last executing test programs: 6.193334129s ago: executing program 0 (id=8276): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="34000000200021a729bd7000fddbdf250a0000cdff000001020001000800060000000000080018004e234e230500150002"], 0x34}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRESOCT=r0], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f00000001c0)}, 0xffffffffffffffb9) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x3, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800eeffffffff7a8af8ff00e00000bfa200000000001907020000f8ffffffb703000008000000b70400000f00000085f3ff00030000009500000000000000d48ae3e0cf7a43e1664e3a00f0f4bc08e2d4fa69888cfddc5fd5e7905b92dcdf97d366b94e0363d375823af0ca13c7cbec08e5c239502c25b97ac47a8ce0c3be85441c858bb1057fe51dbb538ef49d67f01e5655b2eeee8209a4bac0d1ccd69f9cbdcc4ccbfaf78ed1100a6ab7"], &(0x7f0000000240)='GPL\x00', 0x4, 0x13, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r4, 0x29, 0xcb, &(0x7f00000000c0)=0x2, 0x4) 5.952752496s ago: executing program 0 (id=8278): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'pim6reg1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="220d03004b406155e85fead5a545e77c0000003eb5c0fdf8cbcc4c923765549ea5e8628d81062c126d72d3350af4e5b0eadd1568e04ed04f6296aaf764035dcfade9641e426a410b2ce92412e6f1f88dc8fe88c64c9919c161893b7f906499ce2e211c86bbfb16107a9a5374fde31ca54f05b33b8389dd81b87a7903a556b500fe4a9a1d731378994e6a8e526861238aa13e6e65fc37188a3c36b89d43d5a25066b07aaa65a8fcae6df3ed7ebce4660e549a19b6af4fa24ff6843b2b3153b96fd90a67", @ANYRES16=r4, @ANYBLOB="0100000000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572300000000000000000"], 0x38}}, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) connect$can_bcm(r8, &(0x7f0000001ff0)={0x1d, r9}, 0x10) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f0000000000)=0x6) sendmsg$can_raw(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000280)=@canfd={{0x1}, 0xf6, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r10, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x30, r11, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c800}, 0x4040041) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@gettaction={0x100, 0x32, 0x8, 0x8000, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x5}, @action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x401}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffa}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x24e8}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0xc, 0x21a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.713973766s ago: executing program 0 (id=8281): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (async) r2 = socket(0x28, 0x1, 0x0) (async) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000b"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) (async) socket(0x26, 0x6, 0xcf9) (async) socket(0x10, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x0, 0x1100, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @private}}}}) r7 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), r8) sendmsg$NLBL_MGMT_C_LISTALL(r8, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x14, r9, 0x5170c560dce29b81, 0x8, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRESOCT], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x14d2bf882281d426, 0x73ea55afb0af1105, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @value=r7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x540, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) 5.500075802s ago: executing program 0 (id=8283): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-camellia-aesni\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) mmap(&(0x7f0000124000/0x1000)=nil, 0x1000, 0x200000f, 0x30, 0xffffffffffffffff, 0x94c1c000) recvmmsg(r1, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001d00)=""/1, 0x1}], 0x1}, 0xc}], 0x1, 0x10002, 0x0) 5.361152322s ago: executing program 0 (id=8285): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86) sendmsg$key(r3, &(0x7f0000000180)={0x700, 0x0, 0x0}, 0x424) close(0x3) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x5) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) sendto$inet(r7, &(0x7f0000000180)="8995", 0x2, 0x4c041, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, 0x0, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x180}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000400)={0x0, 0x8, 0x6, 0xfab5, 0x9, 0x10, 0x8, 0x5, {0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x42}}}, 0x4c, 0x6, 0x81, 0xfffffffd, 0x163}}, &(0x7f0000000100)=0xb0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0xa0, 0x0, 0x1, 0x102, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffef7f}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2e}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xd9}]}, @CTA_NAT_DST={0x54, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @CTA_LABELS_MASK={0x14, 0x17, [0xc0000000, 0x1, 0x2, 0x8]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000801) 3.71027036s ago: executing program 3 (id=8306): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x2c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x78, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x2}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000b40)={r2, @in={{0x2, 0x4e21, @empty}}, 0x0, 0xb92}, 0x90) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r4, 0x88, 0x67, &(0x7f00000002c0)=r5, 0x4) sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_retopts={{0x10}}], 0x10}, 0x4840) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000080)={0xbf, 0x99, 0x15, 0x5, 0xff, 0x5, 0xfb, 0x8, 0xec, 0x2, 0x81, 0x84, 0x8, 0x5}, 0xe) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f0000000000)=0x4, 0x4) shutdown(r6, 0x1) recvmmsg(r6, &(0x7f00000000c0), 0x0, 0x10040, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xffffffc1) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, r8, 0x100, 0x123, 0x22d}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$kcm(r4, &(0x7f0000000b40)={&(0x7f0000000540)=@nfc_llcp={0x27, 0x0, 0x0, 0x2, 0xfe, 0x2, "1516e997a09eb2e2bf764d143f5fbe1f415a4eafae1ca968ceee9d6250643f0c845e6a00c5a7c34ca93c6a9fe8c161abcd90583e8292be1f1b75565ea65114", 0x1f}, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000005c0)="fa0ddd6578a3a1c8edd5662ae7ab895b89dd9f970f9b83fb7a03696c8af157f3a9730ab406554a5877dc512ca29e5c86bfa7382333c47ae229d63acf08a0eca2f04b7702a0a3e20f41b2733c7c4148949b01ab93e51684f017169750f59e7dc5f0670428f49043c236d8e6be2c405d7dd6d86bbed00078fe277ad5227668b9ed3e0dbf48182887e1032d7d2a5483023109b96c4fd20166b0a657514875bfa792b9407bc7018dfbda27676336f3003018d537ba61ec5f97fffa69ca35cc432f1e2d", 0xc1}, {&(0x7f00000006c0)="070c74ea73ccda8f515bcc7b613c7ef08651f4dd39d76fdaa65f8d05491b5ab4cdbb97c88a17bf1d0dc3457fe88e4bd6fb5d945b5819acbc740f191beee92380e84b904a7a649cdb9d9c8ca9f6a79c81e4d4e405302ecd2934172cf6a2911b9e1172134a2cb3abb950c6988bca1fa1f575a66774284a4239", 0x78}, {&(0x7f0000000740)="efbbd008cd74b82d5d9d", 0xa}, {&(0x7f0000000780)="4267de8b188b5162a0d591192531d4aebbff1b669abf45a1faa6b4d4ad50f07b1c4a0a72eed38ec767ba3ce7e4fdf3adbefdc538b7dbd9f52c6f686c6cb8457483274658a7c6036e2764f6d9600c4d726a90041e200b1bfec7f9baae5ba059dbd9fb78ddbedcd1d475e6921bbd91d22ac5d1a0c1823483109b8a7da4c5225fee6a8675abd555789bee5e24", 0x8b}, {&(0x7f0000000840)="5772f6f52367deaa916678228efcd6a979058a79fc89", 0x16}, {&(0x7f0000000880)="91d6879297d0fbdfa56ca2a02f5b13341a115dbe305ba96cc20c07c4e8a8ec3b3897d1e331e82c475c51eab1cc08b4c6dddc33839221da979b17d1797c5ae19da0fd7b73d9f1f0ff55f5bb65814d2bca6e86cee4e906e66a5daf0c78b141cf15f1c509d513efead4fed1e229d998f5f1c906429e7fee8b5cbc5a455aa4433a57553c7ea12fd817bc7a6d743eb3e5f888951db112b4c3352a964c1b8485dff0fe0cbaa6519142a7884d1470c936a31ec9a3110a74378bd449cab3b3259f20cb9f00154be9d2c4f3f14f7a", 0xca}, {&(0x7f0000000980)="44c305c565b9a8c9f4a34fff6b224e769aedf354101388a41f9b45d5572373b4b8959e91c3754028d7f440abf6f9262d204bfa6368ded2355428f2efc4320cb6caac59cc1ed262b9fe3331d3a59cbb75671675207aa95db99a26de39053c25f2bbaa6542440cbc57fd", 0x69}, {&(0x7f0000000a00)="b71d66130887a44d2fd110bd6a90b43dfaa5d7c398b5956b5b9444fef1b10e0c183b3b4e109801c6cc1a2a3d02b2a3de6cc928679b6450fd3d55544f788bc5719b5e8c1f803577d69eea47ceaebcb490d3863bfd355fd969c750c8cee283d00d4006ff08d387edfd3b84263afe066fe0b0560b4055e8bd73c4e704ef47a533cab5f3fce2c1f5816978a3239969608205c9ce19bf5f656c99a7", 0x99}], 0x8, &(0x7f0000001bc0)=ANY=[@ANYBLOB="e80000000000000014010000070000008a6c7fa1a08cc7e8510efc305a065273e31fc3787ff55d640fc8fc9d7b1a7bbc04c5f5ba4ea1352466ab3cfb1847383b49c15d228c2ed5ae04cbea3d10ca929b80cfb2b1ed1f4ad15ef6a4455d3da9eb2610abf74d23dbf91548bf7be7fb48334553a169b6336d5536b38fda8445bd9aed1d6fbecde766e4953fb7f733165662466cf3ee2c14f9d1567aafb86a966244b313248a4b85e66f75b0e631b2d053d69de8ce21863d7cc0e8165c4c2a95d347135409227d68a94558cc624d0395ded3ffd6e43b29babee1d9c6c8a6874c339ef573cc000000000018000000000000000d010000050000004c106ad9827d9afae800000000000000ff00000004000000b3be87ab17231224c51ddd4a24735dfab7bba91848f9f8aedf2edc81d838aea8c568a81e915664c2f27e9d2a81b53af6517f9dc5140ac29de5b22439c6d41f38445f16d06af2da757eef1a5e629b3812d83b5f0d46f45121c6fd7e21aca7558e9760e5885a7ae2c39ad0c919f2bcf82b9d3f3624339b6cbe20ce6c6c3330a090e6c409c9e1918d28ae012dacb507a590b7fd56fb42f4220f59d35a72c3adf9b4af2e643e55a82b482ba4fc166a2dd2acd7652dbc8144e5abc4a87bec0b246e7bb918e1f48a788400385a9f34c260331c779443251adfe8f8"], 0x1e8}, 0x10) r9 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) writev(r9, 0x0, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r7, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$cgroup_devices(r7, &(0x7f0000001dc0)=ANY=[@ANYBLOB="62202a3a3720726d00d0b0681835a89614b9aed8b9f3035b3bf884b8e87722fb9e7f72e2292dde17058fd49603ea5ce4281904df8729e742ca15a9cdfa73f80f6b0ebc02afa429f9d1cde9cb0ae84eab5c94acbac31782c6b28e593d28c5fc40e0da"], 0x9) 2.636932175s ago: executing program 1 (id=8311): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000007, 0x204031, 0xffffffffffffffff, 0x94c1c000) recvmmsg(r1, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001d00)=""/1, 0x1}], 0x1}, 0xc}], 0x1, 0x10002, 0x0) 2.445433353s ago: executing program 1 (id=8314): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000ffff27bd7000addf1edb264a016387000239c96ad133bff95ae618ecd31f3c0e4ba894b63c", @ANYRES32=0x0, @ANYBLOB="15010000000000002800128009000100766c616e00000000180002800c0002001200000017000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x8048802) r2 = socket(0x2a, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003000)={0x1c, 0x52, 0x1, 0x70bd2a, 0x0, {0xa}, [@generic="00ae528848"]}, 0x1c}}, 0x20008040) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r4) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000002a"], 0x44}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r9, @ANYBLOB="14005a8010000180040001"], 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r3, 0x8915, &(0x7f00000001c0)={'syzkaller0\x00'}) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000380)={r0, &(0x7f0000000280)='bridge0\x00', 0x12942, &(0x7f00000002c0)={@align=0x800, {0x9, 0x3, 0xf, 0xb01}}, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x62e}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2) sendmsg$NL80211_CMD_GET_REG(r11, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r12, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24004000}, 0x4060001) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r10, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x4}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40010) ioctl$XFS_IOC_FSGEOMETRY_V1(r11, 0x80705864, &(0x7f0000000580)) 2.392441206s ago: executing program 4 (id=8316): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c00000004000000040000000010000000000000", @ANYRES32, @ANYBLOB="0000000000000000100000000000000000", @ANYRES32], 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x24, @short={0x2, 0x1, 0xffff}}, 0x14, &(0x7f0000000340)={&(0x7f0000000300)="3a7891", 0x3}, 0x1, 0x0, 0x0, 0x1}, 0x400c000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000200)=0x91b, 0x4) r3 = socket(0x11, 0x2, 0x10001) unshare(0x22020400) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r4}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r4}, 0x4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd0f000040", 0x6}], 0x1, 0x0, 0x0) ioctl$PPPIOCATTACH(r5, 0x4004743d, &(0x7f0000000040)) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r7}, 0xc) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000440)={&(0x7f0000000080), 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x4c, r6, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'veth0_vlan\x00', &(0x7f0000000180)=@ethtool_sfeatures}) 2.140663672s ago: executing program 4 (id=8317): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x1ff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00'}) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a325bd7000fddbdf25200f07074a264e22030000002f00000001ffffffc300000006000000000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) r4 = openat$cgroup(r1, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(r5, 0x80186e84, &(0x7f0000000040)={&(0x7f00000000c0)=[{0x7ff, 0x9, 0x2}, {0x0, 0x100, 0x2}, {0xffff, 0x25}, {0x7, 0x8, 0x2}, {0xf, 0x6}, {0x5, 0xffff, 0x2}, {0xa, 0x3, 0x2}, {0x800, 0x6, 0x2}], 0x8, 0x10, 0x7f, 0xf03}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETVNETHDRSZ(r6, 0x800454d7, &(0x7f00000001c0)) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000440)='@', 0x1}, {0x0}], 0x2}}], 0x1, 0x8000) 2.134334624s ago: executing program 1 (id=8318): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f0000003500)=[{0x0}], 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000080)="0666", 0x0, 0x2, 0x0, 0x80000000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0], &(0x7f0000000340)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000c80)={0x0, 0x6, 0x7, 0xff, 0x2, 0x7e38, 0x4, 0x88000000, {0x0, @in={{0x2, 0x4e20, @empty}}, 0x100, 0x7, 0x2, 0xb, 0x64c}}, &(0x7f0000000180)=0xb0) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) unshare(0x6a040000) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x58, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a9c000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2e00b9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 2.06055222s ago: executing program 2 (id=8319): r0 = socket$xdp(0x2c, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x368, 0x0, 0xb0, 0xffffffff, 0x158, 0x158, 0x2d0, 0x2d0, 0xffffffff, 0x2d0, 0x2d0, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16, 0x2}, 0x0, 0x70, 0xb0, 0x48}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x2, 0x24, "d7df2f5dfb96e3780ecf6fce52b1130f3a6eaa11a8adb9163040c9b77018"}}}, {{@ip={@multicast1, @multicast2, 0xff, 0xff, 'wlan1\x00', 'erspan0\x00', {}, {0xff}, 0x5c, 0x2, 0x53}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x2, @dev={0xac, 0x14, 0x14, 0x38}, @loopback, @gre_key=0x2, @gre_key=0x2}}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x4, @remote, @dev={0xac, 0x14, 0x14, 0x31}, @gre_key=0x7, @port=0x4e23}}}}, {{@ip={@loopback, @private=0xa010100, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0xffffffffffffffff, 0xb, 0x2}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x368, 0x0, 0xb0, 0xffffffff, 0x158, 0x158, 0x2d0, 0x2d0, 0xffffffff, 0x2d0, 0x2d0, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16, 0x2}, 0x0, 0x70, 0xb0, 0x48}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x2, 0x24, "d7df2f5dfb96e3780ecf6fce52b1130f3a6eaa11a8adb9163040c9b77018"}}}, {{@ip={@multicast1, @multicast2, 0xff, 0xff, 'wlan1\x00', 'erspan0\x00', {}, {0xff}, 0x5c, 0x2, 0x53}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x2, @dev={0xac, 0x14, 0x14, 0x38}, @loopback, @gre_key=0x2, @gre_key=0x2}}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x4, @remote, @dev={0xac, 0x14, 0x14, 0x31}, @gre_key=0x7, @port=0x4e23}}}}, {{@ip={@loopback, @private=0xa010100, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0xffffffffffffffff, 0xb, 0x2}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) (async) socket$kcm(0x2, 0xa, 0x2) socket(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r2], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x44010, &(0x7f0000000180)={0x11, 0x6, r4, 0x1, 0x12, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x14) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, 0x0, 0x0) (async) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, 0x0, 0x0) 2.040493844s ago: executing program 3 (id=8320): socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x5120b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x5}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5, 0x18, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x2020) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@random="e33110495bfd", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x18, 0x3a, 0xff, @private0, @local, {[], @mld={0x678afc410bc9a8a0, 0x0, 0x0, 0x0, 0xe, @loopback}}}}}}, 0x0) socket(0xa, 0x1, 0x0) (async) r4 = socket(0xa, 0x1, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100ffffffff00000000010000001c0007800c00018008000100", @ANYRES32=r4, @ANYBLOB='\f\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x4008040}, 0x20000000) (async) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100ffffffff00000000010000001c0007800c00018008000100", @ANYRES32=r4, @ANYBLOB='\f\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x4008040}, 0x20000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000020900010073797a30000000002c000000030a010100000000000000000500000a0900010073797a30000000000000000034000000060a010400000000000000000500000408000b40000000000c00064000000000000000030900010073797a3000000000140000001100010000000000000000000000000a"], 0xa8}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000020900010073797a30000000002c000000030a010100000000000000000500000a0900010073797a30000000000000000034000000060a010400000000000000000500000408000b40000000000c00064000000000000000030900010073797a3000000000140000001100010000000000000000000000000a"], 0xa8}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf37"], 0xfc}}, 0x4080800) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000640)={@multicast2, @local, 0x1, "29109a35f80dfb1687de2b137b8350fa22f892c2ab52639c346fc1bdfea272da", 0x7f, 0xd, 0x10, 0x5}, 0x3c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r2) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000600)=0xd, 0x4) (async) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000600)=0xd, 0x4) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000400)={'wpan3\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000400)={'wpan3\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000280)={'wpan4\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r10, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x28, r11, 0x101, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x84) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r15 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r13) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r13, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="01d91d000000000000002e000000060005000000000000000000060006000200000028000220", @ANYRES32=r14, @ANYBLOB="05002b0000000000"], 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r7, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f00000008c0)={0xf4, r8, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_SEC_LEVEL={0x4c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x81}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0x5c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7f}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xa}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20049095}, 0x4040000) 1.977404143s ago: executing program 4 (id=8321): socket$inet_mptcp(0x2, 0x1, 0x106) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0x6a040000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xc0000000, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000140)=0x204f) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) unshare(0x42000000) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) getsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0x4) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000370400000000ffffffff00000000", @ANYRES32=r4, @ANYBLOB="0b12050081010000240012800b00010069703667726500001400020008000100", @ANYRES32=r4, @ANYBLOB="0800050003"], 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) 1.903054846s ago: executing program 2 (id=8322): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r4 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000980)={{{@in=@multicast1, @in6=@remote, 0x4e1f, 0x0, 0x0, 0x3, 0x2}, {0x10000, 0x200000004, 0x40000000007, 0x6811221d, 0x100000000, 0x4, 0x200000003, 0x9}, {0x5, 0xfffffffffffffffd, 0x7}, 0x1, 0x0, 0x1, 0x0, 0x6}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in=@empty, 0x3502, 0x1, 0x0, 0x0, 0x9, 0x3}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040840) socket$inet6(0xa, 0x3, 0x88) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, 0x0, 0x40000) bpf$PROG_LOAD(0x5, 0x0, 0x0) poll(&(0x7f00000001c0)=[{r2, 0x8004}, {r2, 0x100}], 0x2, 0x7) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0008200203000014"], 0xfb5) 1.794098616s ago: executing program 1 (id=8323): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x75}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x6}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2c6041, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000740)={'pim6reg1\x00', 0x400}) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000002000006000000000000", @ANYRES32=r4], 0x20}}, 0x4000) 1.485393412s ago: executing program 1 (id=8324): socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x110, 0xffffffffffffffff, 0x2000) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/62, 0x1338000, 0x800}, 0x20) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) 1.387431251s ago: executing program 2 (id=8325): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38}, 0x48) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0xea, 0x30, 0x7, 0x2, 0x4, 0x5, 0x7, 0x8, 0xa, 0x4c, 0x8, 0x54, 0x3, 0x3}, 0xe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d697400"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) shutdown(r0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="01"], 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0xffff, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r2, 0x8}, &(0x7f0000000180)=0x8) syz_emit_ethernet(0x52, &(0x7f0000000bc0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x65, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, @empty}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x22, 0xf, "0736a1ab0d577656efbe406b5f"}, @mptcp=@syn={0x1e, 0xc, 0x2, 0x1, 0x6, 0x1, 0x1}]}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000b80)=@assoc_value, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@jmp={0x5, 0x1, 0xa, 0x6, 0x7, 0xfffffffffffffffe, 0x1}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa687}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20048054) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1001}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38}, 0x48) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0xea, 0x30, 0x7, 0x2, 0x4, 0x5, 0x7, 0x8, 0xa, 0x4c, 0x8, 0x54, 0x3, 0x3}, 0xe) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d697400"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) (async) shutdown(r0, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="01"], 0x20) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0xffff, @local}]}, &(0x7f0000000440)=0x10) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r2, 0x8}, &(0x7f0000000180)=0x8) (async) syz_emit_ethernet(0x52, &(0x7f0000000bc0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x65, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, @empty}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x22, 0xf, "0736a1ab0d577656efbe406b5f"}, @mptcp=@syn={0x1e, 0xc, 0x2, 0x1, 0x6, 0x1, 0x1}]}}}}}}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000b80)=@assoc_value, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@jmp={0x5, 0x1, 0xa, 0x6, 0x7, 0xfffffffffffffffe, 0x1}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa687}, 0x94) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20048054) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1001}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) (async) 1.381397357s ago: executing program 3 (id=8326): r0 = accept$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000200)=0x1c) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="af32fa9c88dbe68989334f57a4c219d349bd22322b4d16cbc8420d7dcf0e5d3916fd0cd9d27c1a9d6f7cf2849550062d4b47a2da53856ccd2982e3c14235a9d248ad37bf055eccb6cb6437de5ea683856b4cf4e6a7ef0840ea490e40141d32dade12b436de333b81cfa604804f372f3695ffd4ddcfb1175d3072be2326f43f33e5d300b2d32022ec52e16ae7085bc2eb0c870f48ea209e8189be5fcb9b3e22f549e9e817369674b81284d44483a920db98badc5ce9ec02e3dce8a89b3779886066f30ac89514f147cb874c43b5d76405c2d3ee176b0ee79052", 0xd9}, {&(0x7f0000000400)="12b67d2317ed22", 0x7}], 0x2, &(0x7f0000000480)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x34, 0x1, 0x0, [{@broadcast, 0x7}, {@broadcast, 0x400}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc6}}, @ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x94, 0x10, "9a15649ca0c8e30d1cab07a2756d"}]}}}], 0x60}, 0x4000080) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = socket(0x2b, 0x80801, 0x1) shutdown(r3, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 64) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000000)={@empty, @initdev, 0x0}, &(0x7f0000000080)=0xc) (async, rerun: 64) bind$x25(0xffffffffffffffff, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) gettid() r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000ff00000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b705000008000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x2, 0x1002, &(0x7f0000002500)=""/4098, 0x41100}, 0x94) pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$sock_TIOCINQ(r6, 0x541b, 0x0) ioctl$PPPIOCSMRU1(r6, 0x40047452, &(0x7f0000000540)=0x4) (async) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, &(0x7f0000000240)) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRESDEC=r2, @ANYBLOB="010000000000000000000100000004000300040002801c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYRES64=0x0, @ANYRES32=0x0, @ANYBLOB], 0x38}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x3c, 0x301, 0x70bd24, 0xfffffffc, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x44853}, 0x0) 1.165232509s ago: executing program 3 (id=8327): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) getpid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x5c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'ife\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0xd115660223cef9af}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r3, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001000)={@remote, 0x0}, &(0x7f0000001080)=0x14) setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f00000010c0)={@broadcast, @local, r4}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r6, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r7, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000140)="1a36c5", 0x3}], 0x2) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) r8 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001180)) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r10}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}, 0x1, 0x0, 0x0, 0x40050}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x0, 0xc8, r10}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mmap(&(0x7f0000af8000/0x2000)=nil, 0x2000, 0x2000002, 0x80010, r11, 0x0) 1.066472276s ago: executing program 4 (id=8328): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r2, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x401}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x1c4}, 0x4000000) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000002040)) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r2, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x13}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x17}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x42}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) socket$alg(0x26, 0x5, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0xc70, 0x0, 0xffffffff, 0xffffffff, 0x908, 0xffffffff, 0xba0, 0xffffffff, 0xffffffff, 0xba0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x8e0, 0x908, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0xd8800000, 0x1}, {0xec, 0x2}, {0x6, 0x3}, {0x80}, {0x6, 0x2}, {0x10000, 0x2}, {0xd}, {0x2}, {0x4, 0x3}, {0x1, 0x1}, {0x4}], [{0x9, 0xfffffffb}, {0x7, 0x7}, {0x2, 0x80000000}, {0x9, 0x1}, {0x799, 0x8001}, {0x0, 0x2}, {0xc2, 0x5}, {0x8, 0x1000}, {0x40, 0x9}, {0xff, 0x81}, {0x636, 0x6}], 0x6}, {[{0x8, 0x2}, {0xe000}, {0xb8b4, 0x1}, {0x3c5f9b87, 0x3}, {0x3, 0x1}, {}, {0x29b5, 0x2}, {0x54a2f77, 0x3}, {0x3, 0x3}, {0x1000, 0x2}, {0x1, 0x2}], [{0x6, 0x5}, {0x5, 0x7}, {0x2, 0x3}, {0x80000000, 0x2}, {0xee84, 0x8000}, {0x9, 0x9}, {0x3800000, 0x3}, {0x800, 0x9}, {0xfffffffa, 0x1}, {0x0, 0x2}, {0x7, 0x7}], 0x4, 0x3}, {[{0x286f, 0x1}, {0x554b, 0x3}, {0x0, 0x3}, {0x6, 0x3}, {0x5}, {0x9, 0x1}, {0x6000000, 0x3}, {0x400, 0x3}, {0x9, 0x2}, {0x8001, 0x2}, {0xc5bf}], [{0x6, 0x7f}, {0x5, 0xfffffff9}, {0x7, 0x8}, {0xb, 0x3}, {0x8, 0x9}, {0x9}, {0x7}, {0x7, 0x1000}, {0xfff, 0x2e4}, {0x0, 0x400}, {0x0, 0x8}], 0xb, 0x4}, {[{0x5, 0x2}, {0x2, 0x1}, {0x6, 0x3}, {0xfffffffc, 0x1}, {0x4, 0x3}, {0x10001}, {0xca0, 0x2}, {0x10, 0x1}, {0x8, 0x1}, {0x6796, 0x3}, {0x8, 0x1}], [{0x6, 0x6}, {0x1, 0x7}, {0x5, 0x9}, {0xffff, 0x2}, {0xc, 0x5}, {0x51a3, 0x3}, {0x8, 0x5}, {0xfffffff7, 0x9}, {0xd0, 0x1}, {0xfffffff8, 0x8}, {0x7656, 0x2}], 0x7}, {[{0x2, 0x2}, {0x10001}, {0x4eb}, {0x10000, 0x3}, {0x2, 0x2}, {0x3}, {0x81}, {0x4, 0x1}, {0x10001, 0x2}, {0x9, 0x3}, {0x1, 0x2}], [{0x4}, {0x0, 0x400}, {0xd9a8, 0x7}, {0x1000, 0x8f8}, {0x3, 0x10001}, {0x3, 0x7c67}, {0x6, 0x80}, {0xfffffff9, 0x2}, {0xffff, 0x2}, {0x1000, 0x9}, {0x3, 0x2}], 0x1, 0x4}, {[{0xabb918, 0x1}, {0x3, 0x1}, {0x8, 0x2}, {0x9, 0x1}, {0x2}, {0x9, 0x1}, {0x80000000, 0x3}, {0x1, 0x2}, {0x0, 0xc49aafde8229cbf1}, {0x4, 0x1}, {0x3, 0x2}], [{0x8b, 0x9}, {0x6, 0x553}, {0x1, 0xe0}, {0x3, 0x4ad}, {0x0, 0x10001}, {0x1, 0x2}, {0xd1, 0x100}, {0x6, 0x7641}, {0x3, 0xfffffffc}, {0x2, 0x4}, {0x9, 0x2}], 0x1, 0x1}, {[{0x8015, 0x3}, {0x3, 0x3}, {0x1, 0x2}, {0x0, 0x2}, {0x37b, 0x3}, {0x5}, {0x2, 0x3}, {0x1, 0x2}, {0x7f}, {0x6, 0x2}, {0xfffffff6, 0x2}], [{0x9, 0x7}, {0x8, 0x7}, {0x6, 0x4}, {0x800, 0x80000001}, {0x0, 0x10000}, {0x2, 0x3b58}, {0x4ca7ea08, 0x8001}, {0x0, 0xa9b}, {0x1ff}, {0x5, 0x2}, {0x8, 0x4}], 0xa, 0xb}, {[{0x10001, 0x3}, {0x3}, {0xc, 0x1}, {0x7a, 0x3}, {0x6, 0x1}, {0x80000001, 0x3}, {0x3, 0x2}, {0xa}, {0x401, 0x1}, {0x9}, {0x1, 0x2}], [{0x200, 0x1}, {0x8, 0x1aaa}, {0x706, 0x9}, {0x9, 0x2}, {0x4, 0x7}, {0x5, 0x9}, {0x3}, {0x5, 0xbf789c5e}, {0x8, 0x3}, {0x7, 0x10001}, {0x1}], 0xa, 0x1}, {[{0xc2}, {0x5, 0x1}, {0x7cd72bba}, {0x8, 0x2}, {0x400}, {0x7ff, 0x3}, {0x10001}, {0xe1a}, {0x9, 0x3}, {0xfffffffc, 0x3}, {0x9}], [{0x10, 0x4}, {0x1, 0x10000}, {0xbf9, 0x6}, {0x4}, {0x101, 0x8}, {0x100, 0x4}, {0x0, 0xb6e}, {0x7f, 0x8}, {0x9, 0x7}, {0xffff, 0x92a}, {0xd, 0x2}], 0x9, 0x2}, {[{0x8, 0x3}, {0x80000001}, {0x8, 0x3}, {0x4, 0x2}, {0x1, 0x3}, {0x4}, {0x4, 0x1}, {0x1, 0x3}, {0xc, 0x3}, {0x101, 0x2}, {0x1}], [{0x4, 0x3}, {0x0, 0x8}, {0xffffe5cb, 0x1}, {0x7f, 0xfffffff4}, {0x40, 0xffffffff}, {0x2, 0x7}, {0x7fff, 0x6}, {0x0, 0x8}, {0xffffff2e, 0x7ff}, {0x40, 0xa}, {0x3, 0x7}], 0x6, 0x2}, {[{0x1ff}, {0x5, 0x2}, {0x10001, 0x1}, {0x2, 0x2}, {0xff, 0x1}, {0x1, 0x1}, {0x800, 0x3}, {0x80000001, 0x2}, {0x1ef6, 0x2}, {0x1, 0x2}, {0xba, 0x3}], [{0x18d, 0x7}, {0x0, 0x2}, {0xdf91, 0x1}, {0xe08, 0x6}, {0x4, 0x7ff}, {0xa64, 0x101}, {0x7, 0x4}, {0x401, 0x2}, {0x7ff}, {0x0, 0xd4}, {0xef}], 0x2, 0x7}]}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x230, 0x298, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0xf31], 0x4, 0x34, 0x1}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xcd0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="08ac0f00"}, @typed={0x4, 0x1e}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000327bd700008dbdf250300000006000800feff00000c0009004488a3ffdd0203aaaaaaaaaaaa0c0009000203aa46ada7fac7aa0000000000000020437ed42f5051120add699b7bfef0065bd9393c627c80cfac5b05b72e71fb201d1a48dfa24982ce93ce05ba9fbe1a7f55845800de8c59b4f2efbd28fe9b3060d0f3b2a782373de6ec41bda389fe8cba5c328924294be2cf6a431afbe0ec4aaba5ca097d896a0de675f5ba89cfcc222e63c4245a6a4bc106231449c043eb6a0af0a794151441b188999d8b825e5b3474063d7fbecd46f20c07d5ddbf288109e7a272fc91d27b45088ab2177ac0872bd68e095fbeee3133c514307ea9da4f4aa2f66346f9cf0c29c9a8"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x8001) 950.282004ms ago: executing program 2 (id=8329): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept(r0, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000080)=0x197, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000100)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0xfffe, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x300, 0x0, 0x28, 0x0, @gue={{0x2}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099b"}}}}}}}, 0xfdef) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000100003042dbd70003d00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000380012800b00010067656e65766500002800028005000d0001000000140007000000000000000000000000000000000108000f40"], 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) socket$nl_route(0x10, 0x3, 0x0) (async) accept(r0, 0x0, &(0x7f0000000040)) (async) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000080)=0x197, 0x4) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f0000000100)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0xfffe, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x300, 0x0, 0x28, 0x0, @gue={{0x2}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099b"}}}}}}}, 0xfdef) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000100003042dbd70003d00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000380012800b00010067656e65766500002800028005000d0001000000140007000000000000000000000000000000000108000f40"], 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) (async) 729.238151ms ago: executing program 1 (id=8330): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) unshare(0x64000600) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000007112b4000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, r1, &(0x7f0000000300)=0x101, 0x7fffffff) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="d4000000000101040f00000000000000020000002400018014000180080001007f00000108000200ac14140062e5029105000100000000002400028014ca2078fb89000180de51b3e4010c00028005000100000000000800074000030000080008400000000a04001640080015400000030400170058000d00000000000000"], 0xd4}, 0x1, 0x0, 0x0, 0x6107a861890a221}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)={0x24, 0x3e, 0x107, 0x3, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @typed={0x8, 0x1, 0x0, 0x0, @u32=0x7c}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4801}, 0x4004884) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f00000001c0)=0x9, 0x4) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e25, 0x401, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x1007}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff6203f0fff8ffffff71a4f0ff000000002d040300000000003d030000000000006504000001ed000079110000000000006c440000000000007a0ab0fe000000007913000000000000b5000000000000009500000000000000023bc065b7a379d183f9333379fc9e94af05000000f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c26f71b29ee35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8ea8fcb913466aaa7f6d150352e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d390dd65be2467b373eafd9aa48f2077184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c5da18ec0ae5630800c5363092adaa1d8964162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6ffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd86975023cb08cc7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee96a1c685508e6ca4fe5a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9029bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c5538a294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead35a655e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f05beb72f0861f75c345edcb84ac7eeedcf2ba1a9508f9d6aba5823a34a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27f277b8a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d0a874c74b777df005c55fc30511d00000000c85265b2bd83d64a532869d708000000000000007baa5b6a682b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a56edbd287eba0af35c35d91f3c62a0ca74836a640224de85f2b4a5fee500bbc584328a6a7a4628c4378c9b71dff64075b74a6520adb187b40d2cccbcb08c0634ee74658d3e23bf511c8b0bf1b69d2b3782b3f481c320e7bd4615dbbf24c06ac95bd639e68d0e6aa7f0d07bf69a93365f803f0144af37236ea133c2255b0613bf8ba1d538e06c2411e8d70053b712084fd0e313de9bb19266e49a3a2190cb039c6f89610acd896319b9c8d1b8aac2eaa5a4f8be7419a09e3fb5be3be2fcdadd2299839cc40e684e6e2b4e1385fde7a0bad3b0be672110268a34dad364fddee69e564119cebb6940c6356ff83ca527c573d700000000000000c6299263e6d9097f225de969485bce3d7dc471c0669bb6a467cf0de54dfcc1857048fe22a19dbb1b3cb9babaa839f1f6e817a62d95a5b971ff96a5c66c338c6f2a2da4644519f40761402e9c81013d76c7152c95ba5efa24ce1930f23a2277f057ffb6b0144f3b434a2adc456ef4d2fbdf7c6238c2bb00ffcf2d23d68cb9b027f3b225ec4e09b089f7956b66c5692b46ea03abb6a404c8ccceaa4ba4161409fcb54b86eaca26b2a0c4b81f7b71cbfcefb9303a7861fce422f3f9c422a1619e6c6c2dd825743b22a6f93604c73d886c25ecaaeafccdeb19bd0cdbc5d22dae879561ea5606fa0c9dc23c0f52621aaae42180aecfd32cd6a66a1efa0949bc195dfcb691a26344362989371f2d5bf274363416b3cafb9a3331285449dc1afe9af7fed27bd4e36fa423d6c05ffa2acee27e2444b5ca28fc16fe31bd1320d4415ec0f5471b0b671d7626f773"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x4e) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000980)="5a5018eeba98a7585859b02c0197454045ca3ade24340294573a2dc69cbf8352c7bd08e34dedf09a1875f72e88e21f23138c954caf1af30b9539ea141e5664e19873a9a8c0f2e1283d07d957b6be22035583c2e07445c42052cf2b84ae4c8eb6b2ad4d39b6dea710bd65", 0x6a}, {&(0x7f0000000a00)="8ea355353ec48a4f11f93d82487271f3010c2d689e01f955f0f83b435e1570d09210ad5e228bc65adc695f2bd3e68b747150f10b40da1ce0e4f2f929d3e2d115b28debd6b76cb41c1c16bc7d2f68354b63139e51b3d0c7928333473381737d3f6ebb879fbad492c77681463c7d75967237e8174a0b3f734f64f76576ce9e476c489ef5119086b3db572a47b90e93818c2690b475ee426d0d6ba089631579df5bc7ef97bef513fdfa977ccc", 0xab}, {&(0x7f0000000ac0)="51cd7bf27af4ca47926eb569bf6d6f31cc2d7b8a4cc9074c7cb12080cfb4dbe342491400a30d33d4272c69707cfaa437f2afbba34ec9b748bef54205e5bd0f8c4ff54d0be3aaa2fc75e80d90b18b655e3a2bb676dbaf1e2f5c0611821d41be6b82569b414d8b701026a0fe25b68b37ca03fec11c06936daba35f923bd9a1623b9a1daab11d1c0de77179f84c2ba352df4e594e192d405264cd82b0462f5fb575ea5733888738e86f311a72857ecda70a82bc770acb2171d0f4006026a63286984c85cb8cf03dab3c1dbe93ef3a5d6345e17c", 0xd2}, {&(0x7f0000000bc0)="e99de06bcf49f2da369f7194eaab7afdc3a58e95662f5c31d050a1cf8e34b6e9e189517e3bbcec8d8ceaabf83b5765593bd88d54d3bf7952e7dcec27344c760d861a9aba960c6c0c4c9bb50279008dd2a7667ae7e8d84a129099026233a6b586f6bf3bfc075873aeb8f11864628025fd9fe1a503579d9a5e3e6d3c8de63a8d51aee58020a9eba1e7ecb82cfbfaaf093e98b8017c49f7ac9b9239edf36575be54da21bdbf409309baef764ce85a62a2", 0xaf}], 0x4}}], 0x1, 0x4001c00) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}}, 0x1c) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="6802000001050500000000000000000005000001540201"], 0x268}, 0x1, 0x0, 0x0, 0x4008010}, 0x40080) r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_opts(r6, 0x0, 0xd, &(0x7f0000000000)="bc306a00bc4722e6c7dee805ec4e949208a6d59f647230a9fd742fa1f9072301e66aeb9bb09578921c8677271ed4ac6e459327de570d5eb8d8dbf6bca9eacfdb68e812ee47d3e43af4c2ee9f5ba9c509b72e9b7f62afc256140c598639a7c77cd5f7251f4b47c9df7125c6bd69e837cdeb0b133b06", 0x75) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r7, 0x541b, 0x604000000000000) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000c"], 0x50) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r9, 0x6, 0x3, &(0x7f0000000040)=0xc, 0x4) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r10, 0x0) setsockopt$inet_udp_int(r10, 0x11, 0x65, &(0x7f0000000080)=0x400, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1fd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 573.044864ms ago: executing program 4 (id=8331): r0 = socket$unix(0x1, 0x5, 0x0) getsockopt(r0, 0x1, 0x8, &(0x7f0000000000)=""/74, &(0x7f0000000080)=0x4a) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x4f4, 0x9, 0x4, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0xd}, 0x50) r1 = socket(0x1d, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r2, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)="90", 0x1}], 0x1, 0x0, 0x0, 0x8801}}], 0x1, 0x20004031) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRESDEC=0x0], 0x8c}, 0x1, 0x0, 0x0, 0x200080c0}, 0x4080) writev(r4, &(0x7f0000000040), 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000000c0), 0x4) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX=r1], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000800000000000000001000000850000000f000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) write(r3, &(0x7f0000000000)="0a000000010001", 0x7) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x44, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa0}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x800}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040040}, 0x20048000) socket$inet6(0xa, 0x2, 0x0) socketpair(0x23, 0x2, 0xffffffff, &(0x7f0000000180)) unshare(0x8000400) socket(0x3, 0x5, 0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r8, 0x0, 0x2, 0x0) socket$inet(0x2, 0x2, 0x0) 366.390118ms ago: executing program 2 (id=8332): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES32], 0x44}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000ffffffff460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00010000000c38229e9f000001000000000c0090004d8244aa00000000"], 0x54}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000055000100000000000100000007000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="00000500ac1e010100000000000000000000000008000000"], 0x38}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000300), &(0x7f0000000400)=0x4) (async) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x801, 0x4) (async) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000000)={0x88}, 0x8) (async) sendmmsg$inet6(r5, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}], 0x1, 0xc040) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async, rerun: 64) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) writev(r7, &(0x7f0000000380)=[{&(0x7f0000000040)="3700000013", 0x5}], 0x1) r8 = socket(0x28, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000900)={{{@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@private0}}, &(0x7f0000000440)=0xe8) sendmsg$nl_xfrm(r8, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000a00)=@allocspi={0x10c, 0x16, 0x100, 0x70bd2a, 0x25dfdbfd, {{{@in=@loopback, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e22, 0xfffa, 0x4e23, 0x5, 0xa, 0x0, 0x0, 0x8, 0x0, r9}, {@in=@multicast1, 0x4d3, 0x3c}, @in=@private=0xa010110, {0xf, 0x8, 0x4, 0xfffffffffffffffc, 0x7ff, 0x1, 0x100000000, 0xffffffff}, {0xff, 0x2, 0xd8, 0xe2}, {0x308003d8, 0xfff, 0x4}, 0x70bd2b, 0x3502, 0x0, 0x9, 0x7, 0x20}, 0x7fffffff, 0x7}, [@offload={0xc, 0x1c, {r3, 0x2}}, @etimer_thresh={0x8, 0xc, 0x8}]}, 0x10c}}, 0x94) bind$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) listen(r8, 0x0) (async, rerun: 32) r10 = socket(0x28, 0x5, 0x0) (rerun: 32) connect$vsock_stream(r10, &(0x7f0000000080), 0x10) (async) sendmmsg(r10, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r11 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r11, 0x2f, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async, rerun: 64) accept4$unix(r8, 0x0, 0x0, 0x0) (rerun: 64) 305.337912ms ago: executing program 0 (id=8333): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRESHEX], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000001040)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="0000100000000000b7080000e1776a7109000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000aa1b5285000000a04ba38e3d52b90993c6773fbf824bfd6bd6a2ae4a755f626f4a1f4ead11a06f4b19120453211f6bce0ca8667d30d2918677a978acc07581f3ff8b4d317a83171eb3708fa8477b327d238f3472d52d9559ddd300"], &(0x7f0000001000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r5) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff7) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="bc00"], 0x50) ioctl$TUNGETVNETLE(r5, 0x40047451, &(0x7f0000000180)) close(r5) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newtclass={0x6c, 0x28, 0x2, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffff}, {0xfff1, 0xc}, {0x10, 0x6}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8}}}, @TCA_RATE={0x6, 0x5, {0x8, 0x9}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x4, 0xa0}}, @tclass_kind_options=@c_fq_codel={0xd}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r11, 0x1, 0xd8, 0x6, @multicast}, 0x14) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee162bd4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 233.807389ms ago: executing program 4 (id=8334): r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x81800) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4251}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x88}}, 0x0) connect$netrom(r0, &(0x7f00000000c0)={{0x3, @default, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0xb, 0x10001, 0x9, 0x1}, 0x48) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) mmap(&(0x7f000009f000/0x800000)=nil, 0x800000, 0x0, 0x11, r6, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000030900010073797a310000000018010000030a010400000000000000000100ffff0900030073797a31000000002000048008000140000000051400030076657468315f6d6163767461700000000900010073797a3100000000280008"], 0x160}}, 0x0) 97.396519ms ago: executing program 3 (id=8335): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000800000071181900000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 1.368069ms ago: executing program 2 (id=8336): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000020000000000000000000000850000002f000000180100002020752500000000002020207b1af8ff00000000bfa101000000000007010000f8ff1cffb702000008000000b70300000400000085000000b400000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x34, 0x0, 0x9, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x7, 0x1, 0x1, 0x0, 0x3}}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0017"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x8800) 0s ago: executing program 3 (id=8337): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="d4000000200000006910830000000000bfffffff000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x4049805) kernel console output (not intermixed with test programs): king interface the new active one [ 1541.131329][ T3377] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 1541.142644][ T3387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6923'. [ 1541.157283][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1541.165734][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1541.174161][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1541.218563][ T3387] bond1 (unregistering): (slave batadv1): Releasing active interface [ 1541.235159][ T3387] bond1 (unregistering): Released all slaves [ 1541.322539][ T3389] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1541.379330][ T3389] bond5 (unregistering): Released all slaves [ 1541.408934][ T3405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6928'. [ 1542.332090][ T3449] veth0_to_bridge: entered promiscuous mode [ 1542.353759][ T3449] veth0_to_bridge: left promiscuous mode [ 1542.404420][ T3451] SET target dimension over the limit! [ 1543.427925][ T3503] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20000 [ 1543.485793][ T3504] netlink: 'syz.4.6952': attribute type 2 has an invalid length. [ 1543.734700][ T3520] syzkaller1: entered promiscuous mode [ 1543.747696][ T3520] syzkaller1: entered allmulticast mode [ 1544.597346][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1547.237369][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1547.245699][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1547.254094][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1549.649988][ T3552] __nla_validate_parse: 6 callbacks suppressed [ 1549.650012][ T3552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6962'. [ 1549.671799][ T3558] netlink: 180 bytes leftover after parsing attributes in process `syz.4.6963'. [ 1549.707937][ T3562] syzkaller1: entered promiscuous mode [ 1549.714018][ T3558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6963'. [ 1549.725551][ T3562] syzkaller1: entered allmulticast mode [ 1549.777871][ T3552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6962'. [ 1549.967100][ T3568] wg1: entered promiscuous mode [ 1549.972792][T31609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1549.981975][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1549.991589][T31608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1550.003609][ T3568] wg1: entered allmulticast mode [ 1550.093442][ T3572] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1550.150076][ T3572] bond1 (unregistering): Released all slaves [ 1550.229295][ T3582] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6966'. [ 1550.252227][ T3585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6967'. [ 1550.648026][ T3605] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1550.692574][ T3605] netlink: 'syz.3.6973': attribute type 4 has an invalid length. [ 1550.840549][ T3613] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6976'. [ 1550.882354][ T3620] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1550.910103][ T3613] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6976'. [ 1550.921848][ T3620] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1550.937859][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1550.998139][ T3619] lo speed is unknown, defaulting to 1000 [ 1551.008315][ T3625] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1551.015577][ T3625] IPv6: NLM_F_CREATE should be set when creating new route [ 1551.031157][ T3625] netlink: 'syz.4.6979': attribute type 4 has an invalid length. [ 1551.641710][ T3645] tipc: Enabled bearer , priority 0 [ 1551.650205][ T3619] virt_wifi0 speed is unknown, defaulting to 1000 [ 1551.738820][ T3645] tipc: Disabling bearer [ 1551.828902][ T3654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6988'. [ 1551.839303][ T3650] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1551.859199][ T3650] bond3 (unregistering): Released all slaves [ 1551.968289][ T3663] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6989'. [ 1551.997559][ T3663] netlink: 'syz.0.6989': attribute type 7 has an invalid length. [ 1552.006334][ T3663] netlink: 'syz.0.6989': attribute type 8 has an invalid length. [ 1552.385139][ T3677] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1552.580606][ T3695] net_ratelimit: 2 callbacks suppressed [ 1552.580628][ T3695] openvswitch: netlink: Message has 87 unknown bytes. [ 1552.769307][ T3707] syzkaller0: entered promiscuous mode [ 1552.774845][ T3707] syzkaller0: entered allmulticast mode [ 1552.858122][ T3710] xt_hashlimit: size too large, truncated to 1048576 [ 1552.936739][ T3721] ipt_ECN: cannot use operation on non-tcp rule [ 1553.102905][ T3709] lo speed is unknown, defaulting to 1000 [ 1553.250894][ T3729] xt_hashlimit: overflow, rate too high: 0 [ 1553.412223][ T3709] virt_wifi0 speed is unknown, defaulting to 1000 [ 1553.412223][ T3726] lo speed is unknown, defaulting to 1000 [ 1553.485843][ T3736] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1553.751266][ T3746] syz_tun: entered allmulticast mode [ 1553.883614][ T3760] netlink: zone id is out of range [ 1553.982905][ T3760] netlink: set zone limit has 4 unknown bytes [ 1554.081122][ T3726] virt_wifi0 speed is unknown, defaulting to 1000 [ 1554.141903][ T3766] vlan0: entered allmulticast mode [ 1554.318909][ T3769] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1554.515378][ T3743] syz_tun: left allmulticast mode [ 1554.760774][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1554.769264][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1554.963253][ T3800] __nla_validate_parse: 6 callbacks suppressed [ 1554.963276][ T3800] netlink: 192 bytes leftover after parsing attributes in process `syz.0.7020'. [ 1554.979822][ T3800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7020'. [ 1556.617690][ T3817] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7023'. [ 1556.626890][ T3817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7023'. [ 1556.659119][ T3805] lo speed is unknown, defaulting to 1000 [ 1556.718109][ T3819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7022'. [ 1556.733942][ T3819] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7022'. [ 1557.273216][ T3805] virt_wifi0 speed is unknown, defaulting to 1000 [ 1557.490728][ T3851] netlink: 5 bytes leftover after parsing attributes in process `syz.2.7030'. [ 1557.513303][ T3851] syzkaller0: entered promiscuous mode [ 1557.526676][ T3851] syzkaller0: entered allmulticast mode [ 1557.551130][ T3851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7030'. [ 1557.584930][ T3852] syzkaller1: entered allmulticast mode [ 1559.397392][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1559.405730][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1559.414151][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1563.238841][ T3878] netlink: 'syz.4.7036': attribute type 1 has an invalid length. [ 1563.266330][ T3878] nbd: error processing sock list [ 1563.997311][ T3928] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7043'. [ 1564.163812][ T3936] netlink: 'syz.0.7045': attribute type 1 has an invalid length. [ 1564.257890][ T3945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7047'. [ 1564.310205][ T3947] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7050'. [ 1564.354365][ T3948] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7050'. [ 1564.406864][ T3953] caif0: entered allmulticast mode [ 1564.496297][ T3954] bond2: (slave bridge6): making interface the new active one [ 1564.564458][ T3954] bond2: (slave bridge6): Enslaving as an active interface with an up link [ 1564.803291][ T3945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7047'. [ 1564.972092][ T3979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7058'. [ 1564.982499][ T3979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7058'. [ 1564.997309][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1565.005930][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1565.014350][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1565.024682][ T3970] netlink: 'syz.1.7056': attribute type 13 has an invalid length. [ 1565.043806][ T3979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7058'. [ 1565.047650][T31610] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1565.061992][ T3979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7058'. [ 1565.084912][ T3977] lo speed is unknown, defaulting to 1000 [ 1565.091581][T31606] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1565.121090][T31606] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1565.148925][ T3970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1565.176329][ T3970] eql: remember to turn off Van-Jacobson compression on your slave devices [ 1565.240099][ T3989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7059'. [ 1565.289398][ T3970] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1565.699973][T31606] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1565.733947][ T4000] bond0: option arp_validate: invalid value (55553) [ 1565.740770][ T4005] bond0: option arp_validate: invalid value (55553) [ 1565.949968][ T4014] No such timeout policy "syz1" [ 1565.964052][ T4018] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001 [ 1565.979937][ T3977] virt_wifi0 speed is unknown, defaulting to 1000 [ 1566.065422][ T4016] team0: Port device team_slave_0 removed [ 1566.170886][ T4025] netlink: 'syz.1.7069': attribute type 1 has an invalid length. [ 1566.259314][ T4031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1566.268374][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1566.315440][ T4027] geneve3: entered promiscuous mode [ 1566.320846][ T4027] geneve3: entered allmulticast mode [ 1566.689758][ T4052] syzkaller0: entered promiscuous mode [ 1566.695303][ T4052] syzkaller0: entered allmulticast mode [ 1567.553483][ T4095] wg1: left promiscuous mode [ 1567.583647][ T4095] wg1: left allmulticast mode [ 1567.596604][ T4095] .70·: left allmulticast mode [ 1567.602626][ T4095] hsr_slave_0: left allmulticast mode [ 1567.608710][ T4095] hsr_slave_1: left allmulticast mode [ 1567.614364][ T4101] netlink: 'syz.2.7090': attribute type 10 has an invalid length. [ 1567.628963][ T4095] macvtap1: left allmulticast mode [ 1567.638870][ T4095] bond2: left promiscuous mode [ 1567.645046][ T4095] veth3: left promiscuous mode [ 1567.651487][ T4095] bond3: left promiscuous mode [ 1567.753184][ T4109] netlink: 'syz.3.7091': attribute type 30 has an invalid length. [ 1567.835060][T31607] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1567.875999][T31607] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1567.918861][T31607] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1567.927988][T31607] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1568.240001][ T4131] lo speed is unknown, defaulting to 1000 [ 1568.304835][ T4130] bond5: option resend_igmp: invalid value (2878) [ 1568.320422][ T4130] bond5: option resend_igmp: allowed values 0 - 255 [ 1568.359109][ T4130] bond5 (unregistering): Released all slaves [ 1568.517299][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1568.525774][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1568.534281][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1568.700176][ T4155] openvswitch: netlink: IP tunnel dst address not specified [ 1568.729128][ T4157] netlink: 'syz.1.7102': attribute type 1 has an invalid length. [ 1569.113146][ T4131] virt_wifi0 speed is unknown, defaulting to 1000 [ 1569.196397][ T4177] lo speed is unknown, defaulting to 1000 [ 1569.254410][ T4188] xt_nat: multiple ranges no longer supported [ 1569.619149][ T4201] __nla_validate_parse: 15 callbacks suppressed [ 1569.619173][ T4201] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7112'. [ 1569.770557][ T4201] tap0: tun_chr_ioctl cmd 1074025677 [ 1569.776080][ T4201] tap0: linktype set to 6 [ 1569.839414][ T4212] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7114'. [ 1569.869333][ T4212] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7114'. [ 1569.897440][ T4212] netlink: 7 bytes leftover after parsing attributes in process `syz.3.7114'. [ 1569.926441][ T4177] virt_wifi0 speed is unknown, defaulting to 1000 [ 1570.340512][ T4233] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7119'. [ 1570.491690][ T4242] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7120'. [ 1570.505863][ T4242] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 1570.512816][ T4233] bond0 (unregistering): left promiscuous mode [ 1570.535570][ T4233] bond_slave_0: left promiscuous mode [ 1570.542438][ T4233] bond_slave_1: left promiscuous mode [ 1570.566392][ T4233] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1570.576489][ T4233] bond_slave_0: left allmulticast mode [ 1570.595039][ T4233] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1570.605265][ T4233] bond_slave_1: left allmulticast mode [ 1570.628228][ T4233] bond0 (unregistering): Released all slaves [ 1571.024817][ T4257] netlink: 424 bytes leftover after parsing attributes in process `syz.4.7125'. [ 1571.037817][ T4249] lo speed is unknown, defaulting to 1000 [ 1571.052362][ T4257] netlink: 'syz.4.7125': attribute type 1 has an invalid length. [ 1571.095339][ T4260] netlink: 'syz.0.7126': attribute type 1 has an invalid length. [ 1571.106896][ T4260] netlink: 248 bytes leftover after parsing attributes in process `syz.0.7126'. [ 1571.280233][ T4265] gre1: entered allmulticast mode [ 1571.287461][ T4264] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7127'. [ 1571.296564][ T4264] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7127'. [ 1571.746281][ T4249] virt_wifi0 speed is unknown, defaulting to 1000 [ 1572.371212][ T4302] syzkaller1: entered promiscuous mode [ 1572.381082][ T4302] syzkaller1: entered allmulticast mode [ 1572.416505][ T4310] netlink: 'syz.0.7139': attribute type 10 has an invalid length. [ 1572.597579][ T4310] bridge0: port 2(bridge_slave_1) entered disabled state [ 1572.605307][ T4310] bridge0: port 1(bridge_slave_0) entered disabled state [ 1572.635948][ T4319] SET target dimension over the limit! [ 1572.845009][ T4319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1573.169214][ T4339] x_tables: duplicate underflow at hook 1 [ 1573.207827][ T4338] sctp: [Deprecated]: syz.4.7145 (pid 4338) Use of int in maxseg socket option. [ 1573.207827][ T4338] Use struct sctp_assoc_value instead [ 1573.461667][ T4367] syzkaller0: entered promiscuous mode [ 1573.467531][ T4367] syzkaller0: entered allmulticast mode [ 1574.117662][ T4394] syzkaller0: entered promiscuous mode [ 1574.123217][ T4394] syzkaller0: entered allmulticast mode [ 1574.597410][ C1] net_ratelimit: 1 callbacks suppressed [ 1574.597433][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1574.611514][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1574.619926][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1574.677313][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1579.077350][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1579.085669][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1579.094083][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1579.438081][ T4420] Cannot find del_set index 2 as target [ 1579.740065][ T4428] lo speed is unknown, defaulting to 1000 [ 1579.781133][ T4443] __nla_validate_parse: 4 callbacks suppressed [ 1579.781156][ T4443] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7162'. [ 1579.872378][ T4443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7162'. [ 1579.931987][ T4443] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7162'. [ 1580.031538][ T4446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7163'. [ 1580.130469][ T4457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7165'. [ 1580.274302][ T4462] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7166'. [ 1580.296761][ T4428] virt_wifi0 speed is unknown, defaulting to 1000 [ 1580.296861][ T4437] lo speed is unknown, defaulting to 1000 [ 1580.322709][ T4461] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7166'. [ 1580.455327][ T4474] netlink: 'syz.0.7168': attribute type 1 has an invalid length. [ 1580.737678][ T4488] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7171'. [ 1580.812129][ T4450] lo speed is unknown, defaulting to 1000 [ 1580.930674][ C1] vcan0: j1939_tp_rxtimer: 0xffff88808cbb0000: rx timeout, send abort [ 1581.053210][ T4501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7174'. [ 1581.183771][ T4467] lo speed is unknown, defaulting to 1000 [ 1581.351818][ T4506] netlink: 64691 bytes leftover after parsing attributes in process `syz.0.7175'. [ 1581.430942][ C1] vcan0: j1939_tp_rxtimer: 0xffff88808cbb0800: rx timeout, send abort [ 1581.448225][ C1] vcan0: j1939_tp_rxtimer: 0xffff88808cbb0000: abort rx timeout. Force session deactivation [ 1581.547920][ T4437] virt_wifi0 speed is unknown, defaulting to 1000 [ 1581.581799][ T4450] virt_wifi0 speed is unknown, defaulting to 1000 [ 1581.671136][ T4467] virt_wifi0 speed is unknown, defaulting to 1000 [ 1581.718752][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1581.936302][ T4518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1581.939295][ C1] vcan0: j1939_tp_rxtimer: 0xffff88808cbb0800: abort rx timeout. Force session deactivation [ 1581.961413][ T4518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1581.997798][ T4518] tipc: Resetting bearer [ 1582.082978][T31605] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1582.096452][T31605] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1582.219822][T31605] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1582.230339][T31605] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1582.295372][T31605] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1582.308490][T31605] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1582.322521][T31605] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1582.332002][T31605] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1582.377417][ T4531] ip6gre1: entered promiscuous mode [ 1582.388786][ T4531] ip6gre1: entered allmulticast mode [ 1582.848393][ T4538] netlink: 'syz.4.7184': attribute type 142 has an invalid length. [ 1583.325615][ T4553] netlink: 'syz.0.7191': attribute type 9 has an invalid length. [ 1583.546401][ T4568] lo speed is unknown, defaulting to 1000 [ 1583.577451][ T4570] gretap0: entered promiscuous mode [ 1583.607236][ T4570] gretap0: left promiscuous mode [ 1583.665031][ T4574] netlink: 'syz.1.7197': attribute type 7 has an invalid length. [ 1583.683158][ T4574] netlink: 'syz.1.7197': attribute type 8 has an invalid length. [ 1583.717277][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1583.725818][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1583.806702][ T4574] ip6gretap0: entered promiscuous mode [ 1583.843645][ T4574] erspan0: entered promiscuous mode [ 1583.871980][ T4574] debugfs: 'hsr0' already exists in 'hsr' [ 1583.889772][ T4574] Cannot create hsr debugfs directory [ 1583.905826][ T4574] hsr0: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 1583.935878][ T4574] hsr0: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 1583.964462][ T4574] hsr0: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network [ 1584.166322][ T4568] virt_wifi0 speed is unknown, defaulting to 1000 [ 1584.364213][ T4590] can: request_module (can-proto-0) failed. [ 1584.432641][ T4595] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1584.473065][ T4596] lo speed is unknown, defaulting to 1000 [ 1584.692957][ T4596] virt_wifi0 speed is unknown, defaulting to 1000 [ 1585.201951][ T4622] __nla_validate_parse: 6 callbacks suppressed [ 1585.201972][ T4622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7209'. [ 1585.283918][ T4618] lo speed is unknown, defaulting to 1000 [ 1585.551325][ T4630] netlink: 'syz.1.7210': attribute type 64 has an invalid length. [ 1585.652740][ T4635] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7212'. [ 1585.684016][ T4635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7212'. [ 1585.735282][ T4618] virt_wifi0 speed is unknown, defaulting to 1000 [ 1585.855715][ T4645] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7217'. [ 1585.855759][ T4643] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7216'. [ 1585.888349][ T4645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7217'. [ 1585.902774][ T4644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7215'. [ 1585.931878][ T4645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7217'. [ 1585.981516][ T4649] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7218'. [ 1586.117670][ T4660] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1586.666701][ T4684] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1586.684944][ T1791] IPVS: starting estimator thread 0... [ 1586.693846][ T4684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1586.777285][ T4687] IPVS: using max 25 ests per chain, 60000 per kthread [ 1586.796343][ T4677] tipc: Resetting bearer [ 1587.298973][ T4716] netlink: 'syz.1.7233': attribute type 29 has an invalid length. [ 1587.322628][ T4716] netlink: 'syz.1.7233': attribute type 29 has an invalid length. [ 1587.349696][ T4716] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7233'. [ 1587.486851][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1587.495607][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1587.557809][ T4727] tc_dump_action: action bad kind [ 1587.817775][ T4740] syzkaller0: entered promiscuous mode [ 1587.823665][ T4740] syzkaller0: entered allmulticast mode [ 1588.238095][ T4752] netlink: 'syz.0.7242': attribute type 10 has an invalid length. [ 1588.273155][ T4762] xt_addrtype: ipv6 does not support BROADCAST matching [ 1588.281358][ T4763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1588.307404][ T4756] lo speed is unknown, defaulting to 1000 [ 1588.688766][ T4756] virt_wifi0 speed is unknown, defaulting to 1000 [ 1589.127613][ T4793] lo speed is unknown, defaulting to 1000 [ 1589.321085][ T4804] ipvlan2: entered promiscuous mode [ 1589.643440][ T4819] team0: Port device team_slave_0 removed [ 1589.696747][ T4811] lo speed is unknown, defaulting to 1000 [ 1589.927653][ T4793] virt_wifi0 speed is unknown, defaulting to 1000 [ 1589.972064][ T4811] virt_wifi0 speed is unknown, defaulting to 1000 [ 1590.226447][ T4843] netlink: 'syz.0.7265': attribute type 1 has an invalid length. [ 1590.241427][ T4844] netlink: 'syz.0.7265': attribute type 1 has an invalid length. [ 1590.300355][ T4844] bond0: entered promiscuous mode [ 1590.307442][ T4844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1590.507963][ T4856] __nla_validate_parse: 10 callbacks suppressed [ 1590.507988][ T4856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7269'. [ 1590.550267][ T4856] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1590.711236][ T4866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7270'. [ 1590.810829][ T4867] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1591.121709][ T4875] netlink: 'syz.0.7272': attribute type 1 has an invalid length. [ 1591.195889][ T4880] netlink: 64102 bytes leftover after parsing attributes in process `syz.4.7273'. [ 1591.293636][ T4878] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7272'. [ 1591.401898][ T4877] bond3: (slave veth13): Enslaving as an active interface with a down link [ 1591.449628][ T4877] bond3: (slave veth15): Enslaving as an active interface with a down link [ 1591.501122][ T4875] bond3: (slave veth17): Enslaving as an active interface with a down link [ 1591.546486][ T4875] bond3: (slave veth19): Enslaving as an active interface with a down link [ 1591.561426][ T4878] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1591.611182][ T4877] bond3: (slave veth21): Enslaving as an active interface with a down link [ 1591.763534][ T4875] bond3: (slave veth23): Enslaving as an active interface with a down link [ 1591.882953][ T4875] bond3: (slave veth25): Enslaving as an active interface with a down link [ 1591.912842][ T4877] bond3: (slave veth27): Enslaving as an active interface with a down link [ 1591.940508][ T4877] bond3: (slave veth29): Enslaving as an active interface with a down link [ 1591.955075][ T4897] ip6gre3: entered promiscuous mode [ 1591.961892][ T4897] ip6gre3: entered allmulticast mode [ 1592.076781][ T4875] bond3: (slave veth31): Enslaving as an active interface with a down link [ 1592.270071][ T388] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1592.286897][ T388] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1592.297630][T19344] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1592.407301][T19344] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1592.547276][T19344] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1592.837320][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1592.845677][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1592.854021][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1592.862323][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1596.197715][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1598.537779][ T4937] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048) [ 1598.610824][ T4950] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.7286'. [ 1598.802556][ T4961] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7288'. [ 1598.831361][ T4961] netlink: 245 bytes leftover after parsing attributes in process `syz.0.7288'. [ 1598.873586][ T4962] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7288'. [ 1598.888279][ T4962] netlink: 245 bytes leftover after parsing attributes in process `syz.0.7288'. [ 1598.927323][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1598.935822][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1598.944294][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1599.004904][ T4972] xt_hashlimit: size too large, truncated to 1048576 [ 1599.056716][ T4974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7293'. [ 1599.076135][ T4977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7294'. [ 1599.236972][ T4984] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7295'. [ 1599.325745][ T4984] mac80211_hwsim hwsim84 syzkaller0: entered promiscuous mode [ 1599.334652][ T4984] mac80211_hwsim hwsim84 syzkaller0: entered allmulticast mode [ 1599.521007][ T4994] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7298'. [ 1599.759016][ T5008] mac80211_hwsim hwsim87 syzkaller0: left promiscuous mode [ 1599.766313][ T5008] mac80211_hwsim hwsim87 syzkaller0: left allmulticast mode [ 1599.852055][ T5010] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7302'. [ 1600.487776][ T5034] sctp: [Deprecated]: syz.0.7308 (pid 5034) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1600.487776][ T5034] Use struct sctp_sack_info instead [ 1601.190670][ T5053] batadv0: entered promiscuous mode [ 1601.199281][ T5053] bond0: entered promiscuous mode [ 1601.204365][ T5053] bond_slave_0: entered promiscuous mode [ 1601.215591][ T5053] bond_slave_1: entered promiscuous mode [ 1601.223375][ T5053] bridge_slave_1: entered promiscuous mode [ 1601.234505][ T5053] debugfs: 'hsr0' already exists in 'hsr' [ 1601.240973][ T5053] Cannot create hsr debugfs directory [ 1601.249325][ T5053] hsr0: entered allmulticast mode [ 1601.254479][ T5053] batadv0: entered allmulticast mode [ 1601.260582][ T5053] bond0: entered allmulticast mode [ 1601.265803][ T5053] bond_slave_0: entered allmulticast mode [ 1601.278968][ T5053] bond_slave_1: entered allmulticast mode [ 1601.284927][ T5053] bridge_slave_1: entered allmulticast mode [ 1601.291833][ T5053] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 1601.302410][ T5055] tipc: MTU too low for tipc bearer [ 1601.476479][ T5070] lo speed is unknown, defaulting to 1000 [ 1601.482927][ T5070] lo speed is unknown, defaulting to 1000 [ 1601.496104][ T5070] lo speed is unknown, defaulting to 1000 [ 1601.514711][ T5070] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1601.600920][ T5079] mac80211_hwsim hwsim87 syzkaller0: entered promiscuous mode [ 1601.617194][ T5079] mac80211_hwsim hwsim87 syzkaller0: entered allmulticast mode [ 1601.717342][ T5082] "syz.2.7321" (5082) uses obsolete ecb(arc4) skcipher [ 1601.725276][ T5070] lo speed is unknown, defaulting to 1000 [ 1601.802278][ T5070] lo speed is unknown, defaulting to 1000 [ 1601.860330][ T5070] lo speed is unknown, defaulting to 1000 [ 1601.917400][ T5070] lo speed is unknown, defaulting to 1000 [ 1601.925173][ T5070] lo speed is unknown, defaulting to 1000 [ 1601.951006][ T5070] lo speed is unknown, defaulting to 1000 [ 1601.964275][ T5070] lo speed is unknown, defaulting to 1000 [ 1601.971736][ T5095] netlink: 'syz.1.7323': attribute type 13 has an invalid length. [ 1601.979775][ T5095] netlink: 'syz.1.7323': attribute type 17 has an invalid length. [ 1602.069803][ T5095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1602.079273][ T5095] 8021q: adding VLAN 0 to HW filter on device team0 [ 1602.095977][ T5095] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1602.293292][ T5104] lo speed is unknown, defaulting to 1000 [ 1602.736049][ T5133] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20003 [ 1602.805010][ T5104] virt_wifi0 speed is unknown, defaulting to 1000 [ 1602.813411][ T5104] lo speed is unknown, defaulting to 1000 [ 1602.930143][ T5136] dvmrp1: entered allmulticast mode [ 1603.665654][ T5186] __nla_validate_parse: 14 callbacks suppressed [ 1603.665677][ T5186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7347'. [ 1603.720638][ T5187] netlink: 'syz.4.7348': attribute type 1 has an invalid length. [ 1603.746839][ T5187] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7348'. [ 1603.941003][ T5199] netlink: 'syz.4.7349': attribute type 1 has an invalid length. [ 1603.948201][ T5200] netlink: 'syz.4.7349': attribute type 1 has an invalid length. [ 1604.033839][ T5202] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1604.047349][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1604.055848][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1604.072005][ T5202] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1604.117209][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1604.153456][ T5205] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1604.633179][ T5227] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7357'. [ 1604.742989][ T5229] netlink: 'syz.4.7358': attribute type 1 has an invalid length. [ 1604.785642][ T5232] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7359'. [ 1604.808886][ T5237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7360'. [ 1604.963888][ T5245] netlink: 252 bytes leftover after parsing attributes in process `syz.3.7364'. [ 1605.460886][ T5281] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7374'. [ 1605.500854][ T5285] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7375'. [ 1605.516031][ T5282] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7374'. [ 1606.260162][ T5313] x_tables: duplicate underflow at hook 2 [ 1606.307059][ T5307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1606.342595][ T5307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1606.356487][ T5307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1606.366470][ T5307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1606.377509][ T5307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1606.385755][ T5307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1606.395378][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1606.512476][ T5319] batadv_slave_1: entered promiscuous mode [ 1606.528887][ T5320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7385'. [ 1606.540360][ T5318] batadv_slave_1: left promiscuous mode [ 1608.502533][ T5371] netlink: 'syz.0.7403': attribute type 1 has an invalid length. [ 1608.586256][ T5371] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1609.338478][ T5399] __nla_validate_parse: 3 callbacks suppressed [ 1609.338502][ T5399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7408'. [ 1609.980094][ T5414] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7411'. [ 1610.130163][ T5418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7412'. [ 1610.175886][ T5419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7412'. [ 1610.246574][ T5418] team1: entered promiscuous mode [ 1610.252101][ T5418] team1: entered allmulticast mode [ 1610.257805][ T5418] 8021q: adding VLAN 0 to HW filter on device team1 [ 1610.287171][ T5419] team2: entered promiscuous mode [ 1610.292323][ T5419] team2: entered allmulticast mode [ 1610.298080][ T5419] 8021q: adding VLAN 0 to HW filter on device team2 [ 1610.392887][ T5426] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7413'. [ 1610.437260][ C1] net_ratelimit: 34 callbacks suppressed [ 1610.437283][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1610.451464][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1610.459854][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1610.714636][ T5434] bond5: (slave bond_slave_1): Device is not bonding slave [ 1610.732410][ T5434] bond5: option active_slave: invalid value (bond_slave_1) [ 1610.749276][ T5434] bond5 (unregistering): Released all slaves [ 1614.117389][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1614.125723][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1615.208198][ T5446] netlink: 'syz.2.7419': attribute type 1 has an invalid length. [ 1615.239866][ T5446] netlink: 'syz.2.7419': attribute type 2 has an invalid length. [ 1615.737300][ T5497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1615.746219][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1615.808598][ T5497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1615.817084][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1615.828135][ T5497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1615.836561][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1615.845645][ T5497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1615.854467][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1615.863982][ T5497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1615.872458][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1615.899481][ T5496] lo speed is unknown, defaulting to 1000 [ 1616.624437][ T5513] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7435'. [ 1616.682229][ T5517] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7437'. [ 1616.719367][ T5517] xt_connbytes: Forcing CT accounting to be enabled [ 1616.726196][ T5517] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 1616.754722][ T5517] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7437'. [ 1616.881610][ T5523] netlink: 'syz.3.7438': attribute type 13 has an invalid length. [ 1616.897467][ T5523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7438'. [ 1616.908642][ T5496] virt_wifi0 speed is unknown, defaulting to 1000 [ 1616.922126][ T5523] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 1616.974371][ T5496] lo speed is unknown, defaulting to 1000 [ 1617.146491][ T5534] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7443'. [ 1617.213113][ T5539] netlink: 276 bytes leftover after parsing attributes in process `syz.2.7444'. [ 1617.276384][ T5539] lo speed is unknown, defaulting to 1000 [ 1617.331164][ T5545] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7445'. [ 1617.355142][ T5545] vlan0: entered allmulticast mode [ 1617.360832][ T5545] gretap0: entered allmulticast mode [ 1617.625800][ T5552] lo speed is unknown, defaulting to 1000 [ 1617.702106][ T5539] virt_wifi0 speed is unknown, defaulting to 1000 [ 1617.711250][ T5539] lo speed is unknown, defaulting to 1000 [ 1617.915813][ T5570] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1617.929997][ T5570] bond6 (unregistering): Released all slaves [ 1618.072974][ T5552] virt_wifi0 speed is unknown, defaulting to 1000 [ 1618.267650][ T5552] lo speed is unknown, defaulting to 1000 [ 1618.472023][ T5589] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7457'. [ 1618.837318][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1618.945668][ T5608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7460'. [ 1619.163447][ T5605] tipc: Enabled bearer , priority 0 [ 1619.187359][ T5612] syzkaller0: entered promiscuous mode [ 1619.193136][ T5612] syzkaller0: entered allmulticast mode [ 1619.200472][ T1792] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1619.226548][ T5615] tipc: Resetting bearer [ 1619.243925][ T5604] tipc: Resetting bearer [ 1619.273539][ T5604] tipc: Disabling bearer [ 1619.296392][ T5622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7463'. [ 1619.428061][ T5625] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1619.471064][ T1792] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1619.787397][ T5650] netlink: 'syz.1.7469': attribute type 3 has an invalid length. [ 1619.946410][ T5657] x_tables: duplicate underflow at hook 2 [ 1620.015441][ T5662] FAULT_INJECTION: forcing a failure. [ 1620.015441][ T5662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1620.030322][ T5662] CPU: 1 UID: 0 PID: 5662 Comm: syz.0.7473 Not tainted syzkaller #0 PREEMPT(full) [ 1620.030355][ T5662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1620.030370][ T5662] Call Trace: [ 1620.030380][ T5662] [ 1620.030391][ T5662] dump_stack_lvl+0xe8/0x150 [ 1620.030433][ T5662] should_fail_ex+0x412/0x560 [ 1620.030477][ T5662] _copy_to_user+0x31/0xb0 [ 1620.030514][ T5662] simple_read_from_buffer+0xe1/0x170 [ 1620.030553][ T5662] proc_fail_nth_read+0x1bb/0x230 [ 1620.030589][ T5662] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1620.030625][ T5662] ? rw_verify_area+0x2a6/0x4d0 [ 1620.030647][ T5662] ? tun_chr_write_iter+0xe0/0x200 [ 1620.030803][ T5662] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1620.030837][ T5662] vfs_read+0x20c/0xa70 [ 1620.030859][ T5662] ? fdget_pos+0x246/0x320 [ 1620.030896][ T5662] ? __pfx___mutex_lock+0x10/0x10 [ 1620.030933][ T5662] ? __pfx_vfs_read+0x10/0x10 [ 1620.030958][ T5662] ? __fget_files+0x2a/0x420 [ 1620.030995][ T5662] ? __fget_files+0x3a0/0x420 [ 1620.031026][ T5662] ? __fget_files+0x2a/0x420 [ 1620.031068][ T5662] ksys_read+0x150/0x270 [ 1620.031094][ T5662] ? __pfx_ksys_read+0x10/0x10 [ 1620.031131][ T5662] do_syscall_64+0x14d/0xf80 [ 1620.031162][ T5662] ? trace_irq_disable+0x3b/0x150 [ 1620.031194][ T5662] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1620.031218][ T5662] ? clear_bhb_loop+0x40/0x90 [ 1620.031246][ T5662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1620.031269][ T5662] RIP: 0033:0x7f39efd5cfce [ 1620.031291][ T5662] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1620.031314][ T5662] RSP: 002b:00007f39edfedfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1620.031339][ T5662] RAX: ffffffffffffffda RBX: 00007f39edfee6c0 RCX: 00007f39efd5cfce [ 1620.031356][ T5662] RDX: 000000000000000f RSI: 00007f39edfee0a0 RDI: 0000000000000005 [ 1620.031370][ T5662] RBP: 00007f39edfee090 R08: 0000000000000000 R09: 0000000000000000 [ 1620.031385][ T5662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1620.031399][ T5662] R13: 00007f39f0016038 R14: 00007f39f0015fa0 R15: 00007ffebe788a98 [ 1620.031435][ T5662] [ 1620.313862][ T5659] lo speed is unknown, defaulting to 1000 [ 1620.561408][ T5668] sock: sock_timestamping_bind_phc: sock not bind to device [ 1620.598369][ T5659] virt_wifi0 speed is unknown, defaulting to 1000 [ 1620.606667][ T5659] lo speed is unknown, defaulting to 1000 [ 1621.907898][ T5737] __nla_validate_parse: 10 callbacks suppressed [ 1621.907921][ T5737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7500'. [ 1621.931135][ T5742] netlink: 'syz.2.7501': attribute type 1 has an invalid length. [ 1622.014381][ T5748] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7499'. [ 1622.029054][ T5743] netlink: 'syz.0.7502': attribute type 1 has an invalid length. [ 1622.100084][ T5743] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1622.137355][ T5752] netlink: 'syz.3.7505': attribute type 8 has an invalid length. [ 1622.170634][ T5743] bond5: (slave batadv2): Opening slave failed [ 1622.336098][ T5760] netlink: 'syz.1.7508': attribute type 11 has an invalid length. [ 1622.378804][ T5762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7509'. [ 1622.553701][ T5773] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7511'. [ 1622.645431][ T5773] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7511'. [ 1622.767358][ C1] net_ratelimit: 2927 callbacks suppressed [ 1622.767379][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1622.781753][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1622.790189][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1622.798591][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1622.806937][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1622.864270][ T5784] syzkaller1: entered promiscuous mode [ 1622.882255][ T5784] syzkaller1: entered allmulticast mode [ 1622.979833][ T5788] syzkaller1: entered promiscuous mode [ 1622.995707][ T5788] syzkaller1: entered allmulticast mode [ 1623.012491][ T5788] openvswitch: netlink: Duplicate key (type 21). [ 1623.105495][ T5790] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7517'. [ 1623.195614][ T5792] bond6: Removing last arp target with arp_interval on [ 1623.260709][ T5790] bond7: Removing last arp target with arp_interval on [ 1623.431071][ T5814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7520'. [ 1623.522714][ T5821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7523'. [ 1623.575067][ T5814] bond8: entered promiscuous mode [ 1623.582296][ T5814] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1623.705273][ T5825] lo speed is unknown, defaulting to 1000 [ 1623.718664][ T5814] syzkaller0: entered promiscuous mode [ 1623.724194][ T5814] syzkaller0: entered allmulticast mode [ 1624.046018][ T5840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7526'. [ 1624.140979][ T5846] netlink: 'syz.2.7527': attribute type 13 has an invalid length. [ 1624.426748][ T5864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7532'. [ 1624.688031][T19344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1624.696782][T19344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1624.737409][T19344] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1624.784011][ T5825] virt_wifi0 speed is unknown, defaulting to 1000 [ 1624.798115][ T5825] lo speed is unknown, defaulting to 1000 [ 1624.996023][ T5869] netem: incorrect gi model size [ 1625.007503][ T5869] netem: change failed [ 1625.015866][ T5875] netlink: 'syz.2.7534': attribute type 1 has an invalid length. [ 1625.072532][ T5875] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1625.125732][ T5882] netlink: 'syz.2.7534': attribute type 1 has an invalid length. [ 1625.307272][T19344] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1625.478345][T19344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1625.486651][T19344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1625.983586][ T5938] : entered promiscuous mode [ 1626.366279][ T5968] netlink: 'syz.0.7555': attribute type 1 has an invalid length. [ 1626.375062][ T5970] C: renamed from team_slave_0 [ 1626.394313][ T5970] netlink: 'syz.1.7556': attribute type 4 has an invalid length. [ 1626.959277][ T6003] __nla_validate_parse: 5 callbacks suppressed [ 1626.959299][ T6003] netlink: 188 bytes leftover after parsing attributes in process `syz.0.7563'. [ 1627.165764][ T6011] netlink: 188 bytes leftover after parsing attributes in process `syz.0.7563'. [ 1627.392904][ T6028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7567'. [ 1627.529519][ T6028] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7567'. [ 1627.927641][ T6057] lo speed is unknown, defaulting to 1000 [ 1628.246672][ T6057] virt_wifi0 speed is unknown, defaulting to 1000 [ 1628.255355][ T6057] lo speed is unknown, defaulting to 1000 [ 1628.837530][ C1] net_ratelimit: 1 callbacks suppressed [ 1628.837552][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1628.851518][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1628.859821][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1628.868170][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1628.876436][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1634.607443][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1634.615752][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1634.624249][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1634.632562][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1638.037333][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1640.357380][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1640.365727][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1640.374100][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1640.382435][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1640.650722][ T6089] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7573'. [ 1640.699227][ T6089] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7573'. [ 1640.716962][ T6095] tipc: Enabled bearer , priority 0 [ 1640.738895][ T6095] syzkaller0: entered promiscuous mode [ 1640.749701][ T6095] syzkaller0: entered allmulticast mode [ 1640.802628][ T6095] tipc: Resetting bearer [ 1640.923558][ T6094] tipc: Resetting bearer [ 1641.089304][ T6094] tipc: Disabling bearer [ 1641.106163][ T6114] xt_policy: too many policy elements [ 1641.289033][ T6116] lo speed is unknown, defaulting to 1000 [ 1641.440854][ T6129] lo: entered allmulticast mode [ 1641.513160][ T6133] netlink: 'syz.4.7587': attribute type 10 has an invalid length. [ 1641.551268][ T6133] 8021q: adding VLAN 0 to HW filter on device team0 [ 1641.592628][ T6133] bond0: (slave team0): Enslaving as an active interface with an up link [ 1641.700188][ T6141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7589'. [ 1641.712781][ T6141] netlink: 'syz.3.7589': attribute type 1 has an invalid length. [ 1641.935256][ T6157] IPVS: set_ctl: invalid protocol: 22 172.20.20.13:20002 [ 1641.940057][ T6150] bond6: Removing last ns target with arp_interval on [ 1641.952038][ T6158] IPVS: set_ctl: invalid protocol: 22 172.20.20.13:20002 [ 1642.137197][ T6164] netlink: 'syz.2.7596': attribute type 1 has an invalid length. [ 1642.201822][T31513] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1642.215967][T31513] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1642.237869][ T6116] virt_wifi0 speed is unknown, defaulting to 1000 [ 1642.246936][ T6164] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1642.258020][T31513] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1642.308185][T31513] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1642.322308][ T6116] lo speed is unknown, defaulting to 1000 [ 1642.366352][ T6180] sctp: [Deprecated]: syz.3.7599 (pid 6180) Use of int in max_burst socket option. [ 1642.366352][ T6180] Use struct sctp_assoc_value instead [ 1642.382584][ T6179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7601'. [ 1642.415748][ T6179] vlan2: entered promiscuous mode [ 1642.431220][ T6179] bridge0: entered promiscuous mode [ 1642.613200][ T6196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7600'. [ 1642.630602][ T6196] batman_adv: batadv0: Adding interface: ipvlan3 [ 1642.639776][ T6196] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1642.705842][ T6196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1642.716694][ T6196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.748498][ T6196] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active [ 1642.859334][ T6178] delete_channel: no stack [ 1642.881373][ T6202] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7605'. [ 1643.043222][ T6213] sit0: entered promiscuous mode [ 1643.052804][ T6213] netlink: 'syz.0.7609': attribute type 1 has an invalid length. [ 1643.061474][ T6213] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7609'. [ 1643.082209][ T6214] netlink: 'syz.0.7609': attribute type 1 has an invalid length. [ 1643.096780][ T6214] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7609'. [ 1643.107677][ T6219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7606'. [ 1643.183283][ T6208] pim6reg1: entered promiscuous mode [ 1643.193066][ T6208] pim6reg1: entered allmulticast mode [ 1643.224892][ T6215] syzkaller1: entered promiscuous mode [ 1643.230810][ T6215] syzkaller1: entered allmulticast mode [ 1643.239256][ T6217] netlink: 'syz.3.7608': attribute type 1 has an invalid length. [ 1643.248902][ T6216] netlink: 'syz.3.7608': attribute type 1 has an invalid length. [ 1643.301136][ T6217] bond3: entered promiscuous mode [ 1643.306795][ T6217] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1643.339537][ T6213] xt_hashlimit: size too large, truncated to 1048576 [ 1643.347503][ T6214] xt_hashlimit: size too large, truncated to 1048576 [ 1643.354428][ T6213] xt_hashlimit: max too large, truncated to 1048576 [ 1643.361592][ T6214] xt_hashlimit: max too large, truncated to 1048576 [ 1643.369454][ T6215] bond3: (slave bridge5): making interface the new active one [ 1643.376977][ T6215] bridge5: entered promiscuous mode [ 1643.398444][ T6215] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 1643.441307][ T6217] bridge0: Device is already in use. [ 1643.448117][ T6216] bridge0: Device is already in use. [ 1643.551298][ T6226] netlink: 'syz.2.7612': attribute type 1 has an invalid length. [ 1643.602005][ T6226] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1643.614354][ T6226] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 1643.654180][ T6230] netlink: 'syz.0.7613': attribute type 29 has an invalid length. [ 1643.705332][ T6231] bond6: (slave gretap1): making interface the new active one [ 1643.716959][ T6233] netlink: 'syz.3.7614': attribute type 1 has an invalid length. [ 1643.725430][ T6233] netlink: 236 bytes leftover after parsing attributes in process `syz.3.7614'. [ 1643.752217][ T6231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1643.762081][ T6231] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 1643.783979][ T6230] syzkaller1: entered promiscuous mode [ 1643.792354][ T6230] syzkaller1: entered allmulticast mode [ 1643.876065][ T6233] lo speed is unknown, defaulting to 1000 [ 1644.219010][ T6233] virt_wifi0 speed is unknown, defaulting to 1000 [ 1644.227942][ T6233] lo speed is unknown, defaulting to 1000 [ 1644.504199][ T6273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1645.493684][ T6310] 8021q: VLANs not supported on wg2 [ 1645.637318][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1645.646462][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1645.654926][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1645.663380][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1646.997555][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1651.237393][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1651.245772][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1651.254174][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1651.262585][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1653.597931][ T6343] __nla_validate_parse: 2 callbacks suppressed [ 1653.597955][ T6343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7639'. [ 1653.638695][ T6350] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7640'. [ 1653.656287][ T6343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7639'. [ 1653.668445][ T6348] tipc: Enabling of bearer rejected, failed to enable media [ 1653.679851][ T6343] validate_nla: 1 callbacks suppressed [ 1653.679868][ T6343] netlink: 'syz.3.7639': attribute type 6 has an invalid length. [ 1653.705424][ T6343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7639'. [ 1653.705857][T31509] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1653.714485][ T6343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7639'. [ 1653.744858][ T6343] netlink: 'syz.3.7639': attribute type 6 has an invalid length. [ 1653.804914][ T6355] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1653.837367][ T6350] nbd4: detected capacity change from 0 to 63 [ 1653.843952][ T6357] block nbd4: NBD_DISCONNECT [ 1653.851390][ T6357] block nbd4: Disconnected due to user request. [ 1653.859370][ T6357] block nbd4: shutting down sockets [ 1653.918805][ T6355] bond4 (unregistering): Released all slaves [ 1653.968430][ T6366] netlink: 'syz.0.7642': attribute type 3 has an invalid length. [ 1654.016333][T31509] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1654.025809][T31605] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1654.047339][ T6353] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 1654.098226][ T6353] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 1654.119617][T31605] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1654.128184][ T6353] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 1654.303267][ T6375] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7644'. [ 1654.348900][ T6375] 8021q: VLANs not supported on caif0 [ 1654.644747][ T6392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1654.654403][ T6392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1654.663078][ T6392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1654.672957][ T6392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1654.686061][ T6392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1654.694392][ T6392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1654.852107][ T6410] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7654'. [ 1655.046938][ T6419] netlink: 'syz.0.7657': attribute type 1 has an invalid length. [ 1655.074968][ T6419] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7657'. [ 1655.090609][ T6419] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7657'. [ 1655.272422][ T6432] lo speed is unknown, defaulting to 1000 [ 1655.377737][ T6443] netlink: 'syz.4.7664': attribute type 3 has an invalid length. [ 1655.404170][ T6443] nbd: couldn't find device at index 0 [ 1655.461419][ T6443] lo: left allmulticast mode [ 1655.488902][ T1795] lo speed is unknown, defaulting to 1000 [ 1655.494711][ T1795] syz2: Port: 1 Link ACTIVE [ 1655.565091][ T6432] virt_wifi0 speed is unknown, defaulting to 1000 [ 1655.573954][ T6432] lo speed is unknown, defaulting to 1000 [ 1656.014132][ T6466] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7670'. [ 1656.059073][ T6468] team0: Port device syz_tun added [ 1656.085248][ T6468] bond1: (slave lo): Releasing backup interface [ 1656.122380][ T6468] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1656.213158][ T6468] team0: Port device syz_tun removed [ 1656.268312][ T6468] bridge_slave_0: left promiscuous mode [ 1656.277646][ T6468] bridge0: port 1(bridge_slave_0) entered disabled state [ 1656.337397][ T6468] bridge_slave_1: left allmulticast mode [ 1656.352186][ T6468] bridge_slave_1: left promiscuous mode [ 1656.376590][ T6468] bridge0: port 2(bridge_slave_1) entered disabled state [ 1656.418115][ T6468] bond0: (slave bond_slave_0): Releasing backup interface [ 1656.439589][ T6468] bond0: (slave bond_slave_1): Releasing backup interface [ 1656.460646][ T6468] team0: Port device team_slave_1 removed [ 1656.466874][ T6468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1656.499555][ T6468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1656.521607][ T6468] net_ratelimit: 2 callbacks suppressed [ 1656.521630][ T6468] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1656.997238][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1657.005691][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1657.014131][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1657.022569][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1657.232324][ T6505] netlink: 'syz.3.7683': attribute type 3 has an invalid length. [ 1657.247351][ T6505] netlink: 'syz.3.7683': attribute type 1 has an invalid length. [ 1657.302055][ T6510] tc_dump_action: action bad kind [ 1657.691485][ T6527] lo speed is unknown, defaulting to 1000 [ 1658.001890][ T6551] x_tables: duplicate underflow at hook 2 [ 1658.050461][ T6549] syzkaller0: entered promiscuous mode [ 1658.066490][ T6549] syzkaller0: entered allmulticast mode [ 1659.929608][ T6527] virt_wifi0 speed is unknown, defaulting to 1000 [ 1659.930952][ T6575] netlink: 'syz.3.7702': attribute type 10 has an invalid length. [ 1659.965182][ T6575] __nla_validate_parse: 6 callbacks suppressed [ 1659.965202][ T6575] netlink: 228 bytes leftover after parsing attributes in process `syz.3.7702'. [ 1660.026635][ T6527] lo speed is unknown, defaulting to 1000 [ 1660.616939][ T6603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7709'. [ 1660.629209][ T6603] syzkaller0: entered promiscuous mode [ 1660.635185][ T6603] syzkaller0: entered allmulticast mode [ 1660.806394][ T6611] netlink: 'syz.3.7713': attribute type 1 has an invalid length. [ 1660.844508][ T6611] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1660.873338][ T6611] bond4: (slave geneve0): making interface the new active one [ 1660.888572][ T6611] bond4: (slave geneve0): Enslaving as an active interface with an up link [ 1660.898362][ T6618] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7715'. [ 1660.932466][ T7815] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1660.958897][ T7815] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1660.999715][ T7815] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1661.019747][ T7815] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1661.128051][ T6627] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.7717'. [ 1661.315627][ T6632] 8021q: VLANs not supported on vcan0 [ 1661.402783][ T6637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7721'. [ 1661.491371][ T6637] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1661.910217][ T6664] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7727'. [ 1661.970465][ T6668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7729'. [ 1661.995536][ T6668] dvmrp1: left allmulticast mode [ 1662.917481][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1662.925956][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1662.934431][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1668.677303][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1668.685636][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1668.694052][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.437354][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.445717][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.454078][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1679.557381][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1679.565931][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1679.574358][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1685.317303][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1685.325636][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1685.334062][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1690.357290][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1690.365625][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1690.374032][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1695.557376][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1695.565657][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1695.574044][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1701.317291][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1701.325654][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1701.334031][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1704.597336][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1707.077344][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1707.085934][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1707.094265][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1709.507378][ T6798] netlink: 'syz.0.7731': attribute type 13 has an invalid length. [ 1709.523766][ T6805] netlink: 'syz.2.7733': attribute type 13 has an invalid length. [ 1709.526857][ T6803] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7734'. [ 1709.543554][ T6805] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.7733'. [ 1709.555907][ T6798] netlink: 'syz.0.7731': attribute type 12 has an invalid length. [ 1709.623026][ T6807] lo speed is unknown, defaulting to 1000 [ 1709.633626][ T6811] netlink: 'syz.3.7734': attribute type 5 has an invalid length. [ 1709.704625][ T6814] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7733'. [ 1709.987905][ T6818] block nbd0: NBD_DISCONNECT [ 1710.022157][ T6816] dvmrp0: left allmulticast mode [ 1710.039664][ T6816] lo: left allmulticast mode [ 1710.149249][ T6807] virt_wifi0 speed is unknown, defaulting to 1000 [ 1710.157829][ T6807] lo speed is unknown, defaulting to 1000 [ 1710.165091][ T6818] siw: device registration error -23 [ 1710.214663][ T6823] netlink: 88 bytes leftover after parsing attributes in process `syz.2.7738'. [ 1710.247027][ T6823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1710.256128][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1710.280680][ T6823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1710.303593][ T6823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1710.313425][ T1791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1710.328275][ T6823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1710.355197][ T6823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1710.484640][ T6829] lo speed is unknown, defaulting to 1000 [ 1710.495601][ T6825] lo: Caught tx_queue_len zero misconfig [ 1711.049763][ T6829] virt_wifi0 speed is unknown, defaulting to 1000 [ 1711.091625][ T6829] lo speed is unknown, defaulting to 1000 [ 1711.183308][ T6851] netlink: 'syz.2.7744': attribute type 2 has an invalid length. [ 1712.045353][ T6879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7751'. [ 1712.067784][ T6874] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7749'. [ 1712.130428][ T6891] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7752'. [ 1712.917430][ C1] net_ratelimit: 2 callbacks suppressed [ 1712.917452][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1712.931497][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1712.939859][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1718.597411][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1718.605787][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1721.168829][ T6926] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7756'. [ 1721.277486][ T6926] bond10: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1721.289055][ T6934] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7758'. [ 1721.321584][ T6926] bond10 (unregistering): Released all slaves [ 1721.467331][ T6940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7762'. [ 1721.493745][ T6940] netlink: 'syz.4.7762': attribute type 15 has an invalid length. [ 1721.522778][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7762'. [ 1721.552077][ T6944] netlink: 'syz.4.7762': attribute type 10 has an invalid length. [ 1721.600802][T31605] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 1721.617152][ T6940] netlink: 'syz.4.7762': attribute type 10 has an invalid length. [ 1721.627139][T31605] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 1721.645909][T31605] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 1721.695168][ T6944] team0: Port device macvlan1 added [ 1721.738919][T31605] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 1721.918462][ T6965] syz_tun: entered promiscuous mode [ 1721.931858][ T6965] syz_tun: entered allmulticast mode [ 1722.125764][ T6968] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7772'. [ 1722.154733][ T6968] syzkaller0: entered promiscuous mode [ 1722.170772][ T6968] syzkaller0: entered allmulticast mode [ 1722.173104][ T6974] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7771'. [ 1722.292515][ T6979] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1722.302447][ T6979] macvtap1: entered promiscuous mode [ 1722.310398][ T6979] macvtap1: entered allmulticast mode [ 1722.328405][ T6982] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7774'. [ 1722.474174][ T6996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7775'. [ 1722.809159][ T7009] bond5 (unregistering): Released all slaves [ 1722.845565][ T7014] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1722.960679][ T7024] netlink: 'syz.0.7785': attribute type 61 has an invalid length. [ 1722.986034][ T7024] netlink: 'syz.0.7785': attribute type 62 has an invalid length. [ 1723.032584][ T7024] nbd: must specify a size in bytes for the device [ 1723.127031][ T7038] FAULT_INJECTION: forcing a failure. [ 1723.127031][ T7038] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1723.146767][ T7037] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 1723.187998][ T7038] CPU: 1 UID: 0 PID: 7038 Comm: syz.3.7788 Not tainted syzkaller #0 PREEMPT(full) [ 1723.188031][ T7038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1723.188046][ T7038] Call Trace: [ 1723.188055][ T7038] [ 1723.188066][ T7038] dump_stack_lvl+0xe8/0x150 [ 1723.188107][ T7038] should_fail_ex+0x412/0x560 [ 1723.188144][ T7038] _copy_from_user+0x2d/0xb0 [ 1723.188180][ T7038] generic_map_update_batch+0x69a/0x990 [ 1723.188220][ T7038] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1723.188249][ T7038] ? __fget_files+0x2a/0x420 [ 1723.188291][ T7038] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1723.188318][ T7038] bpf_map_do_batch+0x39b/0x630 [ 1723.188348][ T7038] __sys_bpf+0x7c1/0x950 [ 1723.188384][ T7038] ? __pfx___sys_bpf+0x10/0x10 [ 1723.188434][ T7038] ? ksys_write+0x242/0x270 [ 1723.188461][ T7038] ? __pfx_ksys_write+0x10/0x10 [ 1723.188492][ T7038] __x64_sys_bpf+0x7c/0x90 [ 1723.188521][ T7038] do_syscall_64+0x14d/0xf80 [ 1723.188556][ T7038] ? trace_irq_disable+0x3b/0x150 [ 1723.188587][ T7038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1723.188611][ T7038] ? clear_bhb_loop+0x40/0x90 [ 1723.188646][ T7038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1723.188668][ T7038] RIP: 0033:0x7fb2bb39c799 [ 1723.188690][ T7038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1723.188709][ T7038] RSP: 002b:00007fb2bc20e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1723.188733][ T7038] RAX: ffffffffffffffda RBX: 00007fb2bb615fa0 RCX: 00007fb2bb39c799 [ 1723.188751][ T7038] RDX: 0000000000000038 RSI: 00002000000002c0 RDI: 000000000000001a [ 1723.188765][ T7038] RBP: 00007fb2bc20e090 R08: 0000000000000000 R09: 0000000000000000 [ 1723.188779][ T7038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1723.188792][ T7038] R13: 00007fb2bb616038 R14: 00007fb2bb615fa0 R15: 00007ffc5ee85bb8 [ 1723.188827][ T7038] [ 1723.399259][ T7042] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 1723.717201][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1723.746929][ T7065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7798'. [ 1723.763534][ T7065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7798'. [ 1723.793179][ T7065] netlink: 'syz.3.7798': attribute type 14 has an invalid length. [ 1723.840016][ T7065] netlink: 'syz.3.7798': attribute type 13 has an invalid length. [ 1724.056354][ T7080] tipc: Enabled bearer , priority 0 [ 1724.074799][ T7079] syzkaller0: entered promiscuous mode [ 1724.093054][ T7079] syzkaller0: entered allmulticast mode [ 1724.109647][ T7088] FAULT_INJECTION: forcing a failure. [ 1724.109647][ T7088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1724.146209][ T7086] lo speed is unknown, defaulting to 1000 [ 1724.167644][ T7088] CPU: 0 UID: 0 PID: 7088 Comm: syz.2.7805 Not tainted syzkaller #0 PREEMPT(full) [ 1724.167684][ T7088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1724.167703][ T7088] Call Trace: [ 1724.167713][ T7088] [ 1724.167723][ T7088] dump_stack_lvl+0xe8/0x150 [ 1724.167760][ T7088] should_fail_ex+0x412/0x560 [ 1724.167795][ T7088] _copy_from_user+0x2d/0xb0 [ 1724.167831][ T7088] generic_map_update_batch+0x648/0x990 [ 1724.167878][ T7088] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1724.167908][ T7088] ? __fget_files+0x2a/0x420 [ 1724.167948][ T7088] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1724.167976][ T7088] bpf_map_do_batch+0x39b/0x630 [ 1724.168006][ T7088] __sys_bpf+0x7c1/0x950 [ 1724.168041][ T7088] ? __pfx___sys_bpf+0x10/0x10 [ 1724.168092][ T7088] ? ksys_write+0x242/0x270 [ 1724.168119][ T7088] ? __pfx_ksys_write+0x10/0x10 [ 1724.168152][ T7088] __x64_sys_bpf+0x7c/0x90 [ 1724.168183][ T7088] do_syscall_64+0x14d/0xf80 [ 1724.168215][ T7088] ? trace_irq_disable+0x3b/0x150 [ 1724.168246][ T7088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1724.168269][ T7088] ? clear_bhb_loop+0x40/0x90 [ 1724.168297][ T7088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1724.168319][ T7088] RIP: 0033:0x7f173639c799 [ 1724.168340][ T7088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1724.168360][ T7088] RSP: 002b:00007f173725f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1724.168384][ T7088] RAX: ffffffffffffffda RBX: 00007f1736615fa0 RCX: 00007f173639c799 [ 1724.168401][ T7088] RDX: 0000000000000038 RSI: 00002000000002c0 RDI: 000000000000001a [ 1724.168415][ T7088] RBP: 00007f173725f090 R08: 0000000000000000 R09: 0000000000000000 [ 1724.168428][ T7088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1724.168441][ T7088] R13: 00007f1736616038 R14: 00007f1736615fa0 R15: 00007ffe7b41c0b8 [ 1724.168481][ T7088] [ 1724.377281][ T7093] netlink: 'syz.3.7802': attribute type 1 has an invalid length. [ 1724.419336][ T7079] tipc: Resetting bearer [ 1724.490048][ T7079] tipc: Disabling bearer [ 1724.537315][ T7095] veth0_to_bridge: entered promiscuous mode [ 1724.568957][ T7095] veth0_to_bridge: left promiscuous mode [ 1724.622238][ T7102] netlink: 'syz.2.7807': attribute type 1 has an invalid length. [ 1724.668734][ T7102] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1724.739873][ T7104] syzkaller0: entered promiscuous mode [ 1724.745423][ T7104] syzkaller0: entered allmulticast mode [ 1724.754073][ T7086] virt_wifi0 speed is unknown, defaulting to 1000 [ 1724.762840][ T7086] lo speed is unknown, defaulting to 1000 [ 1726.677248][ T7106] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1726.741048][T19344] lo speed is unknown, defaulting to 1000 [ 1726.746855][T19344] syz2: Port: 1 Link DOWN [ 1726.917290][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1726.925794][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1726.934274][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1726.951946][ T7130] lo speed is unknown, defaulting to 1000 [ 1726.993580][ T7135] netlink: 'syz.1.7815': attribute type 32 has an invalid length. [ 1727.003476][ T7135] __nla_validate_parse: 3 callbacks suppressed [ 1727.003496][ T7135] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7815'. [ 1727.145420][ T7135] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 1727.163831][ T7141] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7818'. [ 1727.209782][T31509] bond0: (slave dummy0): link status definitely up, 0 Mbps full duplex [ 1727.239884][T31509] bond0: active interface up! [ 1727.303742][ T7149] tipc: Enabled bearer , priority 0 [ 1727.319698][ T7149] syzkaller0: entered promiscuous mode [ 1727.325552][ T7149] syzkaller0: entered allmulticast mode [ 1727.369558][ T7149] tipc: Resetting bearer [ 1727.380770][ T7148] tipc: Resetting bearer [ 1727.406280][ T7148] tipc: Disabling bearer [ 1727.416382][ T7130] virt_wifi0 speed is unknown, defaulting to 1000 [ 1727.425842][ T7130] lo speed is unknown, defaulting to 1000 [ 1727.864079][ T7165] netlink: 'syz.3.7827': attribute type 1 has an invalid length. [ 1727.875764][ T7165] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7827'. [ 1728.140941][ T7167] bond7: option lacp_rate: invalid value (128) [ 1728.159806][ T7174] netlink: 'syz.0.7829': attribute type 2 has an invalid length. [ 1728.171370][ T7174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7829'. [ 1728.193021][ T7167] bond7 (unregistering): Released all slaves [ 1729.026362][T31474] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1729.079690][T31474] CPU: 0 UID: 0 PID: 31474 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1729.079722][T31474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1729.079736][T31474] Call Trace: [ 1729.079746][T31474] [ 1729.079755][T31474] dump_stack_lvl+0xe8/0x150 [ 1729.079793][T31474] dump_header+0xd3/0x4c0 [ 1729.079823][T31474] oom_kill_process+0x3ab/0x970 [ 1729.079855][T31474] out_of_memory+0x106c/0x1410 [ 1729.079877][T31474] ? percpu_ref_put+0x19/0x180 [ 1729.079909][T31474] ? __pfx___mutex_lock+0x10/0x10 [ 1729.079962][T31474] ? __pfx_out_of_memory+0x10/0x10 [ 1729.079984][T31474] ? do_raw_spin_unlock+0xf5/0x210 [ 1729.080020][T31474] try_charge_memcg+0xc53/0x1560 [ 1729.080049][T31474] ? __lock_acquire+0x6b5/0x2cf0 [ 1729.080091][T31474] ? __pfx_try_charge_memcg+0x10/0x10 [ 1729.080115][T31474] ? xa_load+0x60/0x210 [ 1729.080235][T31474] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 1729.080268][T31474] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 1729.080299][T31474] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 1729.080329][T31474] __swap_cache_prepare_and_add+0x52a/0x700 [ 1729.080383][T31474] swap_cache_alloc_folio+0xf1/0x240 [ 1729.080422][T31474] swap_cluster_readahead+0x369/0x690 [ 1729.080463][T31474] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1729.080511][T31474] ? get_vma_policy+0x27b/0x3c0 [ 1729.080542][T31474] swapin_readahead+0x196/0xc50 [ 1729.080589][T31474] ? __pfx_swapin_readahead+0x10/0x10 [ 1729.080625][T31474] ? swap_table_get+0x1e/0x260 [ 1729.080656][T31474] ? swap_table_get+0x1e/0x260 [ 1729.080684][T31474] ? swap_table_get+0x1e/0x260 [ 1729.080720][T31474] ? swap_table_get+0x216/0x260 [ 1729.080754][T31474] ? swap_cache_get_folio+0x513/0x520 [ 1729.080794][T31474] do_swap_page+0x56f/0x5a20 [ 1729.080852][T31474] ? do_swap_page+0x127/0x5a20 [ 1729.080882][T31474] ? __pfx_do_swap_page+0x10/0x10 [ 1729.080911][T31474] ? __pte_offset_map+0x1ae/0x240 [ 1729.080965][T31474] ? pte_offset_map_rw_nolock+0xea/0x160 [ 1729.081004][T31474] handle_mm_fault+0x12d2/0x3310 [ 1729.081054][T31474] ? handle_mm_fault+0xee/0x3310 [ 1729.081097][T31474] ? __pfx_handle_mm_fault+0x10/0x10 [ 1729.081128][T31474] ? lock_vma_under_rcu+0x45a/0x500 [ 1729.081182][T31474] do_user_addr_fault+0xa73/0x1340 [ 1729.081220][T31474] ? rcu_is_watching+0x15/0xb0 [ 1729.081253][T31474] ? trace_page_fault_user+0x84/0x210 [ 1729.081286][T31474] exc_page_fault+0x6a/0xc0 [ 1729.081319][T31474] asm_exc_page_fault+0x26/0x30 [ 1729.081342][T31474] RIP: 0033:0x7fe079f5cfce [ 1729.081363][T31474] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1729.081383][T31474] RSP: 002b:00007ffee9882998 EFLAGS: 00010246 [ 1729.081404][T31474] RAX: 0000000000000000 RBX: 00005555557a4500 RCX: 00007fe079f5cfce [ 1729.081420][T31474] RDX: 00007ffee98829f0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1729.081435][T31474] RBP: 00007ffee9882a5c R08: 0000000000000000 R09: 0000000000000000 [ 1729.081449][T31474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 1729.081463][T31474] R13: 00000000000927c0 R14: 00000000001a5edd R15: 00007ffee9882ab0 [ 1729.081500][T31474] [ 1729.410942][T31474] memory: usage 307076kB, limit 307200kB, failcnt 1349 [ 1729.418239][T31474] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 1729.426194][T31474] kmem: usage 307048kB, limit 9007199254740988kB, failcnt 0 [ 1729.433570][T31474] Memory cgroup stats for /syz4: [ 1729.433833][T31474] cache 16384 [ 1729.442146][T31474] rss 0 [ 1729.444940][T31474] rss_huge 0 [ 1729.448535][T31474] shmem 0 [ 1729.451499][T31474] mapped_file 16384 [ 1729.455342][T31474] dirty 0 [ 1729.458372][T31474] writeback 8192 [ 1729.461946][T31474] workingset_refault_anon 31 [ 1729.466560][T31474] workingset_refault_file 507 [ 1729.471342][T31474] swap 126976 [ 1729.474651][T31474] swapcached 278528 [ 1729.478846][T31474] pgpgin 231765 [ 1729.482335][T31474] pgpgout 231759 [ 1729.485918][T31474] pgfault 418400 [ 1729.489538][T31474] pgmajfault 30 [ 1729.493020][T31474] inactive_anon 8192 [ 1729.497018][T31474] active_anon 0 [ 1729.500506][T31474] inactive_file 8192 [ 1729.504421][T31474] active_file 0 [ 1729.508322][T31474] unevictable 0 [ 1729.511817][T31474] hierarchical_memory_limit 314572800 [ 1729.517386][T31474] hierarchical_memsw_limit 9223372036854771712 [ 1729.523568][T31474] total_cache 16384 [ 1729.527437][T31474] total_rss 0 [ 1729.530748][T31474] total_rss_huge 0 [ 1729.534492][T31474] total_shmem 0 [ 1729.538364][T31474] total_mapped_file 16384 [ 1729.542724][T31474] total_dirty 0 [ 1729.546211][T31474] total_writeback 8192 [ 1729.550513][T31474] total_workingset_refault_anon 31 [ 1729.555653][T31474] total_workingset_refault_file 507 [ 1729.563851][T31474] total_swap 126976 [ 1729.569814][T31474] total_swapcached 278528 [ 1729.574179][T31474] total_pgpgin 231765 [ 1729.578328][T31474] total_pgpgout 231759 [ 1729.582420][T31474] total_pgfault 418400 [ 1729.585505][ T7219] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7840'. [ 1729.586512][T31474] total_pgmajfault 30 [ 1729.599913][T31474] total_inactive_anon 8192 [ 1729.604358][T31474] total_active_anon 0 [ 1729.608415][T31474] total_inactive_file 8192 [ 1729.612871][T31474] total_active_file 0 [ 1729.616876][T31474] total_unevictable 0 [ 1729.620954][T31474] anon_cost 0 [ 1729.624277][T31474] file_cost 0 [ 1729.627951][T31474] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.7830,pid=7175,uid=0 [ 1729.645570][T31474] Memory cgroup out of memory: Killed process 7175 (syz.4.7830) total-vm:98580kB, anon-rss:1244kB, file-rss:21644kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 1729.968470][ T7239] netlink: 136 bytes leftover after parsing attributes in process `syz.0.7843'. [ 1730.036035][ T7239] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1730.086399][ T7223] netlink: 'syz.3.7842': attribute type 1 has an invalid length. [ 1730.117082][ T7223] netlink: 'syz.3.7842': attribute type 2 has an invalid length. [ 1730.215662][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1730.247099][ T7223] syzkaller0: entered promiscuous mode [ 1730.257194][ T7223] syzkaller0: entered allmulticast mode [ 1732.677238][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1732.685523][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1732.693908][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1738.437332][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1738.445892][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1738.454371][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1739.773699][ T7288] netlink: 'syz.4.7851': attribute type 11 has an invalid length. [ 1739.825460][ T7289] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1740.226850][ T7310] netlink: 43 bytes leftover after parsing attributes in process `syz.4.7857'. [ 1740.261187][ T7306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7856'. [ 1740.781104][ T7327] vlan2: entered promiscuous mode [ 1740.786207][ T7327] bridge0: entered promiscuous mode [ 1741.078472][ T7337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7868'. [ 1741.111601][ T7339] tipc: Enabling of bearer rejected, failed to enable media [ 1741.124854][ T7339] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7869'. [ 1741.316869][ T7348] Bluetooth: MGMT ver 1.23 [ 1741.713238][ T7364] ipvlan3: entered promiscuous mode [ 1741.815640][ T7372] netem: change failed [ 1742.249235][ T7401] netlink: 644 bytes leftover after parsing attributes in process `syz.0.7884'. [ 1742.274470][ T7400] netlink: 'syz.4.7890': attribute type 1 has an invalid length. [ 1742.329840][ T7400] bond2 (unregistering): Released all slaves [ 1742.446337][ T7414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7888'. [ 1742.497323][ T7416] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7890'. [ 1742.660617][ T7424] netlink: 'syz.2.7895': attribute type 2 has an invalid length. [ 1742.811495][ T7427] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1742.813017][ T1791] IPVS: starting estimator thread 0... [ 1742.865462][ T7433] netlink: 180 bytes leftover after parsing attributes in process `syz.4.7897'. [ 1742.876404][ T7427] netlink: 220 bytes leftover after parsing attributes in process `syz.3.7896'. [ 1742.891948][ T7427] netlink: 220 bytes leftover after parsing attributes in process `syz.3.7896'. [ 1742.917057][ T7431] IPVS: using max 27 ests per chain, 64800 per kthread [ 1743.557753][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1743.566284][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1749.317318][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1749.325763][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1749.334162][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1754.437424][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1754.445744][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1754.454033][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1759.477359][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1759.485689][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1760.917502][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1762.757265][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1762.765594][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1765.957291][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1765.965580][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1769.797261][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1769.806336][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1774.277363][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1774.285695][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1774.294283][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1779.397483][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1779.405780][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1782.597315][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1782.605831][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1785.797280][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1785.805640][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1789.557230][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1789.565587][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1791.639853][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1794.117755][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1794.126202][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1794.134678][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1796.414015][ T7561] dvmrp0: entered allmulticast mode [ 1796.468719][ T7569] __nla_validate_parse: 1 callbacks suppressed [ 1796.468740][ T7569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7902'. [ 1796.491598][ T1791] IPVS: starting estimator thread 0... [ 1796.556198][ T7574] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7906'. [ 1796.595469][ T7574] mac80211_hwsim hwsim82 syzkaller0: entered promiscuous mode [ 1796.608038][ T7570] IPVS: using max 25 ests per chain, 60000 per kthread [ 1796.614609][ T7574] mac80211_hwsim hwsim82 syzkaller0: entered allmulticast mode [ 1796.951041][ T7595] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7909'. [ 1797.002455][ T7601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7912'. [ 1797.011593][ T7602] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 786440, id = 0 [ 1797.040611][ T7601] IPVS: stopping backup sync thread 7602 ... [ 1797.220340][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7913'. [ 1797.250247][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7913'. [ 1797.398610][ T7619] netlink: 'syz.1.7916': attribute type 2 has an invalid length. [ 1797.408121][ T7619] netlink: 'syz.1.7916': attribute type 11 has an invalid length. [ 1797.416178][ T7619] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7916'. [ 1797.474687][ T7624] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7918'. [ 1797.706235][ T7635] lo speed is unknown, defaulting to 1000 [ 1798.083333][ T7644] veth3: entered promiscuous mode [ 1798.515563][ T7635] virt_wifi0 speed is unknown, defaulting to 1000 [ 1798.538109][ T7635] lo speed is unknown, defaulting to 1000 [ 1798.590599][ T7666] sctp: [Deprecated]: syz.4.7931 (pid 7666) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1798.590599][ T7666] Use struct sctp_sack_info instead [ 1798.976022][ T7680] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1799.237179][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1799.245609][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1799.273972][ T7690] sctp: [Deprecated]: syz.0.7930 (pid 7690) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1799.273972][ T7690] Use struct sctp_sack_info instead [ 1799.647778][ T7707] netlink: 'syz.1.7941': attribute type 1 has an invalid length. [ 1799.779043][ T7712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7944'. [ 1799.802563][ T7718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7944'. [ 1799.905253][ T7714] tipc: Enabled bearer , priority 0 [ 1799.963889][ T7716] tipc: Resetting bearer [ 1800.075864][ T7726] netlink: 'syz.1.7948': attribute type 2 has an invalid length. [ 1800.105148][ T7726] hmac(sha224: entered promiscuous mode [ 1800.244667][ T7729] lo speed is unknown, defaulting to 1000 [ 1800.666600][ T7729] virt_wifi0 speed is unknown, defaulting to 1000 [ 1800.686539][ T7739] lo speed is unknown, defaulting to 1000 [ 1800.707776][ T7729] lo speed is unknown, defaulting to 1000 [ 1800.771437][ T7754] netlink: 'syz.0.7957': attribute type 1 has an invalid length. [ 1800.923081][ T7757] bond7: entered promiscuous mode [ 1800.937189][ T7757] bond7: entered allmulticast mode [ 1800.949432][ T7757] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1801.045920][ T7754] bridge8: entered promiscuous mode [ 1801.053762][ T7754] bridge8: entered allmulticast mode [ 1801.060848][ T7754] bond7: (slave bridge8): Enslaving as a backup interface with an up link [ 1801.069912][ T7762] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1801.137299][ T388] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1801.256105][ T7740] lo speed is unknown, defaulting to 1000 [ 1801.277629][T31605] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1801.485901][ T7740] virt_wifi0 speed is unknown, defaulting to 1000 [ 1801.494242][ T7739] virt_wifi0 speed is unknown, defaulting to 1000 [ 1801.511190][ T7739] lo speed is unknown, defaulting to 1000 [ 1801.594067][ T7740] lo speed is unknown, defaulting to 1000 [ 1801.687905][ T7772] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 1801.694414][ T7773] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 1802.059107][ T7788] tipc: Enabling of bearer rejected, failed to enable media [ 1802.437264][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1802.445684][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1806.277206][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1806.285616][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1808.176580][ T7818] __nla_validate_parse: 3 callbacks suppressed [ 1808.176605][ T7818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7970'. [ 1808.194945][ T7820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7969'. [ 1808.306185][ T7829] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7971'. [ 1808.396382][ T7824] lo speed is unknown, defaulting to 1000 [ 1808.881164][ T7863] netlink: 64102 bytes leftover after parsing attributes in process `syz.4.7980'. [ 1808.892649][ T7864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1808.901887][ T7864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1808.910328][ T7864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1808.920134][ T7864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1808.945662][ T7864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1808.981097][ T7864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1808.990808][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1809.154378][ T7824] virt_wifi0 speed is unknown, defaulting to 1000 [ 1809.163189][ T7852] lo speed is unknown, defaulting to 1000 [ 1809.183235][ T7824] lo speed is unknown, defaulting to 1000 [ 1809.356742][ T7877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7985'. [ 1809.380555][ T7877] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7985'. [ 1809.390773][ T7877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7985'. [ 1809.742542][ T7897] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7991'. [ 1809.753915][ T7852] virt_wifi0 speed is unknown, defaulting to 1000 [ 1809.781616][ T7852] lo speed is unknown, defaulting to 1000 [ 1809.813053][ T7905] veth0: entered promiscuous mode [ 1810.151706][ T7911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7995'. [ 1810.390788][ T7919] netlink: 'syz.2.7996': attribute type 3 has an invalid length. [ 1810.428561][ T7919] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7996'. [ 1810.757348][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1810.934331][ T7937] netlink: 'syz.4.8003': attribute type 1 has an invalid length. [ 1813.840401][ T7959] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1813.867246][ T7959] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1813.892195][ T7975] __nla_validate_parse: 5 callbacks suppressed [ 1813.892218][ T7975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8011'. [ 1813.914454][ T7973] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8010'. [ 1814.076755][ T7959] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1814.123773][ T7959] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1814.238858][ T7959] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1814.255249][ T7959] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1814.291335][ T7991] netlink: 332 bytes leftover after parsing attributes in process `syz.1.8014'. [ 1814.319436][ T7991] netlink: 'syz.1.8014': attribute type 9 has an invalid length. [ 1814.327714][ T7991] netlink: 108 bytes leftover after parsing attributes in process `syz.1.8014'. [ 1814.347583][ T7959] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1814.360801][ T7991] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8014'. [ 1814.386125][ T7959] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1814.542286][ T8007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8017'. [ 1814.573174][ T8007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8017'. [ 1814.585351][ T4359] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1814.599637][ T8010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8018'. [ 1814.610040][ T4359] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1814.646143][ T4359] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1814.666612][ T4359] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1814.732293][ T388] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1814.767044][ T388] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1814.803529][ T8015] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8020'. [ 1814.839543][ T388] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1814.862953][ T388] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1815.145424][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8026'. [ 1815.366516][ T8049] lo speed is unknown, defaulting to 1000 [ 1815.551175][ T8054] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1815.929542][ T8049] virt_wifi0 speed is unknown, defaulting to 1000 [ 1815.938317][ T8049] lo speed is unknown, defaulting to 1000 [ 1817.035004][ T8095] IPVS: Scheduler module ip_vs_ü not found [ 1817.237125][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1817.472640][ T8113] block nbd0: not configured, cannot reconfigure [ 1817.542957][ T8116] netlink: 'syz.1.8042': attribute type 1 has an invalid length. [ 1817.565807][ T8116] netlink: 'syz.1.8042': attribute type 2 has an invalid length. [ 1817.806036][ T8081] gretap3: entered promiscuous mode [ 1817.821870][ T8081] batman_adv: batadv0: Adding interface: gretap3 [ 1817.829523][ T8081] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1817.859219][ T8081] batman_adv: batadv0: Not using interface gretap3 (retrying later): interface not active [ 1818.508249][ T8135] net_ratelimit: 2 callbacks suppressed [ 1818.508270][ T8135] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1820.187709][ T8185] __nla_validate_parse: 7 callbacks suppressed [ 1820.187736][ T8185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8057'. [ 1820.392679][ T8191] IPVS: length: 4096 != 24 [ 1832.715418][ T8236] bond0: (slave rose0): Error: Device can not be enslaved while up [ 1832.803638][ T8244] bond0: (slave team0): Releasing backup interface [ 1832.825839][ T8244] bond0: (slave dummy0): Releasing backup interface [ 1832.859361][ T8244] bridge_slave_0: left allmulticast mode [ 1832.875450][ T8244] bridge_slave_0: left promiscuous mode [ 1832.891042][ T8244] bridge0: port 1(bridge_slave_0) entered disabled state [ 1832.914156][ T8244] bond0: (slave bond_slave_0): Releasing backup interface [ 1832.934425][ T8244] bond0: (slave bond_slave_1): Releasing backup interface [ 1832.953847][ T8244] team0: Port device team_slave_1 removed [ 1832.967158][ T8244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1832.985848][ T8244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1832.990917][ T8256] netlink: 'syz.0.8072': attribute type 1 has an invalid length. [ 1833.002110][ T8244] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1833.007595][ T8256] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8072'. [ 1833.035308][ T8251] team0: No ports can be present during mode change [ 1833.054623][ T8258] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.8071'. [ 1833.076436][ T8255] netlink: 'syz.1.8071': attribute type 1 has an invalid length. [ 1833.291159][ T8255] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8071'. [ 1833.417598][ T8258] netlink: 'syz.1.8071': attribute type 6 has an invalid length. [ 1833.441632][ T8269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8075'. [ 1833.451113][ T8269] netlink: 23 bytes leftover after parsing attributes in process `syz.0.8075'. [ 1833.619079][ T8280] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8079'. [ 1833.631888][ T8280] nbd: nbd2 already in use [ 1833.635696][ T8284] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8080'. [ 1833.638229][ T8280] block nbd2: NBD_DISCONNECT [ 1833.651217][ T8280] block nbd2: Send disconnect failed -32 [ 1833.657009][ T8280] block nbd2: shutting down sockets [ 1833.670495][ T8287] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8081'. [ 1833.693156][ T8283] tipc: New replicast peer: 255.255.255.255 [ 1833.707954][ T8283] tipc: Enabled bearer , priority 10 [ 1833.747957][ T8290] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8082'. [ 1833.768257][ T4353] pimreg: left allmulticast mode [ 1833.815029][ T8293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8083'. [ 1833.888654][ T4353] bond12 (unregistering): (slave ip6gretap3): Releasing active interface [ 1833.899287][ T4353] ip6gretap3 (unregistering): left allmulticast mode [ 1834.044402][ T4353] bond10 (unregistering): (slave vti1): Releasing backup interface [ 1834.054524][ T4353] vti1 (unregistering): left promiscuous mode [ 1834.131584][ T4353] bond0 (unregistering): (slave geneve2): Releasing active interface [ 1834.140166][ T4353] geneve2 (unregistering): left promiscuous mode [ 1834.613995][ T4353] bond1 (unregistering): Released all slaves [ 1834.643127][ T4353] bond0 (unregistering): left promiscuous mode [ 1834.667960][ T4353] bond0 (unregistering): Released all slaves [ 1834.708623][ T4353] bond2 (unregistering): Released all slaves [ 1834.733820][ T4353] bond3 (unregistering): (slave vlan0): Releasing backup interface [ 1834.745068][ T4353] bond3 (unregistering): Released all slaves [ 1834.761054][ T4353] bond4 (unregistering): Released all slaves [ 1834.778655][ T4353] bond5 (unregistering): (slave veth5): Releasing active interface [ 1834.788156][ T4353] bond5 (unregistering): Released all slaves [ 1834.805321][ T4353] bond6 (unregistering): Released all slaves [ 1834.828690][ T4353] bond7 (unregistering): Released all slaves [ 1834.848140][ T4353] bond8 (unregistering): Released all slaves [ 1834.869555][ T4353] bond9 (unregistering): (slave batadv1): Releasing active interface [ 1834.884540][ T4353] batadv1: left promiscuous mode [ 1834.889797][ T4353] batadv1: left allmulticast mode [ 1834.895847][ T4353] bond9 (unregistering): Released all slaves [ 1834.911215][ T4353] bond10 (unregistering): Released all slaves [ 1834.926291][ T4353] bond11 (unregistering): Released all slaves [ 1834.943937][ T4353] bond12 (unregistering): Released all slaves [ 1834.982567][ T2029] tipc: Node number set to 11777 [ 1835.083439][ T4353] hmac(sha224): left promiscuous mode [ 1835.254202][ T4353] m1Ie5èÿá: left promiscuous mode [ 1835.365578][ T8313] macvtap1: entered promiscuous mode [ 1835.385125][ T8313] macvtap1: entered allmulticast mode [ 1835.404506][ T8313] dummy0: entered promiscuous mode [ 1835.411103][ T8313] dummy0: entered allmulticast mode [ 1835.435375][ T8313] team0: Device macvtap1 failed to register rx_handler [ 1835.447914][ T8322] netlink: 'syz.4.8090': attribute type 1 has an invalid length. [ 1835.469581][ T8313] dummy0: left allmulticast mode [ 1835.474812][ T8313] dummy0: left promiscuous mode [ 1835.548081][ T4353] : left promiscuous mode [ 1835.604101][ T8322] bond2: entered promiscuous mode [ 1835.614317][ T8322] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1835.676026][ T4353] tipc: Left network mode [ 1835.867713][ T8343] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1835.916670][ T8343] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1836.789187][ T8380] bond3: entered allmulticast mode [ 1836.811639][ T8377] netlink: 'syz.4.8103': attribute type 4 has an invalid length. [ 1836.839862][ T8377] bridge2: entered promiscuous mode [ 1836.845135][ T8377] bridge2: entered allmulticast mode [ 1836.856660][ T8377] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 1836.943672][ T8383] Unsupported ieee802154 address type: 0 [ 1836.959091][ T8385] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 1836.992691][ T8383] x_tables: duplicate underflow at hook 3 [ 1837.387131][ T4353] batadv0: left promiscuous mode [ 1837.452146][ T4353] hsr_slave_0: left promiscuous mode [ 1837.478590][ T4353] hsr_slave_1: left promiscuous mode [ 1838.310668][ T4353] ` (unregistering): Port device dummy0 removed [ 1838.339191][ T7815] smc: removing ib device syz0 [ 1840.014171][ T4353] IPVS: stop unused estimator thread 0... [ 1843.831885][ T8480] tipc: Enabled bearer , priority 0 [ 1843.938392][ T8495] __nla_validate_parse: 6 callbacks suppressed [ 1843.938413][ T8495] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8121'. [ 1844.198718][ T8499] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1844.358383][ T8499] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1844.508770][ T8499] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1844.596639][ T8499] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1844.670335][ T4359] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1844.689017][ T4359] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1844.708924][ T4359] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1844.725114][ T4359] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1844.834215][ T8525] 5nè‹Ò: entered promiscuous mode [ 1844.845126][ T8533] netlink: 'syz.3.8133': attribute type 1 has an invalid length. [ 1844.892875][ T8533] bond5: entered promiscuous mode [ 1844.898283][ T8533] bond5: entered allmulticast mode [ 1844.905014][ T8533] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1844.913392][ T8530] netlink: 'syz.4.8134': attribute type 32 has an invalid length. [ 1844.962077][ T8538] erspan1: entered allmulticast mode [ 1845.000167][ T8538] bond5: (slave erspan1): making interface the new active one [ 1845.019043][ T8542] netlink: 'syz.1.8135': attribute type 4 has an invalid length. [ 1845.026846][ T8542] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8135'. [ 1845.041452][ T8538] erspan1: entered promiscuous mode [ 1845.049674][ T8538] bond5: (slave erspan1): Enslaving as an active interface with an up link [ 1845.107203][ T8550] netlink: 'syz.4.8137': attribute type 2 has an invalid length. [ 1845.115247][ T8550] netlink: 'syz.4.8137': attribute type 11 has an invalid length. [ 1845.123570][ T8550] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8137'. [ 1845.444525][ T8563] xt_hashlimit: size too large, truncated to 1048576 [ 1845.542258][ T8567] netlink: 'syz.3.8143': attribute type 3 has an invalid length. [ 1845.596094][ T8567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8143'. [ 1845.618450][ T8567] nbd: nbd3 already in use [ 1845.685085][ T8567] bridge0: left promiscuous mode [ 1845.696822][ T8567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1845.706788][ T8567] 8021q: adding VLAN 0 to HW filter on device team0 [ 1845.724437][ T8567] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1846.034742][ T8595] block nbd3: NBD_DISCONNECT [ 1846.062622][ T8595] block nbd3: Send disconnect failed -32 [ 1846.079108][ T8595] block nbd3: shutting down sockets [ 1846.176498][ T8604] geneve5: entered promiscuous mode [ 1846.259688][ T8602] virt_wifi0 speed is unknown, defaulting to 1000 [ 1846.268291][ T8602] lo speed is unknown, defaulting to 1000 [ 1846.663760][ T8624] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8155'. [ 1846.751183][ T8624] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8155'. [ 1846.994215][ T8633] tipc: Enabling of bearer rejected, failed to enable media [ 1847.014963][ T8631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8158'. [ 1847.270482][ T8646] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8161'. [ 1847.284584][ T8649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1847.294014][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1847.304732][ T8649] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8163'. [ 1847.327512][ T8649] syzkaller1: entered promiscuous mode [ 1847.333141][ T8649] syzkaller1: entered allmulticast mode [ 1847.339196][ T30] audit: type=1804 audit(1773911072.031:10): pid=8649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.8163" name="/newroot/439/cgroup.controllers" dev="tmpfs" ino=2257 res=1 errno=0 [ 1847.463210][ T8653] netlink: 292 bytes leftover after parsing attributes in process `syz.4.8162'. [ 1847.464233][ T30] audit: type=1800 audit(1773911072.031:11): pid=8649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8163" name="cgroup.controllers" dev="tmpfs" ino=2257 res=0 errno=0 [ 1847.693158][ T8626] delete_channel: no stack [ 1847.955672][ T8665] netlink: 'syz.1.8167': attribute type 1 has an invalid length. [ 1848.020981][ T8665] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1848.155186][ T8665] veth9: entered promiscuous mode [ 1848.207762][ T8665] bond10: (slave veth9): Enslaving as an active interface with an up link [ 1848.651032][ T8704] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1848.796543][ T8711] syzkaller0: entered promiscuous mode [ 1848.802324][ T8711] syzkaller0: entered allmulticast mode [ 1848.956506][ T8712] tipc: Enabled bearer , priority 0 [ 1849.112465][ T8723] __nla_validate_parse: 1 callbacks suppressed [ 1849.112487][ T8723] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8180'. [ 1849.139198][ T8720] virt_wifi0 speed is unknown, defaulting to 1000 [ 1849.165265][ T8716] virt_wifi0 speed is unknown, defaulting to 1000 [ 1849.174079][ T8720] lo speed is unknown, defaulting to 1000 [ 1849.191357][ T8716] lo speed is unknown, defaulting to 1000 [ 1849.540977][ T8710] tipc: Resetting bearer [ 1849.595435][ T8710] tipc: Disabling bearer [ 1849.648014][ T8732] bond9: option miimon: invalid value (18446744073709551607) [ 1849.655609][ T8732] bond9: option miimon: allowed values 0 - 2147483647 [ 1849.669779][ T8732] bond9 (unregistering): Released all slaves [ 1850.129671][ T8745] virt_wifi0 speed is unknown, defaulting to 1000 [ 1850.130435][ T8753] netlink: 'syz.0.8187': attribute type 1 has an invalid length. [ 1850.147827][ T8745] lo speed is unknown, defaulting to 1000 [ 1850.156304][ T8755] netlink: 84 bytes leftover after parsing attributes in process `syz.2.8185'. [ 1850.199979][ T8755] netlink: 84 bytes leftover after parsing attributes in process `syz.2.8185'. [ 1850.228948][ T8753] netlink: 'syz.0.8187': attribute type 1 has an invalid length. [ 1850.560184][ T8765] bond9: Unable to set down delay as MII monitoring is disabled [ 1850.578965][ T8765] bond9 (unregistering): Released all slaves [ 1851.264541][ T8790] syzkaller1: entered promiscuous mode [ 1851.274023][ T8790] syzkaller1: entered allmulticast mode [ 1852.332484][ T8829] delete_channel: no stack [ 1852.345554][ T8830] netlink: 'syz.4.8199': attribute type 13 has an invalid length. [ 1852.502330][ T8830] syz_tun: left promiscuous mode [ 1852.552131][ T8830] syz_tun: left allmulticast mode [ 1852.621889][ T8830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1852.657286][ T8830] 8021q: adding VLAN 0 to HW filter on device team0 [ 1852.705689][ T8830] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1852.756509][ T1791] lo speed is unknown, defaulting to 1000 [ 1852.765551][ T1791] syz2: Port: 1 Link ACTIVE [ 1852.819313][ T8844] netlink: 'syz.1.8203': attribute type 11 has an invalid length. [ 1853.088307][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1853.505721][ T8871] virt_wifi0 speed is unknown, defaulting to 1000 [ 1853.515584][ T8875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8207'. [ 1853.598916][ T8871] lo speed is unknown, defaulting to 1000 [ 1853.726000][ T8883] syzkaller0: entered promiscuous mode [ 1853.740881][ T8883] syzkaller0: entered allmulticast mode [ 1854.462161][ T8909] netlink: 'syz.0.8215': attribute type 10 has an invalid length. [ 1854.876581][ T8930] netlink: 256 bytes leftover after parsing attributes in process `syz.3.8221'. [ 1854.914961][ T8929] IPVS: set_ctl: invalid protocol: 102 172.30.1.5:20002 [ 1855.285509][ T8941] netlink: 'syz.3.8223': attribute type 13 has an invalid length. [ 1855.407853][ T8941] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1855.522825][ T8941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1855.532197][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1855.658597][T19344] IPVS: starting estimator thread 0... [ 1855.753381][ T8959] IPVS: using max 28 ests per chain, 67200 per kthread [ 1855.765321][ T8961] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8228'. [ 1855.806736][ T8961] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8228'. [ 1855.817338][ T8965] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 1855.846771][ T8961] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8228'. [ 1855.907743][ T8961] bond0: entered promiscuous mode [ 1855.916179][ T8961] gretap0: entered promiscuous mode [ 1855.923660][ T8961] hsr1: entered promiscuous mode [ 1856.183231][ T8979] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1856.218938][ T8979] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1863.160491][ T9023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8237'. [ 1863.171108][ T9009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8232'. [ 1863.345548][ T9033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8236'. [ 1864.281616][ T9072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8248'. [ 1864.333064][ T9075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8249'. [ 1864.405859][ T9079] netlink: 'syz.1.8251': attribute type 10 has an invalid length. [ 1864.468329][ T9079] bond0: (slave bridge0): Enslaving as an active interface with a down link [ 1864.483977][ T9079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8251'. [ 1864.505342][ T9079] bridge_slave_1: left allmulticast mode [ 1864.533730][ T9079] bridge_slave_1: left promiscuous mode [ 1864.545951][ T9079] bridge0: port 2(bridge_slave_1) entered disabled state [ 1864.560763][ T9079] bridge_slave_0: left allmulticast mode [ 1864.569932][ T9079] bridge_slave_0: left promiscuous mode [ 1864.576000][ T9079] bridge0: port 1(bridge_slave_0) entered disabled state [ 1864.644256][ T9079] bond0: (slave bridge0): Releasing backup interface [ 1864.659541][ T9091] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.8255'. [ 1865.003043][ T9097] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1865.151294][ T9112] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1865.188906][ T9108] netlink: 192 bytes leftover after parsing attributes in process `syz.1.8261'. [ 1865.248224][ T9097] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1865.389962][ T9097] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1865.432122][ T9115] syzkaller0: entered promiscuous mode [ 1865.438658][ T9115] syzkaller0: entered allmulticast mode [ 1865.605813][ T9097] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1865.709157][ T4353] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1865.741711][ T4353] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1865.761450][ T9133] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8266'. [ 1865.805099][ T4353] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1865.835899][ T4353] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1866.088292][ T9121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8262'. [ 1866.686072][ T9163] tipc: Enabling of bearer rejected, already enabled [ 1866.713954][ T9163] mac80211_hwsim hwsim82 syzkaller0: left promiscuous mode [ 1866.821694][ T9163] tipc: Resetting bearer [ 1866.873590][ T9168] virt_wifi0 speed is unknown, defaulting to 1000 [ 1866.900670][ T9168] lo speed is unknown, defaulting to 1000 [ 1866.958776][ T9163] virt_wifi0 speed is unknown, defaulting to 1000 [ 1867.003469][ T9163] lo speed is unknown, defaulting to 1000 [ 1867.120644][ T9186] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1867.886692][ T9231] netlink: 'syz.1.8290': attribute type 21 has an invalid length. [ 1868.012431][ T9216] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1868.065416][ T9216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1868.286311][ T9219] team0 (unregistering): Port device team_slave_0 removed [ 1868.302256][ T9219] team0 (unregistering): Port device team_slave_1 removed [ 1868.323923][ T9246] sch_fq: defrate 4294967293 ignored. [ 1868.386036][ T388] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1868.437098][ T388] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1868.468174][ T388] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1868.490831][ T388] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1868.573925][ T9259] __nla_validate_parse: 3 callbacks suppressed [ 1868.573955][ T9259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8299'. [ 1868.768076][ T9259] bridge0: port 1(bridge_slave_0) entered disabled state [ 1868.870270][ T388] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1868.879389][ T388] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1868.918273][ T2029] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1868.973895][ T9269] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1869.099642][ T9280] vlan3: entered promiscuous mode [ 1869.104979][ T9280] vlan0: entered promiscuous mode [ 1869.128493][ T9278] tipc: Enabling of bearer rejected, already enabled [ 1869.148774][ T9278] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8303'. [ 1869.427190][T19344] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1869.727239][ T2029] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1870.368032][ T9317] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8314'. [ 1870.399796][ T9319] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8316'. [ 1870.426126][ T9317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8314'. [ 1870.479940][ T9313] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8314'. [ 1870.501597][ T9313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8314'. [ 1870.735908][ T9327] virt_wifi0 speed is unknown, defaulting to 1000 [ 1870.744927][ T9327] lo speed is unknown, defaulting to 1000 [ 1870.773813][ T9329] 8021q: VLANs not supported on vcan0 [ 1870.786457][ T9331] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8318'. [ 1870.878459][ T9334] virt_wifi0 speed is unknown, defaulting to 1000 [ 1870.886768][ T9334] lo speed is unknown, defaulting to 1000 [ 1871.080055][ T9348] bridge7: entered allmulticast mode [ 1871.116680][ T9339] virt_wifi0 speed is unknown, defaulting to 1000 [ 1871.163166][ T9339] lo speed is unknown, defaulting to 1000 [ 1871.201054][ T9348] nbd: socks must be embedded in a SOCK_ITEM attr [ 1871.210362][ T9348] block nbd0: shutting down sockets [ 1871.297881][ T9346] nbd: socks must be embedded in a SOCK_ITEM attr [ 1871.304611][ T9346] block nbd0: shutting down sockets [ 1871.479081][ T9361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8325'. [ 1871.505179][ T9361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1871.520789][ T9361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1871.547749][ T9361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1871.583420][ T9361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1871.596079][ T9366] netlink: 'syz.3.8327': attribute type 7 has an invalid length. [ 1871.605004][ T9366] netlink: 'syz.3.8327': attribute type 22 has an invalid length. [ 1871.654442][ T9361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1871.672421][ T9361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1871.682213][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1871.895451][ T9376] xt_hashlimit: invalid rate [ 1872.136342][ T9387] netlink: 120 bytes leftover after parsing attributes in process `syz.1.8330'. [ 1872.164723][ T9387] netlink: 'syz.1.8330': attribute type 2 has an invalid length. [ 1872.372637][ T9391] can: request_module (can-proto-0) failed. [ 1872.381962][ T9386] virt_wifi0 speed is unknown, defaulting to 1000 [ 1872.504191][ T9397] bond7 (unregistering): Released all slaves [ 1872.574668][ T9386] lo speed is unknown, defaulting to 1000 [ 1872.626461][ T9405] batadv0: entered promiscuous mode [ 1872.671960][ T9405] batadv0: left promiscuous mode [ 1872.761502][ T9413] openvswitch: netlink: Missing valid actions attribute. [ 1872.775905][ T9413] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1872.837170][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1873.178911][ T7815] [ 1873.181316][ T7815] ============================================ [ 1873.187603][ T7815] WARNING: possible recursive locking detected [ 1873.193857][ T7815] syzkaller #0 Not tainted [ 1873.198301][ T7815] -------------------------------------------- [ 1873.204487][ T7815] kworker/u8:13/7815 is trying to acquire lock: [ 1873.210756][ T7815] ffff88801e6cc558 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 1873.220823][ T7815] [ 1873.220823][ T7815] but task is already holding lock: [ 1873.228334][ T7815] ffff88805b157558 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 1873.238244][ T7815] [ 1873.238244][ T7815] other info that might help us debug this: [ 1873.246333][ T7815] Possible unsafe locking scenario: [ 1873.246333][ T7815] [ 1873.253839][ T7815] CPU0 [ 1873.257151][ T7815] ---- [ 1873.260487][ T7815] lock(&qdisc_xmit_lock_key#3); [ 1873.265555][ T7815] lock(&qdisc_xmit_lock_key#3); [ 1873.270624][ T7815] [ 1873.270624][ T7815] *** DEADLOCK *** [ 1873.270624][ T7815] [ 1873.278788][ T7815] May be due to missing lock nesting notation [ 1873.278788][ T7815] [ 1873.287120][ T7815] 11 locks held by kworker/u8:13/7815: [ 1873.292586][ T7815] #0: ffff88802b640948 ((wq_completion)bond5#7){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1873.303679][ T7815] #1: ffffc900039e7c40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1873.316648][ T7815] #2: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf8/0x17e0 [ 1873.326332][ T7815] #3: ffffffff8e75e480 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x28b/0x3870 [ 1873.336346][ T7815] #4: ffff888029f80228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x114b/0x3870 [ 1873.349005][ T7815] #5: ffff88805b157558 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 1873.359317][ T7815] #6: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 1873.368331][ T7815] #7: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3c2/0x1070 [ 1873.378102][ T7815] #8: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 1873.387004][ T7815] #9: ffffffff8e75e480 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x28b/0x3870 [ 1873.396968][ T7815] #10: ffff888079811228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x114b/0x3870 [ 1873.409710][ T7815] [ 1873.409710][ T7815] stack backtrace: [ 1873.415616][ T7815] CPU: 0 UID: 0 PID: 7815 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 1873.415638][ T7815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1873.415651][ T7815] Workqueue: bond5 bond_alb_monitor [ 1873.415673][ T7815] Call Trace: [ 1873.415680][ T7815] [ 1873.415689][ T7815] dump_stack_lvl+0xe8/0x150 [ 1873.415716][ T7815] print_deadlock_bug+0x279/0x290 [ 1873.415745][ T7815] __lock_acquire+0x253f/0x2cf0 [ 1873.415769][ T7815] ? skb_network_protocol+0x23d/0x3f0 [ 1873.415790][ T7815] ? netif_skb_features+0x9bc/0xe40 [ 1873.415807][ T7815] ? ret_from_fork_asm+0x1a/0x30 [ 1873.415834][ T7815] ? validate_xmit_skb+0xc5f/0x14a0 [ 1873.415854][ T7815] lock_acquire+0xf0/0x2e0 [ 1873.415876][ T7815] ? sch_direct_xmit+0x15f/0x4c0 [ 1873.415903][ T7815] _raw_spin_lock+0x2e/0x40 [ 1873.415928][ T7815] ? sch_direct_xmit+0x15f/0x4c0 [ 1873.415949][ T7815] sch_direct_xmit+0x15f/0x4c0 [ 1873.415979][ T7815] ? __pfx_sch_direct_xmit+0x10/0x10 [ 1873.416001][ T7815] ? arp_create+0x140/0xa00 [ 1873.416026][ T7815] ? arp_send_dst+0xa7/0x2a0 [ 1873.416053][ T7815] __dev_queue_xmit+0x1b20/0x3870 [ 1873.416077][ T7815] ? __dev_queue_xmit+0x28b/0x3870 [ 1873.416098][ T7815] ? arpt_do_table+0x261/0x1ec0 [ 1873.416212][ T7815] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1873.416236][ T7815] ? __pfx_arpt_do_table+0x10/0x10 [ 1873.416257][ T7815] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1873.416284][ T7815] ? NF_HOOK+0xa2/0x3c0 [ 1873.416310][ T7815] NF_HOOK+0x33a/0x3c0 [ 1873.416335][ T7815] ? __pfx_arp_xmit_finish+0x10/0x10 [ 1873.416361][ T7815] ? NF_HOOK+0xa2/0x3c0 [ 1873.416384][ T7815] ? __pfx_NF_HOOK+0x10/0x10 [ 1873.416410][ T7815] ? __pfx_arp_xmit_finish+0x10/0x10 [ 1873.416440][ T7815] arp_xmit+0x16c/0x270 [ 1873.416465][ T7815] ? arp_xmit+0x23/0x270 [ 1873.416490][ T7815] arp_solicit+0xbe0/0xe40 [ 1873.416519][ T7815] ? arp_solicit+0x119/0xe40 [ 1873.416545][ T7815] ? __pfx_arp_solicit+0x10/0x10 [ 1873.416572][ T7815] ? __neigh_event_send+0xe9d/0x1530 [ 1873.416597][ T7815] ? __pfx_arp_solicit+0x10/0x10 [ 1873.416623][ T7815] __neigh_event_send+0xf05/0x1530 [ 1873.416652][ T7815] neigh_resolve_output+0x198/0x750 [ 1873.416677][ T7815] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 1873.416698][ T7815] ? ip_finish_output2+0x3c2/0x1070 [ 1873.416714][ T7815] ip_finish_output2+0xca9/0x1070 [ 1873.416729][ T7815] ? ip_skb_dst_mtu+0x80b/0xa50 [ 1873.416758][ T7815] ? ip_finish_output+0x40e/0x530 [ 1873.416784][ T7815] ip_output+0x29f/0x450 [ 1873.416810][ T7815] ? ip_output+0x5b/0x450 [ 1873.416835][ T7815] iptunnel_xmit+0x61d/0xb50 [ 1873.416888][ T7815] ip_tunnel_xmit+0x193a/0x1f20 [ 1873.416952][ T7815] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 1873.416993][ T7815] ? __pfx_gre_build_header+0x10/0x10 [ 1873.417045][ T7815] ? kmem_cache_free+0x187/0x630 [ 1873.417069][ T7815] ? pskb_expand_head+0x4bb/0x1320 [ 1873.417094][ T7815] __gre_xmit+0x19e/0x240 [ 1873.417122][ T7815] ? __pfx___gre_xmit+0x10/0x10 [ 1873.417153][ T7815] erspan_xmit+0xa81/0x1670 [ 1873.417190][ T7815] ? __pfx_erspan_xmit+0x10/0x10 [ 1873.417224][ T7815] dev_hard_start_xmit+0x2d8/0x870 [ 1873.417255][ T7815] sch_direct_xmit+0x251/0x4c0 [ 1873.417280][ T7815] ? __pfx_sch_direct_xmit+0x10/0x10 [ 1873.417302][ T7815] ? kthread+0x320/0x470 [ 1873.417318][ T7815] ? ret_from_fork+0x51e/0xb90 [ 1873.417351][ T7815] __dev_queue_xmit+0x1b20/0x3870 [ 1873.417375][ T7815] ? __dev_queue_xmit+0x28b/0x3870 [ 1873.417398][ T7815] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1873.417418][ T7815] ? rcu_is_watching+0x15/0xb0 [ 1873.417443][ T7815] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1873.417463][ T7815] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 1873.417488][ T7815] ? alb_send_lp_vid+0x14e/0x550 [ 1873.417509][ T7815] alb_send_lp_vid+0x348/0x550 [ 1873.417531][ T7815] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 1873.417549][ T7815] ? __lock_acquire+0x6b5/0x2cf0 [ 1873.417573][ T7815] ? bond_mii_monitor+0x2e13/0x2fd0 [ 1873.417621][ T7815] alb_send_learning_packets+0x12c/0x300 [ 1873.417640][ T7815] ? register_lock_class+0x31/0x2e0 [ 1873.417662][ T7815] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 1873.417686][ T7815] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 1873.417713][ T7815] bond_alb_monitor+0x3d5/0x17e0 [ 1873.417733][ T7815] ? bond_alb_monitor+0xf8/0x17e0 [ 1873.417752][ T7815] ? __pfx_bond_alb_monitor+0x10/0x10 [ 1873.417771][ T7815] ? process_scheduled_works+0xa25/0x1830 [ 1873.417793][ T7815] ? process_scheduled_works+0xa25/0x1830 [ 1873.417816][ T7815] process_scheduled_works+0xb02/0x1830 [ 1873.417849][ T7815] ? __pfx_process_scheduled_works+0x10/0x10 [ 1873.417874][ T7815] ? assign_work+0x3d5/0x5e0 [ 1873.417898][ T7815] worker_thread+0xa50/0xfc0 [ 1873.417932][ T7815] kthread+0x388/0x470 [ 1873.417948][ T7815] ? __pfx_worker_thread+0x10/0x10 [ 1873.417975][ T7815] ? __pfx_kthread+0x10/0x10 [ 1873.417992][ T7815] ret_from_fork+0x51e/0xb90 [ 1873.418016][ T7815] ? __pfx_ret_from_fork+0x10/0x10 [ 1873.418037][ T7815] ? __switch_to+0xc7d/0x1450 [ 1873.418067][ T7815] ? __pfx_kthread+0x10/0x10 [ 1873.418083][ T7815] ret_from_fork_asm+0x1a/0x30 [ 1873.418117][ T7815] [ 1874.177487][ T9450] netlink: 'syz.4.8344': attribute type 2 has an invalid length. [ 1874.407674][ T9430] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 1874.415247][ T9424] wg1: entered promiscuous mode [ 1874.429105][ T9424] wg1: entered allmulticast mode [ 1874.466295][ T9450] hmac(sha224): entered promiscuous mode [ 1874.483373][ T388] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1874.513782][ T388] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1874.538359][ T388] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1874.546771][ T388] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1874.559968][ T9460] __nla_validate_parse: 2 callbacks suppressed [ 1874.559991][ T9460] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8346'. [ 1874.575622][ T388] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1874.586082][ T388] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1874.609072][ T9464] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8347'. [ 1874.623417][ T388] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1874.633268][ T388] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 1880.541849][ T388] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1880.642130][ T388] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1880.692123][ T388] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1880.729088][ T388] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1880.855919][ T388] bridge_slave_0: left allmulticast mode [ 1880.878562][ T388] bridge_slave_0: left promiscuous mode [ 1880.884306][ T388] bridge0: port 1(bridge_slave_0) entered disabled state [ 1881.036175][ T388] bond6 (unregistering): (slave gretap1): Releasing active interface [ 1881.309968][ T388] bond0 (unregistering): left promiscuous mode [ 1881.316162][ T388] bond_slave_0: left promiscuous mode [ 1881.321792][ T388] bond_slave_1: left promiscuous mode [ 1881.327704][ T388] bridge_slave_1: left promiscuous mode [ 1881.334578][ T388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1881.343640][ T388] bond_slave_0: left allmulticast mode [ 1881.351011][ T388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1881.361715][ T388] bond_slave_1: left allmulticast mode [ 1881.368895][ T388] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1881.378516][ T388] bridge_slave_1: left allmulticast mode [ 1881.384947][ T388] bond0 (unregistering): Released all slaves [ 1881.393398][ T388] bond1 (unregistering): Released all slaves [ 1881.403468][ T388] bond2 (unregistering): Released all slaves [ 1881.413983][ T388] bond3 (unregistering): (slave macvlan3): Releasing backup interface [ 1881.422905][ T388] veth0_to_bond: left allmulticast mode [ 1881.429226][ T388] veth0_to_bond: left promiscuous mode [ 1881.436169][ T388] bond3 (unregistering): Released all slaves [ 1881.446457][ T388] bond4 (unregistering): Released all slaves [ 1881.456355][ T388] bond5 (unregistering): Released all slaves [ 1881.466203][ T388] bond6 (unregistering): Released all slaves [ 1881.477099][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1881.536752][ T388] !: left promiscuous mode [ 1881.612477][ T388] tipc: Disabling bearer [ 1881.618482][ T388] tipc: Disabling bearer [ 1881.624531][ T388] tipc: Left network mode [ 1881.969486][ T388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1881.977303][ T388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1881.989420][ T388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1881.996844][ T388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1882.008437][ T388] veth1_to_team: left promiscuous mode [ 1882.013977][ T388] veth1_macvtap: left promiscuous mode [ 1882.020006][ T388] veth0_macvtap: left promiscuous mode [ 1882.025551][ T388] veth1_vlan: left promiscuous mode [ 1882.144689][ T388] team0 (unregistering): Port device macvlan1 removed [ 1882.219735][ T388] team0 (unregistering): Port device team_slave_1 removed [ 1882.232541][ T388] team0 (unregistering): Port device team_slave_0 removed [ 1882.545567][ T388] IPVS: stop unused estimator thread 0... [ 1882.950460][ T388] bond5 (unregistering): (slave erspan1): Releasing active interface [ 1882.958659][ T388] erspan1 (unregistering): left promiscuous mode [ 1883.003909][ T388] bond4 (unregistering): (slave geneve0): Releasing active interface