last executing test programs: 8.014522073s ago: executing program 0 (id=2744): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r2 = socket$netlink(0x10, 0x3, 0x12) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="0000008900"/18, @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x400c01c}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x12424048}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x1c, r5, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c044}, 0x1) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="64b2d0c53e00857dd74b6accd112a21323a78d41a38dc32e05a57672e3e3dd6fb0440459", @ANYRES16=0x0, @ANYBLOB="080027bd7000fddbdf254a000000080001007063690011000200303030303a30303a31302e3000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x8840) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x2, 0x66e03de5, 0x50, @loopback, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x40, 0x1, 0x5, 0x77f87502}}) r7 = accept(r0, &(0x7f0000000080)=@sco, &(0x7f0000000100)=0x80) sendto$packet(r7, &(0x7f00000001c0)="b3378181d41ce24ed273c3acb5fa4a8f44e04c0df00fc29893dcab37f7bdccdbb053dba6b7e69415d0852e565307075f90887f97eb760020ee3a036a7b81951fcf39960de89e6f8f0e0345b0f74caf16f8a5e74381ab27388a8fd521f51ac307ea4ed5dcd6b5f7da697b1ee725a37a939a0b75b1a23b650a3cba59ce206971271c36a272fe6c69e6df85248651a6aefb26a913766257e4c7231d6d60c949e0d4fc42f2ea99b1fbe4819ad3eacda03843d365fc1f4817aedc1868ff1915370d63a477e107cca04d39bdcab146aec9857e5ae91b875692e08015196ac4a7f38ab6a085b3b059eba6f3", 0xe8, 0x1, &(0x7f00000002c0)={0x11, 0xf7, 0x0, 0x1, 0x3, 0x6, @random="60a1ccc5e051"}, 0x14) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x14}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x9, 0x3}, &(0x7f00000001c0)=0x90) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000400)=0x0) connect$nfc_llcp(r7, &(0x7f0000000440)={0x27, r10, 0x0, 0x7, 0x7, 0xf, "9d0a212fa7d8c4e7465d7dfd66ee3220e5d246297b3912217576683dedb533655f8b813b2e6a4b5e4b157be60169d4529e19d5c7d45898ef9b46fb51e91f9f", 0x17}, 0x60) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) 6.491846878s ago: executing program 0 (id=2762): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a6ddf0000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000c00104000000000000000020900010a73797a3000000000080005400000000d08000640ffffff000800034000000038480000000c0a01010000000000000000070000000900020073797a31000000000900020073797a31000000001c0003b0c1000000000000081c000000050a010319d635cfaa110800000000000000000a0000020800054000000000140000001000010000000000000000000084000a00"/255], 0xf8}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff1d6405000000000065040400210000000404000001e37c60b7040000000000006a0a00fe000000008500000032000000b70000000000000095000000000000000ce0de7621e5e832249c04112cf7af2b75d0d1f034b1b3fb6bd3ce8fa62c7941272ff49142d860010ab162aa2264ab67e55a00000000000000edfe0969a9ddc125b686a1e83c8790c893d713b3295dad0ea697181d1e85b64126b5d72f204754d1d4a93f24215dee354e93cfc3f50ff23f8432c72012f021c84c59a9d4c142f439d3040cfee621589fb3a2f1407c7cbed48e7026f8d52d4bca2608c79aa4a73732028f88ce07ed1075da4a2ef44e3d8b88873f0b1de87dfb6d15936ec0a27cb554def9e27396df6b7851ffa26237ea6730880f06371beb3b290b7d8629a6f0373fefa0acb60888fc14ad2b83ca03ac2aee792482ced58af4140cc4ce3efef26e00c5b2200a91cb80c6065a697d6fc8aa8b65aee0783b04cff0218ce82c9687b4474da89c474c23727555fc5e5f8ad0f2f7a261140440fce1f12cc6df312accd011d888384283092d987c40bbb46f68c2431b97906f00000000349834fa147bd5923bbd4e606708034931a8f1a89bdf77093a0000427aab8e21e1a33d3fe093547532fce6549dd648ad233e05a7b3ea178007c1c32e871ac81f287c4aabbd153390b16d1d41ee433e3aee000000000009e106d6b5289f0000000000000000000000f7bc9f46cb71f6b889d37807865e3b4e9916dd0f72c9d58ea333b90f8886dcbf5ddda0e42ca08e3303632401f2f5212b40c0e88c957fd767dbfc80b07ad668b4f6f92fb209d7c2dbac597843c8eb7bf92fe6d0bb0b72549795c2ed19e441eb69869844152ba9da0588e42cdbc5fcd245ce5e3ef0dca64931276702a312db7956f0a75eb9caa17d47a6331c7c963cbf86a845ce27c26b7136d3e7207318b1df7a6320c64f18ccd926eaeddcde8d5006d6c38db117fb1115221a66169172720ccca770bff37e59511b2606138377eda44b2f288b491ab8aae0e11a98303b0e407e0f9d21f4a3ebbd3fabf6da9a1a1f869a339fab465d8322b7280b0734fd115a19b33c8644fff71b3c62f2e1b827e2663e06a751182e968c8ab05fb1d0115d4b11d944f2c06acc023a02b7416a9a10218d21503cda13bb5df6c992e52e1c01793b728eac000058ab3b3900d279297dadc127e2f38fc60c23af2e1fefa5a83456647191ba1953d320f59aa261fe79613df6bf43884e9649691e32680d75a541c27ffe74f9d13340f2cf1c7dc2b7db01213216cd4ecfd30efe137641471987289b7e23482e026b26eacd1b97443e2ea2d1d6e31a01ee0ae7fa195a2152b2338b086423a3883f2ce3e2f84e04f4d52c985eac4b46336908599564b47db0e6aa97ee51a360f4382fd99745725d44c77d097f69d19fe86f71c38a0226d44ebe0ecbd959f14b540745cd03b8c9f02b825ba45ca85706c73115f70871db9d2a1bc2a517b39f9648123917a5db07ba4e27f961373767e1ea8f7cc558e483abef1a9923c5cfa2081e430680950b7d7c377726b557ad31fdee17ba7057741f39d29d8ab295222f96297a777bb235416e72c84afef2bdb08fb375147b028b89f15af45bc8976b91158c13c9876daa71e7db0f5a17376be39ea79ce1246c547c740e31c64e5d293e0e5a544dd166010061d6ccae46c173b8e11721e4bce22c16af00000021f80ac6c3971006db853e3c40a5417d6eac09eb0e01ac6bd4c6dacdcb1d6d2ef9c8bdea91c984022821e961236d08f8b9072ec6cb5d5a68833fd5b4e80a5ac2bc6ff323f5ce612b59ce8177956c1affcc8baf4c8b59ab959aff9a7bd81f7c7c1f1bb92ddbeed6bce8041c7f0c1c584e6ae027678ce3cfbfea938aecc3c5119c5875b7fb35dc20f5c7aaae1e276104f607a73fe501c1045873a2b1eb80e95c87f099d98028dc82bdc7ef08c871fb3061c3c5ebd613e6e5e8cf099bb6e8c0441a133c85138b36a02c47fbedf7ed1d3ce74c9ec2c676c0b2d4b5eca61dbf5769b483c2a9f6bec666dae4e81960e9bad7f17cfc3d5bcc7b7f437110ca8ffa908c12086b2227eb202a8d56e0925ba994b05c98c39de44d25932449ddf08e5377814a40877eab4440ca01b3f50d2014a61a7d32105254b424238122386424efa3a7041254f686a5faac120942287f75e8e3db569ce47b120059d774a37e11d013be50cd2cbb00f6d2a23af61ec7d30bb7dc33a92f900b6ff1d29dc61cc40b846040dbafd00c6bcfbcf700"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="38010000100008000000000000000000fe8000000000000000000000000000170000000000000000000000000000000100000000000000000000000088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000000000007e6a929e2a914ee855921c00000000000000000000000100000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000080000000000000025bd7000000000000a0000000000000000000000480001007374726565626f6732353600000000000000000000000000000000000000000200"/251], 0x138}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000b800c0018"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) unshare(0x8040480) r4 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b29, &(0x7f0000000000)={'wlan0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x702, 0xe, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c1520800", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000005b1484000000000005000000000000008200000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000500)={'wg1\x00', 0x4000}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000e500000000000000", @ANYRES32=r5, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="050000000400000000000000000000000000000000002000cef11ac2"], 0x50) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$kcm(0x23, 0x5, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r6, 0x800) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, 0x0, 0x2, {0x2, 0x0, 0x2}}, 0x18) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r9) 5.98380037s ago: executing program 2 (id=2766): r0 = socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00ef0008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00ef0008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x70, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x12, 0x30}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}]}, 0x70}, 0x1, 0x0, 0x0, 0xc000}, 0x20000080) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r2, &(0x7f0000000480)=[{&(0x7f0000000200)="2e9b5b00ace03dd65193dfb6c561963d86dd606706000000060000000000449c34dcf74b5c85cd", 0x27}, {&(0x7f0000000380)="a1c6757dfaadb021e548300000000000006cf0c0a85fccb977ee8935b717a770c61882338034f1", 0x27}], 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) (async) bind$alg(r10, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r10, 0x117, 0x5, 0x0, 0x2) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) sendto$inet(r0, &(0x7f00000004c0)="6db6dfce06cc47ca5125fed84b991f0e3d3d0063b73af7f836860987218659cce7e6270eec715e5043df3f871f43659bcd3fb62b0c75f3d79dd92d5177db7968ecea45024c0d78ecae6d86c2964a6ee417db6cd84e8d1e8ee451bba03ee03d9cb5cbc89cb0111c2119be1d5e2fc24e5fe02e71608a9ebda5968f254203d15eeaa2ffe42776a020e811436754a5e4816a8ca5c91cbe5a2b21283860a19e4bd5372ba513fc360d6c2051b684b1f87fce0e316b18018e55f5628b92bc98c9dbcf65508d6c1de830a85ecf3503b858bf71615333dee0ce71a89e09d0be91a63f2b9132c4567556adc8ee9865319a27003efb8335", 0xf2, 0x80, &(0x7f00000005c0)={0x2, 0x4e24, @broadcast}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000000)={r11, 0xfffb}, 0x8) 5.901790087s ago: executing program 0 (id=2768): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x4, @remote, 0x9b90}, 0x1c) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030003100000002cbd7000ffdbdf2502000900080000001c0000000000000005000600000000000a004e2400000008ff01000000000000000000000000000100000000000000000200010000000000000006fc0100000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x0) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x4}, 0x10) r4 = socket(0x1d, 0x802, 0x6) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9c, 0x7b5, 0x0, 0x0, 0x7579e159, 0x0, 0xfffffdfc, 0xef4}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x8040000, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000068000000060a01040000000000000000010000004000048020000180070001007274000014000280080002400000000108000140000000031c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a300000000014000000110001"], 0xf0}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[], 0x7c}}, 0x2000c450) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x14, r5, 0x8b3b2c1205c54311, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000100) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f00000003c0)={0x0, 0x0, 0x8, 0x0, '\x00', [{0x0, 0x7fff, 0x8, 0x4, 0x9, 0x4e800000}, {0x6, 0x1, 0x8, 0x854, 0x7, 0xfbd}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r7, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r7, 0x400454cd, 0x301) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x40, r10, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x2, 0x25}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x96c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r0) 5.065607956s ago: executing program 1 (id=2773): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000e40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x114, r3, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x3c}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b5d478b678a4b91c7043e192fed5fed52182e390bb241075"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ee9da55fc437014526c6e264b7de0564bfcd9c4dda8b61a3"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8c9bb08b21ee137c4998f2d8222bb142a14a4835c4ba811a"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x114}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) (async) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x7, [@datasec={0x2, 0x1, 0x0, 0xf, 0x3, [{0x2, 0x1, 0x3}], "44942d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "9a"}]}, {0x0, [0x2e, 0x2e, 0x2e, 0x5f, 0x61]}}, &(0x7f00000014c0)=""/2, 0x47, 0x2, 0x1}, 0x28) (async) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9c940000, 0x0, 0x3, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000380)={@private1, 0x9c940000, 0x0, 0x3, 0x8, 0x1, 0xfffe}, 0x20) sendfile(r1, r5, 0x0, 0xffffffff000) (async) close(0x3) (async) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x4008054) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x20, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe4d, r11}, 0x94) write$nci(r7, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) (async) write$nci(r7, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x1e, 0x4, 0x0) 4.955205174s ago: executing program 4 (id=2774): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x68, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x6}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0x64, 0xd99d}}]}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendto$packet(r1, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x12, 0x830, &(0x7f0000000440)={0x11, 0x8100, r4, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) r5 = socket$packet(0x11, 0x3, 0x300) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000480)="3e314cfc204b39401b3c77c0b48c", 0x0, 0xae8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0xb, @dev}, @IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_RT_PRIORITY={0x8}]}, 0x48}}, 0x0) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="08000800060009"], 0xfce) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@alu={0x7, 0x0, 0xd, 0x9, 0x7, 0x8, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) r10 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r13, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff038}, {0xb1, 0x0, 0xfe, 0xfffff00c}, {0x6, 0x0, 0x1}]}, 0x10) sendmmsg(r12, &(0x7f0000000180), 0x4000190, 0x0) bind$packet(r10, &(0x7f0000000180)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r10, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400dcdc14"], 0xdd12}], 0x1}, 0x200400d1) 4.819938216s ago: executing program 2 (id=2775): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac010000170001000000000000000000ffffffff0000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000000000000000000000000000000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB], 0x1ac}, 0x1, 0x0, 0x0, 0x4880}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @mcast1, 0x4}, 0x1c) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f00000006c0)) ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40809440, &(0x7f0000000500)={&(0x7f0000000400)=[{&(0x7f0000000080)="67d54d09e33ff501287d4c508875fc9648e2e0fc67ae7d", 0x17}, {&(0x7f00000000c0)="00843d048f369937", 0x8}, {&(0x7f0000000100)="85551f710cfc3f25cfc824f37fa0c2423cbb2812c510f98fc56534847894b1e3a9bee835d615304fd558a5215f11b1acbae2f53816a01aaf1a2a9a7030ed6b0216bcf3be899f3ad261825f2cc19522f1db5fb6cff3f1151106841f160a18340872fa0c773234b6f85c0fe22175b1d48903a3bbcbce9b7a1846b3228a0edda83233a84f40000a8d3b63bac080d7774b0e54d9950f3a57a7fc9d6bef663aa6cd655621615a658c1a8bd4a81304344a51f7d1cbdddc0402612e0668b4610f1c24f9979105f3ec78e0624cabe4138479b800fca2133c5b93c0b1a5eb0d966ea13abb1622df8be720cdd971e517", 0xeb}, {&(0x7f0000000200)="b53916f8052e92b6b54480f8067f7b17956eb42204b4f683309cace9b6b30ea3804d938e923f3642d619b1cc157409bb60c55982ec65b9acf9cade18e32ee40d008a2cedf819e3637ca849a876a8011a3d7f8c588a15a1808dc1f60ea66078050e293f5986143a0d9adbebb6a56f2b5d8b0de5358105e54e2ed1907b8466bc4a80a1d53f0ea6802e12f870c214a98e1424cb4bb77205aedb6427612e7e5d", 0x9e}, {&(0x7f00000002c0)="3d1ff1b9e661981e9773b5a263679d63d7eaa6e2e3e0f65fe56ed4bf615b59b5f527f111b27bf422fac94f05fdb5144bd8545776e530f51ba91557ee756092587e71f0f8b5e18ed85f1036eb7adfb2d1d6d9ab41f814697bd3ad57dae6e65ad8aa0823a93d5af9575b9a556872ebe6ebec9c9375cfd842247353b2195593b1a7c013f0353a47abd46e8f5322", 0x8c}, {&(0x7f0000000380)="ca2724b0c0a4cfe0133611ed8f65ec11230302b2a93a48a2585f13f12b88720fab9896f595590f53a610c45b2de3bd4cfd5a2d9b4c55c63a0ad63ece6b5768b26819b31fab467b95abb363560848c3ec0391a35c64f1389eac420ddeda9517690463960d55aec030483c92e0f20115902ae1be0940124080", 0x78}], 0x6, 0xfffffffffffffc00, 0x0, 0x4, 0x5, 0x4af1, 0x5, 0xff}) sendmmsg$inet6(r0, &(0x7f0000002940), 0x40000000000017d, 0x888) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xffffffffffffff87) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg(r4, &(0x7f00000091c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB='\x00\x00$'], 0x10}}], 0x1, 0x4048004) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) unshare(0x6020400) r5 = gettid() syz_open_procfs$namespace(r5, &(0x7f0000000040)='ns/cgroup\x00') unshare(0x2c060000) unshare(0x2a060400) socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0xf5, &(0x7f0000000480)=""/6, &(0x7f0000000580)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) socket(0x3, 0x800, 0x2) 4.783430321s ago: executing program 1 (id=2777): unshare(0x26020480) r0 = socket(0xa, 0x2400000001, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140), &(0x7f0000000040)=0x4) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x40011}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c00000010003904000000000000000000008000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc02"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r1) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x34, r6, 0x400, 0x4070bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x22, 0x2, 0x9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x44885}, 0x20040800) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f00000000c0)={0x2000}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYRES64=0x0], 0x3c}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f00000005c0)) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYRESOCT=r0, @ANYRES32=r10, @ANYBLOB="00000000000000001400128009000100"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r11, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r12, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0xffffffff, {{0xa, 0x4e23, 0x7fff, @local, 0x7}}}, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xcd83, 0x0, 0x0, 0x0, 0xfffdfffd}, [@printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) recvfrom$packet(r11, &(0x7f00000003c0)=""/117, 0x75, 0x220, &(0x7f00000004c0)={0x11, 0x11, r12, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 4.340274053s ago: executing program 2 (id=2779): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x21}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="58000000020601020000000000000000020000090900020073797a3000000000050005000200000005000400020000000c000780080100400000000914000300686173683a69702c706f72742c6970000500010007000000"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r2) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r3, 0xbc914b49a8246e7, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r7, 0x4004743c, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r9, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03"], 0x340a) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x10, 0x12, &(0x7f0000000680)=ANY=[@ANYBLOB="18060000070000000000000000000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500800800000085000000a5000000181400009d16477528550396bbd2be11557725a5101096947f29a1c18d77d9b35a5ac516ba0a4552864457c365439d62f58a487c63deb72710a54388ba9dcee8bcc4b7aa6cb94ddb5251ad6b072be37bb267a63b3fb7a67a2e98170d150873b40fd7a4e83be96f111da0f37a3a9a293cd07d08051fbf07251c2155c9ced0a56b0b4fa67d9301347e50946f7199a74715c1167bb70bb72d8631caa9d4fd6fd9c5229ba6a4dfc578975665d7c64b1463959d1d7375e19e90181164da0342f9219b015461b97cd350d771d7a0da21be", @ANYRES32=r8, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r8, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r10}, 0x20) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r9, @ANYRES32=0x0, @ANYRESOCT=r10], 0x38}}, 0x0) r12 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r12, &(0x7f0000000600), 0x0, 0x48854) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r12, &(0x7f0000000180)={0x1d, r13, 0x1, {0x1, 0xff}, 0xfd}, 0x18) recvmsg(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/93, 0x5d}], 0x1}, 0x10000) connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) 4.29640099s ago: executing program 4 (id=2780): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x30, 0x2, 0x1, 0x3, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x88c}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10050}, 0x4) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r3 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000000000000000c00"], 0x5c}}, 0x0) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000002c0)={0x0, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x10, 0x803, 0x0) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x80000000}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000022c0)='`', 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e22, 0x3, @private2, 0x8}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000280)='1', 0x1}], 0x1}}], 0x2, 0x20000012) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f00000003c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @alu={0x7, 0x1, 0x5, 0x6, 0x1, 0x18, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @tail_call, @alu={0x4, 0x0, 0x1, 0x9, 0x9, 0x6, 0x10}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x3}], &(0x7f0000000440)='GPL\x00', 0x6, 0xa1, &(0x7f00000005c0)=""/161, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x10, 0x10000, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x94) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, 0x0, 0x30, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x1, 0x0, &(0x7f00000001c0)=[0x9], 0x3}}, 0x30) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r6, 0x23, 0x0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, 0x0, &(0x7f0000000140)) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010101, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100), 0x4) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000002c0)={0x0, 0x6, 0x1}, 0x8) 3.939272116s ago: executing program 2 (id=2783): unshare(0x20480) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x24, 0x4) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r1, &(0x7f0000000200)={0x2, @long}, 0x8) unshare(0x20480) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x24, 0x4) (async) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) connect$802154_dgram(r1, &(0x7f0000000200)={0x2, @long}, 0x8) (async) 3.805774172s ago: executing program 2 (id=2784): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x18d02, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x200000008}, @TCA_CAKE_RAW={0x8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x1}]}}]}, 0x50}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r7, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r8, &(0x7f0000001040)={0x27, r10, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004881}, 0x40004) ioctl$sock_bt_hci(r3, 0x400448e0, &(0x7f0000000140)) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x7101}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r13 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r13, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r14 = socket$inet(0xa, 0x801, 0x84) connect$inet(r14, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 3.774491825s ago: executing program 3 (id=2785): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x20, 0x300, 0xc, 0xc, 0x3, [@fwd={0x7}]}, {0x0, [0x30]}}, 0x0, 0x27, 0x0, 0x0, 0x4}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000ab850d6089b818c026c45b7387bb", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$xdp(0x2c, 0x3, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) close(0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) (async) bind$tipc(r3, 0x0, 0x0) sendmsg$tipc(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) (async) close(r3) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) (async) recvmsg$unix(r6, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) (async) pselect6(0x40, &(0x7f0000000000)={0x4, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x2000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x80000003}, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.703351405s ago: executing program 1 (id=2786): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYRES64=r0], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20044004) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)) unshare(0x20400) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002a40), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYBLOB="4a6c8c7817864533a44a240deeeb711628d15358ba4361b921b843d83082ee372890d0c9a4def63cb4f23ebdcb8bd4dabccf", @ANYBLOB="0014bf8b10381794fc6bac6eeab4ba7a671a6512e9ab92e73c11ba81deaee56556ad643c1643b2f788c97c9ed7532cbec58cc562f8d20752876713af33cb8532537a6f63416ad39ae864e95efa28c68a9f930fcb239adc3694be0abcc8921e8b76bb257122715c02cc6aae9fc08d0b99fb7a5793dd3f10c25eff67a0c75d9d54b3925cc64f69a8036a40ebbe377b6d058cf575baf49a818979d50962f0a76e52fcde76255c17a77948401def631183277135eba7cfeb5610b20b6a"], 0x14}, 0x1, 0x0, 0x0, 0x44084}, 0x2004c1c1) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r3, @ANYRES16, @ANYRES16], 0x4a}}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r5, 0x29, 0x4b, 0x0, &(0x7f0000000080)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f00007be000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x76b60000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="540000000206050000000000000000000700000005000100060000000d000300686173683a6e6574000000000900020073797a3100000000050005000200000005000400000000000c000780080012408ff9c99391326f5b060786de6fd5b50c6e248077dd4c885dc9ed0bb5db73a57420fe6a9431bd96cf291690d6e7eac33cb76bd1149b201683166a1f475fe1e5be704c509d080a9824d9e7d54a05f98c61456dbc5457a910d53366046cf8c7160991be29166e62c89190ba8850c401f5fa9d65b4301434bfadcf32dfae61cee72eb7e19ef7"], 0x54}, 0x1, 0x0, 0x0, 0xc0c1}, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000200), 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r5, 0xc0385868, &(0x7f0000000480)={0xffffffffffffffff, &(0x7f00000002c0)='I/*}\x00', 0x80000, &(0x7f0000000340)={@align=0x6, {0x8000, 0x8, 0xc, 0x8}}, 0xf, &(0x7f0000000440), &(0x7f0000000400)=0x4}) sendto$inet(r8, &(0x7f00000006c0)="545d2ae1847eb1dab5e4d99abeaae82a56b9675f703caa5a82d2202290085fc2a552e23695e25c39b7e1a6e0ab7e946296ff99b0aabec08ce4b712c5600e7d7a717f1c44a7c123cb7e087793780a88d144625227cf4e09b831c91d68316d8bf7fbaa5e7707bbb97619376d4ddcfe5db612e092d34ca28ca7e55c068ed9af594dcfcb6853256d50738427831227700c9d88a5cafa96418549842cefb190c706708947e9c9ec563c9d81d872097fd9a71555867604f43cf45276154b705fde9045ec7750c984ff5ab31a9b5495b7e8bbe587723d71345da58d9ab50f3abc02de2368f0", 0xe2, 0x4000, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, r6, 0xcf8a000) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x42) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 3.514912618s ago: executing program 3 (id=2787): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x1000000000000, 0x0, 0x10, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000100bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f01726a067818b990b13bfddb7e78270010720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f1000700"/187], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x30}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000810}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28) 3.346596155s ago: executing program 3 (id=2788): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00fd4c59e092ea322a7506ce68f38f56a0000000bfa100000000000007010000f8ffffffbfa400000000000007040000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00fd4c59e092ea322a7506ce68f38f56a0000000bfa100000000000007010000f8ffffffbfa400000000000007040000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) unshare(0xc040480) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9}, 0x48) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="4072588fb900030625bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32=r8, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}}, 0x20}}, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}}, 0x20}}, 0x0) r11 = socket(0x10, 0x803, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x90, 0x2c, 0xe27, 0xfffffff9, 0x0, {0x0, 0x0, 0x0, r13, {0xc, 0xc}, {}, {0x5, 0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x60, 0x2, [@TCA_CGROUP_ACT={0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x3}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8000, 0x3, 0x20000000, 0x1, 0x9}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}]}, {0x4}, {0xc, 0x3f, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x90}}, 0x20040054) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}]}}}]}, 0x5c}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) 3.140154346s ago: executing program 4 (id=2789): socket$inet6(0xa, 0x3, 0xff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[], 0x5c}}, 0x20084884) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket(0x10, 0x803, 0x0) socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0xcc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa0, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x6, 0x7, 0x1008, 0x3}, {0xfffffff9, 0x43, 0x7ffd, 0x6}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x8, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800004, 0x8000}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x5, 0xfff3}}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0xc040) r7 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1e0200000047000080000000006afd8cb7410b0fefc70fd42ce43f639444da5291f4eacd813a88b8838f09556d6d015400", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r10, &(0x7f0000000580)="2975a7229224f16270fea7fd5abce606a64821e31f94ceb6487c196ee066594616ed88d4ee2e73aec22b2527313488f522d83ca908f042456c5a4444436a9461f07f800335889b30f42100864d71b4", &(0x7f0000000600)=@tcp6=r8, 0x1}, 0x20) sendmsg$NFNL_MSG_CTHELPER_GET(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="b40000000109010800000000000000000a0000090900010073797a3100000000080005400000001c08000540000000060900010073797a30000000000c00048008", @ANYRESDEC=r9], 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x880) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000240)={0x4001, 0x7ff, 0x1000, 0x5}, 0x10) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="180000001600010a27c1a24281000000200006c8663e817c5f7debb629f0062c7d489f0ae66469ee6aff08d158bf6eeb2c11f350c8622eb15e88badb2be4b64be13e48368c59fececd9a14c13c87c53bd06a59f66feb2a827a16e27e679ee8c695579b54b074d08d78457004aa32359115acc2fa54ed47de75802e3158e4fd1b328435ed41b8efdfb6ee3352d89c115a7648c7c933cd2f89e7d95154462f1a0b657656c3ad2154966d334a7a6e306a02bd9aef9e3a3c9cc893cc4e9181cdc28328", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x66008050}, 0x24048) ioctl$XFS_IOC_FSGROWFSRT(r12, 0x40105870, &(0x7f00000003c0)={0x3, 0xd}) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001000010029bd7400fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2110000003000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000851}, 0x4000000) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.981566855s ago: executing program 3 (id=2790): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket(0x1, 0x803, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x2, 0x6, 0x630, 0x350, 0x280, 0x1b0, 0x280, 0x560, 0x560, 0x560, 0x560, 0x560, 0x560, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x18}, @local, @private2}}, @common=@inet=@multiport={{0x50}}]}, @HL={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2a}, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x5, 0x0, 0x52}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0xfc}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x690) socket$inet6(0xa, 0x3, 0x7) socket$netlink(0x10, 0x3, 0x4) socket$inet6(0xa, 0x3, 0x7) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x448, 0x250, 0x250, 0x0, 0x1b8, 0xe8, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x6, &(0x7f0000000140), {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x3}}}, {{@ip={@multicast2, @multicast1, 0x0, 0x0, 'vlan0\x00', 'wlan0\x00', {}, {}, 0x16, 0x1, 0x22}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x3, 0x5b739706bf4430, 0x0, 0x0, 0x3], 0x2, 0x4}, {0x1, [0x2, 0x6, 0x0, 0x0, 0x2, 0x4], 0x4, 0x7}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x2, 0x6, 0x9d20}}}, {{@ip={@loopback, @local, 0xff, 0xff000000, 'veth0_to_batadv\x00', 'virt_wifi0\x00', {}, {0xff}, 0x48, 0x1, 0x53}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x101, 0x8, @dev={0xac, 0x14, 0x14, 0x3f}, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r3, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40011}, 0xc040) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000219f0000df00000005000000181100e9", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000089000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000219f0000df00000005000000181100e9", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000089000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 2.858283807s ago: executing program 4 (id=2791): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000002c0)=0x3, 0x4) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}], 0x1, 0xc040) sendto$inet6(r0, 0x0, 0xa5651504c53ef6be, 0x40080, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @broadcast, @void, {@llc={0x4, {@llc={0x42, 0xf5, "ceb8", "049abf62af612c93c83de80f23b2a16d9349b961c8b2fbe10acbd105ba45e8619b7406b8551ded53b66a1ce2f3532787fd5d7a3692c9a39894e574691789d26e93f61c16967c4bd62478038b4d5096fa785d8bdb63d1dd08f3643d82488f847ebea01d22d310b0e489750561afa2750e373ba0845fb34123900ca918c38819cdb7fb4285"}}}}}, &(0x7f0000000180)={0x0, 0x3, [0x31d, 0x990, 0x588, 0x1fe]}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) 2.804383108s ago: executing program 0 (id=2792): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x10001) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x80000001) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) sendto$inet6(r3, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x800, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x4, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) shutdown(r3, 0x1) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000180), &(0x7f0000000200)=0x8) ioctl$SIOCGSTAMPNS(r3, 0x8907, 0x0) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x100, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c21000000007c39ce002020207b1af8ff00000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b708000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) connect$inet(r1, &(0x7f0000000000)={0x2, 0x7, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto, @union={0x0, 0x0, 0x0, 0x2, 0x0, 0x3}]}, {0x0, [0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x45}, 0x28) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r7, 0xc040583f, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_SHOW_PORTS(r8, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20008005) 2.634556031s ago: executing program 4 (id=2793): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000a00)={r1, &(0x7f0000000940), &(0x7f00000009c0)=""/20}, 0x20) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$inet6_int(r3, 0x29, 0x38, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x9, r7, 0x1e}, 0x10) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000b, 0x11, r6, 0x100000000) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x48, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x6b}, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 645.906531ms ago: executing program 1 (id=2794): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53, 0x0, 0x1}, 0x28) r1 = socket$kcm(0xa, 0x2, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="14000b00fe80000000000000000000000000000014000100ff0200000000000000000000000000010800090000000000040cbd7bcde9bf631792b8eb9675199b1f5510d5ee3e9cd1987a5f0cccd41908df8a5ed4230d76d39eafebbd179e2c2f38235b62bf745123a769cc351bfc3a9409a120f4028efc8dda70561e68d6d83700fa17c7a4b4fd64deb1ac414d3afe8264cfce9f6db9fd82142e01ec210eed93c52983fc11c77a7600"/179], 0x48}}, 0x0) (async, rerun: 64) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)={0xffffffffffffffff}) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfd3fc, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r6, {}, {0xafabc05531515610, 0xfff3}, {0xd, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054) (async) setsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f0000000040)={@remote, r6}, 0x14) unshare(0x40000) (async) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000140)={0x5, 0x3, 0x0, 0x1, 0x6, 0x4, 0x10, 0x4, 0x2, 0xf8, 0x8, 0x6, 0xc, 0x7f}, 0xe) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r7, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r8 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) (async) sendmmsg(r0, &(0x7f0000007fc0), 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000006", @ANYRES32=0x0, @ANYBLOB="158804000301040008001b000000000008000d0003000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 644.962405ms ago: executing program 3 (id=2795): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES8=r6, @ANYBLOB="0100000000000000000026000000080007000000000018000180140002007465616d5f736c6176655f30"], 0x34}}, 0x4004080) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000200)={@multicast1, @dev, 0x0}, &(0x7f00000002c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r10, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x5, 0x600}}, 0x20) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'erspan0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x1, 0x1, 0xff3, 0x0, {{0xb, 0x4, 0x0, 0x3, 0x2c, 0x65, 0x0, 0xc4, 0x4, 0x0, @private=0xa010100, @empty, {[@rr={0x7, 0xb, 0xfc, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @generic={0x94, 0xa, "b70c5af96471f881"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x2f, 0xff, 0x5, 0x5, 0x23, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x48, 0x1000, 0x400}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000006c0)={'ip_vti0\x00', &(0x7f0000000580)={'gre0\x00', 0x0, 0x8000, 0x80, 0xfffffe00, 0x6, {{0x1a, 0x4, 0x0, 0x8, 0x68, 0x64, 0x0, 0x4, 0x2d, 0x0, @empty, @private=0xa010100, {[@timestamp={0x44, 0xc, 0x5b, 0x0, 0x4, [0x7, 0x6]}, @generic={0x44, 0x8, "9e30298909ca"}, @lsrr={0x83, 0x17, 0x4f, [@loopback, @broadcast, @broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x27, 0x1, [{0x1, 0xc, "ab702ff60ae72d9909ca"}, {0x5, 0x11, "59b058c595868975636ad28cb5e266"}, {0x7, 0x4, "949e"}]}]}}}}}) setsockopt$sock_void(r0, 0x1, 0x4, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000940)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000700)={0x1c4, r6, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x20040804}, 0x4040080) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r16, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r17}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x7b}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 635.246918ms ago: executing program 0 (id=2796): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x568, 0x0, 0x0, 0x148, 0x2d0, 0x148, 0x4d0, 0x240, 0x240, 0x4d0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x288, 0x2d0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x5, 0x1, 'netbios-ns\x00'}}}, {{@ip={@local, @multicast1, 0xff000000, 0xffffff00, 'tunl0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x11, 0x3, 0x60}, 0x0, 0x1b8, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0xa, 0x9, 0x1, 0x0, 'syz1\x00', 0x10}}, @common=@inet=@multiport={{0x50}, {0x1, 0x6, [0x4e24, 0x4e22, 0x4e24, 0x4e22, 0x4e22, 0x4e24, 0x4e21, 0x4e21, 0xe20, 0x4e22, 0x4e20, 0x4e23, 0x4e23, 0x4e24, 0x4e24], [0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1], 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xc7e, 0x8, 0x7, '\x00', {0x20}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5c8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000200000000000000fcffffff850000007d0000009500000000000000edaecf5a3ab5ee406b6d3a228ae43e10125a294f7b8e3f7745e5f1bdf04270cf29cee1b65b5a2f97f3f5357b6cc545c1d4d2e15f38333dc306f61bf7eda1c1cb3a8890e6346cca46b1e0dbc3d28ef47a2a92ff6aa3d0790299208f3a80e8acd80fc665c8cb39f3ffd077099039"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94) r1 = socket(0x18, 0x80000, 0x1) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x0, 0x3ff, 0x0, 0xca, 0x0, 0x0, 0x1, 0xffffffff}}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000800000000000000080000009111bb000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) openat$cgroup_devices(r2, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) 539.183891ms ago: executing program 4 (id=2797): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000003340)=[{{&(0x7f0000000000)=@sco={0x1f, @none}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/130, 0x82}, {&(0x7f0000000340)=""/73, 0x49}], 0x2, &(0x7f0000000400)=""/5, 0x5}, 0xfffffff7}, {{&(0x7f0000000440)=@generic, 0x80, &(0x7f00000007c0)=[{&(0x7f00000004c0)=""/140, 0x8c}, {&(0x7f0000000580)=""/35, 0x23}, {&(0x7f00000005c0)=""/181, 0xb5}, {&(0x7f0000000680)=""/188, 0xbc}, {&(0x7f0000000740)=""/66, 0x42}], 0x5, &(0x7f0000000840)=""/103, 0x67}, 0x7}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/183, 0xb7}, {&(0x7f0000000980)=""/151, 0x97}], 0x2, &(0x7f0000000a80)=""/4096, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/30, 0x1e}, {&(0x7f0000002ac0)=""/213, 0xd5}, {&(0x7f0000002bc0)=""/117, 0x75}, {&(0x7f0000002c40)=""/215, 0xd7}, {&(0x7f0000002d40)=""/223, 0xdf}, {&(0x7f0000002e40)=""/208, 0xd0}, {&(0x7f0000002f40)=""/90, 0x5a}], 0x8}, 0xd032}, {{&(0x7f0000003040)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000032c0)=[{&(0x7f00000030c0)=""/155, 0x9b}, {&(0x7f0000003180)=""/91, 0x5b}, {&(0x7f0000003200)=""/125, 0x7d}, {&(0x7f0000003280)=""/19, 0x13}], 0x4, &(0x7f0000003300)}, 0x3}], 0x5, 0x10000, &(0x7f0000003480)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x8, 0x7f, 0x8, 0x10000, 0xfb4, 0xf3ae, 0x9, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x2}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMRU1(r9, 0x40047452, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x600, &(0x7f00000002c0)={&(0x7f0000000080)=@newtaction={0xf8, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xe4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x52, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0x10d7, 0xffffffffffffffff}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0xfffffffffffffd10}, {0x4, 0x6, "cf908e4229cef19e929eca7cbee2023dbe49a17287dde768b5fa3ca767f6f13f9cda20f02b48d9d14be259c3b84f6dc8bbfb013c5d4dce55bc18ff7cbae8fba0960aa6b0a25dfc66ca37b699818f1cef29fe753ba9a0820af28fc3538606b004e5c950f1bbd6"}, {0xfffffffffffffd68}, {0xc}}}]}]}, 0xf8}}, 0x0) 486.384094ms ago: executing program 2 (id=2798): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x7fffffff}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffcef, 0x0, 0x0, 0x0}, 0x94) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x4008880) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x475, 0x4, 0x3}, 0x1c) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x4003, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg$unix(r6, &(0x7f0000000100)={0x0, 0x1d, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg$unix(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000700)=""/4080, 0xff0}], 0x1}, 0x20) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f00000002c0)={'filter\x00', 0x0, 0x0, 0x0, [0xc, 0x3, 0x181, 0x50a, 0x9, 0x7], 0x9, &(0x7f0000000140), 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x108) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x18, 0x44, 0x1, 0x70bd29, 0x4, {0x2}, [@nested={0x4, 0x48}]}, 0x18}, 0x1, 0x0, 0x0, 0x200048d5}, 0x4008094) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0xf0ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r8, &(0x7f0000001380), &(0x7f0000000240)=""/10, 0x2}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004"], 0x4c}}, 0x0) 388.511179ms ago: executing program 1 (id=2799): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000009000000000000000800000091116a000000000095"], &(0x7f0000000c40)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000125bd6f00fbdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRESOCT=r2, @ANYBLOB="0dfa13001600000024eb010600000000011800000800013eaa703355b1bac15598980eee19605b5302885c4a4c8b21b4f5fcf0006482dba6145f55e768548b258c51ea"], 0x44}}, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0xffffffff) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newtaction={0x114, 0x30, 0xb, 0x5, 0x25dfdbfe, {}, [{0x100, 0x1, [@m_tunnel_key={0xfc, 0x8a, 0x0, 0x0, {{0xf}, {0x4}, {0xcb, 0x6, "56bc5113eb8c7b72c64d9e821763144bd0c3a2d40b7fd20a06d8a70f75dec08b5e84888e7d33173dad9d5ff0d7e34b790f4f2487f98809dda60f9b6aec0eec33b9b4b147ac02e442f9ff18217cb0f30e83f066ae53aa772231adec162a68c3b3c31849a8dc795f51dc5bdd899249e5b15e2ab6197ae828cbf31048578e54c529c1cff38ab3ae9b3fe7ec0680c655db52df001c2c13044eac4b473f39b121253e9d7125fad1730923ce0ae8bfb52e7e9e93ddc1d8bc0b10d5f6646cee576555b84c6fc4372cfd2c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r5, 0x0, 0xf, 0x0, &(0x7f0000000300)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x1, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x50) socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000a00)={0x3, &(0x7f0000000940)=[{0x20, 0x7b, 0x6, 0x6c78}, {0x25, 0x0, 0x1, 0x7fffffff}, {0x6, 0x7, 0xa1, 0x1000}]}, 0x10) sendmmsg$inet(r6, &(0x7f0000002c40), 0x0, 0x5) socket$inet6(0xa, 0x1, 0x7fffffff) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000280)={r2, 0x7, 0x104, 0x7ff}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000c000000180001801400020073797a5f74756e0000000000000000001c00038004000100140003800c000180050002"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) 121.509104ms ago: executing program 0 (id=2800): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000180)=0x200000, 0x4) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=0x30) 3.575808ms ago: executing program 3 (id=2801): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000b40)=[@in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x27}, 0x2}, @in6={0xa, 0x4e20, 0x0, @local, 0x7}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000000)={r5, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000400)={r5, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x8}, 0x90) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x23, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r6], 0x5c}}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0xbf}], {0x95, 0x0, 0x700}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 0s ago: executing program 1 (id=2802): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000000)=0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0xd0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@mh={{0x28}, {"3682", 0x1}}, @common=@inet=@length={{0x28}, {0x101, 0x8}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@private0, @dev={0xfe, 0x80, '\x00', 0x41}, [0xff000000, 0x0, 0xffffffff, 0xffffffff], [0xff, 0x0, 0xffffffff, 0x7fffff00], 'tunl0\x00', 'syz_tun\x00', {0xff}, {}, 0x67, 0xe, 0x2, 0x10}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x3ff, 0x1, 0x0, [0x1, 0x3, 0xc5c, 0x7, 0x101, 0xc4, 0x97, 0x9, 0xf8e5, 0x2, 0x6, 0x81, 0xe5, 0x101, 0x8, 0x4], 0xe}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYRES64=r2], &(0x7f0000000040)='GPL\x00', 0x104, 0x0, 0x0, 0x41000}, 0x94) clock_gettime(0x0, &(0x7f0000000000)) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010002108fdffffff0000000600000000", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) r5 = socket(0x10, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) readv(r3, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r7 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x50}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000006000000000000000700b5c103d700"/32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x200000d5}, 0x44051) recvmsg(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) kernel console output (not intermixed with test programs): allmulticast mode [ 343.241734][T11606] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 343.963655][T11668] netlink: 'syz.3.1347': attribute type 58 has an invalid length. [ 343.991587][T11668] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1347'. [ 344.376664][ T8814] net_ratelimit: 29 callbacks suppressed [ 344.376764][ T8814] bond3: (slave gretap0): failed to get link speed/duplex [ 344.534687][ T8814] bond3: (slave gretap0): failed to get link speed/duplex [ 344.696322][ T8814] bond3: (slave gretap0): failed to get link speed/duplex [ 344.786354][T11691] xt_cgroup: invalid path, errno=-2 [ 344.814618][ T9804] bond3: (slave gretap0): failed to get link speed/duplex [ 344.958318][ T9801] bond3: (slave gretap0): failed to get link speed/duplex [ 344.974767][T11699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1353'. [ 345.015856][ T9801] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.024424][T11699] netlink: 'syz.3.1353': attribute type 22 has an invalid length. [ 345.037978][T11701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.049452][ T9801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.058417][T11699] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1353'. [ 345.084574][T11707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.207841][T11705] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 345.291698][T11715] netlink: 67 bytes leftover after parsing attributes in process `syz.3.1357'. [ 345.313772][T11705] bond7 (unregistering): Released all slaves [ 345.474426][T11711] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 345.495091][ T9801] bond3: (slave gretap0): failed to get link speed/duplex [ 345.579583][T11715] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 345.674192][ T9804] bond3: (slave gretap0): failed to get link speed/duplex [ 345.805613][ T8800] bond3: (slave gretap0): failed to get link speed/duplex [ 346.139855][T11747] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1364'. [ 346.304133][T11758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1370'. [ 346.528084][T11769] netlink: 'syz.3.1374': attribute type 10 has an invalid length. [ 346.545759][T11769] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1374'. [ 346.561391][T11767] netlink: 'syz.1.1373': attribute type 11 has an invalid length. [ 346.582828][T11767] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1373'. [ 346.620846][T11769] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1374'. [ 346.751482][T11775] netlink: 'syz.1.1377': attribute type 12 has an invalid length. [ 347.134809][T11792] bond7: option xmit_hash_policy: invalid value (10) [ 347.143445][T11797] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1381'. [ 347.161464][T11792] bond7 (unregistering): Released all slaves [ 347.800159][T11831] netlink: 'syz.4.1391': attribute type 3 has an invalid length. [ 347.827950][T11831] netlink: 'syz.4.1391': attribute type 1 has an invalid length. [ 347.837328][T11831] netlink: 'syz.4.1391': attribute type 2 has an invalid length. [ 347.848880][T11831] netlink: 'syz.4.1391': attribute type 1 has an invalid length. [ 347.858651][T11831] netlink: 'syz.4.1391': attribute type 2 has an invalid length. [ 347.868258][T11831] netlink: 'syz.4.1391': attribute type 1 has an invalid length. [ 347.878271][T11831] netlink: 'syz.4.1391': attribute type 1 has an invalid length. [ 348.267826][T11855] sit0: Master is either lo or non-ether device [ 348.412604][T11857] ip6gre2: entered promiscuous mode [ 348.431023][T11857] ip6gre2: entered allmulticast mode [ 348.480154][T11868] veth0_macvtap: entered allmulticast mode [ 349.020185][ T8814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.055131][ T8814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.130077][T11894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.140403][T11332] udevd[11332]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 349.334941][T11899] x_tables: duplicate underflow at hook 1 [ 349.341528][T11900] __nla_validate_parse: 5 callbacks suppressed [ 349.341560][T11900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1407'. [ 349.438764][ T8800] net_ratelimit: 27 callbacks suppressed [ 349.438787][ T8800] bond3: (slave gretap0): failed to get link speed/duplex [ 349.574540][ T8814] bond3: (slave gretap0): failed to get link speed/duplex [ 349.694148][ T8800] bond3: (slave gretap0): failed to get link speed/duplex [ 349.824435][ T8814] bond3: (slave gretap0): failed to get link speed/duplex [ 349.955042][ T8800] bond3: (slave gretap0): failed to get link speed/duplex [ 350.084903][ T8814] bond3: (slave gretap0): failed to get link speed/duplex [ 350.479729][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 350.531136][T11945] vlan0: left promiscuous mode [ 350.588771][T11945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.598873][T11945] 8021q: adding VLAN 0 to HW filter on device bond4 [ 350.612643][T11945] 8021q: adding VLAN 0 to HW filter on device bond5 [ 350.633754][T11945] geneve3: left promiscuous mode [ 350.718360][T11927] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 350.804197][ T9804] bond3: (slave gretap0): failed to get link speed/duplex [ 350.841970][ T9800] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 350.928022][ T47] bond3: (slave gretap0): failed to get link speed/duplex [ 350.928429][T11966] netlink: 272 bytes leftover after parsing attributes in process `syz.4.1420'. [ 351.148624][T11970] vlan2: entered promiscuous mode [ 351.191488][T11970] hsr0: entered promiscuous mode [ 351.205895][T11980] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1426'. [ 351.215456][T11970] vlan2: entered allmulticast mode [ 351.221212][T11970] hsr0: entered allmulticast mode [ 351.228273][T11970] hsr_slave_0: entered allmulticast mode [ 351.234990][T11970] hsr_slave_1: entered allmulticast mode [ 351.258388][T11987] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1426'. [ 351.293004][T11986] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1427'. [ 351.326885][T11986] 8021q: VLANs not supported on ip_vti0 [ 351.650585][T11997] netlink: 'syz.0.1429': attribute type 12 has an invalid length. [ 351.669072][T11997] netlink: 'syz.0.1429': attribute type 5 has an invalid length. [ 352.067215][T12019] xt_CT: You must specify a L4 protocol and not use inversions on it [ 352.077394][T12023] xt_hashlimit: max too large, truncated to 1048576 [ 352.182579][T12028] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 352.230991][T12028] syzkaller0: entered promiscuous mode [ 352.240049][T12028] syzkaller0: entered allmulticast mode [ 352.266087][T12030] lo speed is unknown, defaulting to 1000 [ 352.308750][T12030] lo speed is unknown, defaulting to 1000 [ 352.465267][T12034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1440'. [ 352.486479][T12034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1440'. [ 352.851707][T12046] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1442'. [ 352.871868][T12030] netlink: 'syz.0.1438': attribute type 28 has an invalid length. [ 352.880149][T12030] netlink: 'syz.0.1438': attribute type 3 has an invalid length. [ 352.888828][T12030] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1438'. [ 354.484475][ T47] net_ratelimit: 100 callbacks suppressed [ 354.484501][ T47] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 354.501047][ T47] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 354.515778][ T9801] bond3: (slave gretap0): failed to get link speed/duplex [ 354.614481][ T8814] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 354.622611][ T8814] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 354.634776][ T9800] bond3: (slave gretap0): failed to get link speed/duplex [ 354.734582][ T9800] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 354.742752][ T9800] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 354.764198][ T9800] bond3: (slave gretap0): failed to get link speed/duplex [ 354.864603][ T8814] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 354.882939][T12014] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 355.206812][T12054] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1443'. [ 355.283879][T12053] syzkaller0: entered promiscuous mode [ 355.319930][T12053] syzkaller0: entered allmulticast mode [ 355.467820][T12054] lo speed is unknown, defaulting to 1000 [ 355.477229][T12056] syzkaller0: entered promiscuous mode [ 355.493816][T12056] syzkaller0: entered allmulticast mode [ 355.509840][T12054] lo speed is unknown, defaulting to 1000 [ 355.522719][T12068] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1450'. [ 355.608971][T12071] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1451'. [ 355.622137][T12061] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1447'. [ 356.540274][T12095] IPVS: set_ctl: invalid protocol: 103 172.30.0.4:20001 [ 356.776726][T12104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1458'. [ 356.868522][T12113] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 356.967000][T12118] netlink: 'syz.4.1460': attribute type 4 has an invalid length. [ 356.988380][T12118] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1460'. [ 357.482964][T12134] xt_l2tp: invalid flags combination: 8 [ 357.508905][T12126] bridge0: port 3(dummy0) entered disabled state [ 357.515625][T12126] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.523300][T12126] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.703808][T12126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.725491][T12126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.746446][T12140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1467'. [ 357.862727][T12126] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 357.931075][ T7854] lo speed is unknown, defaulting to 1000 [ 357.936947][T12129] lo speed is unknown, defaulting to 1000 [ 357.945495][T12130] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 357.965845][ T7854] syz2: Port: 1 Link DOWN [ 357.991948][T12139] erspan1: entered allmulticast mode [ 358.013054][ T8800] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.040358][ T8800] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.076626][ T8800] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.116716][ T8800] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.180191][T12147] Cannot find del_set index 1 as target [ 358.700414][T12167] syzkaller0: entered promiscuous mode [ 358.712427][T12167] syzkaller0: entered allmulticast mode [ 358.993257][T12176] SET target dimension over the limit! [ 359.162719][T12182] netlink: 'syz.3.1479': attribute type 1 has an invalid length. [ 359.286496][T12182] 8021q: adding VLAN 0 to HW filter on device bond7 [ 359.382504][T12185] bridge0: port 5(batadv0) entered blocking state [ 359.415353][T12185] bridge0: port 5(batadv0) entered disabled state [ 359.429807][T12185] batadv0: entered allmulticast mode [ 359.440118][T12185] batadv0: entered promiscuous mode [ 359.460232][T12189] bond7: entered promiscuous mode [ 359.476663][T12189] bond7: entered allmulticast mode [ 359.494555][ T9801] net_ratelimit: 179 callbacks suppressed [ 359.494577][ T9801] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 359.508782][ T47] bond3: (slave gretap0): failed to get link speed/duplex [ 359.590920][ T9801] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 359.646080][ T9804] bond3: (slave gretap0): failed to get link speed/duplex [ 359.673757][T12185] IPVS: Scheduler module ip_vs_ not found [ 359.714570][ T8800] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 359.744232][ T8800] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 359.796896][ T9801] bond3: (slave gretap0): failed to get link speed/duplex [ 359.814847][ T8814] batman_adv: batadv0: IGMP Querier appeared [ 359.822547][ T8814] batman_adv: batadv0: MLD Querier appeared [ 359.885773][ T9801] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 359.914536][ T9801] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 359.954903][ T9801] bond3: (slave gretap0): failed to get link speed/duplex [ 360.430079][T12225] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1491'. [ 360.480807][T12225] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1491'. [ 360.562325][T12231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1491'. [ 361.252277][T12250] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1497'. [ 361.289897][T12250] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1497'. [ 361.700260][T12264] sit0: left promiscuous mode [ 361.718893][T12265] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1500'. [ 361.770325][T12264] mac80211_hwsim hwsim9 wlan0: left promiscuous mode [ 361.796108][T12264] mac80211_hwsim hwsim9 wlan0: left allmulticast mode [ 361.815069][T12264] gre1: left allmulticast mode [ 361.825456][T12264] gtp0: left promiscuous mode [ 361.838038][T12264] gtp0: left allmulticast mode [ 361.858143][T12264] geneve2: left promiscuous mode [ 362.038764][T12264] bridge3: left allmulticast mode [ 362.095407][T12264] bond0: left promiscuous mode [ 362.116214][T12264] bridge6: left promiscuous mode [ 362.175635][T12264] vlan2: left promiscuous mode [ 362.187093][T12264] hsr0: left promiscuous mode [ 362.198552][T12264] vlan2: left allmulticast mode [ 362.209476][T12264] hsr0: left allmulticast mode [ 362.222357][T12264] hsr_slave_0: left allmulticast mode [ 362.228794][T12264] hsr_slave_1: left allmulticast mode [ 362.299206][ T9800] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.309303][ T9800] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.352514][ T9800] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.372454][ T9800] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.483651][T12290] sit2: entered promiscuous mode [ 362.581561][T12293] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1506'. [ 362.594436][T12295] netlink: 'syz.3.1507': attribute type 11 has an invalid length. [ 362.611633][T12293] ipvlan1: entered promiscuous mode [ 362.627180][T12295] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1507'. [ 362.635492][T12293] ipvlan1: left promiscuous mode [ 362.681380][T12295] netlink: 'syz.3.1507': attribute type 11 has an invalid length. [ 362.703720][T12295] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1507'. [ 362.704205][T12297] syzkaller0: entered promiscuous mode [ 362.744623][T12297] syzkaller0: entered allmulticast mode [ 362.757833][T12295] netlink: 'syz.3.1507': attribute type 11 has an invalid length. [ 362.789473][T12295] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1507'. [ 362.822943][T12295] netlink: 'syz.3.1507': attribute type 11 has an invalid length. [ 362.909567][T12295] netlink: 'syz.3.1507': attribute type 11 has an invalid length. [ 362.928213][T12295] netlink: 'syz.3.1507': attribute type 11 has an invalid length. [ 362.947953][T12295] netlink: 'syz.3.1507': attribute type 11 has an invalid length. [ 362.969657][T12295] netlink: 'syz.3.1507': attribute type 11 has an invalid length. [ 362.999386][T12295] netlink: 'syz.3.1507': attribute type 11 has an invalid length. [ 363.140251][T12295] netlink: 'syz.3.1507': attribute type 11 has an invalid length. [ 363.830666][ T30] audit: type=1804 audit(1782628093.748:7): pid=12324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1513" name="/newroot/297/cgroup.controllers" dev="tmpfs" ino=1548 res=1 errno=0 [ 363.894628][ T30] audit: type=1800 audit(1782628093.748:8): pid=12324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1513" name="cgroup.controllers" dev="tmpfs" ino=1548 res=0 errno=0 [ 363.942741][ T30] audit: type=1800 audit(1782628093.748:9): pid=12323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1513" name="cgroup.controllers" dev="tmpfs" ino=1548 res=0 errno=0 [ 364.516837][ T9803] net_ratelimit: 166 callbacks suppressed [ 364.516860][ T9803] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 364.547358][ T9800] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 364.584581][ T9800] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 364.607573][ T9803] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 364.637471][ T9803] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 364.664200][ T9803] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 364.686423][ T9803] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 364.716540][ T9800] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 364.746645][ T9800] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 364.777693][ T9803] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 365.881443][T12344] __nla_validate_parse: 7 callbacks suppressed [ 365.881465][T12344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1518'. [ 366.270556][T12357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1522'. [ 366.294806][T12364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1523'. [ 366.499371][T12375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1528'. [ 366.590865][T12381] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1530'. [ 366.708046][T12375] 8021q: adding VLAN 0 to HW filter on device bond7 [ 366.774925][T12384] bond7: entered promiscuous mode [ 366.793332][T12384] bond7: entered allmulticast mode [ 366.832667][T12384] 8021q: adding VLAN 0 to HW filter on device bond7 [ 366.873228][T12384] team0: Port device bond7 added [ 366.959917][T12385] team0: Port device bond7 removed [ 366.986971][T12385] bond7 (unregistering): Released all slaves [ 367.169316][T12392] veth6: entered allmulticast mode [ 367.210216][T12400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1534'. [ 367.243395][T12400] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1534'. [ 367.312831][T12402] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1535'. [ 367.642981][T12416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1540'. [ 367.711078][T12427] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1542'. [ 367.843773][T12419] 8021q: adding VLAN 0 to HW filter on device bond7 [ 368.291226][T12451] syzkaller0: entered promiscuous mode [ 368.297136][T12451] syzkaller0: entered allmulticast mode [ 369.019908][ T5361] lo speed is unknown, defaulting to 1000 [ 369.028091][T12476] smc: net device lo applied user defined pnetid SYZ2 [ 369.037596][ T5361] syz2: Port: 1 Link ACTIVE [ 369.077147][T12477] smc: net device lo erased user defined pnetid SYZ2 [ 369.614950][ T9801] net_ratelimit: 151 callbacks suppressed [ 369.614968][ T9801] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 369.633783][ T9801] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 369.755098][ T9801] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 369.763264][ T9801] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 369.885244][ T9804] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 369.905720][ T9804] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 370.034753][ T9803] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 370.042722][ T9803] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 370.154832][ T9803] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 370.162750][ T9803] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 371.790066][T12473] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 372.052355][T12528] __nla_validate_parse: 3 callbacks suppressed [ 372.052375][T12528] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1568'. [ 372.081220][T12531] tipc: Enabling of bearer rejected, failed to enable media [ 372.125812][T12534] netlink: 768 bytes leftover after parsing attributes in process `syz.3.1572'. [ 372.237141][T12541] x_tables: duplicate underflow at hook 1 [ 372.677745][T12554] lo speed is unknown, defaulting to 1000 [ 372.915526][T12554] lo speed is unknown, defaulting to 1000 [ 373.142017][T12570] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1580'. [ 373.146325][T12562] syzkaller0: entered promiscuous mode [ 373.177429][T12562] syzkaller0: entered allmulticast mode [ 373.193507][T12571] validate_nla: 2 callbacks suppressed [ 373.193605][T12571] netlink: 'syz.1.1580': attribute type 2 has an invalid length. [ 373.241139][T12571] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1580'. [ 373.526148][T12574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1581'. [ 373.758668][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 373.803234][T12577] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1582'. [ 374.634241][ T8800] net_ratelimit: 132 callbacks suppressed [ 374.634267][ T8800] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 374.664487][ T8800] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 374.688471][ T8800] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 374.720347][ T9800] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 374.744310][ T9800] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 374.768671][ T9800] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 374.794410][ T9800] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 374.826191][ T9800] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 374.858023][ T9800] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 374.900056][ T9800] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 375.912685][T12579] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 376.043163][T12586] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 376.128710][T12596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1586'. [ 376.928353][T12630] netlink: 'syz.1.1595': attribute type 1 has an invalid length. [ 377.010192][T12636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1597'. [ 377.084559][T12630] 8021q: adding VLAN 0 to HW filter on device bond7 [ 377.093214][T12634] bond7: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 377.108863][T12634] bond7: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 377.291056][T12650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1601'. [ 377.327949][T12650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1601'. [ 377.362907][T12650] netlink: 'syz.3.1601': attribute type 14 has an invalid length. [ 377.398466][T12650] netlink: 'syz.3.1601': attribute type 13 has an invalid length. [ 377.421143][T12656] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1603'. [ 377.668147][T12670] xt_hashlimit: size too large, truncated to 1048576 [ 377.694804][T12667] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1607'. [ 377.814398][T12679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1605'. [ 377.848722][T12671] netlink: 'syz.4.1608': attribute type 1 has an invalid length. [ 378.438717][T12702] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1613'. [ 378.477827][T12702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1613'. [ 378.499989][T12702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1613'. [ 378.560150][T12709] xt_l2tp: v2 doesn't support IP mode [ 378.641222][T12712] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1617'. [ 378.776258][T12712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1617'. [ 378.876788][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.883443][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.244948][T12721] 8021q: adding VLAN 0 to HW filter on device bond5 [ 379.299627][T12730] ipvlan2: entered allmulticast mode [ 379.320393][T12730] bond5: entered allmulticast mode [ 379.410719][T12735] bond5: (slave ipip0): refused to change device type [ 379.644091][ T8814] net_ratelimit: 146 callbacks suppressed [ 379.644113][ T8814] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 379.694804][ T8814] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 379.724579][ T8814] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 379.736501][T12744] 8021q: adding VLAN 0 to HW filter on device bond8 [ 379.754613][ T9801] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 379.771169][ T9801] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 379.899352][T12747] gretap3: entered allmulticast mode [ 379.915419][ T47] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 379.964079][ T9801] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 380.004585][ T8814] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 380.038355][T12747] bond8: (slave gretap3): Enslaving as an active interface with an up link [ 380.047553][ T8814] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 380.064079][ T9801] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 380.106779][T12752] bond8 (unregistering): (slave gretap3): Releasing backup interface [ 380.119790][T12752] bond8 (unregistering): Released all slaves [ 380.391686][T12770] syzkaller0: entered promiscuous mode [ 380.406986][T12770] syzkaller0: entered allmulticast mode [ 380.868818][T12790] tipc: Started in network mode [ 380.884633][T12790] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 380.900616][T12790] tipc: Enabled bearer , priority 30 [ 380.927680][T12795] virt_wifi0: entered promiscuous mode [ 380.948392][T12795] virt_wifi0: entered allmulticast mode [ 381.805014][T12843] lo speed is unknown, defaulting to 1000 [ 381.839183][T12843] lo speed is unknown, defaulting to 1000 [ 382.016249][ T24] tipc: Node number set to 10136234 [ 382.093545][T12860] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.101669][T12861] netlink: 'syz.4.1655': attribute type 9 has an invalid length. [ 382.168097][T12861] macvlan2: entered promiscuous mode [ 382.180359][T12861] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 382.196929][T12861] macvlan2: entered allmulticast mode [ 382.210235][T12861] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 382.465179][T12879] __nla_validate_parse: 11 callbacks suppressed [ 382.465203][T12879] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1661'. [ 382.514233][T12879] nbd: must specify at least one socket [ 382.620850][T12884] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 382.621759][T12881] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1662'. [ 382.632551][T12886] lo: entered allmulticast mode [ 382.803607][T12892] lo: left allmulticast mode [ 382.915271][T12898] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1666'. [ 382.982524][T12901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1668'. [ 382.999425][T12901] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1668'. [ 383.015750][T12901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1668'. [ 383.026321][T12901] netlink: 'syz.3.1668': attribute type 5 has an invalid length. [ 383.738632][T12922] (: renamed from veth0_to_hsr (while UP) [ 383.798072][T12924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1676'. [ 383.808268][T12924] tc_dump_action: action bad kind [ 383.927048][T12925] syzkaller1: entered promiscuous mode [ 383.952132][T12925] syzkaller1: entered allmulticast mode [ 384.047236][T12935] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1679'. [ 384.325074][T12946] IPVS: length: 82 != 24 [ 384.616744][T12963] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1686'. [ 384.746772][ T9803] net_ratelimit: 133 callbacks suppressed [ 384.746795][ T9803] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 384.798914][T12981] tipc: Enabling of bearer rejected, failed to enable media [ 384.807434][ T9801] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 384.827560][ T9803] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 384.858456][ T9803] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 384.994818][ T8814] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 385.024632][ T8814] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 385.054681][ T9801] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 385.084380][ T9803] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 385.115399][ T9803] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 385.123623][ T9803] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 385.406346][T12999] netlink: 'syz.1.1696': attribute type 1 has an invalid length. [ 385.736426][T13007] lo speed is unknown, defaulting to 1000 [ 385.749628][T13016] netlink: 'syz.2.1701': attribute type 1 has an invalid length. [ 385.871756][T13016] 8021q: adding VLAN 0 to HW filter on device bond8 [ 385.922787][T13007] lo speed is unknown, defaulting to 1000 [ 385.935805][T13029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1702'. [ 385.947432][T13025] bond8: option lp_interval: invalid value (18446744073709551607) [ 385.974682][T13025] bond8: option lp_interval: allowed values 1 - 2147483647 [ 385.995887][T13029] block nbd0: Unsupported socket: should be TCP or UNIX. [ 386.064724][T13028] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 386.114731][T13028] bridge7: entered allmulticast mode [ 386.285038][T13036] tipc: Enabled bearer , priority 0 [ 386.329037][T13044] bond0: (slave ip6tnl0): refused to change device type [ 386.341199][T13036] netlink: 'syz.4.1704': attribute type 83 has an invalid length. [ 386.409333][T13035] tipc: Disabling bearer [ 386.645020][T13049] lo speed is unknown, defaulting to 1000 [ 386.906217][T13049] lo speed is unknown, defaulting to 1000 [ 387.351868][T13078] RDS: rds_bind could not find a transport for fe80::2a, load rds_tcp or rds_rdma? [ 388.501817][T13097] pim6reg: entered allmulticast mode [ 388.678240][T13101] pim6reg: left allmulticast mode [ 388.981868][T13113] __nla_validate_parse: 1 callbacks suppressed [ 388.981889][T13113] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1722'. [ 389.062057][T13113] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1722'. [ 389.764586][ T9804] net_ratelimit: 126 callbacks suppressed [ 389.764610][ T9804] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 389.780604][ T9804] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 389.894484][ T9804] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 389.902433][ T9804] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 390.015120][ T8814] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 390.022934][ T8814] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 390.126705][T13068] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 390.134109][ T9804] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 390.147032][ T9804] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 390.264432][ T8800] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 390.284881][ T8800] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 390.353876][T13133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1725'. [ 390.381419][T13133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1725'. [ 390.458289][T13132] syzkaller0: entered promiscuous mode [ 390.486378][T13132] syzkaller0: entered allmulticast mode [ 390.825856][T13153] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1734'. [ 390.911783][T13155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1733'. [ 390.938628][T13157] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1735'. [ 390.998578][T13153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1734'. [ 391.249694][T13173] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1739'. [ 391.255348][T13177] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 391.287326][T13176] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1739'. [ 391.339323][T13179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 392.286050][T13207] netlink: 'syz.2.1748': attribute type 1 has an invalid length. [ 392.699804][T13227] xt_hashlimit: size too large, truncated to 1048576 [ 393.822976][T13275] netlink: 'syz.4.1759': attribute type 1 has an invalid length. [ 393.921150][T13275] netlink: 'syz.4.1759': attribute type 3 has an invalid length. [ 393.990926][T13275] __nla_validate_parse: 3 callbacks suppressed [ 393.990944][T13275] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1759'. [ 393.998954][T13276] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 394.487434][T13284] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1761'. [ 394.785012][ T92] net_ratelimit: 111 callbacks suppressed [ 394.785035][ T92] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 394.845062][ T8814] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 394.904811][ T8814] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 394.955746][ T92] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 394.993680][ T92] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 395.144827][ T8814] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 395.184919][ T9804] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 395.217930][ T9804] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 395.242021][T13308] syzkaller1: entered promiscuous mode [ 395.293193][T13308] syzkaller1: entered allmulticast mode [ 395.346129][ T8804] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 395.389507][T13309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1766'. [ 395.399347][ T8814] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 395.627310][T13311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1767'. [ 395.648811][T13325] netlink: 'syz.1.1769': attribute type 4 has an invalid length. [ 395.661612][T13325] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1769'. [ 395.715472][T13327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1770'. [ 396.081910][T13340] netlink: 'syz.0.1775': attribute type 1 has an invalid length. [ 396.131436][T13340] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 396.338255][T13346] netlink: 'syz.4.1776': attribute type 1 has an invalid length. [ 396.376245][T13352] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1778'. [ 396.439192][T13353] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1778'. [ 396.486349][T13352] dvmrp1: entered allmulticast mode [ 396.709307][T13362] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1779'. [ 396.771688][T13362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1779'. [ 396.788488][T13365] lo speed is unknown, defaulting to 1000 [ 396.810433][T13365] lo speed is unknown, defaulting to 1000 [ 398.068395][T13387] syzkaller0: entered promiscuous mode [ 398.092452][T13387] syzkaller0: entered allmulticast mode [ 399.128184][T13418] __nla_validate_parse: 4 callbacks suppressed [ 399.128205][T13418] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1791'. [ 399.304743][ T8814] af_packet: tpacket_rcv: packet too big, clamped from 52 to 4294967272. macoff=96 [ 399.549164][T13434] netlink: 'syz.2.1795': attribute type 3 has an invalid length. [ 399.576243][T13434] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1795'. [ 399.693189][T13439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1796'. [ 399.836798][T13443] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1798'. [ 399.854760][ T8814] net_ratelimit: 100 callbacks suppressed [ 399.854783][ T8814] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 399.888212][T13443] ip6gre1: entered promiscuous mode [ 399.905695][ T8804] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 399.915586][T13443] ip6gre1: entered allmulticast mode [ 399.935933][ T8804] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 400.075326][ T8814] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 400.106419][ T8814] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 400.323355][ T8804] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 400.331491][ T8804] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 400.465131][ T47] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 400.476176][ T47] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 400.594732][ T8804] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 400.693377][T13470] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 400.700889][T13470] IPv6: NLM_F_CREATE should be set when creating new route [ 400.749949][T13470] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 400.920285][T13478] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1807'. [ 401.056669][T13478] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1807'. [ 401.292919][T13484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1809'. [ 401.303259][T13484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1809'. [ 401.461489][T13493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1812'. [ 401.499836][T13493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1812'. [ 401.541029][T13493] netlink: 'syz.4.1812': attribute type 14 has an invalid length. [ 401.580601][T13493] netlink: 'syz.4.1812': attribute type 13 has an invalid length. [ 401.808503][T13513] lo speed is unknown, defaulting to 1000 [ 401.859946][T13513] lo speed is unknown, defaulting to 1000 [ 402.064673][T13523] x_tables: duplicate underflow at hook 3 [ 402.803573][T13536] : option downdelay: invalid value (18446744073709547007) [ 402.843356][T13543] atomic_op ffff8880428e4198 conn xmit_atomic 0000000000000000 [ 402.856010][T13536] : option downdelay: allowed values 0 - 2147483647 [ 402.911737][T13536]  (unregistering): Released all slaves [ 403.143402][T13549] netlink: 'syz.1.1827': attribute type 14 has an invalid length. [ 403.150632][T13547] xt_hashlimit: size too large, truncated to 1048576 [ 403.203275][T13549] netlink: 'syz.1.1827': attribute type 13 has an invalid length. [ 404.002104][T13578] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 404.429617][T13603] __nla_validate_parse: 7 callbacks suppressed [ 404.429640][T13603] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1836'. [ 404.864093][ T8814] net_ratelimit: 143 callbacks suppressed [ 404.864118][ T8814] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 404.955618][ T8814] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 405.035121][ T8814] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 405.055945][ T8814] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 405.135372][T13605] syzkaller1: entered promiscuous mode [ 405.157418][T13613] IPVS: set_ctl: invalid protocol: 29 10.1.1.0:20000 [ 405.167005][T13605] syzkaller1: entered allmulticast mode [ 405.194592][ T8804] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 405.203350][ T8804] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 405.358148][ T92] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 405.424579][ T48] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 405.432624][T13623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1841'. [ 405.462971][T13623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1841'. [ 405.477778][ T48] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 405.488783][T13623] netlink: 'syz.3.1841': attribute type 14 has an invalid length. [ 405.516460][T13623] netlink: 'syz.3.1841': attribute type 13 has an invalid length. [ 405.525284][ T8804] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 405.739857][T13640] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1844'. [ 406.049485][T13647] syzkaller0: entered promiscuous mode [ 406.082272][T13647] syzkaller0: entered allmulticast mode [ 406.189168][T13663] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 406.365248][T13672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.461174][T13672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.496232][T13672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.529679][T13672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.556493][T13672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.737886][T13691] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1858'. [ 407.011630][T13697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1860'. [ 407.796013][T13731] netlink: 'syz.3.1868': attribute type 1 has an invalid length. [ 408.127874][T13741] C: renamed from veth1_to_team (while UP) [ 408.153532][T13741] netlink: 'syz.1.1872': attribute type 3 has an invalid length. [ 408.173350][T13741] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1872'. [ 408.361267][T13748] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1873'. [ 408.576212][T13754] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1876'. [ 408.924280][T13761] : option downdelay: invalid value (18446744073709547007) [ 408.931869][T13761] : option downdelay: allowed values 0 - 2147483647 [ 408.987209][T13761]  (unregistering): Released all slaves [ 409.325357][T13778] tipc: Enabled bearer , priority 0 [ 409.347237][T13784] netlink: 'syz.0.1883': attribute type 13 has an invalid length. [ 409.368668][T13777] tipc: Disabling bearer [ 409.375470][T13784] netlink: 'syz.0.1883': attribute type 17 has an invalid length. [ 409.399172][T13785] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1883'. [ 409.455120][T13791] netlink: 'syz.4.1885': attribute type 1 has an invalid length. [ 409.523603][T13793] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1885'. [ 409.548009][T13784] bond_slave_1: left promiscuous mode [ 409.559635][T13784] bond_slave_1: left allmulticast mode [ 409.640510][T13784] virt_wifi0: left promiscuous mode [ 409.646743][T13784] virt_wifi0: left allmulticast mode [ 409.732941][T13791] 8021q: adding VLAN 0 to HW filter on device bond6 [ 409.938619][ T9802] net_ratelimit: 122 callbacks suppressed [ 409.938639][ T9802] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 409.963715][T13805] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1888'. [ 409.978960][ T9802] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 410.029811][T13806] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1888'. [ 410.114898][ T9803] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 410.156637][ T9803] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 410.186024][ T9803] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 410.224765][ T9803] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 410.244904][ T8814] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 410.269900][ T8814] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 410.345395][T13821] syzkaller1: entered promiscuous mode [ 410.352402][T13821] syzkaller1: entered allmulticast mode [ 410.394188][ T8814] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 410.444555][ T9802] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 410.501086][T13821] ipvlan2: left allmulticast mode [ 410.518143][T13821] bond5: left allmulticast mode [ 410.536963][T13821] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 410.560743][T13821] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 410.569421][T13821] macvlan2: left promiscuous mode [ 410.575138][T13821] macvlan2: left allmulticast mode [ 410.590216][T13821] syzkaller1: left promiscuous mode [ 410.596915][T13821] syzkaller1: left allmulticast mode [ 410.612033][T13826] netlink: 'syz.3.1892': attribute type 2 has an invalid length. [ 410.628017][T13829] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 410.853623][T13840] netlink: 'syz.0.1898': attribute type 1 has an invalid length. [ 410.864784][T13841] netlink: 'syz.1.1897': attribute type 1 has an invalid length. [ 410.888640][T13840] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1898'. [ 410.944656][T13840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1898'. [ 410.985969][T13840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1898'. [ 411.007094][T13847] macvlan0: entered promiscuous mode [ 411.017179][T13847] macvlan0: entered allmulticast mode [ 411.029385][T13847] bond9: entered promiscuous mode [ 411.038796][T13847] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 411.078018][T13854] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1902'. [ 411.087416][T13847] bond9: left promiscuous mode [ 411.402611][T13874] netlink: 'syz.1.1905': attribute type 4 has an invalid length. [ 411.407413][T13873] netlink: 'syz.3.1906': attribute type 3 has an invalid length. [ 411.420656][T13874] netlink: 'syz.1.1905': attribute type 4 has an invalid length. [ 411.512553][T13879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1907'. [ 411.566723][T13879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1907'. [ 411.697007][T13888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.758512][T13890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1911'. [ 411.962585][T13905] syz.0.1913: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 412.024795][T13905] CPU: 1 UID: 0 PID: 13905 Comm: syz.0.1913 Not tainted syzkaller #0 PREEMPT(full) [ 412.024827][T13905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 412.024839][T13905] Call Trace: [ 412.024918][T13905] [ 412.024974][T13905] dump_stack_lvl+0xe8/0x150 [ 412.025105][T13905] warn_alloc+0x24c/0x270 [ 412.025177][T13905] ? stack_depot_save_flags+0x33/0x800 [ 412.025314][T13905] ? __pfx_warn_alloc+0x10/0x10 [ 412.025347][T13905] ? kasan_save_track+0x3e/0x80 [ 412.025375][T13905] ? __kasan_kmalloc+0x93/0xb0 [ 412.025396][T13905] ? xsk_setsockopt+0x52a/0x960 [ 412.025516][T13905] ? do_sock_setsockopt+0x17c/0x1b0 [ 412.025607][T13905] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 412.025626][T13905] ? do_syscall_64+0x174/0x580 [ 412.025678][T13905] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.025734][T13905] __vmalloc_node_range_noprof+0x12c/0x1730 [ 412.025797][T13905] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 412.025834][T13905] ? __kasan_kmalloc+0x93/0xb0 [ 412.025856][T13905] ? __kmalloc_cache_noprof+0x32d/0x660 [ 412.025885][T13905] ? __kmalloc_cache_noprof+0x150/0x660 [ 412.025919][T13905] vmalloc_user_noprof+0xad/0xe0 [ 412.025950][T13905] ? xskq_create+0xbf/0x170 [ 412.025981][T13905] xskq_create+0xbf/0x170 [ 412.026013][T13905] xsk_init_queue+0x8a/0xe0 [ 412.026044][T13905] xsk_setsockopt+0x52a/0x960 [ 412.026068][T13905] ? __fget_files+0x2a/0x420 [ 412.026106][T13905] ? __pfx_xsk_setsockopt+0x10/0x10 [ 412.026132][T13905] ? __pfx_aa_sk_perm+0x10/0x10 [ 412.026229][T13905] ? aa_sock_opt_perm+0xff/0x1a0 [ 412.026264][T13905] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 412.026320][T13905] ? __pfx_xsk_setsockopt+0x10/0x10 [ 412.026350][T13905] do_sock_setsockopt+0x17c/0x1b0 [ 412.026377][T13905] __x64_sys_setsockopt+0x13d/0x1b0 [ 412.026402][T13905] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.026425][T13905] do_syscall_64+0x174/0x580 [ 412.026443][T13905] ? trace_irq_disable+0x3b/0x140 [ 412.026476][T13905] ? clear_bhb_loop+0x40/0x90 [ 412.026500][T13905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.026520][T13905] RIP: 0033:0x7fadefd9ce59 [ 412.026560][T13905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.026606][T13905] RSP: 002b:00007fadf0cb8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 412.026649][T13905] RAX: ffffffffffffffda RBX: 00007fadf0015fa0 RCX: 00007fadefd9ce59 [ 412.026665][T13905] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 412.026678][T13905] RBP: 00007fadefe32e6f R08: 0000000000000004 R09: 0000000000000000 [ 412.026691][T13905] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.026703][T13905] R13: 00007fadf0016038 R14: 00007fadf0015fa0 R15: 00007ffd900edc08 [ 412.026736][T13905] [ 412.325281][T13905] Mem-Info: [ 412.329973][T13905] active_anon:6067 inactive_anon:4 isolated_anon:0 [ 412.329973][T13905] active_file:14 inactive_file:43307 isolated_file:0 [ 412.329973][T13905] unevictable:768 dirty:152 writeback:0 [ 412.329973][T13905] slab_reclaimable:10797 slab_unreclaimable:178196 [ 412.329973][T13905] mapped:29495 shmem:1292 pagetables:1389 [ 412.329973][T13905] sec_pagetables:0 bounce:0 [ 412.329973][T13905] kernel_misc_reclaimable:0 [ 412.329973][T13905] free:1246387 free_pcp:10511 free_cma:0 [ 412.353019][T13907] netlink: 'syz.3.1915': attribute type 4 has an invalid length. [ 412.381161][T13905] Node 0 active_anon:24368kB inactive_anon:16kB active_file:56kB inactive_file:173024kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121980kB dirty:604kB writeback:0kB shmem:3632kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14424kB pagetables:5420kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 412.385089][T13912] tc_dump_action: action bad kind [ 412.418694][T13905] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 412.418763][T13905] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 412.418830][T13905] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 412.418878][T13905] Node 0 DMA32 free:1027560kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24368kB inactive_anon:16kB active_file:56kB inactive_file:173024kB unevictable:1536kB writepending:604kB zspages:0kB present:3129332kB managed:2551444kB mlocked:0kB bounce:0kB free_pcp:41680kB local_pcp:21000kB free_cma:0kB [ 412.418944][T13905] lowmem_reserve[]: 0 0 0 0 0 [ 412.418989][T13905] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:624kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 412.419048][T13905] lowmem_reserve[]: 0 0 0 0 0 [ 412.419094][T13905] Node 1 Normal free:3942628kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 412.419156][T13905] lowmem_reserve[]: 0 0 0 0 0 [ 412.468361][T13908] netlink: 'syz.0.1913': attribute type 10 has an invalid length. [ 412.488058][T13905] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 412.488222][T13905] Node 0 DMA32: 1256*4kB (UM) 2051*8kB (UM) 741*16kB (UM) 597*32kB (UM) 345*64kB (UME) 136*128kB (UME) 79*256kB (UME) 32*512kB (UME) 4*1024kB (U) 3*2048kB (M) [ 412.529916][T13915] netlink: 'syz.2.1917': attribute type 7 has an invalid length. [ 412.533470][T13905] 217*4096kB (UM) = 1027560kB [ 412.572925][T13913] netlink: 'syz.4.1916': attribute type 8 has an invalid length. [ 412.667278][T13905] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 412.683127][T13905] Node 1 Normal: 1*4kB (U) 6*8kB (UM) 9*16kB (UM) 11*32kB (UM) 3*64kB (UM) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 961*4096kB (M) = 3942628kB [ 412.715736][T13905] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 412.737306][T13908] bond7: (slave dummy0): Releasing active interface [ 412.740146][T13905] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 412.828358][T13905] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 412.858726][T13908] team0: Port device dummy0 added [ 412.874200][T13905] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 412.890622][T13905] 44610 total pagecache pages [ 412.896482][T13905] 1 pages in swap cache [ 412.900725][T13905] Free swap = 124992kB [ 412.907741][T13905] Total swap = 124996kB [ 412.909736][T13912] macsec0: entered promiscuous mode [ 412.912001][T13905] 2097051 pages RAM [ 412.927034][T13905] 0 pages HighMem/MovableOnly [ 412.934252][T13913] macsec0 (unregistering): left promiscuous mode [ 412.947050][T13905] 427419 pages reserved [ 412.951354][T13905] 0 pages cma reserved [ 413.009815][T13934] bond9: entered promiscuous mode [ 413.018780][T13934] 8021q: adding VLAN 0 to HW filter on device bond9 [ 413.053513][T13936] bond9: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 413.101370][T13936] bond9: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 413.142296][T13936] bond9: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 413.726608][T13974] xt_connbytes: Forcing CT accounting to be enabled [ 413.743721][T13974] xt_CT: You must specify a L4 protocol and not use inversions on it [ 414.303781][T13998] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 414.771782][T14021] bridge0: entered promiscuous mode [ 414.831154][T14021] bridge0: entered allmulticast mode [ 414.869740][T14021] team0: Port device bridge0 added [ 414.931019][ T5361] IPVS: starting estimator thread 0... [ 414.986064][T14018] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20000 [ 415.015221][ T48] net_ratelimit: 126 callbacks suppressed [ 415.015243][ T48] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 415.048613][T14043] __nla_validate_parse: 14 callbacks suppressed [ 415.048635][T14043] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1941'. [ 415.067288][T14038] IPVS: using max 27 ests per chain, 64800 per kthread [ 415.114749][ T47] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 415.164871][ T9802] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 415.205568][ T92] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 415.233294][T14018] bridge3: entered promiscuous mode [ 415.245729][ T92] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 415.249841][T14018] bridge3: entered allmulticast mode [ 415.276770][T14018] team0: Port device bridge3 added [ 415.284753][ T8814] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 415.314265][ T47] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 415.348073][ T47] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 415.484195][ T92] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 415.511378][ T92] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 415.632579][T14064] geneve3: entered promiscuous mode [ 415.638902][T14064] geneve3: entered allmulticast mode [ 415.899835][T14081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1955'. [ 415.940624][T14078] syzkaller0: entered promiscuous mode [ 415.958559][T14078] syzkaller0: entered allmulticast mode [ 415.992316][T14078] ieee802154 phy0 wpan0: encryption failed: -126 [ 416.010747][T14081] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1955'. [ 416.088095][T14087] xt_CT: No such helper "snmp_trap" [ 416.428978][T14110] 8021q: adding VLAN 0 to HW filter on device bond10 [ 416.437120][T14110] bridge0: port 6(bond10) entered blocking state [ 416.447405][T14110] bridge0: port 6(bond10) entered disabled state [ 416.457416][T14110] bond10: entered allmulticast mode [ 416.489197][T14110] bond10: entered promiscuous mode [ 416.496940][T14110] bridge0: port 6(bond10) entered blocking state [ 416.503543][T14110] bridge0: port 6(bond10) entered listening state [ 416.577741][ T9803] bridge0: port 6(bond10) entered disabled state [ 417.006289][T14140] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1969'. [ 417.225276][T14152] lo speed is unknown, defaulting to 1000 [ 417.263123][T14152] lo speed is unknown, defaulting to 1000 [ 417.278478][T14157] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1973'. [ 417.358888][T14155] syzkaller1: entered promiscuous mode [ 417.371354][T14155] syzkaller1: entered allmulticast mode [ 417.388096][T14161] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 417.442190][T14157] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20001 [ 417.501741][T14161] syzkaller0: entered promiscuous mode [ 417.509079][T14161] syzkaller0: entered allmulticast mode [ 417.649093][T14167] bridge0: port 3(syz_tun) entered disabled state [ 417.704961][T14167] bridge0: port 4(vlan2) entered disabled state [ 417.711512][T14167] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.079401][ T29] lo speed is unknown, defaulting to 1000 [ 418.101281][ T47] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.103599][ T29] syz1: Port: 1 Link DOWN [ 418.122336][ T47] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 418.161204][ T47] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.187050][ T47] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 418.215938][ T47] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.248240][ T47] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 418.280639][ T47] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.281805][ T24] lo speed is unknown, defaulting to 1000 [ 418.307415][ T47] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 418.538364][T14187] bond11: option lacp_rate: invalid value (128) [ 418.559481][T14187] bond11 (unregistering): Released all slaves [ 418.729517][T14199] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1983'. [ 418.806306][T14204] validate_nla: 6 callbacks suppressed [ 418.806327][T14204] netlink: 'syz.4.1984': attribute type 4 has an invalid length. [ 418.860576][T14204] netlink: 'syz.4.1984': attribute type 4 has an invalid length. [ 418.916665][T14206] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1986'. [ 419.020624][T14209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1986'. [ 419.075735][T14212] x_tables: duplicate underflow at hook 1 [ 419.133576][T14214] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1987'. [ 419.200665][T14214] ip6gre1: entered promiscuous mode [ 419.215295][T14214] ip6gre1: entered allmulticast mode [ 419.596594][T14227] netlink: 'syz.1.1991': attribute type 13 has an invalid length. [ 419.909297][ T995] lo speed is unknown, defaulting to 1000 [ 419.927007][ T995] syz2: Port: 1 Link DOWN [ 420.013066][T14248] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 420.039984][ T8804] net_ratelimit: 138 callbacks suppressed [ 420.040005][ T8804] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 420.082771][T14248] IPVS: set_ctl: invalid protocol: 28525 1.0.0.0:0 [ 420.110078][ T8804] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 420.177186][T14253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1998'. [ 420.208988][T14258] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2000'. [ 420.235229][ T47] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 420.246992][ T47] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 420.355162][T14264] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2002'. [ 420.372824][T14264] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2002'. [ 420.380614][T14269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2003'. [ 420.391606][ T47] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 420.402477][T14265] lo speed is unknown, defaulting to 1000 [ 420.411754][T14265] lo speed is unknown, defaulting to 1000 [ 420.414519][T14269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2003'. [ 420.418086][ T47] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 420.445693][ T47] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 420.565466][ T47] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 420.583269][ T47] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 420.705964][ T9802] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 421.599236][T14306] syzkaller1: entered promiscuous mode [ 421.615603][T14306] syzkaller1: entered allmulticast mode [ 421.662631][T14305] netlink: 'syz.0.2013': attribute type 1 has an invalid length. [ 421.695355][T14305] netlink: 'syz.0.2013': attribute type 1 has an invalid length. [ 421.747661][T14307] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2013'. [ 421.805650][T14305] 8021q: adding VLAN 0 to HW filter on device bond9 [ 421.975552][T14311] netlink: 'syz.0.2015': attribute type 11 has an invalid length. [ 422.407128][T14324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2020'. [ 422.422170][T14323] syzkaller1: entered allmulticast mode [ 422.429814][T14322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2020'. [ 422.530706][T14332] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2023'. [ 422.544441][T14332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.606937][T14332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.681208][T14332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.378526][T14365] syzkaller0: entered promiscuous mode [ 423.384363][T14365] syzkaller0: entered allmulticast mode [ 424.121481][T14396] netlink: 'syz.1.2041': attribute type 1 has an invalid length. [ 424.161511][T14396] bond11: entered promiscuous mode [ 424.167465][T14396] 8021q: adding VLAN 0 to HW filter on device bond11 [ 424.404951][T14400] bond11: (slave bridge4): making interface the new active one [ 424.412865][T14400] bridge4: entered promiscuous mode [ 424.429667][T14400] bond11: (slave bridge4): Enslaving as an active interface with an up link [ 424.629445][T14414] tipc: Enabling of bearer rejected, failed to enable media [ 424.734899][T14422] tipc: Enabled bearer , priority 0 [ 424.960837][T14433] +: renamed from syzkaller0 [ 425.044538][ T8814] net_ratelimit: 103 callbacks suppressed [ 425.044561][ T8814] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 425.084831][ T8814] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 425.112399][T14433] tipc: Disabling bearer [ 425.119833][ T9803] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 425.144153][ T9803] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 425.169676][ T9802] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 425.180072][ T9802] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 425.295042][ T9803] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 425.314752][ T9803] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 425.435521][ T8804] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 425.446894][ T8804] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 425.513365][T14465] netlink: 'syz.0.2056': attribute type 4 has an invalid length. [ 425.545535][T14465] netlink: 'syz.0.2056': attribute type 4 has an invalid length. [ 425.662109][T14468] __nla_validate_parse: 4 callbacks suppressed [ 425.662125][T14468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2057'. [ 425.771682][T14471] C: renamed from veth1_to_team (while UP) [ 425.779636][T14471] netlink: 'syz.2.2059': attribute type 1 has an invalid length. [ 425.788579][T14471] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2059'. [ 425.832462][T14472] bond12: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 425.859799][T14472] bond12 (unregistering): Released all slaves [ 426.114677][T14481] sctp: [Deprecated]: syz.1.2061 (pid 14481) Use of int in maxseg socket option. [ 426.114677][T14481] Use struct sctp_assoc_value instead [ 426.285873][T14483] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 429.486879][T14509] syzkaller0: entered promiscuous mode [ 429.514878][T14509] syzkaller0: entered allmulticast mode [ 429.539662][T14510] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2069'. [ 429.582909][T14510] 0ªî{X¹¦: renamed from gretap0 [ 429.609907][T14510] 0ªî{X¹¦: entered allmulticast mode [ 430.054151][ T8814] net_ratelimit: 107 callbacks suppressed [ 430.054173][ T8814] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 430.119694][ T8814] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 430.178064][ T8814] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 430.224366][ T9802] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 430.238501][T14517] syzkaller0: entered promiscuous mode [ 430.266429][ T92] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 430.276602][T14517] syzkaller0: entered allmulticast mode [ 430.324532][ T92] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 430.351611][ T92] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 430.408956][T14552] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2079'. [ 430.436413][T14549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2076'. [ 430.495377][ T9802] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 430.539125][ T9802] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 430.585586][ T9802] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 431.102290][T14571] ieee802154 phy0 wpan0: encryption failed: -22 [ 431.129567][T14571] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2085'. [ 431.163090][T14574] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2086'. [ 431.232704][T14574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2086'. [ 431.260086][T14574] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 431.551746][T14592] netlink: 'syz.2.2091': attribute type 1 has an invalid length. [ 431.677100][T14602] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2093'. [ 431.723800][T14601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2092'. [ 431.942440][T14612] xt_hashlimit: size too large, truncated to 1048576 [ 432.006833][T14615] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2096'. [ 433.418362][T14660] rdma_rxe: rxe_newlink: failed to add lo [ 433.431926][T14660] lo speed is unknown, defaulting to 1000 [ 433.653126][T14673] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2110'. [ 433.662484][T14673] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2110'. [ 433.673891][T14673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2110'. [ 433.777396][T14676] macsec1: entered promiscuous mode [ 433.787120][T14676] netlink: 'syz.0.2109': attribute type 10 has an invalid length. [ 433.795648][T14676] syz_tun: entered promiscuous mode [ 433.833337][T14676] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 433.933361][T14682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2111'. [ 434.028167][T14684] bond8: entered promiscuous mode [ 434.033359][T14684] bond8: entered allmulticast mode [ 434.039201][T14684] 8021q: adding VLAN 0 to HW filter on device bond8 [ 434.066392][T14686] bond9: entered promiscuous mode [ 434.071657][T14686] bond9: entered allmulticast mode [ 434.077544][T14686] 8021q: adding VLAN 0 to HW filter on device bond9 [ 434.537926][ T9803] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.550044][ T9803] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.565331][ T9803] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.575055][ T9803] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.154263][ T9803] net_ratelimit: 93 callbacks suppressed [ 435.154288][ T9803] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 435.168508][ T9803] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 435.169244][T14720] Bluetooth: MGMT ver 1.23 [ 435.284719][ T8814] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 435.292577][ T8814] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 435.414055][ T9802] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 435.421981][ T9802] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 435.534501][ T9802] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 435.542346][ T9802] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 435.655593][ T8814] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 435.663717][ T8814] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 436.091362][T14646] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 436.108024][T14653] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 436.643037][T14748] syzkaller0: entered promiscuous mode [ 436.649429][T14748] syzkaller0: entered allmulticast mode [ 436.662078][T14748] tipc: Enabled bearer , priority 0 [ 436.677628][T14746] tipc: Resetting bearer [ 436.773564][T14746] tipc: Disabling bearer [ 437.057579][T14770] __nla_validate_parse: 1 callbacks suppressed [ 437.057600][T14770] netlink: 2780 bytes leftover after parsing attributes in process `syz.4.2138'. [ 437.310143][T14779] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2141'. [ 437.407544][T14787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2143'. [ 437.418121][T14786] netlink: 'syz.0.2143': attribute type 1 has an invalid length. [ 437.521968][T14776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.532595][T14776] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.547590][T14776] bridge0: port 3(dummy0) entered blocking state [ 437.554221][T14776] bridge0: port 3(dummy0) entered forwarding state [ 437.570544][T14776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.607979][T14776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.617653][T14776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.630812][T14776] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 437.645060][T14776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 437.663037][T14776] veth1_vlan: left promiscuous mode [ 437.671464][T14776] veth0_vlan: left promiscuous mode [ 437.680286][T14776] veth0_vlan: entered promiscuous mode [ 437.690685][T14776] veth1_vlan: entered promiscuous mode [ 437.705596][T14776] veth1_macvtap: left promiscuous mode [ 437.713193][T14776] veth0_macvtap: left promiscuous mode [ 437.724661][T14776] veth0_macvtap: entered promiscuous mode [ 437.737948][T14776] veth1_macvtap: entered promiscuous mode [ 437.757564][T14776] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 437.768589][T14776] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 437.779403][T14776] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 437.789264][T14776] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 437.800895][T14776] 8021q: adding VLAN 0 to HW filter on device bond2 [ 437.809755][ T7845] lo speed is unknown, defaulting to 1000 [ 437.810537][T14786] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 437.817844][ T7845] syz2: Port: 1 Link ACTIVE [ 437.888374][ T8814] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.895637][ T8814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.932845][ T8814] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.940097][ T8814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.045040][ T9802] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.084042][ T9802] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.113125][ T9802] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.174000][ T9802] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.080804][T14839] xt_TCPMSS: Only works on TCP SYN packets [ 439.368509][T14839] dummy0: left allmulticast mode [ 439.382969][T14839] dummy0: left promiscuous mode [ 439.409777][T14839] bridge0: port 3(dummy0) entered disabled state [ 439.432198][T14839] bridge_slave_1: left allmulticast mode [ 439.446379][T14839] bridge_slave_1: left promiscuous mode [ 439.466152][T14839] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.490621][T14859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2164'. [ 439.501353][T14839] bridge_slave_0: left allmulticast mode [ 439.519041][T14839] bridge_slave_0: left promiscuous mode [ 439.531891][T14839] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.991414][T14886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2171'. [ 440.067489][T14893] xt_TCPMSS: Only works on TCP SYN packets [ 440.175086][T14894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2172'. [ 440.177105][ T48] net_ratelimit: 147 callbacks suppressed [ 440.177133][ T48] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 440.255410][ T9804] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 440.269125][T14900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2176'. [ 440.288534][ T9802] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 440.312353][T14900] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2176'. [ 440.324937][ T9802] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 440.335572][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.343249][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.367645][ T9802] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 440.404254][ T9802] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 440.433383][ T9802] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 440.464732][T14899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2174'. [ 440.540742][T14906] lo speed is unknown, defaulting to 1000 [ 440.547999][T14913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2180'. [ 440.566361][ T92] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 440.587452][T14906] lo speed is unknown, defaulting to 1000 [ 440.595801][ T92] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 440.726206][ T47] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 441.448670][T14948] 8021q: adding VLAN 0 to HW filter on device bond10 [ 441.539130][T14959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.547638][T14959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.556843][T14959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.565013][T14959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.850465][T14971] netlink: 'syz.4.2191': attribute type 1 has an invalid length. [ 441.861939][T14971] netlink: 'syz.4.2191': attribute type 1 has an invalid length. [ 441.966533][T14978] syz_tun: entered allmulticast mode [ 442.111110][T14981] __nla_validate_parse: 5 callbacks suppressed [ 442.111131][T14981] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2192'. [ 442.437435][T14993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2196'. [ 443.000179][T15015] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2200'. [ 443.133583][T15018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2203'. [ 443.180901][ T5361] IPVS: starting estimator thread 0... [ 443.192099][T15018] xt_TCPMSS: Only works on TCP SYN packets [ 443.208028][T15020] xt_l2tp: missing protocol rule (udp|l2tpip) [ 443.238282][T15018] bridge_slave_1: left allmulticast mode [ 443.252645][T15018] bridge_slave_1: left promiscuous mode [ 443.263706][T15018] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.286312][T15018] bridge_slave_0: left allmulticast mode [ 443.294499][T15018] bridge_slave_0: left promiscuous mode [ 443.300482][T15018] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.317075][T15022] IPVS: using max 32 ests per chain, 76800 per kthread [ 443.344713][T15030] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2205'. [ 443.355251][T15031] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2204'. [ 443.936463][T15057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2211'. [ 444.309678][ T5290] veth0_vlan: left promiscuous mode [ 444.400175][ T9804] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.400740][ T5361] veth0_vlan: entered promiscuous mode [ 444.438241][ T9804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.613314][T15070] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2214'. [ 444.699386][T15076] netlink: 'syz.2.2216': attribute type 2 has an invalid length. [ 444.725656][T15076] netlink: 'syz.2.2216': attribute type 1 has an invalid length. [ 444.817401][T15076] netlink: 'syz.2.2216': attribute type 1 has an invalid length. [ 445.196532][ T9803] net_ratelimit: 110 callbacks suppressed [ 445.196556][ T9803] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 445.202743][T15095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2218'. [ 445.254745][ T8814] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 445.276886][ T8814] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 445.415460][ T9802] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 445.456181][ T9803] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 445.480523][ T9803] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 445.626821][ T47] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 445.665665][ T47] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 445.712750][T15106] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2221'. [ 445.749378][T15109] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.806812][ T9803] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 446.398128][T15142] vlan3: entered promiscuous mode [ 446.425338][T15142] gretap0: entered promiscuous mode [ 447.279349][T15173] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 447.290152][T15175] __nla_validate_parse: 1 callbacks suppressed [ 447.290172][T15175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2236'. [ 447.307758][T15175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2236'. [ 447.317099][T15175] netlink: 'syz.4.2236': attribute type 6 has an invalid length. [ 447.325833][T15175] netlink: 'syz.4.2236': attribute type 5 has an invalid length. [ 447.335648][T15175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2236'. [ 447.348100][T15174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2237'. [ 447.361673][T15175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2236'. [ 447.371130][T15174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2237'. [ 447.381538][T15175] netlink: 'syz.4.2236': attribute type 6 has an invalid length. [ 447.390615][T15174] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2237'. [ 447.400041][T15175] netlink: 'syz.4.2236': attribute type 5 has an invalid length. [ 447.417386][T15174] netlink: 'syz.2.2237': attribute type 3 has an invalid length. [ 447.435648][T15174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2237'. [ 447.860101][T15202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2244'. [ 448.155346][ T47] wlan1: Trigger new scan to find an IBSS to join [ 448.318475][T15219] netlink: 'syz.4.2248': attribute type 10 has an invalid length. [ 448.341021][T15219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2248'. [ 448.385832][T15222] netlink: 'syz.4.2248': attribute type 49 has an invalid length. [ 449.259890][T15259] smc: net device wlan0 applied user defined pnetid SYZ0 [ 450.275569][ T8814] net_ratelimit: 95 callbacks suppressed [ 450.275591][ T8814] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 450.334069][ T8814] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 450.356575][ T8814] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 450.469081][T15286] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:256 [ 450.504312][ T48] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 450.535260][ T48] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 450.556337][ T48] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 450.665167][ T48] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 450.714122][ T48] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 450.764931][ T8814] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 450.805787][ T9802] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 451.289254][T15325] netlink: 'syz.1.2276': attribute type 1 has an invalid length. [ 451.505933][T15325] bond12: (slave gretap0): making interface the new active one [ 451.556904][T15325] bond12: (slave gretap0): Enslaving as an active interface with an up link [ 452.156088][ T9802] wlan1: Trigger new scan to find an IBSS to join [ 452.376680][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 452.635960][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 452.665092][T15361] __nla_validate_parse: 10 callbacks suppressed [ 452.665116][T15361] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2284'. [ 452.716745][T15361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2284'. [ 452.870409][T15369] netlink: 'syz.1.2286': attribute type 8 has an invalid length. [ 452.918622][T15369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2286'. [ 453.057861][ T9802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.128889][T15379] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2290'. [ 453.145925][T15379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2290'. [ 453.165885][T15379] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2290'. [ 453.188256][T15379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2290'. [ 453.218565][T15379] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2290'. [ 454.435616][T15423] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2300'. [ 454.503815][T15423] ip6gre1: entered promiscuous mode [ 454.533472][T15423] ip6gre1: entered allmulticast mode [ 454.719084][T15430] syzkaller0: entered promiscuous mode [ 454.754654][T15430] syzkaller0: entered allmulticast mode [ 454.773078][T15430] tipc: Started in network mode [ 454.786391][T15430] tipc: Node identity ee63aaa8869a, cluster identity 4711 [ 454.801621][T15430] tipc: Enabled bearer , priority 0 [ 454.819417][T15430] tipc: Resetting bearer [ 454.907326][T15430] tipc: Disabling bearer [ 455.125808][T15437] bond13: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 455.136257][T15443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2304'. [ 455.151177][T15437] bond13 (unregistering): Released all slaves [ 455.385519][ T9803] net_ratelimit: 114 callbacks suppressed [ 455.385543][ T9803] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 455.418781][ T9803] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 455.545496][ T47] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 455.585415][ T47] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 455.714085][ T8814] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 455.723039][ T8814] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 455.874638][ T8814] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 455.914712][ T8814] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 456.025853][T15471] tipc: New replicast peer: 172.30.0.3 [ 456.042087][T15472] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 456.057027][ T47] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 456.064693][T15471] tipc: Enabled bearer , priority 10 [ 456.092542][T15477] tipc: Disabling bearer [ 456.104634][ T9803] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 456.108513][T15479] netlink: 'syz.1.2314': attribute type 21 has an invalid length. [ 456.139148][T15478] netlink: 'syz.0.2315': attribute type 11 has an invalid length. [ 456.571704][T15492] xt_NFQUEUE: number of total queues is 0 [ 457.203486][T15510] xt_hashlimit: size too large, truncated to 1048576 [ 458.930053][T15522] geneve0: left promiscuous mode [ 459.201633][T15548] bond10: option resend_igmp: invalid value (2878) [ 459.209155][T15548] bond10: option resend_igmp: allowed values 0 - 255 [ 459.233098][T15548] bond10 (unregistering): Released all slaves [ 459.366908][ T48] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.396443][ T48] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.427133][ T48] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.445601][ T48] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.470268][ T48] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.502215][ T48] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.544902][ T48] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.571497][ T48] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.633079][T15560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.738411][T15572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 460.000641][T15574] tipc: Enabling of bearer rejected, failed to enable media [ 460.087625][T15586] __nla_validate_parse: 5 callbacks suppressed [ 460.087646][T15586] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2342'. [ 460.394672][ T9802] net_ratelimit: 150 callbacks suppressed [ 460.394695][ T9802] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 460.418606][T15602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2346'. [ 460.443860][ T9802] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 460.584753][ T9803] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 460.612705][ T9803] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 460.745723][ T9802] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 460.776748][ T9802] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 460.926638][ T8814] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 460.977187][ T8814] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 461.024983][T15627] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2349'. [ 461.114695][ T9802] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 461.137814][ T9802] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 461.393530][T15647] netlink: 'syz.1.2355': attribute type 2 has an invalid length. [ 461.427679][T15647] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2355'. [ 461.518836][T15656] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2357'. [ 461.635735][T15650] bond8: option ad_user_port_key: invalid value (65535) [ 461.670197][T15650] bond8: option ad_user_port_key: allowed values 0 - 1023 [ 461.693166][T15650] bond8 (unregistering): Released all slaves [ 461.806367][T15656] C: renamed from veth1_to_team [ 461.818782][T15656] netlink: 'syz.4.2357': attribute type 3 has an invalid length. [ 461.840049][T15656] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2357'. [ 461.937457][T15675] netlink: 'syz.2.2363': attribute type 1 has an invalid length. [ 462.072968][T15675] bond10: entered promiscuous mode [ 462.091299][T15675] 8021q: adding VLAN 0 to HW filter on device bond10 [ 462.273601][T15685] bond10: (slave bridge3): making interface the new active one [ 462.281988][T15685] bridge3: entered promiscuous mode [ 462.290273][T15685] bond10: (slave bridge3): Enslaving as an active interface with an up link [ 462.446303][T15706] netlink: 'syz.2.2371': attribute type 21 has an invalid length. [ 462.462210][T15709] netlink: 'syz.1.2370': attribute type 1 has an invalid length. [ 462.499197][T15709] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2370'. [ 462.719114][T15720] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2374'. [ 462.915949][T15723] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2375'. [ 462.936513][T15723] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2375'. [ 462.999499][T15731] dvmrp1: left allmulticast mode [ 463.006394][T15731] syz_tun: left allmulticast mode [ 463.525308][T15749] team0 (unregistering): Port device gtp0 removed [ 463.757898][T15754] syzkaller0: entered promiscuous mode [ 463.791230][T15754] syzkaller0: entered allmulticast mode [ 464.137531][T15777] netlink: 'syz.1.2389': attribute type 1 has an invalid length. [ 464.373486][T15781] bond13: (slave geneve3): making interface the new active one [ 464.382946][T15781] bond13: (slave geneve3): Enslaving as an active interface with an up link [ 464.396897][ T9804] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 464.409194][T15788] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 464.421006][ T9804] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 464.447143][ T9804] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 464.457474][ T9804] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 464.723142][T15812] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 464.744887][T15812] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 464.769247][T15812] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 464.988660][T15810] syzkaller0: entered promiscuous mode [ 465.005657][T15810] syzkaller0: entered allmulticast mode [ 465.171283][T15835] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 465.179967][T15835] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 465.188743][T15835] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 465.197814][T15835] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 465.206595][T15835] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 465.230465][T15837] __nla_validate_parse: 10 callbacks suppressed [ 465.230485][T15837] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2404'. [ 465.256828][T15835] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 465.265625][T15835] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 465.273690][T15835] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 465.282416][T15835] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 465.291438][T15837] team0 (unregistering): Port device team_slave_0 removed [ 465.292130][T15835] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 465.307991][T15837] team0 (unregistering): Port device team_slave_1 removed [ 465.329579][T15837] team0 (unregistering): Port device dummy0 removed [ 465.356439][T15837] team0 (unregistering): Port device bridge0 removed [ 465.366372][T15837] team0 (unregistering): Port device bridge3 removed [ 465.406439][ T9802] net_ratelimit: 125 callbacks suppressed [ 465.406463][ T9802] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 465.425011][ T9802] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 465.546303][ T8814] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 465.584633][ T9802] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 465.624814][ T9802] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 465.654170][ T8814] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 465.674707][ T92] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 465.694733][ T92] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 465.718317][ T92] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 465.744126][ T9802] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 465.782135][T15859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2407'. [ 468.198333][T15875] team0: Port device syz_tun removed [ 468.239813][T15885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2413'. [ 468.287236][T15887] block nbd0: not configured, cannot reconfigure [ 468.287638][T15875] team0: Port device team_slave_0 removed [ 468.377578][T15891] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 468.383605][T15875] team0: Port device team_slave_1 removed [ 468.386734][T15875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.403349][T15875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.413350][T15875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.424627][T15875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.456334][T15875] bond4: (slave ip6gretap1): Releasing active interface [ 468.499892][T15875] bond5: (slave bond6): Releasing backup interface [ 468.534908][T15875] bond10: (slave bridge3): Releasing backup interface [ 468.545025][T15875] bridge3: left promiscuous mode [ 468.889768][T15910] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2423'. [ 468.935185][T15900] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2421'. [ 469.516027][T15936] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2428'. [ 469.527289][T15936] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2428'. [ 469.539758][T15936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2428'. [ 470.537391][T15949] netlink: 'syz.4.2431': attribute type 1 has an invalid length. [ 470.565330][T15949] 8021q: adding VLAN 0 to HW filter on device bond11 [ 470.590279][T15949] bond11: (slave veth9): Enslaving as an active interface with a down link [ 471.760881][T15898] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 472.153256][T15965] syzkaller1: entered promiscuous mode [ 472.171845][T15970] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2434'. [ 472.189944][T15965] syzkaller1: entered allmulticast mode [ 472.518658][T15982] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2441'. [ 472.569471][T15985] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2440'. [ 472.609030][T15985] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2440'. [ 472.783094][T15992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2444'. [ 472.793576][T15996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2445'. [ 472.813505][T15992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2444'. [ 473.064754][T16006] rdma_op ffff888028a269f0 conn xmit_rdma 0000000000000000 [ 473.282049][T16019] syzkaller1: entered promiscuous mode [ 473.288244][T16019] syzkaller1: entered allmulticast mode [ 473.508604][T16026] netlink: 'syz.4.2454': attribute type 1 has an invalid length. [ 473.581932][T16026] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2454'. [ 473.609003][T16026] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2454'. [ 473.675434][T16026] bond12: entered promiscuous mode [ 473.697709][T16026] bond12: entered allmulticast mode [ 473.715663][T16026] 8021q: adding VLAN 0 to HW filter on device bond12 [ 473.782965][T16034] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2457'. [ 475.223473][T16093] netlink: 'syz.4.2473': attribute type 4 has an invalid length. [ 476.025620][T16117] netlink: 'syz.0.2479': attribute type 13 has an invalid length. [ 476.051974][T16118] netlink: 'syz.0.2479': attribute type 13 has an invalid length. [ 476.078271][T16117] netlink: 'syz.0.2479': attribute type 17 has an invalid length. [ 476.094196][T16118] netlink: 'syz.0.2479': attribute type 17 has an invalid length. [ 476.247640][T16117] syz_tun: left promiscuous mode [ 476.283762][T16117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.440682][T16117] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 476.455523][T16117] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 476.509468][T16117] veth1_macvtap: left promiscuous mode [ 476.531422][T16117] veth0_macvtap: left promiscuous mode [ 476.545463][T16117] veth0_macvtap: entered promiscuous mode [ 476.567554][T16117] veth1_macvtap: entered promiscuous mode [ 476.579892][T16117] geneve1: left promiscuous mode [ 476.590570][T16117] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 476.608817][T16117] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 476.639827][T16117] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 476.653036][T16117] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 476.667802][T16117] geneve0: entered promiscuous mode [ 476.676225][T16117] 8021q: adding VLAN 0 to HW filter on device bond1 [ 476.685831][T16117] 8021q: adding VLAN 0 to HW filter on device bond2 [ 476.694086][T16117] 8021q: adding VLAN 0 to HW filter on device bond3 [ 476.710263][T16117] ip6gre1: left promiscuous mode [ 476.715832][T16117] ip6gre1: left allmulticast mode [ 476.722365][T16117] 8021q: adding VLAN 0 to HW filter on device bond4 [ 476.732656][T16117] 8021q: adding VLAN 0 to HW filter on device bond5 [ 476.745811][T16117] 8021q: adding VLAN 0 to HW filter on device bond6 [ 476.754473][T16117] 8021q: adding VLAN 0 to HW filter on device bond7 [ 476.765043][T16117] ipvlan0: left promiscuous mode [ 476.777124][T16117] 8021q: adding VLAN 0 to HW filter on device bond8 [ 476.785588][T16117] gretap1: left promiscuous mode [ 476.798988][T16117] ip6gre2: left promiscuous mode [ 476.804421][T16117] ip6gre2: left allmulticast mode [ 476.810968][T16117] bridge0: left promiscuous mode [ 476.817079][T16117] bridge0: left allmulticast mode [ 476.823327][T16117] bridge3: left promiscuous mode [ 476.828483][T16117] bridge3: left allmulticast mode [ 476.836631][T16117] 8021q: adding VLAN 0 to HW filter on device bond9 [ 476.848763][T16117] macsec1: left promiscuous mode [ 476.895526][T16128] bridge0: port 1(ipvlan4) entered blocking state [ 476.912684][T16128] bridge0: port 1(ipvlan4) entered disabled state [ 476.921537][T16128] ipvlan4: entered allmulticast mode [ 476.928726][T16128] bridge0: entered allmulticast mode [ 476.937804][T16128] ipvlan4: left allmulticast mode [ 476.943787][T16128] bridge0: left allmulticast mode [ 477.029374][T16138] netlink: 'syz.2.2485': attribute type 28 has an invalid length. [ 477.041715][ T9802] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.060063][ T9802] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.087244][ T9802] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.131153][ T9802] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.155484][ T9802] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.169741][ T9802] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.181603][ T8814] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 477.193492][ T9802] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.204846][T16154] __nla_validate_parse: 8 callbacks suppressed [ 477.204866][T16154] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2490'. [ 477.222174][ T9802] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.484455][T16167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2493'. [ 477.531069][T16162] bond13: entered promiscuous mode [ 477.536869][T16162] bond13: entered allmulticast mode [ 477.542797][T16162] 8021q: adding VLAN 0 to HW filter on device bond13 [ 477.585200][T16167] 8021q: adding VLAN 0 to HW filter on device bond11 [ 477.709949][ T47] bond7: (slave veth11): link status definitely up, 10000 Mbps full duplex [ 477.758214][ T47] bond7: (slave veth11): making interface the new active one [ 477.806566][ T47] bond7: active interface up! [ 477.888167][T16174] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 477.894965][T16174] syzkaller1: linktype set to 769 [ 478.009820][T16178] syzkaller0: entered promiscuous mode [ 478.036219][T16178] syzkaller0: entered allmulticast mode [ 478.272669][T16177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.636847][T16199] netlink: 'syz.4.2501': attribute type 1 has an invalid length. [ 481.594398][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 481.818363][T16201] veth1_to_bond: entered allmulticast mode [ 481.848020][T16207] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2503'. [ 481.874215][T16204] veth1_to_bond: entered promiscuous mode [ 482.012595][ T48] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 482.058319][T16204] veth1_to_bond: left promiscuous mode [ 482.098600][T16204] veth1_to_bond: left allmulticast mode [ 482.279043][T16229] netlink: 'syz.2.2508': attribute type 1 has an invalid length. [ 482.456909][T16229] 8021q: adding VLAN 0 to HW filter on device bond12 [ 482.655995][T16249] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2512'. [ 482.749993][ T30] audit: type=1804 audit(1782628212.668:10): pid=16254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2514" name="/newroot/518/cgroup.controllers" dev="tmpfs" ino=2671 res=1 errno=0 [ 482.809655][ T30] audit: type=1800 audit(1782628212.668:11): pid=16254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2514" name="cgroup.controllers" dev="tmpfs" ino=2671 res=0 errno=0 [ 483.240770][T16285] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2519'. [ 483.379722][T16291] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2522'. [ 483.476080][T16291] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2522'. [ 483.518439][T16291] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2522'. [ 483.558512][T16291] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2522'. [ 483.593059][T16291] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2522'. [ 483.635737][T16291] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2522'. [ 483.658376][T16291] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2522'. [ 483.701665][T16291] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2522'. [ 483.732858][T16304] syzkaller1: entered promiscuous mode [ 483.754661][T16304] syzkaller1: entered allmulticast mode [ 484.271578][T16315] lo speed is unknown, defaulting to 1000 [ 484.315588][T16315] lo speed is unknown, defaulting to 1000 [ 484.434425][T16325] syzkaller1: entered promiscuous mode [ 484.451047][T16325] syzkaller1: entered allmulticast mode [ 484.618051][T16336] bridge0: entered allmulticast mode [ 485.205355][T16347] bond0: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 485.900630][T16361] syzkaller0: entered promiscuous mode [ 485.923248][T16361] syzkaller0: entered allmulticast mode [ 485.961474][T16366] ÿ: renamed from bond_slave_0 (while UP) [ 486.234107][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 486.596292][T16391] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 487.373781][T16410] net_ratelimit: 122 callbacks suppressed [ 487.373802][T16410] netlink: zone id is out of range [ 487.404681][T16410] netlink: zone id is out of range [ 487.426055][T16410] netlink: zone id is out of range [ 487.457918][T16410] netlink: zone id is out of range [ 487.474806][T16410] netlink: zone id is out of range [ 487.483456][T16410] netlink: zone id is out of range [ 487.501366][T16410] netlink: zone id is out of range [ 487.515322][T16410] netlink: zone id is out of range [ 487.530820][T16410] netlink: zone id is out of range [ 487.550271][T16410] netlink: zone id is out of range [ 487.766884][T16417] netlink: 'syz.1.2556': attribute type 1 has an invalid length. [ 487.821212][T16423] __nla_validate_parse: 59 callbacks suppressed [ 487.821233][T16423] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2558'. [ 487.895145][T16424] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2558'. [ 490.092656][T16510] xt_hashlimit: max too large, truncated to 1048576 [ 490.119577][T16510] xt_ecn: cannot match TCP bits for non-tcp packets [ 490.234103][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 490.336714][T16516] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 492.098683][T16578] netlink: 'syz.1.2601': attribute type 4 has an invalid length. [ 492.120578][T16578] netlink: 'syz.1.2601': attribute type 4 has an invalid length. [ 492.163487][ T995] lo speed is unknown, defaulting to 1000 [ 492.179106][T16579] syzkaller0: entered promiscuous mode [ 492.197225][ T995] syz1: Port: 1 Link ACTIVE [ 492.203301][T16579] syzkaller0: entered allmulticast mode [ 492.253359][ T995] lo speed is unknown, defaulting to 1000 [ 492.509371][T16607] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2607'. [ 492.776648][T16624] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2611'. [ 492.812160][T16622] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 492.923792][T16625] tun0: tun_chr_ioctl cmd 1074025673 [ 493.092840][T16635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2615'. [ 493.207813][T16635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2615'. [ 493.243780][T16643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2619'. [ 493.448247][T16644] x_tables: duplicate underflow at hook 2 [ 493.647428][T16666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2624'. [ 493.672648][T16666] nbd: must specify a size in bytes for the device [ 493.741389][T16669] can: request_module (can-proto-0) failed. [ 493.779402][ T47] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 494.312402][T16685] Cannot find del_set index 3 as target [ 494.320134][T16685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2629'. [ 494.432585][T16660] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 494.714290][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 495.199399][T16725] netlink: 'syz.1.2638': attribute type 39 has an invalid length. [ 495.270326][T16725] syz_tun (unregistering): left allmulticast mode [ 495.290385][T16725] syz_tun (unregistering): left promiscuous mode [ 495.305707][T16725] bridge0: port 3(syz_tun) entered disabled state [ 495.416242][T16738] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2639'. [ 495.501327][ T30] audit: type=1800 audit(1782628225.418:12): pid=16738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2639" name="memory.events" dev="tmpfs" ino=2792 res=0 errno=0 [ 495.710329][T16737] can: request_module (can-proto-0) failed. [ 495.719523][T16742] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2640'. [ 496.034703][T16758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2645'. [ 496.494142][T16775] Can't find ip_set type [ 496.529064][T16767] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 496.751449][T16790] IPVS: sync thread started: state = MASTER, mcast_ifn = gretap0, syncid = 2, id = 0 [ 497.040220][T16798] lo speed is unknown, defaulting to 1000 [ 497.069808][T16798] lo speed is unknown, defaulting to 1000 [ 497.102579][T16805] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2654'. [ 497.573729][T16819] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2658'. [ 497.630029][T16827] veth0_macvtap: left promiscuous mode [ 497.985815][T16839] syzkaller0: entered promiscuous mode [ 498.009841][T16839] syzkaller0: entered allmulticast mode [ 498.129867][T16851] netlink: 'syz.1.2667': attribute type 1 has an invalid length. [ 498.204089][T16851] bond15: entered promiscuous mode [ 498.209400][T16851] bond15: entered allmulticast mode [ 498.219924][T16851] 8021q: adding VLAN 0 to HW filter on device bond15 [ 498.286578][T16856] erspan1: entered allmulticast mode [ 498.360832][T16856] bond15: (slave erspan1): making interface the new active one [ 498.401629][T16856] erspan1: entered promiscuous mode [ 498.460723][T16856] bond15: (slave erspan1): Enslaving as an active interface with an up link [ 498.806180][T16860] syzkaller0: entered promiscuous mode [ 498.811880][T16860] syzkaller0: entered allmulticast mode [ 498.910735][T16896] netlink: 'syz.3.2674': attribute type 13 has an invalid length. [ 498.920150][T16896] netlink: 'syz.3.2674': attribute type 17 has an invalid length. [ 499.098421][T16902] ref_ctr_offset mismatch. inode: 0x28 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 501.512292][T16896] net_ratelimit: 329 callbacks suppressed [ 501.512312][T16896] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 501.617442][T16900] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.673686][T16900] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 501.733955][T16277] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.741319][T16277] bridge0: port 1(bridge_slave_0) entered listening state [ 501.765587][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.772717][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.798663][T16277] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.805921][T16277] bridge0: port 2(bridge_slave_1) entered listening state [ 501.920720][T16914] netlink: 'syz.3.2677': attribute type 1 has an invalid length. [ 502.093795][T16914] bond8: entered promiscuous mode [ 502.109947][T16914] 8021q: adding VLAN 0 to HW filter on device bond8 [ 502.199359][T16923] vlan2: entered allmulticast mode [ 502.224316][T16923] bond8: entered allmulticast mode [ 502.399350][T16924] bond8: (slave bridge8): making interface the new active one [ 502.417008][T16924] bridge8: entered promiscuous mode [ 502.423289][T16924] bridge8: entered allmulticast mode [ 502.432936][T16924] bond8: (slave bridge8): Enslaving as an active interface with an up link [ 502.691074][T16957] syzkaller1: entered promiscuous mode [ 502.698319][T16957] syzkaller1: entered allmulticast mode [ 502.738918][T16957] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 502.913156][T16967] __nla_validate_parse: 5 callbacks suppressed [ 502.913177][T16967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2689'. [ 502.931990][T16967] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2689'. [ 502.951669][T16967] geneve2: entered promiscuous mode [ 502.958076][T16967] geneve2: entered allmulticast mode [ 504.982761][T16935] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 505.531926][T16988] netlink: 'syz.4.2695': attribute type 4 has an invalid length. [ 505.783370][T17004] tipc: Enabled bearer , priority 0 [ 505.795960][T17004] syzkaller0: entered promiscuous mode [ 505.813606][T17004] syzkaller0: entered allmulticast mode [ 505.822591][T17004] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 505.913031][T17004] tipc: Resetting bearer [ 506.017162][T17009] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2702'. [ 506.060093][T17012] tipc: Failed to remove unknown binding: 66,0,0/0:3044268838/3044268840 [ 506.102841][T17012] tipc: Failed to remove unknown binding: 66,0,0/0:3044268838/3044268839 [ 506.342417][T17019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2704'. [ 506.387222][T17021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2704'. [ 506.435240][T17024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2705'. [ 506.749567][T17003] tipc: Resetting bearer [ 506.874942][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 506.946406][T17003] tipc: Disabling bearer [ 507.082568][T17049] syzkaller1: entered promiscuous mode [ 507.102883][T17049] syzkaller1: entered allmulticast mode [ 507.207407][T17056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2714'. [ 507.635012][T17071] x_tables: duplicate underflow at hook 2 [ 507.906840][T17085] tipc: Enabled bearer , priority 0 [ 507.933143][T17089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2719'. [ 507.966101][T17085] tipc: Disabling bearer [ 508.059767][T17094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2721'. [ 508.110398][T17103] xt_TCPMSS: Only works on TCP SYN packets [ 508.136078][T17089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2719'. [ 508.143064][T17101] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2722'. [ 508.258839][T17106] xfrm0 speed is unknown, defaulting to 1000 [ 508.274811][T17106] xfrm0 speed is unknown, defaulting to 1000 [ 508.306508][T17106] xfrm0 speed is unknown, defaulting to 1000 [ 508.314072][T17094] bond10: left allmulticast mode [ 508.333170][T17094] bond10: left promiscuous mode [ 508.340755][T17094] bridge0: port 6(bond10) entered disabled state [ 508.344528][T17106] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 508.402138][T17094] batadv0: left allmulticast mode [ 508.405772][T17106] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 508.416747][T17094] batadv0: left promiscuous mode [ 508.447235][T17106] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 508.453190][T17094] bridge0: port 5(batadv0) entered disabled state [ 508.471844][T17094] vlan2: left allmulticast mode [ 508.490117][T17094] geneve0: left allmulticast mode [ 508.510063][T17106] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 508.521785][T17094] vlan2: left promiscuous mode [ 508.540304][T17094] geneve0: left promiscuous mode [ 508.556591][T17094] bridge0: port 4(vlan2) entered disabled state [ 508.561885][T17120] netlink: 'syz.3.2725': attribute type 7 has an invalid length. [ 508.595865][T17094] bridge_slave_1: left promiscuous mode [ 508.601934][T17094] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.616053][T17094] bridge_slave_0: left allmulticast mode [ 508.622933][T17094] bridge_slave_0: left promiscuous mode [ 508.635451][T17094] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.747272][T17106] xfrm0 speed is unknown, defaulting to 1000 [ 508.761321][T17106] xfrm0 speed is unknown, defaulting to 1000 [ 508.783324][T17106] xfrm0 speed is unknown, defaulting to 1000 [ 508.803565][T17106] xfrm0 speed is unknown, defaulting to 1000 [ 508.812993][T17106] xfrm0 speed is unknown, defaulting to 1000 [ 508.877675][T17128] netlink: 'syz.2.2729': attribute type 11 has an invalid length. [ 508.891782][T17129] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2728'. [ 509.031649][T17136] tun0: tun_chr_ioctl cmd 1074025673 [ 509.050311][T17133] tun0: tun_chr_ioctl cmd 1074025675 [ 509.067086][T17133] tun0: persist enabled [ 509.078728][T17138] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20002 [ 509.078970][T17136] tun0: tun_chr_ioctl cmd 1074025675 [ 509.094615][T17136] tun0: persist enabled [ 509.120676][T17133] tun0: tun_chr_ioctl cmd 1074025675 [ 509.128309][T17133] tun0: persist enabled [ 509.301573][T16277] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.324895][T16277] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.343749][T17140] netlink: 'syz.4.2731': attribute type 13 has an invalid length. [ 509.352198][T17140] netlink: 'syz.4.2731': attribute type 17 has an invalid length. [ 509.431760][T16277] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.543626][T17140] bridge0: left allmulticast mode [ 509.558428][T17140] 8021q: adding VLAN 0 to HW filter on device  [ 509.621785][T17140] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 509.633181][T17140] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 509.649202][T17140] veth1_vlan: left promiscuous mode [ 509.656714][T17140] veth0_vlan: left promiscuous mode [ 509.663416][T17140] veth0_vlan: entered promiscuous mode [ 509.672620][T17140] veth1_vlan: entered promiscuous mode [ 509.687030][T17140] veth1_macvtap: left promiscuous mode [ 509.694470][T17140] veth0_macvtap: left promiscuous mode [ 509.701529][T17140] veth0_macvtap: entered promiscuous mode [ 509.723388][T17140] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 509.732998][T17140] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 509.746599][T17140] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 509.759651][T17140] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 509.771865][T17140] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 509.788913][T16277] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.808162][T16277] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.829040][T16277] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.053732][T17163] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2739'. [ 510.121240][ T7854] xfrm0 speed is unknown, defaulting to 1000 [ 510.132936][T16277] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.163841][ T7854] syz0: Port: 1 Link ACTIVE [ 510.169267][T16277] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.200007][T17166] : renamed from dummy0 (while UP) [ 510.399698][T17176] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 510.577673][T17181] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2746'. [ 510.739714][T17185] tipc: Enabling of bearer rejected, already enabled [ 510.806220][T17191] macsec0: entered promiscuous mode [ 510.815835][T17191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2749'. [ 510.829970][T17185] netlink: 'syz.4.2748': attribute type 12 has an invalid length. [ 510.840220][T17191] veth1_macvtap: left promiscuous mode [ 510.922510][T17191] macsec0 (unregistering): left promiscuous mode [ 511.009685][T17197] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2751'. [ 511.087935][T17203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2752'. [ 511.137649][T17203] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 511.268754][T17214] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 511.331271][T17214] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 511.354744][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 512.461969][T17253] ip6tnl3: entered allmulticast mode [ 513.473348][T17298] __nla_validate_parse: 8 callbacks suppressed [ 513.473369][T17298] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2774'. [ 513.543271][T17300] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2775'. [ 513.587889][T17301] netlink: 'syz.4.2774': attribute type 11 has an invalid length. [ 513.607076][T17300] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2775'. [ 513.638685][T17305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2777'. [ 513.977858][T17311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2779'. [ 514.119763][T17315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2781'. [ 514.619119][T17330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2786'. [ 515.017669][T17345] netlink: 'syz.3.2788': attribute type 1 has an invalid length. [ 515.143797][T17345] 8021q: adding VLAN 0 to HW filter on device bond9 [ 515.190705][T17351] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2789'. [ 515.254869][T17351] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2789'. [ 517.487934][T17324] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 517.980827][T17394] IPVS: length: 24 != 667326072 [ 518.055073][T17386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2798'. [ 518.304134][T17408] x_tables: duplicate underflow at hook 2 [ 518.328986][T17406] netlink: 'syz.3.2801': attribute type 1 has an invalid length. [ 518.367729][ T3319] [ 518.370216][ T3319] ============================================ [ 518.376466][ T3319] WARNING: possible recursive locking detected [ 518.382889][ T3319] syzkaller #0 Not tainted [ 518.387351][ T3319] -------------------------------------------- [ 518.393669][ T3319] kworker/u8:10/3319 is trying to acquire lock: [ 518.400003][ T3319] ffff88807f60b958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 518.410062][ T3319] [ 518.410062][ T3319] but task is already holding lock: [ 518.417482][ T3319] ffff8880429a3158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 518.427723][ T3319] [ 518.427723][ T3319] other info that might help us debug this: [ 518.435811][ T3319] Possible unsafe locking scenario: [ 518.435811][ T3319] [ 518.443320][ T3319] CPU0 [ 518.446625][ T3319] ---- [ 518.449936][ T3319] lock(&qdisc_xmit_lock_key#4); [ 518.455533][ T3319] lock(&qdisc_xmit_lock_key#4); [ 518.460566][ T3319] [ 518.460566][ T3319] *** DEADLOCK *** [ 518.460566][ T3319] [ 518.468735][ T3319] May be due to missing lock nesting notation [ 518.468735][ T3319] [ 518.477124][ T3319] 10 locks held by kworker/u8:10/3319: [ 518.482811][ T3319] #0: ffff888033818940 ((wq_completion)bond15){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 518.494004][ T3319] #1: ffffc9000d337c40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 518.506891][ T3319] #2: ffffffff8e959c20 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf3/0x17c0 [ 518.516566][ T3319] #3: ffffffff8e959c80 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x37f0 [ 518.526549][ T3319] #4: ffff888029601228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x112b/0x37f0 [ 518.539351][ T3319] #5: ffff8880429a3158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 518.549728][ T3319] #6: ffffffff8e959c20 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5a/0x450 [ 518.558709][ T3319] #7: ffffffff8e959c20 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3de/0x10b0 [ 518.568562][ T3319] #8: ffffffff8e959c80 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x37f0 [ 518.578664][ T3319] #9: ffff8880207d5228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x112b/0x37f0 [ 518.591305][ T3319] [ 518.591305][ T3319] stack backtrace: [ 518.597281][ T3319] CPU: 0 UID: 0 PID: 3319 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 518.597300][ T3319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 518.597312][ T3319] Workqueue: bond15 bond_alb_monitor [ 518.597336][ T3319] Call Trace: [ 518.597344][ T3319] [ 518.597352][ T3319] dump_stack_lvl+0xe8/0x150 [ 518.597372][ T3319] print_deadlock_bug+0x279/0x290 [ 518.597418][ T3319] __lock_acquire+0x24df/0x2cf0 [ 518.597435][ T3319] ? __pfx_netif_skb_features+0x10/0x10 [ 518.597455][ T3319] ? __lock_acquire+0x683/0x2cf0 [ 518.597470][ T3319] ? sch_direct_xmit+0x15f/0x4c0 [ 518.597492][ T3319] lock_acquire+0x106/0x350 [ 518.597506][ T3319] ? sch_direct_xmit+0x15f/0x4c0 [ 518.597529][ T3319] ? __bfs+0x153/0x290 [ 518.597547][ T3319] _raw_spin_lock+0x2e/0x40 [ 518.597627][ T3319] ? sch_direct_xmit+0x15f/0x4c0 [ 518.597648][ T3319] sch_direct_xmit+0x15f/0x4c0 [ 518.597672][ T3319] ? __pfx_sch_direct_xmit+0x10/0x10 [ 518.597701][ T3319] ? print_irq_inversion_bug+0x190/0x1e0 [ 518.597721][ T3319] __dev_queue_xmit+0x1754/0x37f0 [ 518.597742][ T3319] ? __dev_queue_xmit+0x29b/0x37f0 [ 518.597762][ T3319] ? __pfx___dev_queue_xmit+0x10/0x10 [ 518.597779][ T3319] ? neigh_resolve_output+0x428/0x720 [ 518.597837][ T3319] ? eth_header+0x11b/0x200 [ 518.597854][ T3319] ? __asan_memcpy+0x40/0x70 [ 518.597891][ T3319] ? ip_finish_output2+0x3de/0x10b0 [ 518.597905][ T3319] ip_finish_output2+0xc4b/0x10b0 [ 518.597919][ T3319] ? ip_skb_dst_mtu+0x811/0xa50 [ 518.597940][ T3319] ? ip_finish_output2+0x3de/0x10b0 [ 518.597955][ T3319] ? ip_finish_output+0x40b/0x530 [ 518.597977][ T3319] ip_output+0x29f/0x450 [ 518.597998][ T3319] ? ip_output+0x5a/0x450 [ 518.598018][ T3319] iptunnel_xmit+0x626/0xd10 [ 518.598067][ T3319] ip_tunnel_xmit+0x195b/0x2040 [ 518.598096][ T3319] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 518.598118][ T3319] ? __pfx_gre_build_header+0x10/0x10 [ 518.598176][ T3319] ? kfree+0x1c5/0x640 [ 518.598196][ T3319] ? pskb_expand_head+0x469/0x13a0 [ 518.598232][ T3319] __gre_xmit+0x19e/0x240 [ 518.598251][ T3319] ? __pfx___gre_xmit+0x10/0x10 [ 518.598272][ T3319] erspan_xmit+0xad5/0x1590 [ 518.598294][ T3319] ? __pfx_erspan_xmit+0x10/0x10 [ 518.598314][ T3319] ? __lock_acquire+0x683/0x2cf0 [ 518.598331][ T3319] dev_hard_start_xmit+0x2cd/0x830 [ 518.598353][ T3319] sch_direct_xmit+0x257/0x4c0 [ 518.598377][ T3319] ? __pfx_sch_direct_xmit+0x10/0x10 [ 518.598399][ T3319] ? __switch_to_asm+0x70/0x70 [ 518.598419][ T3319] __dev_queue_xmit+0x1754/0x37f0 [ 518.598440][ T3319] ? __dev_queue_xmit+0x29b/0x37f0 [ 518.598460][ T3319] ? __pfx___dev_queue_xmit+0x10/0x10 [ 518.598477][ T3319] ? rcu_is_watching+0x15/0xb0 [ 518.598505][ T3319] ? kmem_cache_alloc_node_noprof+0x1b1/0x610 [ 518.598527][ T3319] ? trace_kmem_cache_alloc+0x29/0xe0 [ 518.598547][ T3319] ? kmem_cache_alloc_node_noprof+0x1b1/0x610 [ 518.598569][ T3319] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 518.598590][ T3319] ? local_lock_release+0x9c/0x160 [ 518.598633][ T3319] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 518.598661][ T3319] ? __alloc_skb+0x4cc/0x7a0 [ 518.598676][ T3319] ? alb_send_lp_vid+0x14e/0x550 [ 518.598701][ T3319] alb_send_lp_vid+0x348/0x550 [ 518.598726][ T3319] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 518.598755][ T3319] alb_send_learning_packets+0x12c/0x300 [ 518.598778][ T3319] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 518.598801][ T3319] ? bond_alb_monitor+0xf3/0x17c0 [ 518.598826][ T3319] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 518.598850][ T3319] bond_alb_monitor+0x3d0/0x17c0 [ 518.598881][ T3319] ? bond_alb_monitor+0xf3/0x17c0 [ 518.598915][ T3319] ? __pfx_bond_alb_monitor+0x10/0x10 [ 518.598945][ T3319] ? rcu_is_watching+0x15/0xb0 [ 518.598963][ T3319] ? process_scheduled_works+0xa20/0x14e0 [ 518.598986][ T3319] process_scheduled_works+0xa8e/0x14e0 [ 518.599022][ T3319] ? __pfx_process_scheduled_works+0x10/0x10 [ 518.599046][ T3319] ? assign_work+0x3cf/0x5d0 [ 518.599067][ T3319] worker_thread+0xa47/0xfb0 [ 518.599105][ T3319] kthread+0x388/0x470 [ 518.599122][ T3319] ? __pfx_worker_thread+0x10/0x10 [ 518.599142][ T3319] ? __pfx_kthread+0x10/0x10 [ 518.599158][ T3319] ret_from_fork+0x514/0xb70 [ 518.599194][ T3319] ? __pfx_ret_from_fork+0x10/0x10 [ 518.599211][ T3319] ? __switch_to+0xc89/0x1420 [ 518.599235][ T3319] ? __pfx_kthread+0x10/0x10 [ 518.599252][ T3319] ret_from_fork_asm+0x1a/0x30 [ 518.599276][ T3319] [ 519.038593][T17409] netlink: 'syz.1.2802': attribute type 13 has an invalid length. [ 519.046701][T17409] netlink: 'syz.1.2802': attribute type 17 has an invalid length. [ 519.117382][ T7854] lo speed is unknown, defaulting to 1000 [ 519.135158][ T7854] syz1: Port: 1 Link DOWN [ 519.159014][T17410] 8021q: adding VLAN 0 to HW filter on device bond11 [ 519.167895][T17410] bond10: (slave bond11): making interface the new active one [ 519.176868][T17410] bond10: (slave bond11): Enslaving as an active interface with an up link [ 519.190712][T17409] 0ªî{X¹¦: left allmulticast mode [ 519.209030][T17409] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.223112][T17409] bridge_slave_1: left allmulticast mode [ 519.242302][T17409] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 519.266082][T17411] bond10: (slave gretap1): Enslaving as a backup interface with an up link [ 519.283286][ T9802] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 519.293312][ T9802] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 519.303607][T17406] 8021q: adding VLAN 0 to HW filter on device bond10 [ 519.311647][ T7854] lo speed is unknown, defaulting to 1000 [ 519.401840][ T9802] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 519.411012][ T9802] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 519.421200][ T5845] lo speed is unknown, defaulting to 1000 [ 519.427719][ T5845] syz1: Port: 1 Link ACTIVE