last executing test programs: 1m0.756251227s ago: executing program 0 (id=1572): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRESHEX=r2, @ANYRES64=r3], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x80, 0x0, 0x0, 0xfffffff9}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) bind$inet(r4, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_FLOW={0x8, 0xb, 0x8}]}, 0x2c}}, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001400010000000000000000c90300008008000280"], 0x1c}], 0x1}, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x8e}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='highspeed', 0x9) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0xffffffff, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x205}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r10}, @IFLA_HSR_SLAVE2={0x8, 0x2, r11}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x24000010) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x1100, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 1m0.415413093s ago: executing program 2 (id=1576): r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'pimreg1\x00', {0x2}, 0x3}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x6}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80884}, 0x20000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000d301fa850c19aa4e3a7d8cc5373d7d30083eb26da66e662d0000000000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', r3, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x20400) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x2000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) 59.692005394s ago: executing program 0 (id=1581): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair(0x22, 0x5, 0x1, &(0x7f0000000280)) close(r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff000000008500feffd100000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = socket$kcm(0x2, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4c814) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='percpu_alloc_percpu\x00', r1, 0x0, 0x10}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50) 57.6899748s ago: executing program 2 (id=1583): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000a000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x2f}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x14, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r0, 0x124, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001e40)}}, 0x10) 57.624228112s ago: executing program 0 (id=1584): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000040)={@broadcast, @private=0x81, r1}, 0xc) r2 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000001280)={&(0x7f0000000080)=@hci={0x1f, 0x2, 0x3}, 0x80, &(0x7f0000001240)=[{&(0x7f0000000100)="a2da76151662542261ee82c85f78db0d8bc270a3e4b2338f95142bc092731d57e4962bdfa585c2867232df71fdac826fa48a6b0147b15ca8600473e26cb876aebae5186be5bd86796cdedb5bb223a34d727e35574dd00ad068a0c2a852ffd20b419cd01ccd7125032a5d0236380456a2b7d91c0673c85e2368964edce6bab7ce274dff23720ef9a7c50fd72ba943165ca6953186cc786655ee9664323f11366af636c1168cd58724335255abd875b27a2e617bfa2a04ad19c6ecd8369db2015534f361642dd289042a764c431b9818532a79aa751b4c310575b31f83c39264a28597dc91faa0876a15f6bf9ae768260f1430cfd14fcf8d1786186b6d3c03028061a8d765ac89ad240870bc8d07cb9b10f41fd19decb48843e7bb57209f985788a1d74aaa82dc2bcebb291f539e921aca83ca0fc90c8a29fc7ef3b156f412809896dfc70a8e272d3f04c98f5945cad5a4db005bbad6f430b3cf22460749bc9967047b982db4f7414bd7b4cb22c7ec14c6d0b9a1adde19e7a76d28e5297d10ff18e50f7e6f373084214e5b3fb0cc2cd0e1bf61ff57bede14371d9013a02611318137e33053b6753b9bf35dfc6b0f585329e2934cb08039686411582ece9fa25a0d28bcff545114e89114241e31e5d408f9e54cb498814bbe37060401c9bd482c96225794f9455390f7245bc219e21ab2f3a4879991a7fd69d4fa958ab4108b22a93b0aee587ef0a94f4053850b08dc053d778428122f26731d0e72be55b1c3bc6eb36b19b4a7467ff61bca95f2a82d1ee56c091f56ad0ddd37824ea5e46e961c8025991e750b0732ed0d32b536dfb952ffb7a3aa06ba55f6c32b3ddc5470aa86777e5115721d2b1691a252eaa58025c9242a741f7de0e886d66002755d95e443f85dfc994632a19f59d94d99e2d60080a3a35110c52093d8e525c23eac6843db8bc6d7cce41445588016f9ecc5c4c95fa4006d3a7d23c145a33cb5064f6be26394c5b3b01922a63d92c1148e66d3f64512e645c2721daf375128630005ec9da22f46e46f26a77af28447dd2fab0dd4a5d32c54dd6172aca87f8e898d022b1985a92a659e25662f229c264f406229c205510bb604185d2b0a6f3c188a23be0a313931d8e856e5b92b9d935ab6d9eec916e7e75ee13501d94bf5a93a4d58840cd0a47d499a19f73477f22d42e88c4d94a530b1f46b6e45981fb806789ff239e23ab3a88e0956906779fe34e8cae41f0bbb7a9650ef0126a56efd4df9728a3dd7ae6bfc751fa2590bb641007f5613f0afaec7c36cc6a6d05c9e1e4d8ba38df4579916826a5b9eed4ed3dcafb51b84763ee7b68b2292a3d844f828a35d0035825e316320989bef74640c1c5707d8cd3b7fa8344e67608f33094daabba63e0c77d20f2a2165b4f9a3a2d086ad6813cc31bc7e6290453b2e05bbb210145a7e55bd3e55ddb75ca794d6ad479cdc8af59d5b7e42673d76161f5ecf9433f4541ddf0584d02d0e0a0b552c45bd1e935a4a70f7c6031786e57169a1a3f031a2952473221b5f383e7c58268892d070506c5430723700742b16da421660087187b8f7f917703de13b9f4de95eeee8600c8b84a7ce3e1fb138d1a1387c04858770f23d7ca7dc7a6fe6b0049747a69b89c8e2eb1ab75cbd1a751bcbcdaf36433990a564c4a90c30d461e2e2d1ae0349ab5002c18347465750ba2c7116f3e312fe1a8c098c2ffdb56608a195afceefd69a7a8e02815b4b835bd83f157bd7fb3b6c1fcc656db27f780531e7ad9330d36326f85489150cf875b37c312bd58d7b87f548ec147c0f0c4845395d2a50735e3cc9090120431e1ce3554af2d9cb551c508451e3da6080be13081aee8f39c59b62564883bbf1d64a96b772d07d29056497e6819460360d9af649fcf50b18e49427370fd1413147c8ee8b8d1cddcad230115ef9de6f7f49f7e12adac93b417138fc2fc1c81b21bb1dc249983fb7aa15685e247997ae42b10078508a202786f2a7a218e226cc2b45bdc362cdc7e50670939b45c4163a702787003a640f35c2022629717c7931b1584f3de2c9cc50276acdbc4f23eff4fa6581fa00dec383017e6ce246e6e5702998ea784cb6f7a3bc543ced2393ed18405809b77fd1f8e16f878e3d3ceb75e0561d60463c72f78d7eefcef1b0b19be27d6ca60ef81dd7d01823605837aa64708bbaf7c3d468cb0102946c86df260a37a2a14f8003eee5e14e306238a88c29b015df29f361707b7dc34312461dfc878f33c3e575b81c27ca20cbd5ea444e956092f38cfc878f382411d397a43c928d27fe709ca5a6e735b1b3771accede9ef7bcafd8c5f1ea1f1e89a10066cf184dea820a68c4bd054a495e3f0d287f27fc307a609b418fe35fb8ac929e2d944ae079aee46a5f602de25ee6e984104ecb21846ada828fb2b513e524b230a97b12a737249229631788117b5af16532ec8dba797c238853332d180fc000503f452382461180512595efcba8fea62f0c6b5057f08d09d16242c9b9dc590a5cbc7cee14f3a8a634e35a81f55c83b82397941b2721f2ac4c3f6c9258fedc4fc365e72c3b4f09f89705dcb75fd7bcff16a07016e298b92ee24ab59420361b8496cce5875f2976295582f24491e0ead96a6393f72869c9c2c3899f1e947fc579c53cb33306311709e3cd136e4b988986f1060ad3db2d0461a53f2ef98c10107cfc89e1ed0c44ffb891095790d312aae36725cb57440d07e6b3c43bda1d2cd9a4887b80986e0fa1441fffe14f341146f5d511ae816ef38e1b63530841fbbefc19fa9a0fdca219890a58953d5f58c7fc4841f3a587945952e66e5e0cab838c2cb187478a75f89ea49c3b1d5be53f906eea8a71bd779044fa7d6c9742626e2c1ff7efd368acb40f02f579d50883cd060c8b7cf3d4447130193daa030ff746f7d33093e899d31a76d84acbfc3d58ca8906b30de7d455734dd888901bc13c218b9cf0cde8d9bef876ae49ba5a37d512472e94687a8bace5648b4c3dc95a11bd79dfe7b8757ebda550408423a31b6c9ba601fb7f48a7698a1efcc6762103a02e6bc1c04f6ef87b7755472969b57e0d5790f326908712b4881da2f257c7206f48af46dc17d8f593c04749364e1f45fe56bf3997033cc079ee772eea03e878d4c1852e806028dad763deea87e5cdb18b9d06e67dc6b968aec46ec951d04a8f4c6de278fcaf011be3721663bbab1b5346e4d1cb29e9f66f86a6730f4fedbaf0bbaddc230d181ebcade13f3964ccccb524c1550594182e9e8a312ee985753c9a2c68f1c83d34f8067b7ba5c242a0b19b1162a1e938637076444c96aa609e0f1955588a8956e2531b569b94de39be260b9ce52031bc0d294931bf75707fabfd23f1a17b518b40e558a0a09e0ab03f984b4f7e4131f37f5c90a5dfa7fc8cc39035645b67e5d5616674e2b8840783cc42d85387db5ad870cf85eb04307429642f49ae43732599e3860e71ddfe36f8754a1bb2403378b14fabc02dfd8a1a0ccfdd3dea7e1c38fed3c66fd6ab057112a72746b47d4b0c1f866afcb5f478409fc714b73dabbd83d2f7b8a674e3c4275a6b37eb525f18c5e0226a686fe07a0d178fd6f57063ce8653a57a8ecd8657b71f3fdefa34dce4c2081ec6a02ba16f5aacb7d50eb0e3cd6ef02e180b40a3ba39322aa29bf2e4653a0a30da8faac4de8c3090ad5d1ead8f53608fedf66ee2f132d57df9e458e5c77503d8afcabbab96023ac0f09879b8f518119f65d5fd30b27afa54a480f0f7bdf6de7f2539d9d0b9cba4b33f8f92374181c5dc092fbb1cb7e2c87900e90ffd622af3cd35cbe830911ca79f9d8f09ef14cc28c15a7e7e51a27a3e83abf46be562079e147f22f3d6594a74b1cf6bd92c101b3136be59757e3e1e4dafdb49c9908017a8477b2fe9e5a7cbf733aac765203f1b5b8e8ed6740b3b91aa4535121ede9ed4146a1a6d3e8286b67f218b9723f1a5f4edb917fe28b729b04b36c5d55c2fad65898075e47d44a531bb07a8b3cbb9fb653220f99e03fa8bf7306a7960abb7ca3b25b996b6dfaf6d1c198cb9ff09d56d51e91b5cbe01b1288a375bf3e441f078b93d66ef74acd1e23110906eb5822518c48d22955dbbfae4fadf07862559cece8920403df0172c1a47f026eed0e9f2bfeb2bc68590b57fa2fc6c665e50e2342089e546425d7c41b71880c79256419a86c91d56e89c578d0ecacaddab2a642a10d0d9421a8c2df3c222163bb79da5d736ed58837d2fc381e1098a0d0d0eda2a5e039a9dc754391d7abae1dde54fa5317655791ebc6dd87dfd2b984a1c0e4f307b179c1b0469eab48f6505d99ed35581f438c79a688c3b2cc97f2bb93d3de7577a5734997945ebb2c126702864b05368589c394fe04c9f72b5b7e8d25e6d2106c61aeb9d2dbf828c4b1bce4521a70c593bad32de600b9a93c6c77741680c5e12ab4d744373bcae7bbe400a1e5164581076cc6ea7f5bcfaf4990170ff9aa39276f710e353c2b0ff2b4591b2a4063709273dbea7484b7ea3d1555c72a2b2d1b55f2cca2c06462065840be39d19c37d0e71979109d33cb1306d849c968abbeb4c090f8a91cd219437ed8f399bcb7614d3594232704f2817cce06ecc76cabcb89553de056c7dbd46f08d5d85ccb99c9f462bac23efa3cd8270f0f03333f2c6e54d075c7a12aedaa4ae799a94cb25c915ed640c93e8e69972bb9d2ecde8b1cdfac8c799925d46cd6c5284774e30fb251669f772bb8de2e2feb419d10ed65b622e40d37000e3b47fda32374ebceb93a9b38d602221996a73a1cace2df55103674085ab3d50074d4b9e9e214a35e8f2e89c0df40788f69c31ac63d83c0986dfe3ad940575f04cd49c62f19036441929a3565d8ddc3941ece1d6bb7b22860c2c04b1fed35263783dff2b1e00ed6ee92c91ccb722a105d578b447d19e0e333f80fe156d772ad507f947d99322ae952d05303e1054dd9cbd371add8f2ce86e3121f0dfe391e27272ae3f4f33e7286ee3659ba6ab554f09dbe21e62c6a389b9fc2b1a7ed376b5917a21f139d43819810ad649087fc3c069c0fb3b3221ad34556266402d4ffe44e5e5f372b7668dbf34f9905f73d20fb4f215ca6690fe439df14b4e0a0f30b80b0d5955472c0c2ed4b2dcbbab075fc738f92f901248582f52e6f70791f8f40877be4c9dd46e564a2323ceefe6ccd279e3f4fa7fd976cb67a075ff2630cff3884b3c127fe22d5f250ebc21eb904715fc91af403d112be5b7481f266796c46d23a8c7c66f9c7462f686e0cb2dd3111b3a809541d84999bee4c854b04128efdf62702559592562c39fee085190f55625e443898cfdb642de2c341f84c7a8c2a51775b0e08fe809f8d4be9b02476909f7115089bace2cd31099339b01a64750f5d81f7b00120273e6c28716c3bf9818f06b07bf74a6e331a758c4a00bb6b195117f5e6226e29f732fb0e6d020e88b23869220b5251e0b4fa7d54a360fb648e4d7b015116fc301571e4bc96abae7dd402aecebeaa116d7b81d0c6218a593a0e81ebc315b97fa44c0c1e2b42e1cb01d7f5d00ac60a4d6109ffb75081bd59ceaaf846c0c313bb7dc3c0b42a5d171143c9ac76643d92f056e96472033e5079419d11a85fd8553b0175363346433a2c02b24348f4542324a01573280ebe7e4327e58bc489a87e28d66d7cb091ab157a8ed36d3e6fb66c19af5994affa964e8354e895babe4905e1960a7d304704d49381e06508140b79dc26693751b5abac7170957ed4974c8c7b9e94ae3fe081cc79362fe73a6edf4e3c469e401f505c6a7c1d4f59", 0x1000}, {&(0x7f0000001100)="fb", 0x1}, {&(0x7f0000001140)="65445fdf1a54bf", 0x7}, {&(0x7f0000001180)="f1c0b9941c02e90082f27f211b86eb57904a363645d4f26c0343d9b9b5ce44a16b9e1037e35c80a9805c585d556b0c6d07e561ca250bbe0268d7ceefeac20abdf260256d32c766df64826845ced6d7d91e69264279d872dbaba01ac3500bcaf496e11fb9258ca7f9943f11f7b137d42c2739d2e76317ac52be30090a29b79a8537f2d1576086f72c61b5b3b44b91f2cbc4d81e006a857a165a4bad7caff4", 0x9e}], 0x4}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f00000012c0)={0x0, @broadcast, 0x4e20, 0x1, 'lc\x00', 0x11, 0xffff8001, 0x20}, 0x2c) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x80000001) ioctl$sock_ifreq(r3, 0x80dd79e1a5638943, &(0x7f0000001340)={'vcan0\x00', @ifru_data=&(0x7f0000001300)="d27fad9e394cd0d6f0f6ea2986582b94e1ea9e96faffc9b714bb8f35ea3317f5"}) setsockopt$inet_buf(r3, 0x0, 0x2f, &(0x7f0000001380)="5e3e2fc52cc6981ba0315f21c9a81bec9851dee471bce9fe2fcffd3f804b4d69933a093bd9ffa415ce4e6464c3754d6790f1f8063ffae571ba06f77355c77f0b9b7f529d86cc45acde4fcf9671648f3fed8fccb4e5a3ebd14b4063e5e87373498a4419aba25e9af17176a36ca5226e4281b58b4162fd91cf267f096a3ccb9718a47b27a83bcdec1794ce3e7ff64e53cf02e1423303702f84213554a0f74f22eb36f6a5996da7372aed4e4c2b88ad36ed676dff", 0xb3) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f0000001480), &(0x7f00000014c0)=0x4) r6 = accept4(r4, &(0x7f0000001500)=@x25={0x9, @remote}, &(0x7f0000001580)=0x80, 0x0) ioctl$sock_qrtr_TIOCINQ(r6, 0x541b, &(0x7f00000015c0)) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000002640)={0x1, 0x3, 0x1000, 0x21, &(0x7f0000001600)="4c0d44e196a4878b308f8f4deca795acb2b6bd08722d946d17009aa5e758e7d09f", 0x1000, 0x0, &(0x7f0000001640)="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"}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r7, 0x8953, &(0x7f00000026c0)={{0x2, 0x4e22, @empty}, {0x306, @local}, 0x40, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'veth0_to_hsr\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000002840)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002800)={&(0x7f0000002780)={0x60, 0x1403, 0x2, 0x70bd29, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pimreg1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendto(r6, &(0x7f0000002880)="841de06da66654a38a3787e93afb4fb4c7265ea6bd07c4522225df44195b129b02f48a3f3936b8110f9b9387d0a4a500ac9db75512a4702d5be09f39afe3b8f326628ef6b7b8548d185537ddf82cfdb183a55713ee1af4dbf28b3df1a90eed7caaf646e59ba0952643f6564f945bb82b430cd3fa87176c26671fd42b35e68e0e9b4659f846ff0dc7b9771ec058a4afbe8abd626c2378cc0159fe2f4abfce02b5c00a", 0xa2, 0x80, 0x0, 0x0) unshare(0x40000) socket$inet_sctp(0x2, 0x1, 0x84) r9 = socket$inet(0x2, 0xa, 0x3) setsockopt$inet_group_source_req(r9, 0x0, 0x1, &(0x7f0000002940)={0x8001, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000002a80)={'macsec0\x00'}) ioctl$sock_proto_private(r4, 0x89ed, &(0x7f0000002ac0)="8ddafb4bc2c5f325582cf4bfb0441e6002bc468caac827") sendmsg$nl_route_sched(r6, &(0x7f0000002d00)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002b40)=@deltaction={0x17c, 0x31, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x70, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2635}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000}, 0x44010) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000002d40)='wlan0\x00', 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000002d80)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000003f80)={r10, 0x0, "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", "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"}) 57.460003273s ago: executing program 2 (id=1587): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000000c03"], 0x0, 0x26, 0x0, 0x1, 0x4}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], &(0x7f00000001c0)=""/257, 0x2a, 0x101, 0x6}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10) write$cgroup_devices(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="a69b239128a0cd80ae6544f58d5f66acf281887ccfcb218a6db45788dc2e2e55cddf84da414b458b45e19a9e8d8d505f63ae5dce00f27e3bd62c0510bd6f31ba5baeb491fdada1769e53bfb4b61a5a2afe8c55b19d56ec0fc859cb72b4eedc59521dd2a023cd6fcd460d394158daf85df8119d421ffaac6f9b7bc212d92f01b88507782c194d2921b79f02b9e923fa124f1f72f20da3f2aba12d2bc2cc013305197e171bbbf0ddc78828c46f38280b16e718ecbba697ba6a0d0953333bd1871fe9d5a6a0deddb7b13c265defc1a0ce49f0916d224a831156", @ANYRES32=r0, @ANYRES32=r2], 0xa) socket$vsock_stream(0x28, 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @rand_addr=0x64010101}, @address_request={0x11, 0x0, 0x0, 0x7}}}}}, 0x0) 57.448077095s ago: executing program 0 (id=1588): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000000001fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d533000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000500000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e530c001c00", @ANYBLOB="02"], 0x158}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000e40)=ANY=[], 0x2c8}, 0x1, 0x0, 0x0, 0x48041}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x17c, r3, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_WME={0x4c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xf1}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x3}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xff}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xe}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x3}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x1d}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xe0, 0xac, "5a6866083d7be34f61a637b3c95709f8e46fb6e15cd5c2bd5c634cfa4c6de2952856fb1b52ab6af7a9391e91718d346be31539ba4cd2bd53ee8d6b3cefee6adfc9e779469ac8c699c339bae04fdcc62a40334d724a1e03b2f8df7d29788879f15a3647bafc627d7552e7622befc6876711066f9f602ffd645db3b9dfb1031049c6f24a7a4c9ad632164dc1ec7fbcf544a02123c9d544d335bf79c2694628bd99bf8c2b022f650ac766fd5fbea476e93ae893f69295f6ba87c0c36dc06d3fb04a7857c9097a6b35b3530fd08c71808256f4943ff2cc13954838b3fc21"}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x12d, 0x9, 0x3]}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x1ab}]}, 0x17c}, 0x1, 0x0, 0x0, 0x60000}, 0x4000010) 57.414009937s ago: executing program 2 (id=1589): socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) close(0x4) 57.236322573s ago: executing program 2 (id=1590): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x4011) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x2f, 0x4, 0x7f, 0x1, 0x71, @mcast1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x20, 0x20, 0xfffffff8, 0xe}}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1a, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4d6, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x0, 0x0, 0x0, 0x4, 0x8, 0xffffffffffffffc0, 0x4}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', r2, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffff}, 0x94) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{r0, 0x1002}], 0x1, &(0x7f0000000280)={r3, r4+60000000}, &(0x7f00000002c0)={[0x5]}, 0x8) 57.236039475s ago: executing program 0 (id=1591): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x24048058) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd}, {0xffff, 0xffff}, {0x5, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000a40)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x70bd2d, 0xffff7ffd, {}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 56.962497482s ago: executing program 2 (id=1592): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x8, r1, 0x4}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8021d08000b000000e8fe55a1180015000600142603640e1209000d000104", 0x1f}], 0x1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000000a200)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xffe0}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000003c0)={'geneve0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01000000000000000000100000000c00018008000100", @ANYRES32=r14, @ANYBLOB="080011"], 0x28}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r15, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="b4000000000000006111340000000000c60000000000000095000000000000000ba35ce654cb274df5235c172e3ff0c89bdeb13c90b90db2d0391eda43f46fd104238aad54809d389881c2736c80ab7c0ca2fa132704bf6e85d34ff6025673e5a28a98c4a2c7b993f7352e044ad1f04b0ee825e129a8de2b6e70474dc32f6e2ab297cd25ded97c25c27b5a30351f2f171ad6c21374c1da4663f40515c23b049caa1ce628a5beb48bb14773e4017be7b70e14d04c21ce07b66d657a9c0170d66d2f"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001300)=""/4096, 0x1000, 0x0, &(0x7f0000000400)=""/217, 0xd9}, &(0x7f0000000500)=0x40) r16 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x200000000000000}, 0x18) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000280)=""/80, &(0x7f0000000340)=0x50) r17 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r17, &(0x7f0000000000)=ANY=[@ANYBLOB="2539000020000365f507f62aa6172f7881"], 0x33fe0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r16, 0xc038943b, &(0x7f0000000140)={0x9602, 0x48, '\x00', 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 56.523500802s ago: executing program 32 (id=1592): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x8, r1, 0x4}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8021d08000b000000e8fe55a1180015000600142603640e1209000d000104", 0x1f}], 0x1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000000a200)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xffe0}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000003c0)={'geneve0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01000000000000000000100000000c00018008000100", @ANYRES32=r14, @ANYBLOB="080011"], 0x28}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r15, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="b4000000000000006111340000000000c60000000000000095000000000000000ba35ce654cb274df5235c172e3ff0c89bdeb13c90b90db2d0391eda43f46fd104238aad54809d389881c2736c80ab7c0ca2fa132704bf6e85d34ff6025673e5a28a98c4a2c7b993f7352e044ad1f04b0ee825e129a8de2b6e70474dc32f6e2ab297cd25ded97c25c27b5a30351f2f171ad6c21374c1da4663f40515c23b049caa1ce628a5beb48bb14773e4017be7b70e14d04c21ce07b66d657a9c0170d66d2f"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001300)=""/4096, 0x1000, 0x0, &(0x7f0000000400)=""/217, 0xd9}, &(0x7f0000000500)=0x40) r16 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x200000000000000}, 0x18) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000280)=""/80, &(0x7f0000000340)=0x50) r17 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r17, &(0x7f0000000000)=ANY=[@ANYBLOB="2539000020000365f507f62aa6172f7881"], 0x33fe0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r16, 0xc038943b, &(0x7f0000000140)={0x9602, 0x48, '\x00', 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 56.510555731s ago: executing program 0 (id=1594): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0xfffffffffffffffe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, 0x2, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}}, 0x20000000) socket$kcm(0x29, 0x5, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0xfffffffffffffffe) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, 0x2, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}}, 0x20000000) (async) 56.501133367s ago: executing program 33 (id=1594): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0xfffffffffffffffe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, 0x2, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}}, 0x20000000) socket$kcm(0x29, 0x5, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0xfffffffffffffffe) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, 0x2, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}}, 0x20000000) (async) 52.586943936s ago: executing program 6 (id=1603): unshare(0x62020200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x60600) r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000001080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0xfffffffe}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x34, 0x1, 0x4, 0x102, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x5}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@ifindex, 0xd, 0x1, 0x9, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000009"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x98, 0x0, 0x1}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r2, @ANYBLOB="000000000000000018100000", @ANYRES32=r3, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r4, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 52.53883222s ago: executing program 5 (id=1593): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, r1, 0x0, 0x1}, 0x50) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="ffffff8dffff"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) unshare(0x6a040000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r5, &(0x7f0000000080)='syz0\x00', 0x1ff) r6 = openat$cgroup(r5, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f0000000180), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000280), 0x9) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000000c0)={0x40, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x40}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r11, 0x303, 0x0, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfff7fdfc, {0x0, 0x0, 0x0, r9, {0xb}, {0xffff}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x40000) preadv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/89, 0x59}, {&(0x7f0000000140)=""/174, 0xae}], 0x2, 0x2, 0x3) 52.23544851s ago: executing program 34 (id=1603): unshare(0x62020200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x60600) r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000001080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0xfffffffe}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x34, 0x1, 0x4, 0x102, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x5}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@ifindex, 0xd, 0x1, 0x9, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000009"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x98, 0x0, 0x1}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r2, @ANYBLOB="000000000000000018100000", @ANYRES32=r3, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r4, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 52.09455934s ago: executing program 35 (id=1593): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, r1, 0x0, 0x1}, 0x50) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="ffffff8dffff"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) unshare(0x6a040000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r5, &(0x7f0000000080)='syz0\x00', 0x1ff) r6 = openat$cgroup(r5, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f0000000180), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000280), 0x9) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000000c0)={0x40, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x40}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r11, 0x303, 0x0, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfff7fdfc, {0x0, 0x0, 0x0, r9, {0xb}, {0xffff}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x40000) preadv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/89, 0x59}, {&(0x7f0000000140)=""/174, 0xae}], 0x2, 0x2, 0x3) 4.651419822s ago: executing program 8 (id=2007): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe(&(0x7f0000000180)) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') unshare(0xc020680) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000140)="240000005a001f001007f4d655c63589ce9e04020800038005000000ffc8bbb86ec81ffd", 0x24) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'dummy0\x00'}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}}, 0x0) (async) sendmsg$NFNL_MSG_CTHELPER_DEL(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0xe8, 0x2, 0x9, 0x401, 0x0, 0x0, {0x1}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x5c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x31}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_TUPLE={0x58, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x503, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x24090}}, 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 4.180130001s ago: executing program 8 (id=2014): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a0}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[], 0x2c}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000002914000000240007800c"], 0x38}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="080026bd7d00ffdbdf250700000010000280080002004b7a000004000400cc9721b2b86b39736ad9aa0d8deac03e9175868d078fdabe94e3dbdf22c067039259c318e8ef8e589ed0360ad5af9322fce00873254070"], 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @local}, 0xffffffffffffffe4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000000)=0x4, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r5, 0x118, 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x4) r6 = openat$tun(0xffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000073113c000000000020000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x110, 0x0, 0x110, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x8, 0x0, {@empty, {[0xff, 0xff]}}, {@mac=@local, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @multicast2, @multicast2, 0x2, 0x1}}}, {{@arp={@rand_addr=0x64010102, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0x11d}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6572211f, 'syz0\x00', {0x6}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0xfffff000) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0x94, 0x4) socket(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r7}, 0x18) 2.980339173s ago: executing program 1 (id=2027): socket(0x10, 0x803, 0x8) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x24001850) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0, 0x39}}], 0x1, 0x4000000) 2.739643513s ago: executing program 1 (id=2029): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="8307f2e7aa9de844f69d35937d16"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4004) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x75}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) unshare(0x22020400) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x843, 0x0) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) r3 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r3, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r6, 0x4) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="34000200", @ANYRES16=r7, @ANYBLOB="01002dbd7000ffdbdf250d000000200007800c000300a90100000000000008000200030000000800020002000000"], 0x34}, 0x1, 0x0, 0x0, 0x100}, 0x0) 2.090570024s ago: executing program 4 (id=2035): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000f36a45d44ed400"/30], &(0x7f0000000080)='syzkaller\x00'}, 0x94) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f00000000c0)={0xc, 0xff}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)="d8", 0x1}], 0x1}}], 0x1, 0x4044805) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0x76, &(0x7f0000000180)={0x9, 0x0, 0x0, 0x1001}, &(0x7f0000000280)=0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000340)="ee", &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r3, &(0x7f0000000780)}, 0x20) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r8, 0x65, 0x8, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @private=0xa010101}, 0x0, 0x1, 0x0, 0x2}}, 0x2e) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r9, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f00000002c0)={'vlan1\x00'}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r9, 0x6, 0x2, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'veth1\x00'}) 1.980030221s ago: executing program 3 (id=2036): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@ipv4_delroute={0x48, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x1000}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_FLOW={0x8, 0xb, 0x84a}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @multicast2}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_OIF={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.970911455s ago: executing program 1 (id=2038): r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x5d5d, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x4d5, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x7, 0x2, 0x81}) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) epoll_create1(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601030000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3100000000240007800c00028008000140ffffffff0c0001800800014080ffffff050014000200000005000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x4840}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x44, 0x9, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='veth0_to_bond\x00', 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)=ANY=[@ANYBLOB="efffffff", @ANYRES16=r6, @ANYBLOB="0100ffffffff00000000010000000400078008000100000000000c000200ff7f000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r6, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) 1.840615689s ago: executing program 3 (id=2039): syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000300)="40136c277c009441c1d52566c82e0fc9", 0x10}], 0x1, 0x1) close(r3) socket$key(0xf, 0x3, 0x2) splice(r2, 0x0, r3, 0x0, 0xfffd, 0x0) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0x3) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000001c0)={r0}) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r7, 0x7, 0x0, 0x25dfdbfd, {{0x8}, {@void, @val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)={0x4fc, r7, 0xc8830430cd24bb63, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x12f2}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}, @NL80211_ATTR_FRAME={0x1e, 0x33, @disassoc={{{}, {0x4}, @device_b, @device_a, @random="dc0555916aa5", {0x6, 0x8}}, 0x25, @void}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x10cb}, @NL80211_ATTR_FRAME={0x4a1, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x7d0}, @device_b, @device_a, @initial, {0x6, 0x8}, @value=@ver_80211n={0x0, 0x39b8, 0x3, 0x0, 0x0, 0x0, 0x1}}, 0x40, 0x1, @device_a, {}, @void, @val={0x2d, 0x1a, {0x1, 0x2, 0x5, 0x0, {0x7fffffff, 0xff, 0x0, 0xb, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x6, 0x3ff, 0x2}}, [{0xdd, 0xeb, "2839977053092600157d5749058c79eea61098d700038acf201f8d0886642f7cc04fe7c542d7618da9c45adbf9a43646065be25dc27db1925f894bed1d22fcb1d3c51f0a4043e83e10c420694485ef823cf2b8148cb6e2df15619240847dddbce0055e7d0bc4cd9811c80fa135862837a268aa24e8bfd7a6600a97e09f07770b43a2103b79f1bc75f335ea87aca3da6ac472d2491a5a11b4dc03759ea5fd2d8750363669bb33733f2037c1f4aa165d04fbb1b07a633dea92030dc647d3ffd149479b43da11cf3a2619e10a5d33c0b42696ab702c13ad1bd5ce0cb0029075416ff03ef9a6d32d699b1350e4"}, {0xdd, 0x84, "3976ae2f2003e223c70947d3c6f14029ab10e70d7bdfa489b3048206154e3e085d0896ee0861950515ca76fd0ec23a69bc1e20a2ec3147d27c87478d5a21cec6942001c79448346bb6e6f297f28f6af79f3f1798598e256e0cb28769ed404595150fad984176a6ecd98f212af80b8fe3345d569b626c763c6b85da0aa5b4caca48961e74"}, {0xdd, 0xad, "dc32456987cf5ea316a934e15be1f318f39d27c6694aba7e7098a392c91c0bd0fdda8d5ebea958cb4f545c3684e76164637d1c6e1a1e05c54c6c616d54133cbe4d9d194f02e70909f5087ba0562515281cbfc07ceb7a83067fb5886fcb8f38408f1b8828ff350ff91f4f3cfb64d1fd4f258b7e2b2b42f4375237ab1502ed2a243ae74b4c6ec80fb61076873349f9d4fea0fb4fbfe9ed3fe68425576a0ad553755887516f61fc12fdb63a8493ca"}, {0xdd, 0xa6, "49b41bb260bffee2ff204723a1f458e7c6d030d4664021ec6550656af714ab486568cf60fd462c9c5b1f0cea704e0584d48ea70cd6bfb611ef063d494509947fccedee0c7974fe9709d2da6eef73626f000b8ca467132c18f94709e5063907e1f76adc0ac463c903da5db090c3b9a371c986fdb0125767dc7b226b69b1d35c4eb83ceb527f28eedebad1904eef9973174743927d015aa283a2084c66ccd21e008ce5afe15fa4"}, {0xdd, 0x4e, "2daae44b7b0dd500c220cb13cb198b7d8af92b80070829fd040fbd1286e1b3d48a14afceaeeb5861d96782a1c9e7f264d988e14c6ba95d987908820d63732513147139e3c45d11e833fe5c8631c0"}, {0xdd, 0x96, "d810ad2225fdbe6ff89d2c52a69e9a959663ec1a3bae675427f37c5a20ba35ec885319fe89e1f3ad1a48d1794e6e7297dd5d74fc53cdc0a3197448e951de117d7b0d679e529cfdf18bcf04aa287a4928475d154a8bb7d11218282cb15b0fb083cd1d9d23b5246dcc3827c02bd668fa33d14e36b1be47333a660e06c53f93017227898a16ce4a8924211dc2478bd706048a63cd676a52"}, {0xdd, 0xa5, "c199972f124fd57d4882a0a78e345ec546ddf5882af7fbb1c90a6a176c682d8eb5c85ef9ec79d1a9afe9d60a3840f4403e3883e625763e37a7a0688ab94f23eed835010146c774874bad6a5799a1abcf841374486c026d9dae5149c875f3d6ae0e488e5ff897c95f2e999066d40b7b9fd611efb9c54b17894872aa3422b4f8f38b68bb8d93e74eb048c3ab191eae879c4b9471b30881051c5dba592076464412843fe62497"}]}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0x3, 0x7, 0x5, 0x3ff]}]}, 0x4fc}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000090) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'veth1_vlan\x00', 0x2}) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r10, &(0x7f00000011c0)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @multicast1}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xa, 0x0, 0x0, 0x0, 0x18, {[@md5sig={0x13, 0x12, "874f76183383fac04c905afb51defa4c"}]}}}}}}, 0x4a) ioctl$SIOCPNENABLEPIPE(r9, 0x89ed, 0x0) socket(0x15, 0x5, 0x0) r12 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r12, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) 1.711708675s ago: executing program 1 (id=2040): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = socket$packet(0x11, 0x2, 0x300) vmsplice(r0, &(0x7f0000000500)=[{&(0x7f0000000080)="835b68ad35238dd2478d5200d8b06a709cb39b8d9edb1ec9ee28f1f18a867a02283b832d3795c25a42f21c0f778271a05fe0f514ed7711689dae13343719ac42ff47ce2f63ceb0c4e85a7d49a3d2ff80c6e90db25007a97b128b7e1e9bdd46190d4bf0c3fc458d958cb514fbc1746572eaef407526816c627f80ecacbd6fa95de07a7561f276a130df1c8be6e6bd95bbe3862d9fa68dc9198276b47177e8a3d76a098f5e66b4cd6f5c810972c5661d0106ab03e2877cac01", 0xb8}, {&(0x7f0000000300)="43b051e15bfd3143df5a7130ce371be9b8a8a0f117f2d105c40c2e1e8d21370be911a12bd05e1aa9877dcc07e738b5435a09582ea33b6be59322a54149a57736cac472f3d7d3d085dc75ea2bc3f96c399f843b5f77e31b9b30ad89f04899e6c482e488a34291e6e194185612b33ede219a586425f297853d98d9deb7f47d67f0", 0x80}, {&(0x7f0000000380)="9f265842263c2ccd469b7517f3459f23f343a6a0aecc9c548bbd8998091c797c8499630f40b8e20e32e2ac0ab57e27bc4025a0824ecda645f145e05cfc1a02de2ba49a477709be812162637eb55d9a1b5e04b38a8ad4a0c9cb8ef365f62383462ad097bec00419962e2442c910a14b55d6021fb3bc08c78536f3a8592e00404f0e289c23fa6e7b79fadf3995e30fd6bcde764ed7c96972af0a52676894a32370f8cbf289d8f8f80165eb8ebed639092a38b49372136f86ec3b68635daa3f88f77da2e96cae9c9d549013cd0dc919a4fff344271c0f194f9b719e581bb177f7e394fb5b14c976fb9779b584594518f66e979480cd8f", 0xf5}, {&(0x7f00000001c0)="e4fc43", 0x3}, {&(0x7f0000000480)="99cec89995adf8899226348c7ec8abb674c233b15f42d313df72dc97a5621e08770edc769e0e4de4ef2926d24bdb98e2cce3ed214cff9cdf9400d8200a9dfc3f04a1be686124b08663699f3438fc6c739d747e8b858f5b6480cfe9bf1076b3ed76465e", 0x63}], 0x5, 0xd) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x3, 0x3000, 0x7fff7fff, 0x3fe, 0x2, 0x9}, 0xfffffffffffffeb3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x14, r3, 0x1, 0x0, 0x0, {0x49}}, 0x14}}, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000140)={r5}, &(0x7f0000000180)=0x8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x2) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r10, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4082, 0xff2}], 0x1}, 0xfffffffc}], 0x1, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) 1.707016009s ago: executing program 7 (id=2041): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000009c0)=@security={'security\x00', 0x64, 0x4, 0x320, 0x100000c, 0x0, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x1000000000000}}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ip={@private=0xa010101, @empty, 0x7f7fffff, 0xff, 'pim6reg\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x6c, 0x1, 0x7e}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff000000, 0xff, 'veth1_to_bond\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0xe8, 0x158, 0x0, {}, [@common=@inet=@set4={{0x50}, {{0x0, 0x2, 0x4}, {{0x42}, 0x5a}, {{0x4}, 0xa}, 0x3}}, @common=@icmp={{0x28}, {0x4, "be45"}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x8, 0x4, 0x1, 0x0, "edeefc7a46ef3cea9319261fc16bf346b02017e99505b0c7009c97ca57e52d700c2a13d2f6801ec1f9e235d607748a457ab960a3c75db8c7a293fee516de6c61"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x6e, &(0x7f00000005c0)={@local, @random="7f2b66991bab", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "8000", 0x38, 0x3a, 0xff, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5fc, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0xff, @loopback={0x4000000}, @local, [@fragment={0x25, 0x0, 0xd, 0x1, 0x0, 0xe, 0x68}]}}}}}}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x25, 0x0, 0x2}, {0x28, 0x0, 0x81, 0x1}, {0xb1, 0x0, 0x28, 0x7}, {0x16, 0xfc, 0x23, 0xffffffff}]}) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f00000002c0)={'bond0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x60, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x60}}, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f0000003600)=""/4096, 0x1000}], 0x1) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) r8 = socket(0xa, 0x5, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000700)={0xec, r9, 0x10, 0x70bd25, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x80000000}, {0x6, 0x11, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xe}, {0x6, 0x11, 0x46}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x39c}, {0x6, 0x11, 0x100}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x2}}]}, 0xec}, 0x1, 0x0, 0x0, 0x44180}, 0x440c0) sendmsg$inet_sctp(r8, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="af", 0x1}], 0x1, &(0x7f0000000d40)=[@authinfo={0x18, 0x84, 0x6, {0x2}}, @init={0x18, 0x84, 0x0, {0x7fff, 0x8, 0x0, 0x4}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}, @dstaddrv6={0x20, 0x84, 0x8, @local}], 0x70, 0x24000001}, 0x20008000) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000900)=0x4, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000000240)={r1, 0xfffffffffffffff8, 0x0, 0x7}) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000540)={0x0}, &(0x7f0000000580)=0xc) r13 = gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000880)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000020}, 0xc, &(0x7f0000000640)={&(0x7f0000000800)={0x58, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x7}, @void, @void}}, [@NL80211_ATTR_PID={0x8}, @NL80211_ATTR_PID={0x8, 0x52, r12}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x29}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x50}}, @NL80211_ATTR_PID={0x8, 0x52, r13}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) ioctl$HCIINQUIRY(r11, 0x800448f0, &(0x7f0000001ac0)={0x0, 0x0, "889ad2", 0x5, 0x2}) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x4) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000040)={r7, 0x2}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000000)={r7, @in={{0x2, 0x4e20, @multicast1}}, [0x7000, 0x1, 0x9, 0x100000, 0x1, 0x2, 0x1, 0x100, 0x0, 0x2, 0x9, 0x7fff, 0x89, 0xf, 0x7]}, &(0x7f0000000100)=0x100) 1.57506454s ago: executing program 4 (id=2042): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @private, @loopback}, &(0x7f0000000100)=0xc) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=@delqdisc={0x13c, 0x25, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x9, 0x8}, {0xfff1, 0x4}, {0x8, 0xd}}, [@q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x607}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x11}]}}, @q_dsmark={{0xb}, {0x40, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1c}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7ff}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x80}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_INDICES={0x6}]}}, @q_dsmark={{0xb}, {0x3c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfffb}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x14}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1a}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40000}, 0x24004000) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x42}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map, r2, 0x36, 0x4, 0x0, @void, @value=r2}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000210404000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888d226000024001280090001000766726d0000000014000280080001000300000008000200250000000a000100aaaaaaaaaa2b00000a000200000a000000000000"], 0x5c}}, 0xc080) 1.308222171s ago: executing program 3 (id=2043): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b0000ff00000000bfa100000000000007010000f8ffffff9903000008000000b70300000000002085482f46063ec51ad0"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES16=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x1843}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='contention_begin\x00', r4}, 0x18) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004d40)={&(0x7f00000000c0)={0x28, 0x3ea, 0x400, 0x70bd20, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}}, 0x28}, 0x1, 0x0, 0x0, 0x20000844}, 0x10) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = socket(0x840000000002, 0x3, 0x100) connect$inet(r7, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x1b, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @jmp={0x5, 0x0, 0x3, 0x7, 0x1, 0x0, 0xffffffffffffffff}, @alu={0x7, 0x1, 0xd, 0x7, 0x1, 0xffffffffffffffe7, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], {{}, {}, {0x85, 0x0, 0x0, 0x43}}}, &(0x7f0000000280)='GPL\x00', 0x8, 0xce, &(0x7f0000000700)=""/206, 0x40f00, 0x5, '\x00', 0x0, 0x25, r8, 0x8, &(0x7f00000004c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0x7, 0x4, 0x7ff}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000580)=[r3], &(0x7f0000000800)=[{0x2, 0x5, 0x10, 0x2}], 0x10, 0x4}, 0x94) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'gretap0\x00'}) r9 = socket(0x8000000010, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) write(r9, &(0x7f00000002c0)="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", 0xfc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r10 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r10, 0x0, 0xff00) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r11, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 1.25902655s ago: executing program 4 (id=2044): r0 = socket(0x3, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) socket$inet_icmp(0x2, 0x2, 0x1) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000100)=r3) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 1.203852868s ago: executing program 1 (id=2045): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000040000000400000005"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) recvmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0xff6}], 0x1}, 0x8000}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/68, 0x44}, {&(0x7f0000000200)=""/24, 0x18}, {&(0x7f0000000340)=""/120, 0x78}], 0x3, &(0x7f0000000600)=""/149, 0x95}, 0xa}], 0x3, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r3 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) mmap(&(0x7f00007a3000/0x4000)=nil, 0x4000, 0x1000001, 0x11, r3, 0x69daa000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) 1.118008943s ago: executing program 4 (id=2046): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, 0x0, &(0x7f0000000000)=0xa0) (async) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, 0x0, &(0x7f0000000000)=0xa0) getpeername$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @rose}, [@netrom, @netrom, @bcast, @null, @default, @default, @netrom, @netrom]}, &(0x7f0000000100)=0x48) (async) getpeername$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @rose}, [@netrom, @netrom, @bcast, @null, @default, @default, @netrom, @netrom]}, &(0x7f0000000100)=0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r1) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0xe14393ba65cdfb2b, 0x70bd25, 0x25dfdbfb}, 0x14}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000ec0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x9, [@func={0x6, 0x0, 0x0, 0xc, 0x3}, @var={0x7, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x61]}}, 0x0, 0x51}, 0x28) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB='P', @ANYRESHEX=r0, @ANYRES8=r0, @ANYRES64=r0], 0x0, 0x1, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.048806095s ago: executing program 4 (id=2047): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_int(r0, 0x1, 0x10, 0x0, 0xfe0a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000120a09000000000000000000020000000900010006000000000000000900020073797a3100000000080003400000000108000840000000000800044000000000140000001100010000000000000000000000000ab846eac36f70a396d4d7105f49f087a1f552794a17f6fe8760c229dca5e853be52bf"], 0x6c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000021000100000000000000000002000000000000000000000014001100"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x6, [@typedef={0x3, 0x0, 0x0, 0x8, 0x4}, @struct={0x4, 0x0, 0x0, 0x4, 0x0, 0x8}, @func={0x4, 0x0, 0x0, 0xc, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0xfffffffd}}]}, {0x0, [0x2e, 0x61, 0x5f, 0x5f]}}, 0x0, 0x5a, 0x0, 0x1}, 0x28) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a464357177330772"}}, 0x48}}, 0x810) syz_emit_ethernet(0x8a, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x1a, 0x0, 0x0, 0x0, 0x0, {[@nop, @nop, @eol, @mss={0x2, 0x4, 0x5}, @md5sig={0x13, 0x12, "ab519c9940eb739563a3c52b43aee4a2"}, @sack={0x5, 0x26, [0x9, 0xffffff4c, 0x43, 0x1, 0x8, 0xfa39, 0x8000, 0x8, 0x9]}, @md5sig={0x13, 0x12, "625fbe96fc97dc524d8a397b7b38957f"}]}}}}}}}, 0x0) 931.474536ms ago: executing program 4 (id=2048): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000240)=0xf2b, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000140)=""/41, &(0x7f0000000080)=0x29) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r5}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff}) unshare(0x22020600) read$alg(r6, &(0x7f0000000380)=""/101, 0x65) vmsplice(r6, 0x0, 0x0, 0x5) (async) vmsplice(r6, 0x0, 0x0, 0x5) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000340)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r8, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x101}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004081) close(r7) r9 = socket$unix(0x1, 0x5, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r11, {}, {0x6, 0xb}, {0x9, 0x6}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x1, 0x9, 0x2, 0x5, 0x401}, {0x5, 0x0, 0x4, 0x400, 0x6}, 0xfffffffa, 0x80000000, 0x14ac}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 903.340967ms ago: executing program 8 (id=2049): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 880.191425ms ago: executing program 1 (id=2050): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x24004910) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x4, &(0x7f0000001940)=ANY=[@ANYRES64=r0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback=0x18}, 0x94) syz_init_net_socket$ax25(0x3, 0x3, 0xce) (async) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xce) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) socket(0x10, 0x803, 0x0) ioctl$SIOCAX25GETINFO(r1, 0x89ed, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000480)}, 0x8}], 0x1, 0x40000082, 0x0) bind$llc(r2, &(0x7f0000000300)={0x1a, 0x310, 0xfc, 0x3, 0xff, 0x9, @local}, 0x10) (async) bind$llc(r2, &(0x7f0000000300)={0x1a, 0x310, 0xfc, 0x3, 0xff, 0x9, @local}, 0x10) recvmmsg(r2, &(0x7f0000000340)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4089, 0xff9}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/158, 0x9e}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) socket(0x11, 0xa, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000b060102000000000000000007000005100007800a001a00ffffffffffff004005000100070000000900020073797a31"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4050) socket$pppoe(0x18, 0x1, 0x0) (async) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) (async) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000000200000000000000cb04770000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b0000000000"], 0x30}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0xb6}, 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0xb6}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1f, 0xb, &(0x7f0000000700)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='ufshcd_exception_event\x00', r6, 0x0, 0x6}, 0x18) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) (async) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', 0xffffffffffffffff, 0x0, 0x1843}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 755.406991ms ago: executing program 8 (id=2051): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f0800014000000000340005800c0001007061796c6f61640024000280080004400000005608000340000000b9080001400000000a08000240004000010900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) close(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x3a) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) readv(r6, &(0x7f0000000240)=[{&(0x7f0000000600)=""/237, 0xed}], 0x1) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x4, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) close(r5) r12 = socket$unix(0x1, 0x1, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r15 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) sendmsg$nl_route_sched(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r14, {}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x0, 0x2, {0x4, 0x1, 0xfffffffa}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 679.79443ms ago: executing program 7 (id=2052): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x2, 0x3, 0x1) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x29}, 0x8) getsockopt$inet_buf(r0, 0x0, 0x9, &(0x7f0000000180)=""/170, &(0x7f0000000000)=0xd9) socket$inet_udp(0x2, 0x2, 0x0) (async) socket(0x2, 0x3, 0x1) (async) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x29}, 0x8) (async) getsockopt$inet_buf(r0, 0x0, 0x9, &(0x7f0000000180)=""/170, &(0x7f0000000000)=0xd9) (async) 603.169699ms ago: executing program 7 (id=2053): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x2000000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001100)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = socket(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x4b}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) shutdown(r2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, &(0x7f0000001500)=0x5, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x843}, 0x44040) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)=ANY=[@ANYBLOB="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"], 0x1128}}, 0x20000000) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) socket(0x10, 0x803, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x40000}, 0x1c) socket(0x10, 0x80002, 0x0) 463.233404ms ago: executing program 7 (id=2054): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000040)={'macvlan1\x00', @local}) 319.472707ms ago: executing program 3 (id=2055): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x60, 0x0, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_SYNPROXY={0x4}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x81}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 305.126457ms ago: executing program 7 (id=2056): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000004000000000000000000c6d4d491d2201e56e0f87f7f62be177731790f171b217d07b06de05d7159a08eda7cb631e36497a83eb53966d9c54bf50b75b37c7a8e852500b4754e753fc93419d59cc33eace0270fab279950b25a9bd3f762c0ef318ef81597cdc4576062e949f5592a80e5954999f41a7b94b2165fe48660c51452e0e97b1eaf57f4a1707697b9a05850a8a4c38e9af48c0c7d158ce26845f8f2f4ca5eec7578ede43d3be27c497a1380da03c89dad3a0eb48ce17a0f0d8b3a3588260f61f38b63eb0c4d31e9fe8fd55761cc96ef993cc8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r3}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r4}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) accept4(r1, &(0x7f0000000280)=@un=@abs, &(0x7f0000000300)=0x80, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000c40)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x47, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r5 = socket$alg(0x26, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r6, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x50) sendmsg$qrtr(r8, 0x0, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) accept$alg(r5, 0x0, 0x0) unshare(0x24040000) unshare(0x2c020400) r9 = socket$inet(0xa, 0x801, 0x84) connect$inet(r9, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r9, 0x8) r10 = accept4(r9, 0x0, 0x0, 0x0) sendto$inet(r10, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) 281.840081ms ago: executing program 3 (id=2057): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x6, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x4c804) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'ip_vti0\x00', &(0x7f0000000600)={'erspan0\x00', r1, 0x80, 0x7800, 0x8, 0x8, {{0xc, 0x4, 0x1, 0x39, 0x30, 0x68, 0x0, 0x0, 0x2f, 0x0, @remote, @empty, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0xcc, 0x1, 0x5, [{@multicast1, 0x2}, {@multicast2}]}, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={0xffffffffffffffff, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000800)=[0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x7f, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x38, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x30}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r9, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000bc0)={0xffffffffffffffff}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x4, 0x2c, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, [@printk={@llu}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @jmp={0x5, 0x0, 0x0, 0x2, 0x9, 0x40, 0x8680e10cb5c89f98}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f00000004c0)='GPL\x00', 0x6, 0xdb, &(0x7f0000000500)=""/219, 0x41100, 0x10, '\x00', r6, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0x0, 0x80000001, 0x9}, 0x10, r7, r8, 0x9, &(0x7f0000000c80)=[r9, 0x1, r10], &(0x7f0000000cc0)=[{0x0, 0x5, 0x5, 0xc}, {0x1, 0x4, 0x1, 0x3}, {0x2, 0x5, 0xf}, {0x3, 0x4, 0x4, 0xb}, {0x5, 0x3, 0xc, 0x7}, {0x0, 0x5, 0xc, 0xc}, {0x2, 0x2, 0x10, 0xb}, {0x5, 0x3, 0x4, 0x9}, {0x3, 0x3, 0x3, 0xb}], 0x10, 0x7}, 0x94) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000e40)=0x2) unshare(0x20000400) r11 = socket$inet(0x2, 0x3, 0x6) setsockopt$inet_tcp_int(r11, 0x6, 0x17, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000440)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0xb, 0x3, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @multicast2}}}}}}, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r12, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r12, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) getsockname$packet(r5, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000ec0)=0x14) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r12, &(0x7f0000000a80), 0x0}, 0x20) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r13, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) syz_emit_ethernet(0x66, &(0x7f0000000c00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x30, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}, [{0x1, 0x1, "2025b07f3c58"}]}}}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_delroute={0x3c, 0x19, 0x10, 0x0, 0x20, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x3, 0x8, 0x1, 0x8, 0x2}}}]}, 0x3c}}, 0x20044800) 184.134671ms ago: executing program 8 (id=2058): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x88, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x88}}, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)=@newqdisc={0x1bc, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x8, {0x0, 0x0, 0x0, r2, {0xffff}, {0xffff, 0xffff}, {0xfff3}}, [@TCA_STAB={0x198, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc4, 0x0, 0x100, 0xf, 0x3, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x7ff, 0xfffd, 0xd, 0x0, 0x2, 0x7, 0x0, 0x2]}}, {{0x1c, 0x1, {0x4, 0x80, 0x6, 0x3, 0x1, 0xa, 0xffff, 0x5}}, {0xe, 0x2, [0x40, 0xa, 0x4, 0x4, 0x3]}}, {{0x1c, 0x1, {0x26, 0x8, 0x401, 0x80, 0x2, 0x6, 0x3}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x3, 0xfffd, 0x8b6f, 0x1, 0x8, 0x12c, 0x8}}, {0x14, 0x2, [0x7fff, 0x7, 0x6, 0x7, 0x9, 0x1, 0x6, 0x7]}}, {{0x1c, 0x1, {0x4, 0x9, 0x7, 0x3, 0x2, 0x0, 0x933, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x0, 0x80, 0xfffc, 0x2, 0x0, 0x92c, 0x6f6, 0x1}}, {0x6, 0x2, [0xc1a]}}, {{0x1c, 0x1, {0x7, 0x1, 0x6, 0x3, 0x0, 0x0, 0x2, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x6, 0x7]}}, {{0x1c, 0x1, {0x4, 0x2, 0x11, 0x3, 0x2, 0x5, 0xd6e7, 0x1}}, {0x6, 0x2, [0x82]}}, {{0x1c, 0x1, {0x0, 0xf7, 0x4, 0x9, 0x0, 0x30, 0xfff, 0x4}}, {0xc, 0x2, [0x8452, 0x5, 0x4, 0x511e]}}, {{0x1c, 0x1, {0x7, 0x4, 0x2, 0x1, 0x2, 0x1, 0x10000, 0x6}}, {0x10, 0x2, [0x7ff, 0x8001, 0x52, 0x200, 0x9, 0x800]}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)) sendmmsg(r1, &(0x7f0000000980)=[{{&(0x7f00000000c0)=@can={0x1d, r3}, 0x80, &(0x7f0000000040)}}, {{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4, 0x3}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000400)="846a480d798caa4194d29d1aed0a6ebe26c8c25d6b50e44f5705ee0a2e9312334cfb1b447140dac31df997af63340eaab90de81b9da7789b33c21cc2dc28cea821ed", 0x42}, {&(0x7f0000000480)="3d606646caf13234b6eb2c34ef313b031a7fcd06a7bf57ed536c2e36241156dca4ca60f0ebafff07323e3fc3e9301f885c57c59ed56de5f0", 0x38}, {&(0x7f00000004c0)="432ed987ecf0c80b775aa485354f18b611197e5e4eec58f6774bdec6bcd9c6389265fcafb664f7656f78e9082386bc7ab8adf7e44d57639bed0b81fc28bbddf5676383750c7def5214aa7bcca97d746021403ce8036f9e4a9e5af324f4df1faa47576f2923483544118d8331ebc7699da9a994b8a685210447ee5edec1ffce9b984837efc93622e021245396443ebb6e64268c4770b578a31d75fc7b62ad826a488ec0cd381e18b5e115c8ad0ed9c4370c086a4cf6a4883291ff1b82cb9a333b9fbb3b931f", 0xc5}, {&(0x7f0000000600)="1c9736b32d8fa4bed31da051404200b7a4d1ec237563400469bbd6b2b1af0a7b5f7c1893cc72a1c8f6bcfe705653a8bd94a53791a74a571a01c5cf9f1a4d7202b887e2b68b68140ef4b64fa6778f5dcd1ee9749d41d065997df0337eb09bcdec5c71caa4f8b790bac83539ddaa6ed9437a7d53e8cdf5c3d49f8fc773274fb4b33f38fcc4917adbd364ba47", 0x8b}, {&(0x7f00000006c0)="d18da74ebf7ecac4d6fd5334b8fe64a9d54af0cf5737a166fcabd88a405dd01ae8151b6593bdf930a63b77c96e94eef9473eb7fadedb65a2a56d02ba9e0b9e955b18651db5fcc8fa1417719a35e5edb5ea708e4ae5839a601ac87f0e238f1215d7eb315864f46bb18b774eb61c31348f63c06e6f70887d341bf3c11b8a7398518981d098aefc53b4d228291c2a19deea83948a42ecda2ee42166cc2b19410395fe62804d864627dea6eec411006fb03017c6b62c559bc6b6f5", 0xb9}, {&(0x7f0000000780)="e16d4693e8a5c4d549bfde5a1035fc9b8b87e3d8f5a4970f1ba9532cfc9a88af2c37982f69d4941bc9b7f865e6c6deda8c168275ceca2f297c5b1b0b3586bdd0ae50d07f155288ad1eede4c5401f023d4234511fc448e84cd4f5cee37be816d19306ebbd9f4d96cf961311679f8f10d539f7c1c780588d056db644b6ab5fe86eaebcec5195344938f6079743980dd1852faa898ee870c3e0e95e793d5b3557ad8339548b0089cb826fda62b90b621fef3746d74759e978b58a4fbbd44e3420e36ec3b75594abafcc4e31874bcfb33bf90a54a9bb32aba6232ff23b0f22364fb5639bcf568da00a86be4e", 0xea}, {&(0x7f0000000880)="6af58df952601b4be07748fa9520ec16b3f72e5df6143962a9c6d1ae2035f9f194cd637d01e8e4539ced8bc9e3909a768433910c943066555e61dde6a3aac850adae952a00000000000000000002", 0x4e}], 0x7}}], 0x2, 0x800) 114.858153ms ago: executing program 8 (id=2059): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xc, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004841}, 0x0) unshare(0x400) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r3, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2000000000000022, 0x2, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) 85.352695ms ago: executing program 7 (id=2060): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x0, @empty=0xfe000000}}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f00000003c0)={0x2, &(0x7f0000000000)=[{0x50, 0x1, 0xff, 0x6}, {0x6, 0x4, 0xc8, 0x2}]}) (async) write$ppp(r3, &(0x7f0000000080)="01fd0bd337", 0x5) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='signal_generate\x00', r2}, 0x18) (async) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x44, 0xf, 0xa, [@multicast2, @remote, @multicast1]}, @ssrr={0x89, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x80}}}}}}, 0x0) (async) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000304016100"/20, @ANYRES32=0x0, @ANYBLOB="7fff000000000000140012800b0001006d61637365630000", @ANYRES32, @ANYBLOB="0a000100aaaaaaaaaabbf5ff090002"], 0x54}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close(0x3) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r4) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x101018}, 0xc, &(0x7f0000000200)={&(0x7f0000000600)={0x10c, r5, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x3}, {0xc, 0x90, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x3f5}, {0xc, 0x90, 0x2}}]}, 0x10c}, 0x1, 0x0, 0x0, 0xc014}, 0x80) (async) getpeername$qrtr(r4, &(0x7f0000000440), &(0x7f0000000480)=0xc) 0s ago: executing program 3 (id=2061): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/229, 0x8ec1}], 0x1}, 0x2002) kernel console output (not intermixed with test programs): 2b:00007f07ecd13038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 161.414380][ T8361] RAX: ffffffffffffffda RBX: 00007f07ebfe5fa0 RCX: 00007f07ebd8f749 [ 161.414394][ T8361] RDX: 0000000000000004 RSI: 0000200000000140 RDI: 0000000000000003 [ 161.414407][ T8361] RBP: 00007f07ecd13090 R08: 0000200000001100 R09: 0000000000000010 [ 161.414418][ T8361] R10: 0000000024008040 R11: 0000000000000246 R12: 0000000000000001 [ 161.414428][ T8361] R13: 00007f07ebfe6038 R14: 00007f07ebfe5fa0 R15: 00007ffeb55ee0e8 [ 161.414456][ T8361] [ 162.012884][ T8355] netlink: 'syz.3.585': attribute type 3 has an invalid length. [ 162.023584][ T8355] netlink: 'syz.3.585': attribute type 3 has an invalid length. [ 162.536465][ T8386] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 162.670086][ T8386] bond2 (unregistering): Released all slaves [ 162.775503][ T5893] net_ratelimit: 9 callbacks suppressed [ 162.775523][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.812069][ T8401] netlink: 'syz.4.598': attribute type 8 has an invalid length. [ 162.820291][ T8401] netlink: 'syz.4.598': attribute type 9 has an invalid length. [ 162.840903][ T8407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.600'. [ 162.853852][ T8401] netlink: 'syz.4.598': attribute type 10 has an invalid length. [ 162.862650][ T8405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.862706][ T8401] netlink: 'syz.4.598': attribute type 11 has an invalid length. [ 162.872359][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.897130][ T8401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.598'. [ 163.147017][ T8419] FAULT_INJECTION: forcing a failure. [ 163.147017][ T8419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.191576][ T8419] CPU: 1 UID: 0 PID: 8419 Comm: syz.1.603 Not tainted syzkaller #0 PREEMPT(full) [ 163.191612][ T8419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 163.191626][ T8419] Call Trace: [ 163.191634][ T8419] [ 163.191643][ T8419] dump_stack_lvl+0xe8/0x150 [ 163.191676][ T8419] should_fail_ex+0x414/0x560 [ 163.191716][ T8419] _copy_from_user+0x2d/0xb0 [ 163.191743][ T8419] ax25_setsockopt+0x16c/0xc20 [ 163.191774][ T8419] ? __pfx_aa_sk_perm+0x10/0x10 [ 163.191806][ T8419] ? __pfx_ax25_setsockopt+0x10/0x10 [ 163.191831][ T8419] ? __fget_files+0x2a/0x420 [ 163.191858][ T8419] ? aa_sock_opt_perm+0xff/0x1a0 [ 163.191889][ T8419] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 163.191910][ T8419] ? __pfx_ax25_setsockopt+0x10/0x10 [ 163.191937][ T8419] do_sock_setsockopt+0x17c/0x1b0 [ 163.191967][ T8419] __x64_sys_setsockopt+0x13f/0x1b0 [ 163.191998][ T8419] do_syscall_64+0xec/0xf80 [ 163.192020][ T8419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.192041][ T8419] ? trace_irq_disable+0x37/0x100 [ 163.192070][ T8419] ? clear_bhb_loop+0x60/0xb0 [ 163.192096][ T8419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.192117][ T8419] RIP: 0033:0x7f9b30d8f749 [ 163.192136][ T8419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.192153][ T8419] RSP: 002b:00007f9b31d0a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 163.192176][ T8419] RAX: ffffffffffffffda RBX: 00007f9b30fe5fa0 RCX: 00007f9b30d8f749 [ 163.192192][ T8419] RDX: 0000000000000004 RSI: 0000000000000101 RDI: 0000000000000004 [ 163.192204][ T8419] RBP: 00007f9b31d0a090 R08: 0000000000000004 R09: 0000000000000000 [ 163.192218][ T8419] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.192231][ T8419] R13: 00007f9b30fe6038 R14: 00007f9b30fe5fa0 R15: 00007ffc9824f9b8 [ 163.192265][ T8419] [ 163.413693][ T8424] netlink: 'syz.0.605': attribute type 8 has an invalid length. [ 163.423045][ T8424] sch_fq: defrate 0 ignored. [ 163.458277][ T8424] netlink: 'syz.0.605': attribute type 1 has an invalid length. [ 163.634273][ T8440] __nla_validate_parse: 2 callbacks suppressed [ 163.634292][ T8440] netlink: 16 bytes leftover after parsing attributes in process `syz.1.608'. [ 163.701291][ T8440] netlink: 16 bytes leftover after parsing attributes in process `syz.1.608'. [ 163.781211][ T8449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.611'. [ 163.873240][ T8452] netlink: 68 bytes leftover after parsing attributes in process `syz.4.612'. [ 163.890425][ T8453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.612'. [ 163.959638][ T8463] netlink: 'syz.1.613': attribute type 1 has an invalid length. [ 163.967711][ T8463] netlink: 224 bytes leftover after parsing attributes in process `syz.1.613'. [ 164.020755][ T8456] vxcan2: entered allmulticast mode [ 164.425654][ T8480] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.619'. [ 164.745979][ T8477] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 164.846605][ T8481] macsec1: entered promiscuous mode [ 164.905328][ T8481] macsec1: entered allmulticast mode [ 165.303206][ T8517] netlink: 'syz.1.630': attribute type 10 has an invalid length. [ 165.342587][ T8517] team0: Device veth0_macvtap is up. Set it down before adding it as a team port [ 165.990173][ T8540] gretap1: entered promiscuous mode [ 166.083936][ T8547] netlink: 'syz.2.639': attribute type 13 has an invalid length. [ 166.094445][ T8519] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 166.105116][ T8548] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 166.499491][ T8553] syzkaller0: Caught tx_queue_len zero misconfig [ 166.525344][ T8554] tipc: Started in network mode [ 166.533529][ T8554] tipc: Node identity 6280d2419447, cluster identity 4711 [ 166.566138][ T8554] tipc: Enabled bearer , priority 0 [ 166.989628][ T8546] batadv1: entered allmulticast mode [ 167.047103][ T8546] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 167.153312][ T8561] batadv2: entered allmulticast mode [ 167.159997][ T8561] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 167.261851][ T8576] tipc: Enabling of bearer rejected, failed to enable media [ 167.342736][ T8578] tipc: Enabling of bearer rejected, already enabled [ 167.403469][ T8578] tipc: Resetting bearer [ 167.674223][ T8584] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 167.724813][ T5939] tipc: Node number set to 4140290625 [ 167.899530][ T8592] netlink: 32 bytes leftover after parsing attributes in process `syz.4.652'. [ 168.145183][ T8605] netlink: 28 bytes leftover after parsing attributes in process `syz.3.655'. [ 168.156622][ T8605] netlink: 28 bytes leftover after parsing attributes in process `syz.3.655'. [ 168.326617][ T8612] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 169.657561][ T8661] __nla_validate_parse: 2 callbacks suppressed [ 169.657583][ T8661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.670'. [ 169.682627][ T8661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.670'. [ 169.732821][ T8661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.670'. [ 169.765166][ T8660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.670'. [ 169.774042][ T8660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.670'. [ 169.785108][ T8660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.670'. [ 169.960065][ T8673] netlink: 44 bytes leftover after parsing attributes in process `syz.2.674'. [ 170.024965][ T8673] netlink: 35 bytes leftover after parsing attributes in process `syz.2.674'. [ 170.034118][ T8673] netlink: 'syz.2.674': attribute type 5 has an invalid length. [ 170.074696][ T8673] netlink: 'syz.2.674': attribute type 6 has an invalid length. [ 170.082400][ T8673] netlink: 35 bytes leftover after parsing attributes in process `syz.2.674'. [ 171.442724][ T8738] FAULT_INJECTION: forcing a failure. [ 171.442724][ T8738] name failslab, interval 1, probability 0, space 0, times 0 [ 171.482096][ T8738] CPU: 1 UID: 0 PID: 8738 Comm: syz.2.692 Not tainted syzkaller #0 PREEMPT(full) [ 171.482128][ T8738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 171.482140][ T8738] Call Trace: [ 171.482149][ T8738] [ 171.482158][ T8738] dump_stack_lvl+0xe8/0x150 [ 171.482191][ T8738] should_fail_ex+0x414/0x560 [ 171.482231][ T8738] should_failslab+0xa8/0x100 [ 171.482260][ T8738] kmem_cache_alloc_noprof+0x88/0x710 [ 171.482295][ T8738] ? ptlock_alloc+0x20/0x70 [ 171.482332][ T8738] ptlock_alloc+0x20/0x70 [ 171.482364][ T8738] pte_alloc_one+0x7a/0x370 [ 171.482388][ T8738] ? __pte_alloc+0x1d/0x1a0 [ 171.482413][ T8738] __pte_alloc+0x25/0x1a0 [ 171.482439][ T8738] ? do_raw_spin_lock+0x121/0x290 [ 171.482473][ T8738] do_pte_missing+0x2b2f/0x3330 [ 171.482500][ T8738] ? do_raw_spin_unlock+0x122/0x240 [ 171.482539][ T8738] ? _raw_spin_unlock+0x28/0x50 [ 171.482581][ T8738] handle_mm_fault+0x1b26/0x32b0 [ 171.482627][ T8738] ? handle_mm_fault+0xdb/0x32b0 [ 171.482675][ T8738] ? __pfx_handle_mm_fault+0x10/0x10 [ 171.482721][ T8738] ? __lock_acquire+0x6b6/0x2cf0 [ 171.482748][ T8738] ? lock_mm_and_find_vma+0x9c/0x300 [ 171.482771][ T8738] do_user_addr_fault+0x764/0x1380 [ 171.482810][ T8738] exc_page_fault+0x71/0xd0 [ 171.482833][ T8738] asm_exc_page_fault+0x26/0x30 [ 171.482853][ T8738] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 171.482882][ T8738] Code: c4 10 e9 d4 40 04 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e [ 171.482899][ T8738] RSP: 0018:ffffc90003437d38 EFLAGS: 00050202 [ 171.482918][ T8738] RAX: 00007ffffffff001 RBX: 0000000000000004 RCX: 0000000000000004 [ 171.482933][ T8738] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffc90003437de0 [ 171.482947][ T8738] RBP: ffffc90003437e48 R08: 0000000000000003 R09: 0000000000000004 [ 171.482960][ T8738] R10: dffffc0000000000 R11: fffff52000686fbc R12: ffff888033787000 [ 171.482977][ T8738] R13: 0000000000000004 R14: ffffc90003437de0 R15: 0000200000000000 [ 171.483012][ T8738] _copy_from_user+0x7a/0xb0 [ 171.483041][ T8738] ax25_setsockopt+0x16c/0xc20 [ 171.483072][ T8738] ? __pfx_aa_sk_perm+0x10/0x10 [ 171.483098][ T8738] ? __pfx_ax25_setsockopt+0x10/0x10 [ 171.483130][ T8738] ? __fget_files+0x2a/0x420 [ 171.483156][ T8738] ? aa_sock_opt_perm+0xff/0x1a0 [ 171.483188][ T8738] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 171.483209][ T8738] ? __pfx_ax25_setsockopt+0x10/0x10 [ 171.483236][ T8738] do_sock_setsockopt+0x17c/0x1b0 [ 171.483268][ T8738] __x64_sys_setsockopt+0x13f/0x1b0 [ 171.483300][ T8738] do_syscall_64+0xec/0xf80 [ 171.483322][ T8738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.483343][ T8738] ? trace_irq_disable+0x37/0x100 [ 171.483372][ T8738] ? clear_bhb_loop+0x60/0xb0 [ 171.483398][ T8738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.483419][ T8738] RIP: 0033:0x7f67da58f749 [ 171.483438][ T8738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.483455][ T8738] RSP: 002b:00007f67db4fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 171.483476][ T8738] RAX: ffffffffffffffda RBX: 00007f67da7e5fa0 RCX: 00007f67da58f749 [ 171.483492][ T8738] RDX: 0000000000000004 RSI: 0000000000000101 RDI: 0000000000000004 [ 171.483504][ T8738] RBP: 00007f67db4fb090 R08: 0000000000000004 R09: 0000000000000000 [ 171.483518][ T8738] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.483531][ T8738] R13: 00007f67da7e6038 R14: 00007f67da7e5fa0 R15: 00007fff4fc476a8 [ 171.483573][ T8738] [ 172.071187][ T8745] netlink: 12 bytes leftover after parsing attributes in process `syz.4.693'. [ 172.144211][ T5939] IPVS: starting estimator thread 0... [ 172.243835][ T8755] bridge0: entered promiscuous mode [ 172.253650][ T8755] bridge0: port 3(macvtap1) entered blocking state [ 172.266225][ T8750] IPVS: using max 25 ests per chain, 60000 per kthread [ 172.266585][ T8755] bridge0: port 3(macvtap1) entered disabled state [ 172.280450][ T8755] macvtap1: entered allmulticast mode [ 172.300049][ T8755] bridge0: entered allmulticast mode [ 172.334890][ T8755] macvtap1: left allmulticast mode [ 172.358511][ T8755] bridge0: left allmulticast mode [ 172.386622][ T8755] bridge0: left promiscuous mode [ 172.462060][ T8768] netlink: 'syz.4.696': attribute type 1 has an invalid length. [ 172.499003][ T8768] netlink: 'syz.4.696': attribute type 2 has an invalid length. [ 172.511118][ T8768] netlink: 'syz.4.696': attribute type 2 has an invalid length. [ 172.520729][ T8768] netlink: 'syz.4.696': attribute type 1 has an invalid length. [ 172.529740][ T8768] netlink: 'syz.4.696': attribute type 1 has an invalid length. [ 172.540046][ T8768] netlink: 'syz.4.696': attribute type 1 has an invalid length. [ 172.548666][ T8768] netlink: 'syz.4.696': attribute type 2 has an invalid length. [ 172.574531][ T8756] bond1: (slave vlan0): Releasing active interface [ 172.582815][ T8768] netlink: 'syz.4.696': attribute type 2 has an invalid length. [ 173.145786][ T8799] lo: Caught tx_queue_len zero misconfig [ 173.567189][ T8824] ip6t_srh: unknown srh invflags BA61 [ 174.125096][ T8832] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 174.147646][ T8832] bond4 (unregistering): Released all slaves [ 174.957462][ T8854] syzkaller0: entered promiscuous mode [ 174.963676][ T8854] syzkaller0: entered allmulticast mode [ 175.625515][ T8872] validate_nla: 12 callbacks suppressed [ 175.625539][ T8872] netlink: 'syz.0.730': attribute type 29 has an invalid length. [ 175.645698][ T8872] netlink: 'syz.0.730': attribute type 29 has an invalid length. [ 175.711199][ T8877] netlink: 'syz.4.732': attribute type 12 has an invalid length. [ 175.740524][ T8878] __nla_validate_parse: 2 callbacks suppressed [ 175.740543][ T8878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.730'. [ 175.937228][ T8884] netlink: 'syz.1.734': attribute type 1 has an invalid length. [ 175.998574][ T8884] bond3: entered promiscuous mode [ 176.016587][ T8887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.734'. [ 176.018884][ T8884] 8021q: adding VLAN 0 to HW filter on device bond3 [ 176.045812][ T8887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.734'. [ 176.946493][ T8912] netlink: 'syz.1.736': attribute type 12 has an invalid length. [ 176.963763][ T8916] tipc: Enabled bearer , priority 0 [ 177.027110][ T8916] syzkaller0: entered promiscuous mode [ 177.032654][ T8916] syzkaller0: entered allmulticast mode [ 177.098642][ T8916] tipc: Resetting bearer [ 177.132461][ T8926] syzkaller0: entered promiscuous mode [ 177.158784][ T8926] syzkaller0: entered allmulticast mode [ 177.196199][ T8925] netlink: 96 bytes leftover after parsing attributes in process `syz.3.742'. [ 177.259386][ T8915] tipc: Resetting bearer [ 177.361538][ T8915] tipc: Disabling bearer [ 177.402817][ T8929] xfrm0: entered promiscuous mode [ 177.408152][ T8929] xfrm0: entered allmulticast mode [ 178.389693][ T8971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.756'. [ 178.831042][ T8982] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 179.247102][ T8996] netlink: 'syz.0.765': attribute type 1 has an invalid length. [ 179.364096][ T9002] bond4: (slave geneve4): making interface the new active one [ 179.372800][ T9002] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 179.385371][ T6112] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 179.397212][ T8996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.765'. [ 179.406031][ T6112] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 179.406090][ T6112] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 179.406136][ T6112] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 179.461584][ T9002] netlink: 'syz.0.765': attribute type 1 has an invalid length. [ 179.556296][ T9010] netlink: 'syz.1.770': attribute type 10 has an invalid length. [ 179.625770][ T9010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.656046][ T9010] team0: Port device bond0 added [ 179.882372][ T9021] netlink: 108 bytes leftover after parsing attributes in process `syz.4.773'. [ 179.892091][ T9021] netlink: 24 bytes leftover after parsing attributes in process `syz.4.773'. [ 180.107359][ T9032] IPv6: addrconf: prefix option has invalid lifetime [ 180.946491][ T9044] vlan0: entered promiscuous mode [ 182.325081][ T9095] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 182.702075][ T9112] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 182.793236][ T9123] netlink: 596 bytes leftover after parsing attributes in process `syz.4.796'. [ 183.392570][ T9139] sctp: [Deprecated]: syz.2.801 (pid 9139) Use of int in maxseg socket option. [ 183.392570][ T9139] Use struct sctp_assoc_value instead [ 183.574214][ T9146] netlink: 'syz.1.803': attribute type 1 has an invalid length. [ 183.737314][ T9146] 8021q: adding VLAN 0 to HW filter on device bond4 [ 183.858745][ T9149] 8021q: adding VLAN 0 to HW filter on device bond4 [ 183.867774][ T9149] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 183.879752][ T9149] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 183.983998][ T9150] gretap1: entered promiscuous mode [ 184.033860][ T9150] bond4: (slave gretap1): making interface the new active one [ 184.083246][ T9150] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 184.212772][ T9153] macvlan2: entered promiscuous mode [ 184.218335][ T9153] macvlan2: entered allmulticast mode [ 184.229388][ T9153] bond4: entered promiscuous mode [ 184.236395][ T9153] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 184.252735][ T9153] bond4: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 184.285903][ T9153] bond4: left promiscuous mode [ 184.374163][ T9164] netlink: 'syz.2.806': attribute type 11 has an invalid length. [ 185.176146][ T9184] netlink: 'syz.2.811': attribute type 8 has an invalid length. [ 185.503313][ T9196] netlink: 16 bytes leftover after parsing attributes in process `syz.0.813'. [ 185.552728][ T9193] netlink: 28 bytes leftover after parsing attributes in process `syz.1.814'. [ 185.821616][ T9208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.815'. [ 185.867591][ T9204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.815'. [ 185.931102][ T9207] syzkaller0: entered promiscuous mode [ 185.950681][ T9207] syzkaller0: entered allmulticast mode [ 186.504326][ T9227] netlink: 24 bytes leftover after parsing attributes in process `syz.4.821'. [ 186.579265][ T9220] bridge0: entered promiscuous mode [ 186.585741][ T9220] bridge0: entered allmulticast mode [ 187.176060][ T9238] netlink: 12 bytes leftover after parsing attributes in process `syz.4.824'. [ 188.392632][ T9263] netlink: 88 bytes leftover after parsing attributes in process `syz.4.831'. [ 188.708721][ T9279] netlink: 'syz.1.835': attribute type 1 has an invalid length. [ 188.735265][ T9279] netlink: 224 bytes leftover after parsing attributes in process `syz.1.835'. [ 188.807093][ T9294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.840'. [ 189.058518][ T9310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.844'. [ 189.072696][ T9301] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.280157][ T9323] netlink: 'syz.2.848': attribute type 1 has an invalid length. [ 189.383165][ T9323] netlink: 28 bytes leftover after parsing attributes in process `syz.2.848'. [ 189.410906][ T9323] 8021q: adding VLAN 0 to HW filter on device bond3 [ 189.903137][ T2980] bond0: (slave bond_slave_0): interface is now down [ 189.913259][ T9359] bond0: option arp_validate: invalid value (55553) [ 189.924743][ T2980] bond0: (slave bond_slave_1): interface is now down [ 189.942710][ T2980] bond0: now running without any active interface! [ 189.960684][ T9364] netlink: 'syz.2.855': attribute type 21 has an invalid length. [ 190.027288][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.033775][ T9364] netlink: 128 bytes leftover after parsing attributes in process `syz.2.855'. [ 190.045838][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.054590][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.074749][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.089334][ T9364] netlink: 'syz.2.855': attribute type 4 has an invalid length. [ 190.123427][ T9364] netlink: 'syz.2.855': attribute type 3 has an invalid length. [ 190.124580][ T9366] netlink: 'syz.2.855': attribute type 1 has an invalid length. [ 190.144765][ T9364] netlink: 3 bytes leftover after parsing attributes in process `syz.2.855'. [ 190.201374][ T9368] netlink: 28 bytes leftover after parsing attributes in process `syz.2.855'. [ 190.292415][ T9376] netlink: 9 bytes leftover after parsing attributes in process `syz.4.860'. [ 190.314106][ T9364] bond4: (slave geneve2): making interface the new active one [ 190.324342][ T9364] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 190.362930][ T9373] bond5 (unregistering): Released all slaves [ 190.392009][ T9376] .70: renamed from hsr0 [ 190.402769][ T9376] .70: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 190.414422][ T9366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.855'. [ 190.424793][ T9376] .70: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 190.438335][ T9376] .70: entered allmulticast mode [ 190.443580][ T9376] hsr_slave_0: entered allmulticast mode [ 190.450872][ T9376] hsr_slave_1: entered allmulticast mode [ 190.459277][ T9376] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check. [ 190.475410][ T137] netdevsim netdevsim2 : set [1, 1] type 2 family 0 port 20004 - 0 [ 190.488556][ T9382] tipc: Enabled bearer , priority 0 [ 190.541458][ T9385] syzkaller0: entered promiscuous mode [ 190.548137][ T9385] syzkaller0: entered allmulticast mode [ 190.585361][ T137] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 190.594356][ T137] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 190.605980][ T137] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 190.665894][ T9369] tipc: Resetting bearer [ 190.693168][ T9369] tipc: Disabling bearer [ 190.741545][ T9395] geneve5: entered promiscuous mode [ 190.747066][ T9395] geneve5: entered allmulticast mode [ 190.775883][ T9402] openvswitch: netlink: IP tunnel dst address not specified [ 190.901749][ T9408] xt_recent: Unsupported userspace flags (000000b1) [ 191.309969][ T9420] syzkaller0: entered promiscuous mode [ 191.326283][ T9420] syzkaller0: entered allmulticast mode [ 193.037746][ T9476] sit0: entered promiscuous mode [ 193.175193][ T5828] Bluetooth: hci4: command 0x0405 tx timeout [ 193.210146][ T2980] syzkaller0: tun_net_xmit 76 [ 193.215951][ T2980] syzkaller0: tun_net_xmit 48 [ 193.234968][ T5939] syzkaller0: tun_net_xmit 76 [ 193.293689][ T9478] syzkaller0: create flow: hash 152473511 index 1 [ 193.462240][ T9475] syzkaller0: delete flow: hash 152473511 index 1 [ 194.001016][ T9509] __nla_validate_parse: 10 callbacks suppressed [ 194.001035][ T9509] netlink: 12 bytes leftover after parsing attributes in process `syz.1.895'. [ 194.019293][ T9508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.895'. [ 195.058179][ T9506] sit0: left promiscuous mode [ 195.067798][ T9506] .70: left allmulticast mode [ 195.072712][ T9506] hsr_slave_0: left allmulticast mode [ 195.079940][ T9506] hsr_slave_1: left allmulticast mode [ 195.096202][ T9506] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 195.103527][ T9506] veth3: left promiscuous mode [ 195.125773][ T9506] macsec1: left promiscuous mode [ 195.131079][ T9506] macsec1: left allmulticast mode [ 195.267102][ T9534] netlink: 'syz.4.902': attribute type 13 has an invalid length. [ 195.293163][ T9537] netlink: 'syz.1.903': attribute type 21 has an invalid length. [ 195.294991][ T9534] netlink: 'syz.4.902': attribute type 17 has an invalid length. [ 195.455863][ T9547] netlink: 20 bytes leftover after parsing attributes in process `syz.4.902'. [ 195.485970][ T9547] netlink: 20 bytes leftover after parsing attributes in process `syz.4.902'. [ 195.584334][ T9553] syzkaller0: entered promiscuous mode [ 195.603099][ T9556] xt_hashlimit: max too large, truncated to 1048576 [ 195.610146][ T9553] syzkaller0: entered allmulticast mode [ 195.618716][ T9556] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 195.657975][ T9556] netlink: 'syz.1.908': attribute type 4 has an invalid length. [ 195.667644][ T9555] netlink: 'syz.1.908': attribute type 4 has an invalid length. [ 195.684530][ T9547] netlink: 20 bytes leftover after parsing attributes in process `syz.4.902'. [ 195.719793][ T9547] netlink: 20 bytes leftover after parsing attributes in process `syz.4.902'. [ 195.858422][ T9561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.909'. [ 195.906599][ T9547] netlink: 20 bytes leftover after parsing attributes in process `syz.4.902'. [ 195.925150][ T9547] netlink: 20 bytes leftover after parsing attributes in process `syz.4.902'. [ 196.176647][ T9587] netlink: 'syz.0.918': attribute type 10 has an invalid length. [ 196.203621][ T9587] team0: Device ipvlan1 failed to register rx_handler [ 196.284909][ T9593] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.298326][ T9594] netlink: 'syz.3.919': attribute type 13 has an invalid length. [ 196.318093][ T9594] netlink: 'syz.3.919': attribute type 17 has an invalid length. [ 196.469814][ T9607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.920'. [ 196.768694][ T9620] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 197.083575][ T9636] tipc: Enabling of bearer rejected, failed to enable media [ 197.795518][ T9663] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 197.833502][ T9663] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 197.858317][ T9663] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 197.892486][ T9672] x_tables: duplicate underflow at hook 1 [ 198.565314][ T9686] netlink: 'syz.2.945': attribute type 1 has an invalid length. [ 198.796665][ T9696] tipc: Failed to remove unknown binding: 66,0,0/4:2181993735/2181993736 [ 198.815994][ T9696] tipc: Failed to remove unknown binding: 66,0,0/4:2181993735/2181993736 [ 199.539273][ T9740] syzkaller0: entered promiscuous mode [ 199.545127][ T9740] syzkaller0: entered allmulticast mode [ 199.562671][ T9743] tipc: Enabled bearer , priority 0 [ 199.595188][ T9735] tipc: Resetting bearer [ 199.706862][ T9735] tipc: Disabling bearer [ 199.794705][ T9754] netlink: 'syz.0.966': attribute type 21 has an invalid length. [ 199.833497][ T9754] IPv6: NLM_F_CREATE should be specified when creating new route [ 199.845882][ T9754] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 199.853518][ T9754] IPv6: NLM_F_CREATE should be set when creating new route [ 199.860847][ T9754] IPv6: NLM_F_CREATE should be set when creating new route [ 199.868162][ T9754] IPv6: NLM_F_CREATE should be set when creating new route [ 200.267721][ T9773] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 200.627690][ T9787] syzkaller0: entered promiscuous mode [ 200.633517][ T9787] syzkaller0: entered allmulticast mode [ 200.888939][ T9789] macvtap1: entered promiscuous mode [ 200.916296][ T9789] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 200.957725][ T9806] macsec0: entered promiscuous mode [ 200.966893][ T9806] macsec0: entered allmulticast mode [ 201.005658][ T5893] IPVS: starting estimator thread 0... [ 201.106095][ T9815] IPVS: using max 28 ests per chain, 67200 per kthread [ 201.385331][ T5916] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 201.656431][ T9843] __nla_validate_parse: 8 callbacks suppressed [ 201.656451][ T9843] netlink: 40 bytes leftover after parsing attributes in process `syz.4.986'. [ 201.877561][ T1109] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 201.986431][ T9858] netlink: 16 bytes leftover after parsing attributes in process `syz.2.990'. [ 202.125165][ T5893] IPVS: starting estimator thread 0... [ 202.125535][ T9861] netlink: 72 bytes leftover after parsing attributes in process `syz.0.992'. [ 202.224891][ T9862] IPVS: using max 27 ests per chain, 64800 per kthread [ 202.254272][ T9863] netlink: 'syz.0.992': attribute type 1 has an invalid length. [ 202.291583][ T9872] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.329565][ T9873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.339726][ T9867] bond3: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 202.361618][ T9867] bond3 (unregistering): Released all slaves [ 202.375045][ T5939] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 202.447981][ T9863] bond5: entered promiscuous mode [ 202.468307][ T9879] netlink: 596 bytes leftover after parsing attributes in process `syz.3.996'. [ 202.487929][ T9863] bond5: entered allmulticast mode [ 202.507017][ T9863] 8021q: adding VLAN 0 to HW filter on device bond5 [ 202.728501][ T9889] ip6gretap1: entered allmulticast mode [ 202.861200][ T9894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1002'. [ 202.887158][ T9902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.950683][ T9902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.016560][ T2980] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 203.029124][ T2980] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 203.095247][ T9912] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 203.204949][ T5893] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 203.291736][ T9918] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 203.402915][ T9928] xt_hashlimit: size too large, truncated to 1048576 [ 203.813989][ T9945] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1017'. [ 203.931866][ T9960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1017'. [ 203.941112][ T9960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1017'. [ 204.123467][ T9968] netlink: 'syz.4.1022': attribute type 1 has an invalid length. [ 204.638962][ T9990] bridge: RTM_NEWNEIGH with invalid ether address [ 205.021690][T10009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1033'. [ 205.060757][T10009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1033'. [ 205.070514][T10009] netlink: zone id is out of range [ 205.099224][T10013] netlink: 'syz.4.1035': attribute type 1 has an invalid length. [ 205.182282][T10017] 8021q: adding VLAN 0 to HW filter on device bond3 [ 205.216924][T10013] 8021q: adding VLAN 0 to HW filter on device bond3 [ 205.228379][T10013] bond3: (slave geneve2): making interface the new active one [ 205.239619][T10013] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 205.251000][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 205.298757][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 205.326970][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 205.501968][T10031] netlink: 'syz.3.1041': attribute type 1 has an invalid length. [ 205.773259][T10043] pim6reg: entered allmulticast mode [ 205.784831][T10043] pim6reg: left allmulticast mode [ 206.132078][T10061] tipc: Enabled bearer , priority 0 [ 206.144394][T10061] syzkaller0: entered promiscuous mode [ 206.151446][T10061] syzkaller0: entered allmulticast mode [ 206.197707][T10061] tipc: Resetting bearer [ 206.219714][T10061] tipc: Enabling of bearer rejected, already enabled [ 206.248403][T10060] tipc: Resetting bearer [ 206.320907][T10060] tipc: Disabling bearer [ 206.829500][T10077] 8021q: adding VLAN 0 to HW filter on device bond5 [ 206.837147][T10076] bond5: option mode: unable to set because the bond device is up [ 206.855531][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 206.865182][T10077] bond_slave_0: entered promiscuous mode [ 206.871158][T10077] bond_slave_1: entered promiscuous mode [ 206.878193][T10077] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 206.890518][T10077] bond5: (slave macvlan0): Enslaving as a backup interface with an up link [ 206.932126][T10080] bond5: (slave macvlan1): Error -98 calling set_mac_address [ 207.043357][T10076] bridge_slave_0: left allmulticast mode [ 207.066058][T10076] bridge_slave_0: left promiscuous mode [ 207.079368][T10076] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.113232][T10076] bridge_slave_1: left allmulticast mode [ 207.130028][T10076] bridge_slave_1: left promiscuous mode [ 207.145102][T10076] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.187433][T10076] bond0: (slave bond_slave_0): Releasing backup interface [ 207.209723][T10076] bond_slave_0: left promiscuous mode [ 207.236065][T10076] bond0: (slave bond_slave_1): Releasing backup interface [ 207.257161][T10076] bond_slave_1: left promiscuous mode [ 207.261019][T10105] __nla_validate_parse: 4 callbacks suppressed [ 207.261063][T10105] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1055'. [ 207.303752][T10076] team0: Port device team_slave_0 removed [ 207.333699][T10076] team0: Port device team_slave_1 removed [ 207.341364][T10076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.359275][T10076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.367653][T10104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1059'. [ 207.387802][T10076] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 207.429247][T10077] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 207.449655][ T2980] bond5: (slave macvlan0): speed changed to 0 on port 1 [ 207.600061][T10099] team0 (unregistering): Port device team_slave_0 removed [ 207.610719][T10099] team0 (unregistering): Port device team_slave_1 removed [ 207.676962][T10115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1062'. [ 207.693312][T10104] 8021q: adding VLAN 0 to HW filter on device bond5 [ 207.776907][T10110] 8021q: adding VLAN 0 to HW filter on device bond5 [ 207.788100][T10117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1062'. [ 207.825564][T10110] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 207.839601][T10120] netlink: 'syz.2.1062': attribute type 1 has an invalid length. [ 207.848231][T10110] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 207.856576][T10119] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 207.906520][T10115] veth0_to_bond: entered allmulticast mode [ 208.049127][T10131] netlink: 428 bytes leftover after parsing attributes in process `syz.4.1067'. [ 208.105327][T10115] veth3: entered promiscuous mode [ 208.122701][T10136] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1067'. [ 208.140520][T10133] netlink: 'syz.3.1068': attribute type 1 has an invalid length. [ 208.159539][T10131] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1067'. [ 208.273707][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.318334][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.343098][T10142] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 208.416651][T10142] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 208.496799][T10133] bond2: (slave gretap1): making interface the new active one [ 208.507877][T10133] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 208.540035][ T137] bond5: (slave macvlan0): link status definitely down, disabling slave [ 208.601619][T10143] macvlan3: entered promiscuous mode [ 208.641307][T10143] macvlan3: entered allmulticast mode [ 208.676853][T10143] bond2: entered promiscuous mode [ 208.681957][T10143] gretap1: entered promiscuous mode [ 208.715678][T10160] netlink: 'syz.0.1074': attribute type 10 has an invalid length. [ 208.726668][T10143] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 208.739521][T10143] bond2: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 208.752968][T10143] bond2: left promiscuous mode [ 208.761871][T10143] gretap1: left promiscuous mode [ 208.871961][T10165] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1074'. [ 208.907153][T10160] hsr0: entered promiscuous mode [ 208.956138][T10160] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 209.007721][T10160] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 209.021313][T10160] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 209.139125][T10181] netlink: 'syz.4.1077': attribute type 1 has an invalid length. [ 209.148216][T10181] netlink: 9188 bytes leftover after parsing attributes in process `syz.4.1077'. [ 209.168779][T10181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1077'. [ 209.384582][T10191] bond0: Caught tx_queue_len zero misconfig [ 210.522615][T10229] : entered promiscuous mode [ 210.545008][T10233] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 210.587381][T10232] bridge0: port 3(macvtap1) entered blocking state [ 210.594961][T10232] bridge0: port 3(macvtap1) entered disabled state [ 210.601749][T10232] macvtap1: entered allmulticast mode [ 210.647929][T10232] macvtap1: left allmulticast mode [ 211.675975][T10279] sctp: [Deprecated]: syz.2.1107 (pid 10279) Use of struct sctp_assoc_value in delayed_ack socket option. [ 211.675975][T10279] Use struct sctp_sack_info instead [ 211.802057][T10281] syzkaller0: entered promiscuous mode [ 211.820200][T10281] syzkaller0: entered allmulticast mode [ 211.829930][T10270] Bluetooth: hci3: command 0x0406 tx timeout [ 211.838909][T10270] Bluetooth: hci2: command 0x0406 tx timeout [ 211.845081][T10270] Bluetooth: hci1: command 0x0406 tx timeout [ 213.579095][ T5150] Bluetooth: hci4: command 0x0405 tx timeout [ 213.794971][T10324] __nla_validate_parse: 6 callbacks suppressed [ 213.794989][T10324] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1115'. [ 214.071256][T10344] netlink: 'syz.0.1120': attribute type 10 has an invalid length. [ 214.137675][T10346] netlink: 'syz.1.1119': attribute type 6 has an invalid length. [ 214.196380][T10344] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 214.210061][T10344] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 214.859193][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 215.195096][T10377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1127'. [ 215.229714][T10380] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1128'. [ 215.290080][T10380] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1128'. [ 215.393587][ T3806] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.412880][ T3806] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.431775][ T3806] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.537780][T10395] netlink: 476 bytes leftover after parsing attributes in process `syz.1.1132'. [ 215.555358][T10395] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1132'. [ 215.813491][T10415] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1137'. [ 216.306138][T10443] xt_HMARK: spi-set and port-set can't be combined [ 216.330374][T10446] netlink: 516 bytes leftover after parsing attributes in process `syz.0.1145'. [ 216.455716][T10422] syzkaller1: entered promiscuous mode [ 216.471158][T10422] syzkaller1: entered allmulticast mode [ 216.576285][T10461] tipc: Enabling of bearer rejected, already enabled [ 217.078111][T10487] bridge0: left allmulticast mode [ 217.251986][T10494] netlink: 'syz.4.1158': attribute type 19 has an invalid length. [ 217.302085][T10499] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1160'. [ 217.321957][T10497] netlink: 'syz.4.1158': attribute type 19 has an invalid length. [ 217.336606][T10494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1158'. [ 218.525980][T10542] netlink: 'syz.0.1173': attribute type 1 has an invalid length. [ 218.586555][T10547] xt_bpf: check failed: parse error [ 218.716257][T10542] 8021q: adding VLAN 0 to HW filter on device bond6 [ 218.890262][T10539] erspan0: left promiscuous mode [ 219.078051][T10539] wg1: left promiscuous mode [ 219.082892][T10539] wg1: left allmulticast mode [ 219.113976][T10539] veth0_to_bond: left allmulticast mode [ 219.684722][T10539] gretap1: left promiscuous mode [ 219.720788][T10539] tipc: Resetting bearer [ 219.732230][T10539] syzkaller0: left promiscuous mode [ 219.738857][T10539] syzkaller0: left allmulticast mode [ 219.861817][T10565] vxcan2: entered allmulticast mode [ 219.892355][ T3598] netdevsim netdevsim2 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.911852][ T3598] netdevsim netdevsim2 : unset [1, 1] type 2 family 0 port 20004 - 0 [ 219.922653][ T3598] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.932232][ T3598] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 219.999001][ T3598] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.037552][ T3598] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 220.057879][ T3598] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.076695][T10582] __nla_validate_parse: 3 callbacks suppressed [ 220.076715][T10582] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1181'. [ 220.079894][ T3598] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 220.247190][T10591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1183'. [ 220.276501][T10593] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1184'. [ 220.302997][T10593] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1184'. [ 220.726863][T10601] xt_hashlimit: max too large, truncated to 1048576 [ 220.733762][T10601] xt_bpf: check failed: parse error [ 220.770949][T10604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.833061][ T3598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.849301][ T3598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.878436][T10608] sctp: [Deprecated]: syz.2.1189 (pid 10608) Use of int in max_burst socket option. [ 220.878436][T10608] Use struct sctp_assoc_value instead [ 221.814358][T10627] netlink: 732 bytes leftover after parsing attributes in process `syz.1.1194'. [ 221.824484][T10627] netlink: 732 bytes leftover after parsing attributes in process `syz.1.1194'. [ 224.043482][T10629] netlink: 'syz.2.1195': attribute type 15 has an invalid length. [ 224.096967][T10635] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1196'. [ 224.270010][T10641] netlink: 'syz.1.1199': attribute type 1 has an invalid length. [ 224.288245][T10641] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1199'. [ 224.341747][T10646] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1201'. [ 224.432942][T10649] netlink: 'syz.2.1202': attribute type 10 has an invalid length. [ 224.471533][T10649] team0: Device dummy0 failed to register rx_handler [ 224.493162][T10655] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1204'. [ 224.590285][T10652] pimreg: entered allmulticast mode [ 225.696753][T10695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1213'. [ 227.003742][T10740] netlink: 'syz.2.1227': attribute type 10 has an invalid length. [ 227.055705][T10740] veth0_macvtap: left promiscuous mode [ 227.069316][T10740] team0: Device veth0_macvtap failed to register rx_handler [ 227.482729][T10749] syzkaller1: entered promiscuous mode [ 227.506747][T10749] syzkaller1: entered allmulticast mode [ 228.394067][T10780] syzkaller0: entered promiscuous mode [ 228.401234][T10780] syzkaller0: entered allmulticast mode [ 228.411881][T10780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1237'. [ 228.694091][T10792] netlink: 'syz.4.1242': attribute type 10 has an invalid length. [ 229.042859][T10803] tipc: Enabled bearer , priority 0 [ 229.097118][T10803] syzkaller0: entered promiscuous mode [ 229.103979][T10803] syzkaller0: entered allmulticast mode [ 229.157924][T10803] tipc: Resetting bearer [ 229.166840][T10801] tipc: Resetting bearer [ 229.181716][T10801] tipc: Disabling bearer [ 229.718759][T10825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1250'. [ 230.022497][T10836] IPVS: set_ctl: invalid protocol: 140 224.0.0.1:20003 [ 230.216972][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 230.436191][T10852] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 230.586457][T10852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1259'. [ 230.753778][T10860] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1261'. [ 230.896113][ T3571] batman_adv: batadv0: IGMP Querier appeared [ 230.902606][ T3571] batman_adv: batadv0: MLD Querier appeared [ 231.022750][T10871] netlink: 'syz.4.1267': attribute type 61 has an invalid length. [ 231.379686][T10897] bond0: (slave sit0): Error: Device type is different from other slaves [ 231.867202][T10919] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 231.998278][T10923] ip6gre2: entered promiscuous mode [ 232.708468][T10947] bond5 (unregistering): Released all slaves [ 233.139638][T10959] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1290'. [ 233.160231][T10959] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1290'. [ 233.552640][T10978] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1296'. [ 233.575200][T10979] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1296'. [ 233.668509][T10988] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 233.724098][T10987] ip6tnl0: Caught tx_queue_len zero misconfig [ 233.833201][T10998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1302'. [ 233.871142][T11001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1301'. [ 233.885773][T11001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1301'. [ 233.939277][T11001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1301'. [ 233.959402][T11001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1301'. [ 234.636538][T11038] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 235.187604][T11049] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 235.187992][T11048] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 235.230486][T11052] netlink: 'syz.1.1315': attribute type 10 has an invalid length. [ 235.671582][T10569] IPVS: starting estimator thread 0... [ 235.765560][T11066] IPVS: using max 28 ests per chain, 67200 per kthread [ 236.098343][ T30] audit: type=1800 audit(1767794364.436:2): pid=11078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1323" name="memory.events" dev="tmpfs" ino=1307 res=0 errno=0 [ 236.204770][ T30] audit: type=1804 audit(1767794364.436:3): pid=11078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1323" name="/newroot/250/memory.events" dev="tmpfs" ino=1307 res=1 errno=0 [ 236.493907][T11085] netlink: 'syz.4.1326': attribute type 10 has an invalid length. [ 237.025819][T11102] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 237.132063][T11114] __nla_validate_parse: 4 callbacks suppressed [ 237.132084][T11114] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1332'. [ 237.231213][T11119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1334'. [ 237.364184][T11123] netlink: 'syz.4.1335': attribute type 3 has an invalid length. [ 237.392522][T11123] syz_tun: entered allmulticast mode [ 237.410830][T11123] siw: device registration error -23 [ 237.436392][T11127] netlink: 71 bytes leftover after parsing attributes in process `syz.1.1336'. [ 237.493561][T11123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.510384][T11123] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 237.563248][T11122] syz_tun: left allmulticast mode [ 237.569756][T11126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1337'. [ 237.597385][T11126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1337'. [ 237.608157][ T3472] batman_adv: batadv0: MLD Querier disappeared - multicast optimizations disabled [ 237.626709][T11126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1337'. [ 237.725681][T11136] netlink: 'syz.4.1338': attribute type 10 has an invalid length. [ 237.977525][T11151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1345'. [ 237.996886][T11152] netlink: 416 bytes leftover after parsing attributes in process `syz.4.1344'. [ 238.033247][T11156] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1346'. [ 238.043218][T11157] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1343'. [ 238.099385][T11158] tipc: Enabled bearer , priority 0 [ 238.225112][T11161] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 238.233885][T11158] syzkaller0: entered promiscuous mode [ 238.249121][T11158] syzkaller0: entered allmulticast mode [ 238.300368][T11158] tipc: Resetting bearer [ 238.323177][T11158] netlink: 'syz.3.1347': attribute type 3 has an invalid length. [ 238.406043][T11154] tipc: Resetting bearer [ 238.467610][T11154] tipc: Disabling bearer [ 238.567917][T11176] netlink: 'syz.0.1348': attribute type 39 has an invalid length. [ 239.244998][T11209] netlink: 'syz.2.1354': attribute type 10 has an invalid length. [ 239.513000][T11216] nbd1: detected capacity change from 0 to 63 [ 239.519646][T11220] nbd: must specify an index to disconnect [ 239.543428][ T5150] block nbd1: Receive control failed (result -32) [ 240.340023][T11262] netlink: 'syz.2.1368': attribute type 10 has an invalid length. [ 240.658873][T11274] netlink: 'syz.3.1373': attribute type 2 has an invalid length. [ 240.686272][T11276] openvswitch: netlink: Flow actions attr not present in new flow. [ 240.817034][T11281] sctp: [Deprecated]: syz.0.1375 (pid 11281) Use of struct sctp_assoc_value in delayed_ack socket option. [ 240.817034][T11281] Use struct sctp_sack_info instead [ 241.014146][T11293] netlink: 'syz.0.1381': attribute type 10 has an invalid length. [ 241.446018][T11320] veth0: entered promiscuous mode [ 241.584913][T11320] netlink: 'syz.0.1389': attribute type 16 has an invalid length. [ 241.625959][T11320] netlink: 'syz.0.1389': attribute type 17 has an invalid length. [ 241.653837][T11326] 8021q: adding VLAN 0 to HW filter on device bond5 [ 241.673505][T11328] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 241.687005][T11328] bond5: (slave macvlan2): Enslaving as a backup interface with an up link [ 241.697858][T11320] lo: left promiscuous mode [ 241.757873][T11320] tunl0: left promiscuous mode [ 241.763579][ T3571] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 241.775181][T11320] gre0: left promiscuous mode [ 241.781809][T11320] gretap0: left promiscuous mode [ 241.788435][T11320] erspan0: left promiscuous mode [ 241.796496][T11320] ip_vti0: left promiscuous mode [ 241.812023][T11320] ip6_vti0: left promiscuous mode [ 241.836836][T11320] sit0: left promiscuous mode [ 241.850945][T11320] ip6tnl0: left promiscuous mode [ 241.867578][T11320] ip6gre0: left promiscuous mode [ 241.881870][T11320] syz_tun: left promiscuous mode [ 241.896856][T11320] ip6gretap0: left promiscuous mode [ 241.913029][T11320] bridge0: left promiscuous mode [ 241.924781][ T3806] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 241.937851][T11320] vcan0: left promiscuous mode [ 241.955271][T11320] bond0: left promiscuous mode [ 241.960472][T11320] bond_slave_0: left promiscuous mode [ 241.967252][T11320] bond_slave_1: left promiscuous mode [ 241.973143][T11320] batadv0: left promiscuous mode [ 241.980609][T11320] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 241.990226][T11320] team0: left promiscuous mode [ 241.995518][T11320] team_slave_0: left promiscuous mode [ 242.001406][T11320] team_slave_1: left promiscuous mode [ 242.008867][T11320] dummy0: left promiscuous mode [ 242.016683][T11320] nlmon0: left promiscuous mode [ 242.023272][T11320] caif0: left promiscuous mode [ 242.028913][T11320] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 242.155672][ T3571] bond5: (slave macvlan2): link status up again after 0 ms [ 242.163117][ T3571] bond5: (slave macvlan2): failed to get link speed/duplex [ 242.216862][T11344] netlink: 'syz.2.1394': attribute type 10 has an invalid length. [ 242.256789][T11346] __nla_validate_parse: 6 callbacks suppressed [ 242.256810][T11346] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1395'. [ 242.293132][T11320] veth0: left promiscuous mode [ 242.312281][ T3571] bond5: (slave macvlan2): failed to get link speed/duplex [ 242.444870][ T3571] bond5: (slave macvlan2): failed to get link speed/duplex [ 242.564754][ T137] bond5: (slave macvlan2): failed to get link speed/duplex [ 242.701235][ T137] bond5: (slave macvlan2): failed to get link speed/duplex [ 242.803279][T11370] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1400'. [ 243.059331][ T3806] bond5: (slave macvlan2): failed to get link speed/duplex [ 243.186623][T11395] netlink: 'syz.4.1409': attribute type 10 has an invalid length. [ 243.194772][ T3806] bond5: (slave macvlan2): failed to get link speed/duplex [ 243.225958][T11397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1410'. [ 243.269950][T11393] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.327294][T11405] geneve0: entered allmulticast mode [ 243.442599][ T3806] bond5: (slave macvlan2): failed to get link speed/duplex [ 243.575380][ T3472] bond5: (slave macvlan2): failed to get link speed/duplex [ 243.657858][T11421] netlink: 428 bytes leftover after parsing attributes in process `syz.0.1416'. [ 243.699766][T11421] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1416'. [ 243.716311][ T3571] bond5: (slave macvlan2): failed to get link speed/duplex [ 243.730748][T11430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1416'. [ 243.771502][T11432] bridge0: port 3(netdevsim3) entered blocking state [ 243.804476][T11432] bridge0: port 3(netdevsim3) entered disabled state [ 243.825872][T11432] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 243.840072][T11436] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 243.859883][T11432] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 244.020002][T11440] netlink: 'syz.3.1422': attribute type 9 has an invalid length. [ 244.044729][T11442] netlink: 'syz.4.1423': attribute type 10 has an invalid length. [ 244.159865][T11446] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 244.245356][T11449] delete_channel: no stack [ 244.369233][T11455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1428'. [ 244.387544][T11455] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1428'. [ 244.417152][T11455] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1428'. [ 244.502674][T11455] vlan2: entered allmulticast mode [ 244.508075][T11455] dummy0: entered allmulticast mode [ 244.530873][T11462] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1430'. [ 245.452775][T11489] netlink: 'syz.4.1439': attribute type 10 has an invalid length. [ 245.651063][T11487] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 246.114127][T11509] netlink: 'syz.4.1441': attribute type 1 has an invalid length. [ 246.846864][T11560] netlink: 'syz.2.1452': attribute type 10 has an invalid length. [ 247.030405][T11566] netlink: 'syz.2.1453': attribute type 4 has an invalid length. [ 247.092073][T11570] : entered promiscuous mode [ 247.575384][ T13] net_ratelimit: 18 callbacks suppressed [ 247.575406][ T13] bond5: (slave macvlan2): failed to get link speed/duplex [ 247.723855][ T13] bond5: (slave macvlan2): failed to get link speed/duplex [ 247.851908][T11602] netlink: 'syz.4.1463': attribute type 10 has an invalid length. [ 247.861756][ T3472] bond5: (slave macvlan2): failed to get link speed/duplex [ 247.988060][T11608] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 248.035469][T11610] __nla_validate_parse: 9 callbacks suppressed [ 248.035490][T11610] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1466'. [ 248.065124][T11610] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1466'. [ 248.074139][T11610] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1466'. [ 248.105786][T11610] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1466'. [ 248.115144][T11610] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1466'. [ 248.145198][T11589] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1458'. [ 248.164766][T11608] syzkaller0: entered allmulticast mode [ 248.476969][T11639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1471'. [ 248.494781][ T3598] bond5: (slave macvlan2): failed to get link speed/duplex [ 248.624954][ T6112] bond5: (slave macvlan2): failed to get link speed/duplex [ 248.710126][T11645] bridge0: port 3(netdevsim3) entered disabled state [ 248.842523][T11645] netdevsim netdevsim3 netdevsim3 (unregistering): left allmulticast mode [ 248.885015][T11645] netdevsim netdevsim3 netdevsim3 (unregistering): left promiscuous mode [ 248.915849][T11645] bridge0: port 3(netdevsim3) entered disabled state [ 248.962802][T11645] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.981462][T11658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1476'. [ 248.995871][T11658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1476'. [ 249.014971][T11645] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.148258][T11645] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.190454][T11645] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.246149][T11632] bond5: (slave macvlan2): failed to get link speed/duplex [ 249.338918][T11645] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.360475][T11645] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.426195][T11632] bond5: (slave macvlan2): failed to get link speed/duplex [ 249.493995][T11645] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.544823][T11645] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.660468][ T1058] bond5: (slave macvlan2): failed to get link speed/duplex [ 249.774805][ T6101] bond5: (slave macvlan2): failed to get link speed/duplex [ 249.846546][ T1058] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.865105][ T1058] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.915293][ T1058] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.931705][ T1058] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.971085][ T1058] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.987093][ T1058] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.033322][ T1058] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.049693][ T1058] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.280804][T11686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1483'. [ 250.415984][T11696] netlink: 'syz.1.1485': attribute type 1 has an invalid length. [ 250.621399][T11704] netlink: 'syz.2.1489': attribute type 1 has an invalid length. [ 250.688871][T11704] bond6: entered promiscuous mode [ 250.694422][T11704] 8021q: adding VLAN 0 to HW filter on device bond6 [ 250.836816][T11709] syzkaller1: entered promiscuous mode [ 250.842370][T11709] syzkaller1: entered allmulticast mode [ 251.031361][T11714] IPVS: Scheduler module ip_vs_sip not found [ 252.003843][T11752] netlink: 'syz.0.1502': attribute type 10 has an invalid length. [ 252.136106][T11748] vlan0: entered promiscuous mode [ 252.141318][T11748] dummy0: entered promiscuous mode [ 252.239902][T11752] batman_adv: batadv0: Adding interface: netdevsim0 [ 252.246695][T11752] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.277328][T11752] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 252.439876][T11763] netlink: 'syz.1.1506': attribute type 10 has an invalid length. [ 252.467998][T11763] team0: Device veth0_macvtap failed to register rx_handler [ 252.610072][T11772] FAULT_INJECTION: forcing a failure. [ 252.610072][T11772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.634949][ T3472] net_ratelimit: 17 callbacks suppressed [ 252.634972][ T3472] bond5: (slave macvlan2): failed to get link speed/duplex [ 252.638010][T11772] CPU: 1 UID: 0 PID: 11772 Comm: syz.0.1509 Not tainted syzkaller #0 PREEMPT(full) [ 252.638083][T11772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 252.638136][T11772] Call Trace: [ 252.638158][T11772] [ 252.638181][T11772] dump_stack_lvl+0xe8/0x150 [ 252.638274][T11772] should_fail_ex+0x414/0x560 [ 252.638379][T11772] _copy_from_user+0x2d/0xb0 [ 252.638452][T11772] ___sys_sendmsg+0x158/0x2a0 [ 252.638521][T11772] ? __pfx____sys_sendmsg+0x10/0x10 [ 252.638598][T11772] ? kstrtouint+0x6e/0xe0 [ 252.638754][T11772] ? __fget_files+0x2a/0x420 [ 252.638819][T11772] ? __fget_files+0x3a0/0x420 [ 252.638920][T11772] __sys_sendmmsg+0x227/0x430 [ 252.639004][T11772] ? __pfx___sys_sendmmsg+0x10/0x10 [ 252.639059][T11772] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 252.639197][T11772] ? ksys_write+0x22a/0x250 [ 252.639266][T11772] ? __pfx_ksys_write+0x10/0x10 [ 252.639361][T11772] __x64_sys_sendmmsg+0xa0/0xc0 [ 252.639447][T11772] do_syscall_64+0xec/0xf80 [ 252.639519][T11772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.639571][T11772] ? trace_irq_disable+0x37/0x100 [ 252.639645][T11772] ? clear_bhb_loop+0x60/0xb0 [ 252.639709][T11772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.639767][T11772] RIP: 0033:0x7f347d78f749 [ 252.639820][T11772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.639872][T11772] RSP: 002b:00007f347e607038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 252.639933][T11772] RAX: ffffffffffffffda RBX: 00007f347d9e5fa0 RCX: 00007f347d78f749 [ 252.639969][T11772] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000007 [ 252.640009][T11772] RBP: 00007f347e607090 R08: 0000000000000000 R09: 0000000000000000 [ 252.640042][T11772] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.640076][T11772] R13: 00007f347d9e6038 R14: 00007f347d9e5fa0 R15: 00007ffce7007ac8 [ 252.640169][T11772] [ 252.954874][ T3472] bond5: (slave macvlan2): failed to get link speed/duplex [ 253.039809][T11783] netlink: 'syz.1.1513': attribute type 2 has an invalid length. [ 253.056838][T11786] __nla_validate_parse: 6 callbacks suppressed [ 253.056859][T11786] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1512'. [ 253.075065][ T1058] bond5: (slave macvlan2): failed to get link speed/duplex [ 253.103722][T11779] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.1512'. [ 253.125943][T11779] netlink: 'syz.0.1512': attribute type 10 has an invalid length. [ 253.184747][ T3472] bond5: (slave macvlan2): failed to get link speed/duplex [ 253.294923][ T6112] bond5: (slave macvlan2): failed to get link speed/duplex [ 253.404789][ T6112] bond5: (slave macvlan2): failed to get link speed/duplex [ 253.514884][ T3472] bond5: (slave macvlan2): failed to get link speed/duplex [ 253.635009][ T3472] bond5: (slave macvlan2): failed to get link speed/duplex [ 253.667226][T11806] netlink: 'syz.4.1520': attribute type 10 has an invalid length. [ 253.667482][T11801] nbd0: detected capacity change from 0 to 127 [ 253.684376][ T5833] block nbd0: Receive control failed (result -32) [ 253.744861][ T3472] bond5: (slave macvlan2): failed to get link speed/duplex [ 253.858406][ T3472] bond5: (slave macvlan2): failed to get link speed/duplex [ 254.035991][T11825] can: request_module (can-proto-3) failed. [ 254.141143][T11828] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1527'. [ 254.165123][T11828] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1527'. [ 254.439560][T11839] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1530'. [ 255.003135][T11862] x_tables: duplicate underflow at hook 1 [ 255.040106][T11868] netlink: 'syz.1.1539': attribute type 1 has an invalid length. [ 255.162396][T11868] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 255.220081][T11868] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 255.454458][T11879] syzkaller0: entered promiscuous mode [ 255.468222][T11879] syzkaller0: entered allmulticast mode [ 255.516000][T11878] bond6: (slave gretap2): making interface the new active one [ 255.524332][T11878] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 255.574866][T11885] macvlan0: entered promiscuous mode [ 255.580232][T11885] macvlan0: entered allmulticast mode [ 255.587552][T11885] bond6: entered promiscuous mode [ 255.592647][T11885] gretap2: entered promiscuous mode [ 255.598472][T11902] netlink: 'syz.4.1546': attribute type 1 has an invalid length. [ 255.598495][T11902] netlink: 'syz.4.1546': attribute type 4 has an invalid length. [ 255.598511][T11902] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1546'. [ 255.609915][T11885] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 255.668189][T11885] bond6: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 255.683983][T11885] bond6: left promiscuous mode [ 255.689307][T11885] gretap2: left promiscuous mode [ 255.768559][T11909] syzkaller0: entered promiscuous mode [ 255.794857][T11909] syzkaller0: entered allmulticast mode [ 255.926265][T11920] sctp: [Deprecated]: syz.0.1551 (pid 11920) Use of int in max_burst socket option. [ 255.926265][T11920] Use struct sctp_assoc_value instead [ 255.973457][T11921] netlink: 'syz.1.1550': attribute type 1 has an invalid length. [ 256.016419][T11921] 8021q: adding VLAN 0 to HW filter on device bond7 [ 256.097513][T11933] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 256.109021][T11921] bond7: (slave gretap3): making interface the new active one [ 256.119090][T11921] bond7: (slave gretap3): Enslaving as an active interface with an up link [ 256.139663][T11921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1550'. [ 256.292504][T11921] bond7 (unregistering): (slave gretap3): Releasing active interface [ 256.307957][T11921] bond7 (unregistering): Released all slaves [ 256.337294][T11944] syz.2.1554 (11944) used obsolete PPPIOCDETACH ioctl [ 256.609069][T11957] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1562'. [ 256.695183][T11959] IPVS: length: 153 != 24 [ 257.177126][ T5833] Bluetooth: hci4: command 0x0405 tx timeout [ 257.439506][T11977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1568'. [ 257.490112][T11979] siw: device registration error -23 [ 257.528930][T11979] xt_HMARK: spi-set and port-set can't be combined [ 257.658753][T11986] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 257.667267][T11984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1573'. [ 257.702981][T11984] gre2: entered promiscuous mode [ 257.741825][T11984] gre2: entered allmulticast mode [ 257.937366][T11995] bond7 (unregistering): Released all slaves [ 258.034021][T11999] dummy0: entered promiscuous mode [ 258.047796][T11999] bond0: entered promiscuous mode [ 258.052891][T11999] bond_slave_0: entered promiscuous mode [ 258.067698][T11999] bond_slave_1: entered promiscuous mode [ 258.073775][T11999] batadv0: entered promiscuous mode [ 258.079569][T11999] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 258.094434][T11999] hsr1: entered allmulticast mode [ 258.100085][T11999] dummy0: entered allmulticast mode [ 258.112189][T11999] bond0: entered allmulticast mode [ 258.123101][T11999] bond_slave_0: entered allmulticast mode [ 258.129091][T11999] bond_slave_1: entered allmulticast mode [ 258.135989][T11999] batadv0: entered allmulticast mode [ 258.141550][T11999] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 259.977912][T12001] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 259.978054][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 260.457903][T12013] syzkaller0: entered promiscuous mode [ 260.463578][T12013] syzkaller0: entered allmulticast mode [ 260.524778][ T1058] net_ratelimit: 26 callbacks suppressed [ 260.524800][ T1058] bond5: (slave macvlan2): failed to get link speed/duplex [ 260.645563][ T3598] bond5: (slave macvlan2): failed to get link speed/duplex [ 260.762392][T12044] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20000 [ 260.774933][ T3598] bond5: (slave macvlan2): failed to get link speed/duplex [ 260.868834][T12049] geneve5: entered promiscuous mode [ 260.874122][T12049] geneve5: entered allmulticast mode [ 261.064805][ T6974] bond5: (slave macvlan2): failed to get link speed/duplex [ 261.296436][ T1058] bond5: (slave macvlan2): failed to get link speed/duplex [ 261.406292][ T6112] bond5: (slave macvlan2): failed to get link speed/duplex [ 261.516161][ T6112] bond5: (slave macvlan2): failed to get link speed/duplex [ 261.635045][ T33] bond5: (slave macvlan2): failed to get link speed/duplex [ 261.774816][ T1058] bond5: (slave macvlan2): failed to get link speed/duplex [ 261.884781][T11632] bond5: (slave macvlan2): failed to get link speed/duplex [ 261.886141][T12071] __nla_validate_parse: 2 callbacks suppressed [ 261.886192][T12071] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1595'. [ 261.928130][T12071] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1595'. [ 262.042786][ T5150] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 262.053733][ T5150] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 262.062848][ T5150] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 262.071138][ T5150] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 262.088549][ T5150] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 262.226039][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 262.236955][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 262.245569][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 262.254280][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 262.262859][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 262.445729][T12091] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1600'. [ 262.803702][T12105] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1602'. [ 262.812842][T12105] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1602'. [ 262.828692][T12104] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1606'. [ 262.838450][T12105] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1602'. [ 262.855048][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 262.875780][T12105] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1602'. [ 263.131223][T12116] netlink: 'syz.1.1608': attribute type 15 has an invalid length. [ 263.189291][T12075] chnl_net:caif_netlink_parms(): no params data found [ 263.475852][T12075] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.494343][T12075] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.510215][T12075] bridge_slave_0: entered allmulticast mode [ 263.519654][T12075] bridge_slave_0: entered promiscuous mode [ 263.608778][T12135] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1609'. [ 263.627049][T12075] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.636033][T12075] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.643333][T12075] bridge_slave_1: entered allmulticast mode [ 263.671726][T12075] bridge_slave_1: entered promiscuous mode [ 263.788740][T12139] tipc: Enabled bearer , priority 0 [ 263.797626][T12140] syzkaller0: entered promiscuous mode [ 263.803140][T12140] syzkaller0: entered allmulticast mode [ 263.836988][T12075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.862595][T12075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.969333][T12142] tipc: Resetting bearer [ 264.040585][T12142] tipc: Disabling bearer [ 264.091010][T12075] team0: Port device team_slave_0 added [ 264.128639][T12075] team0: Port device team_slave_1 added [ 264.135115][ T5833] Bluetooth: hci0: command tx timeout [ 264.226484][T12084] chnl_net:caif_netlink_parms(): no params data found [ 264.249552][T12075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.264972][T12075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.293912][T12075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.330226][T12075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.337766][T12075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.364526][T12075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.375818][ T5833] Bluetooth: hci2: command tx timeout [ 264.506147][T12147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1611'. [ 264.712225][T12075] hsr_slave_0: entered promiscuous mode [ 264.719758][T12075] hsr_slave_1: entered promiscuous mode [ 264.727970][T12075] debugfs: 'hsr0' already exists in 'hsr' [ 264.734097][T12075] Cannot create hsr debugfs directory [ 264.940588][T12084] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.948232][T12084] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.955800][T12084] bridge_slave_0: entered allmulticast mode [ 264.978775][T12084] bridge_slave_0: entered promiscuous mode [ 265.043634][T12084] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.058697][T12084] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.067601][T12084] bridge_slave_1: entered allmulticast mode [ 265.075931][T12084] bridge_slave_1: entered promiscuous mode [ 265.226887][T12084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.341085][T12084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.703868][T12174] netlink: 'syz.3.1616': attribute type 1 has an invalid length. [ 265.735106][ T1109] net_ratelimit: 12 callbacks suppressed [ 265.735130][ T1109] bond5: (slave macvlan2): failed to get link speed/duplex [ 265.768161][T12178] netlink: 'syz.1.1618': attribute type 2 has an invalid length. [ 265.776666][ T12] bridge_slave_1: left allmulticast mode [ 265.787537][ T12] bridge_slave_1: left promiscuous mode [ 265.808767][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.844555][ T12] bridge_slave_0: left allmulticast mode [ 265.858304][ T12] bridge_slave_0: left promiscuous mode [ 265.870798][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.035255][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.075469][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.118227][ T12] bond0 (unregistering): Released all slaves [ 266.154799][ T1109] bond5: (slave macvlan2): failed to get link speed/duplex [ 266.264799][T11618] bond5: (slave macvlan2): failed to get link speed/duplex [ 266.360128][ T5150] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 266.370542][ T5150] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 266.379478][ T5150] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 266.391094][ T5150] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 266.399106][ T5150] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 266.424849][ T1058] bond5: (slave macvlan2): failed to get link speed/duplex [ 266.545074][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 266.556320][ T6101] bond5: (slave macvlan2): failed to get link speed/duplex [ 266.573203][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 266.583311][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 266.592475][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 266.600267][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 267.041824][T12202] pimreg: entered allmulticast mode [ 267.047392][T12205] pimreg: left allmulticast mode [ 267.058989][T12200] __nla_validate_parse: 5 callbacks suppressed [ 267.059003][T12200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1626'. [ 267.129072][T12204] netdevsim netdevsim4: Direct firmware load for .. failed with error -2 [ 267.138301][T12204] netdevsim netdevsim4: Falling back to sysfs fallback for: .. [ 267.198182][T12206] lo: entered promiscuous mode [ 267.205554][T12212] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1629'. [ 267.206705][T12206] tunl0: entered promiscuous mode [ 267.221494][T12206] gre0: entered promiscuous mode [ 267.227658][T12206] gretap0: entered promiscuous mode [ 267.233690][T12206] erspan0: entered promiscuous mode [ 267.235149][T12211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1629'. [ 267.250262][T12206] ip_vti0: entered promiscuous mode [ 267.257421][T12206] ip6_vti0: entered promiscuous mode [ 267.263570][T12206] sit0: entered promiscuous mode [ 267.270272][T12206] ip6tnl0: entered promiscuous mode [ 267.276958][T12206] ip6gre0: entered promiscuous mode [ 267.282922][T12206] syz_tun: entered promiscuous mode [ 267.290064][T12206] bridge0: entered promiscuous mode [ 267.296571][T12206] vcan0: entered promiscuous mode [ 267.302516][T12206] bond0: entered promiscuous mode [ 267.308906][T12206] bond_slave_0: entered promiscuous mode [ 267.315807][T12206] bond_slave_1: entered promiscuous mode [ 267.322981][T12206] dummy0: entered promiscuous mode [ 267.330326][T12206] nlmon0: entered promiscuous mode [ 267.337522][T12206] caif0: entered promiscuous mode [ 267.342882][T12206] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 267.454785][ T1109] bond5: (slave macvlan2): failed to get link speed/duplex [ 267.534919][T12216] netlink: 'syz.3.1630': attribute type 11 has an invalid length. [ 267.668351][T12186] chnl_net:caif_netlink_parms(): no params data found [ 267.739933][ T12] bridge_slave_1: left allmulticast mode [ 267.764801][ T12] bridge_slave_1: left promiscuous mode [ 267.771153][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.783924][ T12] bridge_slave_0: left allmulticast mode [ 267.791565][ T12] bridge_slave_0: left promiscuous mode [ 267.806189][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.962560][T12225] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_rx_wq": -EINTR [ 267.986397][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.025655][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.060910][ T12] bond0 (unregistering): Released all slaves [ 268.167822][T12236] 8021q: adding VLAN 0 to HW filter on device bond7 [ 268.464051][ T5150] Bluetooth: hci0: command tx timeout [ 268.553842][T12262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1639'. [ 268.662015][T12269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1640'. [ 268.686551][ T12] hsr_slave_0: left promiscuous mode [ 268.693114][ T12] hsr_slave_1: left promiscuous mode [ 268.698543][ T5150] Bluetooth: hci2: command tx timeout [ 268.726010][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.731146][T12272] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1642'. [ 268.743871][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.778565][T12274] netlink: 'syz.4.1641': attribute type 39 has an invalid length. [ 268.837240][T12281] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1641'. [ 268.846501][T12281] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1641'. [ 268.856288][T12281] netlink: 'syz.4.1641': attribute type 5 has an invalid length. [ 268.865142][T12281] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1641'. [ 269.054043][ T12] team0 (unregistering): Port device team_slave_1 removed [ 269.092030][ T12] team0 (unregistering): Port device team_slave_0 removed [ 269.292392][T12186] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.301976][T12186] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.320586][T12186] bridge_slave_0: entered allmulticast mode [ 269.328630][T12186] bridge_slave_0: entered promiscuous mode [ 269.369120][T12281] vlan3: entered allmulticast mode [ 269.400011][T12283] syzkaller1: entered allmulticast mode [ 269.412425][T12186] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.420575][T12186] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.432037][T12186] bridge_slave_1: entered allmulticast mode [ 269.440513][T12186] bridge_slave_1: entered promiscuous mode [ 269.606635][T12186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.634139][T12186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.787833][T12186] team0: Port device team_slave_0 added [ 269.793629][T12300] bridge0: port 4(netdevsim3) entered blocking state [ 269.801427][T12300] bridge0: port 4(netdevsim3) entered disabled state [ 269.822088][T12300] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 269.832848][T12300] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 269.845605][T12186] team0: Port device team_slave_1 added [ 269.851272][T12305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1645'. [ 269.870859][T12305] netlink: 'syz.3.1645': attribute type 1 has an invalid length. [ 269.884979][T12305] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.895587][T12189] chnl_net:caif_netlink_parms(): no params data found [ 270.058526][T12186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.070511][T12186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.101441][T12186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.158498][T12186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.165846][T12186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.203208][T12186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.476719][T12189] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.484299][T12189] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.496032][T12189] bridge_slave_0: entered allmulticast mode [ 270.503890][T12189] bridge_slave_0: entered promiscuous mode [ 270.534790][ T5150] Bluetooth: hci0: command tx timeout [ 270.555392][T11618] bond5: (slave macvlan2): failed to get link speed/duplex [ 270.576424][T12309] mpoa:mpoad_close: () going down [ 270.584470][T12189] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.597567][T12189] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.615121][T12189] bridge_slave_1: entered allmulticast mode [ 270.622558][T12189] bridge_slave_1: entered promiscuous mode [ 270.652889][T12186] hsr_slave_0: entered promiscuous mode [ 270.663505][T12186] hsr_slave_1: entered promiscuous mode [ 270.671139][T12186] debugfs: 'hsr0' already exists in 'hsr' [ 270.677533][T12186] Cannot create hsr debugfs directory [ 270.742261][T12189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.774949][ T5150] Bluetooth: hci2: command tx timeout [ 270.784346][T12189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.964183][T12189] team0: Port device team_slave_0 added [ 271.002659][T12189] team0: Port device team_slave_1 added [ 271.074935][ T3598] bond5: (slave macvlan2): failed to get link speed/duplex [ 271.169089][T12189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.184969][T12189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.225497][T12189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.303270][T12189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.334705][T12189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.371577][T12189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.636968][T12189] hsr_slave_0: entered promiscuous mode [ 271.644151][T12189] hsr_slave_1: entered promiscuous mode [ 271.651991][T12189] debugfs: 'hsr0' already exists in 'hsr' [ 271.658734][T12189] Cannot create hsr debugfs directory [ 271.934868][ T1109] bond5: (slave macvlan2): failed to get link speed/duplex [ 272.013414][T12186] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 272.080534][T12186] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 272.159420][T12186] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 272.221431][T12186] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 272.255041][ T6974] bond5: (slave macvlan2): failed to get link speed/duplex [ 272.416477][T12189] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 272.449628][T12189] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 272.470623][T12395] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1663'. [ 272.488221][T12189] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 272.507919][T12189] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 272.614686][ T5150] Bluetooth: hci0: command tx timeout [ 272.658362][T12186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.699767][T12186] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.723500][ T6974] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.730887][ T6974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.759710][T11618] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.766957][T11618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.854971][ T5150] Bluetooth: hci2: command tx timeout [ 272.921164][T12189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.968883][T12189] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.980362][T12411] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1667'. [ 272.997518][ T6974] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.004963][ T6974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.031981][ T6974] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.039253][ T6974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.208216][ T12] bond5: (slave macvlan2): failed to get link speed/duplex [ 273.261387][T12414] sctp: [Deprecated]: syz.3.1668 (pid 12414) Use of int in max_burst socket option deprecated. [ 273.261387][T12414] Use struct sctp_assoc_value instead [ 273.357607][ T6974] bond5: (slave macvlan2): failed to get link speed/duplex [ 273.492065][T12186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.516022][T11618] bond5: (slave macvlan2): failed to get link speed/duplex [ 273.609958][T12437] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1673'. [ 273.715477][ T6974] bond5: (slave macvlan2): failed to get link speed/duplex [ 273.748445][T12189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.824804][ T12] bond5: (slave macvlan2): failed to get link speed/duplex [ 273.954974][ T6974] bond5: (slave macvlan2): failed to get link speed/duplex [ 273.984546][T12460] netlink: 'syz.4.1678': attribute type 2 has an invalid length. [ 274.001769][T12460] : entered promiscuous mode [ 274.085095][ T1109] bond5: (slave macvlan2): failed to get link speed/duplex [ 274.105944][T12466] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1678'. [ 274.558073][T12186] veth0_vlan: entered promiscuous mode [ 274.608942][T12186] veth1_vlan: entered promiscuous mode [ 274.696182][ T5150] Bluetooth: hci0: command tx timeout [ 274.713294][T12478] netlink: 'syz.1.1680': attribute type 1 has an invalid length. [ 274.744722][T12186] veth0_macvtap: entered promiscuous mode [ 274.751661][T12478] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1680'. [ 274.786620][T12189] veth0_vlan: entered promiscuous mode [ 274.796394][T12186] veth1_macvtap: entered promiscuous mode [ 274.848422][T12189] veth1_vlan: entered promiscuous mode [ 274.879004][T12186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.906156][T12186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.936085][ T5150] Bluetooth: hci2: command tx timeout [ 274.944369][ T3598] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.977007][ T3598] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.999222][T12189] veth0_macvtap: entered promiscuous mode [ 275.019153][ T3598] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.042907][ T3598] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.057430][T12189] veth1_macvtap: entered promiscuous mode [ 275.122830][T12189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.179790][T12189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.214405][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.241666][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.260499][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.290524][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.323782][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.341377][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.448107][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.463570][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.489952][ T3598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.516557][ T3598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.576582][ T6112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.605650][ T6112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.845962][T12521] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1621'. [ 275.972947][T12527] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1692'. [ 276.096125][ T61] net_ratelimit: 12 callbacks suppressed [ 276.096149][ T61] bond5: (slave macvlan2): failed to get link speed/duplex [ 276.225229][T11618] bond5: (slave macvlan2): failed to get link speed/duplex [ 276.506957][ T3598] bond5: (slave macvlan2): failed to get link speed/duplex [ 276.655074][ T6974] bond5: (slave macvlan2): failed to get link speed/duplex [ 276.772512][T12562] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1701'. [ 276.855652][ T6112] bond5: (slave macvlan2): failed to get link speed/duplex [ 276.914043][T12570] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1704'. [ 276.957800][T12571] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1703'. [ 276.984827][T11618] bond5: (slave macvlan2): failed to get link speed/duplex [ 277.115749][T11618] bond5: (slave macvlan2): failed to get link speed/duplex [ 277.225148][ T6101] bond5: (slave macvlan2): failed to get link speed/duplex [ 277.354866][ T6112] bond5: (slave macvlan2): failed to get link speed/duplex [ 277.485945][ T6101] bond5: (slave macvlan2): failed to get link speed/duplex [ 277.740420][T12607] IPVS: set_ctl: invalid protocol: 1 224.0.0.1:20001 [ 277.772506][T12610] netlink: 'syz.8.1713': attribute type 1 has an invalid length. [ 277.839732][T12610] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 277.927271][T12618] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1714'. [ 278.060426][T12618] bridge_slave_1: left allmulticast mode [ 278.068355][T12618] bridge_slave_1: left promiscuous mode [ 278.075056][T12618] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.200175][T12618] bridge_slave_0: left allmulticast mode [ 278.227647][T12618] bridge_slave_0: left promiscuous mode [ 278.235732][T12618] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.773954][T12625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1717'. [ 278.811150][T12625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1717'. [ 278.895541][T12625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1717'. [ 278.905865][T12625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1717'. [ 278.915622][T11618] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.931561][T11618] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.958942][T11618] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.973312][T11618] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.077461][T12634] nbd4: detected capacity change from 0 to 63 [ 279.115653][ T5150] block nbd4: Receive control failed (result -32) [ 279.298291][T12641] netlink: 'syz.8.1724': attribute type 2 has an invalid length. [ 279.340420][T12641] : entered promiscuous mode [ 279.381745][T12648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1722'. [ 279.517367][T12656] sctp: [Deprecated]: syz.3.1722 (pid 12656) Use of int in max_burst socket option. [ 279.517367][T12656] Use struct sctp_assoc_value instead [ 279.920629][T12672] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1728'. [ 280.303220][T12693] Bluetooth: MGMT ver 1.23 [ 280.487161][T12701] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 280.502517][T12701] bond1 (unregistering): Released all slaves [ 280.514287][T12704] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1735'. [ 280.546474][T12669] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 280.584159][T12704] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1735'. [ 281.134936][ T3598] net_ratelimit: 21 callbacks suppressed [ 281.134966][ T3598] bond5: (slave macvlan2): failed to get link speed/duplex [ 281.207198][T12714] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1737'. [ 281.351304][T11632] bond5: (slave macvlan2): failed to get link speed/duplex [ 281.394706][T12722] netlink: 'syz.8.1740': attribute type 30 has an invalid length. [ 281.480225][ T6101] bond5: (slave macvlan2): failed to get link speed/duplex [ 281.736429][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 281.750972][T12730] syzkaller0: entered promiscuous mode [ 281.790413][T12730] syzkaller0: entered allmulticast mode [ 281.819425][ T6101] syzkaller0: tun_net_xmit 48 [ 281.976958][T12738] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 282.009410][T11632] bond5: (slave macvlan2): failed to get link speed/duplex [ 282.124886][ T3598] bond5: (slave macvlan2): failed to get link speed/duplex [ 282.245738][ T6101] bond5: (slave macvlan2): failed to get link speed/duplex [ 282.375790][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 282.375817][ T5150] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 283.095174][T12789] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1754'. [ 284.114573][T12782] tipc: Enabling of bearer rejected, failed to enable media [ 284.127619][ T61] bond5: (slave macvlan2): failed to get link speed/duplex [ 284.344951][ T61] bond5: (slave macvlan2): failed to get link speed/duplex [ 284.357181][T12802] netlink: 'syz.8.1757': attribute type 10 has an invalid length. [ 284.404565][T12802] team0: Device dummy0 is up. Set it down before adding it as a team port [ 284.605318][ T6101] bond5: (slave macvlan2): failed to get link speed/duplex [ 284.778639][T12822] bond1: option mode: invalid value (254) [ 284.810204][T12822] bond1 (unregistering): Released all slaves [ 284.907100][T12833] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1762'. [ 284.955891][T12831] netlink: 'syz.3.1763': attribute type 25 has an invalid length. [ 285.169665][T11632] bond5: (slave macvlan2): failed to get link speed/duplex [ 285.264037][T12843] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1765'. [ 285.472720][T12847] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1766'. [ 285.750588][T12858] netlink: 'syz.8.1770': attribute type 1 has an invalid length. [ 285.879202][T12866] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1768'. [ 285.941704][T12858] 8021q: adding VLAN 0 to HW filter on device bond1 [ 286.176055][T12877] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1774'. [ 286.292219][ T6101] net_ratelimit: 5 callbacks suppressed [ 286.292243][ T6101] bond5: (slave macvlan2): failed to get link speed/duplex [ 286.444823][ T6101] bond5: (slave macvlan2): failed to get link speed/duplex [ 286.518724][T12897] tipc: Enabled bearer , priority 0 [ 286.571459][T12899] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1780'. [ 286.586793][ T61] bond5: (slave macvlan2): failed to get link speed/duplex [ 286.646510][T12891] tipc: Disabling bearer [ 286.719152][T11618] bond5: (slave macvlan2): failed to get link speed/duplex [ 286.911946][T12913] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1783'. [ 286.987247][T12913] vlan0: entered allmulticast mode [ 287.014166][T12913] erspan0: entered allmulticast mode [ 287.036371][T12927] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1785'. [ 287.185297][ T61] bond5: (slave macvlan2): failed to get link speed/duplex [ 287.205808][T12932] No such timeout policy "syz1" [ 287.290493][T12936] xt_cgroup: invalid path, errno=-2 [ 287.425116][ T3472] bond5: (slave macvlan2): failed to get link speed/duplex [ 287.517866][T12940] netlink: 'syz.8.1789': attribute type 30 has an invalid length. [ 287.625307][ T12] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.661900][ T12] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.704836][ T12] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.713669][ T12] bond5: (slave macvlan2): failed to get link speed/duplex [ 287.740023][T11632] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.788104][T12949] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1791'. [ 287.835321][ T6101] bond5: (slave macvlan2): failed to get link speed/duplex [ 287.947231][T12954] .70: renamed from hsr0 (while UP) [ 287.970858][T12954] .70: entered allmulticast mode [ 287.998009][T12954] hsr_slave_0: entered allmulticast mode [ 288.003723][T12954] hsr_slave_1: entered allmulticast mode [ 288.035291][T12954] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check. [ 288.075799][ T6112] bond5: (slave macvlan2): failed to get link speed/duplex [ 288.145286][ T5833] Bluetooth: hci2: command 0x0405 tx timeout [ 288.405574][T12981] __nla_validate_parse: 1 callbacks suppressed [ 288.405595][T12981] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1798'. [ 288.658335][T12987] netlink: 'syz.7.1799': attribute type 1 has an invalid length. [ 289.057979][T12993] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 289.087196][T12993] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 289.161481][T12997] bond1: (slave gretap1): making interface the new active one [ 289.206073][T12997] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 289.227304][T12998] xfrm1: entered allmulticast mode [ 289.250892][T12987] macvlan2: entered promiscuous mode [ 289.278211][T12987] macvlan2: entered allmulticast mode [ 289.311822][T12987] bond1: entered promiscuous mode [ 289.324930][T12987] gretap1: entered promiscuous mode [ 289.331364][T12987] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 289.348329][T12987] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 289.387180][T12987] bond1: left promiscuous mode [ 289.393236][T12987] gretap1: left promiscuous mode [ 289.870224][T13020] bond3: option lacp_active: invalid value (8) [ 289.887300][T13020] bond3 (unregistering): Released all slaves [ 290.427717][T13048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1814'. [ 290.477845][T13048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1814'. [ 290.530276][T13048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1814'. [ 290.589789][T13048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1814'. [ 290.645708][T13048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1814'. [ 290.663405][T13065] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1818'. [ 290.685691][T13048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1814'. [ 290.708667][T13048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1814'. [ 290.721548][T13066] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1818'. [ 291.178431][T13083] netlink: 'syz.3.1822': attribute type 1 has an invalid length. [ 291.193577][T13083] netlink: 'syz.3.1822': attribute type 11 has an invalid length. [ 291.338235][T13082] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 291.418566][T13082] bond2 (unregistering): Released all slaves [ 291.462046][T13103] netlink: 'syz.4.1825': attribute type 13 has an invalid length. [ 291.889037][T13103] gretap0: refused to change device tx_queue_len [ 291.915895][T13103] net_ratelimit: 8 callbacks suppressed [ 291.915916][T13103] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 292.249976][T13116] IPv6: Can't replace route, no match found [ 292.276590][ T6101] bond5: (slave macvlan2): failed to get link speed/duplex [ 292.356807][T13135] netlink: 'syz.4.1833': attribute type 1 has an invalid length. [ 292.416585][T13135] 8021q: adding VLAN 0 to HW filter on device bond6 [ 292.433515][T13140] ipvlan2: entered allmulticast mode [ 292.439489][T13140] bond6: entered allmulticast mode [ 292.481180][T13140] bond6: (slave gretap1): making interface the new active one [ 292.492566][T13140] gretap1: entered allmulticast mode [ 292.502354][T13140] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 292.524962][ T12] bond5: (slave macvlan2): failed to get link speed/duplex [ 292.647535][T13135] bond6: (slave bridge5): Enslaving as an active interface with a down link [ 292.695513][ T3472] bond5: (slave macvlan2): failed to get link speed/duplex [ 292.753018][T13149] lo: left promiscuous mode [ 292.763471][T13149] tunl0: left promiscuous mode [ 292.772554][T13149] gre0: left promiscuous mode [ 292.793983][T13149] gretap0: left promiscuous mode [ 292.802257][T13149] erspan0: left promiscuous mode [ 292.808134][T13149] ip_vti0: left promiscuous mode [ 292.813914][T13149] ip6_vti0: left promiscuous mode [ 292.822046][T13149] sit0: left promiscuous mode [ 292.829363][T13149] ip6tnl0: left promiscuous mode [ 292.835811][T13149] ip6gre0: left promiscuous mode [ 292.841962][T13149] syz_tun: left promiscuous mode [ 292.854148][T13149] bridge0: left promiscuous mode [ 292.875922][T13149] vcan0: left promiscuous mode [ 292.881323][T13149] bond0: left promiscuous mode [ 292.897377][T13149] bond_slave_0: left promiscuous mode [ 292.903489][T13149] bond_slave_1: left promiscuous mode [ 292.910760][T13149] dummy0: left promiscuous mode [ 292.922870][T13149] nlmon0: left promiscuous mode [ 292.932865][T13149] caif0: left promiscuous mode [ 292.949999][T13149] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 293.006114][ T1109] bond5: (slave macvlan2): failed to get link speed/duplex [ 293.100174][ T5988] IPVS: starting estimator thread 0... [ 293.135598][ T1109] bond5: (slave macvlan2): failed to get link speed/duplex [ 293.166179][T13162] openvswitch: netlink: Flow key attr not present in new flow. [ 293.192424][T13162] openvswitch: netlink: Flow key attr not present in new flow. [ 293.203339][T13159] IPVS: using max 28 ests per chain, 67200 per kthread [ 293.214488][T13162] openvswitch: netlink: Flow key attr not present in new flow. [ 293.271538][T13170] x_tables: duplicate underflow at hook 3 [ 293.979453][T13201] netlink: 'syz.3.1849': attribute type 4 has an invalid length. [ 293.989236][T13200] pim6reg1: entered promiscuous mode [ 294.010637][T13200] pim6reg1: entered allmulticast mode [ 294.022346][T13206] netlink: 'syz.1.1850': attribute type 4 has an invalid length. [ 294.044871][T13206] __nla_validate_parse: 74 callbacks suppressed [ 294.044892][T13206] netlink: 14345 bytes leftover after parsing attributes in process `syz.1.1850'. [ 294.531135][T13224] sctp: [Deprecated]: syz.7.1852 (pid 13224) Use of struct sctp_assoc_value in delayed_ack socket option. [ 294.531135][T13224] Use struct sctp_sack_info instead [ 294.651096][T13226] tipc: Enabled bearer , priority 0 [ 294.665296][T13227] syzkaller0: entered promiscuous mode [ 294.676186][T13227] syzkaller0: entered allmulticast mode [ 294.748415][T13227] tipc: Resetting bearer [ 294.810764][T13227] tipc: Disabling bearer [ 295.045731][T13250] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 295.051661][T13250] pim6reg1: linktype set to 805 [ 295.133022][T13250] pim6reg1: tun_chr_ioctl cmd 2147767511 [ 296.205699][T13272] tipc: Enabled bearer , priority 0 [ 296.245543][T13273] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 296.266582][T13272] syzkaller0: entered promiscuous mode [ 296.266998][T13273] x_tables: duplicate underflow at hook 1 [ 296.272108][T13272] syzkaller0: entered allmulticast mode [ 296.391549][T13278] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1867'. [ 296.415394][T13272] tipc: Resetting bearer [ 296.572536][T13280] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 296.591614][T13284] macvlan2: entered promiscuous mode [ 296.598577][T13284] macvlan2: entered allmulticast mode [ 296.605112][T13284] bond2: entered promiscuous mode [ 296.610927][T13284] bridge1: entered promiscuous mode [ 296.617329][T13284] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 296.631683][T13284] bond2: left promiscuous mode [ 296.644943][T13284] bridge1: left promiscuous mode [ 296.946941][T13292] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1871'. [ 296.962653][T13292] netlink: 7 bytes leftover after parsing attributes in process `syz.8.1871'. [ 296.978249][T13269] tipc: Resetting bearer [ 297.034007][T13269] tipc: Disabling bearer [ 297.053748][T13292] netlink: 'syz.8.1871': attribute type 6 has an invalid length. [ 297.108548][ T3472] net_ratelimit: 49 callbacks suppressed [ 297.108571][ T3472] bond5: (slave macvlan2): failed to get link speed/duplex [ 297.265437][ T6112] bond5: (slave macvlan2): failed to get link speed/duplex [ 297.292701][T13304] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1873'. [ 297.429442][ T33] bond5: (slave macvlan2): failed to get link speed/duplex [ 297.555163][ T33] bond5: (slave macvlan2): failed to get link speed/duplex [ 297.635995][T13320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1880'. [ 297.668966][ T3598] bond5: (slave macvlan2): failed to get link speed/duplex [ 297.706640][T13323] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1882'. [ 297.785677][ T1058] bond5: (slave macvlan2): failed to get link speed/duplex [ 297.895275][ T3472] bond5: (slave macvlan2): failed to get link speed/duplex [ 298.004764][ T12] bond5: (slave macvlan2): failed to get link speed/duplex [ 298.028049][T13335] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.1886'. [ 298.124870][ T33] bond5: (slave macvlan2): failed to get link speed/duplex [ 298.256404][T13341] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1888'. [ 298.285945][T13346] netlink: 'syz.8.1889': attribute type 1 has an invalid length. [ 298.319023][T13350] xt_TCPMSS: Only works on TCP SYN packets [ 298.374703][T13346] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 298.417164][T13348] veth3: entered promiscuous mode [ 298.496100][T13357] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1891'. [ 298.506118][ T12] bond5: (slave macvlan2): failed to get link speed/duplex [ 299.078901][T13381] syzkaller0: entered promiscuous mode [ 299.091825][T13381] syzkaller0: entered allmulticast mode [ 299.134467][T13388] __nla_validate_parse: 1 callbacks suppressed [ 299.134487][T13388] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1900'. [ 299.209974][T13390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1899'. [ 299.228765][T13383] delete_channel: no stack [ 299.381317][T13394] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1901'. [ 299.653772][T13408] syzkaller1: entered promiscuous mode [ 299.668096][T13408] syzkaller1: entered allmulticast mode [ 300.596071][T13434] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 301.031049][T13461] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1915'. [ 301.435368][T13476] bond8: (slave bond_slave_1): Device is not our slave [ 301.442291][T13476] bond8: option active_slave: invalid value (bond_slave_1) [ 301.452248][T13476] bond8 (unregistering): Released all slaves [ 301.568623][T13485] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1922'. [ 301.902736][T13500] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1927'. [ 301.936424][T13509] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1929'. [ 302.007644][T13506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1926'. [ 302.080267][T13515] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1931'. [ 302.227916][ T3741] net_ratelimit: 24 callbacks suppressed [ 302.227938][ T3741] bond5: (slave macvlan2): failed to get link speed/duplex [ 302.263428][T13519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1932'. [ 302.347627][ T61] bond5: (slave macvlan2): failed to get link speed/duplex [ 302.514747][ T61] bond5: (slave macvlan2): failed to get link speed/duplex [ 302.634757][ T6101] bond5: (slave macvlan2): failed to get link speed/duplex [ 302.696812][T13533] netlink: 'syz.8.1936': attribute type 13 has an invalid length. [ 302.805213][ T3741] bond5: (slave macvlan2): failed to get link speed/duplex [ 303.569378][T13533] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.577224][T13533] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.050467][T13533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.085786][T13533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.763820][ T33] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.787443][T13584] __nla_validate_parse: 2 callbacks suppressed [ 304.787465][T13584] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1946'. [ 304.793704][ T33] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.810360][T13583] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1946'. [ 304.831554][ T33] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.863540][ T33] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.893851][ T33] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.945277][ T33] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.961766][ T33] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.984863][ T33] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.084827][ T3741] bond5: (slave macvlan2): failed to get link speed/duplex [ 305.140506][T13593] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1948'. [ 305.194763][T11618] bond5: (slave macvlan2): failed to get link speed/duplex [ 305.235639][T13598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1947'. [ 305.355349][ T33] bond5: (slave macvlan2): failed to get link speed/duplex [ 305.484703][ T33] bond5: (slave macvlan2): failed to get link speed/duplex [ 305.604999][ T3741] bond5: (slave macvlan2): failed to get link speed/duplex [ 305.652206][T13611] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1952'. [ 305.687257][T13607] ip6_vti0 speed is unknown, defaulting to 1000 [ 305.746758][T13607] ip6_vti0 speed is unknown, defaulting to 1000 [ 305.829251][T13607] ip6_vti0 speed is unknown, defaulting to 1000 [ 306.556395][T13631] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1957'. [ 306.706554][T13636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1958'. [ 306.876274][T13607] infiniband syz2: set down [ 306.880909][ T5941] ip6_vti0 speed is unknown, defaulting to 1000 [ 306.888988][T13607] infiniband syz2: added ip6_vti0 [ 306.963622][T13607] RDS/IB: syz2: added [ 306.967853][T13607] smc: adding ib device syz2 with port count 1 [ 306.974145][T13607] smc: ib device syz2 port 1 has no pnetid [ 306.985092][ T5941] ip6_vti0 speed is unknown, defaulting to 1000 [ 306.995989][T13645] netlink: 'syz.4.1961': attribute type 1 has an invalid length. [ 307.004136][T13607] ip6_vti0 speed is unknown, defaulting to 1000 [ 307.048662][T13650] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1960'. [ 307.164218][T13651] bond7: entered promiscuous mode [ 307.193837][T13651] bond7: entered allmulticast mode [ 307.205789][T13651] 8021q: adding VLAN 0 to HW filter on device bond7 [ 307.407522][T13645] 8021q: adding VLAN 0 to HW filter on device bond8 [ 307.417375][T13645] bond8: entered promiscuous mode [ 307.422896][T13645] bond8: entered allmulticast mode [ 307.429183][T13645] bond7: (slave bond8): Enslaving as a backup interface with a down link [ 307.445319][ T3472] net_ratelimit: 8 callbacks suppressed [ 307.445340][ T3472] bond5: (slave macvlan2): failed to get link speed/duplex [ 307.594747][ T6974] bond5: (slave macvlan2): failed to get link speed/duplex [ 307.734930][T11632] bond5: (slave macvlan2): failed to get link speed/duplex [ 307.839313][T13607] ip6_vti0 speed is unknown, defaulting to 1000 [ 307.854864][T11632] bond5: (slave macvlan2): failed to get link speed/duplex [ 307.991895][T11632] bond5: (slave macvlan2): failed to get link speed/duplex [ 308.040034][T13664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1966'. [ 308.076444][T13664] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1966'. [ 308.126145][ T6974] bond5: (slave macvlan2): failed to get link speed/duplex [ 308.244778][ T6112] bond5: (slave macvlan2): failed to get link speed/duplex [ 308.396089][ T3741] bond5: (slave macvlan2): failed to get link speed/duplex [ 308.431458][T13647] ip6_vti0 speed is unknown, defaulting to 1000 [ 308.515242][ T3741] bond5: (slave macvlan2): failed to get link speed/duplex [ 308.624710][ T6101] bond5: (slave macvlan2): failed to get link speed/duplex [ 308.856153][T13607] ip6_vti0 speed is unknown, defaulting to 1000 [ 309.415763][T13607] ip6_vti0 speed is unknown, defaulting to 1000 [ 309.538317][T13706] vlan3: entered promiscuous mode [ 309.543411][T13706] hsr_slave_1: entered promiscuous mode [ 309.596348][T13706] vlan3: entered allmulticast mode [ 309.601624][T13706] hsr_slave_1: entered allmulticast mode [ 309.818105][ T30] audit: type=1107 audit(1767794438.186:4): pid=13711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='S aقS :}w=8RZvnV+ [ 309.818105][ T30] 3%K[{7gCڮNhJ'"u2 >8kEN rU' [ 309.843165][T13607] ip6_vti0 speed is unknown, defaulting to 1000 [ 310.231761][T13607] ip6_vti0 speed is unknown, defaulting to 1000 [ 310.590365][T13607] ip6_vti0 speed is unknown, defaulting to 1000 [ 310.868618][T13607] ip6_vti0 speed is unknown, defaulting to 1000 [ 311.946905][T13741] __nla_validate_parse: 3 callbacks suppressed [ 311.946925][T13741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1991'. [ 312.298727][T13752] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1994'. [ 312.335069][T13751] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1994'. [ 312.526419][ T33] net_ratelimit: 28 callbacks suppressed [ 312.526443][ T33] bond5: (slave macvlan2): failed to get link speed/duplex [ 312.572718][T13759] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1995'. [ 312.665188][ T6974] bond5: (slave macvlan2): failed to get link speed/duplex [ 312.740258][T13760] nbd2: detected capacity change from 0 to 3 [ 312.757409][ T5150] block nbd2: Receive control failed (result -32) [ 312.795178][ T33] bond5: (slave macvlan2): failed to get link speed/duplex [ 312.895478][ T30] audit: type=1800 audit(1767794441.256:5): pid=13764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1997" name="memory.events" dev="tmpfs" ino=2230 res=0 errno=0 [ 312.925034][ T3472] bond5: (slave macvlan2): failed to get link speed/duplex [ 313.054756][ T33] bond5: (slave macvlan2): failed to get link speed/duplex [ 313.164723][ T12] bond5: (slave macvlan2): failed to get link speed/duplex [ 313.190877][T13779] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2001'. [ 313.274758][ T12] bond5: (slave macvlan2): failed to get link speed/duplex [ 313.394837][ T12] bond5: (slave macvlan2): failed to get link speed/duplex [ 313.506609][ T3472] bond5: (slave macvlan2): failed to get link speed/duplex [ 313.600035][T13791] netlink: 'syz.3.2006': attribute type 1 has an invalid length. [ 313.613880][T13791] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2006'. [ 313.625551][ T12] bond5: (slave macvlan2): failed to get link speed/duplex [ 313.656283][T13791] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2006'. [ 313.670398][T13796] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2007'. [ 313.694720][T13791] netlink: 658 bytes leftover after parsing attributes in process `syz.3.2006'. [ 313.767770][T13804] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2008'. [ 314.389402][T13840] vlan0: entered allmulticast mode [ 314.404801][T13840] gretap0: entered allmulticast mode [ 314.976246][T13864] netlink: 'syz.3.2023': attribute type 1 has an invalid length. [ 315.314208][T13831] ip6_vti0 speed is unknown, defaulting to 1000 [ 315.430001][ T5150] block nbd3: Receive control failed (result -1) [ 315.947095][T13904] bond9: option arp_validate: invalid value (18446744073491447809) [ 315.954429][T13909] netlink: 'syz.4.2031': attribute type 13 has an invalid length. [ 315.984365][T13899] sctp: [Deprecated]: syz.1.2029 (pid 13899) Use of int in maxseg socket option. [ 315.984365][T13899] Use struct sctp_assoc_value instead [ 315.997314][T13904] bond9 (unregistering): Released all slaves [ 316.401780][T13928] block nbd1: NBD_DISCONNECT [ 316.411843][T13928] block nbd1: Send disconnect failed -32 [ 316.429358][T13928] block nbd1: shutting down sockets [ 316.659906][T13937] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 317.078084][T13946] vxcan1: entered promiscuous mode [ 317.135123][T13952] netlink: 'syz.3.2043': attribute type 12 has an invalid length. [ 317.459558][T13968] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 317.469285][T13966] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 317.479202][T13961] syzkaller0: entered promiscuous mode [ 317.495431][T13961] syzkaller0: entered allmulticast mode [ 317.548434][T13937] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 317.557079][T13970] tipc: Started in network mode [ 317.562223][T13970] tipc: Node identity 7a29d9812231, cluster identity 4711 [ 317.570554][T13970] tipc: Enabled bearer , priority 0 [ 317.579094][T13970] syzkaller0: entered promiscuous mode [ 317.585414][T13970] syzkaller0: entered allmulticast mode [ 317.624770][ T6974] net_ratelimit: 27 callbacks suppressed [ 317.624793][ T6974] bond5: (slave macvlan2): failed to get link speed/duplex [ 317.673238][T13970] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 317.710319][T13970] netlink: 'syz.8.2051': attribute type 13 has an invalid length. [ 317.804765][ T33] bond5: (slave macvlan2): failed to get link speed/duplex [ 317.900946][T13969] tipc: Resetting bearer [ 317.951963][T13969] tipc: Disabling bearer [ 317.985238][ T6974] bond5: (slave macvlan2): failed to get link speed/duplex [ 318.095189][ T33] bond5: (slave macvlan2): failed to get link speed/duplex [ 318.215921][ T6112] bond5: (slave macvlan2): failed to get link speed/duplex [ 318.257480][ T3472] [ 318.259871][ T3472] ============================================ [ 318.266140][ T3472] WARNING: possible recursive locking detected [ 318.272338][ T3472] syzkaller #0 Not tainted [ 318.276792][ T3472] -------------------------------------------- [ 318.283063][ T3472] kworker/u8:9/3472 is trying to acquire lock: [ 318.289405][ T3472] ffff88807eed8d58 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 318.299406][ T3472] [ 318.299406][ T3472] but task is already holding lock: [ 318.307425][ T3472] ffff88801df34558 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 318.317308][ T3472] [ 318.317308][ T3472] other info that might help us debug this: [ 318.325475][ T3472] Possible unsafe locking scenario: [ 318.325475][ T3472] [ 318.333054][ T3472] CPU0 [ 318.336399][ T3472] ---- [ 318.339885][ T3472] lock(&qdisc_xmit_lock_key#3); [ 318.345038][ T3472] lock(&qdisc_xmit_lock_key#3); [ 318.350210][ T3472] [ 318.350210][ T3472] *** DEADLOCK *** [ 318.350210][ T3472] [ 318.358385][ T3472] May be due to missing lock nesting notation [ 318.358385][ T3472] [ 318.366724][ T3472] 11 locks held by kworker/u8:9/3472: [ 318.372109][ T3472] #0: ffff888055a8a148 ((wq_completion)bond6#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 318.383430][ T3472] #1: ffffc9000bedfbc0 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 318.396628][ T3472] #2: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf1/0x1800 [ 318.406251][ T3472] #3: ffffffff8df41b00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x289/0x31c0 [ 318.416220][ T3472] #4: ffff88807c41e228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0xeb9/0x31c0 [ 318.429163][ T3472] #5: ffff88801df34558 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 318.439495][ T3472] #6: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 318.448503][ T3472] #7: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3d0/0x1000 [ 318.458393][ T3472] #8: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 318.467313][ T3472] #9: ffffffff8df41b00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x289/0x31c0 [ 318.477279][ T3472] #10: ffff8880589cc228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0xeb9/0x31c0 [ 318.489935][ T3472] [ 318.489935][ T3472] stack backtrace: [ 318.495839][ T3472] CPU: 1 UID: 0 PID: 3472 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 318.495861][ T3472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 318.495873][ T3472] Workqueue: bond6 bond_alb_monitor [ 318.495901][ T3472] Call Trace: [ 318.495908][ T3472] [ 318.495915][ T3472] dump_stack_lvl+0xe8/0x150 [ 318.495939][ T3472] print_deadlock_bug+0x279/0x290 [ 318.495961][ T3472] __lock_acquire+0x2540/0x2cf0 [ 318.495981][ T3472] ? __pfx_netif_skb_features+0x10/0x10 [ 318.496003][ T3472] ? unwind_next_frame+0xa5/0x23d0 [ 318.496028][ T3472] ? sch_direct_xmit+0x153/0x4b0 [ 318.496044][ T3472] lock_acquire+0x107/0x340 [ 318.496069][ T3472] ? sch_direct_xmit+0x153/0x4b0 [ 318.496092][ T3472] _raw_spin_lock+0x2e/0x40 [ 318.496118][ T3472] ? sch_direct_xmit+0x153/0x4b0 [ 318.496133][ T3472] sch_direct_xmit+0x153/0x4b0 [ 318.496153][ T3472] ? __pfx_sch_direct_xmit+0x10/0x10 [ 318.496169][ T3472] ? kmalloc_reserve+0xbd/0x290 [ 318.496187][ T3472] ? arp_send_dst+0x20/0x340 [ 318.496207][ T3472] ? arp_solicit+0xbbd/0xe10 [ 318.496230][ T3472] __dev_queue_xmit+0x1379/0x31c0 [ 318.496257][ T3472] ? __dev_queue_xmit+0x289/0x31c0 [ 318.496285][ T3472] ? __pfx___dev_queue_xmit+0x10/0x10 [ 318.496310][ T3472] ? arpt_do_table+0x238/0x1fd0 [ 318.496330][ T3472] ? __pfx_arpt_do_table+0x10/0x10 [ 318.496357][ T3472] ? NF_HOOK+0x9e/0x3a0 [ 318.496378][ T3472] NF_HOOK+0x310/0x3a0 [ 318.496398][ T3472] ? __pfx_arp_xmit_finish+0x10/0x10 [ 318.496419][ T3472] ? NF_HOOK+0x9e/0x3a0 [ 318.496444][ T3472] ? __pfx_NF_HOOK+0x10/0x10 [ 318.496463][ T3472] ? lock_acquire+0x107/0x340 [ 318.496479][ T3472] ? __pfx_arp_xmit_finish+0x10/0x10 [ 318.496505][ T3472] arp_xmit+0x16c/0x270 [ 318.496524][ T3472] ? arp_xmit+0x23/0x270 [ 318.496543][ T3472] arp_solicit+0xbbd/0xe10 [ 318.496567][ T3472] ? arp_solicit+0xfc/0xe10 [ 318.496588][ T3472] ? __pfx_arp_solicit+0x10/0x10 [ 318.496610][ T3472] ? __neigh_event_send+0xed6/0x1520 [ 318.496628][ T3472] ? __pfx_arp_solicit+0x10/0x10 [ 318.496648][ T3472] __neigh_event_send+0xf3e/0x1520 [ 318.496670][ T3472] neigh_resolve_output+0x198/0x750 [ 318.496689][ T3472] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 318.496713][ T3472] ip_finish_output2+0xbb6/0x1000 [ 318.496733][ T3472] ? ip_skb_dst_mtu+0x917/0xb70 [ 318.496751][ T3472] ? ip_finish_output2+0x3d0/0x1000 [ 318.496770][ T3472] ? ip_finish_output+0x33a/0x3f0 [ 318.496788][ T3472] ip_output+0x29f/0x450 [ 318.496805][ T3472] ? ip_output+0x5b/0x450 [ 318.496822][ T3472] iptunnel_xmit+0x5f8/0xa90 [ 318.496854][ T3472] ip_tunnel_xmit+0x1c41/0x2390 [ 318.496886][ T3472] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 318.496906][ T3472] ? gre_build_header+0x3fd/0xa40 [ 318.496929][ T3472] ? __pfx_gre_build_header+0x10/0x10 [ 318.496949][ T3472] ? iptunnel_handle_offloads+0x2fd/0x630 [ 318.496977][ T3472] gre_tap_xmit+0x590/0x7a0 [ 318.496998][ T3472] ? __pfx_gre_tap_xmit+0x10/0x10 [ 318.497021][ T3472] dev_hard_start_xmit+0x2cd/0x800 [ 318.497049][ T3472] sch_direct_xmit+0x241/0x4b0 [ 318.497068][ T3472] ? __pfx_sch_direct_xmit+0x10/0x10 [ 318.497084][ T3472] ? ret_from_fork_asm+0x1a/0x30 [ 318.497111][ T3472] __dev_queue_xmit+0x1379/0x31c0 [ 318.497137][ T3472] ? __dev_queue_xmit+0x289/0x31c0 [ 318.497165][ T3472] ? __pfx___dev_queue_xmit+0x10/0x10 [ 318.497191][ T3472] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 318.497217][ T3472] ? kmem_cache_alloc_node_noprof+0x48c/0x720 [ 318.497252][ T3472] ? __alloc_skb+0x27e/0x3a0 [ 318.497270][ T3472] ? alb_send_lp_vid+0x13a/0x530 [ 318.497304][ T3472] alb_send_lp_vid+0x328/0x530 [ 318.497332][ T3472] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 318.497360][ T3472] ? __lock_acquire+0x6b6/0x2cf0 [ 318.497379][ T3472] alb_send_learning_packets+0x10d/0x2c0 [ 318.497406][ T3472] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 318.497436][ T3472] ? bond_alb_monitor+0xf1/0x1800 [ 318.497463][ T3472] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 318.497484][ T3472] bond_alb_monitor+0x3e4/0x1800 [ 318.497511][ T3472] ? bond_alb_monitor+0xf1/0x1800 [ 318.497533][ T3472] ? process_scheduled_works+0x9ef/0x1770 [ 318.497551][ T3472] ? __pfx_bond_alb_monitor+0x10/0x10 [ 318.497576][ T3472] ? process_scheduled_works+0x9ef/0x1770 [ 318.497592][ T3472] ? process_scheduled_works+0x9ef/0x1770 [ 318.497609][ T3472] process_scheduled_works+0xad1/0x1770 [ 318.497637][ T3472] ? __pfx_process_scheduled_works+0x10/0x10 [ 318.497653][ T3472] ? do_raw_spin_lock+0x121/0x290 [ 318.497683][ T3472] worker_thread+0x8a0/0xda0 [ 318.497710][ T3472] ? __kthread_parkme+0x7b/0x200 [ 318.497734][ T3472] kthread+0x711/0x8a0 [ 318.497756][ T3472] ? __pfx_worker_thread+0x10/0x10 [ 318.497773][ T3472] ? __pfx_kthread+0x10/0x10 [ 318.497795][ T3472] ? _raw_spin_unlock_irq+0x23/0x50 [ 318.497820][ T3472] ? __pfx_kthread+0x10/0x10 [ 318.497841][ T3472] ret_from_fork+0x510/0xa50 [ 318.497858][ T3472] ? __pfx_ret_from_fork+0x10/0x10 [ 318.497873][ T3472] ? __switch_to+0xc9e/0x1480 [ 318.497897][ T3472] ? __pfx_kthread+0x10/0x10 [ 318.497918][ T3472] ret_from_fork_asm+0x1a/0x30 [ 318.497949][ T3472] [ 319.006396][T13990] __nla_validate_parse: 7 callbacks suppressed [ 319.006418][T13990] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2059'. [ 319.015462][ T5150] Bluetooth: hci0: command 0x0c1a tx timeout [ 319.085747][ T6974] bond5: (slave macvlan2): failed to get link speed/duplex [ 319.194956][ T3472] bond5: (slave macvlan2): failed to get link speed/duplex [ 319.304739][ T3741] bond5: (slave macvlan2): failed to get link speed/duplex [ 319.414792][ T6112] bond5: (slave macvlan2): failed to get link speed/duplex [ 319.524812][ T3472] bond5: (slave macvlan2): failed to get link speed/duplex [ 322.735082][ T1109] net_ratelimit: 29 callbacks suppressed [ 322.735107][ T1109] bond5: (slave macvlan2): failed to get link speed/duplex [ 322.854943][ T3741] bond5: (slave macvlan2): failed to get link speed/duplex [ 322.964746][ T1109] bond5: (slave macvlan2): failed to get link speed/duplex [ 323.074982][ T3741] bond5: (slave macvlan2): failed to get link speed/duplex [ 323.184880][ T6112] bond5: (slave macvlan2): failed to get link speed/duplex [ 323.294990][ T3472] bond5: (slave macvlan2): failed to get link speed/duplex [ 323.404944][ T1109] bond5: (slave macvlan2): failed to get link speed/duplex [ 323.515199][ T6974] bond5: (slave macvlan2): failed to get link speed/duplex [ 323.624953][ T1109] bond5: (slave macvlan2): failed to get link speed/duplex [ 323.735107][ T3741] bond5: (slave macvlan2): failed to get link speed/duplex [ 327.495047][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 327.814941][ T3598] net_ratelimit: 36 callbacks suppressed [ 327.814964][ T3598] bond5: (slave macvlan2): failed to get link speed/duplex [ 327.944903][ T3598] bond5: (slave macvlan2): failed to get link speed/duplex [ 328.054885][ T1109] bond5: (slave macvlan2): failed to get link speed/duplex [ 328.175080][ T6974] bond5: (slave macvlan2): failed to get link speed/duplex