last executing test programs: 7.180218062s ago: executing program 3 (id=5006): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000900)=ANY=[], 0x114}], 0x1}, 0x40000) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x803214707ac066f0, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, 0x0, &(0x7f0000000100)=0x20) socket$inet_sctp(0x2, 0x1, 0x84) shutdown(0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0x7, 0x41448caa}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800e91f23279eb500003200ecffffffffffffff000007008b0500186a2a0023a3bbe37152cf51140062179d71306ce1d20e607767100000000000"], 0x28}, 0x1, 0x0, 0x0, 0xc100}, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000001280)=0x10) r4 = socket$netlink(0x10, 0x3, 0x14) socket$l2tp(0x2, 0x2, 0x73) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b032200eb1025120212475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000300), 0x4) socket$kcm(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) 7.081635713s ago: executing program 3 (id=5008): close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket(0x14, 0x2, 0x4) sendto$unix(r0, &(0x7f0000000240)="46375f3e775404233a87a86640f2fc5dbed5b1679a0bbed2e89c06d51001", 0x1e, 0x4000000, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x2000073d, &(0x7f0000e68000)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2400e890) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000015c0)={{{@in6=@local, @in=@empty}}, {{@in6=@initdev}, 0x0, @in=@remote}}, &(0x7f00000016c0)=0xe8) getgid() getpid() r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_newroute={0x24, 0x1a, 0x1, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0xa, 0x0, 0x1, 0xc8, 0x0, 0x1000}, [@RTA_UID={0x8, 0x19, r3}]}, 0x24}}, 0x24008800) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001700), &(0x7f0000001740)=0xc) socket$phonet_pipe(0x23, 0x5, 0x2) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000018c0), 0x1, 0x0) getpid() getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001900)={{{@in6=@private1, @in6=@dev}}, {{@in6=@local}, 0x0, @in=@private}}, &(0x7f0000001a00)=0xe8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000201aaaaaaaaaaaaffffffffffff88f71e"], 0x1a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r7, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @rights={{0x14, 0x1, 0x1, [r6]}}], 0x38, 0x4004c}}], 0x1, 0x805) 6.41018119s ago: executing program 2 (id=5016): r0 = socket(0x1d, 0x80802, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x23, 0x2c, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0x5}, {0x10, 0xb}, {0x8, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b0400000000000000000200000050000480240001800b000100736f636b65740000140002800800024000000003080001400000000228000180080001006e6174001c00028008000540000000030800024000950e0208000140000000010900010073797a30000000000900020073797a3200"], 0xa4}}, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)={@val, @void, @eth={@link_local, @local, @void, {@ipv6={0x86dd, @tipc_packet={0x1, 0x6, "b60f76", 0x28, 0x6, 0x1, @local, @empty, {[], @payload_named={{{{{0x28, 0x0, 0x1, 0x1, 0x0, 0xa, 0x2, 0x2, 0x7ff, 0x0, 0x2, 0x3, 0x4, 0x2, 0x4, 0x7, 0x4, 0x4e24, 0x4e23}, 0x0, 0x2}, 0x2, 0x3}}}}}}}}}, 0x62) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r5, 0x1, {0x0, 0xf0, 0x3}, 0xfe}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) sendmmsg$inet6(r0, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000380)='i', 0x1}], 0x1, &(0x7f00000015c0)=ANY=[], 0x218}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4004801) 5.276945676s ago: executing program 2 (id=5021): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_int(r0, 0x29, 0x12, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000240)={'mangle\x00', 0x0, [0x4, 0x38a4, 0x5cc6, 0x2, 0x6]}, &(0x7f0000000300)=0x54) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) writev(r4, &(0x7f0000000540)=[{&(0x7f0000000180)='i', 0x1}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000700)="e2", 0x1, 0x40000, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="b82c", 0x2}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000080) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x4, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendfile(0xffffffffffffffff, r8, 0x0, 0xffffffff000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r10, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r10, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) socket$kcm(0x29, 0x5, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) 5.114591932s ago: executing program 1 (id=5023): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000c80)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [{{0x254, 0x1, {{0x3, 0x5}, 0x7, 0x10, 0x8, 0x8, 0xd, 'syz1\x00', "6ec7e000e393206dca7874e4e3b75b2eafd36c5196ee959bf36667958b7f0d8b", "9c78591af7cd5aabd9e8ec236823ee2365726f6f39fdd4e97575b1b6307bbc6b", [{0x2, 0x6, {0x2, 0x9}}, {0x1, 0x7, {0x1, 0x63}}, {0x200, 0x1, {0x1, 0xfa}}, {0x770, 0x2, {0x2, 0x1}}, {0x642, 0x2, {0x1, 0x1}}, {0x0, 0xa, {0x1, 0x5}}, {0x7, 0x935a, {0x3, 0xffffff23}}, {0x8, 0x7ad, {0x1}}, {0x3, 0x100, {0x3, 0x5}}, {0x0, 0x4, {0x1, 0x9}}, {0x3ff, 0x6, {0x1, 0x5}}, {0x2, 0x1, {0x1, 0xa}}, {0x1, 0xa1f0, {0x3, 0x1ff}}, {0x5, 0x9, {0x2}}, {0x7fff, 0x2, {0x0, 0x2}}, {0xe, 0x0, {0x3, 0x1000}}, {0x0, 0x76c2, {0x3, 0xc}}, {0x0, 0x2, {0x1, 0x2}}, {0xf, 0x7, {0x1, 0x400}}, {0x4, 0x400, {0x2, 0x6}}, {0x5, 0x7, {0x3, 0xd}}, {0x1f, 0x9e, {0x1, 0x1}}, {0x9, 0x800, {0x1, 0xfc00000}}, {0x4dc7, 0x7, {0x3, 0xd3a0}}, {0xb1, 0xa, {0x2, 0x3}}, {0x89, 0x0, {0x1, 0x7fffffff}}, {0xffff, 0xfe1a, {0x0, 0x80000001}}, {0x0, 0x1, {0x1, 0x2cd7a396}}, {0x3, 0x0, {0x1, 0x5}}, {0x8, 0x7e, {0x3, 0x8}}, {0xff81, 0x2, {0x2, 0x200}}, {0x0, 0xff, {0x1, 0x80000001}}, {0x4, 0xfffc, {0x1, 0xaa95}}, {0x1000, 0x4, {0x3, 0x200}}, {0x2, 0x8, {0x1, 0x6}}, {0x5, 0xbe91, {0x0, 0x8e}}, {0x1, 0x5, {0x2, 0xffffff80}}, {0xff, 0x40, {0x1, 0x7ff}}, {0x1, 0x8, {0x2}}, {0x2, 0x5, {0x2, 0x3}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket(0x10, 0x3, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x800, 0x4) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="240000001a005f0400f9f407000904018000000020000000000000", 0x1b) socket$alg(0x26, 0x5, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x7) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r5, 0x0, 0x2, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x130, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0xfc, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0xff, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}, {{0x1c, 0x1, {0x9, 0xf, 0x0, 0x2, 0x1, 0xfe5f, 0x5, 0x5}}, {0xe, 0x2, [0x80, 0x4000, 0x6, 0x1ff, 0x3]}}, {{0x1c, 0x1, {0xf, 0x5, 0xe0, 0x9, 0x2, 0x3, 0x8, 0x7}}, {0x12, 0x2, [0x4, 0x63, 0x5, 0x1, 0x5, 0x401, 0x8]}}, {{0x1c, 0x1, {0x2, 0x3a, 0x4, 0x1e, 0x1, 0x4, 0xc013, 0x4}}, {0xc, 0x2, [0xabdf, 0x25b, 0x1, 0x2]}}, {{0x1c, 0x1, {0x7, 0x2, 0xde, 0xfffffffc, 0x2, 0x8, 0x6, 0x5}}, {0xe, 0x2, [0xe, 0x8, 0x89, 0x4, 0x4]}}, {{0x1c, 0x1, {0x47, 0x9, 0x0, 0xfffffffc, 0x2, 0x9, 0xdc5a, 0x1}}, {0x6, 0x2, [0x3]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x130}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) close(0x4) socket(0x2, 0x80805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'rr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x3, 'nq\x00', 0x5, 0x7, 0x77}, {@remote, 0x4e20, 0x2, 0xcd, 0x0, 0x40}}, 0x44) sendmsg$sock(r4, &(0x7f00000000c0)={&(0x7f0000000400)=@in6={0x2, 0x4e23, 0x0, @dev, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x40800) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4.81068797s ago: executing program 3 (id=5026): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="6802000000050104000000000000000003000004540201000300000005"], 0x268}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000400)="08001efbb07d4c6e", 0x8}], 0x1, &(0x7f0000000900)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}, 0x20008814) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="227528eae7879a7a11b86a2fee5309afaf2cf9eb1e0c27cf5d7e171db3466b768880caaf114cd8", 0x27}, {&(0x7f00000000c0)="3044428b0b3113f766f3ab00f729969637abee37bd9d84be4e1f0aa771cc366d341eb0ee395f3c32250d513045204b5d6a7ce76d3aea", 0x36}, {&(0x7f0000000140)="7129c81a376965731448a147f1ca9887e7bb6ffe824d027bcb1e8913df66d244792aef03c271cf32009f82b301247ccb99d411d78139691f5b997f06c06bf67fbe2dae70c9b8545c2c7e8c6edfc588d96d4530f9a2cf087aef9c354dd915760145fecb170c9347e178f2282f5fa578562701835e3f0f1ee96913ea50fdcf453ed219fcfcc8406fb24f822523f65642d222eb10fed44d44469512c363b1abd8af31d5c17230ef5ff03070bf6e64d3b758c61de91e194ccd7f9fe0a97c2e8fb1c42fa1dd6be981e44a76cff50f20d52182bd1c9831652f452bfa132b117a6eac79fd", 0xe1}, {&(0x7f0000000240)="4d8e9ec404d6990516a8a91e2b101bc5b1b782f90e6b0faca371964c610da48156ada927c1b74996ab2be98b46a73a0c4b2ef8d981596d2047d0f67b9dc510cd9951edb6ab9abe894f889f396ef976d6ef2813d6257bf981df56369eda8caacb968fb78af843ec09ab89492aefc61936aaad3f2820291f154cdfc059b1cb80f0c4a649beb754f34cc7", 0x89}], 0x4, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @private=0xa010101, @remote}}}], 0x20}, 0x40c0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x400000, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) listen(r6, 0x0) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000000180)=0xffffff80, 0x4) ioctl$PPPIOCSMRU1(r5, 0x40047452, &(0x7f0000000480)=0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r7, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="8833bb2c", @ANYRES16=r8, @ANYBLOB="00082dbd7000fcdbdf250700000008000400ae0f0000080002000200000008000400faffffff"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40043) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 4.778714218s ago: executing program 1 (id=5027): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c00893d83ee368b00002e00090000040000000800"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000060000000800000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff90850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r3 = socket(0xa, 0x3, 0xff) shutdown(r3, 0x1) sendmsg$inet6(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0xa, 0xa, 0x7, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000100)="c6e73300000000", 0x7}, {&(0x7f00000006c0)="9e91d91a9cfc796fff655bb539e2ffb332820636ab4a4f2ba30000", 0x1b}, {&(0x7f00000004c0)="e3cb8bc7195b", 0x6}], 0x3}, 0x20004b88) r4 = socket$packet(0x11, 0x2, 0x300) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000001a40)={0x18, 0x14, 0x1, 0x70bd25, 0x25dfdbfc, "", [@typed={0x8, 0x105, 0x0, 0x0, @fd}]}, 0x18}], 0x1, 0x0, 0x0, 0x4000}, 0x40000c4) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) unshare(0x20400) setsockopt$packet_fanout_data(r4, 0x107, 0x16, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x80000}}, @TCA_SKBEDIT_PTYPE={0x2, 0x4}, @TCA_SKBEDIT_PRIORITY={0x0, 0x3, {0xfff1}}, @TCA_SKBEDIT_PRIORITY={0x0, 0x3, {0x9, 0x8}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x0, 0x4, 0xea37}]}, {0x10}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) 2.11811617s ago: executing program 3 (id=5030): socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="1a45274b", @ANYRES16=r1, @ANYBLOB="090200000000fedbdf2501000000050002000a00000014000700ff0000000000000000000000000000010500040001000000"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f00000095"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x14, 0x0, &(0x7f0000000080)="259a001471a76d2688a24e6588a8fb5e0af66395", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r6, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000440)={'gretap0\x00', r6, 0x40, 0x700, 0x7, 0x7, {{0x1e, 0x4, 0x1, 0xc, 0x78, 0x67, 0x0, 0x9, 0x2f, 0x0, @empty, @loopback, {[@timestamp_prespec={0x44, 0x24, 0xa4, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc4}, {@dev={0xac, 0x14, 0x14, 0x25}, 0xffff7fff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@loopback, 0x3}]}, @rr={0x7, 0x27, 0xf7, [@loopback, @local, @loopback, @empty, @private=0xa010102, @multicast2, @rand_addr=0x64010101, @loopback, @multicast1]}, @lsrr={0x83, 0x17, 0xa3, [@rand_addr=0x64010101, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @remote]}]}}}}}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008011}, 0x4880) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.087590068s ago: executing program 1 (id=5032): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000002c0)={{0xffffffffffffffff, &(0x7f0000000000)='/}\x00', 0x400, &(0x7f0000000040)={@_ha_fsid={[0x3, 0x8000]}, {0xf801, 0xfff9, 0x0, 0x5}}, 0x49b, &(0x7f0000000080), &(0x7f00000001c0)=0x7}, {[0x7, 0x55, 0xb5, 0x8]}, 0x5, 0x72, &(0x7f0000000240)=""/114}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}, 0x1, 0x0, 0x0, 0xc010}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x18, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@generic={0x2, 0x3, 0x3, 0x7, 0x7}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x5}, @exit, @jmp={0x5, 0x1, 0x3, 0x1, 0x4, 0xffffffffffffffe0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f00000000c0)='GPL\x00', 0x7ffffff7, 0x0, 0x0, 0x41000, 0x13}, 0x94) 2.033303013s ago: executing program 2 (id=5033): r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4, 0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r5, &(0x7f00000003c0), 0x0}, 0x20) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000300)={r0, &(0x7f0000000100)=',O%!\x00', 0x40000, &(0x7f0000000180)={@align=0xa, {0xb, 0xb, 0x80000000, 0x2ea2}}, 0x7, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000240)=0x2}) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1200000004000000040000001100000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000007c51bbaea200e94be7995573d383149a3c7335428728fe5a84c09e958ea2ae3ad92feae53ea8fe18d4a3939e5ce56115a1d4345a149ec9dfcac9878b040add3563d061ca935453521e5168ebc633f2500c3530d7f48cd5b88fcc92560b115079ab8f09c1592ee14b857235800f8ae1d4543f5ae4f8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000040000701feffffff00000000017c0000040042800c00018006000600800a0000180002801200148004000b0004"], 0x3c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r9}, &(0x7f0000000140), &(0x7f0000000280)=r8}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r9}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000003509010000000a009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d08000000000000850000001b000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 2.026513656s ago: executing program 1 (id=5034): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0xa, [@enum={0x5, 0x1, 0x0, 0x6, 0x4, [{0x1}]}]}, {0x0, [0x61, 0x0, 0x61, 0x2e, 0x71, 0x5f, 0x2e, 0x5f]}}, 0x0, 0x36, 0x0, 0x0, 0x10}, 0x28) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x2000c810}, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x22, &(0x7f00000018c0), 0x4) recvmsg(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/78, 0x4e}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x48, 0x2, [@TCA_CGROUP_EMATCHES={0x44, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x38, 0x3, 0x2}]}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x205, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb4}}, 0x0) 1.875815876s ago: executing program 4 (id=5036): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) (async, rerun: 32) r3 = socket$inet(0x10, 0x3, 0x0) (rerun: 32) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="4c0000001200ff095cab150099a283ff04b8008000f0ffff000000060040150024001d001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab14e39ba9bf6c4387ea1b", 0x4c}], 0x1}, 0x0) (async, rerun: 64) recvmmsg(r3, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0) (rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x5, 0x0) bind$unix(r6, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r6, 0x0) (async, rerun: 64) r7 = socket$unix(0x1, 0x5, 0x0) (rerun: 64) connect$unix(r7, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 32) connect$unix(r7, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000009c0), 0x10, 0xffffffffffffffff}, 0x94) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=@newlink={0x84, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x48, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xafe1}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x1}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x5}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}, @IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r11}]}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async, rerun: 64) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000042000100fffffffffddbdf250200000018003880140003801000668009007e00ac66d0741d000000100001800c00c80002000000000000000400048011d5c989442a65fecfffab9a3047478061dfbd10fd09e4928a4ba410a1c50288183ab7d87a7180b0053514d4fada61d745be866e9eb7bcd12da73d97184f2ae5202961ac25ca22299ea29d2f61828eab652687295f1a9f730a34e0ecf72ad274034a9f84732a7035475ba045a795454a671e8dbe4e8c887829929714"], 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) (rerun: 64) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, r2, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x10, r2, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) 1.65814084s ago: executing program 4 (id=5038): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) shutdown(r2, 0x2000000) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000002e0009000000b33c482bf1baf47a26791015c2fb4cab672364a38096908c89c72c37614d9387201926fb69bee7334bf60edae7017fb725edce430900"/73], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 1.553499719s ago: executing program 3 (id=5040): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="b70200000a000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb4500639100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4872f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bce5a6f087ae8f5e64be2c9d2d29db3d36dd015c7bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67c4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1c6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc952a3fd2c46f3c1cde71a19d1a2982492abaa96665372831210e00d2bfea3b8d188df2eff8d56aaae7d32a2e183722537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d0616a48c7957e122665c8b7e89eddf"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xf, 0x0, &(0x7f0000000280)="e0b9d5a2a00a3c6ffda2e386112192", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000019680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="61050dfa02"], 0xe4) 1.552052597s ago: executing program 4 (id=5041): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRESDEC=r1, @ANYRES8], 0x44}, 0x1, 0x0, 0x0, 0x8090}, 0x24000001) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000680)='cpuacct.usage_sys\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000000000", @ANYRES32=0x0, @ANYBLOB="03000000"], 0x1c}}, 0x884) (async) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000000000", @ANYRES32=0x0, @ANYBLOB="03000000"], 0x1c}}, 0x884) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1400000010000100000000000000000005a65f0d460000000700010000000000000000000300000a003d0f566451bca1ad97b9ae29861a9f694734b61aac03c9b573392d6f432f8e037ebf489a"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1400000010000100000000000000000005a65f0d460000000700010000000000000000000300000a003d0f566451bca1ad97b9ae29861a9f694734b61aac03c9b573392d6f432f8e037ebf489a"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) (async) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x30000}}], 0x1, 0x8000) (async) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x30000}}], 0x1, 0x8000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c9, &(0x7f0000000100)) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x7a31, 0x7ff}, @sack_perm, @sack_perm, @mss={0x2, 0x4}, @window={0x3, 0x800, 0x6}, @window={0x3, 0x1, 0x10}, @sack_perm], 0x8) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000400), 0x10) readv(r6, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=r6], 0x80}}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) accept4(r7, 0x0, 0x0, 0x0) (async) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg$inet6(r8, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0xffffffffffffffea}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)="265d6fec7f7f9a10ac2cec08e3202607532522077c360e52000000000000000000000000000000005bd1738e2f394a9b2bb2dabd11975d27c6bbfb16d43ee83024120ea6415ab716bb91e771fa7a", 0x4e}, {&(0x7f0000000480)="cd4ed31e15d9e2b7a7f56f83e7e6e7a03c92f49c1c5534135e76234232f69a56cfd91d49c04193c62d0cb5afc8b41029323faa79b2b3079bcd1e29e31d0a6f4c45bd8d808399d6ef327fffa0ac0abaaaafc33128083537a1962ae074e3e5844eec1c4c626e892e"}, {&(0x7f0000000500)="4382fdb60430afacf0c023"}, {&(0x7f0000000540)="1860b3ae2708fd77ac1b2e7f8b855c78c231e2c4a6c2a9ea8d1e22cc88184a07868c8cd906b625f0fb69474275d793cc1b0a8d63371c386269a7b478e4cd553fe1722111f7dd8cfb7dab2c531d20509e4bc180635b58365cfab9763a6dda8a0f81b73b7c192fe704c0ff09e73906da4b96ea0b35ee37bbfc42fe705f57"}, {&(0x7f0000000280)="da4f81900b4d88032f1c07d8f2594b7a9926ef226dd0bb8ddc8efcef989ff4e27f6b2a7e03b0dfe6f830b108d140f1d516f102182ff759f379627cb1bd"}], 0x1, 0x0, 0x42}, 0xff03}], 0x2, 0x8000) (async) sendmmsg$inet6(r8, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0xffffffffffffffea}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)="265d6fec7f7f9a10ac2cec08e3202607532522077c360e52000000000000000000000000000000005bd1738e2f394a9b2bb2dabd11975d27c6bbfb16d43ee83024120ea6415ab716bb91e771fa7a", 0x4e}, {&(0x7f0000000480)="cd4ed31e15d9e2b7a7f56f83e7e6e7a03c92f49c1c5534135e76234232f69a56cfd91d49c04193c62d0cb5afc8b41029323faa79b2b3079bcd1e29e31d0a6f4c45bd8d808399d6ef327fffa0ac0abaaaafc33128083537a1962ae074e3e5844eec1c4c626e892e"}, {&(0x7f0000000500)="4382fdb60430afacf0c023"}, {&(0x7f0000000540)="1860b3ae2708fd77ac1b2e7f8b855c78c231e2c4a6c2a9ea8d1e22cc88184a07868c8cd906b625f0fb69474275d793cc1b0a8d63371c386269a7b478e4cd553fe1722111f7dd8cfb7dab2c531d20509e4bc180635b58365cfab9763a6dda8a0f81b73b7c192fe704c0ff09e73906da4b96ea0b35ee37bbfc42fe705f57"}, {&(0x7f0000000280)="da4f81900b4d88032f1c07d8f2594b7a9926ef226dd0bb8ddc8efcef989ff4e27f6b2a7e03b0dfe6f830b108d140f1d516f102182ff759f379627cb1bd"}], 0x1, 0x0, 0x42}, 0xff03}], 0x2, 0x8000) 1.376547253s ago: executing program 0 (id=5042): r0 = socket$kcm(0x21, 0x2, 0x2) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x8) (async) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x8) socket(0x1e, 0x4, 0x0) socket$kcm(0x11, 0x200000000000003, 0x300) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x3, &(0x7f00000002c0)=0x6, 0x4) (async) setsockopt$inet_int(r1, 0x0, 0x3, &(0x7f00000002c0)=0x6, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100), 0x10) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x1) sendto$inet(r1, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@ipv6_newnexthop={0x2c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_FDB={0x4}]}, 0x2c}}, 0x8) (async) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@ipv6_newnexthop={0x2c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_FDB={0x4}]}, 0x2c}}, 0x8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0xf8, 0x1a, 0x1, 0x0, 0x0, {{@in=@local, @in6=@empty, 0x4003, 0x0, 0x3, 0x3}, {@in6=@mcast2, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x402, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x5}, 0x0, 0x0, 0xa, 0x1}, [@extra_flags={0x8, 0x23, 0xfffffff8}]}, 0xf8}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_OPERSTATE={0x5, 0x10, 0xf5}]}, 0x30}}, 0x50) 1.352844562s ago: executing program 4 (id=5043): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0x6, 0xa, 0x20, 0x4d, 0x400}, 0x14) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001600010a00000000000000000a0000000400000008000a0000000000"], 0x20}}, 0x0) (async) sendmsg$NFT_MSG_GETSET(r2, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="5b0100000a0a010100000000000000000500000608000440000000000900020073797a300000000008000a4000000003f4000980f00002802c00018008000140000000030800014000000fff0800014000000001080001400000000a0800011c9733683d41fdee800800014000000008080001400000100008000140000000030800014000700000340001800800014000000001080001400000055b08000140fffffffb080001400000000208000140000004c308000140000000031c0001800800014000000006080001400000077508000140000000024c0001800800014000000c240800014000000002080001400000000108000140000100000800014000000002080001400000000008000140fffffffa0800014000006ee30800014000000000080005f79a24efe2a7b6300550f7615ecf40000000130c000b4000000000000000030c000b40ffffffffffffffff0800034000000040e71ea8afe1e96c2786ff0b496636ed5d1c6ae399c54dd6bf99e2f38c11bb3c354a5ca9d9e375092d5f865653b7a04750f3d250b9f2a071143044d988333701d47d0772ef95b7ab306b5597bdea97353f0f35a49aa6"], 0x14c}, 0x1, 0x0, 0x0, 0x4}, 0x24000000) (async) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005"], 0xfe33) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x12}, 0x4) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0), 0x4) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x24002014}, 0x40010) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e22, @private=0xa010100}}, 0x0, 0x3, 0x7, 0x1, 0x7}, &(0x7f0000000140)=0x98) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r2, 0x8982, &(0x7f0000000500)) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) (async) r7 = accept4$alg(r6, 0x0, 0x0, 0x800) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@getqdisc={0x40, 0x26, 0x10, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x8}, {0x8, 0xffe0}, {0xb, 0x3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x2400c000}, 0x4040090) (async) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000180)={r5, @in={{0x2, 0x4e20, @empty}}}, &(0x7f0000000240)=0x84) 1.281449164s ago: executing program 0 (id=5044): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc5}]}, 0x28}}, 0x0) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000000)=0xffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x5c, r9, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x3f, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x0, @default, 0x4001, @void, @void, @void, @void, @void, @val={0x5, 0x4, {0x9, 0x7e, 0x7, "90"}}, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0x2, 0xb0, 0x5}}, @void, @val={0x72, 0x6}, @void, @void}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x4c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @action={{{}, {}, @device_b}, @sp_mp_confirm={0xf, 0x2, {0x202, @default, {0x1, 0x4, [{0x4, 0x1}, {0x1, 0x1}, {0x16, 0x1}, {0x18}]}, @val={0x72, 0x6}, @void}}}}]}, 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1.27120051s ago: executing program 4 (id=5045): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0xd01, 0x5, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x9, 0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004800}, 0x24004054) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080040"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.250974335s ago: executing program 0 (id=5046): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0xe30, 0xd0, 0x0, 0x2e8, 0x1a0, 0xd0, 0xd60, 0xd60, 0xd60, 0xd60, 0xd60, 0x6, &(0x7f0000000140), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0xc}, @dev={0xfe, 0x80, '\x00', 0xa}, [0xff, 0xffffff00, 0xff000000, 0xff], [0xffffffff, 0xff000000, 0xffffff00, 0xff], 'veth1_to_bond\x00', '\x00', {}, {0xff}, 0x87, 0x6, 0x3, 0x4}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x4}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, [0xffffff00, 0xff, 0xff000000], [0xff000000, 0xff000000, 0x0, 0xff000000], 'wg1\x00', 'macvlan0\x00', {0xff}, {0xff}, 0x2b, 0x1, 0x2, 0x8}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d3], 0x1, 0xd, 0x2}}, @common=@unspec=@nfacct={{0x48}, {'syz1\x00', 0xc}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x100}}}, {{@ipv6={@loopback, @ipv4={'\x00', '\xff\xff', @loopback}, [0xff000000, 0xffffffff, 0xffffff00, 0xff], [0xffffff, 0xffffff00, 0xffffff00], 'ip6tnl0\x00', 'veth1\x00', {}, {0xcf958458166e3871}, 0x11, 0x40, 0x0, 0x18}, 0x0, 0x8b0, 0x8f8, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0xfffffffc, 0x1}, {0x7, 0x1}, {0x2}, {0x1ff, 0x1}, {0x3, 0x1}, {0x1ff}, {0x9}, {0x1}, {0x3, 0x3}, {0x6, 0x2}, {0x6}], [{0xffffff80, 0x7b2a49d8}, {0x5, 0x80000000}, {0xfffffffb, 0x6e}, {0x8, 0x5}, {0xf, 0x6}, {0xf, 0x8}, {0x3, 0x1}, {0x4, 0xfffffffb}, {0x1000, 0x5}, {0xa4, 0x1}, {0xa, 0x626}], 0x8, 0x9}, {[{0x1}, {0x1ff}, {0x7, 0x3}, {0x4, 0x3}, {0x5}, {0x2, 0x2}, {0xab5, 0x3}, {0x7, 0x1}, {0x5, 0x1}, {0x5}, {0xfffffffc}], [{0xcb, 0x1000}, {0x9, 0x5}, {0x2, 0x2bc}, {0x10, 0x8}, {0x1}, {0x7ff, 0x2}, {0xfffffffa, 0x9}, {0x0, 0x9}, {0x80000001, 0xa}, {0x8, 0x5}, {0x7fffffff, 0xffff8001}], 0x6, 0x2}, {[{}, {0x4}, {0x80000000, 0x2}, {0x3, 0x2}, {0x4, 0x1}, {0x542094b6, 0x2}, {0x9454}, {0xffff6f88, 0x3}, {0x40000, 0x3}, {0x1, 0x3}, {0x4}], [{0x9, 0x6}, {0x0, 0xfd7}, {0x0, 0x1}, {0x7, 0xfffffffb}, {0xc52, 0xe}, {0x6, 0x7}, {0x5, 0xf}, {0x10001, 0xd07}, {0x1, 0x2}, {0x3, 0x7}, {0x0, 0x401}], 0x1, 0xb}, {[{0x0, 0x1}, {0xffffffff}, {0x7, 0x3}, {0x101, 0x3}, {0x5, 0x2}, {0x7, 0x2}, {0x5, 0x3}, {0x9, 0x2}, {0xf1d, 0x2ba85e9869dc395a}, {0x8, 0x3}, {0x8, 0x2}], [{0x7, 0x8}, {0x1}, {0x5, 0x997f}, {0x8, 0xfffffff7}, {0x1, 0x4}, {0x7fffffff, 0x2}, {0x80000001, 0xda9}, {0x8, 0x1}, {0x301, 0x40}, {0x203, 0x5}, {0x9, 0x101}], 0x7, 0x1}, {[{0x3ff, 0x1}, {0xfffffffb, 0x2}, {0xb, 0x3}, {0x1, 0x2}, {0x4}, {0x7f}, {0x6, 0x1}, {0x9}, {0xe}, {0x8, 0x1}, {0x3}], [{0x3, 0x9}, {0x4, 0x1ff}, {0xfffff000, 0x4}, {0xff0000, 0x6}, {0x2, 0x1}, {0x3, 0x81}, {0xfffffff9, 0x400}, {0x0, 0xa5}, {0x3, 0x1}, {0x200, 0xfffffffd}, {0x7, 0x4}], 0xb, 0x5}, {[{0x3, 0x1}, {0x3}, {0xa}, {0x80, 0x1}, {0x0, 0x2}, {0x9a, 0x2}, {0x3, 0x2}, {0xfff}, {0x2, 0x2}, {0xfffffffa, 0x3}, {0x3}], [{0x1, 0x7}, {0x5, 0x1}, {0x6, 0x2}, {0x80000001, 0x41b}, {0x9, 0x2a27}, {0x9, 0x8}, {0x6, 0x8}, {0x3, 0x6}, {0x80000, 0x9}, {0xa, 0x200}, {0x6, 0x8}], 0x8, 0x8}, {[{}, {0xd, 0x3}, {0x5, 0x1}, {0x9}, {0x5, 0x3}, {0x7fffffff}, {0x7, 0x2}, {0xf}, {0x2, 0x2}, {0x1}, {0x5, 0x2}], [{0x4, 0x1}, {0x4, 0xffff}, {0xe2a0, 0x80000000}, {0x9, 0x9}, {0x9, 0x7}, {0xd, 0x4}, {0x200, 0x100}, {0x5, 0x4}, {0x7, 0x200}, {0x1, 0x9}, {0x0, 0x3}], 0x7}, {[{0x0, 0x3}, {0xfffffff8, 0x3}, {0x40, 0x2}, {0x5}, {0x7, 0x2}, {0x8000, 0x2}, {0x4, 0x1}, {0x2, 0x2}, {0x9, 0x1}, {0x8}, {0xc7f7, 0x2}], [{0xffff, 0x7}, {0x3, 0x5}, {0x80000001}, {0x5, 0x155f}, {0xd, 0x1}, {0x5}, {0x5, 0x1}, {0x810, 0x2}, {0x6}, {0x0, 0x8001}, {0x2, 0x8}], 0x7, 0x9}, {[{0x3, 0x1}, {0x63, 0x3}, {0x1, 0x1}, {0x9, 0x2}, {0x1, 0x3}, {0x2, 0x2}, {0x6, 0x1}, {0x1}, {0xcf, 0x1}, {0x41d, 0x2}, {0x3ff, 0x2}], [{0x1, 0xd}, {0x91bd, 0x53b}, {0x800, 0xfffffff9}, {0x1, 0x3}, {0xc000000, 0x4}, {0x7}, {0x4, 0xf76}, {0x1, 0x5}, {0x4, 0x3}, {0x9, 0x18}, {0x800, 0x4}], 0x2, 0x5}, {[{0x7fffffff}, {0x80000000}, {0x4, 0x3}, {0x100}, {0x6}, {0x7, 0x3}, {0x9, 0x1}, {0x85f8}, {0xa1ba, 0x3}, {0x8, 0x1}, {0x5, 0x1}], [{0x0, 0x5}, {0x180000, 0x1}, {0x4, 0x9}, {0xffff, 0x7fff}, {0x3ff, 0x7}, {0x0, 0x7f000000}, {0x45a, 0x4}, {0x7}, {0x2, 0x3}, {0xc3, 0xfffff1b1}, {0x1, 0x7f}], 0x7, 0x9}, {[{0x5, 0x3}, {0x0, 0x2}, {0x7, 0x1}, {0x1}, {}, {0x4, 0x2}, {0x3, 0x2}, {0xb, 0x3}, {0x2}, {0xa0}, {0x6, 0x1}], [{0x81, 0x9}, {0xffffffff}, {0x1ff, 0x1ff}, {0x5, 0x2}, {0x7ff, 0x6}, {0x3ff, 0x5}, {0x8, 0xed}, {0x3, 0x6}, {0x9000, 0x400}, {0xffffffff, 0x360}, {0x9, 0x7fffffff}], 0x7, 0x6}], 0x4, 0x1}}, @common=@icmp6={{0x28}, {0x5, "eca6", 0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast1, @ipv6=@local, 0xf, 0x28, 0x7}}}, {{@ipv6={@private0, @private1, [0xffffffff, 0xffffffff, 0xffffff00, 0xffffff00], [0xff, 0x0, 0x0, 0xffffffff], 'wg1\x00', 'vcan0\x00', {0xff}, {0xff}, 0x89, 0x6, 0x2, 0x30}, 0x0, 0x138, 0x180, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'batadv_slave_0\x00', 'geneve1\x00', 0x8, 0x0, 0x7, 0x1, 0x40000000, 0x10000, {0x4}, {0x9}}}, @inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@loopback, @ipv6=@remote, 0x1, 0x5, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xe90) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$FS_IOC_GETFSUUID(r3, 0x80111500, &(0x7f0000000080)) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x0, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x67, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x0, 0xe21, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x2, 0x0, @void}}}}}}}, 0x0) 915.405925ms ago: executing program 2 (id=5047): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="12af787211de8f01a740098856a1b32bc07730d700000000000400000000000000003590351016c4317a83e41ce0957ce29fc5ebcac1cdc3e97b3b8763f40f807de0377c1efc3a024ffe4d0c5a1dc253ab7eb990f4a65b89f959f80f7c976e54b8d68d5872d79e345b56c61ff474d08e", @ANYRES16=r1, @ANYBLOB="010080ffffff000000000100000008000100030000000c00048005000300800000000800020002000000"], 0x30}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x17) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3, 0x13, r2, 0x54c5a000) 783.183738ms ago: executing program 2 (id=5048): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15, 0x10b30}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4028841}, 0x8000) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x10, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) write$cgroup_pid(r3, &(0x7f00000000c0)=r4, 0x12) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000100)='gretap0\x00') 663.574719ms ago: executing program 3 (id=5049): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001800090400000001fedbdf250a0000000000000000000b8008001e0001000000080008"], 0x2c}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x5) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10440}}}}}}]}, 0x48}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r5, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3800000048009d0300000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000000080002000000000014000100ff"], 0x38}}, 0x0) 601.310439ms ago: executing program 0 (id=5050): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x11000) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r0 = socket(0x2b, 0x80801, 0x1) ioctl$sock_ifreq(r0, 0x8920, &(0x7f0000000000)={'team_slave_1\x00', @ifru_names='ip6tnl0\x00'}) setsockopt$inet6_tcp_int(r0, 0x11e, 0x1, &(0x7f0000000280)=0x400, 0x4) 497.009314ms ago: executing program 1 (id=5051): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x7fffffff}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000) 467.244011ms ago: executing program 0 (id=5052): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'macsec0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r3], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x44010, &(0x7f0000000180)={0x11, 0x1, r5, 0x1, 0x12, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xbe72f07fe4a3555}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r0, 0x600, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r7, 0xa7, &(0x7f0000000100)}, 0xd) 412.23513ms ago: executing program 4 (id=5053): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000a80)=""/110, 0x6e}, {0x0}], 0x2, 0xa, 0x6c8) pipe(&(0x7f0000000300)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e00000002000000f7ffffff0700000000000000", @ANYRES32=r3, @ANYBLOB="050000005e60040017000000000058e58bfdc7817d280000002000000000006a0000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0000000001000000000000000100"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r4}, 0x38) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r5) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r6, 0x701, 0x74bd2b, 0x0, {0x5}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008074}, 0x20008004) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="e000000010000b0500000000000200006f6d8864d22a3f2ffaa46c88bcbd0000002b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff282d2d2c"], 0xe0}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0xffffffffffffffb8, 0x1, 0x0, 0x0, @ipv6=@remote}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x20040000}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) read$alg(r10, &(0x7f0000000100)=""/12, 0xc) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000208000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c001180090001"], 0xb0}, 0x1, 0x0, 0x0, 0x40014}, 0x40) syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r5) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYBLOB="e76a8f2c9c6893a8e621a65464a12c55d66a3cbc6b26c8d0e5c5"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r12 = socket$kcm(0x10, 0x2, 0x4) sendto$inet(r0, &(0x7f0000000080)="81efcdc3412b", 0x6, 0x0, 0x0, 0x0) sendmsg$kcm(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03214e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) ioctl$sock_ifreq(r0, 0x89a3, &(0x7f0000000200)={'xfrm0\x00', @ifru_settings={0x3, 0x100, @fr_pvc_info=&(0x7f00000001c0)={0xf, 'pimreg\x00'}}}) 348.879066ms ago: executing program 2 (id=5054): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x6}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r3, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e00000000acc10200000011125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000240)={{r5, &(0x7f0000000040)='\x00', 0x4000, &(0x7f0000000080)={@align=0x100000001, {0x6, 0x5, 0x100, 0x9}}, 0xffff, &(0x7f00000000c0), &(0x7f0000000140)=0x4}, {[0x9, 0x1000, 0x5, 0x1]}, 0x2a, 0x5, &(0x7f0000000180)=""/5}) setsockopt$inet_sctp_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000480)={0x0, 0xfffe, 0x800, "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"}, 0x808) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x40}}, 0x24000080) sendto$packet(0xffffffffffffffff, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53b", 0x27, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r8, 0x1, 0x4, 0x6, @local}, 0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000019c0)={'gretap0\x00', &(0x7f0000001900)={'sit0\x00', r8, 0x1, 0x8, 0x44f, 0x0, {{0x22, 0x4, 0x2, 0x0, 0x88, 0x66, 0x0, 0x8, 0x2f, 0x0, @local, @local, {[@rr={0x7, 0xb, 0xd8, [@broadcast, @empty]}, @generic={0x94, 0xe, "18a30f6017fca697efe7aed1"}, @ssrr={0x89, 0x23, 0x80, [@remote, @broadcast, @loopback, @rand_addr=0x64010100, @multicast2, @private=0xa010102, @rand_addr=0x64010102, @private=0xa010101]}, @timestamp={0x44, 0x10, 0x77, 0x0, 0x2, [0x1000, 0xfffffffc, 0x7]}, @end, @end, @rr={0x7, 0x23, 0xa6, [@dev={0xac, 0x14, 0x14, 0x25}, @dev={0xac, 0x14, 0x14, 0xe}, @local, @multicast1, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @loopback]}]}}}}}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "fe"}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x2, 0x3, 0xfffc}, {0x4, 0x80, 0x2, 0x9}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001580)={{r6, 0xffffffffffffffff}, &(0x7f0000001500), &(0x7f0000001540)='%pK \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001840)={0x6, 0xd, &(0x7f00000015c0)=@raw=[@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xf}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, @map_val={0x18, 0x5, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, r12, 0x0, 0x0, 0x0, 0x200}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}], &(0x7f0000001640)='syzkaller\x00', 0x80, 0x60, &(0x7f0000001680)=""/96, 0x41100, 0x10, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001700)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001740)={0x5, 0x1, 0x2, 0x3}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f00000017c0)=[{0x2, 0x3, 0x8, 0xa}, {0x2, 0x3, 0xa, 0xc}, {0x3, 0x5, 0x2, 0xf}, {0x3, 0x4, 0xf, 0xa}, {0x4, 0x4, 0xc, 0xb}, {0x0, 0x5, 0xc, 0x9}]}, 0x94) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x7fffffff, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) connect$inet6(r2, &(0x7f0000000cc0)={0xa, 0x4e24, 0x4, @private1, 0x1}, 0x1c) r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r14}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r13}, {}, {}, {0x85, 0x0, 0x0, 0xb9}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x17, r14, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r15, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x16, &(0x7f0000000240)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0xe}, @ldst={0x3, 0x2f0b36af27dcd7f, 0x3, 0x7, 0x5, 0xfffffffffffffff0, 0x10}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x3}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10001}}, @generic={0x98, 0x7, 0x5, 0xc1e, 0xd}], &(0x7f0000000340)='syzkaller\x00', 0x2, 0xa8, &(0x7f0000000380)=""/168, 0x41000, 0x50, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0xa, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r12, r13], 0x0, 0x10, 0xffff8000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="5eaa000000000000711010000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5}, 0x94) 217.989537ms ago: executing program 1 (id=5055): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x980, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x7b}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r1) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r3, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44080}, 0x20040050) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f00000003c0)={@empty, @remote, 0x1, "19c3648df4f77d22377d55d9211dbada87f47026c6af6e18c0f9779c824b1c84", 0xc35, 0x6, 0x200, 0x3}, 0x3c) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xe0, r2, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xcc, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7ca7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf812}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd20}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x69958929}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x635c50ca}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa618}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfa3d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3605}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x21e3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb8c7}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf737}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x74c7}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68702597}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2bfd00f5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b378a5a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbcc7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2fec56f8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x98c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f36c9cb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1675}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2cb770d5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ee2843}]}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000001}, 0x1) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0x2, &(0x7f00000005c0)=0xb, 0x4) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1100100}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xa8, r9, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40080}, 0x200008c0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f00000007c0)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x400, 0x6, 0x6, 0x4, 0x8, 0xffffffffffffb23d}, {0x3, 0x804, 0xbc, 0x9f48, 0x974, 0x4}], ['\x00', '\x00', '\x00']}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r10, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, r11, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x8000}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x6}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x7}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x8b7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r10, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x28, r12, 0x0, 0x70bd29, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0xc010}, 0x20040801) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c00), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x38, r13, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x1f, 0x5, @l2={'ib', 0x3a, 'ip6gretap0\x00'}}}}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x24000810) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCADDDLCI(r14, 0x8980, &(0x7f0000000d00)={'hsr0\x00', 0xb}) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x40, 0xd, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x40}}, 0x4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r14, 0x8983, &(0x7f0000000e40)) r15 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002040)={0x6, 0x12, &(0x7f0000000e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0x3f, 0xa, 0xc, 0x7, 0x1}, @exit, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000f40)='syzkaller\x00', 0x3ff, 0x1000, &(0x7f0000000f80)=""/4096, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001f80)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000001fc0)={0x0, 0x10, 0x2, 0xc}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000002000)=[{0x1, 0x1, 0x8, 0x3}, {0x2, 0x3, 0x0, 0x1}, {0x1, 0x2, 0x4, 0xc}], 0x10, 0x6e4f}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002100)={r15, 0x0, 0x25, 0x6, @void}, 0x10) 0s ago: executing program 0 (id=5056): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) kernel console output (not intermixed with test programs): romiscuous mode [ 596.140102][T21029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.164759][T21033] syzkaller1: entered allmulticast mode [ 596.170516][T21029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.193545][T21001] netlink: Conntrack attr has 4 unknown bytes [ 596.444496][T21029] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.452162][T21029] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.683628][T21029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 596.708602][T21029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 597.028440][T21057] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.087538][T13734] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.117136][T13734] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.273703][T13734] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.301459][T13734] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.806052][T21110] __nla_validate_parse: 7 callbacks suppressed [ 597.806070][T21110] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3731'. [ 597.866433][T21115] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3731'. [ 597.926842][T21110] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3731'. [ 598.158894][T21123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3732'. [ 598.197872][T21123] netlink: 'syz.4.3732': attribute type 1 has an invalid length. [ 598.221605][T21123] netlink: 'syz.4.3732': attribute type 6 has an invalid length. [ 598.241254][T21123] netlink: 'syz.4.3732': attribute type 3 has an invalid length. [ 599.306772][T21170] bond5: Unable to set peer notification delay as MII monitoring is disabled [ 599.357327][T21170] bond5 (unregistering): Released all slaves [ 599.456535][T21181] vlan2: left allmulticast mode [ 599.477862][T21181] geneve0: left allmulticast mode [ 599.511556][T21181] vlan2: left promiscuous mode [ 599.562744][T21181] geneve0: left promiscuous mode [ 599.580387][T21181] bridge0: port 3(vlan2) entered disabled state [ 599.611370][T21181] bridge_slave_1: left allmulticast mode [ 599.628912][T21181] bridge_slave_1: left promiscuous mode [ 599.637153][T21196] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 599.637930][T21197] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 599.656785][T21181] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.672656][T21181] bridge_slave_0: left allmulticast mode [ 599.679985][T21197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3747'. [ 599.689010][T21181] bridge_slave_0: left promiscuous mode [ 599.697130][T21198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3747'. [ 599.713344][T21181] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.191805][T21211] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 600.209919][T21211] syzkaller1: linktype set to 778 [ 600.281850][T21220] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3755'. [ 600.420179][T21228] netlink: 'syz.0.3757': attribute type 3 has an invalid length. [ 600.450591][T21231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3759'. [ 600.552971][T21237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3760'. [ 600.693855][T21241] mac80211_hwsim hwsim56 wlan0: entered promiscuous mode [ 600.702364][T21241] mac80211_hwsim hwsim56 wlan0: entered allmulticast mode [ 600.727125][T21248] pimreg: entered allmulticast mode [ 600.853057][T21259] xt_TPROXY: Can be used only with -p tcp or -p udp [ 600.877224][T21255] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3765'. [ 601.162268][T21285] netlink: 'syz.3.3772': attribute type 2 has an invalid length. [ 601.437481][T21299] bond2: ARP target 9.0.0.0 is already present [ 601.445968][T21299] bond2: option arp_ip_target: invalid value (9) [ 601.459654][T21299] bond2 (unregistering): Released all slaves [ 601.618512][T21311] netlink: 'syz.4.3780': attribute type 1 has an invalid length. [ 601.664770][T21308] sit0: entered promiscuous mode [ 601.722186][T21308] netlink: 'syz.1.3779': attribute type 1 has an invalid length. [ 601.969105][T21340] sctp: [Deprecated]: syz.1.3785 (pid 21340) Use of int in max_burst socket option. [ 601.969105][T21340] Use struct sctp_assoc_value instead [ 601.985886][T21320] 8021q: adding VLAN 0 to HW filter on device .` [ 602.028185][T21320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.761136][ T7466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.773514][ T7468] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.781916][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.796111][T13734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.805474][T13734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.820208][ T7466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.840341][T19567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.857126][T19565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.870964][T14679] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.879150][ T7204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.912375][T21320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 602.921938][T21320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 602.935596][T21320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 602.946296][T21320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 603.349205][T21367] __nla_validate_parse: 5 callbacks suppressed [ 603.349250][T21367] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3794'. [ 603.355561][T21365] tipc: Started in network mode [ 603.355587][T21365] tipc: Node identity 869b9bde9ab8, cluster identity 4711 [ 603.378283][T21365] tipc: Enabled bearer , priority 0 [ 603.592606][T21365] syzkaller0: entered promiscuous mode [ 603.606008][T21365] syzkaller0: entered allmulticast mode [ 603.619083][T21365] tipc: Resetting bearer [ 603.666392][T21364] tipc: Resetting bearer [ 604.578826][T21397] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3800'. [ 604.639980][T21397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3800'. [ 605.437198][T21406] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 606.854628][T21364] tipc: Disabling bearer [ 606.865465][ T5755] tipc: Node number set to 472095710 [ 607.014781][T21419] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3803'. [ 607.065103][T21419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3803'. [ 607.128739][T21431] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3809'. [ 607.128739][T21420] tipc: Enabled bearer , priority 0 [ 607.129409][T21420] netlink: 'syz.3.3805': attribute type 1 has an invalid length. [ 607.179450][T21420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3805'. [ 607.204696][T21420] syzkaller0: entered promiscuous mode [ 607.218507][T21420] syzkaller0: entered allmulticast mode [ 607.263956][T21418] tipc: Resetting bearer [ 607.324604][T21418] tipc: Disabling bearer [ 607.417979][T21443] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 607.454843][T21444] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3810'. [ 607.464027][T21445] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3811'. [ 607.572953][T21448] nbd: couldn't find a device at index 0 [ 607.575776][T21441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3811'. [ 607.604704][T21441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 607.627279][T21441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 607.864399][T21465] vxcan0: entered allmulticast mode [ 607.970957][T21468] net_ratelimit: 17 callbacks suppressed [ 607.970976][T21468] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.987384][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.090979][ T7204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.141272][T21476] : renamed from bond_slave_0 (while UP) [ 608.258913][T21487] syzkaller1: entered promiscuous mode [ 608.269390][T21487] syzkaller1: entered allmulticast mode [ 608.336162][ T7475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.345313][ T7204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.354920][T19567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.511442][T21501] __nla_validate_parse: 3 callbacks suppressed [ 608.511464][T21501] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3828'. [ 608.720349][T21511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3832'. [ 608.761466][T21514] sctp: [Deprecated]: syz.2.3833 (pid 21514) Use of int in max_burst socket option deprecated. [ 608.761466][T21514] Use struct sctp_assoc_value instead [ 608.881228][T21512] nbd1: detected capacity change from 0 to 63 [ 608.890387][T21518] block nbd1: NBD_DISCONNECT [ 608.902116][T21518] block nbd1: Disconnected due to user request. [ 608.938573][T16818] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 608.952315][T16818] Buffer I/O error on dev nbd1, logical block 0, async page read [ 608.967134][T21518] block nbd1: shutting down sockets [ 608.977393][T16818] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 608.986908][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.997422][T16818] Buffer I/O error on dev nbd1, logical block 1, async page read [ 609.032392][T21525] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3834'. [ 609.052930][ T1694] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 609.066646][ T1694] Buffer I/O error on dev nbd1, logical block 2, async page read [ 609.082010][ T1694] Buffer I/O error on dev nbd1, logical block 3, async page read [ 609.092435][T16818] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 609.128507][T16818] Buffer I/O error on dev nbd1, logical block 0, async page read [ 609.165179][T16818] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 609.174902][T16818] Buffer I/O error on dev nbd1, logical block 1, async page read [ 609.183256][T16818] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 609.197737][T16818] Buffer I/O error on dev nbd1, logical block 2, async page read [ 609.218838][T16818] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 609.229022][T16818] Buffer I/O error on dev nbd1, logical block 3, async page read [ 609.237365][T16818] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 609.251515][T16818] Buffer I/O error on dev nbd1, logical block 0, async page read [ 609.261790][T16818] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 609.271038][T16818] Buffer I/O error on dev nbd1, logical block 1, async page read [ 609.296514][T16818] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 609.327648][T16818] ldm_validate_partition_table(): Disk read failed. [ 609.372663][T16818] Dev nbd1: unable to read RDB block 0 [ 609.404666][T16818] nbd1: unable to read partition table [ 609.423853][T21529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3836'. [ 609.456133][T19567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.462849][T16818] ldm_validate_partition_table(): Disk read failed. [ 609.522814][T16818] Dev nbd1: unable to read RDB block 0 [ 609.552016][T16818] nbd1: unable to read partition table [ 609.825986][T21522] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 609.849291][T21522] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 609.882191][T21522] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 610.058145][T21548] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3840'. [ 610.069718][T21549] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3840'. [ 610.164812][T21557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3843'. [ 610.174229][T21557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3843'. [ 610.297357][T21566] netlink: 'syz.4.3844': attribute type 1 has an invalid length. [ 610.334896][T21566] bond9: entered promiscuous mode [ 610.342617][T21566] 8021q: adding VLAN 0 to HW filter on device bond9 [ 610.438112][T21576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.448794][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.479044][T21568] syzkaller0: entered promiscuous mode [ 610.485095][T21568] syzkaller0: entered allmulticast mode [ 610.568900][T21570] syzkaller0: entered promiscuous mode [ 610.583151][T21570] syzkaller0: entered allmulticast mode [ 611.053242][T21588] netlink: 'syz.2.3848': attribute type 21 has an invalid length. [ 611.061656][T21588] netlink: 'syz.2.3848': attribute type 22 has an invalid length. [ 611.069615][T21588] netlink: 'syz.2.3848': attribute type 23 has an invalid length. [ 611.077734][T21588] netlink: 'syz.2.3848': attribute type 25 has an invalid length. [ 611.086251][T21588] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3848'. [ 611.499756][T21605] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3852'. [ 611.717581][T21612] netlink: 'syz.3.3853': attribute type 41 has an invalid length. [ 613.269328][T21602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 613.276788][T21602] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 613.318949][T21602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 613.342552][T21602] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 613.611334][T19567] net_ratelimit: 10 callbacks suppressed [ 613.611352][T19567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.938400][T21657] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 614.025546][T21664] __nla_validate_parse: 6 callbacks suppressed [ 614.025564][T21664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3871'. [ 614.156346][T21673] netlink: 'syz.3.3874': attribute type 2 has an invalid length. [ 614.237407][T21676] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 614.293777][T21676] mac80211_hwsim hwsim61 wlan0: entered promiscuous mode [ 614.301615][T21676] mac80211_hwsim hwsim61 wlan0: entered allmulticast mode [ 614.417592][T21682] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 614.429038][T21682] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 614.435903][T21682] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 614.442694][T21682] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 614.449440][T21682] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 614.456249][T21682] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 614.463119][T21682] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 614.469907][T21682] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 615.387313][T21702] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 615.517633][T21706] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3884'. [ 615.643937][T21716] erspan0: entered promiscuous mode [ 615.656030][T21711] syzkaller1: entered promiscuous mode [ 615.678141][T21711] syzkaller1: entered allmulticast mode [ 615.807774][ T7475] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.832374][ T7475] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.859966][T21722] sctp: [Deprecated]: syz.4.3890 (pid 21722) Use of int in max_burst socket option deprecated. [ 615.859966][T21722] Use struct sctp_assoc_value instead [ 615.877773][T21727] netlink: 'syz.1.3891': attribute type 4 has an invalid length. [ 615.881603][ T7475] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.916848][ T7475] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.939877][T21729] netlink: 'syz.1.3891': attribute type 4 has an invalid length. [ 616.010724][T21731] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3894'. [ 616.035487][T21731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3894'. [ 616.088121][T21740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3898'. [ 616.145580][T21746] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3898'. [ 616.157068][T21738] can: request_module (can-proto-5) failed. [ 616.174883][T21740] bond3: entered promiscuous mode [ 616.180795][T21740] 8021q: adding VLAN 0 to HW filter on device bond3 [ 616.193059][T21744] netlink: 280 bytes leftover after parsing attributes in process `syz.2.3899'. [ 616.282799][T21748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3900'. [ 616.575642][T21772] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 616.606110][T21772] bond4 (unregistering): Released all slaves [ 616.688278][T21761] sctp: [Deprecated]: syz.3.3900 (pid 21761) Use of int in max_burst socket option. [ 616.688278][T21761] Use struct sctp_assoc_value instead [ 616.781265][T21777] macsec0: entered promiscuous mode [ 617.068112][T21796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3911'. [ 617.154048][T21797] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3912'. [ 617.312206][T21763] macsec0: left promiscuous mode [ 617.364021][T21810] debugfs: '1^!Y [ 617.364021][T21810] 3UH5rBn\' already exists in 'ieee80211' [ 617.817074][T21851] netlink: 'syz.1.3924': attribute type 11 has an invalid length. [ 617.929285][T21851] syzkaller0: entered promiscuous mode [ 617.990248][T21851] syzkaller0: entered allmulticast mode [ 618.812618][ T7204] net_ratelimit: 3341 callbacks suppressed [ 618.812631][ T7204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.851519][T19569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.900521][ T7204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.131393][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.772283][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.931385][ T7204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.982646][T19569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.011040][T19569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.171141][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.330873][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 625.051376][T19567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.091051][T19569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.131499][T19569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.210761][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.171566][T19569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.210065][ T7204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.250141][T14678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.258297][T19569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.300893][T19569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.370142][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.340232][T19567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.291972][T14678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.369968][T19567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.411387][T19567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.449922][T19569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.330163][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.491458][T19567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.531292][T19567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.569950][T19569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.369943][T14678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.609856][T19567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.651311][T19567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.970114][T14678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.691351][T19569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.409962][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.739907][T19567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.770981][T19569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.810539][T19567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.449927][T14678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.851270][T19567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.892055][T19567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.931400][T19569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.490023][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.969999][T19567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.952941][ T5779] bridge_slave_0: left allmulticast mode [ 649.958610][ T5779] bridge_slave_0: left promiscuous mode [ 649.967481][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.993383][ T5779] pim6reg: left allmulticast mode [ 650.011645][T19565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.217793][ T5779] team0: Port device geneve1 removed [ 650.254008][ T5779] bond1 (unregistering): (slave bridge2): Removing an active aggregator [ 650.264905][ T5779] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 650.286041][ T5779] bond3 (unregistering): (slave bridge4): Releasing backup interface [ 650.316968][ T5779] bond8 (unregistering): (slave bridge7): Releasing backup interface [ 650.327435][ T5779] bridge7 (unregistering): left promiscuous mode [ 650.341533][ T5779] team0: Port device bridge9 removed [ 650.353660][ T5779] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 650.363458][ T5779] bond_slave_0: left promiscuous mode [ 650.371236][ T5779] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 650.380566][ T5779] bond_slave_1: left promiscuous mode [ 650.387721][ T5779] bond0 (unregistering): (slave wlan0): Releasing backup interface [ 650.396516][ T5779] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 650.403795][ T5779] bond0 (unregistering): Released all slaves [ 650.413965][ T5779] bond1 (unregistering): Released all slaves [ 650.427517][ T5779] bond2 (unregistering): Released all slaves [ 650.441923][ T5779] bond3 (unregistering): Released all slaves [ 650.461682][ T5779] bond4 (unregistering): Released all slaves [ 650.474961][ T5779] bond5 (unregistering): Released all slaves [ 650.487975][ T5779] bond6 (unregistering): Released all slaves [ 650.502476][ T5779] bond7 (unregistering): Released all slaves [ 650.516256][ T5779] bond8 (unregistering): Released all slaves [ 650.544205][ T5779] bond9 (unregistering): Released all slaves [ 650.569896][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.745372][ T5779] tipc: Left network mode [ 650.821095][ T5779] IPVS: stopping backup sync thread 8252 ... [ 651.051856][T19567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.160657][ T5779] batman_adv: batadv0: Removing interface: macvtap1 [ 651.371362][ T5779] veth1_to_hsr: left promiscuous mode [ 651.383827][ T5779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 651.392095][ T5779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 651.400646][ T5779] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 651.407716][ T5779] batman_adv: batadv0: Removing interface: syzkaller0 [ 651.424940][ T5779] veth0_macvtap: left promiscuous mode [ 651.430685][ T5779] veth1_vlan: left promiscuous mode [ 651.545633][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.970728][ T5779] team0 (unregistering): Port device team_slave_1 removed [ 652.089832][T19569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.577063][ T5779] IPVS: stop unused estimator thread 0... [ 653.131875][T19567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.169915][T19569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.569820][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.209838][T19567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.092619][T21985] tipc: Enabled bearer , priority 0 [ 656.116151][T21985] syzkaller0: entered promiscuous mode [ 656.117826][ T5755] IPVS: starting estimator thread 0... [ 656.129101][T21990] netlink: 'syz.4.3932': attribute type 1 has an invalid length. [ 656.136936][T21985] syzkaller0: entered allmulticast mode [ 656.137406][T21990] __nla_validate_parse: 3 callbacks suppressed [ 656.137419][T21990] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3932'. [ 656.180932][T21990] syzkaller1: entered promiscuous mode [ 656.186553][T21990] syzkaller1: entered allmulticast mode [ 656.219840][T21992] IPVS: using max 29 ests per chain, 69600 per kthread [ 656.235807][T21996] x_tables: duplicate underflow at hook 2 [ 656.272626][T19567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.295501][T21985] tipc: Resetting bearer [ 656.320532][T21984] tipc: Resetting bearer [ 656.358769][T21984] tipc: Disabling bearer [ 656.647137][T22008] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 656.682267][T22009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3935'. [ 657.086379][T22025] netlink: 'syz.2.3940': attribute type 21 has an invalid length. [ 657.096038][T22025] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3940'. [ 657.243415][T22036] lo: left promiscuous mode [ 657.251258][T22036] lo: left allmulticast mode [ 657.312677][T19565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.354016][T22040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 657.592249][T22060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3944'. [ 657.611474][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.634902][T22052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3947'. [ 657.676772][T22063] netlink: 'syz.4.3948': attribute type 5 has an invalid length. [ 657.693753][T22063] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3948'. [ 657.761473][T22063] xt_nat: multiple ranges no longer supported [ 658.121495][T22082] netlink: 'syz.1.3951': attribute type 1 has an invalid length. [ 658.121818][T22084] netlink: 'syz.1.3951': attribute type 1 has an invalid length. [ 658.283075][T22082] 8021q: adding VLAN 0 to HW filter on device bond5 [ 658.309055][T22079] tap0: tun_chr_ioctl cmd 1074025677 [ 658.330298][T22079] tap0: linktype set to 773 [ 658.332372][T19565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.432337][T22094] tipc: Enabled bearer , priority 0 [ 658.506139][T22093] tipc: Disabling bearer [ 658.981799][T22115] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3958'. [ 659.120872][T22110] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 659.142258][T22110] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 659.383187][T19569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.466176][T22128] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3961'. [ 659.553377][T22127] nbd: nbd2 already in use [ 659.580291][T22127] block nbd2: NBD_DISCONNECT [ 659.605719][T22127] block nbd2: Send disconnect failed -32 [ 659.628849][T22127] block nbd2: shutting down sockets [ 659.695839][T22124] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3961'. [ 659.952496][T22141] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3963'. [ 659.974589][T22142] netlink: 'syz.4.3963': attribute type 7 has an invalid length. [ 659.999715][T22142] netlink: 'syz.4.3963': attribute type 8 has an invalid length. [ 660.010113][T22141] netlink: 'syz.4.3963': attribute type 7 has an invalid length. [ 660.051249][T22141] netlink: 'syz.4.3963': attribute type 8 has an invalid length. [ 660.176283][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.215260][T22153] tipc: Started in network mode [ 660.233914][T22153] tipc: Node identity 2a4370a2e3ae, cluster identity 4711 [ 660.254731][T22153] tipc: Enabled bearer , priority 0 [ 660.308751][T22152] tipc: Disabling bearer [ 660.410201][T19567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.529333][ T59] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.556491][ T59] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.589073][T22175] netlink: 'syz.1.3973': attribute type 1 has an invalid length. [ 660.595885][ T59] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.606957][ T59] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.650423][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.918774][T22190] veth0: entered promiscuous mode [ 660.933518][T22182] veth0: left promiscuous mode [ 661.184060][T22207] __nla_validate_parse: 12 callbacks suppressed [ 661.184080][T22207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3983'. [ 661.194896][T22208] netlink: 'syz.4.3982': attribute type 1 has an invalid length. [ 661.300912][T22215] netlink: 476 bytes leftover after parsing attributes in process `syz.1.3983'. [ 661.406746][T22211] bond6 (unregistering): Released all slaves [ 661.426914][T22205] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3982'. [ 661.450321][T19567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.528847][T22184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3975'. [ 661.626205][T22204] 8021q: adding VLAN 0 to HW filter on device bond12 [ 661.647968][T22204] bond11: (slave bond12): making interface the new active one [ 661.667703][T22204] bond11: (slave bond12): Enslaving as an active interface with an up link [ 661.715910][T22208] bond11: (slave gretap3): Enslaving as a backup interface with an up link [ 661.742612][T22205] 8021q: adding VLAN 0 to HW filter on device bond11 [ 661.794506][T22223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3985'. [ 661.868561][T22234] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3986'. [ 662.086674][T22257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3988'. [ 662.491421][T19567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.042003][T22310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4001'. [ 663.230333][T22310] bond2 (unregistering): Released all slaves [ 663.253130][T22302] tipc: Enabled bearer , priority 0 [ 663.357511][T22298] tipc: Disabling bearer [ 663.530683][T19567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.643217][T22335] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4006'. [ 663.652804][T22335] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 663.690624][T22250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.912972][T22345] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 663.939025][T22325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4003'. [ 663.970999][T22351] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0 [ 663.973840][T22325] netlink: 'syz.3.4003': attribute type 4 has an invalid length. [ 663.994333][T22348] Cannot find del_set index 14804 as target [ 664.569905][T19569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.765060][T22368] x_tables: duplicate underflow at hook 1 [ 665.619814][T19569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.616339][T22377] netlink: 'syz.0.4018': attribute type 3 has an invalid length. [ 666.655372][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.731552][T22250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.753394][T22384] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4019'. [ 667.057472][T22394] sit0: entered promiscuous mode [ 667.083479][T22394] netlink: 'syz.3.4022': attribute type 1 has an invalid length. [ 667.127875][T22394] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4022'. [ 667.158488][T22394] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4022'. [ 667.565415][T22414] syzkaller1: entered promiscuous mode [ 667.589161][T22414] syzkaller1: entered allmulticast mode [ 667.614624][T22414] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 667.649757][T22414] netlink: 'syz.3.4026': attribute type 4 has an invalid length. [ 667.672099][T22414] netlink: 'syz.3.4026': attribute type 8 has an invalid length. [ 667.689917][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.712218][T22414] netlink: 212 bytes leftover after parsing attributes in process `syz.3.4026'. [ 667.713928][T22425] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4026'. [ 668.071939][T22436] vlan2: entered promiscuous mode [ 668.083423][T22436] bond_slave_1: entered promiscuous mode [ 668.762160][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.865746][T22467] netlink: 'syz.2.4033': attribute type 1 has an invalid length. [ 668.895684][T22467] netlink: 216 bytes leftover after parsing attributes in process `syz.2.4033'. [ 669.373640][T22485] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4037'. [ 669.419164][T22485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4037'. [ 669.582673][T22485] bond5: entered promiscuous mode [ 669.588317][T22485] 8021q: adding VLAN 0 to HW filter on device bond5 [ 669.596660][T22496] bond0: option min_links: invalid value (18446744073709551614) [ 669.609213][T22496] bond0: option min_links: allowed values 0 - 2147483647 [ 669.691933][T22496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4040'. [ 669.771208][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.779401][T22248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.788237][T22250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.851340][T22507] netlink: 'syz.0.4044': attribute type 1 has an invalid length. [ 669.860584][T22505] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4043'. [ 670.062741][T22507] 8021q: adding VLAN 0 to HW filter on device bond4 [ 670.192884][T22531] openvswitch: netlink: Actions may not be safe on all matching packets [ 670.230960][T22521] bond4: (slave geneve3): making interface the new active one [ 670.244108][T22521] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 670.261460][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.261940][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.294035][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.330414][T22535] netlink: 'syz.2.4051': attribute type 12 has an invalid length. [ 670.348941][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.368595][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.524769][T22540] macsec0: entered promiscuous mode [ 670.713537][T22540] veth1_macvtap: left promiscuous mode [ 670.786987][T22540] macsec0 (unregistering): left promiscuous mode [ 670.823462][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.076622][T22556] netlink: 'syz.2.4057': attribute type 1 has an invalid length. [ 671.289555][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.406580][T22564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.439826][T22564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.459865][T22564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.486945][T22564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.517838][T22564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.533365][T22585] netlink: 'syz.2.4065': attribute type 11 has an invalid length. [ 671.568187][T22564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.618278][T22564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.649322][T22592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.893455][T22599] netlink: 'syz.2.4068': attribute type 10 has an invalid length. [ 671.928536][T22599] __nla_validate_parse: 65 callbacks suppressed [ 671.928555][T22599] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4068'. [ 671.990645][T22599] team0: Port device geneve1 added [ 672.250950][T22619] ip6gre1: entered promiscuous mode [ 672.266443][T22619] ip6gre1: entered allmulticast mode [ 672.285639][T13734] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 672.311056][T22248] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 672.322794][T13734] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 672.376851][T22624] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4074'. [ 672.521357][T22248] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 672.791639][T22640] bond5: Unable to set down delay as MII monitoring is disabled [ 672.846955][T22640] bond5 (unregistering): Released all slaves [ 672.897792][T22661] netlink: 'syz.3.4085': attribute type 2 has an invalid length. [ 672.906099][T22661] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4085'. [ 673.004771][T22668] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4086'. [ 673.057962][T22668] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.4086'. [ 673.179613][T22678] netlink: 488 bytes leftover after parsing attributes in process `syz.2.4089'. [ 673.204452][T22678] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.4089'. [ 673.210490][T22251] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 673.304424][T22683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4089'. [ 673.421096][T22686] sctp: [Deprecated]: syz.4.4092 (pid 22686) Use of int in max_burst socket option deprecated. [ 673.421096][T22686] Use struct sctp_assoc_value instead [ 673.526937][T22689] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4094'. [ 673.547617][T22689] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4094'. [ 673.876359][T22705] sit0: left promiscuous mode [ 673.928568][T22708] netlink: 'syz.1.4101': attribute type 1 has an invalid length. [ 673.941869][T22705] veth1_to_batadv: left promiscuous mode [ 674.077776][T22705] veth1_to_batadv: left allmulticast mode [ 674.098247][T22705] mac80211_hwsim hwsim56 wlan0: left promiscuous mode [ 674.105595][T22705] mac80211_hwsim hwsim56 wlan0: left allmulticast mode [ 674.114188][T22705] geneve2: left promiscuous mode [ 674.119335][T22705] geneve2: left allmulticast mode [ 674.126034][T22705] gretap1: left allmulticast mode [ 674.156356][T22705] sit1: left allmulticast mode [ 674.169184][T22705] bond3: left promiscuous mode [ 674.181070][T22721] netlink: 'syz.2.4104': attribute type 10 has an invalid length. [ 674.213276][T22705] ip6gre1: left promiscuous mode [ 674.219820][T22705] ip6gre1: left allmulticast mode [ 674.267147][T22708] bond6: entered allmulticast mode [ 674.292808][T22714] veth7: entered promiscuous mode [ 674.307072][T22714] bond6: (slave veth7): Enslaving as an active interface with a down link [ 674.327368][T22711] bond6: left allmulticast mode [ 674.338112][T22711] 8021q: adding VLAN 0 to HW filter on device bond6 [ 674.350836][ T7466] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.360070][ T7466] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.369142][ T7466] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.397572][ T7466] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.446730][T22725] geneve2: entered promiscuous mode [ 674.458596][ T5779] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.463634][T22737] netlink: 'syz.3.4109': attribute type 4 has an invalid length. [ 674.471003][ T5779] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.494825][ T5779] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.518084][T22742] netlink: 'syz.3.4109': attribute type 4 has an invalid length. [ 674.527700][ T5779] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.621192][ T5779] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 45007 - 0 [ 674.633362][ T5779] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 45007 - 0 [ 674.660678][ T5779] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 45007 - 0 [ 674.682524][ T5779] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 45007 - 0 [ 674.767136][T22761] netlink: 'syz.1.4115': attribute type 6 has an invalid length. [ 675.174374][T22784] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 675.216723][T22784] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 675.839786][T22814] netlink: 'syz.2.4126': attribute type 1 has an invalid length. [ 676.013248][T22804] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.020500][T22804] bridge0: port 2(bridge_slave_1) entered listening state [ 676.098179][T22804] hsr0: left promiscuous mode [ 676.106182][T22804] net_ratelimit: 201 callbacks suppressed [ 676.106200][T22804] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 677.119233][T22854] __nla_validate_parse: 13 callbacks suppressed [ 677.119251][T22854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4136'. [ 677.193196][T22863] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4139'. [ 677.221521][T22861] xt_CT: You must specify a L4 protocol and not use inversions on it [ 677.494421][T22889] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4147'. [ 677.554883][T22894] tipc: Enabled bearer , priority 0 [ 677.670795][T22892] tipc: Disabling bearer [ 677.849820][T22911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4154'. [ 677.924022][T22918] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 678.032200][T22926] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 678.060169][T22926] bond3 (unregistering): Released all slaves [ 678.201687][T22938] .`: (slave bond_slave_0): Releasing backup interface [ 678.258515][T22938] .`: (slave bond_slave_1): Releasing backup interface [ 678.292486][T22938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 678.302651][T22938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 678.312513][T22938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 678.320675][T22938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 678.334184][T22950] netlink: 'syz.3.4160': attribute type 10 has an invalid length. [ 678.334266][T22938] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 678.508333][T22957] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4167'. [ 678.517845][T22957] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4167'. [ 678.538704][T22957] netlink: 49 bytes leftover after parsing attributes in process `syz.2.4167'. [ 678.549027][T22957] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4167'. [ 678.558329][T22957] netlink: 49 bytes leftover after parsing attributes in process `syz.2.4167'. [ 678.571384][T22957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4167'. [ 678.662675][T22960] netlink: 'syz.2.4168': attribute type 268 has an invalid length. [ 678.832614][T22970] netlink: 'syz.2.4170': attribute type 1 has an invalid length. [ 678.908255][T22970] 8021q: adding VLAN 0 to HW filter on device bond3 [ 679.272297][T22993] smc: adding net device rose0 with user defined pnetid SYZ2 [ 679.357061][T22998] IPVS: stopping master sync thread 22351 ... [ 679.506033][T22998] hsr_slave_1 (unregistering): left promiscuous mode [ 679.600734][T23015] tipc: Enabling of bearer rejected, failed to enable media [ 679.707056][ T7466] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.732160][ T7466] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.764477][ T7466] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.789162][ T7466] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.810669][T23027] xt_HMARK: spi-set and port-set can't be combined [ 680.109121][T22993] smc: removing net device rose0 with user defined pnetid SYZ2 [ 680.952854][T23096] IPVS: set_ctl: invalid protocol: 94 127.0.0.1:20001 [ 681.299956][ T29] audit: type=1804 audit(1781030786.403:16): pid=23120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4213" name="/newroot/191/cgroup.controllers" dev="tmpfs" ino=997 res=1 errno=0 [ 681.335416][ T29] audit: type=1800 audit(1781030786.403:17): pid=23120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4213" name="cgroup.controllers" dev="tmpfs" ino=997 res=0 errno=0 [ 681.385685][ T29] audit: type=1804 audit(1781030786.443:18): pid=23120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4213" name="/newroot/191/cgroup.controllers" dev="tmpfs" ino=997 res=1 errno=0 [ 681.514588][T23132] netlink: 'syz.1.4216': attribute type 14 has an invalid length. [ 681.917067][T23152] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 681.949832][T23159] netlink: 'syz.4.4222': attribute type 1 has an invalid length. [ 682.095428][T23159] bond13: entered promiscuous mode [ 682.101118][T23159] bond13: entered allmulticast mode [ 682.106768][T23159] 8021q: adding VLAN 0 to HW filter on device bond13 [ 682.124217][T23164] erspan1: entered allmulticast mode [ 682.152345][T23166] bond5: entered allmulticast mode [ 682.204335][T23172] macvlan4: entered promiscuous mode [ 682.222817][T23172] macvlan4: entered allmulticast mode [ 682.237214][T23166] xt_hashlimit: max too large, truncated to 1048576 [ 682.319882][T23172] bond5: (slave macvlan4): Opening slave failed [ 682.489083][T23189] __nla_validate_parse: 15 callbacks suppressed [ 682.489101][T23189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4224'. [ 682.703708][T23203] netlink: 'syz.4.4227': attribute type 13 has an invalid length. [ 683.189253][T23224] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4231'. [ 683.230313][T23218] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4229'. [ 683.277536][T23218] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4229'. [ 683.287260][T23218] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4229'. [ 683.305956][T23218] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4229'. [ 683.321901][T23218] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4229'. [ 683.360062][T23218] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4229'. [ 683.387656][T23218] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4229'. [ 683.428604][T23218] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4229'. [ 683.453146][T23243] xt_policy: output policy not valid in PREROUTING and INPUT [ 683.471367][T23244] netlink: 'syz.1.4236': attribute type 13 has an invalid length. [ 683.677307][ T7475] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.700205][ T59] bond1: (slave ip6gretap1): link status up again after 0 ms [ 683.728320][ T59] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 683.778209][ T7475] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.798415][ T7475] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.837682][ T7475] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.868402][T23255] tipc: Enabled bearer , priority 0 [ 683.900657][T23256] tipc: Enabling of bearer rejected, already enabled [ 683.928721][T23251] syzkaller0: entered promiscuous mode [ 683.949775][T23251] syzkaller0: entered allmulticast mode [ 683.963463][T23255] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 684.018987][T23251] tipc: Resetting bearer [ 684.035428][T23250] tipc: Resetting bearer [ 684.080024][T23250] tipc: Disabling bearer [ 684.109644][ T59] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 684.241983][ T7475] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 684.335024][T23279] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 684.335603][ T7475] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 684.377825][ T7475] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 684.421653][ T7475] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 684.449328][ T7475] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 684.480363][ T35] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 684.537999][T23284] syz_tun: entered allmulticast mode [ 684.590787][T23284] bond0: entered promiscuous mode [ 684.606279][T23284] bond_slave_0: entered promiscuous mode [ 684.623026][T23284] bond_slave_1: entered promiscuous mode [ 684.669806][ T7475] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 684.800321][ T7466] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 685.335582][T23316] tap0: tun_chr_ioctl cmd 1074025677 [ 685.351746][T23316] tap0: linktype set to 6 [ 685.509555][ T7475] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 686.144284][T23338] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.161324][T23340] netlink: 'syz.0.4265': attribute type 10 has an invalid length. [ 686.167153][T23338] bridge0: entered allmulticast mode [ 686.257178][T23342] team0: Port device team_slave_0 removed [ 686.309005][T23340] team0: entered promiscuous mode [ 686.341730][T23340] team_slave_1: entered promiscuous mode [ 686.354356][T23340] team0: entered allmulticast mode [ 686.366537][T23340] team_slave_1: entered allmulticast mode [ 686.383456][T23340] 8021q: adding VLAN 0 to HW filter on device team0 [ 686.398422][T23340] bridge0: port 3(team0) entered blocking state [ 686.420889][T23340] bridge0: port 3(team0) entered disabled state [ 686.961924][T23368] nbd: couldn't find device at index 3 [ 689.079913][ T59] net_ratelimit: 9 callbacks suppressed [ 689.079932][ T59] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 689.095559][T23371] kthread_run failed with err -4 [ 689.147833][T23383] netlink: 'syz.1.4273': attribute type 9 has an invalid length. [ 689.160744][T23383] __nla_validate_parse: 213 callbacks suppressed [ 689.160759][T23383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4273'. [ 689.208817][T23383] gretap0: entered promiscuous mode [ 689.215932][T23383] macvlan2: entered promiscuous mode [ 689.227851][T23383] macvlan2: entered allmulticast mode [ 689.247365][T23383] gretap0: entered allmulticast mode [ 689.290303][ T59] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 689.320639][T23395] nbd: couldn't find a device at index 4 [ 689.421144][T13734] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 689.561082][ T35] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 689.671113][T23424] netlink: 'syz.3.4283': attribute type 1 has an invalid length. [ 689.680711][ T59] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 689.819481][T23424] bond6: entered allmulticast mode [ 689.851328][T23437] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4283'. [ 689.860809][T23432] bond6: (slave ip6gretap1): making interface the new active one [ 689.868702][T23432] ip6gretap1: entered allmulticast mode [ 689.875670][T23432] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 689.901572][T23428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4285'. [ 689.965001][T23434] veth5: entered promiscuous mode [ 689.984861][T23434] bond6: (slave veth5): Enslaving as an active interface with a down link [ 689.989023][T23440] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4287'. [ 690.019283][T23437] bond6: left allmulticast mode [ 690.031185][T23437] ip6gretap1: left allmulticast mode [ 690.038111][T23437] 8021q: adding VLAN 0 to HW filter on device bond6 [ 690.048257][T23444] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4288'. [ 690.090303][T23440] ip6gre3: entered promiscuous mode [ 690.104699][T23440] ip6gre3: entered allmulticast mode [ 690.118925][T23441] netlink: 'syz.2.4288': attribute type 1 has an invalid length. [ 690.240439][T23441] bond4: entered promiscuous mode [ 690.274759][T23441] 8021q: adding VLAN 0 to HW filter on device bond4 [ 690.301585][T23449] netlink: 'syz.3.4289': attribute type 12 has an invalid length. [ 690.585738][T23471] sctp: [Deprecated]: syz.1.4294 (pid 23471) Use of int in max_burst socket option. [ 690.585738][T23471] Use struct sctp_assoc_value instead [ 690.627426][ T59] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 690.667317][T23473] netlink: 272 bytes leftover after parsing attributes in process `syz.1.4295'. [ 690.759535][T13734] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 690.866912][T23482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4298'. [ 690.932539][T23480] tipc: Enabled bearer , priority 0 [ 690.985779][T23479] tipc: Disabling bearer [ 691.039562][ T59] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 691.139390][T23489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4300'. [ 691.164327][T23489] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4300'. [ 691.173457][ T7475] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 691.188781][T23491] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4301'. [ 691.279853][T13734] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 691.444463][T23505] netlink: 'syz.3.4305': attribute type 7 has an invalid length. [ 691.521362][T23505] nbd: illegal input index -1 [ 691.754357][T23523] tipc: Enabled bearer , priority 0 [ 691.801174][T23522] tipc: Disabling bearer [ 691.840416][T23525] pim6reg: entered allmulticast mode [ 691.846259][T23527] syzkaller0: entered promiscuous mode [ 691.856277][T23527] syzkaller0: entered allmulticast mode [ 692.442833][T23564] syzkaller1: entered promiscuous mode [ 692.449592][T23564] syzkaller1: entered allmulticast mode [ 692.497356][T23570] tipc: Enabled bearer , priority 0 [ 692.524180][T23569] tipc: Disabling bearer [ 694.180094][ T7475] net_ratelimit: 22 callbacks suppressed [ 694.180112][ T7475] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 694.217228][T23679] xt_l2tp: missing protocol rule (udp|l2tpip) [ 694.303697][ T59] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 694.401078][T23689] __nla_validate_parse: 77 callbacks suppressed [ 694.401097][T23689] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4360'. [ 694.429832][T13734] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 694.503439][T23694] lo: entered allmulticast mode [ 694.549992][ T59] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 694.584544][T23703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4363'. [ 694.594643][T23703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4363'. [ 694.689841][ T7475] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 694.821426][T23714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4367'. [ 694.882870][T23714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4367'. [ 694.896925][ T59] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 694.967581][T23714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4367'. [ 695.036824][T23714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4367'. [ 695.051994][T13734] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 695.103699][T23714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4367'. [ 695.176578][T23733] IPVS: Scheduler module ip_vs_sip not found [ 695.269211][T23714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4367'. [ 695.278886][T13734] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 695.367465][T23714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4367'. [ 695.449543][ T142] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 695.559190][ T7475] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 695.568564][ T7475] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 695.580086][T23754] netlink: 'syz.2.4377': attribute type 2 has an invalid length. [ 695.686309][T23765] netlink: 'syz.2.4380': attribute type 11 has an invalid length. [ 696.171535][ T7475] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 696.187940][ T7475] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 696.201672][ T142] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 696.284496][T23770] bond14: entered allmulticast mode [ 696.291434][ T7475] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 696.301275][T13738] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 696.318185][T13738] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 696.343856][T13738] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 696.455618][T23788] 8021q: VLANs not supported on lo [ 696.860864][T23819] vlan0: Caught tx_queue_len zero misconfig [ 697.123835][T23825] tipc: Failed to remove unknown binding: 66,1,1/472095710:601129062/601129064 [ 697.135210][T23824] tipc: Failed to remove unknown binding: 66,1,1/472095710:601129062/601129064 [ 697.146244][T23824] tipc: Failed to remove unknown binding: 66,1,1/472095710:601129062/601129064 [ 697.886200][T23864] mac80211_hwsim hwsim44 wlan0: Caught tx_queue_len zero misconfig [ 698.514783][T23905] Bluetooth: MGMT ver 1.23 [ 698.599254][T23909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 698.747967][T23891] netlink: 'syz.2.4414': attribute type 22 has an invalid length. [ 699.223573][ T7466] net_ratelimit: 28 callbacks suppressed [ 699.223590][ T7466] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 699.379571][ T7475] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 699.489992][T13738] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 699.508024][ T29] audit: type=1804 audit(1781030804.613:19): pid=23959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4434" name="/newroot/361/cgroup.controllers" dev="tmpfs" ino=1862 res=1 errno=0 [ 699.554242][T23956] __nla_validate_parse: 22 callbacks suppressed [ 699.554259][T23956] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4430'. [ 699.569773][ T29] audit: type=1800 audit(1781030804.643:20): pid=23959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4434" name="cgroup.controllers" dev="tmpfs" ino=1862 res=0 errno=0 [ 699.593200][ T29] audit: type=1800 audit(1781030804.643:21): pid=23959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4434" name="cgroup.controllers" dev="tmpfs" ino=1862 res=0 errno=0 [ 699.617784][T13738] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 699.624875][T23964] netlink: 'syz.1.4435': attribute type 21 has an invalid length. [ 699.636960][T23964] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4435'. [ 699.675439][T23964] netlink: 'syz.1.4435': attribute type 4 has an invalid length. [ 699.684375][T23964] netlink: 'syz.1.4435': attribute type 5 has an invalid length. [ 699.693265][T23964] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4435'. [ 699.730768][ T59] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 699.876799][T23971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4437'. [ 699.950487][T13738] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 700.070110][ T59] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 700.212453][ T7466] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 700.339868][ T7466] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 700.460046][ T59] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 700.479695][T24000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4445'. [ 700.524067][T24000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4445'. [ 700.876398][T24025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4452'. [ 700.987808][T24030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 701.108561][T24035] IPVS: Error connecting to the multicast addr [ 701.184584][T24040] IPVS: Error connecting to the multicast addr [ 701.216839][T24044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4458'. [ 701.242219][T24044] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4458'. [ 701.388190][T24041] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 701.418673][T24041] bond5 (unregistering): Released all slaves [ 701.754099][T24067] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.4463'. [ 701.889812][T24072] netlink: 'syz.1.4464': attribute type 1 has an invalid length. [ 702.008337][T24072] 8021q: adding VLAN 0 to HW filter on device bond7 [ 702.101628][T24077] bond7: (slave veth0_to_bond): making interface the new active one [ 702.154677][T24077] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 702.294793][T24079] macvlan3: entered promiscuous mode [ 702.310120][T24079] macvlan3: entered allmulticast mode [ 702.857343][T24121] syzkaller1: entered promiscuous mode [ 702.867312][T24121] syzkaller1: entered allmulticast mode [ 703.212086][T24135] netlink: 'syz.2.4480': attribute type 39 has an invalid length. [ 705.472101][T13738] net_ratelimit: 15 callbacks suppressed [ 705.472120][T13738] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 705.685128][T24162] openvswitch: netlink: IP tunnel dst address not specified [ 705.690607][T13738] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 705.840245][T13738] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 705.907815][T24170] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4490'. [ 705.931256][T24170] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 705.948679][T24170] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 706.149579][T13738] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 706.331858][ T7466] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 706.479771][ T7475] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 706.630470][ T7475] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 706.887227][T24204] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4498'. [ 707.161291][T24225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4505'. [ 707.172844][T24220] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4504'. [ 707.192883][T24225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4505'. [ 707.383555][T24240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4507'. [ 707.426185][T24240] netlink: 'syz.3.4507': attribute type 5 has an invalid length. [ 707.457824][T24240] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4507'. [ 707.498231][T24251] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 707.536156][T24240] geneve3: entered promiscuous mode [ 707.546258][T24240] geneve3: entered allmulticast mode [ 707.560259][T24251] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4511'. [ 707.575474][ T7475] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 707.576040][T24259] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4512'. [ 707.646214][ T7475] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 707.646495][T24261] netlink: 'syz.2.4513': attribute type 1 has an invalid length. [ 707.655599][ T7475] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 707.737516][T24261] 8021q: adding VLAN 0 to HW filter on device bond5 [ 707.766082][ T7475] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 707.807536][T24261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4513'. [ 707.813793][T24272] syzkaller1: entered promiscuous mode [ 707.822250][T24272] syzkaller1: entered allmulticast mode [ 707.978342][T24280] netlink: 'syz.2.4518': attribute type 9 has an invalid length. [ 708.127508][T24282] netlink: 'syz.0.4517': attribute type 11 has an invalid length. [ 709.862657][T24329] dvmrp0: entered allmulticast mode [ 710.123340][T24361] tipc: Started in network mode [ 710.140142][T24361] tipc: Node identity , cluster identity 4711 [ 710.160615][T24361] tipc: Failed to obtain node identity [ 710.177880][T24361] tipc: Enabling of bearer rejected, failed to enable media [ 710.523317][T24371] sctp: [Deprecated]: syz.3.4544 (pid 24371) Use of int in max_burst socket option. [ 710.523317][T24371] Use struct sctp_assoc_value instead [ 710.630356][ T7466] net_ratelimit: 27 callbacks suppressed [ 710.630377][ T7466] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 710.980090][ T7466] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 711.132255][ T7475] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 711.250982][ T7475] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 711.411042][T13734] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 711.540738][ T142] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 711.572769][T24403] __nla_validate_parse: 14 callbacks suppressed [ 711.572786][T24403] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4552'. [ 711.589887][T24399] tipc: Enabling of bearer rejected, failed to enable media [ 711.671474][ T7466] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 711.679951][T24404] netlink: 'syz.0.4552': attribute type 1 has an invalid length. [ 711.700212][T24404] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 711.792419][ T7475] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 711.930767][ T142] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 712.049998][ T7475] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 712.095415][T24428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 712.428934][T24434] netlink: 'syz.3.4559': attribute type 2 has an invalid length. [ 712.467325][T24434] netlink: 'syz.3.4559': attribute type 9 has an invalid length. [ 712.479721][T24434] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4559'. [ 712.529785][T24434] netlink: 480 bytes leftover after parsing attributes in process `syz.3.4559'. [ 712.538101][T24441] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4562'. [ 712.572756][T24443] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4563'. [ 712.601654][T24443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4563'. [ 712.633269][T24443] netlink: 121 bytes leftover after parsing attributes in process `syz.0.4563'. [ 712.680254][T24446] netlink: 'syz.3.4564': attribute type 1 has an invalid length. [ 712.695996][T24446] netlink: 9188 bytes leftover after parsing attributes in process `syz.3.4564'. [ 712.706096][T24441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4562'. [ 712.934090][T24454] netlink: 'syz.0.4566': attribute type 10 has an invalid length. [ 712.954309][T24454] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4566'. [ 713.466701][T24473] ip6tnl1: entered allmulticast mode [ 713.488318][ T142] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 714.094212][T24514] netlink: 'syz.0.4582': attribute type 1 has an invalid length. [ 714.104171][T24515] netlink: 'syz.0.4582': attribute type 1 has an invalid length. [ 714.124147][T24515] netlink: 'syz.0.4582': attribute type 6 has an invalid length. [ 714.130397][T24514] netlink: 'syz.0.4582': attribute type 6 has an invalid length. [ 714.139785][T24514] netlink: 'syz.0.4582': attribute type 3 has an invalid length. [ 714.148303][T24515] netlink: 'syz.0.4582': attribute type 3 has an invalid length. [ 714.584144][T24539] xt_bpf: check failed: parse error [ 714.979717][T24557] netlink: 'syz.1.4595': attribute type 2 has an invalid length. [ 715.272012][T24571] tipc: Failed to remove unknown binding: 66,0,0/0:3093995049/3093995051 [ 715.316770][T24571] tipc: Failed to remove unknown binding: 66,0,0/0:3093995049/3093995050 [ 715.779947][ T7475] net_ratelimit: 28 callbacks suppressed [ 715.779966][ T7475] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 715.965165][ T142] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 716.060646][T24603] syzkaller1: entered promiscuous mode [ 716.071497][T24603] syzkaller1: entered allmulticast mode [ 716.167172][T24605] bond8: (slave bond_slave_1): Device is not our slave [ 716.174437][T24605] bond8: option active_slave: invalid value (bond_slave_1) [ 716.200296][T24605] bond8 (unregistering): Released all slaves [ 716.329603][ T142] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 717.138383][T24630] syzkaller0: entered promiscuous mode [ 717.144618][T24630] syzkaller0: entered allmulticast mode [ 717.153861][T24630] __nla_validate_parse: 11 callbacks suppressed [ 717.153875][T24630] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4610'. [ 717.346596][T24637] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 717.689905][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 717.860066][T13734] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 717.989683][T24659] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 718.109753][T24659] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 718.150500][T24685] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 718.250044][T13734] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 718.369731][T24659] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 718.393447][T24696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4620'. [ 718.475308][T24700] validate_nla: 2 callbacks suppressed [ 718.475326][T24700] netlink: 'syz.2.4622': attribute type 1 has an invalid length. [ 718.499985][ T35] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 718.510550][T24699] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4621'. [ 718.534428][T24703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4623'. [ 718.565750][T24700] 8021q: adding VLAN 0 to HW filter on device bond6 [ 718.587140][T24704] bond6: (slave veth0_to_bond): making interface the new active one [ 718.597440][T24704] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 718.612528][T24703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4623'. [ 718.628552][T24700] macvlan2: entered promiscuous mode [ 718.635581][T24700] macvlan2: entered allmulticast mode [ 718.643232][T24700] bond6: entered promiscuous mode [ 718.648350][T24700] veth0_to_bond: entered promiscuous mode [ 718.655710][T24700] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 718.663690][T24700] bond6: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 718.680176][T24700] bond6: left promiscuous mode [ 718.685050][T24700] veth0_to_bond: left promiscuous mode [ 718.898604][T13734] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 719.316317][T24748] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4634'. [ 719.400265][T24753] netlink: 'syz.3.4635': attribute type 2 has an invalid length. [ 719.419265][T24753] netlink: 'syz.3.4635': attribute type 2 has an invalid length. [ 719.670555][T24771] netlink: 'syz.4.4642': attribute type 4 has an invalid length. [ 719.681794][T24764] syzkaller0: entered promiscuous mode [ 719.699245][T24771] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4642'. [ 719.719807][T24764] syzkaller0: entered allmulticast mode [ 719.756395][T24766] tipc: Started in network mode [ 719.765350][T24771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4642'. [ 719.778856][T24766] tipc: Node identity cebeb476b7f9, cluster identity 4711 [ 719.798622][T24771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4642'. [ 719.818671][T24766] tipc: Enabled bearer , priority 0 [ 719.828901][T24777] netlink: 'syz.4.4642': attribute type 4 has an invalid length. [ 719.831944][T24778] netlink: 'syz.1.4645': attribute type 11 has an invalid length. [ 719.845405][T24778] netlink: 'syz.1.4645': attribute type 11 has an invalid length. [ 719.853833][T24777] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4642'. [ 719.861553][T24778] netlink: 'syz.1.4645': attribute type 1 has an invalid length. [ 719.871650][T24771] bond0: left promiscuous mode [ 719.876521][T24771] bond_slave_0: left promiscuous mode [ 719.882646][T24771] bond_slave_1: left promiscuous mode [ 719.898558][T24763] tipc: Resetting bearer [ 719.937282][T24763] tipc: Disabling bearer [ 719.953861][T24777] .`: renamed from bond0 [ 720.043049][T24778] bond8: entered promiscuous mode [ 720.053686][T24778] 8021q: adding VLAN 0 to HW filter on device bond8 [ 720.126301][T24785] 8021q: adding VLAN 0 to HW filter on device bond8 [ 720.135896][T24785] bond8: (slave ipip0): The slave device specified does not support setting the MAC address [ 720.146666][T24785] bond8: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 720.161190][T24785] bond8: (slave ipip0): making interface the new active one [ 720.168612][T24785] ipip0: entered promiscuous mode [ 720.175973][T24785] bond8: (slave ipip0): Enslaving as an active interface with an up link [ 720.340073][T24803] netlink: 'syz.0.4649': attribute type 12 has an invalid length. [ 720.397526][T24803] team0: left allmulticast mode [ 720.415017][T24803] team_slave_1: left allmulticast mode [ 720.810513][T10954] net_ratelimit: 9 callbacks suppressed [ 720.810532][T10954] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 720.971008][ T35] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 721.091275][ T35] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 721.219898][T10954] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 721.359515][ T35] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 721.479746][ T35] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 721.496845][T24848] x_tables: duplicate underflow at hook 1 [ 721.518457][T24848] netlink: 'syz.1.4660': attribute type 8 has an invalid length. [ 721.572204][T24850] netlink: 'syz.0.4661': attribute type 9 has an invalid length. [ 721.599525][ T142] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 721.699960][T24852] lo: Caught tx_queue_len zero misconfig [ 721.777374][T24854] netlink: Conntrack attr has 4 unknown bytes [ 721.809854][ T35] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 721.931841][T24663] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 722.283955][T24869] : entered promiscuous mode [ 722.375209][T24878] pim6reg0: tun_chr_ioctl cmd 35111 [ 722.526748][T24883] __nla_validate_parse: 12 callbacks suppressed [ 722.526767][T24883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4672'. [ 722.865405][T24895] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4675'. [ 722.888727][T24895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4675'. [ 723.211400][T24905] syzkaller0: entered promiscuous mode [ 723.216909][T24905] syzkaller0: entered allmulticast mode [ 723.255118][T24877] dvmrp0: entered allmulticast mode [ 723.265965][T24911] batadv_slave_1: entered promiscuous mode [ 723.437384][T24922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4681'. [ 723.526930][T24926] netlink: 'syz.4.4682': attribute type 13 has an invalid length. [ 725.614766][T24926] gretap0: refused to change device tx_queue_len [ 725.967545][T24947] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4688'. [ 725.987893][T24947] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4688'. [ 726.024410][T24947] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4688'. [ 726.038474][T24948] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 726.039631][ T35] net_ratelimit: 10 callbacks suppressed [ 726.039648][ T35] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 726.092944][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 726.164519][T24953] 5n: entered promiscuous mode [ 726.199545][ T35] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 726.297511][T24956] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4690'. [ 726.319826][ T35] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 726.329470][T24956] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4690'. [ 726.451550][T24663] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 726.555146][T24964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4692'. [ 726.650274][T24663] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 726.780420][T24663] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 726.912350][T24659] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 727.099831][T24659] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 727.100909][T24985] netlink: 'syz.3.4700': attribute type 10 has an invalid length. [ 727.220811][T24659] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 727.286179][T24991] netlink: 'syz.0.4704': attribute type 15 has an invalid length. [ 727.361384][T13734] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 727.788496][T25019] __nla_validate_parse: 5 callbacks suppressed [ 727.788514][T25019] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4712'. [ 728.055056][T24659] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0 [ 728.066721][T25037] netlink: 'syz.3.4714': attribute type 13 has an invalid length. [ 728.087022][T24659] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0 [ 728.103460][T25037] netlink: 'syz.3.4714': attribute type 17 has an invalid length. [ 728.124258][T24659] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0 [ 728.179385][T24659] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0 [ 728.183571][T25047] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4714'. [ 728.277103][T25037] erspan0: left promiscuous mode [ 728.286349][T25051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4716'. [ 728.310682][T25037] sit0: left promiscuous mode [ 728.441285][T25037] 8021q: adding VLAN 0 to HW filter on device .` [ 728.461644][T25037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 728.521304][T25037] batadv_slave_1: left promiscuous mode [ 728.547101][T25037] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 728.557943][T25037] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 728.577238][T25037] veth1_vlan: left promiscuous mode [ 728.585577][T25037] veth0_vlan: left promiscuous mode [ 728.592313][T25037] veth0_vlan: entered promiscuous mode [ 728.604456][T25037] veth1_vlan: entered promiscuous mode [ 728.615422][ T29] audit: type=1804 audit(1781030833.723:22): pid=25068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4722" name="/newroot/276/cgroup.controllers" dev="tmpfs" ino=1425 res=1 errno=0 [ 728.619887][T25037] veth1_macvtap: left promiscuous mode [ 728.653686][T25069] netlink: 'syz.4.4718': attribute type 10 has an invalid length. [ 728.663335][ T29] audit: type=1800 audit(1781030833.753:23): pid=25068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4722" name="cgroup.controllers" dev="tmpfs" ino=1425 res=0 errno=0 [ 728.686589][T25037] veth0_macvtap: left promiscuous mode [ 728.694221][T25037] veth0_macvtap: entered promiscuous mode [ 728.743725][T25037] veth1_macvtap: entered promiscuous mode [ 728.788477][T25037] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 728.827233][T25037] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 728.844140][T25037] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 728.847289][T25075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4724'. [ 728.875296][T25037] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 728.997318][T13737] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.007588][T13737] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.024798][T25085] netlink: 'syz.1.4725': attribute type 1 has an invalid length. [ 729.063042][T13737] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.073289][T13737] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.121352][T25085] 8021q: adding VLAN 0 to HW filter on device bond9 [ 729.154824][T25084] bond9: (slave veth9): Enslaving as an active interface with a down link [ 729.387347][T25097] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4729'. [ 729.450656][T25097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4729'. [ 729.476555][T25097] netlink: 'syz.4.4729': attribute type 11 has an invalid length. [ 729.521467][T25097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4729'. [ 729.521517][T13737] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 729.546545][T25097] netlink: 'syz.4.4729': attribute type 11 has an invalid length. [ 729.580254][T13737] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 729.609642][T13737] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 729.653442][T13737] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 730.656667][T25113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4733'. [ 730.679097][T25113] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4733'. [ 730.713529][T25113] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4733'. [ 730.993210][T25123] netlink: 'syz.4.4735': attribute type 4 has an invalid length. [ 731.001876][T25122] netlink: 'syz.4.4735': attribute type 4 has an invalid length. [ 731.023508][T25123] tipc: Enabled bearer , priority 0 [ 731.032297][T25122] tipc: Enabling of bearer rejected, already enabled [ 731.048520][T25123] syzkaller0: entered promiscuous mode [ 731.054750][T25123] syzkaller0: entered allmulticast mode [ 731.088127][T25123] tipc: Resetting bearer [ 731.096811][T25121] tipc: Resetting bearer [ 731.123888][T25121] tipc: Disabling bearer [ 731.179677][T13734] net_ratelimit: 12 callbacks suppressed [ 731.179696][T13734] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 731.299674][T13734] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 731.410041][T25132] netlink: 'syz.4.4737': attribute type 21 has an invalid length. [ 731.419994][T13734] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 731.533122][T24659] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 731.582865][T25139] netlink: 'syz.0.4740': attribute type 3 has an invalid length. [ 731.690314][T13737] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 731.762432][T25151] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 731.810797][T13737] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 731.842265][T25153] netlink: 'syz.0.4743': attribute type 1 has an invalid length. [ 731.940787][T13735] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 732.060797][T24659] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 732.211672][T13737] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 732.248715][T25179] vlan3: entered allmulticast mode [ 732.265254][T25179] bond0: entered allmulticast mode [ 732.307054][T25179] .` (unregistering): Released all slaves [ 732.413735][ T35] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 732.446803][T25183] tun0: tun_chr_ioctl cmd 1074812117 [ 732.494526][T25182] vlan2: entered promiscuous mode [ 732.505068][T25182] batadv0: entered promiscuous mode [ 732.553653][T25189] tunl0: Caught tx_queue_len zero misconfig [ 732.819794][T25204] __nla_validate_parse: 6 callbacks suppressed [ 732.819814][T25204] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4755'. [ 733.354643][T24914] udevd[24914]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 733.364780][T25219] tipc: Enabled bearer , priority 26 [ 733.394162][T25219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4757'. [ 733.801146][T25237] netlink: 1320 bytes leftover after parsing attributes in process `syz.2.4763'. [ 734.124946][T25262] netlink: 'syz.1.4768': attribute type 1 has an invalid length. [ 734.155240][T25262] netlink: 'syz.1.4768': attribute type 1 has an invalid length. [ 734.166256][T25264] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4767'. [ 734.211993][T25265] sctp: [Deprecated]: syz.1.4768 (pid 25265) Use of struct sctp_assoc_value in delayed_ack socket option. [ 734.211993][T25265] Use struct sctp_sack_info instead [ 734.234636][T25258] netlink: 'syz.2.4767': attribute type 3 has an invalid length. [ 734.295417][T25264] netlink: 'syz.2.4767': attribute type 4 has an invalid length. [ 734.309881][T25264] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4767'. [ 735.002898][T25285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4774'. [ 735.082689][T25281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 735.559357][T25308] netlink: 'syz.1.4779': attribute type 1 has an invalid length. [ 735.732911][T25311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4780'. [ 735.742335][T25311] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4780'. [ 736.183858][T25331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4784'. [ 736.205844][T25331] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4784'. [ 736.225611][T25331] geneve3: entered promiscuous mode [ 736.231277][T25331] geneve3: entered allmulticast mode [ 736.410654][T13734] net_ratelimit: 28 callbacks suppressed [ 736.410672][T13734] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 736.418303][T25341] x_tables: duplicate underflow at hook 2 [ 736.539922][T13734] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 736.691514][T13734] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 736.984373][T25367] syz.3.4795: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 737.023316][T25367] CPU: 0 UID: 0 PID: 25367 Comm: syz.3.4795 Not tainted syzkaller #0 PREEMPT(full) [ 737.023344][T25367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 737.023358][T25367] Call Trace: [ 737.023366][T25367] [ 737.023374][T25367] dump_stack_lvl+0xe8/0x150 [ 737.023406][T25367] warn_alloc+0x249/0x340 [ 737.023437][T25367] ? stack_trace_save+0xa9/0x100 [ 737.023497][T25367] ? __pfx_warn_alloc+0x10/0x10 [ 737.023535][T25367] ? kasan_save_track+0x4f/0x80 [ 737.023562][T25367] ? kasan_save_track+0x3e/0x80 [ 737.023588][T25367] ? __kasan_kmalloc+0x93/0xb0 [ 737.023615][T25367] ? __kmalloc_cache_noprof+0x31c/0x660 [ 737.023642][T25367] ? xskq_create+0x56/0x170 [ 737.023775][T25367] ? xsk_setsockopt+0x54c/0x990 [ 737.023804][T25367] ? do_sock_setsockopt+0x17c/0x1b0 [ 737.023827][T25367] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 737.023848][T25367] ? do_syscall_64+0x174/0x580 [ 737.023874][T25367] __vmalloc_node_range_noprof+0x132/0x1750 [ 737.023944][T25367] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 737.023981][T25367] ? __kasan_kmalloc+0x93/0xb0 [ 737.024017][T25367] vmalloc_user_noprof+0xad/0xe0 [ 737.024043][T25367] ? xskq_create+0xbf/0x170 [ 737.024073][T25367] xskq_create+0xbf/0x170 [ 737.024106][T25367] xsk_init_queue+0x8a/0xe0 [ 737.024138][T25367] xsk_setsockopt+0x54c/0x990 [ 737.024170][T25367] ? __pfx_xsk_setsockopt+0x10/0x10 [ 737.024198][T25367] ? __pfx_aa_sk_perm+0x10/0x10 [ 737.024263][T25367] ? aa_sock_opt_perm+0xff/0x1a0 [ 737.024297][T25367] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 737.024322][T25367] ? __pfx_xsk_setsockopt+0x10/0x10 [ 737.024352][T25367] do_sock_setsockopt+0x17c/0x1b0 [ 737.024379][T25367] __x64_sys_setsockopt+0x13d/0x1b0 [ 737.024404][T25367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.024428][T25367] do_syscall_64+0x174/0x580 [ 737.024448][T25367] ? trace_irq_disable+0x3b/0x140 [ 737.024479][T25367] ? clear_bhb_loop+0x40/0x90 [ 737.024518][T25367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.024538][T25367] RIP: 0033:0x7f6637b9ce59 [ 737.024558][T25367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 737.024576][T25367] RSP: 002b:00007f6635df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 737.024598][T25367] RAX: ffffffffffffffda RBX: 00007f6637e15fa0 RCX: 00007f6637b9ce59 [ 737.024613][T25367] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 737.024626][T25367] RBP: 00007f6637c32d6f R08: 0000000000000004 R09: 0000000000000000 [ 737.024639][T25367] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 737.024652][T25367] R13: 00007f6637e16038 R14: 00007f6637e15fa0 R15: 00007fffd85a7c58 [ 737.024686][T25367] [ 737.027009][T25367] Mem-Info: [ 737.130139][T24659] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 737.317189][T25372] netlink: 'syz.0.4796': attribute type 21 has an invalid length. [ 737.389573][T25367] active_anon:8179 inactive_anon:0 isolated_anon:0 [ 737.389573][T25367] active_file:3358 inactive_file:40219 isolated_file:0 [ 737.389573][T25367] unevictable:768 dirty:228 writeback:0 [ 737.389573][T25367] slab_reclaimable:12667 slab_unreclaimable:125163 [ 737.389573][T25367] mapped:29689 shmem:3571 pagetables:1306 [ 737.389573][T25367] sec_pagetables:0 bounce:0 [ 737.389573][T25367] kernel_misc_reclaimable:0 [ 737.389573][T25367] free:1289908 free_pcp:10370 free_cma:0 [ 737.436848][T25367] Node 0 active_anon:32616kB inactive_anon:0kB active_file:13432kB inactive_file:160672kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118756kB dirty:912kB writeback:0kB shmem:12748kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16212kB pagetables:5088kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 737.472496][T25367] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 737.569603][T25367] Node 0 DMA free:15352kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 737.649084][ T35] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 737.655419][T25367] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 737.685956][T25367] Node 0 DMA32 free:1200008kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34216kB inactive_anon:0kB active_file:13432kB inactive_file:160672kB unevictable:1536kB writepending:912kB zspages:0kB present:3129332kB managed:2552544kB mlocked:0kB bounce:0kB free_pcp:40984kB local_pcp:20580kB free_cma:0kB [ 737.772134][T24659] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 737.797017][T25367] lowmem_reserve[]: 0 0 0 0 0 [ 737.867805][T25367] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 737.900061][T13737] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 737.934143][T25367] lowmem_reserve[]: 0 0 0 0 0 [ 737.939115][T25367] Node 1 Normal free:3943024kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:1116kB local_pcp:1116kB free_cma:0kB [ 737.975628][T25367] lowmem_reserve[]: 0 0 0 0 0 [ 737.981305][T25367] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (UM) = 15352kB [ 737.997224][T25367] Node 0 DMA32: 6438*4kB (UME) 5625*8kB (UME) 3209*16kB (UME) 448*32kB (UM) 973*64kB (UM) 761*128kB (UME) 651*256kB (UM) 355*512kB (UM) 233*1024kB (UM) 122*2048kB (UM) 18*4096kB (U) = 1206704kB [ 738.016952][ T35] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 738.028604][T25367] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 738.044916][T25367] Node 1 Normal: 0*4kB 2*8kB (UM) 4*16kB (UM) 9*32kB (UM) 8*64kB (UM) 6*128kB (UM) 6*256kB (UM) 5*512kB (UM) 1*1024kB (M) 2*2048kB [ 738.067695][T25396] __nla_validate_parse: 4 callbacks suppressed [ 738.067712][T25396] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4801'. [ 738.101169][T25396] netlink: 'syz.1.4801': attribute type 1 has an invalid length. [ 738.141009][T13734] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 738.148550][T25367] (U) 960*4096kB (UM) = 3943024kB [ 738.156581][T25401] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4801'. [ 738.172042][T25367] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 738.192572][T25396] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4801'. [ 738.201501][T25367] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 738.225272][T25367] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 738.278467][T25367] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 738.295528][T25404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4802'. [ 738.305985][T25367] 44863 total pagecache pages [ 738.311156][T25367] 0 pages in swap cache [ 738.320459][T25404] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4802'. [ 738.329954][T25367] Free swap = 124996kB [ 738.334188][T25367] Total swap = 124996kB [ 738.338924][T25367] 2097051 pages RAM [ 738.348033][T25367] 0 pages HighMem/MovableOnly [ 738.356928][T25367] 427132 pages reserved [ 738.364014][T25367] 0 pages cma reserved [ 738.433239][T25408] 8021q: adding VLAN 0 to HW filter on device .` [ 738.451699][T25408] 8021q: adding VLAN 0 to HW filter on device team0 [ 738.464889][T25408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 738.520184][T25408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 738.548919][T25408] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 738.562008][T25408] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 738.574006][T25408] veth1_vlan: left promiscuous mode [ 738.582173][T25408] veth0_vlan: left promiscuous mode [ 738.587971][T25408] veth0_vlan: entered promiscuous mode [ 738.603279][T25408] veth1_vlan: entered promiscuous mode [ 738.617533][T25408] veth1_macvtap: left promiscuous mode [ 738.631014][T25408] veth0_macvtap: left promiscuous mode [ 738.640681][T25408] veth0_macvtap: entered promiscuous mode [ 738.665213][T25408] veth1_macvtap: entered promiscuous mode [ 738.677211][T25408] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 738.703952][T25408] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 738.720706][T25408] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 738.730785][T25408] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 738.750319][T25408] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 738.839168][T24659] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.846357][T24659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 738.882045][T24659] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.889201][T24659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 738.955393][T13737] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.964954][T13737] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.985606][T13737] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.995179][T13737] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.397371][T25447] netlink: 'syz.1.4811': attribute type 362 has an invalid length. [ 739.409248][T25448] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4810'. [ 739.459217][T25450] netlink: 'syz.4.4812': attribute type 10 has an invalid length. [ 739.462549][T25439] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4810'. [ 739.500892][T25451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4811'. [ 739.506079][T25447] team0 (unregistering): Port device team_slave_0 removed [ 739.529992][T25451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4811'. [ 739.594001][T25447] team0 (unregistering): Port device team_slave_1 removed [ 739.631040][T25455] netlink: 'syz.0.4813': attribute type 1 has an invalid length. [ 739.684390][T25455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4813'. [ 739.806620][T25450] team0 (unregistering): Port device team_slave_0 removed [ 739.884294][T25450] team0 (unregistering): Port device team_slave_1 removed [ 739.966271][T25450] team0 (unregistering): Port device veth1_to_hsr removed [ 740.013621][T25468] batadv_slave_0: Caught tx_queue_len zero misconfig [ 740.028005][T25462] veth1_macvtap: entered promiscuous mode [ 740.042595][T25462] macsec0: entered promiscuous mode [ 740.072763][T22248] syz0: Port: 1 Link DOWN [ 740.236922][T25482] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 740.648743][T25492] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 740.751940][T25496] syzkaller0: entered promiscuous mode [ 740.763764][T25496] syzkaller0: entered allmulticast mode [ 740.794003][T25496] tipc: Enabled bearer , priority 0 [ 740.824559][T25494] tipc: Resetting bearer [ 740.872184][T25494] tipc: Disabling bearer [ 740.879390][T25503] nbd: must specify at least one socket [ 741.288189][T25524] netlink: 'syz.2.4831': attribute type 5 has an invalid length. [ 741.503751][T25531] syzkaller0: create flow: hash 1241755583 index 1 [ 741.521952][T24663] net_ratelimit: 15 callbacks suppressed [ 741.521971][T24663] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 741.683675][T25530] syzkaller0: delete flow: hash 1241755583 index 1 [ 742.092444][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 744.092601][T25558] tipc: Enabling of bearer rejected, failed to enable media [ 744.109714][ T142] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 744.223174][T25566] __nla_validate_parse: 6 callbacks suppressed [ 744.223194][T25566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4842'. [ 744.240411][ T35] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 744.263555][T25568] : renamed from bond_slave_0 (while UP) [ 744.386384][T25566] 8021q: adding VLAN 0 to HW filter on device bond10 [ 744.430222][ T35] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 744.564135][T25588] netlink: 'syz.0.4848': attribute type 10 has an invalid length. [ 744.570588][T13734] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 744.585351][T25588] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4848'. [ 744.602814][T25591] netlink: 'syz.2.4850': attribute type 8 has an invalid length. [ 744.626744][T25589] netlink: 'syz.4.4849': attribute type 3 has an invalid length. [ 744.639479][T25588] geneve1: entered promiscuous mode [ 744.650159][T25589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4849'. [ 744.659893][T25588] team0: Port device geneve1 added [ 744.668497][T13734] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.698315][T13734] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.724905][T25598] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4850'. [ 744.753346][T25598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4850'. [ 744.774704][T13734] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.805305][T13734] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.820255][T13737] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 744.949593][T13734] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 745.008063][T25612] syzkaller0: entered promiscuous mode [ 745.023825][T25614] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4856'. [ 745.034950][T25612] syzkaller0: entered allmulticast mode [ 745.055370][T25612] tipc: Enabled bearer , priority 0 [ 745.063229][T25616] tipc: Failed to remove unknown binding: 66,0,0/0:2844781478/2844781480 [ 745.073788][T25611] tipc: Resetting bearer [ 745.082260][T25616] tipc: Failed to remove unknown binding: 66,0,0/0:2844781478/2844781479 [ 745.092698][T25616] tipc: Failed to remove unknown binding: 66,0,0/0:2844781478/2844781480 [ 745.131942][T25616] tipc: Failed to remove unknown binding: 66,0,0/0:2844781478/2844781479 [ 745.143564][T25611] tipc: Disabling bearer [ 745.180364][T13737] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 745.293158][T24663] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 745.364960][T25622] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4859'. [ 745.409823][T24663] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 745.424748][T25622] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4859'. [ 745.456121][T25623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4859'. [ 745.471943][T25622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4859'. [ 746.019208][T25632] bond7: ARP target 9.0.0.0 is already present [ 746.046017][T25632] bond7: option arp_ip_target: invalid value (9) [ 746.076374][T25632] bond7 (unregistering): Released all slaves [ 746.192068][T25642] mac80211_hwsim hwsim46 nicvf0: entered promiscuous mode [ 746.209587][T25642] mac80211_hwsim hwsim46 nicvf0: entered allmulticast mode [ 746.216978][T25640] netlink: 'syz.1.4861': attribute type 23 has an invalid length. [ 746.231275][T25640] netlink: 'syz.1.4861': attribute type 21 has an invalid length. [ 746.239266][T25640] IPv6: NLM_F_CREATE should be specified when creating new route [ 746.552255][T13735] net_ratelimit: 5 callbacks suppressed [ 746.552273][T13735] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 746.577476][T25661] syzkaller0: entered promiscuous mode [ 746.590808][T25661] syzkaller0: entered allmulticast mode [ 746.626826][T25661] tipc: Enabled bearer , priority 0 [ 746.643670][T25660] tipc: Resetting bearer [ 746.677783][T25660] tipc: Disabling bearer [ 746.739865][T13735] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 746.804248][T25668] netlink: 'syz.0.4872': attribute type 2 has an invalid length. [ 746.870558][T13735] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 747.039552][ T35] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 747.145138][T25691] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 747.464938][T13734] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 747.580065][ T35] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 747.709745][T13734] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 747.857412][T13734] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 748.246050][T25715] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.253388][T25715] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.519885][T25715] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 748.887911][T25732] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 749.000280][T25754] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 749.032584][T25760] netlink: 'syz.1.4894': attribute type 1 has an invalid length. [ 749.062597][ T142] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.088722][ T142] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.118793][T22250] team_slave_0: entered promiscuous mode [ 749.124578][T22250] team_slave_1: entered promiscuous mode [ 749.130288][T22250] geneve1: entered promiscuous mode [ 749.179324][ T142] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.192404][ T142] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.222300][ T142] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.250304][ T142] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.307638][ T142] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.332803][T25781] netlink: 'syz.3.4899': attribute type 1 has an invalid length. [ 749.348437][ T142] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.475351][T25787] __nla_validate_parse: 11 callbacks suppressed [ 749.475374][T25787] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4900'. [ 749.503378][T25787] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4900'. [ 749.539985][T25784] bond7 (unregistering): Released all slaves [ 749.611249][ T142] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 749.754970][T25800] xt_hashlimit: max too large, truncated to 1048576 [ 749.768632][T25802] tipc: Enabled bearer , priority 0 [ 749.841363][T25808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4904'. [ 749.878291][T25808] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4904'. [ 749.895589][T25802] tipc: Resetting bearer [ 749.901596][T25808] netlink: ct family unspecified [ 749.951011][T25806] bond7: option xmit_hash_policy: invalid value (10) [ 749.970550][T25806] bond7 (unregistering): Released all slaves [ 750.232886][ T142] tipc: Resetting bearer [ 750.242721][T25801] tipc: Resetting bearer [ 750.359570][T25825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4911'. [ 752.683682][T25801] tipc: Disabling bearer [ 752.705436][T25823] bond6: left promiscuous mode [ 752.711029][T25823] gretap2: left promiscuous mode [ 752.716429][T25823] ipvlan4: left promiscuous mode [ 752.722475][T25823] bond9: left promiscuous mode [ 752.728275][T25823] bond13: left promiscuous mode [ 752.735376][T25823] mac80211_hwsim hwsim46 nicvf0: left promiscuous mode [ 752.755506][ T9] tipc: Node number set to 2034742390 [ 752.779568][ T142] net_ratelimit: 1 callbacks suppressed [ 752.779586][ T142] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 752.939808][ T142] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 752.992456][T25864] netlink: 'syz.2.4922': attribute type 10 has an invalid length. [ 753.061074][ T35] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 753.061550][T25869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4919'. [ 753.087829][T25869] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 753.096838][T25869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4919'. [ 753.169669][T13734] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 753.290078][T13734] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 753.399935][T13734] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 753.509614][ T142] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 753.619710][ T142] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 753.749640][ T142] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 753.889955][T25892] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 753.902852][T25892] bond1: left promiscuous mode [ 753.908305][T25892] 8021q: adding VLAN 0 to HW filter on device bond1 [ 753.925807][T25892] 8021q: adding VLAN 0 to HW filter on device bond2 [ 753.930693][T22251] page_pool_release_retry() stalled pool shutdown: id 208, 1 inflight 60 sec [ 753.966681][T25892] team1: left promiscuous mode [ 753.972810][T25892] team1: left allmulticast mode [ 753.978313][T25892] 8021q: adding VLAN 0 to HW filter on device team1 [ 754.088894][T25896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4933'. [ 754.126215][T25902] netlink: 'syz.1.4931': attribute type 10 has an invalid length. [ 754.140354][T25892] mac80211_hwsim hwsim61 wlan0: left promiscuous mode [ 754.147184][T25892] mac80211_hwsim hwsim61 wlan0: left allmulticast mode [ 754.155819][T25892] bond0: left promiscuous mode [ 754.161791][T25892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 754.172023][T25892] bond3: left promiscuous mode [ 754.177136][T25892] 8021q: adding VLAN 0 to HW filter on device bond3 [ 754.186082][T25892] gretap1: left promiscuous mode [ 754.203202][T25892] 8021q: adding VLAN 0 to HW filter on device bond4 [ 754.211852][T25892] erspan0: entered promiscuous mode [ 754.220757][T25892] ip6gretap0: entered promiscuous mode [ 754.233965][T25892] bond5: left promiscuous mode [ 754.239081][T25892] 8021q: adding VLAN 0 to HW filter on device bond5 [ 754.251604][T25892] 8021q: adding VLAN 0 to HW filter on device bond6 [ 754.260830][T25892] veth5: left promiscuous mode [ 754.266735][T25892] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 754.346820][ T35] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 754.406518][ T35] bond6: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 754.449903][ T142] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 754.519192][ T142] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 754.554507][ T142] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 754.867747][ T29] audit: type=1107 audit(1781030859.973:24): pid=25912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='g?̞e/7[k!g@K%1`@' [ 755.330884][T25947] syzkaller1: entered promiscuous mode [ 755.352389][T25947] syzkaller1: entered allmulticast mode [ 755.657308][T25953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4945'. [ 755.990381][T25975] netlink: 'syz.4.4952': attribute type 1 has an invalid length. [ 756.158289][T25976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4953'. [ 756.285582][T25987] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4956'. [ 756.649056][T19574] IPVS: starting estimator thread 0... [ 756.654985][T26011] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 756.741580][T26008] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4962'. [ 756.753664][T26021] xt_hashlimit: size too large, truncated to 1048576 [ 756.760457][T26015] IPVS: using max 31 ests per chain, 74400 per kthread [ 756.872331][T26023] bridge_slave_0 (unregistering): left allmulticast mode [ 756.880124][T26026] netlink: 'syz.0.4965': attribute type 1 has an invalid length. [ 756.900224][T26026] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4965'. [ 756.910860][T26023] bridge_slave_0 (unregistering): left promiscuous mode [ 756.936760][T26023] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.020404][T26035] bridge0: entered allmulticast mode [ 757.117691][T26033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4963'. [ 757.373281][T26056] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4976'. [ 757.397316][T26056] netlink: 75 bytes leftover after parsing attributes in process `syz.4.4976'. [ 757.428164][T26056] IPv6: Can't replace route, no match found [ 757.435642][T26056] IPv6: Can't replace route, no match found [ 757.446039][T26061] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.4977'. [ 757.485616][T26065] ipip0: entered promiscuous mode [ 757.743101][T26083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4985'. [ 757.765813][T26087] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20001 [ 757.819884][T24663] net_ratelimit: 20 callbacks suppressed [ 757.819903][T24663] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 757.864350][T26093] xt_hashlimit: size too large, truncated to 1048576 [ 757.969567][ T142] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 757.977352][T26098] netlink: 'syz.1.4984': attribute type 1 has an invalid length. [ 758.110994][T24663] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 758.239918][T13737] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 758.519930][T13734] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 758.680002][ T35] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 758.745349][T26088] netlink: 'syz.0.4986': attribute type 4 has an invalid length. [ 758.920300][T13734] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 759.500049][T26156] netlink: 'syz.3.4999': attribute type 2 has an invalid length. [ 759.768914][T24663] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 759.910071][T13737] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 760.030951][T13737] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 760.300951][T26191] syzkaller0: entered promiscuous mode [ 760.312566][T26191] syzkaller0: entered allmulticast mode [ 760.832713][T26212] syzkaller0: entered promiscuous mode [ 760.844342][T26212] syzkaller0: entered allmulticast mode [ 762.170108][T26247] tipc: Enabling of bearer rejected, failed to enable media [ 762.221185][T26259] x_tables: duplicate underflow at hook 1 [ 762.433069][T26273] netlink: 'syz.1.5023': attribute type 13 has an invalid length. [ 762.467044][T26273] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 762.695133][T26286] netlink: 'syz.3.5026': attribute type 10 has an invalid length. [ 762.824407][T26286] netlink: 'syz.3.5026': attribute type 10 has an invalid length. [ 762.826375][T26293] __nla_validate_parse: 9 callbacks suppressed [ 762.826392][T26293] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5027'. [ 762.919886][T24663] net_ratelimit: 13 callbacks suppressed [ 762.919907][T24663] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 763.050483][T13737] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 763.170048][T13737] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 763.289948][T13737] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 763.469792][T13737] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 763.590097][ T142] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 763.699761][ T142] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 763.810121][T13737] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 763.928354][T13737] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 764.069854][T13734] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 765.153211][T26253] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 765.166712][T26288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5027'. [ 765.425456][T26333] netlink: 112 bytes leftover after parsing attributes in process `syz.3.5030'. [ 765.460687][T26335] tipc: Enabled bearer , priority 26 [ 765.475779][T26337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5034'. [ 765.521996][T26339] netlink: 'syz.3.5030': attribute type 1 has an invalid length. [ 765.542372][T26337] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 765.572383][T26335] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 765.583828][T26335] tipc: Enabled bearer , priority 26 [ 765.971104][ T35] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x67 [ 766.068134][T26378] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.5043'. [ 766.078764][T26378] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5043'. [ 766.161367][T26385] vlan2: entered promiscuous mode [ 766.166743][T26385] bridge0: entered promiscuous mode [ 766.188719][T26387] syzkaller0: entered promiscuous mode [ 766.194544][T26387] syzkaller0: entered allmulticast mode [ 766.244116][T26388] 8021q: adding VLAN 0 to HW filter on device .` [ 766.254232][T26388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 766.263732][T26385] netlink: 67 bytes leftover after parsing attributes in process `syz.4.5045'. [ 766.290424][T26388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 766.302375][T26388] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 766.313061][T26388] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 766.324848][T26388] veth1_vlan: left promiscuous mode [ 766.331632][T26388] veth0_vlan: left promiscuous mode [ 766.337598][T26388] veth0_vlan: entered promiscuous mode [ 766.345494][T26388] veth1_vlan: entered promiscuous mode [ 766.354165][T26388] veth1_macvtap: left promiscuous mode [ 766.360688][T26388] veth0_macvtap: left promiscuous mode [ 766.366962][T26388] veth0_macvtap: entered promiscuous mode [ 766.374291][T26388] veth1_macvtap: entered promiscuous mode [ 766.384906][T26388] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 766.393319][T26388] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 766.402748][T26388] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 766.412579][T26388] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 766.423518][T26388] 8021q: adding VLAN 0 to HW filter on device bond1 [ 766.434172][T26388] 8021q: adding VLAN 0 to HW filter on device bond2 [ 766.442270][T26388] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 766.479655][T26388] 8021q: adding VLAN 0 to HW filter on device bond3 [ 766.495499][T26388] 8021q: adding VLAN 0 to HW filter on device bond4 [ 766.506640][T26388] 8021q: adding VLAN 0 to HW filter on device bond5 [ 766.520672][T26388] 8021q: adding VLAN 0 to HW filter on device bond6 [ 766.531280][T26388] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 766.541124][T26388] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 766.550517][T26388] 8021q: adding VLAN 0 to HW filter on device bond7 [ 766.562627][T26388] 8021q: adding VLAN 0 to HW filter on device bond8 [ 766.588725][T26388] 8021q: adding VLAN 0 to HW filter on device bond9 [ 766.598243][T26388] 8021q: adding VLAN 0 to HW filter on device bond10 [ 766.609206][T26388] 8021q: adding VLAN 0 to HW filter on device bond11 [ 766.618848][T26388] 8021q: adding VLAN 0 to HW filter on device bond12 [ 766.642897][T26388] 8021q: adding VLAN 0 to HW filter on device bond13 [ 766.655187][T26388] 8021q: adding VLAN 0 to HW filter on device bond14 [ 766.727409][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.734633][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 766.758625][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.765850][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 766.885199][T13734] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 766.907151][T13734] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.925884][T13734] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 44212 - 0 [ 767.117053][T13734] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 767.141504][T13734] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.160500][T13734] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 44212 - 0 [ 767.180194][T13734] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 767.196277][T13734] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.205351][T13734] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 44212 - 0 [ 767.215570][T26406] 8021q: VLANs not supported on gre0 [ 767.225361][T26419] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5053'. [ 767.247928][T26412] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5053'. [ 767.377768][T13734] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 767.386919][T13734] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.398479][T13734] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 44212 - 0 [ 767.437803][T26412] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5053'. [ 767.471241][ T7205] [ 767.473611][ T7205] ============================================ [ 767.479755][ T7205] WARNING: possible recursive locking detected [ 767.485900][ T7205] syzkaller #0 Not tainted [ 767.490295][ T7205] -------------------------------------------- [ 767.496428][ T7205] kworker/0:11/7205 is trying to acquire lock: [ 767.502566][ T7205] ffff8880759da958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 767.512473][ T7205] [ 767.512473][ T7205] but task is already holding lock: [ 767.519821][ T7205] ffff888079019958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 767.529644][ T7205] [ 767.529644][ T7205] other info that might help us debug this: [ 767.537689][ T7205] Possible unsafe locking scenario: [ 767.537689][ T7205] [ 767.545120][ T7205] CPU0 [ 767.548385][ T7205] ---- [ 767.551646][ T7205] lock(&qdisc_xmit_lock_key#4); [ 767.556665][ T7205] lock(&qdisc_xmit_lock_key#4); [ 767.561678][ T7205] [ 767.561678][ T7205] *** DEADLOCK *** [ 767.561678][ T7205] [ 767.569803][ T7205] May be due to missing lock nesting notation [ 767.569803][ T7205] [ 767.578103][ T7205] 13 locks held by kworker/0:11/7205: [ 767.583470][ T7205] #0: ffff888031e39d40 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 767.594183][ T7205] #1: ffffc9000311fc40 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 767.607294][ T7205] #2: ffff88807b21e530 (&idev->mc_lock){+.+.}-{4:4}, at: mld_ifc_work+0x2d/0xe70 [ 767.616594][ T7205] #3: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x213/0xe40 [ 767.625809][ T7205] #4: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 767.634920][ T7205] #5: ffffffff8e95cc80 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 767.644868][ T7205] #6: ffff88807721f228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 767.657471][ T7205] #7: ffff888079019958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 767.667721][ T7205] #8: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 767.676665][ T7205] #9: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3c2/0x1070 [ 767.686394][ T7205] #10: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 767.695336][ T7205] #11: ffffffff8e95cc80 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 767.705338][ T7205] #12: ffff88807bae0228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 767.718029][ T7205] [ 767.718029][ T7205] stack backtrace: [ 767.723904][ T7205] CPU: 0 UID: 0 PID: 7205 Comm: kworker/0:11 Not tainted syzkaller #0 PREEMPT(full) [ 767.723921][ T7205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 767.723932][ T7205] Workqueue: mld mld_ifc_work [ 767.723952][ T7205] Call Trace: [ 767.723959][ T7205] [ 767.723965][ T7205] dump_stack_lvl+0xe8/0x150 [ 767.723983][ T7205] print_deadlock_bug+0x279/0x290 [ 767.724002][ T7205] __lock_acquire+0x253f/0x2cf0 [ 767.724020][ T7205] ? unwind_next_frame+0xa6/0x2550 [ 767.724041][ T7205] ? sch_direct_xmit+0x15f/0x4c0 [ 767.724053][ T7205] lock_acquire+0x106/0x350 [ 767.724067][ T7205] ? sch_direct_xmit+0x15f/0x4c0 [ 767.724083][ T7205] _raw_spin_lock+0x2e/0x40 [ 767.724106][ T7205] ? sch_direct_xmit+0x15f/0x4c0 [ 767.724117][ T7205] sch_direct_xmit+0x15f/0x4c0 [ 767.724132][ T7205] ? __pfx_sch_direct_xmit+0x10/0x10 [ 767.724144][ T7205] ? arp_create+0xe0/0x980 [ 767.724165][ T7205] __dev_queue_xmit+0x180f/0x3950 [ 767.724185][ T7205] ? __dev_queue_xmit+0x2b6/0x3950 [ 767.724204][ T7205] ? arpt_do_table+0x256/0x1e30 [ 767.724301][ T7205] ? __pfx___dev_queue_xmit+0x10/0x10 [ 767.724321][ T7205] ? __pfx_arpt_do_table+0x10/0x10 [ 767.724337][ T7205] ? trace_kmem_cache_alloc+0x29/0xe0 [ 767.724362][ T7205] ? NF_HOOK+0xa2/0x3c0 [ 767.724381][ T7205] NF_HOOK+0x33a/0x3c0 [ 767.724400][ T7205] ? __pfx_arp_xmit_finish+0x10/0x10 [ 767.724419][ T7205] ? NF_HOOK+0xa2/0x3c0 [ 767.724436][ T7205] ? __pfx_NF_HOOK+0x10/0x10 [ 767.724453][ T7205] ? lock_acquire+0x106/0x350 [ 767.724467][ T7205] ? __pfx_arp_xmit_finish+0x10/0x10 [ 767.724486][ T7205] ? inet_addr_type_dev_table+0x25/0x190 [ 767.724528][ T7205] arp_xmit+0x16c/0x270 [ 767.724546][ T7205] ? arp_xmit+0x23/0x270 [ 767.724564][ T7205] arp_solicit+0xbe0/0xe40 [ 767.724585][ T7205] ? arp_solicit+0x119/0xe40 [ 767.724604][ T7205] ? __pfx_arp_solicit+0x10/0x10 [ 767.724626][ T7205] ? __pfx_arp_solicit+0x10/0x10 [ 767.724645][ T7205] __neigh_event_send+0xf05/0x14d0 [ 767.724696][ T7205] neigh_resolve_output+0x198/0x750 [ 767.724717][ T7205] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 767.724734][ T7205] ? ip_finish_output2+0x3c2/0x1070 [ 767.724746][ T7205] ip_finish_output2+0xca9/0x1070 [ 767.724758][ T7205] ? ip_skb_dst_mtu+0x80b/0xa50 [ 767.724778][ T7205] ? ip_finish_output+0x40e/0x530 [ 767.724799][ T7205] ip_output+0x29f/0x450 [ 767.724817][ T7205] ? ip_output+0x5b/0x450 [ 767.724836][ T7205] iptunnel_xmit+0x621/0xd10 [ 767.724877][ T7205] ip_tunnel_xmit+0x193a/0x1f20 [ 767.724926][ T7205] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 767.724947][ T7205] ? __pfx_gre_build_header+0x10/0x10 [ 767.724989][ T7205] __gre_xmit+0x19e/0x240 [ 767.725007][ T7205] ? __pfx___gre_xmit+0x10/0x10 [ 767.725022][ T7205] ? look_up_lock_class+0x57/0x110 [ 767.725037][ T7205] ? iptunnel_handle_offloads+0x2fd/0x630 [ 767.725053][ T7205] erspan_xmit+0xa41/0x14d0 [ 767.725076][ T7205] ? __pfx_erspan_xmit+0x10/0x10 [ 767.725097][ T7205] dev_hard_start_xmit+0x2cd/0x830 [ 767.725118][ T7205] sch_direct_xmit+0x251/0x4c0 [ 767.725132][ T7205] ? __pfx_sch_direct_xmit+0x10/0x10 [ 767.725148][ T7205] __dev_queue_xmit+0x180f/0x3950 [ 767.725167][ T7205] ? __dev_queue_xmit+0x2b6/0x3950 [ 767.725187][ T7205] ? __pfx___dev_queue_xmit+0x10/0x10 [ 767.725204][ T7205] ? neigh_resolve_output+0x438/0x750 [ 767.725224][ T7205] ? eth_header+0x11b/0x200 [ 767.725262][ T7205] ? __asan_memcpy+0x40/0x70 [ 767.725287][ T7205] ? ip6_output+0x126/0x550 [ 767.725308][ T7205] ip6_output+0x340/0x550 [ 767.725324][ T7205] ? __pfx_ip6_output+0x10/0x10 [ 767.725340][ T7205] NF_HOOK+0x177/0x4f0 [ 767.725357][ T7205] ? __pfx_NF_HOOK+0x10/0x10 [ 767.725373][ T7205] ? __pfx_dst_output+0x10/0x10 [ 767.725389][ T7205] ? lockdep_hardirqs_on+0x7a/0x110 [ 767.725402][ T7205] ? __local_bh_enable_ip+0xd0/0x130 [ 767.725417][ T7205] ? icmp6_dst_alloc+0x3a6/0x440 [ 767.725457][ T7205] mld_sendpack+0x8b4/0xe40 [ 767.725479][ T7205] ? mld_sendpack+0x213/0xe40 [ 767.725494][ T7205] ? __pfx_mld_sendpack+0x10/0x10 [ 767.725517][ T7205] mld_ifc_work+0x835/0xe70 [ 767.725534][ T7205] ? process_scheduled_works+0xa70/0x1860 [ 767.725549][ T7205] process_scheduled_works+0xb5d/0x1860 [ 767.725572][ T7205] ? __pfx_process_scheduled_works+0x10/0x10 [ 767.725587][ T7205] ? assign_work+0x3d5/0x5e0 [ 767.725602][ T7205] worker_thread+0xa53/0xfc0 [ 767.725625][ T7205] kthread+0x389/0x470 [ 767.725642][ T7205] ? __pfx_worker_thread+0x10/0x10 [ 767.725655][ T7205] ? __pfx_kthread+0x10/0x10 [ 767.725671][ T7205] ret_from_fork+0x514/0xb70 [ 767.725700][ T7205] ? __pfx_ret_from_fork+0x10/0x10 [ 767.725713][ T7205] ? __switch_to+0xc79/0x1410 [ 767.725732][ T7205] ? __pfx_kthread+0x10/0x10 [ 767.725749][ T7205] ret_from_fork_asm+0x1a/0x30 [ 767.725770][ T7205] [ 768.179684][T13734] net_ratelimit: 65 callbacks suppressed [ 768.179703][T13734] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 768.205341][T24663] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 768.276843][T26412] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5053'. [ 768.309622][T13735] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 768.320076][T13735] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 768.419515][T13735] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 768.429764][T13735] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 768.529692][T24663] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 768.539652][T24663] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 768.649642][T13734] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 768.669476][T13734] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 773.189870][T13735] net_ratelimit: 78 callbacks suppressed [ 773.189891][T13735] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 773.210528][T13735] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 773.309872][T24659] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 773.319646][ T35] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 773.429735][T24659] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 773.450760][ T35] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 773.539665][ T35] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 773.559509][ T35] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 773.649682][ T35] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 773.669486][ T35] bond4: (slave ip6gretap1): failed to get link speed/duplex