] 8021q: adding VLAN 0 to HW filter on device team0 [ 762.874281][T22910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 762.926479][T22910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 762.929146][T22910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 762.933706][T22910] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 762.940688][T22910] veth1_vlan: left promiscuous mode [ 762.941867][T22910] veth0_vlan: left promiscuous mode [ 762.943602][T22910] veth0_vlan: entered promiscuous mode [ 762.955031][T22910] veth1_vlan: entered promiscuous mode [ 763.000047][T22910] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 763.001075][T22910] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 763.003935][T22910] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 763.010324][T22910] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 763.036110][T10789] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.036627][T18513] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.069263][T22916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3921'. [ 763.088236][T18511] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.088373][T18511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 763.092658][T18511] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.092771][T18511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 763.266260][T18511] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.267811][ T8518] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.584994][T22968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3932'. [ 764.640531][T22968] batadv0: entered promiscuous mode [ 764.640676][T22968] macsec2: entered promiscuous mode [ 764.640886][T22968] macsec2: entered allmulticast mode [ 764.640898][T22968] batadv0: entered allmulticast mode [ 764.661870][T22968] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 764.700891][T22968] batadv0: left allmulticast mode [ 764.701162][T22968] batadv0: left promiscuous mode [ 765.036477][T22981] netlink: 'syz.0.3936': attribute type 8 has an invalid length. [ 765.036515][T22981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3936'. [ 765.036548][T22981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3936'. [ 765.396876][T22990] sctp: [Deprecated]: syz.4.3937 (pid 22990) Use of int in maxseg socket option. [ 765.396876][T22990] Use struct sctp_assoc_value instead [ 765.924166][T23012] netlink: 'syz.2.3946': attribute type 15 has an invalid length. [ 766.038085][T23012] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3946'. [ 766.259520][T23021] net_ratelimit: 499 callbacks suppressed [ 766.259554][T23021] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 766.459721][T23026] tipc: Enabling of bearer rejected, already enabled [ 766.461887][T23026] syzkaller0: entered promiscuous mode [ 766.461910][T23026] syzkaller0: entered allmulticast mode [ 766.469354][T23026] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 766.679423][T23026] syzkaller0: mtu less than device minimum [ 766.971277][T23041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 767.044967][T23041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 767.090981][T23047] tipc: Failed to remove unknown binding: 66,0,0/0:2026662397/2026662398 [ 767.402820][T23053] xt_hashlimit: invalid interval [ 767.462883][T23049] bond1: option ad_select: invalid value (34) [ 767.469604][T23049] bond1 (unregistering): Released all slaves [ 767.558757][T23037] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3951'. [ 767.573321][T23054] tipc: Started in network mode [ 767.573350][T23054] tipc: Node identity 2e652873f86c, cluster identity 4711 [ 767.583915][T23054] tipc: Enabled bearer , priority 0 [ 768.062509][T23069] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 768.364024][T23083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3964'. [ 768.685560][ T989] tipc: Node number set to 3590924403 [ 768.729830][T23095] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES' [ 768.729856][T23095] CPU: 1 UID: 0 PID: 23095 Comm: syz.4.3967 Not tainted syzkaller #0 PREEMPT(full) [ 768.729879][T23095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 768.729892][T23095] Call Trace: [ 768.729901][T23095] [ 768.729911][T23095] dump_stack_lvl+0xe8/0x150 [ 768.729951][T23095] sysfs_warn_dup+0x8e/0xa0 [ 768.729983][T23095] sysfs_do_create_link_sd+0xc0/0x110 [ 768.730017][T23095] device_add_class_symlinks+0x1cf/0x240 [ 768.730048][T23095] device_add+0x467/0xb80 [ 768.730074][T23095] wiphy_register+0x1fc8/0x2ff0 [ 768.730118][T23095] ? __pfx_wiphy_register+0x10/0x10 [ 768.730141][T23095] ? __pfx_netdev_run_todo+0x10/0x10 [ 768.730174][T23095] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 768.730214][T23095] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 768.730244][T23095] ieee80211_register_hw+0x3d7c/0x4b40 [ 768.730289][T23095] ? ieee80211_register_hw+0x1981/0x4b40 [ 768.730345][T23095] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 768.730375][T23095] ? __asan_memset+0x22/0x50 [ 768.730397][T23095] ? __hrtimer_setup+0x1b7/0x260 [ 768.730425][T23095] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 768.730455][T23095] mac80211_hwsim_new_radio+0x3264/0x5720 [ 768.730531][T23095] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 768.730555][T23095] ? kstrndup+0xbd/0x160 [ 768.730584][T23095] ? kstrndup+0xbd/0x160 [ 768.730610][T23095] hwsim_new_radio_nl+0xd8b/0xf90 [ 768.730654][T23095] genl_family_rcv_msg_doit+0x233/0x340 [ 768.730691][T23095] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 768.730733][T23095] ? bpf_lsm_capable+0x9/0x20 [ 768.730752][T23095] ? security_capable+0x7e/0x2c0 [ 768.730786][T23095] genl_rcv_msg+0x614/0x7a0 [ 768.730821][T23095] ? __pfx_genl_rcv_msg+0x10/0x10 [ 768.730846][T23095] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 768.730888][T23095] netlink_rcv_skb+0x226/0x4a0 [ 768.730922][T23095] ? __pfx_genl_rcv_msg+0x10/0x10 [ 768.730951][T23095] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 768.731001][T23095] ? down_read+0x2be/0x330 [ 768.731035][T23095] genl_rcv+0x28/0x40 [ 768.731058][T23095] netlink_unicast+0x7bd/0x940 [ 768.731102][T23095] netlink_sendmsg+0x813/0xb40 [ 768.731134][T23095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 768.731166][T23095] ? apparmor_socket_sendmsg+0x98/0x360 [ 768.731192][T23095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 768.731212][T23095] sock_sendmsg_nosec+0x14e/0x190 [ 768.731238][T23095] ____sys_sendmsg+0x54e/0x850 [ 768.731274][T23095] ? __pfx_____sys_sendmsg+0x10/0x10 [ 768.731314][T23095] ? import_iovec+0x73/0xa0 [ 768.731346][T23095] ___sys_sendmsg+0x2a5/0x360 [ 768.731374][T23095] ? __lock_acquire+0x747/0x2de0 [ 768.731401][T23095] ? __pfx____sys_sendmsg+0x10/0x10 [ 768.731435][T23095] ? futex_wait+0x2a2/0x390 [ 768.731510][T23095] ? __fget_files+0x2a/0x420 [ 768.731538][T23095] ? __fget_files+0x3a2/0x420 [ 768.731580][T23095] __x64_sys_sendmsg+0x1b1/0x290 [ 768.731612][T23095] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 768.731667][T23095] do_syscall_64+0x166/0x520 [ 768.731692][T23095] ? trace_irq_disable+0x3b/0x140 [ 768.731712][T23095] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.731734][T23095] ? clear_bhb_loop+0x70/0xc0 [ 768.731762][T23095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.731783][T23095] RIP: 0033:0x7f3873f9e159 [ 768.731803][T23095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 768.731821][T23095] RSP: 002b:00007f3874f13028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 768.731845][T23095] RAX: ffffffffffffffda RBX: 00007f3874225fa0 RCX: 00007f3873f9e159 [ 768.731861][T23095] RDX: 0000000000000850 RSI: 0000200000000100 RDI: 0000000000000003 [ 768.731875][T23095] RBP: 00007f387403506b R08: 0000000000000000 R09: 0000000000000000 [ 768.731888][T23095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 768.731901][T23095] R13: 00007f3874226038 R14: 00007f3874225fa0 R15: 00007ffd1239f828 [ 768.731939][T23095] [ 768.905566][T23103] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3967'. [ 769.439023][T23126] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3976'. [ 769.491937][T23129] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3975'. [ 769.909507][T23135] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 769.933552][T23135] bond1 (unregistering): Released all slaves [ 770.124858][T23159] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3982'. [ 770.124884][T23159] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3982'. [ 770.124897][T23159] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3982'. [ 770.124910][T23159] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3982'. [ 770.124928][T23159] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3982'. [ 770.124941][T23159] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3982'. [ 770.372139][T23171] netlink: 'syz.2.3986': attribute type 1 has an invalid length. [ 770.432992][T23171] 8021q: adding VLAN 0 to HW filter on device bond1 [ 770.434960][T23174] netlink: 'syz.0.3988': attribute type 4 has an invalid length. [ 770.494791][T23176] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 770.510567][T23174] netlink: 'syz.0.3988': attribute type 4 has an invalid length. [ 770.725658][T23190] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 770.725658][T23190] Please contact the netfilter-devel mailing list or update your nftables rules. [ 770.780622][T23190] syzkaller0: entered promiscuous mode [ 770.780649][T23190] syzkaller0: entered allmulticast mode [ 772.290150][T23229] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 772.290181][T23229] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 772.290202][T23229] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 772.290222][T23229] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 772.290241][T23229] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 772.290259][T23229] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 772.290291][T23229] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 772.290311][T23229] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 772.290331][T23229] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 772.290351][T23229] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 773.111581][T23158] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 773.439759][T23254] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES' [ 773.439783][T23254] CPU: 1 UID: 0 PID: 23254 Comm: syz.3.4002 Not tainted syzkaller #0 PREEMPT(full) [ 773.439809][T23254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 773.439823][T23254] Call Trace: [ 773.439832][T23254] [ 773.439842][T23254] dump_stack_lvl+0xe8/0x150 [ 773.439882][T23254] sysfs_warn_dup+0x8e/0xa0 [ 773.439926][T23254] sysfs_do_create_link_sd+0xc0/0x110 [ 773.439963][T23254] device_add_class_symlinks+0x1cf/0x240 [ 773.439994][T23254] device_add+0x467/0xb80 [ 773.440022][T23254] wiphy_register+0x1fc8/0x2ff0 [ 773.440070][T23254] ? __pfx_wiphy_register+0x10/0x10 [ 773.440094][T23254] ? __pfx_netdev_run_todo+0x10/0x10 [ 773.440127][T23254] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 773.440168][T23254] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 773.440201][T23254] ieee80211_register_hw+0x3d7c/0x4b40 [ 773.440246][T23254] ? ieee80211_register_hw+0x1981/0x4b40 [ 773.440304][T23254] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 773.440335][T23254] ? __asan_memset+0x22/0x50 [ 773.440357][T23254] ? __hrtimer_setup+0x1b7/0x260 [ 773.440386][T23254] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 773.440416][T23254] mac80211_hwsim_new_radio+0x3264/0x5720 [ 773.440478][T23254] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 773.440501][T23254] ? kstrndup+0xbd/0x160 [ 773.440530][T23254] ? kstrndup+0xbd/0x160 [ 773.440555][T23254] hwsim_new_radio_nl+0xd8b/0xf90 [ 773.440599][T23254] genl_family_rcv_msg_doit+0x233/0x340 [ 773.440636][T23254] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 773.440680][T23254] ? bpf_lsm_capable+0x9/0x20 [ 773.440700][T23254] ? security_capable+0x7e/0x2c0 [ 773.440735][T23254] genl_rcv_msg+0x614/0x7a0 [ 773.440770][T23254] ? __pfx_genl_rcv_msg+0x10/0x10 [ 773.440795][T23254] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 773.440838][T23254] netlink_rcv_skb+0x226/0x4a0 [ 773.440872][T23254] ? __pfx_genl_rcv_msg+0x10/0x10 [ 773.440909][T23254] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 773.440959][T23254] ? down_read+0x2be/0x330 [ 773.440991][T23254] genl_rcv+0x28/0x40 [ 773.441011][T23254] netlink_unicast+0x7bd/0x940 [ 773.441052][T23254] netlink_sendmsg+0x813/0xb40 [ 773.441083][T23254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 773.441113][T23254] ? apparmor_socket_sendmsg+0x98/0x360 [ 773.441139][T23254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 773.441157][T23254] sock_sendmsg_nosec+0x14e/0x190 [ 773.441183][T23254] ____sys_sendmsg+0x54e/0x850 [ 773.441217][T23254] ? __pfx_____sys_sendmsg+0x10/0x10 [ 773.441253][T23254] ? import_iovec+0x73/0xa0 [ 773.441283][T23254] ___sys_sendmsg+0x2a5/0x360 [ 773.441308][T23254] ? __lock_acquire+0x747/0x2de0 [ 773.441336][T23254] ? __pfx____sys_sendmsg+0x10/0x10 [ 773.441369][T23254] ? futex_wait+0x2a2/0x390 [ 773.441431][T23254] ? __fget_files+0x2a/0x420 [ 773.441457][T23254] ? __fget_files+0x3a2/0x420 [ 773.441497][T23254] __x64_sys_sendmsg+0x1b1/0x290 [ 773.441526][T23254] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 773.441574][T23254] do_syscall_64+0x166/0x520 [ 773.441598][T23254] ? trace_irq_disable+0x3b/0x140 [ 773.441619][T23254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.441640][T23254] ? clear_bhb_loop+0x70/0xc0 [ 773.441664][T23254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.441684][T23254] RIP: 0033:0x7f556939e159 [ 773.441703][T23254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 773.441719][T23254] RSP: 002b:00007f556a29f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 773.441743][T23254] RAX: ffffffffffffffda RBX: 00007f5569625fa0 RCX: 00007f556939e159 [ 773.441757][T23254] RDX: 0000000000000850 RSI: 0000200000000100 RDI: 0000000000000003 [ 773.441769][T23254] RBP: 00007f556943506b R08: 0000000000000000 R09: 0000000000000000 [ 773.441783][T23254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 773.441796][T23254] R13: 00007f5569626038 R14: 00007f5569625fa0 R15: 00007ffc74240388 [ 773.441834][T23254] [ 773.629600][T23258] dummy0: entered promiscuous mode [ 773.649254][T23258] gretap0: entered promiscuous mode [ 773.670187][T23258] hsr1: entered allmulticast mode [ 773.670215][T23258] dummy0: entered allmulticast mode [ 773.670351][T23258] gretap0: entered allmulticast mode [ 773.723718][T23254] __nla_validate_parse: 4 callbacks suppressed [ 773.723740][T23254] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4002'. [ 773.791802][T23267] syzkaller0: entered promiscuous mode [ 773.791824][T23267] syzkaller0: entered allmulticast mode [ 774.865604][T23303] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4015'. [ 775.446884][T23315] netlink: 'syz.1.4017': attribute type 10 has an invalid length. [ 775.446922][T23315] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4017'. [ 775.451284][T23315] batman_adv: batadv0: Adding interface: syzkaller0 [ 775.451305][T23315] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 775.451441][T23315] batman_adv: batadv0: Interface activated: syzkaller0 [ 776.266637][T23314] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 776.320267][T23314] batman_adv: batadv0: Removing interface: syzkaller0 [ 777.354261][T23283] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 777.354768][T23312] netlink: 'syz.2.4016': attribute type 4 has an invalid length. [ 777.354787][T23312] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4016'. [ 777.747655][T23339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4023'. [ 777.771878][T23334] smbdirect: ib_dev[syz1] removed [ 778.104058][T23342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4024'. [ 778.395049][T23359] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4031'. [ 778.560641][T23363] netlink: 'syz.4.4032': attribute type 1 has an invalid length. [ 778.560669][T23363] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4032'. [ 778.650409][T23367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4033'. [ 778.972863][T23379] netlink: 'syz.4.4037': attribute type 1 has an invalid length. [ 779.189756][T23379] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4037'. [ 779.213518][T23381] veth3: entered promiscuous mode [ 779.439730][T23393] xt_IDLETIMER: label is empty or not nul-terminated [ 780.101522][T23408] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4044'. [ 780.218950][T23410] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4045'. [ 780.233194][T23411] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4045'. [ 780.233216][T23411] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4045'. [ 780.386441][T23415] syzkaller0: entered promiscuous mode [ 780.386475][T23415] syzkaller0: entered allmulticast mode [ 780.763683][T23420] ip6erspan0: entered allmulticast mode [ 780.785429][T23422] net_ratelimit: 55 callbacks suppressed [ 780.785452][T23422] ip_tables: iptables: counters copy to user failed while replacing table [ 781.397392][T23442] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4052'. [ 781.397419][T23442] openvswitch: netlink: Flow actions attr not present in new flow. [ 781.428122][T23442] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4052'. [ 781.428150][T23442] openvswitch: netlink: Flow actions attr not present in new flow. [ 781.430898][T23444] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.4052'. [ 781.432115][T23443] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.4052'. [ 781.457280][T23442] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4052'. [ 781.457307][T23442] openvswitch: netlink: Flow actions attr not present in new flow. [ 781.457526][T23442] openvswitch: netlink: Flow actions attr not present in new flow. [ 781.457742][T23442] openvswitch: netlink: Flow actions attr not present in new flow. [ 781.457947][T23442] openvswitch: netlink: Flow actions attr not present in new flow. [ 781.458182][T23442] openvswitch: netlink: Flow actions attr not present in new flow. [ 781.458394][T23442] openvswitch: netlink: Flow actions attr not present in new flow. [ 781.470156][T23442] openvswitch: netlink: Flow actions attr not present in new flow. [ 781.782916][T23448] gre0: left promiscuous mode [ 782.120802][T23448] macsec0: left promiscuous mode [ 782.176406][T23448] syzkaller0: left promiscuous mode [ 782.181042][T23448] tipc: Resetting bearer [ 782.182366][T23448] tipc: Resetting bearer [ 782.184081][T23448] geneve2: left promiscuous mode [ 782.217539][T23448] bridge1: left promiscuous mode [ 782.783515][T23467] syzkaller0: entered promiscuous mode [ 782.783766][T23467] syzkaller0: entered allmulticast mode [ 792.984938][T23506] syzkaller0: entered promiscuous mode [ 792.990826][T23506] syzkaller0: entered allmulticast mode [ 793.023485][T23532] tipc: Started in network mode [ 793.023520][T23532] tipc: Node identity 22c336cd9a36, cluster identity 4711 [ 793.023709][T23532] tipc: Enabled bearer , priority 0 [ 793.035609][T23528] syzkaller0: entered promiscuous mode [ 793.035640][T23528] syzkaller0: entered allmulticast mode [ 793.150207][T23527] tipc: Resetting bearer [ 793.259798][T23527] tipc: Disabling bearer [ 793.341746][T23537] __nla_validate_parse: 28 callbacks suppressed [ 793.341771][T23537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4069'. [ 793.690154][T23547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4071'. [ 793.690182][T23547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4071'. [ 793.690206][T23547] netlink: 'syz.0.4071': attribute type 14 has an invalid length. [ 793.690220][T23547] netlink: 'syz.0.4071': attribute type 13 has an invalid length. [ 793.786224][T23551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4070'. [ 793.795748][T23549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4071'. [ 793.795782][T23549] netlink: 'syz.0.4071': attribute type 10 has an invalid length. [ 793.795797][T23549] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4071'. [ 793.839258][T23552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4070'. [ 793.931305][T23554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4070'. [ 798.766164][ T4934] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 798.771680][ T4934] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 798.774766][ T4934] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 798.785518][ T4934] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 798.786176][ T4934] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 800.855470][ T5617] Bluetooth: hci3: command tx timeout [ 802.940162][ T5617] Bluetooth: hci3: command tx timeout [ 803.287775][T23549] geneve3: entered promiscuous mode [ 803.287800][T23549] geneve3: entered allmulticast mode [ 803.834482][T23584] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4076'. [ 804.329441][T23590] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4077'. [ 804.438183][T23596] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4079'. [ 804.520164][T23601] syzkaller0: left promiscuous mode [ 804.522076][T23601] syzkaller0: left allmulticast mode [ 804.976207][T23610] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4082'. [ 804.998199][T23610] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4082'. [ 805.015885][ T5617] Bluetooth: hci3: command tx timeout [ 805.953329][T23629] netlink: 'syz.0.4084': attribute type 1 has an invalid length. [ 806.063612][T23628] team0: Device wg1 is of different type [ 806.310743][T23633] netlink: 'syz.1.4085': attribute type 1 has an invalid length. [ 806.441157][T23630] bond5: option arp_validate: invalid value (1048579) [ 806.459354][T23630] bond5 (unregistering): Released all slaves [ 806.614178][T23647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4085'. [ 806.664247][T23631] bond5: option arp_validate: invalid value (1048579) [ 806.681266][T23631] bond5 (unregistering): Released all slaves [ 806.681981][T23645] nbd3: detected capacity change from 0 to 63 [ 806.752223][T23561] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.754327][T23561] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.754523][T23561] bridge_slave_0: entered allmulticast mode [ 806.782977][T23561] bridge_slave_0: entered promiscuous mode [ 806.916705][T23633] 8021q: adding VLAN 0 to HW filter on device bond4 [ 807.064003][T23638] bond4: (slave veth3): Enslaving as an active interface with a down link [ 807.091220][T23651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4088'. [ 807.100551][ T4934] Bluetooth: hci3: command tx timeout [ 807.377339][T23639] 8021q: adding VLAN 0 to HW filter on device bond1 [ 807.403107][T23639] bond2: left promiscuous mode [ 807.404238][T23639] ipvlan2: left allmulticast mode [ 807.404253][T23639] bond2: left allmulticast mode [ 807.409507][ T5617] block nbd3: Receive control failed (result -104) [ 807.439647][T23639] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 807.472789][T23640] syzkaller0: left allmulticast mode [ 807.474774][T23640] tipc: Resetting bearer [ 807.542464][T23642] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 807.581996][T23642] bond4: (slave batadv1): making interface the new active one [ 807.597061][T23642] batadv1: entered promiscuous mode [ 807.599664][T23642] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 807.607657][T18511] bond1: (slave macvlan2): link status definitely down, disabling slave [ 807.645194][T18511] bond1: now running without any active interface! [ 807.647111][T23561] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.647682][T23561] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.648166][T23561] bridge_slave_1: entered allmulticast mode [ 807.680665][T23561] bridge_slave_1: entered promiscuous mode [ 807.962123][T10490] bond4: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 808.119273][T23655] xt_TPROXY: Can be used only with -p tcp or -p udp [ 808.306220][T23561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 808.357926][T23561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 808.603970][T23561] team0: Port device team_slave_0 added [ 808.659425][T23561] team0: Port device team_slave_1 added [ 808.934243][T23561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 808.934262][T23561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 808.934290][T23561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 809.070543][T23561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 809.070563][T23561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 809.070590][T23561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 809.490724][T23680] pim6reg: entered allmulticast mode [ 809.528389][T23561] hsr_slave_0: entered promiscuous mode [ 809.537933][T23561] hsr_slave_1: entered promiscuous mode [ 809.542716][T23561] debugfs: 'hsr0' already exists in 'hsr' [ 809.542737][T23561] Cannot create hsr debugfs directory [ 809.850273][T23690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4098'. [ 810.048363][T23678] pim6reg: left allmulticast mode [ 810.332673][T23697] net_ratelimit: 21 callbacks suppressed [ 810.332696][T23697] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 810.454838][T23697] netlink: 'syz.1.4100': attribute type 1 has an invalid length. [ 810.470311][T23701] Cannot find set identified by id 0 to match [ 810.502141][T23699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4101'. [ 810.642767][T23697] 8021q: adding VLAN 0 to HW filter on device bond5 [ 810.807785][T23699] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 811.073015][T23703] bond5: entered promiscuous mode [ 811.073042][T23703] bond5: entered allmulticast mode [ 811.209271][T23719] syzkaller0: entered promiscuous mode [ 811.209620][T23719] syzkaller0: entered allmulticast mode [ 811.211456][T23719] tipc: Resetting bearer [ 811.326134][T23722] netlink: 5392 bytes leftover after parsing attributes in process `syz.4.4103'. [ 811.336225][ T5617] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 811.582503][T23728] netlink: 'syz.1.4105': attribute type 1 has an invalid length. [ 811.726647][T23727] ovs-s!: entered promiscuous mode [ 811.939888][T23739] 8021q: VLANs not supported on syzkaller0 [ 811.965957][T23561] [ 811.968352][T23561] ====================================================== [ 811.975415][T23561] WARNING: possible circular locking dependency detected [ 811.982456][T23561] syzkaller #0 Not tainted [ 811.986908][T23561] ------------------------------------------------------ SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 811.993956][T23561] syz-executor/23561 is trying to acquire lock: [ 812.000391][T23561] ffffffff8ee904e0 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x61/0x600 [ 812.009745][T23561] [ 812.009745][T23561] but task is already holding lock: [ 812.017320][T23561] ffffffff8f803500 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 812.026270][T23561] [ 812.026270][T23561] which lock already depends on the new lock. [ 812.026270][T23561] [ 812.036692][T23561] [ 812.036692][T23561] the existing dependency chain (in reverse order) is: [ 812.045738][T23561] [ 812.045738][T23561] -> #8 (gdp_mutex){+.+.}-{4:4}: [ 812.052899][T23561] __mutex_lock+0x19d/0x1550 [ 812.058048][T23561] get_device_parent+0x16f/0x3a0 [ 812.063630][T23561] device_add+0x2d4/0xb80 [ 812.068505][T23561] device_create+0x269/0x300 [ 812.073692][T23561] msr_device_create+0x33/0x50 [ 812.079097][T23561] cpuhp_invoke_callback+0x434/0x810 [ 812.085133][T23561] cpuhp_thread_fun+0x362/0x780 [ 812.091077][T23561] smpboot_thread_fn+0x565/0xa70 [ 812.096606][T23561] kthread+0x38b/0x480 [ 812.101220][T23561] ret_from_fork+0x514/0xb70 [ 812.106460][T23561] ret_from_fork_asm+0x1a/0x30 [ 812.111885][T23561] [ 812.111885][T23561] -> #7 (cpuhp_state-up){+.+.}-{0:0}: [ 812.119494][T23561] cpuhp_thread_fun+0x127/0x780 [ 812.125018][T23561] smpboot_thread_fn+0x565/0xa70 [ 812.130664][T23561] kthread+0x38b/0x480 [ 812.135347][T23561] ret_from_fork+0x514/0xb70 [ 812.140594][T23561] ret_from_fork_asm+0x1a/0x30 [ 812.145956][T23561] [ 812.145956][T23561] -> #6 (cpu_hotplug_lock){++++}-{0:0}: [ 812.153761][T23561] cpus_read_lock+0x42/0x160 [ 812.159199][T23561] static_key_slow_inc+0x12/0x30 [ 812.164865][T23561] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 812.171389][T23561] nbd_genl_foreach_sock+0x265/0x450 [ 812.177493][T23561] nbd_genl_reconfigure+0xbbb/0x1040 [ 812.183436][T23561] genl_family_rcv_msg_doit+0x233/0x340 [ 812.189558][T23561] genl_rcv_msg+0x614/0x7a0 [ 812.194630][T23561] netlink_rcv_skb+0x226/0x4a0 [ 812.199962][T23561] genl_rcv+0x28/0x40 [ 812.204766][T23561] netlink_unicast+0x7bd/0x940 [ 812.210104][T23561] netlink_sendmsg+0x813/0xb40 [ 812.215517][T23561] sock_sendmsg_nosec+0x14e/0x190 [ 812.221119][T23561] ____sys_sendmsg+0x54e/0x850 [ 812.226473][T23561] ___sys_sendmsg+0x2a5/0x360 [ 812.231893][T23561] __x64_sys_sendmsg+0x1b1/0x290 [ 812.237505][T23561] do_syscall_64+0x166/0x520 [ 812.243088][T23561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.250023][T23561] [ 812.250023][T23561] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 812.257861][T23561] __mutex_lock+0x19d/0x1550 [ 812.263080][T23561] nbd_queue_rq+0x373/0xff0 [ 812.268303][T23561] blk_mq_dispatch_rq_list+0x499/0x1990 [ 812.274464][T23561] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 812.281355][T23561] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 812.287873][T23561] blk_mq_run_work_fn+0x16c/0x300 [ 812.293519][T23561] process_scheduled_works+0xc3d/0x1630 [ 812.299689][T23561] worker_thread+0xa47/0xfb0 [ 812.304819][T23561] kthread+0x38b/0x480 [ 812.309596][T23561] ret_from_fork+0x514/0xb70 [ 812.314795][T23561] ret_from_fork_asm+0x1a/0x30 [ 812.320088][T23561] [ 812.320088][T23561] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 812.327584][T23561] __mutex_lock+0x19d/0x1550 [ 812.332846][T23561] nbd_queue_rq+0xc1/0xff0 [ 812.337867][T23561] blk_mq_dispatch_rq_list+0x499/0x1990 [ 812.343958][T23561] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 812.350815][T23561] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 812.357505][T23561] blk_mq_run_work_fn+0x16c/0x300 [ 812.363089][T23561] process_scheduled_works+0xc3d/0x1630 [ 812.369164][T23561] worker_thread+0xa47/0xfb0 [ 812.374279][T23561] kthread+0x38b/0x480 [ 812.378871][T23561] ret_from_fork+0x514/0xb70 [ 812.383998][T23561] ret_from_fork_asm+0x1a/0x30 [ 812.389312][T23561] [ 812.389312][T23561] -> #3 (set->srcu){.+.+}-{0:0}: [ 812.396540][T23561] __synchronize_srcu+0xc9/0x2f0 [ 812.402029][T23561] elevator_switch+0x1e8/0x7b0 [ 812.407544][T23561] elevator_change+0x2fa/0x480 [ 812.412835][T23561] elevator_set_default+0x375/0x440 [ 812.418827][T23561] blk_register_queue+0x3f3/0x4e0 [ 812.424570][T23561] __add_disk+0x6b8/0xdb0 [ 812.429482][T23561] add_disk_fwnode+0x100/0x3a0 [ 812.434778][T23561] nbd_dev_add+0x733/0xb60 [ 812.439735][T23561] nbd_init+0x168/0x1f0 [ 812.444577][T23561] do_one_initcall+0x250/0x870 [ 812.450058][T23561] do_initcall_level+0x10a/0x1a0 [ 812.455611][T23561] do_initcalls+0x59/0xa0 [ 812.460525][T23561] kernel_init_freeable+0x29d/0x3e0 [ 812.466275][T23561] kernel_init+0x22/0x1d0 [ 812.471599][T23561] ret_from_fork+0x514/0xb70 [ 812.476717][T23561] ret_from_fork_asm+0x1a/0x30 [ 812.482033][T23561] [ 812.482033][T23561] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 812.489957][T23561] __mutex_lock+0x19d/0x1550 [ 812.495185][T23561] elevator_change+0x1af/0x480 [ 812.500519][T23561] elevator_set_none+0xb5/0x140 [ 812.505905][T23561] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 812.512323][T23561] nbd_start_device+0x189/0xb30 [ 812.517711][T23561] nbd_genl_connect+0x167d/0x1cd0 [ 812.523312][T23561] genl_family_rcv_msg_doit+0x233/0x340 [ 812.529580][T23561] genl_rcv_msg+0x614/0x7a0 [ 812.534615][T23561] netlink_rcv_skb+0x226/0x4a0 [ 812.539911][T23561] genl_rcv+0x28/0x40 [ 812.544513][T23561] netlink_unicast+0x7bd/0x940 [ 812.549970][T23561] netlink_sendmsg+0x813/0xb40 [ 812.555453][T23561] sock_sendmsg_nosec+0x14e/0x190 [ 812.561118][T23561] ____sys_sendmsg+0x54e/0x850 [ 812.566431][T23561] ___sys_sendmsg+0x2a5/0x360 [ 812.571731][T23561] __x64_sys_sendmsg+0x1b1/0x290 [ 812.577308][T23561] do_syscall_64+0x166/0x520 [ 812.582542][T23561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.588984][T23561] [ 812.588984][T23561] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 812.597963][T23561] blk_alloc_queue+0x544/0x690 [ 812.603398][T23561] __blk_mq_alloc_disk+0x194/0x390 [ 812.609068][T23561] nbd_dev_add+0x494/0xb60 [ 812.614035][T23561] nbd_init+0x168/0x1f0 [ 812.618809][T23561] do_one_initcall+0x250/0x870 [ 812.624151][T23561] do_initcall_level+0x10a/0x1a0 [ 812.629729][T23561] do_initcalls+0x59/0xa0 [ 812.634592][T23561] kernel_init_freeable+0x29d/0x3e0 [ 812.641105][T23561] kernel_init+0x22/0x1d0 [ 812.645993][T23561] ret_from_fork+0x514/0xb70 [ 812.651142][T23561] ret_from_fork_asm+0x1a/0x30 [ 812.656442][T23561] [ 812.656442][T23561] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 812.663662][T23561] __lock_acquire+0x164c/0x2de0 [ 812.669038][T23561] lock_acquire+0x115/0x350 [ 812.674071][T23561] fs_reclaim_acquire+0x71/0x100 [ 812.679535][T23561] __kmalloc_cache_noprof+0x61/0x600 [ 812.685344][T23561] get_device_parent+0x255/0x3a0 [ 812.690821][T23561] device_add+0x2d4/0xb80 [ 812.695703][T23561] netdev_register_kobject+0x197/0x350 [ 812.701698][T23561] register_netdevice+0x1433/0x1eb0 [ 812.707466][T23561] nsim_create+0xb25/0x1040 [ 812.712591][T23561] __nsim_dev_port_add+0x7f8/0xcd0 [ 812.718252][T23561] nsim_dev_port_add_all+0x37/0xf0 [ 812.723971][T23561] nsim_drv_probe+0x8b0/0xbb0 [ 812.729169][T23561] really_probe+0x254/0xae0 [ 812.734326][T23561] __driver_probe_device+0x1e8/0x360 [ 812.740138][T23561] driver_probe_device+0x4f/0x240 [ 812.745692][T23561] __device_attach_driver+0x270/0x410 [ 812.751587][T23561] bus_for_each_drv+0x258/0x2f0 [ 812.756968][T23561] __device_attach+0x2c4/0x450 [ 812.762256][T23561] device_initial_probe+0xa1/0xd0 [ 812.767804][T23561] bus_probe_device+0x12a/0x220 [ 812.773186][T23561] device_add+0x7d7/0xb80 [ 812.778041][T23561] new_device_store+0x3a4/0x6c0 [ 812.783471][T23561] kernfs_fop_write_iter+0x3a4/0x540 [ 812.789302][T23561] vfs_write+0x612/0xba0 [ 812.794075][T23561] ksys_write+0x150/0x270 [ 812.798935][T23561] do_syscall_64+0x166/0x520 [ 812.804056][T23561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.810645][T23561] [ 812.810645][T23561] other info that might help us debug this: [ 812.810645][T23561] [ 812.820889][T23561] Chain exists of: [ 812.820889][T23561] fs_reclaim --> cpuhp_state-up --> gdp_mutex [ 812.820889][T23561] [ 812.832990][T23561] Possible unsafe locking scenario: [ 812.832990][T23561] [ 812.840438][T23561] CPU0 CPU1 [ 812.845803][T23561] ---- ---- [ 812.851166][T23561] lock(gdp_mutex); [ 812.855066][T23561] lock(cpuhp_state-up); [ 812.862098][T23561] lock(gdp_mutex); [ 812.868520][T23561] lock(fs_reclaim); [ 812.872518][T23561] [ 812.872518][T23561] *** DEADLOCK *** [ 812.872518][T23561] [ 812.880658][T23561] locks held by syz-executor/23561: 8, last CPU#1: [ 812.887279][T23561] #0: ffff888035196460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 812.896258][T23561] #1: ffff88807a876480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 812.906072][T23561] #2: ffff88802952e968 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 812.916093][T23561] #3: ffffffff8facbd20 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x6c0 [ 812.926451][T23561] #4: ffff888034514128 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 812.935763][T23561] #5: ffff8880532c4258 (&devlink->lock_key#11){+.+.}-{4:4}, at: nsim_drv_probe+0xfb/0xbb0 [ 812.945962][T23561] #6: ffffffff90254960 (rtnl_mutex){+.+.}-{4:4}, at: nsim_create+0x7cd/0x1040 [ 812.954933][T23561] #7: ffffffff8f803500 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 812.964277][T23561] [ 812.964277][T23561] stack backtrace: [ 812.970171][T23561] CPU: 1 UID: 0 PID: 23561 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 812.979816][T23561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 812.990052][T23561] Call Trace: [ 812.993426][T23561] [ 812.996361][T23561] dump_stack_lvl+0xe8/0x150 [ 813.000966][T23561] print_circular_bug+0x2e2/0x300 [ 813.006114][T23561] check_noncircular+0x12f/0x150 [ 813.011060][T23561] __lock_acquire+0x164c/0x2de0 [ 813.015916][T23561] ? lockdep_unlock+0x5c/0xd0 [ 813.020605][T23561] ? __lock_acquire+0x1511/0x2de0 [ 813.025636][T23561] lock_acquire+0x115/0x350 [ 813.030150][T23561] ? __kmalloc_cache_noprof+0x61/0x600 [ 813.035647][T23561] fs_reclaim_acquire+0x71/0x100 [ 813.040594][T23561] ? __kmalloc_cache_noprof+0x61/0x600 [ 813.046063][T23561] __kmalloc_cache_noprof+0x61/0x600 [ 813.051359][T23561] ? get_device_parent+0x255/0x3a0 [ 813.056474][T23561] ? get_device_parent+0x255/0x3a0 [ 813.061694][T23561] get_device_parent+0x255/0x3a0 [ 813.066639][T23561] device_add+0x2d4/0xb80 [ 813.071060][T23561] netdev_register_kobject+0x197/0x350 [ 813.076524][T23561] register_netdevice+0x1433/0x1eb0 [ 813.081739][T23561] ? __pfx_register_netdevice+0x10/0x10 [ 813.087465][T23561] ? dput+0x39/0x60 [ 813.091300][T23561] ? __debugfs_create_file+0x34f/0x400 [ 813.096873][T23561] ? debugfs_create_file_full+0x3f/0x60 [ 813.102440][T23561] nsim_create+0xb25/0x1040 [ 813.106957][T23561] __nsim_dev_port_add+0x7f8/0xcd0 [ 813.112115][T23561] ? do_raw_spin_unlock+0xf5/0x200 [ 813.117272][T23561] ? __pfx___nsim_dev_port_add+0x10/0x10 [ 813.122917][T23561] ? __mod_timer+0xb53/0xed0 [ 813.127528][T23561] ? queue_delayed_work_on+0x171/0x1e0 [ 813.132997][T23561] nsim_dev_port_add_all+0x37/0xf0 [ 813.138119][T23561] nsim_drv_probe+0x8b0/0xbb0 [ 813.142805][T23561] ? __pfx_nsim_drv_probe+0x10/0x10 [ 813.148018][T23561] ? kernfs_put+0x7b9/0x820 [ 813.152538][T23561] ? sysfs_do_create_link_sd+0xe0/0x110 [ 813.158199][T23561] ? driver_sysfs_add+0x1fe/0x210 [ 813.163231][T23561] ? __pfx_nsim_bus_probe+0x10/0x10 [ 813.168461][T23561] really_probe+0x254/0xae0 [ 813.173060][T23561] __driver_probe_device+0x1e8/0x360 [ 813.178353][T23561] driver_probe_device+0x4f/0x240 [ 813.183386][T23561] __device_attach_driver+0x270/0x410 [ 813.188792][T23561] bus_for_each_drv+0x258/0x2f0 [ 813.193669][T23561] ? __pfx___device_attach_driver+0x10/0x10 [ 813.199567][T23561] ? __pfx_bus_for_each_drv+0x10/0x10 [ 813.204962][T23561] __device_attach+0x2c4/0x450 [ 813.209826][T23561] ? __pfx___device_attach+0x10/0x10 [ 813.215116][T23561] ? do_raw_spin_unlock+0xf5/0x200 [ 813.220256][T23561] ? _raw_spin_unlock+0x28/0x50 [ 813.225219][T23561] device_initial_probe+0xa1/0xd0 [ 813.230251][T23561] bus_probe_device+0x12a/0x220 [ 813.235293][T23561] device_add+0x7d7/0xb80 [ 813.239672][T23561] new_device_store+0x3a4/0x6c0 [ 813.244547][T23561] ? __pfx_new_device_store+0x10/0x10 [ 813.250114][T23561] ? sysfs_file_kobj+0x1a/0x230 [ 813.254976][T23561] ? sysfs_file_kobj+0x1e4/0x230 [ 813.259922][T23561] ? sysfs_kf_write+0x166/0x260 [ 813.264824][T23561] ? __pfx_sysfs_kf_write+0x10/0x10 [ 813.270055][T23561] kernfs_fop_write_iter+0x3a4/0x540 [ 813.275360][T23561] vfs_write+0x612/0xba0 [ 813.279743][T23561] ? __pfx_vfs_write+0x10/0x10 [ 813.284548][T23561] ? do_sys_openat2+0x14e/0x200 [ 813.289511][T23561] ? kmem_cache_free+0x182/0x650 [ 813.294504][T23561] ksys_write+0x150/0x270 [ 813.298863][T23561] ? __pfx_ksys_write+0x10/0x10 [ 813.303732][T23561] do_syscall_64+0x166/0x520 [ 813.308356][T23561] ? trace_irq_disable+0x3b/0x140 [ 813.313390][T23561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.319478][T23561] ? clear_bhb_loop+0x70/0xc0 [ 813.324196][T23561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.330133][T23561] RIP: 0033:0x7f5bc5b5e98e [ 813.334564][T23561] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 813.354360][T23561] RSP: 002b:00007ffe7bfe14a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 813.362808][T23561] RAX: ffffffffffffffda RBX: 000055556d57d500 RCX: 00007f5bc5b5e98e [ 813.370807][T23561] RDX: 0000000000000003 RSI: 00007ffe7bfe1530 RDI: 0000000000000005 [ 813.378808][T23561] RBP: 00007f5bc5c35912 R08: 0000000000000000 R09: 0000000000000000 [ 813.386844][T23561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 813.394859][T23561] R13: 00007ffe7bfe1530 R14: 00007f5bc6954620 R15: 0000000000000003 [ 813.402847][T23561] [ 813.913877][T23732] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 815.070636][T20058] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.107618][T20058] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.158100][T20058] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.210208][T20058] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.321267][T20058] veth0_virt_wifi: left allmulticast mode [ 815.321296][T20058] veth0_virt_wifi: left promiscuous mode [ 815.321462][T20058] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 815.430620][T20058] ip6gretap0 (unregistering): left allmulticast mode [ 815.452462][T20058] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 815.452491][T20058] ip6gretap1 (unregistering): left allmulticast mode [ 815.689083][T20058] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 815.692316][T20058] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 815.693373][T20058] bond0 (unregistering): Released all slaves [ 815.707907][T20058] bond1 (unregistering): Released all slaves [ 815.716423][T20058] bond2 (unregistering): Released all slaves [ 815.742370][T20058] bond3 (unregistering): Released all slaves [ 815.757790][T20058] bond4 (unregistering): Released all slaves [ 815.870563][T20058] : left promiscuous mode [ 815.889884][T20058] tipc: Left network mode [ 816.130949][T20058] hsr_slave_0: left promiscuous mode [ 816.131420][T20058] hsr_slave_1: left promiscuous mode [ 816.131989][T20058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 816.132005][T20058] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 816.170623][T20058] veth1_macvtap: left promiscuous mode [ 816.170654][T20058] veth0_macvtap: left promiscuous mode [ 816.170747][T20058] veth1_vlan: left promiscuous mode [ 816.170789][T20058] veth0_vlan: left promiscuous mode [ 816.629823][T20058] team0 (unregistering): Port device team_slave_1 removed [ 816.643198][T20058] team0 (unregistering): Port device team_slave_0 removed [ 816.791753][T20058] team0 (unregistering): Port device dummy0 removed [ 816.831090][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 817.393847][T20058] IPVS: stop unused estimator thread 0... [ 817.574485][ T5280] 8021q: adding VLAN 0 to HW filter on device eth4 [ 817.742693][T20058] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 817.742731][T20058] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.802172][T20058] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 817.802208][T20058] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.860816][T20058] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 817.860854][T20058] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.930233][T20058] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 817.930269][T20058] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.083023][T20058] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.143512][T20058] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.188643][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 818.209269][T20058] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.278098][T20058] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.419042][T20058] bridge_slave_1: left allmulticast mode [ 818.419084][T20058] bridge_slave_1: left promiscuous mode [ 818.419256][T20058] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.423963][T20058] bridge_slave_0: left allmulticast mode [ 818.423991][T20058] bridge_slave_0: left promiscuous mode [ 818.424150][T20058] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.474947][T20058] tipc: Resetting bearer [ 818.707736][T20058] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 818.710216][T20058] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 818.711244][T20058] bond0 (unregistering): Released all slaves [ 818.899540][T20058] tipc: Disabling bearer [ 818.902172][T20058] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 818.954494][T20058] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 818.964093][T20058] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 818.967540][T20058] .` (unregistering): Released all slaves [ 818.970370][T20058] bond0 (unregistering): Released all slaves [ 818.985875][T20058] bond1 (unregistering): Released all slaves [ 818.991651][T20058] bond2 (unregistering): Released all slaves [ 819.063623][T20058] bond3 (unregistering): (slave geneve2): Releasing active interface [ 819.082462][T20058] bond1 (unregistering): (slave macvlan2): Releasing active interface [ 819.087963][T20058] bond0 (unregistering): Released all slaves [ 819.091222][T20058] bond1 (unregistering): Released all slaves [ 819.110453][T20058] bond2 (unregistering): Released all slaves [ 819.123278][T20058] bond3 (unregistering): Released all slaves [ 819.131720][T20058] bond4 (unregistering): (slave veth3): Releasing active interface [ 819.133298][T20058] bond4 (unregistering): (slave batadv1): Releasing active interface [ 819.133322][T20058] batadv1: left promiscuous mode [ 819.134640][T20058] bond4 (unregistering): Released all slaves [ 819.144635][T20058] bond5 (unregistering): Released all slaves [ 819.150528][T20058] bond6 (unregistering): Released all slaves [ 819.161119][ T5280] 8021q: adding VLAN 0 to HW filter on device eth5 [ 819.183853][ C1] openvswitch: cpu_id mismatch with handler threads [ 819.307550][T20058] ovs-s!: left promiscuous mode [ 819.414297][T20058] tipc: Left network mode [ 819.417042][T20058] tipc: Left network mode [ 819.911279][ T5280] 8021q: adding VLAN 0 to HW filter on device eth6 [ 820.410633][T20058] hsr_slave_0: left promiscuous mode [ 820.412210][T20058] hsr_slave_1: left promiscuous mode [ 820.412737][T20058] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 820.413165][T20058] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 820.447035][T20058] hsr_slave_0: left promiscuous mode [ 820.447462][T20058] hsr_slave_1: left promiscuous mode [ 820.447954][T20058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 820.447970][T20058] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 820.448473][T20058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 820.448488][T20058] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 820.450635][T20058] hsr_slave_0: left promiscuous mode [ 820.451132][T20058] hsr_slave_1: left promiscuous mode [ 820.518401][T20058] veth0_macvtap: left promiscuous mode [ 820.518539][T20058] veth1_vlan: left promiscuous mode [ 820.518585][T20058] veth0_vlan: left promiscuous mode [ 820.520623][T20058] veth0_macvtap: left promiscuous mode [ 820.520719][T20058] veth1_vlan: left promiscuous mode [ 820.520764][T20058] veth0_vlan: left promiscuous mode [ 820.730202][T20058] team0 (unregistering): Port device team_slave_1 removed [ 820.757816][T20058] team0 (unregistering): Port device team_slave_0 removed [ 820.988003][T20058] team0 (unregistering): Port device team_slave_1 removed [ 820.993828][T20058] team0 (unregistering): Port device team_slave_0 removed [ 821.294871][T20058] smc: removing net device lo with user defined pnetid SYZ2 [ 821.310613][ T5280] 8021q: adding VLAN 0 to HW filter on device eth7 [ 821.708936][ T5280] 8021q: adding VLAN 0 to HW filter on device eth8