last executing test programs: 3.723130104s ago: executing program 4 (id=2866): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x2c060000) unshare(0x60020580) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f5"], 0x78) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xdc}, 0x2000) pwrite64(r5, 0x0, 0x0, 0x1fb) openat$cgroup_devices(r5, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r6, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x50) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000000180)="c5", 0x1, 0x40080, &(0x7f00000000c0)={0xa, 0x4e24, 0x40, @local, 0x13}, 0x1c) ioctl$XFS_IOC_FSGEOMETRY_V1(r0, 0x80705864, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x1000, 0x400, 0x3}, &(0x7f0000000140)=0x10) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') 3.675917604s ago: executing program 2 (id=2867): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket(0x848000000015, 0x805, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f00000005c0), 0x10) write(r0, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14) r2 = socket(0x1d, 0x4, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4e5ef4b7a78df6d, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}}, 0x0) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500030080ff00000500030080ff00000500030080ff000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r10, &(0x7f0000000080)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r12 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r12, 0x0, 0x4000) sendmsg$nl_route_sched(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c80)=@newtfilter={0x2a30, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0x0, 0x10}, {0x7, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x29fc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_ACT={0x340, 0x2, [@m_ct={0x8c, 0xe, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x2}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_CT_LABELS_MASK={0x14, 0x8, "0b5b7ce397ef4137bf8341a04a63cb2c"}]}, {0x31, 0x6, "a7075697340c8a7eef13f32549fc9fa8d1ad29bde7ab96de6ba3d5f980fed190345b6dede70749daa3ed5b58fa"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0x6c, 0xe, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xda9f, 0x8, 0x4, 0x36, 0x7}}]}, {0x25, 0x6, "d6f8d945fb6e64b9fcc373f4996c2f3f97b59c86c9ad46c7fb7569d65bbdf2624b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_connmark={0xe0, 0x2, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffff, 0x7ff, 0x4, 0x3, 0x9}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3ff, 0x0, 0x4, 0x4, 0x80000000}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfff, 0x3ff, 0x7, 0x100, 0x7}, 0x2}}]}, {0x5c, 0x6, "4ae8e5ca1b8c12792598a40b3a995105cdd7155ccbbceb0fd3da358d5e347beb9f7c63193a22b7e741910ad52094a4fbaa1373002f4ee33da75138cb44c9a9b5ea39e646861093bcf5ad2a2d62569be9fc778f0cb755c2fd"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_connmark={0x164, 0x17, 0x0, 0x0, {{0xd}, {0x100, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x10000000, 0x7ff, 0x5}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x4, 0x40000001, 0xf8f5, 0x6c72}, 0xf7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffff, 0x7, 0x2, 0x0, 0x9}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2c, 0x8, 0x0, 0x3a00, 0x755d096e}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfdfd0864, 0x5, 0x6, 0x8, 0x1}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xdf4f, 0x40010000, 0x3, 0x7, 0xd}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x4, 0x2, 0x1, 0x5}, 0x10}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x56b7, 0xd57, 0x10000006, 0xae69}, 0x7f}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x5, 0x3, 0x1407, 0xfff}, 0x5}}]}, {0x38, 0x6, "403ff6b1f7514498d71238b913518ab5c9911fbb2a178c9a7f8c5eb1c2ed0f1913f84a067434cc5b0c87397380a4ce5b92b44e36"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}, @TCA_MATCHALL_ACT={0x26a0, 0x2, [@m_mpls={0x1064, 0x4, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x8100}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x437, 0x800, 0x3, 0x1ff, 0xd5}, 0x4}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x4305}, @TCA_MPLS_TC={0x5, 0x6, 0x4}]}, {0x1004, 0x6, "e8d4fbe45fbe25d09365988c74422d17e41dc4f2dd6c153f04c532202e9c1131cb30d2382a13f01c39b199f1f58daf08764969c4053cb4eb54526d50aac6b1a690434962331ad1a4794ec4457e1cb0ab9b581dbe3ca0606080096dd554f8c0c5a4137aabba0af40f177a26d2e47d56e2799c99cff42642035d7350b19fac35830568e6e8816f052eeddcf569ff04a2ca070660a876e576db362d24d9c4c7df2f1d09f65d6faf500ab1ea5bd8aa65aae21d0724f0ac745f29d3127dcca7e4df0f1cb9f8d89325c85e03d3c8711b92130d7609ea9d70d25d2b4ff05e0bbf0e77cd50af56f5656f8af3401a33da3d78bf59a8c795a21af07297ac7ca7bf6e97d4a26e6f435f3e627aa484458004c889345414c57b3d8a3c9d55ce3d088c4674b61e66229353dceec4821bff86d3d0b97b2f34f17b64d1edd587f5d71caf2a104446dc0800f0ff7d27f95c7f0da7816f2f30a0aaf3e2db6a58c787764741323533d24610d4b236f6acf9c50d348c6cc209596ee7bb15933e56e0bef12bf5c35e5c5628bd25aeb263e84666bdef637fd4ec757ab75f372d1a461767a7f046f3b4cd33eac33177351064033ae8ef11e8dddad87a247d2a2acabbd744246b00a706f75e3053b4098423f22e012a0638453a6c0956b2f6db74381eff0692d85b05e25a9e2eece2de92c16dc8bed909cba40ee10f62df1c9c7e3335781174c41066ee53807802da6b953b75aa15ae6f2543e53c57ce2397f85546a0dcac75434ad1f85ea2eccc1423ad7ffcb92e1d2076c5ca1ddefaed454f69d793d8e5a52574d7d7e0444aaea6d3aec072943f8d0389eb4047efee8061dbf1dba27886b5ad6669e8e018049b8e52a1013aec2d1f03bc84604d18f00b02b21f4c35b1bff72e62287ef3d4894020e629835a909158e221827267d39f91822aea674f3d99d40e992a307b7db8c3199251febfc0662bec6e62a460698c07826d189571e50ca8bd440aa9a37fecf5cf37351fdad2526af6507dfee871faca22a82fc7274fa152dba6e57abe72723c9b784b7a670cdcfcfbd75fa8ac62a48f9558c3099da4f5e3b3ce92833eff18583d8c4bce3ee7626d4d6f7511d170879df387e0f56548bc927a160923f45810c7fb2a1d1da5a4b074e65fdce406d5acd66984f60baa4baa8c28df853c986d8e51e3abbff3cbd4f2198062ec9731880bdf50c0c420581f11e74c7120bfe2b55f31dfa03d6c7f26be07b975ef9d3cf5dd80d9188f3e56082a35ac49303a7eb33a835fdfa0e3cf50b145cbfe1ba3ae27c505a5f1d3fe0b4f67ad070d31c6b943dba08181a81161acbca77b8f095a611b27aba6f5fcaac64636ae6c1fa49677a77961bab963c58f36f340342a0613021166a70a62758b0098c47e60baafda54112e2078d50c180e8e0d91b55b7ad2ef3829d174c8929192ceb4cc43ef8b2cdc9625d506ca69270cd78ce5f59cac6d5cb9239583685707a6820bcd6df4756c6f02c43ba677aad2236673c3cbc051762d4b0b07a370633c1dac3688d0ec41378234c28eb4fc4663d36925b357cdee674bfa4cabed61def46bdc49b729e7514017a98be64be6fc39cb6dcd800c90565c17b1d9f72a35e6de482c9b02518b6d4e4029c2f2a387978bf885254aac71144d1979a180d2c8b734bcb5f6d6b9a3d6fce8f9d56cd954b245934bdd6b37f34d78b6a8c33d7b735c4a8ae861690de578ea7365b7b5fe48f63796f366396af17ff1ae67b27c13d90599764e2d21a35ca8fae88c52868d34e6d01b91f0a69fe22c16adf4a3b04a633d5b55a7621c2bdf8bf54fa8fc4364c5c75252f8f9a03ba694ec95689ea8431f60da0d197f4929ff464fec48aef3cdb88731daf9ed021eeaf25edd6acce6e4d63fd222c5b84f69b03a0fe89f88a67feeebca48faa8325f2f95ee9927c457e67806e307c94cd981ea512d6664528a3738301ddcce4996279ef822b19f467e6d2cdb618288ff489716b44bb52778d42147538c82f8a181612e6f7323ecff2c779a9242d7a2114e2a32aeacbaa7ca852b91bc8208aece7638a63a0785f3d9252d9d750a64a4332adc58b22f2e15daa3deb9dfdc7048ef1bdffd83b5e051e690ce8d874d40c12813839b2bfea5e9eb115cb4bdd4e92794f81fbf005721ae92f8786032f21f833ff8b3d1a9e65a89942531f3759e08124edeab343aec117754a339616f8d9888a666c0df3c0b930fc95961a6e4f010005ab3743013486053efb955434487c99e774dbccdc547700c8a45bcf0ef4d6030576eaae4832a481271fc6f12807d98fdc7ec22eb5c7185bffccb224f9f12ba94ae42752e57ade68afad6f28e40d79fe79cb68b9c0b672575dbedf618feffc8f54bcb08e88ce297c02e1b4585847138b981716ea365f2a8e57bb328bdfe66acfd55691c1899f9a60752b7e70a86285f5166f85d89e752b110da240b29d74077322540bb33b5c9e1070d04d8c59828080b4a41a64d4bc3dea2438a1766197fd2660cd58497e844774669bdda13e9798ae0fd4d9bf6bbe850f71a6b4c2ba6c63dfcee77eb0049608e1dc710988e3d00876a7b5cc3241fad52c82c52eb30990681ffc211583fd1eb73458bdd33663f5b3e3e21fd101d2afcd5b3da7ded3c136019b9451730e9e3723b14bdd5a9fa4c45f5c24c824e36dad3d34555d6c23764d276929d0392b6d7f2d923673fea832aad2c3addd841bb7d44f5957dc78e7abf1ad08deabaa17efbe8d2f25cbfc435ea21c58145b57c43f874821f67ae09304fcd6ce1ebe0a00391ff196c3d612b2ea0052ff9d6d7536d46005df9928af0172862f6a8e88d9755ac99f1f88e4751e78b59c8777bbd566f7e6af159dc2e4b2c511a21aa8dac6f16c06fb0ddceba24aaa8f021e4b536073244a3ec42cb954f9696f128595636f4d6fe40dc291d4709c1350b6b7026cbcf9e30787668c1a5c9786aad4977865b5a46d9fffe3959fbe0727ed9c7aa1245ac833e76d45f57e792f03b2983d23641bc11744caa68ab53dd202e32e359b2f8e8d9cf3dfcd039efc81f99555743a0f8b68823eb4a27e88f3831c5fd5a1df95ee2cfc26b01a37dc9e6ce733aad86ed52085504de98e54ed30bd30289b847daa78766c56cf55c3719b0b4834a511cefef9aff6e4187f41bd6c08aaee8ca34cd0eccfc7416be15375fb1cb415a9ade3b4b05ab1b2c8a58cf841930eec84a925f732aa2bdd10fcce5855f50e7534f134283a6e252152b1f7521b3d09d8ad3a21bfc4fd50869542b91f677221054ee774ed14fa12ceaab3ffab2a0d6bef5438e51b3c0dc28af50b74e2971e002ad3e91b0e1fe8467117f836c996b62a073b994b82ca8a60ab7a141c37161faf25140d47f97dd95c8b6bc3d1c31fb7b6ac6098120d23878fac443c4d4f87e84e66c2fd2d09df9323a5d5bc3e0d27d051f20bfd3a0641cd53575b4777ad4bfd13846fd1d2e519eb4ba36b08d80b030262ab278ce83fe6f3351da9272623b0f1e331b43fd5e0a906bd90180b231e113fcf9780d9d9e3d2674d24186ddcadd0e255c257b683760c4a4ef4e3a265521e2db786d9578b67d0783ef10c1081f5effd84bbf55354c01f2268b8fc46b8caaba4a71acd494c9bfc79e57d43592ce7f52039d096bbf83bcffe1d522d6918dbd251828404dc44fa13e95a18ae43dc9eacac839b49e2b1ce8096d7519a7dffe9f10fc3aca24b94e07517def596b5bb2b8c6bc7cc11d474028436915ba9570fce71b09eb1435f50a87c92138b4f888d36cc8916c921f60b715a836b8d7ee610cdebab49052dc569ea03b2aaab0c51d69aa4ae8b36897452efaaaf5d533af0e725a473dab00f00f63dad5dc2a8e95087512a16b4fad85af104010e380fb423dc6405b3e511775f5f646e45fa8d5d2b9a1f900ac5151bcae9655c549601d696f6c020fd323b74274c61a2f870ff0f1b7ef3bf0561626f382cabfd20b6287f610dc2b31016104062fdcd467b89280ebfb853c5e3e94c3c9c48463be36e0dec850698f0901eb673d39cd4fb974f794370ef13f896673c21e8810554d59c22ce2b3c2e31bb9908447fd9e478bc63f84e68d645eeff75089de673df4eaa3931b79e07d668863465063384390fe4cd269e6276774092b5ed98c83c75a29f60ce4f4f23b73438687af21701478f1d1e6098e3c8a7dbebc61cee38d379d25a33c293431b6d40ceb5b6cfc5072d6a0b4ad7675727fd355398febd46fa6406f9d92e6ccb239708e0b31592ea58148b80aa8c4c0173544c442aa81ea4593f0791ebd0498b28c1ffe1fcd11255c12b22bfbbf1594e3442cd4481920d471c664cee9bdbf7e72681f611a088ff4778139f224e5f4fa584beb49641ca50265396c3f41b912321ddd983958b6a1616701aad8917866bc932e77b4662667cf759992f3a8c231bb8d30d31b02d3083ad40617d93c6a84350211c1bb6778e5b994fe916d165603f073381fa861a4251ea82604934178c8ad4760d069256db210e6f44371d36ea8fb74e48c8c326cac9ddb2506f0cb81f121bedd053c7c3b25db3d591de567eb8ee88cdb9a7af88786873195891a14fda785e6ea7c9089ac79b33d78b53fb66f43e771599add404ec4e1dff77062a8528b6f9f1f0102fb9d51bae6bb2a7e71e19625ccf5eff9549487d788e5cf1a23cf8221015dd707b18864565457bca8002e6e23063e8b6a8048092f374b9c40f87853c8f385098bb1c88d3e05b7911d72202832c099a72a9b7b929af9ac1dcce8168cccd416dd458baa724ff7bdc7f338aee1d628963e4ad71d69dc968fc9190299b4e9aac8202a3128c78b0493d8233bc46194112d43c21d6b7e1495686649009642fe75af965d3d246eeaa20be53b7320401917d669d2558daaebdd36aeb76968a6b6ecb36ef3fff48a35ad317360b2f763a4e4a1f9becc0083237a85e5e424ebd11b4debcb92cb8265eec4267f2cae2f7688034c72e0d7da10b1f6cd77021220556a4ee563c63c19da48a83a20676f8c477eaa13628889aabfc2ce5eadfb657a6fd2af4ab3ac5a2277150f250b72574d03b4d8d66ac2631e85b5c92bf8715577a3e0a2da93c5f96c1d79d678bb39d3df440502641314bd0bf633c04d709cc637e03f67055de9d41c65d72de9253c89edaf3e58f315fd139cd0cf62a9e8c2b24d42c41a546a8664f7f2daa2fa5db2d7c2172751ca2a3b32c11d3e0c3e86fd0830bfb9dffd77a7dfc26ee44e01a7a80312c95fdc0ee9ef14de85d5eb4ce376b3dadcd4488e8acff9bc5d1f847029567a9b2333e6c0ce70c6072e5e3bc50ab0ca362d66b6a65d6036b2b917220bf3fb3a27db44536d932c37f1a00e15c9b9c1a577ddbde8d3b6984d89eaf7a6393f4b70bb1bc94fda719532e9b7b56eae2aebe860ae055baf4fdec4af86fd1ceb4314e6f363fcae4ac4ac33e1aaa9aa98401f70ffd2e99e5566f46fdcd1c22d7f6bafe1995e15393db8d313bd4dfd7147db648c5f4ee32403670eb20ec5dceeeacce17d5c5cad3457feb27d5cf3eebdfc04480b0b0eb19c2ffbc78678f324271f51e8f120714903a6beeacf6e272a263e3a562a2a8a0bac5b56dc03bfff22f59e5cf91d3162805287271323725d67906ccd90bf8fdf9d75ba547499862e7c93b3401c2595b0056a86d962ed6298f3af4d892bef2f84cefc07ea00998e9233f214e846742bcb3e94fa697bccb5c74f808954f3927c2651f4eacad050a5db4219fa042de1e691f59452a60b26f875c82d54f1a8b31672087dbdce7089bc1e65e7e10edce34c0593a7556e1cdf47d3008201cf67ffb80eb0e8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ctinfo={0xc0, 0x1d, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x9}, @TCA_CTINFO_ACT={0x18, 0x3, {0xd, 0x80000001, 0x7, 0x5, 0x4}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xfffffffb}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x800}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xff}, @TCA_CTINFO_ACT={0x18, 0x3, {0x6, 0xf, 0x5, 0x6, 0x2}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xfff}]}, {0x2a, 0x6, "431dc1b6cc9f717811f17633e5ab3c0ba1493d3a991550283157065bdc025fddd9dfafd67bc7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ctinfo={0xac, 0x15, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x4}]}, {0x68, 0x6, "662da470aaeca983c8b8773502d0f0f139ea0152876c3236dda4a375a5617d97ac9fd939a9466550a03f6fed7f7eb0cc24bfeadd55bb95373a809e1b9b54e8df5a68f95e3deefb613bb7ce5b3cbbcf7241beaa3b50db698075a4ea59467e46056d855254"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ctinfo={0x158, 0x0, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x10}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x163}, @TCA_CTINFO_ACT={0x18, 0x3, {0x9, 0xea, 0x0, 0x200, 0xfffffe01}}, @TCA_CTINFO_ACT={0x18, 0x3, {0xff, 0x7, 0x5, 0x5, 0x4}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x1}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xd6a}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x3}]}, {0xd1, 0x6, "50f82238c250f8cf7c3d80a58af478a308abf27e0f55dcbcf3fc098b57b43e61e4b232808e176245977340f1ee4fe5af853370d257324bc4d10aee6d45604338c6e23e2f6f732dc9e1c97f5f00bd389ea9446ba4d854d0566e7c9b21ebf5ca38d84b7e49db1cc88894f441117e916ea3a5ad98a28f25de39e2c9268bd0f6b194c42273a8715aeb38490cc1dd9d411fc5fb14eed4f3ded016c99380ac46f2379a9aba0581c3a103eb41d082492877efa22d94a23ae8a2604e4e0525f3df2b753560b41d8add741b62ddbc6f788a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x100, 0x1d, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xc0, 0x6, "7a5205bbca3eea54750e56337ce98d5172976e6c8545bc31def6694b67eb59748b82968e4efd47cd9379ee27f631caaa666a53e91c18f7f58159fe812ff0af7288aa96f2100b8aadfa12f14082698d76d7b2842790416d68c804e1c08f2e5e9362908bee5e245d19b981e5c1dfb9d50cfcbd81b1966dbb26ef1867fd996cb36183a64f3fb05d5e46bbb3ecc72b8df7a41fec0e965892c4269818b22d866f306e2fd83ac4bf4c90b972c50cac48dde0d8c1801f851730b2fb666b391f"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_nat={0x100, 0x19, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x8, 0x8, 0x4, 0xaa}, @dev={0xac, 0x14, 0x14, 0x33}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0x1}}]}, {0xaf, 0x6, "d07ae029b773e3779bf40129a53ace64adfe1ba389a3153914e8733202fe8875a893b71e7b29a648edc77daa039d49f4c0ca71280a33133ff28604dc08f5d01075dee3c7d363e321aae92f23a8ee2b2223f29bef3bedf024c3369def6f7867bbd20b5da5ee4a289380b3ccc256d4d8bcf5c5d0f09d36eab3201a591ada2a31bef512d61cc77ac9ea9d8573839850dda2fa71a4fb352891df0268fc082749d76110b553eb4e84f9d407d013"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_simple={0xc0, 0xd, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xc3, 0x200, 0x0, 0x9, 0x7}}, @TCA_DEF_DATA={0x11, 0x3, 'NLBL_CIPSOv4\x00'}]}, {0x66, 0x6, "3f6544e143420a4097c1364d46fa1f5b6c8925752ffcfa29d53b0769bbfabdd6640d092337f3e533423c8c01371a3282123d099777b858fb2365fb46535cbb69ea69655d61b1e168777ca812cfe55cecce580642240a091bb9b8f6eef1a7586b4493"}, {0xc}, {0xc}}}, @m_skbmod={0x10b4, 0xb, 0x0, 0x0, {{0xb}, {0x88, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xc, 0x4, 0x3, 0x9, 0x7}, 0x2}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x2, 0x3, 0x80000000, 0x5}, 0x10}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x2a30}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r13 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r13, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req={0xb61, 0xfffffffa, 0x80, 0x4b}, 0x10) 3.262146928s ago: executing program 2 (id=2869): sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001480)={0x0}}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000001580)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "f4"}], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[{0x10, 0x110, 0xac7}], 0x10, 0x500}}], 0x2, 0x40058) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0x42, 0x4, 0x12f0, 0xffffffff, 0x98, 0x11c0, 0x11c0, 0xffffffff, 0xffffffff, 0x1258, 0x1258, 0x1258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00'}, 0x287, 0x10e8, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0x4000000000000000}}}, @common=@unspec=@limit={{0x48}, {0xa, 0x7, 0x0, 0x2, 0x0, 0x0, 0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0x8}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1350) 3.174953285s ago: executing program 4 (id=2870): r0 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) (async) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x2, 0x6, 0x201, 0xa, 0x0, {0x0, 0x0, 0x2000}}, 0x14}}, 0x40880) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x2, 0x6, 0x201, 0xa, 0x0, {0x0, 0x0, 0x2000}}, 0x14}}, 0x40880) r4 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000080)={0x2, {{0xa, 0x4e21, 0xffffffda, @private2, 0x72}}, 0x1}, 0x90) (async) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000080)={0x2, {{0xa, 0x4e21, 0xffffffda, @private2, 0x72}}, 0x1}, 0x90) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) socket$l2tp(0x2, 0x2, 0x73) (async) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0xfffc, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000040)) (async) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000040)) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) (async) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r8 = socket$igmp6(0xa, 0x3, 0x2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9b}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000240)={0x0, 'netdevsim0\x00', {0x2}, 0xfffe}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000240)={0x0, 'netdevsim0\x00', {0x2}, 0xfffe}) write$tun(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="000022f0ffffffffffff0180c200000e810000020800450000b0000000000011907800000000e0000001000017c1009c90780100000001000000626abd460020000000000079a700000040000000000000000000000000002000d89bc63b93b6d4092beb790344022cb8c49cc8022b5296be4673efd95df3fdc5a71ed1c7bc91dcf39f5550601185fa4afcc815bc21b9e7be1497a9edd45189dacc307c357402a8c5a9c5b5b06cbc035d9569f2b2ee1cf210c588b60723e0cc4e1fdd8d6d18e2e9ee4939689f"], 0xc6) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f00000004c0)='<', 0x1, 0x4c884, 0x0, 0x0) 2.342914646s ago: executing program 2 (id=2876): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000340), 0xffffffffffffffff) r3 = epoll_create1(0x0) syz_emit_ethernet(0x4e, &(0x7f0000000940)={@random="757e938fd660", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x8, '\x00', @mcast1}}}}}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) epoll_pwait(r3, &(0x7f0000000000)=[{}], 0x1, 0x6e, &(0x7f00000001c0)={[0x7f]}, 0x8) r5 = socket$netlink(0x10, 0x3, 0x14) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f00000002c0)={{0x0, 0x0, 0xc, 0xa, 0x4, 0x1ff, 0x3, 0x3, 0x401, 0xfffffff9, 0x9, 0x7fff, 0x5, 0x5, 0x88}, 0x8, [0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000004c0)={{r6, 0x7fffffff, 0x10000, 0x163c, 0xfffffffffffffff7, 0x8, 0x0, 0x993cb1f, 0xa, 0x410, 0x4ca, 0x3, 0x900, 0xc0, 0x2}}) close(r3) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x806000) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000020000000000000000000001"], 0x0, 0x2a}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xa, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000000000001840000004000000000000000000000095000000000000009500000000000000950036000000000018400000feffffff480000000000000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x34, &(0x7f0000000100)=""/198, 0x41000, 0x0, '\x00', 0x0, 0x0, r8, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000980), 0x10}, 0x94) writev(r7, 0x0, 0x0) getsockname$l2tp(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x20, r2, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r1}, {0x4}}]}, 0x20}, 0x1, 0xf000, 0x0, 0x4020806}, 0xc004) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x4}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000280)=@assoc_id=r9, 0x4) 2.152366038s ago: executing program 1 (id=2877): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x4}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x20, 0x70bd25, 0x25dfdbfb}, 0x20}}, 0x0) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000100)="93d90400000300", 0x7}, {&(0x7f00000002c0)="c3", 0x51}], 0x2) 1.946695565s ago: executing program 2 (id=2878): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f0000000540)=""/90, 0x5a}, {&(0x7f0000001880)=""/4112, 0x1010}, {&(0x7f0000000000)=""/100, 0x64}, {&(0x7f0000000080)=""/79, 0x4f}, {&(0x7f0000000440)=""/62, 0x3e}, {&(0x7f0000000900)=""/108, 0x6c}, {&(0x7f0000000480)=""/157, 0x9d}, {&(0x7f00000028c0)=""/4096, 0x1000}], 0x8}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x5}], 0x4, 0x2030, 0x0) 1.943335693s ago: executing program 4 (id=2879): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae777c8489cce5145f92615d4bdb1543b1eb6c546007f93452eaf09e2a1cff231", 0x40}], 0x1}, 0x24000045) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x200000b, 0x110, r0, 0x894d000) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x15) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)="4800000014001d1009074beafd0d8c560a84606080ffe020590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b00000000", 0x48}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071103f00000000009500eeffffff0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r9 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r9, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) sendmmsg$inet6(r9, &(0x7f0000002200)=[{{0x0, 0xf5, 0x0}}], 0x40000000000027f, 0x0) setsockopt$inet6_opts(r9, 0x29, 0x37, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000001d80), 0x80800, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 1.532227242s ago: executing program 1 (id=2881): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='b *:', @ANYRESOCT], 0x9) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1}, 0x6e) r3 = socket$unix(0x1, 0x1, 0x0) socket(0x2, 0x0, 0x8) connect$unix(r3, &(0x7f0000000000)=@file={0x1}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x88, 0x17, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x600000}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20040801}, 0x8001) sendmmsg(r4, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)="bf5bb4a4a7a65e2c02c51c5b706a108c204ded835b84ef660d162be333414a52bdc84928", 0x24}, {&(0x7f0000000380)="79780aab75d941", 0x7}], 0x2, &(0x7f0000000400)=[{0x88, 0x11, 0x7fff, "ea769275b81a2d43dfaa3dbb2226bc59ce6836d7dfb382d9595d2679c55b7ad9b909fa68e8564e2d70f7a9b22c7cb84afc4de47500797e619642dd3fc11aed04cf12c29022c639af6001105628d2e1e9e079e8ca38df11e27fef03b9de9c72c7fcdb57724935fd90de3c8579b41c40b4232e"}, {0x80, 0x10b, 0x5, "ec6cd939b16e88f3ed89479990908ceca72879b8735d6fd73ee8bbac0e976f9484442e62149bc209a7de404a46c52231daf90c261d1426683c313a054d64ac9ecf3d4da1442c43cc2f89c92eb34089a816b02f2ecd94c0ed4893845e4967979e06c157d104fc7f011253"}, {0x18, 0x113, 0xfffffff9, "9e37776b8584"}, {0xe0, 0x114, 0x7, "097de88e93820ff44304eda299341a75c53645c623d246fb6643949b04c0c6eb831471cb014267c6404fffb3983b0bfe82cfec3be67694abbe1780dd44de087ea58c60be489f1fd90116cf13c84d03f31e6e888cbdc5dbdf1f07462e8613124a9dfbfec6d96b1ba9189195fa387627c9c72b52249fc0e07f4ffb81cd0deb43b8e5abfbb746f17a1504e90a664717306491bf2886bdff69aba9d224531e598d7997b26efe4ec44875187aef5c1b7437871dfb46b2a56082d5eff267eb3b8f383480ba6e7982a2f7bd3f2d"}, {0x78, 0x116, 0x0, "dc7dc4ea9a8614d90d9f32bcd43ebd7bdf2b6bdc604c6984a5605eb58df0c3439637df8ac07ee74e32a15a380afd7cebc0cddbd76be0049aaff863c37ba796fe17451fea7be42a809fde59d9d07adaed6d82fe49c0839e0506154de6387098cc50"}, {0xd8, 0x10f, 0x85, "cbf798f6eeef0db5698c591f1ebb8d1544908089d651eafd718a41fd3edf79ab389ccc6b6802960246c39ffcee4ae92a517dd8203692946e740b6fb3427090b21e7a8094976992acccb4cbc95acfb8b85f2a5d4d88cfbad71fd60e355adac18657f8d8e6be0fbfd37cb30e34984258b276c3517e3dc80154b4ecb759f7cba9d153f8d690e2e6fb8a0c321c0e697fc802825fa49b03bc62aaab06e11aa1019c61235b69f16c09b191c3ffcd4d6b0e0afabcf9698a769aff61a57bcc984123675c6b310d8a5c59"}, {0x48, 0x6, 0xeb, "813924797aa6a82da6dfdc3c2ff30471c5b157cec7002b13584e349e462264fe3836d5199d4f81db700a02954ef98c0ffab0ffba6f3d3679"}], 0x398}}], 0x1, 0x4000004) 1.267818965s ago: executing program 0 (id=2882): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000ba76ccdb00000000000042b600000000000089"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x40f00}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000ba76ccdb00000000000042b600000000000089"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x40f00}, 0x94) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001900)=@generic={&(0x7f00000018c0)='./file0\x00', 0x0, 0x18}, 0x18) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000000c0)=0x49c2, 0x4) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h'], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001940)={&(0x7f0000000640)="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", &(0x7f0000001640)=""/180, &(0x7f0000001700)="aef450d9b346ee77f65c7d448e2ea248f19662fb5372f9f12df975999c182790ea91d958d1313de91055acc524e6f7facc4411b628e03114d641da9d01ba29d415c63d5669bc636df270165ec4c5d909ecad73f8ebd6e5fe5654aab52090e4d50297fa7377971430ba5dae7b7c6c50248b25860916b022c6b4551b50a221fd24bb10c5d4abe2d9af", &(0x7f00000017c0)="2668819455a79fb540d47acedd18a4db98a09ea416e90712abc3aa9e25d7ca8d4263ad70fd4e3e553e2a1fc4eb3b97a8e7399a8e69863a3f5aacc1dd97979e58597759e90557abf5875b27aefd39a03bf99ed587b50a62ffd4890962ecf8466eea7fc3f2944660291377d8c149126758185eadea05f1b88d939ea49d210dd412d118a9a0541b5844d954e27a1da4bc43f52da002acb4e23665ff43dd6f990b04e9b7644ab24d139750cc6100ab813863fa5c897f4eff3270547e4832b7b7b90f085ce2f07f355fc8edf2917d68bf67bdb20fed065cca3c73969cbe4e9f74654261b4116223cca66479a97a", 0xf60, r0}, 0x38) 1.254289383s ago: executing program 4 (id=2883): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r2, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x10, 0x10001, @l2={'eth', 0x3a, 'vlan0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x404c000) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1}}}}, 0x30}}, 0x0) 1.213204854s ago: executing program 3 (id=2884): r0 = socket(0x1d, 0x80802, 0x6) r1 = socket$inet(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) close(0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r3) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) getsockopt$packet_buf(r3, 0x107, 0x16, 0x0, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) bind$can_j1939(r4, 0x0, 0x0) writev(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x330, 0x40000, 0x198, 0x330, 0x198, 0x428, 0x358, 0x358, 0x428, 0x358, 0x3, 0x0, {[{{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x16}, 0x0, 0x0, 'vcan0\x00', 'wg1\x00'}, 0x0, 0x2c8, 0x330, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r2}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x5, 0xe0000000, 0x9, 'snmp_trap\x00', 'syz1\x00'}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'team_slave_1\x00', 'netdevsim0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x3, 0x10, [0x40, 0x37, 0x32, 0x2a, 0x2, 0x2d, 0x29, 0x17, 0x23, 0x1c, 0xe, 0x38, 0xb, 0x22, 0x27, 0xd], 0x2, 0x4b, 0x9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x520) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r5, 0x1, {0x0, 0xf0, 0x3}, 0xfe}, 0x18) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="2f95e4afa3d8e2f0226dff2950b59b799c2d3a7c873fb25792d5", 0x1a, 0x8080, &(0x7f0000000040)={0x11, 0xf7, r5, 0x1, 0x7, 0x6, @multicast}, 0x14) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 1.107555272s ago: executing program 1 (id=2885): getpeername$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) (rerun: 64) pwritev(r1, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x300, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r1}, 0x8) (async, rerun: 32) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000600)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x8001, 0x80000408, 0x8001, 0x0, r1, 0xd, '\x00', r0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000bd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x18, r5, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000f00)=ANY=[@ANYBLOB="140000001500010300000000000000010a"], 0x14}}, 0x0) recvmsg(r6, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000002b40)=""/4081, 0xff1}], 0x1}, 0x10002) (async) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f00000005c0), 0x10) (async) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async) bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x0, r10, 0x1}, 0x10) (async, rerun: 64) bind$xdp(r8, &(0x7f0000000740)={0x2c, 0x10, 0x0, 0x38}, 0x10) (async, rerun: 64) recvmmsg(r7, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000001680)=[{0x0}, {&(0x7f0000001400)=""/75, 0x4b}], 0x2}, 0x35}], 0x2, 0x2, 0x0) (async, rerun: 64) sendmsg$can_bcm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) (async, rerun: 64) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r5, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x28}}, 0x978bf9a1dfc57e8d) 1.076541061s ago: executing program 3 (id=2886): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x20, 0x3c, 0x301, 0x70bd24, 0xfffffbf8, {0x5}, [@typed={0xc, 0x3, 0x0, 0x0, @u64=0x8000000000000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xfff5}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x71, 0x0, 0x8, 0xbccb, 0x3, 0x3, 0x7, 0x7}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xd}, {0xfff1, 0x4}}}, 0x24}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020500030a0000000000000000190000030006000000000002004e2164010100000000000000000002000100000004d5000008010000000003000500cd00000002"], 0x50}, 0x1, 0x7}, 0x0) 1.05201268s ago: executing program 4 (id=2887): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="9200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704f3ffffff000085000000c3000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x20020600) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x2) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000200), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="380000001000370400000000000000000000d5d0", @ANYRES32=r7, @ANYBLOB="89040400000000001800128008000100736974000c00028008000100", @ANYRES32=r7], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001000390423bd700000000000000003e4", @ANYRES32=r7, @ANYBLOB="00000000000000001800128008000100736974000c00028006000f0041"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)={0x1b, 0x0, 0x0, 0xffffff81, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="42f71500000009000000930820001f1f00000000", @ANYRES32=r0, @ANYBLOB="0500"/20, @ANYRES32=r7, @ANYBLOB="04000000010000000200"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000060040000000000088020000183200000400000000000000000200e309790100d232bd7f85200000010000008762f4ff0800000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000940)='syzkaller\x00', 0x400, 0x98, &(0x7f0000000980)=""/152, 0x40f00, 0x5, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000b80)=[r0, r0, r0, r8, r9], &(0x7f0000000bc0)=[{0x5, 0x3, 0x0, 0xa879c93d7c6e4f98}, {0x1, 0x4, 0xb, 0x6}, {0x1, 0x3, 0x7, 0xe06a2c312c83f145}, {0x1, 0x1, 0x6, 0x6}], 0x10, 0xd}, 0x94) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000540)=0xfff) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, 0x0, &(0x7f0000000100)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{r9, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000680)='%pB \x00'}, 0x5) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'veth1_to_batadv\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000700)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xfffffffffffffff9) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000840)={{{@in6=@empty, @in=@multicast1, 0x4e20, 0x9, 0x4e20, 0x7, 0x2, 0x80, 0x80, 0x2b, r12, r13}, {0x9, 0x58e000, 0x2, 0x4, 0x3, 0x1, 0x7a8, 0x892}, {0x1, 0x8, 0x5, 0x6}, 0x2, 0x6e6bb9, 0x0, 0x1, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x4d2, 0x6c}, 0x0, @in=@multicast2, 0x0, 0x0, 0x1, 0x2, 0xc, 0x7, 0xffffffff}}, 0xe8) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) 991.363571ms ago: executing program 2 (id=2888): sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000000306010100000000008ad66f06a225da000000060000090900020073797a32000000000900020073797a3000000000090002020073797a310000000005"], 0x4c}, 0x1, 0x0, 0x0, 0x1040}, 0x4044864) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000efff"], 0x14}, 0x1, 0x0, 0x0, 0x4000055}, 0xc4) r1 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x270, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @private=0xa010100, 0x0, 0xff000000, 'bond_slave_1\x00', 'geneve1\x00', {}, {0xff}, 0x84, 0x0, 0x28}, 0x0, 0x1b8, 0x218, 0x0, {0x0, 0x1c8}, [@common=@inet=@sctp={{0x148}, {[0x4e24, 0x4e21], [0x4e24, 0x4e21], [0x101, 0x81c, 0x4, 0x3041800, 0x10000, 0x8, 0x7f, 0x3, 0x8000, 0xe4, 0x5e9c90b, 0x4b, 0x5, 0x2, 0x5, 0x6, 0x0, 0xea, 0x8001, 0x4, 0x6937, 0x7598, 0x4, 0x5, 0x1, 0x9, 0x7, 0x81, 0x0, 0xba11, 0x4, 0x2, 0x3d, 0x10001, 0x3ff, 0xffffffff, 0xffff, 0x8000, 0x1000, 0x0, 0x28, 0x800, 0x6, 0xfffffffa, 0xd721, 0x80000000, 0x0, 0xfff, 0x0, 0x10001, 0x2, 0x3, 0x7575bec7, 0x8cdf, 0x3, 0x4, 0x1000, 0x24, 0xd8e, 0x4, 0x8, 0x4, 0xe1, 0x8a], 0x0, [{0x80, 0xb}, {0xac, 0xc, 0x5}, {0x10, 0x4f, 0x4}, {0x4, 0x80, 0x4}], 0x4, 0x4, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 0x5, 0x0, [0x25, 0x5, 0x28, 0x23, 0x12, 0x34, 0x16, 0x3, 0x10, 0x39, 0x27, 0x2a, 0x6, 0xe, 0x36, 0x10], 0x27b02525726059f5, 0x7, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3a8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) vmsplice(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000300)='0', 0x1}], 0x1, 0xa) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f3, &(0x7f0000001040)={'sit0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0xab00, 0xfffffffd, 0x40000, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x1, 0x0, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="180000000000000000000000000000006119040000000000950000000000000090"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r3, 0x0, 0x21, &(0x7f00000000c0)=0x7, 0x4) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) setsockopt$inet_group_source_req(r3, 0x0, 0x3, &(0x7f0000000600)={0xe, {{0x2, 0x4e20, @private=0xa010101}}, {{0x2, 0x4e20, @broadcast}}}, 0x108) recvmmsg(r1, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1852876b485243d90018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000b7000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000100)=0x80000001, 0x4) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$bt_hci_HCI_TIME_STAMP(r7, 0x0, 0x3, 0x0, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES32=0x0, @ANYRES16=r3], 0x48}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) socket$nl_generic(0x10, 0x3, 0x10) 978.899052ms ago: executing program 0 (id=2889): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x439, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1040, 0x4311a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040044}, 0x4040010) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r1], 0x108}}], 0x1, 0xc040) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0xddee, 0x2, 0x3, 0x3, 0xa848, 0xf68}, &(0x7f0000000080)=0x20) 929.103689ms ago: executing program 1 (id=2890): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x2, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180a000000000000000000000000000095000000000000006c447927aca4e1260c6bfda7d6c36a856f955124121c04dac4d099a55ab9e6a063c524a1498e837fa69ba2c3f07a0793d6a5c5e1932f273ea26d00797227b7dd7e9efe7d65739072f9bb7d07df423f2427f306154dff254cdbc50a8b9779ed03463b812bd53b2d0fbb40", @ANYRESHEX, @ANYRES32], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000000c0)={'netdevsim0\x00', @link_local}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4e0, 0x0, 0xffffffff, 0xffffffff, 0x410, 0xffffffff, 0x410, 0xffffffff, 0xffffffff, 0x410, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast1, [0xff, 0xffffff00, 0xffffff00, 0xffffff00], [0x0, 0xffffff00, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'ip6tnl0\x00', {0xff}, {}, 0x29, 0x7, 0x4, 0x63}, 0x0, 0x1e0, 0x248, 0x60030000, {0x0, 0xff000000}, [@common=@rt={{0x138}, {0x6, [0xd, 0x9460], 0x203, 0x2, 0x6, [@mcast1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @rand_addr=' \x01\x00', @mcast1, @mcast1, @private0, @local, @local, @local, @local, @dev={0xfe, 0x80, '\x00', 0x24}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @remote, @dev={0xfe, 0x80, '\x00', 0x13}, @mcast1], 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x4, 0x7ff, 0x9, 0x6, '\x00', 'syz0\x00', {0x100000001}}}}, {{@uncond, 0x0, 0x180, 0x1c8, 0x0, {}, [@common=@srh1={{0x90}, {0x2c, 0x2, 0x4, 0xbb, 0x1, @private2, @dev={0xfe, 0x80, '\x00', 0x2a}, @empty, [0xff, 0x0, 0xffffff00, 0xff], [0xff, 0xffffff00, 0x0, 0xff0000ff], [0xff000000, 0xff000000, 0xffffffff, 0xff], 0x900}}, @common=@dst={{0x48}, {0x81, 0x2, 0x0, [0x8, 0xf7a7, 0x3, 0xb0, 0x0, 0xfffd, 0x6, 0x419c, 0x5, 0xe110, 0x2, 0xff, 0x0, 0x1, 0xff, 0x1], 0xe}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xd2af, 0x9, 0x2, 'pptp\x00', {0x81}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000000000001000004520000000d000000050000000200000010000000000000110400000001009454c39a67fb659b0749febba69d00000000"], &(0x7f0000000100)=""/228, 0x42, 0xe4, 0x1, 0x4}, 0x28) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[], 0x60}}, 0x20000084) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, &(0x7f0000000080)={'veth1_to_team\x00', {0x2, 0x4e22, @empty}}) setsockopt$MRT_FLUSH(r3, 0x0, 0xd0, &(0x7f0000000000)=0x3, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet(0x2, 0x2, 0x61) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETGROUP(r6, 0x400454ce, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff8000, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r7) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f00000002c0)={0x0, 0x300, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff07000700263a0909140002"], 0x44}, 0x1, 0x1000000}, 0x200000000000000) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCGSTAMPNS(r9, 0x8907, 0x0) 754.773181ms ago: executing program 0 (id=2891): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff8864", 0x0, 0xfb, 0x60006000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x189001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r3}, &(0x7f00000004c0), &(0x7f0000000500)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r4, r6, 0x25, 0x2, @void}, 0x10) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0xa4, 0x7fffffff, @vifc_lcl_ifindex=r6, @broadcast}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x13) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, [@printk={@s}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r8}, 0xc) 753.381435ms ago: executing program 3 (id=2892): socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x1e, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000100000000000000959c1060f5dcc46175762e68bc5add53e8b065934f5b714aa46ac4500620795a4090058f27bc58d30b4e2f3b018bf74f649900"/74], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async, rerun: 64) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf251200000018000180140002007465616d5f736c6176655f3000000000080007000200000008000900000000000800080000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x44) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) (async) r3 = socket(0x1d, 0x1, 0x101) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000180)=@req3={0x70, 0x7, 0x0, 0x4, 0x8, 0xd3ac}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$bt_hci(r4, &(0x7f0000000000)=ANY=[], 0x6) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) (rerun: 64) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r5, &(0x7f00000004c0), &(0x7f00000001c0)=@tcp6, 0x2}, 0x20) (async) r6 = socket(0x1e, 0x4, 0x0) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close(r6) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0x0, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d0a0000000000000000000006040098"], &(0x7f0000000f40)=""/4088, 0x3e, 0xff8, 0x1}, 0x28) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r9 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0be80000050000000004000009000000010007cb4ad85efbf9d8cf3ca497b58e5a199f318aa566334485eb19054986e7b1d242ce32c5c03c2b402b4a1ae42d7f0000c36397ff634754fc4f46ef4f65df37b00028ad41977a3c4a489b42fe4131667383fd22107c5f50a907"], 0x48) (async, rerun: 32) recvmmsg(r9, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}, 0x4005}], 0x1, 0x2102, &(0x7f00000042c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 627.135234ms ago: executing program 3 (id=2893): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x8800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000040)={0x8, 0x3, 0xca0, 0xfffa}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0xd, @loopback, 0xc}], 0x1c) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2230022}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, 0x1, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000001}, 0x880) (async) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2230022}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, 0x1, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000001}, 0x880) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) sendto$inet6(r3, &(0x7f0000000280)='^', 0xfffd, 0x80c1, &(0x7f0000000300)={0xa, 0x4e21, 0xbe7, @loopback, 0x4}, 0x1c) (async) sendto$inet6(r3, &(0x7f0000000280)='^', 0xfffd, 0x80c1, &(0x7f0000000300)={0xa, 0x4e21, 0xbe7, @loopback, 0x4}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x220, 0x2f0, 0xfeffffff, 0xf8, 0x2f0, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x6}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @gre_key=0x6, @port=0x4e24}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @port=0x4e24}}}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@multicast1, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x220, 0x2f0, 0xfeffffff, 0xf8, 0x2f0, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x6}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @gre_key=0x6, @port=0x4e24}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @port=0x4e24}}}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@multicast1, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) socket(0x400000000010, 0x3, 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002c40)={0x2c, 0x25, 0x109, 0x870bd22, 0xfffffff9, {0x2}, [@nested={0x8, 0x3d, 0x0, 0x1, [@nested={0x4, 0x122}]}, @typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}, @typed={0x8, 0x10b, 0x0, 0x0, @uid}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000957}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) setsockopt$inet_tcp_TLS_RX(r4, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303}, "60cf9f9cd4991a0c", "c7a2274b29c11e4e7aad1e482bcfe3fbeaac65edafc256f8eda90a1e8f62ae01", "85f54a9b", "270ec54dd15f1518"}, 0x38) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x68, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff2}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0x5a}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6248}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x6}, {0x5, 0x40, 0x2}}}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x40050) 572.354771ms ago: executing program 0 (id=2894): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) close(0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x80) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xfffd, 0xb}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0xc040) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd84, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x1}], 0x1}, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000001200010025bd70000000000000000000082c5c"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 502.950806ms ago: executing program 1 (id=2895): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000002000010000000000000000000a80100000000001180001001400010000000000000000000000ffffac1414bb0500130001040000140002"], 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r6, 0x40047452, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4044011}, 0x200088c4) 403.575831ms ago: executing program 1 (id=2896): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000004000000080000000d00000000000000", @ANYRES32, @ANYBLOB="0000000000bfbada2e0f00"/25, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket(0x22, 0x3, 0x4) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000280)={r4, r4, 0xfffb, 0x0, 0x0, 0x9, 0x9b, 0x2, 0x5508, 0xff, 0x0, 0x5, 'syz0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003080)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x7, 0x100, 0x2, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x3, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10003, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x9, 0xfffffffd, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x18, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x5, 0x5, 0xb, 0x399d, 0x6, 0x8ab6, 0x17ffe, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x5, 0x1, 0x7, 0x0, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0x4, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xfffeffff, 0x2, 0xffff, 0xa6, 0xffffffff, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0x2, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94b, 0x9, 0x8, 0x6, 0x100, 0x2, 0xffff, 0x4, 0x2, 0x3ff, 0x2, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ffb, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0xff, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x40, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x9, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x1, 0x8, 0x50, 0xf, 0xf, 0xe, 0x6, 0x0, 0x81, 0xfff80000, 0x0, 0x1, 0x6, 0x3, 0x7ef8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x0, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0x4000fff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0xc000, 0xffffff97, 0x2, 0x1000, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0xfff, 0xe, 0x3, 0x9, 0xa, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x20000000, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x4, 0xb}, {0x6, 0x2, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) 323.613494ms ago: executing program 0 (id=2897): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0], 0x48) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r1, 0x6, 0x1e, 0xffffffffffffffff, &(0x7f00000002c0)=0x4b) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000008638af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000)=0x7e60, 0x4) 271.693826ms ago: executing program 3 (id=2898): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000000780), 0x12) socket$kcm(0x29, 0x4, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaac72af8b7fb4037a057e56fe999aa4408004500007c0000000000019078ac1e0001ac1414aa0c019078e00000e0480000000067000000110000ac1414aae0000001830b89ffff0500e1000001070300443c00030a01012f00000000ac1442f2f5457272380ed45c597e7514aa000000000400000000000000ac1514bb000000007f00000100000000ac142b00000800e0000002000000000000"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r4, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001800)="cc0e9c", 0x3}, 0x1, 0x0, 0x0, 0x4008074}, 0x8000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000040)={0x6, 'pim6reg0\x00', {0xffff}, 0xfffa}) write(r6, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000004000000080009000d000000", 0x24) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x1800}]}}]}, 0x48}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x12}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x409}]}, @CTA_TUPLE_ORIG={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x840c0}, 0x400040c0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x7, @remote, 0x3}, 0x1c) 178.293656ms ago: executing program 0 (id=2899): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001ec0)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYBLOB="000029bd7000fddbdf2504000000090001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0xc4ff0893d70c5360) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="58000000020601010000000000000000010000040c000300686173683a697000050001000700000005000500020000000900020073797a300000000005000400000000001400078008000840000000d3050014"], 0x58}, 0x1, 0x0, 0x0, 0x2002c8c4}, 0x8004) 109.925795ms ago: executing program 3 (id=2900): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x0, 0x37, 0x0, 0x0, 0xa}, 0x28) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x8040480) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000380)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003980)={r1, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}}, 0x10) 11.006664ms ago: executing program 4 (id=2901): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e65766500002000028014000700fec0"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000100000000000000000085000000c500000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0xa0002, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETVNETLE(r2, 0x400454dc, 0xfffffffffffffffe) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x8, 0x0, 0xff, r6}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_ADDRESS={0x14, 0x1, @local}, @IFA_RT_PRIORITY={0x8, 0x9, 0x2}]}, 0x48}}, 0x0) r7 = socket(0x10, 0x803, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r7, 0xc038586a, &(0x7f0000000300)={r1, &(0x7f00000001c0)=')]\x00', 0x200000, &(0x7f0000000240)={@align=0x3, {0x7, 0x1c0, 0x4, 0x2c0000000000}}, 0x0, &(0x7f0000000280), &(0x7f00000002c0)=0x4}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r8, 0x58, &(0x7f0000000400)}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {}, {}, {0x8}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100e1ff0000000000000000850000008a00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000380)=0x7) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000000600)=ANY=[@ANYRESDEC=r4], 0x28}, 0x1, 0x0, 0x0, 0x4000820}, 0x40) 0s ago: executing program 2 (id=2902): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x7, 0x6, 0x40}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x7, 0x6, 0x40}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, @generic={0x65}, @initr0, @exit, @alu={0x4, 0x0, 0x6, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x100000001, 0xe, 0x953, 0x3, 0x9119, 0x3, 0x9}, &(0x7f0000000180)={0x5e7, 0x9, 0x8, 0x6, 0x7f, 0x9, 0x7ba0, 0xda}, &(0x7f00000001c0)={0x7ff, 0x80000000, 0x2, 0xffff, 0x7, 0x1, 0x3, 0x7}, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000340)={&(0x7f0000000300)={[0xa]}, 0x8}) kernel console output (not intermixed with test programs): 21135][T11131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1280'. [ 246.862662][T11142] mac80211_hwsim hwsim12 syzkaller0: entered promiscuous mode [ 246.930208][T11142] mac80211_hwsim hwsim12 syzkaller0: entered allmulticast mode [ 246.935451][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 247.003547][T11143] IPVS: persistence engine module ip_vs_pe_À not found [ 247.045452][T11142] netlink: 'syz.2.1281': attribute type 1 has an invalid length. [ 247.125132][ T1318] net_ratelimit: 1477 callbacks suppressed [ 247.125186][ T1318] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 247.355390][ T6653] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 247.485111][ T1318] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 247.557706][T11165] netlink: 'syz.1.1286': attribute type 1 has an invalid length. [ 247.727197][T11165] 8021q: adding VLAN 0 to HW filter on device bond6 [ 247.810791][T11175] bond6: (slave geneve2): making interface the new active one [ 247.832894][T11175] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 247.879321][ T9557] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.939494][ T9557] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.971582][ T9557] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.993102][T11179] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 248.008876][T11179] pim6reg0: linktype set to 778 [ 248.096751][ T9557] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.147066][T11189] pim6reg0: tun_chr_ioctl cmd 35111 [ 248.261022][T11192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1293'. [ 248.299251][ T6665] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 248.367854][T11192] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1293'. [ 248.525872][ T6665] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 248.645136][ T6665] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 248.689671][T11206] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1295'. [ 248.722753][T11206] netlink: 'syz.3.1295': attribute type 9 has an invalid length. [ 248.743533][T11206] netlink: 'syz.3.1295': attribute type 1 has an invalid length. [ 248.776435][ T6665] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 248.800138][T11213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1295'. [ 248.840456][T11213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1295'. [ 248.939150][T11214] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 249.094439][T11214] ip6gre1: left promiscuous mode [ 249.119032][T11214] ip6gre1: left allmulticast mode [ 249.172348][T11214] veth7: left promiscuous mode [ 249.177017][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 249.252906][T11223] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1299'. [ 249.368232][ T9557] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.414126][ T9557] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.449989][ T9557] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.479762][ T9557] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.602117][T11226] lo speed is unknown, defaulting to 1000 [ 249.605105][ T9557] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 249.758192][T11239] netlink: 'syz.3.1302': attribute type 1 has an invalid length. [ 249.976902][ T9557] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 249.994572][T11245] vlan0: entered promiscuous mode [ 250.051721][T11249] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 250.299981][ T5782] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 250.497692][T11265] netlink: 'syz.3.1313': attribute type 1 has an invalid length. [ 250.741994][T11274] netlink: 'syz.3.1315': attribute type 3 has an invalid length. [ 251.148686][T11287] xt_CT: You must specify a L4 protocol and not use inversions on it [ 251.609822][T11304] netlink: 'syz.3.1325': attribute type 46 has an invalid length. [ 251.671865][T11313] __nla_validate_parse: 5 callbacks suppressed [ 251.671887][T11313] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1328'. [ 252.226111][ T6653] net_ratelimit: 15 callbacks suppressed [ 252.226169][ T6653] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 252.351797][T11330] netlink: 'syz.3.1332': attribute type 1 has an invalid length. [ 252.378606][T11328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1333'. [ 252.440330][T11328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1333'. [ 252.491395][T11334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1332'. [ 252.511161][T11330] 8021q: adding VLAN 0 to HW filter on device bond6 [ 252.525433][ T6653] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 252.627131][T11333] bond6: (slave veth0_to_bond): making interface the new active one [ 252.639289][T11333] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 253.090317][T11350] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1339'. [ 253.110049][T11350] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1339'. [ 253.159749][T11341] bridge0: port 3(batadv1) entered disabled state [ 253.166515][T11341] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.071463][T11341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.122838][T11341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.460741][T11341] macsec1: left promiscuous mode [ 254.468202][T11341] ip6tnl1: left allmulticast mode [ 254.481226][T11341] vlan2: left promiscuous mode [ 254.528055][ T5782] netdevsim netdevsim4 €Â: unset [0, 0] type 1 family 0 port 4352 - 0 [ 254.575696][ T5782] netdevsim netdevsim4 €Â: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.617346][ T5782] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 4352 - 0 [ 254.681832][ T5782] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.734829][ T5782] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 4352 - 0 [ 254.786950][ T5782] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.840630][ T5782] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 4352 - 0 [ 254.893473][T11382] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1346'. [ 254.895119][ T5782] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.003298][T11382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1346'. [ 255.024514][ T5782] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 255.099756][T11382] vlan4: entered promiscuous mode [ 255.113500][T11382] geneve1: entered promiscuous mode [ 255.121014][T11390] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1346'. [ 255.130695][T11382] vlan4: entered allmulticast mode [ 255.137221][T11382] geneve1: entered allmulticast mode [ 255.178198][T11392] x_tables: duplicate underflow at hook 2 [ 255.249989][T11393] netlink: 'syz.1.1346': attribute type 10 has an invalid length. [ 255.261038][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 255.278606][T11393] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1346'. [ 255.397857][T11393] dummy0: entered promiscuous mode [ 255.416721][ T6665] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 255.565389][ T6663] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 255.644919][T11414] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.705998][ T9557] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 255.720117][T11414] netlink: 'syz.2.1353': attribute type 1 has an invalid length. [ 255.884247][T11414] 8021q: adding VLAN 0 to HW filter on device bond7 [ 256.023409][T11422] bond7: (slave ip6gretap1): making interface the new active one [ 256.094788][T11422] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 256.185973][ T6665] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 256.470334][ T6665] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 256.616162][ T6653] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 256.782253][T11460] __nla_validate_parse: 2 callbacks suppressed [ 256.782303][T11460] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1364'. [ 257.029389][T11470] netlink: 'syz.1.1367': attribute type 15 has an invalid length. [ 257.276560][ T6653] net_ratelimit: 4 callbacks suppressed [ 257.276581][ T6653] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 257.305340][T11481] IPVS: length: 135 != 8 [ 257.319989][T11483] IPVS: length: 135 != 8 [ 257.359939][T11484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1370'. [ 257.380861][T11486] IPVS: set_ctl: invalid protocol: 108 10.1.1.0:20000 [ 257.420571][T11487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1370'. [ 257.549181][T11484] team0: entered promiscuous mode [ 257.554603][T11484] team0: entered allmulticast mode [ 257.561725][T11484] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.644297][T11487] team1: entered promiscuous mode [ 257.651369][T11487] team1: entered allmulticast mode [ 257.662672][T11487] 8021q: adding VLAN 0 to HW filter on device team1 [ 257.716872][ T6653] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 257.817089][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 257.925232][ T9557] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 258.086388][ T9557] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 258.225235][ T9557] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 258.441094][T11531] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1382'. [ 258.471641][T11526] bond6: (slave veth0_to_bond): Releasing active interface [ 258.618763][T11526] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 258.647473][T11515] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1380'. [ 258.665162][ T9557] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 258.690031][T11526] netlink: 'syz.3.1382': attribute type 3 has an invalid length. [ 258.710092][T11526] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1382'. [ 258.785922][ T5782] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 258.925628][ T5782] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 259.055085][ T9557] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 259.647135][T11569] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 260.328393][T11588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1396'. [ 260.662091][T11596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1400'. [ 260.699973][T11596] netlink: 'syz.1.1400': attribute type 10 has an invalid length. [ 260.773724][T11596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 260.792164][T11596] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 260.811911][T11596] team0: Failed to send options change via netlink (err -105) [ 260.827537][T11596] team0: Port device netdevsim1 added [ 260.880633][T11606] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1402'. [ 261.329324][T11606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1402'. [ 261.590355][T11632] netlink: 'syz.1.1403': attribute type 4 has an invalid length. [ 261.693621][T11638] netlink: 'syz.1.1403': attribute type 4 has an invalid length. [ 261.964658][T11645] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1407'. [ 261.982193][T11645] SET target dimension over the limit! [ 261.988710][T11643] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 262.448188][T11658] net_ratelimit: 25 callbacks suppressed [ 262.448209][T11658] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 262.479414][T11658] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 262.486378][T11658] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 262.493228][T11658] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 262.500127][T11658] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 262.507013][T11658] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 262.513854][T11658] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 262.520741][T11658] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 262.527617][T11658] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 262.534482][T11658] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 262.738589][T11654] bond7: up delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 262.765636][T11654] bond7: down delay (128) is not a multiple of miimon (100), value rounded to 100 ms [ 263.701996][T11601] IPVS: set_ctl: invalid protocol: 24 3.0.0.0:0 [ 263.722474][T11601] IPVS: set_ctl: invalid protocol: 60319 48.0.0.0:0 [ 264.796502][T11724] netlink: 284 bytes leftover after parsing attributes in process `syz.4.1429'. [ 265.799150][T11733] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1431'. [ 267.567231][T11781] bridge0: port 1(vlan2) entered blocking state [ 267.634678][T11781] bridge0: port 1(vlan2) entered disabled state [ 267.682098][T11781] vlan2: entered allmulticast mode [ 267.695656][T11781] dummy0: entered allmulticast mode [ 267.733529][T11796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1451'. [ 267.742255][T11781] vlan2: entered promiscuous mode [ 267.752414][T11781] dummy0: entered promiscuous mode [ 267.755279][T11796] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1451'. [ 267.786072][ T9557] net_ratelimit: 1625 callbacks suppressed [ 267.786092][ T9557] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 267.926192][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 268.068699][ T48] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 268.206452][ T1318] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 268.333968][T11816] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 268.382687][T11817] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 268.415112][ T1318] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 268.525084][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 268.659164][ T48] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 268.795564][ T48] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 268.935187][ T1318] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 269.338768][ T1694] block nbd0: Possible stuck request ffff888027e00000: control (read@0,1024B). Runtime 30 seconds [ 269.355241][ T1694] block nbd0: Possible stuck request ffff888027e001c0: control (read@1024,1024B). Runtime 30 seconds [ 269.366542][ T1694] block nbd0: Possible stuck request ffff888027e00380: control (read@2048,1024B). Runtime 30 seconds [ 269.380366][ T1694] block nbd0: Possible stuck request ffff888027e00540: control (read@3072,1024B). Runtime 30 seconds [ 269.439718][T11867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1465'. [ 269.990411][T11893] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1474'. [ 270.825622][T11915] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1481'. [ 271.177399][T11910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.221634][T11910] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.386699][T11910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.627286][T11910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.667237][T11910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.713143][T11910] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 271.742241][T11910] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 271.776430][T11910] veth1_vlan: left promiscuous mode [ 271.793097][T11910] vlan0: left promiscuous mode [ 271.799618][T11910] veth1_vlan: entered promiscuous mode [ 271.817812][T11910] veth1_macvtap: left promiscuous mode [ 271.826786][T11910] veth0_macvtap: left promiscuous mode [ 271.835211][T11910] veth0_macvtap: entered promiscuous mode [ 271.843141][T11910] veth1_macvtap: entered promiscuous mode [ 271.861592][T11910] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 271.871813][T11910] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 271.881914][T11910] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 271.903383][ T6665] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.910677][ T6665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.959813][ T6665] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.967039][ T6665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.159767][ T9557] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.202406][T11938] batadv_slave_1: entered promiscuous mode [ 272.229867][ T9557] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.272899][ T9557] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.339874][ T9557] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.394005][ T9557] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.514336][ T9557] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.596324][ T9557] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.673512][T11955] netlink: 'syz.2.1488': attribute type 15 has an invalid length. [ 272.751724][ T9557] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.887829][T11935] batadv_slave_1: left promiscuous mode [ 272.915612][ T9557] net_ratelimit: 19 callbacks suppressed [ 272.915648][ T9557] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 273.090317][ C1] IPv6: bridge0: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1b used by aa:aa:aa:aa:aa:1b detected! [ 273.103645][T11966] netlink: 'syz.3.1492': attribute type 4 has an invalid length. [ 273.117008][ T5782] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 273.151613][T11966] netlink: 'syz.3.1492': attribute type 4 has an invalid length. [ 273.174855][ T5732] lo speed is unknown, defaulting to 1000 [ 273.190712][ T5732] syz2: Port: 1 Link ACTIVE [ 273.238608][T11972] veth0_macvtap: entered allmulticast mode [ 273.254847][T11972] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 273.356459][ T6663] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 273.433058][T11971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1494'. [ 273.472176][T11973] netlink: 1036 bytes leftover after parsing attributes in process `syz.1.1493'. [ 273.490792][T11971] macsec2: entered promiscuous mode [ 273.520630][T11971] macsec2: entered allmulticast mode [ 273.565203][ T6663] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 273.716755][ T1318] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 273.734649][T11986] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1496'. [ 273.876076][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 273.974798][T11991] netlink: 732 bytes leftover after parsing attributes in process `syz.4.1498'. [ 274.005111][T11991] netlink: 732 bytes leftover after parsing attributes in process `syz.4.1498'. [ 274.019040][ T6663] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 274.205515][ T1318] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 274.411705][T12004] lo speed is unknown, defaulting to 1000 [ 274.652640][T12013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1505'. [ 274.677431][T12013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1505'. [ 274.949479][T12028] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1511'. [ 275.095666][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 275.311783][T12038] bond0: (slave bond_slave_0): Releasing backup interface [ 275.383833][T12038] bond0: (slave bond_slave_1): Releasing backup interface [ 275.450110][T12038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.471481][T12038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.510723][T12045] bridge0: port 1(ipvlan2) entered blocking state [ 275.520255][T12045] bridge0: port 1(ipvlan2) entered disabled state [ 275.527730][T12045] ipvlan2: entered allmulticast mode [ 275.533203][T12045] bridge0: entered allmulticast mode [ 275.542279][T12045] ipvlan2: left allmulticast mode [ 275.547783][T12045] bridge0: left allmulticast mode [ 275.724655][T12067] syzkaller0: entered promiscuous mode [ 276.271481][T12097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1530'. [ 276.291802][T12097] batadv0: entered allmulticast mode [ 276.659466][T12118] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1537'. [ 276.671928][T12114] lo speed is unknown, defaulting to 1000 [ 277.015130][T12127] bridge3: entered promiscuous mode [ 277.029878][T12133] netlink: 'syz.0.1541': attribute type 1 has an invalid length. [ 277.058223][T12133] netlink: 'syz.0.1541': attribute type 2 has an invalid length. [ 277.365582][T12141] syzkaller1: entered promiscuous mode [ 277.378782][T12141] syzkaller1: entered allmulticast mode [ 277.735790][T12148] netlink: 'syz.4.1544': attribute type 14 has an invalid length. [ 277.782513][T12151] macsec2: entered promiscuous mode [ 278.025482][ T6663] net_ratelimit: 1815 callbacks suppressed [ 278.025504][ T6663] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 278.184066][ T6665] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 278.306228][ T6663] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 278.423943][T12171] lo speed is unknown, defaulting to 1000 [ 278.429863][ T6665] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 278.575524][ T6663] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 278.686453][T12173] __nla_validate_parse: 8 callbacks suppressed [ 278.686475][T12173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1552'. [ 278.765586][ T1318] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 278.885577][ T1318] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 279.005531][ T6665] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 279.115228][ T5732] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 279.135229][ T6663] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 279.265114][ T6663] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 279.562599][T12189] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1557'. [ 279.686039][T12181] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 279.792756][T12208] netlink: 560 bytes leftover after parsing attributes in process `syz.0.1562'. [ 279.807501][T12208] netlink: 964 bytes leftover after parsing attributes in process `syz.0.1562'. [ 279.842552][T12208] netlink: 560 bytes leftover after parsing attributes in process `syz.0.1562'. [ 280.038401][T12220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1566'. [ 280.060466][T12220] netlink: 'syz.0.1566': attribute type 9 has an invalid length. [ 280.135387][ T5732] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 280.186010][ T1318] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.212465][ T1318] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.240690][T12227] 8021q: VLANs not supported on ip_vti0 [ 280.258432][T12230] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1568'. [ 280.269626][ T1318] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.286820][T12230] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1568'. [ 281.054299][T12249] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1574'. [ 281.775780][T12276] tipc: Started in network mode [ 281.790720][T12276] tipc: Node identity aaaaaaaaaa3f, cluster identity 4711 [ 281.803987][T12276] tipc: Enabled bearer , priority 0 [ 281.943392][T12283] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1584'. [ 282.922981][ T5753] tipc: Node number set to 9808554 [ 283.070340][T12333] netlink: 'syz.2.1598': attribute type 7 has an invalid length. [ 283.096609][ T1318] net_ratelimit: 30 callbacks suppressed [ 283.096626][ T1318] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 283.157240][T12333] : entered promiscuous mode [ 283.235666][ T6665] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 283.365950][ T1318] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 283.498347][ T9557] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 283.645564][ T1318] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 283.765338][ T48] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 283.916147][ T9557] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 284.045587][ T6665] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 284.177412][ T1318] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 284.202278][T12394] __nla_validate_parse: 1 callbacks suppressed [ 284.202299][T12394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1614'. [ 284.262978][T12394] veth1_macvtap (unregistering): left allmulticast mode [ 284.485075][ T6665] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 284.560782][T12404] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1616'. [ 286.563786][T12464] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1636'. [ 286.601993][T12467] lo speed is unknown, defaulting to 1000 [ 287.512354][T12486] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1637'. [ 287.934511][T12493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1638'. [ 288.487145][ T6665] net_ratelimit: 1944 callbacks suppressed [ 288.487164][ T6665] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 288.499512][T12515] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20001 [ 288.626377][ T6665] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 288.747755][ T6663] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 288.885553][ T6663] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 288.933075][T12527] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 289.019381][ T6665] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 289.138300][ T6665] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 289.267398][ T6663] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 289.397121][ T9557] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 289.527144][ T48] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 289.658967][ T6665] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 290.465954][T12581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1649'. [ 290.512114][T12582] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.532694][T12582] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.122641][T12605] af_packet: tpacket_rcv: packet too big, clamped from 4760 to 3952. macoff=96 [ 291.157527][T12605] netlink: 'syz.1.1656': attribute type 1 has an invalid length. [ 291.235496][T12605] 8021q: adding VLAN 0 to HW filter on device bond8 [ 291.471220][T12619] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1658'. [ 292.094756][T12641] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1664'. [ 292.779961][T12656] netlink: 16170 bytes leftover after parsing attributes in process `syz.4.1670'. [ 292.802083][T12659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1668'. [ 292.815246][T12662] netlink: 'syz.3.1669': attribute type 8 has an invalid length. [ 293.261882][T12690] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 293.277207][T12690] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 293.289552][T12690] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 293.455274][T12691] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1676'. [ 293.483350][T12691] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1676'. [ 293.517016][T12691] tipc: Invalid UDP bearer configuration [ 293.517079][T12691] tipc: Enabling of bearer rejected, failed to enable media [ 293.520512][T12694] net_ratelimit: 3416 callbacks suppressed [ 293.520527][T12694] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 293.543841][T12694] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 293.550846][T12694] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 293.557843][T12694] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 293.564764][T12694] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 293.571736][T12694] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 293.578686][T12694] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 293.585647][T12694] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 293.592598][T12694] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 293.599642][T12694] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 293.613836][T12698] netlink: 'syz.2.1678': attribute type 1 has an invalid length. [ 293.909894][T12698] 8021q: adding VLAN 0 to HW filter on device bond8 [ 293.950561][T12705] netdevsim netdevsim0 €Â: renamed from netdevsim0 [ 294.864130][T12726] batman_adv: batadv0: Interface activated: wlan0 [ 294.958137][T12726] 8021q: adding VLAN 0 to HW filter on device bond1 [ 294.999934][T12726] 8021q: adding VLAN 0 to HW filter on device bond2 [ 295.029322][T12726] 8021q: adding VLAN 0 to HW filter on device bond3 [ 295.051718][T12726] 8021q: adding VLAN 0 to HW filter on device bond4 [ 295.068848][T12726] 8021q: adding VLAN 0 to HW filter on device bond5 [ 295.077222][T12726] 8021q: adding VLAN 0 to HW filter on device bond6 [ 295.089873][T12726] vlan4: left promiscuous mode [ 295.094670][T12726] geneve1: left promiscuous mode [ 295.097469][T12738] netlink: 'syz.4.1684': attribute type 4 has an invalid length. [ 295.102960][T12726] vlan4: left allmulticast mode [ 295.113311][T12726] geneve1: left allmulticast mode [ 295.124459][T12726] 8021q: adding VLAN 0 to HW filter on device bond7 [ 295.190179][T12745] netlink: 'syz.4.1684': attribute type 4 has an invalid length. [ 295.248407][ T6651] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 295.287588][ T6651] bond1: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 295.320954][ T6651] bond1: (slave veth3): making interface the new active one [ 295.366780][ T6651] bond1: active interface up! [ 295.393674][T12754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1691'. [ 295.414201][T12758] netlink: 'syz.4.1694': attribute type 2 has an invalid length. [ 295.434566][T12758] netlink: 'syz.4.1694': attribute type 1 has an invalid length. [ 295.448484][T12747] veth0: entered promiscuous mode [ 295.504117][T12746] veth0: left promiscuous mode [ 295.618628][T12770] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1697'. [ 295.658965][T12770] ip6gre2: entered promiscuous mode [ 295.664309][T12770] ip6gre2: entered allmulticast mode [ 295.666965][T12774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1698'. [ 295.674011][ T13] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 295.687733][ T13] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 295.698264][ T5753] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 295.711898][T12777] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1699'. [ 295.795677][ T5739] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 296.313573][T12807] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 296.332634][T12809] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 296.533356][T12821] 8021q: adding VLAN 0 to HW filter on device bond9 [ 296.536494][ T5753] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 296.800263][T12829] netlink: 'syz.3.1714': attribute type 2 has an invalid length. [ 296.802993][T12837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1718'. [ 297.283737][T12855] netlink: 'syz.2.1724': attribute type 1 has an invalid length. [ 297.305414][T12856] netlink: 'syz.2.1724': attribute type 1 has an invalid length. [ 297.414703][T12866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1727'. [ 297.489769][T12863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.516812][T12863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.604895][T12863] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 297.618096][T12863] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 297.636557][T12863] veth1_vlan: left promiscuous mode [ 297.644566][T12863] veth0_vlan: left promiscuous mode [ 297.659041][T12863] veth0_vlan: entered promiscuous mode [ 297.668763][T12863] veth1_vlan: entered promiscuous mode [ 297.674814][T12863] veth1_vlan: entered allmulticast mode [ 297.688486][T12863] veth1_macvtap: left promiscuous mode [ 297.703419][T12863] veth0_macvtap: left promiscuous mode [ 297.711333][T12863] veth0_macvtap: entered promiscuous mode [ 297.718434][T12863] veth1_macvtap: entered promiscuous mode [ 297.729813][T12863] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 297.738927][T12863] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 297.757818][T12880] netlink: 'syz.0.1732': attribute type 8 has an invalid length. [ 297.770088][T12863] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 297.781894][T12863] batman_adv: batadv0: Interface activated: wlan0 [ 297.860503][T12877] xfrm0: entered allmulticast mode [ 297.876159][ T6651] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.920561][ T6651] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.934798][ T6651] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.946451][ T6651] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.171449][T12896] netlink: 'syz.4.1738': attribute type 1 has an invalid length. [ 298.213748][T12896] 8021q: adding VLAN 0 to HW filter on device bond4 [ 298.337491][T12906] netlink: 'syz.4.1738': attribute type 10 has an invalid length. [ 298.385005][T12906] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1738'. [ 298.529616][T12895] net_ratelimit: 2453 callbacks suppressed [ 298.529636][T12895] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 298.542381][T12895] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 298.549270][T12895] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 298.556139][T12895] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 298.562963][T12895] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 298.570019][T12895] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 298.576878][T12895] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 298.583705][T12895] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 298.590588][T12895] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 298.597453][T12895] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 299.075998][T12896] bond4: (slave veth11): Enslaving as a backup interface with a down link [ 299.379287][T12925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1745'. [ 299.416563][ T1694] block nbd0: Possible stuck request ffff888027e00000: control (read@0,1024B). Runtime 60 seconds [ 299.427337][ T1694] block nbd0: Possible stuck request ffff888027e001c0: control (read@1024,1024B). Runtime 60 seconds [ 299.438388][ T1694] block nbd0: Possible stuck request ffff888027e00380: control (read@2048,1024B). Runtime 60 seconds [ 299.449859][ T1694] block nbd0: Possible stuck request ffff888027e00540: control (read@3072,1024B). Runtime 60 seconds [ 299.545798][T12929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1746'. [ 299.599891][T12929] netlink: 'syz.1.1746': attribute type 1 has an invalid length. [ 299.738394][T12938] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1748'. [ 300.055635][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 300.212460][T12944] syzkaller0: entered promiscuous mode [ 300.231719][T12944] syzkaller0: entered allmulticast mode [ 300.263801][ T4994] udevd[4994]: worker [8731] /devices/virtual/block/nbd0 is taking a long time [ 300.674298][T12969] IPVS: set_ctl: invalid protocol: 3 172.20.20.45:20000 [ 300.730885][T12967] bond10: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 300.759993][T12967] bond10 (unregistering): Released all slaves [ 300.941099][T12982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1765'. [ 300.980714][T12983] bond8: option mode: invalid value (20) [ 300.997392][T12983] bond8 (unregistering): Released all slaves [ 301.004654][T12984] netlink: 'syz.3.1765': attribute type 1 has an invalid length. [ 301.086294][T12982] 8021q: adding VLAN 0 to HW filter on device bond8 [ 301.194217][T12999] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.1768'. [ 301.360636][T13010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1770'. [ 301.478164][T13010] gretap1: entered allmulticast mode [ 301.634102][T13012] bridge0: port 2(ipvlan2) entered blocking state [ 301.645422][T13012] bridge0: port 2(ipvlan2) entered disabled state [ 301.675159][T13012] ipvlan2: entered allmulticast mode [ 301.711610][T13012] ipvlan2: left allmulticast mode [ 301.793182][T13028] bond10: option lacp_rate: invalid value (128) [ 301.804659][T13028] bond10 (unregistering): Released all slaves [ 302.043539][T13046] netlink: 820 bytes leftover after parsing attributes in process `syz.1.1784'. [ 302.079549][T13046] netlink: 820 bytes leftover after parsing attributes in process `syz.1.1784'. [ 302.131897][T13054] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1783'. [ 302.418713][T13071] netlink: 'syz.4.1786': attribute type 2 has an invalid length. [ 302.497454][ T8715] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 302.513770][T13069] team0: No ports can be present during mode change [ 302.534219][T13070] netlink: 'syz.2.1787': attribute type 2 has an invalid length. [ 302.588343][T13078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1790'. [ 302.609449][T13078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1790'. [ 302.656968][T13086] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1788'. [ 302.837761][ T8715] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 303.218612][T13098] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1793'. [ 303.493900][T13110] ipvlan2: entered promiscuous mode [ 303.585696][ T6665] net_ratelimit: 1745 callbacks suppressed [ 303.585717][ T6665] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 303.755175][ T5782] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 303.789225][T13126] netlink: 'syz.0.1803': attribute type 1 has an invalid length. [ 304.009978][T13126] 8021q: adding VLAN 0 to HW filter on device bond5 [ 304.116229][T13131] bond5: (slave veth1): Enslaving as a backup interface with an up link [ 304.218872][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 304.359121][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 304.517699][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 304.656233][ T6665] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 304.785822][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 304.928602][ T6665] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 305.069441][T13168] lo speed is unknown, defaulting to 1000 [ 305.085346][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 305.275868][ T68] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 305.302385][T13180] FAULT_INJECTION: forcing a failure. [ 305.302385][T13180] name failslab, interval 1, probability 0, space 0, times 1 [ 305.363914][T13180] CPU: 1 UID: 0 PID: 13180 Comm: syz.3.1814 Not tainted syzkaller #0 PREEMPT(full) [ 305.363944][T13180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 305.363956][T13180] Call Trace: [ 305.363964][T13180] [ 305.363973][T13180] dump_stack_lvl+0xe8/0x150 [ 305.364004][T13180] should_fail_ex+0x412/0x560 [ 305.364033][T13180] should_failslab+0xa8/0x100 [ 305.364055][T13180] __kmalloc_cache_noprof+0x88/0x660 [ 305.364084][T13180] ? netlbl_mgmt_add_common+0xb39/0x13b0 [ 305.364109][T13180] ? __kmalloc_cache_noprof+0x15b/0x660 [ 305.364142][T13180] netlbl_mgmt_add_common+0xb39/0x13b0 [ 305.364183][T13180] netlbl_mgmt_adddef+0x28f/0x330 [ 305.364211][T13180] ? __pfx_netlbl_mgmt_adddef+0x10/0x10 [ 305.364240][T13180] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 305.364269][T13180] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 305.364307][T13180] genl_family_rcv_msg_doit+0x22a/0x330 [ 305.364343][T13180] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 305.364386][T13180] ? bpf_lsm_capable+0x9/0x20 [ 305.364405][T13180] ? security_capable+0x7e/0x2c0 [ 305.364440][T13180] genl_rcv_msg+0x61c/0x7a0 [ 305.364476][T13180] ? __pfx_genl_rcv_msg+0x10/0x10 [ 305.364502][T13180] ? __pfx_netlbl_mgmt_adddef+0x10/0x10 [ 305.364544][T13180] netlink_rcv_skb+0x232/0x4b0 [ 305.364569][T13180] ? __pfx_genl_rcv_msg+0x10/0x10 [ 305.364598][T13180] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 305.364641][T13180] ? down_read+0x270/0x2e0 [ 305.364665][T13180] ? genl_rcv+0xd/0x40 [ 305.364693][T13180] genl_rcv+0x28/0x40 [ 305.364718][T13180] netlink_unicast+0x75c/0x8e0 [ 305.364753][T13180] netlink_sendmsg+0x813/0xb40 [ 305.364788][T13180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.364816][T13180] ? aa_sock_msg_perm+0xf1/0x1b0 [ 305.364847][T13180] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 305.364890][T13180] ____sys_sendmsg+0x972/0x9f0 [ 305.364913][T13180] ? __might_fault+0xaf/0x130 [ 305.364945][T13180] ? __pfx_____sys_sendmsg+0x10/0x10 [ 305.364978][T13180] ? import_iovec+0x73/0xa0 [ 305.365005][T13180] ___sys_sendmsg+0x2a5/0x360 [ 305.365025][T13180] ? __lock_acquire+0x6b5/0x2cf0 [ 305.365050][T13180] ? __pfx____sys_sendmsg+0x10/0x10 [ 305.365112][T13180] ? __fget_files+0x2a/0x420 [ 305.365133][T13180] ? __fget_files+0x3a0/0x420 [ 305.365167][T13180] __x64_sys_sendmsg+0x1bd/0x2a0 [ 305.365192][T13180] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 305.365224][T13180] ? __pfx_ksys_write+0x10/0x10 [ 305.365260][T13180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.365280][T13180] do_syscall_64+0x174/0x580 [ 305.365300][T13180] ? trace_irq_disable+0x3b/0x140 [ 305.365327][T13180] ? clear_bhb_loop+0x40/0x90 [ 305.365350][T13180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.365367][T13180] RIP: 0033:0x7fce5399ce59 [ 305.365385][T13180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.365401][T13180] RSP: 002b:00007fce548a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 305.365421][T13180] RAX: ffffffffffffffda RBX: 00007fce53c16180 RCX: 00007fce5399ce59 [ 305.365434][T13180] RDX: 0000000004040000 RSI: 0000200000000100 RDI: 0000000000000006 [ 305.365446][T13180] RBP: 00007fce548a5090 R08: 0000000000000000 R09: 0000000000000000 [ 305.365457][T13180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.365467][T13180] R13: 00007fce53c16218 R14: 00007fce53c16180 R15: 00007ffc03e7d568 [ 305.365501][T13180] [ 305.776583][T13182] x_tables: duplicate underflow at hook 1 [ 305.811584][T13182] netlink: 'syz.2.1817': attribute type 83 has an invalid length. [ 306.044796][T13200] __nla_validate_parse: 5 callbacks suppressed [ 306.044816][T13200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1821'. [ 306.075759][T13200] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1821'. [ 306.123916][T13204] tipc: Can't bind to reserved service type 0 [ 306.138246][ T6665] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 306.226037][T13206] bond10 (unregistering): Released all slaves [ 308.665836][ T6672] net_ratelimit: 26 callbacks suppressed [ 308.665858][ T6672] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 308.785774][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 308.895600][ T6672] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 308.935126][T13190] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 308.946104][T13204] netlink: 'syz.3.1822': attribute type 1 has an invalid length. [ 308.965836][T13204] netlink: 760 bytes leftover after parsing attributes in process `syz.3.1822'. [ 309.015203][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 309.015816][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 309.105647][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 309.154097][T13248] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1831'. [ 309.228487][ T6665] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 309.266596][ T5764] hid (null): unknown global tag 0xb4 [ 309.282535][T13254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1832'. [ 309.315139][ T5764] hid (null): unknown global tag 0xd [ 309.365979][ T5782] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 309.427576][ T5764] hid-generic 0005:05C2:0040.0001: unexpected long global item [ 309.465704][ T5764] hid-generic 0005:05C2:0040.0001: probe with driver hid-generic failed with error -22 [ 309.507671][ T6651] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 309.629241][ T1061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 309.775570][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 309.875751][T13294] netlink: 'syz.2.1843': attribute type 83 has an invalid length. [ 309.905067][ T6672] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 310.071944][T13305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1847'. [ 310.088178][T13306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1846'. [ 310.287301][T13310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1848'. [ 310.330617][T13312] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 310.622784][T13322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1851'. [ 311.386878][T13365] sctp: [Deprecated]: syz.0.1865 (pid 13365) Use of struct sctp_assoc_value in delayed_ack socket option. [ 311.386878][T13365] Use struct sctp_sack_info instead [ 311.690833][T13377] IPVS: Scheduler module ip_vs_sip not found [ 311.921237][T13387] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1870'. [ 311.938854][T13388] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1870'. [ 311.954449][T13390] TCP: TCP_TX_DELAY enabled [ 311.988603][T13390] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1869'. [ 313.374791][T13440] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1884'. [ 313.448850][T13440] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1884'. [ 313.511466][T13445] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 313.693335][T13448] netlink: 'syz.2.1884': attribute type 1 has an invalid length. [ 313.715063][ T6665] net_ratelimit: 32 callbacks suppressed [ 313.715085][ T6665] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 313.766241][T13448] netlink: 'syz.2.1884': attribute type 1 has an invalid length. [ 313.795097][T13448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1884'. [ 313.886410][ T68] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 313.995947][ T1061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 314.115350][ T1061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 314.247074][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 314.385264][ T68] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 314.505566][ T1061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 314.524353][T13476] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1894'. [ 314.573503][T13478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1895'. [ 314.609651][T13478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1895'. [ 314.622585][T13478] syzkaller0: entered promiscuous mode [ 314.628902][T13478] syzkaller0: entered allmulticast mode [ 314.638337][T13478] tipc: Started in network mode [ 314.643262][T13478] tipc: Node identity c2b4c83204ef, cluster identity 4711 [ 314.653674][T13478] tipc: Enabled bearer , priority 0 [ 314.678726][T13475] tipc: Resetting bearer [ 314.740084][T13475] tipc: Disabling bearer [ 314.776225][ T6665] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 314.908274][ T6665] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 315.035346][ T1061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 315.106672][T13503] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1903'. [ 315.113553][T13506] xt_NFQUEUE: number of total queues is 0 [ 315.901225][T13539] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 316.468490][T13559] vlan5: entered allmulticast mode [ 316.473941][T13559] bond0: entered allmulticast mode [ 316.931284][T13589] __nla_validate_parse: 8 callbacks suppressed [ 316.931304][T13589] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1928'. [ 317.071114][T13594] sctp: [Deprecated]: syz.0.1929 (pid 13594) Use of int in maxseg socket option. [ 317.071114][T13594] Use struct sctp_assoc_value instead [ 317.118758][T13600] sctp: [Deprecated]: syz.0.1929 (pid 13600) Use of int in maxseg socket option. [ 317.118758][T13600] Use struct sctp_assoc_value instead [ 317.437822][T13618] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.1936'. [ 317.500839][T13618] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.1936'. [ 317.543684][T13618] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.1936'. [ 317.574147][T13628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1935'. [ 317.607526][T13618] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.1936'. [ 317.614529][T13634] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1938'. [ 317.640925][T13618] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.1936'. [ 317.665880][T13618] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.1936'. [ 317.676014][T13618] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.1936'. [ 318.419908][T13655] netlink: 'syz.4.1943': attribute type 1 has an invalid length. [ 318.683731][T13667] xt_cgroup: invalid path, errno=-2 [ 318.807481][ T1061] net_ratelimit: 2020 callbacks suppressed [ 318.807502][ T1061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 319.045252][ T1061] bond1: (slave ip6gretap1): link status up again after 0 ms [ 319.055533][ T5764] lo speed is unknown, defaulting to 1000 [ 319.069533][ T1061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 319.101781][T13702] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 319.195772][ T68] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 319.335750][ T68] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 319.455955][ T1061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 319.576303][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 319.641622][T13718] bond10: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 319.713327][T13702] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 319.720255][T13702] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 319.992005][T13718] bond10 (unregistering): Released all slaves [ 320.365224][T13735] lo speed is unknown, defaulting to 1000 [ 320.403619][T13730] lo speed is unknown, defaulting to 1000 [ 320.667551][T13753] netlink: 'syz.2.1965': attribute type 5 has an invalid length. [ 321.167861][T13773] bond0: entered promiscuous mode [ 321.173522][T13773] bond_slave_0: entered promiscuous mode [ 321.183171][T13773] bond_slave_1: entered promiscuous mode [ 321.190151][T13773] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 321.202453][T13773] batadv_slave_0: entered promiscuous mode [ 321.210382][T13773] batadv_slave_0: left promiscuous mode [ 321.217802][T13773] bond0: left promiscuous mode [ 321.222911][T13773] bond_slave_0: left promiscuous mode [ 321.229026][T13773] bond_slave_1: left promiscuous mode [ 321.238423][T13773] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 321.584590][T13798] tap0: tun_chr_ioctl cmd 2148553947 [ 322.455188][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 323.784436][T13758] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 323.847663][ T5782] net_ratelimit: 1499 callbacks suppressed [ 323.847686][ T5782] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 324.011778][ T6665] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 324.030105][T13807] FAULT_INJECTION: forcing a failure. [ 324.030105][T13807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.052894][T13809] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 324.099555][T13807] CPU: 0 UID: 0 PID: 13807 Comm: syz.2.1979 Not tainted syzkaller #0 PREEMPT(full) [ 324.099583][T13807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 324.099594][T13807] Call Trace: [ 324.099602][T13807] [ 324.099610][T13807] dump_stack_lvl+0xe8/0x150 [ 324.099636][T13807] should_fail_ex+0x412/0x560 [ 324.099660][T13807] _copy_from_user+0x2d/0xb0 [ 324.099683][T13807] ___sys_recvmsg+0x175/0x590 [ 324.099711][T13807] ? __pfx____sys_recvmsg+0x10/0x10 [ 324.099738][T13807] ? __fget_files+0x2a/0x420 [ 324.099793][T13807] do_recvmmsg+0x334/0x800 [ 324.099826][T13807] ? __pfx_do_recvmmsg+0x10/0x10 [ 324.099863][T13807] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 324.099908][T13807] __x64_sys_recvmmsg+0x198/0x250 [ 324.099934][T13807] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 324.099968][T13807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.099990][T13807] do_syscall_64+0x174/0x580 [ 324.100011][T13807] ? trace_irq_disable+0x3b/0x140 [ 324.100039][T13807] ? clear_bhb_loop+0x40/0x90 [ 324.100063][T13807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.100081][T13807] RIP: 0033:0x7f46c979ce59 [ 324.100099][T13807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.100116][T13807] RSP: 002b:00007f46ca58d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 324.100137][T13807] RAX: ffffffffffffffda RBX: 00007f46c9a16090 RCX: 00007f46c979ce59 [ 324.100151][T13807] RDX: 000000000291962b RSI: 0000200000000040 RDI: 0000000000000003 [ 324.100172][T13807] RBP: 00007f46ca58d090 R08: 0000000000000000 R09: 0000000000000000 [ 324.100184][T13807] R10: 45833af92e4b39ff R11: 0000000000000246 R12: 0000000000000001 [ 324.100196][T13807] R13: 00007f46c9a16128 R14: 00007f46c9a16090 R15: 00007ffc314964e8 [ 324.100230][T13807] [ 324.303250][ T5782] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 324.438004][ T5782] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 324.591637][T13825] syzkaller0: entered promiscuous mode [ 324.597793][T13825] syzkaller0: entered allmulticast mode [ 324.630687][T13837] __nla_validate_parse: 40 callbacks suppressed [ 324.630708][T13837] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1989'. [ 324.649510][T13824] pimreg: entered allmulticast mode [ 324.665097][ T6672] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 324.716532][T13829] ipvlan0: entered allmulticast mode [ 324.722117][T13829] veth0_vlan: entered allmulticast mode [ 324.732839][T13829] team0: Device ipvlan0 is up. Set it down before adding it as a team port [ 325.155151][T13853] netlink: 'syz.2.1994': attribute type 4 has an invalid length. [ 325.208947][T13854] netlink: 'syz.2.1994': attribute type 4 has an invalid length. [ 326.719079][T13873] FAULT_INJECTION: forcing a failure. [ 326.719079][T13873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.741305][T13873] CPU: 1 UID: 0 PID: 13873 Comm: syz.1.1998 Not tainted syzkaller #0 PREEMPT(full) [ 326.741334][T13873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 326.741346][T13873] Call Trace: [ 326.741354][T13873] [ 326.741363][T13873] dump_stack_lvl+0xe8/0x150 [ 326.741391][T13873] should_fail_ex+0x412/0x560 [ 326.741419][T13873] _copy_from_user+0x2d/0xb0 [ 326.741443][T13873] ___sys_recvmsg+0x175/0x590 [ 326.741474][T13873] ? __pfx____sys_recvmsg+0x10/0x10 [ 326.741503][T13873] ? __fget_files+0x2a/0x420 [ 326.741561][T13873] do_recvmmsg+0x334/0x800 [ 326.741593][T13873] ? __pfx_do_recvmmsg+0x10/0x10 [ 326.741640][T13873] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 326.741685][T13873] __x64_sys_recvmmsg+0x198/0x250 [ 326.741711][T13873] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 326.741745][T13873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.741767][T13873] do_syscall_64+0x174/0x580 [ 326.741788][T13873] ? trace_irq_disable+0x3b/0x140 [ 326.741816][T13873] ? clear_bhb_loop+0x40/0x90 [ 326.741841][T13873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.741859][T13873] RIP: 0033:0x7feb2039ce59 [ 326.741879][T13873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.741895][T13873] RSP: 002b:00007feb21175028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 326.741917][T13873] RAX: ffffffffffffffda RBX: 00007feb20616090 RCX: 00007feb2039ce59 [ 326.741931][T13873] RDX: 000000000291962b RSI: 0000200000000040 RDI: 0000000000000003 [ 326.741943][T13873] RBP: 00007feb21175090 R08: 0000000000000000 R09: 0000000000000000 [ 326.741954][T13873] R10: 45833af92e4b39ff R11: 0000000000000246 R12: 0000000000000001 [ 326.741966][T13873] R13: 00007feb20616128 R14: 00007feb20616090 R15: 00007ffdbf8f1ca8 [ 326.742000][T13873] [ 327.020359][T13876] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 327.020359][T13876] Please contact the netfilter-devel mailing list or update your nftables rules. [ 327.549369][T13881] can: request_module (can-proto-3) failed. [ 327.576227][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 327.609223][T13855] veth1_vlan: left allmulticast mode [ 327.653455][T13855] batman_adv: batadv0: Interface deactivated: wlan0 [ 327.720384][T13875] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1999'. [ 327.733257][ T6672] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 327.760487][T13884] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 327.798289][ T5782] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.823500][ T5782] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.834635][ T5782] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.844777][ T5782] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.854230][T13888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.868963][T13888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.889994][ T5782] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.926445][ T5782] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.981238][ T5782] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.990610][ T5782] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.055733][ T6672] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 328.170793][T13906] netlink: 284 bytes leftover after parsing attributes in process `syz.1.2006'. [ 328.188956][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 328.206186][T13909] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2008'. [ 328.294438][T13911] syzkaller1: entered promiscuous mode [ 328.300428][T13911] syzkaller1: entered allmulticast mode [ 328.315250][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 328.325986][T13911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2009'. [ 328.498779][T13915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.167662][T13915] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 329.183471][T13915] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 329.499579][ T1694] block nbd0: Possible stuck request ffff888027e00000: control (read@0,1024B). Runtime 90 seconds [ 329.511131][ T1694] block nbd0: Possible stuck request ffff888027e001c0: control (read@1024,1024B). Runtime 90 seconds [ 329.522932][ T1694] block nbd0: Possible stuck request ffff888027e00380: control (read@2048,1024B). Runtime 90 seconds [ 329.534383][ T1694] block nbd0: Possible stuck request ffff888027e00540: control (read@3072,1024B). Runtime 90 seconds [ 331.618795][T13915] veth1_vlan: left promiscuous mode [ 331.628831][T13915] veth0_vlan: left promiscuous mode [ 331.635946][T13915] veth0_vlan: entered promiscuous mode [ 331.646035][T13915] veth1_vlan: entered promiscuous mode [ 331.656042][T13915] veth1_macvtap: left promiscuous mode [ 331.662622][T13915] veth0_macvtap: left promiscuous mode [ 331.675932][T13915] veth0_macvtap: entered promiscuous mode [ 331.688397][T13915] veth1_macvtap: entered promiscuous mode [ 331.700546][T13915] 8021q: adding VLAN 0 to HW filter on device €Â [ 331.713937][T13915] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 331.732052][T13915] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 331.744781][T13915] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 331.760792][T13915] bridge0: port 3(batadv1) entered blocking state [ 331.767359][T13915] bridge0: port 3(batadv1) entered forwarding state [ 331.774305][T13915] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 331.790393][T13915] 8021q: adding VLAN 0 to HW filter on device bond1 [ 331.821896][T13915] 8021q: adding VLAN 0 to HW filter on device bond2 [ 331.830363][T13915] 8021q: adding VLAN 0 to HW filter on device bond3 [ 331.855272][T13915] team0: left promiscuous mode [ 331.860702][T13915] team1: left promiscuous mode [ 331.868273][T13915] virt_wifi0: entered promiscuous mode [ 331.875211][T13915] virt_wifi0: entered allmulticast mode [ 331.881023][T13915] macsec2: left promiscuous mode [ 331.889298][T13915] ip6gre2: left promiscuous mode [ 331.903376][T13920] team0: Device ipvlan0 is up. Set it down before adding it as a team port [ 331.915428][ T5732] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 331.930058][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.937325][ T5782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.006854][ T6663] bond4: (slave veth11): link status definitely up, 10000 Mbps full duplex [ 332.018077][ T6663] net_ratelimit: 1 callbacks suppressed [ 332.018096][ T6663] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 332.044025][ T6663] bond4: active interface up! [ 332.110533][ T5764] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 332.171727][ T1061] netdevsim netdevsim4 €Â: set [0, 0] type 1 family 0 port 4352 - 0 [ 332.182710][ T1061] netdevsim netdevsim4 €Â: set [0, 1] type 1 family 0 port 8472 - 0 [ 332.192958][ T1061] netdevsim netdevsim4 €Â: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.201745][ T1061] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 332.219006][ T1061] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 332.242370][ T1061] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.287230][ T1061] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 332.329160][ T1061] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 332.361009][ T1061] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.395906][ T1061] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0 [ 332.425024][ T1061] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 332.440813][ T1061] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.455642][T13951] tipc: Failed to remove unknown binding: 66,0,0/0:1671102724/1671102726 [ 332.481331][T13951] tipc: Failed to remove unknown binding: 66,0,0/0:1671102724/1671102725 [ 332.493527][ T5782] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 332.520848][T13951] tipc: Failed to remove unknown binding: 66,0,0/0:1671102724/1671102726 [ 332.542724][ T36] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 332.542766][T13951] tipc: Failed to remove unknown binding: 66,0,0/0:1671102724/1671102725 [ 332.581112][ T8715] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 332.589239][ T36] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 332.661700][ T36] batman_adv: batadv1: adding TT local entry ba:ee:ad:44:59:ac to non-existent VLAN 4 [ 332.707522][ T36] batman_adv: batadv1: adding TT local entry ba:ee:ad:44:59:ac to non-existent VLAN 4 [ 332.709205][T13956] netlink: 'syz.2.2020': attribute type 2 has an invalid length. [ 332.749973][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 332.798911][T13956] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 332.823192][ T8715] batman_adv: batadv1: adding TT local entry ba:ee:ad:44:59:ac to non-existent VLAN 4 [ 332.857823][T13962] syzkaller1: entered promiscuous mode [ 332.885945][T13962] syzkaller1: entered allmulticast mode [ 332.918179][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 333.026197][ T8715] batman_adv: batadv1: adding TT local entry ba:ee:ad:44:59:ac to non-existent VLAN 4 [ 333.086776][ T8715] batman_adv: batadv1: adding TT local entry ba:ee:ad:44:59:ac to non-existent VLAN 4 [ 333.375987][ T8715] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 333.477215][ T5739] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 333.610662][T13989] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2031'. [ 333.864522][T14006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2033'. [ 334.205749][ T5764] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 334.224774][T14021] xt_NFQUEUE: number of total queues is 0 [ 334.233117][T14008] syzkaller0: left promiscuous mode [ 334.257669][ T5764] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 334.277577][T14008] veth1_vlan: left promiscuous mode [ 334.303246][T14008] veth0_vlan: left promiscuous mode [ 334.322867][T14008] veth0_vlan: entered promiscuous mode [ 334.334706][T14008] veth1_vlan: entered promiscuous mode [ 334.347346][T14008] veth1_vlan: entered allmulticast mode [ 334.354481][T14008] macvlan1: left promiscuous mode [ 334.407262][T14008] 8021q: adding VLAN 0 to HW filter on device €Â [ 334.426374][T14008] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 334.446816][T14008] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 334.467689][T14008] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 334.484739][T14008] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 334.540072][T14008] 8021q: adding VLAN 0 to HW filter on device bond1 [ 334.588424][T14008] 8021q: adding VLAN 0 to HW filter on device bond2 [ 334.613738][T14008] macvlan2: left promiscuous mode [ 334.651645][T14008] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 334.745560][ T5764] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 334.797559][T14008] bridge1: left promiscuous mode [ 334.816218][T14008] bridge2: left promiscuous mode [ 334.823625][T14008] bond3: left promiscuous mode [ 334.835327][T14008] 8021q: adding VLAN 0 to HW filter on device bond3 [ 334.859095][T14008] team1: left promiscuous mode [ 334.874209][T14008] team2: left promiscuous mode [ 334.907137][T14008] bridge0: port 1(vlan2) entered blocking state [ 334.913567][T14008] bridge0: port 1(vlan2) entered forwarding state [ 334.936362][T14008] bridge3: left promiscuous mode [ 334.944844][T14008] 8021q: adding VLAN 0 to HW filter on device bond4 [ 335.111739][ T6672] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.140454][ T6672] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.214193][T14034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2041'. [ 335.234031][ T6672] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.512827][T14056] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2046'. [ 335.515530][T14050] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2045'. [ 335.646287][T14060] bond10: entered promiscuous mode [ 335.691769][T14062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2049'. [ 335.735253][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 335.782874][T14060] netlink: 'syz.3.2048': attribute type 6 has an invalid length. [ 335.791327][T14060] netlink: 'syz.3.2048': attribute type 7 has an invalid length. [ 335.799888][T14060] netlink: 'syz.3.2048': attribute type 8 has an invalid length. [ 335.949931][T14076] bond5: (slave veth1): Removing an active aggregator [ 335.966248][ T5836] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 335.968401][T14076] bond5: (slave veth1): Releasing backup interface [ 336.053572][T14081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2056'. [ 336.070095][T14081] batman_adv: batadv0: Removing interface: wlan0 [ 336.220675][T14089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2058'. [ 336.335389][T14094] netlink: 'syz.1.2060': attribute type 1 has an invalid length. [ 336.570189][T14105] netlink: 'syz.1.2060': attribute type 6 has an invalid length. [ 336.586071][T14105] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2060'. [ 336.673616][T14105] bond10: entered promiscuous mode [ 336.680026][T14105] bond10: entered allmulticast mode [ 336.687987][T14105] 8021q: adding VLAN 0 to HW filter on device bond10 [ 336.855234][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 336.856103][ T5764] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 336.951128][T14124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2067'. [ 337.066212][ T12] net_ratelimit: 17 callbacks suppressed [ 337.066237][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 337.185745][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 337.293892][T14142] ip6gre3: entered promiscuous mode [ 337.301147][T14142] ip6gre3: entered allmulticast mode [ 337.386079][ T1061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 337.506421][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 337.647677][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 337.765386][ T6663] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 337.895137][ T68] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 337.925109][T14163] vlan0: entered promiscuous mode [ 338.025161][ T5782] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 338.158891][ T6663] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 338.276003][ T68] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 338.297404][ T5753] ip6_tnl_xmit_ctl: 3 callbacks suppressed [ 338.297422][ T5753] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 338.375795][ T5753] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 338.619870][T14193] netlink: 'syz.0.2088': attribute type 10 has an invalid length. [ 338.632414][T14189] vxcan0: tx address claim with dlc 0 [ 338.773189][T14202] __nla_validate_parse: 9 callbacks suppressed [ 338.773209][T14202] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2090'. [ 338.790736][T14202] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2090'. [ 339.194659][T14222] tipc: Started in network mode [ 339.211711][T14222] tipc: Node identity 9eb686edd60d, cluster identity 4711 [ 339.244889][T14222] tipc: Enabled bearer , priority 0 [ 339.284269][T14223] syzkaller0: entered promiscuous mode [ 339.307423][T14223] syzkaller0: entered allmulticast mode [ 339.330045][T14222] tipc: Resetting bearer [ 339.399603][T14229] lo speed is unknown, defaulting to 1000 [ 339.472962][T14234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2100'. [ 339.948204][T14209] tipc: Resetting bearer [ 340.011072][T14209] tipc: Disabling bearer [ 340.171228][T14261] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 340.790784][T14281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2112'. [ 341.242104][T14313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2120'. [ 341.255179][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 341.272456][T14313] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2120'. [ 341.295753][T14313] unsupported nlmsg_type 40 [ 341.679464][T14339] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 341.708117][T14339] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 341.739935][T14339] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 341.858855][T14344] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2127'. [ 341.859100][T14345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2128'. [ 341.871301][T14344] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2127'. [ 341.878402][T14345] lo: entered allmulticast mode [ 341.921169][T14344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2127'. [ 342.150645][T14361] veth0: entered promiscuous mode [ 342.210297][T14361] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 342.324827][T14362] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 342.531522][T14364] 5nè‹Ò: entered promiscuous mode [ 342.556034][T14360] veth0: left promiscuous mode [ 342.565339][ T5782] net_ratelimit: 31 callbacks suppressed [ 342.565358][ T5782] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 342.695504][ T68] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 342.786608][T14379] xt_policy: neither incoming nor outgoing policy selected [ 342.826040][ T1061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 342.866691][T14382] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.957244][ T68] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 343.076119][ T6663] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 343.225448][ T5782] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 343.288489][T14402] netlink: 'syz.0.2143': attribute type 1 has an invalid length. [ 343.355226][ T68] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 343.504489][T14413] ip6gre4: entered promiscuous mode [ 343.521462][T14413] ip6gre4: entered allmulticast mode [ 343.555617][ T1061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 343.685719][ T1061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 343.790999][T14424] __nla_validate_parse: 8 callbacks suppressed [ 343.791019][T14424] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2149'. [ 344.163777][T14441] tipc: New replicast peer: 255.255.255.255 [ 344.210281][T14441] tipc: Enabled bearer , priority 10 [ 344.236708][T14443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2152'. [ 344.566128][T14464] mac80211_hwsim hwsim12 syzkaller0: left promiscuous mode [ 344.598674][T14465] ipip0: entered promiscuous mode [ 344.668019][ T5739] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 344.744066][ T5739] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 344.818232][ T5739] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 344.981860][T14484] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2164'. [ 345.241432][T14502] netlink: 460 bytes leftover after parsing attributes in process `syz.2.2167'. [ 345.327148][ T5739] tipc: Node number set to 3327903794 [ 345.457113][T14508] netlink: 'syz.0.2172': attribute type 10 has an invalid length. [ 345.460570][T14506] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2171'. [ 345.477993][T14508] bridge0: port 1(vlan2) entered disabled state [ 345.487053][T14508] bridge0: left allmulticast mode [ 345.503955][T14508] bridge0: port 1(vlan2) entered blocking state [ 345.510451][T14508] bridge0: port 1(vlan2) entered forwarding state [ 345.541991][T14508] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 345.578536][ T5739] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 346.021615][T14523] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2175'. [ 346.136559][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 346.525654][T14542] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:21 [ 346.624882][T14545] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2182'. [ 346.646862][T14546] netlink: 'syz.0.2183': attribute type 1 has an invalid length. [ 346.751431][T14550] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.2183'. [ 346.840916][T14551] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2183'. [ 346.869626][T14549] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 346.907785][T14551] bond6: entered promiscuous mode [ 346.934906][T14551] bond6: entered allmulticast mode [ 346.991870][T14546] bond6: (slave geneve3): making interface the new active one [ 347.013059][T14546] geneve3: entered promiscuous mode [ 347.022836][T14546] geneve3: entered allmulticast mode [ 347.044135][T14546] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 347.067827][ T68] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 347.102057][ T68] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 347.135605][ T68] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 347.170665][T14557] mac80211_hwsim hwsim12 syzkaller0: Caught tx_queue_len zero misconfig [ 347.238986][T14557] mac80211_hwsim hwsim12 syzkaller0: entered promiscuous mode [ 347.301484][T14562] syzkaller0: entered promiscuous mode [ 347.681566][ T1061] net_ratelimit: 26 callbacks suppressed [ 347.681640][ T1061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 347.735677][T14571] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2190'. [ 347.766380][T14571] nbd: must specify at least one socket [ 347.825995][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 347.948741][ T6663] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 348.086188][ T1061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 348.206713][ T1061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 348.238809][T14579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.352820][T14578] syzkaller1: entered promiscuous mode [ 348.383869][T14578] syzkaller1: entered allmulticast mode [ 348.526911][ T68] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 348.645510][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 348.765074][ T68] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 348.896738][ T1061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 349.015615][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 349.227008][T14603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2199'. [ 349.976911][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 349.982699][T14618] netlink: 'syz.0.2205': attribute type 1 has an invalid length. [ 350.141262][T14614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2204'. [ 350.784281][T14633] netlink: 'syz.2.2210': attribute type 6 has an invalid length. [ 351.199416][T14656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2216'. [ 351.211639][T14656] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.231767][T14656] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.264121][T14656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.281875][T14656] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.310256][T14656] batman_adv: batadv0: Interface deactivated: wlan0 [ 351.326869][T14656] batman_adv: batadv0: Removing interface: wlan0 [ 351.689465][T14681] vlan6: entered allmulticast mode [ 351.716978][T14681] dummy0: entered allmulticast mode [ 351.872039][T14685] lo speed is unknown, defaulting to 1000 [ 351.911886][T14675] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2223'. [ 352.049570][T14683] tc action pedit 'at' offset 46 out of bounds [ 352.261318][T14711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2229'. [ 352.765269][ T5782] net_ratelimit: 26 callbacks suppressed [ 352.765290][ T5782] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 353.123149][T14734] lo speed is unknown, defaulting to 1000 [ 353.130140][ T6663] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 353.320291][T14756] netlink: 'syz.1.2236': attribute type 1 has an invalid length. [ 353.354344][T14756] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2236'. [ 353.385551][T14756] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2236'. [ 353.446189][ T5782] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 353.451768][T14756] netlink: 'syz.1.2236': attribute type 1 has an invalid length. [ 353.483715][T14756] netlink: 634 bytes leftover after parsing attributes in process `syz.1.2236'. [ 353.506658][T14762] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2238'. [ 353.606715][ T6663] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 353.808238][T14776] netlink: 'syz.0.2241': attribute type 7 has an invalid length. [ 353.910036][ T6663] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 354.070137][ T6663] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 354.215228][ T6672] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 354.294729][T14801] IPVS: set_ctl: invalid protocol: 137 10.1.1.2:20002 [ 354.365091][ T5782] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 354.488618][ T5782] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 354.533664][T14812] nbd: must specify a size in bytes for the device [ 354.605638][ T1061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 354.978388][T14835] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2252'. [ 355.362655][T14848] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2254'. [ 355.384726][T14848] tc_dump_action: action bad kind [ 355.426939][T14852] netlink: 'syz.1.2257': attribute type 1 has an invalid length. [ 355.493603][T14852] bond11: entered promiscuous mode [ 355.500779][T14852] 8021q: adding VLAN 0 to HW filter on device bond11 [ 355.619230][T14858] bond11: (slave bridge4): making interface the new active one [ 355.627337][T14858] bridge4: entered promiscuous mode [ 355.664790][T14858] bond11: (slave bridge4): Enslaving as an active interface with an up link [ 355.784509][T14879] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 355.790834][T14875] tipc: Enabling of bearer rejected, already enabled [ 356.234820][T14895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2265'. [ 356.382016][T14903] dvmrp0: entered allmulticast mode [ 356.598658][T14912] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2269'. [ 356.683783][T14921] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2272'. [ 356.688316][T14919] tipc: Enabling of bearer rejected, failed to enable media [ 356.982104][T14892] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2264'. [ 357.420380][T14948] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2278'. [ 357.472385][T14948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2278'. [ 357.533291][T14948] netlink: 'syz.3.2278': attribute type 30 has an invalid length. [ 357.581101][T14951] ip6t_srh: unknown srh match flags 4000 [ 357.588830][T14952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2278'. [ 357.608390][T14952] netlink: 'syz.3.2278': attribute type 30 has an invalid length. [ 357.632409][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.672635][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.703053][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.733831][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.788860][ T5782] net_ratelimit: 21 callbacks suppressed [ 357.788882][ T5782] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 357.956278][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 358.015068][T14962] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2282'. [ 358.097731][ T5782] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 358.226213][ T6663] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 358.345764][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 358.465506][ T5782] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 358.528344][T14975] ip6gre2: entered promiscuous mode [ 358.586003][T14975] ip6gre2: entered allmulticast mode [ 358.626016][ T5782] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 358.815040][ T5782] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 358.937225][ T5782] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 358.979619][T14995] netlink: 'syz.0.2290': attribute type 1 has an invalid length. [ 359.072166][T14995] bond7: entered promiscuous mode [ 359.086592][T14995] 8021q: adding VLAN 0 to HW filter on device bond7 [ 359.125717][ T68] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 359.249550][T14995] bond7: (slave bridge5): making interface the new active one [ 359.272752][T14995] bridge5: entered promiscuous mode [ 359.289461][T14995] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 359.576215][ T1694] block nbd0: Possible stuck request ffff888027e00000: control (read@0,1024B). Runtime 120 seconds [ 359.587201][ T1694] block nbd0: Possible stuck request ffff888027e001c0: control (read@1024,1024B). Runtime 120 seconds [ 359.599402][ T1694] block nbd0: Possible stuck request ffff888027e00380: control (read@2048,1024B). Runtime 120 seconds [ 359.612539][ T1694] block nbd0: Possible stuck request ffff888027e00540: control (read@3072,1024B). Runtime 120 seconds [ 359.722920][T15011] bond10: entered promiscuous mode [ 360.016592][T15031] __nla_validate_parse: 2 callbacks suppressed [ 360.016629][T15031] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2298'. [ 360.072836][T15023] syzkaller1: entered promiscuous mode [ 360.085045][T15023] syzkaller1: entered allmulticast mode [ 360.289378][T15041] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2301'. [ 360.312810][T15043] netlink: 'syz.2.2302': attribute type 10 has an invalid length. [ 360.346584][T15043] netlink: 'syz.2.2302': attribute type 10 has an invalid length. [ 360.393657][T15048] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2303'. [ 360.639153][T15063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2306'. [ 360.679155][T15063] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2306'. [ 361.508781][T15094] syzkaller1: entered promiscuous mode [ 361.531066][T15094] syzkaller1: entered allmulticast mode [ 361.960154][T15103] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 362.217634][T15112] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2322'. [ 362.834546][ T6663] net_ratelimit: 29 callbacks suppressed [ 362.834568][ T6663] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 362.981014][T15137] vlan7: entered promiscuous mode [ 362.994454][T15137] bond_slave_1: entered promiscuous mode [ 363.039604][ T5782] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 363.156192][ T5782] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 363.275565][ T1061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 363.334335][T15167] nftables ruleset with unbound chain [ 363.386827][ T1061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 363.508810][ T5782] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 363.576369][ T5753] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 363.626482][ T5782] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 363.646245][ T5753] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 363.661863][T15186] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2342'. [ 363.678459][T15186] 0·: renamed from hsr0 [ 363.691231][T15186] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 363.718475][T15186] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 363.742493][T15186] 0·: entered allmulticast mode [ 363.760829][T15186] hsr_slave_0: entered allmulticast mode [ 363.779256][T15186] hsr_slave_1: entered allmulticast mode [ 363.814453][T15186] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 363.856938][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 363.901097][T15194] lo speed is unknown, defaulting to 1000 [ 364.027299][ T5753] hsr0: entered promiscuous mode [ 364.037814][T15204] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2348'. [ 364.055898][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 364.057453][T15204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2348'. [ 364.067124][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 364.296370][ T5764] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 364.405360][ T5764] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 364.523542][T15228] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2354'. [ 364.543498][T15230] netlink: 'syz.2.2355': attribute type 1 has an invalid length. [ 364.570668][T15230] netlink: 'syz.2.2355': attribute type 2 has an invalid length. [ 364.585463][T15230] netlink: 'syz.2.2355': attribute type 2 has an invalid length. [ 364.600235][T15230] netlink: 'syz.2.2355': attribute type 2 has an invalid length. [ 364.696138][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 365.163079][T15269] netlink: 'syz.2.2368': attribute type 1 has an invalid length. [ 365.283843][T15279] __nla_validate_parse: 3 callbacks suppressed [ 365.301924][T15279] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2369'. [ 365.320923][T15278] netlink: 4108 bytes leftover after parsing attributes in process `syz.1.2370'. [ 365.333912][T15279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2369'. [ 365.350581][T15278] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2370'. [ 365.361513][T15278] 0·: renamed from hsr0 (while UP) [ 365.370961][T15278] 0·: entered allmulticast mode [ 365.376420][T15278] hsr_slave_0: entered allmulticast mode [ 365.382083][T15278] hsr_slave_1: entered allmulticast mode [ 365.585837][T15287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2372'. [ 365.697873][T15299] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 134217731, id = 0 [ 365.856711][T15309] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2378'. [ 366.656407][T15353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2387'. [ 366.795717][T15353] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 366.857654][T15364] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2389'. [ 366.929209][T15364] netlink: 'syz.0.2389': attribute type 10 has an invalid length. [ 366.997198][T15364] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2389'. [ 367.146894][T15382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2392'. [ 367.256523][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 367.318812][T15389] netlink: 'syz.2.2391': attribute type 1 has an invalid length. [ 367.492968][T15389] 8021q: adding VLAN 0 to HW filter on device bond12 [ 367.876604][ T68] net_ratelimit: 29 callbacks suppressed [ 367.876628][ T68] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 368.029453][T15413] netlink: 'syz.3.2397': attribute type 1 has an invalid length. [ 368.043637][ T5782] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 368.341716][T15413] bond11: (slave gretap1): making interface the new active one [ 368.380338][T15413] bond11: (slave gretap1): Enslaving as an active interface with an up link [ 368.413989][T15435] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 368.456353][ T5782] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 368.626180][ T5782] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 368.817387][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 368.950607][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 369.107253][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 369.236297][ T6663] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 369.375917][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 369.846295][ T5782] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 370.079096][T15510] lo speed is unknown, defaulting to 1000 [ 372.675835][T15497] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 372.879735][T15545] __nla_validate_parse: 5 callbacks suppressed [ 372.879755][T15545] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2427'. [ 372.965451][ T12] net_ratelimit: 29 callbacks suppressed [ 372.965472][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 373.009195][T15549] syzkaller0: entered promiscuous mode [ 373.028597][T15549] syzkaller0: entered allmulticast mode [ 373.071149][T15549] tipc: Started in network mode [ 373.088179][T15549] tipc: Node identity 0a3abea68691, cluster identity 4711 [ 373.111282][T15549] tipc: Enabled bearer , priority 0 [ 373.148136][T15549] tipc: Resetting bearer [ 373.175470][ T5782] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 373.198502][T15548] tipc: Resetting bearer [ 373.268540][T15548] tipc: Disabling bearer [ 373.316016][ T5782] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 373.425735][ T5782] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 373.555168][ T6663] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 373.675229][ T6663] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 374.105493][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 374.225595][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 374.358430][ T1061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 374.402108][T15632] tipc: Enabling of bearer rejected, already enabled [ 374.415614][T15633] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2454'. [ 374.441640][T15632] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1806) ! [ 374.525542][ T6663] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 374.552766][T15632] tipc: Resetting bearer [ 374.670951][T15643] netlink: 'syz.4.2456': attribute type 13 has an invalid length. [ 374.703583][T15643] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2456'. [ 374.924380][T15660] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2459'. [ 374.938225][T15664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2461'. [ 375.208089][T15679] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2465'. [ 375.295218][T15682] syzkaller0: entered promiscuous mode [ 375.307947][T15682] syzkaller0: entered allmulticast mode [ 375.344864][T15682] netlink: 'syz.3.2466': attribute type 6 has an invalid length. [ 375.367147][T15682] IPv6: NLM_F_CREATE should be specified when creating new route [ 375.637240][T15703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2471'. [ 375.752565][T15686] lo speed is unknown, defaulting to 1000 [ 376.168596][T15721] can: request_module (can-proto-0) failed. [ 376.235329][T15695] netlink: 'syz.1.2469': attribute type 4 has an invalid length. [ 376.265913][T15721] batman_adv: batadv0: Adding interface: dummy0 [ 376.297597][T15721] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.357268][T15721] batman_adv: batadv0: Interface activated: dummy0 [ 376.791677][T15744] bridge_slave_1: left allmulticast mode [ 376.820877][T15744] bridge_slave_1: left promiscuous mode [ 376.845293][T15744] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.891546][T15744] bond0: (slave bond_slave_0): Releasing backup interface [ 376.913521][T15744] bond0: (slave bond_slave_1): Releasing backup interface [ 377.198439][T15764] netlink: 'syz.0.2487': attribute type 2 has an invalid length. [ 377.223219][T15764] netlink: 'syz.0.2487': attribute type 3 has an invalid length. [ 377.296079][T15756] syzkaller0: entered promiscuous mode [ 377.303945][T15769] netlink: 'syz.0.2487': attribute type 1 has an invalid length. [ 377.316999][T15756] syzkaller0: entered allmulticast mode [ 377.372968][T15775] bridge0: Device is already in use. [ 378.781660][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 379.765078][ T5782] net_ratelimit: 35 callbacks suppressed [ 379.765101][ T5782] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 379.921845][ T6663] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 380.002342][T15787] can: request_module (can-proto-0) failed. [ 380.068557][ T6672] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 380.177281][T15805] netlink: 'syz.3.2499': attribute type 2 has an invalid length. [ 380.228227][ T6663] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 380.357810][ T6672] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 380.486279][ T68] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 380.549706][T15821] bridge0: port 3(ip6gretap0) entered blocking state [ 380.577740][T15821] bridge0: port 3(ip6gretap0) entered disabled state [ 380.587915][T15821] ip6gretap0: entered allmulticast mode [ 380.598315][T15821] ip6gretap0: entered promiscuous mode [ 380.629127][ T1061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 380.656357][T15827] veth0: entered promiscuous mode [ 380.757511][T15822] veth0: left promiscuous mode [ 380.787122][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 380.826455][T15840] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2506'. [ 380.918658][ T1061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 381.036543][ T6672] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 381.112294][T15865] netlink: 'syz.2.2513': attribute type 21 has an invalid length. [ 381.124824][T15854] can: request_module (can-proto-0) failed. [ 381.141019][T15865] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2513'. [ 381.162711][T15865] netlink: 'syz.2.2513': attribute type 4 has an invalid length. [ 381.205228][T15860] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 381.221807][T15865] netlink: 'syz.2.2513': attribute type 5 has an invalid length. [ 381.236906][T15865] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2513'. [ 381.746959][T15894] IPVS: Scheduler module ip_vs_ not found [ 381.911242][T15905] netlink: 424 bytes leftover after parsing attributes in process `syz.0.2521'. [ 381.920950][T15905] netlink: 'syz.0.2521': attribute type 1 has an invalid length. [ 382.042805][T15908] can: request_module (can-proto-0) failed. [ 382.428274][T15919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2524'. [ 382.882212][T15944] netlink: 'syz.0.2532': attribute type 13 has an invalid length. [ 382.959085][ T8715] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 383.122053][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 383.217996][T15947] lo speed is unknown, defaulting to 1000 [ 383.421965][T15974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2539'. [ 383.639923][T15974] xt_NFQUEUE: number of total queues is 0 [ 383.673266][T15974] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2539'. [ 383.887744][T15992] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2543'. [ 383.916309][ T994] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 383.930041][T15992] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2543'. [ 383.992849][T15997] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2544'. [ 384.078748][T15997] ip6gre1: entered promiscuous mode [ 384.089310][T15997] ip6gre1: entered allmulticast mode [ 384.136121][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 384.492411][T16028] netlink: 'syz.3.2555': attribute type 3 has an invalid length. [ 384.668270][T16040] netlink: 'syz.1.2557': attribute type 10 has an invalid length. [ 384.836046][ T36] net_ratelimit: 24 callbacks suppressed [ 384.836069][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 384.981007][T16048] netlink: 'syz.1.2559': attribute type 1 has an invalid length. [ 384.995930][ T6663] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 385.148502][ T6672] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 385.296392][ T5782] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 385.846513][ T1061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 385.976351][ T1061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 386.007130][T16083] __nla_validate_parse: 8 callbacks suppressed [ 386.007150][T16083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2568'. [ 386.043814][T16083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2568'. [ 386.109596][ T1061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 386.235385][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 386.356831][ T1061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 386.445945][T16109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2577'. [ 386.461245][T16110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2577'. [ 386.475897][ T1061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 386.552643][T16112] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2578'. [ 387.141456][T16146] netlink: 'syz.3.2585': attribute type 3 has an invalid length. [ 387.178885][T16147] xt_hashlimit: size too large, truncated to 1048576 [ 387.230362][T16151] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2584'. [ 387.270168][T16151] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2584'. [ 387.373182][T16157] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2588'. [ 387.412177][T16151] x_tables: duplicate underflow at hook 3 [ 387.958481][T16183] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 388.126314][T16189] tipc: Enabling of bearer rejected, failed to enable media [ 388.157734][T16190] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2598'. [ 388.345399][T16200] tun0: tun_chr_ioctl cmd 1074025675 [ 388.351053][T16200] tun0: persist enabled [ 388.357208][T16205] syzkaller0: Caught tx_queue_len zero misconfig [ 388.364605][T16203] netlink: 'syz.4.2604': attribute type 9 has an invalid length. [ 388.369398][T16208] sctp: [Deprecated]: syz.2.2605 (pid 16208) Use of struct sctp_assoc_value in delayed_ack socket option. [ 388.369398][T16208] Use struct sctp_sack_info instead [ 388.404293][T16200] tun0: tun_chr_ioctl cmd 1074025675 [ 388.412658][T16200] tun0: persist disabled [ 388.561963][T16215] tipc: Enabling of bearer rejected, failed to enable media [ 388.771306][T16218] can: request_module (can-proto-0) failed. [ 388.878420][T16228] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2609'. [ 389.188702][T16236] sctp: [Deprecated]: syz.1.2612 (pid 16236) Use of int in max_burst socket option. [ 389.188702][T16236] Use struct sctp_assoc_value instead [ 389.257799][T16240] tipc: Enabling of bearer rejected, failed to enable media [ 389.659636][ T1694] block nbd0: Possible stuck request ffff888027e00000: control (read@0,1024B). Runtime 150 seconds [ 389.670593][ T1694] block nbd0: Possible stuck request ffff888027e001c0: control (read@1024,1024B). Runtime 150 seconds [ 389.681757][ T1694] block nbd0: Possible stuck request ffff888027e00380: control (read@2048,1024B). Runtime 150 seconds [ 389.693210][ T1694] block nbd0: Possible stuck request ffff888027e00540: control (read@3072,1024B). Runtime 150 seconds [ 389.761142][T16243] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.780733][T16243] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.881844][T16254] syzkaller1: entered promiscuous mode [ 389.888186][T16254] syzkaller1: entered allmulticast mode [ 389.963256][T16244] lo speed is unknown, defaulting to 1000 [ 389.969251][ T5782] net_ratelimit: 21 callbacks suppressed [ 389.969271][ T5782] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 390.073214][T16263] netlink: 'syz.2.2618': attribute type 1 has an invalid length. [ 390.140414][T16243] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.151163][T16243] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.236884][T16263] bond13: entered promiscuous mode [ 390.242511][T16263] 8021q: adding VLAN 0 to HW filter on device bond13 [ 390.320476][T16261] bond13: (slave bridge5): making interface the new active one [ 390.347211][T16261] bridge5: entered promiscuous mode [ 390.357193][T16261] bond13: (slave bridge5): Enslaving as an active interface with an up link [ 390.441920][T16243] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.464130][T16243] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.601755][ T5782] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 390.610857][T16280] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 390.624338][T16280] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 390.735229][T16243] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.746760][T16243] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.857116][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 391.026671][ T6663] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.052947][ T6663] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.075882][ T68] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 391.141340][T16300] netlink: 'syz.2.2627': attribute type 1 has an invalid length. [ 391.155886][ T5782] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.180764][ T5782] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.200143][ T5782] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.225420][ T5782] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.276924][ T68] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.289205][ T68] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.315914][T16306] tipc: Invalid UDP bearer configuration [ 391.315966][T16306] tipc: Enabling of bearer rejected, failed to enable media [ 391.365457][ T6663] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 391.374296][T16309] bridge0: port 3(batadv1) entered disabled state [ 391.389338][T16306] netlink: 'syz.1.2630': attribute type 1 has an invalid length. [ 391.401140][T16309] bridge0: entered allmulticast mode [ 391.515191][ T5782] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 391.635481][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 391.647946][T16319] netlink: 'syz.1.2630': attribute type 3 has an invalid length. [ 391.765582][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 391.839698][T16338] __nla_validate_parse: 7 callbacks suppressed [ 391.839719][T16338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2640'. [ 391.888761][T16338] bond12: entered promiscuous mode [ 391.906496][T16338] 8021q: adding VLAN 0 to HW filter on device bond12 [ 391.916392][T16341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2641'. [ 391.957976][T16341] bond5: option ad_actor_sys_prio: invalid value (0) [ 391.964766][T16341] bond5: option ad_actor_sys_prio: allowed values 1 - 65535 [ 391.976464][T16341] bond5 (unregistering): Released all slaves [ 391.986423][T16343] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.050628][T16338] 8021q: adding VLAN 0 to HW filter on device bond12 [ 392.058253][T16338] bond12: (slave sit6): The slave device specified does not support setting the MAC address [ 392.081481][T16338] bond12: (slave sit6): Error -95 calling set_mac_address [ 392.120580][T16342] syzkaller0: left promiscuous mode [ 392.126609][T16342] syzkaller0: left allmulticast mode [ 392.246483][T16357] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2645'. [ 392.290275][T16359] syzkaller0: entered promiscuous mode [ 392.303219][T16359] syzkaller0: entered allmulticast mode [ 392.337630][T16361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2647'. [ 392.981448][T16377] can: request_module (can-proto-0) failed. [ 393.347073][T16418] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2664'. [ 393.352455][T16416] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2665'. [ 393.357519][T16418] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2664'. [ 393.522641][T16427] netlink: 272 bytes leftover after parsing attributes in process `syz.3.2667'. [ 393.869207][T16442] tipc: Resetting bearer [ 393.881992][T16442] tipc: Resetting bearer [ 394.012176][T16442] bridge0: port 1(vlan2) entered disabled state [ 395.077490][ T68] net_ratelimit: 23 callbacks suppressed [ 395.077511][ T68] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 395.225087][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 395.264004][T16518] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2683'. [ 395.375248][ T68] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 395.575172][ T5782] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 395.716702][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 395.935923][ T1061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 395.970110][T16548] netlink: 18 bytes leftover after parsing attributes in process `syz.2.2692'. [ 396.026802][T16548] openvswitch: netlink: Flow key attr not present in new flow. [ 396.145124][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 396.266174][ T1061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 396.396893][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 396.749674][T16603] xt_hashlimit: size too large, truncated to 1048576 [ 396.922538][T16614] __nla_validate_parse: 1 callbacks suppressed [ 396.922559][T16614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2713'. [ 396.967198][T16616] netlink: 'syz.3.2715': attribute type 3 has an invalid length. [ 396.968017][T16613] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20000 [ 397.005656][T16612] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20000 [ 397.783192][T16640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2720'. [ 398.348013][T16667] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2726'. [ 398.368795][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 399.106227][T16700] syzkaller0: entered promiscuous mode [ 399.133918][T16700] syzkaller0: entered allmulticast mode [ 399.165909][T16700] tipc: Resetting bearer [ 399.491488][T16727] syzkaller1: entered promiscuous mode [ 399.511474][ T30] audit: type=1804 audit(1781246422.228:45): pid=16729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2747" name="/newroot/549/cgroup.controllers" dev="tmpfs" ino=2839 res=1 errno=0 [ 399.536566][T16727] syzkaller1: entered allmulticast mode [ 399.558377][T16729] netlink: 'syz.2.2747': attribute type 1 has an invalid length. [ 399.564575][ T30] audit: type=1800 audit(1781246422.228:46): pid=16729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2747" name="cgroup.controllers" dev="tmpfs" ino=2839 res=0 errno=0 [ 399.575722][T16729] netlink: 5164 bytes leftover after parsing attributes in process `syz.2.2747'. [ 399.613896][T16727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2746'. [ 399.667100][T16727] netlink: 'syz.0.2746': attribute type 1 has an invalid length. [ 399.681165][T16729] nbd: illegal input index 830110067 [ 399.849233][T16727] 8021q: adding VLAN 0 to HW filter on device bond9 [ 399.928808][T16735] bond9: (slave gretap2): making interface the new active one [ 399.947034][T16735] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 399.958355][T16749] batadv_slave_1: entered promiscuous mode [ 399.963114][T16754] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2749'. [ 400.003728][T16751] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 400.018713][T16751] bond5 (unregistering): Released all slaves [ 400.130790][T16748] batadv_slave_1: left promiscuous mode [ 400.186522][ T68] net_ratelimit: 25 callbacks suppressed [ 400.186544][ T68] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 400.245668][T16757] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2751'. [ 400.336049][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 400.456105][ T6663] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 400.562883][T16776] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2756'. [ 400.576109][ T1061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 400.595298][T16776] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2756'. [ 400.696149][ T6663] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 400.698424][T16781] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.2758'. [ 400.816424][ T1061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 400.939627][ T6663] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 401.049875][T16796] tipc: Enabling of bearer rejected, failed to enable media [ 401.075690][ T6663] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 401.175575][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 401.186003][ T6663] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 401.325131][ T1061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 402.440951][T16859] 8021q: VLANs not supported on bond0 [ 402.455601][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 402.909114][T16880] __nla_validate_parse: 4 callbacks suppressed [ 402.909135][T16880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2787'. [ 403.382882][T16902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2793'. [ 403.592807][T16907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2794'. [ 403.802239][T16917] vlan3: entered promiscuous mode [ 403.815468][T16917] vlan1: entered promiscuous mode [ 403.843045][T16920] lo: Caught tx_queue_len zero misconfig [ 404.848544][T16944] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2804'. [ 405.108045][T16948] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2806'. [ 405.285735][ T5782] net_ratelimit: 28 callbacks suppressed [ 405.285756][ T5782] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 405.428966][ T68] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 405.545247][ T5782] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 405.677911][ T68] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 405.797716][T16978] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2816'. [ 405.820519][ T68] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 405.946124][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 405.998634][T16982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2818'. [ 406.052642][T16989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2820'. [ 406.075175][ T6672] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 406.185421][ T5782] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 406.315462][ T6672] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 406.403244][T17009] xt_hashlimit: size too large, truncated to 1048576 [ 406.412852][T17009] xt_hashlimit: max too large, truncated to 1048576 [ 406.438816][T17002] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 406.479660][T17009] bond13 (unregistering): Released all slaves [ 406.563460][T17016] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2830'. [ 406.595749][ T1061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 406.608481][T17006] sctp: [Deprecated]: syz.2.2827 (pid 17006) Use of int in maxseg socket option. [ 406.608481][T17006] Use struct sctp_assoc_value instead [ 406.618145][T17016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2830'. [ 406.641274][T17009] xt_CT: You must specify a L4 protocol and not use inversions on it [ 407.519388][ T50] block nbd1: Receive control failed (result -32) [ 407.520338][ T5641] block nbd1: Receive control failed (result -32) [ 407.599608][T17065] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 407.610864][T17065] macsec0: entered promiscuous mode [ 407.639472][T17065] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 407.759308][T17072] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 407.775096][T17072] macsec0: entered promiscuous mode [ 407.788398][T17072] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 407.944361][T17074] bond14: entered promiscuous mode [ 407.953019][T17074] 8021q: adding VLAN 0 to HW filter on device bond14 [ 407.994303][T17079] bridge6: entered promiscuous mode [ 408.004455][T17079] bond14: (slave bridge6): Enslaving as an active interface with an up link [ 408.021431][T17086] __nla_validate_parse: 75 callbacks suppressed [ 408.021453][T17086] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2847'. [ 408.041695][T17081] bond14 (unregistering): (slave bridge6): Releasing backup interface [ 408.051500][T17081] bridge6: left promiscuous mode [ 408.061408][T17081] bond14 (unregistering): Released all slaves [ 408.453965][T17112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2854'. [ 408.637990][T17120] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2859'. [ 408.662529][T17120] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2859'. [ 408.673771][T17120] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2859'. [ 408.693315][T17127] syzkaller1: entered promiscuous mode [ 408.693921][T17120] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2859'. [ 408.712231][T17127] syzkaller1: entered allmulticast mode [ 408.718470][T17120] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2859'. [ 408.719069][T17120] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2859'. [ 408.739279][T17120] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2859'. [ 408.751227][T17120] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2859'. [ 409.137503][T17147] can: request_module (can-proto-0) failed. [ 409.724994][T17169] bridge0: port 3(batadv1) entered blocking state [ 409.731637][T17169] bridge0: port 3(batadv1) entered forwarding state [ 409.937116][T17169] vlan0: left promiscuous mode [ 410.180603][ T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 410.232348][T17169] ip6gre3: left promiscuous mode [ 410.244759][ T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 410.278661][T17169] ip6gre4: left promiscuous mode [ 410.302203][ T24] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 410.331463][T17169] 8021q: adding VLAN 0 to HW filter on device bond5 [ 410.424124][ T1061] net_ratelimit: 19 callbacks suppressed [ 410.424146][ T1061] batman_adv: batadv1: adding TT local entry ba:ee:ad:44:59:ac to non-existent VLAN 4 [ 410.475496][ T8708] batman_adv: batadv1: adding TT local entry ba:ee:ad:44:59:ac to non-existent VLAN 4 [ 410.488852][ T1061] batman_adv: batadv1: adding TT local entry ba:ee:ad:44:59:ac to non-existent VLAN 4 [ 410.516319][T17191] netlink: 'syz.3.2875': attribute type 12 has an invalid length. [ 410.635175][ T24] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 410.766536][ T24] batman_adv: batadv1: adding TT local entry ba:ee:ad:44:59:ac to non-existent VLAN 4 [ 410.795799][ T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 410.886502][ T24] batman_adv: batadv1: adding TT local entry ba:ee:ad:44:59:ac to non-existent VLAN 4 [ 410.961643][T17191] nbd: socks must be embedded in a SOCK_ITEM attr [ 411.097143][ T1061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 411.162474][T17191] block nbd2: shutting down sockets [ 411.195437][ T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 411.305266][ T1061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 411.426422][ T6672] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 411.510277][T17224] tipc: Enabled bearer , priority 16 [ 411.566316][ T68] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 411.695255][ T68] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 411.816936][T17244] xt_CT: You must specify a L4 protocol and not use inversions on it [ 411.967736][T17253] syzkaller0: left promiscuous mode [ 411.982974][T17253] syzkaller0: left allmulticast mode [ 411.993116][T17253] tipc: Resetting bearer [ 412.151214][T17262] xt_TCPMSS: Only works on TCP SYN packets [ 412.151303][T17260] xt_TCPMSS: Only works on TCP SYN packets [ 412.683348][T17290] [ 412.685750][T17290] ====================================================== [ 412.692851][T17290] WARNING: possible circular locking dependency detected [ 412.699953][T17290] syzkaller #0 Not tainted [ 412.704370][T17290] ------------------------------------------------------ [ 412.711409][T17290] syz.3.2900/17290 is trying to acquire lock: [ 412.717728][T17290] ffffffff8ea85680 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x152/0x650 [ 412.726993][T17290] [ 412.726993][T17290] but task is already holding lock: [ 412.734436][T17290] ffff888032864078 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 412.743937][T17290] [ 412.743937][T17290] which lock already depends on the new lock. [ 412.743937][T17290] [ 412.754339][T17290] [ 412.754339][T17290] the existing dependency chain (in reverse order) is: [ 412.763346][T17290] [ 412.763346][T17290] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 412.770974][T17290] __might_fault+0xcb/0x130 [ 412.776008][T17290] _copy_from_user+0x28/0xb0 [ 412.781191][T17290] csum_and_copy_from_iter_full+0x1e7/0x1f00 [ 412.787754][T17290] ip_generic_getfrag+0x149/0x2d0 [ 412.793376][T17290] __ip6_append_data+0x39cd/0x3f60 [ 412.799040][T17290] ip6_append_data+0x10f/0x280 [ 412.804326][T17290] rawv6_sendmsg+0x12d3/0x18e0 [ 412.809663][T17290] ____sys_sendmsg+0x80a/0x9f0 [ 412.814971][T17290] ___sys_sendmsg+0x2a5/0x360 [ 412.820166][T17290] __x64_sys_sendmsg+0x1bd/0x2a0 [ 412.825626][T17290] do_syscall_64+0x174/0x580 [ 412.830826][T17290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.837290][T17290] [ 412.837290][T17290] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 412.845023][T17290] lock_sock_nested+0x41/0x100 [ 412.850353][T17290] inet_shutdown+0x6a/0x390 [ 412.855402][T17290] nbd_mark_nsock_dead+0x2e9/0x560 [ 412.861087][T17290] sock_shutdown+0x15e/0x260 [ 412.866203][T17290] nbd_clear_sock+0x24/0x170 [ 412.871308][T17290] nbd_config_put+0x2dd/0x580 [ 412.876524][T17290] nbd_genl_connect+0x19d5/0x1cf0 [ 412.882072][T17290] genl_family_rcv_msg_doit+0x22a/0x330 [ 412.888207][T17290] genl_rcv_msg+0x61c/0x7a0 [ 412.893233][T17290] netlink_rcv_skb+0x232/0x4b0 [ 412.898518][T17290] genl_rcv+0x28/0x40 [ 412.903029][T17290] netlink_unicast+0x75c/0x8e0 [ 412.908311][T17290] netlink_sendmsg+0x813/0xb40 [ 412.913595][T17290] ____sys_sendmsg+0x972/0x9f0 [ 412.918882][T17290] ___sys_sendmsg+0x2a5/0x360 [ 412.924087][T17290] __x64_sys_sendmsg+0x1bd/0x2a0 [ 412.929571][T17290] do_syscall_64+0x174/0x580 [ 412.934708][T17290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.941131][T17290] [ 412.941131][T17290] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 412.948801][T17290] __mutex_lock+0x1a3/0x1550 [ 412.954002][T17290] nbd_queue_rq+0x37b/0x1100 [ 412.959126][T17290] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 412.965267][T17290] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 412.972141][T17290] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 412.978642][T17290] blk_mq_run_hw_queue+0x348/0x4f0 [ 412.984271][T17290] blk_mq_dispatch_list+0xd16/0xe10 [ 412.989994][T17290] blk_mq_flush_plug_list+0x48d/0x570 [ 412.995891][T17290] __blk_flush_plug+0x3ed/0x4d0 [ 413.001297][T17290] __submit_bio+0x28d/0x580 [ 413.006330][T17290] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 413.012508][T17290] block_read_full_folio+0x599/0x830 [ 413.018361][T17290] filemap_read_folio+0x137/0x3b0 [ 413.023945][T17290] do_read_cache_folio+0x358/0x590 [ 413.029581][T17290] read_part_sector+0xb6/0x2b0 [ 413.034931][T17290] adfspart_check_ICS+0xb1/0x960 [ 413.040400][T17290] bdev_disk_changed+0x817/0x1770 [ 413.045943][T17290] blkdev_get_whole+0x380/0x510 [ 413.051375][T17290] bdev_open+0x31e/0xd30 [ 413.056162][T17290] blkdev_open+0x470/0x610 [ 413.061174][T17290] do_dentry_open+0x822/0x13a0 [ 413.066483][T17290] vfs_open+0x3b/0x340 [ 413.071074][T17290] path_openat+0x2e08/0x3860 [ 413.076191][T17290] do_file_open+0x23e/0x4a0 [ 413.081217][T17290] do_sys_openat2+0x113/0x200 [ 413.086419][T17290] __x64_sys_openat+0x138/0x170 [ 413.091792][T17290] do_syscall_64+0x174/0x580 [ 413.096907][T17290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.103319][T17290] [ 413.103319][T17290] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 413.110534][T17290] __mutex_lock+0x1a3/0x1550 [ 413.115664][T17290] nbd_queue_rq+0xc6/0x1100 [ 413.121127][T17290] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 413.127194][T17290] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 413.134048][T17290] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 413.140561][T17290] blk_mq_run_hw_queue+0x348/0x4f0 [ 413.146196][T17290] blk_mq_dispatch_list+0xd16/0xe10 [ 413.151916][T17290] blk_mq_flush_plug_list+0x48d/0x570 [ 413.157812][T17290] __blk_flush_plug+0x3ed/0x4d0 [ 413.163184][T17290] __submit_bio+0x28d/0x580 [ 413.168210][T17290] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 413.174361][T17290] block_read_full_folio+0x599/0x830 [ 413.180167][T17290] filemap_read_folio+0x137/0x3b0 [ 413.185719][T17290] do_read_cache_folio+0x358/0x590 [ 413.191354][T17290] read_part_sector+0xb6/0x2b0 [ 413.196642][T17290] adfspart_check_ICS+0xb1/0x960 [ 413.202098][T17290] bdev_disk_changed+0x817/0x1770 [ 413.207642][T17290] blkdev_get_whole+0x380/0x510 [ 413.213011][T17290] bdev_open+0x31e/0xd30 [ 413.217774][T17290] blkdev_open+0x470/0x610 [ 413.222720][T17290] do_dentry_open+0x822/0x13a0 [ 413.228004][T17290] vfs_open+0x3b/0x340 [ 413.232591][T17290] path_openat+0x2e08/0x3860 [ 413.237724][T17290] do_file_open+0x23e/0x4a0 [ 413.242755][T17290] do_sys_openat2+0x113/0x200 [ 413.247949][T17290] __x64_sys_openat+0x138/0x170 [ 413.253318][T17290] do_syscall_64+0x174/0x580 [ 413.258439][T17290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.264856][T17290] [ 413.264856][T17290] -> #3 (set->srcu){.+.+}-{0:0}: [ 413.271992][T17290] __synchronize_srcu+0xca/0x300 [ 413.277483][T17290] elevator_switch+0x1e8/0x7a0 [ 413.282768][T17290] elevator_change+0x2cc/0x450 [ 413.288052][T17290] elevator_set_default+0x36c/0x430 [ 413.293770][T17290] blk_register_queue+0x3e9/0x4e0 [ 413.299328][T17290] __add_disk+0x677/0xd50 [ 413.304204][T17290] add_disk_fwnode+0xfb/0x480 [ 413.309421][T17290] nbd_dev_add+0x72c/0xb50 [ 413.314458][T17290] nbd_init+0x168/0x1f0 [ 413.319251][T17290] do_one_initcall+0x250/0x870 [ 413.324560][T17290] do_initcall_level+0x104/0x190 [ 413.330049][T17290] do_initcalls+0x59/0xa0 [ 413.334903][T17290] kernel_init_freeable+0x2a6/0x3e0 [ 413.340636][T17290] kernel_init+0x1d/0x1d0 [ 413.345492][T17290] ret_from_fork+0x514/0xb70 [ 413.350635][T17290] ret_from_fork_asm+0x1a/0x30 [ 413.355925][T17290] [ 413.355925][T17290] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 413.363750][T17290] __mutex_lock+0x1a3/0x1550 [ 413.368862][T17290] elevator_change+0x1b3/0x450 [ 413.374151][T17290] elevator_set_none+0xb5/0x140 [ 413.379522][T17290] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 413.385857][T17290] nbd_start_device+0x17f/0xb10 [ 413.391254][T17290] nbd_genl_connect+0x165b/0x1cf0 [ 413.396804][T17290] genl_family_rcv_msg_doit+0x22a/0x330 [ 413.402879][T17290] genl_rcv_msg+0x61c/0x7a0 [ 413.407907][T17290] netlink_rcv_skb+0x232/0x4b0 [ 413.413191][T17290] genl_rcv+0x28/0x40 [ 413.417698][T17290] netlink_unicast+0x75c/0x8e0 [ 413.423017][T17290] netlink_sendmsg+0x813/0xb40 [ 413.428332][T17290] ____sys_sendmsg+0x972/0x9f0 [ 413.433634][T17290] ___sys_sendmsg+0x2a5/0x360 [ 413.438836][T17290] __x64_sys_sendmsg+0x1bd/0x2a0 [ 413.444295][T17290] do_syscall_64+0x174/0x580 [ 413.449410][T17290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.455835][T17290] [ 413.455835][T17290] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 413.464556][T17290] blk_alloc_queue+0x546/0x680 [ 413.469854][T17290] __blk_mq_alloc_disk+0x197/0x390 [ 413.475494][T17290] nbd_dev_add+0x499/0xb50 [ 413.480436][T17290] nbd_init+0x168/0x1f0 [ 413.485118][T17290] do_one_initcall+0x250/0x870 [ 413.490406][T17290] do_initcall_level+0x104/0x190 [ 413.495868][T17290] do_initcalls+0x59/0xa0 [ 413.500721][T17290] kernel_init_freeable+0x2a6/0x3e0 [ 413.506444][T17290] kernel_init+0x1d/0x1d0 [ 413.511300][T17290] ret_from_fork+0x514/0xb70 [ 413.516413][T17290] ret_from_fork_asm+0x1a/0x30 [ 413.521701][T17290] [ 413.521701][T17290] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 413.528912][T17290] __lock_acquire+0x15a5/0x2cf0 [ 413.534312][T17290] lock_acquire+0x106/0x350 [ 413.539333][T17290] fs_reclaim_acquire+0x71/0x100 [ 413.544797][T17290] prepare_alloc_pages+0x152/0x650 [ 413.550444][T17290] __alloc_frozen_pages_noprof+0x12f/0x380 [ 413.556808][T17290] alloc_pages_mpol+0x235/0x490 [ 413.562211][T17290] folio_alloc_mpol_noprof+0x39/0x160 [ 413.568106][T17290] shmem_alloc_and_add_folio+0x442/0xf80 [ 413.574268][T17290] shmem_get_folio_gfp+0x5a9/0x1670 [ 413.579987][T17290] shmem_fault+0x179/0x390 [ 413.584928][T17290] __do_fault+0x138/0x2a0 [ 413.589791][T17290] do_pte_missing+0x2093/0x33f0 [ 413.595169][T17290] handle_mm_fault+0x1bf2/0x3170 [ 413.600635][T17290] do_user_addr_fault+0x75b/0x1340 [ 413.606296][T17290] exc_page_fault+0x6a/0xc0 [ 413.611321][T17290] asm_exc_page_fault+0x26/0x30 [ 413.616691][T17290] fault_in_readable+0x8e/0x130 [ 413.622064][T17290] fault_in_iov_iter_readable+0x1b4/0x2f0 [ 413.628364][T17290] generic_perform_write+0x7af/0x8f0 [ 413.634177][T17290] shmem_file_write_iter+0xf8/0x120 [ 413.639897][T17290] vfs_write+0x61d/0xb90 [ 413.644676][T17290] ksys_write+0x150/0x270 [ 413.649531][T17290] do_syscall_64+0x174/0x580 [ 413.654652][T17290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.661063][T17290] [ 413.661063][T17290] other info that might help us debug this: [ 413.661063][T17290] [ 413.671287][T17290] Chain exists of: [ 413.671287][T17290] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 413.671287][T17290] [ 413.683939][T17290] Possible unsafe locking scenario: [ 413.683939][T17290] [ 413.691463][T17290] CPU0 CPU1 [ 413.696864][T17290] ---- ---- [ 413.702227][T17290] rlock(&mm->mmap_lock); [ 413.706671][T17290] lock(sk_lock-AF_INET6); [ 413.713700][T17290] lock(&mm->mmap_lock); [ 413.720550][T17290] lock(fs_reclaim); [ 413.724534][T17290] [ 413.724534][T17290] *** DEADLOCK *** [ 413.724534][T17290] [ 413.732711][T17290] 3 locks held by syz.3.2900/17290: [ 413.737903][T17290] #0: ffff888057a24410 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x227/0xb90 [ 413.746841][T17290] #1: ffff88802bab1a80 (&sb->s_type->i_mutex_key#15){+.+.}-{4:4}, at: shmem_file_write_iter+0x7f/0x120 [ 413.757993][T17290] #2: ffff888032864078 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 413.767924][T17290] [ 413.767924][T17290] stack backtrace: [ 413.773810][T17290] CPU: 0 UID: 0 PID: 17290 Comm: syz.3.2900 Not tainted syzkaller #0 PREEMPT(full) [ 413.773828][T17290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 413.773838][T17290] Call Trace: [ 413.773885][T17290] [ 413.773925][T17290] dump_stack_lvl+0xe8/0x150 [ 413.774021][T17290] print_circular_bug+0x2e1/0x300 [ 413.774042][T17290] check_noncircular+0x12e/0x150 [ 413.774063][T17290] __lock_acquire+0x15a5/0x2cf0 [ 413.774080][T17290] ? __lock_acquire+0x6b5/0x2cf0 [ 413.774112][T17290] ? unwind_next_frame+0xa6/0x2550 [ 413.774133][T17290] ? unwind_next_frame+0xa6/0x2550 [ 413.774151][T17290] ? prepare_alloc_pages+0x152/0x650 [ 413.774171][T17290] lock_acquire+0x106/0x350 [ 413.774186][T17290] ? prepare_alloc_pages+0x152/0x650 [ 413.774208][T17290] ? __bfs+0x153/0x290 [ 413.774221][T17290] ? __pfx_hlock_conflict+0x10/0x10 [ 413.774241][T17290] fs_reclaim_acquire+0x71/0x100 [ 413.774259][T17290] ? prepare_alloc_pages+0x152/0x650 [ 413.774279][T17290] prepare_alloc_pages+0x152/0x650 [ 413.774303][T17290] __alloc_frozen_pages_noprof+0x12f/0x380 [ 413.774326][T17290] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 413.774349][T17290] ? __pfx_policy_nodemask+0x10/0x10 [ 413.774366][T17290] alloc_pages_mpol+0x235/0x490 [ 413.774382][T17290] folio_alloc_mpol_noprof+0x39/0x160 [ 413.774397][T17290] shmem_alloc_and_add_folio+0x442/0xf80 [ 413.774415][T17290] ? filemap_get_entry+0xcd/0x3f0 [ 413.774438][T17290] ? __pfx_filemap_get_entry+0x10/0x10 [ 413.774456][T17290] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 413.774475][T17290] ? shmem_allowable_huge_orders+0x5ec/0x690 [ 413.774495][T17290] shmem_get_folio_gfp+0x5a9/0x1670 [ 413.774518][T17290] shmem_fault+0x179/0x390 [ 413.774540][T17290] __do_fault+0x138/0x2a0 [ 413.774560][T17290] ? do_pte_missing+0x125b/0x33f0 [ 413.774580][T17290] do_pte_missing+0x2093/0x33f0 [ 413.774604][T17290] ? handle_mm_fault+0xf1/0x3170 [ 413.774628][T17290] handle_mm_fault+0x1bf2/0x3170 [ 413.774650][T17290] ? handle_mm_fault+0xf1/0x3170 [ 413.774670][T17290] ? __pfx_handle_mm_fault+0x10/0x10 [ 413.774693][T17290] ? lock_mm_and_find_vma+0xa7/0x340 [ 413.774714][T17290] do_user_addr_fault+0x75b/0x1340 [ 413.774734][T17290] exc_page_fault+0x6a/0xc0 [ 413.774752][T17290] asm_exc_page_fault+0x26/0x30 [ 413.774766][T17290] RIP: 0010:fault_in_readable+0x8e/0x130 [ 413.774784][T17290] Code: a9 00 00 00 0f 01 cb 0f ae e8 4d 85 f6 40 0f 95 c5 4c 89 ff 4c 89 f6 e8 50 d5 b0 ff 4d 39 f7 0f 97 c0 40 84 c5 74 43 4d 89 f5 <41> 8a 45 00 88 44 24 07 49 81 e5 00 f0 ff ff 4d 8d a5 00 10 00 00 [ 413.774802][T17290] RSP: 0018:ffffc900052f7aa8 EFLAGS: 00050202 [ 413.774834][T17290] RAX: ffffffff8214e401 RBX: 0000000000000380 RCX: ffff8880317a5d00 [ 413.774845][T17290] RDX: 0000000000000002 RSI: 0000200000001000 RDI: 0000200000001380 [ 413.774855][T17290] RBP: dffffc0000000001 R08: ffff8880317a5d00 R09: 0000000000000002 [ 413.774865][T17290] R10: 0000000000000001 R11: 0000000000000002 R12: 00007ffffffff000 [ 413.774874][T17290] R13: 0000200000001000 R14: 0000200000001000 R15: 0000200000001380 [ 413.774889][T17290] ? fault_in_safe_writeable+0x221/0x240 [ 413.774914][T17290] ? fault_in_readable+0x80/0x130 [ 413.774931][T17290] fault_in_iov_iter_readable+0x1b4/0x2f0 [ 413.774948][T17290] generic_perform_write+0x7af/0x8f0 [ 413.774974][T17290] ? __pfx_generic_perform_write+0x10/0x10 [ 413.774994][T17290] ? down_write+0x16d/0x200 [ 413.775035][T17290] ? file_update_time_flags+0x3b3/0x4a0 [ 413.775063][T17290] shmem_file_write_iter+0xf8/0x120 [ 413.775083][T17290] vfs_write+0x61d/0xb90 [ 413.775105][T17290] ? __pfx_vfs_write+0x10/0x10 [ 413.775127][T17290] ? __pfx_do_futex+0x10/0x10 [ 413.775153][T17290] ? kmem_cache_free+0x182/0x650 [ 413.775179][T17290] ksys_write+0x150/0x270 [ 413.775199][T17290] ? __pfx_ksys_write+0x10/0x10 [ 413.775222][T17290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.775236][T17290] do_syscall_64+0x174/0x580 [ 413.775252][T17290] ? trace_irq_disable+0x3b/0x140 [ 413.775283][T17290] ? clear_bhb_loop+0x40/0x90 [ 413.775299][T17290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.775313][T17290] RIP: 0033:0x7fce5399ce59 [ 413.775326][T17290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.775338][T17290] RSP: 002b:00007fce548e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 413.775353][T17290] RAX: ffffffffffffffda RBX: 00007fce53c15fa0 RCX: 00007fce5399ce59 [ 413.775363][T17290] RDX: 0000000000032600 RSI: 0000200000000380 RDI: 0000000000000005 [ 413.775373][T17290] RBP: 00007fce53a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 413.775382][T17290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.775391][T17290] R13: 00007fce53c16038 R14: 00007fce53c15fa0 R15: 00007ffc03e7d568 [ 413.775407][T17290] [ 414.289231][T17296] __nla_validate_parse: 29 callbacks suppressed [ 414.289252][T17296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2901'. [ 414.327137][T17296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2901'. [ 414.357364][T17296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2901'. [ 414.371981][T17296] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2901'. [ 415.465269][ T68] net_ratelimit: 20 callbacks suppressed [ 415.465292][ T68] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 415.585587][ T1061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 415.695054][ T1061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 415.815064][ T6672] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 415.925073][ T68] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 416.035065][ T68] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 416.145009][ T5782] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 416.255033][ T1061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 416.365347][ T1061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 416.475170][ T6672] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 419.736095][ T1694] block nbd0: Possible stuck request ffff888027e00000: control (read@0,1024B). Runtime 180 seconds [ 419.746969][ T1694] block nbd0: Possible stuck request ffff888027e001c0: control (read@1024,1024B). Runtime 180 seconds [ 419.758083][ T1694] block nbd0: Possible stuck request ffff888027e00380: control (read@2048,1024B). Runtime 180 seconds [ 419.769163][ T1694] block nbd0: Possible stuck request ffff888027e00540: control (read@3072,1024B). Runtime 180 seconds [ 420.295739][ T4994] udevd[4994]: worker [8731] /devices/virtual/block/nbd0 timeout; kill it [ 420.304363][ T4994] udevd[4994]: seq 14693 '/devices/virtual/block/nbd0' killed [ 420.495262][ T1061] net_ratelimit: 35 callbacks suppressed [ 420.495285][ T1061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 420.615638][ T1061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 420.725010][ T1061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 420.835104][ T5782] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 420.945085][ T5782] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 421.055002][ T6672] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 421.165055][ T1061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 421.275166][ T5782] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 421.385342][ T1061] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 421.495819][ T1061] bond1: (slave ip6gretap1): failed to get link speed/duplex