last executing test programs: 4.572100302s ago: executing program 0 (id=4675): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r2, &(0x7f0000001500)=[{{&(0x7f0000000600)={0xa, 0x4e21, 0xffff, @private2, 0x401}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000640)="be", 0x1}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e20, 0x8001, @dev={0xfe, 0x80, '\x00', 0x43}, 0x5}, 0x1c, &(0x7f0000000f80)=[{&(0x7f0000000b80)='S', 0x1}], 0x1}}], 0x2, 0x20044040) r3 = socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x3, 0x300) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e20590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd2", 0x59}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x2}, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) recvmmsg(r1, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20010020, 0x0) ioctl$int_out(r0, 0xa8c0, &(0x7f00000001c0)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 3.826785017s ago: executing program 1 (id=4678): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) write(r1, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003100f000ee1000c", 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="14020000c98547b09abd7000fb9bdf25fc0000992a3b48153300000000000000feedff5907350009000800"], 0x34}, 0x1, 0x0, 0x0, 0x4050}, 0x48000) r3 = socket(0x1e, 0x4, 0x0) recvmsg$unix(r3, 0x0, 0x20) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1) write$tun(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000180)=':', 0x1, 0x24044013, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) shutdown(r5, 0x1) socket$kcm(0x29, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000340), 0x0) close(0x4) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x7, @local, 0xb}, {0xa, 0x4e24, 0x1, @empty, 0x2}, 0x1, {[0x0, 0x1, 0x0, 0x7ff, 0x0, 0x80000000]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0xff, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRES8=r4, @ANYRESHEX, @ANYBLOB="00022dbd7000fedbdf2501000000080011000100000008000b000200000014001f00fc020000000000000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x200088c4}, 0x20000080) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x35, 0x300, 0x70bd25, 0x25dfd3ff, {0x7}, [@typed={0x8, 0xb4, 0x0, 0x0, @u32=0x928}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24044810}, 0x20040411) unshare(0x20400) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0\x00', &(0x7f0000000380)=@ethtool_rxfh={0x46, 0x7, 0x8da, 0x9, 0x4, 'l#2', 0x6, [0xc, 0x81, 0x9, 0xe]}}) 3.825957982s ago: executing program 4 (id=4679): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711217000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d0a0000000000000000000006040098"], &(0x7f0000000f40)=""/4088, 0x3e, 0xff8, 0x1}, 0x28) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) recvmmsg(r2, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2102, &(0x7f00000042c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x20000400) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448c9, 0x0) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x3e, &(0x7f0000000040)="d84f", 0x2) sendto$inet6(r7, &(0x7f0000000800)="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", 0x5a3, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x9, @mcast2}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r9, 0x0, 0x0) recvmsg$unix(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/79, 0xbdef}], 0x300, 0x0, 0x4a}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) 3.584527263s ago: executing program 0 (id=4681): socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x4, 0xfffffffffffffffd, &(0x7f00000000c0)=0xfffffecb) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtaction={0x894, 0x30, 0xfbed, 0x70bd29, 0x25dfdbff, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x8, 0x0, 0x3, 0x4, 0x2, 0x2, 0x4000, 0x0, 0x0, 0x9, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffc, 0x2, 0x5f41fde7, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7ff, 0x0, 0x4e16, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x2, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x74, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x1, 0x0, 0x100000, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x75b, 0x0, 0x0, 0xf, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3bf0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x1, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x2, 0x1000, 0x0, 0x0, 0x9, 0x3, 0xa088, 0x400, 0x1, 0x0, 0xdf01, 0x3, 0x0, 0x87, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x6, 0x1ffffffe, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x8, 0x0, 0xaa84911, 0x0, 0x0, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x3, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0xfff, 0x1, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x200, 0x0, 0x0, 0xffffffff, 0x7, 0x0, 0x0, 0x0, 0x3a4f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffc, 0x0, 0x0, 0x0, 0x800007, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x40000, 0x2, 0x2, 0x4, 0x0, 0x0, 0x0, 0x894e, 0x0, 0x2, 0x0, 0x9, 0x0, 0x17a00, 0x0, 0x5, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0xa80f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8db, 0xffffffff, 0x0, 0x9, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x10, 0x0, 0x0, 0xf, 0x0, 0x7c, 0x0, 0x5, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xcd9, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x4000, 0x10, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0xfffffff9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x319e, 0x4, 0x6, 0x9, 0x0, 0x484a, 0x0, 0x20002, 0x0, 0x6, 0x0, 0xfffffffc, 0x9, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfbfffffe, 0x0, 0xffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x5a62, 0x0, 0x0, 0x2, 0xfffffffd, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0xff, 0xfffc, 0x5}, {0x5, 0x0, 0x0, 0x9, 0x0, 0xfffffffc}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x2}}}}]}]}, 0x894}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSET={0xe8, 0xb, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_SET_USERDATA={0xb8, 0xd, 0x1, 0x0, "b5da18b7ea6682461634bed5e8b6ee92e0cb9b4951447c9c13ebce5c77c8da2ca4b2e405bf6a8e6a34ea26003dad7e65b31f89837fe24d6b23680d5f963041620f23e83051535dc2995302fd5f73daaad91b423fdc566d676f40a14bac7195b8bd6da35534ffa01698a9eedac86e5db112a920ce4661cf260d4607b74607a92af4ef5617725bee3d7fc0132e1cc0f27d72a736ba38ee4f0bb190ab2a7988d2607afaa8c0f85f221ab7779c5b74c329e341de24e1"}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x39}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8}]}], {0x14}}, 0x110}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newsa={0x23c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x191, 0x2, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2d, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x128, 0x3, {{'deflate\x00'}, 0x700, "bef7963803e1f3addd843b73d88b800ebfb6769f7606157e02996b2af703840710b5245baecb1ce1062be963a41f5a13b9f3d40ece60bebb34e72f5f5020eb0aeba1342708ad96fc26a640232a54925a03002e241bf9ac0e3f0fc75a7b7ee4bc8f13a8723ddcb347ae33814e7931d9413cf2550495e2e3e0861f770379e8c571adffbd434ca22545604f04ad91391d6e2d6a86834b20261624833318db02a1b55610560dc0355d16672572ed4f9058acc3a38db38d3d08244a456efd6012f800c7613bbabe9b77a9a538c2f1b428f7a05f6d36b5b76da925e9e843b004cdcd69"}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcb, 0x9, 0x100}}]}, 0x23c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000b00)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x80800) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "173e6335a79630de1125f32bfd49b77c2d01a8ac6334c2bd", "5c341f44cbb52d9d51c5ea017cd89c9cf84a0b6ec3606f3e97d850427a78e750"}}}}}}, 0x0) recvmmsg$unix(r6, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/116, 0x74}], 0x1}}], 0x1, 0x40002100, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004054}, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e20, 0xfffff000, @local, 0xd486}, 0x1c) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$netlink(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000cc0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="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", @ANYRES32=r13, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB], 0x60}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x4040850) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000003b000900fffffffffddbdf25020000000800018004002092"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x2b}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x100, 0x1000000000000192, 0x8000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9, 0x5}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x9b, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) 3.464396895s ago: executing program 4 (id=4682): listen(0xffffffffffffffff, 0xfffffffc) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x220, 0x308, 0x220, 0x3f0, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0xffffff00, 0x1, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x7, 0x2, 0x0, 0x800, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x180}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @broadcast, 0x6, 0xfffffffe}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 0x0, 0xfd, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="00008000", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @loopback, @loopback, {[], @mld={0x83, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000001640)="e0857f9f582f0300000000000000", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) r8 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r8, 0x6b, 0x1, &(0x7f0000000740)=[{0x1, 0x1, {0x0, 0xf0, 0xd}, {0x2, 0x1}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)={0x2c, r7, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20048081) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @random="50000000e000", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x810001, 0x200000}}}}}, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 3.176688616s ago: executing program 0 (id=4684): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) clock_gettime(0x0, &(0x7f00000028c0)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000000240)=""/134, 0x86}, {&(0x7f0000000300)=""/157, 0x9d}, {&(0x7f00000003c0)=""/4, 0x4}, {&(0x7f0000002640)=""/223, 0xdf}, {&(0x7f0000002740)=""/144, 0x90}], 0x5}}], 0x1, 0x161, &(0x7f0000002900)={r4, r5+60000000}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x3c, r3, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4) recvmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/8, 0x8}], 0x1}, 0x10022) 2.88283707s ago: executing program 1 (id=4685): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f"], 0x48) socket$kcm(0x2d, 0x2, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000090d5a365012", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x3d}]}, &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x20}}, 0x20008040) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x4, 0x3, 0xf10e, 0x4d3, 0xf2}, &(0x7f0000000240)=0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030031000b05d25a806c8c6f94f90224fc600e0007000a000200053582c1", 0x20}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="bb00000031000b63ddd2006c8c6f59bab50100d0c96ffc6010", 0x19}], 0x1}, 0x4000000) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r3, &(0x7f0000000880)={&(0x7f0000000040)={0xa, 0x4e22, 0x7, @empty, 0x101}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000000)="8000e859667fbc13", 0x8}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000000000000000000390000002b00ec0b0bfb14d2866a63d4ca66d7c06d02070000000041c9bc72c95f48730c699571ba8a5edd48ce2ed90a3d6301cce417086e63025a498be609c9132847b013fa614ea441af62c760daa80f56bed5ae4469c17a792045a73f5182a56f33b362a316b76d36173b04aac7e031a1fe7d968223663e86d0386d199a04ea7baa083bc8e782e460398332fd13b31ef956878102d9aa77a8551ad0c76f699a5c00fea89256e038f1dc27369158f2d834d43a24247184570240192eaf2129ead5e8e3bf0d029adc9c946e72964b4a65ca3c224fdcc8822216a2268ecef966efcd1a721044e494f3e04aff52a5d69e0bf9768c016fad26f2044399faae299fa85ca8eb89e18505fdb8808f5aac6d92fafa6ab52870096d36ac8070d4b9b7ecb16476a532f817ba956742f969f81cd6cec4e5ddcbe3d770e2eb862a6179c58072fe46b901a3ec3d4c4909fbcf"], 0x18}, 0x80) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fc01000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000040000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000300000000000000000000000020000000000000000000000000000000000000010000000000000044000500fa33646d599c39b20000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) socket$key(0xf, 0x3, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 2.733694237s ago: executing program 1 (id=4687): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2}, 0x50) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, &(0x7f0000000180)={r1, &(0x7f0000000080)='%-::}(+)\x00', 0x404001, &(0x7f00000000c0)={@_ha_fsid={[0x3, 0x5]}, {0x0, 0x1, 0x1}}, 0x8, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x80000000}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x11, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r2) sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x1c0, r4, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x3}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x5}, {0x8}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xfd66}, {0x8, 0x13, 0xfffffff9}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x268c}, {0x8, 0x13, 0x57}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6}, {0x8, 0x13, 0x7}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x4}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6}, {0x8, 0x13, 0x3d}, {0x5}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4048080}, 0x20000800) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r2) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x70, r5, 0x10, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x880}, 0x400c000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r2) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r6, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}]}, 0x34}}, 0x44) syz_80211_join_ibss(&(0x7f0000000880)='wlan1\x00', &(0x7f00000008c0)=@default_ibss_ssid, 0x6, 0x0) r7 = socket(0x2, 0x2, 0x0) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000940)={0x124, 0x7, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_EXPRESSIONS={0x80, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x18}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x4}]}}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FLAGS={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x6a, 0x7, 0x1, 0x0, "56f8406bad1a0d8c1395697941a0dc0725b301268172ae383a0f09c5482277a3f1b8fec65c1c1094189613265b30e92e300aa1fc9fbbb87d33cfb0c5dff3b0fc1b137a3028e8c50b2c73a2560c5e267d6b4ce26dc6f60e788859a5abfda600a28aebae0eead7"}]}, 0x124}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r3, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44001}, 0x40010) ioctl$XFS_IOC_GETBMAPX(r1, 0xc0205838, &(0x7f0000000c00)={0x5, 0x8, 0x6, 0xa6, 0x0, 0x3f, 0x5}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000c40), r7) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) ppoll(&(0x7f0000000c80)=[{r8, 0x68}, {r0, 0x24}], 0x2, &(0x7f0000000cc0)={0x0, 0x3938700}, &(0x7f0000000d00)={[0xb6f2]}, 0x8) sendmsg$AUDIT_USER_AVC(r7, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e80)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4000040) listen(r7, 0xff) close(r1) bind$rds(r7, &(0x7f0000000f00)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) pipe(&(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r7, 0xc0385868, &(0x7f0000001080)={r1, &(0x7f0000000f80)=',/:{\'-}!/@:@&\x00', 0x40b40, &(0x7f0000000fc0)={@align=0x31, {0xa9cc, 0x549, 0x0, 0xfff}}, 0x9, &(0x7f0000001000)={@_ha_fsid}, &(0x7f0000001040)=0xffffff7f}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000010c0)={0x1, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001300)={'ip6gre0\x00', &(0x7f0000001280)={'ip6tnl0\x00', 0x0, 0x2f, 0x6, 0xaa, 0x80, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0xbc20, 0x80, 0x5}}) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001400)=@o_path={&(0x7f00000013c0)='./file0\x00', 0x0, 0x4000, r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001480)={0x18, 0x1c, &(0x7f0000001100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x24000}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xe}, @map_fd={0x18, 0x2, 0x1, 0x0, r10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}, @jmp={0x5, 0x1, 0x6, 0x5, 0x6, 0x0, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000001200)='syzkaller\x00', 0x1, 0x16, &(0x7f0000001240)=""/22, 0x41100, 0x20, '\x00', r12, 0x0, r7, 0x8, &(0x7f0000001340)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001380)={0x3, 0xe, 0xfffffffc, 0xff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r0, r13, r0, r0, r0], 0x0, 0x10, 0x10}, 0x94) 2.660334785s ago: executing program 3 (id=4688): syz_open_procfs$namespace(0xffffffffffffffff, 0x0) unshare(0x20400) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40002000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240), 0x8) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x5, 0x14, 0x0, &(0x7f00000000c0)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r4, 0x800442d4, 0x0) socket$kcm(0x11, 0xa, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0x8005}, 0x6) socket(0x2b, 0x1, 0x0) 2.352306339s ago: executing program 1 (id=4690): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f80)='freezer.parent_freezing\x00', 0x275a, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000090900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b80200001ff"], 0x118}, 0x1, 0x0, 0x0, 0x44000}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11, 0x1, 0x0, 0x40}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x4004000}, 0x44000) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000640)="dbcadafd9d8551fba25b67fcdd8fde86874291ea14b4447381d4a251eef0f6496b1f9a6f2178f114637544b1af1d786d42886fdc7d2a56371184ae47e2e3490711871de7d65eb12d843a1bbfc9a1be85dbb38bdf33e03dfa51bc75c426ea", 0x5e}], 0x1}}], 0x1, 0x8000) sendmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000014c0)='\t', 0x1}], 0x1, &(0x7f0000000000)=ANY=[], 0xa}}], 0x1, 0x4044805) sendto$inet(r2, &(0x7f00000003c0)="734a83", 0x3, 0x4000001, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000004680)={0x0, @private, @empty}, &(0x7f00000046c0)=0xc) sendmmsg$inet(r2, &(0x7f0000004800)=[{{&(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, &(0x7f0000003040)=[{&(0x7f00000006c0)="3118944f0cb6f5fb3d9f8e69cdadb4df2f504369308c98d390766f45921b80c820b1fd7262cc3b56161fe78a55f37aee3d4449745edd72a0a9c090089e2fe9459f29e19c019a2e4e141219f7b418fea8eda14377d4b886ce240bb9e37138663886c1b21b139718449675f4a93648cb62ba", 0x71}, {&(0x7f0000002040)="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", 0xf00}], 0x2}}, {{&(0x7f0000003080)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000003140)=[{&(0x7f00000030c0)="9183f0034426e6e13291439da739f478ee8a01a3ea4411f2a488be0b640970368698629b70e05b6a28290df2b230190e340e480e619dff97fd35272658b31e39fa6c8ccf1a35a79a975d85641fbec2ed30c070", 0x53}], 0x1, &(0x7f0000003180)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5e5a3681}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x81}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x90}}, {{&(0x7f0000003240)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000003300)=[{&(0x7f0000003280)="46d65448ecd9e53db5cd1b403d58d286d27426bfb9f302de38e22e3d170929d35dc3924a25f114848e06b1a8e96318a780c49efee1b27429fe915254cca564a72b5c184519", 0x45}], 0x1, &(0x7f0000003340)=[@ip_retopts={{0x28, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0xc6, 0x3, 0x9, [{@broadcast, 0x5}, {@multicast2, 0x9}]}, @ra={0x94, 0x4}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x40}}, {{&(0x7f0000003380)={0x2, 0x4e32, @broadcast}, 0x10, &(0x7f0000004640)=[{&(0x7f00000033c0)="24f622a3d25b8bc8da1ced7eaba8b2b9ab68db7f56f99ceab3f81fc863afb3949fd4992a885030cc4c445ff33c8752069f180c3be6a921f744504d06aaf99e806d3359735dbde6d16fbba42acc41e8550844b07e91055253ea4beac582c99753fac4d9089525ae77a19db631e432be65e46adbab700bfd14db903164a02fb780f77aafeadf42387d02df2582aa391f600c5d782ed96f6c7240afa66c47369a13c6cd1b37d08606c403bd7dd126a2ec474cf34acf577d", 0xb6}, {&(0x7f0000003480)="765d1a22c94e8b1940de1f5335b7463b73ec62ee8c000000000000000445d547aa8cd950c33d9e0d1231af7fc8895444c23863a1635bedfbb81893f07776d8a4304a4aefe83414dbc9d207f0785859374e1a923ee308be2616c7d7cfe0590cbba4dceb199415726b6b023835e9240558dafb5f7289a9b1d9ff13c57b35c37263c050602f40c8ac4764a575dcdda9f2ab5debb6c7b6809eae3beb16c6ee41d7d4b4e28a0bfed22cf2b07da4f6809054f6d58ffbb72752565f5fce4a3e1bbe1113117e119b0c5ccc57969bf4baa51945223d2d30fb9d65dea64f2ece24daaec44d1c15cc1c4197a4", 0xe7}, {&(0x7f0000003580)="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", 0xfff}, {&(0x7f0000004580)="fe763baf085fb527aae171abf62950fa260acac3c7f7b1399a338ab9950bfca1827d1c2c826bebd2616b28429cb165446ce86419e401b461ddff075dfc3439b66ad463a9cc67d823bde72de1101fadb8185be3ffc143d892b536de40995d4963b0aaedf8bfff3f01487e271e5ac2b1e3d9688514dfc4569b135ceb774b386b81dfc642e21be553bc4ddd6ba73c5bba242b82cabc18f029415591701f1bc1d2ebf4dfe0272596db50c56678eadf139242c39d34", 0xb3}], 0x4, &(0x7f0000004700)=[@ip_retopts={{0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @remote, @multicast1}}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@rr={0x7, 0x17, 0x3f, [@broadcast, @multicast2, @multicast1, @broadcast, @dev={0xac, 0x14, 0x14, 0x40}]}, @generic={0x7, 0x2}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8612}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x400}}], 0xd8}}], 0x4, 0x4) write$cgroup_subtree(r1, &(0x7f00000017c0)=ANY=[], 0x32600) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}, @cb_func={0x18, 0x8}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, 0x0, &(0x7f0000000280)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0xa, @mcast2, 0x3}}, 0xffffffff, 0xb, 0x8, 0x9, 0x4, 0x3, 0x9}, &(0x7f0000000500)=0x9c) accept$inet(r7, &(0x7f00000005c0)={0x2, 0x0, @broadcast}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000540)={r8, 0x2}, &(0x7f0000000580)=0x8) 2.29187543s ago: executing program 3 (id=4691): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x37}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r2, &(0x7f0000001500)=[{{&(0x7f0000000600)={0xa, 0x4e21, 0xffff, @private2, 0x401}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000640)="be", 0x1}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e20, 0x8001, @dev={0xfe, 0x80, '\x00', 0x43}, 0x5}, 0x1c, &(0x7f0000000f80)=[{&(0x7f0000000b80)='S', 0x1}], 0x1}}], 0x2, 0x20044040) r3 = socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x3, 0x300) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e20590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd2", 0x59}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x2}, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) recvmmsg(r1, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20010020, 0x0) ioctl$int_out(r0, 0xa8c0, &(0x7f00000001c0)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 2.291020258s ago: executing program 0 (id=4692): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x2, 'dvmrp0\x00', {}, 0x8}) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r2) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) listen(r5, 0x3) sendfile(r1, r4, 0x0, 0x20000000002) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0xfff, 0xcd, &(0x7f0000000580)=""/205, 0x41000, 0x11, '\x00', 0x0, 0x1a, r4, 0x8, &(0x7f0000000680)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x3, 0x8, 0x9, 0x6}, 0x10, 0x1e49b, r4, 0x1, 0x0, &(0x7f0000000700)=[{0x1, 0x1, 0xa, 0x7}], 0x10, 0xffff}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in, @in6=@private2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast1, 0x0, 0x3c}, @in=@broadcast, {0x5, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x8, 0xfffffffffffffff8}, {0x0, 0x3, 0x14}, 0x0, 0x0, 0xa, 0x4}, 0x5, 0x5}}, 0xf8}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) 1.574720608s ago: executing program 4 (id=4696): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r1, 0x1, 0x4070bd28, 0x1}, 0x14}}, 0x18) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, 0x0, 0x0) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x2}]}, 0x10) syz_emit_ethernet(0x2a, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000020000180000000000080822971d3c01dd66128d3ea28aa8b3ee2288c60ce1410198009556eb7906f428f0bb7ddcec55593da6d758251694433fa4"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060c", 0xb}], 0x1}, 0x4040) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 1.436763608s ago: executing program 2 (id=4697): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711217000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d0a0000000000000000000006040098"], &(0x7f0000000f40)=""/4088, 0x3e, 0xff8, 0x1}, 0x28) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) recvmmsg(r3, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2102, &(0x7f00000042c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x20000400) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448c9, 0x0) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r8, 0x29, 0x3e, &(0x7f0000000040)="d84f", 0x2) sendto$inet6(r8, &(0x7f0000000800)="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", 0x5a3, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x9, @mcast2}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r10, 0x0, 0x0) recvmsg$unix(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/79, 0xbdef}], 0x300, 0x0, 0x4a}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) getpid() sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001768a7ddcb850682ee89f1f5679a998cd69f92d5742bbec26cb5a25000b43024329fac8150ab7698171eb06c469c", @ANYRES16=r2, @ANYBLOB="10002bbd7000ffdbdf253200000008000300", @ANYRES32=r11, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4c005}, 0x2000c040) 1.418959686s ago: executing program 4 (id=4698): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r0 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 1.345969723s ago: executing program 3 (id=4699): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x37}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r3, &(0x7f0000001500)=[{{&(0x7f0000000600)={0xa, 0x4e21, 0xffff, @private2, 0x401}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000640)="be", 0x1}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e20, 0x8001, @dev={0xfe, 0x80, '\x00', 0x43}, 0x5}, 0x1c, &(0x7f0000000f80)=[{&(0x7f0000000b80)='S', 0x1}], 0x1}}], 0x2, 0x20044040) r4 = socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x3, 0x300) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e20590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd2", 0x59}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x2}, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) recvmmsg(r1, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20010020, 0x0) ioctl$int_out(r0, 0xa8c0, &(0x7f00000001c0)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 1.251800331s ago: executing program 4 (id=4700): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) bind$alg(r3, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(generic-gcm-aesni)\x00'}, 0x58) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x6800, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x4}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xfffffffffffffe2b}]}}}]}, 0x9c}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private0}, @in={0x2, 0x0, @multicast2}, @in6={0xa, 0x0, 0xd7d9, @loopback}, @in={0x2, 0x4e21, @dev}], 0x58) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r5}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b40)=ANY=[@ANYRES64=0x0, @ANYRES64=r10, @ANYBLOB="1f00"], 0x20) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r12, @ANYBLOB="08000500060000000c0017"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r14 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r14, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r7, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa0, 0x3, 0x8, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x886c}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6004}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x3c}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x1000}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2234}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88ca}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x86dd}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20040044}, 0x40) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NL80211_CMD_TESTMODE(r7, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x288, r11, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x5136da50, 0x57}}}}, [@NL80211_ATTR_TESTDATA={0xc3, 0x45, "f70d078591335c391cd368297e5b8789a0e42e708d46ab85900b36f9d8a5d5eb7ef829cf3c1aa0267a5dea73f2bf76752f6d438ee97b87121744082905b83ecb681a501a5580c9cf97cf8025675e724fe8e426977795b254674488698da645f7b1ea9db2cc4f3322c0fddb293fad5dd7ecd37c299bff38553d16ea10d26b9bb0ed39bf44a2a71167f866a4ed65f11f791da80862bfb3087106c9d14449ab14e8da429fd056c852f56350e0d7c39ad724453eb117358bb9daf0ca15847936f2"}, @NL80211_ATTR_TESTDATA={0xf8, 0x45, "ae4a98e34097f54e94b6ecfad4068c438a351d9347124283923c5794aeb29dfb8747cd75eb751725f69d13eb0e907f3938a8c6a28e28c222e887ad7703b9b3a135a131c315c9e381dd487db91691f8b7a8eb11f274590da7876172d3ce265b68872ff0f499dde0bea7ae798abf834df5ad2e33fedd0bdfd98572e26a49b486043cfd7f753ce90e80f11a599d0296294a52007a96c980734ee92aaacd26f9d1ef92a670aa43a7d9186e6cef8e4028fc0e61797ae540c2e8a5c8aaa3cbdc1ed3b435a718d18dc6435afa20dfaab66ec29541728fcbfbc2bf01b227e8ae1f47c1e3663cd0154fe3a5e965923d8de08c587bdbef00d6"}, @NL80211_ATTR_TESTDATA={0x7b, 0x45, "de049216fbb4f4bf792dbc060b05448c65748f79d843c0b658495629d0a3d5e6059889c45f31bda23a05c18e7c3005b384cb26ca6d7ddb96110ae33505134c9f9d4c53a610e089af2ef9dc150ce1acd66d50b4fa764df575951f4985bffd6ade34e036af633ff6bdcf3ef3f66fa450beed7f85e6bfef44"}, @NL80211_ATTR_TESTDATA={0x28, 0x45, "bf8fcde6c597de5dad4281edc45e2a946c4db95536adde80db7cb94a58a7bd17f247b011"}]}, 0x288}, 0x1, 0x0, 0x0, 0x4840}, 0x20004810) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x885}, 0x6048800) 1.24896409s ago: executing program 0 (id=4701): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x1, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000001500)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x80}}, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, 0x0, 0x57) socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xea5d}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r5}, 0x38) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r10, 0x0, 0xf3a, 0x0) ioctl$int_in(r10, 0x5452, &(0x7f0000000240)=0x1) ioctl$int_in(r10, 0x5452, &(0x7f0000000000)=0x10001) write(r7, 0x0, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e40)=@bpf_tracing={0x1a, 0x17, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @ldst={0x2, 0x2, 0x6, 0x1, 0x3, 0x2, 0xfffffffffffffffc}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a40)='GPL\x00', 0x3, 0xee, &(0x7f0000000a80)=""/238, 0x0, 0x14, '\x00', 0x0, 0x1c, r9, 0x8, &(0x7f0000000b80)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000bc0)={0x5, 0x7, 0x10, 0xfffffffb}, 0x10, 0x22a71, r10, 0x2, &(0x7f0000000dc0)=[r5, r5, r5, r10, 0xffffffffffffffff, r10, r10, 0xffffffffffffffff, r9, r5], &(0x7f0000000e00)=[{0x1, 0x2, 0x10, 0x6}, {0x5, 0x2, 0x4, 0x7}], 0x10, 0x2}, 0x94) 1.168376971s ago: executing program 1 (id=4702): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x40}}, 0x4880) syz_80211_inject_frame(&(0x7f0000000840)=@device_b, 0x0, 0x0) nanosleep(0x0, &(0x7f0000001040)) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}], 0x1}, 0x40010100) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, 0x0, 0x1) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 898.220018ms ago: executing program 2 (id=4703): unshare(0x400) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f00000012c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)="59b6c909", 0x4}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000200)="f87be602784b", 0x6}], 0x1}}], 0x2, 0x4c040) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x9, 0x1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904ff8100000002020000000200", 0x1b) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0xffffffffffffffd2, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000140)={0x3}) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000141401"], 0x18}}, 0x0) r8 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) setsockopt$RDS_CONG_MONITOR(r8, 0x114, 0x6, 0x0, 0x0) accept4$inet(r1, &(0x7f0000000300)={0x2, 0x0, @multicast1}, &(0x7f0000000340)=0x10, 0x800) 648.47844ms ago: executing program 2 (id=4704): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000240)={0x1a, 0x0, 0x0, 0x8, 0xff, 0x0, @local}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 517.814507ms ago: executing program 2 (id=4705): unshare(0x400) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f00000012c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)="59b6c909", 0x4}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000200)="f87be602784b", 0x6}], 0x1}}], 0x2, 0x4c040) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x9, 0x1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904ff8100000002020000000200", 0x1b) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x3}) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000100)=0x8, 0x4) 504.280871ms ago: executing program 2 (id=4706): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) clock_gettime(0x0, &(0x7f0000002600)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000002500)=[{{&(0x7f0000000640)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000001400)=[{&(0x7f0000000ac0)=""/199, 0xc7}, {&(0x7f0000000e00)=""/222, 0xde}, {&(0x7f0000000f00)=""/44, 0x2c}, {&(0x7f0000000f40)=""/106, 0x6a}, {&(0x7f0000000fc0)=""/243, 0xf3}, {&(0x7f00000010c0)=""/91, 0x5b}, {&(0x7f0000001140)=""/176, 0xb0}, {&(0x7f0000001200)=""/193, 0xc1}, {&(0x7f0000001300)=""/87, 0x57}], 0x9}, 0x80}, {{&(0x7f00000014c0)=@nfc, 0x80, &(0x7f0000001940)=[{&(0x7f0000001540)=""/198, 0xc6}, {&(0x7f0000001640)=""/210, 0xd2}, {&(0x7f0000001740)=""/129, 0x81}, {&(0x7f0000001800)=""/70, 0x46}, {&(0x7f0000001880)=""/183, 0xb7}], 0x5, &(0x7f00000019c0)=""/29, 0x1d}, 0x2}, {{&(0x7f0000001a00)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000002080)=[{&(0x7f0000001a80)=""/150, 0x96}, {&(0x7f0000001b40)=""/198, 0xc6}, {&(0x7f0000001c40)=""/49, 0x31}, {&(0x7f0000001c80)=""/88, 0x58}, {&(0x7f00000006c0)=""/189, 0xbd}, {&(0x7f0000001dc0)=""/99, 0x63}, {&(0x7f0000001e40)=""/94, 0x5e}, {&(0x7f0000001ec0)=""/244, 0xf4}, {&(0x7f0000001fc0)=""/117, 0x75}, {&(0x7f0000000600)=""/41, 0x29}], 0xa, &(0x7f0000002140)=""/226, 0xe2}, 0xb097}, {{&(0x7f0000002240)=@hci, 0x80, &(0x7f0000002480)=[{&(0x7f00000022c0)=""/171, 0xab}, {&(0x7f0000002380)=""/178, 0xb2}, {&(0x7f0000002440)=""/16, 0x10}], 0x3, &(0x7f00000024c0)}}], 0x4, 0x40000103, &(0x7f0000002640)={r0, r1+10000000}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x3, @dev}, 0x2}}, 0x2e) close(r3) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2, 0x4, {0xa, 0x4e20, 0x4, @loopback, 0x7}}}, 0x32) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8}], 0x1, 0x40800) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9], 0x6f4}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000190001090000000024000000021800000002fd010000000008000100ac1414000800050064010100100016"], 0x44}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 377.835339ms ago: executing program 1 (id=4707): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0xffffffbfffff8000, 0x8) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4000000000000000000008500"], 0x0}, 0x94) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000280)=0x10, 0x4) sendmmsg$inet6(r2, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_procs(r3, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x40004) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r9 = socket$kcm(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r10, 0x0, 0x4000) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) 367.888548ms ago: executing program 3 (id=4708): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r1, 0x1, 0x4070bd28, 0x1}, 0x14}}, 0x18) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, 0x0, 0x0) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x2}]}, 0x10) syz_emit_ethernet(0x2a, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000020000180000000000080822971d3c01dd66128d3ea28aa8b3ee2288c60ce1410198009556eb7906f428f0bb7ddcec55593da6d758251694433fa4"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060c", 0xb}], 0x1}, 0x4040) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 227.910084ms ago: executing program 2 (id=4709): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x4e, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001100010028bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076657468315f766c616e00000000000048ff6a7508a2f65087e0178213ed64b706e9cc084be2b85a05382e4dce26d642a3069a45594a7f65387df94cf5b9f9b0152df3b85c27ffd5d53139706c8a9aa7b46c6cc77ef9fc0000fe363538ce8000000000000000000000000000000000d75a069031ae9e429588376a23c43ca802b535a75df9deecf63e120ab2c4"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000040)=0x2e, 0x4) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x24, @any, 0x4}, 0xe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x6e, &(0x7f00000003c0)=ANY=[@ANYBLOB="bd606a2a7f2caaaaaaaaaabb86dd60902d0300380000fe8800000000000000000acd3b6569db2b000000000001fe8800000000000000000000000001016c060000000000000728000000000805"], 0x0) vmsplice(r4, &(0x7f00000000c0), 0x0, 0x6) splice(r4, 0x0, r5, &(0x7f00000002c0)=0x87ffffd, 0x6, 0x0) r6 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r6, &(0x7f0000000e40)=[{{&(0x7f0000000100)={0xa, 0x4e25, 0x10003ff, @loopback={0xff00000000000000}, 0x5}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x250}}], 0x1, 0x4004804) accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r9, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800026e"], 0x34}}, 0x0) socket(0x10, 0x803, 0x0) 181.396834ms ago: executing program 3 (id=4710): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r0 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 144.383153ms ago: executing program 0 (id=4711): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x2, 'dvmrp0\x00', {}, 0x8}) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r2) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) listen(r5, 0x3) sendfile(r1, r4, 0x0, 0x20000000002) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0xfff, 0xcd, &(0x7f0000000580)=""/205, 0x41000, 0x11, '\x00', 0x0, 0x1a, r4, 0x8, &(0x7f0000000680)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x3, 0x8, 0x9, 0x6}, 0x10, 0x1e49b, r4, 0x1, 0x0, &(0x7f0000000700)=[{0x1, 0x1, 0xa, 0x7}], 0x10, 0xffff}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in, @in6=@private2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast1, 0x0, 0x3c}, @in=@broadcast, {0x5, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x8, 0xfffffffffffffff8}, {0x0, 0x3, 0x14}, 0x0, 0x0, 0xa, 0x4}, 0x5, 0x5}}, 0xf8}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) 131.001823ms ago: executing program 4 (id=4712): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000001500)=[{{&(0x7f0000000b40)={0xa, 0x4e20, 0x8001, @dev={0xfe, 0x80, '\x00', 0x43}, 0x5}, 0x1c, &(0x7f0000000f80)=[{&(0x7f0000000b80)='S', 0x1}], 0x1}}], 0x1, 0x20044040) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e20590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) 0s ago: executing program 3 (id=4713): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x200}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa8}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00010000c580000008001b000000"], 0x28}}, 0x0) sendmmsg(r4, 0x0, 0x0, 0x80) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fbfffff7000000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300000200000000fbdbdf257f000001000000000000000000000000fe8000000000000000000000000000aa00000004000000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000019000000000004000000000000000000004000000000000000fdffffffffffffff02000000000000000000000000000000feffffffffffffff000000000000000000000000000000000000426676b800000900000000000040000105df28a5267d39c7a19623ba28d34ef829ea15c42bf3ce55e9fc301400beaa43438cbeda03ab55fe60b7"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r6, 0x0, 0x48000) socket$netlink(0x10, 0x3, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0xf0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) kernel console output (not intermixed with test programs): 547246][T17512] tipc: Resetting bearer [ 522.579909][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.598684][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.611073][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.634339][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.783238][T17527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.921718][ T140] net_ratelimit: 21 callbacks suppressed [ 522.921738][ T140] bond0: (slave bridge13): failed to get link speed/duplex [ 522.966220][ T48] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 522.976947][T17540] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3716'. [ 523.012464][ T48] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 523.020393][ T9] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 523.172914][ T48] bond0: (slave bridge13): failed to get link speed/duplex [ 523.203085][ T36] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 523.293237][ T65] bond0: (slave bridge13): failed to get link speed/duplex [ 523.334238][ T48] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 523.441465][T12152] bond0: (slave bridge13): failed to get link speed/duplex [ 523.471729][T12152] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 523.561787][T12152] bond0: (slave bridge13): failed to get link speed/duplex [ 523.692740][ T9] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 523.775486][T12152] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 523.801731][ T140] bond0: (slave bridge13): failed to get link speed/duplex [ 524.099138][ T9] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 524.339372][T17580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3721'. [ 524.659952][T17603] netlink: 'syz.1.3725': attribute type 1 has an invalid length. [ 524.716098][T17567] tipc: Resetting bearer [ 524.921933][T17611] veth29: entered allmulticast mode [ 525.235960][T17619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 525.310287][T17617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 525.390267][T17625] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3730'. [ 525.787706][T17634] lo speed is unknown, defaulting to 1000 [ 525.805542][T17634] gre0 speed is unknown, defaulting to 1000 [ 526.519575][T17660] 8021q: adding VLAN 0 to HW filter on device bond1 [ 526.535949][T17660] gretap0: entered promiscuous mode [ 526.550859][T17660] gretap0: entered allmulticast mode [ 526.563700][T17660] batman_adv: batadv0: Interface activated: macsec1 [ 526.586241][T17660] veth0_to_team: entered promiscuous mode [ 526.663283][T17660] 8021q: adding VLAN 0 to HW filter on device bond2 [ 526.704190][T17660] 8021q: adding VLAN 0 to HW filter on device bond3 [ 526.752041][T17660] 8021q: adding VLAN 0 to HW filter on device bond4 [ 526.802612][T17660] 8021q: adding VLAN 0 to HW filter on device bond5 [ 526.811679][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 526.836746][T17660] 8021q: adding VLAN 0 to HW filter on device bond6 [ 526.862725][T17660] 8021q: adding VLAN 0 to HW filter on device bond7 [ 526.906567][T17660] 8021q: adding VLAN 0 to HW filter on device bond8 [ 526.939932][T17660] 8021q: adding VLAN 0 to HW filter on device bond9 [ 526.954651][T17660] ip6gretap0: entered promiscuous mode [ 526.966685][T17660] veth11: left promiscuous mode [ 526.975820][T17660] bond0: left promiscuous mode [ 526.980714][T17660] bridge13: left promiscuous mode [ 526.989764][T17660] bridge14: left promiscuous mode [ 527.024512][T17660] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 527.117695][ T140] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.172225][T17676] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3741'. [ 527.200570][ T140] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.221115][ T140] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.267035][ T140] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.971993][T12152] net_ratelimit: 77 callbacks suppressed [ 527.972016][T12152] bond0: (slave bridge13): failed to get link speed/duplex [ 528.022550][T12155] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 528.111535][ T140] bond0: (slave bridge13): failed to get link speed/duplex [ 528.161506][T12155] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 528.235421][T12155] bond0: (slave bridge13): failed to get link speed/duplex [ 528.282381][T12155] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 528.361740][ T36] bond0: (slave bridge13): failed to get link speed/duplex [ 528.413918][ T36] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 528.481662][T12155] bond0: (slave bridge13): failed to get link speed/duplex [ 528.529740][T17717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3753'. [ 528.561517][T12155] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 528.843876][T17723] geneve3: left promiscuous mode [ 528.974969][ T140] wlan1: Trigger new scan to find an IBSS to join [ 529.080753][T17731] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3755'. [ 529.977324][T17762] netlink: 'syz.1.3763': attribute type 8 has an invalid length. [ 530.737479][ T5642] Bluetooth: hci4: command 0x0406 tx timeout [ 530.911912][T17779] syzkaller0: entered promiscuous mode [ 530.923107][T17779] syzkaller0: entered allmulticast mode [ 531.931837][T12152] wlan1: Trigger new scan to find an IBSS to join [ 532.657314][T17821] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3778'. [ 532.720248][T17821] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3778'. [ 532.991816][ T36] net_ratelimit: 51 callbacks suppressed [ 532.991840][ T36] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 533.023037][ T36] bond0: (slave bridge13): failed to get link speed/duplex [ 533.121849][ T36] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 533.141727][ T36] bond0: (slave bridge13): failed to get link speed/duplex [ 533.241941][ T140] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 533.261705][ T140] bond0: (slave bridge13): failed to get link speed/duplex [ 533.361511][ T140] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 533.381501][ T140] bond0: (slave bridge13): failed to get link speed/duplex [ 533.471956][ T36] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 533.502188][ T36] bond0: (slave bridge13): failed to get link speed/duplex [ 533.579887][T17839] netlink: 'syz.4.3783': attribute type 89 has an invalid length. [ 534.277728][T17857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3787'. [ 534.474226][T17865] netlink: 'syz.3.3789': attribute type 13 has an invalid length. [ 534.499592][T17865] netlink: 'syz.3.3789': attribute type 17 has an invalid length. [ 534.811593][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 534.971542][T12152] wlan1: Trigger new scan to find an IBSS to join [ 535.407335][T17863] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.415024][T17863] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.930297][T12155] wlan1: Creating new IBSS network, BSSID 8a:af:71:15:ad:a4 [ 536.180352][T17863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 537.996963][T17895] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3795'. [ 538.128318][T17896] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3795'. [ 538.141789][T17896] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3795'. [ 538.233176][T17863] tipc: Resetting bearer [ 538.453122][ T5763] gre0 speed is unknown, defaulting to 1000 [ 538.462827][ T5763] syz1: Port: 1 Link DOWN [ 538.514877][T17865] 8021q: adding VLAN 0 to HW filter on device team0 [ 538.527977][T17865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 538.549450][T17865] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.556730][T17865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 538.567642][T17865] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.575051][T17865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.586747][T17865] veth0_to_team: left promiscuous mode [ 538.601165][T17865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 538.630921][T17865] veth1_macvtap: left promiscuous mode [ 538.637934][T17865] veth0_macvtap: left promiscuous mode [ 538.645240][T17865] veth0_macvtap: entered promiscuous mode [ 538.663940][T17865] veth1_macvtap: entered promiscuous mode [ 538.679420][T17865] 8021q: adding VLAN 0 to HW filter on device bond1 [ 538.687707][T17865] 8021q: adding VLAN 0 to HW filter on device bond2 [ 538.780168][T17865] 8021q: adding VLAN 0 to HW filter on device bond3 [ 538.790261][T17865] 8021q: adding VLAN 0 to HW filter on device bond4 [ 538.809189][T17865] 8021q: adding VLAN 0 to HW filter on device bond5 [ 538.852861][T17865] 8021q: adding VLAN 0 to HW filter on device bond6 [ 538.861137][T17865] 8021q: adding VLAN 0 to HW filter on device bond7 [ 538.870461][T17865] 8021q: adding VLAN 0 to HW filter on device bond8 [ 538.883987][T17865] veth0_to_team: entered promiscuous mode [ 538.905027][T17865] 8021q: adding VLAN 0 to HW filter on device bond9 [ 538.913960][T17865] 8021q: adding VLAN 0 to HW filter on device team1 [ 538.925563][T17865] 8021q: adding VLAN 0 to HW filter on device team2 [ 538.945487][T17865] 8021q: adding VLAN 0 to HW filter on device bond10 [ 538.955102][T17865] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 538.970306][T17865] 8021q: adding VLAN 0 to HW filter on device bond11 [ 538.981934][T17865] 8021q: adding VLAN 0 to HW filter on device bond12 [ 538.997176][T17865] 8021q: adding VLAN 0 to HW filter on device bond13 [ 539.011978][T17865] 8021q: adding VLAN 0 to HW filter on device bond14 [ 539.024710][T17865] 8021q: adding VLAN 0 to HW filter on device bond15 [ 539.035960][T17865] tipc: Resetting bearer [ 539.042919][T17865] tipc: Resetting bearer [ 539.051962][T17865] 8021q: adding VLAN 0 to HW filter on device bond16 [ 539.064277][T17865] 8021q: adding VLAN 0 to HW filter on device eth0 [ 539.077820][T17865] 8021q: adding VLAN 0 to HW filter on device eth1 [ 539.094254][T17865] 8021q: adding VLAN 0 to HW filter on device eth2 [ 539.109178][T17865] 8021q: adding VLAN 0 to HW filter on device eth3 [ 539.130354][T17865] 8021q: adding VLAN 0 to HW filter on device bond17 [ 539.145185][T17866] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.245114][ T5763] gre0 speed is unknown, defaulting to 1000 [ 539.251824][T12152] net_ratelimit: 14 callbacks suppressed [ 539.251842][T12152] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 539.359949][T17897] gre0 speed is unknown, defaulting to 1000 [ 539.367566][ T12] bond0: (slave bridge13): failed to get link speed/duplex [ 539.376000][T12152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.386497][T17897] syz1: Port: 1 Link ACTIVE [ 539.400093][T12152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.429221][T17904] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 539.463864][ T48] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 539.601593][ T12] bond0: (slave bridge13): failed to get link speed/duplex [ 539.713958][ T13] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 539.722590][T17921] netlink: 'syz.4.3801': attribute type 3 has an invalid length. [ 539.915008][ T12] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 540.228344][T17936] 8021q: adding VLAN 0 to HW filter on device bond17 [ 540.274952][T17936] team0: Port device bond17 added [ 540.324117][T12152] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 540.474781][T12152] bond0: (slave bridge13): failed to get link speed/duplex [ 540.507258][ T12] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 540.691737][ T12] bond0: (slave bridge13): failed to get link speed/duplex [ 540.733294][ T12] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 541.099347][T17975] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3812'. [ 541.206196][T17981] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3812'. [ 542.087163][T18004] 8021q: adding VLAN 0 to HW filter on device bond12 [ 542.108233][T18004] team0: Port device bond12 added [ 542.134557][T18007] tipc: New replicast peer: 172.20.20.170 [ 542.146523][T18007] tipc: Enabled bearer , priority 10 [ 542.165807][T18006] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.191175][T18006] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.203299][T18006] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 542.443417][T18006] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.482432][T18006] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.493307][T18006] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 542.624122][T18006] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.654948][T18006] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.683186][T18006] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 542.801314][T18006] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.842234][T18006] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.869276][T18006] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 542.974451][T18026] lo speed is unknown, defaulting to 1000 [ 542.994018][T18031] netlink: 'syz.1.3825': attribute type 8 has an invalid length. [ 543.010055][T18031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3825'. [ 543.019263][T18026] gre0 speed is unknown, defaulting to 1000 [ 543.182102][ T65] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.208040][ T65] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 543.229998][ T65] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 543.289456][ T65] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.309738][ T65] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 543.330086][ T65] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 543.392438][ T36] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.404709][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 543.421896][ T36] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 543.465981][ T36] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.501517][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 543.512520][ T36] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 543.611855][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 543.995204][T18054] 8021q: adding VLAN 0 to HW filter on device bond13 [ 544.005464][T18054] team0: Port device bond13 added [ 544.442111][ T12] net_ratelimit: 51 callbacks suppressed [ 544.442132][ T12] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 544.482355][T18064] netem: change failed [ 544.518030][ T65] bond0: (slave bridge13): failed to get link speed/duplex [ 544.596582][ T13] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 544.641512][ T65] bond0: (slave bridge13): failed to get link speed/duplex [ 544.732285][ T13] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 544.841842][ T12] bond0: (slave bridge13): failed to get link speed/duplex [ 544.891637][ T65] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 544.916121][T18074] netlink: 'syz.0.3837': attribute type 12 has an invalid length. [ 544.947181][T18074] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3837'. [ 544.974463][ T65] bond0: (slave bridge13): failed to get link speed/duplex [ 545.011795][ T65] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 545.083524][T18074] netlink: 'syz.0.3837': attribute type 39 has an invalid length. [ 545.101717][ T13] bond0: (slave bridge13): failed to get link speed/duplex [ 545.205789][T18079] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3839'. [ 545.256276][T18079] siw: device registration error -23 [ 545.460407][T18084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3841'. [ 545.538595][T18086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3841'. [ 545.784226][T18088] 8021q: adding VLAN 0 to HW filter on device bond14 [ 545.817659][T18088] team0: Port device bond14 added [ 546.198713][T18108] netem: change failed [ 546.404444][T18113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3850'. [ 546.852437][T18122] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3854'. [ 546.862784][T18119] tap0: tun_chr_ioctl cmd 1074025677 [ 546.869506][T18119] tap0: linktype set to 778 [ 546.913486][T18122] netlink: 'syz.4.3854': attribute type 3 has an invalid length. [ 546.946271][T18127] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3856'. [ 546.958182][T18128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3857'. [ 547.003408][T18124] lo speed is unknown, defaulting to 1000 [ 547.019890][T18127] tipc: New replicast peer: 255.255.255.255 [ 547.047327][T18127] tipc: Enabled bearer , priority 10 [ 547.071552][T18124] gre0 speed is unknown, defaulting to 1000 [ 547.232160][T18141] netem: change failed [ 547.952782][T18158] ip6tnl2: entered allmulticast mode [ 547.973098][ T13] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 548.494727][T18174] bond18: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 548.518308][T18174] bond18 (unregistering): Released all slaves [ 548.610163][T18179] lo speed is unknown, defaulting to 1000 [ 548.640570][T18179] gre0 speed is unknown, defaulting to 1000 [ 548.879012][T18183] lo speed is unknown, defaulting to 1000 [ 549.156466][T18183] gre0 speed is unknown, defaulting to 1000 [ 549.212943][T18200] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 549.472703][ T36] net_ratelimit: 62 callbacks suppressed [ 549.472724][ T36] bond0: (slave bridge13): failed to get link speed/duplex [ 549.522023][ T36] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 549.621590][ T36] bond0: (slave bridge13): failed to get link speed/duplex [ 549.643200][ T36] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 549.659420][T18212] netlink: 'syz.1.3880': attribute type 7 has an invalid length. [ 549.928264][T18222] netlink: 'syz.4.3883': attribute type 10 has an invalid length. [ 550.311725][ T36] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 550.344059][ T36] bond0: (slave bridge13): failed to get link speed/duplex [ 550.431671][ T12] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 550.465818][ T12] bond0: (slave bridge13): failed to get link speed/duplex [ 550.551663][ T36] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 550.574013][T18234] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3886'. [ 550.609057][T18234] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3886'. [ 550.671695][ T12] bond0: (slave bridge13): failed to get link speed/duplex [ 550.753383][T18236] syz.0.3886: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 550.789063][T18236] CPU: 1 UID: 0 PID: 18236 Comm: syz.0.3886 Not tainted syzkaller #0 PREEMPT(full) [ 550.789111][T18236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 550.789136][T18236] Call Trace: [ 550.789149][T18236] [ 550.789160][T18236] dump_stack_lvl+0xe8/0x150 [ 550.789199][T18236] warn_alloc+0x249/0x340 [ 550.789235][T18236] ? stack_trace_save+0xa9/0x100 [ 550.789279][T18236] ? __pfx_warn_alloc+0x10/0x10 [ 550.789320][T18236] ? kasan_save_track+0x4f/0x80 [ 550.789348][T18236] ? kasan_save_track+0x3e/0x80 [ 550.789376][T18236] ? __kasan_kmalloc+0x93/0xb0 [ 550.789405][T18236] ? __kmalloc_cache_noprof+0x31c/0x660 [ 550.789434][T18236] ? xskq_create+0x56/0x170 [ 550.789462][T18236] ? xsk_setsockopt+0x54c/0x990 [ 550.789495][T18236] ? do_sock_setsockopt+0x17c/0x1b0 [ 550.789522][T18236] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 550.789547][T18236] ? do_syscall_64+0x15f/0xf80 [ 550.789579][T18236] __vmalloc_node_range_noprof+0x132/0x1750 [ 550.789644][T18236] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 550.789683][T18236] ? __kasan_kmalloc+0x93/0xb0 [ 550.789725][T18236] vmalloc_user_noprof+0xad/0xe0 [ 550.789749][T18236] ? xskq_create+0xbf/0x170 [ 550.789765][T18236] xskq_create+0xbf/0x170 [ 550.789783][T18236] xsk_init_queue+0x8a/0xe0 [ 550.789801][T18236] xsk_setsockopt+0x54c/0x990 [ 550.789829][T18236] ? __pfx_xsk_setsockopt+0x10/0x10 [ 550.789854][T18236] ? __pfx_aa_sk_perm+0x10/0x10 [ 550.789876][T18236] ? aa_sock_opt_perm+0xff/0x1a0 [ 550.789899][T18236] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 550.789920][T18236] ? __pfx_xsk_setsockopt+0x10/0x10 [ 550.789946][T18236] do_sock_setsockopt+0x17c/0x1b0 [ 550.789970][T18236] __x64_sys_setsockopt+0x13d/0x1b0 [ 550.789992][T18236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.790009][T18236] do_syscall_64+0x15f/0xf80 [ 550.790027][T18236] ? trace_irq_disable+0x3b/0x140 [ 550.790051][T18236] ? clear_bhb_loop+0x40/0x90 [ 550.790070][T18236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.790086][T18236] RIP: 0033:0x7f0ce499cdd9 [ 550.790112][T18236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.790125][T18236] RSP: 002b:00007f0ce58ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 550.790142][T18236] RAX: ffffffffffffffda RBX: 00007f0ce4c16090 RCX: 00007f0ce499cdd9 [ 550.790154][T18236] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000b [ 550.790163][T18236] RBP: 00007f0ce4a32d69 R08: 0000000000000004 R09: 0000000000000000 [ 550.790173][T18236] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 550.790183][T18236] R13: 00007f0ce4c16128 R14: 00007f0ce4c16090 R15: 00007ffe26a7ded8 [ 550.790208][T18236] [ 550.813835][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 550.867372][T18236] Mem-Info: [ 551.083811][T18236] active_anon:6326 inactive_anon:6 isolated_anon:0 [ 551.083811][T18236] active_file:2829 inactive_file:40525 isolated_file:0 [ 551.083811][T18236] unevictable:768 dirty:433 writeback:0 [ 551.083811][T18236] slab_reclaimable:11746 slab_unreclaimable:272208 [ 551.083811][T18236] mapped:30528 shmem:1297 pagetables:1385 [ 551.083811][T18236] sec_pagetables:0 bounce:0 [ 551.083811][T18236] kernel_misc_reclaimable:0 [ 551.083811][T18236] free:1133033 free_pcp:23874 free_cma:0 [ 551.179654][T18236] Node 0 active_anon:25404kB inactive_anon:24kB active_file:11316kB inactive_file:161896kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118012kB dirty:1732kB writeback:0kB shmem:3652kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15428kB pagetables:5396kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 551.251960][T18236] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 551.335055][T18236] Node 0 DMA free:11248kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 551.369518][T18236] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 551.376715][T18236] Node 0 DMA32 free:1054516kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25504kB inactive_anon:24kB active_file:11316kB inactive_file:161896kB unevictable:1536kB writepending:1732kB zspages:0kB present:3129332kB managed:2552676kB mlocked:0kB bounce:0kB free_pcp:31408kB local_pcp:10380kB free_cma:0kB [ 551.414552][T18236] lowmem_reserve[]: 0 0 0 0 0 [ 551.421859][T18236] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 551.475595][T18236] lowmem_reserve[]: 0 0 0 0 0 [ 551.487207][T18236] Node 1 Normal free:3466492kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:64140kB local_pcp:33892kB free_cma:0kB [ 551.533472][T18236] lowmem_reserve[]: 0 0 0 0 0 [ 551.539125][T18236] Node 0 DMA: 0*4kB 2*8kB (U) 2*16kB (U) 2*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11248kB [ 551.554725][T18236] Node 0 DMA32: 6779*4kB (UM) 5323*8kB (UME) 2325*16kB (UME) 735*32kB (UM) 737*64kB (UM) 837*128kB (UM) 615*256kB (UME) 384*512kB (UME) 214*1024kB (UM) 96*2048kB (UME) 0*4096kB = 1054516kB [ 551.589091][T18250] netlink: 'syz.4.3888': attribute type 13 has an invalid length. [ 551.606823][T18250] netlink: 'syz.4.3888': attribute type 17 has an invalid length. [ 551.633317][T18236] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 551.654857][T18236] Node 1 Normal: 5*4kB (UM) 9*8kB (UM) 14*16kB (UM) 10*32kB (UM) 10*64kB (UM) 6*128kB (UM) 7*256kB (UM) 7*512kB (UM) 4*1024kB (UM) 7*2048kB (U) 840*4096kB (UM) = 3466492kB [ 551.678721][T18236] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 551.691766][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 551.705844][T18236] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 551.715661][T18236] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 551.847600][T18236] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 551.931199][T18236] 44647 total pagecache pages [ 551.988718][T18236] 0 pages in swap cache [ 552.051220][T18236] Free swap = 124996kB [ 552.085541][T18236] Total swap = 124996kB [ 552.130721][T18247] bridge0: port 3(vlan2) entered disabled state [ 552.138918][T18236] 2097051 pages RAM [ 552.155930][T18236] 0 pages HighMem/MovableOnly [ 552.175244][T18236] 427099 pages reserved [ 552.187293][T18236] 0 pages cma reserved [ 552.298985][T18285] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3892'. [ 552.435998][T18247] batman_adv: batadv0: Interface deactivated: macsec1 [ 552.449068][T18247] gretap0: left allmulticast mode [ 552.668216][T18250] gretap0: left promiscuous mode [ 552.738466][T18250] 8021q: adding VLAN 0 to HW filter on device .` [ 552.756872][T18250] 8021q: adding VLAN 0 to HW filter on device ` [ 552.768559][T18250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.827130][T18250] veth0_to_team: left promiscuous mode [ 552.877789][T18250] veth1_vlan: left promiscuous mode [ 552.889477][T18250] veth0_vlan: left promiscuous mode [ 552.899784][T18250] veth0_vlan: entered promiscuous mode [ 552.910761][T18250] veth1_vlan: entered promiscuous mode [ 552.932507][T18250] veth1_macvtap: left promiscuous mode [ 552.944526][T18250] veth0_macvtap: left promiscuous mode [ 552.959164][T18250] veth0_macvtap: entered promiscuous mode [ 552.994965][T18250] veth1_macvtap: entered promiscuous mode [ 553.004870][T18250] geneve0: left promiscuous mode [ 553.016012][T18250] bridge0: port 3(vlan2) entered blocking state [ 553.022580][T18250] bridge0: port 3(vlan2) entered forwarding state [ 553.033861][T18250] geneve0: entered promiscuous mode [ 553.046709][T12157] wlan1: Selected IBSS BSSID 8a:af:71:15:ad:a4 based on configured SSID [ 553.089360][T18250] 8021q: adding VLAN 0 to HW filter on device bond1 [ 553.111095][T18250] gretap0: entered promiscuous mode [ 553.130519][T18250] gretap0: entered allmulticast mode [ 553.140720][T18250] macsec1: left allmulticast mode [ 553.161026][T18250] gretap0: left allmulticast mode [ 553.166951][T18250] batman_adv: batadv0: Interface activated: macsec1 [ 553.175507][T18250] veth0_to_team: entered promiscuous mode [ 553.186826][T18250] 8021q: adding VLAN 0 to HW filter on device bond2 [ 553.212732][T18250] 8021q: adding VLAN 0 to HW filter on device bond3 [ 553.230712][T18250] 8021q: adding VLAN 0 to HW filter on device bond4 [ 553.254407][T18250] 8021q: adding VLAN 0 to HW filter on device bond5 [ 553.268539][T18250] 8021q: adding VLAN 0 to HW filter on device bond6 [ 553.280823][T18250] 8021q: adding VLAN 0 to HW filter on device bond7 [ 553.319445][T18250] 8021q: adding VLAN 0 to HW filter on device bond8 [ 553.336492][T18250] 8021q: adding VLAN 0 to HW filter on device bond9 [ 553.386224][T18250] veth13: left allmulticast mode [ 553.414262][T18250] bond0: left allmulticast mode [ 553.423040][T18250] bridge13: left allmulticast mode [ 553.442498][T18250] bridge14: left allmulticast mode [ 553.449943][T18250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.557391][T18250] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 553.779774][T18294] bond15: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 553.817075][T18294] bond15 (unregistering): Released all slaves [ 554.162024][T18317] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3900'. [ 554.190990][T18317] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3900'. [ 554.557290][T18332] No such timeout policy "syz1" [ 554.701806][ T84] net_ratelimit: 15 callbacks suppressed [ 554.701826][ T84] bond0: (slave bridge13): failed to get link speed/duplex [ 554.806151][T18337] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3903'. [ 554.851579][ T140] bond0: (slave bridge13): failed to get link speed/duplex [ 555.001521][ T1113] bond0: (slave bridge13): failed to get link speed/duplex [ 555.163748][ T140] bond0: (slave bridge13): failed to get link speed/duplex [ 555.292809][ T140] bond0: (slave bridge13): failed to get link speed/duplex [ 555.423633][ T84] bond0: (slave bridge13): failed to get link speed/duplex [ 555.543289][T12157] bond0: (slave bridge13): failed to get link speed/duplex [ 555.663446][T18351] nbd4: detected capacity change from 0 to 63 [ 555.671522][T12157] bond0: (slave bridge13): failed to get link speed/duplex [ 555.698674][T18353] block nbd4: NBD_DISCONNECT [ 555.708440][T18355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3910'. [ 555.731596][T18353] block nbd4: Disconnected due to user request. [ 555.764952][T18353] block nbd4: shutting down sockets [ 555.792621][T18355] geneve4: entered promiscuous mode [ 555.798190][T18357] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3908'. [ 555.841899][ C1] blk_print_req_error: 138 callbacks suppressed [ 555.841919][ C1] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 555.857375][ C1] buffer_io_error: 138 callbacks suppressed [ 555.857391][ C1] Buffer I/O error on dev nbd4, logical block 0, async page read [ 555.872753][ T140] bond0: (slave bridge13): failed to get link speed/duplex [ 555.885300][ C1] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 555.894543][ C1] Buffer I/O error on dev nbd4, logical block 1, async page read [ 555.908821][ C1] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 555.917977][ C1] Buffer I/O error on dev nbd4, logical block 2, async page read [ 555.925862][ C1] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 555.934978][ C1] Buffer I/O error on dev nbd4, logical block 3, async page read [ 555.962654][T18044] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 555.973813][T18044] Buffer I/O error on dev nbd4, logical block 0, async page read [ 555.983942][T18044] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 555.993377][T12155] bond0: (slave bridge13): failed to get link speed/duplex [ 555.995583][T18044] Buffer I/O error on dev nbd4, logical block 1, async page read [ 556.022407][T18044] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 556.044906][T18044] Buffer I/O error on dev nbd4, logical block 2, async page read [ 556.055085][T18364] netlink: 'syz.2.3910': attribute type 1 has an invalid length. [ 556.067558][T18044] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 556.096491][T18044] Buffer I/O error on dev nbd4, logical block 3, async page read [ 556.133708][T18044] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 556.159919][T18044] Buffer I/O error on dev nbd4, logical block 0, async page read [ 556.192013][T18044] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 556.221454][T18044] Buffer I/O error on dev nbd4, logical block 1, async page read [ 556.267078][T18044] ldm_validate_partition_table(): Disk read failed. [ 556.290879][T18044] Dev nbd4: unable to read RDB block 0 [ 556.325388][T18044] nbd4: unable to read partition table [ 556.402503][T18044] ldm_validate_partition_table(): Disk read failed. [ 556.439300][T18044] Dev nbd4: unable to read RDB block 0 [ 556.473506][T18044] nbd4: unable to read partition table [ 556.805868][T18379] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3915'. [ 557.150979][T18387] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3918'. [ 557.373349][T18392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3920'. [ 557.405705][T18392] x_tables: ip_tables: osf match: only valid for protocol 6 [ 557.662478][T18400] siw: device registration error -23 [ 557.676468][T18398] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3922'. [ 557.810298][T18404] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3923'. [ 557.889056][T18408] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3923'. [ 558.085619][T18412] lo speed is unknown, defaulting to 1000 [ 558.125214][T18412] gre0 speed is unknown, defaulting to 1000 [ 558.858058][T18427] netlink: 41 bytes leftover after parsing attributes in process `syz.0.3931'. [ 558.934884][T18427] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3931'. [ 559.346428][T18450] netlink: 'syz.1.3935': attribute type 13 has an invalid length. [ 559.386330][T18451] netlink: 'syz.0.3934': attribute type 1 has an invalid length. [ 559.537936][T18454] IPv6: NLM_F_CREATE should be specified when creating new route [ 559.555150][T18454] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 559.562558][T18454] IPv6: NLM_F_CREATE should be set when creating new route [ 559.569872][T18454] IPv6: NLM_F_CREATE should be set when creating new route [ 559.577225][T18454] IPv6: NLM_F_CREATE should be set when creating new route [ 559.610575][T18454] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 559.730439][T18459] net_ratelimit: 26 callbacks suppressed [ 559.730460][T18459] openvswitch: netlink: IPv4 tun info is not correct [ 559.761538][ T84] bond0: (slave bridge13): failed to get link speed/duplex [ 559.951451][T12157] bond0: (slave bridge13): failed to get link speed/duplex [ 560.094644][ T84] bond0: (slave bridge13): failed to get link speed/duplex [ 560.235181][ T84] bond0: (slave bridge13): failed to get link speed/duplex [ 560.421080][T17900] IPVS: starting estimator thread 0... [ 560.508632][T18484] tipc: Enabling of bearer rejected, already enabled [ 560.521845][T18482] IPVS: using max 28 ests per chain, 67200 per kthread [ 560.533946][T18472] lo speed is unknown, defaulting to 1000 [ 560.562015][ T1113] bond0: (slave bridge13): failed to get link speed/duplex [ 560.573943][T18480] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 560.597145][T18480] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 560.613957][T18480] tipc: Resetting bearer [ 560.630172][T18472] gre0 speed is unknown, defaulting to 1000 [ 560.638224][T18471] lo speed is unknown, defaulting to 1000 [ 560.691500][T12155] bond0: (slave bridge13): failed to get link speed/duplex [ 560.812032][ T1113] bond0: (slave bridge13): failed to get link speed/duplex [ 560.859674][T18492] __nla_validate_parse: 2 callbacks suppressed [ 560.859694][T18492] netlink: 364 bytes leftover after parsing attributes in process `syz.2.3946'. [ 560.878758][T18489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3945'. [ 560.887908][T18489] netlink: 'syz.3.3945': attribute type 5 has an invalid length. [ 560.899918][T18489] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3945'. [ 560.935519][T18489] geneve3: entered promiscuous mode [ 560.947440][T18489] geneve3: entered allmulticast mode [ 560.963490][ T84] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 560.979814][ T84] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 561.000142][ T84] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 561.038476][ T84] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 561.058097][T18474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3941'. [ 561.091469][ T12] bond0: (slave bridge13): failed to get link speed/duplex [ 561.211763][T12157] bond0: (slave bridge13): failed to get link speed/duplex [ 561.294528][T18471] gre0 speed is unknown, defaulting to 1000 [ 561.986396][T18518] xt_hashlimit: size too large, truncated to 1048576 [ 562.063684][T18516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3952'. [ 562.306519][T18529] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3955'. [ 562.410666][T18531] netlink: 'syz.3.3955': attribute type 8 has an invalid length. [ 562.435762][T18531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3955'. [ 562.487017][T18531] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.724024][T18534] netlink: 'syz.2.3956': attribute type 1 has an invalid length. [ 562.911952][T18542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3958'. [ 562.974584][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.041676][T18545] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3959'. [ 563.051105][T18545] netlink: 'syz.4.3959': attribute type 1 has an invalid length. [ 563.060066][T18545] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3959'. [ 563.512971][T18564] netlink: 'syz.0.3970': attribute type 1 has an invalid length. [ 564.083213][T18578] 8021q: adding VLAN 0 to HW filter on device bond15 [ 564.092657][T18578] team0: Port device bond15 added [ 564.280971][T18595] netlink: 'syz.1.3971': attribute type 1 has an invalid length. [ 564.343072][T18595] bond16: entered promiscuous mode [ 564.349241][T18595] 8021q: adding VLAN 0 to HW filter on device bond16 [ 564.406439][T18595] IPv6: Can't replace route, no match found [ 564.419988][T18602] tipc: Resetting bearer [ 564.423897][T18595] IPv6: Can't replace route, no match found [ 564.446187][T18603] netem: incorrect gi model size [ 564.461632][T18603] netem: change failed [ 564.544603][T18602] netlink: 'syz.3.3973': attribute type 12 has an invalid length. [ 564.651002][T18599] bond16: (slave veth29): making interface the new active one [ 564.674072][T18599] veth29: entered promiscuous mode [ 564.686675][T18599] bond16: (slave veth29): Enslaving as an active interface with an up link [ 564.801580][ T1113] net_ratelimit: 18 callbacks suppressed [ 564.801601][ T1113] bond0: (slave bridge13): failed to get link speed/duplex [ 564.962556][ T12] bond0: (slave bridge13): failed to get link speed/duplex [ 565.104960][ T1113] bond0: (slave bridge13): failed to get link speed/duplex [ 565.231493][T12155] bond0: (slave bridge13): failed to get link speed/duplex [ 565.485743][T18633] 8021q: adding VLAN 0 to HW filter on device bond18 [ 565.495130][T18633] team0: Port device bond18 added [ 565.504006][ T84] bond0: (slave bridge13): failed to get link speed/duplex [ 565.536541][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 565.688186][T18637] 8021q: adding VLAN 0 to HW filter on device bond15 [ 565.741051][T18637] team0: Port device bond15 added [ 565.768133][T18650] bond16: (slave syz_tun): Removing an active aggregator [ 565.775928][T18639] netlink: 'syz.4.3984': attribute type 8 has an invalid length. [ 565.785615][T18650] bond16: (slave syz_tun): Releasing backup interface [ 565.863180][T18650] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 565.896927][T18639] bridge0: port 3(vlan2) entered disabled state [ 565.922737][T18654] team0: No ports can be present during mode change [ 565.955825][T12157] bond0: (slave bridge13): failed to get link speed/duplex [ 566.071634][ T84] bond0: (slave bridge13): failed to get link speed/duplex [ 566.211699][T12155] bond0: (slave bridge13): failed to get link speed/duplex [ 566.272937][T18673] __nla_validate_parse: 7 callbacks suppressed [ 566.272952][T18673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3991'. [ 566.298652][T18674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3990'. [ 566.312531][T18674] netlink: 'syz.0.3990': attribute type 1 has an invalid length. [ 566.343005][T12155] bond0: (slave bridge13): failed to get link speed/duplex [ 566.933931][T18699] 8021q: adding VLAN 0 to HW filter on device bond17 [ 566.943288][T18699] team0: Port device bond17 added [ 566.964714][T18671] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 566.987367][T18671] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 567.064434][T18671] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 567.089032][T18671] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 567.110129][T18671] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 567.120334][T18671] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 567.138403][T18671] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 567.146583][T18671] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 567.431505][T18671] debugfs: 'netdev:syzkaller0' already exists in 'phy4' [ 567.506954][T18671] tipc: Resetting bearer [ 567.535291][T18671] debugfs: 'netdev:syzkaller0' already exists in 'phy6' [ 567.566388][T18671] tipc: Resetting bearer [ 567.995558][T18718] netlink: 'syz.0.3999': attribute type 3 has an invalid length. [ 568.031502][T17900] lo speed is unknown, defaulting to 1000 [ 568.471334][T18726] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4001'. [ 568.650808][T18732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4003'. [ 569.166141][T18746] 8021q: adding VLAN 0 to HW filter on device bond16 [ 569.175810][T18746] team0: Port device bond16 added [ 569.300833][T18753] netlink: 'syz.0.4009': attribute type 1 has an invalid length. [ 569.330991][T18753] veth21: entered allmulticast mode [ 569.508538][T18760] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 569.531696][T18760] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 569.607774][T18764] netlink: 'syz.2.4013': attribute type 13 has an invalid length. [ 569.765772][T18770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4016'. [ 570.031662][T18765] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig [ 570.102919][T18783] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4014'. [ 570.172380][ T12] net_ratelimit: 25 callbacks suppressed [ 570.172396][ T12] bond0: (slave bridge13): failed to get link speed/duplex [ 570.214374][T18772] netlink: 'syz.0.4015': attribute type 4 has an invalid length. [ 570.324496][ T12] bond0: (slave bridge13): failed to get link speed/duplex [ 570.451490][T12155] bond0: (slave bridge13): failed to get link speed/duplex [ 570.596065][ T12] bond0: (slave bridge13): failed to get link speed/duplex [ 570.704747][T18798] 8021q: adding VLAN 0 to HW filter on device bond19 [ 570.715131][T18798] team0: Port device bond19 added [ 570.752274][T12157] bond0: (slave bridge13): failed to get link speed/duplex [ 570.865076][T18804] lo speed is unknown, defaulting to 1000 [ 570.873158][T18804] gre0 speed is unknown, defaulting to 1000 [ 570.930950][T18808] netlink: 'syz.0.4021': attribute type 1 has an invalid length. [ 570.944186][T18806] lo: Caught tx_queue_len zero misconfig [ 571.026622][T18806] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4020'. [ 571.128175][T18808] veth21: entered allmulticast mode [ 571.213476][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.223724][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.234099][ T84] bond0: (slave bridge13): failed to get link speed/duplex [ 571.371603][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.382191][ T84] bond0: (slave bridge13): failed to get link speed/duplex [ 571.904867][T18826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4024'. [ 572.173848][T18837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4027'. [ 572.787277][T18850] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4031'. [ 572.829767][T18857] netlink: 'syz.4.4033': attribute type 1 has an invalid length. [ 572.924393][T18857] veth25: entered allmulticast mode [ 573.225647][T18872] netlink: 'syz.4.4037': attribute type 4 has an invalid length. [ 573.254583][T18872] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4037'. [ 573.549095][T18882] netlink: 'syz.1.4040': attribute type 4 has an invalid length. [ 573.569114][T18882] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4040'. [ 574.027813][T18885] lo speed is unknown, defaulting to 1000 [ 574.044938][T18885] gre0 speed is unknown, defaulting to 1000 [ 574.549787][T18904] netlink: 'syz.3.4046': attribute type 3 has an invalid length. [ 574.618135][T18906] netlink: 'syz.1.4047': attribute type 1 has an invalid length. [ 574.664926][T18906] veth31: entered allmulticast mode [ 574.797382][T18904] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 574.822178][T18904] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 574.849664][T18904] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 574.888989][T18904] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 575.194255][T12157] net_ratelimit: 45 callbacks suppressed [ 575.194280][T12157] bond0: (slave bridge13): failed to get link speed/duplex [ 575.252726][T18921] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4051'. [ 575.285429][ T1113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.361507][ T1113] bond0: (slave bridge13): failed to get link speed/duplex [ 575.371475][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.379686][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.389373][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.451689][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.458409][T18921] openvswitch: netlink: Flow actions attr not present in new flow. [ 575.545259][T18926] lo speed is unknown, defaulting to 1000 [ 575.546893][T12155] bond0: (slave bridge13): failed to get link speed/duplex [ 575.627719][T18926] gre0 speed is unknown, defaulting to 1000 [ 575.693584][ T12] bond0: (slave bridge13): failed to get link speed/duplex [ 575.908410][T18938] lo speed is unknown, defaulting to 1000 [ 576.135847][T18945] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4056'. [ 576.417172][T18938] gre0 speed is unknown, defaulting to 1000 [ 576.676169][T18953] netlink: 'syz.3.4058': attribute type 3 has an invalid length. [ 576.808836][T18954] block nbd3: NBD_DISCONNECT [ 576.931986][T18959] netlink: 'syz.1.4059': attribute type 1 has an invalid length. [ 577.000478][T18962] netlink: 'syz.3.4061': attribute type 1 has an invalid length. [ 577.020339][T18959] veth31: entered allmulticast mode [ 577.079820][T18962] veth23: entered allmulticast mode [ 577.105572][T18945] siw: device registration error -23 [ 577.597876][T18968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4063'. [ 577.627871][T18968] netlink: 304 bytes leftover after parsing attributes in process `syz.1.4063'. [ 577.822947][T18984] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 577.836787][T18984] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 577.954050][T18986] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 578.340929][T19002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 578.356553][T19003] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4071'. [ 578.440037][T19005] veth25: entered allmulticast mode [ 578.783112][T19012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4075'. [ 579.106223][T19023] bond5: left allmulticast mode [ 579.121849][T19023] team1: left promiscuous mode [ 579.128277][T19023] team1: left allmulticast mode [ 579.156846][T19023] bond7: left promiscuous mode [ 579.186632][T19029] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4078'. [ 579.224378][T19023] bond7: left allmulticast mode [ 579.229597][T19023] bond8: left promiscuous mode [ 579.235818][T19023] bridge13: left promiscuous mode [ 579.246160][T19023] vlan1: left allmulticast mode [ 579.253275][T19034] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4079'. [ 579.254341][T19023] bond8: left allmulticast mode [ 579.277187][T19023] bridge13: left allmulticast mode [ 579.284489][T19023] veth23: left allmulticast mode [ 579.292425][T19036] block nbd2: not configured, cannot reconfigure [ 579.302347][T19023] veth25: left allmulticast mode [ 579.317918][T19023] veth27: left allmulticast mode [ 579.339442][T19023] batman_adv: batadv0: Interface deactivated: macvlan2 [ 579.367897][T19023] bond16: left promiscuous mode [ 579.378752][T19023] veth29: left promiscuous mode [ 579.406552][T19034] nbd: must specify a device to reconfigure [ 579.423791][T19025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 579.653742][T19052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4083'. [ 579.713027][T19050] xt_TPROXY: Can be used only with -p tcp or -p udp [ 579.735677][T19048] tipc: Resetting bearer [ 579.774080][T19052] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.785264][T19052] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.832204][T19052] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.842194][T19052] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.919419][T19052] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.929487][T19052] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.989709][T19052] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.005656][T19052] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.154303][T19055] veth21: entered allmulticast mode [ 580.201823][T12155] net_ratelimit: 47 callbacks suppressed [ 580.201843][T12155] bond0: (slave bridge13): failed to get link speed/duplex [ 580.254656][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.267978][T12161] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 580.276813][T12161] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.313137][T12161] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 580.335821][T12161] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.345477][T19062] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4087'. [ 580.385879][ T1113] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 580.410507][ T1113] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.411934][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.452221][ T1113] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 580.460747][ T1113] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.481474][T12157] bond0: (slave bridge13): failed to get link speed/duplex [ 580.504352][T19068] netlink: 'syz.0.4087': attribute type 8 has an invalid length. [ 580.521399][T19068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4087'. [ 580.571673][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.580704][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.601835][T12155] bond0: (slave bridge13): failed to get link speed/duplex [ 580.721484][ T1113] bond0: (slave bridge13): failed to get link speed/duplex [ 580.771181][T19079] netlink: 'syz.1.4091': attribute type 30 has an invalid length. [ 580.780052][T19079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4091'. [ 580.791986][T19077] 8021q: adding VLAN 0 to HW filter on device bond20 [ 580.800811][T19077] team0: Port device bond20 added [ 580.806444][T19079] bond0: option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6) [ 580.852762][ T1113] bond0: (slave bridge13): failed to get link speed/duplex [ 580.901675][ T1113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.459870][T19093] veth21: entered allmulticast mode [ 581.698488][T19102] veth0: entered promiscuous mode [ 581.714506][T19101] veth0: left promiscuous mode [ 581.834986][T19110] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 581.857492][T19113] netlink: 'syz.4.4103': attribute type 13 has an invalid length. [ 581.874130][T19113] netlink: 'syz.4.4103': attribute type 17 has an invalid length. [ 581.899061][T19113] bridge0: port 3(vlan2) entered blocking state [ 581.905593][T19113] bridge0: port 3(vlan2) entered forwarding state [ 582.028204][T19118] netlink: 'syz.0.4104': attribute type 13 has an invalid length. [ 582.193121][T19128] netlink: 'syz.2.4106': attribute type 1 has an invalid length. [ 582.254004][T19120] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig [ 582.307519][T19128] bond21: entered promiscuous mode [ 582.313399][T19128] 8021q: adding VLAN 0 to HW filter on device bond21 [ 582.352183][T19132] bond21: (slave veth25): making interface the new active one [ 582.359801][T19132] veth25: entered promiscuous mode [ 582.366321][T19132] bond21: (slave veth25): Enslaving as an active interface with an up link [ 582.388614][T19126] netlink: 'syz.3.4107': attribute type 8 has an invalid length. [ 582.661758][T19144] team0: entered promiscuous mode [ 582.669558][T19144] bond12: entered promiscuous mode [ 582.676549][T19144] bond17: entered promiscuous mode [ 582.683374][T19144] bond18: entered promiscuous mode [ 582.689131][T19144] bond19: entered promiscuous mode [ 582.696894][T19144] bond20: entered promiscuous mode [ 582.715167][T19146] __nla_validate_parse: 14 callbacks suppressed [ 582.715187][T19146] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4114'. [ 582.735111][T19146] siw: device registration error -23 [ 582.763550][T19149] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4115'. [ 582.774506][T19149] siw: device registration error -23 [ 582.856488][T19151] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4116'. [ 582.873840][T19151] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 583.084483][T19166] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4120'. [ 583.171120][T19170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4121'. [ 583.228077][T19171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4121'. [ 583.272169][T17900] lo speed is unknown, defaulting to 1000 [ 583.690076][T19176] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4122'. [ 584.034057][T19192] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4126'. [ 584.053255][T19192] siw: device registration error -23 [ 584.615356][T19207] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4128'. [ 584.632682][T19207] siw: device registration error -23 [ 584.644029][T19211] netlink: 'syz.1.4131': attribute type 3 has an invalid length. [ 584.713429][T19211] nbd: nbd1 already in use [ 584.725076][T19211] block nbd1: NBD_DISCONNECT [ 584.734033][T19211] block nbd1: Send disconnect failed -32 [ 584.902622][T19211] 8021q: adding VLAN 0 to HW filter on device  [ 584.935910][T19211] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.988700][T19211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.140799][T19211] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 585.168629][T19211] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 585.221753][T19211] net_ratelimit: 360 callbacks suppressed [ 585.221772][T19211] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 585.261931][T17246] lo speed is unknown, defaulting to 1000 [ 585.279021][T17246] syz2: Port: 1 Link ACTIVE [ 585.330270][T19224] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4134'. [ 585.351810][T12157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.359228][T19233] SET target dimension over the limit! [ 585.369401][T19231] hsr_slave_0: left promiscuous mode [ 585.380742][T19231] hsr_slave_1: left promiscuous mode [ 585.441889][T12157] bond0: (slave bridge13): failed to get link speed/duplex [ 585.451535][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.466148][T17900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.581540][ T1113] bond0: (slave bridge13): failed to get link speed/duplex [ 585.691710][ T48] bond0: (slave bridge13): failed to get link speed/duplex [ 585.771459][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.780542][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.811735][ T1113] bond0: (slave bridge13): failed to get link speed/duplex [ 585.980422][T19249] lo speed is unknown, defaulting to 1000 [ 585.999897][T19249] gre0 speed is unknown, defaulting to 1000 [ 586.043690][T19251] ip6tnl0: Caught tx_queue_len zero misconfig [ 586.403317][T19266] netlink: 'syz.2.4144': attribute type 13 has an invalid length. [ 586.427586][T19266] netlink: 'syz.2.4144': attribute type 17 has an invalid length. [ 586.668407][T19276] xt_hashlimit: size too large, truncated to 1048576 [ 587.953235][T19265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.962532][T19265] 8021q: adding VLAN 0 to HW filter on device team0 [ 587.974745][T19265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.003038][T19265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 588.017922][T19265] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 588.029269][T19265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 588.042380][T19265] veth1_vlan: left promiscuous mode [ 588.048842][T19265] veth0_vlan: left promiscuous mode [ 588.055406][T19265] veth0_vlan: entered promiscuous mode [ 588.064988][T19265] veth1_vlan: entered promiscuous mode [ 588.075109][T19265] veth1_macvtap: left promiscuous mode [ 588.082199][T19265] veth0_macvtap: left promiscuous mode [ 588.089032][T19265] veth0_macvtap: entered promiscuous mode [ 588.096991][T19265] veth1_macvtap: entered promiscuous mode [ 588.120234][T19266] erspan0: left promiscuous mode [ 588.158324][T19266] team0: left promiscuous mode [ 588.163319][T19266] bond12: left promiscuous mode [ 588.168515][T19266] bond17: left promiscuous mode [ 588.175554][T19266] bond18: left promiscuous mode [ 588.180662][T19266] bond19: left promiscuous mode [ 588.185982][T19266] bond20: left promiscuous mode [ 588.191758][T19266] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.295108][ T84] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.302336][ T84] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.328666][ T84] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.335896][ T84] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.374981][T19291] __nla_validate_parse: 4 callbacks suppressed [ 588.375071][T19291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4149'. [ 588.406491][T19279] netlink: 'syz.1.4146': attribute type 12 has an invalid length. [ 588.425053][T12161] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.441030][T12161] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 588.457778][T12161] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 588.477214][T12161] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.490134][T12161] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 588.509132][T12161] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 588.584962][T12161] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.617336][T12161] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 588.650553][T12161] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 588.702560][T19298] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4150'. [ 588.749529][T12161] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.779730][T12161] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 588.794646][T12161] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 588.806040][T12161] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.820056][T19307] siw: device registration error -23 [ 588.848921][T19298] ip6gre1: entered promiscuous mode [ 588.863071][T19298] ip6gre1: entered allmulticast mode [ 588.870345][T19304] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4151'. [ 588.890212][T12161] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.099033][T19308] netlink: 'syz.3.4150': attribute type 6 has an invalid length. [ 589.123386][T19308] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4150'. [ 589.149764][T19302] IPVS: Unknown mcast interface: . [ 589.230762][T12161] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.327238][T12161] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.817834][T19337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4156'. [ 590.143170][T19343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4158'. [ 590.219313][T19344] netlink: 'syz.4.4159': attribute type 1 has an invalid length. [ 590.228376][T19344] netlink: 'syz.4.4159': attribute type 2 has an invalid length. [ 590.238887][T19343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4158'. [ 590.248774][ T84] net_ratelimit: 40 callbacks suppressed [ 590.248794][ T84] bond0: (slave bridge13): failed to get link speed/duplex [ 590.335924][T17250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.356771][T19347] netlink: 'syz.0.4160': attribute type 13 has an invalid length. [ 590.381807][T19347] netlink: 'syz.0.4160': attribute type 17 has an invalid length. [ 590.498234][T19348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4160'. [ 590.537274][T19352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4162'. [ 590.557468][T19353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4161'. [ 590.644641][T19347] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 590.848246][T19353] : entered promiscuous mode [ 590.892419][T12161] bond0: (slave bridge13): failed to get link speed/duplex [ 590.925609][T19354] openvswitch: : Dropping previously announced user features [ 590.971584][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.980810][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.031988][ T84] bond0: (slave bridge13): failed to get link speed/duplex [ 591.225625][T12161] bond0: (slave bridge13): failed to get link speed/duplex [ 591.293592][T17899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.371649][T17248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.790298][T19400] veth27: entered allmulticast mode [ 591.952682][T19415] siw: device registration error -23 [ 591.995761][T19411] lo speed is unknown, defaulting to 1000 [ 592.005084][T19411] gre0 speed is unknown, defaulting to 1000 [ 592.311656][T19421] block nbd1: server does not support multiple connections per device. [ 592.339831][T19421] block nbd1: shutting down sockets [ 593.152045][T19442] 8021q: adding VLAN 0 to HW filter on device bond18 [ 593.174148][T19442] team0: Port device bond18 added [ 593.255171][T19445] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 593.403439][T19453] __nla_validate_parse: 11 callbacks suppressed [ 593.403467][T19453] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4186'. [ 593.469382][T19461] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4189'. [ 593.520540][T19465] siw: device registration error -23 [ 593.741790][T19469] block nbd1: server does not support multiple connections per device. [ 593.762311][T19469] block nbd1: shutting down sockets [ 594.165657][T19462] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 594.183230][T19462] RDS: rds_bind could not find a transport for fe88::105, load rds_tcp or rds_rdma? [ 594.702462][T19505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4202'. [ 594.705466][T19479] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4195'. [ 594.769883][T19505] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4202'. [ 594.971994][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 595.040125][T19508] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4203'. [ 595.063098][T19510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4206'. [ 595.140088][T19514] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4207'. [ 595.276429][T19521] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4207'. [ 595.342198][T12157] net_ratelimit: 39 callbacks suppressed [ 595.342218][T12157] bond0: (slave bridge13): failed to get link speed/duplex [ 595.484609][T12152] bond0: (slave bridge13): failed to get link speed/duplex [ 595.543387][T17250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.615044][T12152] bond0: (slave bridge13): failed to get link speed/duplex [ 595.706081][T19537] veth31: entered allmulticast mode [ 595.762184][T12152] bond0: (slave bridge13): failed to get link speed/duplex [ 595.873194][T12155] bond0: (slave bridge13): failed to get link speed/duplex [ 595.945259][T19541] No such timeout policy "syz0" [ 595.995044][T12157] bond0: (slave bridge13): failed to get link speed/duplex [ 596.097678][T19539] gretap0: entered promiscuous mode [ 596.122235][T12157] bond0: (slave bridge13): failed to get link speed/duplex [ 596.172254][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.181005][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.576765][T19566] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4217'. [ 596.600101][T19566] siw: device registration error -23 [ 596.965685][T19579] netlink: 'syz.0.4222': attribute type 2 has an invalid length. [ 596.978259][T19579] netlink: 'syz.0.4222': attribute type 2 has an invalid length. [ 597.852286][ T993] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 597.902994][T19611] siw: device registration error -23 [ 597.951992][ T993] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 598.173444][T12155] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 598.693406][T19631] lo speed is unknown, defaulting to 1000 [ 598.747410][T19631] gre0 speed is unknown, defaulting to 1000 [ 598.897742][T19634] gretap0: entered promiscuous mode [ 598.934224][T19634] vlan4: entered promiscuous mode [ 599.609858][T19637] tipc: Resetting bearer [ 599.689601][T12152] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 599.717407][T12152] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 599.733269][T19644] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 599.742134][T19644] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 599.832957][T17250] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 600.104731][T19656] __nla_validate_parse: 2 callbacks suppressed [ 600.104749][T19656] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4242'. [ 600.144247][T19658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4241'. [ 600.160010][T19656] siw: device registration error -23 [ 600.167435][T19658] block nbd1: Unsupported socket: should be TCP or UNIX. [ 600.384725][T19667] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4244'. [ 600.401765][T12152] net_ratelimit: 388 callbacks suppressed [ 600.401788][T12152] bond0: (slave bridge13): failed to get link speed/duplex [ 600.444105][T19668] TCP: TCP_TX_DELAY enabled [ 600.489408][T19671] netlink: 'syz.0.4244': attribute type 8 has an invalid length. [ 600.516250][T19671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4244'. [ 600.541841][T12152] bond0: (slave bridge13): failed to get link speed/duplex [ 600.639402][T19676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4247'. [ 600.661544][T12152] bond0: (slave bridge13): failed to get link speed/duplex [ 600.736443][T17250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.782697][T12157] bond0: (slave bridge13): failed to get link speed/duplex [ 600.823356][T19678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4247'. [ 601.022291][T12157] bond0: (slave bridge13): failed to get link speed/duplex [ 601.113472][T19682] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4249'. [ 601.161432][T12155] bond0: (slave bridge13): failed to get link speed/duplex [ 601.254425][T19687] netlink: 'syz.4.4249': attribute type 8 has an invalid length. [ 601.283105][T19687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4249'. [ 601.294683][T12161] bond0: (slave bridge13): failed to get link speed/duplex [ 601.376319][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.386022][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.434949][T19693] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4252'. [ 601.561471][T19697] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4250'. [ 602.017622][T19709] block nbd1: Unsupported socket: should be TCP or UNIX. [ 602.175675][T19716] block nbd1: Unsupported socket: should be TCP or UNIX. [ 602.575352][T19725] syzkaller1: entered promiscuous mode [ 602.593160][T19725] syzkaller1: entered allmulticast mode [ 603.022221][T19733] veth31: entered allmulticast mode [ 603.477242][T19753] netlink: 'syz.2.4269': attribute type 1 has an invalid length. [ 603.495127][T19753] netlink: 'syz.2.4269': attribute type 1 has an invalid length. [ 603.524247][T19753] syzkaller1: entered promiscuous mode [ 603.529946][T19753] syzkaller1: entered allmulticast mode [ 603.592703][T19755] lo speed is unknown, defaulting to 1000 [ 603.600599][T19755] gre0 speed is unknown, defaulting to 1000 [ 603.951075][T19761] netlink: 'syz.0.4271': attribute type 1 has an invalid length. [ 604.011667][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 604.086498][T19762] IPv6: Can't replace route, no match found [ 604.137363][T19762] IPv6: Can't replace route, no match found [ 604.224620][T19761] bond17: entered promiscuous mode [ 604.236055][T19761] 8021q: adding VLAN 0 to HW filter on device bond17 [ 604.473532][T19764] bond17: (slave veth21): making interface the new active one [ 604.490747][T19764] veth21: entered promiscuous mode [ 604.516120][T19764] bond17: (slave veth21): Enslaving as an active interface with an up link [ 604.526076][T19767] tunl0: Caught tx_queue_len zero misconfig [ 604.619150][T19772] lo speed is unknown, defaulting to 1000 [ 604.644010][T19772] gre0 speed is unknown, defaulting to 1000 [ 604.843001][T19787] veth31: entered allmulticast mode [ 604.916945][T19789] veth27: entered allmulticast mode [ 605.531586][ C1] net_ratelimit: 36 callbacks suppressed [ 605.531610][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.546533][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.592985][T19804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.622132][T19804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.642807][T19805] __nla_validate_parse: 11 callbacks suppressed [ 605.642827][T19805] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4281'. [ 605.855756][T17897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.926820][T17250] lo speed is unknown, defaulting to 1000 [ 605.935377][T12157] bond0: (slave bridge13): failed to get link speed/duplex [ 605.943423][T17250] syz2: Port: 1 Link DOWN [ 605.969420][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.051770][T12157] bond0: (slave bridge13): failed to get link speed/duplex [ 606.161504][T12157] bond0: (slave bridge13): failed to get link speed/duplex [ 606.271967][T12157] bond0: (slave bridge13): failed to get link speed/duplex [ 606.495454][T19831] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4287'. [ 606.585859][T19836] netlink: 'syz.1.4287': attribute type 8 has an invalid length. [ 606.601444][T19836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4287'. [ 606.815565][T19845] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4290'. [ 606.878891][T19845] veth23: entered allmulticast mode [ 607.048992][T19847] dvmrp0: entered allmulticast mode [ 607.396198][T19864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4294'. [ 607.579761][T19869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 607.652739][T19867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 608.052523][T19880] gretap0: left promiscuous mode [ 608.140895][T19877] netlink: 'syz.0.4298': attribute type 4 has an invalid length. [ 608.182155][T19877] netlink: 'syz.0.4298': attribute type 4 has an invalid length. [ 608.569016][T19895] netlink: 'syz.0.4302': attribute type 1 has an invalid length. [ 608.793732][T19903] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4302'. [ 608.804625][T19904] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4303'. [ 608.861950][T19895] 8021q: adding VLAN 0 to HW filter on device bond18 [ 608.872870][T19907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4300'. [ 609.015605][T19912] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4304'. [ 609.037594][T19907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4300'. [ 609.072709][T19910] veth23: entered allmulticast mode [ 609.296759][T19924] vlan2: left allmulticast mode [ 609.320701][T19924] geneve0: left allmulticast mode [ 609.336415][T19912] netlink: 'syz.2.4304': attribute type 8 has an invalid length. [ 609.365322][T19924] bridge0: port 3(vlan2) entered disabled state [ 609.466387][T19930] netlink: 'syz.3.4307': attribute type 2 has an invalid length. [ 609.505354][T17897] geneve0: left promiscuous mode [ 609.540638][T19935] unsupported nlmsg_type 40 [ 609.748526][ T5286] gretap0: entered promiscuous mode [ 609.809201][T19945] netlink: 'syz.1.4309': attribute type 1 has an invalid length. [ 609.990002][T19950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.103425][T19949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.561518][ T48] net_ratelimit: 45 callbacks suppressed [ 610.561540][ T48] bond0: (slave bridge13): failed to get link speed/duplex [ 610.662616][ T5642] block nbd1: Receive control failed (result -1) [ 610.711735][ T48] bond0: (slave bridge13): failed to get link speed/duplex [ 610.731504][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.740512][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.861737][ T48] bond0: (slave bridge13): failed to get link speed/duplex [ 610.898809][T19978] siw: device registration error -23 [ 611.001561][ T48] bond0: (slave bridge13): failed to get link speed/duplex [ 611.121462][T12152] bond0: (slave bridge13): failed to get link speed/duplex [ 611.141745][T17250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.293386][ T48] bond0: (slave bridge13): failed to get link speed/duplex [ 611.454496][T12161] bond0: (slave bridge13): failed to get link speed/duplex [ 611.470113][T19992] __nla_validate_parse: 7 callbacks suppressed [ 611.470137][T19992] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4317'. [ 611.564567][T19992] veth23: entered allmulticast mode [ 611.591062][T19995] netlink: 'syz.4.4319': attribute type 4 has an invalid length. [ 611.698039][T19990] smbdirect: ib_dev[syz0] renamed to [syz ] [ 611.814109][T20011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4320'. [ 611.899742][T20013] netlink: 216 bytes leftover after parsing attributes in process `syz.1.4320'. [ 611.910945][T20013] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4320'. [ 611.929172][T20013] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4320'. [ 612.081151][T20013] 8021q: adding VLAN 0 to HW filter on device  [ 612.104554][T20013] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.133925][T20013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 612.169541][T20013] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 612.181778][T20013] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 612.198148][T17250] lo speed is unknown, defaulting to 1000 [ 612.205785][T17250] syz2: Port: 1 Link ACTIVE [ 612.545782][T20022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.684791][T20021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.942344][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 613.154510][T20037] siw: device registration error -23 [ 613.329006][T20046] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4333'. [ 613.333463][T20047] netlink: 'syz.3.4331': attribute type 1 has an invalid length. [ 613.410189][T20047] 8021q: adding VLAN 0 to HW filter on device bond19 [ 613.505333][T20046] veth23: entered allmulticast mode [ 613.514115][T20047] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4331'. [ 613.559882][T20059] sctp: [Deprecated]: syz.2.4334 (pid 20059) Use of struct sctp_assoc_value in delayed_ack socket option. [ 613.559882][T20059] Use struct sctp_sack_info instead [ 613.618773][T20058] netlink: 'syz.1.4336': attribute type 4 has an invalid length. [ 613.700101][T20049] sctp: [Deprecated]: syz.2.4334 (pid 20049) Use of struct sctp_assoc_value in delayed_ack socket option. [ 613.700101][T20049] Use struct sctp_sack_info instead [ 613.800717][T20065] netlink: 'syz.4.4337': attribute type 16 has an invalid length. [ 613.824877][T20049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 613.835363][T20065] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4337'. [ 613.865438][T20058] netlink: 'syz.1.4336': attribute type 1 has an invalid length. [ 613.880682][T20067] netlink: 'syz.0.4338': attribute type 13 has an invalid length. [ 613.898824][T20049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.047406][T20073] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig [ 614.104618][T20075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4338'. [ 614.187581][T20079] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4342'. [ 614.206058][T20079] siw: device registration error -23 [ 614.429719][T20085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.528062][T20084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.032118][T20114] veth31: entered allmulticast mode [ 615.343765][T20125] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 615.365327][T20125] syzkaller1: linktype set to 825 [ 615.633872][T20134] siw: device registration error -23 [ 615.671485][T12152] net_ratelimit: 36 callbacks suppressed [ 615.671504][T12152] bond0: (slave bridge13): failed to get link speed/duplex [ 615.821546][T12152] bond0: (slave bridge13): failed to get link speed/duplex [ 616.092390][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.101026][T12152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.103953][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.183590][ T5286] veth0_macvtap: left promiscuous mode [ 616.315938][T20161] veth27: entered allmulticast mode [ 616.333748][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.422242][T12157] bond0: (slave bridge13): failed to get link speed/duplex [ 616.558136][T12157] bond0: (slave bridge13): failed to get link speed/duplex [ 616.691487][T12161] bond0: (slave bridge13): failed to get link speed/duplex [ 616.733449][T12509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.913168][T20180] __nla_validate_parse: 10 callbacks suppressed [ 616.913189][T20180] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4364'. [ 617.035675][T20173] lo speed is unknown, defaulting to 1000 [ 617.078240][T20173] gre0 speed is unknown, defaulting to 1000 [ 617.085536][T20179] vcan0: tx drop: invalid da for name 0xfffffffffffffffd [ 617.232374][T20188] lo speed is unknown, defaulting to 1000 [ 617.923015][T20188] gre0 speed is unknown, defaulting to 1000 [ 618.299799][T20225] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4371'. [ 618.595620][T20231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4372'. [ 618.977032][ T30] audit: type=1804 audit(1777685092.010:8): pid=20243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4375" name="/newroot/912/cgroup.controllers" dev="tmpfs" ino=4682 res=1 errno=0 [ 619.026455][ T30] audit: type=1800 audit(1777685092.010:9): pid=20243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4375" name="cgroup.controllers" dev="tmpfs" ino=4682 res=0 errno=0 [ 619.103718][T20210] tipc: Resetting bearer [ 619.166600][T20238] veth23: entered allmulticast mode [ 619.342823][T20245] vlan0: entered promiscuous mode [ 619.376050][T20245] `: entered promiscuous mode [ 619.885879][T20251] block nbd2: server does not support multiple connections per device. [ 620.062342][T20251] block nbd2: shutting down sockets [ 620.157215][T20255] netlink: 'syz.3.4377': attribute type 1 has an invalid length. [ 620.170310][T20256] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4379'. [ 620.466808][T20255] bond20: entered promiscuous mode [ 620.487392][T20255] bond20: entered allmulticast mode [ 620.588686][T20255] 8021q: adding VLAN 0 to HW filter on device bond20 [ 620.706957][T20264] syz.3.4377 (20264) used obsolete PPPIOCDETACH ioctl [ 620.743250][T17248] net_ratelimit: 29 callbacks suppressed [ 620.743269][T17248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.760127][T12157] bond0: (slave bridge13): failed to get link speed/duplex [ 620.766903][T20276] block nbd2: server does not support multiple connections per device. [ 620.798362][T20276] block nbd2: shutting down sockets [ 620.961566][ T140] bond0: (slave bridge13): failed to get link speed/duplex [ 621.043430][T20286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.055574][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.070110][T12509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.086012][T20286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.100150][T17248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.134583][ T140] bond0: (slave bridge13): failed to get link speed/duplex [ 621.152967][T20289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.203661][T20288] lo speed is unknown, defaulting to 1000 [ 621.238076][T20288] gre0 speed is unknown, defaulting to 1000 [ 621.448574][T20302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4387'. [ 621.678118][T20308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4387'. [ 621.896209][T20310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4388'. [ 622.265368][T20295] batman_adv: batadv0: Interface deactivated: macsec1 [ 622.706748][T20313] veth27: entered allmulticast mode [ 622.737318][T12155] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 622.748265][T12155] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.760807][T20317] block nbd2: server does not support multiple connections per device. [ 622.782839][T12155] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 622.802057][T12155] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.851844][T20317] block nbd2: shutting down sockets [ 623.026722][T12155] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.054970][T12155] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.075468][T12155] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.087187][T12155] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.192138][T20318] syzkaller1: entered promiscuous mode [ 623.214261][T20318] syzkaller1: entered allmulticast mode [ 623.565802][T20345] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4395'. [ 624.414261][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.608536][T20371] lo speed is unknown, defaulting to 1000 [ 624.637027][T20371] gre0 speed is unknown, defaulting to 1000 [ 624.976566][T20382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4399'. [ 625.127595][T20387] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 625.148284][T20387] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 625.348591][T20387] team0 (unregistering): Port device team_slave_0 removed [ 625.403785][T20387] team0 (unregistering): Port device team_slave_1 removed [ 625.450430][T20387] team0 (unregistering): Port device bond18 removed [ 625.616891][T12507] syz : Port: 1 Link DOWN [ 625.621526][T12508] lo speed is unknown, defaulting to 1000 [ 625.937996][ T5755] net_ratelimit: 30 callbacks suppressed [ 625.938016][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.070170][T20409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4403'. [ 626.103484][T20406] veth23: entered allmulticast mode [ 626.146951][T20406] bond21: (slave veth23): Enslaving as an active interface with an up link [ 626.332831][T12507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.346637][T12152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.380333][T20409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4403'. [ 626.491569][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.500378][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.644381][T20411] netlink: 'syz.1.4402': attribute type 1 has an invalid length. [ 626.655826][T20423] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4404'. [ 626.665199][T20411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4402'. [ 626.712447][T20423] smc: net device wlan0 erased user defined pnetid SYZ0 [ 626.753877][T20423] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 626.775828][T20423] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.4404'. [ 626.910331][T20431] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4409'. [ 626.948463][T20431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4409'. [ 626.973179][T17244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.988285][T20432] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4406'. [ 627.131686][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.381190][T20456] lo speed is unknown, defaulting to 1000 [ 627.422630][T20456] gre0 speed is unknown, defaulting to 1000 [ 627.531610][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.543400][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.712272][T20462] lo speed is unknown, defaulting to 1000 [ 628.017935][T17244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.168786][T20471] veth25: entered allmulticast mode [ 628.207045][T20471] bond22: (slave veth25): Enslaving as an active interface with an up link [ 628.256462][T20462] gre0 speed is unknown, defaulting to 1000 [ 628.385598][T20476] netlink: 'syz.2.4416': attribute type 8 has an invalid length. [ 628.635650][T20482] __nla_validate_parse: 5 callbacks suppressed [ 628.635668][T20482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4418'. [ 628.783799][T20484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4418'. [ 629.107107][T20488] vlan0: entered promiscuous mode [ 629.114000][T20488] bridge0: entered promiscuous mode [ 629.173590][T20488] netlink: 'syz.1.4420': attribute type 4 has an invalid length. [ 629.326819][T20494] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4422'. [ 629.559311][T20495] lo speed is unknown, defaulting to 1000 [ 629.567967][T20505] syzkaller1: entered promiscuous mode [ 629.589382][T20505] syzkaller1: entered allmulticast mode [ 629.608564][T20495] gre0 speed is unknown, defaulting to 1000 [ 630.190162][T20521] : renamed from veth0_to_bond (while UP) [ 630.308168][T20526] veth31: entered allmulticast mode [ 630.341161][T20526] bond18: (slave veth31): Enslaving as an active interface with an up link [ 630.709824][T20538] netlink: 'syz.4.4430': attribute type 1 has an invalid length. [ 630.736294][T20534] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 630.821777][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 630.947872][T20546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4431'. [ 630.984276][T20538] bond19: entered promiscuous mode [ 630.990016][T20538] 8021q: adding VLAN 0 to HW filter on device bond19 [ 631.012264][T20547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4431'. [ 631.024225][T20547] netlink: 348 bytes leftover after parsing attributes in process `syz.0.4431'. [ 631.033657][T20547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4431'. [ 631.044346][T20547] netlink: 348 bytes leftover after parsing attributes in process `syz.0.4431'. [ 631.053732][T20547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4431'. [ 631.132253][T17244] net_ratelimit: 9 callbacks suppressed [ 631.132274][T17244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.287894][T20544] bond19: (slave veth25): making interface the new active one [ 631.304143][T20544] veth25: entered promiscuous mode [ 631.313337][T20544] bond19: (slave veth25): Enslaving as an active interface with an up link [ 631.505907][T20554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4433'. [ 631.691596][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.701544][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.094148][T12161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.130600][T20572] veth27: entered allmulticast mode [ 632.149193][T20572] bond22: (slave veth27): Enslaving as an active interface with an up link [ 632.173749][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.367816][T20600] syzkaller1: entered promiscuous mode [ 632.424600][T20600] syzkaller1: entered allmulticast mode [ 632.731905][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.741012][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.182203][T20594] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.189707][T20594] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.211685][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.230079][T12506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.454229][ T5642] block nbd2: Receive control failed (result -1) [ 633.771526][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.955309][T20594] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 634.396599][T20636] netlink: 'syz.1.4450': attribute type 29 has an invalid length. [ 634.414227][T20594] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 634.450095][T20594] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 634.512224][T20594] bond17: left promiscuous mode [ 634.521883][T20594] veth21: left promiscuous mode [ 634.572338][T20628] __nla_validate_parse: 8 callbacks suppressed [ 634.572360][T20628] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4448'. [ 634.606933][T12161] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.625681][T12161] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.656644][T12161] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.695538][T12161] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.731991][T20631] lo speed is unknown, defaulting to 1000 [ 634.753084][T20631] gre0 speed is unknown, defaulting to 1000 [ 634.763358][T20644] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4452'. [ 634.772171][T20645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4453'. [ 634.786741][T20646] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.4451'. [ 634.834664][T20644] netlink: 'syz.0.4452': attribute type 8 has an invalid length. [ 634.859152][T20644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4452'. [ 634.906241][T20650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4453'. [ 635.422338][T20657] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4455'. [ 635.452175][T20653] lo speed is unknown, defaulting to 1000 [ 635.555788][T20653] gre0 speed is unknown, defaulting to 1000 [ 635.915385][T20669] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 636.042556][T20657] siw: device registration error -23 [ 636.218585][T20674] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4460'. [ 636.233183][T20677] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4460'. [ 636.251763][T12508] net_ratelimit: 9 callbacks suppressed [ 636.251782][T12508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.413376][T17248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.431239][T20678] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.4461'. [ 636.891982][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.900704][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.034729][T20693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.183104][T20700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.191734][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.262274][T17248] lo speed is unknown, defaulting to 1000 [ 637.279177][T17248] syz2: Port: 1 Link DOWN [ 637.364609][T20702] lo speed is unknown, defaulting to 1000 [ 637.385368][T20702] gre0 speed is unknown, defaulting to 1000 [ 637.451755][T17248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.633151][T20709] netlink: 'syz.1.4468': attribute type 1 has an invalid length. [ 637.698516][T20709] bond19: entered promiscuous mode [ 637.704846][T20709] 8021q: adding VLAN 0 to HW filter on device bond19 [ 637.738731][T20711] netlink: 'syz.4.4470': attribute type 12 has an invalid length. [ 637.931639][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.940492][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.976791][T20713] bond19: (slave veth33): making interface the new active one [ 637.984801][T20713] veth33: entered promiscuous mode [ 637.992631][T20713] bond19: (slave veth33): Enslaving as an active interface with an up link [ 638.456520][T20725] dvmrp0: entered allmulticast mode [ 639.062804][T20745] lo speed is unknown, defaulting to 1000 [ 639.112942][T20750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 639.122805][T20745] gre0 speed is unknown, defaulting to 1000 [ 639.680293][T20760] netlink: 'syz.1.4480': attribute type 1 has an invalid length. [ 639.794919][T20763] bond20: (slave vxcan1): The slave device specified does not support setting the MAC address [ 639.806388][T20763] bond20: (slave vxcan1): Error -95 calling set_mac_address [ 639.909562][T20764] __nla_validate_parse: 3 callbacks suppressed [ 639.909582][T20764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4480'. [ 639.984565][T20766] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.4481'. [ 640.047603][T20764] macvlan0: entered promiscuous mode [ 640.060602][T20764] macvlan0: entered allmulticast mode [ 640.063934][T20772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4481'. [ 640.077082][T20767] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 640.095333][T20767] syzkaller1: Refused to change device type [ 640.579820][T20785] veth1_vlan: left promiscuous mode [ 640.610404][T20785] veth0_vlan: left promiscuous mode [ 640.633326][T20797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4489'. [ 640.642595][T20785] veth0_vlan: entered promiscuous mode [ 640.702952][T20785] veth1_vlan: entered promiscuous mode [ 640.731271][T20785] veth1_macvtap: left promiscuous mode [ 640.748012][T20785] veth0_macvtap: left promiscuous mode [ 640.757482][T20785] veth0_macvtap: entered promiscuous mode [ 640.766028][T20785] veth1_macvtap: entered promiscuous mode [ 640.829741][T20785] 8021q: adding VLAN 0 to HW filter on device bond1 [ 640.842367][T20785] 8021q: adding VLAN 0 to HW filter on device bond2 [ 640.890097][T20785] 8021q: adding VLAN 0 to HW filter on device bond3 [ 640.903494][T20785] 8021q: adding VLAN 0 to HW filter on device bond4 [ 640.916242][T20785] erspan0: entered promiscuous mode [ 640.924221][T20785] 8021q: adding VLAN 0 to HW filter on device bond5 [ 640.939172][T20785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 641.039555][T20797] veth1_macvtap: left promiscuous mode [ 641.085668][ T48] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 641.098808][ T48] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.109624][ T48] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 641.123867][ T48] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.164829][ T48] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 641.173543][ T48] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.182221][ T48] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 641.190551][ T48] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.202797][T20806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4490'. [ 641.212755][T20806] block nbd3: Unsupported socket: should be TCP or UNIX. [ 641.265907][T20789] lo speed is unknown, defaulting to 1000 [ 641.319791][T17251] net_ratelimit: 12 callbacks suppressed [ 641.319813][T17251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.336113][T20807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.357384][T20807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.365702][T20807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.396978][T20807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.422240][T20807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.514887][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.525283][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.533606][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.541871][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.601005][T20789] gre0 speed is unknown, defaulting to 1000 [ 642.393826][T20829] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4495'. [ 642.483883][T20829] netlink: 'syz.0.4495': attribute type 8 has an invalid length. [ 642.507235][T20829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4495'. [ 642.558259][T20835] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4497'. [ 642.569657][T20832] netlink: 'syz.2.4494': attribute type 9 has an invalid length. [ 642.798748][T20843] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.4498'. [ 642.827197][T20843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4498'. [ 642.956349][ T30] audit: type=1804 audit(1777685115.990:10): pid=20846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4499" name="/newroot/932/memory.events" dev="tmpfs" ino=4752 res=1 errno=0 [ 642.989411][ T30] audit: type=1800 audit(1777685115.990:11): pid=20846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4499" name="memory.events" dev="tmpfs" ino=4752 res=0 errno=0 [ 643.070783][T20846] bond19: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 643.110244][T20846] bond19 (unregistering): Released all slaves [ 643.346474][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.361089][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.377846][T20855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 643.464855][T20860] block nbd3: Unsupported socket: should be TCP or UNIX. [ 643.561183][T20858] netlink: 'syz.0.4503': attribute type 39 has an invalid length. [ 644.140210][T20878] netlink: 'syz.1.4509': attribute type 8 has an invalid length. [ 644.407301][T20888] lo: Caught tx_queue_len zero misconfig [ 644.507550][T20892] lo speed is unknown, defaulting to 1000 [ 644.516284][T20892] gre0 speed is unknown, defaulting to 1000 [ 644.596059][T20903] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 644.911564][T20910] 8021q: adding VLAN 0 to HW filter on device bond23 [ 644.934283][T20917] __nla_validate_parse: 7 callbacks suppressed [ 644.934305][T20917] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4518'. [ 644.958799][T20910] team0: Port device bond23 added [ 645.018512][ T30] audit: type=1804 audit(1777685118.050:12): pid=20917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4518" name="/newroot/931/cgroup.controllers" dev="tmpfs" ino=4779 res=1 errno=0 [ 645.090138][ T30] audit: type=1800 audit(1777685118.050:13): pid=20917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4518" name="cgroup.controllers" dev="tmpfs" ino=4779 res=0 errno=0 [ 645.148639][ T30] audit: type=1804 audit(1777685118.100:14): pid=20917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.4518" name="/newroot/931/cgroup.controllers" dev="tmpfs" ino=4779 res=1 errno=0 [ 645.264762][T20923] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4520'. [ 645.281582][T20923] block nbd3: Unsupported socket: should be TCP or UNIX. [ 645.650513][T20935] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4523'. [ 645.682055][T20935] netlink: 'syz.3.4523': attribute type 8 has an invalid length. [ 645.699406][T20935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4523'. [ 646.021406][T20937] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.028712][T20937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.396192][T20948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4527'. [ 646.432065][T20937] tipc: Resetting bearer [ 646.486115][T20937] geneve3: left promiscuous mode [ 646.493740][T20937] ip6gre1: left promiscuous mode [ 646.501572][T20937] 8021q: adding VLAN 0 to HW filter on device bond18 [ 646.525028][T20937] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 646.544687][T20937] bond20: left promiscuous mode [ 646.564836][T20937] 8021q: adding VLAN 0 to HW filter on device bond21 [ 646.610161][T20937] 8021q: adding VLAN 0 to HW filter on device bond22 [ 646.699970][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.707238][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.806235][T20952] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4525'. [ 646.828308][ T5838] syz : Port: 1 Link ACTIVE [ 646.833372][T17248] net_ratelimit: 80 callbacks suppressed [ 646.833391][T17248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.902218][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.983801][T20958] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 646.991495][T20958] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 646.999749][T20958] tipc: Resetting bearer [ 647.070468][T20961] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4530'. [ 647.131791][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.265718][T20969] netlink: 'syz.2.4530': attribute type 8 has an invalid length. [ 647.279045][T20969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4530'. [ 647.293447][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.302331][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.658709][T20980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4535'. [ 647.668258][T20980] block nbd3: Unsupported socket: should be TCP or UNIX. [ 647.853841][T17248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.042168][T20993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4538'. [ 648.331578][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.340963][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.412625][T12507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.651683][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.756013][ T30] audit: type=1107 audit(1777685121.790:15): pid=21004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 649.057040][T21024] netlink: 'syz.1.4545': attribute type 1 has an invalid length. [ 649.091551][T21020] netlink: 'syz.4.4549': attribute type 1 has an invalid length. [ 649.123029][T21024] bond21: entered promiscuous mode [ 649.128846][T21024] 8021q: adding VLAN 0 to HW filter on device bond21 [ 649.128987][T21029] netlink: 'syz.2.4548': attribute type 8 has an invalid length. [ 649.176103][T21024] IPv6: Can't replace route, no match found [ 649.182968][T21024] IPv6: Can't replace route, no match found [ 649.368848][T21031] bond21: (slave veth35): making interface the new active one [ 649.382421][T21031] veth35: entered promiscuous mode [ 649.392791][T21031] bond21: (slave veth35): Enslaving as an active interface with an up link [ 649.609236][T21039] lo speed is unknown, defaulting to 1000 [ 649.657168][T21039] gre0 speed is unknown, defaulting to 1000 [ 650.278744][T21062] netlink: 'syz.3.4558': attribute type 1 has an invalid length. [ 650.394535][T21062] veth27: entered allmulticast mode [ 650.405118][T21066] __nla_validate_parse: 10 callbacks suppressed [ 650.405138][T21066] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4559'. [ 650.437888][T21062] bond23: (slave veth27): Enslaving as an active interface with an up link [ 650.779928][T21077] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4560'. [ 650.880402][T21077] xt_ecn: cannot match TCP bits for non-tcp packets [ 650.901821][T12507] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 650.914883][T21080] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4561'. [ 650.965271][T21077] tipc: Resetting bearer [ 650.978304][T21082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4562'. [ 651.065522][ T140] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 651.257090][T21083] netlink: 'syz.4.4561': attribute type 8 has an invalid length. [ 651.281866][T21083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4561'. [ 651.407385][T21095] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4564'. [ 651.607736][T21099] netlink: 'syz.2.4564': attribute type 8 has an invalid length. [ 651.652491][T21099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4564'. [ 651.674892][T21101] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4565'. [ 651.856569][ T5838] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 651.945846][T21118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4569'. [ 651.969296][T21113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4566'. [ 652.012355][T17248] net_ratelimit: 234 callbacks suppressed [ 652.012375][T17248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.091826][T12157] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 652.127565][T12157] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 652.164619][ T5728] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 652.491752][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.500368][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.052793][T17248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.067041][T21141] netlink: 'syz.1.4575': attribute type 8 has an invalid length. [ 653.172934][T21151] xt_nfacct: accounting object `syz0' does not exist [ 653.218583][T21151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.286512][T21151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.324054][T21151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.531512][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.540291][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.627069][T21151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.870556][T21172] bond22: option arp_all_targets: invalid value (129) [ 653.880436][T21172] bond22 (unregistering): Released all slaves [ 653.904336][T21179] netlink: 'syz.4.4581': attribute type 8 has an invalid length. [ 654.331722][T21194] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 654.339481][T21194] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 654.510044][T21201] netlink: 'syz.1.4589': attribute type 8 has an invalid length. [ 654.786047][T21213] block nbd0: NBD_DISCONNECT [ 654.794134][T21213] block nbd0: Send disconnect failed -32 [ 654.800549][T21213] block nbd0: shutting down sockets [ 654.828685][T21215] tipc: Enabling of bearer rejected, already enabled [ 654.930502][T21219] netlink: 'syz.2.4595': attribute type 1 has an invalid length. [ 654.946530][T21219] netlink: 'syz.2.4595': attribute type 2 has an invalid length. [ 654.964363][T21219] netlink: 'syz.2.4595': attribute type 2 has an invalid length. [ 654.972672][T21219] netlink: 'syz.2.4595': attribute type 2 has an invalid length. [ 654.986296][T21219] netlink: 'syz.2.4595': attribute type 1 has an invalid length. [ 655.133654][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 655.243039][T21232] siw: device registration error -23 [ 655.456895][T21244] __nla_validate_parse: 29 callbacks suppressed [ 655.456916][T21244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4605'. [ 655.475294][T21245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4603'. [ 655.510665][T21243] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4604'. [ 655.550784][T21243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4604'. [ 655.857645][T21252] veth23: entered allmulticast mode [ 656.084345][T21264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4610'. [ 656.251594][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 656.301987][T21266] block nbd0: server does not support multiple connections per device. [ 656.320587][T21266] block nbd0: shutting down sockets [ 656.386262][T21274] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4614'. [ 656.458924][T21276] validate_nla: 2 callbacks suppressed [ 656.458944][T21276] netlink: 'syz.1.4614': attribute type 8 has an invalid length. [ 656.487996][T21276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4614'. [ 656.491818][T21271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4613'. [ 656.503356][T21275] lo speed is unknown, defaulting to 1000 [ 656.515835][T21275] gre0 speed is unknown, defaulting to 1000 [ 656.532122][T21278] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4615'. [ 656.561833][T21271] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4613'. [ 656.618210][T12157] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.666446][T12157] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 656.727945][T21271] netlink: 'syz.4.4613': attribute type 13 has an invalid length. [ 656.756617][T21271] netlink: 'syz.4.4613': attribute type 17 has an invalid length. [ 656.771615][T21271] netlink: 'syz.4.4613': attribute type 27 has an invalid length. [ 657.214194][T17251] net_ratelimit: 16 callbacks suppressed [ 657.214215][T17251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.258366][T21278] siw: device registration error -23 [ 657.462594][T21296] batman_adv: batadv0: Adding interface: veth29 [ 657.485557][T21296] batman_adv: batadv0: The MTU of interface veth29 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 657.515302][T21296] batman_adv: batadv0: Interface activated: veth29 [ 657.532487][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.655421][T21304] netlink: 'syz.0.4624': attribute type 8 has an invalid length. [ 657.691602][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.700660][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.261680][T17251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.362511][T21335] syzkaller1: entered promiscuous mode [ 658.374432][T21335] syzkaller1: entered allmulticast mode [ 658.505297][T21341] lo speed is unknown, defaulting to 1000 [ 658.516121][T21341] gre0 speed is unknown, defaulting to 1000 [ 658.529596][T21345] netlink: 'syz.2.4634': attribute type 8 has an invalid length. [ 658.731686][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.741604][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.292156][T17251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.702684][T21383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.712970][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.803599][T21369] ip6gre3: entered promiscuous mode [ 659.817132][T21369] ip6gre3: entered allmulticast mode [ 660.135990][T21391] block nbd0: server does not support multiple connections per device. [ 660.153051][T21391] block nbd0: shutting down sockets [ 660.320654][T21378] netlink: 'syz.1.4643': attribute type 6 has an invalid length. [ 660.360928][T21384] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 660.399984][T21384] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 660.445309][T21384] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 660.951038][T21411] __nla_validate_parse: 16 callbacks suppressed [ 660.951061][T21411] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4652'. [ 661.035211][T21405] netlink: 200 bytes leftover after parsing attributes in process `syz.3.4650'. [ 661.064083][T21405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4650'. [ 661.083757][T21421] netlink: 'syz.1.4652': attribute type 8 has an invalid length. [ 661.119396][T21421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4652'. [ 661.433986][T21436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4659'. [ 661.719314][T21446] netlink: 280 bytes leftover after parsing attributes in process `syz.4.4663'. [ 661.813898][T21444] block nbd0: server does not support multiple connections per device. [ 661.852201][T21444] block nbd0: shutting down sockets [ 662.259370][T21461] netlink: 'syz.0.4666': attribute type 1 has an invalid length. [ 662.331831][T21461] bond20: entered promiscuous mode [ 662.337557][T21461] 8021q: adding VLAN 0 to HW filter on device bond20 [ 662.413048][T17251] net_ratelimit: 11 callbacks suppressed [ 662.413069][T17251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.450684][T21461] IPv6: Can't replace route, no match found [ 662.472792][T21468] lo speed is unknown, defaulting to 1000 [ 662.489304][T21461] IPv6: Can't replace route, no match found [ 662.523813][T21468] gre0 speed is unknown, defaulting to 1000 [ 662.744562][T21467] bond20: (slave veth23): making interface the new active one [ 662.762550][T21467] veth23: entered promiscuous mode [ 662.778160][T21467] bond20: (slave veth23): Enslaving as an active interface with an up link [ 662.843839][T21473] block nbd0: server does not support multiple connections per device. [ 662.881901][T21473] block nbd0: shutting down sockets [ 662.900015][T21478] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.4671'. [ 662.928449][T21478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4671'. [ 663.124491][T21484] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4674'. [ 663.225888][T21492] netlink: 'syz.3.4674': attribute type 8 has an invalid length. [ 663.241385][T21492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4674'. [ 663.396481][T21492] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.404054][T21492] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.480655][T17250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.612163][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.883822][T21507] netlink: 'syz.1.4678': attribute type 4 has an invalid length. [ 663.931666][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.941171][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.042012][T21509] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 664.309652][T21522] netlink: 'syz.3.4683': attribute type 1 has an invalid length. [ 664.373847][T21522] bond24: entered promiscuous mode [ 664.380710][T21522] 8021q: adding VLAN 0 to HW filter on device bond24 [ 664.494823][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.518304][T21529] IPv6: Can't replace route, no match found [ 664.525033][T21529] IPv6: Can't replace route, no match found [ 664.587969][T21523] lo speed is unknown, defaulting to 1000 [ 664.603615][T21523] gre0 speed is unknown, defaulting to 1000 [ 664.704976][T21522] bond24: (slave veth29): making interface the new active one [ 664.731551][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 664.732399][T12507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.739680][T21522] veth29: entered promiscuous mode [ 664.741489][T21522] bond24: (slave veth29): Enslaving as an active interface with an up link [ 664.971509][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.980502][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.504952][T21550] block nbd0: Unsupported socket: should be TCP or UNIX. [ 665.531736][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.455679][T21565] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 666.538375][T21574] __nla_validate_parse: 5 callbacks suppressed [ 666.538394][T21574] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4700'. [ 666.583388][T21574] netem: incorrect ge model size [ 666.604111][T21574] netem: change failed [ 666.614607][T21578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 666.651520][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 666.725111][T21577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 666.956563][T21589] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4703'. [ 667.186295][T21599] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.4706'. [ 667.203451][T21599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4706'. [ 667.213988][T21586] bridge_slave_0 (unregistering): left allmulticast mode [ 667.222295][T21586] bridge_slave_0 (unregistering): left promiscuous mode [ 667.229422][T21586] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.502893][T21607] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4707'. [ 667.525911][T21607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4707'. [ 667.594188][T21613] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4711'. [ 667.607917][T21616] net_ratelimit: 9 callbacks suppressed [ 667.607935][T21616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.622216][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.638095][T17250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.641937][T21613] block nbd0: Unsupported socket: should be TCP or UNIX. [ 667.861906][ T1113] [ 667.864310][ T1113] ============================================ [ 667.870490][ T1113] WARNING: possible recursive locking detected [ 667.876682][ T1113] syzkaller #0 Not tainted [ 667.881120][ T1113] -------------------------------------------- [ 667.887293][ T1113] kworker/u8:8/1113 is trying to acquire lock: [ 667.893473][ T1113] ffff88807f214558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 667.903372][ T1113] [ 667.903372][ T1113] but task is already holding lock: [ 667.910758][ T1113] ffff888033761958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 667.920661][ T1113] [ 667.920661][ T1113] other info that might help us debug this: [ 667.928741][ T1113] Possible unsafe locking scenario: [ 667.928741][ T1113] [ 667.936220][ T1113] CPU0 [ 667.939555][ T1113] ---- [ 667.942868][ T1113] lock(&qdisc_xmit_lock_key#4); [ 667.947947][ T1113] lock(&qdisc_xmit_lock_key#4); [ 667.953023][ T1113] [ 667.953023][ T1113] *** DEADLOCK *** [ 667.953023][ T1113] [ 667.961197][ T1113] May be due to missing lock nesting notation [ 667.961197][ T1113] [ 667.969555][ T1113] 10 locks held by kworker/u8:8/1113: [ 667.974966][ T1113] #0: ffff888079960940 ((wq_completion)bond4#2){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 667.986086][ T1113] #1: ffffc900054dfc40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 667.999087][ T1113] #2: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf8/0x17e0 [ 668.008725][ T1113] #3: ffffffff8e95cdc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 668.018720][ T1113] #4: ffff8880360cf228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 668.031416][ T1113] #5: ffff888033761958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 668.041745][ T1113] #6: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 668.050679][ T1113] #7: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3c2/0x1070 [ 668.060486][ T1113] #8: ffffffff8e95cdc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 668.070467][ T1113] #9: ffff8880120ed228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 668.083160][ T1113] [ 668.083160][ T1113] stack backtrace: [ 668.089073][ T1113] CPU: 0 UID: 0 PID: 1113 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 668.089098][ T1113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 668.089113][ T1113] Workqueue: bond4 bond_alb_monitor [ 668.089142][ T1113] Call Trace: [ 668.089150][ T1113] [ 668.089159][ T1113] dump_stack_lvl+0xe8/0x150 [ 668.089183][ T1113] print_deadlock_bug+0x279/0x290 [ 668.089212][ T1113] __lock_acquire+0x253f/0x2cf0 [ 668.089238][ T1113] ? fib_table_lookup+0x11ba/0x16e0 [ 668.089269][ T1113] ? sch_direct_xmit+0x15f/0x4c0 [ 668.089289][ T1113] lock_acquire+0x106/0x350 [ 668.089310][ T1113] ? sch_direct_xmit+0x15f/0x4c0 [ 668.089339][ T1113] _raw_spin_lock+0x2e/0x40 [ 668.089358][ T1113] ? sch_direct_xmit+0x15f/0x4c0 [ 668.089378][ T1113] sch_direct_xmit+0x15f/0x4c0 [ 668.089402][ T1113] ? __pfx_sch_direct_xmit+0x10/0x10 [ 668.089429][ T1113] __dev_queue_xmit+0x180f/0x3950 [ 668.089462][ T1113] ? __dev_queue_xmit+0x2b6/0x3950 [ 668.089493][ T1113] ? lockdep_hardirqs_on+0x7a/0x110 [ 668.089520][ T1113] ? __pfx___dev_queue_xmit+0x10/0x10 [ 668.089549][ T1113] ? neigh_resolve_output+0x438/0x750 [ 668.089573][ T1113] ? eth_header+0x11b/0x200 [ 668.089611][ T1113] ? __asan_memcpy+0x40/0x70 [ 668.089647][ T1113] ? ip_finish_output2+0x3c2/0x1070 [ 668.089672][ T1113] ip_finish_output2+0xca9/0x1070 [ 668.089700][ T1113] ? ip_skb_dst_mtu+0x80b/0xa50 [ 668.089728][ T1113] ? ip_finish_output+0x40e/0x530 [ 668.089755][ T1113] ip_output+0x29f/0x450 [ 668.089780][ T1113] ? ip_output+0x5b/0x450 [ 668.089806][ T1113] iptunnel_xmit+0x621/0xd10 [ 668.089859][ T1113] ip_tunnel_xmit+0x193a/0x1f20 [ 668.089895][ T1113] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 668.089924][ T1113] ? __pfx_gre_build_header+0x10/0x10 [ 668.089950][ T1113] ? kfree+0x1c5/0x640 [ 668.089983][ T1113] ? pskb_expand_head+0x458/0x1390 [ 668.090013][ T1113] __gre_xmit+0x19e/0x240 [ 668.090038][ T1113] ? __pfx___gre_xmit+0x10/0x10 [ 668.090067][ T1113] erspan_xmit+0xa41/0x14d0 [ 668.090096][ T1113] ? ret_from_fork_asm+0x1a/0x30 [ 668.090122][ T1113] ? __pfx_erspan_xmit+0x10/0x10 [ 668.090152][ T1113] dev_hard_start_xmit+0x2cd/0x830 [ 668.090190][ T1113] sch_direct_xmit+0x251/0x4c0 [ 668.090215][ T1113] ? __pfx_sch_direct_xmit+0x10/0x10 [ 668.090237][ T1113] ? kthread+0x370/0x470 [ 668.090267][ T1113] __dev_queue_xmit+0x180f/0x3950 [ 668.090299][ T1113] ? __dev_queue_xmit+0x2b6/0x3950 [ 668.090335][ T1113] ? __pfx___dev_queue_xmit+0x10/0x10 [ 668.090364][ T1113] ? rcu_is_watching+0x15/0xb0 [ 668.090389][ T1113] ? trace_kmem_cache_alloc+0x29/0xe0 [ 668.090414][ T1113] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 668.090449][ T1113] ? alb_send_lp_vid+0x14e/0x550 [ 668.090478][ T1113] alb_send_lp_vid+0x348/0x550 [ 668.090507][ T1113] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 668.090540][ T1113] alb_send_learning_packets+0x12c/0x300 [ 668.090567][ T1113] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 668.090593][ T1113] ? bond_alb_monitor+0xf8/0x17e0 [ 668.090619][ T1113] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 668.090642][ T1113] bond_alb_monitor+0x3d5/0x17e0 [ 668.090669][ T1113] ? bond_alb_monitor+0xf8/0x17e0 [ 668.090694][ T1113] ? __pfx_bond_alb_monitor+0x10/0x10 [ 668.090721][ T1113] ? process_scheduled_works+0xa70/0x1860 [ 668.090742][ T1113] ? process_scheduled_works+0xa70/0x1860 [ 668.090763][ T1113] process_scheduled_works+0xb5d/0x1860 [ 668.090800][ T1113] ? __pfx_process_scheduled_works+0x10/0x10 [ 668.090825][ T1113] ? assign_work+0x3d5/0x5e0 [ 668.090847][ T1113] worker_thread+0xa53/0xfc0 [ 668.090882][ T1113] kthread+0x388/0x470 [ 668.090906][ T1113] ? __pfx_worker_thread+0x10/0x10 [ 668.090925][ T1113] ? __pfx_kthread+0x10/0x10 [ 668.090950][ T1113] ret_from_fork+0x514/0xb70 [ 668.090981][ T1113] ? __pfx_ret_from_fork+0x10/0x10 [ 668.091001][ T1113] ? __switch_to+0xc79/0x1410 [ 668.091031][ T1113] ? __pfx_kthread+0x10/0x10 [ 668.091061][ T1113] ret_from_fork_asm+0x1a/0x30 [ 668.091111][ T1113] [ 668.141821][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.142960][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.653235][T17245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.691066][T21622] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 668.889656][ T5728] gre0 speed is unknown, defaulting to 1000 [ 668.899819][ T5728] syz1: Port: 1 Link DOWN [ 668.904510][T21620] vlan0: entered allmulticast mode [ 668.910132][T21620] bridge0: port 3(vlan0) entered blocking state [ 668.916649][T21620] bridge0: port 3(vlan0) entered disabled state [ 668.926307][T21620] vlan0: entered promiscuous mode [ 668.938057][T19278] syz : Port: 1 Link DOWN [ 668.938067][T12152] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.961954][T19278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.973055][T12152] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.998191][T12152] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 669.020585][T12152] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.032969][T19278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.041391][T12152] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.059351][T12152] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 669.076750][T12152] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.081952][T17245] gre0 speed is unknown, defaulting to 1000 [ 669.099981][T12152] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.119566][T12152] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 669.135217][T12152] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.152413][T12152] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.168185][T12152] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 669.222033][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.230588][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.812002][T12509] net_ratelimit: 13 callbacks suppressed [ 672.812055][T12509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.825972][T17250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.371425][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.379793][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.852310][T17250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.332133][T12509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.411491][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.419863][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.892000][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.971638][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog