last executing test programs: 23.405863387s ago: executing program 3 (id=20926): bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a54000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a050000000008000a40ffffff78080008401000000108000c4000000005080003400000001014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x200000010, &(0x7f0000000000)=0x7, 0x4) sendto$unix(r1, &(0x7f0000000080)="008e", 0x2, 0xd1, 0x0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000108000)={{0x0, 0x8, 0x100000000, 0xfffffffffffffffc, 0x0, 0x8, 0x9, 0x400, 0x3, 0x4, 0x36a58e4a, 0xd, 0x2, 0x75, 0x1}}) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_lsm={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000080000c300e0ff020000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x8, 0xd8, &(0x7f00000004c0)=""/216, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000140)=0x2, 0x4) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000f702010100000000000000000500ab93080004400000593228000280060003400001000006000340000500000400018008000100"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) setsockopt$inet_int(r4, 0x0, 0x17, 0x0, 0x0) 22.824793074s ago: executing program 4 (id=20928): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x0) close(0x3) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) listen(r0, 0x5) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)) ppoll(&(0x7f0000000180)=[{r4, 0x4}, {r6, 0x1c}], 0x2, 0x0, 0x0, 0x0) 20.003488859s ago: executing program 3 (id=20931): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) poll(&(0x7f0000000200)=[{r3, 0x1210}], 0x1, 0x1ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000026000000b700000000000010950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836801ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d09a0a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a504a0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e4a9f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c24"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r3, 0xda90) accept4(r3, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x0, 0x168, 0x9, 0x0, 0xb, 0x248, 0x250, 0x250, 0x248, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x100, 0x148, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@inet=@ipcomp={{0x30}, {[], 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) getsockopt$inet_tcp_buf(r4, 0x6, 0x21, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, r1, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6(0xa, 0x0, 0x3ff) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) unshare(0x6a060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) listen(r6, 0x2) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000068001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 17.683968223s ago: executing program 4 (id=20937): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x54) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac0000000000000000000000000000000000000000000000040000000000"], 0xc4}}, 0x4c050) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f00000000c0), 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c010000130001010000000000000000fc0200000000000000000000000000007f0000010000000000000000000000000100000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000300000000000000000000000000000008000000000000000000000000000000ffff00000000000000000000000000000001000000000000feffffff00000000000000030000000084000500ac141419000000000000000000000000000004d42b0000000a000000fc0100000000000000000000000000000000000004010300000000000200000006000000ac1414aa000000000000000000000000000004d42b0000000a000000fc00000000000000004b5074416000000000000001"], 0x13c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r7, 0x25, 0x0, @void}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = socket(0x10, 0x803, 0x0) socket(0x2, 0xa, 0x300) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) unshare(0x62040200) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 13.701808754s ago: executing program 0 (id=20946): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x11}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x2e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x35}, @void, @val={0xc, 0x99, {0x202c, 0x41}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00'}, 0x18) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000400)=r4, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000040)=0x8001, 0x4) epoll_create(0xffff) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8982, &(0x7f0000000140)={0x7, 'pimreg1\x00', {0x1}, 0xea}) write$tun(r5, &(0x7f0000000000)=ANY=[], 0x38) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x25dfdbff, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xffc, 0x10000003, 0xfffffffa, 0x0, 0x4000000, {}, {0x0, 0x0, 0xfffc, 0x0, 0x4, 0x8}, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x10012, r5, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_COOKIE(r8, 0x1, 0x4a, 0x0, &(0x7f0000000000)) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000004010000000000001c0001000600060008000000100007"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$AUTOFS_IOC_FAIL(r5, 0x9361, 0x10001) 12.877097185s ago: executing program 0 (id=20949): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0xffffffffffffffee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$rds(0x15, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x6}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000100000000000000009cf0b11800009500000001040000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000005c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0xff1f, 0x0, 0x0, 0x12}, 0x94) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) write(r1, &(0x7f0000000000)="2a000200010078", 0x7) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @private=0xa010100}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r7, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r8 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}}}, 0x24}}, 0x0) 11.585982327s ago: executing program 1 (id=20950): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="3800000018000100000000000000000002"], 0x38}}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000180)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000002d40)=ANY=[@ANYBLOB="18000000"], 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000010) pread64(r3, &(0x7f0000002840)=""/4096, 0x1000, 0x4) 11.004898452s ago: executing program 0 (id=20951): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/245, 0xf5}], 0x1, &(0x7f0000000640)=""/16, 0x10}, 0x3}], 0x1, 0x23, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000140)="d0", 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 9.95784029s ago: executing program 2 (id=20952): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind(r1, &(0x7f0000000000)=@hci={0x1f, 0xffff, 0x3}, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a54000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a050000000008000a40ffffff78080008401000000108000c4000000005080003400000001014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) write(r1, &(0x7f0000000100)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) nanosleep(&(0x7f0000000200)={0x0, 0x10000000}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) bind(r3, &(0x7f0000000300)=@generic={0x1f, "0000000000000100"}, 0x9) listen(r3, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000000c0)={{0x0, 0x3, 0x1000, 0x0, 0x6, 0x0, 0x8000000000000000, 0x3, 0x0, 0x9, 0x4, 0x1, 0x9, 0x81, 0x6}}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f00000010c0)={r4, 0x2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x6, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x6d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r8, r7}, 0xc) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000002100), r0) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000021c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x28, r9, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x24000080) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x5c, r6, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x40}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x1c, 0xa9, @random="c3dc9cb3c5d9d648046b446f6b47cf56cd53ea75c6a6ad00"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x40080) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00', @ifru_ivalue}) 8.839044331s ago: executing program 0 (id=20953): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000140)='blkio.bfq.time_recursive\x00', 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) r1 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) sendto$inet(r1, 0x0, 0x0, 0x2000076d, &(0x7f00000001c0)={0x2, 0xfeff, @broadcast}, 0x10) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000000)=0x63, 0x2) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r7) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000170000006400068014000300313233343536373839303132333435364c00040067636d286165732900000000000000000000000000000000000000000000000024"], 0x78}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, r6, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb0c}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000001b80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001b40)={&(0x7f0000001980)={0x19c, r6, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xdf}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffe4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_NODE_ID={0x35, 0x3, "3d30d15c2350f3a263d74e2424374a42b99aafb51535d00fa24e3058f070f7ad9e96457dc6a350d5b25abf49b33e29e81f"}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x4048015}, 0x4000) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) tee(r3, r0, 0x7, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000180)='!', 0x1, 0x448c4, 0x0, 0xd) recvmmsg(0xffffffffffffffff, &(0x7f0000002380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e00)=""/239, 0xef}, 0x10001}], 0x1, 0x2101, 0x0) 7.541659827s ago: executing program 1 (id=20954): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e00000027bd70000000000004000900a800000001d78771b90bd8a3b4914783c5432d69ca5b9538a900000003000600000000000200000000000001000000000000000002000100010000000000031600000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000400), &(0x7f0000000440)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r0, &(0x7f00000002c0)}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x18, 0x30, 0x25, 0x70bd2b, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) r4 = socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x22042, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000001640)="e494e7770b377da4c129", 0xa}, {0x0}], 0x2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x40, 0x20, 0x8, 0x6, {{0x5, 0x4, 0x2, 0x25, 0x14, 0x64, 0x0, 0x3, 0x29, 0x0, @remote, @rand_addr=0x64010100}}}}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@deltclass={0x70, 0x29, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x8, 0xa}, {0x4, 0x2}, {0xfff3, 0xc}}, [@tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x80, 0x5}}, @tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000090}, 0x2004400d) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6d"], 0xe0}], 0x1}, 0x40000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100fdfffffffdffffff1d00000008000300", @ANYRES32=r9, @ANYBLOB="48002f8008000100"], 0x64}}, 0x10) 7.443306354s ago: executing program 2 (id=20955): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0x11e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x63, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r2, 0x8995, &(0x7f0000000040)={'bond0\x00', @ifru_names='veth1_to_bond\x00'}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000500)=@ethtool_flash={0x33, 0xffff, './file0\x00'}}) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r6, &(0x7f0000006b40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)=""/4, 0x4}, {0x0}], 0x2, &(0x7f0000001180)=""/4096, 0x1000}, 0xfffff453}], 0x1, 0x10120, 0x0) setsockopt$inet_int(r6, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$inet_int(r6, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x42, &(0x7f0000000200)=0x7, 0x4) getsockopt$inet6_buf(r7, 0x29, 0x6, &(0x7f0000000100)=""/92, &(0x7f0000000000)=0x5c) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x5e}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) 7.276307757s ago: executing program 0 (id=20956): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010003704000080000000000000000000", @ANYRES32=r5, @ANYBLOB="c324050000000000240012800b00010067656e65766500001400028005000c0001"], 0x44}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @broadcast}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}], 0x38}, 0x200000e0) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x400000, 0x25dfdbfd, {{0x8}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1}}}}}, 0x28}}, 0x400c0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r7, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[], 0x3c}}, 0x8010) socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 7.179051344s ago: executing program 4 (id=20957): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e23, @local}, {0x2, 0x4e23, @loopback}, 0x486, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa, 0x2, 0x20e7}) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000280)={'bond0\x00', {0x2, 0x0, @local}}) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="1400000016000b63d25a80648c2566e506bce1e800294babfba15711165402766999a96cd6e87ed97285a92e15264fa882afe0c31be8eca4ea2a536b20ff15193bb574f9baef8e6e4fe50199e16ca5f9c3a094135eac97a8fb78f2eee1f9942b33e63735d3b025aa19a00ec0eb9623234589d9138f9a28346ee0a03ea4ecc0f1fe410620a18cd94edbd4b34aab417f647afb668a59cc2410b9bd37c21ad98913be9d000000", 0xa5}], 0x1}, 0x840) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x1a}, 0x0, 0x1, 0x0, 0x2, 0x6, 0x3fbc}, 0x20) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r4, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xff}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x20082000) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, r6, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x6, 0x2, 0x4246}, @TIPC_NLA_NET_NODEID={0x0, 0x3, 0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_netprio_ifpriomap(r7, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='gretap0 8', @ANYRESOCT=r8], 0x6e) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd7000fcdbdf2517000000440006803d00040063636d2861657329"], 0x58}, 0x1, 0x0, 0x0, 0x806}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x17c, r6, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x134, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x71c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x33}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000001}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x801}, 0x40000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002001100000008000a000100000008001800ac1414aa080019"], 0x58}}, 0x0) 6.475115241s ago: executing program 3 (id=20958): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) clock_gettime(0xfffffffffffffff6, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd700000000000020000000800", @ANYRES32, @ANYBLOB='\b\x00gA'], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}]}, &(0x7f0000000640)=0x10) getpeername$inet6(r2, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x4048050) r3 = socket(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e21, 0xa, @dev={0xfe, 0x80, '\x00', 0xa7}, 0x1}, 0x1c) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000500)={@dev={0xac, 0x14, 0x14, 0x26}, @local}, 0xc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c ', @ANYRESDEC=0x0], 0xa) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 6.16768678s ago: executing program 4 (id=20959): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80081}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x4, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4, 0x3ff9}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r10, &(0x7f0000003bc0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000003c0)=""/85, 0x55}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/221, 0xdd}], 0x3}, 0xff}], 0x1, 0x0, 0x0) r11 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c000009040000000200000000000000090000008c0634802e061b04cfdefcf9b430d6d36b44c222a713752e82868e8e7a346e1ba1d77b21858adba5db5769220762d5af24c4748e72f8525ecf6cd3db3598bba131fe0a39299db29021c40b82ed5f9f81c062ecb86da5b076591f41cc61e9e28d205335556e527ac80e9255972a6d5025a053f9baf14b76b249718c6c10d8183c9707bcae9a7315137dcb5a46b370d900d68a71f04689", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000200"/28], 0x48) setsockopt$IP_VS_SO_SET_FLUSH(r11, 0x0, 0x485, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x24000804}, 0x0) 5.969747049s ago: executing program 2 (id=20960): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r3 = socket$netlink(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000480)={'veth1_macvtap\x00', &(0x7f00000003c0)=@ethtool_rxnfc={0x32, 0xd, 0x2, {0x3, @usr_ip6_spec={@loopback, @dev={0xfe, 0x80, '\x00', 0xd}, 0x8001, 0x2, 0x7}, {0x0, @multicast, 0x3, 0x8, [0x7, 0xd]}, @sctp_ip6_spec={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x4e21, 0x4e21, 0xfa}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 0x200, 0x6, [0xff, 0x8]}, 0x5, 0x6}}}) write$tun(r0, &(0x7f0000000280)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x65, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}, {[@ra={0x94, 0x4, 0x1}]}}, {0x4e24, 0x4e20, 0x4d, 0x0, @opaque="741f38df1014247f9d50a4e12bde6944d1e1b77b033f03963ac27173ff6b6fd94db024c46e0942e19820cfc16e1626e5ce51d050a4e8025a73265bf130fdc1c42675b02b6a"}}}, 0x73) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r11, {0xc, 0xc}, {0x9, 0xfff1}, {0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 5.833532965s ago: executing program 0 (id=20961): unshare(0x6a040000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x14, r1, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000800000000008a116edfe", @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x9, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x6, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xfffffffe, 0x8001, 0x6}, 0x10) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000f00100001e65a127a940dcb5f0800000000217a2e73d76b097e6f7e0500000000000000f123fa60149bfbfbd043f678ac", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b00000000000c001a800800028004000180"], 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000108fdff00000080000000000200", @ANYRES32=0x0, @ANYRESDEC=r1], 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000600), r0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0xa7a028f7425b35c2, 0x0, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x5) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a31000000000800"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) recvfrom$inet(r3, 0x0, 0x0, 0xc9100120, 0x0, 0x0) 5.576057904s ago: executing program 1 (id=20962): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r0, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r2, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000013c0)=r1, 0x4) sendmsg$NFT_BATCH(r3, 0x0, 0xc048884) r4 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000680)={0x8, 0x7, 0x0, 'syz2\x00'}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) socket$netlink(0x10, 0x3, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x1000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4}) ioctl(r5, 0x8b1a, &(0x7f0000000040)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={0x0, 0x0, 0x34, 0x0, 0x1, 0x1}, 0x28) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20000000) 4.264285454s ago: executing program 1 (id=20963): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x36, 0x301, 0x70bd25, 0xfffffffc, {0x3}}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/cgroup\x00') setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000340)=0x8, 0x4) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, r4, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x480}, 0x4000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000020601080000000000006f14e90a00001400078008001140000000000500150000000000050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x60}}, 0x0) sendmsg$tipc(r2, 0x0, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r8, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r8, 0xda90) r9 = accept4(r8, 0x0, 0x0, 0x800) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r9, 0x84, 0x6c, &(0x7f0000000040), &(0x7f0000000080)=0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010004000000fcdbdf25030000000800010003"], 0x38}, 0x1, 0x0, 0x0, 0x45bf3c16e68e268e}, 0x3000c000) 4.230999963s ago: executing program 3 (id=20964): sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4040090) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r0}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r5, @ANYBLOB="8000260b0a0002000180c200000c00000c000e800500010003"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @random="fd137b07daa7", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x8, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x7, 0xf49}}}}}}, 0x0) 3.603491935s ago: executing program 2 (id=20965): bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a54000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a050000000008000a40ffffff78080008401000000108000c4000000005080003400000001014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x200000010, &(0x7f0000000000)=0x7, 0x4) sendto$unix(r1, &(0x7f0000000080)="008e", 0x2, 0xd1, 0x0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000108000)={{0x0, 0x8, 0x100000000, 0xfffffffffffffffc, 0x0, 0x8, 0x9, 0x400, 0x3, 0x4, 0x36a58e4a, 0xd, 0x2, 0x75, 0x1}}) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_lsm={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000080000c300e0ff020000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x8, 0xd8, &(0x7f00000004c0)=""/216, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000140)=0x2, 0x4) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000f702010100000000000000000500ab93080004400000593228000280060003400001000006000340000500000400018008000100"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) setsockopt$inet_int(r4, 0x0, 0x17, 0x0, 0x0) 3.602763267s ago: executing program 3 (id=20966): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x4000000, 0xe, 0x0, &(0x7f0000000040)="976d9023d56482cd284a63da5397", 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c5645", 0x0, 0x8000}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150005000000280016800c0001"], 0x4c}}, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000002, 0x28011, r0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000456d9dee5713be00020000008d261000040000009500000000000000d37fdedd955c81fcbe208cebace322c8d9c834e0455db87d6872de0d39d39d419965d76d83aea66bdfef4ef624f37900827e6c7815ecbd4356f650a0ae43b86962a812a33208dd2ed69584cf44706374479582758930bc60d410c871000000000000000000000016f75f698af74d37ef2826e8edd7874b128a2412688a9420df2e3a37d3861e321b4876150e1582942d31c9868428183b0bd6cf8656191e09b7bd4b0e8dbc44c21c2d1df01b35c4a888f42569e2e6f1673fc2a3616452e25699b5ffd2a506b0c8b4d66eb0bbba42e0456ce2631d9af2b7aafd9450e1d331ae24d0447672095b5db3a9fc5f013a4ec2b205ac2e1f901747429dc42e940b4222334a8560210254a53a44e4c3bc081b6af8"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r5, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) unshare(0x26020480) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xee, 0x4000004) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r7, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r7, 0x89ed, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="d8000000100081044e81f782db44b96d001d006a0f000000050000002900150006000e2603600e120900040044000000a80016000a0001400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de643ec0dd6e4edef76874fbe0f32b1608621e9e0", 0xd8}], 0x1}, 0x20000080) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000070000000000000013d38000911171000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x2f, 0x9, 0x0, 0x0, 0x24, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8000, 0x0, 0x3}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r3, r8, 0x25, 0x0, @void}, 0x10) 3.602537927s ago: executing program 4 (id=20967): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x0) close(0x3) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) listen(r0, 0x5) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)) ppoll(&(0x7f0000000180)=[{r4, 0x4}, {r6, 0x1c}], 0x2, 0x0, 0x0, 0x0) 1.710170409s ago: executing program 1 (id=20968): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) r2 = socket(0x2, 0x80805, 0x0) getsockopt$MRT(r2, 0x0, 0xce, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000001580)={'erspan0\x00', r1, 0x40, 0x7807, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x1, 0x0, 0x0, @empty, @multicast2}}}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket(0x2b, 0x1, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000804}, 0x2004c0c0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000240)={0x0, 0x5}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r1, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 1.68608399s ago: executing program 3 (id=20969): socket$igmp6(0xa, 0x3, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8800) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000140)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0x0, 0x2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r2, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x65}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xffff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x200000c0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(r4, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={0x0, 0x278}}, 0x40811) ioctl(r0, 0x4, &(0x7f0000000700)) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f00000000c0)) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) socket$inet_sctp(0x2, 0x1, 0x84) 1.489501017s ago: executing program 2 (id=20970): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0x11e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x63, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r2, 0x8995, &(0x7f0000000040)={'bond0\x00', @ifru_names='veth1_to_bond\x00'}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000500)=@ethtool_flash={0x33, 0xffff, './file0\x00'}}) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r6, &(0x7f0000006b40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)=""/4, 0x4}, {0x0}], 0x2, &(0x7f0000001180)=""/4096, 0x1000}, 0xfffff453}], 0x1, 0x10120, 0x0) setsockopt$inet_int(r6, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$inet_int(r6, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x42, &(0x7f0000000200)=0x7, 0x4) getsockopt$inet6_buf(r7, 0x29, 0x6, &(0x7f0000000100)=""/92, &(0x7f0000000000)=0x5c) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x5e}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) close(r5) 371.991042ms ago: executing program 1 (id=20971): socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="1c00000018002551075c0165ff0ffc02802000030011000500e1000c04", 0x1d) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=ANY=[@ANYBLOB="0500000080000400001a0000f7"], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x40, 0x0, 0x3, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r2, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) write(r5, &(0x7f0000000080)="05000000010001", 0x7) bind$bt_hci(r4, 0x0, 0x0) write(r4, &(0x7f0000000340)="07000000010000", 0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710443000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 70.711967ms ago: executing program 2 (id=20972): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000800)) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socket(0x1, 0x4, 0xa) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, &(0x7f00000000c0)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x71, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x86dd, 0x26, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000080)) 0s ago: executing program 4 (id=20973): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) r1 = accept4(r0, 0x0, 0x0, 0x800) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, 0x0, &(0x7f0000000080)) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f00000005c0)={'pim6reg\x00', {0x2, 0x0, @local}}) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000340)={@private, @local, @broadcast}, &(0x7f0000000380)=0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}}, 0x20000000) socket(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000100)="e9f584f2300b82e8ab4522c5a3bc374e", 0x10) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) ioctl$sock_proto_private(r4, 0x89e2, &(0x7f0000000680)="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") sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005d00)={0x14, 0x2d, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0) kernel console output (not intermixed with test programs): e [ 1562.649551][T19191] bond9: (slave wireguard0): Enslaving as an active interface with an up link [ 1562.761504][T19189] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1562.761546][T19189] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1562.761590][T19189] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1562.828608][T19189] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1562.848559][T19189] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1562.993756][T19219] bond0: Device is already in use. [ 1563.002499][T19214] bond0: Device is already in use. [ 1563.317569][T19225] syzkaller1: entered promiscuous mode [ 1563.317593][T19225] syzkaller1: entered allmulticast mode [ 1564.436227][ C1] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 1565.614184][T19276] netlink: 24 bytes leftover after parsing attributes in process `syz.2.20238'. [ 1566.084093][T19276] vlan0: entered promiscuous mode [ 1566.468806][T19306] netlink: 'syz.4.20250': attribute type 15 has an invalid length. [ 1566.531072][T19306] netlink: 'syz.4.20250': attribute type 15 has an invalid length. [ 1566.623495][T19311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20249'. [ 1566.641795][ T1168] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 1566.654630][T28734] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 1566.666065][T28734] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 1566.666112][T28734] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 1566.789715][T19316] bond9: left promiscuous mode [ 1566.789740][T19316] wireguard0: left promiscuous mode [ 1566.889089][T19322] xt_cgroup: invalid path, errno=-2 [ 1567.861012][T19338] ip_tables: iptables: counters copy to user failed while replacing table [ 1568.846160][T19342] netlink: 'syz.2.20262': attribute type 3 has an invalid length. [ 1569.207608][T19359] IPVS: Unknown mcast interface: lo [ 1569.553941][T19368] lo speed is unknown, defaulting to 1000 [ 1569.554010][T19368] lo speed is unknown, defaulting to 1000 [ 1569.554894][T19368] lo speed is unknown, defaulting to 1000 [ 1569.667168][T17678] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1569.692353][T17678] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1569.693479][T19369] vlan0: left promiscuous mode [ 1569.717169][T17678] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 1569.717396][T17678] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1569.724860][T19369] A link change request failed with some changes committed already. Interface vxlan2 may have been left with an inconsistent configuration, please check. [ 1569.759837][T26589] lo speed is unknown, defaulting to 1000 [ 1569.763091][T26589] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 1569.807115][T19368] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1569.807161][T19368] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1569.807206][T19368] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1569.866289][T26589] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 1569.889587][T26589] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1569.909357][T19368] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1569.946771][T26589] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1570.042716][T19368] lo speed is unknown, defaulting to 1000 [ 1570.056471][T19368] lo speed is unknown, defaulting to 1000 [ 1570.060204][T19368] lo speed is unknown, defaulting to 1000 [ 1570.080991][T19368] lo speed is unknown, defaulting to 1000 [ 1570.085093][T19368] lo speed is unknown, defaulting to 1000 [ 1570.266418][T26589] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1570.458724][T19378] syzkaller0: entered promiscuous mode [ 1570.458748][T19378] syzkaller0: entered allmulticast mode [ 1570.503328][T19378] tipc: Enabled bearer , priority 0 [ 1570.526233][T19377] tipc: Resetting bearer [ 1570.594254][T19377] tipc: Disabling bearer [ 1570.756860][T26589] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 1570.779062][ T1145] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 1571.120493][T19386] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1571.155184][T19386] bond14: (slave bond15): Enslaving as an active interface with an up link [ 1571.227404][T19387] bond14: (slave gretap4): Enslaving as an active interface with an up link [ 1571.432980][T19411] ip_tables: iptables: counters copy to user failed while replacing table [ 1571.528527][T19417] ip_tables: iptables: counters copy to user failed while replacing table [ 1571.653289][T19410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20281'. [ 1571.673878][T19410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20281'. [ 1572.224364][T19428] netlink: 'syz.2.20286': attribute type 1 has an invalid length. [ 1572.224392][T19428] netlink: 756 bytes leftover after parsing attributes in process `syz.2.20286'. [ 1572.980592][T19436] syzkaller0: entered promiscuous mode [ 1572.980620][T19436] syzkaller0: entered allmulticast mode [ 1581.029706][T19540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20320'. [ 1581.953143][T19553] netlink: 68 bytes leftover after parsing attributes in process `syz.2.20323'. [ 1585.516943][T19540] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 1585.968314][T19558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20324'. [ 1586.007489][T19558] xt_TCPMSS: Only works on TCP SYN packets [ 1586.202594][T19569] macsec1: entered promiscuous mode [ 1586.264896][T19563] macvlan9: entered promiscuous mode [ 1586.264922][T19563] vlan4: entered promiscuous mode [ 1586.283689][T19563] vlan4: left promiscuous mode [ 1587.184803][T19586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20334'. [ 1587.184833][T19586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20334'. [ 1587.261998][T19587] netlink: 1200 bytes leftover after parsing attributes in process `syz.4.20335'. [ 1587.262112][T19587] netlink: 1200 bytes leftover after parsing attributes in process `syz.4.20335'. [ 1587.359828][T19594] netlink: 'syz.0.20338': attribute type 1 has an invalid length. [ 1588.312552][T19594] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 1588.675809][T19600] gretap0: left promiscuous mode [ 1588.756143][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1588.955475][T19600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1589.218510][T19600] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1589.224316][T19600] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 1589.260437][T19600] veth1_macvtap: left promiscuous mode [ 1589.283194][T19600] veth0_macvtap: left promiscuous mode [ 1589.297111][T19600] veth0_macvtap: entered promiscuous mode [ 1589.305216][T19600] veth1_macvtap: entered promiscuous mode [ 1589.369272][T19600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1589.369499][T19600] batman_adv: batadv0: Interface activated: netdevsim0 [ 1589.374946][T19600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1589.405572][T19600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1589.417704][T19600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1589.441281][T19600] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1589.455706][T19600] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1589.476219][T26589] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1589.533322][T32167] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1589.563648][T19617] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 1590.436417][T17678] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1591.307382][T19639] netlink: 40 bytes leftover after parsing attributes in process `syz.3.20349'. [ 1591.308493][T19639] netlink: 40 bytes leftover after parsing attributes in process `syz.3.20349'. [ 1591.957037][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1592.318687][T19623] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 1592.391971][T19623] bond0 (unregistering): Released all slaves [ 1592.458481][T32167] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1592.487494][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1592.488051][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1592.579638][T32167] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1592.583404][T32167] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1592.601366][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1593.006289][T26589] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1593.126506][T19656] syzkaller0: entered promiscuous mode [ 1593.126534][T19656] syzkaller0: entered allmulticast mode [ 1593.236420][ C1] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 1593.241784][T19662] netlink: 64 bytes leftover after parsing attributes in process `syz.1.20355'. [ 1593.812396][T19678] netlink: 'syz.0.20358': attribute type 1 has an invalid length. [ 1594.090449][T19678] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1594.185587][T19680] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1594.632017][T19692] netlink: 'syz.1.20362': attribute type 1 has an invalid length. [ 1594.679460][T19694] netlink: 28 bytes leftover after parsing attributes in process `syz.0.20363'. [ 1594.738123][T19700] netlink: 28 bytes leftover after parsing attributes in process `syz.0.20363'. [ 1594.866367][T19692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1596.033697][T19717] netlink: 'syz.3.20367': attribute type 4 has an invalid length. [ 1596.162051][T19727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20371'. [ 1596.228149][T19727] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1596.516209][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1597.042976][T19735] netlink: 'syz.0.20373': attribute type 1 has an invalid length. [ 1597.218550][T19727] macvlan0: entered promiscuous mode [ 1597.218575][T19727] macvlan0: entered allmulticast mode [ 1597.225393][T19727] bond14: entered promiscuous mode [ 1597.250124][T19727] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1597.275557][T19727] bond14: left promiscuous mode [ 1597.443733][T19736] bond11: (slave bridge12): Enslaving as a backup interface with an up link [ 1597.530877][T19737] macvlan0: entered promiscuous mode [ 1597.530902][T19737] macvlan0: entered allmulticast mode [ 1597.533985][T19737] bond11: entered promiscuous mode [ 1597.534006][T19737] bridge12: entered promiscuous mode [ 1597.568482][T19737] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1597.585138][T19740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20376'. [ 1597.601196][ T5627] block nbd7: Receive control failed (result -1) [ 1597.661838][T19737] bond11: left promiscuous mode [ 1597.661862][T19737] bridge12: left promiscuous mode [ 1598.812707][T19763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20381'. [ 1598.893522][T19765] syzkaller0: entered promiscuous mode [ 1598.893548][T19765] syzkaller0: entered allmulticast mode [ 1599.372191][T19773] ±ÿ: entered promiscuous mode [ 1599.387692][T19773] tunl0: entered promiscuous mode [ 1599.460237][T19773] gre0: entered promiscuous mode [ 1599.641980][T19773] gretap0: entered promiscuous mode [ 1599.850499][T19773] erspan0: entered promiscuous mode [ 1600.063821][T19773] ip_vti0: entered promiscuous mode [ 1600.186559][T19773] ip6_vti0: entered promiscuous mode [ 1600.282677][T19773] sit0: entered promiscuous mode [ 1600.440505][T19773] ip6tnl0: entered promiscuous mode [ 1600.751328][T19773] ip6gre0: entered promiscuous mode [ 1600.782646][T19773] ip6gretap0: entered promiscuous mode [ 1600.836737][T19773] bridge0: entered promiscuous mode [ 1600.887321][T19773] dummy0: entered promiscuous mode [ 1600.911673][T19773] nlmon0: entered promiscuous mode [ 1600.917203][ C1] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 1600.969483][T19773] batadv0: entered promiscuous mode [ 1600.993866][T19773] veth0: entered promiscuous mode [ 1601.059208][T19773] veth1: entered promiscuous mode [ 1601.104688][T19773] wg0: entered promiscuous mode [ 1601.129421][T19773] wg1: entered promiscuous mode [ 1601.151584][T19773] wg2: entered promiscuous mode [ 1601.215413][T19773] veth0_to_bridge: entered promiscuous mode [ 1601.229167][T19773] bridge_slave_0: entered promiscuous mode [ 1601.264060][T19773] veth1_to_bridge: entered promiscuous mode [ 1601.304306][T19773] bridge_slave_1: entered promiscuous mode [ 1601.376669][T19773] veth0_to_bond: entered promiscuous mode [ 1601.407393][T19773] bond_slave_0: entered promiscuous mode [ 1601.432810][T19773] veth1_to_bond: entered promiscuous mode [ 1601.463993][T19773] bond_slave_1: entered promiscuous mode [ 1601.497971][T19773] veth0_to_team: entered promiscuous mode [ 1601.529115][T19773] team_slave_0: entered promiscuous mode [ 1601.581039][T19773] C: entered promiscuous mode [ 1601.676514][T19773] team_slave_1: entered promiscuous mode [ 1601.705694][T19773] veth1_to_batadv: entered promiscuous mode [ 1601.760381][T19773] batadv_slave_1: entered promiscuous mode [ 1601.789816][T19773] xfrm0: entered promiscuous mode [ 1601.826849][T19773] veth0_to_hsr: entered promiscuous mode [ 1601.941840][T19773] hsr0: entered promiscuous mode [ 1602.022610][T19773] macvtap0: entered promiscuous mode [ 1602.062518][T19773] macsec0: entered promiscuous mode [ 1602.094068][T19773] geneve0: entered promiscuous mode [ 1602.123335][T19773] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 1602.124029][T19773] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1602.163068][T19773] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 1602.227543][T19773] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 1602.258758][T19773] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 1602.292991][T19773] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 1602.309824][T19773] geneve2: entered promiscuous mode [ 1602.331318][T19773] veth2: entered promiscuous mode [ 1602.367654][T19773] veth3: entered promiscuous mode [ 1602.437321][T19773] mac80211_hwsim hwsim14 wlan2: entered promiscuous mode [ 1602.446272][T19773] bridge1: entered promiscuous mode [ 1602.494060][T19773] mac80211_hwsim hwsim18 wlan3: entered promiscuous mode [ 1602.547685][T19773] ip6tnl1: entered promiscuous mode [ 1602.585082][T19773] bond1: entered promiscuous mode [ 1602.659672][T19773] mac80211_hwsim hwsim24 wlan4: entered promiscuous mode [ 1602.681526][T19773] bridge2: entered promiscuous mode [ 1602.730713][T19773] mac80211_hwsim hwsim26 wlan5: entered promiscuous mode [ 1602.753227][T19773] geneve1: entered promiscuous mode [ 1602.755134][T19773] sit1: entered promiscuous mode [ 1602.755277][T19773] ip6erspan0: entered promiscuous mode [ 1602.755411][T19773] erspan1: entered promiscuous mode [ 1602.755551][T19773] mac80211_hwsim hwsim30 wlan6: entered promiscuous mode [ 1602.755711][T19773] bareudp0: entered promiscuous mode [ 1602.755882][T19773] mac80211_hwsim hwsim32 wlan7: entered promiscuous mode [ 1602.804132][T19773] mac80211_hwsim hwsim33 wlan8: entered promiscuous mode [ 1602.804336][T19773] ip6tnl2: entered promiscuous mode [ 1602.805113][T19773] bridge3: entered promiscuous mode [ 1602.805407][T19773] bond0: entered promiscuous mode [ 1602.824063][T19773] bridge4: entered promiscuous mode [ 1602.824234][T19773] pim6reg: entered promiscuous mode [ 1602.824420][T19773] bond2: entered promiscuous mode [ 1602.824550][T19773] bond3: entered promiscuous mode [ 1602.824686][T19773] geneve3: entered promiscuous mode [ 1602.851408][T19773] veth4: entered promiscuous mode [ 1602.853795][T19773] veth5: entered promiscuous mode [ 1602.856664][T19773] ip6tnl3: entered promiscuous mode [ 1602.858843][T19773] veth6: entered promiscuous mode [ 1602.861127][T19773] veth7: entered promiscuous mode [ 1602.863738][T19773] bond4: entered promiscuous mode [ 1602.896102][T19773] ip6gretap1: entered promiscuous mode [ 1602.896280][T19773] ip6tnl4: entered promiscuous mode [ 1602.896411][T19773] macvlan2: entered promiscuous mode [ 1602.896704][T19773] veth8: entered promiscuous mode [ 1602.896888][T19773] veth9: entered promiscuous mode [ 1602.897047][T19773] ip6tnl5: entered promiscuous mode [ 1602.897178][T19773] macvlan3: entered promiscuous mode [ 1602.897337][T19773] vxlan0: entered promiscuous mode [ 1602.897471][T19773] ip6_vti1: entered promiscuous mode [ 1602.897596][T19773] geneve4: entered promiscuous mode [ 1602.897891][T19773] vxlan1: entered promiscuous mode [ 1602.898166][T19773] ip6tnl6: entered promiscuous mode [ 1602.898289][T19773] macvlan4: entered promiscuous mode [ 1602.898455][T19773] bridge5: entered promiscuous mode [ 1602.898596][T19773] sit2: entered promiscuous mode [ 1602.898730][T19773] vxcan1: entered promiscuous mode [ 1602.899022][T19773] vxcan2: entered promiscuous mode [ 1602.899184][T19773] mac80211_hwsim hwsim7 nicvf0: entered promiscuous mode [ 1602.899354][T19773] gtp0: entered promiscuous mode [ 1602.899514][T19773] geneve5: entered promiscuous mode [ 1602.899639][T19773] bond5: entered promiscuous mode [ 1602.899781][T19773] syztnl2: entered promiscuous mode [ 1602.900158][T19773] vlan1: entered promiscuous mode [ 1603.096601][T19773] bridge6: entered promiscuous mode [ 1603.096806][T19773] ip6gre1: entered promiscuous mode [ 1603.096985][T19773] gre1: entered promiscuous mode [ 1603.097114][T19773] mac80211_hwsim hwsim53 wlan0: entered promiscuous mode [ 1603.097272][T19773] gtp1: entered promiscuous mode [ 1603.097429][T19773] mac80211_hwsim hwsim54 wlan9: entered promiscuous mode [ 1603.097613][T19773] gre2: entered promiscuous mode [ 1603.097733][T19773] bridge7: entered promiscuous mode [ 1603.097871][T19773] gtp2: entered promiscuous mode [ 1603.098022][T19773] ipip0: entered promiscuous mode [ 1603.098137][T19773] bond6: entered promiscuous mode [ 1603.098153][T19773] gretap1: entered promiscuous mode [ 1603.098603][T19773] bond7: entered promiscuous mode [ 1603.098734][T19773] veth10: entered promiscuous mode [ 1603.098950][T19773] veth11: entered promiscuous mode [ 1603.099109][T19773] gretap2: entered promiscuous mode [ 1603.099234][T19773] bond8: entered promiscuous mode [ 1603.099365][T19773] bridge8: entered promiscuous mode [ 1603.099533][T19773] bridge9: entered promiscuous mode [ 1603.099666][T19773] veth12: entered promiscuous mode [ 1603.099842][T19773] veth13: entered promiscuous mode [ 1603.099995][T19773] mac80211_hwsim hwsim57 wlan10: entered promiscuous mode [ 1603.100173][T19773] bridge10: entered promiscuous mode [ 1603.100304][T19773] veth14: entered promiscuous mode [ 1603.100455][T19773] veth15: entered promiscuous mode [ 1603.100612][T19773] gre3: entered promiscuous mode [ 1603.100727][T19773] dvmrp6: entered promiscuous mode [ 1603.100883][T19773] bridge11: entered promiscuous mode [ 1603.282652][T19773] bond9: entered promiscuous mode [ 1603.282677][T19773] wireguard0: entered promiscuous mode [ 1603.418313][T19773] syzkaller0: entered promiscuous mode [ 1603.456783][T19773] bond10: entered promiscuous mode [ 1603.551760][T19773] bond11: entered promiscuous mode [ 1603.551787][T19773] bridge12: entered promiscuous mode [ 1603.636420][ T1145] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1603.636487][ T1145] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1603.636529][ T1145] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1603.636571][ T1145] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1603.700937][T19783] batman_adv: batadv0: Adding interface: dummy0 [ 1603.700955][T19783] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1603.700990][T19783] batman_adv: batadv0: Interface activated: dummy0 [ 1603.797915][T19787] batadv0: mtu less than device minimum [ 1603.801234][T19787] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1603.802759][T19787] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1603.804279][T19787] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1603.805823][T19787] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1603.808345][T19787] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1603.809878][T19787] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1603.811396][T19787] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1603.812930][T19787] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1603.814442][T19787] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1604.461444][T19797] syzkaller0: entered allmulticast mode [ 1604.584766][T19804] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20393'. [ 1605.093994][T19807] bridge8: port 1(veth11) entered blocking state [ 1605.094131][T19807] bridge8: port 1(veth11) entered disabled state [ 1605.094339][T19807] veth11: entered allmulticast mode [ 1605.148499][T19807] veth11: entered promiscuous mode [ 1605.295520][T19809] bridge8: port 2(veth13) entered blocking state [ 1605.295649][T19809] bridge8: port 2(veth13) entered disabled state [ 1605.295808][T19809] veth13: entered allmulticast mode [ 1605.352764][T19809] veth13: entered promiscuous mode [ 1605.467926][T19819] syzkaller0: entered promiscuous mode [ 1605.468137][T19819] syzkaller0: entered allmulticast mode [ 1606.974737][T19848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20403'. [ 1607.592243][T19855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20408'. [ 1608.337488][T29499] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1608.457753][T29499] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1608.503108][T19860] netlink: 'syz.0.20408': attribute type 5 has an invalid length. [ 1608.503135][T19860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20408'. [ 1609.077922][T29499] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1609.409491][T29499] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1609.679705][T19883] netlink: 'syz.0.20416': attribute type 1 has an invalid length. [ 1609.932771][T19883] bond12: entered promiscuous mode [ 1609.947484][T19883] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1610.058558][T19893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20417'. [ 1610.065616][T19887] macvtap1: entered allmulticast mode [ 1610.203209][T19890] bond12: (slave bridge14): making interface the new active one [ 1610.203236][T19890] bridge14: entered promiscuous mode [ 1610.238002][T19890] bond12: (slave bridge14): Enslaving as an active interface with an up link [ 1610.238363][T19893] bond0: option arp_all_targets: invalid value (183) [ 1610.900669][T19901] netlink: 'syz.1.20420': attribute type 4 has an invalid length. [ 1610.900695][T19901] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20420'. [ 1611.141010][T19910] batman_adv: batadv0: Adding interface: veth0 [ 1611.141032][T19910] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1611.141064][T19910] batman_adv: batadv0: Interface activated: veth0 [ 1611.383526][T19910] batman_adv: batadv0: Removing interface: netdevsim0 [ 1611.384662][T19910] batman_adv: batadv0: Interface deactivated: veth0 [ 1611.384684][T19910] batman_adv: batadv0: Removing interface: veth0 [ 1611.726356][T19920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20425'. [ 1613.283635][T19939] tipc: Enabling of bearer rejected, already enabled [ 1613.388825][T19941] syzkaller0: entered promiscuous mode [ 1613.388851][T19941] syzkaller0: entered allmulticast mode [ 1614.449237][T19956] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20439'. [ 1615.033670][T19968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20441'. [ 1615.133335][T19944] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 1615.163311][T19944] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 1615.380432][T19964] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1615.397437][T19964] bond13: (slave macvlan0): Enslaving as an active interface with a down link [ 1615.450976][T19956] macvlan9: entered promiscuous mode [ 1615.451002][T19956] macvlan9: entered allmulticast mode [ 1615.456345][T19956] bond9: entered promiscuous mode [ 1615.475665][T19956] 8021q: adding VLAN 0 to HW filter on device macvlan9 [ 1615.535276][T19956] bond9: left promiscuous mode [ 1615.778215][T19969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1616.084131][T19969] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1616.175770][T19969] veth1_macvtap: left promiscuous mode [ 1616.219326][T19969] veth1_macvtap: entered promiscuous mode [ 1616.243249][T19969] geneve0: left promiscuous mode [ 1616.320391][T19969] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1616.321085][T19969] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1616.407943][T19969] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1616.476854][T19969] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1616.613542][T19986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20445'. [ 1616.632448][T19969] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1616.814154][T19969] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1616.871141][T19969] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1616.929519][T19969] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1616.981546][T19969] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1617.093675][T19969] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1617.141295][T19969] erspan0: entered promiscuous mode [ 1617.173163][T19969] geneve0: entered promiscuous mode [ 1617.191341][T19969] batman_adv: batadv0: Interface activated: macvlan3 [ 1617.208500][T19969] 8021q: adding VLAN 0 to HW filter on device macsec4 [ 1617.303844][T19969] bridge0: port 1(batadv1) entered blocking state [ 1617.303990][T19969] bridge0: port 1(batadv1) entered listening state [ 1617.304308][T19969] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1617.499150][T19969] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1617.520537][T19969] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1617.597000][T19969] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1617.632718][ T13] net_ratelimit: 11 callbacks suppressed [ 1617.632742][ T13] bond10: (slave batadv0): link status up again after 0 ms [ 1617.634489][T19969] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1617.653151][ T13] bond10: (slave batadv0): link status up again after 0 ms [ 1617.669942][ T13] bond10: (slave batadv0): link status up again after 0 ms [ 1617.684211][T19969] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1617.693492][ T13] bond10: (slave batadv0): link status up again after 0 ms [ 1617.707024][ T13] bond10: (slave batadv0): link status up again after 0 ms [ 1617.745105][ T173] bond10: (slave batadv0): link status up again after 0 ms [ 1617.756664][ T173] bond10: (slave batadv0): link status up again after 0 ms [ 1617.781778][T28734] bond10: (slave batadv0): link status up again after 0 ms [ 1617.804870][T28734] bond10: (slave batadv0): link status up again after 0 ms [ 1617.827056][T19999] bond10: (slave batadv0): link status up again after 0 ms [ 1617.901781][T19969] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1617.975336][T19971] netlink: 'syz.1.20442': attribute type 3 has an invalid length. [ 1618.043854][T19971] netlink: 'syz.1.20442': attribute type 3 has an invalid length. [ 1618.071168][T19974] bond10: entered promiscuous mode [ 1618.071194][T19974] bond10: entered allmulticast mode [ 1618.073452][T17658] bridge0: entered promiscuous mode [ 1618.073529][T17658] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1618.327314][ T1168] bridge8: port 1(veth11) entered blocking state [ 1618.327432][ T1168] bridge8: port 1(veth11) entered forwarding state [ 1618.352601][ T1168] bridge8: port 2(veth13) entered blocking state [ 1618.352746][ T1168] bridge8: port 2(veth13) entered forwarding state [ 1618.458109][ T1145] bond13: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 1618.461049][ T1145] bond13: (slave veth9): making interface the new active one [ 1618.464929][ T1145] bond13: active interface up! [ 1618.491879][T19986] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 1618.498292][T19992] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 1618.558863][ T50] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1618.558906][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1618.558936][ T50] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0 [ 1618.600162][ T50] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1618.600200][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1618.600230][ T50] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0 [ 1618.615821][ T50] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1618.615858][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1618.615889][ T50] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0 [ 1618.782897][ T173] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1618.783126][ T173] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1618.826525][T17658] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1619.034358][T20007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20448'. [ 1619.074629][ T5627] block nbd8: Receive control failed (result -1) [ 1619.168811][T17658] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 1619.201409][T17658] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1619.228394][T17658] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1619.366118][T17658] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 1619.685047][T28734] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 1620.653612][T20025] xt_hashlimit: max too large, truncated to 1048576 [ 1620.653810][T20025] No such timeout policy "syz1" [ 1620.781912][ T59] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 1620.798452][ T59] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 1620.952432][T20032] netlink: 'syz.4.20457': attribute type 1 has an invalid length. [ 1621.372092][T20032] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1621.718863][T20042] bond10: (slave geneve4): making interface the new active one [ 1621.914098][T20042] bond10: (slave geneve4): Enslaving as an active interface with an up link [ 1622.559065][T20055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20462'. [ 1622.648107][T20055] bond15: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1622.820599][T20055] bond15 (unregistering): Released all slaves [ 1623.473049][T20069] xt_CT: No such helper "netbios-ns" [ 1623.490260][ T59] net_ratelimit: 50 callbacks suppressed [ 1623.490284][ T59] bond10: (slave batadv0): failed to get link speed/duplex [ 1623.602538][T32167] bond10: (slave batadv0): failed to get link speed/duplex [ 1623.708472][ T59] bond10: (slave batadv0): failed to get link speed/duplex [ 1623.816798][T32165] bond10: (slave batadv0): failed to get link speed/duplex [ 1623.930409][ T12] bond10: (slave batadv0): failed to get link speed/duplex [ 1624.042539][T19999] bond10: (slave batadv0): failed to get link speed/duplex [ 1624.153797][T20084] bond10: (slave batadv0): failed to get link speed/duplex [ 1624.257289][T20083] bond10: (slave batadv0): failed to get link speed/duplex [ 1624.314451][T20088] netlink: 'syz.0.20468': attribute type 1 has an invalid length. [ 1624.314479][T20088] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.20468'. [ 1624.314498][T20088] netlink: 'syz.0.20468': attribute type 1 has an invalid length. [ 1624.314513][T20088] netlink: 2016 bytes leftover after parsing attributes in process `syz.0.20468'. [ 1624.372350][T20084] bond10: (slave batadv0): failed to get link speed/duplex [ 1624.446568][T20092] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20468'. [ 1624.448471][ T5627] block nbd9: Receive control failed (result -107) [ 1624.477609][T20087] bond10: (slave batadv0): failed to get link speed/duplex [ 1624.535271][T20091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20470'. [ 1624.973951][T20097] syzkaller0: entered promiscuous mode [ 1624.973979][T20097] syzkaller0: entered allmulticast mode [ 1625.156427][ C1] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 1625.156451][ C1] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 1626.054678][T20112] netlink: 'syz.1.20475': attribute type 1 has an invalid length. [ 1626.863929][T20112] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 1626.869396][T20113] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 1626.875342][T20114] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 1626.921618][T20115] bridge9: entered promiscuous mode [ 1626.921646][T20115] bridge9: entered allmulticast mode [ 1628.334338][T20157] netlink: 48 bytes leftover after parsing attributes in process `syz.1.20480'. [ 1628.481838][T20157] netlink: 'syz.1.20480': attribute type 8 has an invalid length. [ 1628.481868][T20157] netlink: 11575 bytes leftover after parsing attributes in process `syz.1.20480'. [ 1628.542897][T20161] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20482'. [ 1628.621932][T20161] ip6gre2: entered promiscuous mode [ 1628.621959][T20161] ip6gre2: entered allmulticast mode [ 1628.689494][T19999] net_ratelimit: 8 callbacks suppressed [ 1628.689517][T19999] bond10: (slave batadv0): failed to get link speed/duplex [ 1628.796514][ T1145] bond10: (slave batadv0): failed to get link speed/duplex [ 1628.870622][T20161] netlink: 'syz.0.20482': attribute type 6 has an invalid length. [ 1628.870649][T20161] netlink: 72 bytes leftover after parsing attributes in process `syz.0.20482'. [ 1629.326126][ T50] bond10: (slave batadv0): failed to get link speed/duplex [ 1629.643705][T19999] bond10: (slave batadv0): failed to get link speed/duplex [ 1630.356187][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1630.764487][T20087] bond10: (slave batadv0): failed to get link speed/duplex [ 1632.043007][ T8224] bond10: (slave batadv0): failed to get link speed/duplex [ 1632.621215][ T31] audit: type=1804 audit(1789517627.878:28): pid=20207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.20495" name="/newroot/4185/cgroup.controllers" dev="tmpfs" ino=21109 res=1 errno=0 [ 1632.621277][ T31] audit: type=1800 audit(1789517627.878:29): pid=20207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.20495" name="cgroup.controllers" dev="tmpfs" ino=21109 res=0 errno=0 [ 1632.923669][ C1] bridge0: port 1(batadv1) entered learning state [ 1633.758836][T20087] bond10: (slave batadv0): failed to get link speed/duplex [ 1634.156114][T20220] ip6gretap0: entered promiscuous mode [ 1634.162454][T20223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20497'. [ 1634.162483][T20223] ip6gretap0: left promiscuous mode [ 1634.184813][ T173] bond10: (slave batadv0): failed to get link speed/duplex [ 1634.197595][ C1] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 1634.386947][ T13] bond10: (slave batadv0): failed to get link speed/duplex [ 1634.473298][T20230] tc_dump_action: action bad kind [ 1634.506810][ T1168] bond10: (slave batadv0): failed to get link speed/duplex [ 1634.616573][ T50] bond10: (slave batadv0): failed to get link speed/duplex [ 1634.730165][ T13] bond10: (slave batadv0): failed to get link speed/duplex [ 1634.868444][ T1168] bond10: (slave batadv0): failed to get link speed/duplex [ 1634.925211][T20240] netlink: 'syz.4.20503': attribute type 1 has an invalid length. [ 1635.187512][T32162] bond10: (slave batadv0): failed to get link speed/duplex [ 1635.296151][T32162] bond10: (slave batadv0): failed to get link speed/duplex [ 1635.406345][ T173] bond10: (slave batadv0): failed to get link speed/duplex [ 1635.952611][T20244] batman_adv: batadv0: Interface deactivated: dummy0 [ 1635.952641][T20244] batman_adv: batadv0: Removing interface: dummy0 [ 1636.175084][T20249] netlink: 'syz.2.20506': attribute type 1 has an invalid length. [ 1636.527140][T20244] team0: Mode changed to "loadbalance" [ 1636.727187][T20251] bond16: (slave veth13): Enslaving as an active interface with a down link [ 1637.032566][T20253] bond16: (slave veth15): Enslaving as an active interface with a down link [ 1637.221310][T20254] veth17: entered allmulticast mode [ 1637.257213][T20254] bond16: (slave veth17): Enslaving as an active interface with a down link [ 1638.697291][T20286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20514'. [ 1638.826166][ T1168] net_ratelimit: 19 callbacks suppressed [ 1638.826192][ T1168] bond10: (slave batadv0): failed to get link speed/duplex [ 1638.936129][ T59] bond10: (slave batadv0): failed to get link speed/duplex [ 1639.046706][T20087] bond10: (slave batadv0): failed to get link speed/duplex [ 1639.163079][ T1168] bond10: (slave batadv0): failed to get link speed/duplex [ 1639.266462][T19999] bond10: (slave batadv0): failed to get link speed/duplex [ 1639.383172][ T50] bond10: (slave batadv0): failed to get link speed/duplex [ 1639.524408][ T50] bond10: (slave batadv0): failed to get link speed/duplex [ 1639.627176][T19999] bond10: (slave batadv0): failed to get link speed/duplex [ 1639.727049][T20302] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 1639.867434][ T1168] bond10: (slave batadv0): failed to get link speed/duplex [ 1639.979396][T20087] bond10: (slave batadv0): failed to get link speed/duplex [ 1640.258290][T20305] wg1 speed is unknown, defaulting to 1000 [ 1640.897178][T20313] syzkaller0: entered promiscuous mode [ 1640.897394][T20313] syzkaller0: entered allmulticast mode [ 1641.852116][T20305] lo speed is unknown, defaulting to 1000 [ 1642.972289][T20326] netlink: 'syz.0.20526': attribute type 12 has an invalid length. [ 1642.972313][T20326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20526'. [ 1643.007487][T20326] bond0: option primary_reselect: invalid value (183) [ 1643.837930][ T173] net_ratelimit: 24 callbacks suppressed [ 1643.837955][ T173] bond10: (slave batadv0): failed to get link speed/duplex [ 1643.882614][T20334] netlink: 'syz.4.20529': attribute type 16 has an invalid length. [ 1643.949584][ T1168] bond10: (slave batadv0): failed to get link speed/duplex [ 1644.064447][ T1168] bond10: (slave batadv0): failed to get link speed/duplex [ 1644.283549][ T59] bond10: (slave batadv0): failed to get link speed/duplex [ 1644.389020][ T13] bond10: (slave batadv0): failed to get link speed/duplex [ 1644.504793][ T50] bond10: (slave batadv0): failed to get link speed/duplex [ 1644.609600][T19999] bond10: (slave batadv0): failed to get link speed/duplex [ 1644.719391][T32164] bond10: (slave batadv0): failed to get link speed/duplex [ 1644.829443][T19999] bond10: (slave batadv0): failed to get link speed/duplex [ 1644.868091][T32164] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1644.937982][ T59] bond10: (slave batadv0): failed to get link speed/duplex [ 1645.110548][T20345] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1645.716464][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1646.387555][T20371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20537'. [ 1647.879151][T20400] wg1 speed is unknown, defaulting to 1000 [ 1648.277976][ C1] bridge0: port 1(batadv1) entered forwarding state [ 1648.278003][ C1] bridge0: topology change detected, propagating [ 1648.878522][ T13] net_ratelimit: 25 callbacks suppressed [ 1648.878545][ T13] bond10: (slave batadv0): failed to get link speed/duplex [ 1648.989880][T20081] bond10: (slave batadv0): failed to get link speed/duplex [ 1649.096270][ T1145] bond10: (slave batadv0): failed to get link speed/duplex [ 1649.207416][ T8224] bond10: (slave batadv0): failed to get link speed/duplex [ 1649.345969][ T12] bond10: (slave batadv0): failed to get link speed/duplex [ 1649.538123][ T8224] bond10: (slave batadv0): failed to get link speed/duplex [ 1649.562900][T20400] lo speed is unknown, defaulting to 1000 [ 1650.409625][T20081] bond10: (slave batadv0): failed to get link speed/duplex [ 1650.517520][ T59] bond10: (slave batadv0): failed to get link speed/duplex [ 1650.958355][T20440] netlink: 60 bytes leftover after parsing attributes in process `syz.4.20554'. [ 1651.307039][T20081] bond10: (slave batadv0): failed to get link speed/duplex [ 1651.567055][ T13] bond10: (slave batadv0): failed to get link speed/duplex [ 1653.399175][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1653.400166][ C1] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 1653.906751][ T50] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1653.969101][T20082] net_ratelimit: 17 callbacks suppressed [ 1653.969125][T20082] bond10: (slave batadv0): failed to get link speed/duplex [ 1653.975698][T20475] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1654.093867][ T1145] bond10: (slave batadv0): failed to get link speed/duplex [ 1654.213716][T20081] bond10: (slave batadv0): failed to get link speed/duplex [ 1654.321775][ T12] bond10: (slave batadv0): failed to get link speed/duplex [ 1654.426409][T20081] bond10: (slave batadv0): failed to get link speed/duplex [ 1654.539531][ T8224] bond10: (slave batadv0): failed to get link speed/duplex [ 1654.646515][ T13] bond10: (slave batadv0): failed to get link speed/duplex [ 1654.770795][T20087] bond10: (slave batadv0): failed to get link speed/duplex [ 1654.876811][ T12] bond10: (slave batadv0): failed to get link speed/duplex [ 1654.909208][T20487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20565'. [ 1655.020608][T20497] syzkaller0: entered promiscuous mode [ 1655.020635][T20497] syzkaller0: entered allmulticast mode [ 1655.072553][ T12] bond10: (slave batadv0): failed to get link speed/duplex [ 1655.361376][T20501] netlink: 'syz.0.20569': attribute type 1 has an invalid length. [ 1656.224077][T20503] veth17: entered allmulticast mode [ 1656.253375][T20503] bond14: (slave veth17): Enslaving as an active interface with a down link [ 1656.306238][T20505] bond10: (slave veth0_to_bond): Releasing backup interface [ 1656.313072][T20505] veth0_to_bond: left promiscuous mode [ 1656.370777][T20505] bond14: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1656.412604][T20507] macvlan1: entered promiscuous mode [ 1656.412632][T20507] macvlan1: entered allmulticast mode [ 1656.415204][T20507] bond14: entered promiscuous mode [ 1656.433877][T20507] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 1656.434840][T20507] bond14: (slave macvlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1656.479608][T20507] bond14: left promiscuous mode [ 1657.920286][T20540] syzkaller0: left promiscuous mode [ 1657.920312][T20540] syzkaller0: left allmulticast mode [ 1657.976630][T20546] syzkaller0: entered promiscuous mode [ 1657.976656][T20546] syzkaller0: entered allmulticast mode [ 1658.518447][ C1] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 1658.528075][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1663.640047][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1663.866793][T20081] net_ratelimit: 3 callbacks suppressed [ 1663.866813][T20081] bond10: (slave batadv0): failed to get link speed/duplex [ 1664.316169][ T12] bond10: (slave batadv0): failed to get link speed/duplex [ 1664.427761][ T1145] bond10: (slave batadv0): failed to get link speed/duplex [ 1664.537726][ T50] bond10: (slave batadv0): failed to get link speed/duplex [ 1664.706105][ T12] bond10: (slave batadv0): failed to get link speed/duplex [ 1664.816035][ T50] bond10: (slave batadv0): failed to get link speed/duplex [ 1664.930941][ T59] bond10: (slave batadv0): failed to get link speed/duplex [ 1665.041595][T19999] bond10: (slave batadv0): failed to get link speed/duplex [ 1665.146132][T32162] bond10: (slave batadv0): failed to get link speed/duplex [ 1665.262840][T20082] bond10: (slave batadv0): failed to get link speed/duplex [ 1665.983292][T20586] netlink: 'syz.1.20587': attribute type 1 has an invalid length. [ 1666.233728][T20597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20588'. [ 1666.318265][T20599] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20587'. [ 1666.355437][T20598] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20589'. [ 1666.837729][T20589] bond15: (slave veth15): Enslaving as an active interface with a down link [ 1666.897196][T20591] bond15: (slave veth17): Enslaving as an active interface with a down link [ 1666.903790][T20599] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1667.200706][T20600] wg1 speed is unknown, defaulting to 1000 [ 1668.397529][T20600] lo speed is unknown, defaulting to 1000 [ 1668.862277][T20626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20595'. [ 1668.862306][T20626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20595'. [ 1668.915093][T20634] netlink: 'syz.3.20595': attribute type 4 has an invalid length. [ 1668.915116][T20634] netlink: 152 bytes leftover after parsing attributes in process `syz.3.20595'. [ 1668.989657][T20087] net_ratelimit: 14 callbacks suppressed [ 1668.989682][T20087] bond10: (slave batadv0): failed to get link speed/duplex [ 1669.022276][T20626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1669.042260][T20626] bond11: (slave bond0): making interface the new active one [ 1669.065482][T20626] bond11: (slave bond0): Enslaving as an active interface with an up link [ 1669.154828][T20635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20596'. [ 1669.154857][T20635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20596'. [ 1671.130253][T20639] netlink: 'syz.0.20599': attribute type 1 has an invalid length. [ 1671.562331][T20627] bridge0: port 1(batadv1) entered disabled state [ 1671.639506][T20627] batman_adv: batadv0: Interface deactivated: macvlan3 [ 1672.090141][T20627] bridge8: port 2(veth13) entered disabled state [ 1672.090634][T20627] bridge8: port 1(veth11) entered disabled state [ 1672.251056][T20639] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 1672.399342][T20087] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1672.399385][T20087] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.399422][T20087] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20001 - 0 [ 1672.402291][T19999] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1672.402326][T19999] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.402356][T19999] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20001 - 0 [ 1672.402395][T19999] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1672.402432][T19999] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.402461][T19999] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20001 - 0 [ 1672.914560][T20652] netlink: 'syz.4.20602': attribute type 1 has an invalid length. [ 1673.094984][T20652] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1673.352555][T20657] bond11: (slave veth17): Enslaving as an active interface with a down link [ 1673.390471][T20659] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1673.606984][T20661] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1673.782342][T20661] bond11: (slave batadv1): making interface the new active one [ 1673.815487][T20661] batadv1: entered promiscuous mode [ 1673.852123][T20661] bond11: (slave batadv1): Enslaving as an active interface with an up link [ 1673.965648][T20667] bond11 (unregistering): (slave veth17): Releasing active interface [ 1674.061052][T20667] bond11 (unregistering): (slave batadv1): Releasing active interface [ 1674.061087][T20667] batadv1: left promiscuous mode [ 1674.121550][T20667] bond11 (unregistering): Released all slaves [ 1674.330052][T20674] tipc: Enabling of bearer rejected, failed to enable media [ 1675.180369][T20684] syzkaller0: entered promiscuous mode [ 1675.180398][T20684] syzkaller0: entered allmulticast mode [ 1676.123281][T20711] netlink: 'syz.4.20611': attribute type 4 has an invalid length. [ 1676.123307][T20711] netlink: 152 bytes leftover after parsing attributes in process `syz.4.20611'. [ 1678.998041][ C1] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 1678.998613][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1682.658990][T20700] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1682.659020][T20700] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1682.659187][T20700] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1683.068435][T20711] .`: renamed from bond0 (while UP) [ 1683.146822][T17678] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 1683.222587][T20735] netlink: 'syz.0.20616': attribute type 12 has an invalid length. [ 1683.255870][T20735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20616'. [ 1683.329474][T20737] netlink: 20 bytes leftover after parsing attributes in process `syz.2.20617'. [ 1684.892138][T20763] udevd[20763]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1684.935401][T20763] udevd[20763]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1685.563064][T20782] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20626'. [ 1685.910622][T20789] netlink: 'syz.2.20628': attribute type 8 has an invalid length. [ 1686.128727][T20782] veth19: entered promiscuous mode [ 1686.128921][T20782] veth19: entered allmulticast mode [ 1686.154105][T20782] bridge9: port 1(veth19) entered blocking state [ 1686.162050][T20782] bridge9: port 1(veth19) entered disabled state [ 1686.309367][T20782] bridge9: port 1(veth19) entered blocking state [ 1686.309497][T20782] bridge9: port 1(veth19) entered forwarding state [ 1686.419907][T20799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20630'. [ 1686.448764][T20799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20630'. [ 1686.528318][T20788] veth21: entered promiscuous mode [ 1686.528352][T20788] veth21: entered allmulticast mode [ 1686.533301][T20788] bridge9: port 2(veth21) entered blocking state [ 1686.533426][T20788] bridge9: port 2(veth21) entered disabled state [ 1686.578019][T20788] bridge9: port 2(veth21) entered blocking state [ 1686.578172][T20788] bridge9: port 2(veth21) entered forwarding state [ 1686.987376][T20795] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1686.988481][T20795] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 1687.033383][T20795] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1687.054881][T20795] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1687.078899][T20795] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1687.084593][T20795] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1687.103801][T20795] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1687.104766][T20107] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1687.104818][T20107] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1687.104860][T20107] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1687.104900][T20107] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1687.163958][ T1145] bridge9: port 1(veth19) entered disabled state [ 1687.180949][ T1145] bridge9: port 2(veth21) entered disabled state [ 1687.200813][T20809] netlink: 'syz.2.20633': attribute type 4 has an invalid length. [ 1687.200838][T20809] netlink: 17 bytes leftover after parsing attributes in process `syz.2.20633'. [ 1687.774474][T20814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20635'. [ 1688.186488][T20821] netlink: 100 bytes leftover after parsing attributes in process `syz.3.20636'. [ 1688.507939][T20826] netlink: zone id is out of range [ 1688.507965][T20826] netlink: zone id is out of range [ 1688.507975][T20826] netlink: zone id is out of range [ 1688.507984][T20826] netlink: zone id is out of range [ 1688.507993][T20826] netlink: zone id is out of range [ 1688.508001][T20826] netlink: zone id is out of range [ 1688.508011][T20826] netlink: zone id is out of range [ 1688.508019][T20826] netlink: zone id is out of range [ 1688.508051][T20826] netlink: zone id is out of range [ 1688.508060][T20826] netlink: zone id is out of range [ 1689.333121][T20821] netlink: 247 bytes leftover after parsing attributes in process `syz.3.20636'. [ 1689.823922][T20811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20635'. [ 1690.160533][T20834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1690.597317][T20835] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1691.382079][T20859] netlink: 28 bytes leftover after parsing attributes in process `syz.4.20640'. [ 1692.323250][T20871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20642'. [ 1692.633257][T20879] netlink: 60 bytes leftover after parsing attributes in process `syz.3.20643'. [ 1693.064262][T20887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20643'. [ 1695.553730][T20856] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 1696.004652][T20856] bond5: left promiscuous mode [ 1696.004680][T20856] ipip0: left promiscuous mode [ 1696.439319][T20856] batman_adv: batadv0: Interface deactivated: gretap2 [ 1696.480955][T20856] geneve3: left promiscuous mode [ 1697.191765][T13736] wg1 speed is unknown, defaulting to 1000 [ 1697.191792][T13736] syz2: Port: 1 Link DOWN [ 1697.209536][T20081] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1697.209573][T20081] netdevsim netdevsim4 netdevsim3: unset [0, 1] type 1 family 0 port 2816 - 0 [ 1697.209602][T20081] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1697.209665][T20081] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1697.209692][T20081] netdevsim netdevsim4 netdevsim2: unset [0, 1] type 1 family 0 port 2816 - 0 [ 1697.209720][T20081] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1697.209768][T20081] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1697.209796][T20081] netdevsim netdevsim4 netdevsim1: unset [0, 1] type 1 family 0 port 2816 - 0 [ 1697.209824][T20081] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1697.209876][T20081] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1697.209905][T20081] netdevsim netdevsim4 netdevsim0: unset [0, 1] type 1 family 0 port 2816 - 0 [ 1697.209934][T20081] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1697.215404][T17658] wg1 speed is unknown, defaulting to 1000 [ 1697.884376][T20904] netlink: 4912 bytes leftover after parsing attributes in process `syz.3.20646'. [ 1698.647223][T20906] rdma_rxe: rxe_newlink: failed to add bond0 [ 1698.728605][T20916] netlink: 24 bytes leftover after parsing attributes in process `syz.2.20649'. [ 1700.514519][T20944] tc_dump_action: action bad kind [ 1700.544688][T20941] tipc: Enabled bearer , priority 0 [ 1700.565141][T20941] syzkaller0: entered promiscuous mode [ 1700.565163][T20941] syzkaller0: entered allmulticast mode [ 1700.607003][T20942] syzkaller1: entered promiscuous mode [ 1700.607222][T20942] syzkaller1: entered allmulticast mode [ 1700.638893][T20941] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1700.723493][T20938] netlink: 'syz.1.20654': attribute type 2 has an invalid length. [ 1700.723520][T20938] netlink: 'syz.1.20654': attribute type 2 has an invalid length. [ 1700.795213][T20941] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 1700.827007][T20941] tipc: Resetting bearer [ 1700.871781][T20939] tipc: Resetting bearer [ 1701.034311][T20939] tipc: Disabling bearer [ 1701.610889][T20969] netlink: 'syz.3.20660': attribute type 1 has an invalid length. [ 1701.713067][T20973] netlink: 14 bytes leftover after parsing attributes in process `syz.1.20658'. [ 1702.498752][T20969] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 1702.533394][T20974] : renamed from dummy0 [ 1702.551810][T20971] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1702.551861][T20971] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1702.551885][T20971] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1703.155569][T20981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20663'. [ 1703.155682][T20981] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 1703.155712][T20981] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 1703.185529][T20981] bridge0: port 4(netdevsim0) entered disabled state [ 1703.233980][T20986] netlink: 'syz.4.20663': attribute type 83 has an invalid length. [ 1703.481027][T20981] bond0: (slave bridge0): Releasing backup interface [ 1703.680138][T20989] tc_dump_action: action bad kind [ 1703.943423][T20995] bond15: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 1704.101286][T20995] bond15 (unregistering): Released all slaves [ 1705.138700][T21011] netlink: 'syz.0.20669': attribute type 1 has an invalid length. [ 1705.413395][T21015] netlink: 28 bytes leftover after parsing attributes in process `syz.0.20669'. [ 1705.702870][T21013] bond15: (slave geneve6): making interface the new active one [ 1705.705543][T21013] bond15: (slave geneve6): Enslaving as an active interface with an up link [ 1705.720697][ T50] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1705.803422][T21015] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1705.819619][ T8224] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1705.819676][ T8224] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1706.169804][T21023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20673'. [ 1706.351028][T21027] netlink: 'syz.3.20672': attribute type 8 has an invalid length. [ 1706.351051][T21027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20672'. [ 1706.839965][T21019] erspan0: left promiscuous mode [ 1707.009588][T21019] 8021q: adding VLAN 0 to HW filter on device .` [ 1707.028063][T21019] 8021q: adding VLAN 0 to HW filter on device team0 [ 1707.064547][T21019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1707.227501][T21019] 1·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1707.238407][T21019] net_ratelimit: 4 callbacks suppressed [ 1707.238427][T21019] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1707.391469][T28734] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1707.599276][T13736] wg1 speed is unknown, defaulting to 1000 [ 1707.599307][T13736] syz2: Port: 1 Link ACTIVE [ 1707.599415][T13736] wg1 speed is unknown, defaulting to 1000 [ 1707.710593][T21035] bridge0: port 1(vlan3) entered blocking state [ 1707.710715][T21035] bridge0: port 1(vlan3) entered disabled state [ 1707.710868][T21035] vlan3: entered allmulticast mode [ 1707.710886][T21035] geneve0: entered allmulticast mode [ 1707.760259][T21035] vlan3: entered promiscuous mode [ 1707.760284][T21035] geneve0: entered promiscuous mode [ 1708.348275][T21041] wg1 speed is unknown, defaulting to 1000 [ 1710.134989][T21059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20681'. [ 1710.172254][T21059] batman_adv: batadv0: Removing interface: macvlan3 [ 1710.281846][T21059] bond10: (slave batadv0): Removing an active aggregator [ 1710.325268][T21059] bond10: (slave batadv0): Releasing backup interface [ 1710.566845][T21041] lo speed is unknown, defaulting to 1000 [ 1716.362083][T21111] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1716.362133][T21111] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1716.362172][T21111] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1716.362209][T21111] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1716.369915][T21111] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1716.370050][T21111] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1716.370145][T21111] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1716.370235][T21111] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1716.370331][T21111] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1716.375439][T21111] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1717.433396][T21152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20703'. [ 1717.491924][T21155] netlink: 20 bytes leftover after parsing attributes in process `syz.3.20702'. [ 1718.415686][T21154] netlink: 'syz.4.20705': attribute type 2 has an invalid length. [ 1718.930059][T21168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20706'. [ 1718.930098][T21168] bond0: option resend_igmp: invalid value (256) [ 1718.930120][T21168] bond0: option resend_igmp: allowed values 0 - 255 [ 1719.241827][T21164] udevd[21164]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1719.244582][T21174] No such timeout policy "s " [ 1719.311405][T21164] udevd[21164]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1719.600673][T21177] syzkaller0: entered promiscuous mode [ 1719.600699][T21177] syzkaller0: entered allmulticast mode [ 1720.564720][T21190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20713'. [ 1720.624827][T21190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20713'. [ 1720.673761][T21169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20707'. [ 1721.012262][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807f63c400: rx timeout, send abort [ 1721.512482][ C1] vcan0: j1939_tp_rxtimer: 0xffff888085c6a000: rx timeout, send abort [ 1721.943539][T21212] siw: device registration error -23 [ 1722.012800][ C1] vcan0: j1939_tp_rxtimer: 0xffff888085c6a000: abort rx timeout. Force session deactivation [ 1722.072895][T21200] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1722.072944][T21200] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1722.072974][T21200] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1722.381742][T21218] syzkaller0: entered promiscuous mode [ 1722.381768][T21218] syzkaller0: entered allmulticast mode [ 1722.402963][T21218] net_ratelimit: 3262 callbacks suppressed [ 1722.402985][T21218] 0: reclassify loop, rule prio 0, protocol 700 [ 1722.461555][T21218] netlink: 168 bytes leftover after parsing attributes in process `syz.4.20719'. [ 1722.499996][T21220] wg1 speed is unknown, defaulting to 1000 [ 1722.693169][T21227] syzkaller1: entered promiscuous mode [ 1722.693197][T21227] syzkaller1: entered allmulticast mode [ 1724.518425][T21220] lo speed is unknown, defaulting to 1000 [ 1725.633380][T21248] syzkaller0: entered promiscuous mode [ 1725.633411][T21248] syzkaller0: entered allmulticast mode [ 1725.964246][T21263] netlink: 36 bytes leftover after parsing attributes in process `syz.1.20732'. [ 1732.950621][T21257] wg1 speed is unknown, defaulting to 1000 [ 1735.784635][T21257] lo speed is unknown, defaulting to 1000 [ 1735.918175][T21293] netlink: 36 bytes leftover after parsing attributes in process `syz.2.20738'. [ 1735.918202][T21293] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20738'. [ 1735.918223][T21293] netlink: 36 bytes leftover after parsing attributes in process `syz.2.20738'. [ 1736.769416][T21315] netlink: 'syz.4.20741': attribute type 1 has an invalid length. [ 1737.152284][T21325] netlink: 28 bytes leftover after parsing attributes in process `syz.4.20741'. [ 1737.510661][T21319] bond12: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 1738.021341][T21329] netlink: 'syz.1.20743': attribute type 11 has an invalid length. [ 1741.659623][T21321] veth19: entered promiscuous mode [ 1741.681456][T21321] bond12: (slave veth19): Enslaving as a backup interface with a down link [ 1741.685087][T28734] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1741.721133][T21325] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1741.736348][T32162] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1741.736386][T32162] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1741.737843][T19999] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1741.737877][T19999] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1741.737921][T19999] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1741.737951][T19999] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1741.737993][T19999] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1741.738023][T19999] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1741.979029][ T173] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1742.208496][T21333] erspan0: left promiscuous mode [ 1742.556743][T21352] netlink: 100 bytes leftover after parsing attributes in process `syz.0.20745'. [ 1742.582928][T21333] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1742.652472][T21333] veth1_macvtap: left promiscuous mode [ 1742.685477][T21333] veth1_macvtap: entered promiscuous mode [ 1742.720999][T21333] geneve0: left promiscuous mode [ 1742.914316][T21333] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1742.968979][T21333] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1742.986679][T21359] netlink: zone id is out of range [ 1742.986695][T21359] netlink: zone id is out of range [ 1742.986715][T21359] netlink: zone id is out of range [ 1742.986726][T21359] netlink: zone id is out of range [ 1742.986736][T21359] netlink: zone id is out of range [ 1742.986746][T21359] netlink: zone id is out of range [ 1742.986756][T21359] netlink: zone id is out of range [ 1742.986766][T21359] netlink: zone id is out of range [ 1743.004203][T21333] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1743.074028][T21333] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1743.173839][T21333] bridge0: left promiscuous mode [ 1743.194127][T21333] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1743.315042][T21333] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1743.341103][ T9453] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1743.359329][T21333] erspan0: entered promiscuous mode [ 1743.392456][T21333] geneve0: entered promiscuous mode [ 1743.418067][T17652] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1743.463285][T21333] bridge0: port 1(batadv1) entered blocking state [ 1743.463419][T21333] bridge0: port 1(batadv1) entered listening state [ 1743.463688][T21333] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1743.521145][T21333] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1743.525287][T21333] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1743.631937][T21333] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1743.753647][T21333] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1743.770289][T21333] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1743.846683][T10491] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 1743.869936][T21333] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1743.896708][T21333] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1743.936230][T10491] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 1743.940440][T21333] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1743.972983][T21333] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1744.032175][T21333] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1744.068266][T21333] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1744.083294][T21333] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1744.096583][T21333] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1744.109909][T19999] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1744.110004][T19999] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1744.110076][T19999] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20001 - 0 [ 1744.253776][T17679] bridge0: entered promiscuous mode [ 1744.454074][ T13] bridge8: port 1(veth11) entered blocking state [ 1744.454188][ T13] bridge8: port 1(veth11) entered forwarding state [ 1744.474648][ T13] bridge8: port 2(veth13) entered blocking state [ 1744.474759][ T13] bridge8: port 2(veth13) entered forwarding state [ 1744.541573][ T13] bridge9: port 1(veth19) entered blocking state [ 1744.541690][ T13] bridge9: port 1(veth19) entered forwarding state [ 1744.569333][ T13] bridge9: port 2(veth21) entered blocking state [ 1744.569448][ T13] bridge9: port 2(veth21) entered forwarding state [ 1744.627292][ T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1744.627336][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1744.627367][ T13] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20001 - 0 [ 1744.627509][ T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1744.627540][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1744.627570][ T13] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20001 - 0 [ 1744.638848][T20082] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1744.638945][T20082] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1744.639045][T20082] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20001 - 0 [ 1744.944199][T20082] bond15: (slave veth15): link status definitely up, 10000 Mbps full duplex [ 1744.944646][T20082] bond15: (slave veth17): link status definitely up, 10000 Mbps full duplex [ 1744.945054][T20082] bond15: (slave veth15): making interface the new active one [ 1744.989191][T20082] bond15: active interface up! [ 1745.544665][T21365] tc_dump_action: action bad kind [ 1746.459837][T20107] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1746.478965][T20107] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1746.500417][T10491] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1746.684816][T20107] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 1746.685065][T20107] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 1746.926251][T10491] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 1747.819556][T21406] netlink: 'syz.3.20758': attribute type 1 has an invalid length. [ 1747.852660][T21406] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1747.945591][T21410] smc: net device wg2 erased user defined pnetid SYZ0 [ 1748.114253][T21406] bond12: (slave veth7): Enslaving as an active interface with a down link [ 1748.374897][T21406] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20758'. [ 1749.176536][T10491] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1749.278963][T17652] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1749.335512][T21414] net_ratelimit: 6 callbacks suppressed [ 1749.335535][T21414] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 1749.448252][T21418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1749.471381][T21418] bond12: (slave batadv0): making interface the new active one [ 1749.489574][T21418] batadv0: entered promiscuous mode [ 1749.493077][T21418] bond12: (slave batadv0): Enslaving as an active interface with an up link [ 1749.816478][T14748] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1749.949117][T21412] wg1 speed is unknown, defaulting to 1000 [ 1750.138882][T21443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20766'. [ 1750.203643][T14748] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1750.437190][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1750.997927][ C1] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 1751.659455][T21412] lo speed is unknown, defaulting to 1000 [ 1752.703990][T21470] syzkaller0: entered promiscuous mode [ 1752.704204][T21470] syzkaller0: entered allmulticast mode [ 1752.997780][T21444] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 1758.360678][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1759.013691][ C1] bridge0: port 1(batadv1) entered learning state [ 1759.638520][ C1] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 1760.965153][T21513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20776'. [ 1761.096682][T19999] batadv0: left promiscuous mode [ 1761.127585][T21515] syzkaller0: entered promiscuous mode [ 1761.127610][T21515] syzkaller0: entered allmulticast mode [ 1761.179414][T21516] netlink: 14 bytes leftover after parsing attributes in process `syz.2.20777'. [ 1761.623744][T21531] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20780'. [ 1761.651053][ T5627] block nbd10: Receive control failed (result -1) [ 1762.282124][T21541] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20782'. [ 1762.844292][T21542] bridge0: port 1(veth9) entered blocking state [ 1762.844415][T21542] bridge0: port 1(veth9) entered disabled state [ 1762.844572][T21542] veth9: entered allmulticast mode [ 1762.892276][T21542] veth9: entered promiscuous mode [ 1763.482253][T21560] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1763.790398][T21562] netlink: 'syz.3.20786': attribute type 25 has an invalid length. [ 1763.790426][T21562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20786'. [ 1763.928481][T21562] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1764.182575][T21566] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1764.503213][T21578] netlink: 72 bytes leftover after parsing attributes in process `syz.4.20790'. [ 1764.657003][T21569] tipc: Enabled bearer , priority 0 [ 1764.812849][T21583] netlink: 'syz.3.20789': attribute type 1 has an invalid length. [ 1765.164544][T21583] bond13: entered promiscuous mode [ 1765.177559][T21583] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1765.208894][T21580] tipc: Resetting bearer [ 1765.332044][T21582] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1765.332474][T21582] bond13: (slave gre5): The slave device specified does not support setting the MAC address [ 1765.332498][T21582] bond13: (slave gre5): Setting fail_over_mac to active for active-backup mode [ 1765.399108][T21582] bond13: (slave gre5): making interface the new active one [ 1765.399138][T21582] gre5: entered promiscuous mode [ 1765.401412][T21582] bond13: (slave gre5): Enslaving as an active interface with an up link [ 1765.557828][T21567] tipc: Disabling bearer [ 1765.893669][T21595] netlink: 'syz.4.20792': attribute type 16 has an invalid length. [ 1765.893696][T21595] netlink: 'syz.4.20792': attribute type 17 has an invalid length. [ 1766.153937][T21601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1766.801162][T21595] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1767.390082][T21612] ±ÿ: left promiscuous mode [ 1767.390282][T21612] tunl0: left promiscuous mode [ 1767.390415][T21612] gre0: left promiscuous mode [ 1767.390644][T21612] gretap0: left promiscuous mode [ 1767.390779][T21612] erspan0: left promiscuous mode [ 1767.390918][T21612] ip_vti0: left promiscuous mode [ 1767.391080][T21612] ip6_vti0: left promiscuous mode [ 1767.391208][T21612] sit0: left promiscuous mode [ 1767.391341][T21612] ip6tnl0: left promiscuous mode [ 1767.391468][T21612] ip6gre0: left promiscuous mode [ 1767.395542][T21612] ip6gretap0: left promiscuous mode [ 1767.395689][T21612] bridge0: left promiscuous mode [ 1767.485573][T21612] dummy0: left promiscuous mode [ 1767.485731][T21612] nlmon0: left promiscuous mode [ 1767.509392][T21612] veth0: left promiscuous mode [ 1767.509590][T21612] veth1: left promiscuous mode [ 1767.509768][T21612] wg0: left promiscuous mode [ 1767.509957][T21612] wg1: left promiscuous mode [ 1767.510122][T21612] wg2: left promiscuous mode [ 1767.510378][T21612] veth0_to_bridge: left promiscuous mode [ 1767.510540][T21612] bridge_slave_0: left promiscuous mode [ 1767.510698][T21612] veth1_to_bridge: left promiscuous mode [ 1767.567743][T21612] bridge_slave_1: left promiscuous mode [ 1767.568121][T21612] bond_slave_0: left promiscuous mode [ 1767.568284][T21612] veth1_to_bond: left promiscuous mode [ 1767.568447][T21612] bond_slave_1: left promiscuous mode [ 1767.568610][T21612] veth0_to_team: left promiscuous mode [ 1767.574876][T21612] team_slave_0: left promiscuous mode [ 1767.575061][T21612] C: left promiscuous mode [ 1767.620227][T21612] team_slave_1: left promiscuous mode [ 1767.620510][T21612] veth1_to_batadv: left promiscuous mode [ 1767.620675][T21612] batadv_slave_1: left promiscuous mode [ 1767.620844][T21612] xfrm0: left promiscuous mode [ 1767.621011][T21612] veth0_to_hsr: left promiscuous mode [ 1767.656389][T21612] macvtap0: left promiscuous mode [ 1767.656560][T21612] macsec0: left promiscuous mode [ 1767.656687][T21612] geneve0: left promiscuous mode [ 1767.656874][T21612] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 1767.657017][T21612] netdevsim netdevsim0 netdevsim1: left promiscuous mode [ 1767.657154][T21612] netdevsim netdevsim0 netdevsim2: left promiscuous mode [ 1767.657298][T21612] netdevsim netdevsim0 netdevsim3: left promiscuous mode [ 1767.657428][T21612] geneve2: left promiscuous mode [ 1767.657594][T21612] veth2: left promiscuous mode [ 1767.657756][T21612] veth3: left promiscuous mode [ 1767.657915][T21612] mac80211_hwsim hwsim14 wlan2: left promiscuous mode [ 1767.658074][T21612] bridge1: left promiscuous mode [ 1767.658239][T21612] mac80211_hwsim hwsim18 wlan3: left promiscuous mode [ 1767.658402][T21612] ip6tnl1: left promiscuous mode [ 1767.658534][T21612] bond1: left promiscuous mode [ 1767.658675][T21612] mac80211_hwsim hwsim24 wlan4: left promiscuous mode [ 1767.658845][T21612] bridge2: left promiscuous mode [ 1767.777895][T21612] mac80211_hwsim hwsim26 wlan5: left promiscuous mode [ 1767.778350][T21612] geneve1: left promiscuous mode [ 1767.778526][T21612] sit1: left promiscuous mode [ 1767.778660][T21612] ip6erspan0: left promiscuous mode [ 1767.778792][T21612] erspan1: left promiscuous mode [ 1767.778930][T21612] mac80211_hwsim hwsim30 wlan6: left promiscuous mode [ 1767.779097][T21612] bareudp0: left promiscuous mode [ 1767.779269][T21612] mac80211_hwsim hwsim32 wlan7: left promiscuous mode [ 1767.779446][T21612] mac80211_hwsim hwsim33 wlan8: left promiscuous mode [ 1767.782695][T21612] ip6tnl2: left promiscuous mode [ 1767.782827][T21612] bridge3: left promiscuous mode [ 1767.783118][T21612] bond0: left promiscuous mode [ 1767.783265][T21612] bridge4: left promiscuous mode [ 1767.783400][T21612] pim6reg: left promiscuous mode [ 1767.783552][T21612] bond2: left promiscuous mode [ 1767.783679][T21612] bond3: left promiscuous mode [ 1767.783813][T21612] geneve3: left promiscuous mode [ 1767.916937][T21612] veth4: left promiscuous mode [ 1767.917137][T21612] veth5: left promiscuous mode [ 1767.917311][T21612] ip6tnl3: left promiscuous mode [ 1767.917441][T21612] veth6: left promiscuous mode [ 1767.917604][T21612] veth7: left promiscuous mode [ 1767.917763][T21612] bond4: left promiscuous mode [ 1767.917903][T21612] ip6gretap1: left promiscuous mode [ 1767.918031][T21612] ip6tnl4: left promiscuous mode [ 1767.918158][T21612] macvlan2: left promiscuous mode [ 1767.918326][T21612] veth8: left promiscuous mode [ 1768.009972][T21612] veth9: left promiscuous mode [ 1768.010147][T21612] ip6tnl5: left promiscuous mode [ 1768.010284][T21612] macvlan3: left promiscuous mode [ 1768.010446][T21612] vxlan0: left promiscuous mode [ 1768.010580][T21612] ip6_vti1: left promiscuous mode [ 1768.010705][T21612] geneve4: left promiscuous mode [ 1768.010871][T21612] vxlan1: left promiscuous mode [ 1768.011141][T21612] ip6tnl6: left promiscuous mode [ 1768.046133][T21612] macvlan4: left promiscuous mode [ 1768.046343][T21612] bridge5: left promiscuous mode [ 1768.046490][T21612] sit2: left promiscuous mode [ 1768.046632][T21612] mac80211_hwsim hwsim7 nicvf0: left promiscuous mode [ 1768.046794][T21612] gtp0: left promiscuous mode [ 1768.046959][T21612] geneve5: left promiscuous mode [ 1768.047088][T21612] bond5: left promiscuous mode [ 1768.047231][T21612] syztnl2: left promiscuous mode [ 1768.114917][T21612] vlan1: left promiscuous mode [ 1768.114943][T21612] hsr0: left promiscuous mode [ 1768.137364][T21612] bridge6: left promiscuous mode [ 1768.137536][T21612] ip6gre1: left promiscuous mode [ 1768.137663][T21612] gre1: left promiscuous mode [ 1768.137802][T21612] mac80211_hwsim hwsim53 wlan0: left promiscuous mode [ 1768.137957][T21612] gtp1: left promiscuous mode [ 1768.138120][T21612] mac80211_hwsim hwsim54 wlan9: left promiscuous mode [ 1768.138275][T21612] gre2: left promiscuous mode [ 1768.138398][T21612] bridge7: left promiscuous mode [ 1768.144753][T21612] gtp2: left promiscuous mode [ 1768.144923][T21612] ipip0: left promiscuous mode [ 1768.145046][T21612] bond6: left promiscuous mode [ 1768.145312][T21612] gretap1: left promiscuous mode [ 1768.145444][T21612] bond7: left promiscuous mode [ 1768.145583][T21612] veth10: left promiscuous mode [ 1768.145795][T21612] veth11: left promiscuous mode [ 1768.272557][T21612] gretap2: left promiscuous mode [ 1768.272712][T21612] bond8: left promiscuous mode [ 1768.272879][T21612] bridge8: left promiscuous mode [ 1768.273022][T21612] bridge9: left promiscuous mode [ 1768.273160][T21612] veth12: left promiscuous mode [ 1768.273320][T21612] veth13: left promiscuous mode [ 1768.273486][T21612] mac80211_hwsim hwsim57 wlan10: left promiscuous mode [ 1768.273650][T21612] bridge10: left promiscuous mode [ 1768.273796][T21612] veth14: left promiscuous mode [ 1768.340045][T21612] veth15: left promiscuous mode [ 1768.340321][T21612] gre3: left promiscuous mode [ 1768.340477][T21612] dvmrp6: left promiscuous mode [ 1768.340609][T21612] bridge11: left promiscuous mode [ 1768.340756][T21612] bond9: left promiscuous mode [ 1768.341067][T21612] wireguard0: left promiscuous mode [ 1768.341226][T21612] syzkaller0: left promiscuous mode [ 1768.341244][T21612] syzkaller0: left allmulticast mode [ 1768.479485][T21612] bond10: left promiscuous mode [ 1768.479638][T21612] bond11: left promiscuous mode [ 1768.479929][T21612] bridge12: left promiscuous mode [ 1768.480193][T21612] bond12: left promiscuous mode [ 1768.480210][T21612] bridge14: left promiscuous mode [ 1768.480490][T21612] macvtap1: left allmulticast mode [ 1768.481004][T21612] ip6gre2: left promiscuous mode [ 1768.481021][T21612] ip6gre2: left allmulticast mode [ 1768.481430][T21612] veth17: left allmulticast mode [ 1768.802526][T21616] netlink: 'syz.4.20799': attribute type 1 has an invalid length. [ 1768.802552][T21616] netlink: 224 bytes leftover after parsing attributes in process `syz.4.20799'. [ 1769.990012][T21631] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1770.025941][T21631] block nbd4: NBD_DISCONNECT [ 1770.026850][T21631] block nbd4: Send disconnect failed -32 [ 1770.026877][T21631] block nbd4: shutting down sockets [ 1772.894321][ T5627] block nbd4: Receive control failed (result -32) [ 1772.894711][T17417] block nbd4: Receive control failed (result -32) [ 1773.377558][T21658] tipc: Enabled bearer , priority 0 [ 1773.548931][T21658] syzkaller0: entered promiscuous mode [ 1773.548958][T21658] syzkaller0: entered allmulticast mode [ 1773.604561][T21658] tipc: Resetting bearer [ 1773.639757][T21657] tipc: Resetting bearer [ 1773.727161][T21657] tipc: Disabling bearer [ 1774.355959][ C1] bridge0: port 1(batadv1) entered forwarding state [ 1774.355989][ C1] bridge0: topology change detected, propagating [ 1774.357828][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1774.692972][T21672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20813'. [ 1775.422115][T21678] tipc: Enabling of bearer rejected, failed to enable media [ 1776.276303][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1776.699293][T21695] ip_tables: iptables: counters copy to user failed while replacing table [ 1776.918552][ C1] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 1777.440774][T21703] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20819'. [ 1780.948134][T21738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20827'. [ 1780.948162][T21738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20827'. [ 1781.208535][T21744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20830'. [ 1781.397184][ C1] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 1787.148759][T21734] ip6gretap0: left allmulticast mode [ 1788.707700][ T12] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1788.707741][ T12] netdevsim netdevsim3 netdevsim2: unset [0, 1] type 1 family 0 port 4352 - 0 [ 1788.707772][ T12] netdevsim netdevsim3 netdevsim2: unset [0, 2] type 1 family 0 port 256 - 0 [ 1788.707800][ T12] netdevsim netdevsim3 netdevsim2: unset [0, 3] type 1 family 0 port 60387 - 0 [ 1788.707848][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1788.710868][ T173] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1788.710900][ T173] netdevsim netdevsim3 netdevsim3: unset [0, 1] type 1 family 0 port 4352 - 0 [ 1788.710931][ T173] netdevsim netdevsim3 netdevsim3: unset [0, 2] type 1 family 0 port 256 - 0 [ 1788.710959][ T173] netdevsim netdevsim3 netdevsim3: unset [0, 3] type 1 family 0 port 60387 - 0 [ 1788.710989][ T173] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1788.711686][ T173] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1788.711718][ T173] netdevsim netdevsim3 netdevsim1: unset [0, 1] type 1 family 0 port 4352 - 0 [ 1788.711747][ T173] netdevsim netdevsim3 netdevsim1: unset [0, 2] type 1 family 0 port 256 - 0 [ 1788.711777][ T173] netdevsim netdevsim3 netdevsim1: unset [0, 3] type 1 family 0 port 60387 - 0 [ 1788.711806][ T173] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1789.457358][ T12] bond12: (slave ip6gretap2): link status up again after 0 ms [ 1789.457394][ T12] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1789.634899][T20107] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1789.670178][T21810] netlink: Invalid conntrack helper [ 1789.670214][T21810] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1789.740655][T32162] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1789.847199][T32162] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1789.908402][T21792] netlink: 48 bytes leftover after parsing attributes in process `syz.4.20835'. [ 1789.964507][ T12] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1790.075288][T19999] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1790.176439][T20081] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1790.517412][T21818] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20840'. [ 1791.382009][T21824] netlink: 'syz.0.20842': attribute type 4 has an invalid length. [ 1792.557627][T21840] netlink: 68 bytes leftover after parsing attributes in process `syz.0.20845'. [ 1792.895648][T21844] netlink: 76 bytes leftover after parsing attributes in process `syz.4.20847'. [ 1793.665156][T21852] wg1 speed is unknown, defaulting to 1000 [ 1793.966305][T17417] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1794.298607][T21868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20856'. [ 1794.334729][T21869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20855'. [ 1794.588657][ T59] net_ratelimit: 43 callbacks suppressed [ 1794.588680][ T59] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1794.905959][T28734] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1795.026136][T28734] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1795.187457][T20087] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1795.297548][T20081] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1795.413996][ T173] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1795.517538][ T173] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1795.633293][T20087] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1795.737010][ T173] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1795.778795][T21852] lo speed is unknown, defaulting to 1000 [ 1796.007271][T21876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20857'. [ 1796.146424][ T50] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1796.756268][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1798.639932][T21898] netlink: 'syz.0.20862': attribute type 1 has an invalid length. [ 1799.256324][T21884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20859'. [ 1799.256357][T21884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20859'. [ 1799.646492][T32162] net_ratelimit: 17 callbacks suppressed [ 1799.646535][T32162] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1799.758283][ T50] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1799.867741][ T13] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1799.976018][ T13] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1800.087306][T32162] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1800.198030][T20087] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1800.263578][T21913] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.20865'. [ 1800.316555][T20087] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1800.325183][T21914] netlink: 'syz.2.20865': attribute type 11 has an invalid length. [ 1800.325209][T21914] netlink: 140 bytes leftover after parsing attributes in process `syz.2.20865'. [ 1800.426439][T20087] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1800.540817][ T13] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1800.647922][ T173] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1801.828185][T21938] netlink: 'syz.2.20868': attribute type 1 has an invalid length. [ 1801.828209][T21938] netlink: 224 bytes leftover after parsing attributes in process `syz.2.20868'. [ 1802.311453][T21947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20869'. [ 1802.326929][T17417] block nbd11: Receive control failed (result -1) [ 1802.752042][T21956] netlink: 16 bytes leftover after parsing attributes in process `syz.0.20872'. [ 1803.020201][T21960] netlink: 'syz.3.20873': attribute type 12 has an invalid length. [ 1803.063336][T21960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20873'. [ 1803.287054][T21960] netlink: 20 bytes leftover after parsing attributes in process `syz.3.20873'. [ 1803.470893][T21962] syzkaller0: entered promiscuous mode [ 1803.470920][T21962] syzkaller0: entered allmulticast mode [ 1805.047300][T13736] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1805.109549][T21994] netlink: 72 bytes leftover after parsing attributes in process `syz.2.20881'. [ 1805.285225][T13736] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 1805.308692][T13736] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 1805.489741][T21984] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1805.505766][T21984] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1805.514977][T20081] net_ratelimit: 23 callbacks suppressed [ 1805.514998][T20081] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1805.616851][ T1145] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1805.716946][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1805.882981][T22009] netlink: 48 bytes leftover after parsing attributes in process `syz.0.20884'. [ 1805.965551][T13736] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1806.007878][T22007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20884'. [ 1806.007905][T22007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20884'. [ 1806.043144][T28734] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1806.146209][ T13] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1806.253133][T22014] netlink: 'syz.4.20886': attribute type 1 has an invalid length. [ 1806.368979][T22018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20887'. [ 1806.374707][T17417] block nbd12: Receive control failed (result -1) [ 1806.838808][T22014] bond13: entered promiscuous mode [ 1806.866918][T22014] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1806.888059][T32162] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1806.999726][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1807.177395][T22016] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1807.197833][T22016] bond13: (slave gre4): The slave device specified does not support setting the MAC address [ 1807.197859][T22016] bond13: (slave gre4): Setting fail_over_mac to active for active-backup mode [ 1807.267251][T22016] bond13: (slave gre4): making interface the new active one [ 1807.267279][T22016] gre4: entered promiscuous mode [ 1807.297792][T22016] bond13: (slave gre4): Enslaving as an active interface with an up link [ 1807.316457][ T13] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1807.652066][T28734] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1807.756802][T32162] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1807.871572][T20087] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1807.976186][T32162] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1808.328760][T22051] netlink: 184 bytes leftover after parsing attributes in process `syz.2.20893'. [ 1808.330074][T22052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20894'. [ 1808.624156][T22053] netlink: 'syz.4.20891': attribute type 4 has an invalid length. [ 1808.637608][T22062] §: renamed from sit0 [ 1808.644626][T22059] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20892'. [ 1809.816334][T22068] udevd[22068]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1809.852537][T22025] udevd[22025]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1809.905509][T22088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20901'. [ 1809.976663][T17679] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1809.977785][T17679] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1810.008304][T17679] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1810.026277][T17679] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 1810.030751][T22089] netlink: 132 bytes leftover after parsing attributes in process `syz.2.20901'. [ 1810.556221][ T50] net_ratelimit: 18 callbacks suppressed [ 1810.556246][ T50] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1810.637571][T22094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20902'. [ 1810.736120][ T8224] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1810.756737][T17679] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 1810.756763][T17679] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1810.884780][ T50] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1810.917013][ T9453] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 1810.917845][ T9453] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1810.986151][ T50] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1811.006494][ T9453] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 1811.007002][ T9453] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1811.334251][T22095] bridge10: port 1(veth21) entered blocking state [ 1811.337786][T22095] bridge10: port 1(veth21) entered disabled state [ 1811.337989][T22095] veth21: entered allmulticast mode [ 1811.390287][T22095] veth21: entered promiscuous mode [ 1811.426142][T20087] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1811.599367][ T12] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1811.707995][T19999] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1811.919987][T22109] netlink: 20 bytes leftover after parsing attributes in process `syz.3.20905'. [ 1812.146881][T20087] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1812.429914][T19999] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1812.756761][ C1] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 1812.806124][ T12] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1814.131492][T22136] veth1_vlan: left promiscuous mode [ 1814.145345][T22136] veth0_vlan: left promiscuous mode [ 1814.161279][T22136] veth0_vlan: entered promiscuous mode [ 1814.177930][T22136] veth1_vlan: entered promiscuous mode [ 1814.258715][T22136] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1814.295623][T22136] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1814.317615][T22136] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1814.456435][ T5627] block nbd13: Receive control failed (result -32) [ 1814.457833][T17417] block nbd13: Receive control failed (result -32) [ 1814.542796][T22136] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1815.105455][T22136] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1815.131872][T22136] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1815.155478][T22136] erspan0: entered promiscuous mode [ 1815.245512][T22136] batman_adv: batadv0: Interface activated: ip6gretap1 [ 1815.351629][T22148] netlink: 36 bytes leftover after parsing attributes in process `syz.3.20914'. [ 1815.403893][T22136] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1815.622708][T22136] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1815.624489][T22136] veth0_to_team: entered promiscuous mode [ 1815.691439][T22136] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1815.870185][T22136] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1815.941772][T22136] batman_adv: batadv0: Interface activated: gretap2 [ 1815.958631][T22136] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1815.965230][T22136] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1815.994900][T22136] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1816.010562][T22136] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1816.031994][T22136] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1816.054637][T22136] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1816.069139][T22136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1816.083088][ T13] net_ratelimit: 9 callbacks suppressed [ 1816.083108][ T13] bond12: (slave ip6gretap2): link status up again after 0 ms [ 1816.102142][T20081] bond12: (slave ip6gretap2): link status up again after 0 ms [ 1816.117464][ T59] bond12: (slave ip6gretap2): link status up again after 0 ms [ 1816.136350][ T13] bond12: (slave ip6gretap2): link status up again after 0 ms [ 1816.156275][ T8224] bond12: (slave ip6gretap2): link status up again after 0 ms [ 1816.176317][T20107] bond12: (slave ip6gretap2): link status up again after 0 ms [ 1816.196839][ T8224] bond12: (slave ip6gretap2): link status up again after 0 ms [ 1816.205537][ T9453] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 1816.224799][T20107] bond12: (slave ip6gretap2): link status up again after 0 ms [ 1816.237420][ T8224] bond12: (slave ip6gretap2): link status up again after 0 ms [ 1816.256308][T20107] bond12: (slave ip6gretap2): link status up again after 0 ms [ 1816.610816][T20082] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1816.610859][T20082] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 1816.610890][T20082] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1816.713779][T20082] bond12: (slave veth19): link status definitely up, 10000 Mbps full duplex [ 1816.814648][T20082] bond12: active interface up! [ 1816.827704][T20082] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1816.827743][T20082] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 1816.827774][T20082] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1816.829538][T20107] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1816.829574][T20107] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 1816.829605][T20107] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1816.829702][T20107] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1816.829733][T20107] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 1816.829763][T20107] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1817.053133][T28734] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1817.068583][T28734] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1817.087046][T17679] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1817.600880][ T9453] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1817.957442][ T9453] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1818.711692][ T12] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x6c [ 1819.155233][T22184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20923'. [ 1821.097512][T20107] net_ratelimit: 44 callbacks suppressed [ 1821.097539][T20107] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1821.157015][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1821.208039][ T59] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1821.333251][T28734] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1821.357553][T22173] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1821.437712][ T173] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1821.649417][T22201] gretap0: left promiscuous mode [ 1821.947101][T22201] ip6gretap0: left promiscuous mode [ 1821.973929][T22201] 8021q: adding VLAN 0 to HW filter on device team0 [ 1822.227056][T22208] syz.0.20927: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1822.227224][T22208] CPU: 1 UID: 0 PID: 22208 Comm: syz.0.20927 Not tainted syzkaller #0 PREEMPT(full) [ 1822.227251][T22208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1822.227267][T22208] Call Trace: [ 1822.227277][T22208] [ 1822.227289][T22208] dump_stack_lvl+0xe8/0x150 [ 1822.227330][T22208] warn_alloc+0x24d/0x270 [ 1822.227356][T22208] ? kasan_save_track+0x4f/0x80 [ 1822.227380][T22208] ? kasan_save_track+0x3e/0x80 [ 1822.227418][T22208] ? __pfx_warn_alloc+0x10/0x10 [ 1822.227438][T22208] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1822.227470][T22208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1822.227524][T22208] __vmalloc_node_range_noprof+0x127/0x1540 [ 1822.227587][T22208] ? rcu_is_watching+0x16/0xb0 [ 1822.227623][T22208] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1822.227658][T22208] ? __kmalloc_cache_noprof+0x321/0x600 [ 1822.227683][T22208] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1822.227706][T22208] ? xskq_create+0x56/0x220 [ 1822.227734][T22208] xskq_create+0x148/0x220 [ 1822.227757][T22208] ? xsk_init_queue+0x8a/0xe0 [ 1822.227796][T22208] xsk_init_queue+0x8a/0xe0 [ 1822.227846][T22208] xsk_setsockopt+0x52a/0x960 [ 1822.227883][T22208] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1822.227916][T22208] ? __pfx_aa_sk_perm+0x10/0x10 [ 1822.227953][T22208] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1822.227982][T22208] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1822.228018][T22208] do_sock_setsockopt+0x17c/0x1b0 [ 1822.228055][T22208] __x64_sys_setsockopt+0x13d/0x1b0 [ 1822.228090][T22208] do_syscall_64+0x166/0x520 [ 1822.228113][T22208] ? trace_irq_disable+0x3b/0x140 [ 1822.228136][T22208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1822.228159][T22208] ? clear_bhb_loop+0x70/0xc0 [ 1822.228187][T22208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1822.228210][T22208] RIP: 0033:0x7f6f2459e159 [ 1822.228231][T22208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1822.228252][T22208] RSP: 002b:00007f6f25382028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1822.228275][T22208] RAX: ffffffffffffffda RBX: 00007f6f24826090 RCX: 00007f6f2459e159 [ 1822.228292][T22208] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 1822.228323][T22208] RBP: 00007f6f2463503b R08: 0000000000000004 R09: 0000000000000000 [ 1822.228339][T22208] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1822.228355][T22208] R13: 00007f6f24826128 R14: 00007f6f24826090 R15: 00007ffd56aa9258 [ 1822.228401][T22208] [ 1822.235660][T22208] Mem-Info: [ 1822.235677][T22208] active_anon:6894 inactive_anon:0 isolated_anon:0 [ 1822.235677][T22208] active_file:6 inactive_file:43786 isolated_file:0 [ 1822.235677][T22208] unevictable:0 dirty:355 writeback:0 [ 1822.235677][T22208] slab_reclaimable:12900 slab_unreclaimable:126668 [ 1822.235677][T22208] mapped:29344 shmem:665 pagetables:3485 [ 1822.235677][T22208] sec_pagetables:0 bounce:0 [ 1822.235677][T22208] kernel_misc_reclaimable:0 [ 1822.235677][T22208] free:1288193 free_pcp:8882 free_cma:0 [ 1822.235752][T22208] Node 0 active_anon:27576kB inactive_anon:0kB active_file:24kB inactive_file:174936kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117376kB dirty:1420kB writeback:0kB shmem:2660kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15244kB pagetables:13824kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1822.363694][T22208] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1822.363774][T22208] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1822.363848][T22208] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 1822.363895][T22208] Node 0 DMA32 free:1187708kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:27576kB inactive_anon:0kB active_file:24kB inactive_file:174936kB unevictable:0kB writepending:1420kB zspages:0kB present:3129332kB managed:2546612kB mlocked:0kB bounce:0kB free_pcp:35320kB local_pcp:22168kB free_cma:0kB [ 1822.363969][T22208] lowmem_reserve[]: 0 0 0 0 0 [ 1822.364013][T22208] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1822.364080][T22208] lowmem_reserve[]: 0 0 0 0 0 [ 1822.364124][T22208] Node 1 Normal free:3949704kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1822.364194][T22208] lowmem_reserve[]: 0 0 0 0 0 [ 1822.364238][T22208] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1822.364397][T22208] Node 0 DMA32: 1113*4kB (UME) 1299*8kB (UME) 448*16kB (UM) 780*32kB (UME) 378*64kB (UME) 369*128kB (UM) 471*256kB (UM) 229*512kB (UM) 106*1024kB (UM) 3*2048kB (UM) 175*4096kB (UM) = 1187708kB [ 1822.428131][T22208] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1822.428256][T22208] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 5*16kB (UM) 5*32kB (UM) 8*64kB (UM) 5*128kB (UM) 3*256kB (UM) 4*512kB (UM) 1*1024kB (M) 0*2048kB 963*4096kB (UM) = 3949704kB [ 1822.428446][T22208] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1822.428466][T22208] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1822.428502][T22208] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1822.428522][T22208] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1822.428542][T22208] 44453 total pagecache pages [ 1822.428556][T22208] 0 pages in swap cache [ 1822.428566][T22208] Free swap = 124996kB [ 1822.428576][T22208] Total swap = 124996kB [ 1822.428586][T22208] 2097051 pages RAM [ 1822.428595][T22208] 0 pages HighMem/MovableOnly [ 1822.428604][T22208] 428782 pages reserved [ 1822.428614][T22208] 0 pages cma reserved [ 1823.451694][T22201] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1823.451725][T22201] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1823.485737][T22216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20929'. [ 1823.622799][T22201] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1823.624100][T22201] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1823.672358][T22201] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1823.725359][T22201] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1823.816351][T17679] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1823.895599][T22201] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1823.957290][T17679] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1824.044102][T22201] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 1824.137711][T20087] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1824.137795][T20087] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1824.143459][T22213] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1824.176750][T17679] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1824.257672][ T9453] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1824.315536][ T9453] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 1824.504712][T22220] netlink: 132 bytes leftover after parsing attributes in process `syz.1.20929'. [ 1824.516857][ T173] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1824.516932][T13736] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1824.517100][ T173] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1824.666253][ T9453] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1824.908137][ T9453] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 1825.108168][T22226] Cannot find del_set index 2 as target [ 1825.146845][T20107] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1825.175366][T20107] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1825.175648][T20107] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1825.200776][T22226] nbd14: detected capacity change from 0 to 127 [ 1825.356105][T20087] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1825.471791][T22231] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20933'. [ 1825.646240][T20087] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1825.812102][T22226] wg1 speed is unknown, defaulting to 1000 [ 1825.827857][ T59] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1826.106273][ T59] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1826.220399][T28734] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1826.326404][ T12] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1826.438835][ T12] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1826.547059][T20107] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1826.656516][T20082] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1826.766523][T20087] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1826.876500][T20107] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1826.986594][ T12] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1827.096592][T20107] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1827.346446][T22247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20937'. [ 1827.540104][T22242] netlink: 830 bytes leftover after parsing attributes in process `syz.0.20936'. [ 1827.814326][T17417] block nbd14: Receive control failed (result -104) [ 1827.963619][T22226] lo speed is unknown, defaulting to 1000 [ 1828.163783][T22255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20939'. [ 1828.319037][T22255] bond17: entered promiscuous mode [ 1828.319475][T22255] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1828.319909][T22261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20939'. [ 1828.600103][ T1742] block nbd14: Connection timed out, retrying (0/1 alive) [ 1828.601238][ T1742] block nbd14: Connection timed out, retrying (0/1 alive) [ 1828.601296][ T1742] block nbd14: Connection timed out, retrying (0/1 alive) [ 1828.601356][ T1742] block nbd14: Connection timed out, retrying (0/1 alive) [ 1828.602252][ T1742] block nbd14: Dead connection, failed to find a fallback [ 1828.602275][ T1742] block nbd14: shutting down sockets [ 1828.602399][ T1742] I/O error, dev nbd14, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1828.602507][ T1742] Buffer I/O error on dev nbd14, logical block 3, async page read [ 1828.602752][ T1742] I/O error, dev nbd14, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1828.602781][ T1742] Buffer I/O error on dev nbd14, logical block 2, async page read [ 1828.602806][ T1742] I/O error, dev nbd14, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1828.602832][ T1742] Buffer I/O error on dev nbd14, logical block 1, async page read [ 1828.602856][ T1742] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1828.602883][ T1742] Buffer I/O error on dev nbd14, logical block 0, async page read [ 1828.604264][ T1742] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1828.604297][ T1742] Buffer I/O error on dev nbd14, logical block 0, async page read [ 1828.604428][ T1742] Buffer I/O error on dev nbd14, logical block 1, async page read [ 1828.604448][ T1742] Buffer I/O error on dev nbd14, logical block 2, async page read [ 1828.604466][ T1742] Buffer I/O error on dev nbd14, logical block 3, async page read [ 1828.605710][ T1742] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1828.605742][ T1742] Buffer I/O error on dev nbd14, logical block 0, async page read [ 1828.605762][ T1742] Buffer I/O error on dev nbd14, logical block 1, async page read [ 1828.606221][ T1742] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1828.606416][ T1742] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1828.606619][ T1742] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1828.606814][ T1742] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1828.607052][T22232] ldm_validate_partition_table(): Disk read failed. [ 1828.607664][T22232] Dev nbd14: unable to read RDB block 0 [ 1828.609090][T22232] nbd14: unable to read partition table [ 1828.874711][T22255] netlink: 'syz.2.20939': attribute type 11 has an invalid length. [ 1828.985226][T22232] ldm_validate_partition_table(): Disk read failed. [ 1829.006079][T22232] Dev nbd14: unable to read RDB block 0 [ 1829.013912][T22232] nbd14: unable to read partition table [ 1829.098174][T22247] wg1 speed is unknown, defaulting to 1000 [ 1829.196867][T22269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20941'. [ 1829.254052][T22259] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1829.254489][T22259] bond17: (slave gre1): The slave device specified does not support setting the MAC address [ 1829.284302][T22259] bond17: (slave gre1): Error -95 calling set_mac_address [ 1829.394288][T22261] bond17 (unregistering): Released all slaves [ 1829.396662][ C1] ip6_tnl_xmit_ctl: 4 callbacks suppressed [ 1829.396683][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1829.398941][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1829.556918][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1829.863437][T22273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20942'. [ 1829.863467][T22273] netlink: 'syz.0.20942': attribute type 1 has an invalid length. [ 1830.163030][T22273] netlink: 48 bytes leftover after parsing attributes in process `syz.0.20942'. [ 1831.064438][T22247] lo speed is unknown, defaulting to 1000 [ 1831.179128][T22283] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20944'. [ 1831.487331][T32162] net_ratelimit: 11 callbacks suppressed [ 1831.487355][T32162] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1832.127451][ T59] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1832.282030][T22301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20949'. [ 1832.531504][T22312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20949'. [ 1832.598102][ C1] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 1832.861597][T20107] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1833.351980][ T1168] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1833.616050][T22319] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20950'. [ 1835.671364][T22317] bridge0: port 1(batadv1) entered disabled state [ 1836.409699][T22317] bond12: left allmulticast mode [ 1836.409727][T22317] ip6gretap2: left allmulticast mode [ 1836.489590][T22317] bridge8: port 2(veth13) entered disabled state [ 1836.490534][T22317] bridge8: port 1(veth11) entered disabled state [ 1836.621440][T22317] bridge9: port 2(veth21) entered disabled state [ 1836.623735][T22317] bridge9: port 1(veth19) entered disabled state [ 1836.741315][T22341] tipc: New replicast peer: 255.255.255.255 [ 1836.742228][T22341] tipc: Enabled bearer , priority 5 [ 1836.747876][ T59] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1836.747914][ T59] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1836.747944][ T59] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20001 - 0 [ 1836.760642][T32162] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1836.760678][T32162] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1836.760708][T32162] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20001 - 0 [ 1836.760755][T32162] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1836.760792][T32162] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1836.760822][T32162] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1836.760850][T32162] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20001 - 0 [ 1836.760888][T32162] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1836.760917][T32162] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1836.760945][T32162] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20001 - 0 [ 1836.910621][T32162] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1837.033628][ T59] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1837.137396][T28734] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1837.255437][T28734] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1837.356247][T32162] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1837.468819][T28734] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1837.577409][T20107] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1837.687406][T20081] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1837.718978][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1837.800488][T32162] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1837.951690][T22359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20956'. [ 1838.050968][T22357] netlink: 'syz.4.20957': attribute type 2 has an invalid length. [ 1838.178660][T22357] netlink: 20 bytes leftover after parsing attributes in process `syz.4.20957'. [ 1838.356404][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1838.689054][T22370] netlink: 24 bytes leftover after parsing attributes in process `syz.3.20958'. [ 1839.147235][T22379] syzkaller1: entered promiscuous mode [ 1839.147269][T22379] syzkaller1: entered allmulticast mode [ 1840.795280][T22382] wg1 speed is unknown, defaulting to 1000 [ 1840.855029][T22407] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20963'. [ 1841.431887][T22423] netlink: 24 bytes leftover after parsing attributes in process `syz.3.20966'. [ 1841.569409][T22423] netlink: 'syz.3.20966': attribute type 4 has an invalid length. [ 1841.569449][T22423] netlink: 152 bytes leftover after parsing attributes in process `syz.3.20966'. [ 1841.709496][ T9453] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1841.732734][ T9453] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1841.787365][ T9453] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 1841.787858][ T9453] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 1841.788836][ T9453] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1841.793902][T22425] net_ratelimit: 18 callbacks suppressed [ 1841.793921][T22425] A link change request failed with some changes committed already. Interface vxlan2 may have been left with an inconsistent configuration, please check. [ 1841.858063][ T1168] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1841.995483][T20087] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1842.086974][T17679] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1842.105393][T32162] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1842.206376][ T12] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1842.316595][T19999] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1842.427375][T20087] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1842.464383][T22382] lo speed is unknown, defaulting to 1000 [ 1842.527309][T22411] siw: device registration error -23 [ 1842.597375][T17679] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 1842.597569][T17679] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 1842.760486][T17679] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 1842.760509][T17679] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1842.968160][T19999] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1843.624791][T22434] macsec2: entered promiscuous mode [ 1843.644675][ T173] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1843.780711][T32162] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1845.278438][T22463] [ 1845.280841][T22463] ====================================================== [ 1845.287878][T22463] WARNING: possible circular locking dependency detected [ 1845.294919][T22463] syzkaller #0 Not tainted [ 1845.299349][T22463] ------------------------------------------------------ [ 1845.306391][T22463] syz.2.20972/22463 is trying to acquire lock: [ 1845.312563][T22463] ffffffff8ee900e0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x149/0x600 [ 1845.321768][T22463] [ 1845.321768][T22463] but task is already holding lock: [ 1845.329147][T22463] ffff88807e7cb6b8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 1845.338685][T22463] [ 1845.338685][T22463] which lock already depends on the new lock. [ 1845.338685][T22463] [ 1845.349103][T22463] [ 1845.349103][T22463] the existing dependency chain (in reverse order) is: [ 1845.358134][T22463] [ 1845.358134][T22463] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 1845.365730][T22463] __might_fault+0xcb/0x130 [ 1845.370793][T22463] _copy_from_user+0x28/0xb0 [ 1845.375954][T22463] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 1845.382485][T22463] ip_generic_getfrag+0x149/0x2d0 [ 1845.388085][T22463] __ip6_append_data+0x3b26/0x40c0 [ 1845.393753][T22463] ip6_append_data+0x108/0x270 [ 1845.399065][T22463] rawv6_sendmsg+0x1298/0x18c0 [ 1845.404390][T22463] sock_sendmsg_nosec+0x10e/0x180 [ 1845.409975][T22463] ____sys_sendmsg+0x54e/0x850 [ 1845.415292][T22463] ___sys_sendmsg+0x2a5/0x360 [ 1845.420519][T22463] __x64_sys_sendmsg+0x1b1/0x290 [ 1845.426018][T22463] do_syscall_64+0x166/0x520 [ 1845.431165][T22463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1845.437610][T22463] [ 1845.437610][T22463] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1845.445383][T22463] lock_sock_nested+0x41/0x100 [ 1845.450697][T22463] inet_shutdown+0x6a/0x390 [ 1845.455771][T22463] nbd_mark_nsock_dead+0x2cb/0x550 [ 1845.461430][T22463] recv_work+0x1cee/0x1e10 [ 1845.466400][T22463] process_scheduled_works+0xc3d/0x1630 [ 1845.472501][T22463] worker_thread+0xa47/0xfb0 [ 1845.477647][T22463] kthread+0x38b/0x480 [ 1845.482264][T22463] ret_from_fork+0x514/0xb70 [ 1845.487403][T22463] ret_from_fork_asm+0x1a/0x30 [ 1845.492728][T22463] [ 1845.492728][T22463] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1845.500405][T22463] __mutex_lock+0x19d/0x1550 [ 1845.505544][T22463] nbd_queue_rq+0x373/0xff0 [ 1845.510596][T22463] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1845.516701][T22463] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1845.523597][T22463] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1845.530132][T22463] blk_mq_run_work_fn+0x16c/0x300 [ 1845.535711][T22463] process_scheduled_works+0xc3d/0x1630 [ 1845.541808][T22463] worker_thread+0xa47/0xfb0 [ 1845.546957][T22463] kthread+0x38b/0x480 [ 1845.551580][T22463] ret_from_fork+0x514/0xb70 [ 1845.556719][T22463] ret_from_fork_asm+0x1a/0x30 [ 1845.562048][T22463] [ 1845.562048][T22463] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1845.569291][T22463] __mutex_lock+0x19d/0x1550 [ 1845.574448][T22463] nbd_queue_rq+0xc1/0xff0 [ 1845.579408][T22463] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1845.585500][T22463] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1845.592388][T22463] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1845.598930][T22463] blk_mq_run_work_fn+0x16c/0x300 [ 1845.604523][T22463] process_scheduled_works+0xc3d/0x1630 [ 1845.610628][T22463] worker_thread+0xa47/0xfb0 [ 1845.615770][T22463] kthread+0x38b/0x480 [ 1845.620386][T22463] ret_from_fork+0x514/0xb70 [ 1845.625519][T22463] ret_from_fork_asm+0x1a/0x30 [ 1845.630840][T22463] [ 1845.630840][T22463] -> #3 (set->srcu){.+.+}-{0:0}: [ 1845.638003][T22463] __synchronize_srcu+0xc9/0x2f0 [ 1845.643492][T22463] elevator_switch+0x1e8/0x7b0 [ 1845.648825][T22463] elevator_change+0x2fa/0x480 [ 1845.654133][T22463] elevator_set_default+0x375/0x440 [ 1845.659877][T22463] blk_register_queue+0x3f3/0x4e0 [ 1845.665452][T22463] __add_disk+0x6b8/0xdb0 [ 1845.670335][T22463] add_disk_fwnode+0x100/0x3a0 [ 1845.675653][T22463] nbd_dev_add+0x733/0xb60 [ 1845.680616][T22463] nbd_init+0x168/0x1f0 [ 1845.685329][T22463] do_one_initcall+0x250/0x870 [ 1845.690665][T22463] do_initcall_level+0x10a/0x1a0 [ 1845.696150][T22463] do_initcalls+0x59/0xa0 [ 1845.701032][T22463] kernel_init_freeable+0x29d/0x3e0 [ 1845.706782][T22463] kernel_init+0x22/0x1d0 [ 1845.711699][T22463] ret_from_fork+0x514/0xb70 [ 1845.716856][T22463] ret_from_fork_asm+0x1a/0x30 [ 1845.722182][T22463] [ 1845.722182][T22463] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1845.730039][T22463] __mutex_lock+0x19d/0x1550 [ 1845.735181][T22463] elevator_change+0x1af/0x480 [ 1845.740497][T22463] elevator_set_none+0xb5/0x140 [ 1845.745893][T22463] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1845.752263][T22463] nbd_start_device+0x189/0xb30 [ 1845.757689][T22463] nbd_genl_connect+0x167d/0x1cd0 [ 1845.763273][T22463] genl_family_rcv_msg_doit+0x233/0x340 [ 1845.769371][T22463] genl_rcv_msg+0x614/0x7a0 [ 1845.774435][T22463] netlink_rcv_skb+0x226/0x4a0 [ 1845.779787][T22463] genl_rcv+0x28/0x40 [ 1845.784312][T22463] netlink_unicast+0x7bd/0x940 [ 1845.789655][T22463] netlink_sendmsg+0x813/0xb40 [ 1845.794976][T22463] sock_sendmsg_nosec+0x13a/0x180 [ 1845.800565][T22463] ____sys_sendmsg+0x54e/0x850 [ 1845.805882][T22463] ___sys_sendmsg+0x2a5/0x360 [ 1845.811117][T22463] __x64_sys_sendmsg+0x1b1/0x290 [ 1845.816602][T22463] do_syscall_64+0x166/0x520 [ 1845.821751][T22463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1845.828192][T22463] [ 1845.828192][T22463] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 1845.836837][T22463] blk_alloc_queue+0x544/0x690 [ 1845.842151][T22463] __blk_mq_alloc_disk+0x194/0x390 [ 1845.847827][T22463] nbd_dev_add+0x494/0xb60 [ 1845.852789][T22463] nbd_init+0x168/0x1f0 [ 1845.857500][T22463] do_one_initcall+0x250/0x870 [ 1845.862824][T22463] do_initcall_level+0x10a/0x1a0 [ 1845.868311][T22463] do_initcalls+0x59/0xa0 [ 1845.873194][T22463] kernel_init_freeable+0x29d/0x3e0 [ 1845.878941][T22463] kernel_init+0x22/0x1d0 [ 1845.883826][T22463] ret_from_fork+0x514/0xb70 [ 1845.888963][T22463] ret_from_fork_asm+0x1a/0x30 [ 1845.894285][T22463] [ 1845.894285][T22463] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1845.901535][T22463] __lock_acquire+0x164c/0x2de0 [ 1845.906937][T22463] lock_acquire+0x115/0x350 [ 1845.911994][T22463] fs_reclaim_acquire+0x71/0x100 [ 1845.917475][T22463] prepare_alloc_pages+0x149/0x600 [ 1845.923132][T22463] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1845.929493][T22463] alloc_pages_mpol+0x21e/0x390 [ 1845.934894][T22463] alloc_pages_noprof+0xb1/0x2b0 [ 1845.940383][T22463] pte_alloc_one+0x22/0x370 [ 1845.945438][T22463] do_pte_missing+0x13c8/0x34b0 [ 1845.950855][T22463] handle_mm_fault+0x1a53/0x3750 [ 1845.956353][T22463] do_user_addr_fault+0x746/0x1340 [ 1845.962013][T22463] exc_page_fault+0x6a/0xc0 [ 1845.967062][T22463] asm_exc_page_fault+0x26/0x30 [ 1845.972461][T22463] rep_movs_alternative+0xf/0xa0 [ 1845.977948][T22463] _copy_from_user+0x7a/0xb0 [ 1845.983085][T22463] hci_sock_reject_list_del+0x94/0x130 [ 1845.989105][T22463] hci_sock_ioctl+0x7f8/0x940 [ 1845.994341][T22463] sock_do_ioctl+0x101/0x320 [ 1845.999500][T22463] sock_ioctl+0x57a/0x7e0 [ 1846.004402][T22463] __se_sys_ioctl+0xfc/0x170 [ 1846.009545][T22463] do_syscall_64+0x166/0x520 [ 1846.014695][T22463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1846.021139][T22463] [ 1846.021139][T22463] other info that might help us debug this: [ 1846.021139][T22463] [ 1846.031477][T22463] Chain exists of: [ 1846.031477][T22463] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 1846.031477][T22463] [ 1846.044121][T22463] Possible unsafe locking scenario: [ 1846.044121][T22463] [ 1846.051591][T22463] CPU0 CPU1 [ 1846.056974][T22463] ---- ---- [ 1846.062353][T22463] rlock(&mm->mmap_lock); [ 1846.066800][T22463] lock(sk_lock-AF_INET6); [ 1846.073854][T22463] lock(&mm->mmap_lock); [ 1846.080729][T22463] lock(fs_reclaim); [ 1846.084753][T22463] [ 1846.084753][T22463] *** DEADLOCK *** [ 1846.084753][T22463] [ 1846.092926][T22463] locks held by syz.2.20972/22463: 2, last CPU#1: [ 1846.099388][T22463] #0: ffff888046ee0260 (sk_lock-AF_BLUETOOTH-BTPROTO_HCI){+.+.}-{0:0}, at: hci_sock_ioctl+0x617/0x940 [ 1846.110496][T22463] #1: ffff88807e7cb6b8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 1846.120481][T22463] [ 1846.120481][T22463] stack backtrace: [ 1846.126401][T22463] CPU: 1 UID: 0 PID: 22463 Comm: syz.2.20972 Not tainted syzkaller #0 PREEMPT(full) [ 1846.135879][T22463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1846.145958][T22463] Call Trace: [ 1846.149271][T22463] [ 1846.152226][T22463] dump_stack_lvl+0xe8/0x150 [ 1846.156857][T22463] print_circular_bug+0x2e2/0x300 [ 1846.161938][T22463] check_noncircular+0x12f/0x150 [ 1846.166925][T22463] __lock_acquire+0x164c/0x2de0 [ 1846.171834][T22463] ? mas_next_slot+0xc98/0xd70 [ 1846.176640][T22463] lock_acquire+0x115/0x350 [ 1846.181177][T22463] ? prepare_alloc_pages+0x149/0x600 [ 1846.186502][T22463] ? __lock_acquire+0x747/0x2de0 [ 1846.191482][T22463] fs_reclaim_acquire+0x71/0x100 [ 1846.196443][T22463] ? prepare_alloc_pages+0x149/0x600 [ 1846.201753][T22463] prepare_alloc_pages+0x149/0x600 [ 1846.206896][T22463] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1846.212738][T22463] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1846.219097][T22463] ? __pfx_policy_nodemask+0x10/0x10 [ 1846.224434][T22463] alloc_pages_mpol+0x21e/0x390 [ 1846.229325][T22463] alloc_pages_noprof+0xb1/0x2b0 [ 1846.234305][T22463] pte_alloc_one+0x22/0x370 [ 1846.238844][T22463] do_pte_missing+0x13c8/0x34b0 [ 1846.243733][T22463] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 1846.250015][T22463] handle_mm_fault+0x1a53/0x3750 [ 1846.254991][T22463] ? handle_mm_fault+0xf1/0x3750 [ 1846.259966][T22463] ? __pfx_handle_mm_fault+0x10/0x10 [ 1846.265303][T22463] ? __lock_acquire+0x747/0x2de0 [ 1846.270301][T22463] ? lock_mm_and_find_vma+0xa7/0x340 [ 1846.275625][T22463] do_user_addr_fault+0x746/0x1340 [ 1846.280768][T22463] exc_page_fault+0x6a/0xc0 [ 1846.285303][T22463] asm_exc_page_fault+0x26/0x30 [ 1846.290182][T22463] RIP: 0010:rep_movs_alternative+0xf/0xa0 [ 1846.295937][T22463] Code: c4 10 c3 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 3d 67 04 00 66 2e [ 1846.315569][T22463] RSP: 0018:ffffc90007be7bb8 EFLAGS: 00050206 [ 1846.321662][T22463] RAX: 00007ffffffff001 RBX: 0000000000000006 RCX: 0000000000000006 [ 1846.329658][T22463] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffc90007be7c00 [ 1846.337652][T22463] RBP: ffffc90007be7c68 R08: 0000000000000005 R09: 0000000000000006 [ 1846.345654][T22463] R10: dffffc0000000000 R11: fffff52000f7cf80 R12: 1ffff92000f7cf7c [ 1846.353653][T22463] R13: dffffc0000000000 R14: ffffc90007be7c00 R15: 0000200000000080 [ 1846.361668][T22463] _copy_from_user+0x7a/0xb0 [ 1846.366299][T22463] hci_sock_reject_list_del+0x94/0x130 [ 1846.371800][T22463] ? __pfx_hci_sock_reject_list_del+0x10/0x10 [ 1846.377911][T22463] ? bpf_lsm_capable+0x9/0x20 [ 1846.382644][T22463] ? security_capable+0x7e/0x2c0 [ 1846.387623][T22463] hci_sock_ioctl+0x7f8/0x940 [ 1846.392347][T22463] sock_do_ioctl+0x101/0x320 [ 1846.396993][T22463] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1846.402141][T22463] ? hook_file_ioctl+0x1f2/0x600 [ 1846.407122][T22463] sock_ioctl+0x57a/0x7e0 [ 1846.411513][T22463] ? __pfx_sock_ioctl+0x10/0x10 [ 1846.416429][T22463] ? __fget_files+0x2a/0x420 [ 1846.421078][T22463] ? __fget_files+0x3a2/0x420 [ 1846.425793][T22463] ? __fget_files+0x2a/0x420 [ 1846.430424][T22463] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1846.435410][T22463] ? __pfx_sock_ioctl+0x10/0x10 [ 1846.440303][T22463] __se_sys_ioctl+0xfc/0x170 [ 1846.444927][T22463] do_syscall_64+0x166/0x520 [ 1846.449554][T22463] ? trace_irq_disable+0x3b/0x140 [ 1846.454617][T22463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1846.460713][T22463] ? clear_bhb_loop+0x70/0xc0 [ 1846.465426][T22463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1846.471352][T22463] RIP: 0033:0x7f30fc59e159 [ 1846.475793][T22463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1846.495437][T22463] RSP: 002b:00007f30fd39a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1846.503882][T22463] RAX: ffffffffffffffda RBX: 00007f30fc826180 RCX: 00007f30fc59e159 [ 1846.511877][T22463] RDX: 0000200000000080 RSI: 00000000400448e7 RDI: 0000000000000009 [ 1846.519877][T22463] RBP: 00007f30fc63503b R08: 0000000000000000 R09: 0000000000000000 [ 1846.527871][T22463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1846.535860][T22463] R13: 00007f30fc826218 R14: 00007f30fc826180 R15: 00007ffe891a2c68 [ 1846.543871][T22463] [ 1846.554107][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1846.679509][T22455] netlink: 'syz.4.20973': attribute type 10 has an invalid length. [ 1846.772155][T22436] netlink: 'syz.3.20969': attribute type 4 has an invalid length. [ 1846.852073][T22455] .`: (slave netdevsim1): Releasing backup interface [ 1846.893401][T22455] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1846.978933][T22455] team0: Port device netdevsim1 added [ 1846.978987][T22455] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 1846.987070][ T12] net_ratelimit: 14 callbacks suppressed [ 1846.987092][ T12] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1847.077123][T17417] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1847.136011][T32162] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1847.250527][T19999] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1847.357795][T32162] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1847.467002][T32162] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1847.577984][ T59] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1847.685947][ T59] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1847.796425][T20081] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1847.906114][T20081] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1848.015985][ T59] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1852.086335][T20081] net_ratelimit: 36 callbacks suppressed [ 1852.086378][T20081] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1852.197745][ T59] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1852.306016][T32162] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1852.416308][T20107] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1852.526166][T20081] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1852.636001][ T59] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1852.745972][ T59] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1852.856051][T20081] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1852.966074][T20081] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1853.082235][T32162] bond12: (slave ip6gretap2): failed to get link speed/duplex [ 1853.716626][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!