last executing test programs: 2.904157933s ago: executing program 0 (id=4620): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xfffe}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0xc000) (async) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0xfffffffd) (async) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000580)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x7d, &(0x7f00000004c0)={r7, @in={{0x2, 0x1, @multicast1}}, 0x5, 0x400}, 0x90) (async) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000000)={r7, 0x4, 0x5, [0x6, 0x6, 0x6, 0x9, 0x9]}, 0x12) (async) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000480)={r7, 0x9}, &(0x7f00000004c0)=0x8) (async) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r3) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r8, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp=r3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'erspan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040000}, 0x80) (async) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r10, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) unshare(0x60600) (async) r11 = socket$unix(0x1, 0x2, 0x0) bind$unix(r11, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r12 = socket$unix(0x1, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) connect$unix(r12, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) unshare(0x22020400) (async) close(r11) 2.899210116s ago: executing program 3 (id=4621): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x6}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000c851}, 0x4040080) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001e000000000000070202000000000000", @ANYRES32=0x0, @ANYBLOB="0000c000"], 0x1c}}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc) socket$netlink(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000030000000051da7b9bf0edd1029b0e00711202000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bind$netlink(r5, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x51ee2927639cc674}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x14) 2.668128007s ago: executing program 3 (id=4624): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000001f850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000001f850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$tipc(0x1e, 0x5, 0x0) (async) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) (async) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$unix(r9, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$unix(r9, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 2.504862682s ago: executing program 3 (id=4625): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x10002, 0x6}) r2 = socket$inet6(0xa, 0x805, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x5, 0xc, 0x5c}, 0x2c) getsockopt$bt_hci(r2, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000400)}, 0xc090) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r7, &(0x7f0000000600)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x19}, 0x1}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000140)="1a", 0x1}], 0x1}}, {{&(0x7f0000000a80)={0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00', 0xeb}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000340)="94", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x3, 0x10, @private0, 0xb4a9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000240)="9c", 0x1}], 0x1}}], 0x3, 0x20000040) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000300)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000003c0)=0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f0000000040)) r8 = socket(0x2, 0x80805, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000240)={r10, @in6={{0xa, 0x4e21, 0xfffffff5, @empty, 0x9}}, 0x3, 0x7}, &(0x7f0000000000)=0x90) sendmmsg(r6, &(0x7f0000000000), 0x400000000000235, 0x0) 2.452705873s ago: executing program 0 (id=4627): socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffda7, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="4000fdffffff01080000000000000000f5c40004050005040137d2df4318e2920a6173683a6e6574636500000500050002000800050005000300000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x14004084}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000400000014000500fc0000000000000000000000000000010800020005000000070006"], 0x44}}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) unshare(0x48010c00) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) close(r4) r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff7) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="6c000000100001002dbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="18430100a1a20100140003007866726d3000fb00000000000000000030001a800c000a80050008000200000020000a8014000700ff010000000000000000000000000001050008000300000005002700030000008f9d76dd807fddeb2d90de33e4fa595a"], 0x6c}, 0x1, 0x0, 0x0, 0x4000884}, 0x8000) r7 = socket(0x10, 0x3, 0x0) setsockopt$inet_buf(r7, 0x0, 0x5e, &(0x7f0000000500)="fe7cdf7ef7e595374b77a5850fe06723a7898121f5b76c93096bbbd1a575a3c8f35a8d4e976cb0a8e3f68167d5fecabc7126f0f4c90b5c2e62c0be665e8c633177750165222ed418978886", 0x4b) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRESHEX=r6, @ANYRES32=r5, @ANYRES8, @ANYRESHEX=r6], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000100f2ffffffffffffff000100000000", @ANYRESDEC=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRESDEC=r9, @ANYBLOB="0000000000000000b70200000000000085000000860000009500"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r10, 0x0, 0x8, 0x8, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'ip6tnl0\x00'}) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="240000f60660db901d5d810983635420571a0fbee36310d5f3", @ANYRES16=r11, @ANYRESDEC=r3], 0x24}, 0x1, 0x0, 0x0, 0x4008080}, 0x80) 2.235319184s ago: executing program 0 (id=4630): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1400000004000000080000000600000000000000", @ANYRES32=0x1, @ANYBLOB="000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket$inet6(0xa, 0x80002, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000380)={r2, &(0x7f0000000080)='\x00', 0x100, &(0x7f0000000140)={@align=0x81, {0x5, 0x3ca, 0x8000000, 0x9}}, 0x3, &(0x7f00000001c0), &(0x7f0000000300)=0x2}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000003c0)={r1, 0x9, 0x0, 0x2dd8e402}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="6c01000010000100000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000016000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r3, r4, 0x1, 0x0, @void}, 0x10) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000000001010400008000000000000200000004001880240001801400018008000100e000000108000200d20000010c0002800500010000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r9, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001400010028bd7000fcdbdf25022001c8", @ANYRES32=r9, @ANYBLOB="0800020096"], 0x20}}, 0x40000c0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3c0000001000030528bd70000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000016380000140012800800010067726500080002800400120008000a00", @ANYRES32=r9, @ANYBLOB="4e05930583040c61ee99a0dc88e32229376d9b477abd84d7f4f29b69e0c67bf8d764fc949b3e65a601acaff55c5a3df000902bb8ca98486ac8db050eb90fd16e216a4a2624054ff874ffd933d30abb159549ad4e"], 0x3c}}, 0x440b0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r2}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r7) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000000040)={{}, "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"}) write$nci(0xffffffffffffffff, 0x0, 0x14) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="140100002800010004000000ffdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180200000000000000000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007c00000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000010003704000069000000000000000000e24ea40891faba7292519f2344ed1e77b007ba222f2093114228984d0a679e9ff615fd559ff1f6c36f01110602dccd9ee39c62e1a18340ebbbe6b37b8ff20aa40d2174e52083963adaf6d000ea547d0ce2b5fb07188252cae4766c09e8c4957000"/127, @ANYRES32=r10, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r10, {0xb, 0xb}, {0xfff1, 0x1}, {0x9, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x0) 1.888860307s ago: executing program 4 (id=4632): pselect6(0x40, &(0x7f0000000000)={0x5e8, 0x100, 0x0, 0x9aa2, 0x5, 0xfffffffffffffff7, 0x6, 0x100}, &(0x7f0000000080)={0x9, 0x1, 0x5, 0x7, 0xfffffffffffeffff, 0x22, 0x8000, 0x1400000000}, &(0x7f00000000c0)={0xa, 0x3, 0x832, 0x7fff, 0x15b2ca9e, 0x9, 0x1, 0x10001}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x3]}, 0x8}) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x44}, 0xfffffffe}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="180000007000010025bd7000fbdbdf2507000000e39a114cc2dd14a8078238f5ed12e95b1bceceefb5e51d0eb082c441145348fa03eb16a2adb4b0ab238991761a15fac72b851214facc3c7259961916d8533af4519104ab50ebec651c396afd4eeb60300cfd3b2d77860d024385cd2be876c5e195bac8dbd9478a79921a46b2151880e86c29784a51aae0a7af7b45d11380d6382999399d6443ff0a133fb79adeb60240de9f4fd3d8ee9299606cf0a656e81ba3d8e311cb5c7f6565470cc5399f53cc0cc319c05528a061aca3c6d0ccb9e89e308eb045cece2bf5df4b8cda84a72678073bd525d027", @ANYRES32=r3], 0x18}, 0x1, 0x0, 0x0, 0x8c4}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x107}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x107}, 0x1c) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) r4 = socket$inet(0x2, 0x2, 0x10) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f00000002c0)=0x9, 0x4) (async) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f00000002c0)=0x9, 0x4) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') socket$inet(0x2, 0x2, 0x1) (async) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffff4a, 0x0, 0x0, 0x6}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffff4a, 0x0, 0x0, 0x6}, 0x0) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @private=0xe0000000}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000001c0)="080032427e15a330", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0xfffe) bind$inet(r4, &(0x7f0000000000)={0x2, 0x5e21, @empty}, 0x10) (async) bind$inet(r4, &(0x7f0000000000)={0x2, 0x5e21, @empty}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) (async) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x303}, "320e019f0232037d", "192c4caaf37af3d00fa4a95922e05c94", "0222dc88", "c01217caf77d0e49"}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3d}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x90) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(r7) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000380), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r9, 0x389366ac6fb80697, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x880) 1.83730288s ago: executing program 1 (id=4633): sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000983d003ace64d6b3dfb3f9b9b4a54f765dd4ddfe990ffcb6e8e1518890abc8ae1c4a9a33162b07c2d2f32cbafb8b674acbc181aed05eb69b08afb08869d0eb3959c52e68ecb0b78ee97dbec6572f654f207f16f6f482caf0d41daa76025e3880a00645b64039c169cea1a74eff90887d4477e082d9e76b4da86a40c4b1e4126a78", @ANYRES16=0x0, @ANYBLOB="010026bd7000fddbdf250c00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9", 0x4e}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c6", 0x41}, {&(0x7f00000000c0)}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15", 0x11}, {&(0x7f0000000580)}], 0x3}}], 0x2, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000280)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan1\x00'}) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4040) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1b, &(0x7f0000000900), 0x100}, 0x40000100) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r2, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r10 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) recvmsg(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000000300)=""/109, 0x6d}, {&(0x7f0000000800)=""/209, 0xd1}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/187, 0xbb}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/171, 0xab}], 0x6, &(0x7f0000003600)=""/231, 0xe7}, 0x162) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) 1.818233633s ago: executing program 0 (id=4634): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0x4, 0x746, 0x3, 0x3, 0xfb, 0x8, 0xb}, 0xc) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008030000b70400000100000085000000330000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000010000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0xffffffffffffff79, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r3, 0x331, 0x70bd29, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}]}, 0x24}}, 0x0) (async) sendmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000180)="fbecb183a9cffc0ee5d1d434a494db587414a63ef7fed2175c894997b4760cede524e40ae9a937434e1756f7b60d81a7da87fa2614c509b671a7bf8557275e807e7af1c65c1860dcd7b32c", 0x4b}, {&(0x7f00000009c0)="36da21ba0be270a73a76b0b2c1b08b0aa7b634bde7b42b05fff77a1bd375fa61812e0a3df2dc7fea643e6cf5ef23233fe2b752a206d9be7865e37ef0b528cde3720d51a67f20caab530191c4999991e19a77134546a12da2826d6cfce817d90d90030a9d5d42d262c3f4b20c6cba4c7de319afd9781472fc6bcb6520dd249911", 0x80}, {&(0x7f00000006c0)="8b3e97e66c34520fa8e2a370f6233f47fa505952ceaf6714d4030cf71b06d9c227e92f4a323b6ebf087032d4498fdc03e86e62f25a610270568c2c7147975019b3fa481fe21ab4ed149068e364b45ddd86efa6b28b42f1977be3937c8b1edf121d5defd4180ca936d2169e6734570a3e713fb30c4e18c13d66b17b808cad9e8c9af357cb504fbec0bf4cb07af24b4d49049ad0b80472ce7e307a5b4892afbe4edb5ec566ae52aac0ea58afb19188f9161d0a12fba2e42b9cdbeec498cebe3698e1bdd29ebfbe8237fc0e", 0xca}, {&(0x7f0000000880)="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", 0x10c}], 0x4}}], 0x1, 0x20000000) r10 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r10, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000600)={{r8, &(0x7f0000000340)='batadv_slave_1\x00', 0x101000, &(0x7f0000000380)={@align=0x1, {0x0, 0x1, 0x8000, 0x4}}, 0xfff, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000400)=0x10001}, {[0x6, 0x8, 0x80000001, 0x100]}, 0x401, 0xfa, &(0x7f0000000500)=""/250}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r11) sendmmsg$inet_sctp(r10, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) 1.677247575s ago: executing program 1 (id=4637): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0a0003000000000014001680100001800c000700ffffffff0900000008001b0000000000"], 0x3c}}, 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket(0x28, 0xa, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r1, @ANYRES32=r3, @ANYRESOCT, @ANYRES32=0xffffffffffffffff], 0x88}, 0x1, 0x0, 0x0, 0x4008014}, 0x0) listen(r2, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x4000890) (async) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f0000000f40)={@dev={0xfe, 0x80, '\x00', 0x35}}, 0x14) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840), ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x102c, &(0x7f0000000640)=[{}, {}], 0x10, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x50, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) (async) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000008c0)=@generic={&(0x7f0000000880)='./file0\x00'}, 0x18) (async, rerun: 32) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYRES64=0xffffffffffffffff, @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={0x1, 0xffffffffffffffff}, 0x4) (async, rerun: 32) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (rerun: 32) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000e80)=ANY=[@ANYRESDEC=r12, @ANYRES32=r13, @ANYBLOB="0000000000000000b702000014000000b70300000000001d8500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[], 0x50) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000200)=ANY=[@ANYRES8=r4, @ANYRES16=r10, @ANYRES16=r11, @ANYRESDEC=r14, @ANYRESHEX=r0, @ANYBLOB="ce1bab5c573de3f966e8", @ANYRES64=r5], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r16 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async, rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async, rerun: 64) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_MCAST_BROADCAST(r18, 0x10f, 0x85) pipe(&(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r19, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x12, 0x9, &(0x7f0000000d00)=ANY=[@ANYBLOB="4792f8ff0b000000185b000002000000000000000000000008c405002000000085200000020000ffffff7f003df750d06e39ceb0e469149768571b89090a8ba5e29dc10ce7319cceddb8ab462ec67ed2a6d052d23947f8bc07004fec49a15a124c41cc8b2705d014ee5e76016aba09a2eb047754716ae3a540b370f27d85b9e149a9ffcb979208689b6a8f91622448e3e8a15e9f96795c035aec11aad83b2ea6408a9e2b37c04b28d95e33277a84a39f2201975d64489776cd5b70e6153b6fd600000000000040000000000000004a6a9fdc33d5db9e3743b364541f02155b3e5343934a09a35ad8e40466efd43f7e27097ff7df062385168dcb6d4d0d16445ea841fdf2abb34b58046adeb1eacde4148d4d3834b9e19c77b75a78755b9cc3febc145cc8fd7d6e5b5ff1a8391a68", @ANYRES32, @ANYBLOB="000000000000000018160000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000240)='syzkaller\x00', 0x423, 0x52, &(0x7f0000000280)=""/82, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xf, 0xd, 0x5b11}, 0x10, r7, r8, 0xffffffffffffe23, &(0x7f0000000980)=[r9, r12, r13, r5, r15, 0xffffffffffffffff, r16, r17, r19, r0], &(0x7f00000009c0)=[{0x4, 0x3, 0x80001}, {0x1, 0x3, 0x5, 0x8}, {0x4, 0x5, 0x4, 0x9}], 0x10, 0x5}, 0x94) (async, rerun: 64) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000000, 0x4000010, 0xffffffffffffffff, 0x65969000) (async, rerun: 64) r20 = accept4$unix(r2, 0x0, 0x0, 0x0) recvfrom$unix(r20, &(0x7f0000001680)=""/256, 0x100, 0x1120, 0x0, 0x0) 1.559148457s ago: executing program 1 (id=4638): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x403, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x3, 0x0, 0x1020}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x4}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x40080) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)={0x24, 0x11, 0x0, 0x101, 0x70bc27, 0x21dfdbfa, {0x3}, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x6}, @nested={0x8, 0xe8, 0x0, 0x1, [@nested={0x4, 0x43}]}]}, 0x24}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xbc, 0x1, 0x7, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7d66}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x400}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x400}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xc}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4b}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xc056}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7307}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40010}, 0x140) 1.498252677s ago: executing program 3 (id=4639): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x0, 0x11000000}, 0xfffffffffffffffe}, 0x48) 1.416791612s ago: executing program 1 (id=4641): r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x44, 0x6, 0x498, 0x0, 0x2a8, 0x2a8, 0x160, 0x2a8, 0x348, 0x348, 0x348, 0x348, 0x348, 0x6, 0x0, {[{{@ip={@local, @local, 0xff000000, 0x0, 'hsr0\x00', '\x00', {0xff}, {}, 0x84, 0x1}, 0x0, 0x70, 0x98, 0x0, {}, [@common=@ah={{}, {[0x3, 0x4], 0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x50, 0x80, 0x1}}}, {{@uncond, 0x0, 0x70, 0x96}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x3}}}, {{@ip={@broadcast, @multicast2, 0xff, 0x0, 'lo\x00', 'nr0\x00', {}, {}, 0x84}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x14}}}, {{@ip={@loopback, @empty, 0x0, 0xffffff00, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {}, 0x29}, 0x0, 0x70, 0x198}, @inet=@TPROXY1={0x0, 'TPROXY\x00', 0x1, {0x6, 0x7fff, @ipv6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4e20}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @broadcast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfd5c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000040)=ANY=[], 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000140)=0x10, 0x12) close(r3) socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000000)={r5, 0xe}, &(0x7f0000000040)=0x8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'netpci0\x00', 0x1000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101002, 0x0) ioctl$TUNGETVNETHDRSZ(r6, 0x800454d7, &(0x7f0000000040)) getsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f00000001c0)=""/89, &(0x7f00000002c0)=0x59) 1.413175191s ago: executing program 3 (id=4642): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) recvmmsg(r0, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}, 0x88b1}], 0x1, 0x40000120, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000200)=0x4, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001a40)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x9, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1, {0x7, 0x0, 0x0, 0x5, 0x0, 0x7}, {0x8, 0x0, 0x2, 0x2, 0x0, 0x7}, 0x1, 0x0, 0x3}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000400, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8000000, 0xfffffffe, 0x0, 0x4, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0xe80, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xb, 0x37, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1000, 0xffffff35, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0xffffff9d, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0xfffffffd, 0xffffffc3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x80000, 0x2, 0x0, 0x0, 0x19b90000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x6, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x9a0a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x2, 0x0, 0x9, 0x0, 0x8c62, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffe, 0x0, 0x9, 0xffff, 0x0, 0x0, 0x0, 0x5, 0x5, 0xfffffffc, 0x0, 0x0, 0x9, 0x5, 0x2, 0x0, 0x3, 0x0, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x91, 0x9fd, 0xfffffffe, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x9, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xd, 0x3, 0xa, 0x13, 0x5, 0x200, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0x800e0b2, 0x1, 0x8fc, 0x8, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0xfd, 0xfffffffa, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x80007f, 0x0, 0x7, 0x2, 0x7f, 0x0, 0x12, 0x4, 0x0, 0x1000004, 0x7, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x0, 0xffdffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x5, 0x1, 0x0, 0x2, 0x6, 0x1, 0x6, 0xe5a, 0x4, 0x6, 0x81, 0xd44, 0x10, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x85, 0x8, 0x1, 0x2, 0xc9, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0xff, 0x20000001, 0x2, 0xf, 0x24b9, 0x39, 0xe01, 0x1, 0x6430, 0xb, 0x4, 0x4000, 0x3, 0x7eb6, 0x3, 0x0, 0x203, 0x4, 0x9, 0xff, 0xa, 0x6, 0xf9, 0x100, 0x1, 0x8001, 0x100, 0xbfff9c71, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000004, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x0, 0x0, 0x5, 0x2, 0x65, 0x4, 0xfffffa0c, 0x4, 0x0, 0x1000002, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x1, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x1000009, 0x4, 0x6, 0x7, 0x200, 0x37, 0x7, 0x3, 0xc, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0xfffffffe, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x33, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3, 0x1}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, &(0x7f0000000000)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003640)='?', 0x1}], 0x1}}], 0x1, 0xc005) sendmmsg$inet(r4, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000240)='@', 0x1}], 0xef}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc", 0x1}], 0x1}}], 0x2, 0x4000000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4004804) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r6, @ANYBLOB="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"], 0x1c8}}, 0x0) ioctl$XFS_IOC_FSGEOMETRY(r1, 0x8100587e, &(0x7f0000000500)) write$bt_hci(r0, &(0x7f0000000200)=ANY=[], 0x6) 1.272607706s ago: executing program 4 (id=4643): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r1, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}]}]}, 0x54}}, 0x24000005) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r1, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000018c0)={0x28, 0x41, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @fd=r2}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r0) 1.109366759s ago: executing program 4 (id=4645): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x4a, 0x0, &(0x7f0000000080)) listen(r0, 0x638) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) listen(r3, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000180)='westwood', 0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000440)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x14) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x2, 0x4, 0x0, 0x3, {0xa, 0x4e22, 0x6, @empty, 0x200}}}, 0x3a) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r10, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x1, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) listen(r9, 0x0) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) 1.074891319s ago: executing program 2 (id=4646): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b800000019000100000000000000000020010000000000000000000000000001fc01000000000000000000000000000100000005000000030200200000000000", @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=0x0], 0xb8}, 0x1, 0x0, 0x0, 0x20004004}, 0x20040840) (async) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)="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", 0x4d9}], 0x1}, 0x4040004) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (rerun: 32) socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000005c0)='cgroup.threads\x00', 0x2, 0x0) (async, rerun: 32) r3 = socket$kcm(0xa, 0x3, 0x87) (rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'pimreg1\x00', @random="2b0436d23321"}) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="580000001000ffff25b800e402f720ff076a000063393996523a356d67bd46ff05ebcc3516c97dbf2ac855d6ce51b9cefa83e9038dce4b7ef29ca827994e57", @ANYRESOCT=r1, @ANYBLOB="4200000021204b000030000280080003000300e22a9f7b3bde11d2fcec845ded12d52256ab900d18bf7b0d8ecba125bc9b3d7076ce7a7c0b23803448bc66d981b619e258170ea8f0ee8fcfc5b5daeca6dc70b6281ec13d33530201f902cc918e34058ed0404e0f48c6920637cc4047085d7df48bee2db7eaca780ae034cb36af0a5ef980ae53f0"], 0x58}, 0x1, 0x0, 0x0, 0x20004001}, 0x8000002) (async, rerun: 64) write$tun(r4, &(0x7f0000000900)=ANY=[@ANYRES32=r4, @ANYRES64=r1, @ANYRES64=r3, @ANYRESOCT=r2, @ANYRESHEX=r3, @ANYBLOB="15a9c20e1b23f1fdf58d35ace9c581fc295510c7b6ff18b951177a3c119b152bd9707145526659f8dda8e87a46bd041f6cebc8b122bd090ae6b00b3a1f0f23b78ca6748be98a2701244264a398c001510dd0db50c309d19344f5aab6875c95abcbff61bdfec456f636824da381a702925a5302376df033f10c8957859ef610b4efa2d8f6c2c0d02cd87beea5695f2e", @ANYRESDEC=r1, @ANYRES32], 0xfdef) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r6) sendmsg$MPTCP_PM_CMD_REMOVE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x24}}, 0x4000000) (async) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) (async) r7 = openat$cgroup_freezer_state(r1, &(0x7f0000000080), 0x2, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000640)={0x0, 0x3}, &(0x7f0000000680)=0x8) (async) sendmsg$kcm(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x98d0}, 0x4040000) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731306800c00"], 0x13a0}, 0x1, 0x0, 0x0, 0x20000044}, 0xc000) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) write$cgroup_freezer_state(r7, &(0x7f00000000c0)='THAWED\x00', 0x7) (rerun: 32) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 865.080282ms ago: executing program 4 (id=4647): r0 = socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x82, &(0x7f0000000180)={0x6, 0x6f9, 0x0, 0x8}, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000080)=0x4, 0x4) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0xfff, 0x4, 0x2, 0x3}, 0x8) socket(0x25, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r3, 0x215eb000) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c) write(r4, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553780081e7465c883ac4dd9b3e59b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de00000000000000", 0x80) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket(0x2b, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e23, 0x10200, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7fff}, 0x1c) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a40)=ANY=[@ANYBLOB="640000000001010400000001801400018008000100e000000108000200e00000010c0000240002801400018008000100ac1414aa08000200ac1e00010c000280050001000000000008654705c2a48d8aa273a58bf7d018a8d5debb25000740000000010000000000000000000000ae8e791e76eb072cee3e530078e19e7dba18522ee52c9950ea232381b78ddc6850cca7c70e16edbdf4e40082552f6e1a4bc9daabbbf27896ae7e4916643db30776b25de58a5e369346c593a39be6144da50607bf0eb0cfc17d7bfa"], 0x64}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a444f39c4000000060a0b060000000000000000020000002411048020000180080001006669620014000280080001400000000008000240040000020900020073797a32000000001400000b11000100"/108], 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="900000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c000280050001000000000054001880080003400000000b080001"], 0x90}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) accept4(r5, 0x0, 0x0, 0x0) recvmsg$can_raw(r6, &(0x7f0000001a00)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000001980)=[{&(0x7f0000000440)=""/17, 0x11}, {&(0x7f0000000600)=""/192, 0xc0}, {&(0x7f0000000780)=""/193, 0xc1}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/240, 0xf0}], 0x5}, 0x40) 864.408598ms ago: executing program 0 (id=4648): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYRES32=r0], 0x128}, 0x814) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x16}, 0x300, 0x0, 0x2, 0x9, 0x0, 0x7}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@private2, 0x300, 0x0, 0xff, 0x2, 0x6, 0xe}, 0x20) socketpair(0xa, 0x80000, 0x0, &(0x7f0000000100)) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="144b0d968dea80c2c295c69655552cce1937295c096e317a0588e94ae06d782423950df690ccafb7823468c3046f4ae7fad3e5b61753743cd9cce789bca4c40d0899351cbf4a6fcfb374bd43bf0d9ee4c36efd167a261b5c7b8ee7db700fe0aa9ed352451cb38db613b24c2400351d73e71faa31b8b81dc3b33155a4352a61352ae32e69ef83b1a7e7ddf7e00436d554def8f424b20cff5f36542413338a609202aa29dc738a", @ANYRES64=r0, @ANYRES16=0x0, @ANYRES16=0x0, @ANYRES8], &(0x7f0000000000)='GPL\x00', 0x200002, 0xe3, &(0x7f0000000440)=""/227, 0x41100, 0x2c}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @broadcast}], 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="230000e52500000002000000ffff00000572c122f78bf2d47166ca4fed02650545f08305b9904a5059120ad3494ae299f6d340dda73355a47e3d63d58b906fb09a8aa39d8f"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000540)={&(0x7f0000000200)="7adb5d81749585482926c1421771e6442a408489bf80d6dbb6ee148dda5dde9c71bc3bc0df004641ce938a3135d2789535a902", 0x0, 0x0, 0x0, 0x9, r3}, 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}], 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x240080d0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r7, 0x0, 0x30, 0x5, @void}, 0x10) unshare(0x2c020400) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc0c4) r8 = socket(0x11, 0x3, 0x0) bind$rxrpc(r8, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x24) 801.464428ms ago: executing program 1 (id=4649): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x8, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {}, {0xfff2, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) (async) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async) unshare(0x22020600) ioctl$SIOCSIFMTU(r4, 0x80108906, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) (async) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) (async) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r5, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000004c0)}, 0x20) (async) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x7f, 0x0, 0xffffffffffffffff, 0xfffffff8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x50) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r11], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r12, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_ext={0x1c, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="8d48c0f101a17d0eb48721d564cd1b9428000000cc33fffff0ffffff1830000001000000057077899a075e68"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x40, &(0x7f0000000180)=""/64, 0x41100, 0x0, '\x00', r7, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x45, 0x0, 0x8, 0xbd}, 0x10, 0x2a298, r4, 0x3, &(0x7f0000000600)=[r9, r10, r11], &(0x7f0000000640)=[{0x3, 0x3, 0x3, 0x8}, {0x0, 0x3, 0xb, 0xb}, {0x3, 0x5, 0x9, 0xc}], 0x10, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x50) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) (async) r14 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r14, &(0x7f0000000200)=0x1, 0x12) (async) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) socket$netlink(0x10, 0x3, 0x0) 655.790957ms ago: executing program 2 (id=4650): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "399421fe8a4c9563", "00b147fbbfc100", "d6dc09ff", "16de86d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x80008, 0x4) pselect6(0x40, &(0x7f00000001c0)={0x3f, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, 0x0, 0x0, 0x0) 544.462552ms ago: executing program 1 (id=4651): socket$unix(0x1, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x460, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x430, 0x2, [@TCA_BASIC_POLICE={0x42c, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x7ff, 0x0, 0xe20, 0x995, 0xf28, 0x2, 0x7, 0x7, 0x200, 0x1, 0x1, 0x42, 0x4, 0xfffffff9, 0x5, 0x7, 0x3ff, 0x5, 0x797, 0x401, 0x7, 0x838, 0xcea8, 0xd, 0xd06, 0x3, 0x2, 0x10001, 0x7, 0x1, 0xff, 0x0, 0xc, 0x509, 0x46, 0x2d35, 0xfffffff7, 0x55, 0x90000000, 0x3e, 0x7, 0x1, 0x3, 0x100000, 0xffffffff, 0x253, 0x386, 0x3, 0xef1d, 0x759, 0x3, 0x0, 0x1, 0x5, 0x5, 0xdf5e, 0x13, 0x1, 0x80, 0x4, 0x2, 0x5, 0x81, 0x9, 0x5, 0x1000, 0x4, 0xd, 0x0, 0x5, 0xfd, 0x9, 0xc5, 0x3, 0x3, 0x1, 0x9, 0xfffffffb, 0x5, 0x3, 0x0, 0x3, 0x4, 0xfffffffd, 0x6, 0x5, 0x100, 0xd, 0x3, 0xe, 0x0, 0x1, 0x2, 0x9, 0x8, 0x1, 0x77, 0x3c, 0xfffffff9, 0x5a44, 0x6, 0x6, 0x10000, 0xffffffff, 0x5, 0x101, 0x3, 0x40, 0x8, 0xfffffff1, 0x3, 0x269, 0x2000000, 0x8, 0x3, 0x8, 0x80000001, 0x3, 0xa, 0x7fff, 0x8001, 0x8000, 0x5, 0x6, 0x4, 0x5, 0x10001, 0x46, 0x7, 0xfffff9b0, 0x800, 0x2, 0x1, 0x2, 0x10, 0xfffffff7, 0x1, 0xe0, 0xffff825d, 0x10, 0x22c, 0x3, 0x9, 0x101, 0x69, 0x5df0, 0x5, 0x5, 0x8001, 0xf, 0xfff, 0x3, 0x1728, 0x2, 0x9, 0x8, 0x3, 0x9, 0x5a7dc702, 0x2, 0x74, 0x5, 0xb3c, 0xc, 0x7fffffff, 0xfffffff8, 0x4, 0x0, 0x5, 0x100, 0x1, 0x7fffffff, 0x4222, 0x3, 0x3, 0xb, 0x1, 0x9, 0x6, 0xfffff001, 0x9, 0x80000001, 0x5, 0x6, 0x4, 0x2, 0x101, 0x9, 0x8, 0x7f, 0x1000, 0xffff, 0xb10, 0x2, 0x101, 0x6, 0x800, 0x21d596e0, 0x2, 0x438, 0x3, 0x10000000, 0x7ff, 0x400, 0x8, 0x9, 0x4, 0x4, 0x1, 0x7, 0x1, 0x8, 0x6, 0x80000001, 0x8, 0x6, 0x3, 0x0, 0xc000000, 0x3000000, 0x8, 0x7, 0x6, 0x9, 0x1000, 0x2, 0x6, 0x3ff, 0x2, 0x7, 0x9, 0x4e, 0x2eb, 0x0, 0x0, 0xa14, 0x6, 0x10000, 0x4, 0x9864, 0x561, 0x7, 0x7fff, 0xec, 0x1, 0xf, 0x8, 0xe6, 0x9, 0x0, 0x6a2, 0x4, 0x9, 0x8, 0x9]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}]}]}}]}, 0x460}, 0x1, 0x0, 0x0, 0x20001898}, 0x4880) bind$netlink(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r8, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee163", 0x55, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x12, r8, 0x604a6000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31}, &(0x7f0000000780)=0x40) 544.086376ms ago: executing program 2 (id=4652): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) unshare(0x0) (async) syz_emit_ethernet(0xfffffe9b, &(0x7f00000005c0)={@local, @broadcast, @void, {@llc_tr={0x11, {@llc={0xfe, 0xa, "3ccf", "d56f0e829bc74f9b7181685c4069124ace5855d8c4e1a269a2d7892f77273a572ad6c078b7a1d6b96ca8d14574533cf67da1f119c52b1125c16fef5e134a17b7c137d375a5ccae81d5d83320a39b6c584908a06930c69f654d4e4344a4418d78220929284e32db1f06a60460f8f3578254e0c3aa46f4eafa429a2788c8b0d178d1d4968626f535d205ecf8f4d3c898df267c499e63876c194081da7077bfec4d063094bf9f01bdeb15c0828852ea54f19b02"}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000030000200900010073797a310000000014000000020a0104000000000000000007000000540000001f0a030000000000000000000300000008000340000000000900010073797a310000000009000200"], 0xb0}, 0x1, 0x0, 0x0, 0x4040840}, 0x0) 513.079705ms ago: executing program 3 (id=4653): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x88}}, 0x8044) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001180)=ANY=[], 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r4) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)={0x14, r5, 0x48212b8952c3aff5, 0x70bd24}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) (async) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x24008094) accept4$unix(r2, 0x0, 0x0, 0x0) (async) r6 = accept4$unix(r2, 0x0, 0x0, 0x0) recvfrom$unix(r6, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) (async) recvfrom$unix(r6, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) (async) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff04000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x24008802) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff04000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x24008802) 432.635741ms ago: executing program 2 (id=4654): r0 = socket$netlink(0x10, 0x3, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xd, &(0x7f0000000380)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', r3, 0x4, 0x1, 0x66, 0x5, 0x22, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x10, 0x80000001, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'sit0\x00', &(0x7f00000008c0)={'syztnl1\x00', r3, 0x8, 0x7800, 0x1000000, 0xffff8000, {{0x2c, 0x4, 0x1, 0x3b, 0xb0, 0x68, 0x0, 0xb, 0x4, 0x0, @empty, @loopback, {[@timestamp_addr={0x44, 0xc, 0x55, 0x1, 0x4, [{@local, 0x4}]}, @ssrr={0x89, 0x17, 0x3f, [@private=0xa010102, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @broadcast]}, @timestamp={0x44, 0x2c, 0x5d, 0x0, 0x8, [0x0, 0x5, 0xa5e, 0x1, 0x3, 0x38, 0x3, 0xa08b, 0x1ff, 0x10000]}, @timestamp_addr={0x44, 0x4c, 0x7f, 0x1, 0x2, [{@local, 0x53f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xac}, {@loopback, 0xbe3b}, {@broadcast, 0xa99e}, {@local, 0x8}, {@rand_addr=0x64010102, 0x7}, {@multicast1, 0x8}, {@broadcast, 0x5c6119f7}]}]}}}}}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000001000030500000000fbdbdb25000000006161ac76f743d9e8494245ed7c059fba000000000100000052658a6c31e60f953ae698322b287080a0d510990c5fdbcdd0fbdc308562841fc1175547ed4a3b5c4b72f097b940f7ac870a41f6c2a34a980aa5d34af3f2274fa0e259af", @ANYRES32=0x0, @ANYBLOB="35030200000000002c001280110001006272696467655f736c617665000000001400058005001900020000000500090000000000"], 0x4c}}, 0x2400c080) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'ovf\x00', 0x0, 0xf, 0x5c}, 0x2c) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af64", 0x3b}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b", 0x42}, {&(0x7f00000000c0)}, {&(0x7f0000000800)="a4791b53a9f6cf991a7eae61e885e9c22813ad735264a430289d393a98a1340e95e337ea9e8a6f324b1189874ee673898bb9b2a79e5445d374c17461c7c636c14850e329aca77f4917d0ced78200b17c80b6ccc46541fba0acb90c7acacbf4351ada1cbd14bdf11dd1fb9d5d91e16f", 0x6f}], 0x4}}], 0x1, 0x20000044) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 272.038467ms ago: executing program 4 (id=4655): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000004000000bca30000000000002403000020feffff620af8ff0000001f71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000015010000033800001d13fcff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x723f}, [@call={0x85, 0x0, 0x0, 0x2e}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x7, 0x10, "090041c20949e0afc65b200dd6a0"}]}}}], 0x40}, 0x20002800) unshare(0x60600) ioctl$TUNSETOFFLOAD(r0, 0x4004743d, 0x110e22fff6) 271.64065ms ago: executing program 2 (id=4656): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="28f80100", @ANYRES16, @ANYBLOB="04002abd7000fedbdf251200000014010180170001006574683a6261746164765f736c6176655f3100004c0002800800030009000000080002000c000000080002008a7b0000080002000500000008000400ff0000000800030000000000080002000104000008000300090000000800030000000100380004001400010002004e21ac1e01010000000000000000200002000a004e2100000009000000000000000000000000000000010c00000008000300040000003400028008000100"], 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf25010000004c0002803c00018008000100040000000800010002000000080001000600000008000100070000000800010006000000080001000700000008000100070000000c000180080001"], 0x68}, 0x1, 0x0, 0x0, 0x40005}, 0x40) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001e0001000000000000000000020000000100000000000000080001000000000008000f"], 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0) 220.908165ms ago: executing program 2 (id=4657): socket$nl_crypto(0x10, 0x3, 0x15) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x28, 0xb, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4064}, 0x4800) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000140)=0x1) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0x9, 0xb}, {0xd, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x9}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2400c061}, 0x4880) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r9, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, r10, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4f3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd0}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}]}, 0x4c}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3c}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000900)='l', 0x1}], 0x1}, 0x4) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f00000000c0)={'pim6reg1\x00', @multicast}) close(0x4) 13.756211ms ago: executing program 0 (id=4658): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) r3 = socket(0x10, 0x803, 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000340)=0x31, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r5}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 0s ago: executing program 4 (id=4659): syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 32) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x50, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x12, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x4000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r3, &(0x7f00000001c0), 0x0}, 0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x11000) (async) writev(r5, &(0x7f0000000380)=[{&(0x7f00000006c0)="0d612c10150bbfda8a172837ee3897325f9fa9480b707c0e8606af24f2695bc78ec68f1083694b6d2e1b3315b08924ae3adbe2ba29bb3c2070e9df8002e907a3f2ee23b451f5653465a138511b3e4b311bb38dbee4e1293032a08f3ff8c1401d955b02ee3185553f3bd7848224aa7820b4b42932c10e59e0208956b057ca7043ae43c33d007d30e32d3171e91827083dceb0b13a2d8102b4106b4a3f5bfd992b332b30a6fce114de88610040ab8e2a689ac9bc23c9edf2e37046a751b07104e4693498f9fb0d9fa8b27417bcea9d3a4fa96e37b6ea0b66a6b6fbcd12d85b24762775d49fc9a370cf6dda486b96fdc7375909e271485ec02ae71e5fcce5c2ddb92f089eaace96b3337c16e297eef52e4e579bed5e6d7ca095908d7d5c239f8ace29cfccb49294faa696a5aed28b435180d7f6e54cfa3d9a41f7bae51465733e5e98bfa96ef227931178c17415dfb35dfe0ec3f00eef20edbf6a7649417e1b3e5587c9605eaac8a8b0bb6ac4ca4a555a3940dae10aec0df46e06798948b88a875a95c4ddd67faafaaabb66c9de583600d5a17800e04f4e365348f17a8b5da39cb93e00c7ced564c6f62c9208560b85f2ba5f6e6b5dfd23b58ff85fade7c6f94c6f92ddac7591efdd1cd9def36fc100940fc2c22bc56ffb1b26c02d30015d6da9a81fde11f3ef08375427cf83963bab83940650d0db960b2a5cdc94348c0334ac83476d617c9b0cb2ec251753f6c5c37203bd4119726d5ea26ec965e174395a8657dbea23e0b9499d3045328ad61dd4238b207200eb100bba933ddebbed33c6f2633a242535c313ee09df66370100fd859493c87ffacc52a2d14b264ece76cf296b603bd3051aaefa78d792ad387a164e9df431126bcf27d72eb76b8eb734a51de9ffcfea6573387b238a398e3ad2dc38c136777f0792bbcb6a949ae6ccc85fd9f3c4c42d51d6b4829cf4804295caa8d4b76dccbfabb0fe95f896bbd201174ca38716615c9ce35263f1667ce2d2913e190023bb106d83eacffda6308e4b393143425386ff2c43a0df48583216482866ab7759d0183f74f2bd48bf710edf94d5d6b6c037f6cdbdaaeab3beddd4df1b2d9d464c03902b6a8def2232cc690468caa8dc37563a14800c0654e2e121cc1173aa2fc613a00eeb1fef542c12456231424b4a00f412c98e81da276d854951ebfafd4c6c1d966e93843ed5273e321dc3deb7b59d31734d917f861ee82dbe3dc3a51d81074e9a4081bb438b0554efd0d704e5776cc1e5a400c9ce6ed4663e1afa8526f5dfe51be5a20d7a72dd6f4ef3ad113ad180e0e5712e25cd442c08afc57f265ee8b6b5d31c72c374ed123ec1c1b008fe5c81ce2a6a7458af50635b861c567285e361f86b49aad7c06a6af0c59a5d1898afc401928f187e948a636f0fe6813a07e4bb53664f7a7af42739d2be73ebc520ea78209feea33be8e9dac7c71a65868f36242b95f4f17339e3136cc49ad8679d2f24f978221a47aac900263c2a04fcd96b9f631caa109c33c78213e27f3abb1cc90dd806901723731723afa9810eb4d6529bd1d0a9d5b8ddb7bba1124d86977d45b9ce99317a457063ed7b35f8e136e175f6b6a4e0ac33ee5084caa1f7974afcf96b2b2e53891feb89be8f2b0da5fb8f05ea6dacf5b0ba5c0b4c8f5371e0ede86019051adff8911759d915714ff133a5cd9a00dbb2c4d1f7186a7bd62694a992be2489baeeca6d3b4b80c0773bd7fea5f38d9339fa924b8767bcf213bac2745b85b34c5dde8125fa4aa4f82a977796d9cf264408244ae3e928254a3bd8465b2dcca9e8a53c04fd16e9a77c68881cc07d8db637cc50ec38347fa4acc9df66080ea69780c878465564a05ff53e56d8f267c0eb3466fc0cea4550fa8f72755c473f2df19e8f5f4aefe48bf9995b0be5e533759a26177b82d46b3388328f3d57e56a9789919e8e54c06c9b9490812d7a24deca484af904bf6a68a330577f9dc2891318cb30cb25ecb388d131a596b36a4179c30c0c391a737973179b04f25c4ff04690fafd373a778ae2c99196e13f6bde39557daf73ae6336663f980b33352da9e842ff0d4d6c314befdf4629b89acbb22a990cbeca3baa0ef941a070904f40bc7612b472383ac360ba5ccdfa0d0d3fe8693a6bce3100ecfb97d8baf2ecd7a8b1675ab00cb5364917271631d40fbbfea443e4817d05180079eb2927693d19901b1cfe5be1a240a89c8998db2bc91f51ecec6f9e03ca725007bfcf9025909b6e71a12cc27dc37f7ba075a9c00976f3b0642cfa8157ee0ad93e161e5eb70d47d005cfab953914bbb66bbe46fb504df4c3e61b8fc21f8590028ea37f07592b5994175302c3c16c144c6a3369ca6c8183999bf4b27be7dbdbc1207a0be41424d06f860b879b139c503de79196c7448501112642e161cba60df354419e6ba4e368d7e924f22317e1edf4d49a54bacd03146b0e1edef9a4edfaa01f9b73aae82050e4c8ab96c43b12545a9697b8d0cc7d364bcfc160806168e8f4206c07ec216ceefa2849834085ae2991045571ee2c41de0a4e7f015b8bbe7a074130929107fba4649063686e3b6bd0863cc56be99fa51418360eaa9195db348c3003458aeee58b93ac729fbcfbe24b974a5263c7bbbc07314841c870caa10e6265c99af3fce1bd4fdd30d6e32694f207f027be9bc73f29074d9386e3618901f4eaeb63f3c430b4fdd18cb3108a98cce5672e027546af044cfcd83f372abe78fe92bb2df93ce2decbd8c9e5510b4625caa5ab74a43f1f09b6a2fca5aeb28e1f25a91a1ac95781dce67cbdcc73005afacd5ff0d62eecd25e8cb6b36d3d1d1ca1575d77cbab3a6ac69d7e27e90fc4c9daad29f0cd19409c8b925d8bb8a2fe5585ceceae33bcc329cd26915fbc5eb79cdf72d6eafe9dce60d7cd337ec633b3341260f843ed7d21616f88f3917e0fa8f8efc6f72177bb4aa2c7568f2a6f27397716de807d65db7aeee5d08f48c31ccacf9f94468dd14098fc2573fde7dd6eedfccf472f230d56b49265b999a3f1d42601eb268a7bfa6f03b7e06193c2b253e83f956bf2194f27d8e0d044244cef6785a2329e7d82c78ebce481a0e9412bb7dafde8d4a536bf2805e21e76ee289abcfaa93a19743b7b376f309242f7d34a3d3f152064e1c40a2bb187f00f854d91dfc26d458ae3f0166a164c45c3020b80ecf9905c8870def82f5a466776e0b8772fa931690b8bc641372dbd04619231a3d1ea9f8afb2834d5e13d110b129de527cb3f4e936d5f64757842c43af36972c18704c58f34b47555a2813637c1f126a1de14a129e6fb4dfebb8135cc7ea6d18a23fda3980f626bcb5fdc9b878f0225efab398ed2ac76384d3259b03ab592efc82485b2c4c0014d79f2ac87f64dbc8028631c178ed39da0113998939db4389bfe7d92a0092d571c0d026aa71c70c4fb30eebfb8c5d1305e02efccedf90652cede8443b92e63a2c30db57347782e1388fd27992694332708fe7ae50d1466b8b698655e090c9fe30e2f77192c7f7073ceb670d2311d108c9f5fd16bda8e3da20c31f369c4612f7647e3da9aca491750b51b0b84c676c4b773543fdf5f92634f1fefa1ed2230fbc6b9bf7e1a0b88dd2b7882ae18106930a79cd8150047c7ad0e4393d9595e743d877a2dcdfa1fabb7b136e6c1e1ff92ef258aa44274e0c3ed755e63befbb5f9865ec6f8382547d34ba590e14eecd851c1002f850bfb672de51bbac8ed00bf5ca05aa9f5115b26d7cb154e4e80c064259baaffeb485384542acb83b3dc972e7886178a1d329b071b9045b7aaa7758266014eced858a431feab9a34226966d597454e963a7cdeb2bd884e15eba854e34e74f07304a6b198bb7516f0f6eb23696dc456345eb30d4ac6ad0aaa8abe664a2f961add7d322ff98e123225219fb0689d1029dcc638b23b1fb38a9174b6959c63dfb23dd5a0bf1c6b33587b6df6086c9a1bfb779b5a21fdd5818beadcea4b273ba43641f02faeac4e80b075b6c1c338754af5b1c8899cf1574dfba02356479ee9572d9ee444193fe3adc23123df523e8803ce1ebafe89db56a3a6ec8d0df064c1854c9ffe25f62aa9657d4961cbed76d379f5d511c31d067acbca4286083c942cbc05d02238d5951a413ed6d653455099d91000a26d7e8a4546516d62c87ec11573d316469e686885c162cfdaa84a0e92c86d192db4f32cc101d189df5cf738810d7e9cc8932c18675078173a715a18a350c26a66b02da8e678f63e531302b13d0b64676ef746abfeff4908271d5f707786b328dfe8da4b69530e6213e0577539ce6e2ccb9325ab4272826816b870c3ff05a3bff349e8374b7ebb56a3071c9c9fc124faf1806735648e37244f3bf358c71eb266b9095b2e1cc14f67e689f3e14902ea548334642b2efa592c938c1ba8ce609e11787f0f63563363de3ca7a5c8033f76225d995d1b3fa5c3968e7b2f205f873e0c1e18307f07d4defff779dc57a67a16ceea120ae5b4880f5d1ce067b0d2b436339d1c58804ccb782498b852d83fbe63b443164d4278baa5b52b5d7e7747733acc4e6ce53bb32b52431dc6809bcf92f8f225291c2111ddbc9a77e01b54d9dbb774ae24ba04e37c9fc697fad580b44e4fadb2b93481d3b2fbaa1aeb417a385496829a09fe623c43b7f4b09da0c571c5548b80841ad9f6048730cc7ab6efbb8865a8a8aa45e33490886d116b9bbe38f079a766a4e1a3ad626eb241c6708a60f6f682adffcb2ee36f38c2e3b68523eee2fc3099e802ea414fe7700696f191f173deb18d357084deb98bcee328287e87809d74b1389c7a96afafd0d4451440e3feb7127c7e97339dcb8f9f81daa36bc496c92f3bcdc57fffb74994c1bbb251a29b2bde5787036233b02832b4637f5008ff521b77b65c3b2e0ffd9b04eaf6dbdb0edc1eb3ccf2a4e51fa732c21cc13ffd941238f144968fa13074b30f0b3d5415c56809b5433096ecdb2042a2b3754811dfabd9ac83b9d44522537519dd4b6f59c44ff11b31447ac8241f5d7298ac56ee0c6adc21027184249e13919cfaab328ededf824074b0dbdac88e678cc4b237fd39252d3cd5c2ad33aca8c2de6c843f0efa5be057934dc81ba3a0c1c54478ad95c55d6579f4aaca2d2c7760df4226fca9a20adc1874346c3d4fb2fb515e0b2b5f609faa44b2e1b2f66021a28653ec28842a4090bd996fe8f9520552d7f1e1b40107f8a893e4b4fcc2d4efdfda74326a8977fc833997fbe2404e1e2f1eb49cfb548cf0af13bcb2325c8ddcbcbfcf0c4db1a711cb9b8719b26e91ee3a43a9b2f91b52303ab711e8324aa8b636aef13c20c63ca1315022c49d637f306c2deb62e3ce2b93521bc028e41efc393c22096447fc481249f6040406a0bd46eb2d6cb58b2ebd7892086873bd356dd94bbbf010f4c928d8b948073d25b076e231581d967bc487d104ab5c95c1b996620647a8198c13b4aed351f7d9a62ad27240bdb4ec388e5ea80d998c15217a174dbbac07bfb1012b48f86f7856e60de42127fd800898c2fe2e8b60334d2b71c4807f75074dc7b4c40847548a9615437fce320d21122419fdd2a7359f3d1c4a68044719477b42aaf88aa6a85e12976bfa96d3956098214c86a7956b3c813d3127bf25c60f458e6e333d7de4834090ebe85bbfe4e84d94ce4e1bc2033701b0611e62c37f57e995f8d264adb84f4485fdd9483710515c01b68f6cdcfe16a1c354ac14f128df3d057ffa0aebd91f225b94472eeda0a15a6c474f648aff524032169e584ad5244791990bdb2c5efb0d59dcdd", 0xffd}], 0x1) socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) syz_genetlink_get_family_id$nl80211(0x0, r4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0xc201}) (async) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f00000004c0)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x78, 0x2c, 0x0, @local, @mcast2, {[@srh={0x0, 0x8, 0x4, 0x4, 0xb, 0x60, 0x6, [@local, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty]}], @param_prob={0x4, 0x1, 0x0, 0x66, {0xe, 0x6, "8e27de", 0x1, 0x87, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0x38}}}}}}}, 0xae) kernel console output (not intermixed with test programs): im netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.723560][ T6717] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.802536][ T6717] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.848040][ T12] bond16: (slave erspan0): failed to get link speed/duplex [ 517.867208][ T6701] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.165637][T12900] bond16: (slave erspan0): failed to get link speed/duplex [ 518.224500][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.260034][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.364823][T19475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.374593][ T48] bond16: (slave erspan0): failed to get link speed/duplex [ 518.374801][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.423350][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.476618][T19479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.477111][ T48] bond16: (slave erspan0): failed to get link speed/duplex [ 518.655394][ T6716] bond16: (slave erspan0): failed to get link speed/duplex [ 518.783908][ T48] bond16: (slave erspan0): failed to get link speed/duplex [ 519.233370][T19506] __nla_validate_parse: 14 callbacks suppressed [ 519.233390][T19506] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3268'. [ 519.440590][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 519.456354][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 519.467363][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 519.477421][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 519.487937][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 520.207801][T19535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3275'. [ 520.297160][T19538] bridge0: port 3(ipvlan2) entered blocking state [ 520.337403][T19538] bridge0: port 3(ipvlan2) entered disabled state [ 520.377184][T19538] ipvlan2: entered allmulticast mode [ 520.388644][T19538] bridge0: entered allmulticast mode [ 520.408511][T19538] ipvlan2: left allmulticast mode [ 520.413595][T19538] bridge0: left allmulticast mode [ 520.773027][T19510] xfrm0 speed is unknown, defaulting to 1000 [ 520.804995][T19558] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3278'. [ 520.879906][T19563] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3279'. [ 520.898978][T19558] Bluetooth: MGMT ver 1.23 [ 521.131856][ T6717] net_ratelimit: 14 callbacks suppressed [ 521.131875][ T6717] bond16: (slave erspan0): failed to get link speed/duplex [ 521.297197][T19582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3283'. [ 521.325187][ T12] bond16: (slave erspan0): failed to get link speed/duplex [ 521.466365][ T6717] bond16: (slave erspan0): failed to get link speed/duplex [ 521.515151][ T5629] Bluetooth: hci0: command tx timeout [ 521.531022][T19510] lo speed is unknown, defaulting to 1000 [ 521.539849][T19573] xfrm0 speed is unknown, defaulting to 1000 [ 521.594301][ T48] bond16: (slave erspan0): failed to get link speed/duplex [ 521.742661][T19590] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3286'. [ 521.744610][T12900] bond16: (slave erspan0): failed to get link speed/duplex [ 521.798408][T19593] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3286'. [ 521.934007][T12899] bond16: (slave erspan0): failed to get link speed/duplex [ 522.156941][T12899] bond16: (slave erspan0): failed to get link speed/duplex [ 522.203452][T19510] lo speed is unknown, defaulting to 1000 [ 522.328659][T19611] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3290'. [ 522.434109][ T6717] bond16: (slave erspan0): failed to get link speed/duplex [ 522.746415][T19573] lo speed is unknown, defaulting to 1000 [ 522.794795][T19618] syzkaller0: entered promiscuous mode [ 522.833986][T19618] syzkaller0: entered allmulticast mode [ 522.913392][T19629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3293'. [ 522.978765][T19629] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 523.084080][T12899] bond16: (slave erspan0): failed to get link speed/duplex [ 523.402183][T19646] xt_hashlimit: size too large, truncated to 1048576 [ 523.604929][ T5629] Bluetooth: hci0: command tx timeout [ 523.622630][T19657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3296'. [ 523.632401][T19573] lo speed is unknown, defaulting to 1000 [ 523.633421][T12886] bond16: (slave erspan0): failed to get link speed/duplex [ 523.762329][T19510] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.777924][T19510] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.794336][T19510] bridge_slave_0: entered allmulticast mode [ 523.812623][T19510] bridge_slave_0: entered promiscuous mode [ 523.842136][T12900] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.858234][T19510] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.866507][T19510] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.875959][T19510] bridge_slave_1: entered allmulticast mode [ 523.886662][T19510] bridge_slave_1: entered promiscuous mode [ 523.908935][T12900] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.919552][T12900] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.088028][T12900] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.218308][T19510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.306521][T19510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.453326][T19510] team0: Port device team_slave_0 added [ 524.482179][T19510] team0: Port device team_slave_1 added [ 524.658445][T19510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.665686][T19510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.692323][T19510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.708921][T19692] netlink: 'syz.1.3305': attribute type 3 has an invalid length. [ 524.718773][T19510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.727302][T19510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.754594][T19692] __nla_validate_parse: 4 callbacks suppressed [ 524.754613][T19692] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3305'. [ 524.772566][T19510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.142722][T19510] hsr_slave_0: entered promiscuous mode [ 525.153441][T19510] hsr_slave_1: entered promiscuous mode [ 525.163517][T19510] debugfs: 'hsr0' already exists in 'hsr' [ 525.170332][T19510] Cannot create hsr debugfs directory [ 525.684728][ T5629] Bluetooth: hci0: command tx timeout [ 525.863221][T19510] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 525.932669][T19510] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.114328][T19510] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.130747][T19510] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.156413][T19727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3315'. [ 526.272599][T19727] hsr_slave_1 (unregistering): left promiscuous mode [ 526.295985][T19729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3315'. [ 526.313211][T19510] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.330466][T19510] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.338968][T19731] netlink: 'syz.2.3316': attribute type 1 has an invalid length. [ 526.355859][T19731] netlink: 'syz.2.3316': attribute type 1 has an invalid length. [ 526.365857][T12899] net_ratelimit: 4 callbacks suppressed [ 526.365874][T12899] bond16: (slave erspan0): failed to get link speed/duplex [ 526.399964][T19731] netlink: 'syz.2.3316': attribute type 2 has an invalid length. [ 526.415703][T19731] netlink: 'syz.2.3316': attribute type 1 has an invalid length. [ 526.543304][T19738] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3317'. [ 526.562161][T19510] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.596115][T19510] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.599526][T19739] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3317'. [ 526.675596][ T12] bond16: (slave erspan0): failed to get link speed/duplex [ 526.924844][ T6701] bond16: (slave erspan0): failed to get link speed/duplex [ 526.978044][T19510] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 526.990213][T19510] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 527.001045][T19510] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 527.013227][T19748] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3320'. [ 527.027325][T19510] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 527.036791][T19510] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 527.049486][T19510] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 527.059189][T19510] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 527.073374][T19510] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 527.215536][T19510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.246418][T19510] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.254322][ T12] bond16: (slave erspan0): failed to get link speed/duplex [ 527.271672][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.278937][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.317762][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.325015][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.426867][ T48] bond16: (slave erspan0): failed to get link speed/duplex [ 527.560137][T12900] bond16: (slave erspan0): failed to get link speed/duplex [ 527.615639][T19769] mac80211_hwsim hwsim25 syzkaller0: entered promiscuous mode [ 527.634877][T19773] netlink: 'syz.2.3326': attribute type 1 has an invalid length. [ 527.641833][T19769] mac80211_hwsim hwsim25 syzkaller0: entered allmulticast mode [ 527.660182][T19769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3324'. [ 527.696890][T19773] 8021q: adding VLAN 0 to HW filter on device bond2 [ 527.708198][T19772] tipc: Enabling of bearer rejected, failed to enable media [ 527.734425][T12886] bond16: (slave erspan0): failed to get link speed/duplex [ 527.755028][ T5629] Bluetooth: hci0: command tx timeout [ 528.023511][T19777] bond2: (slave veth3): Enslaving as an active interface with a down link [ 528.052804][T19785] bridge_slave_0: left allmulticast mode [ 528.060385][T19785] bridge_slave_0: left promiscuous mode [ 528.066854][T19785] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.396046][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 528.420496][T19785] bridge_slave_1: left allmulticast mode [ 528.434163][T19785] bridge_slave_1: left promiscuous mode [ 528.452279][T19785] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.466811][T19785] bond0: (slave bond_slave_0): Releasing backup interface [ 528.510003][T19785] team0: Port device team_slave_0 removed [ 528.535563][T19785] team0: Port device team_slave_1 removed [ 528.547890][T19785] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 528.556118][T19785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.565677][T19785] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 528.573404][T19785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.582455][T19785] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 528.612079][T19787] geneve2: entered promiscuous mode [ 528.742530][T19773] vlan0: left promiscuous mode [ 528.795537][T19773] batadv1: left promiscuous mode [ 528.809797][T19773] batadv1: left allmulticast mode [ 528.820261][T19773] ip6gre1: left promiscuous mode [ 528.834406][T19773] ip6gre1: left allmulticast mode [ 528.880744][T12899] bond16: (slave erspan0): failed to get link speed/duplex [ 528.923611][T19792] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 528.969635][T19792] bond2: (slave batadv2): making interface the new active one [ 529.009095][T19792] batadv2: entered promiscuous mode [ 529.018047][T19792] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 529.075384][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.082580][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.285638][ T6716] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 529.362818][T19822] vlan2: entered promiscuous mode [ 529.381423][T19822] bridge0: entered promiscuous mode [ 529.625374][T12899] bond16: (slave erspan0): failed to get link speed/duplex [ 529.940527][T19845] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3339'. [ 530.012523][T19848] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3339'. [ 530.149577][T19510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.435224][T19510] veth0_vlan: entered promiscuous mode [ 530.638507][T19862] syzkaller0: entered promiscuous mode [ 530.650384][T19862] syzkaller0: entered allmulticast mode [ 530.675975][T19879] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.687292][T19510] veth1_vlan: entered promiscuous mode [ 533.812677][ T4991] udevd[4991]: worker [10758] /devices/virtual/block/nbd2 timeout; kill it [ 533.821666][ T4991] udevd[4991]: seq 19584 '/devices/virtual/block/nbd2' killed [ 533.841993][T19880] batman_adv: batadv0: Interface deactivated: dummy0 [ 533.849125][T19880] batman_adv: batadv0: Removing interface: dummy0 [ 533.863529][T19880] bridge_slave_0: left allmulticast mode [ 533.872656][T19880] bridge_slave_0: left promiscuous mode [ 533.878625][T19880] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.889858][T19880] bridge_slave_1: left allmulticast mode [ 533.896118][T19880] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.909897][T19880] bond0: (slave bond_slave_0): Releasing backup interface [ 533.927054][T19880] bond0: (slave bond_slave_1): Releasing backup interface [ 533.950102][T19880] team0: Port device team_slave_1 removed [ 533.957376][T19880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 533.968720][T19880] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.978631][T19880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.998307][T19880] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.007228][T19880] net_ratelimit: 5 callbacks suppressed [ 534.007239][T19880] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 534.055269][T19886] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 534.071830][T19888] xfrm0 speed is unknown, defaulting to 1000 [ 534.112011][T19888] xfrm0 speed is unknown, defaulting to 1000 [ 534.118373][ T6716] bond16: (slave erspan0): failed to get link speed/duplex [ 534.195729][T19888] xfrm0 speed is unknown, defaulting to 1000 [ 534.214992][T19888] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 534.221696][T19510] veth0_macvtap: entered promiscuous mode [ 534.272549][T19888] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 534.295727][ T48] bond16: (slave erspan0): failed to get link speed/duplex [ 534.312239][T19510] veth1_macvtap: entered promiscuous mode [ 534.354218][T19888] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 534.388707][T19510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.389019][T19888] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 534.427579][T19510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.458034][T12886] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.497708][T12886] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.532710][T12886] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.532737][T19888] xfrm0 speed is unknown, defaulting to 1000 [ 534.549636][T12886] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.565430][T12886] bond16: (slave erspan0): failed to get link speed/duplex [ 534.630399][T19888] xfrm0 speed is unknown, defaulting to 1000 [ 534.657597][T19910] syzkaller0: entered promiscuous mode [ 534.666454][T19910] syzkaller0: entered allmulticast mode [ 534.696011][T19888] xfrm0 speed is unknown, defaulting to 1000 [ 534.751340][T12886] bond16: (slave erspan0): failed to get link speed/duplex [ 534.799470][T19888] xfrm0 speed is unknown, defaulting to 1000 [ 534.932469][T19888] xfrm0 speed is unknown, defaulting to 1000 [ 534.939218][T12899] bond16: (slave erspan0): failed to get link speed/duplex [ 534.965140][T19888] xfrm0 speed is unknown, defaulting to 1000 [ 535.016638][T19888] xfrm0 speed is unknown, defaulting to 1000 [ 535.038818][T19888] xfrm0 speed is unknown, defaulting to 1000 [ 535.040987][T12886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.051909][T19888] xfrm0 speed is unknown, defaulting to 1000 [ 535.064901][ T12] bond16: (slave erspan0): failed to get link speed/duplex [ 535.088196][T12886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.120851][T19888] xfrm0 speed is unknown, defaulting to 1000 [ 535.196883][T12899] bond16: (slave erspan0): failed to get link speed/duplex [ 535.249280][T12886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.267178][T19931] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 535.293668][T12886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.310857][T19922] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 535.324313][T12886] bond16: (slave erspan0): failed to get link speed/duplex [ 535.579925][ T7773] IPVS: starting estimator thread 0... [ 535.630462][T19947] netlink: 'syz.1.3358': attribute type 2 has an invalid length. [ 535.664365][T19938] syzkaller0: entered promiscuous mode [ 535.684247][T19946] IPVS: using max 27 ests per chain, 64800 per kthread [ 535.699424][T19938] syzkaller0: entered allmulticast mode [ 535.754751][T12886] bond16: (slave erspan0): failed to get link speed/duplex [ 539.294646][ T6717] bond16: (slave erspan0): failed to get link speed/duplex [ 539.445004][T12899] bond16: (slave erspan0): failed to get link speed/duplex [ 539.596730][T12901] bond16: (slave erspan0): failed to get link speed/duplex [ 539.607939][T19984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3367'. [ 539.706931][T19989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3365'. [ 539.706928][T19988] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3367'. [ 539.793621][T19996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3365'. [ 539.884018][ T48] bond16: (slave erspan0): failed to get link speed/duplex [ 539.996030][ T48] bond16: (slave erspan0): failed to get link speed/duplex [ 540.118845][ T587] bond16: (slave erspan0): failed to get link speed/duplex [ 540.175389][ T12] batadv2: left promiscuous mode [ 540.243967][ T12] bond16: (slave erspan0): failed to get link speed/duplex [ 540.385660][T12899] bond16: (slave erspan0): failed to get link speed/duplex [ 540.687348][T20025] netlink: 'syz.3.3373': attribute type 3 has an invalid length. [ 540.765213][ T12] bond16: (slave erspan0): failed to get link speed/duplex [ 540.960271][T20026] syzkaller0: entered promiscuous mode [ 540.975645][T20026] syzkaller0: entered allmulticast mode [ 540.996183][ T6717] bond16: (slave erspan0): failed to get link speed/duplex [ 541.713325][T20072] xfrm0 speed is unknown, defaulting to 1000 [ 542.240554][T20094] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3388'. [ 542.459869][T20098] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3389'. [ 542.585009][T20080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3384'. [ 542.746919][T20072] lo speed is unknown, defaulting to 1000 [ 542.806458][T20113] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3394'. [ 543.253572][T20072] lo speed is unknown, defaulting to 1000 [ 543.267349][T20072] xfrm0 speed is unknown, defaulting to 1000 [ 543.303264][T20132] netlink: 'syz.2.3399': attribute type 1 has an invalid length. [ 543.382997][T20132] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 543.657759][T20145] netlink: 'syz.4.3401': attribute type 1 has an invalid length. [ 543.775335][T20145] 8021q: adding VLAN 0 to HW filter on device bond1 [ 543.790552][T20141] bond1: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 543.814255][T20141] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 543.910674][T20148] bond1: (slave ip6gretap1): making interface the new active one [ 543.921594][T20151] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3402'. [ 543.962446][T20148] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 544.181115][T20157] Cannot find del_set index 0 as target [ 544.241984][T20159] netlink: 'syz.4.3405': attribute type 1 has an invalid length. [ 544.637197][T20163] 8021q: adding VLAN 0 to HW filter on device bond3 [ 544.647684][T20163] bond2: (slave bond3): making interface the new active one [ 544.657464][T20163] bond2: (slave bond3): Enslaving as an active interface with an up link [ 544.829054][T20162] xfrm0 speed is unknown, defaulting to 1000 [ 544.865382][T12899] net_ratelimit: 16 callbacks suppressed [ 544.865404][T12899] bond16: (slave erspan0): failed to get link speed/duplex [ 545.011322][ T587] bond16: (slave erspan0): failed to get link speed/duplex [ 545.122110][T20190] netlink: 'syz.3.3412': attribute type 153 has an invalid length. [ 545.145487][ T48] bond16: (slave erspan0): failed to get link speed/duplex [ 545.447400][T20204] nbd: must specify a size in bytes for the device [ 545.454122][ T587] bond16: (slave erspan0): failed to get link speed/duplex [ 545.463405][T20197] block nbd0: NBD_DISCONNECT [ 545.468328][T20197] block nbd0: Send disconnect failed -32 [ 545.475547][T20197] block nbd0: Send disconnect failed -32 [ 545.476948][T20162] lo speed is unknown, defaulting to 1000 [ 545.481394][T20197] block nbd0: shutting down sockets [ 545.678211][ T1641] block nbd2: Possible stuck request ffff888027440000: control (read@0,1024B). Runtime 210 seconds [ 545.878417][T20208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3414'. [ 545.962580][T20191] vlan2: left promiscuous mode [ 546.007124][T20191] bridge0: left promiscuous mode [ 546.020447][ T7773] xfrm0 speed is unknown, defaulting to 1000 [ 546.037119][T12886] bond16: (slave erspan0): failed to get link speed/duplex [ 546.087080][T20162] lo speed is unknown, defaulting to 1000 [ 546.096692][T20162] xfrm0 speed is unknown, defaulting to 1000 [ 546.425562][T20226] syzkaller1: entered promiscuous mode [ 546.443119][T20230] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 546.456987][T20226] syzkaller1: entered allmulticast mode [ 546.684000][ T6717] bond16: (slave erspan0): failed to get link speed/duplex [ 546.864320][ T6701] bond16: (slave erspan0): failed to get link speed/duplex [ 547.006846][ T587] bond16: (slave erspan0): failed to get link speed/duplex [ 547.164207][ T587] bond16: (slave erspan0): failed to get link speed/duplex [ 547.294524][T12901] bond16: (slave erspan0): failed to get link speed/duplex [ 547.382336][T20271] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3427'. [ 547.418048][T20274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3428'. [ 547.434330][T20273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3428'. [ 547.611543][T20279] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 547.886374][T20288] netlink: 'syz.3.3434': attribute type 1 has an invalid length. [ 547.939379][T20295] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3434'. [ 548.032685][T20301] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3440'. [ 548.065296][T20291] can: request_module (can-proto-5) failed. [ 548.096410][T20305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3439'. [ 548.105634][T20305] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3439'. [ 548.175534][T20299] bond1: (slave gretap1): making interface the new active one [ 548.198886][T20299] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 548.543261][T20321] vxcan2: entered allmulticast mode [ 548.678242][T20328] IPVS: set_ctl: invalid protocol: 58 10.1.1.0:20001 [ 548.712070][T20331] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3448'. [ 548.822898][T20336] Cannot find add_set index 0 as target [ 549.015960][T20345] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3453'. [ 549.270038][T20315] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 549.974061][T12886] net_ratelimit: 19 callbacks suppressed [ 549.974087][T12886] bond16: (slave erspan0): failed to get link speed/duplex [ 550.139166][ T6717] bond16: (slave erspan0): failed to get link speed/duplex [ 550.433022][ T6717] bond16: (slave erspan0): failed to get link speed/duplex [ 550.604001][T12886] bond16: (slave erspan0): failed to get link speed/duplex [ 550.721575][T20421] xfrm0 speed is unknown, defaulting to 1000 [ 550.728265][ T48] bond16: (slave erspan0): failed to get link speed/duplex [ 550.843984][ T587] bond16: (slave erspan0): failed to get link speed/duplex [ 550.916204][T20426] netlink: 'syz.2.3476': attribute type 62 has an invalid length. [ 550.985174][T12886] bond16: (slave erspan0): failed to get link speed/duplex [ 551.117529][ T587] bond16: (slave erspan0): failed to get link speed/duplex [ 551.244348][ T587] bond16: (slave erspan0): failed to get link speed/duplex [ 551.425561][T20437] mac80211_hwsim hwsim28 wlan0: entered promiscuous mode [ 551.459856][T20437] mac80211_hwsim hwsim28 wlan0: entered allmulticast mode [ 551.494872][T20437] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 551.732871][T20445] batadv_slave_0: entered promiscuous mode [ 551.905856][T20448] bridge0: port 1(bridge_slave_0) entered listening state [ 551.915723][T20421] lo speed is unknown, defaulting to 1000 [ 551.962367][T20435] batadv_slave_0: left promiscuous mode [ 552.238684][T20458] __nla_validate_parse: 3 callbacks suppressed [ 552.238703][T20458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3486'. [ 552.296351][T20458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3486'. [ 552.296792][T20461] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3485'. [ 552.306142][T20458] netlink: 'syz.1.3486': attribute type 11 has an invalid length. [ 552.440449][T20461] xfrm0: entered allmulticast mode [ 552.742653][T20421] lo speed is unknown, defaulting to 1000 [ 552.772300][T20421] xfrm0 speed is unknown, defaulting to 1000 [ 552.879386][T20488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3492'. [ 553.796141][T20506] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3495'. [ 553.826947][T20506] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3495'. [ 553.899283][T20483] xfrm0 speed is unknown, defaulting to 1000 [ 554.129369][T20517] netlink: 'syz.0.3500': attribute type 3 has an invalid length. [ 554.151517][T20518] netlink: 'syz.0.3500': attribute type 3 has an invalid length. [ 554.247258][T20517] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.255148][T20517] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.377970][T20517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 554.392751][T20517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 554.572187][T20483] lo speed is unknown, defaulting to 1000 [ 554.575018][ T6717] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.588968][ T11] xfrm0 speed is unknown, defaulting to 1000 [ 554.595842][ T11] syz0: Port: 1 Link DOWN [ 554.600562][ T6717] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.611406][ T6717] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.621127][ T6717] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.764881][T20523] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 554.784581][T20528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3501'. [ 554.814263][T20523] bond1 (unregistering): Released all slaves [ 554.825047][T20528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3501'. [ 555.097117][T20538] netlink: 'syz.2.3504': attribute type 5 has an invalid length. [ 555.108999][T20538] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.3504'. [ 555.151899][T20483] lo speed is unknown, defaulting to 1000 [ 555.158809][T12886] net_ratelimit: 15 callbacks suppressed [ 555.158830][T12886] bond16: (slave erspan0): failed to get link speed/duplex [ 555.194077][T20483] xfrm0 speed is unknown, defaulting to 1000 [ 555.354946][ T12] bond16: (slave erspan0): failed to get link speed/duplex [ 555.626021][ T587] bond16: (slave erspan0): failed to get link speed/duplex [ 555.777298][ T587] bond16: (slave erspan0): failed to get link speed/duplex [ 555.872352][T20556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3507'. [ 555.955369][T12901] bond16: (slave erspan0): failed to get link speed/duplex [ 556.038681][T20562] netlink: 'syz.0.3508': attribute type 4 has an invalid length. [ 556.135250][ T587] bond16: (slave erspan0): failed to get link speed/duplex [ 556.266669][ T6717] bond16: (slave erspan0): failed to get link speed/duplex [ 556.640470][ T12] bond16: (slave erspan0): failed to get link speed/duplex [ 556.984064][ T587] bond16: (slave erspan0): failed to get link speed/duplex [ 557.115910][ T6716] bond16: (slave erspan0): failed to get link speed/duplex [ 557.599562][T20611] netlink: 'syz.4.3517': attribute type 8 has an invalid length. [ 558.415019][T20635] __nla_validate_parse: 3 callbacks suppressed [ 558.415040][T20635] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3524'. [ 558.945958][T20650] tipc: Enabled bearer , priority 30 [ 560.085351][ T9062] tipc: Node number set to 1598527977 [ 560.255019][T12886] net_ratelimit: 28 callbacks suppressed [ 560.255037][T12886] bond16: (slave erspan0): failed to get link speed/duplex [ 560.285346][T20653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3529'. [ 560.345584][T20653] openvswitch: netlink: Missing key (keys=40, expected=100) [ 560.391535][T20661] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3532'. [ 560.393372][T20658] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 560.416936][T12899] bond16: (slave erspan0): failed to get link speed/duplex [ 560.459298][T20659] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 560.547284][T12886] bond16: (slave erspan0): failed to get link speed/duplex [ 560.694975][ T587] bond16: (slave erspan0): failed to get link speed/duplex [ 560.696744][T20674] netlink: 36764 bytes leftover after parsing attributes in process `syz.4.3534'. [ 560.800618][T20674] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3534'. [ 560.820168][T20681] tipc: Started in network mode [ 560.846959][T20681] tipc: Node identity , cluster identity 4711 [ 560.882543][T20681] tipc: Failed to obtain node identity [ 560.902051][T20681] tipc: Enabling of bearer rejected, failed to enable media [ 560.926135][T20687] syzkaller0: entered promiscuous mode [ 560.940681][T20687] syzkaller0: entered allmulticast mode [ 561.006886][T20689] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3538'. [ 561.044697][T20689] nbd: must specify a size in bytes for the device [ 561.061470][T20692] block nbd3: NBD_DISCONNECT [ 561.088198][T20692] block nbd3: Send disconnect failed -32 [ 561.100122][ T587] bond16: (slave erspan0): failed to get link speed/duplex [ 561.120376][T20692] block nbd3: shutting down sockets [ 561.207079][T20695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3539'. [ 561.364277][T12899] bond16: (slave erspan0): failed to get link speed/duplex [ 561.429734][T20704] netlink: 252 bytes leftover after parsing attributes in process `syz.3.3542'. [ 561.484563][T12899] bond16: (slave erspan0): failed to get link speed/duplex [ 561.625721][ T6701] bond16: (slave erspan0): failed to get link speed/duplex [ 561.755177][ T6717] bond16: (slave erspan0): failed to get link speed/duplex [ 561.767267][T20716] netlink: 296 bytes leftover after parsing attributes in process `syz.3.3548'. [ 561.768443][T20719] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3549'. [ 561.818244][T20720] syzkaller1: entered promiscuous mode [ 561.824958][T20720] syzkaller1: entered allmulticast mode [ 562.046705][T20728] xfrm0 speed is unknown, defaulting to 1000 [ 562.123077][T20729] sch_tbf: peakrate 7 is lower than or equals to rate 9 ! [ 562.461760][T20744] block nbd0: Unsupported socket: should be TCP or UNIX. [ 562.600030][ T6717] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.620331][ T6717] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.631818][T20760] netlink: 'syz.0.3561': attribute type 2 has an invalid length. [ 562.683362][T20760] netlink: 'syz.0.3561': attribute type 1 has an invalid length. [ 562.752141][T20760] netlink: 'syz.0.3561': attribute type 2 has an invalid length. [ 562.778166][T20760] netlink: 'syz.0.3561': attribute type 1 has an invalid length. [ 562.806540][T20760] netlink: 'syz.0.3561': attribute type 2 has an invalid length. [ 562.829070][T20760] netlink: 'syz.0.3561': attribute type 1 has an invalid length. [ 562.864234][T20760] netlink: 'syz.0.3561': attribute type 2 has an invalid length. [ 562.882642][T20760] netlink: 'syz.0.3561': attribute type 1 has an invalid length. [ 562.908655][T20760] netlink: 'syz.0.3561': attribute type 2 has an invalid length. [ 562.926196][T20760] netlink: 'syz.0.3561': attribute type 1 has an invalid length. [ 563.054764][T20728] lo speed is unknown, defaulting to 1000 [ 563.938738][T20809] syzkaller0: entered promiscuous mode [ 563.957467][T20809] syzkaller0: entered allmulticast mode [ 564.046334][T20728] lo speed is unknown, defaulting to 1000 [ 564.046403][T20811] bridge_slave_1: left allmulticast mode [ 564.076430][T20811] bridge_slave_1: left promiscuous mode [ 564.094066][T20811] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.125724][T20813] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 564.145560][T20811] bridge_slave_0: left allmulticast mode [ 564.177717][T20811] bridge_slave_0: left promiscuous mode [ 564.204988][T20811] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.270321][T20728] xfrm0 speed is unknown, defaulting to 1000 [ 565.373991][ T6716] net_ratelimit: 20 callbacks suppressed [ 565.374011][ T6716] bond16: (slave erspan0): failed to get link speed/duplex [ 565.619734][ T6716] bond16: (slave erspan0): failed to get link speed/duplex [ 565.673689][T20855] __nla_validate_parse: 4 callbacks suppressed [ 565.712754][T20856] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3587'. [ 565.750668][T20855] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3587'. [ 566.037637][T20870] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3591'. [ 566.057517][T20859] 8021q: adding VLAN 0 to HW filter on device bond2 [ 566.165720][T20856] bond2: (slave veth5): Enslaving as an active interface with a down link [ 566.197069][T20870] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3591'. [ 566.277136][T20867] bond3: entered promiscuous mode [ 566.282770][T20867] 8021q: adding VLAN 0 to HW filter on device bond3 [ 566.291126][T20869] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3590'. [ 566.353909][T12886] bond16: (slave erspan0): failed to get link speed/duplex [ 566.474285][T12886] bond16: (slave erspan0): failed to get link speed/duplex [ 566.496179][T20878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3593'. [ 566.554759][T20878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3593'. [ 566.615503][T12899] bond16: (slave erspan0): failed to get link speed/duplex [ 566.734495][T12886] bond16: (slave erspan0): failed to get link speed/duplex [ 566.855419][T20891] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3596'. [ 566.880434][T20890] tap0: tun_chr_ioctl cmd 1074025673 [ 566.898267][T20894] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3596'. [ 566.986432][T20898] team0: Device xfrm0 is of different type [ 567.098614][T20890] tap0: tun_chr_ioctl cmd 1074025678 [ 567.106262][T20883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3595'. [ 567.127694][T20890] tap0: group set to 0 [ 567.137872][T20894] tap0: tun_chr_ioctl cmd 1074025677 [ 567.154928][T20894] tap0: linktype set to 3 [ 567.236779][T12886] bond16: (slave erspan0): failed to get link speed/duplex [ 567.364691][ T6716] bond16: (slave erspan0): failed to get link speed/duplex [ 567.434159][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 567.504974][ T6717] bond16: (slave erspan0): failed to get link speed/duplex [ 567.654633][T12886] bond16: (slave erspan0): failed to get link speed/duplex [ 567.911660][T20919] syzkaller1: entered promiscuous mode [ 567.925663][T20919] syzkaller1: entered allmulticast mode [ 568.877884][T20965] validate_nla: 121 callbacks suppressed [ 568.877904][T20965] netlink: 'syz.3.3616': attribute type 1 has an invalid length. [ 568.934839][T20965] bond3: entered promiscuous mode [ 568.940596][T20965] 8021q: adding VLAN 0 to HW filter on device bond3 [ 570.434456][T12899] net_ratelimit: 20 callbacks suppressed [ 570.434477][T12899] bond16: (slave erspan0): failed to get link speed/duplex [ 570.554674][ T6717] bond16: (slave erspan0): failed to get link speed/duplex [ 570.674324][T12899] bond16: (slave erspan0): failed to get link speed/duplex [ 570.784207][ T6717] bond16: (slave erspan0): failed to get link speed/duplex [ 570.894097][ T6717] bond16: (slave erspan0): failed to get link speed/duplex [ 571.013943][T12899] bond16: (slave erspan0): failed to get link speed/duplex [ 571.124488][T12899] bond16: (slave erspan0): failed to get link speed/duplex [ 571.233869][ T6701] bond16: (slave erspan0): failed to get link speed/duplex [ 571.344153][ T587] bond16: (slave erspan0): failed to get link speed/duplex [ 571.442714][T20946] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 571.454470][ T6701] bond16: (slave erspan0): failed to get link speed/duplex [ 571.614602][T20977] __nla_validate_parse: 5 callbacks suppressed [ 571.614622][T20977] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3619'. [ 571.705063][T20982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3622'. [ 571.767010][T20977] veth0_to_team: entered promiscuous mode [ 571.796896][T20977] veth0_to_team: entered allmulticast mode [ 571.891615][T20990] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3624'. [ 572.005192][T20996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3627'. [ 572.118817][T20999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3628'. [ 572.318345][T21011] xfrm0 speed is unknown, defaulting to 1000 [ 572.358595][T21013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3633'. [ 572.503545][T21019] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3634'. [ 572.567980][T21019] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3634'. [ 573.002554][T21028] netlink: 456 bytes leftover after parsing attributes in process `syz.0.3637'. [ 573.064951][T21011] lo speed is unknown, defaulting to 1000 [ 573.622121][T21069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3645'. [ 573.766622][T21011] lo speed is unknown, defaulting to 1000 [ 573.788608][T21011] xfrm0 speed is unknown, defaulting to 1000 [ 574.302589][T21081] syzkaller1: entered promiscuous mode [ 574.319476][T21081] syzkaller1: entered allmulticast mode [ 574.462615][T21100] netlink: 'syz.4.3650': attribute type 1 has an invalid length. [ 574.489917][T21095] xt_TPROXY: Can be used only with -p tcp or -p udp [ 574.517632][T21096] xt_TPROXY: Can be used only with -p tcp or -p udp [ 575.474433][ T48] net_ratelimit: 28 callbacks suppressed [ 575.474452][ T48] bond16: (slave erspan0): failed to get link speed/duplex [ 575.598051][T21133] xt_hashlimit: size too large, truncated to 1048576 [ 575.680277][T21135] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 575.731177][T21135] xt_TCPMSS: Only works on TCP SYN packets [ 575.745251][ T587] bond16: (slave erspan0): failed to get link speed/duplex [ 575.758178][ T1641] block nbd2: Possible stuck request ffff888027440000: control (read@0,1024B). Runtime 240 seconds [ 575.886008][T12899] bond16: (slave erspan0): failed to get link speed/duplex [ 576.022547][T21148] netlink: 'syz.4.3664': attribute type 39 has an invalid length. [ 576.031393][T21144] bond1: option lacp_rate: invalid value (128) [ 576.041499][T21144] bond1 (unregistering): Released all slaves [ 576.071881][T21150] netlink: 'syz.3.3665': attribute type 8 has an invalid length. [ 576.115352][T12899] bond16: (slave erspan0): failed to get link speed/duplex [ 576.169772][T21150] bridge0: port 3(veth0) entered blocking state [ 576.196713][T21150] bridge0: port 3(veth0) entered disabled state [ 576.215694][T21150] veth0: entered allmulticast mode [ 576.230739][T21150] veth0: entered promiscuous mode [ 576.236797][T21150] bridge0: port 3(veth0) entered blocking state [ 576.243219][T21150] bridge0: port 3(veth0) entered forwarding state [ 576.274043][ T6701] bond16: (slave erspan0): failed to get link speed/duplex [ 576.443649][T21163] netlink: 'syz.2.3669': attribute type 4 has an invalid length. [ 576.497877][T21167] netlink: 'syz.2.3669': attribute type 4 has an invalid length. [ 576.540049][T21168] FAULT_INJECTION: forcing a failure. [ 576.540049][T21168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 576.565036][T21168] CPU: 1 UID: 0 PID: 21168 Comm: syz.4.3671 Not tainted syzkaller #0 PREEMPT(full) [ 576.565068][T21168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 576.565080][T21168] Call Trace: [ 576.565087][T21168] [ 576.565095][T21168] dump_stack_lvl+0xe8/0x150 [ 576.565192][T21168] should_fail_ex+0x40c/0x560 [ 576.565312][T21168] _copy_to_user+0x31/0xb0 [ 576.565363][T21168] simple_read_from_buffer+0xe1/0x170 [ 576.565389][T21168] proc_fail_nth_read+0x1bb/0x230 [ 576.565413][T21168] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 576.565436][T21168] ? rw_verify_area+0x24a/0x4c0 [ 576.565457][T21168] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 576.565475][T21168] vfs_read+0x213/0xa80 [ 576.565504][T21168] ? __pfx_vfs_read+0x10/0x10 [ 576.565520][T21168] ? aa_sk_perm+0x6d5/0x900 [ 576.565635][T21168] ? tipc_setsockopt+0x19e/0x9a0 [ 576.565727][T21168] ? fd_install+0x94/0x3d0 [ 576.565766][T21168] ksys_read+0x150/0x270 [ 576.565788][T21168] ? __pfx_ksys_read+0x10/0x10 [ 576.565815][T21168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.565852][T21168] do_syscall_64+0x174/0x580 [ 576.565903][T21168] ? clear_bhb_loop+0x40/0x90 [ 576.565928][T21168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.565946][T21168] RIP: 0033:0x7fb6af75e68e [ 576.565962][T21168] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 576.565977][T21168] RSP: 002b:00007fb6b05d6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 576.565998][T21168] RAX: ffffffffffffffda RBX: 00007fb6b05d76c0 RCX: 00007fb6af75e68e [ 576.566010][T21168] RDX: 000000000000000f RSI: 00007fb6b05d70a0 RDI: 0000000000000004 [ 576.566021][T21168] RBP: 00007fb6b05d7090 R08: 0000000000000000 R09: 0000000000000000 [ 576.566053][T21168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.566069][T21168] R13: 00007fb6afa26038 R14: 00007fb6afa25fa0 R15: 00007ffcf6689228 [ 576.566096][T21168] [ 576.841747][ T48] bond16: (slave erspan0): failed to get link speed/duplex [ 577.051979][ T6717] bond16: (slave erspan0): failed to get link speed/duplex [ 577.192584][T21194] __nla_validate_parse: 2 callbacks suppressed [ 577.192602][T21194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3676'. [ 577.223400][T21194] netlink: 'syz.4.3676': attribute type 5 has an invalid length. [ 577.231818][T21194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3676'. [ 577.389105][T21201] syz_tun: entered allmulticast mode [ 577.410579][T12886] bond16: (slave erspan0): failed to get link speed/duplex [ 577.457781][T21206] syz_tun: left allmulticast mode [ 577.537686][ T48] bond16: (slave erspan0): failed to get link speed/duplex [ 577.590930][T21210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3681'. [ 577.726882][T21211] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 577.819931][T21220] veth0: left allmulticast mode [ 577.839551][T21220] veth0: left promiscuous mode [ 577.885734][T21220] bridge0: port 3(veth0) entered disabled state [ 577.923588][T21220] bridge_slave_0: left allmulticast mode [ 577.930153][T21220] bridge_slave_0: left promiscuous mode [ 577.937645][T21220] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.951551][T21220] bridge_slave_1: left allmulticast mode [ 577.960016][T21220] bridge_slave_1: left promiscuous mode [ 577.967013][T21220] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.979781][T21220] bond0: (slave bond_slave_0): Releasing backup interface [ 577.991909][T21220] bond0: (slave bond_slave_1): Releasing backup interface [ 578.025328][T21220] team0: Port device team_slave_0 removed [ 578.035978][T21220] team0: Port device team_slave_1 removed [ 578.042576][T21220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 578.051010][T21220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.060132][T21220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 578.068433][T21220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.080034][T21220] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 578.113141][T21224] team0: Port device xfrm0 added [ 578.120859][T21229] tipc: Started in network mode [ 578.126054][T21229] tipc: Node identity 1601d50b33e5, cluster identity 4711 [ 578.133637][T21229] tipc: Enabled bearer , priority 0 [ 578.340056][T21254] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3690'. [ 578.551548][T21262] netlink: 'syz.2.3694': attribute type 5 has an invalid length. [ 578.907095][T21277] netlink: 'syz.0.3700': attribute type 1 has an invalid length. [ 579.087686][T21287] bond1: (slave bridge0): making interface the new active one [ 579.096999][T21287] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 579.125386][T21277] team0: entered promiscuous mode [ 579.138173][T21277] team_slave_0: entered promiscuous mode [ 579.149625][T21294] nbd: must specify at least one socket [ 579.156030][T21277] team_slave_1: entered promiscuous mode [ 579.166700][T21277] team0: entered allmulticast mode [ 579.180129][T21277] team_slave_0: entered allmulticast mode [ 579.202911][T21277] team_slave_1: entered allmulticast mode [ 579.257016][T21277] 8021q: adding VLAN 0 to HW filter on device team0 [ 579.277420][T21277] bond1: (slave team0): Enslaving as an active interface with a down link [ 579.317046][ T187] tipc: Node number set to 635753739 [ 579.618634][T21320] netlink: 'syz.3.3708': attribute type 1 has an invalid length. [ 580.009878][T21341] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3714'. [ 580.350520][T21357] netlink: 'syz.4.3719': attribute type 1 has an invalid length. [ 580.407499][T21357] 8021q: adding VLAN 0 to HW filter on device bond5 [ 580.421503][T21357] bond4: (slave bond5): making interface the new active one [ 580.429676][T21357] bond4: (slave bond5): Enslaving as an active interface with an up link [ 580.453640][T21357] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 580.584224][ T48] net_ratelimit: 18 callbacks suppressed [ 580.584245][ T48] bond16: (slave erspan0): failed to get link speed/duplex [ 580.719863][T21371] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 580.745605][ T587] bond16: (slave erspan0): failed to get link speed/duplex [ 580.874959][ T587] bond16: (slave erspan0): failed to get link speed/duplex [ 580.880122][T21380] raw_sendmsg: syz.4.3727 forgot to set AF_INET. Fix it! [ 581.004395][ T587] bond16: (slave erspan0): failed to get link speed/duplex [ 581.259643][T21393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3730'. [ 581.294157][ T587] bond16: (slave erspan0): failed to get link speed/duplex [ 581.428627][T21403] sctp: [Deprecated]: syz.2.3734 (pid 21403) Use of struct sctp_assoc_value in delayed_ack socket option. [ 581.428627][T21403] Use struct sctp_sack_info instead [ 581.436578][T21406] syzkaller0: entered promiscuous mode [ 581.481249][T21406] syzkaller0: entered allmulticast mode [ 581.549679][T21412] netlink: 'syz.1.3736': attribute type 12 has an invalid length. [ 581.587879][ T6701] bond16: (slave erspan0): failed to get link speed/duplex [ 581.727113][T21420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3739'. [ 581.795309][T21420] hsr_slave_1 (unregistering): left promiscuous mode [ 581.869066][T12886] bond16: (slave erspan0): failed to get link speed/duplex [ 582.005498][T12886] bond16: (slave erspan0): failed to get link speed/duplex [ 582.086254][T21431] netlink: 'syz.3.3743': attribute type 12 has an invalid length. [ 582.105209][T21431] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 582.165028][T12886] bond16: (slave erspan0): failed to get link speed/duplex [ 582.340210][T21435] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3745'. [ 582.356609][T21440] batadv_slave_1: entered allmulticast mode [ 582.363479][T21438] xfrm0 speed is unknown, defaulting to 1000 [ 582.381506][T21440] dvmrp8: entered allmulticast mode [ 582.477766][T21440] batadv_slave_1: left allmulticast mode [ 582.675622][T21445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3748'. [ 582.709741][T21445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3748'. [ 582.743779][T21445] netlink: 58 bytes leftover after parsing attributes in process `syz.2.3748'. [ 582.924535][T21453] netlink: 292 bytes leftover after parsing attributes in process `syz.3.3751'. [ 583.188536][T21467] netlink: 'syz.0.3755': attribute type 10 has an invalid length. [ 583.275837][T21438] lo speed is unknown, defaulting to 1000 [ 583.463608][T21475] IPVS: Unknown mcast interface: pimreg1 [ 583.806688][T21438] lo speed is unknown, defaulting to 1000 [ 583.827227][T21438] xfrm0 speed is unknown, defaulting to 1000 [ 583.844019][ T5629] block nbd0: Receive control failed (result -32) [ 583.852461][ T50] block nbd0: Receive control failed (result -32) [ 583.909049][T21485] xt_bpf: check failed: parse error [ 583.943632][T21490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3761'. [ 584.176105][T21490] xfrm0: entered allmulticast mode [ 584.355724][T21506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3766'. [ 584.644367][T21514] TCP: TCP_TX_DELAY enabled [ 584.717976][T21514] netlink: 'syz.1.3768': attribute type 1 has an invalid length. [ 584.750750][T21514] netlink: 'syz.1.3768': attribute type 2 has an invalid length. [ 584.778971][T21513] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3768'. [ 584.809160][T21513] 0·: renamed from hsr0 (while UP) [ 584.839984][T21513] 0·: failed to rename [ 584.845674][T21513] 0·: entered allmulticast mode [ 584.860076][T21513] hsr_slave_0: entered allmulticast mode [ 585.530801][T21531] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3773'. [ 585.636652][ T6701] net_ratelimit: 28 callbacks suppressed [ 585.636672][ T6701] bond16: (slave erspan0): failed to get link speed/duplex [ 585.752077][T21545] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3778'. [ 585.900765][T21545] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 586.006838][ T587] bond16: (slave erspan0): failed to get link speed/duplex [ 586.151531][ T6716] bond16: (slave erspan0): failed to get link speed/duplex [ 586.284872][ T6716] bond16: (slave erspan0): failed to get link speed/duplex [ 586.394150][ T587] bond16: (slave erspan0): failed to get link speed/duplex [ 586.514165][ T6716] bond16: (slave erspan0): failed to get link speed/duplex [ 586.634976][ T6716] bond16: (slave erspan0): failed to get link speed/duplex [ 586.744307][ T587] bond16: (slave erspan0): failed to get link speed/duplex [ 587.153971][ T6701] bond16: (slave erspan0): failed to get link speed/duplex [ 587.388264][T21597] __nla_validate_parse: 2 callbacks suppressed [ 587.388282][T21597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3790'. [ 587.435693][T21599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3791'. [ 587.769826][T21611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3794'. [ 587.830567][T21611] xfrm0: entered allmulticast mode [ 588.266826][ T50] block nbd3: Receive control failed (result -32) [ 588.407413][T21648] netlink: 'syz.2.3805': attribute type 1 has an invalid length. [ 588.489237][T21652] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3803'. [ 588.596123][T21663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3808'. [ 589.309879][T21689] sch_fq: defrate 4294967293 ignored. [ 589.325902][T21689] žÿ: renamed from team_slave_1 [ 589.645788][T21674] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 590.097147][T21709] xfrm0 speed is unknown, defaulting to 1000 [ 590.419204][T21722] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3822'. [ 590.601201][T21709] lo speed is unknown, defaulting to 1000 [ 590.733979][ T6701] net_ratelimit: 32 callbacks suppressed [ 590.733998][ T6701] bond16: (slave erspan0): failed to get link speed/duplex [ 590.831990][T21733] sctp: [Deprecated]: syz.4.3826 (pid 21733) Use of struct sctp_assoc_value in delayed_ack socket option. [ 590.831990][T21733] Use struct sctp_sack_info instead [ 590.854107][T12899] bond16: (slave erspan0): failed to get link speed/duplex [ 590.984464][ T6717] bond16: (slave erspan0): failed to get link speed/duplex [ 591.176522][T21709] lo speed is unknown, defaulting to 1000 [ 591.184353][ T587] bond16: (slave erspan0): failed to get link speed/duplex [ 591.201442][T21709] xfrm0 speed is unknown, defaulting to 1000 [ 591.325247][ T587] bond16: (slave erspan0): failed to get link speed/duplex [ 591.413386][T21753] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3831'. [ 591.431759][T21753] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3831'. [ 591.444134][ T6717] bond16: (slave erspan0): failed to get link speed/duplex [ 591.573954][ T587] bond16: (slave erspan0): failed to get link speed/duplex [ 591.687194][ T6701] bond16: (slave erspan0): failed to get link speed/duplex [ 591.730227][T21756] netlink: 'syz.4.3832': attribute type 5 has an invalid length. [ 591.805891][ T6701] bond16: (slave erspan0): failed to get link speed/duplex [ 591.924092][ T48] bond16: (slave erspan0): failed to get link speed/duplex [ 592.388659][T21773] xfrm0 speed is unknown, defaulting to 1000 [ 592.466397][T21780] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3838'. [ 592.759219][T21785] netlink: 'syz.4.3840': attribute type 1 has an invalid length. [ 592.968896][T21789] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 593.023524][T21793] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3843'. [ 593.130484][T21782] xfrm0 speed is unknown, defaulting to 1000 [ 593.139694][T21773] lo speed is unknown, defaulting to 1000 [ 593.176760][T21795] netlink: 'syz.4.3844': attribute type 2 has an invalid length. [ 593.187820][T21795] netlink: 'syz.4.3844': attribute type 2 has an invalid length. [ 593.453486][T21803] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3847'. [ 593.598555][T21808] netlink: 'syz.3.3849': attribute type 2 has an invalid length. [ 593.674666][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 593.693649][T21808] syzkaller0: entered promiscuous mode [ 593.717194][T21808] syzkaller0: entered allmulticast mode [ 593.793482][T21808] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 593.938568][T21773] lo speed is unknown, defaulting to 1000 [ 593.968904][T21805] xfrm0 speed is unknown, defaulting to 1000 [ 593.978075][T21782] lo speed is unknown, defaulting to 1000 [ 593.982558][T21773] xfrm0 speed is unknown, defaulting to 1000 [ 594.177998][T21812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3851'. [ 594.714142][T21782] lo speed is unknown, defaulting to 1000 [ 594.729508][T21805] lo speed is unknown, defaulting to 1000 [ 594.754396][T21782] xfrm0 speed is unknown, defaulting to 1000 [ 594.833685][T21831] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3858'. [ 595.369957][T21839] syzkaller0: entered promiscuous mode [ 595.387444][T21839] syzkaller0: entered allmulticast mode [ 595.578503][T21805] lo speed is unknown, defaulting to 1000 [ 595.618364][T21805] xfrm0 speed is unknown, defaulting to 1000 [ 595.632306][T21850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3862'. [ 595.658267][T21850] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3862'. [ 595.742356][ T29] audit: type=1804 audit(1782957158.491:6): pid=21852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3863" name="/newroot/103/cgroup.controllers" dev="tmpfs" ino=541 res=1 errno=0 [ 595.778085][T21850] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3862'. [ 595.799032][ T29] audit: type=1800 audit(1782957158.501:7): pid=21852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3863" name="cgroup.controllers" dev="tmpfs" ino=541 res=0 errno=0 [ 595.857138][ T29] audit: type=1800 audit(1782957158.501:8): pid=21852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3863" name="cgroup.controllers" dev="tmpfs" ino=541 res=0 errno=0 [ 596.853619][T21875] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3867'. [ 596.868747][ T6716] net_ratelimit: 23 callbacks suppressed [ 596.868762][ T6716] bond16: (slave erspan0): failed to get link speed/duplex [ 596.998182][ T6701] bond16: (slave erspan0): failed to get link speed/duplex [ 597.116511][T21877] tc action pedit 'at' offset -4096 out of bounds [ 597.124915][T21877] tc action pedit 'at' offset -4096 out of bounds [ 597.131397][T21877] tc action pedit 'at' offset -4096 out of bounds [ 597.137885][T21877] tc action pedit 'at' offset -4096 out of bounds [ 597.144357][T21877] tc action pedit 'at' offset -4096 out of bounds [ 597.150783][T21877] tc action pedit 'at' offset -4096 out of bounds [ 597.157249][T21877] tc action pedit 'at' offset -4096 out of bounds [ 597.163670][T21877] tc action pedit 'at' offset -4096 out of bounds [ 597.170155][T21877] tc action pedit 'at' offset -4096 out of bounds [ 597.176632][T21877] tc action pedit 'at' offset -4096 out of bounds [ 597.183091][T21877] TC_ACT_REPEAT abuse ? [ 597.188914][ T6701] bond16: (slave erspan0): failed to get link speed/duplex [ 597.346159][T21884] netlink: 'syz.0.3870': attribute type 1 has an invalid length. [ 597.386130][T21880] bond5: option resend_igmp: invalid value (2878) [ 597.408753][T21880] bond5: option resend_igmp: allowed values 0 - 255 [ 597.412889][T21887] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3871'. [ 597.427578][T21880] bond5 (unregistering): Released all slaves [ 597.479142][T21890] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3871'. [ 597.637675][T21893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3871'. [ 597.878433][T21888] bond2: (slave bridge2): Enslaving as a backup interface with an up link [ 597.995532][T12886] bond16: (slave erspan0): failed to get link speed/duplex [ 598.116685][T21906] netlink: 'syz.4.3875': attribute type 1 has an invalid length. [ 598.245474][T21906] bond6: entered promiscuous mode [ 598.279881][T21906] 8021q: adding VLAN 0 to HW filter on device bond6 [ 598.349084][ T14] bond16: (slave erspan0): failed to get link speed/duplex [ 598.385223][T21906] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3875'. [ 598.412466][T21906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3875'. [ 598.494063][ T12] bond16: (slave erspan0): failed to get link speed/duplex [ 598.591113][T21927] syzkaller0: entered promiscuous mode [ 598.614109][T21927] syzkaller0: entered allmulticast mode [ 598.631213][T21939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 598.647262][ T12] bond16: (slave erspan0): failed to get link speed/duplex [ 598.661792][T21942] netlink: 16138 bytes leftover after parsing attributes in process `syz.4.3886'. [ 598.765279][ T12] bond16: (slave erspan0): failed to get link speed/duplex [ 598.903850][ T12] bond16: (slave erspan0): failed to get link speed/duplex [ 598.958550][T21954] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3889'. [ 599.138061][T21968] nbd: socks must be embedded in a SOCK_ITEM attr [ 599.150837][T21968] block nbd8: shutting down sockets [ 599.284617][T21976] smc: removing ib device syz1 [ 599.318917][T21978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3898'. [ 599.345435][T21978] netlink: 356 bytes leftover after parsing attributes in process `syz.1.3898'. [ 599.420410][T21985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3901'. [ 599.448620][T21985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3901'. [ 599.480466][T21976] smbdirect: ib_dev[syz1] removed [ 599.781313][ T7773] IPVS: starting estimator thread 0... [ 599.798291][T21987] xfrm0 speed is unknown, defaulting to 1000 [ 599.884409][T21999] IPVS: using max 30 ests per chain, 72000 per kthread [ 599.970754][T22006] netlink: 'syz.0.3907': attribute type 15 has an invalid length. [ 600.127925][T12886] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 600.147826][T12886] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 600.185773][T12886] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 600.220760][T12886] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 601.156062][T22029] vlan2: entered promiscuous mode [ 601.169456][T22029] veth1: entered promiscuous mode [ 601.215499][T22034] block nbd8: server does not support multiple connections per device. [ 601.288623][T22034] block nbd8: shutting down sockets [ 601.322425][T21987] lo speed is unknown, defaulting to 1000 [ 601.410877][T21987] xfrm0 speed is unknown, defaulting to 1000 [ 601.701943][T22045] bridge0: Device is already in use. [ 601.853455][T22054] netlink: 'syz.4.3923': attribute type 1 has an invalid length. [ 602.126880][T22054] 8021q: adding VLAN 0 to HW filter on device bond7 [ 602.310905][T12901] net_ratelimit: 16 callbacks suppressed [ 602.310926][T12901] bond16: (slave erspan0): failed to get link speed/duplex [ 602.443904][T12886] bond16: (slave erspan0): failed to get link speed/duplex [ 602.563851][T12886] bond16: (slave erspan0): failed to get link speed/duplex [ 602.685428][ T6701] bond16: (slave erspan0): failed to get link speed/duplex [ 602.804044][ T14] bond16: (slave erspan0): failed to get link speed/duplex [ 602.914391][T12886] bond16: (slave erspan0): failed to get link speed/duplex [ 603.024240][T12886] bond16: (slave erspan0): failed to get link speed/duplex [ 603.146904][T12901] bond16: (slave erspan0): failed to get link speed/duplex [ 603.264948][ T14] bond16: (slave erspan0): failed to get link speed/duplex [ 603.394205][ T14] bond16: (slave erspan0): failed to get link speed/duplex [ 603.706642][T22087] __nla_validate_parse: 5 callbacks suppressed [ 603.706655][T22087] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3932'. [ 604.547680][T22105] netlink: 'syz.3.3937': attribute type 16 has an invalid length. [ 604.557585][T22105] netlink: 'syz.3.3937': attribute type 17 has an invalid length. [ 604.681936][T22048] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 604.790692][T22108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3938'. [ 604.908460][T22114] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3940'. [ 604.935303][T22112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3939'. [ 605.145566][T22123] can: request_module (can-proto-3) failed. [ 605.350601][T22150] netlink: 'syz.1.3950': attribute type 1 has an invalid length. [ 605.422491][T22150] bond1: entered promiscuous mode [ 605.428223][T22150] 8021q: adding VLAN 0 to HW filter on device bond1 [ 605.568756][T22162] netlink: 300 bytes leftover after parsing attributes in process `syz.4.3953'. [ 605.834639][ T1641] block nbd2: Possible stuck request ffff888027440000: control (read@0,1024B). Runtime 270 seconds [ 606.017304][T22174] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3956'. [ 606.130373][T22184] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3961'. [ 606.140744][T22184] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3961'. [ 606.153641][T22184] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3961'. [ 606.235637][T22184] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3961'. [ 606.286642][T22187] bond5: option arp_all_targets: invalid value (3) [ 606.296030][T22187] bond5 (unregistering): Released all slaves [ 607.030347][T22224] gretap0: entered promiscuous mode [ 607.074537][T22224] vlan2: entered promiscuous mode [ 607.111343][T22229] netlink: 'syz.1.3974': attribute type 1 has an invalid length. [ 607.138664][T22229] netlink: 'syz.1.3974': attribute type 2 has an invalid length. [ 607.265055][T22233] team0: left promiscuous mode [ 607.270091][T22233] team_slave_0: left promiscuous mode [ 607.318524][T22233] team_slave_1: left promiscuous mode [ 607.353160][T22233] team0: left allmulticast mode [ 607.375678][T22233] team_slave_0: left allmulticast mode [ 607.408409][T22233] team_slave_1: left allmulticast mode [ 607.429670][T22233] veth0_to_team: left promiscuous mode [ 607.444169][T22233] veth0_to_team: left allmulticast mode [ 607.456580][T22233] xfrm0: left allmulticast mode [ 607.531032][ T6716] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 607.573664][ T6716] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 607.597309][ T6716] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 607.631264][ T6716] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 607.664307][ T6716] net_ratelimit: 28 callbacks suppressed [ 607.664325][ T6716] bond16: (slave erspan0): failed to get link speed/duplex [ 607.835592][ T48] bond16: (slave erspan0): failed to get link speed/duplex [ 607.865573][T22257] syzkaller1: entered promiscuous mode [ 607.915049][T22257] syzkaller1: entered allmulticast mode [ 607.966575][ T12] bond16: (slave erspan0): failed to get link speed/duplex [ 608.166586][ T12] bond16: (slave erspan0): failed to get link speed/duplex [ 608.291390][ T12] bond16: (slave erspan0): failed to get link speed/duplex [ 608.414954][T12901] bond16: (slave erspan0): failed to get link speed/duplex [ 608.572148][T12901] bond16: (slave erspan0): failed to get link speed/duplex [ 608.714490][ T6716] bond16: (slave erspan0): failed to get link speed/duplex [ 608.837618][ T12] bond16: (slave erspan0): failed to get link speed/duplex [ 608.900403][T22302] __nla_validate_parse: 2 callbacks suppressed [ 608.900422][T22302] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3990'. [ 608.969134][T22303] xt_hashlimit: size too large, truncated to 1048576 [ 609.052492][T22306] @0Ù: renamed from bond_slave_1 (while UP) [ 609.108353][T12899] bond16: (slave erspan0): failed to get link speed/duplex [ 609.357714][T22317] tipc: Started in network mode [ 609.373525][T22317] tipc: Node identity , cluster identity 4711 [ 609.390955][T22317] tipc: Failed to obtain node identity [ 609.407524][T22317] tipc: Enabling of bearer rejected, failed to enable media [ 609.567276][T22324] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3997'. [ 609.949656][T22337] netlink: 'syz.0.4001': attribute type 2 has an invalid length. [ 610.096432][T22337] : entered promiscuous mode [ 610.126735][T22347] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4003'. [ 610.164325][T22349] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4003'. [ 610.222525][ T5634] block nbd8: Receive control failed (result -32) [ 610.233531][ T5629] block nbd8: Receive control failed (result -32) [ 610.234487][ T50] block nbd8: Receive control failed (result -32) [ 610.331307][T22357] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4004'. [ 610.503597][T22370] netlink: 'syz.4.4009': attribute type 1 has an invalid length. [ 610.595116][T22370] 8021q: adding VLAN 0 to HW filter on device bond8 [ 610.689379][T22370] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4009'. [ 611.085102][T22370] bond8: entered promiscuous mode [ 611.090392][T22370] bond8: entered allmulticast mode [ 611.237661][T22378] bond8: (slave dummy0): making interface the new active one [ 611.247657][T22378] dummy0: entered promiscuous mode [ 611.285251][T22378] dummy0: entered allmulticast mode [ 611.299375][T22378] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 611.388966][T22386] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4013'. [ 611.498451][T22389] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4011'. [ 611.555549][T22389] nbd: must specify a size in bytes for the device [ 611.671665][T22399] xfrm0 speed is unknown, defaulting to 1000 [ 611.672481][T22403] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4017'. [ 612.364628][T22434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4025'. [ 612.386048][T22434] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 612.470279][ T50] block nbd9: Receive control failed (result -32) [ 612.481374][ T5634] block nbd9: Receive control failed (result -32) [ 612.591487][T22399] lo speed is unknown, defaulting to 1000 [ 612.599275][T22399] xfrm0 speed is unknown, defaulting to 1000 [ 612.673668][T22448] xt_hashlimit: size too large, truncated to 1048576 [ 612.704603][T12899] net_ratelimit: 24 callbacks suppressed [ 612.704624][T12899] bond16: (slave erspan0): failed to get link speed/duplex [ 613.071895][T22457] 8021q: adding VLAN 0 to HW filter on device bond9 [ 613.152062][T22461] bond9: (slave veth5): Enslaving as an active interface with an up link [ 613.173947][T12901] bond16: (slave erspan0): failed to get link speed/duplex [ 613.304761][T12901] bond16: (slave erspan0): failed to get link speed/duplex [ 613.433880][ T6716] bond16: (slave erspan0): failed to get link speed/duplex [ 613.564244][T12886] bond16: (slave erspan0): failed to get link speed/duplex [ 613.684518][T12901] bond16: (slave erspan0): failed to get link speed/duplex [ 613.804030][T12886] bond16: (slave erspan0): failed to get link speed/duplex [ 613.924202][ T6701] bond16: (slave erspan0): failed to get link speed/duplex [ 614.034542][T12886] bond16: (slave erspan0): failed to get link speed/duplex [ 614.144253][T12886] bond16: (slave erspan0): failed to get link speed/duplex [ 614.629830][T22427] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 615.149824][T22506] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 615.159779][T22506] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 615.171884][T22506] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 615.394530][T22522] __nla_validate_parse: 2 callbacks suppressed [ 615.394549][T22522] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4045'. [ 615.904927][T22534] netlink: 'syz.4.4050': attribute type 1 has an invalid length. [ 616.075478][T22534] 8021q: adding VLAN 0 to HW filter on device bond10 [ 616.096749][T22541] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4052'. [ 616.107886][T22541] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4052'. [ 616.117187][T22541] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4052'. [ 616.227584][T22537] bond10: (slave veth7): Enslaving as an active interface with a down link [ 616.248467][T22539] vlan2: entered allmulticast mode [ 616.256017][T22539] veth0_to_bond: entered allmulticast mode [ 616.264801][T22539] veth0_to_bond: entered promiscuous mode [ 616.276765][T22539] veth0_to_bond: left promiscuous mode [ 616.285885][T22539] bond10: (slave vlan2): Enslaving as an active interface with a down link [ 616.357111][T22534] bond11: option updelay: invalid value (18446744073709518847) [ 616.365864][T22534] bond11: option updelay: allowed values 0 - 2147483647 [ 616.378273][T22534] bond11 (unregistering): Released all slaves [ 616.410501][T22543] bond0: (slave ip6tnl0): Error: Device type is different from other slaves [ 616.432408][T22545] ip6erspan0: entered allmulticast mode [ 616.566491][T22548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4055'. [ 616.607595][T22548] xfrm0: entered allmulticast mode [ 616.617183][ T14] tipc: Resetting bearer [ 616.739679][T22555] IPVS: set_ctl: invalid protocol: 51 10.1.1.2:20004 [ 616.799796][T22555] IPVS: set_ctl: invalid protocol: 51 10.1.1.2:20004 [ 616.915383][T22567] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4058'. [ 617.127711][T22583] netlink: 'syz.4.4062': attribute type 5 has an invalid length. [ 617.306836][T22589] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4063'. [ 617.489095][T22590] xfrm0 speed is unknown, defaulting to 1000 [ 617.775735][ T6701] net_ratelimit: 24 callbacks suppressed [ 617.775756][ T6701] bond16: (slave erspan0): failed to get link speed/duplex [ 617.919998][ T14] bond16: (slave erspan0): failed to get link speed/duplex [ 617.992147][T22611] netlink: 'syz.0.4068': attribute type 1 has an invalid length. [ 618.008831][T22612] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4069'. [ 618.019227][T22585] xfrm0 speed is unknown, defaulting to 1000 [ 618.108859][T22611] bond3: entered promiscuous mode [ 618.115094][T22611] 8021q: adding VLAN 0 to HW filter on device bond3 [ 618.123266][T22590] lo speed is unknown, defaulting to 1000 [ 618.130520][T22612] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 618.192852][T22590] xfrm0 speed is unknown, defaulting to 1000 [ 618.203360][ T6701] bond16: (slave erspan0): failed to get link speed/duplex [ 618.524257][ T12] bond16: (slave erspan0): failed to get link speed/duplex [ 618.540473][T22645] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4074'. [ 618.691423][T22585] lo speed is unknown, defaulting to 1000 [ 618.704538][ T14] bond16: (slave erspan0): failed to get link speed/duplex [ 618.727556][T22585] xfrm0 speed is unknown, defaulting to 1000 [ 618.927053][T22655] batadv_slave_1: entered promiscuous mode [ 619.255274][T22676] bond16: (slave erspan0): failed to get link speed/duplex [ 619.413932][T22676] bond16: (slave erspan0): failed to get link speed/duplex [ 619.527380][ T6709] dvmrp0: left allmulticast mode [ 619.534862][ T6709] dvmrp8: left allmulticast mode [ 619.819018][ T6709] bond6 (unregistering): (slave gretap1): Releasing backup interface [ 619.936259][ T6709] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 619.961044][ T6709] bond5 (unregistering): (slave bridge6): Releasing backup interface [ 619.971847][ T6709] bridge6 (unregistering): left promiscuous mode [ 619.979559][ T6709] bridge6 (unregistering): left allmulticast mode [ 620.010783][ T6709] .` (unregistering): Released all slaves [ 620.022023][ T6709] bond1 (unregistering): Released all slaves [ 620.037040][ T6709] bond0 (unregistering): Released all slaves [ 620.053679][ T6709] bond2 (unregistering): Released all slaves [ 620.073183][ T6709] bond3 (unregistering): Released all slaves [ 620.094423][ T6709] bond4 (unregistering): Released all slaves [ 620.108472][ T6709] bond5 (unregistering): Released all slaves [ 620.122726][ T6709] bond6 (unregistering): (slave bond7): Releasing backup interface [ 620.132187][ T6709] bond6 (unregistering): Released all slaves [ 620.146756][ T6709] bond7 (unregistering): Released all slaves [ 620.171465][ T6709] bond8 (unregistering): Released all slaves [ 620.190222][T22692] bond0: (slave bond_slave_1): Releasing backup interface [ 620.201729][T22654] batadv_slave_1: left promiscuous mode [ 620.224282][T12885] bond16: (slave erspan0): failed to get link speed/duplex [ 620.342364][T12900] bond16: (slave erspan0): failed to get link speed/duplex [ 620.412674][ T6709] tipc: Disabling bearer [ 620.533084][ T6709] tipc: Disabling bearer [ 620.548078][ T6709] tipc: Disabling bearer [ 620.568737][ T6709] tipc: Left network mode [ 621.081448][T22702] vlan3: entered promiscuous mode [ 621.087223][T22702] team0: entered promiscuous mode [ 621.423094][ T6709] hsr_slave_0: left promiscuous mode [ 621.441657][ T6709] hsr_slave_1: left promiscuous mode [ 621.702008][T22649] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 621.984746][T22719] bond0: Error: CAN devices cannot be enslaved [ 622.040899][T12900] smbdirect: ib_dev[syz ] removed [ 622.177099][T22725] bridge_slave_1: left promiscuous mode [ 622.211979][T22725] bridge_slave_1: entered allmulticast mode [ 622.259922][T22725] tipc: Started in network mode [ 622.282096][T22725] tipc: Node identity 8ada0a43a4ed, cluster identity 4711 [ 622.300211][T22725] tipc: Enabled bearer , priority 0 [ 622.317930][T22732] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4093'. [ 622.324856][T22728] xfrm0 speed is unknown, defaulting to 1000 [ 622.420516][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 622.427467][ T5634] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 622.474278][T22723] tipc: Disabling bearer [ 622.482065][T22746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4096'. [ 622.535825][T22748] tipc: Enabled bearer , priority 10 [ 622.708165][T22756] netlink: 'syz.3.4098': attribute type 1 has an invalid length. [ 622.802674][T22763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4097'. [ 623.191992][T22751] net_ratelimit: 12 callbacks suppressed [ 623.192014][T22751] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 623.219847][T22751] netlink: 'syz.3.4098': attribute type 1 has an invalid length. [ 623.248286][T22756] 8021q: adding VLAN 0 to HW filter on device bond5 [ 623.269558][T22761] bond5: (slave gretap3): making interface the new active one [ 623.280148][T22761] bond5: (slave gretap3): Enslaving as an active interface with an up link [ 623.289655][T22728] xfrm0 speed is unknown, defaulting to 1000 [ 623.296636][ T6709] IPVS: stop unused estimator thread 0... [ 623.523930][T12900] bond16: (slave erspan0): failed to get link speed/duplex [ 623.563154][T22788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4105'. [ 623.594751][T22788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4105'. [ 623.608973][T22788] netlink: 'syz.3.4105': attribute type 12 has an invalid length. [ 623.627304][T22788] netlink: 'syz.3.4105': attribute type 11 has an invalid length. [ 623.701266][T22795] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4107'. [ 623.758530][T12885] bond16: (slave erspan0): failed to get link speed/duplex [ 623.895855][T22676] bond16: (slave erspan0): failed to get link speed/duplex [ 623.952027][T22810] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 623.990920][T22799] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4109'. [ 624.026469][T22674] bond16: (slave erspan0): failed to get link speed/duplex [ 624.144243][T12885] bond16: (slave erspan0): failed to get link speed/duplex [ 624.402752][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 624.435657][ T1313] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 624.465278][T22825] dummy0: entered allmulticast mode [ 624.518833][T12900] bond16: (slave erspan0): failed to get link speed/duplex [ 624.645340][T12900] bond16: (slave erspan0): failed to get link speed/duplex [ 624.779825][T22839] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 625.092085][T22852] No such timeout policy "syz1" [ 625.124189][T22846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4121'. [ 625.172628][T22846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 625.216325][T22846] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 625.265770][T22846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 625.315809][T22846] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 625.450102][T22863] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 625.497503][T22863] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 625.563047][T22863] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 625.751987][T22864] netlink: 180 bytes leftover after parsing attributes in process `syz.3.4124'. [ 626.768253][T22907] netlink: 'syz.0.4136': attribute type 1 has an invalid length. [ 626.976211][T22907] bond4: option mode: invalid value (8) [ 626.997550][T22907] bond4 (unregistering): Released all slaves [ 627.022552][T22903] syzkaller1: entered promiscuous mode [ 627.028708][T22903] syzkaller1: entered allmulticast mode [ 627.256343][T22918] 8021q: adding VLAN 0 to HW filter on device bond2 [ 627.372690][T12900] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 627.399453][T12900] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 627.462109][T12900] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 627.482402][T12900] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 627.609941][T22674] bond10: (slave vlan2): link status definitely up, 10000 Mbps full duplex [ 627.674329][T22674] bond10: (slave vlan2): making interface the new active one [ 627.749334][T22674] veth0_to_bond: entered promiscuous mode [ 627.778043][T22674] vlan2: entered promiscuous mode [ 627.788674][T22947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4144'. [ 627.812647][T22674] bond10: active interface up! [ 627.902508][T22952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4145'. [ 628.104321][T22954] can: request_module (can-proto-0) failed. [ 628.193225][T22959] can: request_module (can-proto-0) failed. [ 628.202193][T12900] net_ratelimit: 20 callbacks suppressed [ 628.202214][T12900] bond16: (slave erspan0): failed to get link speed/duplex [ 628.265759][T22964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4149'. [ 628.277209][T22964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4149'. [ 628.326327][ T7774] IPVS: starting estimator thread 0... [ 628.339661][T22964] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.4149'. [ 628.341539][T22968] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 628.364145][T22968] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 628.374245][ T6716] bond16: (slave erspan0): failed to get link speed/duplex [ 628.443878][T22969] IPVS: using max 37 ests per chain, 88800 per kthread [ 628.544245][T12885] bond16: (slave erspan0): failed to get link speed/duplex [ 628.560882][T22977] mac80211_hwsim hwsim25 syzkaller0: left promiscuous mode [ 628.579066][T22982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4153'. [ 628.602173][T22977] mac80211_hwsim hwsim25 syzkaller0: left allmulticast mode [ 628.625738][T22983] xfrm0 speed is unknown, defaulting to 1000 [ 628.652539][T22982] xfrm0: entered allmulticast mode [ 628.721591][T22982] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 628.812769][T22990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4155'. [ 628.905320][T22998] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4156'. [ 629.202725][ T6716] bond16: (slave erspan0): failed to get link speed/duplex [ 629.344793][T12885] bond16: (slave erspan0): failed to get link speed/duplex [ 629.476045][T12885] bond16: (slave erspan0): failed to get link speed/duplex [ 629.557575][T23019] xt_hashlimit: size too large, truncated to 1048576 [ 629.624593][ T6709] bond16: (slave erspan0): failed to get link speed/duplex [ 629.795690][T22674] bond16: (slave erspan0): failed to get link speed/duplex [ 630.115621][T12885] bond16: (slave erspan0): failed to get link speed/duplex [ 630.200741][T23042] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4167'. [ 630.705510][T23057] netlink: 'syz.2.4173': attribute type 1 has an invalid length. [ 630.751461][T23060] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4174'. [ 631.504044][T23084] xt_hashlimit: size too large, truncated to 1048576 [ 631.515882][T23088] RDS: rds_bind could not find a transport for ::422e:0:8003:0:20:0, load rds_tcp or rds_rdma? [ 631.594161][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 632.071213][T23104] xt_hashlimit: size too large, truncated to 1048576 [ 633.070961][T23143] __nla_validate_parse: 5 callbacks suppressed [ 633.070980][T23143] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4195'. [ 633.422188][T23165] netlink: 'syz.1.4201': attribute type 9 has an invalid length. [ 633.436141][T12885] net_ratelimit: 28 callbacks suppressed [ 633.436162][T12885] bond16: (slave erspan0): failed to get link speed/duplex [ 633.548317][T23173] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4199'. [ 633.564971][ T6709] bond16: (slave erspan0): failed to get link speed/duplex [ 633.695581][T12900] bond16: (slave erspan0): failed to get link speed/duplex [ 633.745775][T23183] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4205'. [ 633.781669][T23183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4205'. [ 633.826210][T12900] bond16: (slave erspan0): failed to get link speed/duplex [ 633.874077][T23193] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4208'. [ 633.974153][ T6709] bond16: (slave erspan0): failed to get link speed/duplex [ 634.073212][T23202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4210'. [ 634.104582][T23202] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4210'. [ 634.115112][ T6716] bond16: (slave erspan0): failed to get link speed/duplex [ 634.224281][ T6716] bond16: (slave erspan0): failed to get link speed/duplex [ 634.344188][ T6716] bond16: (slave erspan0): failed to get link speed/duplex [ 634.464488][ T6716] bond16: (slave erspan0): failed to get link speed/duplex [ 634.584224][T12900] bond16: (slave erspan0): failed to get link speed/duplex [ 635.069896][T23235] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4218'. [ 635.182845][T23239] xfrm0 speed is unknown, defaulting to 1000 [ 635.220278][T23240] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4219'. [ 635.391593][T23239] xfrm0 speed is unknown, defaulting to 1000 [ 635.916965][ T1641] block nbd2: Possible stuck request ffff888027440000: control (read@0,1024B). Runtime 300 seconds [ 636.645259][T23183] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 636.950770][T23261] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4225'. [ 637.226849][T23271] pim6reg: entered allmulticast mode [ 637.564698][T23282] syzkaller0: entered promiscuous mode [ 637.591894][T23282] syzkaller0: entered allmulticast mode [ 638.174036][T23305] tipc: Enabled bearer , priority 2 [ 638.444729][T12900] net_ratelimit: 25 callbacks suppressed [ 638.444751][T12900] bond16: (slave erspan0): failed to get link speed/duplex [ 638.615595][ T6716] bond16: (slave erspan0): failed to get link speed/duplex [ 638.617720][T23312] __nla_validate_parse: 2 callbacks suppressed [ 638.617737][T23312] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4237'. [ 638.774152][T12900] bond16: (slave erspan0): failed to get link speed/duplex [ 638.894032][ T6716] bond16: (slave erspan0): failed to get link speed/duplex [ 639.024348][T12900] bond16: (slave erspan0): failed to get link speed/duplex [ 639.110043][T22676] vlan2: left promiscuous mode [ 639.194718][T22676] bond16: (slave erspan0): failed to get link speed/duplex [ 639.220212][T23333] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4243'. [ 639.254097][T23333] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4243'. [ 639.334681][T12885] bond16: (slave erspan0): failed to get link speed/duplex [ 639.514331][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 639.609409][T23328] syzkaller0: entered promiscuous mode [ 639.640609][T23328] syzkaller0: entered allmulticast mode [ 639.674153][T22674] bond16: (slave erspan0): failed to get link speed/duplex [ 640.192311][T23353] xt_ipcomp: unknown flags 1D [ 640.633298][T23364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4246'. [ 641.855009][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 644.175139][T23361] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 644.195229][T23361] syzkaller1: linktype set to 769 [ 644.276183][T23362] C: renamed from veth1_to_team (while UP) [ 644.316631][T23362] netlink: 'syz.4.4246': attribute type 3 has an invalid length. [ 644.337776][T23362] netlink: 116 bytes leftover after parsing attributes in process `syz.4.4246'. [ 644.370360][T23362] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 644.423925][T22676] bond16: (slave erspan0): failed to get link speed/duplex [ 644.545072][ T6716] bond16: (slave erspan0): failed to get link speed/duplex [ 644.680350][ T12] bond16: (slave erspan0): failed to get link speed/duplex [ 644.814143][T22676] bond16: (slave erspan0): failed to get link speed/duplex [ 644.829144][T23382] rdma_op ffff8880358919f0 conn xmit_rdma 0000000000000000 [ 644.875602][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 644.896190][T23389] netlink: 'syz.3.4255': attribute type 1 has an invalid length. [ 644.957896][ T6709] bond16: (slave erspan0): failed to get link speed/duplex [ 645.048609][T23394] macvtap0: entered promiscuous mode [ 645.165817][ T6709] bond16: (slave erspan0): failed to get link speed/duplex [ 645.294769][ T12] bond16: (slave erspan0): failed to get link speed/duplex [ 645.415660][ T6709] bond16: (slave erspan0): failed to get link speed/duplex [ 645.539041][ T6709] bond16: (slave erspan0): failed to get link speed/duplex [ 646.231821][T23426] syzkaller0: entered promiscuous mode [ 646.245276][T23426] syzkaller0: entered allmulticast mode [ 646.504931][T23428] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4266'. [ 646.912511][T23439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4270'. [ 647.443231][T23445] geneve0: entered promiscuous mode [ 647.452615][T23445] macvlan2: entered promiscuous mode [ 647.521884][T23446] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4273'. [ 647.551573][T23451] netlink: 'syz.3.4274': attribute type 1 has an invalid length. [ 648.218131][T23478] siw: device registration error -23 [ 648.251905][T23478] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4279'. [ 648.951528][T23492] netlink: 'syz.4.4286': attribute type 2 has an invalid length. [ 648.975122][T23492] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4286'. [ 649.004557][T23495] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4287'. [ 649.009854][T23492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4286'. [ 649.111097][T23503] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4289'. [ 649.325812][T23510] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 649.397246][T23510] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 649.564548][T22676] net_ratelimit: 26 callbacks suppressed [ 649.564568][T22676] bond16: (slave erspan0): failed to get link speed/duplex [ 649.704160][ T6716] bond16: (slave erspan0): failed to get link speed/duplex [ 649.840325][ T6716] bond16: (slave erspan0): failed to get link speed/duplex [ 649.974807][T12885] bond16: (slave erspan0): failed to get link speed/duplex [ 650.116422][T12885] bond16: (slave erspan0): failed to get link speed/duplex [ 650.254875][ T6716] bond16: (slave erspan0): failed to get link speed/duplex [ 650.387168][ T12] bond16: (slave erspan0): failed to get link speed/duplex [ 650.435447][T23559] netlink: 'syz.3.4305': attribute type 39 has an invalid length. [ 650.630752][T23572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4309'. [ 650.664268][T22676] bond16: (slave erspan0): failed to get link speed/duplex [ 650.698882][T23573] Cannot find add_set index 0 as target [ 650.815916][T12885] bond16: (slave erspan0): failed to get link speed/duplex [ 650.959241][ T12] bond16: (slave erspan0): failed to get link speed/duplex [ 651.116421][T23591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 651.529751][T23604] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4320'. [ 651.575379][T23604] mac80211_hwsim hwsim25 syzkaller0: entered promiscuous mode [ 651.596977][T23604] mac80211_hwsim hwsim25 syzkaller0: entered allmulticast mode [ 651.756380][T23614] bond1: (slave team0): Releasing active interface [ 651.782418][T23614] bond0: (slave bond_slave_0): Releasing backup interface [ 651.811217][T23614] team0: Port device team_slave_0 removed [ 651.825428][T23614] team0: Port device team_slave_1 removed [ 651.837449][T23614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 651.848862][T23623] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 651.849576][T23614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 651.856894][T23623] IPv6: NLM_F_CREATE should be set when creating new route [ 651.874232][T23623] IPv6: NLM_F_CREATE should be set when creating new route [ 652.230626][T23643] siw: device registration error -23 [ 652.412937][T23650] syzkaller0: entered promiscuous mode [ 652.429404][T23650] syzkaller0: entered allmulticast mode [ 652.531498][T23658] netlink: 'syz.1.4334': attribute type 1 has an invalid length. [ 652.697020][T23664] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4335'. [ 652.849792][T23669] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4337'. [ 652.942547][T23679] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4338'. [ 653.160250][T23698] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4343'. [ 653.192005][T23699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4344'. [ 653.257874][T23700] syz_tun: entered promiscuous mode [ 653.273453][T23700] vlan2: entered promiscuous mode [ 653.572096][T23706] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4346'. [ 653.590490][T23716] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4349'. [ 653.630842][T23706] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4346'. [ 653.984401][T23733] xt_TCPMSS: Only works on TCP SYN packets [ 654.520686][T23756] netlink: 'syz.1.4357': attribute type 5 has an invalid length. [ 654.638054][T23756] geneve3: entered promiscuous mode [ 654.654289][T23756] geneve3: entered allmulticast mode [ 654.676760][T23761] xfrm0: entered allmulticast mode [ 654.696689][T23761] net_ratelimit: 28 callbacks suppressed [ 654.696707][T23761] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 654.749080][ T6716] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 48347 - 0 [ 654.773994][ T6716] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 48347 - 0 [ 654.790102][ T6716] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 48347 - 0 [ 654.816674][ T6716] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 48347 - 0 [ 654.846066][ T6716] bond16: (slave erspan0): failed to get link speed/duplex [ 654.976931][T23778] xfrm0 speed is unknown, defaulting to 1000 [ 655.002946][T22676] bond16: (slave erspan0): failed to get link speed/duplex [ 655.155656][T22676] bond16: (slave erspan0): failed to get link speed/duplex [ 655.286029][T22676] bond16: (slave erspan0): failed to get link speed/duplex [ 655.414023][ T6709] bond16: (slave erspan0): failed to get link speed/duplex [ 655.573878][ T6709] bond16: (slave erspan0): failed to get link speed/duplex [ 655.615291][T23778] xfrm0 speed is unknown, defaulting to 1000 [ 655.714656][T22676] bond16: (slave erspan0): failed to get link speed/duplex [ 655.827933][T23810] FAULT_INJECTION: forcing a failure. [ 655.827933][T23810] name failslab, interval 1, probability 0, space 0, times 0 [ 655.842073][T23810] CPU: 1 UID: 0 PID: 23810 Comm: syz.2.4369 Not tainted syzkaller #0 PREEMPT(full) [ 655.842100][T23810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 655.842111][T23810] Call Trace: [ 655.842119][T23810] [ 655.842126][T23810] dump_stack_lvl+0xe8/0x150 [ 655.842156][T23810] should_fail_ex+0x40c/0x560 [ 655.842189][T23810] should_failslab+0xa8/0x100 [ 655.842212][T23810] kmem_cache_alloc_bulk_noprof+0x8b/0x7b0 [ 655.842235][T23810] ? pfn_valid+0x125/0x4c0 [ 655.842329][T23810] ? pfn_valid+0x125/0x4c0 [ 655.842350][T23810] ? pfn_valid+0x125/0x4c0 [ 655.842377][T23810] bpf_test_run_xdp_live+0x16e9/0x1c20 [ 655.842414][T23810] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 655.842446][T23810] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 655.842469][T23810] ? 0xffffffffa02052c0 [ 655.842537][T23810] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 655.842568][T23810] ? _copy_from_user+0x94/0xb0 [ 655.842588][T23810] ? bpf_test_init+0x113/0x150 [ 655.842607][T23810] ? xdp_convert_md_to_buff+0x5b/0x330 [ 655.842639][T23810] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 655.842678][T23810] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 655.842705][T23810] ? __fget_files+0x2a/0x420 [ 655.842729][T23810] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 655.842752][T23810] bpf_prog_test_run+0x2c5/0x340 [ 655.842789][T23810] __sys_bpf+0xa22/0xd90 [ 655.842816][T23810] ? __pfx___sys_bpf+0x10/0x10 [ 655.842847][T23810] ? __fget_files+0x2a/0x420 [ 655.842884][T23810] ? ksys_write+0x242/0x270 [ 655.842909][T23810] ? __pfx_ksys_write+0x10/0x10 [ 655.842936][T23810] __x64_sys_bpf+0xba/0xd0 [ 655.842963][T23810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.842984][T23810] do_syscall_64+0x174/0x580 [ 655.843004][T23810] ? clear_bhb_loop+0x40/0x90 [ 655.843027][T23810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.843046][T23810] RIP: 0033:0x7f10cdb9de59 [ 655.843063][T23810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 655.843079][T23810] RSP: 002b:00007f10ceb39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 655.843100][T23810] RAX: ffffffffffffffda RBX: 00007f10cde25fa0 RCX: 00007f10cdb9de59 [ 655.843114][T23810] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 655.843125][T23810] RBP: 00007f10ceb39090 R08: 0000000000000000 R09: 0000000000000000 [ 655.843136][T23810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 655.843147][T23810] R13: 00007f10cde26038 R14: 00007f10cde25fa0 R15: 00007ffd49e775e8 [ 655.843179][T23810] [ 656.122797][ T6709] bond16: (slave erspan0): failed to get link speed/duplex [ 656.229410][ T6716] bond16: (slave erspan0): failed to get link speed/duplex [ 656.384277][T23828] __nla_validate_parse: 7 callbacks suppressed [ 656.384295][T23828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4374'. [ 656.753421][T23835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4375'. [ 656.795045][T23835] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 656.827387][T23835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4375'. [ 657.388549][T23865] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20003 [ 657.451644][T23872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4387'. [ 657.472097][T23874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4388'. [ 657.561521][T23886] vlan2: entered promiscuous mode [ 657.567417][T23886] gretap0: entered promiscuous mode [ 657.606514][T23892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4392'. [ 657.738259][T23895] netlink: 'syz.1.4390': attribute type 8 has an invalid length. [ 658.147284][T23925] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4400'. [ 658.164207][T23925] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4400'. [ 658.292075][T23929] xt_hashlimit: size too large, truncated to 1048576 [ 658.406682][T23943] netlink: 'syz.2.4405': attribute type 1 has an invalid length. [ 658.489828][T23944] netlink: 'syz.1.4404': attribute type 1 has an invalid length. [ 658.558825][ T11] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 658.596083][T23947] 8021q: adding VLAN 0 to HW filter on device bond4 [ 658.634618][ T12] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 658.647695][ T12] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 658.673357][ T9062] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 659.774368][ T12] net_ratelimit: 39 callbacks suppressed [ 659.774395][ T12] bond16: (slave erspan0): failed to get link speed/duplex [ 659.894247][T12900] bond16: (slave erspan0): failed to get link speed/duplex [ 660.003941][T12900] bond16: (slave erspan0): failed to get link speed/duplex [ 660.114017][T12885] bond16: (slave erspan0): failed to get link speed/duplex [ 660.224429][T12885] bond16: (slave erspan0): failed to get link speed/duplex [ 660.333902][ T6716] bond16: (slave erspan0): failed to get link speed/duplex [ 660.443890][ T6716] bond16: (slave erspan0): failed to get link speed/duplex [ 660.554329][T12900] bond16: (slave erspan0): failed to get link speed/duplex [ 660.664132][T12900] bond16: (slave erspan0): failed to get link speed/duplex [ 660.773860][T12900] bond16: (slave erspan0): failed to get link speed/duplex [ 661.066248][T23917] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 661.357014][T23967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4408'. [ 661.385247][T23964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4408'. [ 661.397080][T23970] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4413'. [ 661.409174][T23970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4413'. [ 661.499126][T23975] sctp: [Deprecated]: syz.3.4414 (pid 23975) Use of int in max_burst socket option. [ 661.499126][T23975] Use struct sctp_assoc_value instead [ 661.529665][T23973] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 661.551001][T23973] bond6 (unregistering): Released all slaves [ 661.890882][T23990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4419'. [ 661.935937][T23994] tipc: Resetting bearer [ 661.980703][T23992] ip6gre1: entered promiscuous mode [ 661.994749][T23992] ip6gre1: entered allmulticast mode [ 662.030758][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 662.042779][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 662.052945][T23992] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 662.063335][ T187] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 662.314027][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 662.322206][ T187] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 662.769463][T24016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 663.379250][T24053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4435'. [ 663.454011][T24056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4436'. [ 664.039997][T24083] netlink: 'syz.1.4445': attribute type 2 has an invalid length. [ 664.119450][T24077] tipc: Resetting bearer [ 664.219818][T24077] tipc: Resetting bearer [ 664.252612][T24092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4449'. [ 664.436502][T24065] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 664.444678][T24065] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 664.921822][T24093] net_ratelimit: 23 callbacks suppressed [ 664.921842][T24093] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 664.988869][T24100] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4450'. [ 665.008468][T22676] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.052761][T22676] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.099967][T22676] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.130405][T22676] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.190024][T22676] bond16: (slave erspan0): failed to get link speed/duplex [ 665.318901][T24117] xt_CT: You must specify a L4 protocol and not use inversions on it [ 665.359256][ T6716] bond16: (slave erspan0): failed to get link speed/duplex [ 665.438467][T24126] batadv_slave_1: entered promiscuous mode [ 665.457385][T24131] netlink: 'syz.4.4462': attribute type 9 has an invalid length. [ 665.466312][T22676] bond16: (slave erspan0): failed to get link speed/duplex [ 665.505136][T24125] batadv_slave_1: left promiscuous mode [ 665.549804][T24133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4463'. [ 665.575696][ T12] bond16: (slave erspan0): failed to get link speed/duplex [ 665.643826][T24135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4464'. [ 665.726230][T24133] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 665.795418][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 665.795440][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 665.852700][T12900] bond16: (slave erspan0): failed to get link speed/duplex [ 665.938878][T24146] netlink: 'syz.4.4466': attribute type 1 has an invalid length. [ 665.968028][T22676] bond16: (slave erspan0): failed to get link speed/duplex [ 666.073862][ T6716] bond16: (slave erspan0): failed to get link speed/duplex [ 666.084205][ T1641] block nbd2: Possible stuck request ffff888027440000: control (read@0,1024B). Runtime 330 seconds [ 666.186207][ T12] bond16: (slave erspan0): failed to get link speed/duplex [ 666.513448][T24186] __nla_validate_parse: 3 callbacks suppressed [ 666.513467][T24186] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4476'. [ 666.570039][T24188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4478'. [ 666.810326][T24202] netlink: 279 bytes leftover after parsing attributes in process `syz.1.4480'. [ 666.819677][T24202] veth0_to_bond: default FDB implementation only supports local addresses [ 666.913873][T24211] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4484'. [ 667.563476][T24241] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4488'. [ 667.659390][T24241] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4488'. [ 668.034740][T24251] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4491'. [ 668.064851][T24258] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4492'. [ 668.073874][T24258] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4492'. [ 668.125195][T24258] geneve2: entered promiscuous mode [ 668.183271][T24266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4494'. [ 668.384967][ T29] audit: type=1800 audit(1782957231.151:9): pid=24279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4497" name="memory.events" dev="tmpfs" ino=1181 res=0 errno=0 [ 668.447729][T24273] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 669.837112][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 671.124399][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 672.392267][T24304] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 672.395651][T12885] net_ratelimit: 19 callbacks suppressed [ 672.395672][T12885] bond16: (slave erspan0): failed to get link speed/duplex [ 672.421528][T24302] mac80211_hwsim hwsim25 syzkaller0: left promiscuous mode [ 672.442228][T24302] mac80211_hwsim hwsim25 syzkaller0: left allmulticast mode [ 672.556340][T22676] bond16: (slave erspan0): failed to get link speed/duplex [ 672.704413][T22676] bond16: (slave erspan0): failed to get link speed/duplex [ 672.834438][ T6716] bond16: (slave erspan0): failed to get link speed/duplex [ 672.890953][T24325] __nla_validate_parse: 2 callbacks suppressed [ 672.890988][T24325] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4506'. [ 673.013865][T22676] bond16: (slave erspan0): failed to get link speed/duplex [ 673.028003][T24327] FAULT_INJECTION: forcing a failure. [ 673.028003][T24327] name failslab, interval 1, probability 0, space 0, times 0 [ 673.040649][T24327] CPU: 1 UID: 0 PID: 24327 Comm: syz.0.4509 Not tainted syzkaller #0 PREEMPT(full) [ 673.040693][T24327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 673.040715][T24327] Call Trace: [ 673.040722][T24327] [ 673.040731][T24327] dump_stack_lvl+0xe8/0x150 [ 673.040760][T24327] should_fail_ex+0x40c/0x560 [ 673.040793][T24327] should_failslab+0xa8/0x100 [ 673.040816][T24327] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 673.040845][T24327] ? skb_clone+0x212/0x3a0 [ 673.040950][T24327] ? skb_clone+0x212/0x3a0 [ 673.040971][T24327] ? run_filter+0x23/0x270 [ 673.041033][T24327] skb_clone+0x212/0x3a0 [ 673.041051][T24327] ? packet_rcv+0x563/0x16f0 [ 673.041072][T24327] packet_rcv+0x65d/0x16f0 [ 673.041102][T24327] __netif_receive_skb_core+0xb7d/0x30b0 [ 673.041189][T24327] ? kernel_text_address+0xa5/0xe0 [ 673.041235][T24327] ? unwind_get_return_address+0x4d/0x90 [ 673.041266][T24327] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 673.041309][T24327] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 673.041360][T24327] ? kasan_save_track+0x4f/0x80 [ 673.041378][T24327] ? __kasan_slab_alloc+0x6c/0x80 [ 673.041395][T24327] ? kmem_cache_alloc_bulk_noprof+0x4a0/0x7b0 [ 673.041421][T24327] ? bpf_test_run_xdp_live+0x16e9/0x1c20 [ 673.041443][T24327] ? bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 673.041467][T24327] __netif_receive_skb_list_core+0x24d/0x830 [ 673.041508][T24327] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 673.041546][T24327] netif_receive_skb_list_internal+0x995/0xcf0 [ 673.041606][T24327] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 673.041631][T24327] ? eth_type_trans+0x352/0x800 [ 673.041705][T24327] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 673.041741][T24327] ? __xdp_build_skb_from_frame+0x324/0x6a0 [ 673.041820][T24327] netif_receive_skb_list+0x67/0x480 [ 673.041843][T24327] ? bpf_test_run_xdp_live+0x185a/0x1c20 [ 673.041868][T24327] bpf_test_run_xdp_live+0x1875/0x1c20 [ 673.041903][T24327] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 673.041936][T24327] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 673.041959][T24327] ? bpf_dispatcher_xdp+0x800/0x1000 [ 673.042031][T24327] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 673.042062][T24327] ? _copy_from_user+0x94/0xb0 [ 673.042083][T24327] ? bpf_test_init+0x113/0x150 [ 673.042100][T24327] ? xdp_convert_md_to_buff+0x5b/0x330 [ 673.042123][T24327] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 673.042167][T24327] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 673.042195][T24327] ? __fget_files+0x2a/0x420 [ 673.042219][T24327] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 673.042243][T24327] bpf_prog_test_run+0x2c5/0x340 [ 673.042267][T24327] __sys_bpf+0xa22/0xd90 [ 673.042296][T24327] ? __pfx___sys_bpf+0x10/0x10 [ 673.042315][T24327] ? taprio_dequeue+0x250/0x540 [ 673.042381][T24327] ? sched_clock_cpu+0x74/0x440 [ 673.042441][T24327] ? __irq_exit_rcu+0xca/0x220 [ 673.042477][T24327] ? handle_softirqs+0x70f/0x840 [ 673.042508][T24327] __x64_sys_bpf+0xba/0xd0 [ 673.042537][T24327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.042558][T24327] do_syscall_64+0x174/0x580 [ 673.042578][T24327] ? clear_bhb_loop+0x40/0x90 [ 673.042601][T24327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.042620][T24327] RIP: 0033:0x7fe27a79de59 [ 673.042638][T24327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 673.042654][T24327] RSP: 002b:00007fe27b5ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 673.042674][T24327] RAX: ffffffffffffffda RBX: 00007fe27aa25fa0 RCX: 00007fe27a79de59 [ 673.042688][T24327] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 673.042701][T24327] RBP: 00007fe27b5ee090 R08: 0000000000000000 R09: 0000000000000000 [ 673.042712][T24327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 673.042724][T24327] R13: 00007fe27aa26038 R14: 00007fe27aa25fa0 R15: 00007fffe3024df8 [ 673.042755][T24327] [ 673.064128][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 673.195654][T22676] bond16: (slave erspan0): failed to get link speed/duplex [ 673.372775][T24339] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 673.531604][T22674] bond16: (slave erspan0): failed to get link speed/duplex [ 673.654979][ T6716] bond16: (slave erspan0): failed to get link speed/duplex [ 673.762286][ T12] bond16: (slave erspan0): failed to get link speed/duplex [ 673.925446][T24355] tipc: Enabled bearer , priority 0 [ 673.933282][T24355] syzkaller0: entered promiscuous mode [ 673.947990][T24355] syzkaller0: entered allmulticast mode [ 673.957787][T24355] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4516'. [ 673.989691][T24359] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4515'. [ 674.329918][T24371] netlink: 'syz.1.4518': attribute type 49 has an invalid length. [ 674.465102][ T29] audit: type=1804 audit(1782957237.231:10): pid=24379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4520" name="/newroot/232/cgroup.controllers" dev="tmpfs" ino=1203 res=1 errno=0 [ 674.488742][ T29] audit: type=1800 audit(1782957237.231:11): pid=24379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4520" name="cgroup.controllers" dev="tmpfs" ino=1203 res=0 errno=0 [ 674.590262][T24377] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4522'. [ 674.893131][T24396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4527'. [ 675.010699][T24404] x_tables: duplicate underflow at hook 3 [ 675.126452][T24413] nbd: device at index 0 is going down [ 675.132403][T24413] block nbd0: NBD_DISCONNECT [ 675.137092][T24413] block nbd0: Send disconnect failed -32 [ 675.145354][T24413] block nbd0: Send disconnect failed -32 [ 675.151066][T24413] block nbd0: shutting down sockets [ 675.514240][T24432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4540'. [ 675.729303][T24444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4545'. [ 675.823376][T24432] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4540'. [ 675.967619][T24465] netlink: 'syz.4.4552': attribute type 21 has an invalid length. [ 675.981858][T24463] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4553'. [ 675.982650][T24465] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4552'. [ 676.001974][T24463] bridge0: entered promiscuous mode [ 676.007291][T24463] bridge0: entered allmulticast mode [ 676.013877][T24465] netlink: 'syz.4.4552': attribute type 4 has an invalid length. [ 676.691875][T24508] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 676.730451][T24508] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 677.330455][T24546] netlink: 'syz.1.4576': attribute type 1 has an invalid length. [ 677.338237][T24546] netlink: 'syz.1.4576': attribute type 1 has an invalid length. [ 677.355326][T24546] syzkaller1: entered promiscuous mode [ 677.360823][T24546] syzkaller1: entered allmulticast mode [ 677.464948][T22674] net_ratelimit: 32 callbacks suppressed [ 677.464968][T22674] bond16: (slave erspan0): failed to get link speed/duplex [ 677.574694][T22674] bond16: (slave erspan0): failed to get link speed/duplex [ 677.705660][T22674] bond16: (slave erspan0): failed to get link speed/duplex [ 677.826285][T22676] bond16: (slave erspan0): failed to get link speed/duplex [ 678.015325][ T6716] bond16: (slave erspan0): failed to get link speed/duplex [ 678.134519][ T6716] bond16: (slave erspan0): failed to get link speed/duplex [ 678.134789][T24567] __nla_validate_parse: 8 callbacks suppressed [ 678.134804][T24567] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4583'. [ 678.150853][T24571] tipc: Started in network mode [ 678.162297][T24571] tipc: Node identity 128a, cluster identity 4711 [ 678.173002][T24571] tipc: Node number set to 4746 [ 678.350552][T24585] netlink: 'syz.3.4589': attribute type 1 has an invalid length. [ 678.364488][ T6716] bond16: (slave erspan0): failed to get link speed/duplex [ 678.477459][T22674] bond16: (slave erspan0): failed to get link speed/duplex [ 678.594687][ T6710] bond16: (slave erspan0): failed to get link speed/duplex [ 678.707659][T22674] bond16: (slave erspan0): failed to get link speed/duplex [ 680.222308][T24645] xt_CT: You must specify a L4 protocol and not use inversions on it [ 681.498129][T24641] netlink: 'syz.2.4594': attribute type 1 has an invalid length. [ 681.524101][T24652] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4597'. [ 681.527964][T24651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4598'. [ 681.556748][T24651] mac80211_hwsim hwsim25 syzkaller0: entered promiscuous mode [ 681.564516][T24651] mac80211_hwsim hwsim25 syzkaller0: entered allmulticast mode [ 681.589704][T24652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4597'. [ 681.699111][T24657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4601'. [ 681.745319][T24660] syzkaller0: entered promiscuous mode [ 681.754924][T24660] syzkaller0: entered allmulticast mode [ 681.901522][T24671] nbd: nbd4 already in use [ 681.922609][T24671] block nbd4: NBD_DISCONNECT [ 681.932552][T24671] block nbd4: Send disconnect failed -32 [ 681.945490][T24671] block nbd4: shutting down sockets [ 682.165693][T24688] dvmrp0: entered allmulticast mode [ 682.188749][T24686] Bluetooth: MGMT ver 1.23 [ 682.193496][T24686] Bluetooth: hci1: too big key_count value 29096 [ 682.257303][T24694] xt_hashlimit: max too large, truncated to 1048576 [ 682.264198][T24694] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 682.375482][T24698] netlink: 'syz.4.4609': attribute type 1 has an invalid length. [ 682.383272][T24698] netlink: 'syz.4.4609': attribute type 2 has an invalid length. [ 682.574914][T22674] net_ratelimit: 13 callbacks suppressed [ 682.574951][T22674] bond16: (slave erspan0): failed to get link speed/duplex [ 682.650534][T24702] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4615'. [ 682.724292][T12885] bond16: (slave erspan0): failed to get link speed/duplex [ 682.871095][T12885] bond16: (slave erspan0): failed to get link speed/duplex [ 683.003834][T22674] bond16: (slave erspan0): failed to get link speed/duplex [ 683.134118][ T12] bond16: (slave erspan0): failed to get link speed/duplex [ 683.253898][T12885] bond16: (slave erspan0): failed to get link speed/duplex [ 683.374209][T22674] bond16: (slave erspan0): failed to get link speed/duplex [ 683.410304][T24738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4627'. [ 683.437158][T24738] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 683.509532][T12885] bond16: (slave erspan0): failed to get link speed/duplex [ 683.521484][T24742] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 683.549981][T24742] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4625'. [ 683.583401][T24742] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4625'. [ 683.629341][T24749] netlink: 124 bytes leftover after parsing attributes in process `syz.0.4630'. [ 683.640382][T24749] netlink: 'syz.0.4630': attribute type 1 has an invalid length. [ 683.683452][T24753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4629'. [ 683.730878][T24749] bond4: entered promiscuous mode [ 683.739193][T24749] 8021q: adding VLAN 0 to HW filter on device bond4 [ 683.776954][T24756] nbd: socks must be embedded in a SOCK_ITEM attr [ 683.787153][T24756] block nbd4: shutting down sockets [ 683.804139][T24749] 8021q: adding VLAN 0 to HW filter on device bond4 [ 683.811452][T24749] bond4: (slave gre1): The slave device specified does not support setting the MAC address [ 683.821466][T24749] bond4: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 683.834950][T24749] bond4: (slave gre1): making interface the new active one [ 683.842285][T24749] gre1: entered promiscuous mode [ 683.849069][T24749] bond4: (slave gre1): Enslaving as an active interface with an up link [ 683.869315][T24749] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4630'. [ 683.879041][T24749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4630'. [ 683.954147][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 684.109004][T24768] bridge0: port 1(syz_tun) entered blocking state [ 684.139602][T24768] bridge0: port 1(syz_tun) entered disabled state [ 684.164685][T24768] syz_tun: entered allmulticast mode [ 684.195458][T24768] syz_tun: entered promiscuous mode [ 684.217433][T24768] bridge0: port 1(syz_tun) entered blocking state [ 684.224031][T24768] bridge0: port 1(syz_tun) entered forwarding state [ 684.417058][T24801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4640'. [ 684.622768][T24815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4644'. [ 685.340890][T24850] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4652'. [ 685.709834][T24865] pim6reg1: entered promiscuous mode [ 685.719382][T24865] pim6reg1: entered allmulticast mode [ 685.834588][T24868] netlink: 'syz.0.4658': attribute type 1 has an invalid length. [ 685.880802][ T30] INFO: task udevd:10758 blocked in I/O wait for more than 143 seconds. [ 685.889901][ T30] Not tainted syzkaller #0 [ 685.897756][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 685.906790][ T30] task:udevd state:D stack:23368 pid:10758 tgid:10758 ppid:4991 task_flags:0x400140 flags:0x00080002 [ 685.908121][T24868] bond5: entered promiscuous mode [ 685.919142][ T30] Call Trace: [ 685.927337][ T30] [ 685.930317][ T30] __schedule+0x17d9/0x56c0 [ 685.937580][ T30] ? __lock_acquire+0x683/0x2cf0 [ 685.942065][T24868] 8021q: adding VLAN 0 to HW filter on device bond5 [ 685.942582][ T30] ? __pfx___schedule+0x10/0x10 [ 685.954457][ T30] ? schedule+0x90/0x2b0 [ 685.958759][ T30] schedule+0x164/0x2b0 [ 685.962945][ T30] io_schedule+0x7f/0xd0 [ 685.967731][ T30] folio_wait_bit_common+0x836/0xbc0 [ 685.973084][ T30] ? filemap_get_entry+0xcd/0x3f0 [ 685.978560][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 685.985038][ T30] ? filemap_read_folio+0x234/0x3a0 [ 685.990298][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 685.996618][ T30] ? __filemap_get_folio_mpol+0x7c8/0x1000 [ 686.002502][ T30] do_read_cache_folio+0x1ac/0x590 [ 686.007693][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 686.013256][ T30] read_part_sector+0xb6/0x2b0 [ 686.018128][ T30] adfspart_check_POWERTEC+0x9a/0x7a0 [ 686.023513][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 686.029105][ T30] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 686.035114][ T30] ? bdev_disk_changed+0x56c/0x17a0 [ 686.040310][ T30] ? bdev_disk_changed+0x56c/0x17a0 [ 686.046068][ T30] bdev_disk_changed+0x851/0x17a0 [ 686.051156][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 686.056676][ T30] blkdev_get_whole+0x372/0x510 [ 686.061536][ T30] bdev_open+0x324/0xd70 [ 686.065820][ T30] blkdev_open+0x461/0x600 [ 686.070242][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 686.075231][ T30] do_dentry_open+0x816/0x1380 [ 686.080011][ T30] vfs_open+0x3b/0x340 [ 686.084124][ T30] ? path_openat+0x2e2d/0x3830 [ 686.088893][ T30] path_openat+0x2e44/0x3830 [ 686.093476][ T30] ? kasan_save_track+0x3e/0x80 [ 686.101461][ T30] ? do_sys_openat2+0xcc/0x200 [ 686.106505][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.112646][ T30] do_file_open+0x23e/0x4a0 [ 686.117213][ T30] ? __pfx_do_file_open+0x10/0x10 [ 686.122284][ T30] ? _raw_spin_unlock+0x28/0x50 [ 686.127377][ T30] ? alloc_fd+0x651/0x6c0 [ 686.131757][ T30] do_sys_openat2+0x115/0x200 [ 686.138990][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 686.144288][ T30] ? __x64_sys_epoll_wait+0x1d7/0x230 [ 686.149698][ T30] __x64_sys_openat+0x138/0x170 [ 686.155294][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.161392][ T30] do_syscall_64+0x174/0x580 [ 686.166046][ T30] ? clear_bhb_loop+0x40/0x90 [ 686.170746][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.176710][ T30] RIP: 0033:0x7ff30aaa7407 [ 686.181133][ T30] RSP: 002b:00007ffda3ddc240 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 686.189610][ T30] RAX: ffffffffffffffda RBX: 00007ff30b1e5880 RCX: 00007ff30aaa7407 [ 686.197612][ T30] RDX: 00000000000a0800 RSI: 000055c73decd520 RDI: ffffffffffffff9c [ 686.206121][ T30] RBP: 000055c73decc910 R08: 0000000000000000 R09: 0000000000000000 [ 686.214516][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000055c73dedfe20 [ 686.222618][ T30] R13: 000055c73deda190 R14: 0000000000000000 R15: 000055c73dedfe20 [ 686.230648][ T30] [ 686.235366][ T30] [ 686.235366][ T30] Showing all locks held in the system: [ 686.249267][ T30] 1 lock held by khungtaskd/30: [ 686.265087][ T30] #0: ffffffff8e959c20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 686.275170][ T30] 2 locks held by getty/5379: [ 686.279860][ T30] #0: ffff88803589e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 686.289902][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 686.300075][ T30] 1 lock held by udevd/10758: [ 686.304775][ T30] #0: ffff888020fb6350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 686.314497][ T30] [ 686.316836][ T30] ============================================= [ 686.316836][ T30] [ 686.325361][ T30] NMI backtrace for cpu 0 [ 686.325379][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 686.325399][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 686.325410][ T30] Call Trace: [ 686.325417][ T30] [ 686.325425][ T30] dump_stack_lvl+0xe8/0x150 [ 686.325452][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 686.325573][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 686.325606][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 686.325633][ T30] sys_info+0x135/0x170 [ 686.325654][ T30] watchdog+0xfd7/0x1030 [ 686.325688][ T30] ? watchdog+0x1c7/0x1030 [ 686.325726][ T30] kthread+0x388/0x470 [ 686.325747][ T30] ? __pfx_watchdog+0x10/0x10 [ 686.325772][ T30] ? __pfx_kthread+0x10/0x10 [ 686.325792][ T30] ret_from_fork+0x514/0xb70 [ 686.325831][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 686.325853][ T30] ? __switch_to+0xc89/0x1420 [ 686.325884][ T30] ? __pfx_kthread+0x10/0x10 [ 686.325906][ T30] ret_from_fork_asm+0x1a/0x30 [ 686.325945][ T30] [ 686.325961][ T30] Sending NMI from CPU 0 to CPUs 1: [ 686.436456][ C1] NMI backtrace for cpu 1 [ 686.436474][ C1] CPU: 1 UID: 0 PID: 22674 Comm: kworker/u8:19 Not tainted syzkaller #0 PREEMPT(full) [ 686.436494][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 686.436507][ C1] Workqueue: events_unbound toggle_allocation_gate [ 686.436531][ C1] RIP: 0010:smp_call_function_many_cond+0xced/0x14b0 [ 686.436560][ C1] Code: 50 b0 7a 8e 48 c1 e8 03 80 3c 18 00 74 0c 48 c7 c7 50 b0 7a 8e e8 23 b0 79 00 4c 8b 1d 1c 5d c0 0c 44 89 f7 2e 2e 2e 41 ff d3 e2 00 00 00 41 89 c6 bf 01 00 00 00 89 c6 e8 6f 22 0c 00 41 83 [ 686.436576][ C1] RSP: 0018:ffffc90005587720 EFLAGS: 00000206 [ 686.436590][ C1] RAX: 00000000000000fb RBX: dffffc0000000000 RCX: 0000000000000830 [ 686.436603][ C1] RDX: 0000000000000000 RSI: 00000000000000fb RDI: 0000000000000000 [ 686.436614][ C1] RBP: ffffc90005587860 R08: ffffffff9032d2f7 R09: 1ffffffff2065a5e [ 686.436627][ C1] R10: dffffc0000000000 R11: ffffffff81746150 R12: 0000000000000001 [ 686.436640][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880b873c440 [ 686.436652][ C1] FS: 0000000000000000(0000) GS:ffff888125326000(0000) knlGS:0000000000000000 [ 686.436667][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 686.436679][ C1] CR2: 00007f22ba7eb158 CR3: 000000000e746000 CR4: 00000000003526f0 [ 686.436694][ C1] Call Trace: [ 686.436702][ C1] [ 686.436713][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 686.436744][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 686.436762][ C1] ? kmem_cache_alloc_bulk_noprof+0xb7/0x7b0 [ 686.436781][ C1] ? __pfx___text_poke+0x10/0x10 [ 686.436807][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 686.436830][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 686.436848][ C1] smp_text_poke_batch_finish+0xe8a/0x1110 [ 686.436874][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 686.436905][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 686.436934][ C1] ? arch_jump_label_transform_queue+0x97/0x110 [ 686.436955][ C1] ? __jump_label_update+0x347/0x370 [ 686.436977][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 686.436995][ C1] static_key_enable_cpuslocked+0x128/0x240 [ 686.437014][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 686.437037][ C1] static_key_enable+0x1a/0x20 [ 686.437054][ C1] toggle_allocation_gate+0xab/0x290 [ 686.437073][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 686.437091][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 686.437120][ C1] ? trace_workqueue_execute_start+0x7c/0x1d0 [ 686.437145][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 686.437168][ C1] process_scheduled_works+0xa8e/0x14e0 [ 686.437207][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 686.437234][ C1] ? assign_work+0x3cf/0x5d0 [ 686.437259][ C1] worker_thread+0xa47/0xfb0 [ 686.437298][ C1] kthread+0x388/0x470 [ 686.437317][ C1] ? __pfx_worker_thread+0x10/0x10 [ 686.437340][ C1] ? __pfx_kthread+0x10/0x10 [ 686.437358][ C1] ret_from_fork+0x514/0xb70 [ 686.437378][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 686.437397][ C1] ? __switch_to+0xc89/0x1420 [ 686.437424][ C1] ? __pfx_kthread+0x10/0x10 [ 686.437443][ C1] ret_from_fork_asm+0x1a/0x30 [ 686.437473][ C1] [ 686.438562][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 686.438576][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 686.438597][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 686.438609][ T30] Call Trace: [ 686.438618][ T30] [ 686.438627][ T30] vpanic+0x56c/0xa60 [ 686.438653][ T30] ? __pfx___schedule+0x10/0x10 [ 686.438679][ T30] ? __pfx_vpanic+0x10/0x10 [ 686.438711][ T30] panic+0xc5/0xd0 [ 686.438732][ T30] ? __pfx_panic+0x10/0x10 [ 686.438752][ T30] ? preempt_schedule_common+0x82/0xd0 [ 686.438779][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 686.438807][ T30] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 686.438835][ T30] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 686.438864][ T30] watchdog+0x1030/0x1030 [ 686.438898][ T30] ? watchdog+0x1c7/0x1030 [ 686.438932][ T30] kthread+0x388/0x470 [ 686.438953][ T30] ? __pfx_watchdog+0x10/0x10 [ 686.438982][ T30] ? __pfx_kthread+0x10/0x10 [ 686.439004][ T30] ret_from_fork+0x514/0xb70 [ 686.439027][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 686.439056][ T30] ? __switch_to+0xc89/0x1420 [ 686.439087][ T30] ? __pfx_kthread+0x10/0x10 [ 686.439112][ T30] ret_from_fork_asm+0x1a/0x30 [ 686.439151][ T30] [ 686.868069][ T30] Kernel Offset: disabled [ 686.872380][ T30] Rebooting in 86400 seconds..