last executing test programs: 2m17.924259853s ago: executing program 2 (id=3887): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x709d2d, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x2, 0x4a}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c804}, 0x8482) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6c}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xd, '\x00', 0x0, @sk_skb}, 0x48) 2m17.698907331s ago: executing program 2 (id=3890): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000069}, @in6={0xa, 0x4e21, 0xaf8d, @local, 0xc}], 0x38) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x32}}], 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r4, 0x25, 0x0, @void}, 0x10) r5 = socket(0x2b, 0x1, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0xc, 0x3, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) listen(r5, 0x0) accept4$nfc_llcp(r5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x91d5c78542c436e8, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff85000000ae000000b7080000300000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r10, 0x84, 0x12, &(0x7f0000000140), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x100}}}}}}}, 0x0) 2m16.708270897s ago: executing program 2 (id=3899): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xca, 0x9}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3}, {}, {0x4, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x24040084) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) 2m16.476108363s ago: executing program 2 (id=3902): syz_emit_ethernet(0x3a, &(0x7f0000000180)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x6, 0x9}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000480)="6204270018ff00000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a5d0292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000840)="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", 0x1cb}, {&(0x7f0000000a40)="0a985d7879f1bb", 0xfcb9}], 0x3}, 0x8045) 2m15.907545287s ago: executing program 2 (id=3907): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="b860eb49c54512c27512526da850d95309732bf316ed144e06ba56f95b910bd4372f8f2f4977dca084f5541d42fa424f2c4b4082c61d6e4279a8a3dfbd132a5376e5fa4e273756284fbc01bc8e8b0f0d51f965ea018db60ef203b323b3"], 0x38}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)="91", 0x1}], 0x1}}], 0x1, 0x40000050) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x50) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYRES16], 0x40}}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x8cc5}, 0xc00c000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 2m15.786157451s ago: executing program 2 (id=3911): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0xa4, &(0x7f0000000480)=""/164, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2b}, 0x80) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000002000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000003c0)={r4, r3}, 0xc) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002d80)={0x6, 0xf, &(0x7f0000002d00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe3e, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0xfffffffc}, 0x10}, 0x90) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000180)={0x1d, r7, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x20, r9, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x8080) (async) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 64) sendmmsg$sock(r0, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000004fc0)="14733f9daa4e98c0c2", 0x9}], 0x1}}], 0x1, 0x0) (rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r11 = openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.dequeue\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x50, r11, 0x80000000) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) recvmmsg$unix(r11, &(0x7f00000005c0)=[{{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/124, 0x7c}, {&(0x7f0000000280)=""/18, 0x12}, {&(0x7f0000000300)}], 0x3, &(0x7f0000000400)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/116, 0x74}], 0x1, &(0x7f0000000500)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb0}}], 0x2, 0x40, &(0x7f0000000640)) (async, rerun: 64) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r13 = socket(0x23, 0x80805, 0x0) listen(r13, 0x0) (async) accept4$tipc(r13, 0x0, 0x0, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0) (async, rerun: 32) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1m47.684434962s ago: executing program 32 (id=3911): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0xa4, &(0x7f0000000480)=""/164, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2b}, 0x80) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000002000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000003c0)={r4, r3}, 0xc) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002d80)={0x6, 0xf, &(0x7f0000002d00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe3e, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0xfffffffc}, 0x10}, 0x90) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000180)={0x1d, r7, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x20, r9, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x8080) (async) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 64) sendmmsg$sock(r0, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000004fc0)="14733f9daa4e98c0c2", 0x9}], 0x1}}], 0x1, 0x0) (rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r11 = openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.dequeue\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x50, r11, 0x80000000) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) recvmmsg$unix(r11, &(0x7f00000005c0)=[{{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/124, 0x7c}, {&(0x7f0000000280)=""/18, 0x12}, {&(0x7f0000000300)}], 0x3, &(0x7f0000000400)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/116, 0x74}], 0x1, &(0x7f0000000500)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb0}}], 0x2, 0x40, &(0x7f0000000640)) (async, rerun: 64) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r13 = socket(0x23, 0x80805, 0x0) listen(r13, 0x0) (async) accept4$tipc(r13, 0x0, 0x0, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0) (async, rerun: 32) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3.764874716s ago: executing program 4 (id=4678): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRESDEC=r0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) 3.487342875s ago: executing program 4 (id=4682): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r2, 0x215eb000) r3 = socket(0x14, 0x2, 0x4) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) close(r1) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xe, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001300)=@delchain={0x92c, 0x65, 0x20, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffe0, 0xa}, {0x7, 0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8d0, 0x2, [@TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}, @TCA_CGROUP_POLICE={0x4c, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x21a, 0xffffffffcffffffd, 0x1, 0x4, 0x0, {0x1, 0x0, 0x1bef, 0xfff, 0x400, 0x1}, {0x3, 0x0, 0x1ff, 0x1ff, 0x2}, 0x4, 0x4, 0x80000000}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}]}, @TCA_CGROUP_POLICE={0x820, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3ff, 0x6, 0x3, 0x7, 0x2, 0x9, 0x1, 0xd81d, 0x1ff, 0x1ee, 0x1, 0x9c1, 0x58, 0x80000001, 0x10001, 0x7, 0x6, 0x2, 0x5, 0x1000, 0x7fffffff, 0x1, 0x123, 0x3, 0xfffff35b, 0x3, 0x80000000, 0x1, 0x8, 0x400, 0x77d, 0x2, 0x1, 0x1, 0x7, 0x8, 0x7, 0x8, 0x1, 0x5b, 0xc, 0xffff, 0x800, 0xf, 0x0, 0x8, 0x7, 0xeb46000, 0xc00, 0x7, 0x4, 0x6, 0x7fffffff, 0x582a, 0x8000, 0x13, 0x5, 0xd9, 0x3, 0x2, 0x9, 0x2, 0x9, 0x2, 0x374bef07, 0x7, 0x3, 0x6, 0x8e3e, 0x7, 0x8, 0x5, 0x1200000, 0xffff, 0x0, 0x1, 0x2, 0x80, 0x400, 0x9, 0x9, 0xff, 0xf77, 0x3, 0xb1, 0x2, 0x9, 0xa, 0x8, 0x6, 0x0, 0x7, 0x0, 0x9, 0x80000001, 0x2, 0x2, 0x4, 0x5, 0x6, 0x1, 0x0, 0xf57, 0x6ee7, 0x8, 0x8001, 0x5, 0xd, 0x8, 0x0, 0x8a8, 0x4328, 0x5, 0x6, 0x1, 0x2, 0x9b, 0x6, 0x1000, 0x401, 0x8, 0xb, 0x1ff, 0x4, 0x80000001, 0x8c3c, 0x4, 0x400, 0x7, 0x3, 0x3, 0x6000, 0x1, 0x80000001, 0xaea, 0xff, 0x9, 0x5, 0x5, 0x7, 0xe, 0x8, 0x8000, 0x400, 0x9, 0xf, 0xe, 0x28, 0xf, 0x4, 0x0, 0x8, 0x600000, 0x9, 0x7ff, 0x6, 0xfffffff7, 0x5, 0x3, 0x690, 0x5, 0x8563, 0x5, 0x111, 0x5, 0x8d538000, 0x66d45298, 0x8, 0x3, 0x1, 0x1189, 0x2, 0x8, 0x4252, 0xa36c, 0x0, 0x0, 0x8, 0x393, 0x7, 0x2, 0x80000000, 0x2c76, 0x5, 0x6, 0x9, 0x3ff, 0x8, 0x0, 0x4, 0x9, 0x5305, 0x1000, 0x6, 0xd8e, 0x4, 0x8, 0x80000000, 0x0, 0x7, 0x7, 0x4, 0x81, 0x1000, 0x2, 0x7fff, 0x9, 0x1, 0x49d, 0x5290000, 0xc, 0x3, 0x9, 0x9, 0x10001, 0xfcdf, 0x9, 0xfffffff9, 0x3, 0x6, 0x7, 0x7ff, 0xfff, 0x9, 0xfffffffe, 0x5, 0xfffffff9, 0x3, 0xffffffff, 0x6, 0x80000000, 0x7, 0x0, 0x8, 0x80000001, 0x2, 0x7, 0x8, 0xfffffffd, 0x2, 0x200, 0x5, 0x400, 0x0, 0x8, 0x3, 0x2, 0x3, 0xae2, 0x4, 0x457, 0x9, 0x0, 0x3, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80000001}, @TCA_POLICE_RESULT={0x8, 0x5, 0xf}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xfffffff7, 0x7, 0xa, 0x8001, 0x2, 0x0, 0x501995a2, 0x6, 0x8, 0x9ba9, 0x6, 0x7, 0x0, 0x8, 0x1, 0xc, 0x3, 0x9, 0x334, 0x6, 0x3, 0xfff, 0x5, 0x9, 0x5, 0x3, 0x7fffffff, 0x6, 0x200, 0x5, 0x7, 0x7, 0x7fffffff, 0xfffffff7, 0x0, 0x7f, 0x0, 0x1000, 0x388, 0x8, 0x5, 0x8, 0x2, 0x387f3c56, 0x3, 0xfffffffa, 0x2f6, 0x8, 0xe884, 0x8001, 0x1, 0x95, 0x2, 0x5, 0xd, 0x7, 0x2, 0x51, 0x6, 0x800, 0x7, 0x5, 0x8, 0x80000001, 0x7f, 0x7, 0x3, 0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7, 0x3, 0x81, 0xefc8, 0x9, 0x80, 0x1, 0xfffff363, 0x8, 0xb4, 0x9, 0x5, 0x69, 0x8, 0x5, 0xf40, 0x8, 0xffffffff, 0x80, 0x7, 0x729, 0x1, 0x200, 0x5, 0xfff, 0xf, 0xec32, 0x5, 0x7, 0xbe, 0xa, 0x8, 0x8, 0x40, 0x7, 0x10000, 0x8, 0x66, 0x1d47, 0x6, 0x2, 0x1, 0x9, 0x3ff, 0xd13f, 0x2, 0xfffffff7, 0x2, 0x4, 0x537, 0x60, 0x7621, 0x6, 0x1, 0xd, 0x6, 0x3, 0xa, 0x9, 0xffffff80, 0x0, 0x3, 0x6, 0x4, 0x7, 0x7, 0x5, 0xc, 0xffffc23f, 0x2, 0x5, 0x8, 0x5, 0xfffff800, 0xb, 0x1000, 0x1, 0x4, 0x8, 0x4, 0x1, 0x8, 0x2, 0xffffffff, 0xfffffff7, 0x7f, 0x9, 0xfff, 0x9, 0x3, 0x3, 0x8, 0x40, 0x1, 0x5, 0x8001, 0x23b, 0x6, 0x0, 0xadcf, 0xfffffff7, 0xffffffff, 0x4, 0x6, 0x5, 0xfffff6a8, 0x80, 0x1, 0x0, 0x7, 0x401, 0x4, 0x0, 0x9, 0x9, 0x9, 0x9, 0x7, 0x8, 0x9, 0xffff0000, 0x3, 0x2, 0x6, 0xc8, 0x5, 0xf9c1, 0x8, 0x9, 0x100, 0xfb, 0x5, 0x1, 0x0, 0x7, 0x7fff, 0x1, 0x9, 0x7fff, 0x8, 0x40000, 0xffffffff, 0x3, 0x85, 0x1, 0x3ff, 0x1, 0x2, 0x6, 0xfffffff7, 0x8, 0x3, 0x3ff, 0xe165, 0x6, 0x37, 0x2d3d0fd0, 0x4, 0x6, 0x7ec9d5bc, 0x7, 0x6, 0x8, 0x4, 0x6, 0x9, 0x800, 0x7, 0x1, 0x6, 0x7, 0xfff, 0x3, 0x2, 0x0, 0x9, 0x5, 0x8, 0x3, 0xfffff9bf, 0x3, 0x3]}]}, @TCA_CGROUP_ACT={0x54, 0x1, [@m_mpls={0x50, 0x19, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0xda}]}, {0x1b, 0x6, "9eede33248a8a221fb8dff044b7b1945e1959871394b50"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xf, 0xc}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0xf}}]}}]}, 0x92c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) socket$kcm(0x11, 0x4, 0x0) 2.833022s ago: executing program 1 (id=4689): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$unix(0x1, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="660a000000000000611161000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x35, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) socket$inet_tcp(0x2, 0x1, 0x0) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r7, &(0x7f00000001c0)='l', 0x1, 0x24008015, 0x0, 0x0) (async) sendto$inet(r7, &(0x7f00000001c0)='l', 0x1, 0x24008015, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) (async) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r8, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="34020000", @ANYRES16=r9, @ANYBLOB="000428bd7000fddbdf250a0000000800040008000000080004000500000008000200000000000800040070850000"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4890) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f3317000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4004010) socket$packet(0x11, 0x3, 0x300) (async) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f0000000140)="05032200d1fd1400000047dd0319", 0xe, 0x0, &(0x7f0000000240)={0x11, 0x86dd, r6, 0x1, 0x3, 0x6, @multicast}, 0x14) 2.611759769s ago: executing program 5 (id=4692): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3}]}}}]}, 0x50}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x800, 0xfffffff8) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) accept(r2, &(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@ipmr_newroute={0x1c, 0x18, 0x1, 0x70bd2d, 0x25dfdbff, {0x80, 0x14, 0x20, 0x7, 0xfe, 0x1, 0xfe, 0x6, 0x100}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r4, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) 2.316556011s ago: executing program 5 (id=4694): r0 = socket$kcm(0x21, 0x2, 0xa) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000400)={{r0, &(0x7f00000002c0)='%\x00', 0x66d80, &(0x7f0000000300)={@_ha_fsid={[0x6]}, {0xb, 0x0, 0x6, 0x6}}, 0xd5, &(0x7f0000000340), &(0x7f0000000380)=0x7}, {[0x8, 0xff000000, 0x0, 0x4]}, 0x3, 0x30, &(0x7f00000003c0)=""/48}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000003340)={0x18, 0x2, {0x2, @multicast2}}, 0x1e) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r1) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x6c, r3, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000680)={0x18, 0x2, {0x2, @loopback}}, 0x1e) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={&(0x7f0000000000)="617b9ddeb442fb92152543e1b467c9dbe06189ef63d2135ad82eea5e10db7ea11473a00dfd3d0aa0972af8f5c67e0db58978f4eb6f01234525f2048ae91fbbf5eb681d882ff5ae6d20d7ef782c87dfc5bbb4d381380201e7e9e5cfbd4a4aad709076338d8f698ca88924aaab316dff6500ac7a", &(0x7f0000000100)=""/100, &(0x7f0000000180)="5f948fadc50fcdcfae95443cfe7d1d5cf3203c292fbcc6680a2b6a902c4afb13236a0afda74872287e0d51", &(0x7f00000001c0)="0dd4154f820690c3d93eb02d7d70c5bd632ec0311df9fc9cdbe365b0a580733501e2d34bf2de16798b892e92ef92312351187a738cfb029146c298e72e1083c88e6580ca5fe89a9d65cf9cbb26b09269659b21e274df2c7eec53b47bcc446fdeb36602dcafa85ab12fb3074f84c205e6cf1cb04c6551bd84b893503a93b5e46b66b1df34d54041e481381650509dfc92bf2500640b4462d594d064ae10af653ed93f8fd7d16e6566fb947d194d3531b2b26766b85f80fd2e42963fd8d2ffcff782220ba2df7971975eacc26255659aa2e0b8c156598e007a79917fd9eb86c6c0f8f81fbe07ebc2", 0x1, r1, 0x4}, 0x38) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r5, 0x4010744d, &(0x7f0000000080)=0x1fffff) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000100100"], 0x30}, 0x0) socket$kcm(0x21, 0x2, 0xa) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000400)={{r0, &(0x7f00000002c0)='%\x00', 0x66d80, &(0x7f0000000300)={@_ha_fsid={[0x6]}, {0xb, 0x0, 0x6, 0x6}}, 0xd5, &(0x7f0000000340), &(0x7f0000000380)=0x7}, {[0x8, 0xff000000, 0x0, 0x4]}, 0x3, 0x30, &(0x7f00000003c0)=""/48}) (async) socket$pptp(0x18, 0x1, 0x2) (async) bind$pptp(r2, &(0x7f0000003340)={0x18, 0x2, {0x2, @multicast2}}, 0x1e) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r1) (async) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x6c, r3, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) (async) socket$pptp(0x18, 0x1, 0x2) (async) bind$pptp(r4, &(0x7f0000000680)={0x18, 0x2, {0x2, @loopback}}, 0x1e) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={&(0x7f0000000000)="617b9ddeb442fb92152543e1b467c9dbe06189ef63d2135ad82eea5e10db7ea11473a00dfd3d0aa0972af8f5c67e0db58978f4eb6f01234525f2048ae91fbbf5eb681d882ff5ae6d20d7ef782c87dfc5bbb4d381380201e7e9e5cfbd4a4aad709076338d8f698ca88924aaab316dff6500ac7a", &(0x7f0000000100)=""/100, &(0x7f0000000180)="5f948fadc50fcdcfae95443cfe7d1d5cf3203c292fbcc6680a2b6a902c4afb13236a0afda74872287e0d51", &(0x7f00000001c0)="0dd4154f820690c3d93eb02d7d70c5bd632ec0311df9fc9cdbe365b0a580733501e2d34bf2de16798b892e92ef92312351187a738cfb029146c298e72e1083c88e6580ca5fe89a9d65cf9cbb26b09269659b21e274df2c7eec53b47bcc446fdeb36602dcafa85ab12fb3074f84c205e6cf1cb04c6551bd84b893503a93b5e46b66b1df34d54041e481381650509dfc92bf2500640b4462d594d064ae10af653ed93f8fd7d16e6566fb947d194d3531b2b26766b85f80fd2e42963fd8d2ffcff782220ba2df7971975eacc26255659aa2e0b8c156598e007a79917fd9eb86c6c0f8f81fbe07ebc2", 0x1, r1, 0x4}, 0x38) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCSMRRU(r5, 0x4010744d, &(0x7f0000000080)=0x1fffff) (async) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000100100"], 0x30}, 0x0) (async) 2.224963272s ago: executing program 1 (id=4695): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), 0x1) 2.015990375s ago: executing program 1 (id=4697): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000080)=[{{0x1, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000340)=ANY=[], 0xa) socketpair(0x26, 0x6, 0xd, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000200)=""/120, &(0x7f0000000300)=0x78) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x50, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x80}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x842}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) bind$packet(r6, &(0x7f0000000040)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r6, 0x0, 0x0, 0x880, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYRES32=r10, @ANYRES16=r10], 0x44}}, 0x0) bind$can_raw(r1, &(0x7f0000000200)={0x1d, r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0xf}, {0xf, 0xa}, {0x3, 0xfff3}}}, 0x24}}, 0x80) 1.78127882s ago: executing program 5 (id=4701): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xc3, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa1708004500001400000000fd019078ac1e0001ac1414aa0300907803240000450000000000000003010000ac1414bbac141436867100000000000ce256b28c04000000fb52000973561de584b703c80009e706d30bd224f80607cfa11cab1a0010c600000000000000000000000000000a65807fe97612fe86001273bc2300ad9d19a30000000000000000060cc8f46976e79e56c7a95e860c0000000201067f36c5250000009ee54763f300"/195], 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog256-generic,pcbc(fcrypt-generic))\x00'}, 0x58) close(r1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x35c}, 0x1, 0x0, 0x0, 0x12089}, 0x42010) 1.562887135s ago: executing program 5 (id=4704): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000a00)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x9, 0x8, 0x7, 0x41, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x4, 0x2, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xbff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x3, 0xe]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r10, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r9, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) mmap(&(0x7f0000a4b000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x1000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) 1.560315248s ago: executing program 1 (id=4705): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x20, r2, 0x201, 0x70bd2e, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x4, 0xe}]]}, 0x20}, 0x1, 0x0, 0x0, 0x20000050}, 0x48000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d103000008000340000000012c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a310000"], 0x4ec}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.496982849s ago: executing program 4 (id=4706): r0 = socket$unix(0x1, 0x1, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) getsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, &(0x7f0000000080)) 1.303812179s ago: executing program 1 (id=4709): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4002a180}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008090}, 0x20000800) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x2a, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r4, &(0x7f00000002c0)={@val={0x0, 0x6005}, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0xe4, 0x0, 0x8, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @loopback}}}}}}, 0x2e) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000380)={r3, &(0x7f0000000080)='\'\v+-\x00', 0x86db5cdff2285ee2, &(0x7f0000000840)={@align=0x1000, {0x8, 0x4, 0x4, 0x4}}, 0x0, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0xffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x370, r7, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x67f}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x113b}, @NL80211_ATTR_FRAME={0x32a, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x4}, @device_a, @device_a, @from_mac, {0x9, 0x4}, @value=@ver_80211n={0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x28, 0x3, @device_b, {0x0, 0x6, @default_ibss_ssid}, @void, @val={0x2d, 0x1a, {0x300, 0x0, 0x1, 0x0, {0x10, 0x9, 0x0, 0xf, 0x0, 0x1, 0x1}, 0x800, 0x7, 0x5}}, [{0xdd, 0x9b, "82f8c3ae2158b59c102671935ce74ea9ab605d1b859e35ff63c5876f0a6e116a08756b5c56293d0a75517a36863a38da63ed4ccb0126f919195231178cd1596919b47c4c235d1f5cfdef475d9492899e18fffd42152b9627eb6a0694acf2f1bee9ff821ef2450f2942dc713f827110d7845c920120093da076639326cea2de4edb5d9ed69e574b4072b5eb53d13a3f06dcd616b2cddcc595331b05"}, {0xdd, 0x66, "d1400e02f0e73148cac84a412b4dcdba8145292c70c24ed61026e0cc6033e571fa91ac590491eca443ec3eab718c762542a8badaaf4954eca77e1939f4c7b1d7ea8462f8ab1e6fe6fbab71d2efb5aafa4f1467464500c07264143889cf0f3b9d7054ffaf5a75"}, {0xdd, 0x29, "521aa96fb4c17003ec7afbba4964282127150e5c07b5caecb847a11c4e7ab4dd8bcab3c426668cdc8e"}, {0xdd, 0x57, "768da7d4e71f72a833cdd383871ff73fe460b483fa074a711d39d69ed3d8df9f11e647492d07419960c50ede2695003d93bfc714066c65f5e765fb8cd8e46a938085a42c4527116ebe3ebe10c6451b4576af1d7fabc5d2"}, {0xdd, 0xc9, "c3f13d7050360c3d08c0966d2a04512441c1927de1de74d805c2c8bb9c1fbfe94cbd90f1a9040d7a673952daa67658865c0551e2b202bdf0652a530c3ab47ad516b93d77b4b60d4e0c31718756a24b36e98ee6269af9600b12858f28186da890f375d211d8db2963e4313d9a391ef9d1b66edd3a31c9b265a18939d51bbea954bd2df6903ad994cb501107d69f2e9502f189672e81fe4d68216a2e19ba55c2d7207d4fd4e532a007e5b17dbab15d33bc33d14868a8cda8ad3115b9b1054577a56d06b5994f17cb8362"}, {0xdd, 0x2f, "46d41dc7ca1021cb9b8dc0699ce4595378d4f54814b88986f21bc331f5c678cbf3d400567765954d50c7eaa9c3afa1"}, {0xdd, 0x55, "f4f8779873b492e7479da93699fef6ea6070452c0bf2ed9c5a6a5d65bd86b58799e3aee0d9927a24f3a06f2cae32c231ccb2db0ba68f74c8f75389917c2f4ce5f8c997348aae75b423c72e05a0b79f61831db36595"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x370}, 0x1, 0x0, 0x0, 0x4001}, 0x80) r8 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) sendmsg$nl_route_sched(r8, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4002a180}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008090}, 0x20000800) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x2a, 0x2, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) write$tun(r4, &(0x7f00000002c0)={@val={0x0, 0x6005}, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0xe4, 0x0, 0x8, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @loopback}}}}}}, 0x2e) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000380)={r3, &(0x7f0000000080)='\'\v+-\x00', 0x86db5cdff2285ee2, &(0x7f0000000840)={@align=0x1000, {0x8, 0x4, 0x4, 0x4}}, 0x0, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0xffff}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) (async) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x370, r7, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x67f}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x113b}, @NL80211_ATTR_FRAME={0x32a, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x4}, @device_a, @device_a, @from_mac, {0x9, 0x4}, @value=@ver_80211n={0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x28, 0x3, @device_b, {0x0, 0x6, @default_ibss_ssid}, @void, @val={0x2d, 0x1a, {0x300, 0x0, 0x1, 0x0, {0x10, 0x9, 0x0, 0xf, 0x0, 0x1, 0x1}, 0x800, 0x7, 0x5}}, [{0xdd, 0x9b, "82f8c3ae2158b59c102671935ce74ea9ab605d1b859e35ff63c5876f0a6e116a08756b5c56293d0a75517a36863a38da63ed4ccb0126f919195231178cd1596919b47c4c235d1f5cfdef475d9492899e18fffd42152b9627eb6a0694acf2f1bee9ff821ef2450f2942dc713f827110d7845c920120093da076639326cea2de4edb5d9ed69e574b4072b5eb53d13a3f06dcd616b2cddcc595331b05"}, {0xdd, 0x66, "d1400e02f0e73148cac84a412b4dcdba8145292c70c24ed61026e0cc6033e571fa91ac590491eca443ec3eab718c762542a8badaaf4954eca77e1939f4c7b1d7ea8462f8ab1e6fe6fbab71d2efb5aafa4f1467464500c07264143889cf0f3b9d7054ffaf5a75"}, {0xdd, 0x29, "521aa96fb4c17003ec7afbba4964282127150e5c07b5caecb847a11c4e7ab4dd8bcab3c426668cdc8e"}, {0xdd, 0x57, "768da7d4e71f72a833cdd383871ff73fe460b483fa074a711d39d69ed3d8df9f11e647492d07419960c50ede2695003d93bfc714066c65f5e765fb8cd8e46a938085a42c4527116ebe3ebe10c6451b4576af1d7fabc5d2"}, {0xdd, 0xc9, "c3f13d7050360c3d08c0966d2a04512441c1927de1de74d805c2c8bb9c1fbfe94cbd90f1a9040d7a673952daa67658865c0551e2b202bdf0652a530c3ab47ad516b93d77b4b60d4e0c31718756a24b36e98ee6269af9600b12858f28186da890f375d211d8db2963e4313d9a391ef9d1b66edd3a31c9b265a18939d51bbea954bd2df6903ad994cb501107d69f2e9502f189672e81fe4d68216a2e19ba55c2d7207d4fd4e532a007e5b17dbab15d33bc33d14868a8cda8ad3115b9b1054577a56d06b5994f17cb8362"}, {0xdd, 0x2f, "46d41dc7ca1021cb9b8dc0699ce4595378d4f54814b88986f21bc331f5c678cbf3d400567765954d50c7eaa9c3afa1"}, {0xdd, 0x55, "f4f8779873b492e7479da93699fef6ea6070452c0bf2ed9c5a6a5d65bd86b58799e3aee0d9927a24f3a06f2cae32c231ccb2db0ba68f74c8f75389917c2f4ce5f8c997348aae75b423c72e05a0b79f61831db36595"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x370}, 0x1, 0x0, 0x0, 0x4001}, 0x80) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) (async) sendmsg$nl_route_sched(r8, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async) 1.291532369s ago: executing program 4 (id=4710): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbdaab9e053a185e9bf000008000300", @ANYRES32=r2, @ANYBLOB="14001d800c000080060005005200000004000080"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.170547321s ago: executing program 4 (id=4711): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001a40)={{r0, &(0x7f00000000c0)='\x00', 0x4002, &(0x7f0000000100)={@_ha_fsid={[0x3, 0xfffffff7]}, {0x5, 0x100, 0x4, 0x2}}, 0xec50, &(0x7f0000000240), &(0x7f0000000400)=0x1ff}, 0x4, &(0x7f00000019c0)=[{0x3, 0x7, &(0x7f0000000440)='^\x00', &(0x7f0000000700)="4393fa442fcb09eb9f3131f711fb557e14c8eec8376bc0878e6469efed92cefe9cc944e6c202addc29311ede3aea742a1bfa3034519e8fb8e482dd52094078035cccaf0193e702c6f4ca6bcd077500a1e6e3186af2786342b41bc23816e6cba4f7a5938b06cc14ff61a5ab3e0568cdeccb9dc9541504da281e164c983e11ceee7f26e196", 0x84, 0x30}, {0x0, 0x80, &(0x7f00000007c0)='l2tp\x00', &(0x7f0000000800)="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", 0x1000, 0xa}, {0x2, 0x85, &(0x7f0000001800)='skcipher\x00', &(0x7f0000001840)="fdee403348a888be3ba1887343e4f14c1679285367da0205c59eb031c6133a19048dfedd176e84aaf4a7d50b15874e741ee51275c3b98b3abfcf04613ec523f14d44ecb9e99a074dc52f7e9cf6a849661c18d61615a72d146a46c06e9cff06f4b5607fcc9e4f887724afec5a246046e361c7288c33364c62659d1a71b9da1e64fb454b17f438c2f40c004221478521c6343e0a0930d087bd8af41e40a59d61b02111cd2ce18a4e3de120", 0xaa, 0x20}, {0x1, 0xd5a, &(0x7f0000001900)='+-,\x00', &(0x7f0000001940)="60066d410aa7f234418e1d22676414c278a55860f1885320c40d8ffb5c57e9c2a8b1a45f24846385899c811c6dc15639d83a44f07b38f42678020b7ba42e692ba23fd269b6fdaba982a07a03a755a24427deff378ee87362e3409a7abda18da0feaddf7c0b6199150283b9b02ec90a832613", 0x72, 0x10}]}) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) (async) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x13, &(0x7f0000000500)=0x1, 0x4) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x6, 0xd24}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2100000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00009be2091a00000a0001000180c200000e0000"], 0x2c}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000001bc0)={&(0x7f00000005c0), 0x10, &(0x7f0000001b80)={&(0x7f0000002e40)=ANY=[@ANYRES16=r2, @ANYRES8=r5, @ANYRESHEX=r3, @ANYRESHEX=r4, @ANYRES32=r4, @ANYRESDEC=r5], 0x48}, 0x1, 0x0, 0x0, 0x20048010}, 0x8010) (async) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r6 = accept4(r0, 0x0, 0x0, 0x80800) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @any, 0x2}, 0xc) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000140)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], 0x0) (async) sendmmsg$alg(r6, &(0x7f0000002300)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18}], 0x18}, {0x0, 0x0, &(0x7f0000003f40)=[{&(0x7f0000000340)="6b0a8805ac8e5b66e9542f1bae261d1a5a774c3b6e787f29ed043652495599", 0x1f}, {&(0x7f0000000600)="7e632427a04769dfe00dd2913609b39d48606847c97e2d557dbee37c0108d7f880419f769de826b6c1fb5f99af76914c018bd7555a077339dbe4f7a020a601e4f8c39f604cb574ecc40de50afb", 0x4d}, {&(0x7f0000002e80)="2ae376182aa7a03cdd75ddf3d7cbffd195a8caf499953f1092d919a9ae8d489d78a99b1cad74213ec029609fc416395761337045bc6e82554ce80c594f58ef7126ca80e80bde947e7cdb9c706dd48537fe4662b18f534613f79c3d71668724d2b0be922790d256f377e09187f619ebac9470aa3d96c7518be25486d8ee63b27f75056a24b286c124f1db2e58308b3cf697bd376fa48949adf0c427184c2eb556cc23f0bc4c7f01b071516ece86a9da0763a76f784a88e716af63", 0xba}, {&(0x7f0000002f40)="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", 0x1000}], 0x4, &(0x7f0000000480)=[@op={0x18}], 0x18, 0x1}], 0x2, 0x40800) syz_genetlink_get_family_id$tipc(0x0, r6) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="17d1455bc8040023d396dd000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r6) (async) r9 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r9, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) (async) recvmmsg(r9, &(0x7f0000002cc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/111, 0x6f}], 0x1, &(0x7f0000000180)=""/56, 0x38}, 0x3}, {{&(0x7f0000000680)=@can, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001b00)=""/105, 0x69}, {&(0x7f0000001dc0)=""/55, 0x37}, {&(0x7f0000001e00)=""/137, 0x89}], 0x3, &(0x7f0000001f00)=""/25, 0x19}, 0xffffffad}, {{&(0x7f0000001f40)=@hci, 0x80, &(0x7f0000002200)=[{&(0x7f0000001fc0)=""/50, 0x32}, {&(0x7f0000002000)=""/236, 0xec}, {&(0x7f0000002100)=""/209, 0xd1}], 0x3, &(0x7f0000002240)=""/169, 0xa9}}, {{&(0x7f00000023c0)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f00000024c0)=[{&(0x7f0000002440)=""/4, 0x4}, {&(0x7f0000002480)=""/28, 0x1c}], 0x2, &(0x7f0000002500)=""/183, 0xb7}, 0x34b}, {{&(0x7f00000025c0), 0x80, &(0x7f0000002700)=[{&(0x7f0000002640)=""/184, 0xb8}], 0x1}, 0x1ff}, {{&(0x7f0000002740)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f00000027c0)=""/208, 0xd0}, {&(0x7f00000028c0)=""/100, 0x64}, {&(0x7f0000002940)=""/205, 0xcd}, {&(0x7f0000002a40)=""/183, 0xb7}, {&(0x7f0000002b00)=""/165, 0xa5}, {&(0x7f0000002bc0)=""/20, 0x14}], 0x6, &(0x7f0000002c80)=""/37, 0x25}, 0x6}], 0x6, 0x40000043, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) 1.115948072s ago: executing program 3 (id=4712): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x62}}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90) sendto$packet(r0, &(0x7f00000002c0)="050316", 0x3, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'tunl0\x00'}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x62}}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90) (async) sendto$packet(r0, &(0x7f00000002c0)="050316", 0x3, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) (async) 1.046004044s ago: executing program 5 (id=4714): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff4}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x40, '\x00', 0x7, 0x4, 0xc9c, 0x80000000}}}}]}, 0x48}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x2, 0x4, 0x24b5, 0x100009, 0x400}, 0x48) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0xb8, 0x43, 0x107, 0xfffffffd, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x147}, @nested={0xa0, 0x1, 0x0, 0x1, [@nested={0x9c, 0x129, 0x0, 0x1, [@generic="5a5d82cf", @nested={0x89, 0xa8, 0x0, 0x1, [@generic="61fef901a3223f8425eabb0fb47319b3a099cabd5b5bd36ca78d9715f905fe129e76517489717c4f7ded3ce5e8ddac662f6e4b0e9646050611e128daca7052bfcc7aa9b2eec25a6ac6dafe", @nested={0x4, 0x2e}, @generic="156be09d72c63c3fbf6146fd7d6ee7", @generic="bc080db12eb141ed8d6af59e15c733e5ae5fcebde94a75e5f78b94916a6e77", @typed={0x8, 0x63, 0x0, 0x0, @fd=r0}]}, @nested={0x8, 0x4f, 0x0, 0x1, [@typed={0x4, 0x116}]}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0xc000) 960.803715ms ago: executing program 0 (id=4715): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xff000000], [0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x7fff, 0x56e5, {0x2}}}, @common=@inet=@udplite={{0x30}, {[0x4e23, 0x4e23], [0x4e24, 0x4e21], 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev}, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x1d0, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x80000001, 0x3, 0x20, 0x0, 'syz1\x00', 0x4}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x84, 0x25, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) r2 = socket$kcm(0x2d, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtaction={0x158, 0x30, 0x9, 0x0, 0x0, {}, [{0x144, 0x1, [@m_xt={0x140, 0x1c, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2c, 0x6, {0x4, 'security\x00', 0x0, 0x5, "ff39"}}]}, {0xe9, 0x6, "e6eddaf0c997f4bfbecff3e4f359449d7acac20565b7528f1cc6320fb0e5ffb8ae208949337aa671abcac16f118b44d7b07c7c1db11ec9378181d293c5dada787da0f523c506be3504317a5e2229ba29106fb68a45b34618c0a3fbff62ec0d98afef39d94413b17701561765ca4144a65ce01c01a452501024384bea6ec664730b3dbc835d81d910508f5b4c7b01bd8e5c4ecbbcf18a440be3c3dd25ec3e5771cef652e87dbfe7a0f710dee8ab5d190a98f64927c06259a2520c22a7f2c7ad76e6c497da37d3f0cfd6b5acb289e094d107aa140104c9d080d2bad38538ec1ab3cb2c7feaa2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x44800}, 0x4000000) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100)={r2}) r4 = socket(0x1d, 0x2, 0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000380)=[{&(0x7f00000010c0)='*', 0x1}, {&(0x7f0000002100)="59c9feaf2419f5b7fdb0bda895a11ca132c1a13073902ff2282dbe446e9271395451d35c88a55a871f978cedc6250555672deb47f889967278620654da52d173b676146c052a4580b28dad665e535dafc9dd09a6154191af24c009827f68ba7adcd2ada5345c699e94c2cdf1d46fbfb74dda077c0c709e16aeb98bb0dc625c610e5ec433342aa0494df9820fcce5ad8b9e4d399e27c4f18731f668f7479b6a15df15c1900b3b988d19e6263046b5de88b39b0c3270e77e7b07fc354ae4c105cabce0f8058c44186e44f0593f67a1b77fdd79400572a42568a3bb5edd2bb5d13d40392e7c0bed8aa2bcf8fa882041b42b5a88898e6567c7d48d61a1a65ce854a9a45646c5932f38ff54012c79fcdb0df5ff756772d35d1d7bff436aff519664d37c062b71bb13340493cc0fd5dff49dee7852ce000278d4f76817d18e40961a02e6e417910a566857788043917817e648e8a0ad02597f15f0cf4019e41b771d9868cb0c46c020cb41b1c367012e76e39f8f9bb8986cd3a49d21ccfd0fa41d79ec430e1273f658261e7f91a50b29c8fa8237833008f68aa30a74736c424f3026f8ff2b9fd3e5bd788a92894010bb967cfe105a1e3be945d4f831ea61a1bfcd9c295fe0ba6b81fb6ded6ceeaed513b7a611f63a0cebd5cc177b1385e1e24497bf1a0df5f95f1e298f4eca3b3ba425d5fa25054726f85159e13596d5140db102af3817bdec904800c25dde8725251a4f7d335b3f96f73225c637b05614bc605b81f06c28b832d6cf1f94df7631b08682cb0090c75d82195958d045c2a7c535af5c9abb74cc7dd5dac48e06602da148bc5708324abd637ade0df394784f0aad5d774011e64fd21c4e3712a18de8af863818505909fc7fd7ef13f46e6f07d693a0af38f163f8403dc65ac434adb9c335a973e0192e560afc8dcb9f8185e6805dfb3cb1f94cf036333c0a569821d9ca96ace0efd508d2b414766d9c4a9c0bc078751058d0be00529752e369bafedb35107f84e903675dc7db20121ba7f79f8b376f19b570bb6d4016761664749594adc8f1225e674794212410b1c0453233823f90ebd93bc7d83133e9e6fb1cbc055ac3908a62d324f05c77c67bca5913d20ae71f193a145444223b4b930b2709967b5d18db5f6aac2e2bd6fc37c24f3d545c6557c00c3abf43686fa4fc14c93f4ac806e9dbb623450331e49dae51f0a807898a9d66fc5f79105093b3de61f4c0f24ce6ba5277b67859232f39ca37560b8c3a45ea0b9456857bb7920bf4a7c07e45e7ca308e278abf63fab912bdc3db063cfa5a4fac59c531c0606164e5431fc4175f9744432451a74e49b5482cda97b105f541b34448bbe14f92d5e0b81f5fb29d3a365c15a0f489566c253cf00435b70e80528a6bc7f816da5320023f91ad4d02c85432f25039a0c363cbb9808ad8e0d7e4deefe92289061a79df9c9a444a8543ee19bc8efc345903c17707e217e57d5ec5275fbaea438e8f7258e5b4e7b808e9e5c28e311074213f1aee52c7a69008ecda131d32e855640c4c55664a01fe8be279325f7dc55361b795c250da92eade4dfccab621f2740fd64b32a6fa8cd916cd22d808d0c23bf57043755aea8eb8087d53a767abbfa06faa30f24ecdaaae87bc13bd11eb9c5bb3079411ebdc396968447a9727cb4a9b573d38d47da1c42409a784b7b158dfa482953a3f6e5879bb6ecfc4bc0f84540aa2796b98ed5bce6780618c2d59039e52b7602681e9d4268e678831dae5950603ecc99432800124b2ef7b432ac66b84f64e20d6e0eba1c01794ce60c390e3ec9c29d6f69fd51018abb1ab6e90bedfbf2b5bbb2ff04d39e4e05545bc6329145fba34ac9b145b709d16c1b26e44ac48be52a1566b926a015cdf57932055db43a1cce262569004b73b3b25b6b5cb357b992fe985315c07278f34310d210a1e39b88d2b93eb7fa84bf64ef038108c5518f517646c4d12ad71549fab21b442f242e4167f18ac8f096512984e84db6b83c6166cce9a812c29111de702e4216b7d1e255b9f1c77390d00a679b4314a6472ddee909f8821d683cf916c2b9232211daeb758b5d228ed1dd04c3aaebab57f0f863bcd64c4a8a46224b2daf4baa77639ee5a24cd6ff332769095a5d34f5361690d1fc666e682a6f044dc2aefe9d593d72031b6b6af823bc52ec1852ef365a406b43493eb728c3fccafa8cab1a7ec21d5079ba07aee910fa86c98967e907c1978ca09e811a1d1d80460a655244105f9af7341d42cf4766ed2fbaea9e220e753482c7d4290462d10118f8f1c130995a5b55705a04a6365cdf64b7115781f26dd981b6d1190ed0af361c03174acb5606f46405c84a6d6c433c7952a5c8891e3427303b705569a06ff56aff61b852897f89d6b1b7a781af0e8762b0fa8ca7c1781e84271871334dfc8149fea84c7b0fb00866551fd66eabac8d10fa8a8394e6b3af2dfe9adc9f94882d8ab8855b701621c2ace26aa7894b6f7720cd239960777b861d54a0e2b6280de0faffafee94ee77a2db4a976039fbb0047b468e6d273a187ebb6c5b44bf1eef1933fea3054f2af75295bbfd50c560a799a9a17282c3dd4462574595200a1707ae3cffa001eaf6b62ae7fcdf5b2a5d352d9281295d0686bcc64346a8ff502d5610f9313427743e4773634c9a71886e602202a3b41c7819a54847483615b7954b206db2cc75b348350f2f8d5a2bd2b016664fed6f2261bfa0cb80492fdda12682e34237582f0a9e7bf8615cf9967ac2b0bb692eb1bd23af4cc74379b0500a977f70f066040b6ec8636baa0cf9d1affb387140aeedabdd73c51197c7db56ab4fd683925af54c9ee905e7cd6f669c5758851e7ea44d7d9926ce5e3413af545fac0e0088ff4d51eb872f4d68731e92ba29c8ddeb529ae2f33b25a571b4448ff25763ed0d92094780595be35a30e7a8673de0bc2e07998ea0971befc6529239ab4fa6d9e4c750be2d3b30d35809827c2f3d3e60b7974ce507111d46fcd4534db354bc497b653017fa6fb42ec96ea213e773e9b8fd1184135dde8eb2c6bc7b41aa4c6b2b2c9f5ece8b4a3705b1f14fd4fed89fc1f9f71ab57d74efb1afbe1e6438f0305c60a54fb342c15aa7ff9d9bef250803b2ae2cd58a2d7fd2fec04575fdf94bc3c9b45afff2567dfa9247ad7e56965776e43801bd85fddc91f5128b2608a25f21548457e9b901d4783917600238c2ee7c4fe638238e6ad30036134dc4c03cc74df00de06c9ff708b0a51ffbbb31035e2370b1838bf5136395b37480e451e0a6bb02dc93af05f2b3438c0a919aa32baed474d79815ae2e43f879e1f51d773cff6b7b74b3531994d269c8d220fa1b850ac6d7a70860b135a8c15e37f8ec38942d2e39605775d1c38eb3e88184449d496359378009c2675202ee7f9b14a36122c68d1da79016c34e5531247ec41d30a251e604dc9f1212abcfbc9e4b572159ebf676ccc1aa0905ac239fc7be8f1938c17e2dc2ed8a024639ff87adeea89cec1c8b190ce3e25449b874f3363b5ab70e6c597dd66d6867681c0bb641ea7db335fbd187d497047760de22dbc1726cb708b8c8b57141f38a5b78b29ff872374da36f55d1be774e673e2cd6cb71931cd43f82fd82b71ecf9d803f33d0041ec05bb5c872df13e6c58eeabd86cf4fb07e62845d2917fba1ba4f7c79b7c4eb53d5f835f3022276dfdcd4a487342bc5d9488164dfc20dea1fb220fc306330addc718549c7930b4fd6f45a4c3854e639c1569b96625d0b199bfb4a691cf92435acc60436e4ad5066c9994142b0ade648a072cd1a9f1382bb25311ec76a6a44f777010db880592bcacc2d5d4f4deca30497cdd350972a672e641e8f0026c96a9cac01dccc8d8dc799282da1fcb5fe2e410c90bc746ff634161e6805b2283727c9f2a6ac515ac7849a65bc26f2b2530178433a52b20e8ba371dbb1b9f4e5bde48b8f90d0f008f915162681a6cd2cc35a9f960e1662bb73088feb4cc884adffc59bb7090add8b56b737120eb1f3fe39d627a19d26f21d4f671725945b8cb75f7bd1dae67704d37e7d9c439b735140f1f0dc5b561ebb246f4218bef35b4f87977a3f03ae08ce3c2db21bca7c4217f4f11840a997a288a7eb13ccd352e97dbfce086abaa5a87c3d1d6fe7bd3af13d1c60853ec737793fd5c91237feef477f86b927d84dbdfa0a09fa8ef76e784ab399d4331728612c82c34730d2d32cee82e80f3adafd83f6678dc563c775d9e0528eeaa1fc10e09f163fe6b55792ea95040fa46db965aff1ef4aed13eba6353b4417695b969e0fd75ea330dc613987ced2b26ee14cdf74844ea88558751bd4b766188585931a98c9a27e26bc02a028d7e0cca461493822fa22fdc47fec723f9680f9a135f0f66e177736f93d249f8976cdffb48bb09554d322d39523fe1b9d0529bf9310fe4e81ef3fcd88ffbf9fddf6ec03e0fa730399097e01061dc9571631881643190d5be7dd9bbbbed4d0db57fc814bc4f53710f55d7b0b870efa82624d96f47f1dc8d91d39f59555190191fcb77af4d15bd904cf7d6c42084ff204d393dea3a27f0110df22d9cc17d4aeb98f748b26da721f98adbae425ce9707c72d7916d7de390c21891a68c488deffb2c0430d4bb3104ec2251783c3804d8ef0e43d45a1f5ed0e3c22ca90f2dda8391cc4fca5be6c50d2979bc857a7defb989e86c71cbf5563890aa2c52b790fa3bc83aae4de2f831221a4f765572035cfe42042259ddefaf57dd9f4a75a2921da8e5477f1cec8217b28a792cf624ebb93a2e0c67c3910f13ccefaf806e1be8716ffafc581fae7a42ea08f2f71f828e2af1641369b13af5e7080811a0bb4e1099609162faadf77ebeec01666b558f272f5e6ef9d5bfacb21fc96d447f76aba629e249eddef04e67050e8bf50220d7402f15cad055e087ce5ada72f137aa1cb8410fef560131b761de182af299d6ef78e239f2b0b97698c4f1b2ba73b2662df399b6a5aa0ab28e4e048f3a1da05578624609c3ab3fd5f7dc0e1e7863b64fd4ce5b84c6e3863c40ed9ce2acc362cc49b81d506b167889679e1737943c42e8b9ee8a1cec57d09bf1bfa30610d011a42e0dcc7299673fd73c8d17f3302441da54dd58d62deb54625324cb45b2ddbd3f2474d0d80b39fcc092823b809387ee172931b2ccd2abf993e98023e0c337f36bf6706fc22c4672baa706d37493958c1e01ee4e54f4f192767b81097b8b37b4cf98960f60838aca0a480adecd53e2dddec522f979560666b4baf46e291fba76acb0fde50a9c19407ae98077e9f6a9e8fff9673c2813a93f151f96758a13028918ba7e95d781526e8396e8f2b4d6a7cb5592dcc6f0ef7179ce33e81763c2104b631e9de241dcc9847afa7f2b91210ebdf9abc9f360298f23ee230c9a9f6a6f3a7a6f58cd7cd1ff20717668ddadf09ff0ff", 0xf01}], 0x2, 0x1) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r11 = accept4(r10, 0x0, 0x0, 0x0) splice(r8, 0x0, r11, 0x0, 0x10000000000066, 0xa) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000180)={r7, r5}) sendmmsg$inet(r6, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="2351803ea8b9", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)="30da3d0730b727efc21688bd2b12d21205dc2e442fb3d20b7fb3e988e0c25b0701869d", 0x23}], 0x1}}], 0x2, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000080)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0)) r12 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r12, 0x89e1, &(0x7f0000000000)={r0}) r13 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@random="91b882b09a5b", @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x26}}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @rand_addr=0x64010100}, "08000071ae9b1c43"}}}}}, 0x0) ioctl$sock_SIOCBRADDBR(r13, 0x89a0, &(0x7f0000000dc0)='vxcan1\x00') 896.059616ms ago: executing program 3 (id=4716): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{{0x1, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000340)=ANY=[], 0xa) socketpair(0x26, 0x6, 0xd, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000200)=""/120, &(0x7f0000000300)=0x78) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x50, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x80}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x842}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r3, 0x0, 0x0, 0x880, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 870.634727ms ago: executing program 4 (id=4717): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, 0x0, 0x190) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000080)={0x2, {{0x2, 0x4e22, @multicast2}}}, 0x88) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r1, &(0x7f0000000100)="28d9eb6c48326f79a1236878e0deb3ae11cc4635999464062b0a21fc6ab622985f6ea9f7c7991e0199f23c658e25b8dad34390bd35ed68d515faca156d3ef8cff7945a1f95023ba5debf9bdeb435b3aed00c62728a689969ef114722c11aba84d0846f172fddc15675a2d342648916fc64425e9e6061a2db2e8048165539df80e4b6133897d538728f747c3418a98effa8297af5fc7131f0591d08430bd3e3c8b5bc8453d2de21ae23f67169edaf222751a0b7546d3cceb889f8b3e3fc3d2bc320e35b44b989ab73f0050604c7f6e300458341552c91d018", 0xd8, 0x4000000, &(0x7f0000000200)={0xa, 0x4e24, 0x8, @loopback, 0x1}, 0x1c) socket$inet6_mptcp(0xa, 0x1, 0x106) close(0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r2, 0x215eb000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x149e42, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x305) 843.058469ms ago: executing program 1 (id=4718): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x400}) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) readv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0xff, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000000)={r7, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x2, 0xffff}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r9, 0x5411, &(0x7f0000000f00)) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, &(0x7f00000002c0)={r7, @in6={{0xa, 0x4e23, 0xc00b, @rand_addr=' \x01\x00'}}}, 0x84) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x5}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0x1b, 0xffffffff, 0x1, 0x0, 0x10001}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 655.821212ms ago: executing program 0 (id=4719): r0 = socket(0x2, 0x3, 0xff) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmmsg$inet6(r2, &(0x7f0000000540)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @private=0xa010101}, r3}}}], 0x28}}], 0x1, 0x4001c00) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x5f5e0ff}, @call]}, &(0x7f0000000000)='GPL\x00', 0xc, 0x26, &(0x7f00000001c0)=""/226}, 0x21) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x64, 0x48, 0x202, 0x70bd28, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, r3, 0x3}, [@IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_ADDRESS={0x14, 0x1, @local}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_LABEL={0x8, 0x2, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$inet(r0, &(0x7f0000000ec0)=[{{&(0x7f0000000280)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f00000023c0)=[{&(0x7f0000001300)="0000000035fdca249bf6ffffffffffffff", 0x11}, {&(0x7f0000001340)="195b7cfd83a329fbce0915fb6925a0fde4652cb72df165027065771c86c9f5fa91efcf651a58535bdc661451964bb2d4178080a64371c002228e0c31bad7a6603fd7832f2012c6c6062f092c0c37d956b84298cb3c3eda5b6a8509895cbbba2e1e0fb28c3b47d702e625b297d084463c60ba555f5dd65915f1a6d5630775b7e4721eb25c722e463c38553b77441e9bd9618b21f91f7ed21d20fbe332e7d1e565eedb9fd6a15e229108ff8219e1eeaf5c32ca51144669dc74f2bf309038a8e4401cde7da57281981e45fa5837d2fe2b4764a0d97c28d6451eb54464b745aff87a1e82847e2d902991f9bc748a82c604db505b9dcc43dc67faf12f5be59a782b4f300ae4ad618e1c87bf089b7909fd3695c4bf8c075bd7b7ffd672b25cec24b00cc72139a9fe6bfce3d0ff6fe2a921a82f4fd41eecd1c38332a4d9f926dcbbbe44e649016812a2dd0f316f376b3504cca1a83f399737fb9011906585cd333854519419c8466ca2fab2017fa00b8bc8addccfc3af05bc7ae2c0abf3b0d216430ac8bd75c5ed095042f676ccd72dcfe67b91d96519a8e8fb5d360e1dac8b8cea3769350e09173758072edc2507493ade15b0373afe18a445e312dc9b5ce264e196bc20e944a2034bf1ec72e0d824fe5b2cb60f7f50505fc3a6bc50aa994188bba5690fe8aed68a45128ee1ac1b1fdad0751d436162de5f234ec78fe7fdd40e55f81df18b5a9999d31fec23afeb93058e9b58049c5e871938146721ad9c286edcd18b01dfcb974fb52401e25a94c52dc45445f248c97bfb9f86bbfc1afa4ba60566723048b93ad1d5e799a83d428242e0486afa447678f9c6b7bf1b054175fcada4e6fc243dbc3a61f65f1ba661eff2d43539b7c0d1f538d1a56a18799c27d480c23fcc9f29c95e10d6bf26c044461ec91722483d1b085fc952658582fd91047547bb695d9439baaec163651849b8c26640f0accdd9455611b371b4e6af6405f40d33bfe9c6395f7b47c9378e322d67aa1ef6777548a1785c60e3934744df9ab53f9fd5c1dcc27fa6ffdf118b21de60239406f430e1cd555c63328ac4df02f0bf3563f8e238033d81b557c61101dfc3bdb22be843a0a103764811ab5340243be9ceb8368141d108b15659617ae56e269a23362bda5cf46e94d3d9454612da74253e72c876c7f60b2530807770a57d11abe0b7cece14fd1639d0d8c90423ddfa6e2f7875dff2d707164d77c7b77f4a72324268a5892c9893f260cdd2ce034e13a3e0fc5bf16acf6134b4756a875c45487db01114ea8cfa8de2427a9920e72102dd0dfe6b4aa52eaa3cd983d4bdee3395d117effba2f4cc344bc051c8ebe57df117b7d40a741445e851c4b5f154f13a2cb2d1ddf76eef82b4423bf3bce86149707172db6c3c6352f2ba53d7af6a7513c616471904ee69c4bddcdc0efcbd17adc9978dc914fd4818265c8b3f58910e1ae1066f6c9ef6fadc49209391f222f465c1597ad2142ce5a3ecf562bbf284783e7f679fde3786d1a195af6da603fbbb6d2acc03331edab1e6398022b5866065ecaae94281d32b54261a59ecc0687545b3d30ac8d2422968aed13625f488b497286b96c63414d3670b101b7d6f2564dfed2644be444871207b4db8f442286694301268e9d245246c666ee7f0b09065d2024aaef0e15acd255ed0747beab8dca229024b470843e2c29ff462fcf5891532eae039b71314385e2f2e2baadcf82adad85126516f95db6a4c178dbbdd2e8e7cc5bbeff29d7c20384e928a0162b3012f7f138793bb198745c31b451fd859adfb79890dd1b077992724737f3f42264576da140a883997ee439f2ad9ce3f2607f6130eee3a2f566430595890e9cb2025505b10df50f1485dcd5d004dd8f503376313f4bf06749f14495047958e7f3225da1b91bed2f86400a807439cb3ac7a666356ace04d3a640c2f91a8cfb0b3d16a5409718536b115e3ca6b251948d148c8d9d3123a4efdb556a56fbd6675dfe90ad206884a7aea1fa4668f0f219139893a41085551dbb1490c1b778b9f68682135e3e4ad", 0x5ad}], 0x2, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x3b}, @local}}}], 0x20}}], 0x1, 0x4800) 638.527383ms ago: executing program 5 (id=4720): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e", 0x2}], 0x1}}], 0x1, 0x6081) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000fe8000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000003600)=""/4123, 0x101b, 0x0, 0x0}, &(0x7f0000000340)=0x2d) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) 551.520572ms ago: executing program 3 (id=4721): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x401) (async) listen(r0, 0x0) (async) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) shutdown(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000fc6c3f3677c63ff84386da435230b3628d6e2598fe3ac62fa9d91c252cc910c7fdd1c1f5e4f6ec12404927b54542f48297cfe6ab267faabe46022bab77585dfcedcc331c1d3508c3a1a5de", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x38}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 464.207004ms ago: executing program 0 (id=4722): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)='%pi6 \x00'}, 0x20) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 418.291177ms ago: executing program 3 (id=4723): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x31}, @generic={0xa7}, @initr0, @exit]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x32}, 0x90) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="500100001000130700000000000000007f00000100000000000000000000000000000000000001000000ffffac14140000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000697f00000000000000000001000000002b000000ff0204000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020004000000000000000000600012"], 0x150}}, 0x0) 326.111514ms ago: executing program 3 (id=4724): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r4, @ANYBLOB="300030802c0001800800010000000000200003"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r4, @ANYBLOB="300030802c0001800800010000000000200003"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x44}}, 0x2004c000) 269.035929ms ago: executing program 0 (id=4725): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[], 0x48}}, 0x8004014) 170.257939ms ago: executing program 3 (id=4726): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) r2 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x178, 0xe138, 0x198, 0x0, 0x198, 0x230, 0x358, 0x358, 0x230, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0005000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x5, 0x1, 0x9, 0xf, 'pptp\x00', {0xe}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_getroute={0x24, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {0x1c, 0x14}, [@RTA_DST={0x8, 0x1, {0x4}}]}, 0x24}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 158.744255ms ago: executing program 0 (id=4727): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000b00010000000500090001000000059cab6b2302cbe6"], 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_hsr\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0x401) listen(r2, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) shutdown(r2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) 0s ago: executing program 0 (id=4728): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000001c0)}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x1412, 0x1, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x10014}, 0x20000000) (async) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r4, 0x8995, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10) (rerun: 32) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r5}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r2, @ANYRESOCT=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000860629c98500000015000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@map=r0, 0x20, 0x0, 0x8a, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async, rerun: 32) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (rerun: 32) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r8, 0xffffffffffffffff, 0x26}, 0x14) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@fallback=r2, r6, 0x2d, 0x0, 0x0, @void, @value=r8, @void, @void, r7}, 0x20) (async, rerun: 64) unshare(0x20400) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="1807000000000000000000000080000018110000506804306ac826735c63d6039e0ce1a0aa9c2bad8f06ddeaf899debf9c91b6ccc5862d26f02fbed0b4f86ce9673f2f7ed2b4f788948c6152a2437192c8e303822cf0591560a5c9de23c0616357fc57e5f0a7bb1072296d775570218859fda2937d55096effb1903dae14f5fd6ad9a69700b398fc108bf64a1873ebad608ad8b8d837384602d96ce9243e3d3c27effc9acaf99dfa91ea7df30db818d3bd48c4b8de41926f07c1fd25cc6c62497339bc", @ANYRES32=r1, @ANYBLOB="00000000000000009500007b000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) kernel console output (not intermixed with test programs): 2(bridge_slave_1) entered blocking state [ 506.234566][T18001] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.261824][T18001] bridge_slave_1: entered allmulticast mode [ 506.289608][T18001] bridge_slave_1: entered promiscuous mode [ 506.340669][ T5651] Bluetooth: hci4: command tx timeout [ 506.398045][T18001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.416099][T18001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.487020][T18001] team0: Port device team_slave_0 added [ 506.509533][T18001] team0: Port device team_slave_1 added [ 506.615637][T18001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.638856][T18001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.694100][T18001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.737705][T18001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.757311][T18001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.792960][T18001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.852151][T18224] __nla_validate_parse: 77 callbacks suppressed [ 506.852172][T18224] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3397'. [ 506.868949][T18225] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3397'. [ 507.048514][T18001] hsr_slave_0: entered promiscuous mode [ 507.069727][T18233] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3400'. [ 507.092537][T18001] hsr_slave_1: entered promiscuous mode [ 507.099054][T18001] debugfs: 'hsr0' already exists in 'hsr' [ 507.127149][T18001] Cannot create hsr debugfs directory [ 507.455612][T18245] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3405'. [ 507.741426][T18258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3410'. [ 507.992109][T18001] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.004143][T18001] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.028431][T18001] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 508.043620][T18001] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 508.205420][T18271] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3413'. [ 508.253844][T18001] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.264817][T18274] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3415'. [ 508.278393][T18001] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.288657][T18276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3413'. [ 508.304030][T18001] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 508.315310][T18001] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 508.411203][ T5651] Bluetooth: hci4: command tx timeout [ 508.436924][T18275] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3414'. [ 508.551722][T18001] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.584955][T18001] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.589262][T18285] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 508.603476][T18001] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 508.614670][T18001] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 508.639425][T18288] netlink: 'syz.1.3417': attribute type 1 has an invalid length. [ 508.653251][T18288] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 508.660605][T18288] IPv6: NLM_F_CREATE should be set when creating new route [ 508.672114][T18288] netlink: 'syz.1.3417': attribute type 1 has an invalid length. [ 508.680465][T18288] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 508.806139][T18298] openvswitch: netlink: IP tunnel dst address not specified [ 508.898950][T18305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3421'. [ 508.910627][T18305] block nbd3: Unsupported socket: should be TCP or UNIX. [ 508.931204][T18275] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 509.058895][T18001] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.070468][T18001] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.094983][T18311] netlink: 'syz.1.3422': attribute type 1 has an invalid length. [ 509.100115][T18001] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 509.121426][T18001] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 510.171775][T18351] macvlan2: entered promiscuous mode [ 510.187342][T18353] netlink: 'syz.1.3433': attribute type 1 has an invalid length. [ 510.193951][T18351] macvlan2: entered allmulticast mode [ 510.367385][T18001] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 510.397934][T18001] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 510.427740][T18001] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 510.455557][T18001] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 510.478583][T18001] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 510.490182][ T5651] Bluetooth: hci4: command tx timeout [ 510.521161][T18001] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 510.543588][T18001] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 510.574426][T18001] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 510.966238][T18001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 511.034759][T18001] 8021q: adding VLAN 0 to HW filter on device team0 [ 511.076256][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.083550][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.267224][T18401] 8021q: adding VLAN 0 to HW filter on device bond4 [ 511.276508][T18401] bridge0: port 3(bond4) entered blocking state [ 511.283095][T18401] bridge0: port 3(bond4) entered disabled state [ 511.292372][T18401] bond4: entered allmulticast mode [ 511.304047][T18401] bond4: entered promiscuous mode [ 511.309400][T18401] bridge0: port 3(bond4) entered blocking state [ 511.315855][T18401] bridge0: port 3(bond4) entered forwarding state [ 511.324911][ T5977] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.332211][ T5977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.349066][ T5977] bridge0: port 3(bond4) entered disabled state [ 511.609357][T18426] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 511.899441][T18434] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 511.921667][T18434] bond5: (slave lo): Enslaving as an active interface with an up link [ 511.934168][T18434] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 512.189900][T18451] syzkaller0: entered promiscuous mode [ 512.196851][T18451] syzkaller0: entered allmulticast mode [ 512.209646][T18451] __nla_validate_parse: 8 callbacks suppressed [ 512.209665][T18451] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3455'. [ 513.149753][T18478] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 514.795328][T18467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.803045][T18467] batadv_slave_1: entered promiscuous mode [ 514.924002][T18001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.098748][T18488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3464'. [ 515.181504][T18492] netlink: 'syz.2.3465': attribute type 1 has an invalid length. [ 515.205492][T18493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3466'. [ 515.235071][T18492] 8021q: adding VLAN 0 to HW filter on device bond3 [ 515.249613][T18492] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 515.271803][T18001] veth0_vlan: entered promiscuous mode [ 515.358102][T18001] veth1_vlan: entered promiscuous mode [ 515.383694][T18496] netlink: 395 bytes leftover after parsing attributes in process `syz.2.3468'. [ 515.499653][T18001] veth0_macvtap: entered promiscuous mode [ 515.548754][T18001] veth1_macvtap: entered promiscuous mode [ 515.573288][T18507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3470'. [ 515.605931][T18001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.623502][T18507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3470'. [ 515.651757][T18507] netlink: 'syz.1.3470': attribute type 3 has an invalid length. [ 515.660641][T18001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 515.683109][T18500] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3469'. [ 515.708589][ T118] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.741109][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.754314][T18515] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3471'. [ 515.768896][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.865588][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.129332][T18526] netlink: 'syz.2.3476': attribute type 1 has an invalid length. [ 516.156086][T18529] netlink: 'syz.1.3477': attribute type 1 has an invalid length. [ 516.219377][T18526] 8021q: adding VLAN 0 to HW filter on device bond4 [ 516.227730][ T6423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.258293][ T6423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.339066][T18529] 8021q: adding VLAN 0 to HW filter on device bond1 [ 516.353250][T18533] bond3: (slave veth0_to_bond): Releasing backup interface [ 516.368401][T18533] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 516.397183][T18535] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 516.465197][T18540] ip6erspan0: entered allmulticast mode [ 516.473334][T18546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3480'. [ 516.672509][T18551] netlink: 'syz.1.3482': attribute type 2 has an invalid length. [ 516.735485][ T6423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.747585][ T6423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.826140][T18558] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 516.874752][T18558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3484'. [ 517.127919][T18567] xt_ecn: cannot match TCP bits for non-tcp packets [ 517.152985][T18569] openvswitch: netlink: Flow actions attr not present in new flow. [ 517.197575][T18572] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 517.431206][T18578] netlink: 'syz.2.3490': attribute type 11 has an invalid length. [ 517.468486][T18581] __nla_validate_parse: 2 callbacks suppressed [ 517.468510][T18581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3491'. [ 517.576013][T18584] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3492'. [ 517.608870][T18585] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3491'. [ 517.726296][T18584] bridge_slave_0: left allmulticast mode [ 517.740804][T18584] bridge_slave_0: left promiscuous mode [ 517.753298][T18584] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.823737][T18597] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3492'. [ 517.893109][T18584] bridge_slave_1: left allmulticast mode [ 517.933841][T18584] bridge_slave_1: left promiscuous mode [ 517.952779][T18584] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.975631][T18584] bond0: (slave bond_slave_0): Releasing backup interface [ 518.024533][T18584] bond0: (slave bond_slave_1): Releasing backup interface [ 518.056460][T18584] team0: Port device team_slave_0 removed [ 518.072831][T18584] team0: Port device team_slave_1 removed [ 518.080875][T18584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 518.093391][T18584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.104696][T18584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 518.117233][T18584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.132909][T18584] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 518.214108][T18601] tipc: Started in network mode [ 518.220341][T18601] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 518.241054][T18601] tipc: Enabled bearer , priority 0 [ 518.299741][T18610] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3496'. [ 518.339177][T18613] tipc: Failed to remove unknown binding: 66,1,1/0:488018086/488018088 [ 518.954488][T18645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3503'. [ 519.016215][T14701] hid-generic 0005:15C2:0002.0003: item fetching failed at offset 4/6 [ 519.074648][T14701] hid-generic 0005:15C2:0002.0003: probe with driver hid-generic failed with error -22 [ 519.360118][T14701] tipc: Node number set to 11578026 [ 519.459630][T18668] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 519.595997][T18672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3513'. [ 519.931400][T18651] lo speed is unknown, defaulting to 1000 [ 520.064135][T18689] netlink: 'syz.1.3519': attribute type 1 has an invalid length. [ 520.166601][T18694] netlink: 'syz.3.3520': attribute type 1 has an invalid length. [ 520.203153][T18694] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3520'. [ 520.623837][T18716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3528'. [ 520.696489][T18720] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3529'. [ 521.994122][T18770] netlink: 'syz.2.3544': attribute type 2 has an invalid length. [ 522.328049][T18783] netlink: 'syz.1.3549': attribute type 75 has an invalid length. [ 522.522243][T18794] netlink: 'syz.1.3554': attribute type 1 has an invalid length. [ 522.571353][T18793] __nla_validate_parse: 12 callbacks suppressed [ 522.571380][T18793] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3550'. [ 522.914292][T18797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3552'. [ 523.087279][T18811] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3557'. [ 523.296589][T18820] netlink: 'syz.4.3559': attribute type 1 has an invalid length. [ 523.384821][T18828] Cannot find add_set index 0 as target [ 523.541989][T18832] netlink: 'syz.2.3561': attribute type 11 has an invalid length. [ 523.572418][T18832] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3561'. [ 523.611249][T18834] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3562'. [ 523.652996][T18834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3562'. [ 523.975637][T18854] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 524.132276][T18873] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3572'. [ 524.445094][T18854] bond1 (unregistering): Released all slaves [ 524.983327][T18890] netlink: 284 bytes leftover after parsing attributes in process `syz.0.3576'. [ 525.034811][T18879] netlink: 'syz.2.3573': attribute type 1 has an invalid length. [ 525.084228][T18879] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3573'. [ 525.175412][T18898] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 525.190606][T14706] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 525.256269][T18902] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3581'. [ 526.542426][T18962] team0 (unregistering): Port device team_slave_0 removed [ 526.559609][T18962] team0 (unregistering): Port device team_slave_1 removed [ 526.857013][T18980] openvswitch: netlink: Flow actions attr not present in new flow. [ 527.293840][T19000] C: renamed from lo [ 527.319842][T19000] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 527.522527][ T1022] nci: nci_rsp_packet: unknown rsp opcode 0x3f [ 527.538729][T19014] netlink: 'syz.1.3612': attribute type 16 has an invalid length. [ 527.679743][T19014] veth0_macvtap: entered allmulticast mode [ 527.767974][T19025] openvswitch: netlink: IP tunnel dst address not specified [ 527.846968][T19025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 528.059841][T19038] __nla_validate_parse: 6 callbacks suppressed [ 528.059865][T19038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3615'. [ 530.369113][T19005] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 530.819458][T19056] x_tables: duplicate underflow at hook 2 [ 531.045295][T19064] openvswitch: netlink: Flow actions attr not present in new flow. [ 531.087009][T19054] veth0: entered promiscuous mode [ 531.108620][T19064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3626'. [ 531.228118][T19075] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 531.307137][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058a1e400: rx timeout, send abort [ 531.315686][T19051] veth0: left promiscuous mode [ 531.348608][T19069] xt_l2tp: v2 doesn't support IP mode [ 531.408988][T19082] rdma_op ffff8880858371f0 conn xmit_rdma 0000000000000000 [ 531.571478][T19087] netlink: 'syz.0.3631': attribute type 1 has an invalid length. [ 531.781943][T19090] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3632'. [ 531.807324][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804ffa8400: rx timeout, send abort [ 531.816753][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058a1e400: abort rx timeout. Force session deactivation [ 532.085296][T19101] Can't find ip_set type bitmap:ip,mac [ 532.116642][T19112] netlink: 'syz.4.3638': attribute type 21 has an invalid length. [ 532.149721][T19111] openvswitch: netlink: Key type 30 is not supported [ 532.150192][T19112] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3638'. [ 532.315648][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804ffa8400: abort rx timeout. Force session deactivation [ 532.494332][T19135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3644'. [ 532.740339][T19151] openvswitch: netlink: IP tunnel dst address not specified [ 532.893775][T19157] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3649'. [ 533.280880][T19168] syzkaller0: entered promiscuous mode [ 533.304941][T19168] syzkaller0: entered allmulticast mode [ 533.624508][T19195] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 533.696370][T19195] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3656'. [ 533.755973][T19195] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3656'. [ 533.809354][T19203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3658'. [ 534.138782][T19218] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3663'. [ 534.706364][T19247] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3672'. [ 534.748876][T19247] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3672'. [ 534.905103][T19264] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3676'. [ 534.943978][T19267] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3673'. [ 535.032041][T19267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3673'. [ 535.552263][T19295] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3681'. [ 535.604686][T19300] netlink: 'syz.0.3682': attribute type 1 has an invalid length. [ 536.042679][T19314] veth1_macvtap: renamed from vlan0 [ 536.114244][T19318] syz_tun: entered allmulticast mode [ 536.180439][T19324] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 536.378426][T19331] netem: change failed [ 536.392348][T19332] netem: change failed [ 536.781806][T19359] syzkaller0: entered promiscuous mode [ 536.795921][T19359] syzkaller0: entered allmulticast mode [ 538.846832][T19452] nbd: couldn't find a device at index 1048580 [ 538.861920][T19452] nbd: couldn't find a device at index 1048580 [ 539.116944][T19461] netlink: 'syz.0.3721': attribute type 1 has an invalid length. [ 539.169122][T19466] __nla_validate_parse: 6 callbacks suppressed [ 539.169143][T19466] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3723'. [ 539.171102][T19461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3721'. [ 539.217732][T19465] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3722'. [ 539.227782][ T5748] IPVS: starting estimator thread 0... [ 539.262883][T19466] bond5 (unregistering): Released all slaves [ 539.332189][T19469] IPVS: using max 27 ests per chain, 64800 per kthread [ 539.364057][T19464] netlink: 404 bytes leftover after parsing attributes in process `syz.2.3723'. [ 539.393386][T19464] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3723'. [ 539.412301][T19464] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3723'. [ 539.440423][T19464] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3723'. [ 539.637453][T19481] x_tables: unsorted underflow at hook 1 [ 539.714615][T19481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3725'. [ 539.876946][T19481] dvmrp1: entered allmulticast mode [ 540.490815][T19525] netlink: 'syz.4.3733': attribute type 12 has an invalid length. [ 540.531116][T19525] netlink: 'syz.4.3733': attribute type 29 has an invalid length. [ 540.561950][T19525] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3733'. [ 540.615474][T19525] netlink: 'syz.4.3733': attribute type 1 has an invalid length. [ 540.678612][T19525] netlink: 'syz.4.3733': attribute type 1 has an invalid length. [ 540.728172][T19525] netlink: 'syz.4.3733': attribute type 2 has an invalid length. [ 540.778545][T19540] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 540.824659][T19544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3735'. [ 541.064687][T19542] tipc: Started in network mode [ 541.101636][T19542] tipc: Node identity e0000001, cluster identity 4711 [ 541.139305][T19542] tipc: Enabling of bearer rejected, failed to enable media [ 541.368171][T19562] macsec0: entered promiscuous mode [ 541.379654][T19559] veth1_macvtap: left promiscuous mode [ 541.401612][T19559] macsec0 (unregistering): left promiscuous mode [ 542.016699][T19606] netlink: 'syz.4.3750': attribute type 13 has an invalid length. [ 542.490708][T19623] tipc: Enabling not permitted [ 542.510084][T19623] tipc: Enabling of bearer rejected, failed to enable media [ 542.556262][T19629] netlink: 'syz.3.3754': attribute type 8 has an invalid length. [ 542.631649][T19629] veth1_to_team: entered promiscuous mode [ 542.679590][T19629] gretap0: entered promiscuous mode [ 542.700492][T19629] veth1_to_team: left promiscuous mode [ 542.716300][T19629] gretap0: left promiscuous mode [ 542.978861][T19638] bond5: (slave C): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 543.042283][T19638] bond5: (slave C): Enslaving as an active interface with an up link [ 543.063938][T19638] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 543.105666][ T809] C speed is unknown, defaulting to 1000 [ 543.113729][ T809] sz1: Port: 1 Link ACTIVE [ 543.172020][T14702] C speed is unknown, defaulting to 1000 [ 543.364802][T19666] netlink: 'syz.2.3767': attribute type 3 has an invalid length. [ 543.858233][T19685] bond6: option arp_all_targets: invalid value (18446744073709551613) [ 543.920484][T19685] bond6 (unregistering): Released all slaves [ 544.476579][T19729] __nla_validate_parse: 6 callbacks suppressed [ 544.476601][T19729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3782'. [ 544.532410][T19725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 545.119196][T19759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3789'. [ 545.291587][T19761] syzkaller0: entered promiscuous mode [ 545.305382][T19761] syzkaller0: entered allmulticast mode [ 545.342041][T19766] netlink: 'syz.4.3792': attribute type 1 has an invalid length. [ 545.358559][T19766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3792'. [ 545.408014][T19766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3792'. [ 545.478699][T19766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3792'. [ 545.508744][T19766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3792'. [ 545.592303][T19772] syzkaller0: entered promiscuous mode [ 545.609402][T19772] syzkaller0: entered allmulticast mode [ 546.220203][T19816] netlink: 332 bytes leftover after parsing attributes in process `syz.0.3803'. [ 546.243497][T19817] netlink: 332 bytes leftover after parsing attributes in process `syz.0.3803'. [ 548.640066][T19816] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 548.641021][T19817] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 548.855824][T19823] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 548.930707][T19823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3804'. [ 548.948414][T19834] netlink: 408 bytes leftover after parsing attributes in process `syz.1.3807'. [ 549.443856][T19855] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 549.458289][T19860] netlink: 'syz.1.3816': attribute type 1 has an invalid length. [ 549.497162][T19860] netlink: 'syz.1.3816': attribute type 32 has an invalid length. [ 549.524423][T19860] __nla_validate_parse: 2 callbacks suppressed [ 549.524443][T19860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3816'. [ 549.677192][T19860] bond2: option coupled_control: invalid value (192) [ 549.714469][T19860] bond2 (unregistering): Released all slaves [ 549.986562][T19885] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3822'. [ 550.682866][T19923] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3829'. [ 551.257109][T19906] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 551.270853][T19906] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 551.399122][T19956] netlink: 'syz.1.3836': attribute type 1 has an invalid length. [ 551.569770][T19969] bond0: Error: Cannot enslave bond to itself. [ 552.757970][T19999] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3843'. [ 552.967385][T20010] veth0_to_team: Caught tx_queue_len zero misconfig [ 553.884921][T19933] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 554.162558][T20025] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3847'. [ 554.211153][T20024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3848'. [ 554.284758][T20032] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3852'. [ 554.305881][T20032] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3852'. [ 554.349625][T20033] netlink: 'syz.1.3852': attribute type 3 has an invalid length. [ 554.463433][T20043] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3855'. [ 554.547979][T20047] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3856'. [ 554.677367][T20055] netlink: 'syz.3.3859': attribute type 2 has an invalid length. [ 554.889118][T20062] bridge_slave_0: left allmulticast mode [ 554.910261][T20062] bridge_slave_0: left promiscuous mode [ 554.925955][T20062] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.972910][T20062] bridge_slave_1: left allmulticast mode [ 554.996908][T20062] bridge_slave_1: left promiscuous mode [ 555.019110][T20062] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.030894][T20075] openvswitch: netlink: IP tunnel dst address not specified [ 555.104554][T20062] bond1: (slave veth0_to_bond): Releasing backup interface [ 555.186136][T20062] bond0: (slave bond_slave_0): Releasing backup interface [ 555.227706][T20062] bond0: (slave bond_slave_1): Releasing backup interface [ 555.263555][T20062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 555.290580][T20062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 555.308529][T20062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 555.325670][T20062] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.337375][T20062] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 555.389215][T20080] tipc: Enabling of bearer rejected, failed to enable media [ 555.498461][T20074] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3862'. [ 555.634912][T20074] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3862'. [ 555.837231][T20099] bond0: entered promiscuous mode [ 555.859246][T20099] batadv0: entered promiscuous mode [ 555.874344][T20099] debugfs: 'hsr1' already exists in 'hsr' [ 555.883508][T20099] Cannot create hsr debugfs directory [ 555.889218][T20099] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 555.902711][T20099] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 555.912771][T20099] bond0: left promiscuous mode [ 555.927459][T20099] batadv0: left promiscuous mode [ 556.145804][T20110] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3872'. [ 556.906093][T20145] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3881'. [ 556.916911][T20146] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3882'. [ 556.930730][T20145] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3881'. [ 556.967233][T20145] netlink: 'syz.4.3881': attribute type 6 has an invalid length. [ 556.998966][T20145] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3881'. [ 557.328949][T20160] netlink: 'syz.1.3888': attribute type 29 has an invalid length. [ 557.364423][T20160] netlink: 'syz.1.3888': attribute type 29 has an invalid length. [ 557.399179][T20160] netlink: 264 bytes leftover after parsing attributes in process `syz.1.3888'. [ 557.449430][T20168] syzkaller0: entered promiscuous mode [ 557.480585][T20168] syzkaller0: entered allmulticast mode [ 557.844912][T20180] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3893'. [ 558.445950][T20204] xfrm1: entered promiscuous mode [ 558.468447][T20204] xfrm1: entered allmulticast mode [ 558.581445][T20210] FAULT_INJECTION: forcing a failure. [ 558.581445][T20210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 558.618506][T20210] CPU: 1 UID: 0 PID: 20210 Comm: syz.1.3900 Not tainted syzkaller #0 PREEMPT(full) [ 558.618538][T20210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 558.618551][T20210] Call Trace: [ 558.618559][T20210] [ 558.618568][T20210] dump_stack_lvl+0xe8/0x150 [ 558.618604][T20210] should_fail_ex+0x412/0x560 [ 558.618637][T20210] _copy_to_user+0x31/0xb0 [ 558.618740][T20210] simple_read_from_buffer+0xe1/0x170 [ 558.618775][T20210] proc_fail_nth_read+0x1bb/0x230 [ 558.618807][T20210] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 558.618838][T20210] ? rw_verify_area+0x2a6/0x4d0 [ 558.618878][T20210] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 558.618906][T20210] vfs_read+0x20c/0xa70 [ 558.618942][T20210] ? __pfx___mutex_lock+0x10/0x10 [ 558.618969][T20210] ? __pfx_vfs_read+0x10/0x10 [ 558.619009][T20210] ? __fget_files+0x2a/0x420 [ 558.619040][T20210] ? __fget_files+0x3a0/0x420 [ 558.619063][T20210] ? __fget_files+0x2a/0x420 [ 558.619098][T20210] ksys_read+0x150/0x270 [ 558.619131][T20210] ? __pfx_ksys_read+0x10/0x10 [ 558.619170][T20210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.619194][T20210] do_syscall_64+0x174/0x580 [ 558.619215][T20210] ? trace_irq_disable+0x3b/0x140 [ 558.619246][T20210] ? clear_bhb_loop+0x40/0x90 [ 558.619277][T20210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.619299][T20210] RIP: 0033:0x7fdf94f5d68e [ 558.619320][T20210] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 558.619338][T20210] RSP: 002b:00007fdf95f41fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 558.619362][T20210] RAX: ffffffffffffffda RBX: 00007fdf95f426c0 RCX: 00007fdf94f5d68e [ 558.619377][T20210] RDX: 000000000000000f RSI: 00007fdf95f420a0 RDI: 0000000000000004 [ 558.619389][T20210] RBP: 00007fdf95f42090 R08: 0000000000000000 R09: 0000000000000000 [ 558.619402][T20210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 558.619415][T20210] R13: 00007fdf95216038 R14: 00007fdf95215fa0 R15: 00007ffdaf35af58 [ 558.619450][T20210] [ 558.871178][T20215] netlink: 'syz.4.3903': attribute type 11 has an invalid length. [ 559.669757][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802a51a800: rx timeout, send abort [ 559.682273][T20243] syzkaller0: entered promiscuous mode [ 559.701889][T20243] syzkaller0: entered allmulticast mode [ 559.796077][T20251] xt_cgroup: xt_cgroup: no path or classid specified [ 560.020860][ T5651] Bluetooth: hci5: command 0x0406 tx timeout [ 560.157008][T20262] __nla_validate_parse: 4 callbacks suppressed [ 560.157028][T20262] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3918'. [ 560.169331][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880845fd400: rx timeout, send abort [ 560.175413][T20263] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3918'. [ 560.182012][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802a51a800: abort rx timeout. Force session deactivation [ 560.203120][T20259] bond2: Unable to set up delay as MII monitoring is disabled [ 560.214391][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880845fd400: connection exists (fe ff). last cmd: 20 [ 560.220845][T20259] bond2 (unregistering): Released all slaves [ 560.464350][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880845fe000: rx timeout, send abort [ 560.496163][T20270] netlink: 'syz.1.3920': attribute type 1 has an invalid length. [ 560.734550][T20287] syz_tun: entered allmulticast mode [ 560.746850][T20286] syz_tun: left allmulticast mode [ 560.972689][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880845fe000: abort rx timeout. Force session deactivation [ 561.254184][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880845fdc00: rx timeout, send abort [ 561.339049][T20306] veth1_to_bond: entered allmulticast mode [ 561.464808][T20306] veth1_to_bond: left allmulticast mode [ 561.756137][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803573a800: rx timeout, send abort [ 561.764672][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880845fdc00: abort rx timeout. Force session deactivation [ 561.785110][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88803573a800: connection exists (fe ff). last cmd: 20 [ 561.819125][T20324] netlink: 'syz.3.3932': attribute type 5 has an invalid length. [ 561.958016][T20324] netlink: 'syz.3.3932': attribute type 4 has an invalid length. [ 562.035070][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880845fc400: rx timeout, send abort [ 562.067152][T20330] bond1: (slave erspan0): Device is not bonding slave [ 562.087444][T20330] bond1: option active_slave: invalid value (erspan0) [ 562.138991][T20330] bond1 (unregistering): Released all slaves [ 562.202441][T20332] netlink: 'syz.4.3934': attribute type 21 has an invalid length. [ 562.224288][T20338] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3937'. [ 562.228650][T20339] netlink: 212332 bytes leftover after parsing attributes in process `syz.3.3935'. [ 562.234843][T20332] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3934'. [ 562.255078][T20338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3937'. [ 562.533216][T20345] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3939'. [ 562.543507][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880845fc400: abort rx timeout. Force session deactivation [ 562.575540][T20347] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 562.638321][ T29] audit: type=1800 audit(1780643429.265:5): pid=20348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3938" name="memory.events" dev="tmpfs" ino=486 res=0 errno=0 [ 562.835301][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880845fc800: rx timeout, send abort [ 563.055734][ C0] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 563.173681][T20365] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3945'. [ 563.233774][T20365] veth1_to_team: entered promiscuous mode [ 563.258201][T20365] gretap0: entered promiscuous mode [ 563.273434][T20365] debugfs: 'hsr1' already exists in 'hsr' [ 563.286105][T20365] Cannot create hsr debugfs directory [ 563.312636][T20365] hsr1: entered promiscuous mode [ 563.335770][ C0] vcan0: j1939_tp_rxtimer: 0xffff888036ccb400: rx timeout, send abort [ 563.344358][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880845fc800: abort rx timeout. Force session deactivation [ 563.368827][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888036ccb400: connection exists (fe ff). last cmd: 20 [ 563.609256][T20387] bridge_slave_0: invalid flags given to default FDB implementation [ 563.618760][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880845fd000: rx timeout, send abort [ 563.628937][T20387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3955'. [ 563.636848][T20389] gtp0: entered promiscuous mode [ 563.644845][T20389] gtp0: entered allmulticast mode [ 564.127084][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880845fd000: abort rx timeout. Force session deactivation [ 564.228185][T20416] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3963'. [ 564.397586][ C0] vcan0: j1939_tp_rxtimer: 0xffff888085787400: rx timeout, send abort [ 564.628230][T20428] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.897807][ C0] vcan0: j1939_tp_rxtimer: 0xffff888068ac0000: rx timeout, send abort [ 564.907222][ C0] vcan0: j1939_tp_rxtimer: 0xffff888085787400: abort rx timeout. Force session deactivation [ 564.940660][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888068ac0000: connection exists (fe ff). last cmd: 20 [ 565.190785][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880524c5000: rx timeout, send abort [ 565.254678][T20449] syzkaller0: entered promiscuous mode [ 565.266519][T20449] syzkaller0: entered allmulticast mode [ 565.404674][T20464] __nla_validate_parse: 2 callbacks suppressed [ 565.405513][T20464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3977'. [ 565.554929][T20473] netlink: 'syz.0.3980': attribute type 61 has an invalid length. [ 565.565002][T20473] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3980'. [ 565.590800][T20474] netlink: 'syz.0.3980': attribute type 27 has an invalid length. [ 565.669254][T20479] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3981'. [ 565.699073][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880524c5000: abort rx timeout. Force session deactivation [ 565.947572][T20486] bond6: entered promiscuous mode [ 565.953593][T20486] bond6: entered allmulticast mode [ 565.959321][T20486] 8021q: adding VLAN 0 to HW filter on device bond6 [ 565.972518][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807bf3f800: rx timeout, send abort [ 566.472743][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804c8f9c00: rx timeout, send abort [ 566.481111][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807bf3f800: abort rx timeout. Force session deactivation [ 566.514493][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88804c8f9c00: connection exists (fe ff). last cmd: 20 [ 566.764464][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a91e800: rx timeout, send abort [ 567.272720][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a91e800: abort rx timeout. Force session deactivation [ 567.543090][ C0] vcan0: j1939_tp_rxtimer: 0xffff888021af1800: rx timeout, send abort [ 568.043155][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035a8a800: rx timeout, send abort [ 568.052017][ C0] vcan0: j1939_tp_rxtimer: 0xffff888021af1800: abort rx timeout. Force session deactivation [ 568.078389][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888035a8a800: connection exists (fe ff). last cmd: 20 [ 568.328396][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880689c9c00: rx timeout, send abort [ 568.836673][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880689c9c00: abort rx timeout. Force session deactivation [ 569.120173][ C0] vcan0: j1939_tp_rxtimer: 0xffff888039acf000: rx timeout, send abort [ 569.620530][ C0] vcan0: j1939_tp_rxtimer: 0xffff888052a96c00: rx timeout, send abort [ 569.628771][ C0] vcan0: j1939_tp_rxtimer: 0xffff888039acf000: abort rx timeout. Force session deactivation [ 569.660367][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888052a96c00: connection exists (fe ff). last cmd: 20 [ 569.910508][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880452cc400: rx timeout, send abort [ 570.418769][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880452cc400: abort rx timeout. Force session deactivation [ 570.703149][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880452ccc00: rx timeout, send abort [ 571.203226][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880792b8c00: rx timeout, send abort [ 571.211755][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880452ccc00: abort rx timeout. Force session deactivation [ 571.242079][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880792b8c00: connection exists (fe ff). last cmd: 20 [ 571.492079][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880452cd800: rx timeout, send abort [ 572.000339][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880452cd800: abort rx timeout. Force session deactivation [ 572.272711][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807bff9c00: rx timeout, send abort [ 572.772805][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034945400: rx timeout, send abort [ 572.781136][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807bff9c00: abort rx timeout. Force session deactivation [ 572.815450][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888034945400: connection exists (fe ff). last cmd: 20 [ 573.065442][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058b60c00: rx timeout, send abort [ 573.573710][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058b60c00: abort rx timeout. Force session deactivation [ 573.852010][ C0] vcan0: j1939_tp_rxtimer: 0xffff888068abdc00: rx timeout, send abort [ 574.352125][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880589f9800: rx timeout, send abort [ 574.360790][ C0] vcan0: j1939_tp_rxtimer: 0xffff888068abdc00: abort rx timeout. Force session deactivation [ 574.387368][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880589f9800: connection exists (fe ff). last cmd: 20 [ 574.637382][ C0] vcan0: j1939_tp_rxtimer: 0xffff888041abb000: rx timeout, send abort [ 575.145640][ C0] vcan0: j1939_tp_rxtimer: 0xffff888041abb000: abort rx timeout. Force session deactivation [ 575.420050][ C0] vcan0: j1939_tp_rxtimer: 0xffff888041ab8c00: rx timeout, send abort [ 575.920977][ C0] vcan0: j1939_tp_rxtimer: 0xffff888050983400: rx timeout, send abort [ 575.929280][ C0] vcan0: j1939_tp_rxtimer: 0xffff888041ab8c00: abort rx timeout. Force session deactivation [ 575.959605][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888050983400: connection exists (fe ff). last cmd: 20 [ 576.209615][ C0] vcan0: j1939_tp_rxtimer: 0xffff888041ab8400: rx timeout, send abort [ 576.717880][ C0] vcan0: j1939_tp_rxtimer: 0xffff888041ab8400: abort rx timeout. Force session deactivation [ 576.998240][ C0] vcan0: j1939_tp_rxtimer: 0xffff888041ab8800: rx timeout, send abort [ 577.498315][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053f95000: rx timeout, send abort [ 577.507045][ C0] vcan0: j1939_tp_rxtimer: 0xffff888041ab8800: abort rx timeout. Force session deactivation [ 577.537423][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888053f95000: connection exists (fe ff). last cmd: 20 [ 577.787406][ C0] vcan0: j1939_tp_rxtimer: 0xffff888041abb400: rx timeout, send abort [ 578.295707][ C0] vcan0: j1939_tp_rxtimer: 0xffff888041abb400: abort rx timeout. Force session deactivation [ 578.577037][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031e4fc00: rx timeout, send abort [ 579.077230][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804ce38000: rx timeout, send abort [ 579.085523][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031e4fc00: abort rx timeout. Force session deactivation [ 579.105915][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88804ce38000: connection exists (fe ff). last cmd: 20 [ 579.355933][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880335f6800: rx timeout, send abort [ 579.864216][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880335f6800: abort rx timeout. Force session deactivation [ 580.146579][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880335f4c00: rx timeout, send abort [ 580.646691][ C0] vcan0: j1939_tp_rxtimer: 0xffff888020382c00: rx timeout, send abort [ 580.656667][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880335f4c00: abort rx timeout. Force session deactivation [ 580.681064][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888020382c00: connection exists (fe ff). last cmd: 20 [ 580.931081][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880335f4400: rx timeout, send abort [ 581.439345][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880335f4400: abort rx timeout. Force session deactivation [ 581.717737][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058b21800: rx timeout, send abort [ 582.217827][ C0] vcan0: j1939_tp_rxtimer: 0xffff888036674800: rx timeout, send abort [ 582.226485][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058b21800: abort rx timeout. Force session deactivation [ 582.261859][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888036674800: connection exists (fe ff). last cmd: 20 [ 582.511856][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058b22000: rx timeout, send abort [ 583.020440][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058b22000: abort rx timeout. Force session deactivation [ 583.301784][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058b20400: rx timeout, send abort [ 583.801866][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880792ad800: rx timeout, send abort [ 583.810352][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058b20400: abort rx timeout. Force session deactivation [ 583.833680][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880792ad800: connection exists (fe ff). last cmd: 20 [ 584.083690][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058b21400: rx timeout, send abort [ 584.591960][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058b21400: abort rx timeout. Force session deactivation [ 584.862288][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058b20800: rx timeout, send abort [ 585.362419][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802a217400: rx timeout, send abort [ 585.371115][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058b20800: abort rx timeout. Force session deactivation [ 585.399497][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88802a217400: connection exists (fe ff). last cmd: 20 [ 585.620296][T18733] Bluetooth: hci1: command 0x0406 tx timeout [ 585.649500][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b385800: rx timeout, send abort [ 586.157789][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b385800: abort rx timeout. Force session deactivation [ 586.434158][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b34c800: rx timeout, send abort [ 586.934238][ C0] vcan0: j1939_tp_rxtimer: 0xffff888052d6e800: rx timeout, send abort [ 586.942762][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b34c800: abort rx timeout. Force session deactivation [ 586.968134][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888052d6e800: connection exists (fe ff). last cmd: 20 [ 587.218125][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b34e000: rx timeout, send abort [ 587.505419][T20499] netlink: 'syz.4.3989': attribute type 1 has an invalid length. [ 587.520298][T20498] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3986'. [ 587.555205][T20498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3986'. [ 587.589614][ T5651] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 587.604499][T20499] 8021q: adding VLAN 0 to HW filter on device bond1 [ 587.608081][ T5651] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 587.627131][ T5651] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 587.639744][ T5651] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 587.651925][ T5651] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 587.675296][T20506] bond1: (slave veth3): Enslaving as an active interface with a down link [ 587.705863][ T6425] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.726391][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b34e000: abort rx timeout. Force session deactivation [ 587.737086][T20499] bond1: (slave veth0_to_bond): making interface the new active one [ 587.766420][T20499] veth0_to_bond: entered promiscuous mode [ 587.786865][T20499] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 587.896373][T20506] bond1: (slave veth5): Enslaving as an active interface with a down link [ 587.907797][T20506] netlink: 'syz.4.3989': attribute type 1 has an invalid length. [ 587.918284][ T6425] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.920985][T20506] netlink: 'syz.4.3989': attribute type 2 has an invalid length. [ 587.964439][ T6425] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.995581][ T6425] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.011806][ C0] vcan0: j1939_tp_rxtimer: 0xffff888068b53c00: rx timeout, send abort [ 588.021253][T20516] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 588.028538][T20516] syzkaller1: linktype set to 823 [ 588.511984][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880217e1400: rx timeout, send abort [ 588.522025][ C0] vcan0: j1939_tp_rxtimer: 0xffff888068b53c00: abort rx timeout. Force session deactivation [ 588.544468][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880217e1400: connection exists (fe ff). last cmd: 20 [ 588.677790][T20541] veth7: entered allmulticast mode [ 588.728943][T20548] macvlan2: entered promiscuous mode [ 588.741653][T20548] macvlan2: entered allmulticast mode [ 588.758446][T20548] team0: Device macvlan2 is already an upper device of the team interface [ 588.794427][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034159000: rx timeout, send abort [ 588.958173][T20553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4000'. [ 589.113818][T20562] IPVS: set_ctl: invalid protocol: 16 248.1.0.0:0 [ 589.281174][T20505] C speed is unknown, defaulting to 1000 [ 589.302792][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034159000: abort rx timeout. Force session deactivation [ 589.372260][T20573] xt_recent: Unsupported userspace flags (000000b1) [ 589.405519][T20580] netlink: 'syz.1.4007': attribute type 1 has an invalid length. [ 589.414320][T20580] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4007'. [ 589.424634][T20580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4007'. [ 589.583323][ C0] vcan0: j1939_tp_rxtimer: 0xffff888039bca400: rx timeout, send abort [ 589.690120][ T5651] Bluetooth: hci0: command tx timeout [ 589.818835][T20598] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4012'. [ 589.931707][T20602] netlink: 'syz.4.4013': attribute type 28 has an invalid length. [ 589.949291][T20603] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4012'. [ 589.971115][T20602] netlink: 'syz.4.4013': attribute type 3 has an invalid length. [ 589.994683][T20602] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4013'. [ 590.083481][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058b21c00: rx timeout, send abort [ 590.092174][ C0] vcan0: j1939_tp_rxtimer: 0xffff888039bca400: abort rx timeout. Force session deactivation [ 590.126676][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888058b21c00: connection exists (fe ff). last cmd: 20 [ 590.244205][T20611] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4016'. [ 590.376638][ C0] vcan0: j1939_tp_rxtimer: 0xffff888039bcac00: rx timeout, send abort [ 590.572143][T20594] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 590.884955][ C0] vcan0: j1939_tp_rxtimer: 0xffff888039bcac00: abort rx timeout. Force session deactivation [ 591.031827][T20505] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.039155][T20505] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.047137][T20505] bridge_slave_0: entered allmulticast mode [ 591.057887][T20505] bridge_slave_0: entered promiscuous mode [ 591.067128][T20634] netlink: 'syz.3.4022': attribute type 3 has an invalid length. [ 591.086646][T20505] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.096392][T20505] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.106534][T20505] bridge_slave_1: entered allmulticast mode [ 591.122244][T20505] bridge_slave_1: entered promiscuous mode [ 591.123137][T20634] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4022'. [ 591.158408][ C0] vcan0: j1939_tp_rxtimer: 0xffff888044bbd000: rx timeout, send abort [ 591.188466][T20505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.221163][T20505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.304116][T20645] netlink: 'syz.1.4025': attribute type 1 has an invalid length. [ 591.457462][T20505] team0: Port device team_slave_0 added [ 591.489769][T20505] team0: Port device team_slave_1 added [ 591.658578][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803821f000: rx timeout, send abort [ 591.668613][ C0] vcan0: j1939_tp_rxtimer: 0xffff888044bbd000: abort rx timeout. Force session deactivation [ 591.688931][T20505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 591.698035][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88803821f000: connection exists (fe ff). last cmd: 20 [ 591.717509][T20505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.747316][T20505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 591.770830][ T5651] Bluetooth: hci0: command tx timeout [ 591.797862][T20505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 591.810685][T20505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.841937][T20505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 591.864572][T20668] raw_sendmsg: syz.4.4032 forgot to set AF_INET. Fix it! [ 591.948490][ C0] vcan0: j1939_tp_rxtimer: 0xffff888044bbe400: rx timeout, send abort [ 592.051826][T20505] hsr_slave_0: entered promiscuous mode [ 592.068949][T20505] hsr_slave_1: entered promiscuous mode [ 592.084186][T20505] debugfs: 'hsr0' already exists in 'hsr' [ 592.105935][T20505] Cannot create hsr debugfs directory [ 592.136758][T20685] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 592.235790][T20687] netlink: 'syz.3.4037': attribute type 8 has an invalid length. [ 592.456814][ C0] vcan0: j1939_tp_rxtimer: 0xffff888044bbe400: abort rx timeout. Force session deactivation [ 592.734266][ C0] vcan0: j1939_tp_rxtimer: 0xffff888044bbec00: rx timeout, send abort [ 592.904759][T20706] syzkaller0: entered promiscuous mode [ 592.905675][T20713] __nla_validate_parse: 4 callbacks suppressed [ 592.905692][T20713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4047'. [ 592.918837][T20706] syzkaller0: entered allmulticast mode [ 592.966015][T20713] netlink: 'syz.3.4047': attribute type 3 has an invalid length. [ 593.012811][T20711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4045'. [ 593.175314][T20726] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4047'. [ 593.234426][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880452cd000: rx timeout, send abort [ 593.243619][ C0] vcan0: j1939_tp_rxtimer: 0xffff888044bbec00: abort rx timeout. Force session deactivation [ 593.266956][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880452cd000: connection exists (fe ff). last cmd: 20 [ 593.515337][ C0] vcan0: j1939_tp_rxtimer: 0xffff888044bbe800: rx timeout, send abort [ 593.851817][ T5651] Bluetooth: hci0: command 0x040f tx timeout [ 594.030516][ C0] vcan0: j1939_tp_rxtimer: 0xffff888044bbe800: abort rx timeout. Force session deactivation [ 594.310097][ C0] vcan0: j1939_tp_rxtimer: 0xffff888044bbd400: rx timeout, send abort [ 594.816899][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ad5f800: rx timeout, send abort [ 594.825428][ C0] vcan0: j1939_tp_rxtimer: 0xffff888044bbd400: abort rx timeout. Force session deactivation [ 594.856458][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88807ad5f800: connection exists (fe ff). last cmd: 20 [ 595.113274][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e4e6400: rx timeout, send abort [ 595.625313][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e4e6400: abort rx timeout. Force session deactivation [ 595.923678][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e4e6800: rx timeout, send abort [ 595.932892][ T5651] Bluetooth: hci0: command 0x040f tx timeout [ 596.192268][T20711] vlan3: entered allmulticast mode [ 596.197455][T20711] bond0: entered allmulticast mode [ 596.415754][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804ce38000: rx timeout, send abort [ 596.431937][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e4e6800: abort rx timeout. Force session deactivation [ 596.457409][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88804ce38000: connection exists (fe ff). last cmd: 20 [ 596.690670][T20765] netlink: 'syz.0.4051': attribute type 1 has an invalid length. [ 596.707368][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055be0000: rx timeout, send abort [ 596.755568][T20752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4048'. [ 596.805079][T20752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4048'. [ 596.948374][T20765] bond7: entered promiscuous mode [ 596.962835][T20765] 8021q: adding VLAN 0 to HW filter on device bond7 [ 596.978800][T20780] netlink: 'syz.4.4052': attribute type 1 has an invalid length. [ 597.000959][T20780] netlink: 'syz.4.4052': attribute type 2 has an invalid length. [ 597.013125][T20780] netlink: 'syz.4.4052': attribute type 1 has an invalid length. [ 597.031852][T20771] tipc: Started in network mode [ 597.041634][T20780] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4052'. [ 597.055816][T20771] tipc: Node identity 4, cluster identity 4711 [ 597.073418][T20783] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4052'. [ 597.080249][T20771] tipc: Node number set to 4 [ 597.093973][T20774] lo: Caught tx_queue_len zero misconfig [ 597.149510][T20778] tc_dump_action: action bad kind [ 597.215701][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055be0000: abort rx timeout. Force session deactivation [ 597.228647][T20505] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 597.266049][T20793] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4055'. [ 597.284537][T20793] netlink: 'syz.1.4055': attribute type 10 has an invalid length. [ 597.306139][T20505] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 597.425527][T20793] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 597.467305][T20793] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 597.493131][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880551dac00: rx timeout, send abort [ 597.527107][T20793] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 597.559377][T20505] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 597.625852][T20505] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 597.817241][T20787] syzkaller0: entered promiscuous mode [ 597.833358][T20787] syzkaller0: entered allmulticast mode [ 597.894056][T20505] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 597.926817][T20820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 597.951240][T20505] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 597.993275][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801df6c800: rx timeout, send abort [ 598.002354][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880551dac00: abort rx timeout. Force session deactivation [ 598.014646][ T5651] Bluetooth: hci0: command 0x040f tx timeout [ 598.028402][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88801df6c800: connection exists (fe ff). last cmd: 20 [ 598.277348][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880551db400: rx timeout, send abort [ 598.785689][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880551db400: abort rx timeout. Force session deactivation [ 599.072183][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880551dbc00: rx timeout, send abort [ 599.568363][ C0] vcan0: j1939_tp_rxtimer: 0xffff888036685000: rx timeout, send abort [ 599.580504][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880551dbc00: abort rx timeout. Force session deactivation [ 599.610274][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888036685000: connection exists (fe ff). last cmd: 20 [ 599.860142][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802b46f400: rx timeout, send abort [ 600.374389][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802b46f400: abort rx timeout. Force session deactivation [ 600.660354][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057bd2400: rx timeout, send abort [ 600.974946][T18733] Bluetooth: hci3: command 0x0406 tx timeout [ 601.164875][ C0] vcan0: j1939_tp_rxtimer: 0xffff888026fc0400: rx timeout, send abort [ 601.173787][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057bd2400: abort rx timeout. Force session deactivation [ 601.195703][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888026fc0400: connection exists (fe ff). last cmd: 20 [ 601.301701][T20505] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 601.311605][T20505] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 601.446618][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880580b9000: rx timeout, send abort [ 601.471989][ T6423] bridge_slave_1: left allmulticast mode [ 601.490453][ T6423] bridge_slave_1: left promiscuous mode [ 601.505680][ T6423] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.525972][ T6423] bridge_slave_0: left allmulticast mode [ 601.542337][ T6423] bridge_slave_0: left promiscuous mode [ 601.558486][ T6423] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.808452][ T6423] bond12 (unregistering): (slave ip6gretap1): Releasing backup interface [ 601.898812][ T6423] erspan0 (unregistering): left promiscuous mode [ 601.935014][ T6423] gretap0 (unregistering): left promiscuous mode [ 601.954917][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880580b9000: abort rx timeout. Force session deactivation [ 602.003182][ T6423] bond16 (unregistering): (slave geneve4): Releasing active interface [ 602.167423][ T6423] bond14 (unregistering): (slave bridge2): Releasing active interface [ 602.238289][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059020c00: rx timeout, send abort [ 602.346935][ T6423] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 602.356265][ T6423] bond_slave_0: left allmulticast mode [ 602.362946][ T6423] .` (unregistering): Released all slaves [ 602.375196][ T6423] bond1 (unregistering): Released all slaves [ 602.393777][ T6423] bond2 (unregistering): Released all slaves [ 602.414053][ T6423] bond3 (unregistering): Released all slaves [ 602.434255][ T6423] bond4 (unregistering): Released all slaves [ 602.448528][ T6423] bond5 (unregistering): Released all slaves [ 602.465945][ T6423] bond6 (unregistering): Released all slaves [ 602.482296][ T6423] bond7 (unregistering): Released all slaves [ 602.506157][ T6423] bond8 (unregistering): (slave bond9): Releasing backup interface [ 602.531260][ T6423] bond8 (unregistering): Released all slaves [ 602.546112][ T6423] bond9 (unregistering): Released all slaves [ 602.561316][ T6423] bond10 (unregistering): Released all slaves [ 602.579208][ T6423] bond11 (unregistering): Released all slaves [ 602.602054][ T6423] bond12 (unregistering): Released all slaves [ 602.619418][ T6423] bond13 (unregistering): (slave veth1): Releasing active interface [ 602.628951][ T6423] bond13 (unregistering): (slave veth5): Releasing active interface [ 602.651441][ T6423] bond13 (unregistering): Released all slaves [ 602.665942][ T6423] bond14 (unregistering): Released all slaves [ 602.681834][ T6423] bond15 (unregistering): Released all slaves [ 602.697293][ T6423] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 602.708156][ T6423] bond0 (unregistering): Released all slaves [ 602.724424][ T6423] bond16 (unregistering): Released all slaves [ 602.738471][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807adb9800: rx timeout, send abort [ 602.747081][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059020c00: abort rx timeout. Force session deactivation [ 602.774797][ T6423] bond17 (unregistering): Released all slaves [ 602.782386][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88807adb9800: connection exists (fe ff). last cmd: 20 [ 602.943331][ T1119] veth0_to_bond: left promiscuous mode [ 603.032355][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059020800: rx timeout, send abort [ 603.147970][T20877] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4068'. [ 603.492624][T20894] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4072'. [ 603.540856][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059020800: abort rx timeout. Force session deactivation [ 603.576082][T20505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.674605][T20505] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.825385][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032d96400: rx timeout, send abort [ 603.994832][ T6425] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.011876][ T6425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.043320][T20904] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4075'. [ 604.197639][T20912] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4077'. [ 604.236031][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.243325][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.325375][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880268ec400: rx timeout, send abort [ 604.333995][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032d96400: abort rx timeout. Force session deactivation [ 604.361839][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880268ec400: connection exists (fe ff). last cmd: 20 [ 604.611549][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032d97400: rx timeout, send abort [ 604.656845][T20928] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 604.676471][T20925] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4081'. [ 604.693064][T20924] syzkaller0: entered promiscuous mode [ 604.700645][T20929] openvswitch: netlink: IP tunnel dst address not specified [ 604.709151][T20924] syzkaller0: entered allmulticast mode [ 604.797444][T20924] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4082'. [ 605.119847][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032d97400: abort rx timeout. Force session deactivation [ 605.402341][ C0] vcan0: j1939_tp_rxtimer: 0xffff888050b90000: rx timeout, send abort [ 605.484849][T20943] syzkaller1: entered promiscuous mode [ 605.512858][T20943] syzkaller1: entered allmulticast mode [ 605.902496][ C0] vcan0: j1939_tp_rxtimer: 0xffff888036705800: rx timeout, send abort [ 605.911795][ C0] vcan0: j1939_tp_rxtimer: 0xffff888050b90000: abort rx timeout. Force session deactivation [ 605.938154][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888036705800: connection exists (fe ff). last cmd: 20 [ 606.187476][ C0] vcan0: j1939_tp_rxtimer: 0xffff888050b90400: rx timeout, send abort [ 606.695804][ C0] vcan0: j1939_tp_rxtimer: 0xffff888050b90400: abort rx timeout. Force session deactivation [ 606.739770][T20505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 606.982343][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058b06c00: rx timeout, send abort [ 607.043891][ T6423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 607.487799][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b4e4800: rx timeout, send abort [ 607.496605][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058b06c00: abort rx timeout. Force session deactivation [ 607.535186][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88807b4e4800: connection exists (fe ff). last cmd: 20 [ 607.787414][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058e18c00: rx timeout, send abort [ 608.297234][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058e18c00: abort rx timeout. Force session deactivation [ 608.585513][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032c63400: rx timeout, send abort [ 608.679377][T20966] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 609.046779][T21033] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4100'. [ 609.080964][ C0] vcan0: j1939_tp_rxtimer: 0xffff888041abb400: rx timeout, send abort [ 609.090025][T21034] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4101'. [ 609.099055][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032c63400: abort rx timeout. Force session deactivation [ 609.114353][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888041abb400: connection exists (fe ff). last cmd: 20 [ 609.132263][T21037] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4100'. [ 609.183541][T21034] netlink: 'syz.1.4101': attribute type 1 has an invalid length. [ 609.364941][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057028400: rx timeout, send abort [ 609.874741][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057028400: abort rx timeout. Force session deactivation [ 610.157235][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805702b800: rx timeout, send abort [ 610.654358][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802aba4400: rx timeout, send abort [ 610.674116][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805702b800: abort rx timeout. Force session deactivation [ 610.840284][T21052] tipc: Started in network mode [ 610.845863][T21052] tipc: Node identity c258a3f8bcf4, cluster identity 4711 [ 610.886722][T21052] tipc: Enabled bearer , priority 0 [ 610.918929][T21053] syzkaller0: entered promiscuous mode [ 610.935893][T21053] syzkaller0: entered allmulticast mode [ 611.035806][T21065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4107'. [ 611.173617][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802aba4400: abort rx timeout. Force session deactivation [ 611.301017][T21060] tipc: Resetting bearer [ 611.328151][T21078] rdma_rxe: rxe_newlink: failed to add lo [ 611.361927][T21060] tipc: Disabling bearer [ 611.379018][T21075] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.4111'. [ 611.402664][T21075] netlink: ct family unspecified [ 611.518286][ T6423] IPVS: stop unused estimator thread 0... [ 611.556746][T20505] veth0_vlan: entered promiscuous mode [ 611.613578][T20505] veth1_vlan: entered promiscuous mode [ 611.727804][T21093] netlink: 'syz.4.4117': attribute type 1 has an invalid length. [ 611.831076][T21093] 8021q: adding VLAN 0 to HW filter on device bond2 [ 611.862519][T20505] veth0_macvtap: entered promiscuous mode [ 611.923588][T20505] veth1_macvtap: entered promiscuous mode [ 612.024162][T20505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 612.083527][T20505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 612.122120][ T6425] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.156843][ T6425] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.241321][ T6425] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.288471][ T6425] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.864913][T21129] bond1: (slave ip6gretap2): making interface the new active one [ 612.905247][T21129] bond1: (slave ip6gretap2): Enslaving as an active interface with an up link [ 612.955990][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.958279][T21129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4125'. [ 612.983484][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.037944][T21129] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4125'. [ 613.126774][ T118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.153843][ T118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.357445][T21152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4133'. [ 613.417737][T21152] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4133'. [ 613.657979][T21166] netlink: 'syz.0.4135': attribute type 2 has an invalid length. [ 614.061969][T21190] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 614.069352][T21190] IPv6: NLM_F_CREATE should be set when creating new route [ 614.076695][T21190] IPv6: NLM_F_CREATE should be set when creating new route [ 614.386252][T21201] netlink: 81 bytes leftover after parsing attributes in process `syz.0.4143'. [ 614.426889][T21156] infiniband syz0: set active [ 614.452177][T21156] infiniband syz0: added bridge_slave_1 [ 614.516972][T21156] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 614.551759][T21156] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 614.675547][T21156] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 614.827318][T21156] RDS/IB: syz0: added [ 614.839282][T21156] smc: adding ib device syz0 with port count 1 [ 614.877790][T21156] smc: ib device syz0 port 1 has no pnetid [ 615.110883][T21236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 615.182900][T21236] netlink: 'syz.4.4150': attribute type 10 has an invalid length. [ 615.208512][T21236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 615.235268][T21236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 615.270883][T21236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 615.279818][T21236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 615.748119][T21232] netlink: 'syz.0.4149': attribute type 16 has an invalid length. [ 615.758483][T21232] netlink: 'syz.0.4149': attribute type 17 has an invalid length. [ 615.866356][ T29] audit: type=1107 audit(1780643482.495:6): pid=21245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='˃tû 0U£ãAsÊ?÷«×…_)ç®™&VÔÒ(k+ã ' [ 615.947619][T21232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 615.976305][T21232] batadv_slave_1: left promiscuous mode [ 615.987478][T21232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 616.064001][T21232] 8021q: adding VLAN 0 to HW filter on device bond5 [ 616.085064][T21232] bond6: left promiscuous mode [ 616.092379][T21232] bond6: left allmulticast mode [ 616.102312][T21232] bond7: left promiscuous mode [ 616.113219][T21232] 8021q: adding VLAN 0 to HW filter on device bond8 [ 616.125598][T21248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4149'. [ 616.144421][ T6425] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.151659][ T6425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 616.198279][T21253] team_slave_0: Caught tx_queue_len zero misconfig [ 616.539023][T21263] erspan0: entered promiscuous mode [ 616.561132][T21263] vlan3: entered promiscuous mode [ 616.649126][ T6425] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 616.674074][T14701] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 616.685996][ T6425] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 617.084619][T14701] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 617.370969][ T5734] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 617.658089][T21284] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4162'. [ 617.668923][T21284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4162'. [ 617.866088][T21290] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4164'. [ 617.905845][T21290] 8021q: adding VLAN 0 to HW filter on device bond3 [ 617.929627][T21290] tipc: Enabling of bearer rejected, failed to enable media [ 618.000498][T21290] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4164'. [ 618.052201][T21292] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4164'. [ 619.181034][T21314] netlink: 'syz.5.4171': attribute type 5 has an invalid length. [ 619.189298][T21314] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4171'. [ 619.268839][T21257] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 619.482605][T21319] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4172'. [ 619.522536][T21326] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4174'. [ 619.549083][T21327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4175'. [ 619.606337][T21327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4175'. [ 619.818628][T21342] netlink: 'syz.5.4180': attribute type 21 has an invalid length. [ 619.835097][T21342] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4180'. [ 619.988669][T21349] openvswitch: netlink: nsh attr 13535 is out of range max 3 [ 620.217197][T21363] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4186'. [ 620.437819][T21363] 8021q: adding VLAN 0 to HW filter on device bond1 [ 620.648398][T21388] tipc: MTU too low for tipc bearer [ 620.900645][T21393] netlink: 180 bytes leftover after parsing attributes in process `syz.0.4193'. [ 620.970207][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 621.061525][T21399] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4195'. [ 621.149246][T21404] netlink: 'syz.5.4197': attribute type 16 has an invalid length. [ 621.179525][T21404] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4197'. [ 621.479357][T21420] vcan1: entered promiscuous mode [ 621.502452][T21420] vcan1: entered allmulticast mode [ 621.595345][T21428] gretap0: entered promiscuous mode [ 621.611953][T21428] vlan2: entered promiscuous mode [ 621.749734][T21433] tipc: Enabled bearer , priority 0 [ 621.769470][T21433] syzkaller0: entered promiscuous mode [ 621.785671][T21433] syzkaller0: entered allmulticast mode [ 621.804813][T21433] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 621.848276][T21433] tipc: Resetting bearer [ 621.871210][T21431] tipc: Resetting bearer [ 621.917505][T21431] tipc: Disabling bearer [ 629.611833][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 644.399713][T21451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4208'. [ 644.504943][T21451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4208'. [ 644.657436][T21452] syzkaller0: entered promiscuous mode [ 644.675553][T21452] syzkaller0: entered allmulticast mode [ 645.401900][T21494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4225'. [ 645.602856][T21497] Bluetooth: MGMT ver 1.23 [ 646.252882][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 648.221455][T21481] netem: change failed [ 648.225937][T21499] tipc: Started in network mode [ 648.250889][T21499] tipc: Node identity ac14140f, cluster identity 4711 [ 648.276791][T21499] tipc: New replicast peer: 255.255.255.255 [ 648.295449][T21499] tipc: Enabled bearer , priority 10 [ 648.309837][T21500] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4226'. [ 648.459798][T21509] netlink: 220 bytes leftover after parsing attributes in process `syz.4.4229'. [ 648.536498][T21511] x_tables: duplicate underflow at hook 3 [ 648.835357][T21520] tipc: Resetting bearer [ 648.952152][T21540] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4236'. [ 649.012282][T21540] netlink: 'syz.4.4236': attribute type 1 has an invalid length. [ 649.035724][T21540] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4236'. [ 649.073265][T21552] netlink: 'syz.5.4238': attribute type 1 has an invalid length. [ 649.209228][T21541] bond2: (slave geneve2): making interface the new active one [ 649.239344][T21541] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 649.272361][ T63] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 649.281613][ T63] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 649.298460][ T1119] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 649.308627][ T1119] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 649.410011][T14701] tipc: Node number set to 2886997007 [ 649.574161][T21520] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 649.593788][T21520] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 649.841596][T21520] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 649.863750][T21520] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 650.105415][T21520] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 650.124516][T21520] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 650.217153][T21520] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 650.250794][T21520] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 650.469321][T21595] netlink: 'syz.5.4245': attribute type 39 has an invalid length. [ 650.512695][T21594] veth0: entered promiscuous mode [ 650.585592][T21520] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 650.597581][T21520] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 650.623545][T21599] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4247'. [ 650.781165][T21593] veth0: left promiscuous mode [ 651.161950][T21621] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.4252'. [ 651.502161][T21638] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4254'. [ 651.675535][T21639] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 651.987955][T21655] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4258'. [ 652.134607][T21622] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4251'. [ 652.159527][T21622] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4251'. [ 652.186327][T21622] netlink: 'syz.3.4251': attribute type 6 has an invalid length. [ 652.214373][T21622] netlink: 'syz.3.4251': attribute type 5 has an invalid length. [ 652.231695][T21622] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4251'. [ 652.358665][T21665] syzkaller1: entered promiscuous mode [ 652.384618][T21665] syzkaller1: entered allmulticast mode [ 652.789161][T21673] netem: change failed [ 653.175525][T21700] netlink: 268 bytes leftover after parsing attributes in process `syz.0.4268'. [ 653.188915][T21700] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 653.235716][T21688] bond2: option fail_over_mac: invalid value (16) [ 653.258088][T21701] netlink: 211816 bytes leftover after parsing attributes in process `syz.5.4266'. [ 653.330533][T21708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4269'. [ 653.452610][T21688] bond2 (unregistering): Released all slaves [ 653.654449][T21718] xt_CT: You must specify a L4 protocol and not use inversions on it [ 654.259694][T21742] netlink: 'syz.4.4277': attribute type 1 has an invalid length. [ 654.467870][T21742] 8021q: adding VLAN 0 to HW filter on device bond4 [ 654.536953][T21746] bond4: (slave geneve3): making interface the new active one [ 654.568680][T21746] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 654.942225][T21772] veth1_macvtap: left promiscuous mode [ 654.956718][T21774] netlink: 'syz.0.4287': attribute type 21 has an invalid length. [ 654.966519][T21772] macsec0: entered promiscuous mode [ 654.978853][T21772] macsec0: entered allmulticast mode [ 655.041375][T21768] veth1_macvtap: entered promiscuous mode [ 655.074262][T21768] veth1_macvtap: entered allmulticast mode [ 655.100297][T21768] macsec0: left promiscuous mode [ 655.149184][T21768] macsec0: left allmulticast mode [ 655.170957][T21768] veth1_macvtap: left allmulticast mode [ 655.260430][T21789] xt_CT: You must specify a L4 protocol and not use inversions on it [ 655.726191][T21811] siw: device registration error -23 [ 655.984965][T21829] __nla_validate_parse: 7 callbacks suppressed [ 655.984986][T21829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4299'. [ 656.218049][T21839] netlink: 'syz.0.4302': attribute type 4 has an invalid length. [ 657.709993][T21915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4315'. [ 657.766262][T21915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4315'. [ 658.677761][T21950] : entered promiscuous mode [ 659.232909][T21995] netlink: 'syz.3.4333': attribute type 2 has an invalid length. [ 659.379570][T22007] netlink: 'syz.4.4337': attribute type 1 has an invalid length. [ 659.391580][T22007] netlink: 'syz.4.4337': attribute type 3 has an invalid length. [ 659.401014][T22007] netlink: 172 bytes leftover after parsing attributes in process `syz.4.4337'. [ 659.415597][T22007] NCSI netlink: No device for ifindex 813332851 [ 659.675981][T22022] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4340'. [ 659.787888][T22024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4340'. [ 660.002528][T22031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4343'. [ 660.085828][T22030] bond2 (unregistering): Released all slaves [ 660.199196][T22047] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4348'. [ 660.212187][T22047] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4348'. [ 660.223913][T22047] netlink: 'syz.5.4348': attribute type 15 has an invalid length. [ 660.290354][ T1129] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 660.299541][T22047] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4348'. [ 660.313399][ T1129] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 660.325391][T22047] netlink: 'syz.5.4348': attribute type 15 has an invalid length. [ 660.341643][ T1129] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 660.351188][ T1129] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 660.453449][T22052] Bluetooth: MGMT ver 1.23 [ 660.590523][T22062] syzkaller0: entered promiscuous mode [ 660.616563][T22062] syzkaller0: entered allmulticast mode [ 661.330350][T22094] netlink: 'syz.5.4361': attribute type 4 has an invalid length. [ 661.449152][T22101] netlink: 'syz.5.4361': attribute type 4 has an invalid length. [ 661.944418][T22125] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 661.978020][T22125] __nla_validate_parse: 4 callbacks suppressed [ 661.978041][T22125] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4373'. [ 661.987894][T22122] netlink: 'syz.5.4372': attribute type 9 has an invalid length. [ 662.016680][T22126] syzkaller1: entered promiscuous mode [ 662.028137][T22126] syzkaller1: entered allmulticast mode [ 662.079512][T22130] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4374'. [ 662.300296][T22133] netlink: 'syz.1.4377': attribute type 1 has an invalid length. [ 662.325460][T22133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4377'. [ 662.337412][T22137] netlink: 196 bytes leftover after parsing attributes in process `syz.3.4375'. [ 662.558386][T22142] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4378'. [ 662.836517][T22150] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4381'. [ 662.868710][T22150] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4381'. [ 662.906195][T22153] tipc: Failed to remove unknown binding: 66,1,1/4:156470913/156470915 [ 663.193623][T22138] C speed is unknown, defaulting to 1000 [ 663.200484][T22162] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 663.306236][T22166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4387'. [ 663.335732][T22166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4387'. [ 663.360343][T22166] netlink: 'syz.3.4387': attribute type 12 has an invalid length. [ 663.384498][T22166] netlink: 'syz.3.4387': attribute type 11 has an invalid length. [ 663.837032][T22178] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4390'. [ 663.860342][T22178] IPv6: addrconf: prefix option has invalid lifetime [ 664.666770][T22210] xt_policy: too many policy elements [ 664.894303][T22224] xt_hashlimit: size too large, truncated to 1048576 [ 666.014882][T22269] xt_hashlimit: size too large, truncated to 1048576 [ 666.139193][T22277] netlink: 'syz.4.4419': attribute type 3 has an invalid length. [ 666.179427][T22276] netlink: 'syz.4.4419': attribute type 3 has an invalid length. [ 666.250189][T22279] netlink: 'syz.1.4418': attribute type 11 has an invalid length. [ 666.362252][T22280] bridge1: entered allmulticast mode [ 666.690472][T22288] gtp2: entered promiscuous mode [ 666.715966][T22288] gtp2: entered allmulticast mode [ 666.992716][T22304] netlink: 'syz.3.4424': attribute type 1 has an invalid length. [ 667.241446][T22304] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 667.279821][T22304] bond2 (unregistering): Released all slaves [ 667.362436][T22325] openvswitch: netlink: IPv4 tun info is not correct [ 667.658238][T22337] x_tables: duplicate underflow at hook 1 [ 667.665214][T22334] openvswitch: netlink: nsh attr 16383 is out of range max 3 [ 667.681275][T22340] __nla_validate_parse: 6 callbacks suppressed [ 667.681295][T22340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4435'. [ 667.753774][T22340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4435'. [ 667.852027][T22350] ±ÿª¨úrBº“: renamed from lo (while UP) [ 668.198231][T22365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 668.255417][T22365] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 668.312509][T22370] netlink: 'syz.5.4445': attribute type 75 has an invalid length. [ 668.368336][T22370] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4445'. [ 668.445726][T22381] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4444'. [ 668.470032][T22381] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4444'. [ 668.535355][T22372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4446'. [ 668.561226][T22372] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4446'. [ 668.600855][T22385] netlink: 'syz.3.4446': attribute type 1 has an invalid length. [ 668.618048][T22372] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4446'. [ 668.728734][T22372] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4446'. [ 668.881832][T22385] 8021q: adding VLAN 0 to HW filter on device bond2 [ 669.632944][T22427] block nbd0: Unsupported socket: should be TCP or UNIX. [ 669.689501][T22427] syzkaller1: entered promiscuous mode [ 669.693133][T22430] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4457'. [ 669.716400][T22427] syzkaller1: entered allmulticast mode [ 669.892013][T22441] netlink: 'syz.3.4459': attribute type 1 has an invalid length. [ 670.037000][T22446] netlink: 'syz.3.4459': attribute type 5 has an invalid length. [ 670.153722][T22441] 8021q: adding VLAN 0 to HW filter on device bond3 [ 670.242189][T22438] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 670.372446][T22462] x_tables: duplicate underflow at hook 1 [ 670.385376][T22446] macvlan2: entered promiscuous mode [ 670.405155][T22446] macvlan2: entered allmulticast mode [ 670.428215][T22451] tipc: Enabled bearer , priority 0 [ 670.677064][T22454] syzkaller0: entered promiscuous mode [ 670.682986][T22454] syzkaller0: entered allmulticast mode [ 670.689279][T22454] tipc: Resetting bearer [ 670.717551][T22442] tipc: Resetting bearer [ 673.927013][T22442] tipc: Disabling bearer [ 673.943230][T22493] netlink: 'syz.4.4473': attribute type 7 has an invalid length. [ 673.953872][ T5366] tipc: Node number set to 2125243384 [ 674.042665][T22498] __nla_validate_parse: 5 callbacks suppressed [ 674.042755][T22498] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4475'. [ 674.078774][T22498] netlink: 'syz.3.4475': attribute type 1 has an invalid length. [ 674.096064][T22500] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4475'. [ 674.143336][T22498] netlink: 'syz.3.4475': attribute type 2 has an invalid length. [ 674.214973][T22498] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4475'. [ 674.300105][T22500] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4475'. [ 674.374167][T22519] netlink: 'syz.1.4480': attribute type 1 has an invalid length. [ 674.398606][T22520] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 674.421287][T22521] netlink: 'syz.1.4480': attribute type 1 has an invalid length. [ 674.442508][T22525] netlink: 67 bytes leftover after parsing attributes in process `syz.4.4479'. [ 674.447952][T22521] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 674.559122][T22525] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 674.661784][T22519] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 674.958134][T22544] xt_CT: You must specify a L4 protocol and not use inversions on it [ 675.045300][T22552] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4488'. [ 675.121892][T22559] IPVS: length: 178 != 24 [ 675.634059][T22549] nbd3: detected capacity change from 0 to 63 [ 675.650709][T22565] netlink: 'syz.0.4489': attribute type 1 has an invalid length. [ 675.661958][T22565] netlink: 'syz.0.4489': attribute type 1 has an invalid length. [ 675.670446][T22565] netlink: 9172 bytes leftover after parsing attributes in process `syz.0.4489'. [ 675.744819][T18733] block nbd3: Receive control failed (result -104) [ 675.746149][ T5651] block nbd3: Receive control failed (result -32) [ 675.817872][T22579] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4493'. [ 675.854966][T22579] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4493'. [ 676.180965][T22590] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4499'. [ 677.193763][T22644] netlink: 'syz.5.4517': attribute type 1 has an invalid length. [ 677.361954][T22644] 8021q: adding VLAN 0 to HW filter on device bond3 [ 677.388621][T22650] macsec0: entered promiscuous mode [ 677.424889][T22655] veth1_macvtap: left promiscuous mode [ 677.519675][T22655] macsec0 (unregistering): left promiscuous mode [ 677.755574][T22653] bond3: (slave geneve3): making interface the new active one [ 677.799310][T22653] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 678.742066][T22708] ip6tnl0: Caught tx_queue_len zero misconfig [ 678.816294][T22713] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 678.845214][T22713] netlink: 'syz.1.4539': attribute type 1 has an invalid length. [ 679.108812][T22735] : renamed from gretap0 (while UP) [ 679.186863][T22743] __nla_validate_parse: 6 callbacks suppressed [ 679.186886][T22743] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4547'. [ 679.216830][T22744] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4548'. [ 679.365858][T22751] virt_wifi0: entered promiscuous mode [ 679.372557][T22751] virt_wifi0: entered allmulticast mode [ 679.395471][T22754] netlink: 'syz.1.4551': attribute type 10 has an invalid length. [ 679.407024][T22754] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4551'. [ 679.526345][T22761] syzkaller0: entered promiscuous mode [ 679.530634][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 679.550355][T22761] syzkaller0: entered allmulticast mode [ 679.589831][T22761] 0: reclassify loop, rule prio 0, protocol 800 [ 679.761010][T22771] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.4556'. [ 679.843823][T22775] team0: Device gtp0 is up. Set it down before adding it as a team port [ 679.958067][T22780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4560'. [ 679.984281][T22781] netlink: 'syz.0.4559': attribute type 1 has an invalid length. [ 680.052852][T22781] 8021q: adding VLAN 0 to HW filter on device bond9 [ 680.068424][T22786] bond3: (slave veth0_to_bond): Releasing backup interface [ 680.093460][T22786] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 680.167666][T22781] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4559'. [ 680.605419][T22810] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 680.879228][T22831] netlink: 'syz.0.4575': attribute type 1 has an invalid length. [ 681.032530][T22831] 8021q: adding VLAN 0 to HW filter on device bond10 [ 681.096329][T22847] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 681.113999][T22840] bond9: (slave veth0_to_bond): Releasing backup interface [ 681.158507][T22840] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 681.173164][T22849] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 681.376955][T20825] tipc: Subscription rejected, illegal request [ 681.738899][T22858] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.170564][T22905] netlink: 'syz.1.4592': attribute type 1 has an invalid length. [ 682.395079][T22905] 8021q: adding VLAN 0 to HW filter on device bond2 [ 682.439347][T22913] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 682.538828][T22916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4593'. [ 682.560084][T22916] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4593'. [ 682.688695][T22891] C speed is unknown, defaulting to 1000 [ 682.772310][T22922] xt_CT: You must specify a L4 protocol and not use inversions on it [ 683.052121][T22935] sctp: [Deprecated]: syz.4.4601 (pid 22935) Use of struct sctp_assoc_value in delayed_ack socket option. [ 683.052121][T22935] Use struct sctp_sack_info instead [ 683.340521][T22951] netlink: 'syz.3.4605': attribute type 1 has an invalid length. [ 683.410564][T22951] 8021q: adding VLAN 0 to HW filter on device bond4 [ 683.428528][T22954] bond3: (slave veth0_to_bond): Releasing backup interface [ 683.443901][T22954] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 684.832879][T22990] vlan4: entered allmulticast mode [ 685.250713][T22998] netlink: 'syz.1.4617': attribute type 1 has an invalid length. [ 685.324073][T23005] netlink: 'syz.5.4620': attribute type 49 has an invalid length. [ 685.478458][T22998] 8021q: adding VLAN 0 to HW filter on device bond3 [ 685.538261][T23003] bond2: (slave veth0_to_bond): Releasing backup interface [ 685.603193][T23003] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 685.785407][T23005] ip6gretap0: entered promiscuous mode [ 685.807587][T23005] ip6gretap0: entered allmulticast mode [ 686.147054][T23031] netlink: 'syz.3.4629': attribute type 10 has an invalid length. [ 686.420398][T23045] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4631'. [ 686.449246][T23045] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4631'. [ 686.508721][T23047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4632'. [ 686.861113][T23058] FAULT_INJECTION: forcing a failure. [ 686.861113][T23058] name failslab, interval 1, probability 0, space 0, times 0 [ 686.879174][T23057] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4633'. [ 686.901467][T23058] CPU: 0 UID: 0 PID: 23058 Comm: syz.5.4634 Not tainted syzkaller #0 PREEMPT(full) [ 686.901516][T23058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 686.901539][T23058] Call Trace: [ 686.901547][T23058] [ 686.901555][T23058] dump_stack_lvl+0xe8/0x150 [ 686.901591][T23058] should_fail_ex+0x412/0x560 [ 686.901622][T23058] should_failslab+0xa8/0x100 [ 686.901649][T23058] __kvmalloc_node_noprof+0x178/0x8a0 [ 686.901680][T23058] ? nf_hook_entries_grow+0x288/0x720 [ 686.901795][T23058] nf_hook_entries_grow+0x288/0x720 [ 686.901820][T23058] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 686.901856][T23058] __nf_register_net_hook+0x2c9/0x930 [ 686.901884][T23058] ? nf_register_net_hook+0xc8/0x190 [ 686.901909][T23058] nf_register_net_hook+0xb2/0x190 [ 686.901933][T23058] nf_register_net_hooks+0x44/0x1b0 [ 686.901958][T23058] nf_ct_netns_do_get+0x212/0x5c0 [ 686.902008][T23058] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 686.902032][T23058] ? __mutex_trylock_common+0x158/0x260 [ 686.902073][T23058] ? nf_ct_netns_get+0xe9/0x320 [ 686.902097][T23058] xt_ct_tg_check+0xf9/0xa90 [ 686.902167][T23058] ? trace_contention_end+0x3d/0x140 [ 686.902198][T23058] ? __pfx_xt_ct_tg_check+0x10/0x10 [ 686.902223][T23058] ? xt_find_target+0x208/0x260 [ 686.902271][T23058] xt_check_target+0x61a/0xca0 [ 686.902294][T23058] ? xt_find_target+0x83/0x260 [ 686.902324][T23058] ? __pfx_xt_check_target+0x10/0x10 [ 686.902365][T23058] ? xt_find_target+0x208/0x260 [ 686.902396][T23058] translate_table+0x184f/0x20b0 [ 686.902498][T23058] ? __pfx_translate_table+0x10/0x10 [ 686.902526][T23058] ? __might_fault+0xaf/0x130 [ 686.902555][T23058] ? __might_fault+0xaf/0x130 [ 686.902603][T23058] ? _copy_from_user+0x94/0xb0 [ 686.902637][T23058] do_ip6t_set_ctl+0x9fe/0xe10 [ 686.902690][T23058] ? rcu_is_watching+0x15/0xb0 [ 686.902716][T23058] ? trace_contention_end+0x3d/0x140 [ 686.902745][T23058] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 686.902795][T23058] ? __pfx___mutex_lock+0x10/0x10 [ 686.902819][T23058] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 686.902851][T23058] ? __pfx_aa_sk_perm+0x10/0x10 [ 686.902916][T23058] nf_setsockopt+0x26f/0x290 [ 686.902943][T23058] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 686.903069][T23058] do_sock_setsockopt+0x17c/0x1b0 [ 686.903129][T23058] __x64_sys_setsockopt+0x13d/0x1b0 [ 686.903163][T23058] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.903186][T23058] do_syscall_64+0x174/0x580 [ 686.903206][T23058] ? trace_irq_disable+0x3b/0x140 [ 686.903235][T23058] ? clear_bhb_loop+0x40/0x90 [ 686.903260][T23058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.903280][T23058] RIP: 0033:0x7f1d96d9ce59 [ 686.903302][T23058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 686.903319][T23058] RSP: 002b:00007f1d97c4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 686.903342][T23058] RAX: ffffffffffffffda RBX: 00007f1d97015fa0 RCX: 00007f1d96d9ce59 [ 686.903358][T23058] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 686.903370][T23058] RBP: 00007f1d97c4b090 R08: 00000000000003d0 R09: 0000000000000000 [ 686.903383][T23058] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 686.903396][T23058] R13: 00007f1d97016038 R14: 00007f1d97015fa0 R15: 00007ffef5f318c8 [ 686.903434][T23058] [ 687.790929][T23073] netlink: 'syz.5.4636': attribute type 12 has an invalid length. [ 687.820926][T23080] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4638'. [ 687.863466][T23081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4638'. [ 687.885659][T23084] netlink: 'syz.1.4639': attribute type 63 has an invalid length. [ 687.907922][T23073] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4636'. [ 687.921224][T23080] openvswitch: netlink: Unknown nsh attribute 0 [ 687.928106][T23084] netlink: 'syz.1.4639': attribute type 63 has an invalid length. [ 687.958777][T23081] openvswitch: netlink: Unknown nsh attribute 0 [ 688.211776][T23099] netlink: 'syz.4.4643': attribute type 1 has an invalid length. [ 688.264363][T23100] netlink: 'syz.4.4643': attribute type 1 has an invalid length. [ 688.271516][T23099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 688.306166][T23100] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 688.315482][T23096] bond11 (unregistering): Released all slaves [ 688.366344][T23111] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4646'. [ 688.386027][T23112] FAULT_INJECTION: forcing a failure. [ 688.386027][T23112] name failslab, interval 1, probability 0, space 0, times 0 [ 688.438771][T23100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4643'. [ 688.446919][T23112] CPU: 1 UID: 0 PID: 23112 Comm: syz.3.4647 Not tainted syzkaller #0 PREEMPT(full) [ 688.446949][T23112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 688.446960][T23112] Call Trace: [ 688.446971][T23112] [ 688.446980][T23112] dump_stack_lvl+0xe8/0x150 [ 688.447008][T23112] should_fail_ex+0x412/0x560 [ 688.447037][T23112] should_failslab+0xa8/0x100 [ 688.447058][T23112] __kvmalloc_node_noprof+0x178/0x8a0 [ 688.447087][T23112] ? nf_hook_entries_grow+0x288/0x720 [ 688.447116][T23112] nf_hook_entries_grow+0x288/0x720 [ 688.447151][T23112] __nf_register_net_hook+0x2c9/0x930 [ 688.447182][T23112] nf_register_net_hook+0xb2/0x190 [ 688.447205][T23112] nf_register_net_hooks+0x44/0x1b0 [ 688.447229][T23112] nf_ct_netns_do_get+0x212/0x5c0 [ 688.447254][T23112] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 688.447276][T23112] ? __mutex_trylock_common+0x158/0x260 [ 688.447306][T23112] ? nf_ct_netns_get+0xe9/0x320 [ 688.447329][T23112] xt_ct_tg_check+0xf9/0xa90 [ 688.447349][T23112] ? trace_contention_end+0x3d/0x140 [ 688.447378][T23112] ? __pfx_xt_ct_tg_check+0x10/0x10 [ 688.447401][T23112] ? xt_find_target+0x208/0x260 [ 688.447425][T23112] xt_check_target+0x61a/0xca0 [ 688.447444][T23112] ? xt_find_target+0x83/0x260 [ 688.447472][T23112] ? __pfx_xt_check_target+0x10/0x10 [ 688.447516][T23112] ? xt_find_target+0x208/0x260 [ 688.447545][T23112] translate_table+0x184f/0x20b0 [ 688.447595][T23112] ? __pfx_translate_table+0x10/0x10 [ 688.447618][T23112] ? __might_fault+0xaf/0x130 [ 688.447644][T23112] ? __might_fault+0xaf/0x130 [ 688.447687][T23112] ? _copy_from_user+0x94/0xb0 [ 688.447716][T23112] do_ip6t_set_ctl+0x9fe/0xe10 [ 688.447743][T23112] ? rcu_is_watching+0x15/0xb0 [ 688.447766][T23112] ? trace_contention_end+0x3d/0x140 [ 688.447792][T23112] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 688.447837][T23112] ? __pfx___mutex_lock+0x10/0x10 [ 688.447858][T23112] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 688.447887][T23112] ? __pfx_aa_sk_perm+0x10/0x10 [ 688.447920][T23112] nf_setsockopt+0x26f/0x290 [ 688.447946][T23112] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 688.447976][T23112] do_sock_setsockopt+0x17c/0x1b0 [ 688.448011][T23112] __x64_sys_setsockopt+0x13d/0x1b0 [ 688.448045][T23112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.448069][T23112] do_syscall_64+0x174/0x580 [ 688.448088][T23112] ? trace_irq_disable+0x3b/0x140 [ 688.448118][T23112] ? clear_bhb_loop+0x40/0x90 [ 688.448142][T23112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.448163][T23112] RIP: 0033:0x7f871e79ce59 [ 688.448183][T23112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 688.448201][T23112] RSP: 002b:00007f871f641028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 688.448224][T23112] RAX: ffffffffffffffda RBX: 00007f871ea15fa0 RCX: 00007f871e79ce59 [ 688.448239][T23112] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 688.448251][T23112] RBP: 00007f871f641090 R08: 00000000000003d0 R09: 0000000000000000 [ 688.448264][T23112] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 688.448276][T23112] R13: 00007f871ea16038 R14: 00007f871ea15fa0 R15: 00007fffddcc6328 [ 688.448313][T23112] [ 688.852361][T23121] netlink: 'syz.5.4648': attribute type 30 has an invalid length. [ 688.966258][T23128] netlink: 'syz.0.4653': attribute type 1 has an invalid length. [ 688.987681][T23121] bond4: option arp_missed_max: invalid value (0) [ 689.028262][T23121] bond4: option arp_missed_max: allowed values 1 - 255 [ 689.063272][T23121] bond4 (unregistering): Released all slaves [ 689.219319][T23128] 8021q: adding VLAN 0 to HW filter on device bond11 [ 689.247824][T23130] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4652'. [ 689.345437][T23134] bond11: (slave geneve2): making interface the new active one [ 689.383291][T23134] bond11: (slave geneve2): Enslaving as an active interface with an up link [ 689.422584][T23130] 8021q: VLANs not supported on ip_vti0 [ 689.716335][T23163] FAULT_INJECTION: forcing a failure. [ 689.716335][T23163] name failslab, interval 1, probability 0, space 0, times 0 [ 689.754823][T23163] CPU: 1 UID: 0 PID: 23163 Comm: syz.3.4659 Not tainted syzkaller #0 PREEMPT(full) [ 689.754858][T23163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 689.754871][T23163] Call Trace: [ 689.754880][T23163] [ 689.754889][T23163] dump_stack_lvl+0xe8/0x150 [ 689.754919][T23163] should_fail_ex+0x412/0x560 [ 689.754948][T23163] should_failslab+0xa8/0x100 [ 689.754971][T23163] __kmalloc_cache_noprof+0x88/0x660 [ 689.755002][T23163] ? nf_ct_tmpl_alloc+0x7e/0x230 [ 689.755025][T23163] ? __mutex_trylock_common+0x158/0x260 [ 689.755057][T23163] nf_ct_tmpl_alloc+0x7e/0x230 [ 689.755085][T23163] xt_ct_tg_check+0x231/0xa90 [ 689.755107][T23163] ? trace_contention_end+0x3d/0x140 [ 689.755137][T23163] ? __pfx_xt_ct_tg_check+0x10/0x10 [ 689.755162][T23163] ? xt_find_target+0x208/0x260 [ 689.755187][T23163] xt_check_target+0x61a/0xca0 [ 689.755209][T23163] ? xt_find_target+0x83/0x260 [ 689.755238][T23163] ? __pfx_xt_check_target+0x10/0x10 [ 689.755275][T23163] ? xt_find_target+0x208/0x260 [ 689.755304][T23163] translate_table+0x184f/0x20b0 [ 689.755356][T23163] ? __pfx_translate_table+0x10/0x10 [ 689.755381][T23163] ? __might_fault+0xaf/0x130 [ 689.755409][T23163] ? __might_fault+0xaf/0x130 [ 689.755453][T23163] ? _copy_from_user+0x94/0xb0 [ 689.755482][T23163] do_ip6t_set_ctl+0x9fe/0xe10 [ 689.755513][T23163] ? rcu_is_watching+0x15/0xb0 [ 689.755537][T23163] ? trace_contention_end+0x3d/0x140 [ 689.755565][T23163] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 689.755629][T23163] ? __pfx___mutex_lock+0x10/0x10 [ 689.755652][T23163] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 689.755681][T23163] ? __pfx_aa_sk_perm+0x10/0x10 [ 689.755715][T23163] nf_setsockopt+0x26f/0x290 [ 689.755740][T23163] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 689.755769][T23163] do_sock_setsockopt+0x17c/0x1b0 [ 689.755804][T23163] __x64_sys_setsockopt+0x13d/0x1b0 [ 689.755836][T23163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.755859][T23163] do_syscall_64+0x174/0x580 [ 689.755879][T23163] ? trace_irq_disable+0x3b/0x140 [ 689.755907][T23163] ? clear_bhb_loop+0x40/0x90 [ 689.755933][T23163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.755955][T23163] RIP: 0033:0x7f871e79ce59 [ 689.755975][T23163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 689.755992][T23163] RSP: 002b:00007f871f641028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 689.756015][T23163] RAX: ffffffffffffffda RBX: 00007f871ea15fa0 RCX: 00007f871e79ce59 [ 689.756030][T23163] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 689.756043][T23163] RBP: 00007f871f641090 R08: 00000000000003d0 R09: 0000000000000000 [ 689.756055][T23163] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 689.756068][T23163] R13: 00007f871ea16038 R14: 00007f871ea15fa0 R15: 00007fffddcc6328 [ 689.756102][T23163] [ 689.764983][T23166] openvswitch: netlink: Flow actions attr not present in new flow. [ 689.934770][T23172] syzkaller1: entered promiscuous mode [ 690.097575][T23172] syzkaller1: entered allmulticast mode [ 690.401496][T23182] netlink: 'syz.4.4665': attribute type 1 has an invalid length. [ 690.518093][T23182] 8021q: adding VLAN 0 to HW filter on device bond5 [ 690.609499][T23188] bond1: (slave veth0_to_bond): Releasing active interface [ 690.682057][T23188] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 690.730609][T23203] FAULT_INJECTION: forcing a failure. [ 690.730609][T23203] name failslab, interval 1, probability 0, space 0, times 0 [ 690.772520][T23203] CPU: 1 UID: 0 PID: 23203 Comm: syz.1.4672 Not tainted syzkaller #0 PREEMPT(full) [ 690.772550][T23203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 690.772563][T23203] Call Trace: [ 690.772571][T23203] [ 690.772579][T23203] dump_stack_lvl+0xe8/0x150 [ 690.772608][T23203] should_fail_ex+0x412/0x560 [ 690.772636][T23203] should_failslab+0xa8/0x100 [ 690.772659][T23203] __kvmalloc_node_noprof+0x178/0x8a0 [ 690.772691][T23203] ? nf_hook_entries_grow+0x288/0x720 [ 690.772722][T23203] nf_hook_entries_grow+0x288/0x720 [ 690.772757][T23203] __nf_register_net_hook+0x2c9/0x930 [ 690.772788][T23203] nf_register_net_hook+0xb2/0x190 [ 690.772810][T23203] nf_register_net_hooks+0x44/0x1b0 [ 690.772834][T23203] nf_ct_netns_do_get+0x212/0x5c0 [ 690.772859][T23203] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 690.772883][T23203] ? __mutex_trylock_common+0x158/0x260 [ 690.772914][T23203] ? nf_ct_netns_get+0xe9/0x320 [ 690.772948][T23203] xt_ct_tg_check+0xf9/0xa90 [ 690.772971][T23203] ? trace_contention_end+0x3d/0x140 [ 690.773003][T23203] ? __pfx_xt_ct_tg_check+0x10/0x10 [ 690.773028][T23203] ? xt_find_target+0x208/0x260 [ 690.773052][T23203] xt_check_target+0x61a/0xca0 [ 690.773073][T23203] ? xt_find_target+0x83/0x260 [ 690.773103][T23203] ? __pfx_xt_check_target+0x10/0x10 [ 690.773141][T23203] ? xt_find_target+0x208/0x260 [ 690.773172][T23203] translate_table+0x184f/0x20b0 [ 690.773224][T23203] ? __pfx_translate_table+0x10/0x10 [ 690.773250][T23203] ? __might_fault+0xaf/0x130 [ 690.773277][T23203] ? __might_fault+0xaf/0x130 [ 690.773323][T23203] ? _copy_from_user+0x94/0xb0 [ 690.773354][T23203] do_ip6t_set_ctl+0x9fe/0xe10 [ 690.773385][T23203] ? rcu_is_watching+0x15/0xb0 [ 690.773410][T23203] ? trace_contention_end+0x3d/0x140 [ 690.773438][T23203] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 690.773485][T23203] ? __pfx___mutex_lock+0x10/0x10 [ 690.773508][T23203] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 690.773542][T23203] ? __pfx_aa_sk_perm+0x10/0x10 [ 690.773577][T23203] nf_setsockopt+0x26f/0x290 [ 690.773604][T23203] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 690.773633][T23203] do_sock_setsockopt+0x17c/0x1b0 [ 690.773669][T23203] __x64_sys_setsockopt+0x13d/0x1b0 [ 690.773702][T23203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.773725][T23203] do_syscall_64+0x174/0x580 [ 690.773744][T23203] ? trace_irq_disable+0x3b/0x140 [ 690.773773][T23203] ? clear_bhb_loop+0x40/0x90 [ 690.773798][T23203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.773818][T23203] RIP: 0033:0x7fdf94f9ce59 [ 690.773838][T23203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 690.773854][T23203] RSP: 002b:00007fdf95f42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 690.773876][T23203] RAX: ffffffffffffffda RBX: 00007fdf95215fa0 RCX: 00007fdf94f9ce59 [ 690.773889][T23203] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 690.773900][T23203] RBP: 00007fdf95f42090 R08: 00000000000003d0 R09: 0000000000000000 [ 690.773911][T23203] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 690.773921][T23203] R13: 00007fdf95216038 R14: 00007fdf95215fa0 R15: 00007ffdaf35af58 [ 690.773956][T23203] [ 691.387667][T23222] netlink: 'syz.4.4678': attribute type 58 has an invalid length. [ 691.983874][T23249] netlink: 'syz.1.4686': attribute type 1 has an invalid length. [ 692.127765][T23249] 8021q: adding VLAN 0 to HW filter on device bond4 [ 692.174643][T23253] bond3: (slave veth0_to_bond): Releasing backup interface [ 692.201908][T23253] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 692.365012][T23259] syzkaller0: entered promiscuous mode [ 692.378959][T23259] syzkaller0: entered allmulticast mode [ 692.420698][T23259] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 692.529643][T23266] __nla_validate_parse: 5 callbacks suppressed [ 692.529666][T23266] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4691'. [ 692.575246][T23269] IPv6: sit2: Disabled Multicast RS [ 693.007768][T23286] netlink: 'syz.0.4696': attribute type 11 has an invalid length. [ 693.190241][T23298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4697'. [ 693.387240][T23298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4697'. [ 693.561190][T23311] netlink: 332 bytes leftover after parsing attributes in process `syz.0.4702'. [ 693.695863][T23322] syzkaller0: entered promiscuous mode [ 693.708601][T23322] syzkaller0: entered allmulticast mode [ 693.824913][T23330] sctp: [Deprecated]: syz.3.4708 (pid 23330) Use of struct sctp_assoc_value in delayed_ack socket option. [ 693.824913][T23330] Use struct sctp_sack_info instead [ 694.204473][T23354] netlink: zone id is out of range [ 694.227189][T23354] netlink: zone id is out of range [ 694.248340][T23354] netlink: zone id is out of range [ 694.275973][T23354] netlink: zone id is out of range [ 694.291209][T23354] netlink: zone id is out of range [ 694.291491][T23358] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4716'. [ 694.314426][T23354] netlink: zone id is out of range [ 694.327963][T23354] netlink: zone id is out of range [ 694.340187][T23354] netlink: zone id is out of range [ 694.357871][T23354] netlink: zone id is out of range [ 694.375382][T23354] netlink: zone id is out of range [ 694.844181][T23385] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4724'. [ 694.858242][T23384] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4724'. [ 695.119232][T23396] sctp: [Deprecated]: syz.0.4728 (pid 23396) Use of struct sctp_assoc_value in delayed_ack socket option. [ 695.119232][T23396] Use struct sctp_sack_info instead [ 695.163379][T23398] netlink: 'syz.3.4729': attribute type 13 has an invalid length. [ 695.176191][T23398] netlink: 'syz.3.4729': attribute type 58 has an invalid length. [ 695.206960][T23398] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4729'. [ 695.486798][T23409] netlink: 'syz.0.4730': attribute type 8 has an invalid length. [ 695.552851][T23415] xt_CT: You must specify a L4 protocol and not use inversions on it [ 695.672025][T23424] syz_tun: entered allmulticast mode [ 695.775462][T23428] xt_NFQUEUE: number of total queues is 0 [ 695.787799][T23428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4737'. [ 695.796863][T23428] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4737'. [ 705.777556][ T1930] block nbd3: Connection timed out, retrying (0/2 alive) [ 705.789756][ T1930] block nbd3: Connection timed out, retrying (0/2 alive) [ 705.797520][ T1930] block nbd3: Connection timed out, retrying (0/2 alive) [ 705.804956][ T1930] block nbd3: Connection timed out, retrying (0/2 alive) [ 705.814137][ T11] block nbd3: Dead connection, failed to find a fallback [ 705.822002][ T11] block nbd3: shutting down sockets [ 705.827717][ T11] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 705.841248][ T11] Buffer I/O error on dev nbd3, logical block 2, async page read [ 705.852065][ T11] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 705.861252][ T11] Buffer I/O error on dev nbd3, logical block 1, async page read [ 705.869074][ T11] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 705.878777][ T11] Buffer I/O error on dev nbd3, logical block 0, async page read [ 705.886766][ T11] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 705.896034][ T11] Buffer I/O error on dev nbd3, logical block 3, async page read [ 705.906266][T21542] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 705.917023][T21542] Buffer I/O error on dev nbd3, logical block 0, async page read [ 705.925726][T21542] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 705.935310][T21542] Buffer I/O error on dev nbd3, logical block 1, async page read [ 705.943458][T21542] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 705.952717][T21542] Buffer I/O error on dev nbd3, logical block 2, async page read [ 705.961430][T21542] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 705.970552][T21542] Buffer I/O error on dev nbd3, logical block 3, async page read [ 705.978410][T21542] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 705.988066][T21542] Buffer I/O error on dev nbd3, logical block 0, async page read [ 705.996650][T21542] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 706.006018][T21542] Buffer I/O error on dev nbd3, logical block 1, async page read [ 706.017821][T21542] ldm_validate_partition_table(): Disk read failed. [ 706.030215][T21542] Dev nbd3: unable to read RDB block 0 [ 706.037116][T21542] nbd3: unable to read partition table [ 706.051359][T21542] ldm_validate_partition_table(): Disk read failed. [ 706.059119][T21542] Dev nbd3: unable to read RDB block 0 [ 706.068843][T21542] nbd3: unable to read partition table [ 706.412877][ C0] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 716.808140][ T6425] bond10 (unregistering): (slave ip6gretap0): Releasing active interface [ 716.958188][ T6425] bond7 (unregistering): (slave gretap2): Releasing active interface [ 716.984671][ T6425] bond13 (unregistering): (slave geneve3): Releasing active interface [ 717.286244][ T6425] bond0 (unregistering): Released all slaves [ 717.297597][ T6425] bond1 (unregistering): Released all slaves [ 717.312412][ T6425] bond2 (unregistering): Released all slaves [ 717.328845][ T6425] bond3 (unregistering): Released all slaves [ 717.345791][ T6425] bond4 (unregistering): Released all slaves [ 717.368809][ T6425] bond5 (unregistering): Released all slaves [ 717.383813][ T6425] bond6 (unregistering): Released all slaves [ 717.405689][ T6425] bond7 (unregistering): Released all slaves [ 717.420553][ T6425] bond8 (unregistering): Released all slaves [ 717.435260][ T6425] bond9 (unregistering): Released all slaves [ 717.459536][ T6425] bond10 (unregistering): Released all slaves [ 717.476332][ T6425] bond11 (unregistering): Released all slaves [ 717.491645][ T6425] bond12 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 717.502355][ T6425] bond12 (unregistering): Released all slaves [ 717.536767][ T6425] bond13 (unregistering): Released all slaves [ 717.836193][ T6425] tipc: Disabling bearer [ 717.858197][ T6425] tipc: Left network mode [ 718.945243][ T6425] hsr_slave_0: left promiscuous mode [ 718.951625][ T6425] hsr_slave_1: left promiscuous mode [ 718.977656][ T6425] dummy0: left allmulticast mode [ 718.983931][ T6425] veth1_macvtap: left allmulticast mode [ 718.989561][ T6425] veth1_macvtap: left promiscuous mode [ 718.997924][ T6425] veth0_macvtap: left promiscuous mode [ 719.008593][ T6425] veth0_vlan: left promiscuous mode [ 719.157468][ T6425] pim6reg527 (unregistering): left allmulticast mode [ 719.197395][ T6425] pim6reg (unregistering): left allmulticast mode [ 719.295671][ T6425] [ 719.298063][ T6425] ====================================================== [ 719.305104][ T6425] WARNING: possible circular locking dependency detected [ 719.312147][ T6425] syzkaller #0 Not tainted [ 719.316583][ T6425] ------------------------------------------------------ [ 719.323620][ T6425] kworker/u8:15/6425 is trying to acquire lock: [ 719.329883][ T6425] ffff88801be852a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80 [ 719.339770][ T6425] [ 719.339770][ T6425] but task is already holding lock: [ 719.347156][ T6425] ffffffff8f390260 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 719.355900][ T6425] [ 719.355900][ T6425] which lock already depends on the new lock. [ 719.355900][ T6425] [ 719.366324][ T6425] [ 719.366324][ T6425] the existing dependency chain (in reverse order) is: [ 719.375361][ T6425] [ 719.375361][ T6425] -> #10 (gdp_mutex){+.+.}-{4:4}: [ 719.382615][ T6425] __mutex_lock+0x1a3/0x1550 [ 719.387769][ T6425] get_device_parent+0x16f/0x3a0 [ 719.393264][ T6425] device_add+0x2e1/0xbb0 [ 719.398144][ T6425] device_create+0x269/0x300 [ 719.403283][ T6425] msr_device_create+0x33/0x50 [ 719.408635][ T6425] cpuhp_invoke_callback+0x445/0x860 [ 719.414503][ T6425] cpuhp_thread_fun+0x36b/0x780 [ 719.419913][ T6425] smpboot_thread_fn+0x541/0xa50 [ 719.425382][ T6425] kthread+0x389/0x470 [ 719.429969][ T6425] ret_from_fork+0x514/0xb70 [ 719.435100][ T6425] ret_from_fork_asm+0x1a/0x30 [ 719.440379][ T6425] [ 719.440379][ T6425] -> #9 (cpuhp_state-up){+.+.}-{0:0}: [ 719.447928][ T6425] cpuhp_thread_fun+0x127/0x780 [ 719.453293][ T6425] smpboot_thread_fn+0x541/0xa50 [ 719.458759][ T6425] kthread+0x389/0x470 [ 719.463356][ T6425] ret_from_fork+0x514/0xb70 [ 719.468467][ T6425] ret_from_fork_asm+0x1a/0x30 [ 719.473754][ T6425] [ 719.473754][ T6425] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 719.481489][ T6425] cpus_read_lock+0x42/0x160 [ 719.486610][ T6425] static_key_slow_inc+0x12/0x30 [ 719.492073][ T6425] nbd_genl_reconfigure+0x132f/0x1ea0 [ 719.498068][ T6425] genl_family_rcv_msg_doit+0x22a/0x330 [ 719.504142][ T6425] genl_rcv_msg+0x61c/0x7a0 [ 719.509168][ T6425] netlink_rcv_skb+0x232/0x4b0 [ 719.514459][ T6425] genl_rcv+0x28/0x40 [ 719.518967][ T6425] netlink_unicast+0x75c/0x8e0 [ 719.524259][ T6425] netlink_sendmsg+0x813/0xb40 [ 719.529551][ T6425] ____sys_sendmsg+0x972/0x9f0 [ 719.534835][ T6425] ___sys_sendmsg+0x2a5/0x360 [ 719.540031][ T6425] __x64_sys_sendmsg+0x1bd/0x2a0 [ 719.545497][ T6425] do_syscall_64+0x174/0x580 [ 719.550610][ T6425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.557026][ T6425] [ 719.557026][ T6425] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 719.564678][ T6425] __mutex_lock+0x1a3/0x1550 [ 719.569795][ T6425] nbd_queue_rq+0x37b/0x1100 [ 719.574918][ T6425] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 719.581139][ T6425] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 719.588025][ T6425] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 719.594539][ T6425] blk_mq_run_hw_queue+0x348/0x4f0 [ 719.600175][ T6425] blk_mq_dispatch_list+0xd16/0xe10 [ 719.605896][ T6425] blk_mq_flush_plug_list+0x48d/0x570 [ 719.611800][ T6425] __blk_flush_plug+0x3ed/0x4d0 [ 719.617234][ T6425] __submit_bio+0x28d/0x580 [ 719.622263][ T6425] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 719.628420][ T6425] block_read_full_folio+0x599/0x830 [ 719.634249][ T6425] filemap_read_folio+0x137/0x3b0 [ 719.639805][ T6425] do_read_cache_folio+0x358/0x590 [ 719.645452][ T6425] read_part_sector+0xb6/0x2b0 [ 719.650783][ T6425] adfspart_check_ICS+0xb1/0x960 [ 719.656248][ T6425] bdev_disk_changed+0x817/0x1770 [ 719.661795][ T6425] blkdev_get_whole+0x380/0x510 [ 719.667205][ T6425] bdev_open+0x31e/0xd30 [ 719.671971][ T6425] blkdev_open+0x470/0x610 [ 719.676912][ T6425] do_dentry_open+0x822/0x13a0 [ 719.682197][ T6425] vfs_open+0x3b/0x340 [ 719.686787][ T6425] path_openat+0x2e08/0x3860 [ 719.691903][ T6425] do_file_open+0x23e/0x4a0 [ 719.696930][ T6425] do_sys_openat2+0x113/0x200 [ 719.702130][ T6425] __x64_sys_openat+0x138/0x170 [ 719.707508][ T6425] do_syscall_64+0x174/0x580 [ 719.712622][ T6425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.719043][ T6425] [ 719.719043][ T6425] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 719.726258][ T6425] __mutex_lock+0x1a3/0x1550 [ 719.731372][ T6425] nbd_queue_rq+0xc6/0x1100 [ 719.736406][ T6425] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 719.742485][ T6425] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 719.749445][ T6425] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 719.755960][ T6425] blk_mq_run_hw_queue+0x348/0x4f0 [ 719.761603][ T6425] blk_mq_dispatch_list+0xd16/0xe10 [ 719.767327][ T6425] blk_mq_flush_plug_list+0x48d/0x570 [ 719.773225][ T6425] __blk_flush_plug+0x3ed/0x4d0 [ 719.778598][ T6425] __submit_bio+0x28d/0x580 [ 719.783627][ T6425] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 719.789782][ T6425] block_read_full_folio+0x599/0x830 [ 719.795594][ T6425] filemap_read_folio+0x137/0x3b0 [ 719.801146][ T6425] do_read_cache_folio+0x358/0x590 [ 719.806791][ T6425] read_part_sector+0xb6/0x2b0 [ 719.812098][ T6425] adfspart_check_ICS+0xb1/0x960 [ 719.817564][ T6425] bdev_disk_changed+0x817/0x1770 [ 719.823109][ T6425] blkdev_get_whole+0x380/0x510 [ 719.828491][ T6425] bdev_open+0x31e/0xd30 [ 719.833253][ T6425] blkdev_open+0x470/0x610 [ 719.838198][ T6425] do_dentry_open+0x822/0x13a0 [ 719.843483][ T6425] vfs_open+0x3b/0x340 [ 719.848070][ T6425] path_openat+0x2e08/0x3860 [ 719.853193][ T6425] do_file_open+0x23e/0x4a0 [ 719.858224][ T6425] do_sys_openat2+0x113/0x200 [ 719.863423][ T6425] __x64_sys_openat+0x138/0x170 [ 719.868794][ T6425] do_syscall_64+0x174/0x580 [ 719.873902][ T6425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.880315][ T6425] [ 719.880315][ T6425] -> #5 (set->srcu){.+.+}-{0:0}: [ 719.887443][ T6425] __synchronize_srcu+0xca/0x300 [ 719.892907][ T6425] elevator_switch+0x1e8/0x7a0 [ 719.898203][ T6425] elevator_change+0x2cc/0x450 [ 719.903490][ T6425] elevator_set_default+0x36c/0x430 [ 719.909216][ T6425] blk_register_queue+0x3e9/0x4e0 [ 719.914791][ T6425] __add_disk+0x677/0xd50 [ 719.919646][ T6425] add_disk_fwnode+0xfb/0x480 [ 719.924849][ T6425] nbd_dev_add+0x72c/0xb50 [ 719.929791][ T6425] nbd_init+0x168/0x1f0 [ 719.934607][ T6425] do_one_initcall+0x250/0x870 [ 719.939893][ T6425] do_initcall_level+0x104/0x190 [ 719.945402][ T6425] do_initcalls+0x59/0xa0 [ 719.950256][ T6425] kernel_init_freeable+0x2a6/0x3e0 [ 719.955982][ T6425] kernel_init+0x1d/0x1d0 [ 719.960833][ T6425] ret_from_fork+0x514/0xb70 [ 719.965945][ T6425] ret_from_fork_asm+0x1a/0x30 [ 719.971232][ T6425] [ 719.971232][ T6425] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 719.979053][ T6425] __mutex_lock+0x1a3/0x1550 [ 719.984165][ T6425] elevator_change+0x1b3/0x450 [ 719.989451][ T6425] elevator_set_none+0xb5/0x140 [ 719.994822][ T6425] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 720.001152][ T6425] nbd_start_device+0x17f/0xb10 [ 720.006532][ T6425] nbd_genl_connect+0x165b/0x1cf0 [ 720.012084][ T6425] genl_family_rcv_msg_doit+0x22a/0x330 [ 720.018161][ T6425] genl_rcv_msg+0x61c/0x7a0 [ 720.023187][ T6425] netlink_rcv_skb+0x232/0x4b0 [ 720.028479][ T6425] genl_rcv+0x28/0x40 [ 720.032980][ T6425] netlink_unicast+0x75c/0x8e0 [ 720.038268][ T6425] netlink_sendmsg+0x813/0xb40 [ 720.043558][ T6425] ____sys_sendmsg+0x972/0x9f0 [ 720.048841][ T6425] ___sys_sendmsg+0x2a5/0x360 [ 720.054035][ T6425] __x64_sys_sendmsg+0x1bd/0x2a0 [ 720.059490][ T6425] do_syscall_64+0x174/0x580 [ 720.064599][ T6425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.071017][ T6425] [ 720.071017][ T6425] -> #3 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 720.079625][ T6425] blk_alloc_queue+0x546/0x680 [ 720.085188][ T6425] __blk_mq_alloc_disk+0x197/0x390 [ 720.090825][ T6425] nbd_dev_add+0x499/0xb50 [ 720.095780][ T6425] nbd_init+0x168/0x1f0 [ 720.100468][ T6425] do_one_initcall+0x250/0x870 [ 720.105764][ T6425] do_initcall_level+0x104/0x190 [ 720.111225][ T6425] do_initcalls+0x59/0xa0 [ 720.116090][ T6425] kernel_init_freeable+0x2a6/0x3e0 [ 720.121831][ T6425] kernel_init+0x1d/0x1d0 [ 720.126702][ T6425] ret_from_fork+0x514/0xb70 [ 720.131934][ T6425] ret_from_fork_asm+0x1a/0x30 [ 720.137230][ T6425] [ 720.137230][ T6425] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 720.144444][ T6425] fs_reclaim_acquire+0x71/0x100 [ 720.149917][ T6425] kmem_cache_alloc_lru_noprof+0x45/0x640 [ 720.156165][ T6425] alloc_inode+0xb8/0x1b0 [ 720.161014][ T6425] iget_locked+0x131/0x6a0 [ 720.165955][ T6425] kernfs_get_inode+0x4f/0x780 [ 720.171243][ T6425] kernfs_get_tree+0x5cd/0x980 [ 720.176536][ T6425] sysfs_get_tree+0x46/0x110 [ 720.181662][ T6425] vfs_get_tree+0x92/0x2a0 [ 720.186607][ T6425] do_new_mount+0x341/0xd30 [ 720.191631][ T6425] __se_sys_mount+0x31d/0x420 [ 720.196829][ T6425] do_syscall_64+0x174/0x580 [ 720.201938][ T6425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.208354][ T6425] [ 720.208354][ T6425] -> #1 (&root->kernfs_rwsem){++++}-{4:4}: [ 720.216347][ T6425] down_write+0x96/0x200 [ 720.221112][ T6425] kernfs_remove_by_name_ns+0x4e/0x140 [ 720.227110][ T6425] device_links_driver_bound+0x54f/0x14e0 [ 720.233416][ T6425] driver_bound+0xd8/0x2e0 [ 720.238394][ T6425] really_probe+0x789/0xaf0 [ 720.243417][ T6425] __driver_probe_device+0x1ef/0x380 [ 720.249224][ T6425] driver_probe_device+0x4f/0x240 [ 720.254774][ T6425] __device_attach_driver+0x279/0x430 [ 720.260673][ T6425] bus_for_each_drv+0x258/0x2f0 [ 720.266050][ T6425] __device_attach+0x2c5/0x450 [ 720.271345][ T6425] device_initial_probe+0xa1/0xd0 [ 720.276889][ T6425] bus_probe_device+0x12a/0x220 [ 720.282264][ T6425] device_add+0x7e9/0xbb0 [ 720.287110][ T6425] faux_device_create_with_groups+0x189/0x290 [ 720.293733][ T6425] regulator_dummy_init+0x19/0x40 [ 720.299277][ T6425] regulator_init+0xca/0x110 [ 720.304402][ T6425] do_one_initcall+0x250/0x870 [ 720.309688][ T6425] do_initcall_level+0x104/0x190 [ 720.315152][ T6425] do_initcalls+0x59/0xa0 [ 720.320006][ T6425] kernel_init_freeable+0x2a6/0x3e0 [ 720.325731][ T6425] kernel_init+0x1d/0x1d0 [ 720.330581][ T6425] ret_from_fork+0x514/0xb70 [ 720.335692][ T6425] ret_from_fork_asm+0x1a/0x30 [ 720.340979][ T6425] [ 720.340979][ T6425] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 720.349581][ T6425] __lock_acquire+0x15a5/0x2cf0 [ 720.354954][ T6425] lock_acquire+0x106/0x350 [ 720.359980][ T6425] down_read+0x47/0x2e0 [ 720.364657][ T6425] kernfs_remove+0x35/0x80 [ 720.369603][ T6425] __kobject_del+0xe1/0x330 [ 720.374702][ T6425] kobject_del+0x45/0x60 [ 720.379464][ T6425] cleanup_glue_dir+0x1a3/0x220 [ 720.384833][ T6425] device_del+0x780/0x8f0 [ 720.389679][ T6425] device_destroy+0xb2/0x1a0 [ 720.394786][ T6425] macvtap_device_event+0x226/0x400 [ 720.400566][ T6425] notifier_call_chain+0x1ad/0x3d0 [ 720.406206][ T6425] unregister_netdevice_many_notify+0x17a5/0x22c0 [ 720.413145][ T6425] default_device_exit_batch+0x962/0x9e0 [ 720.419351][ T6425] ops_undo_list+0x52b/0x940 [ 720.424512][ T6425] cleanup_net+0x56b/0x800 [ 720.429461][ T6425] process_scheduled_works+0xb5d/0x1860 [ 720.435557][ T6425] worker_thread+0xa53/0xfc0 [ 720.440668][ T6425] kthread+0x389/0x470 [ 720.445267][ T6425] ret_from_fork+0x514/0xb70 [ 720.450378][ T6425] ret_from_fork_asm+0x1a/0x30 [ 720.455669][ T6425] [ 720.455669][ T6425] other info that might help us debug this: [ 720.455669][ T6425] [ 720.465891][ T6425] Chain exists of: [ 720.465891][ T6425] &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex [ 720.465891][ T6425] [ 720.479281][ T6425] Possible unsafe locking scenario: [ 720.479281][ T6425] [ 720.486727][ T6425] CPU0 CPU1 [ 720.492087][ T6425] ---- ---- [ 720.497445][ T6425] lock(gdp_mutex); [ 720.501345][ T6425] lock(cpuhp_state-up); [ 720.508196][ T6425] lock(gdp_mutex); [ 720.514614][ T6425] rlock(&root->kernfs_supers_rwsem); [ 720.520072][ T6425] [ 720.520072][ T6425] *** DEADLOCK *** [ 720.520072][ T6425] [ 720.528208][ T6425] 5 locks held by kworker/u8:15/6425: [ 720.533574][ T6425] #0: ffff88801be86140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 720.544541][ T6425] #1: ffffc9000d2e7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 720.555511][ T6425] #2: ffffffff8fdb9f28 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 720.564841][ T6425] #3: ffffffff8fdc8c00 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xe5/0x9e0 [ 720.574863][ T6425] #4: ffffffff8f390260 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 720.584027][ T6425] [ 720.584027][ T6425] stack backtrace: [ 720.589926][ T6425] CPU: 0 UID: 0 PID: 6425 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT(full) [ 720.589948][ T6425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 720.589960][ T6425] Workqueue: netns cleanup_net [ 720.589988][ T6425] Call Trace: [ 720.589998][ T6425] [ 720.590005][ T6425] dump_stack_lvl+0xe8/0x150 [ 720.590024][ T6425] print_circular_bug+0x2e1/0x300 [ 720.590052][ T6425] check_noncircular+0x12e/0x150 [ 720.590074][ T6425] __lock_acquire+0x15a5/0x2cf0 [ 720.590099][ T6425] ? kernfs_remove+0x35/0x80 [ 720.590122][ T6425] lock_acquire+0x106/0x350 [ 720.590137][ T6425] ? kernfs_remove+0x35/0x80 [ 720.590162][ T6425] down_read+0x47/0x2e0 [ 720.590180][ T6425] ? kernfs_remove+0x35/0x80 [ 720.590201][ T6425] kernfs_remove+0x35/0x80 [ 720.590223][ T6425] __kobject_del+0xe1/0x330 [ 720.590243][ T6425] kobject_del+0x45/0x60 [ 720.590260][ T6425] cleanup_glue_dir+0x1a3/0x220 [ 720.590276][ T6425] device_del+0x780/0x8f0 [ 720.590293][ T6425] ? __pfx_device_del+0x10/0x10 [ 720.590310][ T6425] device_destroy+0xb2/0x1a0 [ 720.590326][ T6425] ? __pfx_device_destroy+0x10/0x10 [ 720.590343][ T6425] ? kernfs_remove_by_name_ns+0x101/0x140 [ 720.590368][ T6425] macvtap_device_event+0x226/0x400 [ 720.590387][ T6425] ? __pfx_macvtap_device_event+0x10/0x10 [ 720.590404][ T6425] ? igmp_netdev_event+0x7c/0x750 [ 720.590504][ T6425] notifier_call_chain+0x1ad/0x3d0 [ 720.590528][ T6425] unregister_netdevice_many_notify+0x17a5/0x22c0 [ 720.590553][ T6425] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 720.590573][ T6425] ? unregister_netdevice_queue+0x19b/0x360 [ 720.590590][ T6425] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 720.590617][ T6425] default_device_exit_batch+0x962/0x9e0 [ 720.590642][ T6425] ? __pfx_netdev_run_todo+0x10/0x10 [ 720.590659][ T6425] ? __pfx_default_device_exit_batch+0x10/0x10 [ 720.590685][ T6425] ? __pfx_default_device_exit_batch+0x10/0x10 [ 720.590707][ T6425] ops_undo_list+0x52b/0x940 [ 720.590730][ T6425] ? __pfx_ops_undo_list+0x10/0x10 [ 720.590752][ T6425] ? idr_destroy+0x227/0x290 [ 720.590802][ T6425] cleanup_net+0x56b/0x800 [ 720.590824][ T6425] ? __pfx_cleanup_net+0x10/0x10 [ 720.590848][ T6425] ? process_scheduled_works+0xa70/0x1860 [ 720.590864][ T6425] ? process_scheduled_works+0xa70/0x1860 [ 720.590880][ T6425] process_scheduled_works+0xb5d/0x1860 [ 720.590905][ T6425] ? __pfx_process_scheduled_works+0x10/0x10 [ 720.590923][ T6425] ? assign_work+0x3d5/0x5e0 [ 720.590939][ T6425] worker_thread+0xa53/0xfc0 [ 720.590963][ T6425] kthread+0x389/0x470 [ 720.590983][ T6425] ? __pfx_worker_thread+0x10/0x10 [ 720.590998][ T6425] ? __pfx_kthread+0x10/0x10 [ 720.591017][ T6425] ret_from_fork+0x514/0xb70 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 720.591035][ T6425] ? __pfx_ret_from_fork+0x10/0x10 [ 720.591051][ T6425] ? __switch_to+0xc79/0x1410 [ 720.591074][ T6425] ? __pfx_kthread+0x10/0x10 [ 720.591093][ T6425] ret_from_fork_asm+0x1a/0x30 [ 720.591118][ T6425] [ 721.599611][ T6425] vcan0 (unregistering): left allmulticast mode [ 721.627251][T16197] syz_tun (unregistering): left allmulticast mode [ 721.648958][T17609] syz_tun (unregistering): left allmulticast mode [ 721.677200][T17108] syz_tun (unregistering): left allmulticast mode [ 721.968829][ T6425] IPVS: stop unused estimator thread 0... [ 722.081505][ T6425] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.138696][ T6425] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.184839][ T6425] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.237633][ T6425] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.325311][ T6425] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 722.336811][ T6425] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.348065][ T6425] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 722.395898][ T6425] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 722.409109][ T6425] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.421182][ T6425] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 722.483507][ T6425] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 722.494627][ T6425] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.505264][ T6425] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 722.535386][ T6425] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 722.545791][ T6425] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.557161][ T6425] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 722.679410][ T6425] bridge_slave_1: left allmulticast mode [ 722.685726][ T6425] bridge_slave_1: left promiscuous mode [ 722.692535][ T6425] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.702001][ T6425] bridge_slave_0: left allmulticast mode [ 722.707728][ T6425] bridge_slave_0: left promiscuous mode [ 722.717085][ T6425] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.831960][ T6425] bond1 (unregistering): (slave ip6gretap2): Releasing active interface [ 723.104008][ T6425] bond0 (unregistering): Released all slaves [ 723.113929][ T6425] bond1 (unregistering): Released all slaves [ 723.126525][ T6425] bond2 (unregistering): Released all slaves [ 723.147433][ T6425] bond3 (unregistering): Released all slaves [ 723.163287][ T6425] bond4 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 723.176412][ T6425] bond4 (unregistering): Released all slaves [ 723.253668][ T6425] bond3 (unregistering): (slave geneve3): Releasing active interface [ 723.284233][ T6425] bond2 (unregistering): (slave geneve2): Releasing active interface [ 723.537219][ T6425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 723.547893][ T6425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 723.563623][ T6425] bond0 (unregistering): Released all slaves [ 723.574036][ T6425] bond1 (unregistering): Released all slaves [ 723.586031][ T6425] bond2 (unregistering): Released all slaves [ 723.601308][ T6425] bond3 (unregistering): Released all slaves [ 723.751809][ T6425] : left promiscuous mode [ 723.804586][ T6425] tipc: Disabling bearer [ 723.823680][ T6425] tipc: Left network mode [ 723.843872][ T6425] tipc: Disabling bearer [ 723.862441][ T6425] tipc: Left network mode [ 724.024529][ T5295] 8021q: adding VLAN 0 to HW filter on device eth1 [ 724.337227][ T5295] 8021q: adding VLAN 0 to HW filter on device eth2 [ 724.768263][ T5295] 8021q: adding VLAN 0 to HW filter on device eth3 [ 724.929582][ T6425] hsr_slave_0: left promiscuous mode [ 724.935804][ T6425] hsr_slave_1: left promiscuous mode [ 724.945136][ T6425] hsr_slave_0: left promiscuous mode [ 724.951543][ T6425] hsr_slave_1: left promiscuous mode [ 724.957385][ T6425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 724.965524][ T6425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.974777][ T6425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 724.984110][ T6425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.999246][ T6425] veth0_macvtap: left promiscuous mode [ 725.005200][ T6425] veth1_vlan: left promiscuous mode [ 725.010929][ T6425] veth0_vlan: left promiscuous mode [ 725.017002][ T6425] veth1_macvtap: left promiscuous mode [ 725.023261][ T6425] veth0_macvtap: left promiscuous mode [ 725.028826][ T6425] veth1_vlan: left promiscuous mode [ 725.036519][ T6425] veth0_vlan: left promiscuous mode [ 725.246088][ T1022] smc: removing ib device syz0 [ 725.351294][ T6425] team0 (unregistering): Port device team_slave_1 removed [ 725.363251][ T6425] team0 (unregistering): Port device team_slave_0 removed [ 725.416871][T14701] syz0: Port: 1 Link DOWN [ 725.417374][ T5295] 8021q: adding VLAN 0 to HW filter on device eth4 [ 725.434901][ T1022] smbdirect: ib_dev[syz0] removed [ 726.014719][ T5295] 8021q: adding VLAN 0 to HW filter on device eth5 [ 726.484767][ T5295] 8021q: adding VLAN 0 to HW filter on device eth6 [ 726.727620][ T5295] 8021q: adding VLAN 0 to HW filter on device eth7 [ 726.963253][ T5295] 8021q: adding VLAN 0 to HW filter on device eth8