last executing test programs: 3.34759789s ago: executing program 1 (id=1201): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000001080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3", 0x2}], 0x1}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/77, 0x4d}], 0x1}, 0x0) (async) recvmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/77, 0x4d}], 0x1}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x1c, r2, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x4040) (async) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x1c, r2, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x4040) 3.328675251s ago: executing program 3 (id=1202): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000006301040000000000950000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbff967, 0x0, 0x0, 0x0, 0xfffffffd}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000540)="64b61d9b104c99176403699c7d94", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0400"/11, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05000000020000000400"/28], 0x50) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_crypto(r4, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)=@get={0xf0, 0x13, 0x100, 0x70bd2b, 0x25dfdbfe, {{'drbg_pr_ctr_aes128\x00'}, '\x00', '\x00', 0x2800, 0x400}, [{0x8, 0x1, 0x6}, {0x8, 0x1, 0x2}]}, 0xf0}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 3.17467317s ago: executing program 3 (id=1204): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f30455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x40008000, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xf}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}, @TCA_FLOWER_KEY_ARP_OP={0x5, 0x3d, 0x8}]}}]}, 0x44}}, 0x800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r7) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x30, r6, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x30}}, 0x20000000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x2, [0x0, 0x0]}, &(0x7f00000000c0)=0xc) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000200)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000140)={r8, 0x4, 0x30, 0x8, 0x4}, &(0x7f0000000180)=0x18) 3.16945248s ago: executing program 1 (id=1205): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) recvmsg(r0, &(0x7f0000000380)={&(0x7f0000000280)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f00000003c0)=""/258, 0x102}], 0x1, 0x0, 0x0, 0xf5ffffff}, 0x3f01) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1040001}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r2, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x58}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}}, 0x90) (async) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) 3.042418098s ago: executing program 2 (id=1206): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f00000000c0)=[{0x9c}, {0x6}]}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003d80)={&(0x7f0000003c40)={0x30, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x50) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) read(r2, &(0x7f0000000080)=""/222, 0xde) write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd090387237ee530000000"], 0xfdef) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000480)={{r3}, r5, 0x4, @unused=[0x3, 0x7, 0x0, 0x2193], @subvolid=0x400}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 3.026144507s ago: executing program 4 (id=1207): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000a80)={0x84, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x810}, 0x4000) recvmsg$can_raw(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/118, 0x76}, {&(0x7f0000000180)=""/27, 0x1b}], 0x2}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x2c, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x7ff}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x2}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0xfffffffc}]}}]}, 0x58}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000000000000000a0000010900010073797a310000000028000480240001800b0001007470726f78790000140002800800024000000010080001400000000a0900020073797a3200000000140000001100010000000000000000000100000a6dd930a8094f9670afd931cc22b8c19b7a124c229bcd9c79e0fdea0e726b6058556ec423269a983c376d29a7900ead2e181885c097a1df1c62ba7d682367457c6c8c520b3f248ac3"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000021000100000000000000000002000000000000000000000005001e"], 0x24}}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000004c0)={@in6={{0xa, 0x4e20, 0x4338, @mcast2, 0x1a}}, 0x0, 0x0, 0x4c, 0x0, "daf3d1f0bbd8558dd65ef680a1669a66f22dc4fad7eaff290d7127f31a5e03daf700fa75b882f78726dbe38076e66cca8e7ee7dfead6a64c0bfbb2ecb7b01174821177acc28c16e313af83e6de96d758"}, 0xd8) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r5], 0xc8}, 0x1, 0x0, 0x0, 0x200400c1}, 0x4010) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r7, &(0x7f00000001c0)="c2", 0x1, 0x20008003, &(0x7f0000000180)={0xa, 0x8, 0x10, @private1, 0xfffffffd}, 0x1c) r8 = socket(0x2a, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r9, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000240)={&(0x7f0000000100)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3100000000080002400000000120000000000a03000000000000000000070000000900010073a27a310000000028000000000a030000000000000000000200000008000240000000000900010073797a310000000014000000110001"], 0x98}}, 0x0) recvmmsg(r9, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) shutdown(r7, 0x1) 2.963532098s ago: executing program 1 (id=1208): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000280)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc0200000000000000000000000000000400120005000800", @ANYRES32=0x0, @ANYBLOB="080004"], 0x8c}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff0000ff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x46, 0x0, 0x9}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x29, 0x1ff, 0x6, 0xb0e6, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x800, 0x1, 0x6, 'netbios-ns\x00', 'syz0\x00', {0x8}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x4}, 0x0, 0x1f8, 0x260, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@recent0={{0xf8}, {0xffff, 0x40, 0x10, 0x1, 'syz0\x00', 0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x8, 0x2, 0x8, 'pptp\x00', 'syz1\x00', {0x5a}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x520) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) unshare(0x6a040000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000280)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc0200000000000000000000000000000400120005000800", @ANYRES32=0x0, @ANYBLOB="080004"], 0x8c}}, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) (async) socket(0x10, 0x80002, 0x0) (async) socket$igmp6(0xa, 0x3, 0x2) (async) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff0000ff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x46, 0x0, 0x9}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x29, 0x1ff, 0x6, 0xb0e6, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x800, 0x1, 0x6, 'netbios-ns\x00', 'syz0\x00', {0x8}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x4}, 0x0, 0x1f8, 0x260, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@recent0={{0xf8}, {0xffff, 0x40, 0x10, 0x1, 'syz0\x00', 0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x8, 0x2, 0x8, 'pptp\x00', 'syz1\x00', {0x5a}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x520) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) (async) unshare(0x6a040000) (async) 2.854658998s ago: executing program 4 (id=1209): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)=ANY=[@ANYRES8=r0, @ANYRES64=r1, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRESDEC=r1, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r1, @ANYRES64=r1, @ANYRES32=r1], 0x7c}}, 0x20000000) 2.753609315s ago: executing program 3 (id=1210): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x6e, &(0x7f00000004c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x38, 0x3a, 0xff, @remote={0xfe, 0x7}, @mcast2, {[], @dest_unreach={0x1, 0x1, 0x0, 0x7, '\x00', {0x0, 0x6, "cba86d", 0x7, 0x3a, 0xff, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "a1f5621715758e7f"}}}}}}}, 0x0) 2.625659833s ago: executing program 4 (id=1211): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x21, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 2.625204903s ago: executing program 2 (id=1212): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0xd}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}]}}, 0x0, 0x4e}, 0x20) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) getpeername$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000002100000027bd7000f9dbdf250a20803b080000050a00000001000000090000000000100008000000"], 0x2c}}, 0x4000) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x6, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) close(r1) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0xd}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}]}}, 0x0, 0x4e}, 0x20) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) (async) getpeername$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000002100000027bd7000f9dbdf250a20803b080000050a00000001000000090000000000100008000000"], 0x2c}}, 0x4000) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x6, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) (async) close(r1) (async) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) (async) 2.590618262s ago: executing program 3 (id=1214): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r1}, 0x38) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x20, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1}]}}}]}, 0x3c}}, 0x20000000) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@nat={'nat\x00', 0x1b, 0x5, 0x3c8, 0x288, 0xa8, 0xffffffff, 0x288, 0xa8, 0x330, 0x330, 0xffffffff, 0x330, 0x330, 0x5, &(0x7f0000000380), {[{{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x9, @local, @rand_addr=0x64010102, @gre_key=0x1, @gre_key=0x6}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x2f}}, @common=@ttl={{0x28}, {0x2, 0x2e}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x18, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @icmp_id=0x66, @icmp_id=0x67}}}}, {{@uncond, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@mark={{0x30}, {0x72e, 0x12ff}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0xc, @ipv6=@mcast2, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x22, @icmp_id=0x68}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x14, @remote, @broadcast, @gre_key=0x8000, @gre_key=0xd7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0xe4, 0x18, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x8c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfff}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x10c}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000000c0)={0x3, 'pim6reg0\x00', {0x8}, 0xf2ad}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) (async) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r1}, 0x38) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x20, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1}]}}}]}, 0x3c}}, 0x20000000) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@nat={'nat\x00', 0x1b, 0x5, 0x3c8, 0x288, 0xa8, 0xffffffff, 0x288, 0xa8, 0x330, 0x330, 0xffffffff, 0x330, 0x330, 0x5, &(0x7f0000000380), {[{{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x9, @local, @rand_addr=0x64010102, @gre_key=0x1, @gre_key=0x6}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x2f}}, @common=@ttl={{0x28}, {0x2, 0x2e}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x18, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @icmp_id=0x66, @icmp_id=0x67}}}}, {{@uncond, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@mark={{0x30}, {0x72e, 0x12ff}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0xc, @ipv6=@mcast2, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x22, @icmp_id=0x68}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x14, @remote, @broadcast, @gre_key=0x8000, @gre_key=0xd7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0xe4, 0x18, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x8c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfff}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x10c}}, 0x0) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000000c0)={0x3, 'pim6reg0\x00', {0x8}, 0xf2ad}) (async) 2.370837341s ago: executing program 0 (id=1215): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) (async) unshare(0x60480) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xffffffff}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r6, 0x0) (async) clock_gettime(0x7, &(0x7f0000000340)) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r6, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r4, r3, 0x4, r3}, 0x10) (async) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="011b25bd7000fddbdf250500000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) 2.310266841s ago: executing program 0 (id=1216): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) (async) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) (async) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="500000001000010400000000ffdbdf0000000000", @ANYRES32=0x0, @ANYBLOB="00000000000005001c0012800b00010067656e65766500000c00028005000a00000000001400030067656e6576653100"], 0x50}}, 0x0) (async) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r13], 0x1c}}, 0x4004840) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, r1, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r18}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4084}, 0x4085) (async) bind$rxrpc(r0, &(0x7f0000000080)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0xc, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xb}}, 0x24) (async) r19 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r19, 0x0, 0xd4, &(0x7f0000004000)=0x2, 0x4) r20 = socket(0x10, 0x80000, 0x8) (async) r21 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000feffffff00000000000004008500000036000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000000600000095"], &(0x7f00000005c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r21, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000500)=ANY=[@ANYRES64=r21, @ANYRES16=r14, @ANYRES8=r20], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 2.272757515s ago: executing program 2 (id=1217): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000007c40)={'filter\x00', 0x0, [0x5, 0xfffff801, 0x7f]}, &(0x7f0000007cc0)=0x44) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040840}, 0x2000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x52, r5, 0xffffe000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r6, 0x84, 0x82, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="2c00000013000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x60}, 0x20000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r10, 0x11, 0x64, 0x0, &(0x7f0000000100)) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xe, 0x0, &(0x7f0000001e40)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.183099701s ago: executing program 1 (id=1218): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 2.14840776s ago: executing program 3 (id=1219): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0xb0, 0x30, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{0x9c, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x0, 0x6, 0xffffffff, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000007c0)=ANY=[@ANYBLOB="08010000000901080000000000000000010000060c00048008000140000000080c000480080001400000ffff080005400000001f0900010073797a300000000008000640000000010800064000000000b8000200060003400003000014000180080001000a01010208000200e00000012c00018014000300fe8000000000000000000000000000aa140004000000000000000000000000000000000014000180080001007f00000108000200ac1414340c0002"], 0x108}}, 0x0) r3 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x6a, 0x2, 0x20000000, 0x3) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) listen(0xffffffffffffffff, 0xba7) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x28003, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r4, &(0x7f0000001780)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xe}, {&(0x7f00000004c0)="1b2ece18a521977299ff149a644050610194340dff5391d8", 0x18}], 0x2) getsockopt$sock_buf(r1, 0x1, 0x1f, 0x0, &(0x7f0000000300)) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x9) 2.147918951s ago: executing program 4 (id=1220): r0 = socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100000040000000560000022500000019000a001000000007fd", 0x2a}], 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum={0x2, 0x0, 0x0, 0x6, 0x4, [{0xd, 0x9}, {}, {0x1, 0x1}, {0xe, 0x6}, {0x7, 0x80000000}, {0x6, 0xe}, {0x2, 0x7}, {0x1, 0xb6c}, {0xf, 0x6}, {0xf, 0x1}]}]}, {0x0, [0x0, 0x0, 0x2e, 0x30]}}, 0x0, 0x2a}, 0x36) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_TTL_INHERIT={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x58}}, 0x0) 2.052683455s ago: executing program 0 (id=1221): unshare(0x20400) r0 = socket(0x10, 0x3, 0x0) vmsplice(r0, &(0x7f0000001e40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 1.916492005s ago: executing program 2 (id=1222): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}}, 0x24000000) 1.842920772s ago: executing program 1 (id=1223): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xac, r3, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x5, 0x59}}}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0xe19f258a89863d93}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}]}, 0xac}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r7 = socket(0x2a, 0x2, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x41, 0x3, 0x288, 0x0, 0x0, 0x0, 0x120, 0x0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'wlan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x120, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@multiport={{0x50}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@broadcast, @private, 0x0, 0x0, 'veth1_to_team\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e8) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10008890}, 0x20000000) 1.84228034s ago: executing program 4 (id=1224): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000010001a800c002d80080001"], 0x38}}, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'macvtap0\x00', @broadcast}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route_sched_retired(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtclass={0x24, 0x28, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {0xb}, {0x6, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0xc1}, 0x4000) 1.768036683s ago: executing program 2 (id=1225): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$OCFS2_IOC_UNRESVSP64(r0, 0x4030582b, &(0x7f0000000000)={0x2, 0x2, 0x40, 0xb, 0x4, 0xc0}) r1 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @netrom}, [@null, @netrom, @null, @default, @rose, @rose, @default]}, &(0x7f00000000c0)=0x48, 0x80800) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000600)={{r0, &(0x7f0000000100)='\x00', 0x101000, &(0x7f0000000140)={@_ha_fsid={[0x3, 0xfff]}, {0x4, 0x7, 0x10, 0x10001}}, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0xe}, 0x4, &(0x7f0000000580)=[{0x2, 0xffffffff, &(0x7f0000000200)='\x00', &(0x7f0000000240)="10bd85427e72b181ae0cb9b836e5273d492d6a1e2e200d591de3f1594be1bdd056cac6e4b44d6e55c4804dc560aa469252", 0x31, 0x3a}, {0x1, 0x8, &(0x7f0000000280)=']%/:', &(0x7f00000002c0)="e5bdb7a5e63450151f3d2f68ae5a4858145d2363eb24252cafad2c180d27dfaf060bdd0e9aa03df2339a27d3e4f08f8d01d4765b1810dda90cc68f4a2c8e4526f4f3c5b0369adebe3ea8ba2cac3abc03decec0461aa8b599b165d22702ce5d07db47c7b4c1938b08b80e2df59cf47d4100b7bd70c940772d11051bd0462445caab33f7f1d9777f182a624f9fac7a69075d564139ebbf88acf615d835c929ae50831cc4", 0xa3, 0x8}, {0x1, 0x2, &(0x7f0000000380)='\x00', &(0x7f00000003c0)="847eb18e2448cd11ec267179415ece76d70c7b0971efdd79272f60a421c4d104cd1f9daad58963eaff661e1d71ab152d55e2a66b4659fc2e7d8e2488128103798ce69f79b2440b56458d7e0975b773f77ba0dca50de042c112e4d3c103b598a03c9aaa2ed0e3b8178970421f32e3ea671d8540ba43311dea68e4a32a0f691daea550fa3e13485679b8040133", 0x8c, 0x8}, {0x2, 0x401, &(0x7f0000000480)='\x00', &(0x7f00000004c0)="c50445922cafbcc41b6911bb0ee73d31611b0aca265fce36bd78bd9ca46d06deea26f10df6879c8fbf813d2af07bfb3f5d40181754afb626d146e62224b723792d570ad4390e034db2266ce12291bc4cef12f635708ab6aa812a2c4d358c94e0354ac9683db06945786b025d47c9914ca1b6464b9a45a234ebc84972870ee778a059367a4385ff045aa71f26739c57178270fb01d50ac18dbd31c3ccc6b6fb72767473ad8c62", 0xa6, 0x12}]}) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000780)={r2, &(0x7f0000000680)='\x00', 0x111040, &(0x7f00000006c0)={@align=0x6, {0x3, 0xe, 0x2}}, 0x5, &(0x7f0000000700)={@_ha_fsid}, &(0x7f0000000740)=0x80000001}) sendmsg$sock(r0, &(0x7f0000000a00)={&(0x7f00000007c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x0, 0x2, 0x3, 0x0, {0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0xffffff00}}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000840)="58929e4ffe700a24b0d90fa5ea3f567d132dac8daed7e54baf82e66638cad602818fb2de2a51ebd2347a01181206b7aefb742d5d243e0e0414f85fac1807ea2bd24cd5c1449732881af997cc1e81646e50846fe40decb1d8d1d3a28581ff574e612df0305c7faff01a6a36a0c291d3b74d123be252f00f840d5e9de6edefea30097271cbd0f38a54ded238066b5305e8cc040503461a7a240cb15b36265baf67f12ddd71a704b74508a1ea408ff6196d58378a9859f51524fbf091683e8fe90be8", 0xc1}], 0x1, &(0x7f0000000980)=[@mark={{0x14, 0x1, 0x24, 0x80000001}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffff800}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x60}, 0x4) setsockopt$sock_timeval(r3, 0x1, 0x43, &(0x7f0000000a40), 0x10) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000a80), 0x8) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000b80)={'sit0\x00', &(0x7f0000000ac0)={@multicast2, 0x0, 0x0, 0x80, 0x0, [{}, {@private}, {@broadcast}, {@remote}, {@local}, {@multicast2}, {@multicast1}, {@multicast1}]}}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000bc0)={'wlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000001c40)={'broute\x00', 0x0, 0x4, 0x1000, [0x7fffffff, 0x9, 0x1000, 0x1, 0x5, 0x7], 0x1, &(0x7f0000000c00)=[{}], &(0x7f0000000c40)=""/4096}, &(0x7f0000001cc0)=0x78) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001f80)=@bpf_ext={0x1c, 0x19, &(0x7f0000001d00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000000}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff9}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000001e00)='syzkaller\x00', 0x1ff, 0x78, &(0x7f0000001e40)=""/120, 0x41000, 0x10, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001ec0)={0x4, 0xd, 0x0, 0x7}, 0x10, 0x1bb08, r2, 0x1, &(0x7f0000001f00)=[r4, r4, r2, r2], &(0x7f0000001f40)=[{0x2, 0x5, 0x1, 0xc}], 0x10, 0x4}, 0x94) ioctl$NILFS_IOCTL_GET_BDESCS(r5, 0xc0186e87, &(0x7f0000002080)={&(0x7f0000002040), 0x0, 0x28, 0x3, 0x2}) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000002100)={0x2, &(0x7f00000020c0)=[{0x9, 0xfe, 0x7, 0x2}, {0x6, 0x5, 0xb, 0x1}]}, 0x10) ioctl$XFS_IOC_FSINUMBERS(r3, 0xc0205867, &(0x7f0000002580)={&(0x7f0000002140)=0x10001, 0x7, &(0x7f0000002180)=[{}, {}, {}, {}, {}], &(0x7f0000002540)}) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f00000025c0)) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000002600), 0x4) r6 = socket$netlink(0x10, 0x3, 0xa) socket$packet(0x11, 0x3, 0x300) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000002680)={0x3, &(0x7f0000002640)=[{0x7ff, 0x6, 0x1, 0x6}, {0x5, 0xf0, 0x5e, 0x100}, {0x800, 0x1, 0x81, 0x9}]}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000002700), r6) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f0000002940)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002900)={&(0x7f0000002740)={0x18c, r7, 0x10, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8000}, {0xc, 0x90, 0x890}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x74}, {0xc, 0x90, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xa}, {0xc, 0x90, 0x80000001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0xf2e6}, {0xc, 0x90, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x401}, {0xc, 0x90, 0x42}}]}, 0x18c}}, 0x20004084) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000029c0), r6) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f0000002ac0)={&(0x7f0000002980), 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x4c, r8, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xc0}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002b40), r2) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000002b80)={0x0, @empty, @multicast1}, &(0x7f0000002bc0)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000002c00)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000002d00)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c40)={0x7c, r9, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4040010}, 0x20008000) tee(r5, r3, 0xfffffffffffffffb, 0x2) ioctl$XFS_IOC_FSGROWFSRT(r5, 0x40105870, &(0x7f0000002d40)={0x6, 0x80000001}) 1.590899181s ago: executing program 0 (id=1226): r0 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="6000000002"], 0x60}}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r5, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004018}, 0x24040000) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000180)={0x6}, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f00000000c0)={0x0}, &(0x7f00000001c0)=0x8) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000070000000f0000000900000005"], 0x50) (async) r11 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r11, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0xfffffffd, @mcast1={0xff, 0x7}, 0xc}}, {{0xa, 0x4e20, 0x8a, @remote, 0x1000}}}, 0x108) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r11, 0x84, 0x6, &(0x7f00000003c0)={r9, @in={{0x2, 0x4e21, @local}}}, &(0x7f0000000480)=0x84) (async) r12 = socket(0x2, 0x4, 0x2) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r12, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, r5, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffe}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x4000) (async) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001840), 0xfffffff7, r10}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2, r10}, 0x38) 1.418513691s ago: executing program 0 (id=1227): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="2e00bc0413a1f8480d0000008ec55e00000000000000c200000000", 0x1b}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e"], 0xfe33) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x3a, 0x8, 0x2}, 0x48) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f0000000200)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="5fffffff7fe5c7a557803e40010000000000000000", @ANYRES64=0x0], 0x20) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000040)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000000c0)) sendto(r3, 0x0, 0x0, 0x10000, &(0x7f0000000040)=@nl=@unspec, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r6, 0x6b, 0x4, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x5cb400, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x400}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x6, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000000}, 0x44010) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000001000000000000000000009500009a96000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r11, r10, 0x25, 0x0, @void}, 0x10) 240.805552ms ago: executing program 2 (id=1228): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f0000000240)) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x8c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan1\x00'}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000440)=0x0) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYRES32=r11, @ANYRES32=r12], 0x1c}}, 0x840) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000480)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000500)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r1, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000ffdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100390755010b8f90884256dd1cac87e30e3b35e37c6cb900cae13360ac50c403f56af3315b1cc1cd3e35831446366131b69b57f74451b13f61131b90b180e7213a2a07aab142a3f9a30ea599c1425876d027ee1a79bfa18266a59b429208460e6cf7d6db67bd", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES8=r1, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x810) r15 = socket$pppl2tp(0x18, 0x1, 0x1) r16 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r15, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r16, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r16, &(0x7f00000000c0)={0xa, 0x4e20, 0x200, @local, 0xa}, 0x1c) r17 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r18 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r18, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r17, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) 210.767485ms ago: executing program 1 (id=1229): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xff48) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000280)=0xffffffffffffffff, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="edcaf499"}]}, 0x1c}}, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4f23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x6}, {{@in6=@loopback, 0x4, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0xb7, 0x5, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000009c0)=ANY=[@ANYBLOB="340000006800010900000000000000000000000000000000060003000000000014000200ffffffffffff"], 0x34}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002e00090027bd70000004000004000000080018000dac0f"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 118.994471ms ago: executing program 3 (id=1230): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) poll(&(0x7f0000000300)=[{r4, 0x1040}], 0x1, 0x81) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r6) sendmsg$NFC_CMD_LLC_SDREQ(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4801}, 0x20001880) sendmsg$nl_route_sched_retired(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtclass={0x24, 0x28, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {0xb}, {0x6, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0xc1}, 0x4000) r8 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r8, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x3, @link_local, 'vxcan1\x00'}}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x24, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd, 0x9}, {0x6}, {0x0, 0x1}}}, 0x24}}, 0x4000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x40000000, {}, [{0x54, 0x1, [@m_mpls={0x1b, 0x1, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_LABEL={0x8, 0x5, 0xf47eb}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}}, 0x0) 118.590552ms ago: executing program 0 (id=1231): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x8) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000008c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0) 0s ago: executing program 4 (id=1232): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00'}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.54' (ED25519) to the list of known hosts. [ 67.599014][ T5807] cgroup: Unknown subsys name 'net' [ 67.713942][ T5807] cgroup: Unknown subsys name 'cpuset' [ 67.722239][ T5807] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.076836][ T5807] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.334277][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.340640][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.492229][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.500435][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.508260][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.516974][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.525959][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.533490][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.541542][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.550877][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.559589][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.574542][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.651403][ T5823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.659478][ T5823] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.667530][ T5823] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.677183][ T5823] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.685394][ T5823] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.694892][ T5145] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.704209][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.716747][ T5145] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.731035][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.738760][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.746749][ T5145] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.756458][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.764344][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.773012][ T5145] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.782580][ T5823] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.239291][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 73.312444][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 73.348087][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 73.443797][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.451517][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.458645][ T5830] bridge_slave_0: entered allmulticast mode [ 73.465746][ T5830] bridge_slave_0: entered promiscuous mode [ 73.518162][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.525564][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.532828][ T5830] bridge_slave_1: entered allmulticast mode [ 73.539715][ T5830] bridge_slave_1: entered promiscuous mode [ 73.551925][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 73.563336][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 73.652063][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.659238][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.666578][ T5819] bridge_slave_0: entered allmulticast mode [ 73.673552][ T5819] bridge_slave_0: entered promiscuous mode [ 73.683779][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.720108][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.727342][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.734840][ T5819] bridge_slave_1: entered allmulticast mode [ 73.741857][ T5819] bridge_slave_1: entered promiscuous mode [ 73.751559][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.760937][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.768051][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.775316][ T5824] bridge_slave_0: entered allmulticast mode [ 73.782381][ T5824] bridge_slave_0: entered promiscuous mode [ 73.821814][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.828981][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.836467][ T5824] bridge_slave_1: entered allmulticast mode [ 73.843348][ T5824] bridge_slave_1: entered promiscuous mode [ 73.912862][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.924643][ T5830] team0: Port device team_slave_0 added [ 73.932389][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.943552][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.971682][ T5830] team0: Port device team_slave_1 added [ 73.988049][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.997448][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.004915][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.012188][ T5833] bridge_slave_0: entered allmulticast mode [ 74.019106][ T5833] bridge_slave_0: entered promiscuous mode [ 74.071104][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.078255][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.086757][ T5833] bridge_slave_1: entered allmulticast mode [ 74.093879][ T5833] bridge_slave_1: entered promiscuous mode [ 74.101467][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.108575][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.116400][ T5835] bridge_slave_0: entered allmulticast mode [ 74.123460][ T5835] bridge_slave_0: entered promiscuous mode [ 74.141937][ T5819] team0: Port device team_slave_0 added [ 74.148477][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.155584][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.181583][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.195642][ T5824] team0: Port device team_slave_0 added [ 74.210508][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.218119][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.225548][ T5835] bridge_slave_1: entered allmulticast mode [ 74.232513][ T5835] bridge_slave_1: entered promiscuous mode [ 74.244835][ T5819] team0: Port device team_slave_1 added [ 74.251292][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.258236][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.284549][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.297046][ T5824] team0: Port device team_slave_1 added [ 74.322215][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.365407][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.387274][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.394340][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.421105][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.443430][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.473062][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.480029][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.506370][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.518163][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.525225][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.551232][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.564261][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.583883][ T5833] team0: Port device team_slave_0 added [ 74.607410][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.614714][ T5823] Bluetooth: hci0: command tx timeout [ 74.620399][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.646377][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.671578][ T5830] hsr_slave_0: entered promiscuous mode [ 74.677820][ T5830] hsr_slave_1: entered promiscuous mode [ 74.685835][ T5833] team0: Port device team_slave_1 added [ 74.691501][ T5823] Bluetooth: hci1: command tx timeout [ 74.724076][ T5835] team0: Port device team_slave_0 added [ 74.756094][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.763321][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.789769][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.791092][ T5823] Bluetooth: hci2: command tx timeout [ 74.808165][ T5835] team0: Port device team_slave_1 added [ 74.837337][ T5819] hsr_slave_0: entered promiscuous mode [ 74.843962][ T5819] hsr_slave_1: entered promiscuous mode [ 74.850133][ T5819] debugfs: 'hsr0' already exists in 'hsr' [ 74.856277][ T5823] Bluetooth: hci4: command tx timeout [ 74.856283][ T51] Bluetooth: hci3: command tx timeout [ 74.862091][ T5819] Cannot create hsr debugfs directory [ 74.873612][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.880553][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.906697][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.983699][ T5824] hsr_slave_0: entered promiscuous mode [ 74.989873][ T5824] hsr_slave_1: entered promiscuous mode [ 74.996108][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 75.002151][ T5824] Cannot create hsr debugfs directory [ 75.009784][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.017343][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.043635][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.094372][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.101515][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.127547][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.183275][ T5833] hsr_slave_0: entered promiscuous mode [ 75.189509][ T5833] hsr_slave_1: entered promiscuous mode [ 75.195782][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 75.201534][ T5833] Cannot create hsr debugfs directory [ 75.331252][ T5835] hsr_slave_0: entered promiscuous mode [ 75.337816][ T5835] hsr_slave_1: entered promiscuous mode [ 75.344008][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 75.349770][ T5835] Cannot create hsr debugfs directory [ 75.661463][ T5830] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.672653][ T5830] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.680417][ T5830] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.690089][ T5830] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.713423][ T5830] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.723624][ T5830] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.732189][ T5830] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.742512][ T5830] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.793268][ T5819] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.805683][ T5819] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.814099][ T5819] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.824237][ T5819] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.832358][ T5819] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.842745][ T5819] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.852965][ T5819] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.863249][ T5819] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.964751][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.976256][ T5833] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.986393][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.998617][ T5833] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.043867][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.055201][ T5833] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.064419][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.074014][ T5833] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.096480][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.146139][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.169538][ T5824] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.179472][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.189011][ T5824] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.197968][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.206311][ T5824] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.215636][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.223615][ T5824] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.233244][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.244528][ T192] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.251840][ T192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.294074][ T192] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.301232][ T192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.363549][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.373122][ T5835] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.391617][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.401847][ T5835] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.409547][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.419659][ T5835] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.445053][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.456505][ T5835] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.484518][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.516024][ T5830] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.526536][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.568628][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.635201][ T192] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.642402][ T192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.657200][ T192] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.664362][ T192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.677007][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.691180][ T5823] Bluetooth: hci0: command tx timeout [ 76.770676][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.783383][ T5823] Bluetooth: hci1: command tx timeout [ 76.797541][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.804784][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.836632][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.843845][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.861283][ T5823] Bluetooth: hci2: command tx timeout [ 76.861553][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.899730][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.916765][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.930843][ T5823] Bluetooth: hci3: command tx timeout [ 76.936357][ T5823] Bluetooth: hci4: command tx timeout [ 76.943789][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.987873][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.995234][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.015880][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.071824][ T192] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.078990][ T192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.093580][ T192] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.100785][ T192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.155703][ T192] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.162966][ T192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.359730][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.500491][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.562282][ T5830] veth0_vlan: entered promiscuous mode [ 77.597815][ T5830] veth1_vlan: entered promiscuous mode [ 77.652708][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.665490][ T5819] veth0_vlan: entered promiscuous mode [ 77.715653][ T5819] veth1_vlan: entered promiscuous mode [ 77.743259][ T5830] veth0_macvtap: entered promiscuous mode [ 77.767031][ T5830] veth1_macvtap: entered promiscuous mode [ 77.787475][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.809570][ T5833] veth0_vlan: entered promiscuous mode [ 77.829138][ T5824] veth0_vlan: entered promiscuous mode [ 77.847189][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.865984][ T5824] veth1_vlan: entered promiscuous mode [ 77.873170][ T5833] veth1_vlan: entered promiscuous mode [ 77.888034][ T5819] veth0_macvtap: entered promiscuous mode [ 77.907169][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.916143][ T5819] veth1_macvtap: entered promiscuous mode [ 77.949367][ T141] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.959574][ T141] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.976726][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.985553][ T141] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.995474][ T141] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.019346][ T5824] veth0_macvtap: entered promiscuous mode [ 78.029385][ T5824] veth1_macvtap: entered promiscuous mode [ 78.048367][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.064113][ T141] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.073541][ T141] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.082772][ T141] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.109426][ T141] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.129330][ T5833] veth0_macvtap: entered promiscuous mode [ 78.148823][ T5833] veth1_macvtap: entered promiscuous mode [ 78.164194][ T5835] veth0_vlan: entered promiscuous mode [ 78.174947][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.226483][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.247977][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.262254][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.270190][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.285031][ T5835] veth1_vlan: entered promiscuous mode [ 78.296398][ T141] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.311830][ T141] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.332932][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.341951][ T141] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.376434][ T141] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.391480][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.399635][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.428695][ T63] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.439219][ T63] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.460273][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.472633][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.479969][ T63] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.489817][ T63] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.545413][ T5835] veth0_macvtap: entered promiscuous mode [ 78.563688][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.574171][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.606070][ T192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.616810][ T192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.619600][ T5835] veth1_macvtap: entered promiscuous mode [ 78.682434][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.689158][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.723923][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.738196][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.749405][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.764845][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.780055][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.783475][ T5823] Bluetooth: hci0: command tx timeout [ 78.825708][ T141] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.839586][ T141] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.862959][ T5823] Bluetooth: hci1: command tx timeout [ 78.902619][ T141] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.931523][ T5823] Bluetooth: hci2: command tx timeout [ 78.958072][ T63] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.969332][ T192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.004769][ T192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.012461][ T5823] Bluetooth: hci3: command tx timeout [ 79.022601][ T5823] Bluetooth: hci4: command tx timeout [ 79.100148][ T5937] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 79.118337][ T5944] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 79.128915][ T5937] Zero length message leads to an empty skb [ 79.143607][ T5937] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 79.173244][ T5941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 79.236082][ T5944] netlink: 'syz.1.6': attribute type 1 has an invalid length. [ 79.317236][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.328815][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.413859][ T5952] netlink: 'syz.3.8': attribute type 8 has an invalid length. [ 79.439162][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8'. [ 79.470880][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.493256][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.529671][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.538308][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.544006][ T5958] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 79.614998][ T5958] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 79.994042][ T5986] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.17'. [ 80.242445][ T5994] netlink: 13 bytes leftover after parsing attributes in process `syz.4.20'. [ 80.347630][ T5999] netlink: 72 bytes leftover after parsing attributes in process `syz.0.23'. [ 80.430150][ T6003] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 80.707623][ T6009] netlink: 12 bytes leftover after parsing attributes in process `syz.3.27'. [ 80.732474][ T6009] ip6gretap0: entered allmulticast mode [ 80.854167][ T5823] Bluetooth: hci0: command tx timeout [ 80.932200][ T5823] Bluetooth: hci1: command tx timeout [ 81.011170][ T5823] Bluetooth: hci2: command tx timeout [ 81.045013][ T6019] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.091143][ T5823] Bluetooth: hci4: command tx timeout [ 81.091263][ T51] Bluetooth: hci3: command tx timeout [ 81.221897][ T6025] sock: sock_timestamping_bind_phc: sock not bind to device [ 81.477763][ T6041] netlink: 'syz.0.36': attribute type 9 has an invalid length. [ 82.146068][ T6044] syzkaller0: entered promiscuous mode [ 82.159350][ T6044] syzkaller0: entered allmulticast mode [ 83.308605][ T6051] gre0: entered promiscuous mode [ 83.313965][ T6051] gre0: entered allmulticast mode [ 83.330450][ T6055] syzkaller0: entered promiscuous mode [ 83.344590][ T6055] syzkaller0: entered allmulticast mode [ 83.373263][ T6085] warning: `syz.2.41' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 83.449616][ T6088] netlink: 165 bytes leftover after parsing attributes in process `syz.4.42'. [ 83.521939][ T6092] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.589955][ T6096] syz.2.44 uses obsolete (PF_INET,SOCK_PACKET) [ 83.849408][ T6106] netlink: 224 bytes leftover after parsing attributes in process `syz.3.47'. [ 83.923986][ T6118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.075304][ T6132] xt_connbytes: Forcing CT accounting to be enabled [ 84.207846][ T6132] xt_CT: No such helper "netbios-ns" [ 84.246250][ T6140] netlink: 44 bytes leftover after parsing attributes in process `syz.0.56'. [ 84.318257][ T6146] syzkaller0: entered promiscuous mode [ 84.337777][ T6146] syzkaller0: entered allmulticast mode [ 84.379228][ T6146] netlink: 'syz.2.57': attribute type 1 has an invalid length. [ 84.515994][ T6150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.60'. [ 84.840105][ T6182] netlink: 56 bytes leftover after parsing attributes in process `syz.2.69'. [ 84.887746][ T6178] netlink: 32 bytes leftover after parsing attributes in process `syz.3.67'. [ 84.967444][ T6185] Bluetooth: MGMT ver 1.23 [ 85.083610][ T6192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 85.105355][ T6192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 85.120375][ T6195] geneve2: entered promiscuous mode [ 85.135968][ T6195] geneve2: entered allmulticast mode [ 85.140015][ T6192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 85.155588][ T6192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 85.172029][ T1095] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 3615 - 0 [ 85.190845][ T1095] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 3615 - 0 [ 85.223251][ T1095] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 3615 - 0 [ 85.266600][ T1095] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 3615 - 0 [ 85.363088][ T6210] delete_channel: no stack [ 85.369855][ T6207] netlink: 16 bytes leftover after parsing attributes in process `syz.4.78'. [ 85.427289][ T6205] netlink: 28 bytes leftover after parsing attributes in process `syz.3.77'. [ 85.507296][ T6215] Bluetooth: MGMT ver 1.23 [ 85.539909][ T6220] netlink: 40 bytes leftover after parsing attributes in process `syz.4.82'. [ 85.726090][ T6227] netlink: 'syz.1.85': attribute type 9 has an invalid length. [ 85.736973][ T6227] netlink: 'syz.1.85': attribute type 6 has an invalid length. [ 85.831035][ T6232] netlink: 'syz.3.86': attribute type 6 has an invalid length. [ 86.250333][ T6261] netlink: 20 bytes leftover after parsing attributes in process `syz.4.97'. [ 86.335224][ T6267] Cannot find add_set index 0 as target [ 86.343626][ T6254] macvtap1: entered promiscuous mode [ 86.354586][ T6254] macvtap1: entered allmulticast mode [ 86.371466][ T6254] veth1_vlan: entered allmulticast mode [ 86.429256][ T6263] macvtap2: entered promiscuous mode [ 86.440828][ T6263] macvtap2: entered allmulticast mode [ 86.476124][ T6275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.99'. [ 86.701926][ T47] cfg80211: failed to load regulatory.db [ 86.754044][ T6289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.103'. [ 87.776735][ T6357] tc_dump_action: action bad kind [ 87.880505][ T6360] openvswitch: netlink: Flow actions attr not present in new flow. [ 88.592198][ T6408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.777606][ T6414] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 89.127596][ T6437] sctp: [Deprecated]: syz.4.146 (pid 6437) Use of struct sctp_assoc_value in delayed_ack socket option. [ 89.127596][ T6437] Use struct sctp_sack_info instead [ 89.285839][ T6441] bond1: option resend_igmp: invalid value (32767) [ 89.300195][ T6441] bond1: option resend_igmp: allowed values 0 - 255 [ 89.310581][ T6441] bond1 (unregistering): Released all slaves [ 89.528301][ T6454] __nla_validate_parse: 9 callbacks suppressed [ 89.528319][ T6454] netlink: 104 bytes leftover after parsing attributes in process `syz.4.151'. [ 89.944964][ T6476] bond1: entered allmulticast mode [ 90.029166][ T6486] bridge1: entered promiscuous mode [ 90.040936][ T6486] bridge1: entered allmulticast mode [ 90.050190][ T6486] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 90.240180][ T6511] netlink: 206888 bytes leftover after parsing attributes in process `syz.2.167'. [ 90.284555][ T6511] netlink: 48 bytes leftover after parsing attributes in process `syz.2.167'. [ 90.604420][ T6525] veth1_macvtap: renamed from vlan1 [ 90.785599][ T6538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.175'. [ 90.794821][ T6538] netlink: 'syz.4.175': attribute type 6 has an invalid length. [ 90.803389][ T6538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.175'. [ 90.822450][ T6547] netlink: 104 bytes leftover after parsing attributes in process `syz.1.178'. [ 90.841298][ T6545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.179'. [ 90.892390][ T6543] syzkaller0: entered promiscuous mode [ 90.897900][ T6543] syzkaller0: entered allmulticast mode [ 90.911013][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.969045][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.074127][ T6561] trusted_key: syz.2.180 sent an empty control message without MSG_MORE. [ 91.141553][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.197979][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.539149][ T6589] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.760895][ T6608] netlink: 12 bytes leftover after parsing attributes in process `syz.0.191'. [ 91.799980][ T6608] netlink: 12 bytes leftover after parsing attributes in process `syz.0.191'. [ 91.954974][ T6613] netlink: 16 bytes leftover after parsing attributes in process `syz.4.193'. [ 92.007966][ T6619] netlink: 'syz.0.195': attribute type 1 has an invalid length. [ 92.237423][ T6632] IPVS: set_ctl: invalid protocol: 135 100.1.1.0:20000 [ 92.434236][ T6643] netlink: 'syz.2.202': attribute type 1 has an invalid length. [ 92.489425][ T6643] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 92.551516][ T6650] only policy match revision 0 supported [ 92.612268][ T6650] unable to load match [ 92.626358][ T6656] netlink: 'syz.3.205': attribute type 1 has an invalid length. [ 92.653095][ T6656] netlink: 'syz.3.205': attribute type 2 has an invalid length. [ 92.691558][ T6656] netlink: 'syz.3.205': attribute type 1 has an invalid length. [ 92.706613][ T6659] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.724110][ T6664] netlink: 'syz.3.205': attribute type 10 has an invalid length. [ 92.812683][ T6664] veth0_vlan: left promiscuous mode [ 92.863620][ T6664] veth0_vlan: entered promiscuous mode [ 92.891421][ T6664] team0: Device veth0_vlan failed to register rx_handler [ 94.427163][ T6751] 8021q: adding VLAN 0 to HW filter on device bond2 [ 94.677687][ T6776] netlink: 'syz.4.234': attribute type 62 has an invalid length. [ 94.741588][ T6779] __nla_validate_parse: 6 callbacks suppressed [ 94.741606][ T6779] netlink: 260 bytes leftover after parsing attributes in process `syz.1.235'. [ 94.803981][ T6779] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 94.946660][ T6793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.240'. [ 94.957617][ T6779] netlink: 28 bytes leftover after parsing attributes in process `syz.1.235'. [ 95.148526][ T6801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.241'. [ 95.204421][ T6806] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 95.244833][ T6801] bond2: entered promiscuous mode [ 95.249912][ T6801] bond2: entered allmulticast mode [ 95.256031][ T6801] 8021q: adding VLAN 0 to HW filter on device bond2 [ 95.439586][ T6823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.245'. [ 95.545219][ T6823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.245'. [ 95.577216][ T6829] syzkaller1: entered promiscuous mode [ 95.591970][ T6829] syzkaller1: entered allmulticast mode [ 95.597808][ T6831] netlink: 20 bytes leftover after parsing attributes in process `syz.1.248'. [ 96.075919][ T6861] netlink: 52 bytes leftover after parsing attributes in process `syz.1.254'. [ 96.118554][ T6861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.254'. [ 96.162288][ T6861] netlink: 52 bytes leftover after parsing attributes in process `syz.1.254'. [ 96.448732][ T6883] openvswitch: netlink: Flow actions attr not present in new flow. [ 96.553045][ T6885] team0: Port device team_slave_0 removed [ 96.895894][ T6900] netlink: 'syz.4.262': attribute type 1 has an invalid length. [ 96.899483][ T6909] ipt_REJECT: TCP_RESET invalid for non-tcp [ 96.912118][ T6907] syzkaller0: entered allmulticast mode [ 97.055705][ T6900] 8021q: adding VLAN 0 to HW filter on device bond3 [ 97.167772][ T6902] bond3: (slave geneve2): making interface the new active one [ 97.194185][ T6902] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 97.227220][ T6924] netlink: 'syz.0.269': attribute type 1 has an invalid length. [ 97.517147][ T6933] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 97.531928][ T6933] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 97.586925][ T6944] macvlan2: entered promiscuous mode [ 97.606536][ T6944] macvlan2: entered allmulticast mode [ 97.731996][ T6957] xt_NFQUEUE: number of queues (16) out of range (got 65549) [ 98.263820][ T6985] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.302061][ T6991] pimreg: entered allmulticast mode [ 98.315694][ T6993] bridge0: entered promiscuous mode [ 98.322147][ T6993] macsec1: entered promiscuous mode [ 98.327521][ T6993] macsec1: entered allmulticast mode [ 98.338069][ T6993] bridge0: entered allmulticast mode [ 98.359251][ T6993] bridge0: port 3(macsec1) entered blocking state [ 98.372193][ T6993] bridge0: port 3(macsec1) entered disabled state [ 98.389727][ T6993] bridge0: left allmulticast mode [ 98.408077][ T6993] bridge0: left promiscuous mode [ 98.763290][ T7019] netlink: 'syz.2.297': attribute type 1 has an invalid length. [ 98.870228][ T7024] netlink: 'syz.4.298': attribute type 21 has an invalid length. [ 98.897527][ T7019] 8021q: adding VLAN 0 to HW filter on device bond3 [ 98.912620][ T5880] IPVS: starting estimator thread 0... [ 98.926414][ T7027] bond3: (slave geneve2): making interface the new active one [ 98.936638][ T7027] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 99.000944][ T7031] IPVS: using max 39 ests per chain, 93600 per kthread [ 99.181370][ T7044] netlink: 'syz.2.301': attribute type 23 has an invalid length. [ 99.298207][ T7039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.322729][ T7039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.329456][ T7060] delete_channel: no stack [ 99.340407][ T7039] bond0 (unregistering): Released all slaves [ 99.790229][ T7084] netlink: 'syz.3.312': attribute type 6 has an invalid length. [ 99.807267][ T7086] __nla_validate_parse: 23 callbacks suppressed [ 99.807285][ T7086] netlink: 16 bytes leftover after parsing attributes in process `syz.0.314'. [ 99.831046][ T7088] netlink: 27 bytes leftover after parsing attributes in process `syz.4.311'. [ 100.460449][ T7115] bond4: (slave gretap0): Device is not bonding slave [ 100.467426][ T7115] bond4: option active_slave: invalid value (gretap0) [ 100.500029][ T7115] bond4 (unregistering): Released all slaves [ 100.708308][ T7138] netlink: 256 bytes leftover after parsing attributes in process `syz.0.327'. [ 100.923133][ T7143] pim6reg1: entered promiscuous mode [ 100.928465][ T7143] pim6reg1: entered allmulticast mode [ 101.006858][ T7156] netlink: 20 bytes leftover after parsing attributes in process `syz.3.331'. [ 101.343085][ T7166] bridge_slave_0 (unregistering): left allmulticast mode [ 101.371736][ T7166] bridge_slave_0 (unregistering): left promiscuous mode [ 101.388706][ T7166] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.457959][ T7175] netlink: 'syz.4.338': attribute type 25 has an invalid length. [ 101.883939][ T7207] syzkaller0: entered promiscuous mode [ 101.889476][ T7207] syzkaller0: entered allmulticast mode [ 102.617699][ T7247] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.625459][ T7247] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.702565][ T7247] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 102.836926][ T7262] netlink: 'syz.4.353': attribute type 21 has an invalid length. [ 102.849749][ T7271] netlink: 96 bytes leftover after parsing attributes in process `syz.2.354'. [ 102.862812][ T7262] netlink: 156 bytes leftover after parsing attributes in process `syz.4.353'. [ 102.909808][ T7271] 8021q: VLANs not supported on gre0 [ 102.927192][ T7269] netlink: 144 bytes leftover after parsing attributes in process `syz.0.355'. [ 102.972402][ T7269] netlink: 16 bytes leftover after parsing attributes in process `syz.0.355'. [ 103.003683][ T7277] netlink: 20 bytes leftover after parsing attributes in process `syz.1.356'. [ 103.326950][ T7291] syz.1.359: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 103.418169][ T7291] CPU: 0 UID: 0 PID: 7291 Comm: syz.1.359 Not tainted syzkaller #0 PREEMPT(full) [ 103.418196][ T7291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 103.418215][ T7291] Call Trace: [ 103.418223][ T7291] [ 103.418233][ T7291] dump_stack_lvl+0xe8/0x150 [ 103.418266][ T7291] warn_alloc+0x249/0x340 [ 103.418291][ T7291] ? stack_trace_save+0xa9/0x100 [ 103.418314][ T7291] ? __pfx_warn_alloc+0x10/0x10 [ 103.418344][ T7291] ? kasan_save_track+0x4f/0x80 [ 103.418366][ T7291] ? kasan_save_track+0x3e/0x80 [ 103.418385][ T7291] ? __kasan_kmalloc+0x93/0xb0 [ 103.418405][ T7291] ? __kmalloc_cache_noprof+0x31c/0x660 [ 103.418423][ T7291] ? xskq_create+0x56/0x170 [ 103.418446][ T7291] ? xsk_setsockopt+0x54c/0x990 [ 103.418466][ T7291] ? do_sock_setsockopt+0x17c/0x1b0 [ 103.418490][ T7291] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 103.418513][ T7291] ? do_syscall_64+0x14d/0xf80 [ 103.418545][ T7291] __vmalloc_node_range_noprof+0x132/0x1730 [ 103.418605][ T7291] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 103.418634][ T7291] ? __kasan_kmalloc+0x93/0xb0 [ 103.418661][ T7291] vmalloc_user_noprof+0xad/0xe0 [ 103.418683][ T7291] ? xskq_create+0xbf/0x170 [ 103.418706][ T7291] xskq_create+0xbf/0x170 [ 103.418732][ T7291] xsk_init_queue+0x8a/0xe0 [ 103.418758][ T7291] xsk_setsockopt+0x54c/0x990 [ 103.418784][ T7291] ? __pfx_xsk_setsockopt+0x10/0x10 [ 103.418808][ T7291] ? __pfx_aa_sk_perm+0x10/0x10 [ 103.418838][ T7291] ? aa_sock_opt_perm+0xff/0x1a0 [ 103.418860][ T7291] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 103.418881][ T7291] ? __pfx_xsk_setsockopt+0x10/0x10 [ 103.418905][ T7291] do_sock_setsockopt+0x17c/0x1b0 [ 103.418945][ T7291] __x64_sys_setsockopt+0x13d/0x1b0 [ 103.418977][ T7291] do_syscall_64+0x14d/0xf80 [ 103.419003][ T7291] ? trace_irq_disable+0x3b/0x150 [ 103.419020][ T7291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.419040][ T7291] ? clear_bhb_loop+0x40/0x90 [ 103.419064][ T7291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.419083][ T7291] RIP: 0033:0x7faf2c79c819 [ 103.419109][ T7291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.419126][ T7291] RSP: 002b:00007faf2d64b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 103.419148][ T7291] RAX: ffffffffffffffda RBX: 00007faf2ca15fa0 RCX: 00007faf2c79c819 [ 103.419162][ T7291] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 103.419174][ T7291] RBP: 00007faf2c832c91 R08: 0000000000000004 R09: 0000000000000000 [ 103.419186][ T7291] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.419199][ T7291] R13: 00007faf2ca16038 R14: 00007faf2ca15fa0 R15: 00007ffe8cb4f168 [ 103.419231][ T7291] [ 103.426299][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.362'. [ 103.442287][ T7291] Mem-Info: [ 103.774591][ T7291] active_anon:6195 inactive_anon:0 isolated_anon:0 [ 103.774591][ T7291] active_file:2626 inactive_file:39936 isolated_file:0 [ 103.774591][ T7291] unevictable:768 dirty:48 writeback:0 [ 103.774591][ T7291] slab_reclaimable:10836 slab_unreclaimable:95893 [ 103.774591][ T7291] mapped:29204 shmem:1365 pagetables:1188 [ 103.774591][ T7291] sec_pagetables:0 bounce:0 [ 103.774591][ T7291] kernel_misc_reclaimable:0 [ 103.774591][ T7291] free:1338145 free_pcp:8434 free_cma:0 [ 103.888897][ T7291] Node 0 active_anon:24480kB inactive_anon:0kB active_file:10516kB inactive_file:159548kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116724kB dirty:300kB writeback:0kB shmem:4004kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12444kB pagetables:4628kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 103.983933][ T7291] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 104.001134][ T7320] sctp: [Deprecated]: syz.0.368 (pid 7320) Use of int in max_burst socket option. [ 104.001134][ T7320] Use struct sctp_assoc_value instead [ 104.084210][ T7291] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 104.181349][ T7291] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 104.196473][ T7291] Node 0 DMA32 free:1396860kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24380kB inactive_anon:0kB active_file:10516kB inactive_file:159548kB unevictable:1536kB writepending:200kB zspages:0kB present:3129332kB managed:2552564kB mlocked:0kB bounce:0kB free_pcp:34636kB local_pcp:18944kB free_cma:0kB [ 104.267137][ T7291] lowmem_reserve[]: 0 0 0 0 0 [ 104.274751][ T7291] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:872kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 104.310016][ T7291] lowmem_reserve[]: 0 0 0 0 0 [ 104.316593][ T7291] Node 1 Normal free:3939224kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 104.378875][ T7330] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.394151][ T7291] lowmem_reserve[]: 0 0 0 0 0 [ 104.421727][ T7291] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 104.498944][ T7291] Node 0 DMA32: 2727*4kB (UM) 742*8kB (UM) 179*16kB (UME) 110*32kB (UME) 42*64kB (UM) 14*128kB (UM) 3*256kB (UM) 7*512kB (UME) 7*1024kB (UM) 7*2048kB (UM) 328*4096kB (M) = 1397052kB [ 104.573292][ T7291] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 104.612240][ T7291] Node 1 Normal: 0*4kB 3*8kB (UM) 8*16kB (UM) 8*32kB (UM) 6*64kB (UM) 3*128kB (UM) 3*256kB (UM) 4*512kB (UM) 1*1024kB (M) 1*2048kB (U) 960*4096kB (M) = 3939224kB [ 104.669255][ T7291] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 104.699839][ T7291] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 104.720058][ T7291] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 104.759361][ T7291] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 104.778953][ T7291] 48446 total pagecache pages [ 104.789072][ T7291] 0 pages in swap cache [ 104.799179][ T7291] Free swap = 124996kB [ 104.809295][ T7291] Total swap = 124996kB [ 104.816699][ T7291] 2097051 pages RAM [ 104.827745][ T7291] 0 pages HighMem/MovableOnly [ 104.860853][ T7291] 427077 pages reserved [ 104.867362][ T7291] 0 pages cma reserved [ 105.068039][ T7360] netlink: 'syz.3.379': attribute type 1 has an invalid length. [ 105.439074][ T7371] syzkaller0: entered promiscuous mode [ 105.893610][ C1] Illegal XDP return value 16128 on prog (id 54) dev team0, expect packet loss! [ 107.033142][ T7402] syzkaller1: entered promiscuous mode [ 107.049065][ T7402] syzkaller1: entered allmulticast mode [ 107.132073][ T7405] __nla_validate_parse: 1 callbacks suppressed [ 107.132091][ T7405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.388'. [ 107.254960][ T7334] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 107.665106][ T7425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.394'. [ 107.996589][ T7433] netlink: 'syz.2.394': attribute type 1 has an invalid length. [ 108.038320][ T7441] syzkaller0: entered promiscuous mode [ 108.047413][ T7441] 0: reclassify loop, rule prio 0, protocol 800 [ 108.254500][ T7453] netlink: 512 bytes leftover after parsing attributes in process `syz.0.401'. [ 108.329415][ T7461] netlink: 'syz.1.404': attribute type 1 has an invalid length. [ 108.402485][ T7465] netlink: 12 bytes leftover after parsing attributes in process `syz.4.406'. [ 108.435145][ T7465] netlink: 56 bytes leftover after parsing attributes in process `syz.4.406'. [ 108.474933][ T7465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.406'. [ 108.652381][ T7485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.410'. [ 108.983361][ T7507] netlink: 36 bytes leftover after parsing attributes in process `syz.1.416'. [ 109.059208][ T7511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.417'. [ 109.269833][ T7514] geneve3: entered promiscuous mode [ 109.288472][ T7214] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 35258 - 0 [ 109.328582][ T7214] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 35258 - 0 [ 109.349646][ T7214] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 35258 - 0 [ 109.397743][ T7214] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 35258 - 0 [ 109.434886][ T7530] IPVS: set_ctl: invalid protocol: 12 172.30.1.5:21 [ 109.816151][ T7541] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.426'. [ 110.265564][ T7565] netlink: 'syz.4.432': attribute type 1 has an invalid length. [ 110.407961][ T7565] 8021q: adding VLAN 0 to HW filter on device bond4 [ 110.463232][ T7568] bond4: entered allmulticast mode [ 110.543215][ T7572] bond4: (slave ip6gretap1): making interface the new active one [ 110.579472][ T7572] ip6gretap1: entered allmulticast mode [ 110.588086][ T7572] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 110.654692][ T7579] gtp0: entered promiscuous mode [ 110.686993][ T7579] gtp0: entered allmulticast mode [ 110.768848][ T7595] netlink: 'syz.4.439': attribute type 23 has an invalid length. [ 110.779144][ T7596] x_tables: duplicate underflow at hook 1 [ 112.443531][ T7702] syzkaller0: entered allmulticast mode [ 112.592571][ T7707] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20004 [ 112.621862][ T7712] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20004 [ 112.639074][ T7707] __nla_validate_parse: 3 callbacks suppressed [ 112.639091][ T7707] netlink: 72 bytes leftover after parsing attributes in process `syz.0.467'. [ 112.866992][ T7720] netlink: 40 bytes leftover after parsing attributes in process `syz.0.471'. [ 112.934760][ T7721] bond0: entered promiscuous mode [ 112.939834][ T7721] bond0: entered allmulticast mode [ 112.995916][ T7721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.263037][ T7738] netlink: 'syz.3.475': attribute type 1 has an invalid length. [ 113.387917][ T7740] tipc: Started in network mode [ 113.422857][ T7744] netlink: 28 bytes leftover after parsing attributes in process `syz.2.477'. [ 113.435687][ T7740] tipc: Node identity 0104000000000000cc, cluster identity 4711 [ 113.441487][ T7745] ieee802154 phy0 wpan0: encryption failed: -22 [ 113.464827][ T7743] bond1: (slave gretap1): making interface the new active one [ 113.482789][ T7743] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 113.504568][ T7738] macvlan2: entered promiscuous mode [ 113.522393][ T7738] macvlan2: entered allmulticast mode [ 113.529275][ T7738] bond1: entered promiscuous mode [ 113.550885][ T7738] gretap1: entered promiscuous mode [ 113.557102][ T7738] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 113.565364][ T7738] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 113.590092][ T7738] bond1: left promiscuous mode [ 113.597346][ T7738] gretap1: left promiscuous mode [ 113.605585][ T7743] netlink: 'syz.3.475': attribute type 3 has an invalid length. [ 113.615362][ T7743] netlink: 80 bytes leftover after parsing attributes in process `syz.3.475'. [ 113.650477][ T7744] veth1_macvtap: left promiscuous mode [ 113.657207][ T7744] macsec0: entered promiscuous mode [ 113.662953][ T7744] macsec0: entered allmulticast mode [ 113.829207][ T7758] netlink: 'syz.1.482': attribute type 1 has an invalid length. [ 114.118859][ T7796] ip6tnl1: entered promiscuous mode [ 115.769533][ T7827] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 116.029653][ T7841] openvswitch: netlink: Key 6 has unexpected len 121 expected 2 [ 116.171673][ T7844] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.179153][ T7844] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.277511][ T7844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.293586][ T7844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.470245][ T7209] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.480545][ T7209] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.490236][ T7209] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.506669][ T7209] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.517880][ T7209] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.527063][ T7209] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.537472][ T7209] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.546918][ T7209] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.782996][ T7773] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 116.805455][ T7800] nbd: couldn't find device at index -67108864 [ 116.972902][ T7863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.508'. [ 117.215205][ T7869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.511'. [ 117.245690][ T7869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.318918][ T7869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.373037][ T7879] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 117.375690][ T7888] netlink: 'syz.4.514': attribute type 9 has an invalid length. [ 117.785994][ T7910] lo: Caught tx_queue_len zero misconfig [ 117.793114][ T7910] netem: change failed [ 117.798059][ T7910] netlink: 'syz.2.523': attribute type 15 has an invalid length. [ 117.853544][ T7912] netlink: 24 bytes leftover after parsing attributes in process `syz.2.524'. [ 117.886275][ T7912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.524'. [ 117.978775][ T7914] xt_hashlimit: size too large, truncated to 1048576 [ 120.303651][ T7881] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 120.318318][ T7932] netlink: 'syz.4.529': attribute type 2 has an invalid length. [ 120.341356][ T7932] netlink: 'syz.4.529': attribute type 2 has an invalid length. [ 120.653590][ T7950] wg1 speed is unknown, defaulting to 1000 [ 120.685156][ T7950] wg1 speed is unknown, defaulting to 1000 [ 120.711810][ T7955] SET target dimension over the limit! [ 120.731950][ T7950] wg1 speed is unknown, defaulting to 1000 [ 120.754078][ T7952] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.784663][ T7950] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 120.824267][ T7958] netlink: 28 bytes leftover after parsing attributes in process `syz.4.538'. [ 120.847101][ T7958] netlink: 28 bytes leftover after parsing attributes in process `syz.4.538'. [ 120.853671][ T7950] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 120.863355][ T7958] gretap0: entered promiscuous mode [ 120.899889][ T7958] gretap0: left promiscuous mode [ 120.945845][ T7950] wg1 speed is unknown, defaulting to 1000 [ 120.963446][ T7950] wg1 speed is unknown, defaulting to 1000 [ 120.991771][ T7950] wg1 speed is unknown, defaulting to 1000 [ 121.033610][ T7950] wg1 speed is unknown, defaulting to 1000 [ 121.062546][ T7950] wg1 speed is unknown, defaulting to 1000 [ 121.353968][ T7944] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 121.400023][ T7987] netlink: 'syz.4.548': attribute type 11 has an invalid length. [ 121.464742][ T7987] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.548'. [ 121.899810][ T8021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.558'. [ 121.929516][ T8022] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.029297][ T8030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.561'. [ 122.104164][ T8025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.559'. [ 122.298520][ T8036] geneve2: entered promiscuous mode [ 122.326283][ T1168] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 34446 - 0 [ 122.350918][ T1168] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 34446 - 0 [ 122.380487][ T1168] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 34446 - 0 [ 122.402120][ T1168] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 34446 - 0 [ 122.560002][ T8054] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 122.591368][ T8054] netlink: 'syz.4.566': attribute type 24 has an invalid length. [ 122.677236][ T8054] vlan2: entered allmulticast mode [ 122.683870][ T8054] bond0: entered allmulticast mode [ 122.689134][ T8054] bond_slave_0: entered allmulticast mode [ 122.697848][ T8054] bond_slave_1: entered allmulticast mode [ 122.785734][ T8066] pimreg3: entered allmulticast mode [ 122.822500][ T8066] netlink: 'syz.2.568': attribute type 16 has an invalid length. [ 122.866341][ T8066] netlink: 'syz.2.568': attribute type 3 has an invalid length. [ 122.919706][ T8066] netlink: 132 bytes leftover after parsing attributes in process `syz.2.568'. [ 123.886147][ T8125] netlink: 'syz.2.580': attribute type 21 has an invalid length. [ 123.914841][ T8125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.580'. [ 124.524885][ T8160] netlink: 28 bytes leftover after parsing attributes in process `syz.2.587'. [ 125.056572][ T8204] netlink: 16 bytes leftover after parsing attributes in process `syz.4.596'. [ 125.293970][ T8212] sch_tbf: burst 528 is lower than device syzkaller0 mtu (1500) ! [ 125.324805][ T8214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.599'. [ 125.341362][ T8214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.599'. [ 125.399735][ T8214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.599'. [ 125.409301][ T8220] netlink: 16 bytes leftover after parsing attributes in process `syz.3.602'. [ 125.448904][ T8214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.599'. [ 125.460106][ T1114] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.469888][ T1114] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.488525][ T1114] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.514243][ T1114] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.799315][ T8244] netlink: 12 bytes leftover after parsing attributes in process `syz.1.606'. [ 126.016576][ T8247] syzkaller0: entered promiscuous mode [ 126.043494][ T8247] syzkaller0: entered allmulticast mode [ 126.052472][ T8262] netlink: 'syz.1.610': attribute type 64 has an invalid length. [ 127.106968][ T8296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.574016][ T8278] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 127.918734][ T8305] bond2: (slave gretap0): Device is not bonding slave [ 127.935744][ T8305] bond2: option active_slave: invalid value (gretap0) [ 127.955658][ T8305] bond2 (unregistering): Released all slaves [ 127.972383][ T8314] openvswitch: netlink: Missing valid actions attribute. [ 127.985150][ T8314] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.130292][ T8324] __nla_validate_parse: 1 callbacks suppressed [ 128.130310][ T8324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.626'. [ 128.177216][ T8316] kthread_run failed with err -4 [ 128.197940][ T8324] netlink: 24 bytes leftover after parsing attributes in process `syz.1.626'. [ 128.438366][ T8338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.630'. [ 128.827069][ T8364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.637'. [ 128.949244][ T8368] IPv6: NLM_F_CREATE should be specified when creating new route [ 129.190922][ T8377] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.286052][ T8381] x_tables: unsorted entry at hook 1 [ 129.734181][ T8407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.653'. [ 129.754269][ T8407] netlink: 'syz.4.653': attribute type 1 has an invalid length. [ 129.773858][ T8407] netlink: 'syz.4.653': attribute type 2 has an invalid length. [ 129.799769][ T8407] netlink: 16 bytes leftover after parsing attributes in process `syz.4.653'. [ 129.868518][ T8414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.654'. [ 129.896143][ T8417] IPv6: NLM_F_CREATE should be specified when creating new route [ 129.930651][ T8422] sctp: [Deprecated]: syz.0.656 (pid 8422) Use of int in max_burst socket option. [ 129.930651][ T8422] Use struct sctp_assoc_value instead [ 129.943525][ T8417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.655'. [ 130.074204][ T8425] netlink: 24 bytes leftover after parsing attributes in process `syz.2.655'. [ 130.615533][ T8467] syzkaller0: entered promiscuous mode [ 130.621182][ T8467] syzkaller0: entered allmulticast mode [ 131.053187][ T8498] IPv6: NLM_F_CREATE should be specified when creating new route [ 131.065565][ T8498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.679'. [ 131.478846][ T8521] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 131.818066][ T8547] x_tables: duplicate underflow at hook 2 [ 132.781502][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.787838][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.822741][ T8608] netlink: 'syz.4.706': attribute type 51 has an invalid length. [ 132.859428][ T8608] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.893241][ T8608] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.245651][ T8635] __nla_validate_parse: 4 callbacks suppressed [ 133.245670][ T8635] netlink: 28 bytes leftover after parsing attributes in process `syz.1.715'. [ 133.261983][ T8631] netlink: 20 bytes leftover after parsing attributes in process `syz.3.713'. [ 133.605396][ T8659] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 133.682034][ T8662] syzkaller0: entered promiscuous mode [ 133.686161][ T8659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.690300][ T8663] netlink: 20 bytes leftover after parsing attributes in process `syz.4.723'. [ 133.696554][ T8659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.709990][ T8667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.724'. [ 133.713681][ T8662] syzkaller0: entered allmulticast mode [ 133.723880][ T8667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.724'. [ 133.732714][ T8659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.770081][ T8659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.773261][ T8668] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 133.778925][ T8659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.795082][ T8668] bond5: (slave lo): Enslaving as an active interface with an up link [ 133.807309][ T8668] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 133.826288][ T8659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.834736][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.848512][ T8667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.724'. [ 133.879439][ T8667] netlink: 67 bytes leftover after parsing attributes in process `syz.1.724'. [ 133.891067][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.134203][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.196790][ T8687] tipc: Started in network mode [ 134.211323][ T8687] tipc: Node identity ba1c3755c171, cluster identity 4711 [ 134.228970][ T8687] tipc: Enabled bearer , priority 0 [ 134.249652][ T8687] syzkaller0: entered promiscuous mode [ 134.266240][ T8687] syzkaller0: entered allmulticast mode [ 134.299715][ T8687] tipc: Resetting bearer [ 134.340362][ T8686] tipc: Resetting bearer [ 134.358007][ T8686] tipc: Disabling bearer [ 134.386007][ T8697] vxcan1: entered promiscuous mode [ 134.671062][ T8706] nbd0: detected capacity change from 0 to 127 [ 134.806822][ T8719] netlink: 'syz.4.741': attribute type 10 has an invalid length. [ 134.816887][ T8719] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.741'. [ 134.827424][ T8719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.741'. [ 134.836299][ T8719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.741'. [ 135.090505][ T8730] wg1 speed is unknown, defaulting to 1000 [ 135.332089][ T8731] nbd1: detected capacity change from 0 to 63 [ 135.358812][ T51] block nbd0: Receive control failed (result -104) [ 135.369802][ T5827] block nbd1: Receive control failed (result -32) [ 135.376748][ T5823] block nbd1: Receive control failed (result -32) [ 135.386588][ T5828] block nbd1: Dead connection, failed to find a fallback [ 135.395046][ T5828] block nbd1: shutting down sockets [ 135.401897][ T5828] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 135.414249][ T5828] Buffer I/O error on dev nbd1, logical block 0, async page read [ 135.423035][ T5828] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 135.434382][ T5828] Buffer I/O error on dev nbd1, logical block 1, async page read [ 135.442578][ T5828] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 135.453866][ T5828] Buffer I/O error on dev nbd1, logical block 2, async page read [ 135.462446][ T5828] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 135.462699][ T5828] Buffer I/O error on dev nbd1, logical block 3, async page read [ 135.462763][ T5828] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 135.462785][ T5828] Buffer I/O error on dev nbd1, logical block 0, async page read [ 135.462820][ T5828] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 135.462842][ T5828] Buffer I/O error on dev nbd1, logical block 1, async page read [ 135.462876][ T5828] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 135.462897][ T5828] Buffer I/O error on dev nbd1, logical block 2, async page read [ 135.462930][ T5828] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 135.462951][ T5828] Buffer I/O error on dev nbd1, logical block 3, async page read [ 135.462992][ T5828] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 135.463012][ T5828] Buffer I/O error on dev nbd1, logical block 0, async page read [ 135.463046][ T5828] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 135.463067][ T5828] Buffer I/O error on dev nbd1, logical block 1, async page read [ 135.463629][ T5828] ldm_validate_partition_table(): Disk read failed. [ 135.629388][ T8753] netlink: 'syz.1.752': attribute type 25 has an invalid length. [ 135.769837][ T5828] Dev nbd1: unable to read RDB block 0 [ 135.808120][ T5828] nbd1: unable to read partition table [ 135.825819][ T8769] bond0: entered promiscuous mode [ 135.831442][ T8769] bond_slave_0: entered promiscuous mode [ 135.840561][ T8769] bond_slave_1: entered promiscuous mode [ 135.844618][ T5828] ldm_validate_partition_table(): Disk read failed. [ 135.908167][ T5828] Dev nbd1: unable to read RDB block 0 [ 135.929614][ T5828] nbd1: unable to read partition table [ 135.986253][ T8776] sctp: [Deprecated]: syz.0.759 (pid 8776) Use of int in max_burst socket option deprecated. [ 135.986253][ T8776] Use struct sctp_assoc_value instead [ 136.036229][ T8778] sctp: [Deprecated]: syz.0.759 (pid 8778) Use of int in max_burst socket option deprecated. [ 136.036229][ T8778] Use struct sctp_assoc_value instead [ 136.128834][ T8781] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 136.202461][ T8785] netlink: 'syz.1.763': attribute type 1 has an invalid length. [ 136.278323][ T8799] sctp: [Deprecated]: syz.4.767 (pid 8799) Use of struct sctp_assoc_value in delayed_ack socket option. [ 136.278323][ T8799] Use struct sctp_sack_info instead [ 136.323346][ T8803] netlink: 'syz.3.768': attribute type 1 has an invalid length. [ 136.349432][ T8785] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.356746][ T8804] netlink: 'syz.3.768': attribute type 1 has an invalid length. [ 136.444640][ T8800] bond2: (slave veth3): Enslaving as an active interface with a down link [ 136.534166][ T8818] netlink: 'syz.3.770': attribute type 1 has an invalid length. [ 136.536722][ T8806] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 136.556111][ T8806] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 136.576027][ T8818] netlink: 'syz.3.770': attribute type 1 has an invalid length. [ 136.618872][ T8799] wg1 speed is unknown, defaulting to 1000 [ 136.848153][ T8836] netlink: 'syz.2.774': attribute type 9 has an invalid length. [ 136.922674][ T8836] netlink: 'syz.2.774': attribute type 9 has an invalid length. [ 136.923997][ T1168] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.950368][ T1168] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.995318][ T8846] xt_l2tp: v2 doesn't support IP mode [ 137.001195][ T1168] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.011669][ T8840] tipc: Enabled bearer , priority 10 [ 137.123926][ T1168] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.218473][ T8857] vlan2: entered promiscuous mode [ 137.242544][ T8857] geneve1: entered promiscuous mode [ 137.265247][ T8857] vlan2: entered allmulticast mode [ 137.300626][ T8857] geneve1: entered allmulticast mode [ 137.552167][ T8867] syzkaller1: entered promiscuous mode [ 137.566757][ T8867] syzkaller1: entered allmulticast mode [ 138.968823][ T8903] ip6gretap0 (unregistering): left allmulticast mode [ 139.037045][ T980] tipc: Node number set to 2070755157 [ 139.172517][ T8918] __nla_validate_parse: 73 callbacks suppressed [ 139.172535][ T8918] netlink: 9 bytes leftover after parsing attributes in process `syz.0.795'. [ 139.188993][ T8919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.796'. [ 139.369080][ T8934] netlink: 72 bytes leftover after parsing attributes in process `syz.1.799'. [ 139.372711][ T8936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.800'. [ 139.391670][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.798'. [ 139.416270][ T8934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.799'. [ 139.492837][ T8942] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.800'. [ 139.521267][ T8932] hsr_slave_1 (unregistering): left promiscuous mode [ 139.547033][ T8934] veth0_macvtap: left promiscuous mode [ 139.593808][ T8941] net_ratelimit: 10 callbacks suppressed [ 139.593831][ T8941] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 139.755225][ T8953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.805'. [ 139.774050][ T8953] macvlan3: entered allmulticast mode [ 139.790539][ T8953] hsr0: entered allmulticast mode [ 139.809482][ T8953] hsr_slave_0: entered allmulticast mode [ 139.831211][ T8953] hsr_slave_1: entered allmulticast mode [ 139.834042][ T8963] netlink: 24 bytes leftover after parsing attributes in process `syz.4.810'. [ 139.877234][ T8965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.808'. [ 139.894621][ T8965] netlink: 'syz.3.808': attribute type 1 has an invalid length. [ 140.035575][ T8969] vcan1: entered promiscuous mode [ 140.078585][ T8969] vcan1: entered allmulticast mode [ 140.088385][ T8971] netlink: 'syz.0.811': attribute type 3 has an invalid length. [ 140.519450][ T9006] bridge1: entered promiscuous mode [ 140.529318][ T9006] bridge1: entered allmulticast mode [ 141.347549][ T9066] openvswitch: netlink: Missing key (keys=40, expected=100) [ 141.656996][ T9090] pimreg: entered allmulticast mode [ 141.868754][ T9094] bond3: entered promiscuous mode [ 142.067787][ T9117] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 142.120483][ T9121] FAULT_INJECTION: forcing a failure. [ 142.120483][ T9121] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 142.135421][ T9121] CPU: 0 UID: 0 PID: 9121 Comm: syz.0.848 Not tainted syzkaller #0 PREEMPT(full) [ 142.135442][ T9121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 142.135450][ T9121] Call Trace: [ 142.135457][ T9121] [ 142.135462][ T9121] dump_stack_lvl+0xe8/0x150 [ 142.135488][ T9121] should_fail_ex+0x412/0x560 [ 142.135514][ T9121] _copy_from_user+0x2d/0xb0 [ 142.135534][ T9121] ___sys_recvmsg+0x175/0x590 [ 142.135563][ T9121] ? __pfx____sys_recvmsg+0x10/0x10 [ 142.135605][ T9121] ? __fget_files+0x3a0/0x420 [ 142.135629][ T9121] do_recvmmsg+0x334/0x800 [ 142.135658][ T9121] ? __pfx_do_recvmmsg+0x10/0x10 [ 142.135690][ T9121] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 142.135725][ T9121] __x64_sys_recvmmsg+0x198/0x250 [ 142.135750][ T9121] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 142.135781][ T9121] do_syscall_64+0x14d/0xf80 [ 142.135803][ T9121] ? trace_irq_disable+0x3b/0x150 [ 142.135818][ T9121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.135836][ T9121] ? clear_bhb_loop+0x40/0x90 [ 142.135857][ T9121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.135874][ T9121] RIP: 0033:0x7f9183d9c819 [ 142.135898][ T9121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.135912][ T9121] RSP: 002b:00007f9184c51028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 142.135938][ T9121] RAX: ffffffffffffffda RBX: 00007f9184016090 RCX: 00007f9183d9c819 [ 142.135950][ T9121] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000007 [ 142.135961][ T9121] RBP: 00007f9184c51090 R08: 0000000000000000 R09: 0000000000000000 [ 142.135971][ T9121] R10: 0000000000010022 R11: 0000000000000246 R12: 0000000000000001 [ 142.135982][ T9121] R13: 00007f9184016128 R14: 00007f9184016090 R15: 00007ffeeae559f8 [ 142.136011][ T9121] [ 142.412484][ T9128] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 142.425679][ T9127] openvswitch: netlink: IPv6 tunnel dst address is zero [ 142.458105][ T9117] netlink: 'syz.2.850': attribute type 1 has an invalid length. [ 142.558844][ T9122] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.566046][ T9122] bridge0: port 1(bridge_slave_0) entered listening state [ 142.782240][ T9153] tipc: Enabling of bearer rejected, failed to enable media [ 143.016100][ T9171] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 143.280184][ T9180] FAULT_INJECTION: forcing a failure. [ 143.280184][ T9180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.298597][ T9180] CPU: 1 UID: 0 PID: 9180 Comm: syz.0.869 Not tainted syzkaller #0 PREEMPT(full) [ 143.298622][ T9180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 143.298632][ T9180] Call Trace: [ 143.298639][ T9180] [ 143.298646][ T9180] dump_stack_lvl+0xe8/0x150 [ 143.298683][ T9180] should_fail_ex+0x412/0x560 [ 143.298714][ T9180] _copy_to_iter+0x404/0x17d0 [ 143.298736][ T9180] ? do_raw_spin_lock+0x12b/0x2f0 [ 143.298762][ T9180] ? __pfx__copy_to_iter+0x10/0x10 [ 143.298780][ T9180] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 143.298802][ T9180] ? lockdep_hardirqs_on+0x7a/0x110 [ 143.298825][ T9180] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 143.298846][ T9180] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 143.298876][ T9180] __skb_datagram_iter+0xf8/0x980 [ 143.298901][ T9180] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 143.298932][ T9180] skb_copy_datagram_iter+0xb5/0x270 [ 143.298959][ T9180] netlink_recvmsg+0x2c3/0xa50 [ 143.298979][ T9180] ? __lock_acquire+0x6b5/0x2cf0 [ 143.299004][ T9180] ? __pfx_netlink_recvmsg+0x10/0x10 [ 143.299029][ T9180] ? aa_sock_msg_perm+0xf1/0x1b0 [ 143.299056][ T9180] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 143.299074][ T9180] ? security_socket_recvmsg+0x7e/0x2c0 [ 143.299093][ T9180] ? __pfx_netlink_recvmsg+0x10/0x10 [ 143.299111][ T9180] sock_recvmsg+0x172/0x1b0 [ 143.299133][ T9180] ____sys_recvmsg+0x1e6/0x4a0 [ 143.299163][ T9180] ? __pfx_____sys_recvmsg+0x10/0x10 [ 143.299199][ T9180] ? import_iovec+0x73/0xa0 [ 143.299222][ T9180] ___sys_recvmsg+0x215/0x590 [ 143.299250][ T9180] ? __pfx____sys_recvmsg+0x10/0x10 [ 143.299295][ T9180] ? __fget_files+0x3a0/0x420 [ 143.299321][ T9180] do_recvmmsg+0x334/0x800 [ 143.299353][ T9180] ? __pfx_do_recvmmsg+0x10/0x10 [ 143.299387][ T9180] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 143.299428][ T9180] __x64_sys_recvmmsg+0x198/0x250 [ 143.299455][ T9180] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 143.299488][ T9180] do_syscall_64+0x14d/0xf80 [ 143.299509][ T9180] ? trace_irq_disable+0x3b/0x150 [ 143.299523][ T9180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.299540][ T9180] ? clear_bhb_loop+0x40/0x90 [ 143.299559][ T9180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.299575][ T9180] RIP: 0033:0x7f9183d9c819 [ 143.299591][ T9180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.299604][ T9180] RSP: 002b:00007f9184c72028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 143.299624][ T9180] RAX: ffffffffffffffda RBX: 00007f9184015fa0 RCX: 00007f9183d9c819 [ 143.299637][ T9180] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000007 [ 143.299648][ T9180] RBP: 00007f9184c72090 R08: 0000000000000000 R09: 0000000000000000 [ 143.299659][ T9180] R10: 0000000000010022 R11: 0000000000000246 R12: 0000000000000001 [ 143.299669][ T9180] R13: 00007f9184016038 R14: 00007f9184015fa0 R15: 00007ffeeae559f8 [ 143.299705][ T9180] [ 143.628318][ T9192] netlink: 'syz.1.871': attribute type 1 has an invalid length. [ 143.750338][ T9192] 8021q: adding VLAN 0 to HW filter on device bond4 [ 143.819623][ T9195] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 144.034059][ T9211] IPVS: Error connecting to the multicast addr [ 144.466438][ T9248] __nla_validate_parse: 56 callbacks suppressed [ 144.466458][ T9248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.884'. [ 144.697911][ T9268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.888'. [ 147.443939][ T9245] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 164.776230][ T2237] block nbd0: Possible stuck request ffff888026ed0000: control (read@0,1024B). Runtime 30 seconds [ 164.788151][ T2237] block nbd0: Possible stuck request ffff888026ed0200: control (read@1024,1024B). Runtime 30 seconds [ 164.800387][ T2237] block nbd0: Possible stuck request ffff888026ed0400: control (read@2048,1024B). Runtime 30 seconds [ 164.811506][ T2237] block nbd0: Possible stuck request ffff888026ed0600: control (read@3072,1024B). Runtime 30 seconds [ 173.091712][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 188.135625][ T9285] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 188.198627][ T9286] syzkaller0: entered promiscuous mode [ 188.207805][ T9286] syzkaller0: entered allmulticast mode [ 188.306742][ T9304] IPv6: sit1: Disabled Multicast RS [ 188.480312][ T9312] ip6tnl0: Caught tx_queue_len zero misconfig [ 188.571033][ T9324] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 188.604079][ T9327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.904'. [ 188.734034][ T9327] hsr_slave_0 (unregistering): left promiscuous mode [ 188.783142][ T9332] netlink: 28 bytes leftover after parsing attributes in process `syz.0.905'. [ 188.821034][ T9332] netlink: 28 bytes leftover after parsing attributes in process `syz.0.905'. [ 188.880043][ T9342] netlink: 16 bytes leftover after parsing attributes in process `syz.3.908'. [ 188.937190][ T9345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.909'. [ 188.937836][ T9346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.909'. [ 188.974653][ T9345] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 189.018947][ T9356] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 189.021085][ T9346] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 189.050604][ T9358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.913'. [ 189.102174][ T9356] netlink: 'syz.4.912': attribute type 2 has an invalid length. [ 189.124342][ T9356] netlink: 244 bytes leftover after parsing attributes in process `syz.4.912'. [ 189.175934][ T9365] Cannot find add_set index 0 as target [ 189.445508][ T9381] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.921'. [ 189.485424][ T9381] netlink: Conntrack attr has 3 unknown bytes [ 189.587919][ T9387] netlink: 'syz.4.925': attribute type 12 has an invalid length. [ 189.605132][ T9387] netlink: 132 bytes leftover after parsing attributes in process `syz.4.925'. [ 189.824145][ T9398] IPVS: length: 8 != 1152 [ 189.836698][ T9398] syzkaller0: entered promiscuous mode [ 189.850763][ T9398] syzkaller0: entered allmulticast mode [ 189.978614][ T9413] geneve4: entered promiscuous mode [ 190.000746][ T9413] geneve4: entered allmulticast mode [ 190.009955][ T1168] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0 [ 190.013973][ T9413] netlink: 'syz.1.932': attribute type 1 has an invalid length. [ 190.033986][ T1168] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 190.067527][ T1168] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 190.098297][ T1168] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0 [ 190.671452][ T9445] ipt_REJECT: ECHOREPLY no longer supported. [ 190.994138][ T9475] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.534378][ T9512] netlink: 'syz.0.959': attribute type 1 has an invalid length. [ 191.542936][ T9470] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 191.593958][ T9512] bond2: entered promiscuous mode [ 191.599050][ T9512] bond2: entered allmulticast mode [ 191.605221][ T9512] 8021q: adding VLAN 0 to HW filter on device bond2 [ 191.661731][ T9517] 8021q: VLANs not supported on sit0 [ 191.688991][ T9512] macvlan4: entered promiscuous mode [ 191.700090][ T9512] macvlan4: entered allmulticast mode [ 191.708395][ T9512] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 191.817423][ T9525] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.874166][ T9525] bridge_slave_0 (unregistering): left allmulticast mode [ 191.897644][ T9525] bridge_slave_0 (unregistering): left promiscuous mode [ 191.908246][ T9525] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.003958][ T9586] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.146945][ T9593] openvswitch: netlink: Flow key attr not present in new flow. [ 193.378679][ T9605] syzkaller0: entered promiscuous mode [ 193.406244][ T9605] syzkaller0: entered allmulticast mode [ 193.769473][ T9624] gre1: entered promiscuous mode [ 193.774639][ T9624] gre1: entered allmulticast mode [ 193.969700][ T9637] netlink: 'syz.0.996': attribute type 1 has an invalid length. [ 193.977675][ T9637] __nla_validate_parse: 12 callbacks suppressed [ 193.977693][ T9637] netlink: 136 bytes leftover after parsing attributes in process `syz.0.996'. [ 193.994222][ T9637] netlink: 'syz.0.996': attribute type 1 has an invalid length. [ 194.002132][ T9637] netlink: 12 bytes leftover after parsing attributes in process `syz.0.996'. [ 194.016440][ T9640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.997'. [ 194.042358][ T9640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.997'. [ 194.097937][ T35] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.111277][ T35] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.125583][ T9645] netlink: 40 bytes leftover after parsing attributes in process `syz.0.999'. [ 194.126472][ T35] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.147296][ T35] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.218316][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.218459][ T9649] lo: entered allmulticast mode [ 194.225359][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.244126][ T9649] lo: left allmulticast mode [ 194.487806][ T9658] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 194.538083][ T9660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1001'. [ 194.562043][ T9664] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1004'. [ 194.605934][ T9664] bridge3: port 1(veth5) entered blocking state [ 194.619103][ T9664] bridge3: port 1(veth5) entered disabled state [ 194.633802][ T9664] veth5: entered allmulticast mode [ 194.648321][ T9664] veth5: entered promiscuous mode [ 194.738434][ T9676] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1006'. [ 194.753694][ T9666] bridge3: port 2(veth7) entered blocking state [ 194.760602][ T9666] bridge3: port 2(veth7) entered disabled state [ 194.768476][ T9666] veth7: entered allmulticast mode [ 194.776733][ T9666] veth7: entered promiscuous mode [ 194.853597][ T5826] Bluetooth: hci4: command 0x0405 tx timeout [ 194.870024][ T2237] block nbd0: Possible stuck request ffff888026ed0000: control (read@0,1024B). Runtime 60 seconds [ 194.881289][ T2237] block nbd0: Possible stuck request ffff888026ed0200: control (read@1024,1024B). Runtime 60 seconds [ 194.893585][ T2237] block nbd0: Possible stuck request ffff888026ed0400: control (read@2048,1024B). Runtime 60 seconds [ 194.905646][ T2237] block nbd0: Possible stuck request ffff888026ed0600: control (read@3072,1024B). Runtime 60 seconds [ 195.023105][ T9688] netlink: 'syz.1.1013': attribute type 10 has an invalid length. [ 195.034001][ T9687] netlink: 'syz.1.1013': attribute type 10 has an invalid length. [ 195.090102][ T9694] netlink: 'syz.2.1012': attribute type 2 has an invalid length. [ 195.098668][ T9694] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1012'. [ 195.112588][ T9688] batman_adv: batadv0: Adding interface: netdevsim0 [ 195.130140][ T9688] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.173376][ T9688] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 196.006156][ T9751] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 196.141449][ T9773] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1030'. [ 196.292687][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 196.298765][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 196.307366][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 196.783743][ T9818] netlink: 'syz.4.1043': attribute type 4 has an invalid length. [ 196.812817][ T9821] vlan2: entered promiscuous mode [ 196.824631][ T9821] geneve1: entered promiscuous mode [ 196.835578][ T9824] netlink: 'syz.4.1043': attribute type 4 has an invalid length. [ 196.857028][ T9821] vlan2: entered allmulticast mode [ 196.872074][ T9821] geneve1: entered allmulticast mode [ 197.752284][ T9870] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.975693][ T9878] pim6reg: entered allmulticast mode [ 198.236422][ T9898] netlink: zone id is out of range [ 198.258549][ T9898] netlink: zone id is out of range [ 198.277702][ T9898] netlink: zone id is out of range [ 198.301514][ T9898] netlink: zone id is out of range [ 198.317515][ T9898] netlink: zone id is out of range [ 198.324778][ T9898] netlink: zone id is out of range [ 198.330153][ T9898] netlink: zone id is out of range [ 198.336465][ T9898] netlink: zone id is out of range [ 198.366206][ T9898] netlink: zone id is out of range [ 198.410903][ T9898] netlink: zone id is out of range [ 198.579725][ T9912] bond0: entered promiscuous mode [ 198.606378][ T9912] bond_slave_0: entered promiscuous mode [ 198.631937][ T9912] bond_slave_1: entered promiscuous mode [ 198.642048][ T9912] gretap0: entered promiscuous mode [ 198.678194][ T9912] hsr0: entered promiscuous mode [ 198.995805][ T9929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1070'. [ 199.106318][ T9931] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 199.209971][ T9945] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1075'. [ 199.401846][ T9953] netlink: 'syz.2.1076': attribute type 2 has an invalid length. [ 199.456347][ T9956] netlink: 'syz.2.1076': attribute type 2 has an invalid length. [ 199.516352][ T9961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1078'. [ 199.547023][ T9961] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1078'. [ 199.574920][ T9961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1078'. [ 199.608198][ T9961] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1078'. [ 199.727276][ T9971] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1082'. [ 199.737289][ T9971] netlink: 'syz.1.1082': attribute type 7 has an invalid length. [ 199.763269][ T9971] netlink: 'syz.1.1082': attribute type 8 has an invalid length. [ 199.787061][ T9971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1082'. [ 199.960603][ T9989] xt_CT: You must specify a L4 protocol and not use inversions on it [ 200.037820][ T9991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1089'. [ 200.048503][ T9991] netlink: 212356 bytes leftover after parsing attributes in process `syz.3.1089'. [ 200.301622][T10010] syzkaller0: entered promiscuous mode [ 200.308599][T10010] syzkaller0: entered allmulticast mode [ 200.319445][T10014] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_vlan, syncid = 1, id = 0 [ 200.332479][T10012] netlink: 'syz.4.1094': attribute type 51 has an invalid length. [ 200.408259][T10016] xt_cluster: node mask cannot exceed total number of nodes [ 200.459170][T10016] xt_l2tp: invalid flags combination: 8 [ 200.794236][T10030] syzkaller0: entered promiscuous mode [ 200.800021][T10030] syzkaller0: entered allmulticast mode [ 201.502720][T10065] sctp: [Deprecated]: syz.0.1107 (pid 10065) Use of int in maxseg socket option. [ 201.502720][T10065] Use struct sctp_assoc_value instead [ 201.547872][T10034] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 203.170741][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.177988][ C0] bridge0: topology change detected, propagating [ 203.505971][T10093] netlink: 'syz.0.1116': attribute type 10 has an invalid length. [ 203.543113][T10105] netlink: 'syz.4.1120': attribute type 2 has an invalid length. [ 203.573812][T10093] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 203.585841][T10105] xt_hashlimit: size too large, truncated to 1048576 [ 203.613137][T10110] netlink: 'syz.1.1121': attribute type 15 has an invalid length. [ 203.682344][T10110] netlink: 'syz.1.1121': attribute type 15 has an invalid length. [ 203.682499][ T1095] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 203.715730][ T1095] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 203.726540][ T1095] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 203.756377][ T1095] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 203.893115][T10127] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.900386][T10127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.939977][T10127] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.949910][T10130] 8021q: VLANs not supported on gre0 [ 204.183950][T10142] net_ratelimit: 1873 callbacks suppressed [ 204.184304][T10142] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 204.719772][T10172] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.912449][T10176] xt_CT: You must specify a L4 protocol and not use inversions on it [ 205.128873][T10179] xt_hashlimit: size too large, truncated to 1048576 [ 205.159881][T10182] __nla_validate_parse: 18 callbacks suppressed [ 205.159898][T10182] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1142'. [ 205.449418][T10189] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1145'. [ 205.491404][T10189] syzkaller0: entered promiscuous mode [ 205.517307][T10189] syzkaller0: entered allmulticast mode [ 205.612558][T10203] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1150'. [ 205.633774][T10201] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.1149'. [ 205.633931][T10203] netlink: 320 bytes leftover after parsing attributes in process `syz.4.1150'. [ 205.839241][T10217] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1154'. [ 205.856296][T10217] xfrm1: entered promiscuous mode [ 205.862406][T10217] xfrm1: entered allmulticast mode [ 205.869777][T10217] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1154'. [ 205.885616][T10218] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.1153'. [ 205.991051][T10207] nbd2: detected capacity change from 0 to 63 [ 205.999075][T10214] openvswitch: netlink: Flow actions attr not present in new flow. [ 206.023213][ T51] block nbd2: Receive control failed (result -32) [ 206.038026][ T5827] block nbd2: Receive control failed (result -32) [ 206.057373][ T5828] block nbd2: Dead connection, failed to find a fallback [ 206.117322][ T5828] block nbd2: shutting down sockets [ 206.150858][ T5828] blk_print_req_error: 138 callbacks suppressed [ 206.150876][ T5828] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 206.234505][ T5828] buffer_io_error: 138 callbacks suppressed [ 206.234521][ T5828] Buffer I/O error on dev nbd2, logical block 0, async page read [ 206.270183][ T5828] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 206.285960][T10246] M€: renamed from bond0 (while UP) [ 206.293047][ T5828] Buffer I/O error on dev nbd2, logical block 1, async page read [ 206.302631][ T5828] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 206.312379][ T5828] Buffer I/O error on dev nbd2, logical block 2, async page read [ 206.320273][ T5828] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 206.326645][T10244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1163'. [ 206.339022][ T5828] Buffer I/O error on dev nbd2, logical block 3, async page read [ 206.339114][ T5828] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 206.339139][ T5828] Buffer I/O error on dev nbd2, logical block 0, async page read [ 206.339176][ T5828] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 206.339198][ T5828] Buffer I/O error on dev nbd2, logical block 1, async page read [ 206.339239][ T5828] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 206.339260][ T5828] Buffer I/O error on dev nbd2, logical block 2, async page read [ 206.339294][ T5828] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 206.339315][ T5828] Buffer I/O error on dev nbd2, logical block 3, async page read [ 206.339356][ T5828] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 206.339377][ T5828] Buffer I/O error on dev nbd2, logical block 0, async page read [ 206.339409][ T5828] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 206.352771][T10243] netlink: 'syz.2.1161': attribute type 21 has an invalid length. [ 206.358387][ T5828] Buffer I/O error on dev nbd2, logical block 1, async page read [ 206.391422][T10243] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1161'. [ 206.494549][T10248] wg1 speed is unknown, defaulting to 1000 [ 206.532458][ T5828] ldm_validate_partition_table(): Disk read failed. [ 206.540399][ T5828] Dev nbd2: unable to read RDB block 0 [ 206.547769][ T5828] nbd2: unable to read partition table [ 206.560055][ T5828] ldm_validate_partition_table(): Disk read failed. [ 206.568231][ T5828] Dev nbd2: unable to read RDB block 0 [ 206.575428][ T5828] nbd2: unable to read partition table [ 206.615939][T10266] netlink: 'syz.2.1167': attribute type 6 has an invalid length. [ 206.620369][T10257] bond3: option resend_igmp: invalid value (32767) [ 206.638192][T10257] bond3: option resend_igmp: allowed values 0 - 255 [ 206.647112][T10257] bond3 (unregistering): Released all slaves [ 209.985708][T10296] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 210.171427][T10418] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.179344][T10418] IPv6: NLM_F_CREATE should be set when creating new route [ 210.601785][T10446] netlink: 'syz.0.1197': attribute type 1 has an invalid length. [ 210.637367][T10450] __nla_validate_parse: 9 callbacks suppressed [ 210.637383][T10450] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1198'. [ 210.699148][T10446] bond3: entered promiscuous mode [ 210.704813][T10446] 8021q: adding VLAN 0 to HW filter on device bond3 [ 210.716930][T10455] netlink: 'syz.2.1200': attribute type 1 has an invalid length. [ 210.763067][T10446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1197'. [ 210.773082][T10446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1197'. [ 210.827568][T10455] 8021q: adding VLAN 0 to HW filter on device bond4 [ 210.883999][T10469] bond3: (slave bridge4): making interface the new active one [ 210.891872][T10469] bridge4: entered promiscuous mode [ 210.904494][T10469] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 210.913955][T10473] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1200'. [ 210.935852][T10455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1200'. [ 211.103044][T10484] sch_fq: defrate 0 ignored. [ 211.115821][ T5827] block nbd3: Receive control failed (result -107) [ 211.151058][T10475] nbd3: detected capacity change from 0 to 127 [ 211.162472][ T5828] block nbd3: Dead connection, failed to find a fallback [ 211.173604][ T5828] block nbd3: shutting down sockets [ 211.181688][ T5828] blk_print_req_error: 138 callbacks suppressed [ 211.181703][ T5828] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 211.186333][T10490] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 211.188029][ T5828] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 211.225831][ T5828] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 211.237307][ T5828] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 211.247468][ T5828] buffer_io_error: 141 callbacks suppressed [ 211.247481][ T5828] Buffer I/O error on dev nbd3, logical block 3, async page read [ 211.271829][ T5828] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 211.348985][ T5828] Buffer I/O error on dev nbd3, logical block 0, async page read [ 211.371959][ T5828] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 211.388201][ T5828] Buffer I/O error on dev nbd3, logical block 1, async page read [ 211.408055][T10490] wg1 speed is unknown, defaulting to 1000 [ 211.437264][ T5828] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 211.482417][ T5828] Buffer I/O error on dev nbd3, logical block 2, async page read [ 211.513699][ T5828] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 211.523869][ T5828] Buffer I/O error on dev nbd3, logical block 3, async page read [ 211.533097][ T5828] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 211.543240][ T5828] Buffer I/O error on dev nbd3, logical block 0, async page read [ 211.552986][ T5828] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 211.563299][ T5828] Buffer I/O error on dev nbd3, logical block 1, async page read [ 211.573269][ T5828] Buffer I/O error on dev nbd3, logical block 2, async page read [ 211.586197][ T5828] Buffer I/O error on dev nbd3, logical block 3, async page read [ 211.612387][ T5828] Buffer I/O error on dev nbd3, logical block 0, async page read [ 211.620561][ T5828] ldm_validate_partition_table(): Disk read failed. [ 211.634598][T10502] bond6: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 211.665086][ T5828] Dev nbd3: unable to read RDB block 0 [ 211.672916][T10502] bond6 (unregistering): Released all slaves [ 211.679929][ T5828] nbd3: unable to read partition table [ 211.694868][ T5828] ldm_validate_partition_table(): Disk read failed. [ 211.709894][ T5828] Dev nbd3: unable to read RDB block 0 [ 211.721779][ T5828] nbd3: unable to read partition table [ 212.083824][T10546] netlink: 'syz.3.1219': attribute type 1 has an invalid length. [ 212.116034][T10546] netlink: 'syz.3.1219': attribute type 1 has an invalid length. [ 212.119702][T10548] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1221'. [ 212.143692][T10546] netlink: 'syz.3.1219': attribute type 1 has an invalid length. [ 212.216784][T10546] netlink: 'syz.3.1219': attribute type 2 has an invalid length. [ 212.251725][T10546] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1219'. [ 212.280923][T10548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.327695][T10548] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.344165][T10548] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 212.356683][T10548] bond0 (unregistering): Released all slaves [ 212.367482][T10549] tipc: Started in network mode [ 212.373112][T10549] tipc: Node identity 7aa073850de7, cluster identity 4711 [ 212.380416][T10549] tipc: Enabled bearer , priority 0 [ 212.459228][T10542] syzkaller0: entered promiscuous mode [ 212.467788][T10542] syzkaller0: entered allmulticast mode [ 212.474714][T10542] tipc: Resetting bearer [ 212.501470][T10565] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 212.519930][T10567] syzkaller0: entered promiscuous mode [ 212.529904][T10567] syzkaller0: entered allmulticast mode [ 212.638727][ T1095] tipc: Resetting bearer [ 212.655149][T10539] tipc: Resetting bearer [ 213.796920][T10539] tipc: Disabling bearer [ 213.919404][ T7850] tipc: Node number set to 2001171333 [ 214.022025][T10598] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1230'. [ 214.040406][T10598] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1230'. [ 214.099769][T10602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1231'. [ 214.123019][ T7218] [ 214.125373][ T7218] ====================================================== [ 214.132379][ T7218] WARNING: possible circular locking dependency detected [ 214.139394][ T7218] syzkaller #0 Not tainted [ 214.143813][ T7218] ------------------------------------------------------ [ 214.150844][ T7218] kworker/u8:15/7218 is trying to acquire lock: [ 214.157077][ T7218] ffff88801badda20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180 [ 214.167597][ T7218] [ 214.167597][ T7218] but task is already holding lock: [ 214.174987][ T7218] ffff88801badd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 214.185237][ T7218] [ 214.185237][ T7218] which lock already depends on the new lock. [ 214.185237][ T7218] [ 214.195623][ T7218] [ 214.195623][ T7218] the existing dependency chain (in reverse order) is: [ 214.204620][ T7218] [ 214.204620][ T7218] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 214.212688][ T7218] down_write+0x96/0x200 [ 214.217444][ T7218] kernfs_add_one+0x41/0x5c0 [ 214.222541][ T7218] kernfs_create_dir_ns+0xde/0x130 [ 214.228170][ T7218] internal_create_group+0x425/0x1180 [ 214.234051][ T7218] cpuhp_invoke_callback+0x445/0x860 [ 214.239844][ T7218] cpuhp_issue_call+0x430/0x7a0 [ 214.245198][ T7218] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 214.251769][ T7218] __cpuhp_setup_state+0x3f/0x60 [ 214.257252][ T7218] do_one_initcall+0x250/0x8d0 [ 214.262522][ T7218] do_initcall_level+0x104/0x190 [ 214.267961][ T7218] do_initcalls+0x59/0xa0 [ 214.272791][ T7218] kernel_init_freeable+0x2a6/0x3e0 [ 214.278504][ T7218] kernel_init+0x1d/0x1d0 [ 214.283337][ T7218] ret_from_fork+0x51e/0xb90 [ 214.288434][ T7218] ret_from_fork_asm+0x1a/0x30 [ 214.293710][ T7218] [ 214.293710][ T7218] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 214.301510][ T7218] [ 214.301510][ T7218] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 214.309225][ T7218] cpus_read_lock+0x42/0x160 [ 214.314325][ T7218] static_key_disable+0x12/0x20 [ 214.319686][ T7218] __inet_hash_connect+0x2430/0x2440 [ 214.325473][ T7218] tcp_v4_connect+0xd5f/0x19b0 [ 214.330743][ T7218] __inet_stream_connect+0x25a/0xdd0 [ 214.336533][ T7218] inet_stream_connect+0x66/0xa0 [ 214.341975][ T7218] __sys_connect+0x312/0x450 [ 214.347067][ T7218] __x64_sys_connect+0x7a/0x90 [ 214.352333][ T7218] do_syscall_64+0x14d/0xf80 [ 214.357431][ T7218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.363826][ T7218] [ 214.363826][ T7218] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}: [ 214.371457][ T7218] lock_sock_nested+0x48/0x100 [ 214.376828][ T7218] inet_shutdown+0x6a/0x390 [ 214.381847][ T7218] nbd_mark_nsock_dead+0x2e9/0x560 [ 214.387485][ T7218] recv_work+0x1c7f/0x1d90 [ 214.392430][ T7218] process_scheduled_works+0xb6e/0x18c0 [ 214.398495][ T7218] worker_thread+0xa53/0xfc0 [ 214.403595][ T7218] kthread+0x388/0x470 [ 214.408174][ T7218] ret_from_fork+0x51e/0xb90 [ 214.413293][ T7218] ret_from_fork_asm+0x1a/0x30 [ 214.418582][ T7218] [ 214.418582][ T7218] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 214.426254][ T7218] __mutex_lock+0x19f/0x1300 [ 214.431363][ T7218] nbd_queue_rq+0x37b/0x1100 [ 214.436479][ T7218] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 214.442549][ T7218] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 214.449389][ T7218] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 214.455900][ T7218] blk_mq_run_hw_queue+0x348/0x4f0 [ 214.461521][ T7218] blk_mq_dispatch_list+0xd16/0xe10 [ 214.467234][ T7218] blk_mq_flush_plug_list+0x48d/0x570 [ 214.473224][ T7218] __blk_flush_plug+0x3ed/0x4d0 [ 214.478585][ T7218] __submit_bio+0x28d/0x580 [ 214.483593][ T7218] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 214.489734][ T7218] block_read_full_folio+0x599/0x830 [ 214.495523][ T7218] filemap_read_folio+0x137/0x3b0 [ 214.501053][ T7218] do_read_cache_folio+0x358/0x590 [ 214.506676][ T7218] read_part_sector+0xb6/0x2b0 [ 214.511943][ T7218] adfspart_check_ICS+0xa5/0xa40 [ 214.517385][ T7218] bdev_disk_changed+0x7ba/0x1550 [ 214.522923][ T7218] blkdev_get_whole+0x380/0x510 [ 214.528282][ T7218] bdev_open+0x31e/0xd30 [ 214.533029][ T7218] blkdev_open+0x470/0x610 [ 214.537952][ T7218] do_dentry_open+0x785/0x14e0 [ 214.543223][ T7218] vfs_open+0x3b/0x340 [ 214.547801][ T7218] path_openat+0x2e08/0x3860 [ 214.552894][ T7218] do_file_open+0x23e/0x4a0 [ 214.557901][ T7218] do_sys_openat2+0x113/0x200 [ 214.563085][ T7218] __x64_sys_openat+0x138/0x170 [ 214.568443][ T7218] do_syscall_64+0x14d/0xf80 [ 214.573539][ T7218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.579933][ T7218] [ 214.579933][ T7218] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 214.587130][ T7218] __mutex_lock+0x19f/0x1300 [ 214.592231][ T7218] nbd_queue_rq+0xc6/0x1100 [ 214.597266][ T7218] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 214.603320][ T7218] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 214.610156][ T7218] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 214.616647][ T7218] blk_mq_run_hw_queue+0x348/0x4f0 [ 214.622270][ T7218] blk_mq_dispatch_list+0xd16/0xe10 [ 214.627975][ T7218] blk_mq_flush_plug_list+0x48d/0x570 [ 214.633855][ T7218] __blk_flush_plug+0x3ed/0x4d0 [ 214.639209][ T7218] __submit_bio+0x28d/0x580 [ 214.644217][ T7218] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 214.650353][ T7218] block_read_full_folio+0x599/0x830 [ 214.656155][ T7218] filemap_read_folio+0x137/0x3b0 [ 214.661688][ T7218] do_read_cache_folio+0x358/0x590 [ 214.667311][ T7218] read_part_sector+0xb6/0x2b0 [ 214.672580][ T7218] adfspart_check_ICS+0xa5/0xa40 [ 214.678021][ T7218] bdev_disk_changed+0x7ba/0x1550 [ 214.683550][ T7218] blkdev_get_whole+0x380/0x510 [ 214.688960][ T7218] bdev_open+0x31e/0xd30 [ 214.693709][ T7218] blkdev_open+0x470/0x610 [ 214.698636][ T7218] do_dentry_open+0x785/0x14e0 [ 214.703995][ T7218] vfs_open+0x3b/0x340 [ 214.708722][ T7218] path_openat+0x2e08/0x3860 [ 214.713818][ T7218] do_file_open+0x23e/0x4a0 [ 214.718827][ T7218] do_sys_openat2+0x113/0x200 [ 214.724014][ T7218] __x64_sys_openat+0x138/0x170 [ 214.729382][ T7218] do_syscall_64+0x14d/0xf80 [ 214.734573][ T7218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.740994][ T7218] [ 214.740994][ T7218] -> #4 (set->srcu){.+.+}-{0:0}: [ 214.748115][ T7218] __synchronize_srcu+0xca/0x300 [ 214.753565][ T7218] elevator_switch+0x1e8/0x7a0 [ 214.758844][ T7218] elevator_change+0x2cc/0x450 [ 214.764200][ T7218] elevator_set_default+0x36c/0x430 [ 214.769901][ T7218] blk_register_queue+0x366/0x430 [ 214.775438][ T7218] __add_disk+0x677/0xd50 [ 214.780275][ T7218] add_disk_fwnode+0xfb/0x480 [ 214.785491][ T7218] nbd_dev_add+0x72c/0xb50 [ 214.790412][ T7218] nbd_init+0x168/0x1f0 [ 214.795073][ T7218] do_one_initcall+0x250/0x8d0 [ 214.800352][ T7218] do_initcall_level+0x104/0x190 [ 214.805807][ T7218] do_initcalls+0x59/0xa0 [ 214.810649][ T7218] kernel_init_freeable+0x2a6/0x3e0 [ 214.816358][ T7218] kernel_init+0x1d/0x1d0 [ 214.821285][ T7218] ret_from_fork+0x51e/0xb90 [ 214.826445][ T7218] ret_from_fork_asm+0x1a/0x30 [ 214.831726][ T7218] [ 214.831726][ T7218] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 214.839529][ T7218] __mutex_lock+0x19f/0x1300 [ 214.844629][ T7218] elevator_change+0x1b3/0x450 [ 214.849905][ T7218] elevator_set_none+0xb5/0x140 [ 214.855258][ T7218] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 214.861573][ T7218] nbd_start_device+0x17f/0xb10 [ 214.866927][ T7218] nbd_genl_connect+0x165b/0x1cf0 [ 214.872456][ T7218] genl_family_rcv_msg_doit+0x22a/0x330 [ 214.878510][ T7218] genl_rcv_msg+0x61c/0x7a0 [ 214.883559][ T7218] netlink_rcv_skb+0x232/0x4b0 [ 214.888828][ T7218] genl_rcv+0x28/0x40 [ 214.893315][ T7218] netlink_unicast+0x80f/0x9b0 [ 214.898578][ T7218] netlink_sendmsg+0x813/0xb40 [ 214.903851][ T7218] ____sys_sendmsg+0x972/0x9f0 [ 214.909120][ T7218] ___sys_sendmsg+0x2a5/0x360 [ 214.914308][ T7218] __x64_sys_sendmsg+0x1bd/0x2a0 [ 214.919752][ T7218] do_syscall_64+0x14d/0xf80 [ 214.924853][ T7218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.931345][ T7218] [ 214.931345][ T7218] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 214.940005][ T7218] blk_alloc_queue+0x546/0x680 [ 214.945286][ T7218] __blk_mq_alloc_disk+0x197/0x390 [ 214.950918][ T7218] nbd_dev_add+0x499/0xb50 [ 214.955841][ T7218] nbd_init+0x168/0x1f0 [ 214.960502][ T7218] do_one_initcall+0x250/0x8d0 [ 214.965788][ T7218] do_initcall_level+0x104/0x190 [ 214.971251][ T7218] do_initcalls+0x59/0xa0 [ 214.976087][ T7218] kernel_init_freeable+0x2a6/0x3e0 [ 214.981792][ T7218] kernel_init+0x1d/0x1d0 [ 214.986655][ T7218] ret_from_fork+0x51e/0xb90 [ 214.991751][ T7218] ret_from_fork_asm+0x1a/0x30 [ 214.997028][ T7218] [ 214.997028][ T7218] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 215.004220][ T7218] fs_reclaim_acquire+0x71/0x100 [ 215.009662][ T7218] kmem_cache_alloc_noprof+0x40/0x650 [ 215.015537][ T7218] __kernfs_iattrs+0xdf/0x340 [ 215.020722][ T7218] kernfs_iop_setattr+0xea/0x3f0 [ 215.026166][ T7218] notify_change+0xc1a/0xf40 [ 215.031266][ T7218] do_truncate+0x1c2/0x250 [ 215.036195][ T7218] path_openat+0x2f89/0x3860 [ 215.041288][ T7218] do_file_open+0x23e/0x4a0 [ 215.046294][ T7218] do_sys_openat2+0x113/0x200 [ 215.051476][ T7218] __x64_sys_openat+0x138/0x170 [ 215.056833][ T7218] do_syscall_64+0x14d/0xf80 [ 215.061928][ T7218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.068333][ T7218] [ 215.068333][ T7218] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 215.076877][ T7218] __lock_acquire+0x15a5/0x2cf0 [ 215.082294][ T7218] lock_acquire+0xf0/0x2e0 [ 215.087228][ T7218] down_write+0x96/0x200 [ 215.091978][ T7218] kernfs_unlink_sibling+0x71/0x180 [ 215.097687][ T7218] __kernfs_remove+0x3e7/0x660 [ 215.102957][ T7218] kernfs_remove_by_name_ns+0xaf/0x130 [ 215.108918][ T7218] sysfs_remove_group+0xfc/0x2e0 [ 215.114364][ T7218] sysfs_remove_groups+0x54/0xb0 [ 215.119819][ T7218] net_rx_queue_update_kobjects+0x68d/0x740 [ 215.126306][ T7218] netdev_unregister_kobject+0x113/0x450 [ 215.132449][ T7218] unregister_netdevice_many_notify+0x1e0e/0x2370 [ 215.139382][ T7218] unregister_netdevice_queue+0x31f/0x360 [ 215.145621][ T7218] l2tp_eth_delete+0xdc/0x100 [ 215.150804][ T7218] l2tp_session_del_work+0x724/0x860 [ 215.156593][ T7218] process_scheduled_works+0xb6e/0x18c0 [ 215.162658][ T7218] worker_thread+0xa53/0xfc0 [ 215.168128][ T7218] kthread+0x388/0x470 [ 215.172790][ T7218] ret_from_fork+0x51e/0xb90 [ 215.177892][ T7218] ret_from_fork_asm+0x1a/0x30 [ 215.183169][ T7218] [ 215.183169][ T7218] other info that might help us debug this: [ 215.183169][ T7218] [ 215.193389][ T7218] Chain exists of: [ 215.193389][ T7218] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 215.193389][ T7218] [ 215.207796][ T7218] Possible unsafe locking scenario: [ 215.207796][ T7218] [ 215.215230][ T7218] CPU0 CPU1 [ 215.220615][ T7218] ---- ---- [ 215.225964][ T7218] lock(&root->kernfs_rwsem); [ 215.230718][ T7218] lock(cpuhp_state_mutex); [ 215.237820][ T7218] lock(&root->kernfs_rwsem); [ 215.245100][ T7218] lock(&root->kernfs_iattr_rwsem); [ 215.250378][ T7218] [ 215.250378][ T7218] *** DEADLOCK *** [ 215.250378][ T7218] [ 215.258499][ T7218] 4 locks held by kworker/u8:15/7218: [ 215.263848][ T7218] #0: ffff8880318d7148 ((wq_completion)l2tp){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 215.274637][ T7218] #1: ffffc90005df7c40 ((work_completion)(&session->del_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 215.286978][ T7218] #2: ffffffff8fbd0ec8 (rtnl_mutex){+.+.}-{4:4}, at: l2tp_eth_delete+0x1f/0x100 [ 215.296109][ T7218] #3: ffff88801badd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 215.306810][ T7218] [ 215.306810][ T7218] stack backtrace: [ 215.312686][ T7218] CPU: 1 UID: 0 PID: 7218 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT(full) [ 215.312704][ T7218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 215.312713][ T7218] Workqueue: l2tp l2tp_session_del_work [ 215.312735][ T7218] Call Trace: [ 215.312743][ T7218] [ 215.312750][ T7218] dump_stack_lvl+0xe8/0x150 [ 215.312769][ T7218] print_circular_bug+0x2e1/0x300 [ 215.312790][ T7218] check_noncircular+0x12e/0x150 [ 215.312811][ T7218] __lock_acquire+0x15a5/0x2cf0 [ 215.312830][ T7218] ? __lock_acquire+0x6b5/0x2cf0 [ 215.312850][ T7218] lock_acquire+0xf0/0x2e0 [ 215.312865][ T7218] ? kernfs_unlink_sibling+0x71/0x180 [ 215.312882][ T7218] down_write+0x96/0x200 [ 215.312895][ T7218] ? kernfs_unlink_sibling+0x71/0x180 [ 215.312908][ T7218] ? __pfx_down_write+0x10/0x10 [ 215.312919][ T7218] ? kernfs_root+0x1c/0x230 [ 215.312937][ T7218] ? kernfs_root+0x1c/0x230 [ 215.312954][ T7218] ? kernfs_root+0x1c/0x230 [ 215.312972][ T7218] ? kernfs_root+0x1ea/0x230 [ 215.312990][ T7218] kernfs_unlink_sibling+0x71/0x180 [ 215.313004][ T7218] __kernfs_remove+0x3e7/0x660 [ 215.313018][ T7218] kernfs_remove_by_name_ns+0xaf/0x130 [ 215.313033][ T7218] sysfs_remove_group+0xfc/0x2e0 [ 215.313053][ T7218] sysfs_remove_groups+0x54/0xb0 [ 215.313072][ T7218] net_rx_queue_update_kobjects+0x68d/0x740 [ 215.313096][ T7218] netdev_unregister_kobject+0x113/0x450 [ 215.313118][ T7218] unregister_netdevice_many_notify+0x1e0e/0x2370 [ 215.313143][ T7218] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 215.313169][ T7218] unregister_netdevice_queue+0x31f/0x360 [ 215.313189][ T7218] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 215.313212][ T7218] l2tp_eth_delete+0xdc/0x100 [ 215.313227][ T7218] ? __pfx_l2tp_eth_delete+0x10/0x10 [ 215.313240][ T7218] l2tp_session_del_work+0x724/0x860 [ 215.313258][ T7218] ? process_scheduled_works+0xa8d/0x18c0 [ 215.313276][ T7218] process_scheduled_works+0xb6e/0x18c0 [ 215.313301][ T7218] ? __pfx_process_scheduled_works+0x10/0x10 [ 215.313320][ T7218] ? assign_work+0x3d5/0x5e0 [ 215.313336][ T7218] worker_thread+0xa53/0xfc0 [ 215.313366][ T7218] kthread+0x388/0x470 [ 215.313378][ T7218] ? __pfx_worker_thread+0x10/0x10 [ 215.313394][ T7218] ? __pfx_kthread+0x10/0x10 [ 215.313406][ T7218] ret_from_fork+0x51e/0xb90 [ 215.313424][ T7218] ? __pfx_ret_from_fork+0x10/0x10 [ 215.313440][ T7218] ? __switch_to+0xc7d/0x1450 [ 215.313455][ T7218] ? __pfx_kthread+0x10/0x10 [ 215.313468][ T7218] ret_from_fork_asm+0x1a/0x30 [ 215.313491][ T7218] [ 215.605895][T10601] ieee80211 phy24: Selected rate control algorithm 'minstrel_ht' [ 215.643627][T10604] bond0: (slave bridge5): Enslaving as an active interface with an up link [ 215.657878][T10607] macvlan4: entered promiscuous mode [ 215.664070][T10607] macvlan4: entered allmulticast mode [ 215.669921][T10607] bond0: entered promiscuous mode [ 215.677397][T10607] bridge5: entered promiscuous mode [ 215.685932][T10607] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 215.693563][T10607] bond0: left promiscuous mode [ 215.698387][T10607] bridge5: left promiscuous mode [ 218.726634][ T5194] udevd[5194]: worker [6630] /devices/virtual/block/nbd0 is taking a long time