last executing test programs: 16.966178777s ago: executing program 0 (id=7656): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff00000000030000000000000000000000020000000000000a000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x20) 16.504842067s ago: executing program 0 (id=7661): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYRES32=r0], 0x398}, 0x1, 0x0, 0x0, 0x801}, 0x4c841) 16.161795507s ago: executing program 0 (id=7666): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async) listen(0xffffffffffffffff, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async, rerun: 32) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) (async, rerun: 32) socket$kcm(0x29, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@lli, {}, {0x7, 0x1, 0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x99}}]}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f00000001c0)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) r7 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r7], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x20) 15.58515211s ago: executing program 0 (id=7669): bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f0000000040)=0x10f7a, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x13, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x3, 0x6, @l2={'eth', 0x3a, 'nicvf0\x00'}}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x91}, 0x4008000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000001000000000000000100000018110000dfc800b1f78b9bedb544944b831918ac69dba74f67d309a02a16b9af7d30a6173d9faae7bcf9f52595cee2ffd1f7adb2cab162fd76031b2d660960cb5f90934b374c8a1a177a992065fc73d3ffc6b33536917577a0a1d6f1223f6347bb909f4cbab6ac3d5efb662358bfabb43a233ca036e489c51c20da165c053402e98c7aff2ac669707d301bc17120d3609f2bc08258628858b2cd35a386e9c8e2d84692", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000077090000fcffffffbf91000000000000b70200000200000085000000c6000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) epoll_create(0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r6, 0x25, 0x2, @void}, 0x10) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bdad, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@cgroup, 0xffffffffffffffff, 0x32, 0x14}, 0x20) syz_emit_ethernet(0x13e, &(0x7f0000000300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @val={@void, {0x8100, 0x2, 0x0, 0x4}}, {@mpls_mc={0x8848, {[{0x6}, {0x8}, {0x1ff}, {0x7}, {0x1a9}, {0x2}, {0x2}, {0x266, 0x0, 0x1}, {0x2}, {0x81, 0x0, 0x1}], @ipv6=@tipc_packet={0x0, 0x6, "e7ea87", 0xdc, 0x6, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, {[@hopopts={0x6c, 0x5, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x9}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @enc_lim={0x4, 0x1, 0x8}]}, @srh={0x84, 0x1d, 0x4, 0x0, 0xc2, 0x10, 0x200}, @dstopts={0x33}, @srh={0x0, 0x4, 0x4, 0x2, 0x81, 0x10, 0x80, [@mcast2, @mcast1]}, @hopopts={0x0, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @enc_lim={0x4, 0x1, 0x82}, @hao={0xc9, 0x10, @private1}, @generic={0x9}]}], @name_distributor={{0x44, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x9, 0x0, 0x0, 0x8, 0x4, 0x1, 0x4e23, 0x4e20, 0x3, 0x3, 0x0, 0x0, 0x1}, [{0x5, 0x6, 0x68, 0x3a99, 0x3, 0x5, 0x1, 0x7}]}}}}}}}, 0x0) 15.342614501s ago: executing program 2 (id=7670): syz_emit_ethernet(0x3b6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) 15.078867373s ago: executing program 2 (id=7671): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff00000000030000000000000000000000020000000000000b000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x20) 14.945520868s ago: executing program 0 (id=7672): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_getnetconf={0x14, 0x52, 0x400, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4040800}, 0x80) 14.72296552s ago: executing program 2 (id=7673): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r3, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) (async) r4 = openat$cgroup_devices(r3, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000080)={'b', ' *:* ', 'm\x00'}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="30e128aacb3619f0b1bd700001dccf2507000000", @ANYRES32=r1, @ANYBLOB="80006e0a0a000200aaaaaaaaaabb000008000f0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4008840}, 0x4040000) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="30e128aacb3619f0b1bd700001dccf2507000000", @ANYRES32=r1, @ANYBLOB="80006e0a0a000200aaaaaaaaaabb000008000f0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4008840}, 0x4040000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0xc040480) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r6}, 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r6}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r7}, &(0x7f0000000000), &(0x7f0000000500)=r7}, 0x20) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x40, 0x1, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x14, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x1}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0xfff}]}}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'tftp-20000\x00'}}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x20004040) (async) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x40, 0x1, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x14, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x1}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0xfff}]}}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'tftp-20000\x00'}}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x20004040) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r9 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000021c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x7ffffffe}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x40004) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="ef632072b6621f5abd4d6c5dad7f03503ad840b6830e9c382f929cec2a1c5867ec4726506964c81683f6b0a4cadef67991aa004db5aa1d496fe78e59cb32401c29e5861dd9ed3b25c089803eb250bdf55970b3b057d398e36f37c64dcdab8f26cb708751db9d766e475ca64f91531ff5589fb4e5f8c694913e26ca66000f52d79adbc05ec36ae20c66a3da04d82037c5a2bcdaa3f317f0794925e7709f44e39e315c4e4e29007426e79b1c3e4d892f313654e51553af5d1603be048964a4886e872aa97a72"], 0xc8}}, 0x0) 14.604517561s ago: executing program 0 (id=7674): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="84010000100013070000000000000000e0000001000000000000000000000000ac"], 0x184}}, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) r1 = socket$phonet(0x23, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2000c0c1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x8000010) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4) socket$packet(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) write$cgroup_devices(r3, 0x0, 0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e1e, 0x3, @empty, 0xfff}, 0xf, 0x0}}], 0x1, 0x60080004) recvmmsg(r0, &(0x7f00000003c0), 0x1, 0x40002142, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0x4) unshare(0x6a040000) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) r7 = socket$inet(0xa, 0x80000, 0x88) listen(r7, 0xfffffffd) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000002180006801400040020010000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c000180140003000000400000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100880cf79a3c0002802c00018014000300fe8000000000000000000000000000aa140004002001000000000000000100000000000800074000000000040006808d6efd285d48b3dac9c1a441dc6ae03539c8d6190789670d551e077cee8837a3c7bdd84e3222051f9bab7b1c15933446ce801820febfcb437ca9eba8f2576ff59503a95acd0a31e2682bb2e9165edd9c45f20037c7ba1aafb5b8e8b4329dab1b4df60e3265d0f3251de4be939413f5f6da01251532a5933fe1a7fadc05b113aa6051fffc278a04b97c6f63ca134a060919affd9a1d20002c55fb2362e61a"], 0x98}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) accept4(r7, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x158, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x124, 0x2, [@TCA_U32_ACT={0xfc, 0x7, [@m_mirred={0xf8, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x401, 0xffffffffffffffff, 0xe80, 0x4}, 0x4, r6}}]}, {0xaa, 0x6, "3e75ffff454932196190cafb130eae2a745b8560ec3cab3a8075096b09684633568daea2426619bd1ad4102a3713cd52f295de578a4cd0b4bf3e6c8dae393d6d071acd584c4dc93e34009be9cc32d72a4ae012185477f6b4a434060000000000000090b082904eb9346d3811d3c7f8d0bb299f502bdd9d6ff7f2248b17e707009df53c6df5fc19d9790c4408d302008c20f6553c63070e1cd6b8913dfdb5a078e680f676f760"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0xf8}}]}, 0x158}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001400010028bd7000fcdbdf25022001c8", @ANYRES32=r2, @ANYBLOB="08000700c11414c0c7c0ea0c1a482c747411479dbec1d9314cba0829ec1eb2"], 0x20}}, 0x40000c0) 13.168701521s ago: executing program 2 (id=7677): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) unshare(0x20400) (async) r1 = socket$igmp(0x2, 0x3, 0x2) (async) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x20, 0xd, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{}], 0x8, 0x10, &(0x7f0000000140), &(0x7f0000000200), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "1c1f15f3c5e23d27d29a00dd397b5c11d4cf201c1a0619fc314514ab71788e4079fdbe4f2a0d60b83a7d04c1d709981110401e5e10685abbad9b6f18e303e902c77244658a099a36fa486760c4941ea7df64250af29a4935de5d244f0549d93679b3d4fb358c2076bc6b1c9735ff8243f088e67455ba14975d12e5903ceeb7a23d62ecb5253ad444ef726b58a00f13f22ccc84cc06c9912b621c3ddc5f3229dc84c0880b5c6faefe33413b34a146e592fc15ae234dac030f05bb99eab08dfd2cb5659c6fc21fb7da6c380165ddde4659e75538dc864a53f691e1d785d6e6f73a03abf2120bce67e2d50075fd811b3e03a1cc2d66335bdee19738a0c1fb79b77d"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x4}]}}]}, 0x154}}, 0x20000004) pipe(&(0x7f0000000100)={0xffffffffffffffff}) tee(r5, 0xffffffffffffffff, 0x3, 0x3) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="06040000100440bd7000febf052500000000aae39ade965d62f693e4fbd4602330f66c65c32d9dbff3f6240336056a3a47e3f1de336aab9fd76fc584c1dabd83fbe426a56c0743891576e754583f5733517b3dba24f8a187a4f14928a461fbc53a13e543824b1eae5535da7f9dbfe2913c5f56e358d253a5e9f7a2cd685d17f0d2c65d2bf035e3bd7e6e5f8893b663af09da335146467918b7a411d6af2e18a725e622536ef1487f22ca7b63206548e689c44efb9511afb934b000000000", @ANYRES32=0x0, @ANYBLOB="0198000000000000180012800e000100776972656775617264000000040002800800290016150700080028006adc0000"], 0x48}, 0x1, 0x0, 0x0, 0x24000007}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f2a, 0x5, 0x6, 0x9, 0xb, 0x14, 0x5}}]}}]}, 0x148}}, 0x4000010) 12.819993122s ago: executing program 2 (id=7679): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x12, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000001000100000000008815000091117e000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900030073797a31000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018011000100666c6f775f6f66666c6f61640000000010008c800900010073797a3100000000140000001100010000000000000000000000000a"], 0xc8}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000100)) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r3, r4, 0x8f5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[], 0x0, 0x2a, 0x0, 0x0, 0x1}, 0x28) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c0000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="f1040b77d11151eac391a7663cffe3c2cc410e63f7ab", @ANYRES32=0x0, @ANYBLOB="1c00128009000100766c616e000000000c00028006000100010000000a000200aaaaaaaaaaaa00000a000100aaaaaaaaaa230000"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r5, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) socket$alg(0x26, 0x5, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) 11.70623217s ago: executing program 2 (id=7685): unshare(0x6a040000) syz_emit_ethernet(0x66, &(0x7f0000000280)=ANY=[@ANYBLOB="bbd28ddcfbbbaaaaaaaaaa0086dd60003a0400047300f58000000000000000000000000000bbff020000000000000000000000000001"], 0x0) r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0xa, &(0x7f0000000480), 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x18, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "ffffffffffff0000000000020000000000000000000000ffff008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) sendmsg$IPSET_CMD_DEL(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0xa, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x48000400) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in6=@local}, @in6=@remote, {@in6=@private2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, r4}, {}, {}, 0x0, 0x0, 0x2}, 0xfffffff9}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x4d5, 0x3c}, 0xa, @in6=@private0, 0x3505, 0x2, 0x0, 0xac, 0x3, 0x1, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d4, 0x32}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x43}, 0x3506, 0x0, 0x1, 0x1, 0x9, 0x101, 0x8}]}]}, 0x1ac}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 9.260059709s ago: executing program 3 (id=7698): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002"], 0xfc}, 0x1, 0x0, 0x0, 0x48010}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x2000, 0x4) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x300000c, 0x11, r3, 0x180000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00001700000000001c0037"], 0x44}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x20}, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=0xffffffffffffffff, 0x4) socket$kcm(0x2, 0xa, 0x73) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={0x1, 0xffffffffffffffff}, 0x4) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r12 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x6}}}]}, 0x38}}, 0x24000040) sendmsg$nl_route_sched(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, r13, {0xd, 0xfff1}, {}, {0x10, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x10, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x26}, @TCA_ROUTE4_ACT={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x40082) write$tun(r10, &(0x7f00000000c0)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r10, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x9, 0x2a, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, [@jmp={0x5, 0x1, 0x3, 0x3, 0x0, 0x4, 0xfffffffffffffffc}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @ldst={0x2, 0x2, 0x6, 0xa, 0x8, 0xfffffffffffffff0, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @jmp={0x5, 0x0, 0x5, 0x6, 0x1, 0x18, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8e0}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0xe, 0x3, 0x0, 0x1}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0xff}]}, &(0x7f00000004c0)='GPL\x00', 0xffffff81, 0x85, &(0x7f0000000500)=""/133, 0x41000, 0x60, '\x00', r2, 0x0, r7, 0x8, &(0x7f0000000600)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x4, 0xc, 0x0, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[r9, r10, 0xffffffffffffffff], 0x0, 0x10, 0x3}, 0x94) 7.203862973s ago: executing program 3 (id=7701): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000002900)=r4, 0x4) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32], 0xe8}}, 0x0) close(r8) ioctl$TUNSETOFFLOAD(r8, 0x400454d0, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="240012800b000100627269646765"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 5.794967542s ago: executing program 4 (id=7707): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa0, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc005}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}]}, @TIPC_NLA_LINK={0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20008804}, 0x20054800) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x600) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) sendmmsg$alg(r6, 0x0, 0x0, 0x20000000) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, r4, 0x1, 0x0, 0x80000, {0x3}}, 0x14}}, 0x0) getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r1, {}, {0x3, 0xfff3}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ipvlan1\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa0, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc005}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}]}, @TIPC_NLA_LINK={0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20008804}, 0x20054800) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) unshare(0x600) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async) sendmmsg$alg(r6, 0x0, 0x0, 0x20000000) (async) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, r4, 0x1, 0x0, 0x80000, {0x3}}, 0x14}}, 0x0) (async) getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r1, {}, {0x3, 0xfff3}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) (async) 3.492876105s ago: executing program 3 (id=7711): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$MRT6_ASSERT(r1, 0x29, 0xcf, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f00000000c0)) (async) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x48006008}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r3, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x1}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xdc}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xc}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf93}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}], @NL80211_ATTR_BSS_BASIC_RATES={0x8, 0x24, [{0x36}, {0xc, 0x1}, {0x60}, {0x60}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4) 1.898935156s ago: executing program 3 (id=7718): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000400)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a35f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2f00, 0xfff5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0xffff}}}}}}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x29, 0x400, 0x70bd29, 0x25dfdbff, {}, [@typed={0xc, 0xc1, 0x0, 0x0, @u64=0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r2 = socket(0x27, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="cdf1000000000000a500"/24], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) (async) r4 = socket(0x10, 0x803, 0x2) (async, rerun: 64) r5 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) unshare(0x20000400) connect$pppl2tp(r5, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0x3, {0xa, 0x4e21, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2000073}}}, 0x32) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0) preadv(r9, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/23, 0x17}], 0x1, 0x4, 0x7dd3) (async, rerun: 64) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@func={0x6, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x30, 0x2e, 0x5f, 0x61, 0x5f, 0x30]}}, &(0x7f00000002c0)=""/96, 0x2c, 0x60, 0x0, 0x4}, 0x28) (rerun: 64) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x9, 0x0, r9, 0x80000000, '\x00', r7, r10, 0x1, 0x0, 0x2}, 0x50) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newchain={0x34, 0x64, 0x8, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4, 0x9}, {0x9, 0x3}, {0x3, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x9}}]}, 0x34}}, 0x0) 1.84449136s ago: executing program 4 (id=7720): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) close(0x3) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bic', 0x3) close(0x4) 1.630662872s ago: executing program 3 (id=7721): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010001b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b6000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0x2, 0x0, 0x9, 0x1, 0x241}, @jmp={0x5, 0x0, 0x3, 0x1, 0x5, 0xfffffffffffffff0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='syzkaller\x00', 0x8, 0xda, &(0x7f0000000640)=""/218, 0x41100, 0x40, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x20634, r4, 0x9, &(0x7f0000000780)=[r3, r2, r2, r2, r3, r3, r2], &(0x7f00000007c0)=[{0x3, 0x5, 0xf, 0x2}, {0x2, 0x3, 0xb, 0xc}, {0x5, 0x2, 0xe}, {0x3, 0x3, 0xb, 0xa}, {0x1, 0x1, 0x3, 0xb}, {0x2, 0x4, 0x2, 0xb}, {0x1, 0x4, 0x10, 0x5}, {0x0, 0x4, 0x1, 0x3}, {0x2, 0x1, 0xd, 0x8}], 0x10, 0xf6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x0, 0xe, 0x0, &(0x7f0000000140)="9dbaac999f699ddfb8d31cbfee57", 0x0, 0x2f00, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x840) unshare(0x2c020400) write$nci(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="38060100"], 0x4) 1.48078211s ago: executing program 4 (id=7722): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a0f8ff4100000095"], &(0x7f0000000000)='GPL\x00', 0xc, 0x96, &(0x7f00000015c0)=""/150, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x18}, 0x94) 1.334246433s ago: executing program 1 (id=7724): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000040)=0x15, 0x4) sendmsg$netlink(r0, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)={0x10, 0x24, 0x723}, 0x10}], 0x1, 0x0, 0x0, 0x24008015}, 0x0) 1.301733686s ago: executing program 4 (id=7725): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000d0000000000000000000000850000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000001c0)="581f9239658ea95ed371ea3dd361", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 1.176652105s ago: executing program 1 (id=7726): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) (async) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x1, 'bond0\x00', {}, 0xfff8}) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) 1.093771777s ago: executing program 4 (id=7727): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000000000000000001302"], 0x0, 0x56}, 0x20) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r3, 0x400000000000003a, 0x1, 0x0, &(0x7f0000000000)) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001000), r5) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000000c0)={0x18, r6, 0x200, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x8c0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x21, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1a, 0x12, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xce8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x7ff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x8d, &(0x7f0000000200)=""/141, 0x41000, 0x74, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000300)=[r0, r0, r0, r0], &(0x7f0000000340)=[{0x2, 0x4, 0xd, 0x8}, {0x2, 0x4, 0x10, 0x6}, {0x4, 0x4, 0x10, 0x8}], 0x10, 0x400}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002200)={0xffffffffffffffff, 0x20, &(0x7f00000021c0)={&(0x7f0000001100)=""/4096, 0x1000, 0x0, &(0x7f0000002100)=""/192, 0xc0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="b4000000000000007910480000000000710429000000000095000000", @ANYRES16=r6], &(0x7f0000003ff6)='GPL\x00', 0xfffffffe, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, r8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3, 0x19, &(0x7f0000000b80)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) 1.038138585s ago: executing program 1 (id=7728): socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) shutdown(r2, 0x1) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03a0005) unshare(0x2c020400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x80000000, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0x1000a, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x1005, 0x80005, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x80000000, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0x1000a, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x1005, 0x80005, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) socket(0x2, 0x80805, 0x0) (async) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000001d80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000240)={0xffff, 0x1, 0x1, 0x1, r4}, 0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000540)={r4, @in6={{0xa, 0x4e23, 0x0, @loopback, 0xf1}}}, &(0x7f0000000600)=0x84) (async) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000540)={r4, @in6={{0xa, 0x4e23, 0x0, @loopback, 0xf1}}}, &(0x7f0000000600)=0x84) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, 0x0, 0x0, 0x0) (async) sendmmsg$inet(r5, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x1}, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$int_in(0xffffffffffffffff, 0xc8d18aa2428c57fa, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000340)="b9ff0a03076804268c989e14f088a8", 0x0, 0x10500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x28) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000340)="b9ff0a03076804268c989e14f088a8", 0x0, 0x10500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x28) 661.193095ms ago: executing program 1 (id=7729): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010003b15000000000000000000214907", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010067726574617000001800028004001200060003001c00000006000e"], 0x48}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000003340)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="81fc968c8e602f12c08090cca64b50fd3da579fea7cfb7a60842e5ed5f28eb92ce85ff67ae4586173191ea11764930ce6cffa1941eb83e19fd7edaacf94dc7424ea3f5b2c3090b2512c5731decbe5706505f71967d78c85e5dfe539b94b505fd017feaa8cb7ff33abfe523165e9245f5", 0x70}], 0x1, 0x0, 0x0, 0x4040010}], 0x1, 0x4048020) r5 = socket$kcm(0x2, 0x2, 0x0) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f00000002c0)=0x1e, 0x4) (async) r6 = socket(0x10, 0x803, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000080)={@empty, @rand_addr, 0x0}, &(0x7f0000000280)=0xc) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r8) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000047400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x4000) (async) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@ipv6_getnexthop={0x28, 0x6a, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NHA_MASTER={0x8, 0xa, 0x2}, @NHA_OIF={0x8, 0x5, r7}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) (async) sendmsg$inet(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000015) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f0000000580)={{r4, &(0x7f0000000340)='\x00', 0x80101, &(0x7f0000000380)={@_ha_fsid={[0x4]}, {0x2, 0x7, 0x8, 0x9}}, 0x13, &(0x7f0000000400)={@_ha_fsid}, &(0x7f0000000440)=0xfffffffc}, {[0x0, 0x0, 0x4, 0x8]}, 0xfb0, 0x46, &(0x7f0000000480)=""/70}) openat$cgroup_ro(r10, &(0x7f0000000600)='memory.numa_stat\x00', 0x0, 0x0) (async) recvmmsg$unix(r4, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f0000000100)=""/118, 0x76}], 0x2}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001e40)=""/4096, 0x1000}], 0x1}}], 0x2, 0x100, 0x0) (async) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r11, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c) (async) shutdown(r11, 0x2) (async) r12 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r11, 0x84, 0x11, &(0x7f0000000080)={r13, 0x5}, &(0x7f0000000100)=0x8) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80c0}, 0x24000881) (async) socket$nl_generic(0x10, 0x3, 0x10) 528.695468ms ago: executing program 4 (id=7730): bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x10, 0xd, &(0x7f0000000100)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000180)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfce}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a40)={&(0x7f0000001840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x9, [@int={0x5, 0x0, 0x0, 0x1, 0x0, 0x3e, 0x0, 0x43, 0x1}, @enum64={0xe, 0x5, 0x0, 0x13, 0x1, 0x5, [{0xc, 0x0, 0x6}, {0xc, 0x2, 0x721}, {0xd, 0xc, 0x2}, {0xc, 0x1, 0x101}, {0x8, 0x1b, 0xfffff801}]}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x2b, 0x0, 0x7b, 0x4}, @typedef={0x6, 0x0, 0x0, 0x8, 0x1}, @const={0xd, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x5f, 0x5f, 0x5f, 0x2e, 0x0, 0x5f]}}, &(0x7f0000001980)=""/191, 0xa1, 0xbf, 0x0, 0x400}, 0xffffffffffffffcc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x6, 0x4, 0xffd, 0x2}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f0000000ac0)="c876f1c31ef0831156adb791103284ee9082639d20fe5145d5fcefcc79fd468e59053a5fd62c846579af10d9cdc9e540f622eb8ac161d95dca82368b8c06caae9015a30655971c7f0df6b1c67125fb668bb8b47a915183e21633cbe147f276fe29d5c033958ea62e64230816", &(0x7f00000009c0)=""/191}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x53, &(0x7f0000000380)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0xa, 0x4, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x14, 0xf2, 0x1, 0x9, [{@local, 0x9}, {@multicast1}]}]}}, {0x4e20, 0x4e20, 0x1d, 0x0, @opaque="2576f88b5c7d0534cb634d4ec644d97f8039342950"}}}}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$INCFS_IOC_FILL_BLOCKS(r2, 0x80106720, &(0x7f0000003f40)={0x5, &(0x7f0000003e80)=[{0x3, 0x1000, &(0x7f0000002d00)="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", 0x1}, {0x7, 0x18, &(0x7f0000003d00)="393c5ef8d86fc9612663126bb9bef384709449e82ffac9e7"}, {0x7, 0x6a, &(0x7f0000003d40)="0f34e7336e7691e578341567b7b1359d5197cb40d44ee501cd3d26be8b555b4177d5bd3d23f62c3c88571c9da275d31baf4a07ddbc4478ef097a2f6cb58367f08098e895ac4bf5665263c83a17113037f08796b9f8025ab978933358aa2bc8ee2cc1495c94559d3c0cc7", 0x1}, {0x101, 0x3, &(0x7f0000003dc0)="b643ce", 0x0, 0x1}, {0x80000000, 0x71, &(0x7f0000003e00)="ba8ada90dcb5c6d489220ec743d16a6136414e1334ea47c35a2d8b399e7ec5e57e9d5a2452315fe2a88417e8d7bb9670f03d497c2b4098df86160cdc35b9ece44b5a288f05492ae6b77ede8c4292461f74925c46c87d5a663ba17571391fd66bc64686344a70eacd0939861d95b955b4cf", 0x1}]}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x4, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x24, 0x9}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r5, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001c80)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x8, 0x0, 0x0}}, 0x10) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mkdirat$cgroup(r7, &(0x7f0000000080)='syz0\x00', 0x1ff) recvmmsg(r1, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000780)=[{0x0}, {&(0x7f00000001c0)=""/195, 0xc3}], 0x2}, 0x7}], 0x1, 0x2, 0x0) 525.000151ms ago: executing program 3 (id=7731): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b20, &(0x7f0000000040)={'syzkaller0\x00', @local}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), 0x0}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f00000002c0)=r3}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000340)="8ecd25f2", 0x4}], 0x1}, 0x0) recvmsg$unix(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/229, 0x8ec1}], 0x1}, 0x2002) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x8a, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x1a, 0x0, 0x0, 0x0, 0x0, {[@nop, @nop, @nop, @mss={0x2, 0x4, 0x5}, @md5sig={0x13, 0x12, "ab519c9940eb739563a3c52b43aee4a2"}, @sack={0x5, 0x26, [0x3a, 0x6, 0x43, 0x1, 0x8, 0xfa39, 0x8000, 0x8, 0x9]}, @md5sig={0x13, 0x12, "625fbe96fc97dc524d8a397b7b38957f"}]}}}}}}}, 0x0) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x7, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x2b8, 0x2e8, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@loopback, [0x0, 0x0, 0xffffff00, 0xffffff00], @ipv4=@multicast1, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], @ipv4=@private=0xa010100, [0xff, 0xff000000, 0x0, 0xffffff00], @ipv4=@local, [0xff000000, 0x0, 0xff], 0xffffffff, 0x3, 0x3b, 0x4e21, 0x4e23, 0x4e23, 0x4e21, 0x122, 0x300}, 0x1, 0x8f}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x4, 0x2, 0x1000, 0x6, 0x40000003}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="6000000010000d042abd70a0ba414398316739b747557ac42144000000000000000000", @ANYRES64=r2, @ANYBLOB="01000000400000002c0012800c0001006d6163766c616e001c00028008000900020000000800010001000000080003006e"], 0x60}}, 0x8000) getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x89, &(0x7f00000000c0), &(0x7f0000000140)=0x4) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 380.13276ms ago: executing program 1 (id=7732): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x46, 0x0, 0x0) getsockopt$inet6_int(r3, 0x29, 0x46, 0x0, &(0x7f00000012c0)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e24, 0x1536efd, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000400)={r4, @in={{0x2, 0x4e24, @private=0xa010104}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT=r5], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000002c0)={r5, 0x9}, 0x8) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x0, '\x00', 0x4}, 0x18) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000700)={0x0, @in6={{0xa, 0x4e23, 0x3, @empty, 0x7}}}, &(0x7f0000000580)=0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000005c0)={r6, 0xdb06}, &(0x7f0000000600)=0x8) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='freezer.parent_freezing\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000380)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r9, 0x114, 0x3f, &(0x7f00000000c0)=ANY=[], 0x4) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000880)=ANY=[@ANYBLOB="fc000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="ff19513f453cf76c8a1ff378903e9d4ea9eac0d4d916d999213dede15b2170662deb42bb8c", @ANYBLOB="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"], 0xfc}}, 0x0) r10 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r10, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) bind$pptp(r10, &(0x7f00000000c0)={0x18, 0x2, {0x0, @remote}}, 0x1e) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=r0, @ANYRES64=r0, @ANYRES64=r6, @ANYBLOB="e568f0c306de4268d221f61bc6b606a16b5a23659fa1e12c7d3cbf016d1f3f9dabacf5ec3e843ba17d53c0ab70848618d4f3086137a4cdbaa70661179627dedc5767", @ANYRESDEC=r5, @ANYRES8=r7, @ANYRESOCT], 0x48) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000001080)=ANY=[@ANYBLOB="180000000000000000000000feffffff180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000004000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r12, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r13}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r11}, &(0x7f0000000380), &(0x7f0000000400)}, 0x20) 0s ago: executing program 1 (id=7733): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000400)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x0) write$cgroup_pressure(r2, &(0x7f0000000040)={'full', 0x20, 0x5}, 0x2f) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendmmsg$inet6(r1, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c, 0x0}}], 0x1, 0xc040) socket$pppl2tp(0x18, 0x1, 0x1) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000400)="a6c68f1b", 0xfff7}, {0x0}], 0x2) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000002000)=0xe, 0x1) kernel console output (not intermixed with test programs): (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 966.185144][ T618] __nla_validate_parse: 4 callbacks suppressed [ 966.185202][ T618] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6494'. [ 966.263025][ T618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6494'. [ 966.292388][ T430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 966.373931][ T430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 966.390824][ T618] netlink: 'syz.2.6494': attribute type 1 has an invalid length. [ 966.410046][ T430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 966.437068][ T618] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6494'. [ 966.530165][ T430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 966.545874][ T618] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6494'. [ 966.644693][ T618] netlink: 658 bytes leftover after parsing attributes in process `syz.2.6494'. [ 967.099385][ T430] hsr_slave_0: entered promiscuous mode [ 967.124728][ T430] hsr_slave_1: entered promiscuous mode [ 967.150451][ T430] debugfs: 'hsr0' already exists in 'hsr' [ 967.164408][ T638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6500'. [ 967.174726][ T430] Cannot create hsr debugfs directory [ 967.217313][ T637] netlink: 'syz.1.6500': attribute type 4 has an invalid length. [ 967.232300][ T638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6500'. [ 967.267109][ T637] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6500'. [ 967.325266][ T638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 967.381613][ T638] bond1: (slave bond0): making interface the new active one [ 967.407109][ T638] bond1: (slave bond0): Enslaving as an active interface with an up link [ 967.570307][ T637] .`: renamed from bond0 (while UP) [ 967.705743][ T645] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6503'. [ 967.835678][ T649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6503'. [ 967.926438][ T645] netlink: 'syz.3.6503': attribute type 4 has an invalid length. [ 968.077010][ T653] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 968.088039][ T645] .`: renamed from bond0 [ 968.903941][ T430] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 968.984952][ T430] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 969.040562][ T430] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.197069][ T683] tipc: Started in network mode [ 969.229627][ T683] tipc: Node identity ae1188473b0f, cluster identity 4711 [ 969.296679][ T683] tipc: Enabled bearer , priority 0 [ 969.501786][ T705] netlink: 'syz.3.6512': attribute type 1 has an invalid length. [ 969.658789][ T687] syzkaller0: entered promiscuous mode [ 969.710354][ T687] syzkaller0: entered allmulticast mode [ 969.781068][ T687] tipc: Resetting bearer [ 969.867640][ T698] netlink: 'syz.1.6510': attribute type 4 has an invalid length. [ 969.889591][ T695] hsr_slave_1 (unregistering): left promiscuous mode [ 970.409126][T16788] tipc: Resetting bearer [ 970.416716][ T707] 8021q: VLANs not supported on gre0 [ 970.446921][ T705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 970.462136][ T713] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 970.512470][ T714] bond0: (slave geneve2): making interface the new active one [ 970.636878][ T714] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 970.991981][ T747] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 971.013379][ T747] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 971.023577][ T430] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 971.023632][ T430] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 971.023662][ T430] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.128538][ T676] tipc: Resetting bearer [ 974.073223][ T676] tipc: Disabling bearer [ 974.085499][ T7437] tipc: Node number set to 2501806151 [ 974.093436][ T763] __nla_validate_parse: 9 callbacks suppressed [ 974.093453][ T763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6519'. [ 974.281029][ T430] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 974.291517][ T430] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 974.320196][ T430] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.339341][ T6850] lo speed is unknown, defaulting to 1000 [ 974.409511][ T430] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 974.421419][ T430] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 974.432351][ T430] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.642451][ T430] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 974.655532][ T430] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 974.665248][ T430] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 974.677098][ T430] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 974.685432][ T430] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 974.700999][ T430] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 974.709992][ T430] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 974.722312][ T430] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 974.824679][ T430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 974.851212][ T430] 8021q: adding VLAN 0 to HW filter on device team0 [ 974.864876][T16796] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.873111][T16796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 974.893365][T16788] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.901085][T16788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 975.415506][ T430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 975.751963][ T430] veth0_vlan: entered promiscuous mode [ 975.769434][ T430] veth1_vlan: entered promiscuous mode [ 975.820532][ T430] veth0_macvtap: entered promiscuous mode [ 975.831932][ T430] veth1_macvtap: entered promiscuous mode [ 975.855171][ T430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 975.881076][ T430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 975.898095][T16797] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.908553][T16797] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.920227][T16797] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.941538][T16797] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.060492][T14896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 976.069900][T14896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 976.130506][T14896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 976.140015][T14896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.721767][ T856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6532'. [ 985.764823][ T856] sctp: [Deprecated]: syz.3.6532 (pid 856) Use of struct sctp_assoc_value in delayed_ack socket option. [ 985.764823][ T856] Use struct sctp_sack_info instead [ 985.866892][ T860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6532'. [ 985.933690][ T865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6535'. [ 985.972524][ T866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6534'. [ 986.315458][ T866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 986.584332][ T897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6540'. [ 986.935672][ T908] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6541'. [ 987.092538][ T916] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6542'. [ 987.680906][ T941] netlink: 'syz.0.6548': attribute type 11 has an invalid length. [ 987.715158][ T932] netlink: 120 bytes leftover after parsing attributes in process `syz.4.6546'. [ 987.749715][ T944] netlink: 'syz.1.6549': attribute type 1 has an invalid length. [ 987.826883][ T951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6549'. [ 987.838668][ T954] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 987.882879][ T944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 987.982400][ T966] x_tables: duplicate underflow at hook 1 [ 988.090448][ T968] netlink: 'syz.0.6553': attribute type 1 has an invalid length. [ 988.199842][ T970] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6553'. [ 988.231187][ T968] bond0: entered promiscuous mode [ 988.247041][ T968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 988.264074][ T970] bond0: entered allmulticast mode [ 988.344042][ T968] bond0: (slave bridge2): making interface the new active one [ 988.358033][ T968] bridge2: entered promiscuous mode [ 988.364435][ T970] sctp: [Deprecated]: syz.0.6553 (pid 970) Use of struct sctp_assoc_value in delayed_ack socket option. [ 988.364435][ T970] Use struct sctp_sack_info instead [ 988.364455][ T968] bridge2: entered allmulticast mode [ 988.407523][ T968] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 988.451872][ T978] veth0_to_bond: default FDB implementation only supports local addresses [ 988.466163][ T968] netlink: 'syz.0.6553': attribute type 3 has an invalid length. [ 988.938503][ T994] Bluetooth: MGMT ver 1.23 [ 989.165870][ T1003] hsr_slave_0: left promiscuous mode [ 989.175098][ T1003] hsr_slave_1: left promiscuous mode [ 989.413431][ T1005] netlink: 'syz.3.6562': attribute type 1 has an invalid length. [ 989.942748][ T5631] Bluetooth: hci1: command tx timeout [ 992.821302][ T1005] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 992.950621][ T1019] lo speed is unknown, defaulting to 1000 [ 993.004562][ T1315] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 993.298626][ T1039] netlink: 'syz.2.6569': attribute type 4 has an invalid length. [ 993.337189][ T1039] __nla_validate_parse: 5 callbacks suppressed [ 993.337225][ T1039] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6569'. [ 993.444832][ T1032] 8021q: adding VLAN 0 to HW filter on device bond2 [ 993.502047][ T1044] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6572'. [ 993.545636][ T1039] .`: renamed from bond0 (while UP) [ 993.606391][ T1044] vlan3: entered promiscuous mode [ 993.625497][ T1051] netlink: 'syz.1.6572': attribute type 15 has an invalid length. [ 993.647526][ T1044] bridge0: entered promiscuous mode [ 993.691384][ T1053] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 993.702003][ T1053] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 993.736695][ T1053] bridge0: port 3(syz_tun) entered blocking state [ 993.761502][ T1053] bridge0: port 3(syz_tun) entered disabled state [ 993.804645][ T1053] syz_tun: entered allmulticast mode [ 993.903639][ T1053] syz_tun: entered promiscuous mode [ 993.928041][ T1053] bridge0: port 3(syz_tun) entered blocking state [ 993.934695][ T1053] bridge0: port 3(syz_tun) entered forwarding state [ 993.972973][ T1019] lo speed is unknown, defaulting to 1000 [ 994.175517][ T1076] Cannot find set identified by id 65534 to match [ 994.200283][ T1076] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6577'. [ 994.222190][ T1076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6577'. [ 994.304222][ T1076] netlink: 'syz.4.6577': attribute type 1 has an invalid length. [ 994.318000][ T1083] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input9 [ 994.324066][ T1076] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6577'. [ 994.356060][ T1076] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6577'. [ 994.365150][ T1076] netlink: 658 bytes leftover after parsing attributes in process `syz.4.6577'. [ 994.682881][ T1096] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6580'. [ 994.726127][ T1096] netlink: 35 bytes leftover after parsing attributes in process `syz.1.6580'. [ 994.767770][ T1093] syzkaller0: entered promiscuous mode [ 994.803471][ T1093] syzkaller0: entered allmulticast mode [ 995.196472][ T1111] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6583'. [ 995.583512][ T1124] bridge0: port 1(dummy0) entered blocking state [ 995.590085][ T1124] bridge0: port 1(dummy0) entered forwarding state [ 995.635027][ T1124] 8021q: adding VLAN 0 to HW filter on device .` [ 995.648316][ T1124] 8021q: adding VLAN 0 to HW filter on device team0 [ 995.663487][ T1124] 8021q: adding VLAN 0 to HW filter on device 60ªX¹¦À [ 995.802052][ T1124] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 995.831321][ T1124] veth1_vlan: left promiscuous mode [ 995.847496][ T1124] veth0_vlan: left promiscuous mode [ 995.862333][ T1124] veth0_vlan: entered promiscuous mode [ 995.886998][ T1124] veth1_vlan: entered promiscuous mode [ 995.908043][ T1124] veth1_macvtap: left promiscuous mode [ 995.922818][ T1124] veth0_macvtap: left promiscuous mode [ 995.937407][ T1124] veth0_macvtap: entered promiscuous mode [ 995.959354][ T1124] veth1_macvtap: entered promiscuous mode [ 995.974022][ T1124] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 996.015747][ T1124] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 996.054382][ T1124] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 996.100804][ T1124] 8021q: adding VLAN 0 to HW filter on device bond1 [ 996.196292][ T1144] Cannot find set identified by id 65534 to match [ 996.288272][ T1124] 8021q: adding VLAN 0 to HW filter on device bond2 [ 996.295306][ T1145] netlink: 'syz.4.6591': attribute type 1 has an invalid length. [ 996.314434][ T6855] lo speed is unknown, defaulting to 1000 [ 996.322631][ T6855] syú2: Port: 1 Link ACTIVE [ 996.742023][ T5734] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 996.757786][ T1147] syzkaller0: entered promiscuous mode [ 996.763309][ T1147] syzkaller0: entered allmulticast mode [ 996.785211][ T1147] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 997.120619][T16798] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 997.185560][ T1182] netlink: 'syz.0.6599': attribute type 15 has an invalid length. [ 997.216626][ T6850] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 997.502590][ T1192] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 997.602658][ T1192] bond1: option lacp_active: invalid value (8) [ 998.046960][ T1192] bond1 (unregistering): Released all slaves [ 998.228581][ T1210] netlink: 'syz.1.6603': attribute type 19 has an invalid length. [ 998.289554][T14890] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 998.299821][ T1210] netlink: 'syz.1.6603': attribute type 20 has an invalid length. [ 998.335116][T14890] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 998.612339][ T1216] Cannot find set identified by id 65534 to match [ 998.635442][ T1216] __nla_validate_parse: 10 callbacks suppressed [ 998.635478][ T1216] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6604'. [ 998.671361][ T1220] xt_hashlimit: size too large, truncated to 1048576 [ 998.699216][ T1216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6604'. [ 998.736691][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 998.863300][ T1223] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6607'. [ 998.882179][ T1216] netlink: 'syz.2.6604': attribute type 1 has an invalid length. [ 998.916069][ T1216] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6604'. [ 998.935905][ T1232] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6607'. [ 998.947492][ T1216] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6604'. [ 998.961900][ T1232] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 998.979807][ T1216] netlink: 658 bytes leftover after parsing attributes in process `syz.2.6604'. [ 999.058493][ T6850] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 999.073831][ T1234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6609'. [ 999.111260][ T1234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6609'. [ 999.272144][ T1241] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 999.355377][ T1241] geneve0: entered promiscuous mode [ 999.407387][ T1241] geneve0: left promiscuous mode [ 999.483222][ T1248] tipc: Enabled bearer , priority 0 [ 999.492899][ T1249] syzkaller0: entered promiscuous mode [ 999.509809][ T1249] syzkaller0: entered allmulticast mode [ 999.604376][ T1243] tipc: Resetting bearer [ 999.668840][ T1240] tipc: Resetting bearer [ 999.851263][ T1240] tipc: Disabling bearer [ 999.873813][ T1263] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 999.889312][ T1254] syzkaller0: entered promiscuous mode [ 999.899477][ T1254] syzkaller0: entered allmulticast mode [ 999.917853][ T1265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6618'. [ 999.971626][ T1264] tipc: Started in network mode [ 999.994515][ T1264] tipc: Node identity cad090bac575, cluster identity 4711 [ 1000.014111][ T1264] tipc: Enabled bearer , priority 0 [ 1000.098488][ T1267] syzkaller0: entered promiscuous mode [ 1000.106687][ T1267] syzkaller0: entered allmulticast mode [ 1000.114081][ T1264] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1000.165881][ T1265] lo speed is unknown, defaulting to 1000 [ 1000.184449][ T1264] tipc: Resetting bearer [ 1000.251284][ T1261] tipc: Resetting bearer [ 1000.394861][ T1261] tipc: Disabling bearer [ 1000.481917][ T1284] netlink: 'syz.1.6623': attribute type 1 has an invalid length. [ 1000.614807][ T1284] bond5: entered promiscuous mode [ 1000.620371][ T1284] bond5: entered allmulticast mode [ 1000.626524][ T1284] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1000.634232][ T1294] Cannot find set identified by id 65534 to match [ 1000.643792][ T1292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1000.692719][ T1294] netlink: 'syz.2.6622': attribute type 1 has an invalid length. [ 1000.889056][ T1299] bond0: (slave veth1_to_bond): Device is not bonding slave [ 1000.923795][ T1303] netlink: 'syz.2.6628': attribute type 4 has an invalid length. [ 1000.945684][ T1299] bond0: option active_slave: invalid value (veth1_to_bond) [ 1000.973637][ T1302] bond0: (slave veth1_to_bond): Device is not bonding slave [ 1000.984006][ T1302] bond0: option active_slave: invalid value (veth1_to_bond) [ 1000.992445][ T1307] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1001.117625][ T1265] lo speed is unknown, defaulting to 1000 [ 1001.160925][ T1310] syzkaller0: entered promiscuous mode [ 1001.169754][ T1310] syzkaller0: entered allmulticast mode [ 1001.917980][ T1339] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.256156][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1003.256287][ T1384] netlink: 'syz.4.6646': attribute type 1 has an invalid length. [ 1003.364700][ T1384] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1003.540721][ T1387] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1003.594055][ T1387] bond1: (slave batadv1): making interface the new active one [ 1003.630437][ T1387] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 1003.673552][ T1393] netlink: 'syz.3.6648': attribute type 1 has an invalid length. [ 1003.693659][ T1393] netlink: 'syz.3.6648': attribute type 2 has an invalid length. [ 1004.131454][ T1414] __nla_validate_parse: 16 callbacks suppressed [ 1004.131477][ T1414] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6653'. [ 1004.194119][ T1367] netlink: 'syz.1.6641': attribute type 11 has an invalid length. [ 1004.973403][ T1430] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1005.002233][ T5293] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1005.252474][ T1412] syzkaller1: entered promiscuous mode [ 1005.292763][ T1412] syzkaller1: entered allmulticast mode [ 1005.310205][ T1441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6657'. [ 1005.393101][ T1441] gretap1: entered allmulticast mode [ 1005.493687][ T1447] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6658'. [ 1005.802057][ T1453] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6661'. [ 1005.908479][ T1453] netlink: 'syz.2.6661': attribute type 12 has an invalid length. [ 1005.941361][ T1453] netlink: 'syz.2.6661': attribute type 29 has an invalid length. [ 1005.969287][ T1453] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6661'. [ 1006.320433][ T1470] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6666'. [ 1006.356523][ T1470] netlink: 7 bytes leftover after parsing attributes in process `syz.3.6666'. [ 1006.504715][ T1478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6668'. [ 1007.478029][ T1482] netlink: 'syz.4.6669': attribute type 11 has an invalid length. [ 1007.738732][ T1518] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6678'. [ 1008.017368][ T1522] tipc: Enabled bearer , priority 0 [ 1008.049492][ T1522] syzkaller0: entered promiscuous mode [ 1008.072344][ T1522] syzkaller0: entered allmulticast mode [ 1008.108084][ T1522] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1008.257895][ T1522] tipc: Resetting bearer [ 1008.333394][ T1521] tipc: Resetting bearer [ 1008.441860][ T1521] tipc: Disabling bearer [ 1008.826618][ T1553] syzkaller0: entered promiscuous mode [ 1008.845705][ T1553] syzkaller0: entered allmulticast mode [ 1009.011259][ T1560] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1009.128720][ T1571] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6692'. [ 1009.737945][ T1591] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6697'. [ 1009.781036][ T1590] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6697'. [ 1009.886415][ T1594] syzkaller0: entered promiscuous mode [ 1009.901148][ T1594] syzkaller0: entered allmulticast mode [ 1009.934811][ T1601] Bluetooth: MGMT ver 1.23 [ 1009.939704][ T1594] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.6698'. [ 1010.039015][ T1607] x_tables: unsorted entry at hook 3 [ 1010.257617][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1010.600742][ T1613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6702'. [ 1010.640533][ T1613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6702'. [ 1011.004781][ T1623] syzkaller0: entered promiscuous mode [ 1011.016252][ T1623] syzkaller0: entered allmulticast mode [ 1011.128366][ T1637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6710'. [ 1011.143375][ T1637] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1011.169538][ T1634] tipc: New replicast peer: 255.255.255.255 [ 1011.176043][ T1634] tipc: Enabled bearer , priority 5 [ 1011.197014][ T1634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6709'. [ 1011.243689][ T1632] syzkaller1: entered promiscuous mode [ 1011.260975][ T1632] syzkaller1: entered allmulticast mode [ 1011.282127][ T1634] netlink: 'syz.0.6709': attribute type 1 has an invalid length. [ 1011.342996][ T1639] netlink: 180 bytes leftover after parsing attributes in process `syz.4.6711'. [ 1011.357955][ T1632] tipc: Enabled bearer , priority 0 [ 1011.516890][ T1632] syzkaller0: entered promiscuous mode [ 1011.523260][ T1632] syzkaller0: entered allmulticast mode [ 1011.532383][ T1632] tipc: Resetting bearer [ 1012.161168][T16796] tipc: Resetting bearer [ 1012.193276][ T1632] tipc: Resetting bearer [ 1012.622430][ T1677] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1015.231255][ T1632] tipc: Disabling bearer [ 1015.250126][ T6855] tipc: Node number set to 1003106974 [ 1015.300406][ T5748] tipc: Node number set to 262508730 [ 1015.450186][ T1698] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6723'. [ 1015.765231][ T1705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6726'. [ 1015.807576][ T30] audit: type=1804 audit(1780383675.298:23): pid=1705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6726" name="/newroot/179/cgroup.controllers" dev="tmpfs" ino=938 res=1 errno=0 [ 1015.890050][ T30] audit: type=1800 audit(1780383675.298:24): pid=1705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6726" name="cgroup.controllers" dev="tmpfs" ino=938 res=0 errno=0 [ 1016.003124][ T30] audit: type=1804 audit(1780383675.418:25): pid=1705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.6726" name="/newroot/179/cgroup.controllers" dev="tmpfs" ino=938 res=1 errno=0 [ 1016.628824][ T1742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6734'. [ 1016.669134][ T1743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6736'. [ 1016.681647][ T1742] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1016.924006][ T1751] syzkaller0: entered promiscuous mode [ 1016.952717][ T1751] syzkaller0: entered allmulticast mode [ 1017.540215][ T1773] syzkaller0: entered promiscuous mode [ 1017.545832][ T1773] syzkaller0: entered allmulticast mode [ 1017.781919][ T1780] bond6: option lp_interval: invalid value (0) [ 1017.795459][ T1780] bond6: option lp_interval: allowed values 1 - 2147483647 [ 1017.816556][ T1780] bond6 (unregistering): Released all slaves [ 1018.747998][ T1790] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6746'. [ 1019.012400][ T1795] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6748'. [ 1020.054017][ T1762] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1020.460761][ T1809] syzkaller0: entered promiscuous mode [ 1020.485635][ T1809] syzkaller0: entered allmulticast mode [ 1020.624115][ T1814] netlink: 'syz.3.6754': attribute type 14 has an invalid length. [ 1020.951158][ T1831] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6758'. [ 1021.082822][ T1831] syzkaller0: entered promiscuous mode [ 1021.106787][ T1831] syzkaller0: entered allmulticast mode [ 1021.152713][ T1831] syzkaller0: tun_net_xmit 14 [ 1021.287569][T14896] syzkaller0: tun_net_xmit 70 [ 1021.898716][ T1854] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.042952][ T1829] netlink: 'syz.1.6757': attribute type 11 has an invalid length. [ 1022.300598][ T1863] syzkaller0: entered promiscuous mode [ 1022.319432][ T1863] syzkaller0: entered allmulticast mode [ 1022.444304][ T1854] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.550688][ T1879] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6770'. [ 1022.661610][ T1854] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.833611][ T1854] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.215756][ T1903] x_tables: duplicate underflow at hook 2 [ 1023.241429][ T1903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6777'. [ 1023.268595][T16798] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.318362][T16798] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.402445][T16798] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.478141][T16798] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.492828][ T1911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6780'. [ 1023.735769][ T1918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6782'. [ 1023.748048][ T1918] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6782'. [ 1023.758668][ T1918] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6782'. [ 1023.781069][ T1918] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6782'. [ 1023.813427][ T1918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6782'. [ 1023.832089][ T1918] bridge0: port 2(bridge_slave_1) entered disabled state [ 1023.841867][ T1918] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.972688][ T1929] syzkaller0: entered promiscuous mode [ 1023.979402][ T1929] syzkaller0: entered allmulticast mode [ 1024.422962][ T1951] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6791'. [ 1024.453699][ T1951] netlink: 'syz.0.6791': attribute type 7 has an invalid length. [ 1024.479525][ T1951] netlink: 'syz.0.6791': attribute type 8 has an invalid length. [ 1024.587196][ T1951] erspan0: entered promiscuous mode [ 1024.607132][ T1951] erspan0: left promiscuous mode [ 1024.821958][ T1959] x_tables: duplicate underflow at hook 2 [ 1024.927601][ T1969] netlink: 'syz.3.6795': attribute type 10 has an invalid length. [ 1024.995373][ T1969] .`: (slave dummy0): Enslaving as an active interface with an up link [ 1025.248273][ T1960] lo speed is unknown, defaulting to 1000 [ 1025.405814][ T1978] netlink: 'syz.3.6799': attribute type 1 has an invalid length. [ 1025.616910][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1025.864464][ T1982] syzkaller0: entered promiscuous mode [ 1025.883348][ T1982] syzkaller0: entered allmulticast mode [ 1026.154274][ T1960] lo speed is unknown, defaulting to 1000 [ 1026.366945][ T1988] __nla_validate_parse: 3 callbacks suppressed [ 1026.366983][ T1988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6803'. [ 1026.400295][ T1993] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1026.569759][ T1997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6806'. [ 1026.823387][ T2006] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6807'. [ 1027.634834][ T2021] netlink: 'syz.0.6812': attribute type 1 has an invalid length. [ 1027.791284][ T2021] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1027.898512][ T2031] netlink: 'syz.1.6813': attribute type 3 has an invalid length. [ 1027.914881][ T2031] netlink: 'syz.1.6813': attribute type 3 has an invalid length. [ 1028.116750][ T2040] netlink: 'syz.0.6816': attribute type 1 has an invalid length. [ 1028.146336][ T2040] netlink: 'syz.0.6816': attribute type 11 has an invalid length. [ 1028.175410][ T2040] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6816'. [ 1028.543436][ T2055] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6820'. [ 1028.662336][ T2055] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input10 [ 1030.014515][ T2079] tipc: MTU too low for tipc bearer [ 1030.062207][ T2083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6824'. [ 1030.096604][ T2083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6824'. [ 1030.144809][ T2087] netlink: 'syz.1.6827': attribute type 10 has an invalid length. [ 1030.158817][ T2088] netlink: 'syz.3.6824': attribute type 4 has an invalid length. [ 1030.174542][ T2088] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6824'. [ 1030.269117][ T2083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1030.332420][ T2092] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6829'. [ 1030.359691][ T2083] bond1: (slave bond0): making interface the new active one [ 1030.373674][ T2083] bond1: (slave bond0): Enslaving as an active interface with an up link [ 1030.467510][ T2087] team0 (unregistering): Port device bridge1 removed [ 1030.515699][ T2087] team0 (unregistering): Port device bridge2 removed [ 1030.873973][ T2105] atomic_op ffff888067e32198 conn xmit_atomic 0000000000000000 [ 1030.896599][ T5631] Bluetooth: hci5: command 0x0406 tx timeout [ 1030.929444][ T2105] netlink: 'syz.1.6832': attribute type 10 has an invalid length. [ 1031.057516][ T2110] netlink: 'syz.3.6835': attribute type 1 has an invalid length. [ 1031.258970][ T2110] bond2: entered promiscuous mode [ 1031.279989][ T2110] bond2: entered allmulticast mode [ 1031.287110][ T2110] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1031.578957][ T2130] netlink: 'syz.3.6839': attribute type 4 has an invalid length. [ 1032.036436][ T2144] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1032.065632][ T2144] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1032.148801][ T2152] netlink: 'syz.3.6846': attribute type 11 has an invalid length. [ 1032.857407][ T2176] Cannot find set identified by id 65534 to match [ 1032.912482][ T2176] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6852'. [ 1032.931231][ T2176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6852'. [ 1032.942390][ T2167] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 1032.955583][ T2181] bond6: option all_slaves_active: invalid value (124) [ 1033.019033][ T2175] validate_nla: 1 callbacks suppressed [ 1033.019076][ T2175] netlink: 'syz.3.6852': attribute type 1 has an invalid length. [ 1033.036560][ T2175] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6852'. [ 1033.070385][ T2175] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6852'. [ 1033.105330][ T2175] netlink: 658 bytes leftover after parsing attributes in process `syz.3.6852'. [ 1033.128551][ T2184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6856'. [ 1033.194655][ T2188] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6855'. [ 1033.298260][ T2193] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1033.371738][ T2195] netlink: 'syz.3.6858': attribute type 9 has an invalid length. [ 1033.380158][ T2195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6858'. [ 1033.424302][ T2195] erspan0: entered promiscuous mode [ 1033.450954][ T2195] macvlan2: entered promiscuous mode [ 1033.465487][ T2195] macvlan2: entered allmulticast mode [ 1033.487043][ T2195] erspan0: entered allmulticast mode [ 1033.590448][ T2201] netlink: 'syz.4.6862': attribute type 1 has an invalid length. [ 1033.891134][ T2201] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1033.909229][ T2207] sch_fq: defrate 4294967293 ignored. [ 1033.945691][ T2211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6863'. [ 1033.965343][ T2211] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6863'. [ 1033.985100][ T2211] netlink: 'syz.3.6863': attribute type 6 has an invalid length. [ 1034.311330][ T2229] Cannot find set identified by id 65534 to match [ 1034.325607][ T2234] netlink: 'syz.1.6871': attribute type 30 has an invalid length. [ 1034.411737][ T2241] netlink: 'syz.4.6868': attribute type 1 has an invalid length. [ 1034.595438][ T2240] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1034.627106][ T2245] netlink: 'syz.2.6874': attribute type 12 has an invalid length. [ 1034.640096][ T2245] netlink: 'syz.2.6874': attribute type 13 has an invalid length. [ 1034.763546][ T2247] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1034.857658][ T2252] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1034.866960][ T2253] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1035.221059][ T2270] FAULT_INJECTION: forcing a failure. [ 1035.221059][ T2270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1035.239188][ T2270] CPU: 0 UID: 0 PID: 2270 Comm: syz.3.6882 Not tainted syzkaller #0 PREEMPT(full) [ 1035.239215][ T2270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1035.239228][ T2270] Call Trace: [ 1035.239236][ T2270] [ 1035.239245][ T2270] dump_stack_lvl+0xe8/0x150 [ 1035.239273][ T2270] should_fail_ex+0x412/0x560 [ 1035.239302][ T2270] _copy_to_user+0x31/0xb0 [ 1035.239331][ T2270] simple_read_from_buffer+0xe1/0x170 [ 1035.239364][ T2270] proc_fail_nth_read+0x1bb/0x230 [ 1035.239394][ T2270] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1035.239424][ T2270] ? rw_verify_area+0x2a6/0x4d0 [ 1035.239452][ T2270] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1035.239480][ T2270] vfs_read+0x20c/0xa70 [ 1035.239513][ T2270] ? __pfx___mutex_lock+0x10/0x10 [ 1035.239537][ T2270] ? __pfx_vfs_read+0x10/0x10 [ 1035.239568][ T2270] ? __fget_files+0x2a/0x420 [ 1035.239597][ T2270] ? __fget_files+0x3a0/0x420 [ 1035.239621][ T2270] ? __fget_files+0x2a/0x420 [ 1035.239656][ T2270] ksys_read+0x150/0x270 [ 1035.239688][ T2270] ? __pfx_ksys_read+0x10/0x10 [ 1035.239726][ T2270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.239749][ T2270] do_syscall_64+0x174/0x580 [ 1035.239771][ T2270] ? clear_bhb_loop+0x40/0x90 [ 1035.239796][ T2270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.239816][ T2270] RIP: 0033:0x7fbeb135d68e [ 1035.239864][ T2270] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1035.239896][ T2270] RSP: 002b:00007fbeb22a7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1035.239916][ T2270] RAX: ffffffffffffffda RBX: 00007fbeb22a86c0 RCX: 00007fbeb135d68e [ 1035.239931][ T2270] RDX: 000000000000000f RSI: 00007fbeb22a80a0 RDI: 0000000000000009 [ 1035.239944][ T2270] RBP: 00007fbeb22a8090 R08: 0000000000000000 R09: 0000000000000000 [ 1035.239956][ T2270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1035.239967][ T2270] R13: 00007fbeb1616038 R14: 00007fbeb1615fa0 R15: 00007ffc14f90308 [ 1035.240000][ T2270] [ 1035.508580][ T2271] netlink: 'syz.0.6880': attribute type 3 has an invalid length. [ 1035.723898][ T2280] netlink: 'syz.3.6884': attribute type 1 has an invalid length. [ 1036.018396][ T2283] bond3: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 1036.142569][ T2280] veth3: entered promiscuous mode [ 1036.150964][ T2280] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 1036.160608][ T2300] Cannot find set identified by id 65534 to match [ 1036.177721][ T2283] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1036.197152][ T186] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1036.356383][T14896] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1037.544007][ T30] audit: type=1804 audit(1780383697.018:26): pid=2366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.6908" name="/newroot/117/cgroup.controllers" dev="tmpfs" ino=616 res=1 errno=0 [ 1037.588602][ T2366] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20002 [ 1037.596018][ T5748] IPVS: starting estimator thread 0... [ 1037.596061][ T30] audit: type=1800 audit(1780383697.018:27): pid=2366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6908" name="cgroup.controllers" dev="tmpfs" ino=616 res=0 errno=0 [ 1037.666231][ T2369] sch_tbf: burst 4095 is lower than device lo mtu (65550) ! [ 1037.736656][ T2367] IPVS: using max 33 ests per chain, 79200 per kthread [ 1038.328196][T30008] Bluetooth: hci1: link tx timeout [ 1038.338968][T30008] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1038.373950][ T5631] Bluetooth: hci1: link tx timeout [ 1038.379142][ T5631] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1038.516165][ T5631] Bluetooth: hci3: command tx timeout [ 1038.619711][ T2394] __nla_validate_parse: 29 callbacks suppressed [ 1038.619734][ T2394] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6916'. [ 1038.755607][ T2407] validate_nla: 2 callbacks suppressed [ 1038.755629][ T2407] netlink: 'syz.3.6921': attribute type 1 has an invalid length. [ 1038.770662][ T2407] netlink: 'syz.3.6921': attribute type 2 has an invalid length. [ 1038.903371][ T2408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6917'. [ 1039.034899][ T2410] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 1039.110343][ T2415] veth*_macvtap: renamed from veth0_vlan (while UP) [ 1039.651800][ T2447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6929'. [ 1039.696329][ T2453] netlink: 'syz.0.6930': attribute type 4 has an invalid length. [ 1039.704373][ T2453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6930'. [ 1039.747185][ T2447] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1040.022720][ T2459] Bluetooth: MGMT ver 1.23 [ 1040.071397][ T2467] mac80211_hwsim hwsim100 ªªªªª;: renamed from wlan0 (while UP) [ 1040.094043][ T2467] syz.1.6933: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1040.108758][ T2467] CPU: 0 UID: 0 PID: 2467 Comm: syz.1.6933 Not tainted syzkaller #0 PREEMPT(full) [ 1040.108786][ T2467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1040.108799][ T2467] Call Trace: [ 1040.108808][ T2467] [ 1040.108816][ T2467] dump_stack_lvl+0xe8/0x150 [ 1040.108853][ T2467] warn_alloc+0x249/0x340 [ 1040.108886][ T2467] ? stack_trace_save+0xa9/0x100 [ 1040.108923][ T2467] ? __pfx_warn_alloc+0x10/0x10 [ 1040.108964][ T2467] ? kasan_save_track+0x4f/0x80 [ 1040.108991][ T2467] ? kasan_save_track+0x3e/0x80 [ 1040.109017][ T2467] ? __kasan_kmalloc+0x93/0xb0 [ 1040.109046][ T2467] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1040.109074][ T2467] ? xskq_create+0x56/0x170 [ 1040.109104][ T2467] ? xsk_setsockopt+0x54c/0x990 [ 1040.109131][ T2467] ? do_sock_setsockopt+0x17c/0x1b0 [ 1040.109152][ T2467] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1040.109173][ T2467] ? do_syscall_64+0x174/0x580 [ 1040.109200][ T2467] __vmalloc_node_range_noprof+0x132/0x1750 [ 1040.109265][ T2467] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1040.109303][ T2467] ? __kasan_kmalloc+0x93/0xb0 [ 1040.109341][ T2467] vmalloc_user_noprof+0xad/0xe0 [ 1040.109372][ T2467] ? xskq_create+0xbf/0x170 [ 1040.109403][ T2467] xskq_create+0xbf/0x170 [ 1040.109437][ T2467] xsk_init_queue+0x8a/0xe0 [ 1040.109469][ T2467] xsk_setsockopt+0x54c/0x990 [ 1040.109501][ T2467] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1040.109531][ T2467] ? __pfx_aa_sk_perm+0x10/0x10 [ 1040.109564][ T2467] ? aa_sock_opt_perm+0xff/0x1a0 [ 1040.109599][ T2467] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1040.109627][ T2467] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1040.109656][ T2467] do_sock_setsockopt+0x17c/0x1b0 [ 1040.109685][ T2467] __x64_sys_setsockopt+0x13d/0x1b0 [ 1040.109710][ T2467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.109734][ T2467] do_syscall_64+0x174/0x580 [ 1040.109754][ T2467] ? trace_irq_disable+0x3b/0x140 [ 1040.109806][ T2467] ? clear_bhb_loop+0x40/0x90 [ 1040.109831][ T2467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.109879][ T2467] RIP: 0033:0x7f71da99ce59 [ 1040.109899][ T2467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1040.109918][ T2467] RSP: 002b:00007f71db7f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1040.109939][ T2467] RAX: ffffffffffffffda RBX: 00007f71dac15fa0 RCX: 00007f71da99ce59 [ 1040.109954][ T2467] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 1040.109967][ T2467] RBP: 00007f71daa32d6f R08: 0000000000000004 R09: 0000000000000000 [ 1040.109979][ T2467] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1040.109993][ T2467] R13: 00007f71dac16038 R14: 00007f71dac15fa0 R15: 00007ffd63b5b648 [ 1040.110027][ T2467] [ 1040.110035][ T2467] Mem-Info: [ 1040.437184][ T2467] active_anon:6182 inactive_anon:0 isolated_anon:0 [ 1040.437184][ T2467] active_file:3695 inactive_file:40341 isolated_file:0 [ 1040.437184][ T2467] unevictable:768 dirty:194 writeback:0 [ 1040.437184][ T2467] slab_reclaimable:12850 slab_unreclaimable:160773 [ 1040.437184][ T2467] mapped:30240 shmem:1297 pagetables:1919 [ 1040.437184][ T2467] sec_pagetables:0 bounce:0 [ 1040.437184][ T2467] kernel_misc_reclaimable:0 [ 1040.437184][ T2467] free:1237729 free_pcp:27507 free_cma:0 [ 1040.497302][ T5631] Bluetooth: hci1: command 0x0405 tx timeout [ 1040.532161][ T2467] Node 0 active_anon:24828kB inactive_anon:0kB active_file:14780kB inactive_file:161160kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:37640kB dirty:776kB writeback:0kB shmem:3652kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16956kB pagetables:7744kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1040.566652][ T2467] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:85920kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1040.612514][T30008] Bluetooth: hci3: command tx timeout [ 1040.724462][ T2488] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6936'. [ 1040.728606][ T2467] Node 0 DMA free:11236kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:0kB free_cma:0kB [ 1040.763416][ T2467] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1040.769239][ T2467] Node 0 DMA32 free:1294404kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25028kB inactive_anon:0kB active_file:14780kB inactive_file:161160kB unevictable:1536kB writepending:776kB zspages:0kB present:3129332kB managed:2552608kB mlocked:0kB bounce:0kB free_pcp:49628kB local_pcp:22680kB free_cma:0kB [ 1040.802581][ T2467] lowmem_reserve[]: 0 0 0 0 0 [ 1040.841658][ T2476] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 1040.886279][ T2467] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1040.915571][ T2467] lowmem_reserve[]: 0 0 0 0 0 [ 1040.920342][ T2467] Node 1 Normal free:3645276kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:60848kB local_pcp:28800kB free_cma:0kB [ 1041.011819][ T2467] lowmem_reserve[]: 0 0 0 0 0 [ 1041.018588][ T2467] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11236kB [ 1041.110382][ T2467] Node 0 DMA32: 10888*4kB (UME) 8724*8kB (UME) 5500*16kB (UME) 762*32kB (UME) 863*64kB (UME) 994*128kB (UME) 600*256kB (UME) 405*512kB (UME) 276*1024kB (UE) 120*2048kB (UME) 0*4096kB = 1297536kB [ 1041.129737][ T2467] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1041.174567][ T2467] Node 1 Normal: 6*4kB (U) 10*8kB (UM) 5*16kB (UM) 13*32kB (UM) 20*64kB (UM) 14*128kB (UM) 16*256kB (UM) 13*512kB (UM) 10*1024kB (UM) 8*2048kB (U) 880*4096kB (UM) = 3645528kB [ 1041.276507][ T2467] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1041.286138][ T2467] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1041.295472][ T2467] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1041.305049][ T2467] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1041.391047][ T2467] 45331 total pagecache pages [ 1041.395800][ T2467] 0 pages in swap cache [ 1041.399987][ T2467] Free swap = 124996kB [ 1041.404155][ T2467] Total swap = 124996kB [ 1041.408334][ T2467] 2097051 pages RAM [ 1041.412161][ T2467] 0 pages HighMem/MovableOnly [ 1041.416876][ T2467] 427116 pages reserved [ 1041.421061][ T2467] 0 pages cma reserved [ 1041.936772][ T2549] netlink: 'syz.2.6945': attribute type 2 has an invalid length. [ 1041.976028][ T2548] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6947'. [ 1042.048580][ T2557] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6948'. [ 1042.496435][ T2571] syzkaller0: entered promiscuous mode [ 1042.501990][ T2571] syzkaller0: entered allmulticast mode [ 1042.884063][ T2598] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6955'. [ 1043.158605][ T2612] .`: (slave dummy0): Releasing backup interface [ 1043.203633][ T2612] batman_adv: batadv0: Adding interface: dummy0 [ 1043.224073][ T2612] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1043.325732][ T2612] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1043.771532][ T2639] netlink: 'syz.4.6962': attribute type 9 has an invalid length. [ 1043.849487][ T2644] netlink: 1548 bytes leftover after parsing attributes in process `syz.3.6963'. [ 1044.150318][ T2671] netlink: 'syz.0.6970': attribute type 12 has an invalid length. [ 1044.158304][ T2671] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6970'. [ 1044.411406][ T2680] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6973'. [ 1044.608734][ T2692] macsec1: entered promiscuous mode [ 1044.616492][ T2692] macsec1: entered allmulticast mode [ 1044.628082][ T2692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6975'. [ 1044.753277][ T2692] bond7: option miimon: invalid value (18446744073709551607) [ 1044.760735][ T2692] bond7: option miimon: allowed values 0 - 2147483647 [ 1044.929660][ T2692] bond7 (unregistering): Released all slaves [ 1045.001663][ T2700] macsec1: entered promiscuous mode [ 1045.082341][ T2708] netlink: 1548 bytes leftover after parsing attributes in process `syz.4.6978'. [ 1045.160225][T30008] block nbd5: Receive control failed (result -32) [ 1045.360537][ T2714] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6981'. [ 1045.386198][ T2723] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6983'. [ 1045.447396][ T2723] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1045.485352][ T2728] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1045.529889][ T2727] netlink: 200 bytes leftover after parsing attributes in process `syz.2.6985'. [ 1045.555238][ T2727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6985'. [ 1045.945247][ T2748] IPVS: set_ctl: invalid protocol: 56 172.20.20.23:20003 [ 1046.140314][ T2758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6993'. [ 1046.745767][ T2771] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048) [ 1048.039703][ T2846] only policy match revision 0 supported [ 1048.039726][ T2846] unable to load match [ 1048.272732][ T2856] netlink: 'syz.4.7012': attribute type 1 has an invalid length. [ 1048.380339][ T2864] Cannot find set identified by id 65534 to match [ 1048.396569][ T2872] x_tables: duplicate underflow at hook 3 [ 1048.445605][ T2864] netlink: 'syz.2.7016': attribute type 1 has an invalid length. [ 1048.571320][ T2880] netlink: 'syz.2.7020': attribute type 1 has an invalid length. [ 1048.653033][ T2880] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1048.660405][ T2880] IPv6: NLM_F_CREATE should be set when creating new route [ 1049.203448][ T2918] lo: entered allmulticast mode [ 1049.218478][ T2918] lo: left allmulticast mode [ 1049.417788][ T2922] __nla_validate_parse: 16 callbacks suppressed [ 1049.417821][ T2922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7026'. [ 1049.525378][ T2923] Cannot find set identified by id 65534 to match [ 1049.547791][ T2923] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7029'. [ 1049.578893][ T2923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7029'. [ 1049.605850][ T2925] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7030'. [ 1049.631434][ T2925] netlink: 88 bytes leftover after parsing attributes in process `syz.4.7030'. [ 1049.662642][ T2922] veth0_macvtap: entered allmulticast mode [ 1049.676860][ T2923] netlink: 'syz.3.7029': attribute type 1 has an invalid length. [ 1049.692279][ T2923] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7029'. [ 1049.740302][ T2923] netlink: 1 bytes leftover after parsing attributes in process `syz.3.7029'. [ 1049.771693][ T2923] netlink: 658 bytes leftover after parsing attributes in process `syz.3.7029'. [ 1049.901031][ T2943] gretap0: left promiscuous mode [ 1050.001260][ T2943] 8021q: adding VLAN 0 to HW filter on device .` [ 1050.016991][ T2943] 8021q: adding VLAN 0 to HW filter on device team0 [ 1050.046381][ T2943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1050.643588][ T2943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1050.661078][ T2943] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1050.672227][ T2943] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1050.691341][ T2943] veth1_vlan: left promiscuous mode [ 1050.702246][ T2943] veth0_vlan: left promiscuous mode [ 1050.733441][ T2943] veth0_vlan: entered promiscuous mode [ 1050.749086][ T2943] veth1_vlan: entered promiscuous mode [ 1050.764690][ T2943] veth0_macvtap: left promiscuous mode [ 1050.774000][ T2943] veth0_macvtap: entered promiscuous mode [ 1050.811231][ T2943] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1050.820077][ T2943] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1050.829148][ T2943] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1050.842946][ T2943] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1050.863142][ T2998] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7042'. [ 1050.873019][ T2943] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1050.880682][ T2943] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 1050.907160][ T2951] bridge0: port 1(bridge_slave_0) entered blocking state [ 1050.914328][ T2951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1050.940204][ T2951] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.947495][ T2951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1050.979636][ T3000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7042'. [ 1051.018786][ T3003] netlink: 'syz.0.7043': attribute type 1 has an invalid length. [ 1051.041167][ T2970] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.055080][ T2970] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.115930][ T3000] macvlan2: entered promiscuous mode [ 1051.121301][ T3000] macvlan2: entered allmulticast mode [ 1051.127799][ T3000] bond5: (slave macvlan2): Opening slave failed [ 1051.237092][ T3003] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1051.256954][ T3005] bond9 (unregistering): Released all slaves [ 1051.279059][ T2951] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.309990][ T2951] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.333236][ T3017] Cannot find set identified by id 65534 to match [ 1051.400621][ T3017] netlink: 'syz.1.7045': attribute type 1 has an invalid length. [ 1051.848898][ T3035] syzkaller0: entered promiscuous mode [ 1051.964233][ T3035] syzkaller0: entered allmulticast mode [ 1051.998397][ T3045] tipc: Enabled bearer , priority 0 [ 1052.026986][ T3034] tipc: Resetting bearer [ 1052.095592][ T3034] tipc: Disabling bearer [ 1052.152657][ T3051] netlink: 'syz.0.7060': attribute type 10 has an invalid length. [ 1052.220709][ T3051] team0: Device veth0_vlan is already a lower device of the team interface [ 1052.260843][ T3052] tipc: Enabled bearer , priority 0 [ 1052.273425][ T3052] syzkaller0: entered promiscuous mode [ 1052.279703][ T3052] syzkaller0: entered allmulticast mode [ 1052.528941][ T3052] tipc: Resetting bearer [ 1052.552759][ T3052] xfrm1: entered allmulticast mode [ 1052.622995][ T3061] netlink: 'syz.1.7064': attribute type 61 has an invalid length. [ 1052.659260][ T3061] netlink: 'syz.1.7064': attribute type 136 has an invalid length. [ 1052.705711][ T3050] tipc: Resetting bearer [ 1052.789254][ T3050] tipc: Disabling bearer [ 1053.132245][ T3082] netlink: 'syz.1.7068': attribute type 13 has an invalid length. [ 1053.140129][ T3082] netlink: 'syz.1.7068': attribute type 17 has an invalid length. [ 1053.295218][ T3075] bridge0: port 1(dummy0) entered disabled state [ 1054.534416][ T5748] lo speed is unknown, defaulting to 1000 [ 1054.556219][ T5748] syú2: Port: 1 Link DOWN [ 1054.611564][ T3082] 8021q: adding VLAN 0 to HW filter on device .` [ 1054.619626][ T3082] bridge0: port 1(dummy0) entered blocking state [ 1054.626166][ T3082] bridge0: port 1(dummy0) entered forwarding state [ 1054.637508][ T3082] 8021q: adding VLAN 0 to HW filter on device 60ªX¹¦À [ 1054.681792][ T3082] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1054.704160][ T3082] veth1_vlan: left promiscuous mode [ 1054.711156][ T3082] veth0_vlan: left promiscuous mode [ 1054.717472][ T3082] veth0_vlan: entered promiscuous mode [ 1054.727461][ T3082] veth1_vlan: entered promiscuous mode [ 1054.738216][ T3082] veth1_macvtap: left promiscuous mode [ 1054.744887][ T3082] veth0_macvtap: left promiscuous mode [ 1054.750738][ T3082] veth0_macvtap: left allmulticast mode [ 1054.759713][ T3082] veth0_macvtap: entered promiscuous mode [ 1054.775096][ T3082] veth1_macvtap: entered promiscuous mode [ 1054.787993][ T3082] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1054.801803][ T3082] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1054.813518][ T3082] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1054.830044][ T3082] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1054.845048][ T3082] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1054.917354][ T3082] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1054.927238][ T3082] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1054.936611][ T3082] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1054.947693][ T3082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1054.957333][ T3082] bond5: left promiscuous mode [ 1054.962137][ T3082] bond5: left allmulticast mode [ 1054.967698][ T3082] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1054.979537][ T3082] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1054.996970][ T3082] virt_wifi0: entered promiscuous mode [ 1055.003084][ T3082] virt_wifi0: entered allmulticast mode [ 1055.009499][ T3082] macsec1: left promiscuous mode [ 1055.014643][ T3082] macsec1: left allmulticast mode [ 1055.020972][ T3082] virt_wifi0: left allmulticast mode [ 1055.031782][ T3091] netlink: 'syz.2.7071': attribute type 1 has an invalid length. [ 1055.043705][ T2951] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1055.052397][ T3092] netlink: 'syz.2.7071': attribute type 1 has an invalid length. [ 1055.097366][ T2951] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1055.120490][ T3097] lo speed is unknown, defaulting to 1000 [ 1055.157992][ T3097] syú2: Port: 1 Link ACTIVE [ 1055.273320][ T2951] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1055.395820][ T3130] team0: Port device syz_tun added [ 1055.407281][ T2951] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1055.502417][ T3144] x_tables: unsorted entry at hook 3 [ 1055.699668][ T3163] __nla_validate_parse: 12 callbacks suppressed [ 1055.699687][ T3163] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7086'. [ 1055.739666][ T2958] bond3: (slave ip6gretap2): link status up again after 0 ms [ 1055.762414][ T3165] netlink: 'syz.4.7086': attribute type 15 has an invalid length. [ 1055.772513][ T3165] netlink: 'syz.4.7086': attribute type 1 has an invalid length. [ 1055.786458][ T2958] bond3: (slave ip6gretap2): link status up again after 0 ms [ 1055.797649][ T3165] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7086'. [ 1055.816174][ T2958] bond3: (slave ip6gretap2): link status up again after 0 ms [ 1055.866639][ T2979] bond3: (slave ip6gretap2): link status up again after 0 ms [ 1055.906068][ T2979] bond3: (slave ip6gretap2): link status up again after 0 ms [ 1055.926189][ T2979] bond3: (slave ip6gretap2): link status up again after 0 ms [ 1055.943307][ T3169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7089'. [ 1055.957609][ T2979] bond3: (slave ip6gretap2): link status up again after 0 ms [ 1055.986535][ T2979] bond3: (slave ip6gretap2): link status up again after 0 ms [ 1056.027059][ T2948] bond3: (slave ip6gretap2): link status up again after 0 ms [ 1056.046125][ T2948] bond3: (slave ip6gretap2): link status up again after 0 ms [ 1056.201822][ T3151] bridge0: port 3(syz_tun) entered disabled state [ 1056.234642][ T3151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.242406][ T3151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.292397][ T3176] netlink: 49 bytes leftover after parsing attributes in process `syz.3.7091'. [ 1056.323375][ T3176] netlink: 140 bytes leftover after parsing attributes in process `syz.3.7091'. [ 1056.479001][ T3181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7091'. [ 1056.496668][ T3181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7091'. [ 1056.752407][ T3151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1056.775499][ T3151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1057.277676][ T3163] vlan2: entered promiscuous mode [ 1057.283034][ T3163] bridge0: entered promiscuous mode [ 1057.309075][ T3179] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7091'. [ 1057.318633][ T3179] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7091'. [ 1057.328940][ T3179] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7091'. [ 1057.366915][ T2974] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.432352][ T2974] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.471860][ T2974] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.580567][ T3198] gretap0: entered promiscuous mode [ 1057.773182][ T3206] erspan0: entered promiscuous mode [ 1058.199115][ T3241] netlink: 'syz.0.7105': attribute type 2 has an invalid length. [ 1058.201124][ T30] audit: type=1800 audit(1780383717.688:28): pid=3226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7102" name="r" dev="tmpfs" ino=841 res=0 errno=0 [ 1058.259452][ T3241] netlink: 'syz.0.7105': attribute type 2 has an invalid length. [ 1058.693758][ T3249] tun0: tun_chr_ioctl cmd 1074025675 [ 1058.721520][ T3249] tun0: persist enabled [ 1058.731612][ T3249] tun0: tun_chr_ioctl cmd 1074025675 [ 1058.767359][ T3249] tun0: persist enabled [ 1058.784401][ T3249] tun0: tun_chr_ioctl cmd 1074025673 [ 1059.911127][ T3326] netlink: 'syz.4.7125': attribute type 1 has an invalid length. [ 1060.025478][ T3333] 8021q: VLANs not supported on ipvlan0 [ 1060.099600][ T3336] netlink: 'syz.4.7128': attribute type 1 has an invalid length. [ 1060.159253][ T3336] bond6: entered promiscuous mode [ 1060.165018][ T3336] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1060.190066][ T3341] bridge1: entered promiscuous mode [ 1060.216422][ T3341] bridge1: entered allmulticast mode [ 1060.856846][ T2948] net_ratelimit: 86 callbacks suppressed [ 1060.856864][ T2948] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1060.948591][ T3373] __nla_validate_parse: 15 callbacks suppressed [ 1060.948610][ T3373] netlink: 1548 bytes leftover after parsing attributes in process `syz.3.7139'. [ 1061.041195][ T2974] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1061.168268][ T2974] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1061.203455][ T3384] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7143'. [ 1061.260864][ T3386] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1061.279038][ T3384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7143'. [ 1061.297296][ T2951] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1061.429229][ T3397] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7146'. [ 1061.446700][ T2951] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1061.478562][ T3397] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 1061.535673][ T3398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7147'. [ 1061.589552][ T3398] netlink: 'syz.3.7147': attribute type 30 has an invalid length. [ 1061.594440][ T3400] bond7: option all_slaves_active: invalid value (124) [ 1061.607826][ T3400] bond7 (unregistering): Released all slaves [ 1061.703019][ T2958] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1061.726901][ T2958] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1061.763243][ T2958] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1061.805635][ T2958] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1061.901352][ T3414] netlink: 'syz.1.7151': attribute type 7 has an invalid length. [ 1061.915291][ T3417] tipc: Started in network mode [ 1061.921694][ T3417] tipc: Node identity 128968fce99b, cluster identity 4711 [ 1061.939256][ T3417] tipc: Enabled bearer , priority 0 [ 1061.956131][ T2951] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1062.014766][ T3411] syzkaller0: entered promiscuous mode [ 1062.038619][ T3411] syzkaller0: entered allmulticast mode [ 1062.073156][ T3411] tipc: Resetting bearer [ 1062.090609][ T3410] tipc: Resetting bearer [ 1062.135873][ T3410] tipc: Disabling bearer [ 1062.153879][ T3421] netlink: 1548 bytes leftover after parsing attributes in process `syz.3.7153'. [ 1062.176440][ T2948] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1062.292063][ T3444] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7156'. [ 1062.509265][ T2951] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1062.643462][ T2948] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1062.779799][ T2974] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1062.841526][ T3467] tipc: Enabled bearer , priority 0 [ 1062.849148][ T3467] syzkaller0: entered promiscuous mode [ 1062.860916][ T3467] syzkaller0: entered allmulticast mode [ 1063.421300][ T3480] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7167'. [ 1064.710669][ T3489] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.717961][ T3489] bridge0: port 2(bridge_slave_1) entered listening state [ 1064.725323][ T3489] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.732521][ T3489] bridge0: port 1(bridge_slave_0) entered listening state [ 1065.124847][ T3489] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1065.451035][ T3489] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1065.522152][ T3489] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1065.537410][ T3489] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1065.564311][ T3489] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1065.582628][ T3489] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1065.597633][ T3489] bond6: left promiscuous mode [ 1065.677607][ T3498] tipc: Enabling of bearer rejected, failed to enable media [ 1065.695578][ T3480] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1065.789636][ T3465] tipc: Resetting bearer [ 1065.832471][ T3465] tipc: Disabling bearer [ 1065.888121][ T2948] net_ratelimit: 1 callbacks suppressed [ 1065.888144][ T2948] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1066.076060][ T2974] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1066.168735][ T3532] Cannot find set identified by id 65534 to match [ 1066.197751][ T2948] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1066.318337][ T2974] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1066.394019][ T3545] netlink: 1548 bytes leftover after parsing attributes in process `syz.1.7179'. [ 1066.446914][ T2974] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1066.476537][ T3541] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 1066.592767][ T2948] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1066.726097][ T2948] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1066.856149][T16800] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1066.904254][ T3568] tipc: Enabled bearer , priority 0 [ 1066.939402][ T3568] syzkaller0: entered promiscuous mode [ 1066.986224][ T3568] syzkaller0: entered allmulticast mode [ 1067.040771][ T3577] tipc: Resetting bearer [ 1067.080171][ T3567] tipc: Resetting bearer [ 1067.171369][ T3567] tipc: Disabling bearer [ 1067.245296][ T3590] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7188'. [ 1067.256851][ T2970] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1067.295394][ T3590] netlink: 108 bytes leftover after parsing attributes in process `syz.4.7188'. [ 1067.396309][ T2970] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1067.434226][ T3594] netlink: 1548 bytes leftover after parsing attributes in process `syz.0.7191'. [ 1067.564658][ T3600] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7192'. [ 1067.731086][ T3606] netlink: 'syz.0.7193': attribute type 1 has an invalid length. [ 1067.857298][ T3614] gretap1: entered allmulticast mode [ 1067.868550][ T3614] bond9: (slave gretap1): making interface the new active one [ 1067.925189][ T3614] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 1068.082751][ T3627] netlink: 'syz.1.7199': attribute type 1 has an invalid length. [ 1068.122714][ T3627] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1068.184204][ T3638] tipc: Enabled bearer , priority 0 [ 1068.222626][ T3638] syzkaller0: entered promiscuous mode [ 1068.235332][ T3638] syzkaller0: entered allmulticast mode [ 1068.290935][ T3638] tipc: Resetting bearer [ 1068.350137][ T3637] tipc: Resetting bearer [ 1068.415902][ T3637] tipc: Disabling bearer [ 1068.432561][ T3646] netlink: 1548 bytes leftover after parsing attributes in process `syz.2.7203'. [ 1068.570330][ T3651] netlink: 'syz.0.7204': attribute type 1 has an invalid length. [ 1068.637778][ T3653] netlink: 'syz.2.7205': attribute type 1 has an invalid length. [ 1068.729019][ T3663] netlink: 'syz.4.7207': attribute type 2 has an invalid length. [ 1068.739101][ T3651] bond10: entered promiscuous mode [ 1068.752184][ T3651] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1068.822972][ T3653] bond4: entered promiscuous mode [ 1068.828342][ T3653] bond4: entered allmulticast mode [ 1068.834055][ T3653] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1068.851883][ T3662] erspan2: entered allmulticast mode [ 1068.861822][ T3662] bond4: (slave erspan2): making interface the new active one [ 1068.872235][ T3662] erspan2: entered promiscuous mode [ 1068.879536][ T3662] bond4: (slave erspan2): Enslaving as an active interface with an up link [ 1068.919524][ T3660] macvtap1: entered allmulticast mode [ 1068.972846][ T3666] bond10: (slave bridge3): making interface the new active one [ 1068.981459][ T3666] bridge3: entered promiscuous mode [ 1068.993203][ T3666] bond10: (slave bridge3): Enslaving as an active interface with an up link [ 1069.148534][ T3677] 5nè: entered promiscuous mode [ 1069.361123][ T3688] netlink: 1548 bytes leftover after parsing attributes in process `syz.4.7215'. [ 1069.402148][ T3692] tipc: MTU too low for tipc bearer [ 1069.489905][ T3694] tipc: Enabled bearer , priority 0 [ 1069.527705][ T3699] rdma_rxe: rxe_newlink: failed to add ip6tnl0 [ 1069.534201][ T3694] syzkaller0: entered promiscuous mode [ 1069.551569][ T3694] syzkaller0: entered allmulticast mode [ 1069.584267][ T3694] tipc: Resetting bearer [ 1069.654277][ T3693] tipc: Resetting bearer [ 1069.708788][ T3693] tipc: Disabling bearer [ 1069.724283][ T3707] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7219'. [ 1069.776491][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1069.855504][ T3709] bridge0: port 2(erspan0) entered blocking state [ 1069.864690][ T3709] bridge0: port 2(erspan0) entered disabled state [ 1069.873159][ T3709] erspan0: entered allmulticast mode [ 1069.885329][ T3709] bridge0: port 2(erspan0) entered blocking state [ 1069.891985][ T3709] bridge0: port 2(erspan0) entered forwarding state [ 1069.942530][ T3720] erspan0: left allmulticast mode [ 1069.957837][ T3720] bridge0: port 2(erspan0) entered disabled state [ 1069.997003][ T3724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7224'. [ 1070.044620][ T3720] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7220'. [ 1070.130736][ T3721] netlink: 'syz.3.7223': attribute type 8 has an invalid length. [ 1070.152963][ T3718] lo speed is unknown, defaulting to 1000 [ 1070.836259][ T3763] tipc: Enabled bearer , priority 0 [ 1070.861510][ T3763] syzkaller0: entered promiscuous mode [ 1070.871298][ T3763] syzkaller0: entered allmulticast mode [ 1070.888337][ T3763] tipc: Resetting bearer [ 1070.916280][ T3762] tipc: Resetting bearer [ 1070.999966][ T3762] tipc: Disabling bearer [ 1071.020767][ T3773] netlink: 'syz.2.7236': attribute type 49 has an invalid length. [ 1071.036374][ T2951] net_ratelimit: 18 callbacks suppressed [ 1071.036394][ T2951] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1071.296828][ T2979] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1071.416807][ T3787] __nla_validate_parse: 7 callbacks suppressed [ 1071.416827][ T3787] netlink: 1548 bytes leftover after parsing attributes in process `syz.2.7241'. [ 1071.526320][ T2974] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1071.551710][ T3718] lo speed is unknown, defaulting to 1000 [ 1071.750584][ T3796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7246'. [ 1071.760078][ T2974] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1071.782409][ T3796] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1071.810461][ T3796] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7246'. [ 1071.903160][ T3802] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7245'. [ 1071.917895][ T3802] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7245'. [ 1071.946364][ T2974] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1072.076152][ T2974] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1072.133353][ T3809] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7248'. [ 1072.436698][ T3811] bond7: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1072.459606][ T3811] bond7 (unregistering): Released all slaves [ 1072.711971][ T3825] tipc: Enabled bearer , priority 0 [ 1072.792754][ T3826] syzkaller0: entered promiscuous mode [ 1072.836139][ T3826] syzkaller0: entered allmulticast mode [ 1072.861080][ T3840] x_tables: duplicate underflow at hook 1 [ 1072.876557][ T2958] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1072.895199][ T3824] tipc: Resetting bearer [ 1072.939010][ T3821] tipc: Resetting bearer [ 1073.013276][ T3821] tipc: Disabling bearer [ 1073.060959][ T2979] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1073.088699][ T3847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7254'. [ 1073.124311][ T3848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7254'. [ 1073.196273][ T2951] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1073.328547][ T2958] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1073.352732][ T3853] netlink: 1548 bytes leftover after parsing attributes in process `syz.0.7256'. [ 1073.367954][ T3859] netlink: 'syz.3.7257': attribute type 2 has an invalid length. [ 1073.391064][ T3861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7258'. [ 1073.731055][ T3870] bond4: option downdelay: invalid value (18446744073709551613) [ 1073.755212][ T3870] bond4: option downdelay: allowed values 0 - 2147483647 [ 1073.766950][ T3870] bond4 (unregistering): Released all slaves [ 1073.792277][ T3875] tipc: New replicast peer: 255.255.255.255 [ 1073.799344][ T3875] tipc: Enabled bearer , priority 5 [ 1073.809156][ T3878] netlink: 'syz.2.7262': attribute type 20 has an invalid length. [ 1073.830889][ T3880] tipc: Enabled bearer , priority 0 [ 1073.849899][ T3880] syzkaller0: entered promiscuous mode [ 1073.858173][ T3880] syzkaller0: entered allmulticast mode [ 1073.879594][ T3880] tipc: Resetting bearer [ 1073.901082][ T3879] tipc: Resetting bearer [ 1073.942023][ T3879] tipc: Disabling bearer [ 1074.082061][T16800] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1074.094108][T16800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1074.112770][ T3891] xt_NFQUEUE: number of total queues is 0 [ 1074.124718][ T3885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1074.364904][ T3898] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1074.916774][ T1161] tipc: Node number set to 4212287740 [ 1074.945406][ T3932] netlink: 'syz.3.7283': attribute type 5 has an invalid length. [ 1075.025861][ T3934] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1075.043158][ T3937] netlink: 'syz.4.7285': attribute type 39 has an invalid length. [ 1075.052146][ T3934] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1075.204731][ T3944] nbd: nbd3 already in use [ 1075.210298][ T3944] block nbd3: NBD_DISCONNECT [ 1075.214926][ T3944] block nbd3: Send disconnect failed -32 [ 1075.220891][ T3944] block nbd3: Send disconnect failed -32 [ 1075.226651][ T3944] block nbd3: shutting down sockets [ 1075.288425][ T3944] siw: device registration error -23 [ 1075.439071][ T3953] bond4: option all_slaves_active: invalid value (124) [ 1075.449122][ T3953] bond4 (unregistering): Released all slaves [ 1075.473789][ T3951] team0: No ports can be present during mode change [ 1075.650007][ T3963] netlink: 'syz.3.7292': attribute type 1 has an invalid length. [ 1076.147660][ T2970] net_ratelimit: 23 callbacks suppressed [ 1076.147682][ T2970] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1076.260452][ T3994] bond7: option all_slaves_active: invalid value (124) [ 1076.272564][ T3994] bond7 (unregistering): Released all slaves [ 1076.326165][ T2970] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1076.447268][ T2974] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1076.560745][ T4006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1076.584233][ T2979] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1076.622289][ T4006] __nla_validate_parse: 24 callbacks suppressed [ 1076.622308][ T4006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7305'. [ 1076.749289][ T4014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1076.766213][ T2974] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1076.795421][ T4013] block nbd3: server does not support multiple connections per device. [ 1076.815668][ T4013] block nbd3: shutting down sockets [ 1080.230412][ T4026] pim6reg: entered allmulticast mode [ 1080.247024][ T2979] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1080.338808][ T4046] bond7: option all_slaves_active: invalid value (124) [ 1080.352511][ T4046] bond7 (unregistering): Released all slaves [ 1080.441503][ T4036] lo speed is unknown, defaulting to 1000 [ 1080.448354][ T4053] kthread_run failed with err -4 [ 1080.466539][ T2979] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1080.589640][ T4060] netlink: 'syz.3.7319': attribute type 3 has an invalid length. [ 1080.614537][ T4060] netlink: 'syz.3.7319': attribute type 3 has an invalid length. [ 1080.623440][ T4063] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7318'. [ 1080.687647][ T2948] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1080.806164][ T2970] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1080.943875][ T4036] lo speed is unknown, defaulting to 1000 [ 1081.156637][ T2979] net_ratelimit: 2 callbacks suppressed [ 1081.156656][ T2979] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1081.253829][ T4092] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 1081.282301][ T4092] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1081.311362][ T4095] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7325'. [ 1081.337146][ T2951] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1081.467001][ T2974] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1081.494326][ T4101] netlink: 'syz.1.7329': attribute type 1 has an invalid length. [ 1081.625556][ T4106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7330'. [ 1081.672984][ T2979] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1081.964214][ T4114] tun0: tun_chr_ioctl cmd 1074025672 [ 1081.971046][ T4114] tun0: ignored: set checksum disabled [ 1082.011419][ T4125] netlink: 'syz.1.7332': attribute type 2 has an invalid length. [ 1082.034637][ T4125] netlink: 232 bytes leftover after parsing attributes in process `syz.1.7332'. [ 1082.108885][ T4124] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input11 [ 1082.307767][ T2957] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1082.436830][ T2958] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1082.448807][ T4144] netlink: 'syz.2.7339': attribute type 1 has an invalid length. [ 1082.545050][ T4144] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1082.617284][ T4149] bond5: (slave macvlan0): Enslaving as an active interface with a down link [ 1082.643798][ T4152] netlink: 'syz.4.7340': attribute type 1 has an invalid length. [ 1082.651741][ T4152] netlink: 'syz.4.7340': attribute type 2 has an invalid length. [ 1082.740354][ T2958] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1082.856193][ T2974] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1084.049971][ T4201] lo speed is unknown, defaulting to 1000 [ 1085.205374][ T4201] lo speed is unknown, defaulting to 1000 [ 1086.100104][ T4171] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1086.237842][ T2951] net_ratelimit: 25 callbacks suppressed [ 1086.237863][ T2951] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1086.456868][ T2951] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1086.566241][ T2951] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1086.686129][ T2979] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1086.899340][ T4235] netlink: 'syz.4.7359': attribute type 15 has an invalid length. [ 1086.986349][ T2951] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1087.140006][ T2951] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1087.307364][ T2948] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1087.448582][ T2974] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1087.575258][ T4251] netlink: 'syz.3.7364': attribute type 2 has an invalid length. [ 1087.608981][ T2974] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1087.633945][ T4251] netlink: 'syz.3.7364': attribute type 1 has an invalid length. [ 1087.754557][ T4251] IPVS: length: 128 != 53256 [ 1087.870590][ T4253] netlink: 116 bytes leftover after parsing attributes in process `syz.1.7365'. [ 1087.903363][ T4253] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1088.473622][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.481442][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.630078][ T4278] Cannot find set identified by id 65534 to match [ 1088.679335][ T4278] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7372'. [ 1088.712134][ T4278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7372'. [ 1088.928273][ T4283] netlink: 'syz.3.7372': attribute type 1 has an invalid length. [ 1088.956173][ T4283] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7372'. [ 1089.026107][ T4283] netlink: 1 bytes leftover after parsing attributes in process `syz.3.7372'. [ 1089.065658][ T4283] netlink: 658 bytes leftover after parsing attributes in process `syz.3.7372'. [ 1089.593759][ T4272] vlan2: left promiscuous mode [ 1089.599285][ T4272] bond5: left promiscuous mode [ 1089.604421][ T4272] bridge1: left promiscuous mode [ 1089.613681][ T4272] vlan2: left allmulticast mode [ 1089.628742][ T4272] bond5: left allmulticast mode [ 1089.634106][ T4272] bridge1: left allmulticast mode [ 1089.649912][ T4272] bond0: left promiscuous mode [ 1089.654914][ T4272] bridge2: left promiscuous mode [ 1089.661463][ T4272] bond0: left allmulticast mode [ 1089.667324][ T4272] bridge2: left allmulticast mode [ 1089.708962][ T4272] macsec1: left promiscuous mode [ 1089.725829][ T4272] gretap1: left allmulticast mode [ 1089.734709][ T4272] bond10: left promiscuous mode [ 1089.741608][ T4272] bridge3: left promiscuous mode [ 1089.749715][ T4272] macvtap1: left allmulticast mode [ 1089.789027][ T4277] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1089.838086][ T4277] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1089.882379][ T2974] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.892625][ T4277] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1089.935379][ T2974] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.985897][ T2974] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.048215][ T2974] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.570686][ T4315] netlink: 'syz.2.7379': attribute type 1 has an invalid length. [ 1090.822824][ T4307] syzkaller1: entered promiscuous mode [ 1090.853362][ T4307] syzkaller1: entered allmulticast mode [ 1091.374211][ T2958] net_ratelimit: 10 callbacks suppressed [ 1091.374235][ T2958] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1091.586103][ T2958] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1091.706088][ T2948] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1091.846334][ T2948] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1092.172211][ T4349] veth9: entered allmulticast mode [ 1092.271389][ T4357] netlink: 120 bytes leftover after parsing attributes in process `syz.1.7391'. [ 1092.375168][ T4357] netlink: 120 bytes leftover after parsing attributes in process `syz.1.7391'. [ 1092.534972][T16788] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1092.711454][ T2966] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1092.906231][ T186] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1093.060554][ T2966] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1093.075062][ T4372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7395'. [ 1093.218431][ T2966] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1093.322048][ T4384] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7397'. [ 1093.356473][ T2966] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1093.380503][ T4384] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.388034][ T4384] bridge0: port 1(bridge_slave_0) entered disabled state [ 1093.565491][ T4391] netlink: 'syz.2.7400': attribute type 2 has an invalid length. [ 1093.733424][ T4395] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7402'. [ 1094.736089][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 1094.925075][ T4436] xt_hashlimit: size too large, truncated to 1048576 [ 1095.330636][ T4446] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7413'. [ 1095.378126][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 1095.704777][ T4449] tipc: Enabled bearer , priority 0 [ 1096.312793][ T4470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7420'. [ 1096.733246][ T4470] bond7: option ad_actor_sys_prio: invalid value (0) [ 1096.740810][ T4470] bond7: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1096.775382][ T4470] bond7 (unregistering): Released all slaves [ 1096.971663][ T4464] lo speed is unknown, defaulting to 1000 [ 1096.978178][T16788] net_ratelimit: 21 callbacks suppressed [ 1096.978199][T16788] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1097.206662][T16788] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1097.225295][ T4491] netlink: 'syz.4.7425': attribute type 1 has an invalid length. [ 1097.320792][ T4494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7424'. [ 1097.375118][ T4500] netlink: 'syz.3.7426': attribute type 1 has an invalid length. [ 1097.541217][ T4491] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1097.596313][ T4497] bond7: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 1097.657782][ T4497] bond7: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 1097.855257][ T4512] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7426'. [ 1097.996433][ T4500] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1098.016522][T16794] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1098.101671][ T4506] vlan4: entered promiscuous mode [ 1098.146799][ T4506] bond4: entered promiscuous mode [ 1098.172485][ T4506] vlan4: entered allmulticast mode [ 1098.203229][ T4506] bond4: entered allmulticast mode [ 1098.273894][ T4531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7431'. [ 1098.386096][T16794] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1098.452155][ T4534] syzkaller1: entered promiscuous mode [ 1098.474743][ T4534] syzkaller1: entered allmulticast mode [ 1098.571972][ T4512] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1098.613640][ T4512] bond4: (slave batadv1): making interface the new active one [ 1098.624503][ T4512] batadv1: entered promiscuous mode [ 1098.633124][ T4512] batadv1: entered allmulticast mode [ 1098.649115][ T4512] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 1098.937096][ T4546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7435'. [ 1099.018301][ T4464] lo speed is unknown, defaulting to 1000 [ 1099.025023][ T2966] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1099.349483][ T4537] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1099.361152][ T4537] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.449638][ T4552] bond8: option packets_per_slave: invalid value (1048582) [ 1099.457783][ T4552] bond8: option packets_per_slave: allowed values 0 - 65535 [ 1099.511396][ T4552] bond8 (unregistering): Released all slaves [ 1099.567338][ T4559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7439'. [ 1099.580178][ T4559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7439'. [ 1099.594680][ T4559] netlink: 'syz.3.7439': attribute type 29 has an invalid length. [ 1099.603224][ T4559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7439'. [ 1099.695476][ T4554] bond8: option packets_per_slave: invalid value (1048582) [ 1099.717878][ T4554] bond8: option packets_per_slave: allowed values 0 - 65535 [ 1099.748605][ T4554] bond8 (unregistering): Released all slaves [ 1100.440421][ T4563] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7439'. [ 1100.474264][ T4563] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7439'. [ 1100.776833][ T4569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7441'. [ 1100.799152][ T4537] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1100.856429][ T4537] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.931626][ T4573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7441'. [ 1101.386172][ T4567] bond11: option lacp_active: invalid value (8) [ 1101.439915][ T4567] bond11 (unregistering): Released all slaves [ 1101.591248][ T4569] veth0_macvtap: left promiscuous mode [ 1101.966596][ T4584] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1102.438527][ T4537] .`: (slave netdevsim1): Releasing backup interface [ 1102.519866][ T4537] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1102.560554][ T4537] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.735381][ T4597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7448'. [ 1102.840353][ T4604] netlink: 'syz.4.7448': attribute type 1 has an invalid length. [ 1102.865573][ T4590] lo speed is unknown, defaulting to 1000 [ 1103.014056][ T4537] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1103.036119][ T4537] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.099458][ T2954] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1103.216351][ T2966] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1103.358547][T14896] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1103.516226][ T186] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1103.558834][ T4590] lo speed is unknown, defaulting to 1000 [ 1103.833828][ T4620] netlink: 'syz.3.7454': attribute type 1 has an invalid length. [ 1103.870407][ T4620] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7454'. [ 1103.910073][ T4620] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7454'. [ 1104.437897][T16797] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1104.460684][T16797] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.846379][ T186] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1104.885528][ T186] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.066316][ T2948] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1105.092570][T16797] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1105.127560][T16797] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.184081][ T4645] syz_tun: left promiscuous mode [ 1105.204208][ T4645] bridge0: port 3(syz_tun) entered disabled state [ 1105.414294][ T2969] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1105.441402][ T2969] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.653393][ T4650] lo speed is unknown, defaulting to 1000 [ 1105.663896][ T186] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1105.819287][ T2969] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1105.966808][ T2969] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1106.106513][T16797] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1106.266016][T14896] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1106.504660][ T4680] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7468'. [ 1106.564494][ T4675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7468'. [ 1107.117192][ T4691] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7471'. [ 1107.240451][ T4696] netlink: 'syz.2.7472': attribute type 1 has an invalid length. [ 1107.450732][ T4657] lo speed is unknown, defaulting to 1000 [ 1107.491705][ T4650] lo speed is unknown, defaulting to 1000 [ 1108.158139][ T4707] bond7: option all_slaves_active: invalid value (124) [ 1108.190084][ T4707] bond7 (unregistering): Released all slaves [ 1108.358429][ T4679] lo speed is unknown, defaulting to 1000 [ 1108.368963][ T4657] lo speed is unknown, defaulting to 1000 [ 1108.378419][ T2969] net_ratelimit: 9 callbacks suppressed [ 1108.378437][ T2969] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1108.752681][ T4713] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7477'. [ 1108.767932][ T2969] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1109.730935][ T4715] team0: entered promiscuous mode [ 1109.746008][ T4715] team_slave_0: entered promiscuous mode [ 1109.754563][ T4715] team_slave_1: entered promiscuous mode [ 1109.762283][ T4715] team0: entered allmulticast mode [ 1109.767894][ T4715] team_slave_0: entered allmulticast mode [ 1109.773750][ T4715] team_slave_1: entered allmulticast mode [ 1109.785460][ T4715] 8021q: adding VLAN 0 to HW filter on device team0 [ 1109.799019][T14896] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1109.993021][ T4679] lo speed is unknown, defaulting to 1000 [ 1110.006391][ T2969] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1110.236139][ T186] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1110.248180][ T4722] netlink: 'syz.0.7479': attribute type 10 has an invalid length. [ 1110.439608][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1110.584200][ T4722] .`: (slave netdevsim1): Enslaving as an active interface with an up link [ 1111.230518][ T4739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.329999][T16797] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1111.456273][ T2966] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1111.570012][T16788] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1111.686523][ T2966] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1111.836308][ T2966] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1111.919536][ T4743] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.7482'. [ 1112.057721][ T4746] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7483'. [ 1112.284871][ T4749] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7484'. [ 1112.743616][ T4763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7489'. [ 1112.827834][ T5631] Bluetooth: hci3: command 0x0406 tx timeout [ 1112.995655][ T4763] bond7: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 1113.068254][ T4763] bond7 (unregistering): Released all slaves [ 1113.095158][ T4770] IPVS: set_ctl: invalid protocol: 92 172.30.64.5:20000 [ 1113.243728][ T4773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7490'. [ 1113.386843][T16788] net_ratelimit: 8 callbacks suppressed [ 1113.386864][T16788] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1113.532179][ T4785] mac80211_hwsim hwsim106 syzkaller0: Caught tx_queue_len zero misconfig [ 1113.649939][T16788] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1113.777988][T14896] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1114.010303][T16788] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1114.155970][ T4798] netlink: 'syz.4.7498': attribute type 10 has an invalid length. [ 1114.214912][ T4798] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7498'. [ 1114.261510][ T4803] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7501'. [ 1114.366001][ T4798] team0: Failed to send options change via netlink (err -105) [ 1114.382823][ T4798] team0: Port device geneve1 added [ 1114.453951][ T2969] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1114.617243][ T2969] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1114.845040][ T4821] netlink: 'syz.0.7505': attribute type 1 has an invalid length. [ 1114.958399][ T4828] SET target dimension over the limit! [ 1114.970382][ T4829] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7503'. [ 1115.023071][ T4829] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7503'. [ 1115.035168][ T4831] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7507'. [ 1115.086099][T16788] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1115.236511][ T186] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1115.388512][ T186] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1115.559502][T16788] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1116.119322][ T4852] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1116.335373][ T4852] bond7 (unregistering): Released all slaves [ 1116.464552][ T4872] nbd: must specify a size in bytes for the device [ 1117.162943][ T4878] __nla_validate_parse: 6 callbacks suppressed [ 1117.162963][ T4878] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7519'. [ 1117.211960][ T4888] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7521'. [ 1117.262959][ T4878] netlink: 'syz.0.7519': attribute type 1 has an invalid length. [ 1117.608155][ T4900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7525'. [ 1118.456569][ T186] net_ratelimit: 17 callbacks suppressed [ 1118.456590][ T186] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1118.586001][T16788] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1118.621251][ T4926] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1118.684490][ T4927] vlan2: entered allmulticast mode [ 1118.710081][ T4933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7531'. [ 1118.710452][ T4927] dummy0: entered allmulticast mode [ 1118.986162][ T186] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1119.184283][T16797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1119.196241][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1119.251906][T16797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1119.261209][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1119.289989][ T4950] mac80211_hwsim hwsim106 syzkaller0: entered promiscuous mode [ 1119.309605][ T186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1119.319396][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1119.335758][ T4950] mac80211_hwsim hwsim106 syzkaller0: entered allmulticast mode [ 1119.358291][ T4950] tipc: Resetting bearer [ 1121.019637][T16797] tipc: Resetting bearer [ 1121.247073][ T4961] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7539'. [ 1121.554554][ T4961] bond6: option all_slaves_active: invalid value (124) [ 1121.620595][ T4961] bond6 (unregistering): Released all slaves [ 1121.849667][ T4973] lo speed is unknown, defaulting to 1000 [ 1122.825049][ T4994] Cannot find set identified by id 65534 to match [ 1122.867082][ T4994] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7548'. [ 1122.914966][ T4994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7548'. [ 1122.962076][ T4995] netlink: 'syz.1.7548': attribute type 1 has an invalid length. [ 1123.025579][ T4995] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7548'. [ 1123.038411][ T4973] lo speed is unknown, defaulting to 1000 [ 1123.088699][ T4995] netlink: 1 bytes leftover after parsing attributes in process `syz.1.7548'. [ 1123.129438][ T4995] netlink: 658 bytes leftover after parsing attributes in process `syz.1.7548'. [ 1123.454264][ T4989] xt_l2tp: wrong L2TP version: 0 [ 1123.488475][ T5006] syzkaller0: entered promiscuous mode [ 1123.515668][ T5006] syzkaller0: entered allmulticast mode [ 1123.577045][T16788] net_ratelimit: 27 callbacks suppressed [ 1123.577065][T16788] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1123.909006][ T5017] netlink: 'syz.4.7553': attribute type 1 has an invalid length. [ 1123.972906][ T5014] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7554'. [ 1124.070487][ T5014] bridge0: port 1(dummy0) entered disabled state [ 1124.185315][ T5011] netlink: 'syz.1.7554': attribute type 2 has an invalid length. [ 1124.284805][ T5014] dummy0 (unregistering): left allmulticast mode [ 1124.332252][ T5014] dummy0 (unregistering): left promiscuous mode [ 1124.365706][ T5014] bridge0: port 1(dummy0) entered disabled state [ 1124.816078][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1124.823409][ C0] bridge0: topology change detected, propagating [ 1124.860338][ T5017] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1124.982255][ T5019] vlan2: entered allmulticast mode [ 1125.004068][ T5019] bond8: entered allmulticast mode [ 1125.107525][ T5027] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7557'. [ 1125.171351][ T5013] bond8: (slave geneve0): making interface the new active one [ 1125.194149][ T5013] geneve0: entered allmulticast mode [ 1125.225506][ T5013] bond8: (slave geneve0): Enslaving as an active interface with an up link [ 1125.250465][T16788] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1125.456063][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1125.463370][ C0] bridge0: topology change detected, propagating [ 1125.577621][T16797] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1125.634468][ T5040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7559'. [ 1125.645104][ T5039] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7560'. [ 1125.682337][ T5040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7559'. [ 1125.780738][ T2948] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1125.823205][ T5039] netlink: 'syz.3.7560': attribute type 1 has an invalid length. [ 1125.993242][ T5039] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1126.082653][ T5052] xt_hashlimit: size too large, truncated to 1048576 [ 1126.111159][ T5041] bond6: (slave macvlan0): making interface the new active one [ 1126.191070][ T5041] bond6: (slave macvlan0): Enslaving as an active interface with an up link [ 1126.358192][T14896] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1126.736728][ T2948] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1127.067033][ T2966] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1127.248652][ T2966] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1127.428439][T16788] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1127.616883][ T2948] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1127.655176][ T5078] netlink: 'syz.3.7569': attribute type 1 has an invalid length. [ 1128.135332][ T5089] __nla_validate_parse: 2 callbacks suppressed [ 1128.135352][ T5089] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7572'. [ 1128.248551][ T5090] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7572'. [ 1128.587339][ T2954] net_ratelimit: 21 callbacks suppressed [ 1128.587360][ T2954] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1128.766171][T16788] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1128.901987][ T5107] netlink: 758 bytes leftover after parsing attributes in process `syz.2.7579'. [ 1128.954826][ T2966] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1128.993645][ T5109] netlink: 100 bytes leftover after parsing attributes in process `syz.4.7580'. [ 1129.116208][ T2966] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1129.286174][T16797] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1129.339259][ T5114] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7582'. [ 1129.436485][T16797] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1129.463179][ T5124] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7584'. [ 1129.578728][ T5129] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7586'. [ 1129.590242][ T2955] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1129.641611][ T5125] netlink: 'syz.0.7585': attribute type 10 has an invalid length. [ 1129.684800][ T5125] netlink: 55 bytes leftover after parsing attributes in process `syz.0.7585'. [ 1129.704192][ T5133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7582'. [ 1129.821614][ T5129] block nbd0: reconnected socket [ 1129.858272][T30008] block nbd0: Receive control failed (result -107) [ 1130.421336][T16788] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1130.511909][ T2954] bridge_slave_1: left promiscuous mode [ 1130.541285][ T2954] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.621139][ T2954] bridge_slave_0: left allmulticast mode [ 1130.634550][ T5147] netlink: 'syz.1.7588': attribute type 1 has an invalid length. [ 1130.667033][ T2954] bridge_slave_0: left promiscuous mode [ 1130.703293][ T2954] bridge0: port 1(bridge_slave_0) entered disabled state [ 1130.854450][ T2954] dvmrp0: left allmulticast mode [ 1131.238162][ T5165] sctp: [Deprecated]: syz.2.7593 (pid 5165) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1131.238162][ T5165] Use struct sctp_sack_info instead [ 1131.681194][ T5173] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7596'. [ 1132.172263][ T2954] batman_adv: batadv0: Removing interface: vlan0 [ 1132.410835][ T2954] bond3 (unregistering): (slave geneve3): Releasing active interface [ 1132.449986][ T2954] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1132.687043][ T2954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1132.710314][ T2954] bond0 (unregistering): Released all slaves [ 1132.725255][ T2954] bond1 (unregistering): Released all slaves [ 1132.747724][ T2954] bond2 (unregistering): Released all slaves [ 1132.781034][ T2954] bond3 (unregistering): Released all slaves [ 1132.818173][ T2954] bond4 (unregistering): Released all slaves [ 1132.853763][ T2954] bond5 (unregistering): Released all slaves [ 1132.888480][ T2954] bond6 (unregistering): (slave veth5): Releasing active interface [ 1132.909159][ T2954] bond6 (unregistering): Released all slaves [ 1132.935315][ T2954] bond7 (unregistering): Released all slaves [ 1132.957109][ T2954] bond8 (unregistering): Released all slaves [ 1132.984714][ T2954] bond9 (unregistering): Released all slaves [ 1133.023224][ T2954] bond10 (unregistering): Released all slaves [ 1133.056712][ T2954] bond11 (unregistering): Released all slaves [ 1133.079116][ T2954] bond12 (unregistering): Released all slaves [ 1133.111701][ T5147] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1133.306421][T16788] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1133.607072][ T2948] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1133.678823][ T2954] : left promiscuous mode [ 1133.761682][ T5200] netlink: 'syz.1.7602': attribute type 12 has an invalid length. [ 1134.323499][ T2954] tipc: Disabling bearer [ 1134.392328][ T2954] tipc: Left network mode [ 1134.417461][T16788] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1134.501475][ T5221] ±ÿÿÿÿa–ïD: renamed from lo (while UP) [ 1134.575239][ T5224] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7607'. [ 1134.597916][ T5226] netlink: zone id is out of range [ 1134.632492][ T5226] netlink: zone id is out of range [ 1134.638758][T16788] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1134.693629][ T5224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7607'. [ 1134.724644][ T5226] netlink: zone id is out of range [ 1134.751134][ T5226] netlink: zone id is out of range [ 1134.778163][ T5226] netlink: zone id is out of range [ 1134.833868][ T5226] netlink: zone id is out of range [ 1134.855626][ T5226] netlink: zone id is out of range [ 1135.342888][ T5242] xt_hashlimit: max too large, truncated to 1048576 [ 1135.360705][ T5242] xt_ecn: cannot match TCP bits for non-tcp packets [ 1135.520068][ T5249] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7613'. [ 1136.229561][ T5259] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7617'. [ 1136.274378][ T5261] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1136.365083][ T5259] veth1_to_team: entered promiscuous mode [ 1136.418029][ T5259] veth1_to_team: left promiscuous mode [ 1137.074995][ T2954] hsr_slave_0: left promiscuous mode [ 1137.122033][ T2954] hsr_slave_1: left promiscuous mode [ 1137.152082][ T2954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1137.233355][ T2954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1137.580020][ T5301] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7625'. [ 1138.106690][ T5318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7628'. [ 1138.337315][ T5318] netlink: 'syz.2.7628': attribute type 4 has an invalid length. [ 1138.403465][ T5318] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7628'. [ 1138.844662][ T5333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7629'. [ 1139.587608][T16797] net_ratelimit: 350 callbacks suppressed [ 1139.587628][T16797] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1139.854576][ T5300] lo speed is unknown, defaulting to 1000 [ 1139.862149][T16797] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1140.077391][ T2948] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1140.247352][T16797] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1140.407253][T16797] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1140.588417][ T2955] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1140.692154][ T5362] netlink: 212232 bytes leftover after parsing attributes in process `syz.4.7635'. [ 1140.757153][T16797] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1140.941326][ T2954] IPVS: stop unused estimator thread 0... [ 1140.956955][T16797] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1140.995303][ T5371] batadv_slave_1: entered promiscuous mode [ 1141.023266][ T5372] netlink: 240 bytes leftover after parsing attributes in process `syz.2.7637'. [ 1141.085290][T16797] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1141.117265][ T5372] netlink: 'syz.2.7637': attribute type 9 has an invalid length. [ 1141.173257][ T5378] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1141.256267][T16797] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1141.702929][ T5392] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7640'. [ 1141.748688][ T5363] batadv_slave_1: left promiscuous mode [ 1142.092063][ T5300] lo speed is unknown, defaulting to 1000 [ 1142.495868][ T5412] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1142.620044][ T5407] x_tables: duplicate entry at hook 1 [ 1143.253211][ T5424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7645'. [ 1143.366396][ T5430] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7646'. [ 1143.379236][ T5429] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7647'. [ 1143.437114][ T5429] netlink: 260 bytes leftover after parsing attributes in process `syz.1.7647'. [ 1143.490261][ T5431] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7647'. [ 1143.637014][ T5425] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7646'. [ 1143.684567][ T5425] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7646'. [ 1144.657472][ T2954] net_ratelimit: 17 callbacks suppressed [ 1144.657509][ T2954] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1144.908396][T16797] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1145.046347][ T2948] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1145.206599][ T2954] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1145.518143][ T2954] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1145.676802][T16797] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1145.862063][ T2948] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1146.046753][ T2948] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1146.208401][ T2948] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1146.376748][ T2948] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1146.883508][ T5512] macsec1: entered promiscuous mode [ 1146.934759][ T5516] __nla_validate_parse: 2 callbacks suppressed [ 1146.934780][ T5516] netlink: 108 bytes leftover after parsing attributes in process `syz.4.7667'. [ 1148.725001][ T5546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7674'. [ 1148.875819][ T5546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7674'. [ 1149.621041][ T5551] lo speed is unknown, defaulting to 1000 [ 1149.666696][T16797] net_ratelimit: 10 callbacks suppressed [ 1149.666717][T16797] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1149.780272][ T5572] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7679'. [ 1149.816218][T16797] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1149.956056][T16797] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1150.086125][T16788] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1150.216451][T16797] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1150.366933][T16788] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1150.492131][ T5585] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7683'. [ 1150.506551][ T2954] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1150.547110][ T5584] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7683'. [ 1150.636018][ T2982] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1150.665442][ T5580] netlink: 732 bytes leftover after parsing attributes in process `syz.4.7682'. [ 1150.701086][ T5551] lo speed is unknown, defaulting to 1000 [ 1150.728686][ T5580] netlink: 732 bytes leftover after parsing attributes in process `syz.4.7682'. [ 1150.888508][ T5597] netlink: 'syz.1.7686': attribute type 30 has an invalid length. [ 1150.965048][ T5599] netlink: 'syz.1.7686': attribute type 1 has an invalid length. [ 1150.982649][T16788] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1151.046836][ T5599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1151.208842][ T5605] netlink: 'syz.3.7687': attribute type 1 has an invalid length. [ 1151.246568][ T5605] netlink: 'syz.3.7687': attribute type 3 has an invalid length. [ 1151.284712][ T5606] netlink: 468 bytes leftover after parsing attributes in process `syz.4.7688'. [ 1151.301858][ T5605] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7687'. [ 1151.579702][ T5595] lo speed is unknown, defaulting to 1000 [ 1151.713822][ T5615] netlink: 'syz.4.7689': attribute type 1 has an invalid length. [ 1151.749833][ T5621] netlink: 'syz.4.7689': attribute type 1 has an invalid length. [ 1152.042995][ T5625] __nla_validate_parse: 2 callbacks suppressed [ 1152.043013][ T5625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7690'. [ 1152.114709][ T5629] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7693'. [ 1152.325969][ T5629] ip6gre1: entered promiscuous mode [ 1152.354912][ T5641] netlink: 'syz.3.7694': attribute type 1 has an invalid length. [ 1152.413287][ T5629] ip6gre1: entered allmulticast mode [ 1152.684733][ T5646] gretap2: entered allmulticast mode [ 1152.708061][ T5646] bond7: (slave gretap2): making interface the new active one [ 1152.727311][ T5646] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 1152.922567][ T5598] lo speed is unknown, defaulting to 1000 [ 1152.986695][ T5595] lo speed is unknown, defaulting to 1000 [ 1153.262184][ T5657] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7696'. [ 1153.324376][ T5662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7698'. [ 1154.226639][ T5662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7698'. [ 1154.429553][T16797] bond6: (slave macvlan0): link status definitely down, disabling slave [ 1154.520060][T16797] bond6: now running without any active interface! [ 1154.979938][ T5598] lo speed is unknown, defaulting to 1000 [ 1155.002694][ T2982] net_ratelimit: 9 callbacks suppressed [ 1155.002714][ T2982] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1155.548239][ T5696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7701'. [ 1155.919285][ T5707] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7701'. [ 1155.939439][ T5706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7703'. [ 1156.001396][ T5708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7703'. [ 1156.128324][ T5696] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1156.364947][ T5701] bond8: (slave veth9): Enslaving as an active interface with an up link [ 1156.524362][ T5703] netlink: 200 bytes leftover after parsing attributes in process `syz.3.7701'. [ 1156.604121][ T5707] bond8: (slave bridge2): Enslaving as an active interface with an up link [ 1156.867378][T14896] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1157.037487][T14896] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1157.197111][T16797] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1157.299066][ T5747] ±ÿÿÿÿa–ïD: renamed from lo (while UP) [ 1157.378023][ T2982] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1157.395276][ T5741] __nla_validate_parse: 1 callbacks suppressed [ 1157.395314][ T5741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7708'. [ 1157.486581][ T5741] openvswitch: netlink: Invalid VLAN frame [ 1157.526049][T16797] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1157.968341][ T186] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1158.106374][ T2982] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1158.236010][ T2982] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1159.144372][ T5773] TCP: TCP_TX_DELAY enabled [ 1160.068875][ T2982] net_ratelimit: 29 callbacks suppressed [ 1160.068896][ T2982] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1160.196550][ T2982] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1160.265108][ T5792] netlink: 'syz.1.7716': attribute type 4 has an invalid length. [ 1160.283662][ T5792] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7716'. [ 1160.316087][ T2982] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1160.426610][ T186] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1160.536212][ T186] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1160.656924][ T2982] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1160.670712][ T5804] netlink: 'syz.3.7718': attribute type 10 has an invalid length. [ 1160.682254][ T5804] geneve1: entered promiscuous mode [ 1160.696888][ T5804] .`: (slave geneve1): Enslaving as an active interface with an up link [ 1160.776453][ T2982] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1160.897405][ T2982] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1161.016226][ T2948] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1161.110048][ T186] nci: nci_rx_work: unknown MT 0x1 [ 1161.156809][ T186] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1161.748737][ T5810] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1162.206788][ T5847] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7731'. [ 1162.865754][ T5841] [ 1162.868150][ T5841] ====================================================== [ 1162.875205][ T5841] WARNING: possible circular locking dependency detected [ 1162.882251][ T5841] syzkaller #0 Not tainted [ 1162.886682][ T5841] ------------------------------------------------------ [ 1162.893717][ T5841] syz.3.7731/5841 is trying to acquire lock: [ 1162.899710][ T5841] ffffffff8ea85600 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1162.909593][ T5841] [ 1162.909593][ T5841] but task is already holding lock: [ 1162.917004][ T5841] ffff8880547260e0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 1162.925877][ T5841] [ 1162.925877][ T5841] which lock already depends on the new lock. [ 1162.925877][ T5841] [ 1162.936302][ T5841] [ 1162.936302][ T5841] the existing dependency chain (in reverse order) is: [ 1162.945332][ T5841] [ 1162.945332][ T5841] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1162.953103][ T5841] lock_sock_nested+0x41/0x100 [ 1162.958511][ T5841] inet_shutdown+0x6a/0x390 [ 1162.963615][ T5841] nbd_mark_nsock_dead+0x2e9/0x560 [ 1162.969330][ T5841] recv_work+0x1c2e/0x1d40 [ 1162.974295][ T5841] process_scheduled_works+0xb5d/0x1860 [ 1162.980391][ T5841] worker_thread+0xa53/0xfc0 [ 1162.985535][ T5841] kthread+0x389/0x470 [ 1162.990162][ T5841] ret_from_fork+0x514/0xb70 [ 1162.995314][ T5841] ret_from_fork_asm+0x1a/0x30 [ 1163.000634][ T5841] [ 1163.000634][ T5841] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1163.008313][ T5841] __mutex_lock+0x1a3/0x1550 [ 1163.013460][ T5841] nbd_queue_rq+0x37b/0x1100 [ 1163.018613][ T5841] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1163.024782][ T5841] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1163.031706][ T5841] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1163.038242][ T5841] blk_mq_run_hw_queue+0x348/0x4f0 [ 1163.043905][ T5841] blk_mq_dispatch_list+0xd16/0xe10 [ 1163.049670][ T5841] blk_mq_flush_plug_list+0x48d/0x570 [ 1163.055588][ T5841] __blk_flush_plug+0x3ed/0x4d0 [ 1163.061038][ T5841] __submit_bio+0x28d/0x580 [ 1163.066090][ T5841] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1163.072264][ T5841] block_read_full_folio+0x599/0x830 [ 1163.078096][ T5841] filemap_read_folio+0x137/0x3b0 [ 1163.083674][ T5841] do_read_cache_folio+0x358/0x590 [ 1163.089332][ T5841] read_part_sector+0xb6/0x2b0 [ 1163.094697][ T5841] adfspart_check_ICS+0xb1/0x960 [ 1163.100194][ T5841] bdev_disk_changed+0x817/0x1770 [ 1163.105769][ T5841] blkdev_get_whole+0x380/0x510 [ 1163.111257][ T5841] bdev_open+0x31e/0xd30 [ 1163.116052][ T5841] blkdev_open+0x470/0x610 [ 1163.121022][ T5841] do_dentry_open+0x822/0x13a0 [ 1163.126337][ T5841] vfs_open+0x3b/0x340 [ 1163.130961][ T5841] path_openat+0x2e08/0x3860 [ 1163.136108][ T5841] do_file_open+0x23e/0x4a0 [ 1163.141171][ T5841] do_sys_openat2+0x113/0x200 [ 1163.146395][ T5841] __x64_sys_openat+0x138/0x170 [ 1163.151809][ T5841] do_syscall_64+0x174/0x580 [ 1163.156951][ T5841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.163386][ T5841] [ 1163.163386][ T5841] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1163.170640][ T5841] __mutex_lock+0x1a3/0x1550 [ 1163.175803][ T5841] nbd_queue_rq+0xc6/0x1100 [ 1163.180907][ T5841] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1163.187007][ T5841] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1163.193891][ T5841] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1163.200439][ T5841] blk_mq_run_hw_queue+0x348/0x4f0 [ 1163.206098][ T5841] blk_mq_dispatch_list+0xd16/0xe10 [ 1163.211877][ T5841] blk_mq_flush_plug_list+0x48d/0x570 [ 1163.217807][ T5841] __blk_flush_plug+0x3ed/0x4d0 [ 1163.223207][ T5841] __submit_bio+0x28d/0x580 [ 1163.228263][ T5841] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1163.234455][ T5841] block_read_full_folio+0x599/0x830 [ 1163.240284][ T5841] filemap_read_folio+0x137/0x3b0 [ 1163.245868][ T5841] do_read_cache_folio+0x358/0x590 [ 1163.251555][ T5841] read_part_sector+0xb6/0x2b0 [ 1163.256875][ T5841] adfspart_check_ICS+0xb1/0x960 [ 1163.262372][ T5841] bdev_disk_changed+0x817/0x1770 [ 1163.267946][ T5841] blkdev_get_whole+0x380/0x510 [ 1163.273351][ T5841] bdev_open+0x31e/0xd30 [ 1163.278151][ T5841] blkdev_open+0x470/0x610 [ 1163.283129][ T5841] do_dentry_open+0x822/0x13a0 [ 1163.288450][ T5841] vfs_open+0x3b/0x340 [ 1163.293068][ T5841] path_openat+0x2e08/0x3860 [ 1163.298213][ T5841] do_file_open+0x23e/0x4a0 [ 1163.303273][ T5841] do_sys_openat2+0x113/0x200 [ 1163.308504][ T5841] __x64_sys_openat+0x138/0x170 [ 1163.313915][ T5841] do_syscall_64+0x174/0x580 [ 1163.319060][ T5841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.325517][ T5841] [ 1163.325517][ T5841] -> #3 (set->srcu){.+.+}-{0:0}: [ 1163.332682][ T5841] __synchronize_srcu+0xca/0x300 [ 1163.338176][ T5841] elevator_switch+0x1e8/0x7a0 [ 1163.343494][ T5841] elevator_change+0x2cc/0x450 [ 1163.348816][ T5841] elevator_set_default+0x36c/0x430 [ 1163.354576][ T5841] blk_register_queue+0x3e9/0x4e0 [ 1163.360157][ T5841] __add_disk+0x677/0xd50 [ 1163.365047][ T5841] add_disk_fwnode+0xfb/0x480 [ 1163.370283][ T5841] nbd_dev_add+0x72c/0xb50 [ 1163.375258][ T5841] nbd_init+0x168/0x1f0 [ 1163.379971][ T5841] do_one_initcall+0x250/0x870 [ 1163.385297][ T5841] do_initcall_level+0x104/0x190 [ 1163.390792][ T5841] do_initcalls+0x59/0xa0 [ 1163.395677][ T5841] kernel_init_freeable+0x2a6/0x3e0 [ 1163.401434][ T5841] kernel_init+0x1d/0x1d0 [ 1163.406335][ T5841] ret_from_fork+0x514/0xb70 [ 1163.411476][ T5841] ret_from_fork_asm+0x1a/0x30 [ 1163.416797][ T5841] [ 1163.416797][ T5841] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1163.424653][ T5841] __mutex_lock+0x1a3/0x1550 [ 1163.429811][ T5841] elevator_change+0x1b3/0x450 [ 1163.435132][ T5841] elevator_set_none+0xb5/0x140 [ 1163.440535][ T5841] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1163.446923][ T5841] nbd_start_device+0x17f/0xb10 [ 1163.452341][ T5841] nbd_genl_connect+0x165b/0x1cf0 [ 1163.457912][ T5841] genl_family_rcv_msg_doit+0x22a/0x330 [ 1163.464065][ T5841] genl_rcv_msg+0x61c/0x7a0 [ 1163.469121][ T5841] netlink_rcv_skb+0x232/0x4b0 [ 1163.474445][ T5841] genl_rcv+0x28/0x40 [ 1163.479065][ T5841] netlink_unicast+0x75c/0x8e0 [ 1163.484374][ T5841] netlink_sendmsg+0x813/0xb40 [ 1163.489685][ T5841] ____sys_sendmsg+0x972/0x9f0 [ 1163.494991][ T5841] ___sys_sendmsg+0x2a5/0x360 [ 1163.500222][ T5841] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1163.505716][ T5841] do_syscall_64+0x174/0x580 [ 1163.510883][ T5841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.517338][ T5841] [ 1163.517338][ T5841] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 1163.525991][ T5841] blk_alloc_queue+0x546/0x680 [ 1163.531309][ T5841] __blk_mq_alloc_disk+0x197/0x390 [ 1163.536987][ T5841] nbd_dev_add+0x499/0xb50 [ 1163.541964][ T5841] nbd_init+0x168/0x1f0 [ 1163.546700][ T5841] do_one_initcall+0x250/0x870 [ 1163.552011][ T5841] do_initcall_level+0x104/0x190 [ 1163.557507][ T5841] do_initcalls+0x59/0xa0 [ 1163.562385][ T5841] kernel_init_freeable+0x2a6/0x3e0 [ 1163.568154][ T5841] kernel_init+0x1d/0x1d0 [ 1163.573035][ T5841] ret_from_fork+0x514/0xb70 [ 1163.578173][ T5841] ret_from_fork_asm+0x1a/0x30 [ 1163.583483][ T5841] [ 1163.583483][ T5841] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1163.590733][ T5841] __lock_acquire+0x15a5/0x2cf0 [ 1163.596144][ T5841] lock_acquire+0x106/0x350 [ 1163.601193][ T5841] fs_reclaim_acquire+0x71/0x100 [ 1163.606769][ T5841] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1163.613127][ T5841] __alloc_skb+0x1d0/0x7d0 [ 1163.618099][ T5841] tcp_send_active_reset+0x8a/0x550 [ 1163.623965][ T5841] __tcp_close+0x4c5/0xfe0 [ 1163.628942][ T5841] tcp_close+0x28/0x110 [ 1163.633643][ T5841] inet_release+0x143/0x190 [ 1163.638699][ T5841] sock_close+0xc3/0x240 [ 1163.643492][ T5841] __fput+0x44f/0xa60 [ 1163.648030][ T5841] task_work_run+0x1d9/0x270 [ 1163.653169][ T5841] get_signal+0x11eb/0x1330 [ 1163.658222][ T5841] arch_do_signal_or_restart+0xbc/0x840 [ 1163.664331][ T5841] exit_to_user_mode_loop+0xa9/0x680 [ 1163.670175][ T5841] do_syscall_64+0x353/0x580 [ 1163.675318][ T5841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.681759][ T5841] [ 1163.681759][ T5841] other info that might help us debug this: [ 1163.681759][ T5841] [ 1163.692009][ T5841] Chain exists of: [ 1163.692009][ T5841] fs_reclaim --> &nsock->tx_lock --> sk_lock-AF_INET6 [ 1163.692009][ T5841] [ 1163.704760][ T5841] Possible unsafe locking scenario: [ 1163.704760][ T5841] [ 1163.712244][ T5841] CPU0 CPU1 [ 1163.717630][ T5841] ---- ---- [ 1163.723024][ T5841] lock(sk_lock-AF_INET6); [ 1163.727562][ T5841] lock(&nsock->tx_lock); [ 1163.734528][ T5841] lock(sk_lock-AF_INET6); [ 1163.741585][ T5841] lock(fs_reclaim); [ 1163.745607][ T5841] [ 1163.745607][ T5841] *** DEADLOCK *** [ 1163.745607][ T5841] [ 1163.753770][ T5841] 2 locks held by syz.3.7731/5841: [ 1163.758893][ T5841] #0: ffff88807844de40 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1163.769148][ T5841] #1: ffff8880547260e0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 1163.778333][ T5841] [ 1163.778333][ T5841] stack backtrace: [ 1163.784254][ T5841] CPU: 1 UID: 0 PID: 5841 Comm: syz.3.7731 Not tainted syzkaller #0 PREEMPT(full) [ 1163.784280][ T5841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1163.784294][ T5841] Call Trace: [ 1163.784303][ T5841] [ 1163.784313][ T5841] dump_stack_lvl+0xe8/0x150 [ 1163.784339][ T5841] print_circular_bug+0x2e1/0x300 [ 1163.784370][ T5841] check_noncircular+0x12e/0x150 [ 1163.784400][ T5841] __lock_acquire+0x15a5/0x2cf0 [ 1163.784425][ T5841] ? __lock_acquire+0x6b5/0x2cf0 [ 1163.784451][ T5841] ? do_raw_spin_lock+0x12b/0x2f0 [ 1163.784479][ T5841] ? inet_unhash+0x1fe/0xab0 [ 1163.784587][ T5841] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1163.784615][ T5841] lock_acquire+0x106/0x350 [ 1163.784636][ T5841] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1163.784666][ T5841] ? lock_acquire+0x106/0x350 [ 1163.784691][ T5841] fs_reclaim_acquire+0x71/0x100 [ 1163.784721][ T5841] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1163.784749][ T5841] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1163.784778][ T5841] ? __alloc_skb+0x1d0/0x7d0 [ 1163.784797][ T5841] ? __local_bh_enable_ip+0xd0/0x130 [ 1163.784820][ T5841] __alloc_skb+0x1d0/0x7d0 [ 1163.784838][ T5841] ? __pfx_skb_attempt_defer_free+0x10/0x10 [ 1163.784864][ T5841] tcp_send_active_reset+0x8a/0x550 [ 1163.784897][ T5841] __tcp_close+0x4c5/0xfe0 [ 1163.784938][ T5841] tcp_close+0x28/0x110 [ 1163.784961][ T5841] inet_release+0x143/0x190 [ 1163.784991][ T5841] sock_close+0xc3/0x240 [ 1163.785017][ T5841] ? __pfx_sock_close+0x10/0x10 [ 1163.785043][ T5841] __fput+0x44f/0xa60 [ 1163.785073][ T5841] task_work_run+0x1d9/0x270 [ 1163.785103][ T5841] ? __pfx_task_work_run+0x10/0x10 [ 1163.785131][ T5841] ? __fput_deferred+0x216/0x380 [ 1163.785156][ T5841] ? __pfx___fput_deferred+0x10/0x10 [ 1163.785179][ T5841] ? tcp_sendmsg+0x39/0x50 [ 1163.785199][ T5841] ? __local_bh_enable_ip+0xd0/0x130 [ 1163.785220][ T5841] get_signal+0x11eb/0x1330 [ 1163.785241][ T5841] ? __sys_sendto+0x598/0x710 [ 1163.785262][ T5841] ? do_futex+0x333/0x420 [ 1163.785290][ T5841] arch_do_signal_or_restart+0xbc/0x840 [ 1163.785323][ T5841] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1163.785365][ T5841] exit_to_user_mode_loop+0xa9/0x680 [ 1163.785384][ T5841] ? rcu_is_watching+0x15/0xb0 [ 1163.785409][ T5841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.785431][ T5841] do_syscall_64+0x353/0x580 [ 1163.785454][ T5841] ? clear_bhb_loop+0x40/0x90 [ 1163.785477][ T5841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.785498][ T5841] RIP: 0033:0x7fbeb139ce59 [ 1163.785518][ T5841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1163.785537][ T5841] RSP: 002b:00007fbeb22a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1163.785558][ T5841] RAX: 00000000000812cc RBX: 00007fbeb1615fa0 RCX: 00007fbeb139ce59 [ 1163.785574][ T5841] RDX: 00000000d0d0c2ac RSI: 0000200000000080 RDI: 0000000000000005 [ 1163.785587][ T5841] RBP: 00007fbeb1432d6f R08: 0000000000000000 R09: 0000000000000000 [ 1163.785600][ T5841] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1163.785613][ T5841] R13: 00007fbeb1616038 R14: 00007fbeb1615fa0 R15: 00007ffc14f90308 [ 1163.785637][ T5841] SYZFAIL: failed to send rpc fd=3 want=624 sent=0 n=-1 (errno 32: Broken pipe) [ 1164.822769][T16797] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.097057][ T2954] net_ratelimit: 20 callbacks suppressed [ 1165.097089][ T2954] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1165.281896][ T5841] team0: Port device syz_tun removed [ 1165.306557][ T186] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1165.416195][ T186] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1165.537069][ T2982] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1165.646261][ T2982] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1165.756070][ T2948] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1165.866110][ T2948] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1165.976156][ T2982] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1166.086334][ T2982] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1166.196430][ T2982] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1166.406669][T16797] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.054148][T16797] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.182371][ T5598] syz_tun (unregistering): left allmulticast mode [ 1168.245943][ C0] sched: DL replenish lagged too much [ 1168.997825][T16797] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.136125][T14896] net_ratelimit: 34 callbacks suppressed [ 1170.136146][T14896] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1170.256945][ T186] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1170.366172][T14896] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1170.476021][T14896] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1170.586048][ T186] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1170.696116][T14896] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1170.802834][T16797] bridge_slave_1: left allmulticast mode [ 1170.814868][T16797] bridge_slave_1: left promiscuous mode [ 1170.828779][T16797] bridge0: port 2(bridge_slave_1) entered disabled state [ 1170.855448][T16797] bridge_slave_0: left allmulticast mode [ 1170.861342][T16797] bridge_slave_0: left promiscuous mode [ 1170.878442][T16797] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.369624][T16797] bond3 (unregistering): (slave gretap1): Releasing backup interface [ 1171.467858][T16797] bond8 (unregistering): (slave geneve0): Releasing active interface [ 1171.476026][T16797] geneve0 (unregistering): left allmulticast mode [ 1171.492857][T16797] team0: Port device geneve1 removed [ 1171.520528][T16797] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1171.540922][T16797] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1171.561678][T16797] bond0 (unregistering): Released all slaves [ 1171.573309][T16797] bond1 (unregistering): (slave batadv1): Releasing active interface [ 1171.588302][T16797] bond1 (unregistering): Released all slaves [ 1171.600930][T16797] bond2 (unregistering): Released all slaves [ 1171.613254][T16797] bond3 (unregistering): Released all slaves [ 1171.627418][T16797] bond4 (unregistering): Released all slaves [ 1171.642563][T16797] bond5 (unregistering): Released all slaves [ 1171.655336][T16797] bond6 (unregistering): Released all slaves [ 1171.683379][T16797] bond7 (unregistering): Released all slaves [ 1171.724205][T16797] bond8 (unregistering): Released all slaves [ 1171.745068][ T5293] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1171.766013][T14896] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1171.886032][T14896] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1172.005991][ T2948] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1172.127869][ T186] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 1172.173646][ T5293] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1172.571403][ T5293] 8021q: adding VLAN 0 to HW filter on device eth3