last executing test programs: 6.584010707s ago: executing program 3 (id=5616): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "00008000e89700", "950000cffd914d4f51b57b3f80df847f", '\x00', "00000200"}, 0x28) sendto$inet6(r2, &(0x7f00000000c0)="1b90bd29", 0x4, 0x44051, 0x0, 0x0) (async) sendto$inet6(r2, &(0x7f00000000c0)="1b90bd29", 0x4, 0x44051, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r2) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0x148, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xe8, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@inet=@multiport={{0x50}, {0x2, 0x6, [0x4e22, 0x4e21, 0x4e24, 0x4e23, 0x4e22, 0x4e23, 0x4e22, 0x4e24, 0x4e20, 0x4e23, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x4e22], [0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1], 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, 0x3, 0x8, [0x2e, 0xf, 0x30, 0x30, 0xc, 0x29, 0x21, 0x29, 0x25, 0x3c, 0x34, 0x2b, 0xb, 0x39, 0x23, 0x27], 0x0, 0xffffffff, 0x5}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffffff, 0x0, 'veth0_to_team\x00', 'team_slave_0\x00', {}, {0xff}, 0x6c, 0x3, 0x8}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [0xff, 0xffffffff, 0xff000000, 0xff], 0x4e23, 0x4e23, 0x4e22, 0x4e23, 0x8128, 0x8, 0xfffffffd, 0x1a67, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) accept(r0, 0x0, 0x0) (async) r3 = accept(r0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3) 5.623948964s ago: executing program 3 (id=5625): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd2d, 0x25dfdbfc, {0x2, 0x14, 0x0, 0xc}, [@FRA_FLOW={0x8}, @FRA_DST={0x8, 0x1, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x400468c4) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla', 0x5) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0xd, 0x10, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffffe0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x48}, 0x94) 5.394672097s ago: executing program 3 (id=5628): r0 = socket(0x2c, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000)="fc00", 0x2) splice(r1, 0x0, r0, 0x0, 0x9, 0x5) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r3, 0xffffffffffffffff, 0x5, 0xe4, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) bind$rds(r4, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000000c0)={0x0, 0xeb, 0x1, 'z'}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x5}, 0x8) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) r7 = socket(0x2b, 0x1, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r7, 0x0, 0x81, 0x0, 0x78) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r11, 0x0, 0xf3a, 0x0) write$cgroup_pid(r11, &(0x7f0000000000), 0xffffff98) splice(r9, 0x0, r11, 0x0, 0x2, 0xe) write$tun(r11, &(0x7f00000002c0)={@void, @val={0x3, 0x1, 0xb64f, 0x9, 0x4, 0xf217}, @mpls={[], @ipv4=@igmp={{0x5, 0x4, 0x2, 0x9, 0x1c, 0x68, 0x0, 0xc2, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x16, 0x3, 0x0, @multicast2}}}}, 0x26) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, r8, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_OFFSET={0x0, 0x3, 0x81}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_LNS_MODE={0x0, 0x14, 0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3386}, @L2TP_ATTR_FD={0x0, 0x17, @l2tp=r11}, @L2TP_ATTR_COOKIE={0x0, 0xf, 0x7ff}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20044010}, 0x50080) 3.581281428s ago: executing program 0 (id=5649): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r0, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random="48bd00"}, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) sendto$llc(r1, &(0x7f0000000380)="6c507e3d8fd2a56eafdbdc751f988082d7f5cf58565a5fd3ced3758a435633b4bb1978b05b977e9033bcc353a24f4ff4db1b1674f1a0de4fb0629f11ba96690eabcab76840b6136a70bf0799ca2286173c8435c87db4ef596cc6fc2f5b8f4922a02c31da2bf42358a31b9fbfcac5c8ac45757bc629edd95b42441c7a9f9b7ff458734adc1412704d005e248d942e3eb3b09c71d71a98b3252ab6a09ad826b72be85213f394bf1f3993bbfcc35202c37e75bc452c3fae822a6a219714248a64949f60d5feeb0c9acc130fa11cf7861d67", 0xd0, 0x4000000, 0x0, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) close(r1) r2 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000040)=0x1, 0x4) 3.367930118s ago: executing program 0 (id=5654): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x4c, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_EXPECT_ZONE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x80) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51b23}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000094}, 0x20040040) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f00000001c0)=0xc) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27}, 0x94) (async, rerun: 32) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b1b, &(0x7f0000000040)) (async, rerun: 64) sendmsg$nl_xfrm(r2, &(0x7f0000001500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000a}, 0xc, &(0x7f00000014c0)={&(0x7f0000000240)=@flushpolicy={0xe0, 0x1d, 0x400, 0x70bd2a, 0x25dfdbfb, "", [@sec_ctx={0xd0, 0x8, {0xcc, 0x8, 0x1, 0x6, 0xc4, "3df53973c29fd58314ec78ca30150c6304a6d2745e415ea847b818c88eae46099b174cd25a9f9ac1075fb83e9b9e2c990876055f52c3002c16a5f23c352417133bee8d50eec18acdbb7b5fa4ab47c5b8eac064230ec48237f35460c33e4e32a796d7d416022180ec12ad81a36ed678dba43384f97dc83defcc3327ada23a782eb7368ed78931aceed1f253f3e278700caf2572a52959f95d79c7d20780a0d573d82bbffc07e9cc343dd8035b88a74a3f402d0d57620c799145f68ba72e55491dc2207925"}}]}, 0xe0}}, 0xc4) (rerun: 64) 2.440485753s ago: executing program 0 (id=5666): socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=@base={0x6, 0xe, 0xe6, 0x6, 0x5}, 0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x14) unshare(0x22020400) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r1, 0x1, 0x34, &(0x7f0000000040), 0x4) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) 2.349735316s ago: executing program 2 (id=5668): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4809}, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000027c0)=""/4093, 0xffd}, {&(0x7f0000000380)=""/151, 0x97}, {&(0x7f0000000480)=""/139, 0x8b}], 0x3}, 0x100) socket$igmp(0x2, 0x3, 0x2) 2.285330927s ago: executing program 0 (id=5669): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000000c0)="fc000000", 0x4) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = socket(0xd, 0x803, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000200)) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000000)=0x7, 0x4) bind$alg(r5, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) (async) socket(0x2, 0x80805, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000000bc0)={{r5, &(0x7f00000000c0)='rng\x00', 0x4000, &(0x7f0000000100)={@align=0xffffffffffffff8c, {0x1ff, 0xad, 0x4db, 0x9}}, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=0x7}, 0x9, &(0x7f0000000a80)=[{0x2, 0x2000, &(0x7f0000000340)='rng\x00', &(0x7f0000000380)="8c89ca06574e699940349084f416c7474bb3bead8643", 0x16, 0x3a}, {0x3, 0x9, &(0x7f00000003c0)='rng\x00', &(0x7f0000000400)="88fc206074182ad2d366cae079da5d8a932f5ad5d49088f2408438382f8916e92db440ecb2b2ba3c2ce02791f9d32ba83ae6b1309454d18c657b03d904965deee321cb1da691d1aa82bc04493d6e6d103c73933322122dfa7714d4369587bfae907960a1aeba9dbecd89875b5803a9a169e8d5bd0780e1b5459f9eff71b5c0f884f2b155fe8b4768652bfaf08d056760af3762ea3011d1548bedad846f478a30d1cc74170f270a80b89b73684908c58c0f3233d9ee83ea978c7f79ca1c5d9a74461fd7305075a28425be9c5324d231771bbe6e3d1f25d19fdfc64b3844b4e76afadb1aeebe3ed648092a", 0xea, 0x10}, {0x1, 0x9, &(0x7f0000000500)='{\xd5]\'-.\x00', &(0x7f0000000540)="4d5c869d263d3934501e2ca5375a3007ea16", 0x12, 0x8}, {0x3, 0x1, &(0x7f0000000580)='syzkaller\x00', &(0x7f00000005c0)="2cc5191fba49accf43a02603deafa858fa8bc377200f74d04f8eb187ce58ef50834c54da9118f45b576a514ea050406576e1af9e9816bc518a33a22166bd54ca6ccbfd96ccd0a93749ffd176cfa02d116397317b5d4441fa9e0b5b83d2a984c5fedc528fd0d8e67e82f2706cca68882c57d5654830dfa41b2b37905378c7d3e97696cfd5a9e63d6e3af0111d7607a3a9e5c9", 0x92, 0x8}, {0x3, 0x5, &(0x7f0000000680)='@/\x00', &(0x7f00000006c0)="f65dca4753cf3455e06b8730443281ffe716ef5aa7ded583bb8e209c2cb4c86e24f208e9d82122031dea1e75b09dccf39fdbc6bccf4ef49e152feb17c473f9454b5be44270bd91b41d4faf498bb568af620433175df25a575d48e8a4e64d294abd812a394badd7f2f5ac4f629179f507ab1b3a35cb438388e4d795279fa222f47c6848324ddb177caeb066a87d4e98ee8a86cfda564fa395f08a4bc8768db613c9b360918072a6b1afc760247bc4af7ad54fd4368aff47b8fd9903d612a520c760cc1018f2d53a4fe6c3f2eb1379f90645a360f048dae84ec5eadf9a42da", 0xde, 0x32}, {0x2, 0x4, &(0x7f00000007c0)='^\\\x11/-\x00', &(0x7f0000000800)="9b91f721e959e998e48d8b7bcd12d283a100c9f77bae3ac4eb1d735060f81f33ee08b6947da486c34148e7ef0e65834d6841db4d3a94", 0x36, 0x18}, {0x2, 0x3, &(0x7f0000000840)='%\x00', &(0x7f0000000880)="0eed20d4bf929cb6cc1109", 0xb, 0x2}, {0x1, 0x3, &(0x7f00000008c0)='rng\x00', &(0x7f0000000900)="7a7fb914f89ed418dcde0719a548199f0a250a14ce5bf0c14e99b4c2793a38f20fdc8ea2dbdc9c2ba90bdb9c7681efff653b21cbe1373a692ed89553f2bd458cc66cf87330681beab25884f72d3115c2bed80c0dd325a156a896b9bb619c3e2915e0feb74e427eca48a796e4c566298a86e7dca63024767c1a27d5039b374889764b753ce9af1df5f65f4f", 0x8b, 0x32}, {0x1, 0xfffffffb, &(0x7f00000009c0)='^(!:--^$:..\'%\xef\x00', &(0x7f0000000a00)="021b346022bfb1dbbe31ddc524d68548dca06b556b926a89424a1d5bcbf3685e3098d8573c521fa1d4a7a88c1173f0dfd84c55ec7baf74be3dd3a8403966d730f4a8649e2fc5966bc8b7b7a5", 0x4c, 0xa}]}) (async) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c80), r4) sendmsg$BATADV_CMD_GET_HARDIF(r7, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x24, r8, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) (async) shutdown(r6, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async) r9 = accept4(r5, 0x0, 0x0, 0x800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0xb56cea99d7d0f667]}}, 0x0, 0x34}, 0x28) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x1}, 0x94) recvmmsg(r9, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001d00)=""/1, 0x1}], 0x1}, 0xc}], 0x1, 0x10002, 0x0) (async) splice(r0, 0x0, r2, 0x0, 0x1100000000f336, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0xa, &(0x7f0000000000), 0x4) (async) sendto(r0, &(0x7f0000000d80)="f726dd7a93b476ace68fdab4677193335034148072af70f93cfdd9f513691074a2e2ac0f5a59aba28298c43c67f4ff90774231361453fab2a56b4341479e5439ea699280baef9417a4a4cb0b5cc081da96b485272e3cdd730f204b3fbb36662b3a", 0x61, 0x4, &(0x7f0000000e00)=@pppol2tp={0x18, 0x1, {0x0, r9, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3, 0x2, 0x2, 0x3}}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010026"], &(0x7f0000001f80)=""/212, 0x26, 0xd4, 0xa}, 0x28) 2.245003979s ago: executing program 3 (id=5670): r0 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 2.242212169s ago: executing program 4 (id=5671): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xc6}]}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=0x0, @ANYBLOB="240c2f8008000124e6aec9000c00020002034555bba44d4ea4d78bbdfe3a11c4aaaaaaaa"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008000000000000000002000081115d000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8eceb2e30985c02b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x30, 0x2, 0x1, 0x3, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x88c}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10050}, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r5, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000427bd7000fcdbdf2531000000050035004000000008000200", @ANYRES32=0x0, @ANYBLOB="00000000f8ffffff0000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x80) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x69}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4094}, 0x4080) r10 = socket$kcm(0xa, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d80)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000280)=@raw=[@generic={0x2, 0x9, 0x0, 0xbf74, 0xabf}, @ldst={0x1, 0x3, 0x1, 0x2, 0xe6040efe367a6d39, 0x10, 0x4}, @alu={0x4, 0x1, 0xd, 0xa, 0x4, 0x45, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000400)='GPL\x00', 0x0, 0xba, &(0x7f0000000640)=""/186, 0x40e00, 0x40, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000c80)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000cc0)={0x3, 0x6, 0x3, 0xfffffff7}, 0x10, 0x24577, r3, 0x0, &(0x7f0000000d00), &(0x7f0000000d40), 0x10, 0x4}, 0x94) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r11, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x0, 0x2, 0x6, {0x3, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@multicast1, @private=0xa010101, 0x0, 0x5}, {0x0, @empty, 0x6, 0x5, [0x6, 0x9]}, 0xff, 0x3}}}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) r12 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={r12}) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x8936, &(0x7f0000000000)={r12}) r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r13, 0x10e, 0x1, &(0x7f0000000040)=0x10, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x80000001, 0x4) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r7) 2.155640331s ago: executing program 2 (id=5672): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000b40)={0x10000001}) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x4, 0x4) 2.154343773s ago: executing program 0 (id=5673): syz_emit_ethernet(0xe, &(0x7f0000000280)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @void, {@generic={0x88a2}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073115a00000000008510000002000000850000001200000095000000000000009500a50500ef60d2"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x9, 0x1, 0x10, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7881, 0x10000, 0x7}}) sendmsg$nl_xfrm(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)=@getpolicy={0x1e8, 0x15, 0x100, 0x70bd2a, 0x25dfdbfc, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@rand_addr=0x64010102, 0x4e21, 0x5, 0x4e21, 0x200, 0x2, 0x0, 0x60, 0x21, r1, r2}}, [@policy={0xac, 0x7, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private2, 0x4e24, 0x10, 0x4e24, 0x0, 0x2, 0x60, 0x0, 0x3c, 0x0, 0xee00}, {0x1, 0x7, 0xe, 0xa42, 0x5e9, 0xfffffffffffffffa, 0x8, 0x4}, {0x5, 0x8, 0x8, 0x9}, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1}}, @offload={0xc, 0x1c, {r3, 0x2}}, @replay_val={0x10, 0xa, {0x70bd27, 0x70bd27, 0x1}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @replay_thresh={0x8, 0xb, 0x400}, @sec_ctx={0x9b, 0x8, {0x97, 0x8, 0x1, 0xf, 0x8f, "61794e3c701153b68f4e0fa723021e5cdee88949e0f94fd18ccd73a79f9ac9366d7c5dfed929b783c1706878809fb0711b190ba31900d7c70e544745a6a7493b0614c480b2f2024c5861a74c1c8e61fa622d62f13b05446786771b481a6ca953377572805c00d4537ed9fa9f5fe28311d132a60574aad3bae562155cacb54639edefdb2a0d643676a3106ba76cae08"}}, @lifetime_val={0x24, 0x9, {0x5, 0x1, 0x6, 0x4}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x24000005}, 0x20048000) 2.11393686s ago: executing program 1 (id=5674): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r2}, &(0x7f0000000380), &(0x7f00000004c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000001100000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000002dc0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000002e40)={&(0x7f0000002e00)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="79a82dbd7000ffdbdf2501000000000000000c4100000007001473797a"], 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x24000084) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r6, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r6, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) close(0x3) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="280000001000010025bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="380904030000000008001b0000000000f7361aeba0a507b54e36b00d04ae5ac4417b9d99912f0bbc8a68277c7a49057eb2e9859f104286d0a35dec7da58030f735a953afe371664ec5111b6ad27d201fa8cde1621dbbc6c380f5323a4bf8df167814712a9b1da3c483296cccb833983adb1cb7c9a8c43b38a2df8816869d7e23660324d1f929e2d0cafbb893b55ba47f6fa257b725ffefb9a5bec2df3754f4030b7cc28d30b09be6e50177f7df3939b86c433d992be650d30de6e5bcadc7996f235a0f7221a676ac262dedde9abd83726499ea9654aa3f1d4fbfc9e6a941d7cb6cb86afd6d9f70c4dc092d2676bb0647574cfae6"], 0x28}, 0x1, 0x0, 0x0, 0x20060810}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x3}, {0xd}, {0xa, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) r12 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r12, 0x8982, &(0x7f0000000000)={0x8, 'batadv_slave_0\x00', {'ip6gre0\x00'}, 0xcab}) r13 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), r1) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r13, 0xd25dcf585380a046, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8082}, 0x40) 2.111992405s ago: executing program 4 (id=5675): r0 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@delqdisc={0x34, 0x25, 0x800, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xffff}, {0x3, 0x10}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x8}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x41c3}]}, 0x34}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000240)={'pim6reg\x00', {0x2, 0x0, @broadcast}}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001c00357428bd7000fed3df2502000000", @ANYRES32=r2, @ANYBLOB="0400826a5d0600000000000000ec0baa86003f526f04711c5659bb2ee877"], 0x30}}, 0x80c0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet(0x2, 0x2, 0x1) r7 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r7, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r7, &(0x7f0000009140)=[{{0x0, 0x0, 0x0}, 0xea}], 0x1, 0x10102, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r7, 0x800448d2, &(0x7f0000000800)={0x6, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {@none}]}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000001c0)=0x9, 0x4) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmsg$inet(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, &(0x7f00000001c0), 0x5c, 0x0, 0x0, 0x60000000}, 0x4810) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r7, 0x800448d3, &(0x7f0000000840)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1000, 0x6, 0xd8ac, 0x43, 0x3ff, "f9db59daf80f3cc9b36183b4fcb2d6c7d72113a48776444e4809dea0b1f89cc87183c3e1c386df20d751c59202230f4b933b1289032bef93e21b089bd445be3e117c850f19586b7b87b336e8a3db9101a1366ea03cd1f2eb6e50055a9e4b0f7c35071d25a13fb068d5b73b101c576eca0111bb3ca1547801486d2f4be5f49786"}) 2.00959874s ago: executing program 0 (id=5676): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_PRIMARY={0x8, 0xb, r1}]}}}]}, 0x44}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x1, 0x0) vmsplice(r4, &(0x7f0000000c40)=[{&(0x7f0000000180)='\r', 0x1}, {&(0x7f0000000840)="89", 0x1}, {&(0x7f0000001100)="a6", 0x1}, {&(0x7f0000000580)='F', 0x1}], 0x4, 0x6) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, 0x0) openat$cgroup_ro(r4, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x10000}, 0xc) 1.955894392s ago: executing program 2 (id=5677): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff) pipe(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) splice(r1, 0x0, r0, 0x0, 0xfea8, 0xa) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) (async) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff) (async) pipe(&(0x7f0000000a40)) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) (async) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) (async) splice(r1, 0x0, r0, 0x0, 0xfea8, 0xa) (async) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) (async) 1.874019271s ago: executing program 3 (id=5678): r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_int(r0, 0x0, 0x22, &(0x7f0000000000), 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x45}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e1e, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}], 0x2, 0x40) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r4, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback={0x2e00}, 0x8004}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @empty, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) shutdown(r2, 0x1) shutdown(r1, 0x1) r5 = socket$kcm(0xa, 0x3, 0x106) sendmsg$kcm(r5, &(0x7f0000000d80)={&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x10001}, 0x80, 0x0}, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e24, 0x0, @empty, 0x4}}, 0x8, 0x1, 0xfffffe01, 0x0, 0xb3550aa4ba878386, 0x2, 0x2}, 0x9c) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r6, 0x18000000000002a0, 0x1f, 0x0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff2000a600ff84000aac141440e0", 0x0, 0x11, 0x6000cfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) 1.667135414s ago: executing program 2 (id=5679): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000002c0)="ad56b6c5820fae9d6dc232003044ad36b1a4421844acc3bfa12eaad605c804266a5e00000000000000", 0x29) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x22000, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0x402, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x48195) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 887.028436ms ago: executing program 1 (id=5680): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000040)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000c40)=@filter={'filter\x00', 0xe, 0x3, 0xb7a, [0x0, 0x2000000000c0, 0x2000000000f0, 0x20000000031c], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x9, 0x0, 0x88e7, 'wlan1\x00', 'veth1_macvtap\x00', 'veth0_to_batadv\x00', 'veth0_to_hsr\x00', @random="41ef812d1c43", [0xff, 0xff, 0xff, 0x0, 0xff, 0x1fe], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0x0, 0x0, 0xff], 0x9e, 0x9e, 0xce, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x1, 0x1c, 0x2, 0x6}}}], [], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x5, 0x4, 0x1c, 'geneve1\x00', 'rose0\x00', 'pim6reg0\x00', 'veth1_to_team\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], @random="06c3d83821b8", [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0xe6, 0xe6, 0x12e, [@devgroup={{'devgroup\x00', 0x0, 0x18}, {{0x1, 0x2, 0xfffff001, 0x1, 0xe}}}, @realm={{'realm\x00', 0x0, 0x10}, {{0xffffff74, 0xba0}}}], [], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x2, 0xd6, {0x77}}}}}]}, {0x0, '\x00', 0x2, 0x96c949423ddfe725, 0x1, [{0x3, 0x40, 0x806, 'veth1_to_bridge\x00', 'ip6tnl0\x00', 'team_slave_0\x00', 'netpci0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, [0x0, 0xff, 0x1fe, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0x0, 0xff, 0x0, 0xff, 0xf8a6e1f7ead520a6, 0xff], 0x856, 0x8a6, 0x8ee, [@u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0x9, 0x3}, {0xffffff81, 0xef6f5036fe6eb2e1}, {0x7, 0x1}, {0x3b9b}, {0x5c708b90, 0x1}, {0x3, 0x2}, {0x0, 0x2}, {0x9, 0x2}, {0x4, 0x1}, {0xa441, 0x3}, {0x7fffffff, 0x3}], [{0x4, 0x3ff}, {0x7fffffff, 0xac}, {0x81, 0x5}, {0x3}, {0xbcdf4e0d, 0x8}, {0xf, 0x6}, {0x3, 0xc}, {0x5}, {0x7ff, 0x8}, {0x4c, 0x753f}, {0xffffffe8, 0x5}], 0x7, 0x4}, {[{0x3, 0x2}, {0x22}, {0x8}, {0x5c9, 0x3}, {0x10}, {0x4, 0x2}, {0x1, 0x3}, {0x7, 0x3}, {0x9, 0x1}, {0xffffffff}, {0x0, 0x3}], [{0x8}, {0x1, 0xd}, {0x9, 0x2}, {0x68c4, 0x1907}, {0x7fff, 0x7}, {0x401, 0x6ad}, {0x7, 0x1}, {0x0, 0x7}, {0xb6, 0x6450}, {0x2, 0x4}, {0xfffffff8, 0x9}], 0x6, 0x3}, {[{0xeb3}, {0x10, 0x3}, {0x3, 0x1}, {0xda00, 0x2}, {0xc, 0x1}, {0x350fef99}, {0x5}, {0xfffffff8}, {0x9, 0x2}, {0x7, 0x3}, {0x4, 0x2}], [{0xb, 0x80000000}, {0x80000000, 0x5}, {0x7fff, 0x7}, {0x0, 0xc}, {0x3, 0x7fffffff}, {0xf, 0x9b1e}, {0x6, 0x7}, {0x80000000, 0x7}, {0x101, 0x5}, {0x4, 0x1}, {0x80000001, 0x1}], 0x3, 0x5}, {[{0x7f}, {0x3, 0x1}, {0x5e}, {0x8, 0x2}, {0x80000000, 0x2}, {0x6ce, 0x3}, {0xb, 0x3}, {0x7, 0x1}, {0x0, 0x2}, {0xfffffffa, 0x3}, {0x5}], [{0xb0a3, 0x3}, {0xb, 0x21}, {0x314, 0x3ff}, {0x6, 0xbe000000}, {0x0, 0x7}, {0x10001, 0x1c000}, {0x40, 0x9}, {0x3, 0x9}, {0x3ff, 0xe8fe}, {0x8, 0x6}, {0xb5a, 0x4}], 0xb, 0xa}, {[{0xffffffff, 0x1}, {0x9}, {0x8b, 0x1}, {0x8, 0x1}, {0x4}, {0x1, 0x2}, {0x4, 0x3}, {0x9, 0x1}, {0x800, 0x2}, {0x1, 0x2}, {0x40, 0x3}], [{0x2800000, 0xa}, {0x7, 0x6}, {0xf9, 0x6}, {0x3, 0x6}, {0x8, 0xffffff20}, {0x2, 0x200}, {0x1, 0xfffffffd}, {0x0, 0x1ff}, {0x0, 0x2}, {0x3, 0xa}, {0xe5, 0x4}], 0x1, 0x4}, {[{0x5, 0x3}, {0x0, 0x6}, {0x9}, {}, {0x8}, {0xa3, 0x3}, {0xff, 0x3}, {0x10, 0x1}, {0xe659}, {0x3, 0x2}, {0x7ff, 0x2}], [{0xfff, 0x7fffffff}, {0x0, 0x270}, {0x9, 0x2}, {0x0, 0x2}, {0x7}, {0x0, 0xff}, {0x9, 0x4}, {0x0, 0x4}, {0xf, 0x6}, {0xb, 0x3}, {0x40, 0x7}], 0x6, 0xa}, {[{0x3, 0x3}, {0x80000001}, {0x3, 0x1}, {0xaf, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x2}, {0x7, 0x2}, {0x6f7, 0x2}, {0x2, 0x1}, {0x1, 0x2}], [{0x1, 0xb}, {0x800, 0x9}, {0x40, 0x20000000}, {0x166, 0x2}, {0x5, 0xc72}, {0x1, 0x6}, {0xfb, 0x7ff}, {0x7f, 0x7}, {0x7fffffff, 0x9}, {0x80, 0xff}, {0xfff}], 0xb, 0xa}, {[{0x1, 0x2}, {0x1, 0x1}, {0x8001, 0x2}, {0x6, 0x2}, {0x8}, {0x80000000, 0x2}, {0x1e}, {0x1, 0x2}, {0x3, 0x3}, {0xffff}, {0x10000, 0x1}], [{0xffffffff, 0x8}, {0x1, 0x70000000}, {0xf7, 0xa5e7}, {0x3, 0x1}, {0xffffffff, 0x401}, {0xfeed, 0x4}, {0x8, 0x40}, {0x1ff, 0xced3}, {0x5}, {0xff, 0x3}, {0x10000, 0x989d}], 0xa, 0x7}, {[{0x0, 0x1}, {0x4, 0x2}, {0x8, 0x3}, {0x8}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x10, 0x2}, {0x3, 0x3}, {0x9, 0x2}, {0x8, 0x1}], [{0x8001, 0xe6}, {0x9, 0xfffffffa}, {0x9, 0x7}, {0x2, 0x2}, {0x5, 0x4}, {0xd91b, 0x10}, {0xbddc, 0xa794}, {0x80000001, 0x4}, {0x8, 0x1ff}, {0x6, 0x36}, {0x2, 0x46399ee4}], 0x2, 0xa}, {[{0x7}, {0xfffffffb, 0x1}, {0x7, 0x3}, {0xc26, 0x2}, {0x9bb2, 0x2}, {0x4}, {0x8, 0x3}, {0x15, 0x1}, {0x5}, {0x6}, {0x3, 0x1}], [{0x80, 0x6ab}, {0x7, 0x17bf}, {0x100, 0x3}, {0x3, 0xa}, {0x2, 0x2}, {0x6, 0x100}, {0x10000, 0x6}, {0x9, 0x8001}, {0x7f, 0x5}, {0x4, 0xb}, {0x2, 0x7}], 0x6, 0x4}, {[{0x8}, {0x401, 0x1}, {0x8}, {0x800, 0x2}, {0x400, 0x3}, {0x9, 0x1}, {0x9, 0x2}, {0xfb35, 0x1}, {0x9}, {0x800}, {0xaee, 0x2}], [{0x6, 0x7701fe35}, {0x6, 0xa14fd06}, {0x5, 0xe}, {0x100, 0x2}, {0xffff, 0x80000000}, {0x2, 0x802c}, {0x8, 0x2}, {0x5, 0x3}, {0x5, 0x6}, {0x10, 0xb1e}, {0x8001, 0xc9e9}], 0xb, 0xb}], 0x9}}}], [@common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x1, {0xffffffffffffffff}}}}], @common=@ERROR={'ERROR\x00', 0x20, {"c7ac49cf42de7bf4e9a1b25a118f4d15685e640620d156c2360f34ba16e7"}}}]}]}, 0xbf2) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000cc0)={r1, 0xf2d, 0x82, 0x7ff}) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$XFS_IOC_SWAPEXT(r2, 0xc0c0586d, &(0x7f0000000d00)={0x0, r0, r2, 0xb, 0x8, '\x00', {0x1, 0xf, 0x81, 0x6, 0x0, 0x4, 0x0, 0x1, {0xfffffffffffffe01, 0x5}, {0x7ff, 0x5}, {0x3, 0xc9}, 0x2, 0xb, 0x7, 0x6, 0x5, 0xb, 0x81, 0x3ff, 0xffff, 0x8, '\x00', 0x80, 0xe, 0xca, 0xcbba}}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000ec0)={'ip6gre0\x00', &(0x7f0000000e40)={'ip6_vti0\x00', 0x0, 0x4, 0x80, 0x3d, 0x6, 0x2, @loopback, @remote, 0x1, 0x1, 0x65, 0xbb}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000f00)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000001000)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80008}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x5c, r3, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24040001}, 0x4c000) accept$netrom(r2, &(0x7f0000001040)={{0x3, @null}, [@rose, @netrom, @null, @null, @netrom, @null, @remote, @default]}, &(0x7f00000010c0)=0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001300)={r2, 0x20, &(0x7f00000012c0)={&(0x7f0000001100)=""/205, 0xcd, 0x0, &(0x7f0000001200)=""/156, 0x9c}}, 0x10) r7 = socket$unix(0x1, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001340)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r0, 0x40106e80, &(0x7f0000001380)={0x7}) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000013c0)=0x7, 0x4) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r7, 0x8010671f, &(0x7f0000001440)={&(0x7f0000001400)=""/45, 0x2d}) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001480)=r6, 0x4) sendto$inet6(r2, &(0x7f00000014c0)="2f3e540595b3637c243f5d91679da53bc8b707889b83170b43a6658244fd2e9f752a3d53689c3d3a38a53801ecddfb00", 0x30, 0x4008001, 0x0, 0x0) ioctl$XFS_IOC_FSGETXATTRA(r7, 0x801c582d, &(0x7f0000001500)) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000001540)={0x0, 0x3}, 0x8) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000015c0), r2) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f00000016c0)={&(0x7f0000001580), 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x68, r8, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x4}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000000) bind$inet6(r2, &(0x7f0000001700)={0xa, 0x4e20, 0x81, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x81}, 0x1c) r9 = socket$pptp(0x18, 0x1, 0x2) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000001740)=0x100000) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000001780), &(0x7f00000017c0)=0x14) 869.103836ms ago: executing program 4 (id=5681): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/cgroup\x00') unshare(0x6a040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000380)=ANY=[@ANYBLOB="736563757269747900000000000000000000000000000000000000000000000c0400"/59], 0x68) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f00000001c0)=0x7, 0x4) getsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) close(r5) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1, 0x9, 0x5, 0x9, 0x6158, 0x7, 0x5}, 0x1c) socket$inet_sctp(0x2, 0x5, 0x84) unshare(0x26020480) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x48010) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 852.228882ms ago: executing program 3 (id=5682): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32], 0x44}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x2000) write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2004c890) r4 = socket$can_raw(0x1d, 0x3, 0x1) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x200000000006, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000001c0)=[{}], &(0x7f0000000180)=0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) close(0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x80000000}, {0x61, 0x4}, {0x45}, {0x2}, {0x6}]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a0001970000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r5], 0x24}}, 0x0) ioctl$sock_netdev_private(r0, 0x89f2, &(0x7f0000000000)="3e38fdc10156d86c7daa7a23449495c2191f38f0a41fa837b152db36427734b336a9d73db685051aa3cc64b44b2fd4cd535288190df6f5681fd289c3717bc9ac7c2335d35a4edb0149d270c2501098896ccd614137be262ddcb19a8b3e08d7a5148169409bf1ffccc3") 776.09652ms ago: executing program 1 (id=5683): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno', 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) (async) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 774.349014ms ago: executing program 2 (id=5684): r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_netdev_private(r0, 0x89f4, &(0x7f0000000000)="0faafe519a80a15397cb4c66cc9e") (async, rerun: 32) r1 = socket$packet(0x11, 0x0, 0x300) (rerun: 32) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0xffff, 0x2ee392f3, 0xc, 0x10, 0xd7, 0x9, 0x1000}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=@delqdisc={0x18c, 0x25, 0x300, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x7, 0xe}, {0x0, 0x10}, {0xd, 0x2}}, [@TCA_STAB={0x138, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x8, 0x7ff, 0x7, 0x3, 0x4, 0x5, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x0, 0xd, 0x2, 0x1, 0x2, 0x6, 0x7, 0x2}}, {0x8, 0x2, [0xff, 0xffa4]}}, {{0x1c, 0x1, {0x8, 0x3, 0x5d24, 0x4, 0x0, 0x7, 0x7, 0x1}}, {0x6, 0x2, [0x401]}}, {{0x1c, 0x1, {0x4, 0x8, 0x3, 0x1, 0x2, 0xfffffffe, 0xe7, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0x7f, 0xfb, 0x3274, 0x81, 0x1, 0x3, 0x80, 0x5}}, {0xe, 0x2, [0x7fff, 0x4, 0xa45, 0x40, 0x4]}}, {{0x1c, 0x1, {0x5, 0x9, 0xffff, 0x1000, 0x10b8c5c7bb32767f, 0xf17e, 0x52, 0x2}}, {0x8, 0x2, [0x3, 0xe8e]}}, {{0x1c, 0x1, {0x9d, 0x6, 0x9, 0x8, 0x0, 0x1, 0x8, 0x6}}, {0x10, 0x2, [0xf, 0x6, 0x455, 0x5c, 0xfff, 0x1]}}, {{0x1c, 0x1, {0x20, 0x6a, 0x0, 0x2, 0x1, 0xffffffff, 0x100, 0x4}}, {0xc, 0x2, [0x7f, 0x1ff, 0xc78b, 0xd9d]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_INGRESS_BLOCK={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_RATE={0x6, 0x5, {0xeb, 0x9}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x18c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), 0xffffffffffffffff) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0x0) (rerun: 32) sendmsg$NFC_CMD_START_POLL(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r5, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x46}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x10) (async, rerun: 64) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async, rerun: 64) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r8, 0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000500)=0x4) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000540)={r3, 0x1, 0x6, @remote}, 0x10) (async) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000000580)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000005c0)=r9) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0xffffffffffffffff, 0x4}, 0xc) ioctl$BTRFS_IOC_SNAP_DESTROY(r10, 0x5000940f, &(0x7f0000000640)={{r1}, "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"}) r11 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_MCAST_MSFILTER(r11, 0x29, 0x30, &(0x7f0000001640)={0x6, {{0xa, 0x4e24, 0x5, @mcast2, 0xed2d}}, 0x0, 0x3, [{{0xa, 0x4e23, 0x2, @loopback, 0x7}}, {{0xa, 0x4e21, 0x4, @private0, 0x1}}, {{0xa, 0x4e22, 0x7, @local, 0x2}}]}, 0x210) (async, rerun: 32) r12 = accept4$netrom(0xffffffffffffffff, &(0x7f0000001880)={{0x3, @rose}, [@rose, @null, @default, @rose, @bcast, @rose, @bcast, @default]}, &(0x7f0000001900)=0x48, 0x800) (rerun: 32) getsockopt$IP_VS_SO_GET_DAEMON(r12, 0x0, 0x487, &(0x7f0000001940), &(0x7f0000001980)=0x30) (async, rerun: 32) r13 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r13, 0x89f2, &(0x7f0000001a00)={'syztnl0\x00', &(0x7f00000019c0)={'sit0\x00', r3, 0x7, 0x8000, 0x6, 0x1, {{0x7, 0x4, 0x1, 0x13, 0x1c, 0x68, 0x0, 0x8, 0x2f, 0x0, @multicast1, @broadcast, {[@noop, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000001b40)={r12, &(0x7f0000001a40)='`\x00', 0x103280, &(0x7f0000001a80)={@align=0x6, {0x4, 0x0, 0x2, 0x6}}, 0xa58, &(0x7f0000001ac0)={@_ha_fsid}, &(0x7f0000001b00)=0x180000}) accept$unix(r15, 0x0, &(0x7f0000001b80)) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r15, 0x89f0, &(0x7f0000001cc0)={'ip_vti0\x00', &(0x7f0000001bc0)={'erspan0\x00', r14, 0x7, 0x40, 0xfffff8c7, 0x0, {{0x2b, 0x4, 0x1, 0x18, 0xac, 0x65, 0x0, 0x1, 0x4, 0x0, @multicast2, @multicast2, {[@ra={0x94, 0x4, 0x1}, @generic={0x83, 0x7, "e1742ffc2b"}, @cipso={0x86, 0x14, 0x1, [{0x0, 0xc, "12dc67f987da1bc9639b"}, {0x5, 0x2}]}, @cipso={0x86, 0xe, 0x3, [{0x0, 0x8, "510786fba25e"}]}, @rr={0x7, 0x13, 0x62, [@private=0xa010102, @private=0xa010102, @empty, @multicast2]}, @cipso={0x86, 0x4a, 0xffffffffffffffff, [{0x0, 0x2}, {0x5, 0x10, "db2de2b88513e064e8f39a0eed2d"}, {0x1, 0x2}, {0x5, 0x12, "53f4cc9377172c239c93966a843dc95b"}, {0x0, 0xe, "db40efc85014afa9318f5ab8"}, {0x5, 0x9, "517f691746b141"}, {0x5, 0x7, "df7358eee7"}]}, @ssrr={0x89, 0xb, 0x18, [@multicast1, @broadcast]}]}}}}}) (rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=@bloom_filter={0x1e, 0x2, 0x10, 0xff, 0x10000, r15, 0x9, '\x00', r16, r15, 0x4, 0x4, 0x5, 0x5, @void, @value, @value=r15}, 0x50) (async, rerun: 64) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x2010, r1, 0xfefff000) (rerun: 64) 671.94543ms ago: executing program 1 (id=5685): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xffff3809, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0x10}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xc, 0x6, @multicast}, 0x14) 647.841164ms ago: executing program 2 (id=5686): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40000) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000380)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r3) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r7, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h'], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0xfc) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r5, 0x0, 0x20000000002) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000140)={'sit0\x00', 0x0}) 463.403251ms ago: executing program 4 (id=5687): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x48) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000900)={&(0x7f0000000480)={0x480, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x4c, 0xfc, "35b8fe95a5897ddb8b65bff386203db7355f24938c70d426ddfae8529c873647eb2c452f68bdf5eaa04424ce54ce6b7eff8827539adfc39f4b08914094f8f9071ad9b21b6c0f7409"}, @NL80211_ATTR_FILS_ERP_REALM={0x9f, 0xfa, "2648254b27778c590774166c5e0365ea792e19a3350787b2dda4d32ed071599c2101d6a02d25c1bca1c36c0d35a315a05f1f07fcee11bb25db36404b61c30391422ebbce893ea96d88d6f9777d8285ebeca9fe4f23c4d217d953686aabc350b34fa3ee6f346af6395bf99b14fd3be135a97d495a380f72e81d0b53d78e039ac48a22da859586728498a5b9592a71ec44812b9b307a602f55b7e308"}, @NL80211_ATTR_FILS_ERP_RRK={0xd9, 0xfc, "35d7db9933f5b99804ee90411bb11925834bc6b8d00ab6b9c1c9523abde1953355696e03e6647c58f70ace0b49aeafe8f6bb048026aab9e933d9d3242b85ceb41b13cf2bf73d37d5e8bb06abf72c51d6f99d73d8c1eca5b74a019b8d9e28e2dab493af0d8fb10f5b74a81e10e3a0427f0388caf93f3834d0ec7af6415e1df7a947bdf1db0ffb4cb2e3611b6b79cad93111cdee734404de2e28b75481118bb6e225c614d59057ad318778b934ac4dfa6b8843cd5fb3f893beb036bce71eadb2ba849071e845a9c063e3f59f3ac84854cfeeea8d6c60"}], @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x23, 0xfc, "a0f799e8ddd9395e4aa8b40cb9940e39c43364e2bf22741330ae05a0bfac1e"}, @NL80211_ATTR_FILS_ERP_RRK={0xa3, 0xfc, "b67837140e68d3a83ea9f67988811d3c0f357b41c3c60868c213bfb612a030cd31d1036858da8448893d90ab5c124db0de133885ff5d66aac7b3619104ab53647f040ff32197e7a3efd640d11c3b8b01a0a69d8ce35346a35c80b5dc85bb0ca454f9c304dae83784d1a3cbad142b0f6c9145b2182feae7d968119603def9b463ad5d86af0c5aade76349dee6543f9474032044cdf037532885eac047355730"}], @NL80211_ATTR_IE={0x1db, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}, @channel_switch={0x25, 0x3, {0x1, 0xaf, 0xf}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @mesh_chsw={0x76, 0x6, {0xd, 0x1, 0x40, 0x4}}, @mic={0x8c, 0x18, {0x2b9, "2e1cb59c0b7f", @long="0016a0e5cbeaf48326dff5571a5812cb"}}, @random_vendor={0xdd, 0x98, "48601e81b885ff173c2fa4f50b080136c37b4b4eee61d03d5402faaac92b708c707a2bb59cbd621d66fef4f4608fea8a054143eb85632d5bd78cd855357eecd2466585bc1ea417bfd438a0a5132f4683dedf3465aa049f2b2c87f5f4a65212679ad49c5625e742d7e57831cf010907d25c25037abd9cb28abe8f8460e06a957e7077a92f7126f4b5e5b1bf46ecd5b5b8e3d3083f983f3380"}, @ext_channel_switch={0x3c, 0x4, {0x1, 0xe, 0x78, 0x1c}}, @fast_bss_trans={0x37, 0x103, {0x1, 0x7, "f8e43950ac0c08e150fb405fc84c13b4", "cb5bcdaa7d20ddec83cc5ff4dd45b36f9ec504d474bcaa6ac6527d3fdb6d967b", "5cb70c4add535f018bf6cda225ddb5ba5b41a2b5ae57af8bc7a50c368fa5ed10", [{0x4, 0x9, "56af9098731e08250c"}, {0x4, 0x9, "b715fef9d08d04530e"}, {0x2, 0x25, "c3c4638ceba0921cc26a11510cb9183e0e475a9534c2bf64c3ddde58ffa9f9cffdfc16f442"}, {0x3, 0x1b, "c48e229d1515601d2d5005eaa42e437031d638a35f8d5b5442e43c"}, {0x2, 0x28, "a8fda98cd7d0bb694643c4f1403934bdf3c729d77fe323574d60ece82671f30b3d8741cfe97d4fd9"}, {0x3, 0x24, "bb089c129650b78994d224f4a6e2f1be21103ae31ac7dae31792957cda78b95359897a8b"}, {0x2, 0x5, "a265f3fd92"}]}}]}]}, 0x480}, 0x1, 0x0, 0x0, 0x2810}, 0x4000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001340)=@raw={'raw\x00', 0x8, 0x3, 0x500, 0x340, 0x11, 0x148, 0x340, 0x0, 0x468, 0x2a8, 0x2a8, 0x468, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @fd}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, '\x00', {0x7}}}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0xd, 0x0, 0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x3, {0xff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x560) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0xb, 0x108}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x34, r4, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0xe, 0x3ff, @l2={'eth', 0x3a, 'caif0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0000000d0085a168d0bf46d32345653600648d0a00120002000a0006005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000", 0x67, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) 245.561971ms ago: executing program 4 (id=5688): r0 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 155.256633ms ago: executing program 1 (id=5689): getuid() (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x700, 0x7800, 0x1ff, 0x8, {{0x8, 0x4, 0x1, 0x3, 0x20, 0x68, 0x0, 0x7, 0x4, 0x0, @remote, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0xc, 0xae, 0x1, 0x2, [{@empty, 0xfffff477}]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddrlabel={0x4c, 0x48, 0x20, 0x70bd2b, 0x25dfdbfe, {0xa, 0x0, 0x38, 0x0, r1, 0x59}, [@IFAL_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x3}}, @IFAL_ADDRESS={0x14, 0x1, @private2}, @IFAL_LABEL={0x8, 0x2, 0xb}]}, 0x4c}}, 0x880) (async) socketpair(0x1d, 0x5, 0xfd, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000200)={@private=0xa010101, @private=0xa010101}, 0x8) (async) sendmsg$nl_netfilter(r2, &(0x7f0000000940)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000900)={&(0x7f0000000280)={0x66c, 0x4, 0x7, 0x401, 0x70bd2a, 0x25dfdbfc, {0x3, 0x0, 0x2}, [@nested={0x24c, 0x37, 0x0, 0x1, [@generic="59e7c2452ea16123995affad7595d800c5d6780d561c83d4cc9c9a0fee8afa3dbf3cca181e15b853d7dcada0fe5fc6ae17d10cbc186d45d35ded0d9ae2a7c3fc24781d0830beb0aae6532affe0e3e559ac68fdcc303de135370e0e108d8da6ac093e994bf68c993b4239a461086fd2984fa80f39f950f217c8090c220db645511269cdc4cb2e472a694a0a3ec7fde48028cc3d1910cf1e53a5a16315520544f7d167066c16b51c3156d3f52916b381338e652a9760d759386828c395e93969c4980baa5c", @typed={0x5, 0x12d, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0xaa}, @typed={0x8, 0x5d, 0x0, 0x0, @fd=r0}, @nested={0x4, 0xd3}, @generic="5b03e0f8b1c4f1bd3d7e80b9fb8ed56955db98fed1e0c1afc7eb21495089c3a6a37f93318d84b394307603ed8443c708bc839c4f7db30bdb7e3aab04935a071d19b0dad1314922c50284f82fa1d4d3077d248ee5ba517695fa9248b60d46a8ba860615bf5af7079dbfa362c96173836383038465194c44bffe42e17461b06ad402779706c5ab64e956ead8f0bb3a904d71bc06d2d0b38330877280961e723f882936bf6a9e082eb729b4d52a320af32afade1fbd65", @generic="f9fb65d6b24e2c142b236a70c889ae2bff1a9884f0aeb244520444f6a64ff17fa557a63144f25a710ffb10df83bd7b1d5140edbb230de6804185976a765f8979cd1671b7365d291a18ce447488745d88dc3adf1752bb60156d0fbc15ff1ef3c5f2a4b5b573729aaa2e3fb30aba076e2557b9c80235cf9710cfcda7e72ad223299b3bb2c92cb4d322ce8b916e405760b84b79808b6f0796cf4a66c222ee55026bc87c80784fa5ff2d55dab9d6aa133839db2834", @nested={0x4, 0x28}]}, @typed={0x4, 0xdc}, @nested={0x18, 0xe2, 0x0, 0x1, [@nested={0x4}, @nested={0x4, 0x52}, @nested={0x4, 0xd8}, @typed={0x6, 0x9, 0x0, 0x0, @str='#\x00'}]}, @generic="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", @typed={0x8, 0x3c, 0x0, 0x0, @u32=0x90}, @nested={0x200, 0x14b, 0x0, 0x1, [@generic="3de926c52c06297c6d328b3dcbe84031c407a45f9b37669c6e4197fd8e64b36e0c8b411702f3a927b551f1de1bfcc08b4bb97ddc14a25c42aea04a4f5642daa1b8c101e602ff3628f04cef75cb17cff5c82a7d948c9d390cff755e0a01580a0628ec2a32e912efd815c563dfe39523ffbc4893aaf0b8a08379e3ffc91bba7668e1093d4a6afd2a018f405d92daa505e49ffda9eea1cf3c94bcf8939225911ab9ecfea754caae1c11", @generic="fb959c5039a77730f9fd870458337c026293660081c90e91f2899fa10c8b72bf5da9426bfd7616ed9ef2c475807c4ce331537f654f682a48e5189027480d8c8895694a93458fcdc1813a013f0f933e8f5f9cbd065bec7a2c", @nested={0x4, 0x11d}, @typed={0x8, 0x4b, 0x0, 0x0, @fd=r3}, @generic="f862f647a82405bf70b61305e26ebae80e60c4ebab31042e31937cbc601e6efcb0", @generic="7265e51890d5ebaa618014a7d40c435cba9ec26696e37994a72e8a5a407bb5862cd1f14d1105f5d60b94bb8f6b1535fbf4e232a88363f127aca6747b07ca4a3120db0ffdcf053e8b16a4a3dab3791959f82e8ea9804ab51bf5bc78c8fe1d412ed518b2bed26f097ece4bebcc4bc111013a021d2c77fe4e3d74517fe7e196f43fcd80b2bc72d0883b33fcc268f26c571879b07b72cc6bfe599f70e92cb333f21d13ac47cd635907034ff353a462c1ed5ee6325cb6227636fffc4a673f4248d4f627b707a24ed29e703d14a4", @nested={0x4, 0x130}]}, @generic="d44595f94e455f928d64b7fd52470a90a0a367a16d306871775e392bb0d0cb9e89ce31b4efcf78ce09ed1e198f6b8f5c03dd15fcf9473bf02d25ca2dd4186308bde5bd330889c0c73ed3c86fb760906fbb1f471f142163388dbb529df2646f48299cf7574cfde78b5a5ed554cf43a867ffc7c0482646c33752ab704f8de1587f4492747b005cf765b799cd392be60c8b6d90289bd5ba7252bebe48cd13802656f1f437ec44ea4df2f5413c612e210a747ea42a2a9e2f8620353556cf5157ed732a4afcaaa28277da7c020dc891344575ceccb0dce1bee2e9db895bec9928e00e0d916169422994"]}, 0x66c}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000009c0), r3) sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x38, r5, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4810}, 0x40000) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x80, 0x2, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x5}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xd6}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010100}}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x93}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @remote}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000000}, 0x40c1) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(r6, &(0x7f0000000e80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000c80)={0x1a8, r7, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xd8, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36795337}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xde9f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xac57}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdb14}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9e4f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xff8a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1cf629e1}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1f24}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdc3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd65f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd907}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x594e60d7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x471c2705}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6444}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x73eec56d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6287c33b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x460fc826}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd862}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2b58}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2877}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2b79}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe2e70c2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1abb}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19188ca5}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x88, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xea}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e76f2f3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xda}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b722278}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7593c2d7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e5999a9}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x53}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2c829ddf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4625c554}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4}, 0x40044) (async) r8 = accept4$inet(r2, 0x0, &(0x7f0000000ec0), 0x80800) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000f00)={0x0, 0x1, 0x1, [0x1]}, 0xa) (async) sendmsg$IEEE802154_LLSEC_GETPARAMS(r6, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd3d2ed9c766a6e85}, 0x40000) (async) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000001080), r4) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x28, r9, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x801) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) (async) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001200)=@generic={&(0x7f00000011c0)='./file0\x00', 0x0, 0x8}, 0x18) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001340)={@cgroup, 0x22, 0x1, 0x568, &(0x7f0000001240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000001280)=[0x0, 0x0, 0x0], &(0x7f00000012c0)=[0x0], &(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000013c0)={0xfffffffd, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001380)={@ifindex=r1, r10, 0x16, 0x2020, 0x0, @void, @void, @value=r12, @void, r11}, 0x20) (async) sendmsg$NL80211_CMD_LEAVE_OCB(r3, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x20, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6e}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x0) socket$unix(0x1, 0x2, 0x0) (async) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000001500), 0x40, 0x0) write$tun(r13, &(0x7f0000001540)={@void, @val={0x2, 0x0, 0xffff, 0x101, 0x1}, @llc={@llc={0x2, 0x6, "9f73", "e403e6e5ef57d39f58e57f23501089681cc205e776fe9907efed613e760cdd7f4cff7bf2c54f99c19768deec975115dc3139979274557f1b21fbb8dfe30029c94d49c9da46fa9555847a24569ca9082f2ce6e6b11ebd9ecbe0eb060285d44009a7c245fd295b25daee390275c1db15a8975eea77ae65cc90a358149fa2ad7860227bb904ab516779cae8eaef14fbe79b8e2cc277"}}}, 0xa2) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001640), r2) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000001780)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x48, r14, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x4c}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x173}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x169}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3df}]}, 0x48}}, 0x0) 154.594482ms ago: executing program 4 (id=5690): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) (async) write(r0, &(0x7f0000000080)="34764ad966f016a0bb94b5df18175e813f5ab05a9133c877b6d952b859983be570d8980dc5aa6c34df35486ff5f6542cc9b79000c113753724ec7ee4b6c848a468f83c54333d143a7209f5a5d1b21cc3fb90db312254b9a64ff540f4dc70cd86c4fc92", 0x63) (async) close(r2) (async) write(r0, 0x0, 0x0) openat$cgroup_ro(r2, 0x0, 0x275a, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x11, r2, 0x20000) (async, rerun: 32) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) (async) r4 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r4, 0x0) 0s ago: executing program 1 (id=5691): r0 = socket(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040600000000f309a1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4ee0000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd400d65afd67580ae4edef5d2defd5ccae8d3fb7c27a1059ae31c6", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x400, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xfffc}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x1d}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): ous mode [ 569.227357][T22189] syzkaller0: entered allmulticast mode [ 569.301879][ T134] net_ratelimit: 29 callbacks suppressed [ 569.301903][ T134] bond4: (slave dummy0): failed to get link speed/duplex [ 569.324341][ T7286] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 569.431561][ T7286] bond4: (slave dummy0): failed to get link speed/duplex [ 569.451732][ T134] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 569.542093][T20435] bond4: (slave dummy0): failed to get link speed/duplex [ 569.622687][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 569.660552][T22207] xt_hashlimit: size too large, truncated to 1048576 [ 569.681874][ T7286] bond4: (slave dummy0): failed to get link speed/duplex [ 569.732410][ T134] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 569.768887][T22212] netlink: 'syz.3.4170': attribute type 2 has an invalid length. [ 569.802081][ T134] bond4: (slave dummy0): failed to get link speed/duplex [ 569.842854][ T7286] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 570.129083][T22231] netlink: 'syz.4.4177': attribute type 2 has an invalid length. [ 570.410252][T22249] sctp: [Deprecated]: syz.1.4184 (pid 22249) Use of struct sctp_assoc_value in delayed_ack socket option. [ 570.410252][T22249] Use struct sctp_sack_info instead [ 570.852458][T22278] syzkaller0: entered promiscuous mode [ 570.858296][T22278] syzkaller0: entered allmulticast mode [ 571.140026][T22299] IPVS: set_ctl: invalid protocol: 58 172.30.0.5:20001 [ 572.983337][T22288] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 572.984047][T22299] ip6tnl0: Caught tx_queue_len zero misconfig [ 573.172386][ T134] vlan4: left allmulticast mode [ 573.177495][ T134] geneve0: left allmulticast mode [ 573.200118][ T134] vlan4: left promiscuous mode [ 573.219985][ T134] geneve0: left promiscuous mode [ 573.232643][ T134] bridge0: port 3(vlan4) entered disabled state [ 573.313989][ T134] bridge_slave_1: left allmulticast mode [ 573.319693][ T134] bridge_slave_1: left promiscuous mode [ 573.345461][ T134] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.541339][T22350] __nla_validate_parse: 10 callbacks suppressed [ 573.541362][T22350] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.4212'. [ 573.560499][T22350] netlink: 'syz.2.4212': attribute type 1 has an invalid length. [ 573.574618][T22350] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4212'. [ 573.588074][ T134] bond1 (unregistering): (slave ip6gretap2): Releasing active interface [ 573.887342][T22364] netlink: 'syz.2.4215': attribute type 21 has an invalid length. [ 574.150586][ T134] bond0 (unregistering): left promiscuous mode [ 574.157201][ T134] bond_slave_0: left promiscuous mode [ 574.163809][ T134] bond_slave_1: left promiscuous mode [ 574.175386][ T134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 574.193478][ T134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 574.203633][ T134] bond0 (unregistering): Released all slaves [ 574.217977][ T134] bond1 (unregistering): Released all slaves [ 574.237527][ T134] bond2 (unregistering): Released all slaves [ 574.258322][ T134] bond3 (unregistering): Released all slaves [ 574.300350][ T134] bond4 (unregistering): Released all slaves [ 574.343538][ T134] bond5 (unregistering): Released all slaves [ 574.375658][ T134] bond6 (unregistering): Released all slaves [ 574.411357][T22364] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4215'. [ 574.431395][T22364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4215'. [ 574.624923][T22371] syzkaller0: entered promiscuous mode [ 574.656400][ T134] : left promiscuous mode [ 574.677562][T22386] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4218'. [ 574.715264][T22390] FAULT_INJECTION: forcing a failure. [ 574.715264][T22390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 574.731074][T22390] CPU: 1 UID: 0 PID: 22390 Comm: syz.4.4222 Not tainted syzkaller #0 PREEMPT(full) [ 574.731102][T22390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 574.731116][T22390] Call Trace: [ 574.731124][T22390] [ 574.731133][T22390] dump_stack_lvl+0xe8/0x150 [ 574.731168][T22390] should_fail_ex+0x412/0x560 [ 574.731206][T22390] _copy_from_user+0x2d/0xb0 [ 574.731232][T22390] ___sys_sendmsg+0x1c6/0x360 [ 574.731268][T22390] ? __pfx____sys_sendmsg+0x10/0x10 [ 574.731333][T22390] ? __fget_files+0x2a/0x420 [ 574.731351][T22390] ? __fget_files+0x3a0/0x420 [ 574.731380][T22390] __x64_sys_sendmsg+0x1bd/0x2a0 [ 574.731411][T22390] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 574.731452][T22390] ? __pfx_ksys_write+0x10/0x10 [ 574.731486][T22390] do_syscall_64+0x14d/0xf80 [ 574.731512][T22390] ? trace_irq_disable+0x3b/0x150 [ 574.731531][T22390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.731552][T22390] ? clear_bhb_loop+0x40/0x90 [ 574.731577][T22390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.731598][T22390] RIP: 0033:0x7f21f139c819 [ 574.731618][T22390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.731636][T22390] RSP: 002b:00007f21f21a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 574.731669][T22390] RAX: ffffffffffffffda RBX: 00007f21f1615fa0 RCX: 00007f21f139c819 [ 574.731683][T22390] RDX: 0000000000000004 RSI: 0000200000000780 RDI: 0000000000000003 [ 574.731695][T22390] RBP: 00007f21f21a0090 R08: 0000000000000000 R09: 0000000000000000 [ 574.731707][T22390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.731718][T22390] R13: 00007f21f1616038 R14: 00007f21f1615fa0 R15: 00007ffddef0ae18 [ 574.731749][T22390] [ 575.078289][T22401] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4225'. [ 575.118465][T22401] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4225'. [ 575.148277][T22403] nbd: nbd4 already in use [ 575.166258][T22403] block nbd4: NBD_DISCONNECT [ 575.171236][T22403] block nbd4: Send disconnect failed -32 [ 575.178994][T22403] block nbd4: Send disconnect failed -32 [ 575.349667][T22158] udevd[22158]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 576.766390][ T134] !¼Þ: left promiscuous mode [ 576.792125][ T7286] net_ratelimit: 16 callbacks suppressed [ 576.792146][ T7286] bond4: (slave dummy0): failed to get link speed/duplex [ 576.831913][ T7278] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 576.874472][ T134] tipc: Disabling bearer [ 576.943050][ T134] tipc: Left network mode [ 576.962404][ T7278] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 576.969880][ T7278] bond4: (slave dummy0): failed to get link speed/duplex [ 576.982393][T22415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4227'. [ 577.008327][T22415] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 577.050788][T22419] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4230'. [ 577.060721][T22415] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 577.122154][T22421] netlink: 'syz.1.4227': attribute type 1 has an invalid length. [ 577.188978][T22415] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4227'. [ 577.232813][T20435] bond4: (slave dummy0): failed to get link speed/duplex [ 577.271582][T20435] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 577.342048][ T7295] bond4: (slave dummy0): failed to get link speed/duplex [ 577.513708][ T7278] bond4: (slave dummy0): failed to get link speed/duplex [ 577.520869][ T7278] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 577.742048][T20435] bond4: (slave dummy0): failed to get link speed/duplex [ 577.910207][T22468] netlink: 'syz.2.4243': attribute type 15 has an invalid length. [ 577.954757][T22468] netlink: 'syz.2.4243': attribute type 25 has an invalid length. [ 578.011374][T22471] pim6reg1: entered allmulticast mode [ 578.104451][T22475] netlink: 'syz.1.4242': attribute type 1 has an invalid length. [ 578.264130][T22482] netlink: 'syz.0.4246': attribute type 4 has an invalid length. [ 578.316485][T22483] netlink: 'syz.0.4246': attribute type 4 has an invalid length. [ 579.131346][T22503] __nla_validate_parse: 8 callbacks suppressed [ 579.131361][T22503] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4251'. [ 579.201799][T22508] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4252'. [ 579.264575][ T134] IPVS: stop unused estimator thread 0... [ 579.522645][T22525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4258'. [ 580.008124][T22557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4268'. [ 580.115138][T22562] syzkaller0: entered promiscuous mode [ 580.135208][T22562] syzkaller0: entered allmulticast mode [ 580.160165][T22562] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4269'. [ 580.200317][T22565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4270'. [ 580.231597][T22562] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4269'. [ 580.503751][T22570] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4267'. [ 580.513497][T22570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4267'. [ 580.558702][T22581] netlink: 'syz.0.4273': attribute type 1 has an invalid length. [ 580.681719][T22590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4275'. [ 580.696377][T22581] bond6: entered promiscuous mode [ 580.711204][T22581] 8021q: adding VLAN 0 to HW filter on device bond6 [ 580.892826][T22586] 8021q: adding VLAN 0 to HW filter on device bond6 [ 580.909141][T22586] bond6: (slave wireguard2): The slave device specified does not support setting the MAC address [ 580.921286][T22586] bond6: (slave wireguard2): Setting fail_over_mac to active for active-backup mode [ 580.939962][T22586] bond6: (slave wireguard2): making interface the new active one [ 580.950285][T22586] wireguard2: entered promiscuous mode [ 580.957840][T22586] bond6: (slave wireguard2): Enslaving as an active interface with an up link [ 581.231045][T22607] netlink: 'syz.4.4281': attribute type 1 has an invalid length. [ 581.240627][T22607] nbd: error processing sock list [ 581.303237][T22614] tap0: tun_chr_ioctl cmd 2148553947 [ 581.882300][ T7278] net_ratelimit: 45 callbacks suppressed [ 581.882323][ T7278] bond4: (slave dummy0): failed to get link speed/duplex [ 581.901761][ T7278] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 582.002386][ T7278] bond4: (slave dummy0): failed to get link speed/duplex [ 582.011932][ T7278] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 582.111785][ T7295] bond4: (slave dummy0): failed to get link speed/duplex [ 582.121829][ T7295] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 582.221766][ T7295] bond4: (slave dummy0): failed to get link speed/duplex [ 582.231945][T20435] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 582.332427][ T7295] bond4: (slave dummy0): failed to get link speed/duplex [ 582.341890][T20435] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 586.962326][ T36] net_ratelimit: 82 callbacks suppressed [ 586.962363][ T36] bond4: (slave dummy0): failed to get link speed/duplex [ 586.981894][ T7286] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 587.081730][ T7286] bond4: (slave dummy0): failed to get link speed/duplex [ 587.091917][ T7286] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 587.192335][ T36] bond4: (slave dummy0): failed to get link speed/duplex [ 587.201729][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 587.301730][T20435] bond4: (slave dummy0): failed to get link speed/duplex [ 587.316160][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 587.411649][T20435] bond4: (slave dummy0): failed to get link speed/duplex [ 587.432217][T20435] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 592.031822][ T7295] net_ratelimit: 82 callbacks suppressed [ 592.031846][ T7295] bond4: (slave dummy0): failed to get link speed/duplex [ 592.051777][ T7295] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 592.151906][ T7295] bond4: (slave dummy0): failed to get link speed/duplex [ 592.162488][ T7295] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 592.261798][T20435] bond4: (slave dummy0): failed to get link speed/duplex [ 592.271778][T20435] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 592.372393][ T7286] bond4: (slave dummy0): failed to get link speed/duplex [ 592.381993][ T7295] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 592.481780][ T36] bond4: (slave dummy0): failed to get link speed/duplex [ 592.492393][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 597.111692][ T7278] net_ratelimit: 82 callbacks suppressed [ 597.111714][ T7278] bond4: (slave dummy0): failed to get link speed/duplex [ 597.132625][ T7286] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 597.232169][ T7278] bond4: (slave dummy0): failed to get link speed/duplex [ 597.242420][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 597.342116][ T7286] bond4: (slave dummy0): failed to get link speed/duplex [ 597.351684][ T7295] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 597.452485][ T36] bond4: (slave dummy0): failed to get link speed/duplex [ 597.461969][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 597.561811][ T7295] bond4: (slave dummy0): failed to get link speed/duplex [ 597.572393][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 602.202721][ T7286] net_ratelimit: 82 callbacks suppressed [ 602.202742][ T7286] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 602.221718][ T7286] bond4: (slave dummy0): failed to get link speed/duplex [ 602.322333][ T7278] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 602.331594][ T7278] bond4: (slave dummy0): failed to get link speed/duplex [ 602.431858][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 602.441610][ T7278] bond4: (slave dummy0): failed to get link speed/duplex [ 602.541698][ T7286] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 602.551727][ T7278] bond4: (slave dummy0): failed to get link speed/duplex [ 602.652336][ T7286] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 602.661778][ T7286] bond4: (slave dummy0): failed to get link speed/duplex [ 605.815792][T22632] __nla_validate_parse: 2 callbacks suppressed [ 605.815821][T22632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4283'. [ 605.846091][T22628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4283'. [ 606.114523][T22644] netlink: 'syz.0.4288': attribute type 1 has an invalid length. [ 606.131627][T22644] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4288'. [ 606.161099][T22644] Bluetooth: MGMT ver 1.23 [ 606.167142][T22648] netlink: 'syz.4.4290': attribute type 1 has an invalid length. [ 606.230239][T22648] 8021q: adding VLAN 0 to HW filter on device bond4 [ 606.238943][T22652] netlink: 'syz.1.4291': attribute type 5 has an invalid length. [ 606.440119][T22656] vlan2: entered promiscuous mode [ 606.472527][T22656] bridge0: entered promiscuous mode [ 606.572100][T22660] team0: Port device dummy0 removed [ 606.614094][T22660] bond4: (slave dummy0): making interface the new active one [ 606.628564][T22660] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 606.796742][T22672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4294'. [ 606.811022][T22661] bond4 (unregistering): (slave dummy0): Releasing active interface [ 606.824657][T22661] bond4 (unregistering): Released all slaves [ 606.853595][T22665] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4293'. [ 606.886719][T22672] veth7: entered promiscuous mode [ 607.161111][T22681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4298'. [ 607.249758][T22686] netlink: 'syz.4.4300': attribute type 4 has an invalid length. [ 607.268005][T22686] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4300'. [ 607.289902][T22686] net_ratelimit: 70 callbacks suppressed [ 607.289923][T22686] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 607.362712][T20435] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 607.393875][T20435] bond4: (slave dummy0): failed to get link speed/duplex [ 607.478120][T22697] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4304'. [ 607.491588][ T7286] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 607.533330][ T7286] bond4: (slave dummy0): failed to get link speed/duplex [ 607.612586][T20435] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 607.771991][T22717] sctp: [Deprecated]: syz.3.4307 (pid 22717) Use of struct sctp_assoc_value in delayed_ack socket option. [ 607.771991][T22717] Use struct sctp_sack_info instead [ 608.000063][T22724] netlink: 'syz.1.4311': attribute type 2 has an invalid length. [ 608.018878][T22724] netlink: 'syz.1.4311': attribute type 2 has an invalid length. [ 608.038379][T22724] netlink: 'syz.1.4311': attribute type 2 has an invalid length. [ 608.183787][ T36] bond4: (slave dummy0): failed to get link speed/duplex [ 608.191024][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 608.291657][ T7286] bond4: (slave dummy0): failed to get link speed/duplex [ 608.302323][T22730] IPVS: set_ctl: invalid protocol: 43 172.20.20.67:20000 [ 608.333956][T22730] IPVS: set_ctl: invalid protocol: 43 172.20.20.67:20000 [ 608.343520][ T7286] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 608.367716][T22730] IPVS: set_ctl: invalid protocol: 43 172.20.20.67:20000 [ 608.392281][T22730] IPVS: set_ctl: invalid protocol: 43 172.20.20.67:20000 [ 608.422264][T22730] IPVS: set_ctl: invalid protocol: 43 172.20.20.67:20000 [ 608.447574][T22730] IPVS: set_ctl: invalid protocol: 43 172.20.20.67:20000 [ 608.470650][T22730] IPVS: set_ctl: invalid protocol: 43 172.20.20.67:20000 [ 608.615922][T22730] IPVS: set_ctl: invalid protocol: 43 172.20.20.67:20000 [ 608.639189][T22730] IPVS: set_ctl: invalid protocol: 43 172.20.20.67:20000 [ 608.649235][T22730] IPVS: set_ctl: invalid protocol: 43 172.20.20.67:20000 [ 608.657664][T22730] IPVS: set_ctl: invalid protocol: 43 172.20.20.67:20000 [ 608.665323][T22730] IPVS: set_ctl: invalid protocol: 43 172.20.20.67:20000 [ 608.674391][T22730] IPVS: set_ctl: invalid protocol: 43 172.20.20.67:20000 [ 608.684399][T22730] IPVS: set_ctl: invalid protocol: 43 172.20.20.67:20000 [ 608.707384][T22730] IPVS: set_ctl: invalid protocol: 43 172.20.20.67:20000 [ 608.715127][T22730] IPVS: set_ctl: invalid protocol: 43 172.20.20.67:20000 [ 608.722908][T22730] IPVS: set_ctl: invalid protocol: 43 172.20.20.67:20000 [ 608.730253][T22730] IPVS: set_ctl: invalid protocol: 43 172.20.20.67:20000 [ 608.738056][T22730] IPVS: set_ctl: invalid protocol: 43 172.20.20.67:20000 [ 608.748469][T22730] IPVS: set_ctl: invalid protocol: 43 172.20.20.67:20000 [ 608.785300][T22721] netlink: 'syz.4.4310': attribute type 9 has an invalid length. [ 608.793736][T22721] netlink: 'syz.4.4310': attribute type 11 has an invalid length. [ 608.802680][T22721] netlink: 'syz.4.4310': attribute type 12 has an invalid length. [ 608.820882][T22721] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.4310'. [ 608.856306][T22730] IPVS: set_ctl: invalid protocol: 43 172.20.20.67:20000 [ 608.884620][T22730] IPVS: set_ctl: invalid protocol: 43 172.20.20.67:20000 [ 608.894864][T22721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4310'. [ 608.914230][T22730] IPVS: set_ctl: invalid protocol: 43 172.20.20.67:20000 [ 608.929975][T22730] IPVS: set_ctl: invalid protocol: 43 172.20.20.67:20000 [ 608.948894][T22730] IPVS: set_ctl: invalid protocol: 43 172.20.20.67:20000 [ 608.963182][T22730] IPVS: set_ctl: invalid protocol: 43 172.20.20.67:20000 [ 608.970644][T22730] IPVS: set_ctl: invalid protocol: 43 172.20.20.67:20000 [ 609.012034][T22730] IPVS: set_ctl: invalid protocol: 43 172.20.20.67:20000 [ 609.070479][T22730] IPVS: set_ctl: invalid protocol: 43 172.20.20.67:20000 [ 609.078096][T22730] IPVS: set_ctl: invalid protocol: 43 172.20.20.67:20000 [ 609.122587][T22730] IPVS: set_ctl: invalid protocol: 43 172.20.20.67:20000 [ 609.861228][T22770] Cannot find add_set index 2 as target [ 611.058264][T22829] __nla_validate_parse: 1 callbacks suppressed [ 611.058284][T22829] netlink: 192 bytes leftover after parsing attributes in process `syz.1.4337'. [ 611.577117][T22854] sctp: [Deprecated]: syz.2.4342 (pid 22854) Use of struct sctp_assoc_value in delayed_ack socket option. [ 611.577117][T22854] Use struct sctp_sack_info instead [ 611.766283][ T51] block nbd4: Receive control failed (result -32) [ 612.371974][ T7295] net_ratelimit: 55 callbacks suppressed [ 612.371995][ T7295] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 612.461750][ T7295] bond4: (slave dummy0): failed to get link speed/duplex [ 612.561671][T20435] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 612.604118][ T36] bond4: (slave dummy0): failed to get link speed/duplex [ 612.675295][T20435] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 612.712320][ T36] bond4: (slave dummy0): failed to get link speed/duplex [ 612.757936][T22907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4351'. [ 612.804179][T20435] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 612.852170][ T36] bond4: (slave dummy0): failed to get link speed/duplex [ 612.931720][ T7295] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 612.962248][ T7295] bond4: (slave dummy0): failed to get link speed/duplex [ 613.134436][T22919] 8021q: adding VLAN 0 to HW filter on device bond4 [ 613.693878][T22942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4362'. [ 614.518187][T22961] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4367'. [ 614.733936][T22964] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4368'. [ 614.745415][T22964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4368'. [ 615.371083][T22997] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4377'. [ 615.441587][T23004] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4378'. [ 615.634724][T23015] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4381'. [ 615.670389][T23018] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4381'. [ 615.807276][T23033] bond0: (slave rose0): Releasing backup interface [ 616.122573][T23050] syzkaller0: entered promiscuous mode [ 616.128155][T23050] syzkaller0: entered allmulticast mode [ 616.162821][T23052] __nla_validate_parse: 1 callbacks suppressed [ 616.162842][T23052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4390'. [ 616.317589][T23052] 8021q: adding VLAN 0 to HW filter on device bond5 [ 616.334356][T23053] macsec2: entered promiscuous mode [ 616.339859][T23053] bond5: entered promiscuous mode [ 616.349159][T23053] bond5: left promiscuous mode [ 616.533293][T23074] xt_cgroup: invalid path, errno=-2 [ 616.819278][T23092] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4403'. [ 616.946008][T23106] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4407'. [ 616.962613][T23107] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4406'. [ 617.138238][T23113] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4408'. [ 617.155678][T23115] xt_hashlimit: size too large, truncated to 1048576 [ 617.155771][T23113] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4408'. [ 617.176105][T23113] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4408'. [ 617.222961][T23117] veth0_to_bridge: entered promiscuous mode [ 617.444343][T23123] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.498131][T23123] veth0_to_bridge (unregistering): left promiscuous mode [ 617.572956][T23123] bridge_slave_0 (unregistering): left allmulticast mode [ 617.625153][T23123] bridge_slave_0 (unregistering): left promiscuous mode [ 617.667783][T23123] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.714831][T23133] syz_tun: entered promiscuous mode [ 617.720423][T23133] syz_tun: entered allmulticast mode [ 617.727307][T23133] team0: Port device syz_tun added [ 617.743899][ T7278] bridge0: port 3(team0) entered blocking state [ 617.750304][ T7278] bridge0: port 3(team0) entered forwarding state [ 617.772855][ T7286] net_ratelimit: 71 callbacks suppressed [ 617.772879][ T7286] bond4: (slave dummy0): failed to get link speed/duplex [ 617.805992][ T7286] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 617.902295][ T7280] bond4: (slave dummy0): failed to get link speed/duplex [ 617.921978][ T7280] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 618.021621][ T7286] bond4: (slave dummy0): failed to get link speed/duplex [ 618.035776][ T7278] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 618.132162][ T7286] bond4: (slave dummy0): failed to get link speed/duplex [ 618.162123][ T7286] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 618.232808][T23160] batadv_slave_1: entered promiscuous mode [ 618.241968][ T7278] bond4: (slave dummy0): failed to get link speed/duplex [ 618.250019][T23160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4424'. [ 618.271623][ T7286] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 618.295023][T23160] batadv_slave_1 (unregistering): left promiscuous mode [ 618.310019][T23160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 618.578680][ T7280] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.587959][ T7280] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.607845][ T7280] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.619896][T23180] netlink: 'syz.4.4430': attribute type 13 has an invalid length. [ 618.630748][T23180] netlink: 'syz.4.4430': attribute type 17 has an invalid length. [ 618.635852][ T7280] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.738543][T23180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.757991][T23180] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.787367][T23191] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4431'. [ 618.812882][T23189] vlan2: entered promiscuous mode [ 618.818171][T23189] dummy0: entered promiscuous mode [ 619.201905][T23210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4435'. [ 619.845693][T23256] netlink: 'syz.3.4450': attribute type 7 has an invalid length. [ 619.936848][T23261] atomic_op ffff8880289fc198 conn xmit_atomic 0000000000000000 [ 620.029671][T23267] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20003 [ 620.125706][T23269] xt_l2tp: invalid flags combination: 0 [ 620.823034][T23304] vlan2: entered allmulticast mode [ 620.834414][T23304] macvtap0: entered allmulticast mode [ 621.101772][T23325] netlink: 'syz.1.4473': attribute type 1 has an invalid length. [ 621.112814][T23326] IPVS: length: 528 != 840 [ 621.220514][T23335] netlink: 'syz.4.4476': attribute type 10 has an invalid length. [ 621.230822][T23335] netlink: 'syz.4.4476': attribute type 10 has an invalid length. [ 621.238958][T23335] __nla_validate_parse: 11 callbacks suppressed [ 621.238975][T23335] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4476'. [ 621.336827][T23343] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 621.347911][T23343] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 621.436476][ T30] audit: type=1800 audit(1775743989.175:13): pid=23347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4480" name=6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=1521 res=0 errno=0 [ 621.599177][T23349] netlink: 'syz.1.4481': attribute type 4 has an invalid length. [ 621.609410][T23349] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4481'. [ 621.637034][T23349] .`: renamed from bond0 (while UP) [ 621.935040][T23367] netlink: 'syz.0.4485': attribute type 1 has an invalid length. [ 621.997041][T23369] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4485'. [ 622.038684][T23373] netlink: 'syz.3.4488': attribute type 10 has an invalid length. [ 622.083081][T23367] 8021q: adding VLAN 0 to HW filter on device bond7 [ 622.406275][T23391] bridge_slave_1: Caught tx_queue_len zero misconfig [ 622.811740][T20435] net_ratelimit: 67 callbacks suppressed [ 622.811762][T20435] bond4: (slave dummy0): failed to get link speed/duplex [ 622.923063][T23399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4492'. [ 622.962678][ T7286] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 622.973559][T23393] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4492'. [ 623.004323][ T7286] bond4: (slave dummy0): failed to get link speed/duplex [ 623.091589][ T7278] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 623.141596][ T7295] bond4: (slave dummy0): failed to get link speed/duplex [ 623.211641][ T134] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 623.252101][ T7295] bond4: (slave dummy0): failed to get link speed/duplex [ 623.321627][ T7295] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 623.361634][ T134] bond4: (slave dummy0): failed to get link speed/duplex [ 623.431665][ T7295] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 623.552603][T23425] IPVS: set_ctl: invalid protocol: 92 172.30.0.4:0 [ 623.590766][T23433] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4502'. [ 623.780013][T23436] netlink: 75 bytes leftover after parsing attributes in process `syz.1.4504'. [ 623.914869][T23438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4505'. [ 624.238130][T23448] syzkaller0: entered promiscuous mode [ 624.263157][T23448] syzkaller0: entered allmulticast mode [ 624.306435][T23448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4507'. [ 624.403722][T23454] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4509'. [ 624.550195][T23458] batman_adv: batadv0: Adding interface: gretap1 [ 624.569770][T23458] batman_adv: batadv0: The MTU of interface gretap1 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.642189][T23458] batman_adv: batadv0: Interface activated: gretap1 [ 624.782586][T23464] syzkaller0: entered promiscuous mode [ 624.789394][T23464] syzkaller0: entered allmulticast mode [ 624.820270][T23468] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 627.395408][T23514] netlink: 'syz.2.4524': attribute type 1 has an invalid length. [ 627.396201][T23504] wg1: entered promiscuous mode [ 627.410837][T23504] wg1: entered allmulticast mode [ 627.481984][T23509] __nla_validate_parse: 1 callbacks suppressed [ 627.482006][T23509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4523'. [ 627.513582][T23523] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4524'. [ 627.536581][T23521] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 627.549081][T23521] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 627.638541][T23523] bond6: (slave bridge5): Enslaving as an active interface with a down link [ 627.663173][T23514] macvlan2: entered promiscuous mode [ 627.668554][T23514] macvlan2: entered allmulticast mode [ 627.676770][T23514] bond6: entered promiscuous mode [ 627.683419][T23514] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 627.696770][T23514] bond6: left promiscuous mode [ 627.856654][T23535] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4528'. [ 627.866993][ T134] net_ratelimit: 27 callbacks suppressed [ 627.867014][ T134] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 627.911786][ T36] bond4: (slave dummy0): failed to get link speed/duplex [ 627.959974][T23542] xt_bpf: check failed: parse error [ 627.962432][T23541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4531'. [ 627.975003][T23541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4531'. [ 627.984636][T23541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4531'. [ 627.994840][T23544] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4529'. [ 627.995375][T23541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4531'. [ 628.014766][T23541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4531'. [ 628.024197][T23541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4531'. [ 628.034923][T23544] syzkaller0: entered promiscuous mode [ 628.040601][T23544] syzkaller0: entered allmulticast mode [ 628.050820][T23544] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1500) ! [ 628.062619][ T134] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 628.091726][ T134] bond4: (slave dummy0): failed to get link speed/duplex [ 628.181846][ T7286] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 628.211623][ T134] bond4: (slave dummy0): failed to get link speed/duplex [ 628.292446][ T7286] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 628.322424][ T7286] bond4: (slave dummy0): failed to get link speed/duplex [ 628.392792][T23563] bridge0: port 3(team0) entered disabled state [ 628.421538][T20435] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 628.442081][ T7286] bond4: (slave dummy0): failed to get link speed/duplex [ 628.783694][T23579] netlink: 'syz.3.4542': attribute type 5 has an invalid length. [ 628.842820][T23583] netlink: 'syz.4.4544': attribute type 2 has an invalid length. [ 629.057268][T23592] netlink: 'syz.3.4549': attribute type 93 has an invalid length. [ 629.123088][T23597] ip6gre1: entered promiscuous mode [ 629.383974][T23612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.414383][T23617] netlink: 'syz.3.4556': attribute type 1 has an invalid length. [ 629.461098][T23617] 8021q: adding VLAN 0 to HW filter on device bond3 [ 629.689169][T23634] 8021q: adding VLAN 0 to HW filter on device bond4 [ 629.712480][T23634] macsec1: entered allmulticast mode [ 629.717995][T23634] bond4: entered allmulticast mode [ 630.043721][T23651] netem: incorrect ge model size [ 630.049492][T23651] netem: change failed [ 630.057069][T23657] netlink: 'syz.3.4566': attribute type 1 has an invalid length. [ 630.065681][T23655] SET target dimension over the limit! [ 630.114210][T23653] ipvlan2: entered promiscuous mode [ 630.218749][T23657] 8021q: adding VLAN 0 to HW filter on device bond5 [ 630.340338][T23660] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 630.350404][T23660] bond5: (slave batadv1): making interface the new active one [ 630.368235][T23660] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 630.610964][T23686] netlink: 'syz.0.4572': attribute type 1 has an invalid length. [ 631.086641][T23664] bond5 (unregistering): (slave batadv1): Releasing active interface [ 631.102612][T23664] bond5 (unregistering): Released all slaves [ 631.135969][T23680] bridge_slave_1: left allmulticast mode [ 631.142072][T23680] bridge_slave_1: left promiscuous mode [ 631.148160][T23680] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.168333][T23680] bond0: (slave bond_slave_0): Releasing backup interface [ 631.179184][T23680] bond0: (slave bond_slave_1): Releasing backup interface [ 631.207502][T23680] team0: Failed to send options change via netlink (err -105) [ 631.222732][T23680] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 631.247813][T23680] team0: Port device team_slave_0 removed [ 631.256493][T23680] team0: Failed to send options change via netlink (err -105) [ 631.264632][T23680] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 631.277098][T23680] team0: Port device team_slave_1 removed [ 631.290216][T23683] team0: Mode changed to "broadcast" [ 632.294534][T23730] bond7: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 632.423825][T23739] netlink: 'syz.1.4584': attribute type 4 has an invalid length. [ 632.514501][T23742] netlink: 'syz.1.4584': attribute type 4 has an invalid length. [ 632.538535][T23745] __nla_validate_parse: 11 callbacks suppressed [ 632.538554][T23745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4585'. [ 632.554401][T23743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4585'. [ 632.567539][T23730] bond7 (unregistering): Released all slaves [ 632.858612][T23748] netlink: 'syz.0.4586': attribute type 1 has an invalid length. [ 632.911910][ T7286] net_ratelimit: 34 callbacks suppressed [ 632.911933][ T7286] bond4: (slave dummy0): failed to get link speed/duplex [ 632.960783][T23761] netlink: 'syz.3.4589': attribute type 10 has an invalid length. [ 632.978987][T23761] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4589'. [ 633.198874][T23758] batman_adv: batadv0: Interface deactivated: gretap1 [ 633.225764][T23761] hsr0: entered promiscuous mode [ 633.234367][T23761] bridge0: port 1(hsr0) entered blocking state [ 633.241001][T23761] bridge0: port 1(hsr0) entered disabled state [ 633.248260][T23761] hsr0: entered allmulticast mode [ 633.254061][T23761] hsr_slave_0: entered allmulticast mode [ 633.259904][T23761] hsr_slave_1: entered allmulticast mode [ 633.270721][T23761] bridge0: port 1(hsr0) entered blocking state [ 633.277139][T23761] bridge0: port 1(hsr0) entered listening state [ 633.296708][ T7286] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.307139][ T7286] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 633.326927][ T7286] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.348700][ T7286] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 633.396220][ T7286] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.407445][ T7286] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 633.417072][ T7286] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.426724][ T7286] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 633.427687][ T30] audit: type=1804 audit(1775744001.165:14): pid=23774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4592" name="/newroot/239/memory.events" dev="tmpfs" ino=1238 res=1 errno=0 [ 633.475945][ T30] audit: type=1800 audit(1775744001.165:15): pid=23774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4592" name="memory.events" dev="tmpfs" ino=1238 res=0 errno=0 [ 633.601640][ T134] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 633.621917][ T134] bond4: (slave dummy0): failed to get link speed/duplex [ 633.640625][ T30] audit: type=1804 audit(1775744001.215:16): pid=23774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.4592" name="/newroot/239/memory.events" dev="tmpfs" ino=1238 res=1 errno=0 [ 633.705704][T23787] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 633.713090][T23787] IPv6: NLM_F_CREATE should be set when creating new route [ 633.720347][T23787] IPv6: NLM_F_CREATE should be set when creating new route [ 633.741201][T23788] netlink: 'syz.2.4595': attribute type 10 has an invalid length. [ 633.758799][T23788] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4595'. [ 633.781736][ T7295] bond4: (slave dummy0): failed to get link speed/duplex [ 633.793536][ T7295] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 633.992313][ T7286] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 634.031805][ T7286] bond4: (slave dummy0): failed to get link speed/duplex [ 634.141591][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 634.157066][ T36] bond4: (slave dummy0): failed to get link speed/duplex [ 634.205019][T23824] syzkaller1: entered promiscuous mode [ 634.251585][T23824] syzkaller1: entered allmulticast mode [ 634.272243][ T7295] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 634.604378][T23844] netlink: 'syz.1.4603': attribute type 61 has an invalid length. [ 634.750785][T23853] netlink: 'syz.1.4603': attribute type 1 has an invalid length. [ 634.860266][T23853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 634.869897][T23864] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4605'. [ 635.164782][T23826] sctp: [Deprecated]: syz.0.4600 (pid 23826) Use of struct sctp_assoc_value in delayed_ack socket option. [ 635.164782][T23826] Use struct sctp_sack_info instead [ 636.023160][T23914] netlink: 'syz.3.4616': attribute type 21 has an invalid length. [ 636.081680][ T5938] IPVS: starting estimator thread 0... [ 636.191605][T23924] IPVS: using max 27 ests per chain, 64800 per kthread [ 636.270116][T23931] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4619'. [ 636.335281][T23934] syzkaller1: entered promiscuous mode [ 636.356370][T23931] sctp: [Deprecated]: syz.0.4619 (pid 23931) Use of int in max_burst socket option. [ 636.356370][T23931] Use struct sctp_assoc_value instead [ 636.381647][T23934] syzkaller1: entered allmulticast mode [ 636.460810][T23941] sctp: [Deprecated]: syz.0.4619 (pid 23941) Use of struct sctp_assoc_value in delayed_ack socket option. [ 636.460810][T23941] Use struct sctp_sack_info instead [ 636.555435][T23949] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4619'. [ 636.617943][T23957] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4622'. [ 636.627542][T23957] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4622'. [ 636.685467][T23960] netlink: 'syz.4.4625': attribute type 1 has an invalid length. [ 636.771051][T23960] bond4: entered promiscuous mode [ 636.777375][T23960] 8021q: adding VLAN 0 to HW filter on device bond4 [ 636.797296][T23965] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 636.809896][T23965] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 636.820950][T23965] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 636.856820][T23960] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 636.871255][T23960] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 636.917352][T23970] bridge0: port 4(vlan3) entered blocking state [ 636.924405][T23970] bridge0: port 4(vlan3) entered disabled state [ 636.931075][T23970] vlan3: entered allmulticast mode [ 636.936898][T23970] geneve0: entered allmulticast mode [ 636.944575][T23970] vlan3: entered promiscuous mode [ 636.949727][T23970] geneve0: entered promiscuous mode [ 637.165448][T23988] IPVS: set_ctl: invalid protocol: 160 172.30.1.1:20001 [ 637.424287][T24003] xfrm0: entered promiscuous mode [ 637.438309][T24003] xfrm0: entered allmulticast mode [ 637.459517][T24006] sctp: [Deprecated]: syz.2.4636 (pid 24006) Use of struct sctp_assoc_value in delayed_ack socket option. [ 637.459517][T24006] Use struct sctp_sack_info instead [ 637.493415][T24003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4634'. [ 637.526750][T24003] team_slave_0 (unregistering): left promiscuous mode [ 637.533813][T24003] team_slave_0 (unregistering): left allmulticast mode [ 637.548214][T24003] team0: Port device team_slave_0 removed [ 637.866634][T24023] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4639'. [ 637.903130][T24023] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4639'. [ 637.923289][ T36] net_ratelimit: 52 callbacks suppressed [ 637.923311][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 637.928625][T24023] netlink: 'syz.2.4639': attribute type 6 has an invalid length. [ 637.945289][ T36] bond4: (slave dummy0): failed to get link speed/duplex [ 637.987817][T24023] netlink: 'syz.2.4639': attribute type 5 has an invalid length. [ 637.997520][T24023] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4639'. [ 638.102467][ T7286] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 638.113316][ T7280] bond4: (slave dummy0): failed to get link speed/duplex [ 638.308076][ T7278] bond4: (slave dummy0): failed to get link speed/duplex [ 638.342210][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 638.442853][ T36] bond4: (slave dummy0): failed to get link speed/duplex [ 638.481567][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 638.516172][T24049] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4645'. [ 638.587056][ T7280] bond4: (slave dummy0): failed to get link speed/duplex [ 638.642197][ T7280] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 638.712442][T24062] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4652'. [ 638.822066][T24070] netlink: 'syz.0.4651': attribute type 1 has an invalid length. [ 638.956643][T24075] netlink: 'syz.3.4653': attribute type 2 has an invalid length. [ 639.135211][T24078] geneve0: entered promiscuous mode [ 639.235563][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.246056][ T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.263095][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.290524][ T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.535894][T24095] netlink: 'syz.0.4661': attribute type 5 has an invalid length. [ 639.709518][T24104] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4658'. [ 639.736760][T24105] netlink: 'syz.0.4662': attribute type 2 has an invalid length. [ 639.825026][T24105] netlink: 'syz.0.4662': attribute type 2 has an invalid length. [ 639.952341][T24112] netlink: 160 bytes leftover after parsing attributes in process `syz.3.4664'. [ 640.416645][T24135] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4670'. [ 640.426236][T24137] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4666'. [ 640.452460][T24136] netlink: 'syz.2.4669': attribute type 1 has an invalid length. [ 640.527078][T24126] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4666'. [ 640.552825][T24135] 8021q: adding VLAN 0 to HW filter on device bond5 [ 640.600792][T24141] bond7: (slave vxcan5): The slave device specified does not support setting the MAC address [ 640.623594][T24141] bond7: (slave vxcan5): Error -95 calling set_mac_address [ 640.708334][T24149] bond7: (slave bridge6): Enslaving as an active interface with a down link [ 640.815114][T24156] netlink: 'syz.0.4673': attribute type 1 has an invalid length. [ 640.823411][T24156] netlink: 'syz.0.4673': attribute type 2 has an invalid length. [ 642.216337][T24193] bridge0: port 1(hsr0) entered disabled state [ 642.329398][T24214] IPVS: set_ctl: invalid protocol: 16 100.1.1.1:20000 [ 642.795489][T24193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 642.830835][T24193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 643.111250][T24193] bond4: left allmulticast mode [ 643.240314][T24230] __nla_validate_parse: 8 callbacks suppressed [ 643.240338][T24230] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4689'. [ 643.272825][ T7280] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.378497][ T7280] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.383120][T24245] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4693'. [ 643.387591][ T7280] net_ratelimit: 37 callbacks suppressed [ 643.387895][ T7280] bond4: (slave dummy0): failed to get link speed/duplex [ 643.409316][T24246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4690'. [ 643.428233][T24245] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4693'. [ 643.445371][T24238] pim6reg: entered allmulticast mode [ 643.451044][T24241] pim6reg: left allmulticast mode [ 643.471005][ T7286] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.497424][ T7286] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.521179][T24249] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4693'. [ 643.551830][ T7278] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 643.567700][T24245] netlink: 'syz.4.4693': attribute type 6 has an invalid length. [ 643.576714][ T7280] bond4: (slave dummy0): failed to get link speed/duplex [ 643.610546][T24252] veth8: entered allmulticast mode [ 643.661979][ T134] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 643.691828][ T7280] bond4: (slave dummy0): failed to get link speed/duplex [ 643.764759][T24258] netlink: 'syz.3.4696': attribute type 31 has an invalid length. [ 643.829999][T24260] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4697'. [ 643.830477][T24258] xt_TPROXY: Can be used only with -p tcp or -p udp [ 643.846485][ T134] bond4: (slave dummy0): failed to get link speed/duplex [ 643.871057][T24258] netlink: 304 bytes leftover after parsing attributes in process `syz.3.4696'. [ 643.906402][T24271] tipc: Enabling of bearer rejected, failed to enable media [ 643.974664][T24259] delete_channel: no stack [ 644.006534][ T134] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 644.082474][ T134] bond4: (slave dummy0): failed to get link speed/duplex [ 644.133776][T24282] syzkaller0: entered promiscuous mode [ 644.142890][T24282] syzkaller0: entered allmulticast mode [ 644.421820][ T7280] bond4: (slave dummy0): failed to get link speed/duplex [ 644.429375][T24302] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4709'. [ 644.451390][T24302] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4709'. [ 644.461749][ T7280] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 644.492894][T24302] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4709'. [ 644.687925][T24314] syzkaller0: entered promiscuous mode [ 644.703841][T24314] syzkaller0: entered allmulticast mode [ 645.707932][T24373] netlink: 'syz.3.4725': attribute type 4 has an invalid length. [ 645.742796][T24373] netlink: 'syz.3.4725': attribute type 4 has an invalid length. [ 646.045283][T24386] bond8: (slave vxcan5): The slave device specified does not support setting the MAC address [ 646.079182][T24386] bond8: (slave vxcan5): Error -95 calling set_mac_address [ 646.274297][T24402] tipc: Started in network mode [ 646.279261][T24402] tipc: Node identity 080211000001, cluster identity 4711 [ 646.302716][T24402] tipc: Enabled bearer , priority 0 [ 646.326244][T24402] tipc: Resetting bearer [ 646.336468][T24405] netlink: 'syz.1.4737': attribute type 4 has an invalid length. [ 646.631679][T24421] hsr_slave_0: left promiscuous mode [ 646.641404][T24421] hsr_slave_1: left promiscuous mode [ 647.024428][T24446] geneve3: entered promiscuous mode [ 647.099317][T24453] IPVS: Scheduler module ip_vs_sip not found [ 647.125868][T24453] xfrm1: entered allmulticast mode [ 647.164065][T24450] syzkaller0: entered promiscuous mode [ 647.169650][T24450] syzkaller0: entered allmulticast mode [ 647.312871][ T5937] tipc: Node number set to 134418688 [ 647.643232][T24488] netlink: 'syz.0.4755': attribute type 5 has an invalid length. [ 647.771270][T24494] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 648.047174][T24508] bond5: option downdelay: invalid value (18446744073709551570) [ 648.057129][T24508] bond5: option downdelay: allowed values 0 - 2147483647 [ 648.069018][T24508] bond5 (unregistering): Released all slaves [ 648.092927][T24513] netlink: 'syz.3.4762': attribute type 1 has an invalid length. [ 648.168034][T24513] 8021q: adding VLAN 0 to HW filter on device bond5 [ 648.201315][T24517] bond5: (slave geneve2): making interface the new active one [ 648.211911][T24517] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 648.233530][ T134] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.246012][ T134] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.266676][T24521] sit1: entered promiscuous mode [ 648.275370][T24514] __nla_validate_parse: 13 callbacks suppressed [ 648.275392][T24514] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4763'. [ 648.295215][T24514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4763'. [ 648.308447][ T134] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.317950][ T134] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.454159][ T134] net_ratelimit: 42 callbacks suppressed [ 648.454182][ T134] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 648.473022][ T134] bond4: (slave dummy0): failed to get link speed/duplex [ 648.573680][T20430] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 648.592098][ T7295] bond4: (slave dummy0): failed to get link speed/duplex [ 648.717498][T24532] netlink: 'syz.1.4768': attribute type 4 has an invalid length. [ 648.771031][T24533] netlink: 'syz.1.4768': attribute type 4 has an invalid length. [ 648.806354][ T134] bond4: (slave dummy0): failed to get link speed/duplex [ 648.831680][T20430] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 648.922134][ T134] bond4: (slave dummy0): failed to get link speed/duplex [ 648.961646][ T134] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 649.061560][ T7278] bond4: (slave dummy0): failed to get link speed/duplex [ 649.096239][T24546] xt_hashlimit: size too large, truncated to 1048576 [ 649.103786][ T7295] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 649.169897][T24551] netlink: 'syz.2.4774': attribute type 1 has an invalid length. [ 649.324718][T24557] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4775'. [ 649.429279][T24564] syzkaller0: entered promiscuous mode [ 649.435838][T24564] syzkaller0: entered allmulticast mode [ 649.500035][T24568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4779'. [ 649.510596][T24568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4779'. [ 649.523098][T24568] netlink: 'syz.1.4779': attribute type 10 has an invalid length. [ 649.534933][T24568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 649.544361][T24568] .`: (slave batadv0): Enslaving as an active interface with an up link [ 649.555157][T24568] netlink: 'syz.1.4779': attribute type 10 has an invalid length. [ 649.564287][T24568] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4779'. [ 649.574024][T24568] batadv0: entered promiscuous mode [ 649.579517][T24568] batadv0: entered allmulticast mode [ 649.587988][T24568] .`: (slave batadv0): Releasing backup interface [ 649.607110][T24568] bridge0: port 5(batadv0) entered blocking state [ 649.621818][T24568] bridge0: port 5(batadv0) entered disabled state [ 649.746152][T24578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4781'. [ 649.783421][T24576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4783'. [ 649.795411][T24576] netlink: 'syz.4.4783': attribute type 3 has an invalid length. [ 649.875806][T24582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4784'. [ 649.926661][T24582] SET target dimension over the limit! [ 649.941963][ T7286] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 649.951356][ T7286] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 649.974860][T24585] netlink: 'syz.4.4785': attribute type 10 has an invalid length. [ 649.997778][T24588] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4788'. [ 650.013339][T24585] team0: Port device dummy0 added [ 650.018754][T24587] hsr0: left allmulticast mode [ 650.025479][T24587] hsr_slave_0: left allmulticast mode [ 650.032500][T24585] netlink: 'syz.4.4785': attribute type 10 has an invalid length. [ 650.040659][T24587] hsr_slave_1: left allmulticast mode [ 650.046696][T24587] bridge0: port 1(hsr0) entered disabled state [ 650.058393][T24587] bridge_slave_1: left allmulticast mode [ 650.077336][T24587] bridge_slave_1: left promiscuous mode [ 650.084535][T24587] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.206431][T24585] team0: Port device dummy0 removed [ 650.223810][T24585] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 650.302002][T24602] syzkaller0: entered promiscuous mode [ 650.319260][T24602] syzkaller0: entered allmulticast mode [ 650.913912][T24636] sctp: [Deprecated]: syz.1.4799 (pid 24636) Use of int in maxseg socket option. [ 650.913912][T24636] Use struct sctp_assoc_value instead [ 651.166425][T24641] bridge3: entered promiscuous mode [ 651.173878][T24641] bridge3: entered allmulticast mode [ 651.827249][T24669] syzkaller0: entered promiscuous mode [ 651.834545][T24669] syzkaller0: entered allmulticast mode [ 652.199956][T24677] Bluetooth: MGMT ver 1.23 [ 653.542751][ T7278] net_ratelimit: 69 callbacks suppressed [ 653.542773][ T7278] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 653.571738][ T7278] bond4: (slave dummy0): failed to get link speed/duplex [ 653.642400][T24743] __nla_validate_parse: 10 callbacks suppressed [ 653.642420][T24743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4831'. [ 653.671617][ T7295] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 653.701655][ T7278] bond4: (slave dummy0): failed to get link speed/duplex [ 653.728727][T24747] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4830'. [ 654.847769][ T7280] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 655.177290][T24766] syzkaller0: entered promiscuous mode [ 655.186557][T24766] syzkaller0: entered allmulticast mode [ 655.212604][ T7295] bond4: (slave dummy0): failed to get link speed/duplex [ 655.349270][T20430] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 655.358303][T20430] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.383995][T20430] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 655.421722][T20430] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.435935][T20430] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 655.463241][T20430] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.521677][ T7280] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 655.565343][T20430] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 655.596725][T20430] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.643206][T20430] bond4: (slave dummy0): failed to get link speed/duplex [ 655.702032][T20430] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 655.760823][T24811] netlink: 'syz.4.4844': attribute type 3 has an invalid length. [ 655.812161][ T7280] bond4: (slave dummy0): failed to get link speed/duplex [ 655.826801][T24811] nbd: nbd4 already in use [ 655.890292][T24811] block nbd4: NBD_DISCONNECT [ 655.940667][T24811] block nbd4: Send disconnect failed -32 [ 655.953873][T24811] block nbd4: shutting down sockets [ 655.976233][T24811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4844'. [ 656.266380][T24827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4847'. [ 656.312208][T24827] macvlan3: entered allmulticast mode [ 656.329982][T24827] hsr0: entered allmulticast mode [ 656.337377][T24830] netlink: 'syz.4.4849': attribute type 1 has an invalid length. [ 656.347790][T24827] hsr_slave_0: entered allmulticast mode [ 656.382771][T24827] hsr_slave_1: entered allmulticast mode [ 656.489946][T24830] 8021q: adding VLAN 0 to HW filter on device bond6 [ 656.940820][T24852] tipc: Started in network mode [ 656.950513][T24852] tipc: Node identity , cluster identity 4711 [ 656.963331][T24852] tipc: Failed to obtain node identity [ 656.968890][T24852] tipc: Enabling of bearer rejected, failed to enable media [ 657.055529][T24855] syzkaller0: entered promiscuous mode [ 657.061078][T24855] syzkaller0: entered allmulticast mode [ 657.156878][T24857] ip6tnl5: entered allmulticast mode [ 657.171012][ T7295] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 657.182083][ T7295] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 657.191896][ T29] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 657.258855][T24857] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4855'. [ 657.459874][T24870] netlink: 'syz.4.4859': attribute type 10 has an invalid length. [ 657.489693][T24874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4860'. [ 657.524062][T24875] netlink: 'syz.4.4859': attribute type 10 has an invalid length. [ 657.563542][T24870] bond0: (slave dummy0): Releasing backup interface [ 657.581196][T24870] team0: Port device dummy0 added [ 657.684679][T24875] team0: Port device dummy0 removed [ 657.715877][T24882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4861'. [ 657.729177][T24875] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 657.747385][T24882] netlink: 'syz.1.4861': attribute type 10 has an invalid length. [ 657.782507][T24876] bond6: (slave bridge0): Enslaving as an active interface with an up link [ 657.901343][T24879] macvlan0: entered promiscuous mode [ 657.907062][T24879] macvlan0: entered allmulticast mode [ 657.915188][T24879] bond6: entered promiscuous mode [ 657.920476][T24879] bridge0: entered promiscuous mode [ 657.926711][T24879] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 657.935213][T24879] bond6: left promiscuous mode [ 657.940139][T24879] bridge0: left promiscuous mode [ 657.953655][ T5937] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 657.965772][ T5937] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 657.987016][T24881] IPVS: Error connecting to the multicast addr [ 657.996114][T24882] team0: left allmulticast mode [ 658.001048][T24882] team_slave_1: left allmulticast mode [ 658.017622][T24882] syz_tun: left allmulticast mode [ 658.025133][T24882] team0: left promiscuous mode [ 658.031068][T24882] team_slave_1: left promiscuous mode [ 658.037713][T24882] syz_tun: left promiscuous mode [ 658.043782][T24882] bridge0: port 3(team0) entered disabled state [ 658.100442][T24882] 8021q: adding VLAN 0 to HW filter on device team0 [ 658.125855][T24882] .`: (slave team0): Enslaving as an active interface with an up link [ 658.216611][T24898] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4866'. [ 658.231898][T24899] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4866'. [ 658.274075][T24901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4867'. [ 658.613648][T20451] net_ratelimit: 27 callbacks suppressed [ 658.613671][T20451] bond4: (slave dummy0): failed to get link speed/duplex [ 658.663940][T24925] __nla_validate_parse: 4 callbacks suppressed [ 658.663962][T24925] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4873'. [ 658.679821][ T7295] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 658.694105][T24918] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4874'. [ 658.706900][T24925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4873'. [ 658.741853][T20430] bond4: (slave dummy0): failed to get link speed/duplex [ 658.803909][ T134] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 658.852307][ T7286] bond4: (slave dummy0): failed to get link speed/duplex [ 658.922581][ T7280] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 658.975500][ T7280] bond4: (slave dummy0): failed to get link speed/duplex [ 659.041785][ T7280] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 659.093386][ T134] bond4: (slave dummy0): failed to get link speed/duplex [ 659.106451][T24940] netlink: 542 bytes leftover after parsing attributes in process `syz.0.4876'. [ 659.152554][ T134] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 659.552275][T24964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4885'. [ 659.598180][ T30] audit: type=1107 audit(1775744027.335:17): pid=24968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 659.985068][T24985] xt_hashlimit: size too large, truncated to 1048576 [ 660.069561][T24987] syzkaller1: entered promiscuous mode [ 660.076228][T24987] syzkaller1: entered allmulticast mode [ 660.993940][T24996] netlink: 'syz.4.4894': attribute type 1 has an invalid length. [ 661.056462][T24996] bond7: entered promiscuous mode [ 661.062365][T24996] 8021q: adding VLAN 0 to HW filter on device bond7 [ 661.078550][T24998] bond7: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 661.091137][T24998] bond7: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 661.102739][T24998] bond7: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 661.165920][T24996] bond7: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 661.187231][T24996] bond7: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 661.298089][T24980] syzkaller1: entered allmulticast mode [ 661.336597][T25004] tipc: Started in network mode [ 661.352298][T25004] tipc: Node identity 7e7c557268ee, cluster identity 4711 [ 661.368757][T25004] tipc: Enabled bearer , priority 0 [ 661.389369][T25004] syzkaller0: entered promiscuous mode [ 661.395179][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 661.405174][T25004] syzkaller0: entered allmulticast mode [ 661.418657][T25007] tap0: tun_chr_ioctl cmd 1074025680 [ 661.508514][T25004] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4896'. [ 661.539493][T25004] tipc: Resetting bearer [ 661.566864][T25003] tipc: Resetting bearer [ 661.682209][T25003] tipc: Disabling bearer [ 661.768259][T23724] udevd[23724]: inotify_add_watch(7, /dev/nbd4, 10) failed: No such file or directory [ 661.924799][T25016] netlink: 'syz.4.4900': attribute type 89 has an invalid length. [ 662.046696][T25026] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 662.242246][T25032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4904'. [ 662.272332][T25032] netlink: 'syz.0.4904': attribute type 16 has an invalid length. [ 662.304731][T25032] netlink: 'syz.0.4904': attribute type 17 has an invalid length. [ 662.388424][T25032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.399518][T25032] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.416337][T25038] netlink: 'syz.1.4906': attribute type 2 has an invalid length. [ 662.730646][T25057] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4911'. [ 662.872796][T25062] netlink: 'syz.0.4912': attribute type 142 has an invalid length. [ 663.629344][ T7286] net_ratelimit: 61 callbacks suppressed [ 663.629383][ T7286] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 663.662212][ T7286] bond4: (slave dummy0): failed to get link speed/duplex [ 663.752798][T25096] IPVS: set_ctl: invalid protocol: 47 172.20.20.36:20000 [ 663.879308][T25106] bond0: entered promiscuous mode [ 663.895661][T25106] bond0: left promiscuous mode [ 664.071742][ T7286] bond4: (slave dummy0): failed to get link speed/duplex [ 664.132153][ T7286] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 664.201560][ T7286] bond4: (slave dummy0): failed to get link speed/duplex [ 664.233197][T25113] syzkaller0: entered promiscuous mode [ 664.236087][T25121] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4924'. [ 664.238744][T25113] syzkaller0: entered allmulticast mode [ 664.451793][ T7295] bond4: (slave dummy0): failed to get link speed/duplex [ 664.476590][ T7295] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 664.556023][T25136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4931'. [ 664.566128][T25136] bond0: option resend_igmp: invalid value (18446744072287664524) [ 664.584019][T25136] bond0: option resend_igmp: allowed values 0 - 255 [ 664.602987][ T7295] bond4: (slave dummy0): failed to get link speed/duplex [ 664.610595][T20451] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 664.712427][T20451] bond4: (slave dummy0): failed to get link speed/duplex [ 664.965500][T25151] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4937'. [ 664.995402][T25151] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4937'. [ 665.011293][T25151] tipc: Invalid UDP bearer configuration [ 665.011350][T25151] tipc: Enabling of bearer rejected, failed to enable media [ 665.027567][T25157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4937'. [ 665.037906][T25156] netlink: 'syz.3.4939': attribute type 1 has an invalid length. [ 665.049809][T25157] hsr_slave_0: left promiscuous mode [ 665.057841][T25157] hsr_slave_1: left promiscuous mode [ 665.078635][T25157] hsr0 (unregistering): left allmulticast mode [ 665.577447][T25173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4940'. [ 665.621233][T25173] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4940'. [ 665.785658][T25173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4940'. [ 666.024538][T25204] netlink: 'syz.1.4949': attribute type 1 has an invalid length. [ 666.039419][T25196] netem: incorrect gi model size [ 666.046041][T25203] netlink: 'syz.1.4949': attribute type 1 has an invalid length. [ 666.054534][T25196] netem: change failed [ 666.107462][T25207] bond0: (slave rose0): Enslaving as an active interface with an up link [ 666.331796][T25216] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4953'. [ 666.387546][T25218] syzkaller0: entered promiscuous mode [ 666.405863][T25218] syzkaller0: entered allmulticast mode [ 666.420727][T25220] syzkaller0: entered promiscuous mode [ 666.427427][T25220] syzkaller0: entered allmulticast mode [ 666.577584][T25227] xt_CT: No such helper "pptp" [ 666.744879][T25231] netlink: 'syz.4.4959': attribute type 5 has an invalid length. [ 666.900937][T25236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4961'. [ 666.924995][T25245] xt_hashlimit: size too large, truncated to 1048576 [ 667.564045][T25266] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 667.571531][T25266] IPv6: NLM_F_CREATE should be set when creating new route [ 667.578813][T25266] IPv6: NLM_F_CREATE should be set when creating new route [ 667.842789][T25278] netlink: 'syz.2.4971': attribute type 27 has an invalid length. [ 667.850806][T25278] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 667.901900][T25285] netlink: 'syz.1.4973': attribute type 1 has an invalid length. [ 667.950966][T25285] 8021q: adding VLAN 0 to HW filter on device bond6 [ 668.175339][T25305] syzkaller0: entered promiscuous mode [ 668.184241][T25305] syzkaller0: entered allmulticast mode [ 668.729267][T20451] net_ratelimit: 53 callbacks suppressed [ 668.729289][T20451] bond4: (slave dummy0): failed to get link speed/duplex [ 668.761645][T20451] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 668.863188][T20430] bond4: (slave dummy0): failed to get link speed/duplex [ 668.876969][T20430] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 669.013255][ T7286] bond4: (slave dummy0): failed to get link speed/duplex [ 669.146924][ T7286] bond4: (slave dummy0): failed to get link speed/duplex [ 669.172140][T20430] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 669.257104][T25356] __nla_validate_parse: 10 callbacks suppressed [ 669.257127][T25356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4992'. [ 669.273737][T20430] bond4: (slave dummy0): failed to get link speed/duplex [ 669.301553][T20430] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 669.452380][T20451] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 669.547676][T25369] xt_cluster: node mask cannot exceed total number of nodes [ 669.768007][T25387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5001'. [ 669.814349][T25390] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5002'. [ 669.892680][T25387] hsr_slave_1 (unregistering): left promiscuous mode [ 669.903531][T25396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5003'. [ 670.132094][T25408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5008'. [ 670.191667][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 670.395810][T25424] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5012'. [ 670.419907][T25419] syzkaller1: entered promiscuous mode [ 670.435688][T25419] syzkaller1: entered allmulticast mode [ 670.458863][T25424] gretap0: entered promiscuous mode [ 670.595775][T25432] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5016'. [ 670.706085][T25437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5017'. [ 670.965133][T25448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5019'. [ 671.045352][T25460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5021'. [ 671.211532][T25454] veth9: entered allmulticast mode [ 671.291034][T25454] bond9: (slave veth9): Enslaving as an active interface with an up link [ 671.337227][T25437] bond9 (unregistering): (slave veth9): Releasing backup interface [ 671.347657][T25437] bond9 (unregistering): Released all slaves [ 671.675453][T25480] bond9: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms [ 671.688282][T25480] bond9: entered promiscuous mode [ 671.693895][T25480] 8021q: adding VLAN 0 to HW filter on device bond9 [ 671.740528][T25487] syzkaller0: entered promiscuous mode [ 671.746305][T25487] syzkaller0: entered allmulticast mode [ 671.907418][T25500] netlink: 'syz.2.5032': attribute type 3 has an invalid length. [ 671.915631][T25500] netlink: 'syz.2.5032': attribute type 3 has an invalid length. [ 672.126234][T25517] ip6gretap2: entered promiscuous mode [ 672.698240][T25551] syzkaller0: entered promiscuous mode [ 672.704039][T25551] syzkaller0: entered allmulticast mode [ 672.718102][T25547] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 673.004247][T25555] nbd: socks must be embedded in a SOCK_ITEM attr [ 673.040211][T25558] nbd: nbd64 already in use [ 673.082651][T25559] block nbd64: NBD_DISCONNECT [ 673.293191][T25568] netlink: 'syz.4.5052': attribute type 1 has an invalid length. [ 673.391114][T25523] udevd[25523]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 673.564737][T25575] SET target dimension over the limit! [ 673.755382][T20430] net_ratelimit: 48 callbacks suppressed [ 673.755404][T20430] bond4: (slave dummy0): failed to get link speed/duplex [ 673.781978][T20430] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 674.098033][T25595] netlink: 'syz.4.5062': attribute type 7 has an invalid length. [ 674.131647][T25595] netlink: 'syz.4.5062': attribute type 8 has an invalid length. [ 674.313955][T25600] syzkaller0: entered promiscuous mode [ 674.321818][T25600] syzkaller0: entered allmulticast mode [ 674.358981][T20430] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 674.474029][T25603] __nla_validate_parse: 19 callbacks suppressed [ 674.474051][T25603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5063'. [ 674.590502][T25603] ip6tnl7: entered allmulticast mode [ 674.597741][ T134] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 674.833958][T20430] bond4: (slave dummy0): failed to get link speed/duplex [ 674.841193][T20430] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 674.982239][ T7278] bond4: (slave dummy0): failed to get link speed/duplex [ 675.022023][ T7295] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 675.091581][ T134] bond4: (slave dummy0): failed to get link speed/duplex [ 675.161585][ T7295] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 675.433324][T25628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5070'. [ 675.464698][T25632] netlink: 'syz.2.5071': attribute type 4 has an invalid length. [ 676.325570][T25660] netlink: 112 bytes leftover after parsing attributes in process `syz.4.5077'. [ 676.536520][T25669] netlink: 176 bytes leftover after parsing attributes in process `syz.3.5078'. [ 676.561918][T25668] netlink: 'syz.4.5079': attribute type 1 has an invalid length. [ 676.673128][T25668] bond9: entered promiscuous mode [ 676.678778][T25668] 8021q: adding VLAN 0 to HW filter on device bond9 [ 677.116984][T25692] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5084'. [ 677.249445][T25698] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5086'. [ 677.267029][T25701] netlink: 'syz.2.5085': attribute type 13 has an invalid length. [ 677.281808][T25698] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5086'. [ 677.389844][T25703] syzkaller0: entered promiscuous mode [ 677.401678][T25703] syzkaller0: entered allmulticast mode [ 677.442712][T25703] FAULT_INJECTION: forcing a failure. [ 677.442712][T25703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 677.461656][T25703] CPU: 1 UID: 0 PID: 25703 Comm: syz.4.5087 Not tainted syzkaller #0 PREEMPT(full) [ 677.461688][T25703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 677.461703][T25703] Call Trace: [ 677.461712][T25703] [ 677.461722][T25703] dump_stack_lvl+0xe8/0x150 [ 677.461757][T25703] should_fail_ex+0x412/0x560 [ 677.461794][T25703] _copy_from_iter+0x1d3/0x1670 [ 677.461829][T25703] ? __pfx__copy_from_iter+0x10/0x10 [ 677.461848][T25703] ? sock_alloc_send_pskb+0x896/0x990 [ 677.461884][T25703] ? __pfx__copy_from_iter+0x10/0x10 [ 677.461909][T25703] ? page_copy_sane+0x16a/0x270 [ 677.461932][T25703] copy_page_from_iter+0xdd/0x170 [ 677.461958][T25703] skb_copy_datagram_from_iter+0x306/0x710 [ 677.462001][T25703] packet_sendmsg+0x37ea/0x50f0 [ 677.462045][T25703] ? __lock_acquire+0x6b5/0x2cf0 [ 677.462108][T25703] ? aa_sk_perm+0x6d5/0x900 [ 677.462137][T25703] ? __pfx_packet_sendmsg+0x10/0x10 [ 677.462173][T25703] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 677.462199][T25703] ? aa_sock_msg_perm+0xf1/0x1b0 [ 677.462232][T25703] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 677.462258][T25703] ____sys_sendmsg+0x972/0x9f0 [ 677.462296][T25703] ? __pfx_____sys_sendmsg+0x10/0x10 [ 677.462334][T25703] ? import_iovec+0x73/0xa0 [ 677.462362][T25703] ___sys_sendmsg+0x2a5/0x360 [ 677.462396][T25703] ? __pfx____sys_sendmsg+0x10/0x10 [ 677.462460][T25703] ? __fget_files+0x2a/0x420 [ 677.462479][T25703] ? __fget_files+0x3a0/0x420 [ 677.462508][T25703] __x64_sys_sendmsg+0x1bd/0x2a0 [ 677.462539][T25703] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 677.462577][T25703] ? __pfx_ksys_write+0x10/0x10 [ 677.462613][T25703] do_syscall_64+0x14d/0xf80 [ 677.462640][T25703] ? trace_irq_disable+0x3b/0x150 [ 677.462658][T25703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.462679][T25703] ? clear_bhb_loop+0x40/0x90 [ 677.462703][T25703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.462724][T25703] RIP: 0033:0x7f21f139c819 [ 677.462744][T25703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 677.462762][T25703] RSP: 002b:00007f21f21a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 677.462784][T25703] RAX: ffffffffffffffda RBX: 00007f21f1615fa0 RCX: 00007f21f139c819 [ 677.462800][T25703] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 677.462813][T25703] RBP: 00007f21f21a0090 R08: 0000000000000000 R09: 0000000000000000 [ 677.462826][T25703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 677.462838][T25703] R13: 00007f21f1616038 R14: 00007f21f1615fa0 R15: 00007ffddef0ae18 [ 677.462871][T25703] [ 678.051169][T25732] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 678.405134][T25748] netlink: 'syz.4.5099': attribute type 1 has an invalid length. [ 678.465979][T25748] bond10: entered promiscuous mode [ 678.471992][T25748] 8021q: adding VLAN 0 to HW filter on device bond10 [ 678.505682][T25752] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 678.523291][T25752] bond7 (unregistering): Released all slaves [ 678.565136][T25755] bond10: (slave veth5): making interface the new active one [ 678.572702][T25755] veth5: entered promiscuous mode [ 678.578773][T25755] bond10: (slave veth5): Enslaving as an active interface with an up link [ 678.763854][T25765] net_ratelimit: 659 callbacks suppressed [ 678.763875][T25765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.795787][T25765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.810968][T25765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.820441][T25765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.828972][T25765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.840166][T25765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.852271][T25765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.860841][T25765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.870653][T25765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.879881][T25765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.959863][T25764] bond9: (slave bond_slave_1): Device is not our slave [ 678.997283][T25764] bond9: option active_slave: invalid value (bond_slave_1) [ 679.019262][T25764] bond9 (unregistering): Released all slaves [ 679.079154][T25783] netlink: 'syz.3.5107': attribute type 1 has an invalid length. [ 679.103800][T25781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5105'. [ 679.135255][T25785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5107'. [ 679.144339][T25786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5107'. [ 679.515583][T25806] __nla_validate_parse: 2 callbacks suppressed [ 679.515604][T25806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5115'. [ 679.608221][T25824] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5119'. [ 679.689835][T25830] netlink: 11548 bytes leftover after parsing attributes in process `syz.0.5121'. [ 681.157992][T25874] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5134'. [ 681.175499][T25874] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5134'. [ 681.714448][T25906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5139'. [ 681.894947][T25873] delete_channel: no stack [ 682.002329][T25914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5142'. [ 682.068671][T25917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5142'. [ 682.079108][T25917] veth1_to_bridge: entered allmulticast mode [ 682.961038][T25962] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5155'. [ 683.274220][T25975] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5160'. [ 683.495648][T25984] netlink: 'syz.0.5163': attribute type 3 has an invalid length. [ 683.861600][ T134] net_ratelimit: 698 callbacks suppressed [ 683.861621][ T134] bond4: (slave dummy0): failed to get link speed/duplex [ 683.893236][ T134] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 683.991887][ T7278] bond4: (slave dummy0): failed to get link speed/duplex [ 684.011591][ T7286] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 684.103463][T26002] syzkaller0: entered promiscuous mode [ 684.109006][T26002] syzkaller0: entered allmulticast mode [ 684.175817][ T7278] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 684.201700][ T7286] bond4: (slave dummy0): failed to get link speed/duplex [ 684.295069][ T7286] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 684.352511][ T7286] bond4: (slave dummy0): failed to get link speed/duplex [ 684.444652][T26020] netlink: 'syz.2.5176': attribute type 1 has an invalid length. [ 684.511708][ T7286] bond4: (slave dummy0): failed to get link speed/duplex [ 684.523376][T26023] __nla_validate_parse: 4 callbacks suppressed [ 684.523396][T26023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5179'. [ 684.539382][ T7286] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 684.725086][T26040] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5182'. [ 684.742438][T26040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5182'. [ 684.795083][T26040] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5182'. [ 684.846107][T26044] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 685.026359][T26050] netlink: 'syz.2.5185': attribute type 10 has an invalid length. [ 685.042143][T26047] macvtap1: entered promiscuous mode [ 685.047505][T26047] syz_tun: entered promiscuous mode [ 685.053569][T26047] macvtap1: entered allmulticast mode [ 685.059002][T26047] syz_tun: entered allmulticast mode [ 685.084719][T26047] syz_tun: left allmulticast mode [ 685.098090][T26047] syz_tun: left promiscuous mode [ 685.173122][T26051] netlink: 'syz.0.5186': attribute type 9 has an invalid length. [ 685.408211][T26069] syzkaller0: entered promiscuous mode [ 685.434086][T26069] syzkaller0: entered allmulticast mode [ 685.690462][T26079] syzkaller0: entered promiscuous mode [ 685.700829][T26079] syzkaller0: entered allmulticast mode [ 686.020948][T26101] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5197'. [ 686.039453][T26101] vlan2: entered promiscuous mode [ 686.078884][T26101] gretap0: entered promiscuous mode [ 686.376305][T26115] netlink: 'syz.3.5202': attribute type 8 has an invalid length. [ 686.442754][T26114] syzkaller0: entered promiscuous mode [ 686.452039][T26114] syzkaller0: entered allmulticast mode [ 687.050560][T26137] netlink: 'syz.2.5206': attribute type 21 has an invalid length. [ 687.471844][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 688.403433][T26131] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 688.408743][T26137] netlink: 'syz.2.5206': attribute type 6 has an invalid length. [ 688.432650][T26137] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5206'. [ 688.978514][T26167] syzkaller0: entered promiscuous mode [ 688.988351][T26167] syzkaller0: entered allmulticast mode [ 689.005191][ T7278] net_ratelimit: 37 callbacks suppressed [ 689.005212][ T7278] bond4: (slave dummy0): failed to get link speed/duplex [ 689.091809][ T7278] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 689.133238][ T7278] bond4: (slave dummy0): failed to get link speed/duplex [ 689.202567][ T134] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 689.261983][ T7278] bond4: (slave dummy0): failed to get link speed/duplex [ 689.329867][ T7286] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 689.390210][ T7295] bond4: (slave dummy0): failed to get link speed/duplex [ 689.532184][ T134] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 689.550938][ T134] bond4: (slave dummy0): failed to get link speed/duplex [ 689.631048][T26205] pimreg: left allmulticast mode [ 689.684965][T26209] x_tables: duplicate underflow at hook 2 [ 689.709510][T26210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5227'. [ 689.740154][ T134] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 690.007385][T26216] netlink: 'syz.4.5229': attribute type 1 has an invalid length. [ 690.089098][T26217] syzkaller0: entered promiscuous mode [ 690.113208][T26217] syzkaller0: entered allmulticast mode [ 690.171002][T26206] delete_channel: no stack [ 690.285199][T26227] netlink: 'syz.1.5233': attribute type 8 has an invalid length. [ 690.294448][T26227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5233'. [ 690.311007][T26227] bond0: entered promiscuous mode [ 690.317803][T26227] gretap0: entered promiscuous mode [ 690.326899][T26227] bond0: left promiscuous mode [ 690.333301][T26227] gretap0: left promiscuous mode [ 690.382130][T26231] syzkaller1: entered promiscuous mode [ 690.412592][T26231] syzkaller1: entered allmulticast mode [ 690.609155][T26237] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5237'. [ 690.618795][T26237] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5237'. [ 690.668392][T26244] ipt_REJECT: TCP_RESET invalid for non-tcp [ 691.146833][T26278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5248'. [ 691.175273][T26273] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5241'. [ 691.233611][T26285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5250'. [ 691.433454][T26292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5249'. [ 691.644544][T26296] geneve3: entered promiscuous mode [ 691.656597][T26296] geneve3: entered allmulticast mode [ 691.666854][ T7286] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 691.675503][ T7286] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 691.803655][ T7286] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 691.830000][ T7286] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 692.024480][T26308] netlink: 'syz.3.5255': attribute type 1 has an invalid length. [ 692.049517][T26308] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5255'. [ 692.102359][T26308] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5255'. [ 692.203157][T26322] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 692.864470][T26357] vlan0: entered promiscuous mode [ 693.004677][T26361] bond9: entered allmulticast mode [ 693.098467][T26363] xt_CT: No such helper "pptp" [ 694.102772][ T7280] net_ratelimit: 62 callbacks suppressed [ 694.102796][ T7280] bond4: (slave dummy0): failed to get link speed/duplex [ 694.131576][ T7280] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 694.222661][ T36] bond4: (slave dummy0): failed to get link speed/duplex [ 694.241717][ T134] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 694.342035][ T134] bond4: (slave dummy0): failed to get link speed/duplex [ 694.353569][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 694.502354][T26412] openvswitch: netlink: Flow actions attr not present in new flow. [ 694.549158][T26413] lo: entered allmulticast mode [ 694.572945][T26413] netlink: 'syz.4.5284': attribute type 8 has an invalid length. [ 694.593471][T26411] dvmrp6: entered allmulticast mode [ 694.600498][T26409] lo: left allmulticast mode [ 694.681948][ T7280] bond4: (slave dummy0): failed to get link speed/duplex [ 694.708491][ T7280] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 694.981634][ T7278] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 695.233511][T26447] __nla_validate_parse: 4 callbacks suppressed [ 695.233534][T26447] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5290'. [ 695.255731][T26450] netlink: 'syz.0.5292': attribute type 1 has an invalid length. [ 695.266665][T26451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5292'. [ 695.276680][T26451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5292'. [ 695.622370][T26466] syzkaller0: entered promiscuous mode [ 695.627917][T26466] syzkaller0: entered allmulticast mode [ 695.664754][T26469] tipc: Enabled bearer , priority 0 [ 695.691859][T26469] syzkaller0: entered promiscuous mode [ 695.697974][T26469] syzkaller0: entered allmulticast mode [ 695.785595][T26476] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5298'. [ 695.838603][T26477] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5298'. [ 695.872126][T26465] tipc: Resetting bearer [ 695.992483][T26488] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5301'. [ 696.010960][T26465] tipc: Disabling bearer [ 696.037158][T26476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5298'. [ 696.062069][T26477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5298'. [ 696.321693][T26508] netlink: 'syz.4.5305': attribute type 1 has an invalid length. [ 696.329576][T26508] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5305'. [ 697.134800][T26534] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5311'. [ 697.927915][T26575] syzkaller0: entered promiscuous mode [ 697.945635][T26575] syzkaller0: entered allmulticast mode [ 697.983353][T20430] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 697.993213][T20430] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 698.026373][T20430] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 698.093238][T26594] netlink: 'syz.1.5327': attribute type 1 has an invalid length. [ 698.235582][T20430] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 698.419215][T26603] bond7: (slave geneve3): making interface the new active one [ 698.433720][T26603] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 698.450172][ T7295] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 698.474606][ T7295] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 698.537229][ T7295] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 698.549463][ T7295] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 698.635304][T26627] netlink: 'syz.3.5335': attribute type 1 has an invalid length. [ 698.721088][T26634] Unknown options in mask 6 [ 699.150171][T26650] bridge5: entered promiscuous mode [ 699.313829][T20430] net_ratelimit: 45 callbacks suppressed [ 699.313851][T20430] bond4: (slave dummy0): failed to get link speed/duplex [ 699.351744][T20430] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 699.451771][ T134] bond4: (slave dummy0): failed to get link speed/duplex [ 699.472071][T20430] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 699.496970][T26665] netlink: 'syz.2.5344': attribute type 16 has an invalid length. [ 699.565388][ T7280] bond4: (slave dummy0): failed to get link speed/duplex [ 699.581744][ T7280] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 699.683142][ T7295] bond4: (slave dummy0): failed to get link speed/duplex [ 699.696109][T26685] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 699.810019][T26688] bond10: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 699.867523][T26688] bond10 (unregistering): Released all slaves [ 699.941890][ T7280] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 699.958405][ T7286] bond4: (slave dummy0): failed to get link speed/duplex [ 700.097581][T26711] syzkaller0: entered allmulticast mode [ 700.111519][T26711] tipc: Enabled bearer , priority 0 [ 700.167296][T26715] tipc: Enabling of bearer rejected, already enabled [ 700.351355][T26701] tipc: Disabling bearer [ 700.377548][T26724] __nla_validate_parse: 9 callbacks suppressed [ 700.377568][T26724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5357'. [ 700.402846][T26724] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5357'. [ 700.572805][T26730] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5360'. [ 700.757352][T26730] netlink: 324 bytes leftover after parsing attributes in process `syz.4.5360'. [ 700.887219][T26739] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5363'. [ 701.227905][T26757] xt_NFQUEUE: number of total queues is 0 [ 701.280702][T26762] xt_NFQUEUE: number of total queues is 0 [ 701.421977][T26766] x_tables: duplicate underflow at hook 1 [ 701.448823][T26768] netlink: 'syz.2.5372': attribute type 2 has an invalid length. [ 701.484153][T26768] : entered promiscuous mode [ 701.687916][T26786] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5377'. [ 701.815595][T26789] bridge6: entered allmulticast mode [ 702.086079][T26801] netlink: 'syz.1.5380': attribute type 11 has an invalid length. [ 702.136695][T26794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 702.371244][T26805] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5381'. [ 702.590681][T26837] dvmrp6: left allmulticast mode [ 702.604256][T26836] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5388'. [ 702.682621][T26824] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5388'. [ 703.119585][T26877] netlink: 'syz.3.5401': attribute type 2 has an invalid length. [ 703.148787][T26877] netlink: 'syz.3.5401': attribute type 2 has an invalid length. [ 703.166905][T26877] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5401'. [ 704.002064][T26917] IPVS: Unknown mcast interface: bridge_slave_0 [ 704.336334][T26926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 704.350102][T26926] net_ratelimit: 69 callbacks suppressed [ 704.350117][T26926] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 704.478608][T26927] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 704.516841][T20435] bond4: (slave dummy0): failed to get link speed/duplex [ 704.524861][ T7286] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 704.534520][ T2157] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 704.682831][ T7295] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 704.732308][ T7295] bond4: (slave dummy0): failed to get link speed/duplex [ 704.783482][ T2157] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 704.803317][ T7286] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 704.842127][ T7286] bond4: (slave dummy0): failed to get link speed/duplex [ 704.923195][T20451] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 704.962759][T20451] bond4: (slave dummy0): failed to get link speed/duplex [ 704.976412][T20435] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 705.055543][T26958] netlink: 'syz.0.5425': attribute type 4 has an invalid length. [ 705.094315][T26958] netlink: 'syz.0.5425': attribute type 4 has an invalid length. [ 705.257732][T26960] syzkaller0: entered promiscuous mode [ 705.308049][T26971] netlink: 'syz.1.5429': attribute type 5 has an invalid length. [ 707.270126][T20451] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 707.291731][T20451] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 707.641702][T24234] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 707.773386][T27009] tipc: Enabling of bearer rejected, failed to enable media [ 708.073643][T27020] netlink: 'syz.1.5439': attribute type 32 has an invalid length. [ 708.170089][T27030] __nla_validate_parse: 5 callbacks suppressed [ 708.170109][T27030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5441'. [ 708.207012][T27033] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5443'. [ 708.314807][T27041] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5445'. [ 708.788269][T27060] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5449'. [ 708.803973][T27060] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 709.373144][ T7295] net_ratelimit: 33 callbacks suppressed [ 709.373164][ T7295] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 709.393960][ T7295] bond4: (slave dummy0): failed to get link speed/duplex [ 709.511721][T27098] IPVS: length: 24 != 4728 [ 709.513496][T20451] bond4: (slave dummy0): failed to get link speed/duplex [ 709.526293][T27098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5459'. [ 709.543804][T20451] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 709.634492][T20451] bond4: (slave dummy0): failed to get link speed/duplex [ 709.653931][ T7295] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 709.753186][ T7295] bond4: (slave dummy0): failed to get link speed/duplex [ 709.781189][T27108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5462'. [ 709.791701][ T7295] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 709.864243][ T7295] bond4: (slave dummy0): failed to get link speed/duplex [ 709.912928][T20451] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 709.937442][T27112] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5464'. [ 709.968174][T27112] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5464'. [ 709.988926][T27112] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5464'. [ 710.197201][T27124] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5467'. [ 710.383233][T27124] bond10: entered promiscuous mode [ 710.389518][T27124] 8021q: adding VLAN 0 to HW filter on device bond10 [ 710.435841][T27128] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 710.469236][T27137] 8021q: adding VLAN 0 to HW filter on device bond10 [ 710.480737][T27137] bond10: (slave vcan1): The slave device specified does not support setting the MAC address [ 710.492933][T27137] bond10: (slave vcan1): Error -95 calling set_mac_address [ 711.218562][T27174] mac80211_hwsim hwsim43 syzkaller0: Caught tx_queue_len zero misconfig [ 711.471577][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 712.183760][T27216] xt_TCPMSS: Only works on TCP SYN packets [ 712.287387][T27224] netlink: 'syz.4.5488': attribute type 1 has an invalid length. [ 713.017458][T27266] : entered promiscuous mode [ 713.369534][T27290] __nla_validate_parse: 6 callbacks suppressed [ 713.369556][T27290] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5505'. [ 713.645759][T27307] netlink: 'syz.4.5508': attribute type 4 has an invalid length. [ 713.757392][T27310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5508'. [ 713.957801][T27317] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5510'. [ 714.036982][T27316] vlan4: entered promiscuous mode [ 714.043197][T27316] bridge0: entered promiscuous mode [ 714.300168][T27335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5516'. [ 714.379661][T27335] dvmrp0: entered allmulticast mode [ 714.402233][ T7280] net_ratelimit: 59 callbacks suppressed [ 714.402258][ T7280] bond4: (slave dummy0): failed to get link speed/duplex [ 714.435836][T27344] netlink: 'syz.0.5517': attribute type 1 has an invalid length. [ 714.443769][ T7286] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 714.562493][T27344] bond11: entered promiscuous mode [ 714.568140][T27344] 8021q: adding VLAN 0 to HW filter on device bond11 [ 714.608823][T27347] 8021q: adding VLAN 0 to HW filter on device bond11 [ 714.638959][T27347] bond11: (slave wireguard3): The slave device specified does not support setting the MAC address [ 714.655554][T27347] bond11: (slave wireguard3): Setting fail_over_mac to active for active-backup mode [ 714.673139][T27347] bond11: (slave wireguard3): making interface the new active one [ 714.683026][T27347] wireguard3: entered promiscuous mode [ 714.689820][T27364] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5523'. [ 714.699197][T27347] bond11: (slave wireguard3): Enslaving as an active interface with an up link [ 714.709449][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 714.756235][ T7295] bond4: (slave dummy0): failed to get link speed/duplex [ 714.852560][T20435] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 714.899936][T27374] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5524'. [ 714.952839][T27374] bond8: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 714.980097][T27374] bond8 (unregistering): Released all slaves [ 715.012867][ T7295] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 715.091689][ T7295] bond4: (slave dummy0): failed to get link speed/duplex [ 715.142695][ T7286] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 715.212028][ T7286] bond4: (slave dummy0): failed to get link speed/duplex [ 715.251652][ T7286] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 715.571422][T27411] netlink: 240 bytes leftover after parsing attributes in process `syz.1.5528'. [ 715.642169][T27409] tipc: Enabling of bearer rejected, failed to enable media [ 715.765038][T27416] syzkaller0: entered promiscuous mode [ 715.779037][T27416] syzkaller0: entered allmulticast mode [ 715.940498][T27425] netlink: 'syz.0.5538': attribute type 1 has an invalid length. [ 716.107821][T27434] netlink: 'syz.4.5542': attribute type 2 has an invalid length. [ 716.117138][T27433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5541'. [ 716.126658][T27434] netlink: 1696 bytes leftover after parsing attributes in process `syz.4.5542'. [ 716.156703][T27430] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5540'. [ 716.478931][T27461] netlink: 'syz.3.5550': attribute type 1 has an invalid length. [ 716.553890][T27459] netlink: 'syz.2.5549': attribute type 9 has an invalid length. [ 716.562904][T27459] netlink: 'syz.2.5549': attribute type 11 has an invalid length. [ 716.573280][T27459] netlink: 'syz.2.5549': attribute type 12 has an invalid length. [ 716.820541][ T36] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 716.830583][ T36] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 716.843391][ T36] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 716.863867][ T36] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 716.957537][T27493] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 717.230181][T27512] netlink: 'syz.2.5564': attribute type 1 has an invalid length. [ 717.322904][T27512] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address [ 717.354744][T27512] bond10: (slave vxcan1): Error -95 calling set_mac_address [ 717.448850][T27520] bond10: (slave bridge10): Enslaving as an active interface with a down link [ 717.706458][T27532] netlink: 'syz.2.5569': attribute type 13 has an invalid length. [ 717.872935][ T2157] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 718.037079][T27545] bond12: entered promiscuous mode [ 718.047221][T27545] 8021q: adding VLAN 0 to HW filter on device bond12 [ 718.372698][ T2157] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 718.580950][T27577] __nla_validate_parse: 14 callbacks suppressed [ 718.580972][T27577] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5579'. [ 718.710636][T27585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5582'. [ 718.720103][T27585] validate_nla: 5 callbacks suppressed [ 718.720124][T27585] netlink: 'syz.3.5582': attribute type 30 has an invalid length. [ 718.744251][T27587] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5580'. [ 718.754646][T27585] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5582'. [ 718.997852][T27596] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5584'. [ 719.007466][T27599] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.5583'. [ 719.034476][T27596] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5584'. [ 719.165479][T27605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5586'. [ 719.176394][T27605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5586'. [ 719.277413][T27607] : renamed from veth0_to_bond [ 719.496093][ T7286] net_ratelimit: 55 callbacks suppressed [ 719.496113][ T7286] bond4: (slave dummy0): failed to get link speed/duplex [ 719.559543][T27618] mac80211_hwsim hwsim43 wlan1: Caught tx_queue_len zero misconfig [ 719.577511][T27618] netlink: 'syz.2.5589': attribute type 10 has an invalid length. [ 719.582041][ T7286] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 719.589247][T27618] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5589'. [ 719.633818][T20435] bond4: (slave dummy0): failed to get link speed/duplex [ 719.701650][T20435] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 719.741930][ T7286] bond4: (slave dummy0): failed to get link speed/duplex [ 719.811983][T20435] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 719.859847][ T7295] bond4: (slave dummy0): failed to get link speed/duplex [ 719.896021][T27629] x_tables: duplicate underflow at hook 3 [ 719.921618][ T7286] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 719.935379][T27633] netlink: 'syz.0.5593': attribute type 13 has an invalid length. [ 719.951877][T27633] netlink: 'syz.0.5593': attribute type 11 has an invalid length. [ 719.973933][T27635] netlink: 'syz.4.5594': attribute type 1 has an invalid length. [ 720.032499][T20435] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 720.062338][ T7295] bond4: (slave dummy0): failed to get link speed/duplex [ 720.111596][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 720.119709][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 720.140775][T27642] netlink: 'syz.0.5597': attribute type 4 has an invalid length. [ 720.202979][T27643] netlink: 'syz.0.5597': attribute type 4 has an invalid length. [ 720.346881][T27659] pim6reg: entered allmulticast mode [ 720.366287][T27659] pim6reg: left allmulticast mode [ 720.497106][T27671] netlink: 'syz.1.5602': attribute type 1 has an invalid length. [ 720.684781][T27673] syzkaller0: entered promiscuous mode [ 720.690337][T27673] syzkaller0: entered allmulticast mode [ 720.837434][T27685] netlink: 'syz.4.5609': attribute type 1 has an invalid length. [ 721.064744][T27696] FAULT_INJECTION: forcing a failure. [ 721.064744][T27696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 721.081110][T27696] CPU: 0 UID: 0 PID: 27696 Comm: syz.4.5611 Not tainted syzkaller #0 PREEMPT(full) [ 721.081140][T27696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 721.081155][T27696] Call Trace: [ 721.081164][T27696] [ 721.081180][T27696] dump_stack_lvl+0xe8/0x150 [ 721.081217][T27696] should_fail_ex+0x412/0x560 [ 721.081268][T27696] _copy_from_user+0x2d/0xb0 [ 721.081296][T27696] kstrtouint_from_user+0xd6/0x180 [ 721.081332][T27696] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 721.081385][T27696] proc_fail_nth_write+0x8e/0x210 [ 721.081417][T27696] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 721.081454][T27696] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 721.081487][T27696] vfs_write+0x29a/0xb90 [ 721.081522][T27696] ? __pfx_vfs_write+0x10/0x10 [ 721.081559][T27696] ? __fget_files+0x2a/0x420 [ 721.081581][T27696] ? __fget_files+0x3a0/0x420 [ 721.081599][T27696] ? __fget_files+0x2a/0x420 [ 721.081626][T27696] ksys_write+0x150/0x270 [ 721.081651][T27696] ? __pfx_ksys_write+0x10/0x10 [ 721.081684][T27696] do_syscall_64+0x14d/0xf80 [ 721.081710][T27696] ? trace_irq_disable+0x3b/0x150 [ 721.081728][T27696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.081749][T27696] ? clear_bhb_loop+0x40/0x90 [ 721.081774][T27696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.081796][T27696] RIP: 0033:0x7f21f135d04e [ 721.081816][T27696] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 721.081834][T27696] RSP: 002b:00007f21f219ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 721.081857][T27696] RAX: ffffffffffffffda RBX: 00007f21f21a06c0 RCX: 00007f21f135d04e [ 721.081872][T27696] RDX: 0000000000000001 RSI: 00007f21f21a00a0 RDI: 0000000000000009 [ 721.081884][T27696] RBP: 00007f21f21a0090 R08: 0000000000000000 R09: 0000000000000000 [ 721.081897][T27696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 721.081908][T27696] R13: 00007f21f1616038 R14: 00007f21f1615fa0 R15: 00007ffddef0ae18 [ 721.081942][T27696] [ 722.372229][T27750] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 722.916903][T27768] bond11: entered promiscuous mode [ 722.925446][T27768] bond11: entered allmulticast mode [ 723.119869][T27777] team0: Port device syz_tun removed [ 723.128506][T27777] .`: (slave team0): Releasing backup interface [ 723.170326][T27777] bridge0: port 5(batadv0) entered disabled state [ 723.180292][T27777] bridge_slave_0: left allmulticast mode [ 723.189457][T27777] bridge_slave_0: left promiscuous mode [ 723.196459][T27777] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.207422][T27777] bridge_slave_1: left allmulticast mode [ 723.213957][T27777] bridge_slave_1: left promiscuous mode [ 723.229952][T27777] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.255285][T27777] vlan3: left promiscuous mode [ 723.266316][T27777] geneve0: left promiscuous mode [ 723.299434][T27777] .`: (slave §ÿ): Releasing backup interface [ 723.347291][T27777] .`: (slave bond_slave_1): Releasing backup interface [ 723.405856][T27777] team0: Port device team_slave_1 removed [ 723.414325][T27777] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 723.431086][T27777] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 723.441903][T27777] bond2: (slave geneve2): Releasing active interface [ 723.473962][T27777] vlan3: left allmulticast mode [ 723.479044][T27777] geneve0: left allmulticast mode [ 723.497273][T27777] bridge0: port 4(vlan3) entered disabled state [ 723.528856][T27777] bond7: (slave geneve3): Releasing active interface [ 723.593173][T20430] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 723.624790][T20430] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 723.678801][T20430] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 723.700675][T20430] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 723.810491][T27819] __nla_validate_parse: 8 callbacks suppressed [ 723.810513][T27819] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5635'. [ 723.830498][T27819] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5635'. [ 723.845799][T27819] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5635'. [ 723.857774][T27821] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5635'. [ 723.901629][T27821] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5635'. [ 723.911259][T27821] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5635'. [ 723.935324][T27827] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5637'. [ 724.041177][T27823] syzkaller0: entered promiscuous mode [ 724.048996][T27823] syzkaller0: entered allmulticast mode [ 724.360160][T27851] netlink: 'syz.1.5643': attribute type 21 has an invalid length. [ 724.401917][T27851] IPv6: NLM_F_CREATE should be specified when creating new route [ 724.409858][T27851] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 724.417248][T27851] IPv6: NLM_F_CREATE should be set when creating new route [ 724.424732][T27851] IPv6: NLM_F_CREATE should be set when creating new route [ 724.432039][T27851] IPv6: NLM_F_CREATE should be set when creating new route [ 724.447916][T27851] netlink: 'syz.1.5643': attribute type 21 has an invalid length. [ 724.458008][T27851] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 724.487322][T27851] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5643'. [ 724.508633][T27851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5643'. [ 724.518962][T27851] nbd: couldn't find a device at index 65546 [ 724.522102][T20435] net_ratelimit: 1069 callbacks suppressed [ 724.522150][T20435] bond4: (slave dummy0): failed to get link speed/duplex [ 724.533034][T27851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5643'. [ 724.561592][T20435] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 724.577942][T27859] netlink: 'syz.2.5646': attribute type 1 has an invalid length. [ 724.702038][T20430] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 724.721708][T20430] bond4: (slave dummy0): failed to get link speed/duplex [ 724.812915][T20430] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 724.831572][ T7286] bond4: (slave dummy0): failed to get link speed/duplex [ 724.924398][ T7286] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 724.941725][ T7286] bond4: (slave dummy0): failed to get link speed/duplex [ 725.021169][T27881] gre1: entered allmulticast mode [ 725.058012][T27877] syzkaller0: entered promiscuous mode [ 725.075228][T27877] syzkaller0: entered allmulticast mode [ 725.162029][ T36] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 725.190902][T20430] bond4: (slave dummy0): failed to get link speed/duplex [ 725.623413][T27911] block nbd5: server does not support multiple connections per device. [ 725.647710][T27911] block nbd5: shutting down sockets [ 725.727604][T27916] syzkaller0: entered promiscuous mode [ 725.739106][T27916] syzkaller0: entered allmulticast mode [ 726.218147][T27954] netlink: 'syz.1.5674': attribute type 4 has an invalid length. [ 726.300734][T27961] netlink: 'syz.1.5674': attribute type 4 has an invalid length. [ 726.423987][T27962] 8021q: adding VLAN 0 to HW filter on device bond13 [ 726.472942][T27954] lo: entered promiscuous mode [ 726.483108][T27954] tunl0: entered promiscuous mode [ 726.533386][T27954] gre0: entered promiscuous mode [ 726.552025][T27954] gretap0: entered promiscuous mode [ 726.569220][T27954] erspan0: entered promiscuous mode [ 726.588564][T27954] ip_vti0: entered promiscuous mode [ 726.597903][T27954] ip6_vti0: entered promiscuous mode [ 726.607148][T27954] sit0: entered promiscuous mode [ 726.616976][T27954] ip6tnl0: entered promiscuous mode [ 726.625489][T27954] ip6gre0: entered promiscuous mode [ 726.631072][T27954] syz_tun: entered promiscuous mode [ 726.639394][T27954] ip6gretap0: entered promiscuous mode [ 726.646352][T27954] bridge0: entered promiscuous mode [ 726.655340][T27954] vcan0: entered promiscuous mode [ 726.660800][T27954] .`: entered promiscuous mode [ 726.667574][T27954] team0: entered promiscuous mode [ 726.681680][T27954] dummy0: entered promiscuous mode [ 726.687339][T27954] nlmon0: entered promiscuous mode [ 726.692939][T27954] caif0: entered promiscuous mode [ 726.698366][T27954] batadv0: left allmulticast mode [ 726.704419][T27954] vxcan0: entered promiscuous mode [ 726.709964][T27954] vxcan1: entered promiscuous mode [ 726.717516][T27954] veth0: entered promiscuous mode [ 726.723031][T27954] veth1: entered promiscuous mode [ 726.728323][T27954] wg1: entered promiscuous mode [ 726.733646][T27954] wg2: entered promiscuous mode [ 726.738632][T27954] veth0_to_bridge: entered promiscuous mode [ 726.744948][T27954] bridge_slave_0: entered promiscuous mode [ 726.750979][T27954] veth1_to_bridge: entered promiscuous mode [ 726.757490][T27954] veth1_to_bridge: left allmulticast mode [ 726.763523][T27954] bridge_slave_1: entered promiscuous mode [ 726.769777][T27954] veth0_to_bond: entered promiscuous mode [ 726.776020][T27954] §ÿ: entered promiscuous mode [ 726.781297][T27954] veth1_to_bond: entered promiscuous mode [ 726.787553][T27954] bond_slave_1: entered promiscuous mode [ 726.793800][T27954] veth1_to_team: entered promiscuous mode [ 726.799871][T27954] team_slave_1: entered promiscuous mode [ 726.806038][T27954] veth0_to_batadv: entered promiscuous mode [ 726.812405][T27954] batadv_slave_0: entered promiscuous mode [ 726.818528][T27954] veth1_to_batadv: entered promiscuous mode [ 726.824904][T27954] batadv_slave_1: entered promiscuous mode [ 726.831079][T27954] xfrm0: left allmulticast mode [ 726.837688][T27954] veth0_to_hsr: entered promiscuous mode [ 726.843925][T27954] hsr_slave_0: entered promiscuous mode [ 726.849761][T27954] veth1_to_hsr: entered promiscuous mode [ 726.857411][T27954] hsr_slave_1: entered promiscuous mode [ 726.864778][T27954] veth1_virt_wifi: entered promiscuous mode [ 726.871073][T27954] veth0_virt_wifi: entered promiscuous mode [ 726.877771][T27954] virt_wifi0: entered promiscuous mode [ 726.884065][T27954] vlan1: entered promiscuous mode [ 726.889630][T27954] macvlan0: entered promiscuous mode [ 726.895554][T27954] macvlan1: entered promiscuous mode [ 726.901231][T27954] ipvlan0: entered promiscuous mode [ 726.907935][T27954] ipvlan1: entered promiscuous mode [ 726.915117][T27954] macvtap0: entered promiscuous mode [ 726.920683][T27954] macsec0: entered promiscuous mode [ 726.927246][T27954] geneve0: entered promiscuous mode [ 726.934011][T27954] geneve1: entered promiscuous mode [ 726.939482][T27954] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 726.948095][T27954] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 726.956397][T27954] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 726.965196][T27954] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 726.974544][T27954] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 726.983045][T27954] erspan1: entered promiscuous mode [ 726.988380][T27954] gre1: entered promiscuous mode [ 726.994938][T27954] >: entered promiscuous mode [ 726.999850][T27954] gre2: entered promiscuous mode [ 727.006282][T27954] bond1: entered promiscuous mode [ 727.012711][T27954] bond2: entered promiscuous mode [ 727.017905][T27954] geneve2: entered promiscuous mode [ 727.024470][T27954] veth2: entered promiscuous mode [ 727.029674][T27954] veth3: entered promiscuous mode [ 727.036115][T27954] bond3: entered promiscuous mode [ 727.044242][T27954] mac80211_hwsim hwsim48 wlan2: entered promiscuous mode [ 727.053401][T27954] veth4: entered promiscuous mode [ 727.058744][T27954] veth5: entered promiscuous mode [ 727.064967][T27954] syztnl0: entered promiscuous mode [ 727.070369][T27954] bond4: entered promiscuous mode [ 727.076305][T27954] gre3: entered promiscuous mode [ 727.081431][T27954] syztnl2: entered promiscuous mode [ 727.086815][T27954] bond5: entered promiscuous mode [ 727.094354][T27954] mac80211_hwsim hwsim49 wlan0: entered promiscuous mode [ 727.102788][T27954] syztnl1: entered promiscuous mode [ 727.108180][T27954] gtp0: entered promiscuous mode [ 727.114307][T27954] mac80211_hwsim hwsim51 wlan1: entered promiscuous mode [ 727.121574][T27954] ip6tnl1: entered promiscuous mode [ 727.126962][T27954] macvlan2: entered promiscuous mode [ 727.134323][T27954] gre4: entered promiscuous mode [ 727.139408][T27954] ip6tnl2: entered promiscuous mode [ 727.145730][T27954] ip6tnl3: entered promiscuous mode [ 727.151114][T27954] vlan2: entered promiscuous mode [ 727.157900][T27954] vlan2: left allmulticast mode [ 727.164193][T27954] macvtap0: left allmulticast mode [ 727.169500][T27954] gtp1: entered promiscuous mode [ 727.175825][T27954] bond0: entered promiscuous mode [ 727.180976][T27954] vlan3: entered promiscuous mode [ 727.186971][T27954] veth6: entered promiscuous mode [ 727.193337][T27954] veth7: entered promiscuous mode [ 727.200512][T27954] gtp2: entered promiscuous mode [ 727.208870][T27954] bridge1: entered promiscuous mode [ 727.217613][T27954] bond6: entered promiscuous mode [ 727.225547][T27954] gre5: entered promiscuous mode [ 727.232960][T27954] sit2: entered promiscuous mode [ 727.238117][T27954] bond7: entered promiscuous mode [ 727.244647][T27954] geneve3: entered promiscuous mode [ 727.250063][T27954] veth8: entered promiscuous mode [ 727.257131][T27954] veth9: entered promiscuous mode [ 727.263076][T27954] vlan0005: entered promiscuous mode [ 727.268828][T27954] dvmrp0: entered promiscuous mode [ 727.276481][T27954] ip6tnl4: entered promiscuous mode [ 727.284100][T27954] wireguard0: entered promiscuous mode [ 727.290778][T27954] gre6: entered promiscuous mode [ 727.300645][T27978] tipc: Enabling of bearer rejected, failed to enable media [ 727.398393][T27983] : entered promiscuous mode [ 727.655600][ T2157] IPVS: starting estimator thread 0... [ 727.763436][T28004] IPVS: using max 26 ests per chain, 62400 per kthread [ 727.783193][ T51] block nbd5: Receive control failed (result -1) [ 727.804065][T28012] syzkaller0: entered promiscuous mode [ 727.809617][T28012] syzkaller0: entered allmulticast mode [ 727.897347][T28016] tipc: Enabled bearer , priority 14 [ 727.952854][T28016] 0ªX¹¦À: renamed from caif0 [ 727.975986][T28016] tipc: Disabling bearer [ 727.985543][T28016] 0ªX¹¦À: entered allmulticast mode [ 728.295445][T28032] [ 728.297857][T28032] ====================================================== [ 728.304912][T28032] WARNING: possible circular locking dependency detected [ 728.311978][T28032] syzkaller #0 Not tainted [ 728.316423][T28032] ------------------------------------------------------ [ 728.323469][T28032] syz.1.5691/28032 is trying to acquire lock: [ 728.329579][T28032] ffffffff8e883780 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660 [ 728.338950][T28032] [ 728.338950][T28032] but task is already holding lock: [ 728.346349][T28032] ffff888030d6d538 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa50 [ 728.355638][T28032] [ 728.355638][T28032] which lock already depends on the new lock. [ 728.355638][T28032] [ 728.366075][T28032] [ 728.366075][T28032] the existing dependency chain (in reverse order) is: [ 728.375131][T28032] [ 728.375131][T28032] -> #7 (&idev->mc_lock){+.+.}-{4:4}: [ 728.382749][T28032] __mutex_lock+0x19f/0x1300 [ 728.387926][T28032] ip6_mc_source+0x1cc/0x17e0 [ 728.393178][T28032] do_ipv6_mcast_group_source+0x435/0x4c0 [ 728.399488][T28032] do_ipv6_setsockopt+0x16e9/0x3150 [ 728.405264][T28032] ipv6_setsockopt+0x59/0x170 [ 728.410509][T28032] do_sock_setsockopt+0x17c/0x1b0 [ 728.416104][T28032] __x64_sys_setsockopt+0x13d/0x1b0 [ 728.421879][T28032] do_syscall_64+0x14d/0xf80 [ 728.427045][T28032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.433500][T28032] [ 728.433500][T28032] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 728.441286][T28032] lock_sock_nested+0x41/0x100 [ 728.446624][T28032] inet_shutdown+0x6a/0x390 [ 728.451701][T28032] nbd_mark_nsock_dead+0x2e9/0x560 [ 728.457386][T28032] sock_shutdown+0x15e/0x260 [ 728.462576][T28032] nbd_clear_sock+0x24/0x170 [ 728.467745][T28032] nbd_config_put+0x2dd/0x580 [ 728.472991][T28032] nbd_genl_connect+0x19d5/0x1cf0 [ 728.478581][T28032] genl_family_rcv_msg_doit+0x22a/0x330 [ 728.484699][T28032] genl_rcv_msg+0x61c/0x7a0 [ 728.489773][T28032] netlink_rcv_skb+0x232/0x4b0 [ 728.495102][T28032] genl_rcv+0x28/0x40 [ 728.499650][T28032] netlink_unicast+0x80f/0x9b0 [ 728.504974][T28032] netlink_sendmsg+0x813/0xb40 [ 728.510297][T28032] ____sys_sendmsg+0x972/0x9f0 [ 728.515635][T28032] ___sys_sendmsg+0x2a5/0x360 [ 728.520880][T28032] __x64_sys_sendmsg+0x1bd/0x2a0 [ 728.526390][T28032] do_syscall_64+0x14d/0xf80 [ 728.531546][T28032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.538009][T28032] [ 728.538009][T28032] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 728.545716][T28032] __mutex_lock+0x19f/0x1300 [ 728.550888][T28032] nbd_queue_rq+0x37b/0x1100 [ 728.556045][T28032] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 728.562160][T28032] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 728.569061][T28032] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 728.575683][T28032] blk_mq_run_hw_queue+0x348/0x4f0 [ 728.581389][T28032] blk_mq_dispatch_list+0xd16/0xe10 [ 728.587154][T28032] blk_mq_flush_plug_list+0x48d/0x570 [ 728.593112][T28032] __blk_flush_plug+0x3ed/0x4d0 [ 728.598538][T28032] __submit_bio+0x28d/0x580 [ 728.603771][T28032] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 728.609978][T28032] block_read_full_folio+0x599/0x830 [ 728.615840][T28032] filemap_read_folio+0x137/0x3b0 [ 728.621424][T28032] do_read_cache_folio+0x358/0x590 [ 728.627102][T28032] read_part_sector+0xb6/0x2b0 [ 728.632436][T28032] adfspart_check_ICS+0xa5/0xa40 [ 728.637933][T28032] bdev_disk_changed+0x7ba/0x1550 [ 728.643520][T28032] blkdev_get_whole+0x380/0x510 [ 728.648938][T28032] bdev_open+0x31e/0xd30 [ 728.653749][T28032] blkdev_open+0x470/0x610 [ 728.658746][T28032] do_dentry_open+0x785/0x14e0 [ 728.664076][T28032] vfs_open+0x3b/0x340 [ 728.668709][T28032] path_openat+0x2e08/0x3860 [ 728.673872][T28032] do_file_open+0x23e/0x4a0 [ 728.678958][T28032] do_sys_openat2+0x113/0x200 [ 728.684207][T28032] __x64_sys_openat+0x138/0x170 [ 728.689616][T28032] do_syscall_64+0x14d/0xf80 [ 728.694765][T28032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.701212][T28032] [ 728.701212][T28032] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 728.708446][T28032] __mutex_lock+0x19f/0x1300 [ 728.713581][T28032] nbd_queue_rq+0xc6/0x1100 [ 728.718741][T28032] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 728.724831][T28032] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 728.731908][T28032] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 728.738426][T28032] blk_mq_run_hw_queue+0x348/0x4f0 [ 728.744077][T28032] blk_mq_dispatch_list+0xd16/0xe10 [ 728.749824][T28032] blk_mq_flush_plug_list+0x48d/0x570 [ 728.755736][T28032] __blk_flush_plug+0x3ed/0x4d0 [ 728.761126][T28032] __submit_bio+0x28d/0x580 [ 728.766251][T28032] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 728.772424][T28032] block_read_full_folio+0x599/0x830 [ 728.778253][T28032] filemap_read_folio+0x137/0x3b0 [ 728.783823][T28032] do_read_cache_folio+0x358/0x590 [ 728.789477][T28032] read_part_sector+0xb6/0x2b0 [ 728.794819][T28032] adfspart_check_ICS+0xa5/0xa40 [ 728.800320][T28032] bdev_disk_changed+0x7ba/0x1550 [ 728.805888][T28032] blkdev_get_whole+0x380/0x510 [ 728.811291][T28032] bdev_open+0x31e/0xd30 [ 728.816078][T28032] blkdev_open+0x470/0x610 [ 728.821033][T28032] do_dentry_open+0x785/0x14e0 [ 728.826336][T28032] vfs_open+0x3b/0x340 [ 728.830947][T28032] path_openat+0x2e08/0x3860 [ 728.836074][T28032] do_file_open+0x23e/0x4a0 [ 728.841379][T28032] do_sys_openat2+0x113/0x200 [ 728.846615][T28032] __x64_sys_openat+0x138/0x170 [ 728.852017][T28032] do_syscall_64+0x14d/0xf80 [ 728.857157][T28032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.863594][T28032] [ 728.863594][T28032] -> #3 (set->srcu){.+.+}-{0:0}: [ 728.870738][T28032] __synchronize_srcu+0xca/0x300 [ 728.876328][T28032] elevator_switch+0x1e8/0x7a0 [ 728.881633][T28032] elevator_change+0x2cc/0x450 [ 728.886935][T28032] elevator_set_default+0x36c/0x430 [ 728.892673][T28032] blk_register_queue+0x366/0x430 [ 728.898269][T28032] __add_disk+0x677/0xd50 [ 728.903165][T28032] add_disk_fwnode+0xfb/0x480 [ 728.908399][T28032] nbd_dev_add+0x72c/0xb50 [ 728.913447][T28032] nbd_init+0x168/0x1f0 [ 728.918146][T28032] do_one_initcall+0x250/0x8d0 [ 728.923548][T28032] do_initcall_level+0x104/0x190 [ 728.929030][T28032] do_initcalls+0x59/0xa0 [ 728.933892][T28032] kernel_init_freeable+0x2a6/0x3e0 [ 728.939725][T28032] kernel_init+0x1d/0x1d0 [ 728.944606][T28032] ret_from_fork+0x51e/0xb90 [ 728.949748][T28032] ret_from_fork_asm+0x1a/0x30 [ 728.955145][T28032] [ 728.955145][T28032] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 728.962980][T28032] __mutex_lock+0x19f/0x1300 [ 728.968113][T28032] elevator_change+0x1b3/0x450 [ 728.973422][T28032] elevator_set_none+0xb5/0x140 [ 728.978903][T28032] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 728.985267][T28032] nbd_start_device+0x17f/0xb10 [ 728.990702][T28032] nbd_genl_connect+0x165b/0x1cf0 [ 728.996271][T28032] genl_family_rcv_msg_doit+0x22a/0x330 [ 729.002366][T28032] genl_rcv_msg+0x61c/0x7a0 [ 729.007422][T28032] netlink_rcv_skb+0x232/0x4b0 [ 729.012726][T28032] genl_rcv+0x28/0x40 [ 729.017251][T28032] netlink_unicast+0x80f/0x9b0 [ 729.022549][T28032] netlink_sendmsg+0x813/0xb40 [ 729.027860][T28032] ____sys_sendmsg+0x972/0x9f0 [ 729.033172][T28032] ___sys_sendmsg+0x2a5/0x360 [ 729.038391][T28032] __x64_sys_sendmsg+0x1bd/0x2a0 [ 729.043896][T28032] do_syscall_64+0x14d/0xf80 [ 729.049045][T28032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.055490][T28032] [ 729.055490][T28032] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 729.064117][T28032] blk_alloc_queue+0x546/0x680 [ 729.069444][T28032] __blk_mq_alloc_disk+0x197/0x390 [ 729.075098][T28032] nbd_dev_add+0x499/0xb50 [ 729.080050][T28032] nbd_init+0x168/0x1f0 [ 729.084744][T28032] do_one_initcall+0x250/0x8d0 [ 729.090046][T28032] do_initcall_level+0x104/0x190 [ 729.095555][T28032] do_initcalls+0x59/0xa0 [ 729.100432][T28032] kernel_init_freeable+0x2a6/0x3e0 [ 729.106182][T28032] kernel_init+0x1d/0x1d0 [ 729.111146][T28032] ret_from_fork+0x51e/0xb90 [ 729.116343][T28032] ret_from_fork_asm+0x1a/0x30 [ 729.121684][T28032] [ 729.121684][T28032] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 729.128924][T28032] __lock_acquire+0x15a5/0x2cf0 [ 729.134326][T28032] lock_acquire+0xf0/0x2e0 [ 729.139299][T28032] fs_reclaim_acquire+0x71/0x100 [ 729.144927][T28032] __kmalloc_cache_noprof+0x40/0x660 [ 729.150793][T28032] __ipv6_dev_mc_inc+0x44f/0xa50 [ 729.156293][T28032] pndisc_constructor+0xe0/0x150 [ 729.161792][T28032] pneigh_create+0x246/0x4b0 [ 729.166928][T28032] neigh_add+0x6ea/0xf70 [ 729.171715][T28032] rtnetlink_rcv_msg+0x77e/0xbe0 [ 729.177191][T28032] netlink_rcv_skb+0x232/0x4b0 [ 729.182488][T28032] netlink_unicast+0x80f/0x9b0 [ 729.187790][T28032] netlink_sendmsg+0x813/0xb40 [ 729.193096][T28032] ____sys_sendmsg+0x972/0x9f0 [ 729.198415][T28032] ___sys_sendmsg+0x2a5/0x360 [ 729.203643][T28032] __x64_sys_sendmsg+0x1bd/0x2a0 [ 729.209126][T28032] do_syscall_64+0x14d/0xf80 [ 729.214263][T28032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.220695][T28032] [ 729.220695][T28032] other info that might help us debug this: [ 729.220695][T28032] [ 729.230953][T28032] Chain exists of: [ 729.230953][T28032] fs_reclaim --> sk_lock-AF_INET6 --> &idev->mc_lock [ 729.230953][T28032] [ 729.243589][T28032] Possible unsafe locking scenario: [ 729.243589][T28032] [ 729.251073][T28032] CPU0 CPU1 [ 729.256463][T28032] ---- ---- [ 729.261841][T28032] lock(&idev->mc_lock); [ 729.266197][T28032] lock(sk_lock-AF_INET6); [ 729.273236][T28032] lock(&idev->mc_lock); [ 729.280108][T28032] lock(fs_reclaim); [ 729.284113][T28032] [ 729.284113][T28032] *** DEADLOCK *** [ 729.284113][T28032] [ 729.292282][T28032] 3 locks held by syz.1.5691/28032: [ 729.297558][T28032] #0: ffffffff8fbca4c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 729.307001][T28032] #1: ffffffff8fcf5700 (&tbl->phash_lock){+.+.}-{4:4}, at: pneigh_create+0x4a/0x4b0 [ 729.316507][T28032] #2: ffff888030d6d538 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa50 [ 729.326206][T28032] [ 729.326206][T28032] stack backtrace: [ 729.332111][T28032] CPU: 1 UID: 0 PID: 28032 Comm: syz.1.5691 Not tainted syzkaller #0 PREEMPT(full) [ 729.332132][T28032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 729.332143][T28032] Call Trace: [ 729.332151][T28032] [ 729.332160][T28032] dump_stack_lvl+0xe8/0x150 [ 729.332186][T28032] print_circular_bug+0x2e1/0x300 [ 729.332215][T28032] check_noncircular+0x12e/0x150 [ 729.332244][T28032] __lock_acquire+0x15a5/0x2cf0 [ 729.332270][T28032] ? __mutex_lock+0x32d/0x1300 [ 729.332295][T28032] ? kernel_text_address+0xa5/0xe0 [ 729.332318][T28032] lock_acquire+0xf0/0x2e0 [ 729.332339][T28032] ? __kmalloc_cache_noprof+0x40/0x660 [ 729.332362][T28032] ? in6_dev_get+0x1a/0x290 [ 729.332387][T28032] fs_reclaim_acquire+0x71/0x100 [ 729.332407][T28032] ? __kmalloc_cache_noprof+0x40/0x660 [ 729.332426][T28032] __kmalloc_cache_noprof+0x40/0x660 [ 729.332446][T28032] ? __ipv6_dev_mc_inc+0x44f/0xa50 [ 729.332471][T28032] __ipv6_dev_mc_inc+0x44f/0xa50 [ 729.332500][T28032] pndisc_constructor+0xe0/0x150 [ 729.332521][T28032] ? __pfx_pndisc_constructor+0x10/0x10 [ 729.332542][T28032] ? pneigh_create+0x15b/0x4b0 [ 729.332561][T28032] pneigh_create+0x246/0x4b0 [ 729.332580][T28032] neigh_add+0x6ea/0xf70 [ 729.332613][T28032] ? __pfx_neigh_add+0x10/0x10 [ 729.332646][T28032] ? __pfx_neigh_add+0x10/0x10 [ 729.332667][T28032] rtnetlink_rcv_msg+0x77e/0xbe0 [ 729.332689][T28032] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 729.332707][T28032] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 729.332728][T28032] ? __lock_acquire+0x6b5/0x2cf0 [ 729.332753][T28032] netlink_rcv_skb+0x232/0x4b0 [ 729.332773][T28032] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 729.332793][T28032] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 729.332816][T28032] ? netlink_deliver_tap+0x2e/0x1b0 [ 729.332838][T28032] netlink_unicast+0x80f/0x9b0 [ 729.332857][T28032] ? __pfx_netlink_unicast+0x10/0x10 [ 729.332874][T28032] ? netlink_sendmsg+0x650/0xb40 [ 729.332892][T28032] ? skb_put+0x11b/0x210 [ 729.332914][T28032] netlink_sendmsg+0x813/0xb40 [ 729.332938][T28032] ? __pfx_netlink_sendmsg+0x10/0x10 [ 729.332958][T28032] ? aa_sock_msg_perm+0xf1/0x1b0 [ 729.332986][T28032] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 729.333008][T28032] ____sys_sendmsg+0x972/0x9f0 [ 729.333031][T28032] ? futex_unqueue+0x211/0x240 [ 729.333054][T28032] ? __pfx_____sys_sendmsg+0x10/0x10 [ 729.333081][T28032] ? import_iovec+0x73/0xa0 [ 729.333102][T28032] ___sys_sendmsg+0x2a5/0x360 [ 729.333128][T28032] ? __pfx____sys_sendmsg+0x10/0x10 [ 729.333154][T28032] ? futex_wait+0x29a/0x380 [ 729.333191][T28032] ? __fget_files+0x2a/0x420 [ 729.333205][T28032] ? __fget_files+0x3a0/0x420 [ 729.333224][T28032] __x64_sys_sendmsg+0x1bd/0x2a0 [ 729.333249][T28032] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 729.333276][T28032] ? rcu_is_watching+0x15/0xb0 [ 729.333306][T28032] do_syscall_64+0x14d/0xf80 [ 729.333328][T28032] ? trace_irq_disable+0x3b/0x150 [ 729.333345][T28032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.333362][T28032] ? clear_bhb_loop+0x40/0x90 [ 729.333381][T28032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.333399][T28032] RIP: 0033:0x7f86ce99c819 [ 729.333427][T28032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 729.333442][T28032] RSP: 002b:00007f86cf843028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 729.333460][T28032] RAX: ffffffffffffffda RBX: 00007f86cec15fa0 RCX: 00007f86ce99c819 [ 729.333473][T28032] RDX: 0000000000000004 RSI: 0000200000000940 RDI: 0000000000000004 [ 729.333484][T28032] RBP: 00007f86cea32c91 R08: 0000000000000000 R09: 0000000000000000 [ 729.333494][T28032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 729.333505][T28032] R13: 00007f86cec16038 R14: 00007f86cec15fa0 R15: 00007ffc07d7afe8 [ 729.333524][T28032] [ 729.773243][ T7286] net_ratelimit: 245 callbacks suppressed [ 729.773266][ T7286] bond4: (slave dummy0): failed to get link speed/duplex [ 729.786186][ T7286] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 729.803982][T28032] __nla_validate_parse: 12 callbacks suppressed [ 729.804005][T28032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5691'. [ 729.819321][T28032] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5691'. [ 729.828396][T28032] netlink: 'syz.1.5691': attribute type 5 has an invalid length. [ 729.842438][T28032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5691'. [ 729.851584][T28032] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5691'. [ 729.860690][T28032] netlink: 'syz.1.5691': attribute type 5 has an invalid length. [ 729.869457][ T7286] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 729.878862][ T7286] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 729.887726][ T7286] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 729.896585][ T7286] bond4: (slave dummy0): failed to get link speed/duplex [ 729.903790][ T7286] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 729.922771][ T7286] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 730.012756][ T7286] bond4: (slave dummy0): failed to get link speed/duplex [ 730.032439][T20451] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 730.122603][T20435] bond4: (slave dummy0): failed to get link speed/duplex [ 730.142499][ T7286] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 730.231998][T20451] bond4: (slave dummy0): failed to get link speed/duplex [ 730.252787][T20451] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 734.781587][T20451] net_ratelimit: 83 callbacks suppressed [ 734.781611][T20451] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 734.862367][ T7295] bond4: (slave dummy0): failed to get link speed/duplex [ 734.903902][ T7295] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 734.971892][ T7295] bond4: (slave dummy0): failed to get link speed/duplex [ 735.012524][ T7280] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 735.082658][T20430] bond4: (slave dummy0): failed to get link speed/duplex [ 735.121950][ T7280] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 735.192340][ T7295] bond4: (slave dummy0): failed to get link speed/duplex [ 735.232675][ T7295] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 735.302047][T20430] bond4: (slave dummy0): failed to get link speed/duplex [ 737.391757][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!