last executing test programs: 6.511477007s ago: executing program 2 (id=9128): vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000000)="e22dc69964e91f95b4b657e2d43245501af3fed75ecf8b2a5318ca5d490018e7e27b9566ae5bf2cd875743f70767d332b2924cf6ee2386b457fc31d1861703283f3a4b6e9a69a34a9ace164eb3adc37e80b8c5", 0x53}, {&(0x7f0000000200)="cb2110b9efdfd952d9a0a709688e75be9eb14afa781f6f89a6f635f3e81dbf1615dc3ed60722d4e139f87a3a962768306c2bf9373469cf90eee1d79919e3f3bab672ec1e4c70a934190835f1739859fd7e7145b177f740f4090069", 0x5b}], 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, 0x0, 0x4) socket$inet6(0xa, 0x2, 0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000040)=ANY=[], 0x14) 3.85840321s ago: executing program 1 (id=9141): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$igmp(0x2, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@private=0xa010100, @remote}, 0x10) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x2, 0x28, 0x68, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@rr={0x7, 0xb, 0xb2, [@local, @loopback]}]}}, @echo={0x8, 0x0, 0x0, 0x6, 0x1}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xfffe, 0x7, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) 3.857928235s ago: executing program 1 (id=9142): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) unshare(0x20000400) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x25, 0x1, @val=@tcx}, 0x1c) sendmsg$tipc(r0, &(0x7f0000000500)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x1, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x8d4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c000780080006400400000005000100060000000500050002000000050004000000000009000200"], 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x200088c4) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000002, 0xa8011, 0xffffffffffffffff, 0x2000) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x2000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x890) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) 3.291059854s ago: executing program 3 (id=9143): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f00000005c0)={0x2, 0x4e24, @multicast2}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) r5 = socket(0x11, 0x2, 0x0) setsockopt(r5, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) 3.153717768s ago: executing program 2 (id=9145): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0xc, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x2000000) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0xc8, 0x4) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/88, 0x58}, 0xa1}], 0x1, 0x45833af92e4b39ff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private=0xa010101, @in=@multicast2, 0x0, 0x966, 0x0, 0xfffc, 0xa}, {0x1, 0x4, 0x0, 0x80000000, 0x6, 0x9, 0x0, 0x40000000000000}, {0x0, 0x9, 0x53e5, 0x23}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x2, @in=@multicast1, 0x1502, 0x4, 0x0, 0x0, 0x4, 0xfffffffd, 0x1}}, 0xe8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xfffe, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000001080)=ANY=[@ANYBLOB="01000000000000000a00000300000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001"], 0x110) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f0000000e40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e00)={&(0x7f00000006c0)={0x710, 0x1, 0x5, 0x401, 0x0, 0x0, {0x1}, [{{0x254, 0x1, {{0x1, 0x7}, 0x5, 0xf, 0x4, 0xd, 0x22, 'syz1\x00', "a0127301fc70ad39d079e69e93bae04b3537dfecc614b5f23397e82ddc69d064", "e2f3692e954442b718e906c34144125e806b7cd68b3a20d9b713235ea0b28439", [{0x81, 0xa, {0x3, 0x9df}}, {0x1, 0x9, {0x1, 0x1a4}}, {0x8, 0x3, {0x1, 0x9}}, {0x7, 0xff, {0x1}}, {0x9, 0x1, {0x0, 0x1}}, {0x0, 0x1, {0x2, 0xbe}}, {0x6, 0x400, {0x2, 0x6}}, {0xfff7, 0xbb9, {0x0, 0xd}}, {0x7, 0x1, {0x3, 0x3}}, {0x8, 0x0, {0x0, 0x3}}, {0x2, 0x7, {0x2, 0x1a}}, {0x40, 0x8, {0x3, 0xd7}}, {0x6, 0x9, {0x1, 0x3ee0}}, {0x89, 0x9, {0x1, 0x40}}, {0x90, 0x3, {0x2, 0x9fc}}, {0x6, 0x3, {0x0, 0x5}}, {0x7, 0x200, {0x0, 0x1}}, {0xc3, 0xffc, {0x2, 0xff}}, {0x100, 0x7fff, {0x1, 0x3ff}}, {0x7, 0x5, {0x1}}, {0x9, 0xffff, {0x2c0ce252f3980311, 0x7}}, {0x4, 0x7, {0x2, 0x100}}, {0x6, 0x6, {0x0, 0x2}}, {0x7, 0x1, {0x3, 0x9}}, {0x1, 0xd0e, {0x0, 0x2}}, {0x7, 0xaa1e, {0x0, 0xfffffffd}}, {0xf, 0x6, {0x0, 0x7}}, {0x10, 0x3, {0x1, 0x5}}, {0x7, 0x4, {0x3, 0x3}}, {0x200, 0x7, {0x0, 0x800}}, {0x1ff, 0xc, {0x1, 0x5}}, {0x7e2, 0x8f7, {0x821d79233f7b9296, 0x7}}, {0x40, 0x1, {0x1, 0x9}}, {0x9, 0x1, {0x2, 0x5}}, {0x5, 0x800, {0x3, 0x9}}, {0x400, 0x7, {0x0, 0x3ff}}, {0x9, 0x101, {0x3, 0x2}}, {0x2, 0x5, {0x3, 0x2}}, {0x9, 0x0, {0x0, 0x8}}, {0x9, 0x8, {0x3, 0x7}}]}}}, {{0x254, 0x1, {{0x0, 0xb826}, 0x8c, 0xc2, 0x3, 0x5, 0x24, 'syz1\x00', "b11645baf80b3a8771f2977c245f32aedea8413edc7003cb61e009a0f9d1f262", "e034a2c3bb6732f53ef3fec2a2cbcf2ff8756d6fb9920ac4a50c2e03f9bd528e", [{0x20, 0x2, {0x2, 0x7}}, {0xb, 0xffff, {0x2, 0x20000000}}, {0xfff2, 0x8, {0x3, 0xdcf8}}, {0x5, 0x9cec, {0x0, 0x8}}, {0x3, 0x42e, {0x1, 0x8}}, {0x7, 0x7, {0x3, 0x40}}, {0x1, 0x9, {0x2, 0xbfb}}, {0x4, 0x3ff, {0x3, 0x16f}}, {0x1, 0x4, {0x1, 0x8}}, {0x5, 0x0, {0x2, 0x4}}, {0x1, 0xffc0, {0x0, 0x5643}}, {0x3, 0x280, {0x1, 0x3}}, {0x5, 0x4, {0x1, 0x13a}}, {0x2, 0xfff, {0x1, 0xbc5c}}, {0x3, 0x6e, {0x0, 0x9}}, {0xea4, 0x7, {0x2, 0x100}}, {0x2, 0x6, {0x1, 0x7}}, {0x0, 0x3, {0x2, 0x3}}, {0x8001, 0x3, {0x1, 0x4}}, {0x8, 0x80, {0x2, 0xfffffffd}}, {0x33, 0xd0, {0x1, 0x1}}, {0x5, 0x8, {0x0, 0x8}}, {0x45c, 0x4, {0x3, 0x3}}, {0x5, 0x0, {0x0, 0x3}}, {0xff, 0x8, {0x3, 0x1}}, {0x0, 0xffa, {0x1, 0xe4}}, {0x7, 0x4, {0x1, 0x586}}, {0x6, 0x9, {0x3, 0xfff}}, {0x0, 0x412a, {0x0, 0x80}}, {0xa9, 0x8, {0x3, 0x2}}, {0x1, 0x3, {0x3, 0x8}}, {0x8000, 0xb3, {0x3, 0x4}}, {0x8, 0x8, {0x0, 0x8a3}}, {0x0, 0x6, {0x2, 0x7}}, {0x8000, 0x6, {0x1}}, {0x1, 0x8, {0x3, 0x101}}, {0xb4, 0xc374, {0x2, 0x61}}, {0xffff, 0x80, {0x3, 0x8}}, {0xf753, 0x0, {0x2, 0x6}}, {0x5, 0x0, {0x1, 0x3}}]}}}, {{0x254, 0x1, {{0x7, 0x4}, 0x4, 0x4e, 0x9, 0x0, 0x1, 'syz0\x00', "1f853ce26438f37cc671147352826a394d3ed5fb33fa187d4f95413354618860", "9879227464f40691b72f86c8d441edd51f4e268e3d6ce57e3a9be3428a89af1d", [{0x7f, 0xf801, {0x2, 0xff800}}, {0x4, 0x7, {0x0, 0x4593}}, {0x3ff, 0x9, {0x0, 0xfff}}, {0x4, 0x4, {0x0, 0xe6}}, {0xe0af, 0x8f, {0x2, 0x4}}, {0xff, 0xf7, {0x2, 0x4}}, {0x7d51, 0x38b, {0x1, 0xffff}}, {0x7, 0x5, {0x3, 0x6}}, {0x2, 0x9, {0x0, 0xc}}, {0x8001, 0x9, {0x0, 0x6}}, {0xd481, 0x23, {0x3, 0x3}}, {0xd, 0x8001, {0x2}}, {0x400, 0x8, {0x2, 0x3}}, {0x6, 0x2, {0x2, 0x80000000}}, {0xa, 0x1ff, {0x2, 0xffff}}, {0x2, 0x5aba, {0x1}}, {0xd, 0x2, {0x3, 0x7fff}}, {0x6, 0x2, {0x2, 0x66}}, {0x4, 0xc, {0x1, 0x396}}, {0xd, 0x0, {0x3, 0x4f5}}, {0x5, 0x6, {0x0, 0x6}}, {0x0, 0x0, {0x4f7a626f57a240ec, 0x10000}}, {0x101, 0x4, {0x1, 0x7fff}}, {0x8001, 0x200, {0x0, 0x8001}}, {0x9498, 0xffff, {0x3, 0x9}}, {0x9, 0x2, {0x3, 0x77d}}, {0xc7c, 0x0, {0x1, 0x1}}, {0x401, 0x0, {0x0, 0xca4}}, {0x200, 0x600, {0x1, 0x1}}, {0x6, 0x2c9, {0x3, 0x101}}, {0x1, 0x38, {0x2, 0xfd79}}, {0xfff3, 0xd5, {0x3, 0x2}}, {0x2, 0x800, {0x1, 0x10001}}, {0x2, 0x3, {0x3, 0x18000000}}, {0xffff, 0x1, {0x0, 0x6}}, {0x7, 0xfff8, {0x3, 0x1ff}}, {0x8, 0x8, {0x5}}, {0x803, 0x2, {0x2, 0x5}}, {0x8, 0xb03, {0x1, 0x4}}, {0x2, 0x0, {0x3, 0x6}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x4}, 0x11) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000000206010300000000000000000000000005000500000000000900020073797a32000000000500040000000000050001"], 0x48}}, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)={0x28, r4, 0x50dc85624ea6cf59, 0x70bd27, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x6, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0xffffffffffffff81, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x0, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x0, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x0, 0x4, 0x4e21}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000600)={r5, r5, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) shutdown(r5, 0x1) 3.137737536s ago: executing program 3 (id=9146): r0 = socket$inet6(0xa, 0x800, 0x7c) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg(r3, &(0x7f0000008280)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/47, 0x2f}], 0x1}, 0x8}], 0x1, 0x40000180, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r7) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x48, 0x64, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'hsr0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000080)="9d96914067bf7a3be5510b29b4105063f34b32429eef3c72b4c002496c9b12df6146088387e103fd4e6cd6aee95d", 0x2e, 0x1, &(0x7f00000000c0)={0x11, 0x7, r9, 0x1, 0x8, 0x6, @remote}, 0x14) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x40054) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x0, 0xc}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000040)={@mcast2, r9}, 0x14) socket$packet(0x11, 0x3, 0x300) 3.128129172s ago: executing program 1 (id=9147): r0 = socket(0x1f, 0x800, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x800, 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)=ANY=[@ANYBLOB="c8371a24", @ANYBLOB="000228bd70001bd7ec256600000008000300", @ANYRES32=0x0, @ANYRESHEX=r1], 0x50}, 0x1, 0x0, 0x0, 0x8}, 0x4044055) sendmsg$key(r2, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="02030003160000002cbd7000ffdbdf2502000900080000001c00000000000000050006003c0000000a004e2400000008ff01000000000000000000000000000100000000000000000200010000000000000009fd000000c005000500000000000a004e24000000090000000000000000000000000000000006000000030000000600080009"], 0xb0}, 0x1, 0x7}, 0x18004) r3 = socket$kcm(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="0e000000", @ANYRES16=r4, @ANYBLOB="010000000000fcdbdf250c0000000800050000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x890) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a010400000000000000000200000334000480300001800e0001006279746570726465720000001c000280080001400000001008000540000000d1080004030000001f0900010073797a300000000009000e0073797a3200000000140000001100010800000000000000000700000a"], 0x88}}, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x2, 0xfffff000}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r7, 0x0, 0x2, &(0x7f00000001c0)=""/29, &(0x7f0000000080)=0x1d) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f00000002c0)={{0x3a, @broadcast, 0x4e21, 0x4, 'lblcr\x00', 0x0, 0x873, 0x59}, {@multicast2, 0x4e24, 0x1, 0x8, 0x2}}, 0x44) ppoll(&(0x7f0000000140)=[{r3, 0x2ce}, {r8, 0x402}, {0xffffffffffffffff, 0x4104}, {r9, 0x41}], 0x4, &(0x7f0000000f80)={0x77359400}, &(0x7f0000000fc0)={[0x6]}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) close(0x4) socket(0x8, 0x5, 0x4) sendmsg$sock(r3, &(0x7f00000000c0)={&(0x7f0000000400)=@in6={0x2, 0x4e23, 0x0, @dev, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x40800) 2.663266004s ago: executing program 2 (id=9149): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20004000) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000000)={0x0, 0x9, "be5f21", 0x8, 0x80}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0x4, 0x7}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x3890, 0x80000000, 0x2, 0x6, 0x10000}}, {0x4}}]}]}, 0x54}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000800000000000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)="8fe7cfc5321d0444ab78ba0f61c1878e4448e15103f3741d6b451c2888cef63c355f332009f460e7dc5cc57cb1eb29f9ea6948fa43b60ea0b6300e3c09832a28d1433aa116bd11331fa5af5f9201f65a5cb3e28ea754b7e6fe913bf66bd10ba37ce407b302998c895154a0fa52b9b9bece9a7c0cc71ebb1f29ffbd36776a504baba3602d0ba20d69", 0x88}}, 0x20008000) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000340)=0x1) write$ppp(r6, &(0x7f0000000700)="b068", 0x2) 2.661388014s ago: executing program 4 (id=9150): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) ioctl$sock_ifreq(r0, 0x8920, &(0x7f0000000140)={'tunl0\x00', @ifru_settings={0x3, 0x7, @sync=&(0x7f0000000100)={0x1, 0x700000, 0x7}}}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) writev(r2, &(0x7f00000003c0)=[{&(0x7f00000000c0)='\x00\x00\x00\x00', 0x4}, {&(0x7f0000000040)='\x00\x00', 0x2}], 0x2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'gre0\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x791, 0x8, 0x9, 0xa, {{0x5, 0x4, 0x1, 0x15, 0x14, 0x64, 0x0, 0x7, 0x29, 0x0, @multicast1, @remote}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', r4, 0x2f, 0x2, 0x6, 0x9, 0x48, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x7, 0x7, 0x7, 0x830b}}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0xb0, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x88, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x404c844}, 0x40000) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r7, 0x0) recvmmsg(r7, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) read(r7, &(0x7f0000000000)=""/31, 0x1f) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000180)='wg2\x00', 0x4) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x5, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2e, 0x2}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x4e20, @rand_addr=0x64010101}}]}, 0x50}, 0x1, 0x7}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) 2.532919157s ago: executing program 0 (id=9151): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000002980), r0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) socket$kcm(0xa, 0x5, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000001, 0x11, r3, 0xffffffffffffc000) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x0, 0x401, 0x70bd2c, 0x25dfdbfd, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @sched_cls=0x1f4b170035c1b2ec}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r7) getsockname$packet(r7, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x44}}, 0x40848c0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x2c000850) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}}, 0x20004000) 2.339476636s ago: executing program 1 (id=9152): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x9b}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x102b, &(0x7f0000000a00)={@broadcast, @remote, @val={@val={0x88a8, 0x0, 0x0, 0x3}, {0x8100, 0x2, 0x1, 0x3}}, {@mpls_mc={0x8848, {[{0x8001, 0x0, 0x1}, {0x4}, {0x3, 0x0, 0x1}], @llc={@snap={0xab, 0x0, "c1f2", "84befb", 0x8809, "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"}}}}}}, &(0x7f0000001a40)={0x0, 0x4, [0x5fa, 0x85a, 0xebc, 0xed4]}) r7 = socket$inet(0x2, 0x3, 0x4) setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000180)=0x79, 0x4) shutdown(r7, 0x0) recvmmsg(r7, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5e0}, [@IFLA_MTU={0x8, 0x4, 0x5e0}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.338718988s ago: executing program 3 (id=9153): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x0, 0x8}, {0x7, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x38, 0x2, [@TCA_FW_ACT={0x34, 0x4, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) socket(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000005c0)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x0, 0x2d, 0x0, "11cba021ab00d7c3d795bc8741153034523fb8ca053ba1a69ecb02d499b8503ce487d03abab1b53320f25c724fe0d32fce049bf65bdef89efbd833d173b77087ea4ea3a853df466fa7859f68e3de5c95"}, 0xd8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) pipe(&(0x7f0000000300)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260", 0xf}], 0x1}, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x100000000, 0x1}) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x20b7ee}) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800) 2.245149859s ago: executing program 2 (id=9154): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a0000e20f8008005800"/57, @ANYRES32=0x0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0xc000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa8442, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x85, 0x2, {{0x20000002, 0x8, 0xfffffffb, 0x2, 0x2}, 0x5, 0x1, 0x80000000, 0x2, 0x8, 0x17, 0x2, 0x3, 0x0, 0xe, {0x0, 0x7fff, 0x225, 0x3, 0x9, 0x4}}}}]}, 0x78}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f00005c7000/0x4000)=nil, 0x4000, 0xb635773f05ebbeef, 0x13, r3, 0x51873000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000000c0)={0x84, @loopback, 0x4e20, 0x3, 'none\x00', 0x30, 0x0, 0x3f}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xab}}, &(0x7f0000000480)='GPL\x00'}, 0x80) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x37}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r6, 0x0, 0xcd, &(0x7f0000000080)={@loopback, @broadcast, 0xffffffffffffffff, "32ad8cce61d1a17d61cc6ddda340514fd2d01c463a896171f012dcde55324bdf", 0x4, 0x7fff, 0x5, 0x7ff}, 0x3c) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000280)={{0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'nq\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x2000, 0xc24, 0x9, 0xfffffff9}}, 0x44) r7 = socket$phonet(0x23, 0x2, 0x1) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x24}, 0x1, 0x5502000000000000, 0x0, 0x31}, 0x4000080) sendmmsg(r7, &(0x7f0000000540)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcbd}}], 0x1, 0x8010) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @random="13f5afcfde67"}) 2.146772452s ago: executing program 4 (id=9155): socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$kcm(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0x8000000003c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x8d5}, 0x40090) 1.958190587s ago: executing program 4 (id=9156): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f00000005c0)={0x2, 0x4e24, @multicast2}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) r5 = socket(0x11, 0x2, 0x0) setsockopt(r5, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) 1.937660506s ago: executing program 0 (id=9157): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) unshare(0x20000400) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x25, 0x1, @val=@tcx}, 0x1c) sendmsg$tipc(r0, &(0x7f0000000500)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x1, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x8d4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c000780080006400400000005000100060000000500050002000000050004000000000009000200"], 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x200088c4) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000002, 0xa8011, 0xffffffffffffffff, 0x2000) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x2000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x890) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) 1.787243576s ago: executing program 3 (id=9158): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000300000000000000000000008500000041000000a60000000e00080095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="0000000000303e97380e90231bdbdaf6a4bd77eabcd3866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9d00000c0a498396b28c7d1784d04aa38922721cb781608144284d90a72d7d2e3152d201ed78ffb6e711b889cda0346ce9bca2e6e9e46b15980456c43a659f427e3e6e9e16e0de93100734d409ca57c27d3bde66b2791c1b2f7032f3cc02c85c43e8652f13258bd412174ea931f1d39a9830e593761d91c56f637f0e1568ea66a15d9f0eba504ab3eb205fda13d1068e7692f8d00a2d92d2fb48887b6f71c6de43a923bbcaa9e3ac5bd82ac0ec00000000000000000000000000000000e48251271d0ed111d9ed7f4d18ee4aa30240843ed560aeebee209d8c557e60e69e634b37c43235e062634e8f0932582eb91d27c5c81911c5a4d57ea2813573aec3a6909f30f29c535a", 0x142}, {&(0x7f0000000d00)="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", 0x33f}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20008810) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='\n', 0x1}], 0x1, 0x2, 0x2) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) pread64(r4, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r1, @ANYRESOCT], 0x14}], 0x1, 0x0, 0x0, 0x4000000}, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3ded6fc974b56662498d836008797ee9514d2b7767da26cf50e0c72be75638a02c0f34dd64bb2b9b21898679", @ANYRES16, @ANYBLOB="00022cbd7000fcdbdf2545000000", @ANYRES32=0x0, @ANYBLOB="0c009900ff07000008000000"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r6, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000380)={0x6, {{0x2, 0x4e22, @broadcast}}}, 0x88) 1.588653894s ago: executing program 1 (id=9159): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffdf, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24000084) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfdfffdfc, {0x0, 0x0, 0x0, r12, {0x4}, {0xffff, 0xffff}, {0xfff1, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x3c0d, 0x5, 0xe4, 0x5}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0x6}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x10000, 0x8, 0xbb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x85c}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r6) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r15, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) 1.543091774s ago: executing program 0 (id=9160): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0xfb, &(0x7f0000003b00)=""/251, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000500)={r1, &(0x7f0000000400), 0x28600, &(0x7f0000000440)={@_ha_fsid={[0x9, 0x14a7]}, {0x1, 0x8, 0x6, 0x7d}}, 0xfff, &(0x7f0000000480), &(0x7f00000004c0)=0x5}) bind$802154_dgram(r1, &(0x7f0000000580)={0x2, @long={0x3, 0xfffc, {0xaaaaaaaaaaaa0202}}}, 0x11) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r2, 0xffffffffffffffff}, 0x4) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000600)=@o_path={&(0x7f0000000400)='./file0\x00', r4, 0x4000, r3}, 0x18) connect$inet(r3, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) close(0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a840000000c0a010100002100000000000a0000060900020073797a31000000000900010073797a31000000005800038054"], 0xac}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r6, &(0x7f00000002c0)=[{&(0x7f0000001740)=""/12, 0xc}], 0x1, 0x4, 0xfffffffe) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000080)={0x9, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200)=r8, 0x4) openat$cgroup_ro(r7, &(0x7f0000000640)='devices.list\x00', 0x0, 0x0) openat$cgroup_devices(r7, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r6, r7, 0x35, 0x0, @void}, 0x10) 1.419946509s ago: executing program 4 (id=9161): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) pipe(0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000200)=0x6) writev(0xffffffffffffffff, 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200521, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x41003, 0x1ff, 0x8000, 0x3, 0x0, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1fe, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x0, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x1fe, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x7fff, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x8, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x0, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x400, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb8, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x9, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe5, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0xd, 0xa, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r2, 0x0, 0x4) 1.290315472s ago: executing program 0 (id=9162): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) pipe(0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000200)=0x6) writev(0xffffffffffffffff, 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200521, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x41003, 0x1ff, 0x8000, 0x3, 0x0, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1fe, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x0, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x1fe, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x7fff, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x8, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x0, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x400, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb8, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x9, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe5, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0xd, 0xa, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)}, 0x4) 1.216471493s ago: executing program 2 (id=9163): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4040040) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000000c40), 0x0, 0x8014) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x40801}, 0x4000800) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(r2, 0x0, 0x12) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350073797a5f74756e00000000000000000008000a00", @ANYRES32=r5], 0x3c}}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x3, 0x1c, 0x0, 0x300, 0x0, 0x2, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xd}}, {0x12, 0x7d, 0x0, @local}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x4008015, &(0x7f00000000c0)={0x11, 0xe5, 0x0, 0x1, 0x7}, 0x14) 1.09898322s ago: executing program 3 (id=9164): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r1, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{0x0}], 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) listen(r3, 0x5) connect$inet(r4, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r5 = accept(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000020), 0x4) setsockopt$inet_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000020), 0x4) setsockopt$inet_tcp_TLS_RX(r5, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}}, 0x28) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)='h', 0x1}], 0x1, &(0x7f0000000180)=[@ip_ttl={{0x14, 0x11a, 0x1, 0x7f}}], 0x18}, 0x0) recvmsg(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/16, 0x10}, 0x40) 980.369311ms ago: executing program 4 (id=9165): vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000000)="e22dc69964e91f95b4b657e2d43245501af3fed75ecf8b2a5318ca5d490018e7e27b9566ae5bf2cd875743f70767d332b2924cf6ee2386b457fc31d1861703283f3a4b6e9a69a34a9ace164eb3adc37e80b8c5", 0x53}, {&(0x7f0000000200)="cb2110b9efdfd952d9a0a709688e75be9eb14afa781f6f89a6f635f3e81dbf1615dc3ed60722d4e139f87a3a962768306c2bf9373469cf90eee1d79919e3f3bab672ec1e4c70a934190835f1739859fd7e7145b177f740f4090069", 0x5b}], 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, 0x0, 0x4) socket$inet6(0xa, 0x2, 0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x14) 953.412681ms ago: executing program 0 (id=9166): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r1, 0x0, 0x0}, 0x20) ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, &(0x7f00000000c0)={0x5, 0x6b, 0x7, 0x5, 0x4, 0x2, 0x4}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003880)=@newtfilter={0x49c, 0x2c, 0xc3f, 0x30bd21, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb, 0x3}, {}, {0xc, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x470, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x80000001}, @TCA_FW_CLASSID={0x8, 0x1, {0xffe4, 0xc}}, @TCA_FW_ACT={0x45c, 0x4, [@m_police={0x458, 0x16, 0x0, 0x0, {{0xb}, {0x42c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffeffffff1427}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xa759}, @TCA_POLICE_RATE={0x404, 0x2, [0x23000, 0xffffffff, 0x10, 0x1, 0x8, 0x3ff, 0x0, 0x0, 0xf, 0xa, 0x100, 0x2, 0x75, 0x9, 0x0, 0x9, 0xffffffba, 0xa, 0x4, 0x59, 0x4, 0x3, 0x7, 0x3, 0xffffffff, 0x1, 0x3, 0x0, 0x5, 0xb254, 0x9, 0x6, 0x80, 0xb, 0x5, 0x2, 0x3, 0x3, 0x2, 0x6, 0xb63e, 0x1, 0xb, 0x8, 0x7238, 0x8, 0xf, 0x4, 0x8001, 0xffff, 0x7f, 0x3, 0xd, 0x7, 0x100, 0x8, 0xe701, 0x3, 0x2, 0x5ff1a96a, 0x1, 0xff, 0x4, 0x401, 0x0, 0x7, 0x3c84, 0x200, 0x5650a7a5, 0xca, 0x3, 0x8, 0x4, 0x10000, 0x6, 0xb843, 0xdd, 0x21a, 0x59a4, 0x40, 0x2, 0x8, 0x4, 0x1000, 0x6, 0x1000000, 0x9, 0x9, 0x2, 0x1ff, 0x24b368a2, 0x0, 0x8, 0x94b, 0xfffffff8, 0x7fff, 0xb3, 0xfffffff9, 0xb, 0xb8, 0x8000, 0x4, 0xe7a, 0x1, 0xa, 0x2, 0x8, 0x7, 0x7, 0x7, 0x9, 0x400000, 0x1, 0x5, 0x7ff, 0x3, 0x8, 0x1, 0x0, 0x8000, 0xffffffff, 0xe, 0x6, 0x5, 0x10001, 0x2, 0x7, 0x80, 0x8, 0x18e5, 0x6, 0x3, 0x6, 0x9, 0x7ff, 0x7, 0x7fff, 0xeb, 0x0, 0x9, 0x6322dc7b, 0x10, 0x78000000, 0xfff, 0xc000000, 0xc15, 0x9, 0x20, 0x400, 0x9b, 0x6e4, 0x7, 0x81, 0x0, 0x4, 0x0, 0xfffffffd, 0x1, 0x9, 0x7, 0x8, 0x2, 0x8000, 0xb2, 0x2, 0xd, 0x80000000, 0x40, 0x38e6, 0x400, 0x0, 0x0, 0x7b9, 0x9, 0x1000, 0x5, 0x3, 0xaa6, 0x6d, 0x2, 0x101, 0x7, 0x4b0, 0x2, 0x3, 0x8, 0x6, 0xffffffff, 0x0, 0x0, 0xffffff8c, 0x9, 0x1000, 0x9, 0x3, 0x8, 0x9, 0x4, 0xd851, 0x0, 0x7fffffff, 0x8, 0x8, 0xb, 0x9, 0x8000, 0x4, 0x9bcc, 0x7, 0x4, 0xb5, 0xea, 0x8000, 0x7f, 0x1, 0x1, 0x1, 0x7, 0x4, 0x4, 0xc8f, 0x1, 0x4, 0x0, 0x6, 0xfffffffb, 0x9f84, 0x1ff, 0xffffffff, 0x2, 0x8, 0x4, 0x1, 0x0, 0x2, 0x8, 0x3, 0x5, 0xb, 0x4, 0x80, 0x5, 0x3d110ccc, 0x7, 0x1, 0x0, 0x0, 0xe, 0x7ff, 0x3, 0x2, 0x0, 0x2, 0x7, 0x7, 0x1]}], []]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x49c}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x7, 0x7, 0x7, 0x5, 0x6, 0x7, 0x1, 0xb}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4c000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000b0}, 0x48d0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56561, 0x70bd2f, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x0, 0x8}, {0xc, 0xffff}}}, 0x24}}, 0x4048090) r8 = socket$kcm(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ff"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000003d00)=ANY=[@ANYBLOB="080000f5060006"], 0xfcf) 497.007378ms ago: executing program 1 (id=9167): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) r0 = socket(0x1, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffffff0000000000008000d71a0000400002009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x7}, 0x94) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)={0x3c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d5}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) r3 = socket(0x11, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x0, 0x4e6a, 0x50, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x7, 0x7, 0xbd22, 0x5}}) connect$can_bcm(r3, &(0x7f00000006c0)={0x1d, r4}, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c250000000000202021db1a"], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_emit_ethernet(0x122, &(0x7f0000000740)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f57a14", 0xe8, 0x3a, 0xff, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "508359", 0xfffd, 0x3a, 0x0, @private1, @mcast1, [@srh={0x6, 0x0, 0x4, 0x0, 0xfc, 0x0, 0x200}, @hopopts={0x73}, @hopopts={0x73, 0xb, '\x00', [@ra={0x5, 0x2, 0x3}, @ra={0x5, 0x2, 0x8c}, @pad1, @hao={0xc9, 0x10, @private1}, @calipso={0x7, 0x28, {0x0, 0x8, 0x4, 0x9, [0x1ff, 0xd4f8, 0x5, 0xfffffffffffffff5]}}, @hao={0xc9, 0x10, @local}]}, @dstopts={0x84, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @pad1, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x3b}}, @jumbo, @generic={0xa}, @hao={0xc9, 0x10, @private2}, @padn]}]}}}}}}}, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r6, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000240)="a85751ad519b201965da2ebcc4898c7f46cb0819b38bbf504fd2617bf9689f2cdbe63959901f5afb841befbb8787b77bc6855e836e2c277f600c31ff7ea5acf0a9525fa1c161d06b23b802aaf4716846d96af1654995ec32db50c7e056aa45212cd6", 0x62}], 0x2}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0xa82a02e4010a08bd}, "1a01c783a8bc563d", "e9a0bd986e338531d1157bc12d1fc364fdbaaa4d2954c1166835dbbe78286228", "bd69dbc7", "1d7265a045a85572"}, 0x38) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f0000000480)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) 426.398637ms ago: executing program 2 (id=9168): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r2 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, 0x0, 0x25, 0x0, @val=@netkit={@void, @value=r1}}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x10, 0x1, 0x7, 0x2, {{0x13, 0x4, 0x2, 0x1b, 0x4c, 0x64, 0x72e, 0xf, 0x4, 0x0, @multicast1, @multicast2, {[@end, @ssrr={0x89, 0x17, 0x9a, [@dev={0xac, 0x14, 0x14, 0x11}, @empty, @empty, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x1f, 0x38, [@dev={0xac, 0x14, 0x14, 0x1f}, @remote, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @loopback, @remote]}]}}}}}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000042, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r6, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x3}}}}}}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) 425.965539ms ago: executing program 4 (id=9169): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r1, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{0x0}], 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) listen(r3, 0x5) connect$inet(r4, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r5 = accept(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000020), 0x4) setsockopt$inet_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000020), 0x4) setsockopt$inet_tcp_TLS_RX(r5, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}}, 0x28) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)='h', 0x1}], 0x1, &(0x7f0000000180)=[@ip_ttl={{0x14, 0x11a, 0x1, 0x7f}}], 0x18}, 0x0) recvmsg(r5, 0x0, 0x40) 100.842728ms ago: executing program 0 (id=9170): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) unshare(0x20000400) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x25, 0x1, @val=@tcx}, 0x1c) sendmsg$tipc(r0, &(0x7f0000000500)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x1, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x8d4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640040000000500010006000000050005000200000005000400000000000900020073797a31000d00000c00"], 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x200088c4) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000002, 0xa8011, 0xffffffffffffffff, 0x2000) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x2000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x890) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) 0s ago: executing program 3 (id=9171): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f00000005c0)={0x2, 0x4e24, @multicast2}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) r5 = socket(0x11, 0x2, 0x0) setsockopt(r5, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) kernel console output (not intermixed with test programs): s mode [ 963.428417][T29646] gre4: left promiscuous mode [ 963.471266][ C1] net_ratelimit: 43 callbacks suppressed [ 963.471293][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 963.568304][T29646] veth25: left promiscuous mode [ 963.629464][T29665] 8021q: adding VLAN 0 to HW filter on device bond19 [ 963.641579][T23523] bond3: (slave gretap1): failed to get link speed/duplex [ 963.717576][T29666] bond19: (slave ip6gretap0): making interface the new active one [ 963.720358][T29666] bond19: (slave ip6gretap0): Enslaving as an active interface with an up link [ 963.793818][T23509] bond3: (slave gretap1): failed to get link speed/duplex [ 963.933475][T29685] netlink: 'syz.2.7743': attribute type 16 has an invalid length. [ 963.933502][T29685] netlink: 'syz.2.7743': attribute type 17 has an invalid length. [ 964.232430][T29685] 8021q: adding VLAN 0 to HW filter on device bond1 [ 964.233574][T29685] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 964.233616][T29685] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 964.239293][T29685] tipc: Resetting bearer [ 964.247686][T29685] 8021q: adding VLAN 0 to HW filter on device bond2 [ 964.298949][T29685] 8021q: adding VLAN 0 to HW filter on device bond3 [ 964.344623][T29685] 8021q: adding VLAN 0 to HW filter on device bond4 [ 964.349162][T29685] 8021q: adding VLAN 0 to HW filter on device bond5 [ 964.356935][T29685] 8021q: adding VLAN 0 to HW filter on device bond6 [ 964.374872][T29685] 8021q: adding VLAN 0 to HW filter on device bond7 [ 964.378072][T29685] 8021q: adding VLAN 0 to HW filter on device bond8 [ 964.385138][T29685] 8021q: adding VLAN 0 to HW filter on device bond9 [ 964.390425][T29685] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 964.395153][T29685] 8021q: adding VLAN 0 to HW filter on device bond10 [ 964.498765][T29685] 8021q: adding VLAN 0 to HW filter on device bond11 [ 964.505174][T29685] 8021q: adding VLAN 0 to HW filter on device eth0 [ 964.507069][T29685] 8021q: adding VLAN 0 to HW filter on device eth1 [ 964.508776][T29685] 8021q: adding VLAN 0 to HW filter on device eth2 [ 964.510505][T29685] 8021q: adding VLAN 0 to HW filter on device eth3 [ 964.514748][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 964.519573][T29685] 8021q: adding VLAN 0 to HW filter on device bond12 [ 964.528935][T29685] 8021q: adding VLAN 0 to HW filter on device bond13 [ 964.532783][T29685] 8021q: adding VLAN 0 to HW filter on device bond14 [ 964.541255][T29685] 8021q: adding VLAN 0 to HW filter on device bond15 [ 964.646952][T29685] 8021q: adding VLAN 0 to HW filter on device bond16 [ 964.683905][T29685] 8021q: adding VLAN 0 to HW filter on device bond17 [ 964.774679][T29685] 8021q: adding VLAN 0 to HW filter on device bond18 [ 964.777856][T29685] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 964.779408][T29685] syz_tun: entered promiscuous mode [ 964.785616][T29685] 8021q: adding VLAN 0 to HW filter on device bond19 [ 964.788798][T29685] 8021q: adding VLAN 0 to HW filter on device bond20 [ 964.795041][T29685] 8021q: adding VLAN 0 to HW filter on device bond21 [ 964.830740][T29685] 8021q: adding VLAN 0 to HW filter on device bond22 [ 964.859568][T29685] bridge12: left promiscuous mode [ 964.860178][T29685] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 964.873194][T29685] 8021q: adding VLAN 0 to HW filter on device bond23 [ 964.904980][T29685] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 964.924993][T29685] 8021q: adding VLAN 0 to HW filter on device bond24 [ 964.943127][T29685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 964.946896][T29685] 8021q: adding VLAN 0 to HW filter on device bond26 [ 964.949121][T29685] veth29: left allmulticast mode [ 964.959761][T29685] 8021q: adding VLAN 0 to HW filter on device bond27 [ 964.985225][T29685] veth31: left allmulticast mode [ 965.001226][T29685] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 965.003588][T29685] 8021q: adding VLAN 0 to HW filter on device bond29 [ 965.022818][T20655] bond26: (slave veth29): link status definitely up, 10000 Mbps full duplex [ 965.034016][T20655] bond26: (slave veth29): making interface the new active one [ 965.045627][T20655] bond26: active interface up! [ 965.096044][ T5712] bridge12: entered promiscuous mode [ 965.302873][T23523] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 965.302913][T23523] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 965.338430][T23523] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 965.338468][T23523] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 965.445942][ T3788] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 965.445982][ T3788] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 965.492300][ T3788] bond28: (slave veth33): link status definitely up, 10000 Mbps full duplex [ 965.493831][ T59] bond3: (slave gretap1): failed to get link speed/duplex [ 965.519755][ T59] bond27: (slave veth31): link status definitely up, 10000 Mbps full duplex [ 965.520173][ T59] bond27: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 965.547366][ T59] bond27: (slave veth31): making interface the new active one [ 965.551156][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 965.596706][ T59] bond27: active interface up! [ 965.616799][T29716] xt_policy: output policy not valid in PREROUTING and INPUT [ 965.782902][T20655] bond3: (slave gretap1): failed to get link speed/duplex [ 965.782960][T20655] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 965.782992][T20655] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 965.948577][T18779] bond3: (slave gretap1): failed to get link speed/duplex [ 965.973657][T29722] netlink: 'syz.3.7758': attribute type 1 has an invalid length. [ 966.017924][T29726] xt_IDLETIMER: timeout value is too big [ 966.051336][T20655] bond3: (slave gretap1): failed to get link speed/duplex [ 966.176598][T18779] bond3: (slave gretap1): failed to get link speed/duplex [ 966.829002][T29747] netlink: 'syz.1.7768': attribute type 32 has an invalid length. [ 966.829030][T29747] __nla_validate_parse: 11 callbacks suppressed [ 966.829043][T29747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7768'. [ 966.829079][T29747] bond0: option coupled_control: mode dependency failed, not supported in mode active-backup(1) [ 967.216402][T29754] tipc: Enabling of bearer rejected, already enabled [ 967.535220][T29763] netlink: 92 bytes leftover after parsing attributes in process `syz.4.7772'. [ 967.788156][T29767] netlink: 92 bytes leftover after parsing attributes in process `syz.0.7774'. [ 968.029337][T29776] smc: removing ib device syz0 [ 968.282775][T29776] smbdirect: ib_dev[syz0] removed [ 968.584243][ T43] net_ratelimit: 20 callbacks suppressed [ 968.584268][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 968.671222][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 968.701602][T18778] bond3: (slave gretap1): failed to get link speed/duplex [ 968.811679][T20658] bond3: (slave gretap1): failed to get link speed/duplex [ 968.922240][T20658] bond3: (slave gretap1): failed to get link speed/duplex [ 968.966513][T29803] netlink: 'syz.3.7785': attribute type 1 has an invalid length. [ 968.985055][T29803] netlink: 92 bytes leftover after parsing attributes in process `syz.3.7785'. [ 969.033451][ T1149] bond3: (slave gretap1): failed to get link speed/duplex [ 969.144772][ T8063] bond3: (slave gretap1): failed to get link speed/duplex [ 969.323695][ T1149] bond3: (slave gretap1): failed to get link speed/duplex [ 969.423220][T29812] netlink: 'syz.0.7789': attribute type 1 has an invalid length. [ 969.424193][T29812] netlink: 92 bytes leftover after parsing attributes in process `syz.0.7789'. [ 969.431122][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 969.600974][ T1149] bond3: (slave gretap1): failed to get link speed/duplex [ 970.136789][T29825] syzkaller0: entered promiscuous mode [ 970.136816][T29825] syzkaller0: entered allmulticast mode [ 970.456334][T29834] tipc: Resetting bearer [ 970.602097][T29838] netlink: 'syz.0.7798': attribute type 1 has an invalid length. [ 970.603309][T29838] netlink: 92 bytes leftover after parsing attributes in process `syz.0.7798'. [ 970.741406][T29841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7799'. [ 971.058564][T29846] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7800'. [ 971.340497][T29852] netlink: 'syz.4.7802': attribute type 1 has an invalid length. [ 971.370794][T29852] netlink: 92 bytes leftover after parsing attributes in process `syz.4.7802'. [ 971.550486][T29856] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7804'. [ 971.916755][T29865] netlink: 'syz.0.7807': attribute type 2 has an invalid length. [ 971.918141][T29865] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 971.918286][T29865] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 972.336505][T29869] netlink: 'syz.0.7809': attribute type 1 has an invalid length. [ 972.360256][T29869] __nla_validate_parse: 1 callbacks suppressed [ 972.360278][T29869] netlink: 92 bytes leftover after parsing attributes in process `syz.0.7809'. [ 972.719975][T29878] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7811'. [ 972.803737][T23689] udevd[23689]: setting mode of /dev/rfcomm24 to 020660 failed: No such file or directory [ 972.803883][T23689] udevd[23689]: setting owner of /dev/rfcomm24 to uid=0, gid=18 failed: No such file or directory [ 973.070760][T29898] netlink: 'syz.3.7815': attribute type 1 has an invalid length. [ 973.078334][T29898] netlink: 92 bytes leftover after parsing attributes in process `syz.3.7815'. [ 973.204977][T29903] netlink: 'syz.3.7818': attribute type 2 has an invalid length. [ 973.289534][T29905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7819'. [ 973.621601][ T43] net_ratelimit: 35 callbacks suppressed [ 973.621626][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 973.732353][T18778] bond3: (slave gretap1): failed to get link speed/duplex [ 973.841061][ T1149] bond3: (slave gretap1): failed to get link speed/duplex [ 973.971672][ T13] bond3: (slave gretap1): failed to get link speed/duplex [ 974.031602][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 974.084100][T18778] bond3: (slave gretap1): failed to get link speed/duplex [ 974.121392][T29929] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7826'. [ 974.123014][T29929] lo speed is unknown, defaulting to 1000 [ 974.123084][T29929] lo speed is unknown, defaulting to 1000 [ 974.125446][T29929] lo speed is unknown, defaulting to 1000 [ 974.137539][T29929] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 974.137579][T29929] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 974.137617][T29929] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 974.160219][T29929] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 974.227240][T29931] netlink: 'syz.3.7827': attribute type 1 has an invalid length. [ 974.228375][T29931] netlink: 92 bytes leftover after parsing attributes in process `syz.3.7827'. [ 974.231590][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 974.258702][T29929] lo speed is unknown, defaulting to 1000 [ 974.344310][T29929] lo speed is unknown, defaulting to 1000 [ 974.350400][T29934] netlink: 'syz.3.7828': attribute type 1 has an invalid length. [ 974.361400][ T8063] bond3: (slave gretap1): failed to get link speed/duplex [ 974.374623][T29929] lo speed is unknown, defaulting to 1000 [ 974.376580][T29934] netlink: 92 bytes leftover after parsing attributes in process `syz.3.7828'. [ 974.377434][T29929] lo speed is unknown, defaulting to 1000 [ 974.379578][T29929] lo speed is unknown, defaulting to 1000 [ 974.472106][T18783] bond3: (slave gretap1): failed to get link speed/duplex [ 974.583259][ T1149] bond3: (slave gretap1): failed to get link speed/duplex [ 974.683815][T29942] tipc: Enabling of bearer rejected, already enabled [ 974.714460][T29945] bond1: left promiscuous mode [ 974.714488][T29945] bond2: left promiscuous mode [ 974.715600][T29945] hsr1: left allmulticast mode [ 974.715617][T29945] gretap0: left allmulticast mode [ 974.716179][T29945] ip6gre1: left promiscuous mode [ 974.716194][T29945] ip6gre1: left allmulticast mode [ 974.717844][T29945] ip6gretap1: left allmulticast mode [ 974.718365][T29945] ip6erspan0: left allmulticast mode [ 974.719186][T29945] gretap2: left allmulticast mode [ 974.720305][T29945] bond7: left allmulticast mode [ 974.758102][T29945] macvlan3: left allmulticast mode [ 974.758402][T29945] bond0: left promiscuous mode [ 974.758417][T29945] bond0: left allmulticast mode [ 974.758603][T29945] tipc: Resetting bearer [ 974.764602][T29945] syzkaller0: left promiscuous mode [ 974.764626][T29945] syzkaller0: left allmulticast mode [ 974.778146][T29945] macvlan5: left promiscuous mode [ 974.778171][T29945] macvlan5: left allmulticast mode [ 974.778454][T29945] macvtap1: left allmulticast mode [ 974.789463][T29945] veth15: left allmulticast mode [ 974.803839][T29940] syzkaller0: entered promiscuous mode [ 974.803865][T29940] syzkaller0: entered allmulticast mode [ 975.584288][T29964] vlan3: entered promiscuous mode [ 975.584316][T29964] 0·: entered promiscuous mode [ 975.584563][T29964] vlan3: entered allmulticast mode [ 975.584579][T29964] 0·: entered allmulticast mode [ 975.584594][T29964] hsr_slave_0: entered allmulticast mode [ 975.594787][T29965] netlink: 'syz.3.7838': attribute type 1 has an invalid length. [ 975.600267][T29965] netlink: 92 bytes leftover after parsing attributes in process `syz.3.7838'. [ 975.759377][T29969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7847'. [ 975.864195][T29973] netlink: 'syz.2.7840': attribute type 1 has an invalid length. [ 975.867315][T29973] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7840'. [ 976.619505][T30000] syzkaller0: entered promiscuous mode [ 976.619531][T30000] syzkaller0: entered allmulticast mode [ 976.622308][T30000] tipc: Resetting bearer [ 976.683115][T30004] syzkaller0: entered promiscuous mode [ 976.683143][T30004] syzkaller0: entered allmulticast mode [ 976.915968][T30012] netlink: 'syz.4.7852': attribute type 1 has an invalid length. [ 977.450341][T30028] tipc: Resetting bearer [ 977.490580][T30028] __nla_validate_parse: 3 callbacks suppressed [ 977.490604][T30028] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7858'. [ 977.615346][T30032] syzkaller0: entered promiscuous mode [ 977.615373][T30032] syzkaller0: entered allmulticast mode [ 977.769731][T30042] netlink: 'syz.2.7863': attribute type 1 has an invalid length. [ 977.789103][T30042] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7863'. [ 977.898365][T30046] netlink: 92 bytes leftover after parsing attributes in process `syz.0.7865'. [ 977.972194][T30048] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7868'. [ 978.176757][T30056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7869'. [ 978.340625][T30067] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7873'. [ 978.671303][ T8063] net_ratelimit: 31 callbacks suppressed [ 978.671329][ T8063] bond3: (slave gretap1): failed to get link speed/duplex [ 978.782042][ T8063] bond3: (slave gretap1): failed to get link speed/duplex [ 978.824103][T30085] netlink: 'syz.2.7879': attribute type 1 has an invalid length. [ 978.825129][T30085] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7879'. [ 978.891045][T18778] bond3: (slave gretap1): failed to get link speed/duplex [ 978.916102][T30088] netlink: 'syz.2.7880': attribute type 1 has an invalid length. [ 978.917206][T30088] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7880'. [ 978.999215][T30090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7881'. [ 979.001249][T18778] bond3: (slave gretap1): failed to get link speed/duplex [ 979.111453][ T13] bond3: (slave gretap1): failed to get link speed/duplex [ 979.221018][ T8063] bond3: (slave gretap1): failed to get link speed/duplex [ 979.231493][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 979.352344][T20658] bond3: (slave gretap1): failed to get link speed/duplex [ 979.475122][ T8063] bond3: (slave gretap1): failed to get link speed/duplex [ 979.581254][ T13] bond3: (slave gretap1): failed to get link speed/duplex [ 981.123690][T30058] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 981.326966][T30101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7884'. [ 981.529513][T30110] netlink: 'syz.3.7888': attribute type 10 has an invalid length. [ 981.635080][T30119] netlink: 'syz.0.7890': attribute type 1 has an invalid length. [ 981.739877][T30121] netlink: 'syz.2.7891': attribute type 1 has an invalid length. [ 982.970304][T30161] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 982.970338][T30161] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 983.116560][T30165] __nla_validate_parse: 8 callbacks suppressed [ 983.116581][T30165] netlink: 92 bytes leftover after parsing attributes in process `syz.1.7904'. [ 983.236955][T30168] netlink: 92 bytes leftover after parsing attributes in process `syz.0.7905'. [ 983.370716][T30173] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7907'. [ 983.425274][T30175] bond0: (slave gretap0): Enslaving as an active interface with an up link [ 983.473871][T30178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7908'. [ 983.681330][T18778] net_ratelimit: 38 callbacks suppressed [ 983.681403][T18778] bond3: (slave gretap1): failed to get link speed/duplex [ 983.792327][ T8063] bond3: (slave gretap1): failed to get link speed/duplex [ 983.901073][T18778] bond3: (slave gretap1): failed to get link speed/duplex [ 984.012387][T18783] bond3: (slave gretap1): failed to get link speed/duplex [ 984.121691][T18778] bond3: (slave gretap1): failed to get link speed/duplex [ 984.231877][T20658] bond3: (slave gretap1): failed to get link speed/duplex [ 984.341260][T20658] bond3: (slave gretap1): failed to get link speed/duplex [ 984.431048][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 984.451616][T20658] bond3: (slave gretap1): failed to get link speed/duplex [ 984.561594][ T8063] bond3: (slave gretap1): failed to get link speed/duplex [ 985.107939][T30140] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 985.619846][T30197] lo speed is unknown, defaulting to 1000 [ 985.635941][T30197] lo speed is unknown, defaulting to 1000 [ 985.718001][T30207] netlink: 'syz.3.7917': attribute type 1 has an invalid length. [ 985.729093][T30207] netlink: 92 bytes leftover after parsing attributes in process `syz.3.7917'. [ 986.312384][T30236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7921'. [ 986.489540][T30240] netlink: 'syz.1.7921': attribute type 3 has an invalid length. [ 986.489564][T30240] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7921'. [ 988.438651][T30279] netlink: 92 bytes leftover after parsing attributes in process `syz.1.7929'. [ 988.545640][T30281] netlink: 92 bytes leftover after parsing attributes in process `syz.1.7930'. [ 988.742356][ T8063] net_ratelimit: 30 callbacks suppressed [ 988.742390][ T8063] bond3: (slave gretap1): failed to get link speed/duplex [ 988.862636][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 988.974094][T18778] bond3: (slave gretap1): failed to get link speed/duplex [ 989.081898][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 989.191783][ T8063] bond3: (slave gretap1): failed to get link speed/duplex [ 989.301500][T18783] bond3: (slave gretap1): failed to get link speed/duplex [ 989.412738][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 989.522522][T18783] bond3: (slave gretap1): failed to get link speed/duplex [ 989.631323][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 989.632287][T20658] bond3: (slave gretap1): failed to get link speed/duplex [ 989.895435][T30252] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 989.977112][T30284] netlink: 'syz.1.7931': attribute type 1 has an invalid length. [ 989.977173][T30284] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7931'. [ 989.998581][T30284] workqueue: Failed to create a rescuer kthread for wq "phy3-mac-cmds": -EINTR [ 990.312096][T30298] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 990.312145][T30298] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 990.312823][T30303] tipc: New replicast peer: 255.255.255.255 [ 990.314268][T30303] tipc: Enabled bearer , priority 10 [ 990.626144][T30314] netlink: 'syz.0.7940': attribute type 1 has an invalid length. [ 990.628761][T30314] netlink: 92 bytes leftover after parsing attributes in process `syz.0.7940'. [ 990.659096][T30316] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7941'. [ 991.031804][T30329] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7944'. [ 991.348737][T30341] netlink: 92 bytes leftover after parsing attributes in process `syz.3.7947'. [ 991.705149][T30345] lo speed is unknown, defaulting to 1000 [ 991.709034][T30345] lo speed is unknown, defaulting to 1000 [ 991.817353][T30362] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7951'. [ 991.904645][T30364] netlink: 92 bytes leftover after parsing attributes in process `syz.1.7952'. [ 991.983922][T30366] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7953'. [ 992.607754][T30374] syzkaller0: entered promiscuous mode [ 992.607785][T30374] syzkaller0: entered allmulticast mode [ 993.164263][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.738930][T30323] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 993.798717][ C1] net_ratelimit: 35 callbacks suppressed [ 993.798771][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 994.121926][T30389] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7957'. [ 994.831215][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 995.871360][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 996.911158][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 997.536544][T30392] 8021q: adding VLAN 0 to HW filter on device team0 [ 997.578929][T30392] tipc: Resetting bearer [ 997.580710][T30392] tipc: Resetting bearer [ 997.600117][T30392] veth1_macvtap: left promiscuous mode [ 997.607189][T30392] veth0_macvtap: left promiscuous mode [ 997.608339][T30392] veth0_macvtap: entered promiscuous mode [ 997.764327][T20658] bond3: (slave gretap1): failed to get link speed/duplex [ 997.871927][ T8063] bond3: (slave gretap1): failed to get link speed/duplex [ 997.890005][T30418] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7966'. [ 997.951242][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 997.982582][ T8063] bond3: (slave gretap1): failed to get link speed/duplex [ 997.986227][T30420] netlink: 92 bytes leftover after parsing attributes in process `syz.3.7964'. [ 998.082927][T30428] syzkaller0: entered promiscuous mode [ 998.082954][T30428] syzkaller0: entered allmulticast mode [ 998.091945][T18783] bond3: (slave gretap1): failed to get link speed/duplex [ 998.099863][T30426] netlink: 'syz.0.7965': attribute type 1 has an invalid length. [ 998.106126][T30426] netlink: 92 bytes leftover after parsing attributes in process `syz.0.7965'. [ 998.120634][T30428] tipc: Enabled bearer , priority 0 [ 998.200626][T30428] tipc: Resetting bearer [ 998.223686][ T8063] bond3: (slave gretap1): failed to get link speed/duplex [ 998.234091][T30425] tipc: Resetting bearer [ 998.380320][T30425] tipc: Disabling bearer [ 998.676489][T30453] tipc: Enabled bearer , priority 10 [ 998.776004][T30455] netlink: 1347 bytes leftover after parsing attributes in process `syz.1.7973'. [ 998.868960][T30462] netlink: 'syz.1.7973': attribute type 11 has an invalid length. [ 998.868990][T30462] netlink: 140 bytes leftover after parsing attributes in process `syz.1.7973'. [ 998.892718][ T8063] net_ratelimit: 4 callbacks suppressed [ 998.892743][ T8063] bond3: (slave gretap1): failed to get link speed/duplex [ 998.991138][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 999.012775][ T8063] bond3: (slave gretap1): failed to get link speed/duplex [ 999.131399][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 999.245500][ T50] bond3: (slave gretap1): failed to get link speed/duplex [ 999.351676][T18783] bond3: (slave gretap1): failed to get link speed/duplex [ 999.376970][T30477] bond0: (slave gretap0): Error: Device is in use and cannot be enslaved [ 999.462667][ T1121] bond3: (slave gretap1): failed to get link speed/duplex [ 999.596309][ T8063] bond3: (slave gretap1): failed to get link speed/duplex [ 1000.031057][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1000.146326][T30488] bridge0: port 1(bond0) entered disabled state [ 1000.148994][T30488] tipc: Resetting bearer [ 1000.663644][T30512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7982'. [ 1000.663682][T30512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7982'. [ 1000.663698][T30512] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7982'. [ 1000.883307][T30488] bridge0: port 2(vlan2) entered disabled state [ 1001.067098][ T9] lo speed is unknown, defaulting to 1000 [ 1001.067130][ T9] s: Port: 1 Link DOWN [ 1001.071120][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1001.161211][ T1121] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1001.161253][ T1121] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.161279][ T1121] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1001.162400][ T13] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1001.162429][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.162455][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1001.162493][ T13] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1001.162518][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.162543][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1001.162580][ T13] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1001.162605][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.162630][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1001.202881][T30524] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7983'. [ 1001.526169][T30539] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7987'. [ 1001.947210][T30554] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7990'. [ 1002.114570][T30558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7992'. [ 1002.326736][T30562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7993'. [ 1002.326776][T30562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7993'. [ 1002.326792][T30562] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7993'. [ 1004.191060][ C1] net_ratelimit: 2 callbacks suppressed [ 1004.191086][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1005.231143][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1006.028100][T30653] __nla_validate_parse: 7 callbacks suppressed [ 1006.028127][T30653] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8018'. [ 1006.028154][T30653] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8018'. [ 1006.271420][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1006.495216][T30667] netlink: 'syz.4.8025': attribute type 1 has an invalid length. [ 1006.495242][T30667] netlink: 232 bytes leftover after parsing attributes in process `syz.4.8025'. [ 1006.495258][T30667] netlink: 'syz.4.8025': attribute type 1 has an invalid length. [ 1006.532221][T30667] netlink: 180 bytes leftover after parsing attributes in process `syz.4.8025'. [ 1006.537400][T30667] Bluetooth: hci0: unsupported parameter 5135 [ 1006.537425][T30667] Bluetooth: hci0: invalid length 1, exp 2 for type 24 [ 1006.788571][T30676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8026'. [ 1007.311343][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1007.479662][T30679] veth0_vlan: left promiscuous mode [ 1007.563854][T30679] veth0_vlan: entered promiscuous mode [ 1007.576024][T30679] veth1_vlan: entered promiscuous mode [ 1007.585359][T30686] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8029'. [ 1007.689336][T30679] veth1_macvtap: left promiscuous mode [ 1007.713313][T30679] veth0_macvtap: left promiscuous mode [ 1007.714206][T30679] veth0_macvtap: entered promiscuous mode [ 1007.724160][T30679] veth1_macvtap: entered promiscuous mode [ 1007.730639][T30679] geneve0: left promiscuous mode [ 1007.775737][T30679] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 1008.037477][ T7405] geneve0: entered promiscuous mode [ 1008.140071][T20658] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.149606][ T1168] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.150130][ T1168] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.150171][ T1168] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.351080][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1008.385525][T30692] netlink: 'syz.4.8030': attribute type 2 has an invalid length. [ 1009.150781][T30702] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8033'. [ 1009.151034][T30702] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8033'. [ 1009.280006][T30708] tipc: Enabling of bearer rejected, already enabled [ 1009.340578][T30706] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8035'. [ 1009.382320][T30588] Set syz1 is full, maxelem 65536 reached [ 1009.391312][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1009.923364][T30728] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8043'. [ 1010.104080][T30730] netlink: 'syz.0.8044': attribute type 3 has an invalid length. [ 1010.431060][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1010.625469][T30747] siw: device registration error -23 [ 1011.471172][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1011.479493][T30768] __nla_validate_parse: 6 callbacks suppressed [ 1011.479544][T30768] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8056'. [ 1011.864169][T30779] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8059'. [ 1011.919364][T30774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8058'. [ 1012.079234][T30788] syzkaller0: left promiscuous mode [ 1012.079261][T30788] syzkaller0: left allmulticast mode [ 1012.079598][T30788] tipc: Resetting bearer [ 1012.087259][T30788] tipc: Enabling of bearer rejected, already enabled [ 1012.266460][T30795] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8066'. [ 1012.511113][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1012.622012][T30804] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8069'. [ 1012.880481][T30810] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8071'. [ 1013.042275][T30818] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8074'. [ 1013.048943][T30816] syzkaller0: entered promiscuous mode [ 1013.048969][T30816] syzkaller0: entered allmulticast mode [ 1013.127858][T30819] netlink: Invalid conntrack helper [ 1013.127882][T30819] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1013.400678][T30835] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8077'. [ 1013.551118][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1013.588321][T30838] netlink: 'syz.1.8078': attribute type 1 has an invalid length. [ 1013.655401][T20658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.658087][T20657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.807265][T30838] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1014.061573][T30849] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8081'. [ 1014.220265][T30850] syzkaller0: entered promiscuous mode [ 1014.220292][T30850] syzkaller0: entered allmulticast mode [ 1014.220606][T30850] tipc: Resetting bearer [ 1014.239721][T30852] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8083'. [ 1014.374827][T30855] netlink: 'syz.2.8084': attribute type 3 has an invalid length. [ 1014.591353][ C1] net_ratelimit: 3 callbacks suppressed [ 1014.591401][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1015.631120][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1015.832270][T30913] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 1015.832303][T30913] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 1016.032591][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.033096][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.693689][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1016.776579][T30933] __nla_validate_parse: 12 callbacks suppressed [ 1016.776606][T30933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8110'. [ 1017.101600][T30944] netlink: 92 bytes leftover after parsing attributes in process `syz.0.8114'. [ 1017.280248][T30946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8113'. [ 1017.521202][T30952] xt_hashlimit: size too large, truncated to 1048576 [ 1017.711081][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1018.138489][T30962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1018.167027][T30962] 8021q: adding VLAN 0 to HW filter on device team0 [ 1018.170449][T30962] tipc: Resetting bearer [ 1018.372055][T30962] veth1_macvtap: left promiscuous mode [ 1018.380385][T30962] veth0_macvtap: left promiscuous mode [ 1018.386365][T30962] veth0_macvtap: entered promiscuous mode [ 1018.403224][T30962] veth1_macvtap: entered promiscuous mode [ 1018.425668][T30962] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1018.434687][T30962] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1018.444806][T30969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8122'. [ 1018.452062][T30962] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1018.475075][T30962] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1018.495238][T30962] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1018.540747][T30962] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1018.605987][T30962] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1018.620240][T30962] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1018.626889][T30962] bridge0: port 1(bond0) entered blocking state [ 1018.627048][T30962] bridge0: port 1(bond0) entered forwarding state [ 1018.660689][T30962] hsr1: Slave A (netdevsim0) is not up; please bring it up to get a fully working HSR network [ 1018.688455][T30962] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1018.711942][T18782] bond3: (slave gretap1): link status up again after 0 ms [ 1018.731425][T18783] bond3: (slave gretap1): link status up again after 0 ms [ 1018.751446][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1018.755197][T23510] bond3: (slave gretap1): link status up again after 0 ms [ 1018.817173][T30962] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1018.841786][T30975] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8124'. [ 1018.916711][T30962] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1018.947654][T30962] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1018.968680][T30962] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1018.989038][T30962] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1018.996797][T30962] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1019.016623][T30962] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1019.038088][T30962] syzkaller0: left promiscuous mode [ 1019.089710][T30962] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1019.110900][T30962] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1019.114404][T30962] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1019.120505][T30962] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1019.130161][T30962] bridge9: left promiscuous mode [ 1019.133501][T30962] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1019.158184][T30962] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1019.173902][T30962] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1019.205554][T30962] mac80211_hwsim hwsim25 wlan0: left promiscuous mode [ 1019.208777][T30962] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1019.244338][T30962] mac80211_hwsim hwsim25 wlan0: entered promiscuous mode [ 1019.280377][T30962] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1019.308134][T30962] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1019.327586][ T7405] lo speed is unknown, defaulting to 1000 [ 1019.327616][ T7405] s: Port: 1 Link ACTIVE [ 1019.332201][ T30] bridge9: entered promiscuous mode [ 1019.456547][T20658] bridge0: port 2(vlan2) entered blocking state [ 1019.456680][T20658] bridge0: port 2(vlan2) entered forwarding state [ 1019.517144][T20658] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1019.517185][T20658] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.517212][T20658] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1019.517255][T20658] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1019.517281][T20658] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.517307][T20658] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1019.517359][T20658] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1019.517470][T20658] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.517535][T20658] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1019.517574][T20658] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1019.517601][T20658] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.517625][T20658] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1019.518035][T30979] netlink: 92 bytes leftover after parsing attributes in process `syz.0.8125'. [ 1019.701101][T20657] net_ratelimit: 40 callbacks suppressed [ 1019.701127][T20657] bond3: (slave gretap1): failed to get link speed/duplex [ 1019.791119][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1019.820529][ T59] bond3: (slave gretap1): failed to get link speed/duplex [ 1019.921928][T23510] bond3: (slave gretap1): failed to get link speed/duplex [ 1019.987919][T30989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8127'. [ 1020.031332][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 1020.141039][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 1020.251211][T23510] bond3: (slave gretap1): failed to get link speed/duplex [ 1020.334454][T31002] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8129'. [ 1020.407831][ T50] bond3: (slave gretap1): failed to get link speed/duplex [ 1020.522484][T23510] bond3: (slave gretap1): failed to get link speed/duplex [ 1020.632062][ T50] bond3: (slave gretap1): failed to get link speed/duplex [ 1021.060396][T31015] netlink: 'syz.4.8132': attribute type 4 has an invalid length. [ 1021.842415][T31028] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8136'. [ 1022.567750][T31041] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8141'. [ 1022.959635][T31056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8147'. [ 1023.078587][T31058] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8148'. [ 1023.478886][T31077] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8155'. [ 1023.639351][T31083] netlink: 'syz.4.8158': attribute type 12 has an invalid length. [ 1023.661913][T31083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8158'. [ 1023.681186][T31083] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8158'. [ 1023.741107][T31087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8160'. [ 1024.078390][T31095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8161'. [ 1024.246804][T31101] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8163'. [ 1024.812236][T31117] syzkaller0: entered promiscuous mode [ 1024.812263][T31117] syzkaller0: entered allmulticast mode [ 1024.925090][ T50] net_ratelimit: 47 callbacks suppressed [ 1024.925114][ T50] bond3: (slave gretap1): failed to get link speed/duplex [ 1024.991132][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1025.034071][T20658] bond3: (slave gretap1): failed to get link speed/duplex [ 1025.155420][T20658] bond3: (slave gretap1): failed to get link speed/duplex [ 1025.156397][T20658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.162550][T23510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.167148][T20658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.261435][ T59] bond3: (slave gretap1): failed to get link speed/duplex [ 1025.371431][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 1025.482415][T23510] bond3: (slave gretap1): failed to get link speed/duplex [ 1026.836854][T31178] netlink: 'syz.0.8186': attribute type 1 has an invalid length. [ 1027.121354][T31184] __nla_validate_parse: 11 callbacks suppressed [ 1027.121381][T31184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8187'. [ 1027.185715][T31187] netlink: 92 bytes leftover after parsing attributes in process `syz.1.8189'. [ 1027.232061][T31188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8190'. [ 1027.457115][T31192] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8191'. [ 1027.539893][T31198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8195'. [ 1028.038240][T31219] netlink: 'syz.4.8200': attribute type 10 has an invalid length. [ 1028.038269][T31219] netlink: 55 bytes leftover after parsing attributes in process `syz.4.8200'. [ 1028.067949][T31217] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8199'. [ 1028.201726][T31221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8201'. [ 1028.275623][T31223] netlink: 92 bytes leftover after parsing attributes in process `syz.2.8203'. [ 1028.440434][T31228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8202'. [ 1029.696520][T31265] netlink: 'syz.2.8217': attribute type 10 has an invalid length. [ 1030.206526][ C1] net_ratelimit: 40 callbacks suppressed [ 1030.206553][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1030.272522][T20657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.381001][T20658] bond3: (slave gretap1): failed to get link speed/duplex [ 1030.516699][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 1030.621726][T18782] bond3: (slave gretap1): failed to get link speed/duplex [ 1030.760360][T18782] bond3: (slave gretap1): failed to get link speed/duplex [ 1030.871044][T20658] bond3: (slave gretap1): failed to get link speed/duplex [ 1030.912439][T20658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.912927][T20658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.913475][T20658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.413414][T31323] netlink: 'syz.3.8234': attribute type 1 has an invalid length. [ 1032.416192][T31323] __nla_validate_parse: 13 callbacks suppressed [ 1032.416211][T31323] netlink: 92 bytes leftover after parsing attributes in process `syz.3.8234'. [ 1032.582096][T31329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8236'. [ 1032.664244][T31335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8237'. [ 1032.836552][T31337] §: renamed from sit0 (while UP) [ 1032.857397][T31339] netlink: 92 bytes leftover after parsing attributes in process `syz.2.8238'. [ 1033.677099][T31356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8243'. [ 1033.826459][T31359] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8245'. [ 1033.887652][T31361] netlink: 92 bytes leftover after parsing attributes in process `syz.4.8246'. [ 1034.160304][T31363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8247'. [ 1034.225727][T31366] netlink: 92 bytes leftover after parsing attributes in process `syz.1.8249'. [ 1034.278095][T31370] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8250'. [ 1035.079116][ T4932] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1035.222720][ T50] net_ratelimit: 38 callbacks suppressed [ 1035.222747][ T50] bond3: (slave gretap1): failed to get link speed/duplex [ 1035.331517][T20658] bond3: (slave gretap1): failed to get link speed/duplex [ 1035.375094][T31261] Set syz1 is full, maxelem 65536 reached [ 1035.380469][T31391] syzkaller0: entered promiscuous mode [ 1035.393020][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1035.406006][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.524147][T20657] bond3: (slave gretap1): failed to get link speed/duplex [ 1035.640575][ T59] bond3: (slave gretap1): failed to get link speed/duplex [ 1035.740964][T18782] bond3: (slave gretap1): failed to get link speed/duplex [ 1035.861401][T20658] bond3: (slave gretap1): failed to get link speed/duplex [ 1035.971470][T20658] bond3: (slave gretap1): failed to get link speed/duplex [ 1036.808855][T31439] netlink: 'syz.0.8274': attribute type 10 has an invalid length. [ 1036.878478][T31439] team0 (unregistering): Port device team_slave_1 removed [ 1036.895642][T31439] team0 (unregistering): Port device bond10 removed [ 1036.919861][T20658] tipc: Resetting bearer [ 1037.432808][T31465] __nla_validate_parse: 8 callbacks suppressed [ 1037.432834][T31465] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8280'. [ 1037.768941][T31476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8283'. [ 1037.913721][T31478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8284'. [ 1038.001597][T31484] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8286'. [ 1038.134411][T31490] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8289'. [ 1038.300559][T31488] netlink: 'syz.1.8288': attribute type 2 has an invalid length. [ 1038.300588][T31488] netlink: 'syz.1.8288': attribute type 2 has an invalid length. [ 1038.456160][T31501] bond14: option mode: unable to set because the bond device has slaves [ 1038.457787][T31501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8292'. [ 1038.457804][T31501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8292'. [ 1038.464295][T31501] bond14 (unregistering): (slave macvlan4): Releasing active interface [ 1038.485811][T31501] bond14 (unregistering): Released all slaves [ 1039.020242][T31513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8296'. [ 1039.204516][T31516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8298'. [ 1039.225950][T31519] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8300'. [ 1040.092974][T31545] netlink: 'syz.3.8305': attribute type 1 has an invalid length. [ 1040.093005][T31545] netlink: 'syz.3.8305': attribute type 1 has an invalid length. [ 1040.129764][T31545] Bluetooth: hci0: unsupported parameter 5135 [ 1040.129794][T31545] Bluetooth: hci0: invalid length 1, exp 2 for type 24 [ 1040.324598][T18782] net_ratelimit: 48 callbacks suppressed [ 1040.324651][T18782] bond3: (slave gretap1): failed to get link speed/duplex [ 1040.435051][T20657] bond3: (slave gretap1): failed to get link speed/duplex [ 1040.541834][T20657] bond3: (slave gretap1): failed to get link speed/duplex [ 1040.591269][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1040.652099][ T59] bond3: (slave gretap1): failed to get link speed/duplex [ 1040.716551][T31565] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1040.730867][T31565] syzkaller0: mtu less than device minimum [ 1040.763247][T20658] bond3: (slave gretap1): failed to get link speed/duplex [ 1040.884761][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 1040.992788][T20658] bond3: (slave gretap1): failed to get link speed/duplex [ 1041.111600][T20657] bond3: (slave gretap1): failed to get link speed/duplex [ 1041.382736][T31582] netlink: 'syz.2.8319': attribute type 1 has an invalid length. [ 1042.132504][T31603] tipc: Enabling of bearer rejected, already enabled [ 1042.591606][T31620] __nla_validate_parse: 12 callbacks suppressed [ 1042.591630][T31620] netlink: 92 bytes leftover after parsing attributes in process `syz.3.8331'. [ 1042.682853][T31628] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8334'. [ 1042.779896][T31634] tipc: Enabled bearer , priority 10 [ 1042.798408][T31632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8335'. [ 1042.901707][T31635] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1042.940663][T31638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8337'. [ 1043.449585][T31652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8342'. [ 1043.519599][T31655] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8343'. [ 1043.646412][T31659] netlink: 92 bytes leftover after parsing attributes in process `syz.2.8344'. [ 1043.758995][T31662] netlink: 'syz.3.8347': attribute type 33 has an invalid length. [ 1043.759022][T31662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8347'. [ 1043.889058][T31667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8348'. [ 1043.964543][T31670] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8346'. [ 1044.796539][T31660] veth1_vlan: left promiscuous mode [ 1044.935499][T31660] tipc: Resetting bearer [ 1044.968985][T31662] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1045.026222][T23510] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.029658][T20657] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.029730][T20657] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.029769][T20657] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.191146][T31698] syzkaller1: entered promiscuous mode [ 1045.191174][T31698] syzkaller1: entered allmulticast mode [ 1045.341378][T23510] net_ratelimit: 36 callbacks suppressed [ 1045.341403][T23510] bond3: (slave gretap1): failed to get link speed/duplex [ 1045.541060][T23510] bond3: (slave gretap1): failed to get link speed/duplex [ 1045.577924][T31713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.578127][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.651095][T23510] bond3: (slave gretap1): failed to get link speed/duplex [ 1045.761217][ T50] bond3: (slave gretap1): failed to get link speed/duplex [ 1045.791162][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1045.875257][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 1045.959315][T31733] tc_dump_action: action bad kind [ 1045.983905][T23510] bond3: (slave gretap1): failed to get link speed/duplex [ 1046.093098][T23510] bond3: (slave gretap1): failed to get link speed/duplex [ 1047.545906][T31775] syzkaller0: entered promiscuous mode [ 1047.545934][T31775] syzkaller0: entered allmulticast mode [ 1047.845886][T31785] __nla_validate_parse: 6 callbacks suppressed [ 1047.845914][T31785] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8370'. [ 1048.009822][T31792] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8372'. [ 1048.400479][T31807] tc_dump_action: action bad kind [ 1048.787293][T31815] xt_hashlimit: size too large, truncated to 1048576 [ 1048.877110][T31822] tc_dump_action: action bad kind [ 1048.982440][T31824] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8378'. [ 1049.375012][T31834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8379'. [ 1049.393285][T31834] netlink: 'syz.2.8379': attribute type 83 has an invalid length. [ 1049.468989][T31837] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8380'. [ 1049.997543][T31850] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8384'. [ 1050.101783][T31855] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8385'. [ 1050.353211][ T43] net_ratelimit: 47 callbacks suppressed [ 1050.353247][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 1050.471310][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 1050.581518][T20657] bond3: (slave gretap1): failed to get link speed/duplex [ 1050.690996][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 1050.802320][ T59] bond3: (slave gretap1): failed to get link speed/duplex [ 1050.991287][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1051.209247][T31882] netlink: 92 bytes leftover after parsing attributes in process `syz.2.8390'. [ 1051.220936][ T59] bond3: (slave gretap1): failed to get link speed/duplex [ 1051.241394][T31881] netlink: 92 bytes leftover after parsing attributes in process `syz.0.8392'. [ 1051.341119][T18782] bond3: (slave gretap1): failed to get link speed/duplex [ 1051.451001][T23510] bond3: (slave gretap1): failed to get link speed/duplex [ 1051.510712][T31895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8396'. [ 1051.539618][T31899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1051.763803][T31908] xt_hashlimit: size too large, truncated to 1048576 [ 1052.714452][T31941] vlan2: left allmulticast mode [ 1052.714479][T31941] geneve0: left allmulticast mode [ 1052.714498][T31941] vlan2: left promiscuous mode [ 1052.714512][T31941] geneve0: left promiscuous mode [ 1052.714969][T31941] bridge0: port 2(vlan2) entered disabled state [ 1052.724921][T31941] .`: left promiscuous mode [ 1052.731403][T31941] .`: left allmulticast mode [ 1052.731502][T31941] bridge0: port 1(.`) entered disabled state [ 1052.768898][T31944] netlink: 'syz.1.8409': attribute type 83 has an invalid length. [ 1052.993566][T31951] __nla_validate_parse: 5 callbacks suppressed [ 1052.993594][T31951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8412'. [ 1053.117615][T31957] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8414'. [ 1053.304215][T31966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8416'. [ 1053.966875][T31989] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8423'. [ 1054.091483][T31994] syzkaller0: entered promiscuous mode [ 1054.091509][T31994] syzkaller0: entered allmulticast mode [ 1054.098891][T31997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8426'. [ 1054.188204][T32000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8424'. [ 1054.250328][T31992] netlink: 'syz.4.8424': attribute type 83 has an invalid length. [ 1054.363319][T32007] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8429'. [ 1054.472469][T32013] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8432'. [ 1054.518544][T32015] netlink: 92 bytes leftover after parsing attributes in process `syz.3.8431'. [ 1054.603328][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.725630][T32030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8435'. [ 1055.441643][T20657] net_ratelimit: 44 callbacks suppressed [ 1055.441673][T20657] bond3: (slave gretap1): failed to get link speed/duplex [ 1055.570909][T18782] bond3: (slave gretap1): failed to get link speed/duplex [ 1055.685987][T18779] bond3: (slave gretap1): failed to get link speed/duplex [ 1055.822268][T23510] bond3: (slave gretap1): failed to get link speed/duplex [ 1055.871628][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.872195][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.937947][T20657] bond3: (slave gretap1): failed to get link speed/duplex [ 1056.041995][ T50] bond3: (slave gretap1): failed to get link speed/duplex [ 1056.057049][T32074] netlink: 'syz.3.8447': attribute type 2 has an invalid length. [ 1056.152802][ T59] bond3: (slave gretap1): failed to get link speed/duplex [ 1056.191244][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1056.897215][T32100] netlink: 'syz.2.8455': attribute type 12 has an invalid length. [ 1057.527586][T32118] syzkaller0: entered promiscuous mode [ 1057.527613][T32118] syzkaller0: entered allmulticast mode [ 1058.220402][T32137] tc_dump_action: action bad kind [ 1058.715802][T32151] netlink: 'syz.2.8470': attribute type 1 has an invalid length. [ 1058.748597][T32151] bond30: entered promiscuous mode [ 1058.749297][T32151] 8021q: adding VLAN 0 to HW filter on device bond30 [ 1058.794528][T32151] 8021q: adding VLAN 0 to HW filter on device bond30 [ 1058.797390][T32151] bond30: (slave gre6): The slave device specified does not support setting the MAC address [ 1058.797417][T32151] bond30: (slave gre6): Setting fail_over_mac to active for active-backup mode [ 1058.821060][T32153] __nla_validate_parse: 12 callbacks suppressed [ 1058.821083][T32153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8470'. [ 1058.827449][T32151] bond30: (slave gre6): making interface the new active one [ 1058.827474][T32151] gre6: entered promiscuous mode [ 1058.881958][T32151] bond30: (slave gre6): Enslaving as an active interface with an up link [ 1058.963276][T32153] bond30 (unregistering): (slave gre6): Releasing backup interface [ 1058.963311][T32153] gre6: left promiscuous mode [ 1058.988658][T32153] bond30 (unregistering): Released all slaves [ 1059.044919][T32156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8471'. [ 1059.284629][T32159] netlink: 92 bytes leftover after parsing attributes in process `syz.1.8473'. [ 1059.308576][T32160] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8472'. [ 1059.543105][T32170] tipc: Enabling of bearer rejected, already enabled [ 1060.221070][T32184] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8478'. [ 1060.523494][T23510] net_ratelimit: 41 callbacks suppressed [ 1060.523522][T23510] bond3: (slave gretap1): failed to get link speed/duplex [ 1060.632374][T18782] bond3: (slave gretap1): failed to get link speed/duplex [ 1060.741016][T18782] bond3: (slave gretap1): failed to get link speed/duplex [ 1060.838683][T32192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8481'. [ 1060.838714][T32192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8481'. [ 1060.861593][T23510] bond3: (slave gretap1): failed to get link speed/duplex [ 1060.984313][T23510] bond3: (slave gretap1): failed to get link speed/duplex [ 1061.092196][ T50] bond3: (slave gretap1): failed to get link speed/duplex [ 1061.201934][T23510] bond3: (slave gretap1): failed to get link speed/duplex [ 1061.316251][ T59] bond3: (slave gretap1): failed to get link speed/duplex [ 1061.391222][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1061.422471][T23510] bond3: (slave gretap1): failed to get link speed/duplex [ 1061.494972][T32209] netlink: 'syz.1.8486': attribute type 2 has an invalid length. [ 1061.508302][T32209] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8486'. [ 1061.598656][T32214] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8488'. [ 1061.610508][T32215] tipc: Enabling of bearer rejected, already enabled [ 1061.737168][T32220] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8489'. [ 1063.130439][T32270] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 1063.130494][T32270] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 1063.409431][T32276] netlink: 'syz.2.8513': attribute type 4 has an invalid length. [ 1063.425125][T32280] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 1063.425204][T32280] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 1063.938560][T32300] __nla_validate_parse: 15 callbacks suppressed [ 1063.938583][T32300] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8522'. [ 1064.066638][T32307] netlink: 92 bytes leftover after parsing attributes in process `syz.3.8525'. [ 1064.136220][T32310] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8526'. [ 1064.428959][T32316] 8021q: adding VLAN 0 to HW filter on device .` [ 1064.438686][T32316] 8021q: adding VLAN 0 to HW filter on device team0 [ 1064.451339][T32316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1064.484917][T32322] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8530'. [ 1064.502945][T32316] tipc: Resetting bearer [ 1064.540053][T32316] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1064.584432][T32316] veth1_vlan: left promiscuous mode [ 1064.586375][T32316] veth0_vlan: left promiscuous mode [ 1064.588635][T32316] veth0_vlan: entered promiscuous mode [ 1064.608690][T32316] veth1_vlan: entered promiscuous mode [ 1064.627744][T32316] veth1_macvtap: left promiscuous mode [ 1064.630563][T32316] veth0_macvtap: left promiscuous mode [ 1064.645947][T32316] veth0_macvtap: entered promiscuous mode [ 1064.648072][T32316] veth1_macvtap: entered promiscuous mode [ 1064.675223][T32316] gretap0: entered promiscuous mode [ 1064.701090][T32316] 8021q: adding VLAN 0 to HW filter on device team1 [ 1064.732695][T32316] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1064.734228][T32316] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1064.735865][T32316] veth0_to_team: entered promiscuous mode [ 1064.798318][T32316] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1064.814318][T32316] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1064.844857][T32316] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1064.883542][T32316] batman_adv: batadv0: Interface activated: gretap2 [ 1064.887764][T32316] batman_adv: batadv0: Interface activated: gretap3 [ 1064.890727][T32316] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1065.165290][T32316] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1065.428246][T32316] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1065.451323][T32316] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1065.545779][ T43] net_ratelimit: 67 callbacks suppressed [ 1065.545803][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.547978][T18782] bond4: (slave batadv0): link status up again after 0 ms [ 1065.551321][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1065.558371][T32316] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1065.568741][ T59] bond4: (slave batadv0): link status up again after 0 ms [ 1065.591703][T18783] bond4: (slave batadv0): link status up again after 0 ms [ 1065.601179][ T43] bond4: (slave batadv0): link status up again after 0 ms [ 1065.623102][T18782] bond4: (slave batadv0): link status up again after 0 ms [ 1065.623580][T32316] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1065.630695][T32316] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1065.651182][ T59] bond4: (slave batadv0): link status up again after 0 ms [ 1065.666717][T20657] bond4: (slave batadv0): link status up again after 0 ms [ 1065.683761][T18779] bond4: (slave batadv0): link status up again after 0 ms [ 1065.700423][T32316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1065.789345][T32316] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1065.812153][T32316] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1065.832898][T32316] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1065.862100][T32316] batman_adv: batadv0: Interface activated: macvtap2 [ 1065.895759][T32316] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1065.911625][T32316] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1065.916676][T32316] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1065.919920][T32316] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1065.924931][T32316] batman_adv: batadv0: Interface activated: ipvlan2 [ 1065.964840][T32316] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1065.966519][T32316] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1065.973226][T32316] vlan3: left promiscuous mode [ 1065.973248][T32316] 0·: left promiscuous mode [ 1066.018395][T32316] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1066.019057][T32316] geneve0: entered promiscuous mode [ 1066.019687][T32316] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 1066.051816][ T7405] lo speed is unknown, defaulting to 1000 [ 1066.051845][ T7405] syz2: Port: 1 Link ACTIVE [ 1066.209258][T32331] tc_dump_action: action bad kind [ 1066.211705][T18783] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1066.211738][T18783] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.211762][T18783] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1066.236929][T18783] bond15: (slave veth25): link status definitely up, 10000 Mbps full duplex [ 1066.250162][T18783] bond15: active interface up! [ 1066.257139][T19617] bridge3: entered promiscuous mode [ 1066.354715][T32351] netlink: 92 bytes leftover after parsing attributes in process `syz.2.8536'. [ 1066.383324][ T50] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1066.383365][ T50] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.383393][ T50] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1066.494714][ T50] bond11: (slave veth21): link status definitely up, 10000 Mbps full duplex [ 1066.544384][ T50] bond11: (slave veth21): making interface the new active one [ 1066.560197][ T50] bond11: active interface up! [ 1066.565481][T18782] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1066.565532][T18782] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.565559][T18782] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1066.643500][T18782] bond13: (slave veth23): link status definitely up, 10000 Mbps full duplex [ 1066.644382][T18782] bond13: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 1066.655522][T18782] bond13: (slave veth23): making interface the new active one [ 1066.669668][T18782] bond13: active interface up! [ 1066.741170][T18782] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1066.741211][T18782] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.741237][T18782] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1067.115653][T32370] syzkaller0: left promiscuous mode [ 1068.453437][T32404] netlink: 92 bytes leftover after parsing attributes in process `syz.2.8549'. [ 1068.474480][T32403] syzkaller0: entered promiscuous mode [ 1068.474505][T32403] syzkaller0: entered allmulticast mode [ 1068.615781][T32409] tc_dump_action: action bad kind [ 1069.551526][T32432] netlink: 'syz.4.8559': attribute type 1 has an invalid length. [ 1069.626068][T32432] bond14: entered promiscuous mode [ 1069.626623][T32432] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1069.627365][T32429] lo speed is unknown, defaulting to 1000 [ 1069.627447][T32429] lo speed is unknown, defaulting to 1000 [ 1069.628468][T32429] lo speed is unknown, defaulting to 1000 [ 1069.667883][T32429] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1069.667925][T32429] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1069.667965][T32429] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1069.728036][T32429] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 1069.756905][T32432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8559'. [ 1069.784405][T32435] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1069.789527][T32435] bond14: (slave gre6): The slave device specified does not support setting the MAC address [ 1069.789555][T32435] bond14: (slave gre6): Setting fail_over_mac to active for active-backup mode [ 1069.823399][T32435] bond14: (slave gre6): making interface the new active one [ 1069.823428][T32435] gre6: entered promiscuous mode [ 1069.867969][T32435] bond14: (slave gre6): Enslaving as an active interface with an up link [ 1069.933535][T32432] bond14 (unregistering): (slave gre6): Releasing backup interface [ 1069.933568][T32432] gre6: left promiscuous mode [ 1069.964972][T32432] bond14 (unregistering): Released all slaves [ 1070.045202][T32429] lo speed is unknown, defaulting to 1000 [ 1070.328611][T32429] lo speed is unknown, defaulting to 1000 [ 1070.328660][T32441] netlink: 'syz.3.8560': attribute type 4 has an invalid length. [ 1070.430440][T32447] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:65534 [ 1070.476901][T32429] lo speed is unknown, defaulting to 1000 [ 1070.561627][ T59] net_ratelimit: 162 callbacks suppressed [ 1070.561656][ T59] bond4: (slave batadv0): link status up again after 0 ms [ 1070.591671][T23510] bond4: (slave batadv0): link status up again after 0 ms [ 1070.601835][T23510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.605365][T18782] bond15: (slave ip6gretap1): link status up again after 0 ms [ 1070.605411][T18782] bond4: (slave batadv0): link status up again after 0 ms [ 1070.631055][T20657] bond4: (slave batadv0): link status up again after 0 ms [ 1070.631095][T20657] bond15: (slave ip6gretap1): link status up again after 0 ms [ 1070.651786][T18783] bond15: (slave ip6gretap1): link status up again after 0 ms [ 1070.652661][T18782] bond4: (slave batadv0): link status up again after 0 ms [ 1070.676631][T20657] bond3: (slave gretap1): failed to get link speed/duplex [ 1070.685422][T32429] lo speed is unknown, defaulting to 1000 [ 1070.693924][T32429] lo speed is unknown, defaulting to 1000 [ 1070.732212][T32449] netlink: 92 bytes leftover after parsing attributes in process `syz.4.8562'. [ 1071.140665][T32475] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8569'. [ 1071.467734][T32456] tipc: Resetting bearer [ 1071.647342][T32456] tipc: Resetting bearer [ 1071.676101][T32456] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 1071.676124][T32456] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 1071.739772][T19617] lo speed is unknown, defaulting to 1000 [ 1071.739804][T19617] syz_device_name_32_chars_1234567: Port: 1 Link DOWN [ 1072.100990][T32491] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8573'. [ 1072.243247][T32494] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8574'. [ 1072.296588][T32493] nbd3: detected capacity change from 0 to 127 [ 1072.538108][T32493] lo speed is unknown, defaulting to 1000 [ 1072.557448][T32493] lo speed is unknown, defaulting to 1000 [ 1072.565227][T32493] lo speed is unknown, defaulting to 1000 [ 1072.766757][T32514] bond0: (slave veth1_to_bond): Device is not bonding slave [ 1072.766784][T32514] bond0: option active_slave: invalid value (veth1_to_bond) [ 1073.146790][T32528] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8580'. [ 1073.206911][T32519] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 1073.568897][ T4932] block nbd3: Receive control failed (result -104) [ 1073.903336][T32541] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8581'. [ 1074.409067][T32552] tipc: Failed to remove unknown binding: 66,0,0/134418688:1974773646/1974773648 [ 1074.409128][T32552] tipc: Failed to remove unknown binding: 66,0,0/134418688:1974773646/1974773647 [ 1074.409542][T32552] tipc: Failed to remove unknown binding: 66,0,0/134418688:1974773646/1974773648 [ 1074.409571][T32552] tipc: Failed to remove unknown binding: 66,0,0/134418688:1974773646/1974773647 [ 1074.410043][T32553] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8585'. [ 1074.518896][T32557] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8587'. [ 1075.111742][T32575] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8593'. [ 1075.155378][T32579] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8594'. [ 1075.260581][T32586] tipc: Enabling of bearer rejected, already enabled [ 1075.763291][ T1962] block nbd3: Connection timed out, retrying (0/1 alive) [ 1075.764040][ T1962] block nbd3: Connection timed out, retrying (0/1 alive) [ 1075.764101][ T1962] block nbd3: Connection timed out, retrying (0/1 alive) [ 1075.764148][ T1962] block nbd3: Connection timed out, retrying (0/1 alive) [ 1075.764679][ T1962] block nbd3: Dead connection, failed to find a fallback [ 1075.764700][ T1962] block nbd3: shutting down sockets [ 1075.764785][ T1962] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1075.764875][ T1962] Buffer I/O error on dev nbd3, logical block 3, async page read [ 1075.765086][ T1962] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1075.765114][ T1962] Buffer I/O error on dev nbd3, logical block 2, async page read [ 1075.765139][ T1962] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1075.765162][ T1962] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1075.765184][ T1962] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1075.765206][ T1962] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1075.772314][ T1962] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1075.772347][ T1962] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1075.772704][ T1962] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1075.772730][ T1962] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1075.773141][ T1962] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1075.773167][ T1962] Buffer I/O error on dev nbd3, logical block 2, async page read [ 1075.773362][ T1962] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1075.773386][ T1962] Buffer I/O error on dev nbd3, logical block 3, async page read [ 1075.774685][ T1962] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1075.774712][ T1962] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1075.774806][ T1962] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1075.774829][ T1962] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1075.782819][T31396] ldm_validate_partition_table(): Disk read failed. [ 1075.784284][T31396] Dev nbd3: unable to read RDB block 0 [ 1075.801201][T31396] nbd3: unable to read partition table [ 1075.860575][T32602] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8598'. [ 1075.913359][T31396] ldm_validate_partition_table(): Disk read failed. [ 1075.915812][T31396] Dev nbd3: unable to read RDB block 0 [ 1075.923788][T31396] nbd3: unable to read partition table [ 1075.951978][ C1] net_ratelimit: 81 callbacks suppressed [ 1075.952005][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1076.095775][T32604] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8599'. [ 1076.317276][T32588] tipc: Resetting bearer [ 1076.991543][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1077.056760][T32588] batman_adv: batadv0: Interface deactivated: gretap2 [ 1077.071069][T32588] batman_adv: batadv0: Interface deactivated: gretap3 [ 1077.306610][T32588] batman_adv: batadv0: Interface deactivated: macvtap2 [ 1077.365316][T32588] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 1077.413974][T32588] vlan3: left allmulticast mode [ 1077.414000][T32588] 0·: left allmulticast mode [ 1077.414015][T32588] hsr_slave_0: left allmulticast mode [ 1077.592451][ T9] lo speed is unknown, defaulting to 1000 [ 1077.592484][ T9] syz2: Port: 1 Link DOWN [ 1077.601553][ T59] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1077.601587][ T59] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.601611][ T59] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1077.601651][ T59] bond3: (slave gretap1): failed to get link speed/duplex [ 1077.603054][T20657] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1077.603080][T20657] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.603103][T20657] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1077.603135][T20657] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1077.603158][T20657] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.603181][T20657] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1077.603211][T20657] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1077.603234][T20657] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.603257][T20657] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1077.724225][T18782] bond3: (slave gretap1): failed to get link speed/duplex [ 1077.842142][T20657] bond3: (slave gretap1): failed to get link speed/duplex [ 1077.891411][T32615] tipc: Enabling of bearer rejected, already enabled [ 1077.936935][T32620] netlink: 'syz.0.8602': attribute type 1 has an invalid length. [ 1078.017550][T32620] bond19: entered promiscuous mode [ 1078.019014][T32620] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1078.032641][T32620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8602'. [ 1078.033795][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1078.049412][T32620] bond19 (unregistering): Released all slaves [ 1078.075414][T32628] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8606'. [ 1078.090907][T20657] bond3: (slave gretap1): failed to get link speed/duplex [ 1078.203838][ T59] bond3: (slave gretap1): failed to get link speed/duplex [ 1078.311476][T18779] bond3: (slave gretap1): failed to get link speed/duplex [ 1078.367758][T32637] tipc: Enabling of bearer rejected, already enabled [ 1078.377919][T32639] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8610'. [ 1078.422423][T18779] bond3: (slave gretap1): failed to get link speed/duplex [ 1078.545455][T32642] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8611'. [ 1078.698327][T32648] syzkaller0: entered promiscuous mode [ 1078.698355][T32648] syzkaller0: entered allmulticast mode [ 1078.990299][T32658] nbd16: detected capacity change from 0 to 127 [ 1079.184595][T32658] lo speed is unknown, defaulting to 1000 [ 1079.190542][T32658] lo speed is unknown, defaulting to 1000 [ 1079.193576][T32658] lo speed is unknown, defaulting to 1000 [ 1079.401750][T32644] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1079.511482][T32664] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 1079.511516][T32664] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 1079.513184][T32664] tipc: Resetting bearer [ 1079.582028][T32668] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:65534 [ 1079.714786][ T4932] block nbd16: Receive control failed (result -104) [ 1079.754678][T32674] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8619'. [ 1079.882206][T32677] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8618'. [ 1080.431033][T32691] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8623'. [ 1080.524644][T32695] tipc: Enabling of bearer rejected, already enabled [ 1080.562537][T32697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8624'. [ 1080.610068][T32700] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8628'. [ 1080.924609][T32710] tipc: Enabling of bearer rejected, already enabled [ 1080.981946][T32712] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:65534 [ 1081.079719][T32712] veth0_vlan: left promiscuous mode [ 1081.095906][T32712] veth0_vlan: entered promiscuous mode [ 1081.098780][T32712] veth1_vlan: entered promiscuous mode [ 1081.116071][T32712] veth1_macvtap: left promiscuous mode [ 1081.117368][T32712] veth0_macvtap: left promiscuous mode [ 1081.118661][T32712] veth0_macvtap: entered promiscuous mode [ 1081.120049][T32712] veth1_macvtap: entered promiscuous mode [ 1081.146410][T32712] geneve0: left promiscuous mode [ 1081.151101][ C1] net_ratelimit: 24 callbacks suppressed [ 1081.151126][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1081.175746][T32712] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 1081.176256][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 1081.176425][ T43] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.176530][ T43] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.176613][ T43] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.331759][ T7409] geneve0: entered promiscuous mode [ 1081.332100][ T59] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.332153][ T59] bond3: (slave gretap1): failed to get link speed/duplex [ 1081.451592][T18779] bond3: (slave gretap1): failed to get link speed/duplex [ 1081.575427][T20658] bond3: (slave gretap1): failed to get link speed/duplex [ 1081.609892][T32731] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8638'. [ 1081.676328][T32734] netlink: 830 bytes leftover after parsing attributes in process `syz.2.8639'. [ 1081.676382][T32734] bond_slave_0: entered promiscuous mode [ 1081.683115][ T59] bond3: (slave gretap1): failed to get link speed/duplex [ 1081.739034][T32736] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8640'. [ 1081.826252][T18782] bond3: (slave gretap1): failed to get link speed/duplex [ 1081.931056][T20658] bond3: (slave gretap1): failed to get link speed/duplex [ 1082.052356][T23510] bond3: (slave gretap1): failed to get link speed/duplex [ 1082.170287][T32745] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8642'. [ 1082.324137][T32751] tipc: Enabling of bearer rejected, already enabled [ 1082.351640][ T1987] block nbd16: Connection timed out, retrying (0/1 alive) [ 1082.351708][ T1987] block nbd16: Connection timed out, retrying (0/1 alive) [ 1082.351755][ T1987] block nbd16: Connection timed out, retrying (0/1 alive) [ 1082.351802][ T1987] block nbd16: Connection timed out, retrying (0/1 alive) [ 1082.351881][ T1987] block nbd16: Dead connection, failed to find a fallback [ 1082.351909][ T1987] block nbd16: shutting down sockets [ 1082.351921][ T1987] blk_print_req_error: 56 callbacks suppressed [ 1082.351934][ T1987] I/O error, dev nbd16, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1082.351964][ T1987] buffer_io_error: 138 callbacks suppressed [ 1082.351977][ T1987] Buffer I/O error on dev nbd16, logical block 3, async page read [ 1082.352006][ T1987] I/O error, dev nbd16, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1082.352031][ T1987] Buffer I/O error on dev nbd16, logical block 2, async page read [ 1082.352054][ T1987] I/O error, dev nbd16, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1082.352077][ T1987] Buffer I/O error on dev nbd16, logical block 1, async page read [ 1082.352098][ T1987] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1082.352121][ T1987] Buffer I/O error on dev nbd16, logical block 0, async page read [ 1082.352358][ T1987] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1082.352383][ T1987] Buffer I/O error on dev nbd16, logical block 0, async page read [ 1082.352400][ T1987] Buffer I/O error on dev nbd16, logical block 1, async page read [ 1082.352416][ T1987] Buffer I/O error on dev nbd16, logical block 2, async page read [ 1082.352432][ T1987] Buffer I/O error on dev nbd16, logical block 3, async page read [ 1082.352597][ T1987] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1082.352625][ T1987] Buffer I/O error on dev nbd16, logical block 0, async page read [ 1082.352642][ T1987] Buffer I/O error on dev nbd16, logical block 1, async page read [ 1082.352828][ T1987] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1082.353017][ T1987] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1082.353217][ T1987] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1082.353413][ T1987] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1082.353638][T31396] ldm_validate_partition_table(): Disk read failed. [ 1082.354297][T31396] Dev nbd16: unable to read RDB block 0 [ 1082.355092][T31396] nbd16: unable to read partition table [ 1082.444387][T31396] ldm_validate_partition_table(): Disk read failed. [ 1082.444995][T31396] Dev nbd16: unable to read RDB block 0 [ 1082.446202][T31396] nbd16: unable to read partition table [ 1082.836574][T32759] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8647'. [ 1083.068856][ T301] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8651'. [ 1083.418461][ T309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8653'. [ 1084.236981][ T335] tipc: Enabling of bearer rejected, already enabled [ 1085.003898][ T360] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 1085.091729][ T361] Bluetooth: MGMT ver 1.23 [ 1085.293053][ T366] netlink: 'syz.2.8672': attribute type 4 has an invalid length. [ 1085.491328][ T381] __nla_validate_parse: 7 callbacks suppressed [ 1085.491354][ T381] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8677'. [ 1085.930314][ T395] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8679'. [ 1086.059829][ T399] tipc: Enabling of bearer rejected, already enabled [ 1086.222390][T23510] net_ratelimit: 40 callbacks suppressed [ 1086.222415][T23510] bond3: (slave gretap1): failed to get link speed/duplex [ 1086.289900][ T405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8683'. [ 1086.341446][T20658] bond3: (slave gretap1): failed to get link speed/duplex [ 1086.341714][ T407] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 1086.352240][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1086.374624][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1086.374646][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1086.448276][ T408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1086.451313][T23510] bond3: (slave gretap1): failed to get link speed/duplex [ 1086.572586][T20658] bond3: (slave gretap1): failed to get link speed/duplex [ 1086.603101][ T418] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8689'. [ 1086.681205][T20658] bond3: (slave gretap1): failed to get link speed/duplex [ 1086.802124][ T59] bond3: (slave gretap1): failed to get link speed/duplex [ 1086.917829][T18779] bond3: (slave gretap1): failed to get link speed/duplex [ 1087.021661][T23510] bond3: (slave gretap1): failed to get link speed/duplex [ 1087.131452][ T59] bond3: (slave gretap1): failed to get link speed/duplex [ 1087.516335][ T446] syzkaller0: entered promiscuous mode [ 1087.684541][ T452] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8699'. [ 1087.725040][ T455] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8701'. [ 1088.289938][ T480] netlink: 830 bytes leftover after parsing attributes in process `syz.0.8707'. [ 1088.999189][ T499] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8713'. [ 1089.211985][ T508] bond18: (slave veth0_to_bond): Releasing active interface [ 1089.219581][ T508] bond18: (slave veth37): making interface the new active one [ 1089.251779][ T508] bond7: (slave wlan1): Releasing backup interface [ 1089.263424][ T508] bond3: (slave veth5): Removing an active aggregator [ 1089.264243][ T508] bond3: (slave veth5): Releasing backup interface [ 1089.302295][ T508] bond9: (slave gretap3): Releasing active interface [ 1089.323308][ T508] bond14: (slave bond0): Releasing active interface [ 1089.329197][ T508] bond11: (slave veth23): Releasing active interface [ 1089.329225][ T508] bond11: (slave veth23): the permanent HWaddr of slave - 0e:c3:30:4b:5f:cd - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1089.329261][ T508] bond11: (slave veth25): making interface the new active one [ 1089.380621][ T508] bond11: (slave veth25): Releasing active interface [ 1089.397074][ T508] veth27: left allmulticast mode [ 1089.397104][ T508] veth27: left promiscuous mode [ 1089.417962][ T508] bridge9: port 1(veth27) entered disabled state [ 1089.478843][ T508] veth29: left allmulticast mode [ 1089.478872][ T508] veth29: left promiscuous mode [ 1089.483460][ T508] bridge9: port 2(veth29) entered disabled state [ 1089.507357][ T508] bond15: (slave veth33): Releasing active interface [ 1089.518531][ T508] bond16: (slave geneve3): Releasing backup interface [ 1089.538006][ T508] bond17: (slave veth35): Releasing active interface [ 1089.553409][ T508] bond18: (slave veth37): Releasing active interface [ 1090.081590][ T541] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8725'. [ 1091.261953][T18782] net_ratelimit: 36 callbacks suppressed [ 1091.261980][T18782] bond3: (slave gretap1): failed to get link speed/duplex [ 1091.381204][T18779] bond3: (slave gretap1): failed to get link speed/duplex [ 1091.389730][ T585] ip_tables: iptables: counters copy to user failed while replacing table [ 1091.497871][T18779] bond3: (slave gretap1): failed to get link speed/duplex [ 1091.551528][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1091.601054][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 1091.699115][ T589] syzkaller0: entered promiscuous mode [ 1091.699142][ T589] syzkaller0: entered allmulticast mode [ 1091.724379][T23510] bond3: (slave gretap1): failed to get link speed/duplex [ 1091.819802][ T594] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8745'. [ 1091.841189][T18782] bond3: (slave gretap1): failed to get link speed/duplex [ 1091.956780][T20658] bond3: (slave gretap1): failed to get link speed/duplex [ 1092.063993][T18779] bond3: (slave gretap1): failed to get link speed/duplex [ 1092.116481][ T608] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8750'. [ 1092.148125][ T610] syzkaller0: entered promiscuous mode [ 1092.148151][ T610] syzkaller0: entered allmulticast mode [ 1092.373602][ T617] syzkaller0: entered promiscuous mode [ 1092.373629][ T617] syzkaller0: entered allmulticast mode [ 1092.554776][ T622] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8756'. [ 1092.699630][ T626] bond17: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1092.715127][ T626] bond17 (unregistering): Released all slaves [ 1093.357956][ T648] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8762'. [ 1093.763211][T18782] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1093.763237][T18782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1093.805479][ T664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.831065][T18782] tipc: Subscription rejected, illegal request [ 1093.989754][ T676] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8769'. [ 1094.275776][ T687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8772'. [ 1094.517663][ T693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8776'. [ 1094.563942][ T693] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1094.647912][ T697] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8777'. [ 1094.718466][ T699] syzkaller0: entered promiscuous mode [ 1094.718492][ T699] syzkaller0: entered allmulticast mode [ 1094.916829][ T703] dvmrp0: entered allmulticast mode [ 1094.936982][ T703] dvmrp1: entered allmulticast mode [ 1094.942484][ T703] dvmrp0: left allmulticast mode [ 1094.942603][ T703] dvmrp1: left allmulticast mode [ 1094.942686][ T703] dvmrp6: left allmulticast mode [ 1095.259874][ T713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8784'. [ 1095.314789][ T712] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8783'. [ 1096.313192][T23510] net_ratelimit: 39 callbacks suppressed [ 1096.313219][T23510] bond3: (slave gretap1): failed to get link speed/duplex [ 1096.421441][T18782] bond3: (slave gretap1): failed to get link speed/duplex [ 1096.539138][T18782] bond3: (slave gretap1): failed to get link speed/duplex [ 1096.702734][T18779] bond3: (slave gretap1): failed to get link speed/duplex [ 1096.751262][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1096.811145][T23510] bond3: (slave gretap1): failed to get link speed/duplex [ 1096.921186][T23510] bond3: (slave gretap1): failed to get link speed/duplex [ 1097.041880][T18779] bond3: (slave gretap1): failed to get link speed/duplex [ 1097.134151][ T758] syzkaller0: left promiscuous mode [ 1097.134178][ T758] syzkaller0: left allmulticast mode [ 1097.171765][T20658] bond3: (slave gretap1): failed to get link speed/duplex [ 1097.234310][ T761] __nla_validate_parse: 1 callbacks suppressed [ 1097.234331][ T761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8799'. [ 1097.282617][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 1097.306926][ T764] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8800'. [ 1097.438440][ T767] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8801'. [ 1098.520002][ T801] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8811'. [ 1098.725448][ T803] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8812'. [ 1098.806194][ T807] syzkaller0: left promiscuous mode [ 1098.806221][ T807] syzkaller0: left allmulticast mode [ 1098.806570][ T807] tipc: Resetting bearer [ 1099.299612][ T821] tipc: Enabling of bearer rejected, already enabled [ 1099.458508][ T823] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8820'. [ 1099.554312][ T827] syzkaller0: entered promiscuous mode [ 1099.554331][ T827] syzkaller0: entered allmulticast mode [ 1099.554580][ T827] tipc: Resetting bearer [ 1099.760414][ T833] dvmrp0: entered allmulticast mode [ 1099.774981][ T833] dvmrp0: left allmulticast mode [ 1099.949796][ T838] netlink: 'syz.0.8824': attribute type 1 has an invalid length. [ 1100.171641][ T838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8824'. [ 1100.240263][ T844] bond20: option arp_validate: invalid value (1048579) [ 1100.258004][ T844] bond20 (unregistering): Released all slaves [ 1100.480437][ T835] bond20: option arp_validate: invalid value (1048579) [ 1100.538757][ T835] bond20 (unregistering): Released all slaves [ 1100.764261][ T838] bridge11: entered promiscuous mode [ 1100.776127][ T856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8829'. [ 1101.083161][ T853] bond20: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1101.145933][ T853] bond20 (unregistering): Released all slaves [ 1101.146375][ T865] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8833'. [ 1101.321843][T18783] net_ratelimit: 30 callbacks suppressed [ 1101.321869][T18783] bond3: (slave gretap1): failed to get link speed/duplex [ 1101.351119][ T868] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8830'. [ 1101.442595][T23510] bond3: (slave gretap1): failed to get link speed/duplex [ 1101.566975][T20658] bond3: (slave gretap1): failed to get link speed/duplex [ 1101.598750][ T881] tipc: Enabling of bearer rejected, already enabled [ 1101.673218][T18779] bond3: (slave gretap1): failed to get link speed/duplex [ 1101.781566][T18779] bond3: (slave gretap1): failed to get link speed/duplex [ 1101.901062][T18782] bond3: (slave gretap1): failed to get link speed/duplex [ 1101.955366][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1102.032870][T18782] bond3: (slave gretap1): failed to get link speed/duplex [ 1102.141730][ T59] bond3: (slave gretap1): failed to get link speed/duplex [ 1102.251170][T18783] bond3: (slave gretap1): failed to get link speed/duplex [ 1102.368898][ T909] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8846'. [ 1102.558831][ T917] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8849'. [ 1102.639083][ T925] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8851'. [ 1102.811319][ T932] tipc: Enabling of bearer rejected, already enabled [ 1103.242994][ T953] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8859'. [ 1103.490492][ T965] team0: Device wg1 is of different type [ 1103.556275][ T965] netlink: 'syz.1.8863': attribute type 1 has an invalid length. [ 1103.664631][ T970] bond19: option arp_validate: invalid value (1048579) [ 1103.670392][ T970] bond19 (unregistering): Released all slaves [ 1103.756146][ T970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8863'. [ 1103.760619][ T965] bond19: option arp_validate: invalid value (1048579) [ 1103.771952][ T965] bond19 (unregistering): Released all slaves [ 1103.799654][ T970] bridge0: entered promiscuous mode [ 1104.189044][ T991] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8871'. [ 1104.258903][ T989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8869'. [ 1104.423087][ T994] syzkaller0: entered promiscuous mode [ 1104.423114][ T994] syzkaller0: entered allmulticast mode [ 1104.783785][ T1010] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8876'. [ 1104.796975][ T1015] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8879'. [ 1104.813173][ T1012] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8878'. [ 1105.012798][ T1019] syzkaller0: entered promiscuous mode [ 1105.012825][ T1019] syzkaller0: entered allmulticast mode [ 1105.459574][ T1042] geneve3: entered promiscuous mode [ 1105.471529][T18779] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.471588][T18779] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.471625][T18779] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.471661][T18779] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.129626][ T1081] syzkaller0: entered promiscuous mode [ 1106.129653][ T1081] syzkaller0: entered allmulticast mode [ 1106.327846][ T1089] tipc: Enabling of bearer rejected, already enabled [ 1106.376108][ T1092] dvmrp0: entered allmulticast mode [ 1106.457639][ T1092] dvmrp1: entered allmulticast mode [ 1106.473470][T20658] net_ratelimit: 34 callbacks suppressed [ 1106.473495][T20658] bond3: (slave gretap1): failed to get link speed/duplex [ 1106.509417][ T1092] dvmrp0: left allmulticast mode [ 1106.509555][ T1092] dvmrp1: left allmulticast mode [ 1106.509650][ T1092] dvmrp6: left allmulticast mode [ 1106.780974][T18782] bond3: (slave gretap1): failed to get link speed/duplex [ 1106.893655][T20658] bond3: (slave gretap1): failed to get link speed/duplex [ 1107.004623][T18779] bond3: (slave gretap1): failed to get link speed/duplex [ 1107.113162][T23510] bond3: (slave gretap1): failed to get link speed/duplex [ 1107.151155][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1107.224004][T18779] bond3: (slave gretap1): failed to get link speed/duplex [ 1107.334323][T23510] bond3: (slave gretap1): failed to get link speed/duplex [ 1107.442601][T23510] bond3: (slave gretap1): failed to get link speed/duplex [ 1107.486640][ T1131] __nla_validate_parse: 9 callbacks suppressed [ 1107.486663][ T1131] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8909'. [ 1107.563172][T18782] bond3: (slave gretap1): failed to get link speed/duplex [ 1107.622047][ T1134] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8910'. [ 1107.910983][ T1139] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8911'. [ 1108.652538][ T1159] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8918'. [ 1109.129492][ T1167] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1109.236757][ T1172] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8921'. [ 1109.505788][ T1178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8924'. [ 1109.812469][ T1184] lo speed is unknown, defaulting to 1000 [ 1109.830143][ T1184] lo speed is unknown, defaulting to 1000 [ 1109.840687][ T1184] lo speed is unknown, defaulting to 1000 [ 1110.843083][ T1213] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8931'. [ 1111.306955][ T1219] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8933'. [ 1111.495357][ T43] net_ratelimit: 34 callbacks suppressed [ 1111.495382][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 1111.545603][ T1229] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8936'. [ 1111.643324][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 1111.751104][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 1111.864160][T18783] bond3: (slave gretap1): failed to get link speed/duplex [ 1112.016888][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 1112.176152][T18779] bond3: (slave gretap1): failed to get link speed/duplex [ 1112.286388][T18782] bond3: (slave gretap1): failed to get link speed/duplex [ 1112.351054][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1112.399508][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 1112.501323][T18779] bond3: (slave gretap1): failed to get link speed/duplex [ 1113.300380][ T1273] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8941'. [ 1113.395775][ T1280] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8944'. [ 1113.492058][ T1282] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8946'. [ 1113.578038][ T10] lo speed is unknown, defaulting to 1000 [ 1113.578067][ T10] s: Port: 1 Link DOWN [ 1113.669047][ T1290] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8951'. [ 1113.787629][ T1296] tipc: Enabling of bearer rejected, already enabled [ 1114.066481][ T1310] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8954'. [ 1114.257316][ T1310] lo speed is unknown, defaulting to 1000 [ 1114.296960][ T1310] lo speed is unknown, defaulting to 1000 [ 1114.307916][ T1310] lo speed is unknown, defaulting to 1000 [ 1114.824162][ T1319] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8959'. [ 1115.172700][ T1325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8961'. [ 1115.425448][ T1330] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8962'. [ 1115.838914][ T1335] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8963'. [ 1115.877249][ T1338] netlink: 'syz.1.8964': attribute type 17 has an invalid length. [ 1115.877287][ T1338] bond0: option all_slaves_active: invalid value (183) [ 1116.027094][ T1343] syzkaller0: entered promiscuous mode [ 1116.027122][ T1343] syzkaller0: entered allmulticast mode [ 1116.035633][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.050263][ T1345] tipc: Enabling of bearer rejected, already enabled [ 1116.059682][ T1343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8967'. [ 1116.067363][ T1343] tc mirred: Loop (syzkaller0:egress --> syzkaller0:egress) [ 1116.327726][ T1351] netlink: 'syz.4.8970': attribute type 1 has an invalid length. [ 1116.409340][ T1351] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1116.441722][ T1359] bond14: (slave geneve3): making interface the new active one [ 1116.443443][ T1359] bond14: (slave geneve3): Enslaving as an active interface with an up link [ 1116.487427][ T1358] syzkaller0: entered promiscuous mode [ 1116.487455][ T1358] syzkaller0: entered allmulticast mode [ 1116.511199][ C1] net_ratelimit: 32 callbacks suppressed [ 1116.511225][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1116.601106][ T59] bond3: (slave gretap1): failed to get link speed/duplex [ 1116.721654][T18783] bond3: (slave gretap1): failed to get link speed/duplex [ 1116.832449][T23510] bond3: (slave gretap1): failed to get link speed/duplex [ 1116.854079][ T1375] tipc: Enabling of bearer rejected, already enabled [ 1116.945397][T20658] bond3: (slave gretap1): failed to get link speed/duplex [ 1116.979334][ T1380] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 1117.051309][ T59] bond3: (slave gretap1): failed to get link speed/duplex [ 1117.171149][T23510] bond3: (slave gretap1): failed to get link speed/duplex [ 1117.282732][T20658] bond3: (slave gretap1): failed to get link speed/duplex [ 1117.398414][ T1395] bridge0: port 1(wlan1) entered blocking state [ 1117.398511][ T1395] bridge0: port 1(wlan1) entered disabled state [ 1117.398693][ T1395] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 1117.425361][ T1395] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 1117.490704][ T1395] bridge0: port 1(wlan1) entered disabled state [ 1117.508150][ T1395] mac80211_hwsim hwsim9 wlan1 (unregistering): left allmulticast mode [ 1117.508184][ T1395] mac80211_hwsim hwsim9 wlan1 (unregistering): left promiscuous mode [ 1117.510981][ T1395] bridge0: port 1(wlan1) entered disabled state [ 1117.551163][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1117.562058][T23510] bond3: (slave gretap1): failed to get link speed/duplex [ 1117.604025][ T1406] tipc: Enabling of bearer rejected, already enabled [ 1118.677409][ T1448] syzkaller0: entered promiscuous mode [ 1118.677435][ T1448] syzkaller0: entered allmulticast mode [ 1118.992719][ T1455] netlink: 'syz.1.9004': attribute type 6 has an invalid length. [ 1118.992744][ T1455] __nla_validate_parse: 5 callbacks suppressed [ 1118.992757][ T1455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9004'. [ 1119.126939][ T1460] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9005'. [ 1119.229238][ T1466] syzkaller0: entered promiscuous mode [ 1119.229265][ T1466] syzkaller0: entered allmulticast mode [ 1119.241456][ T1466] simple: /dev/video#_74 [ 1119.241475][ T1466] simple: /dev/video#_148 [ 1119.241487][ T1466] simple: /dev/video#_222 [ 1119.241497][ T1466] simple: /dev/video#_296 [ 1119.241507][ T1466] simple: /dev/video#_370 [ 1119.241516][ T1466] simple: /dev/video#_444 [ 1119.241527][ T1466] simple: /dev/video#_518 [ 1119.241536][ T1466] simple: /dev/video#_592 [ 1119.241546][ T1466] simple: /dev/video#_666 [ 1119.241556][ T1466] simple: /dev/video#_740 [ 1119.241565][ T1466] simple: /dev/video#_814 [ 1119.241574][ T1466] simple: /dev/video#_888 [ 1119.241584][ T1466] simple: /dev/video#_962 [ 1119.241594][ T1466] simple: /dev/video#_1036 [ 1119.241604][ T1466] simple: /dev/video#_1110 [ 1119.241614][ T1466] simple: /dev/video#_1184 [ 1119.241624][ T1466] simple: /dev/video#_1258 [ 1119.241642][ T1466] simple: /dev/video#_1332 [ 1119.241652][ T1466] simple: /dev/video#_1406 [ 1119.241661][ T1466] simple: /dev/video#_1480 [ 1119.241671][ T1466] simple: /dev/video#_1554 [ 1119.241680][ T1466] simple: /dev/video#_1628 [ 1119.241690][ T1466] simple: /dev/video#_1702 [ 1119.241699][ T1466] simple: /dev/video#_1776 [ 1119.241709][ T1466] simple: /dev/video#_1850 [ 1119.241719][ T1466] simple: /dev/video#_1924 [ 1119.241729][ T1466] simple: /dev/video#_1998 [ 1119.241738][ T1466] simple: /dev/video#_2072 [ 1119.241748][ T1466] simple: /dev/video#_2146 [ 1119.241757][ T1466] simple: /dev/video#_2220 [ 1119.241767][ T1466] simple: /dev/video#_2294 [ 1119.241777][ T1466] simple: /dev/video#_2368 [ 1119.523772][ T1471] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9008'. [ 1119.530417][ T1471] netlink: 288 bytes leftover after parsing attributes in process `syz.1.9008'. [ 1121.381236][ T1441] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1121.523974][T18779] net_ratelimit: 36 callbacks suppressed [ 1121.523999][T18779] bond3: (slave gretap1): failed to get link speed/duplex [ 1121.639425][T18779] bond3: (slave gretap1): failed to get link speed/duplex [ 1121.711378][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1121.742049][T23510] bond3: (slave gretap1): failed to get link speed/duplex [ 1121.839235][ T1506] netlink: 'syz.1.9016': attribute type 4 has an invalid length. [ 1121.849051][ T1506] netlink: 'syz.1.9016': attribute type 4 has an invalid length. [ 1121.865100][T19041] lo speed is unknown, defaulting to 1000 [ 1121.865128][T19041] syz2: Port: 1 Link ACTIVE [ 1121.896697][T18779] bond3: (slave gretap1): failed to get link speed/duplex [ 1121.911172][ T1510] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9017'. [ 1121.925424][ T1511] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9018'. [ 1121.971228][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.005583][T20658] bond3: (slave gretap1): failed to get link speed/duplex [ 1122.115191][T18783] bond3: (slave gretap1): failed to get link speed/duplex [ 1122.135865][ T1519] netlink: 'syz.2.9020': attribute type 39 has an invalid length. [ 1122.400919][T18783] bond3: (slave gretap1): failed to get link speed/duplex [ 1122.513514][ T59] bond3: (slave gretap1): failed to get link speed/duplex [ 1122.769373][ T1529] ieee802154 phy1 wpan1: encryption failed: -22 [ 1122.867860][ T1545] syzkaller0: entered promiscuous mode [ 1122.867888][ T1545] syzkaller0: entered allmulticast mode [ 1122.954088][ T1547] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9028'. [ 1123.011201][ T1551] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9029'. [ 1123.088683][ T1553] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9030'. [ 1123.249378][ T1563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9031'. [ 1123.385817][ T1557] lo speed is unknown, defaulting to 1000 [ 1123.402564][ T1557] lo speed is unknown, defaulting to 1000 [ 1123.409217][ T1557] lo speed is unknown, defaulting to 1000 [ 1125.519611][ T1525] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1125.663346][ T1597] __nla_validate_parse: 2 callbacks suppressed [ 1125.663370][ T1597] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9040'. [ 1125.903024][ T1605] netlink: 'syz.0.9043': attribute type 4 has an invalid length. [ 1125.906195][T19041] lo speed is unknown, defaulting to 1000 [ 1125.906222][T19041] syz_device_name_32_chars_1234567: Port: 1 Link ACTIVE [ 1125.920998][ T1605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9043'. [ 1125.921030][ T1605] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9043'. [ 1125.922890][ T1605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9043'. [ 1125.922917][ T1605] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9043'. [ 1125.976466][ T1604] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9042'. [ 1126.039988][ T1609] syzkaller0: entered promiscuous mode [ 1126.040014][ T1609] syzkaller0: entered allmulticast mode [ 1126.184148][ T1619] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1126.209726][ T1619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9049'. [ 1126.299250][ T1619] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1126.325374][ T1622] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9048'. [ 1126.325404][ T1622] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9048'. [ 1126.325422][ T1622] netlink: 'syz.0.9048': attribute type 4 has an invalid length. [ 1126.510301][ T1635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9050'. [ 1126.553248][T18783] net_ratelimit: 42 callbacks suppressed [ 1126.553273][T18783] bond3: (slave gretap1): failed to get link speed/duplex [ 1126.664845][T20658] bond3: (slave gretap1): failed to get link speed/duplex [ 1126.774982][T20658] bond3: (slave gretap1): failed to get link speed/duplex [ 1126.861054][ T1617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1126.881433][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 1126.911141][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1126.991091][ T1617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1127.007727][T20657] bond3: (slave gretap1): failed to get link speed/duplex [ 1127.114994][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 1127.184435][ T1654] tipc: Resetting bearer [ 1127.188933][ T1654] tipc: Resetting bearer [ 1127.225990][ T7409] lo speed is unknown, defaulting to 1000 [ 1127.236900][T20657] bond3: (slave gretap1): failed to get link speed/duplex [ 1129.308508][ T1631] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1129.606571][ T1672] bond21: Unable to set peer notification delay as MII monitoring is disabled [ 1129.631390][ T1672] bond21 (unregistering): Released all slaves [ 1129.888946][ T1680] tc_dump_action: action bad kind [ 1129.902953][ T1687] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1130.224210][ T1692] syzkaller0: entered promiscuous mode [ 1130.224236][ T1692] syzkaller0: entered allmulticast mode [ 1130.799975][T20657] nci: nci_rx_work: unknown MT 0x7 [ 1130.901350][ T1729] __nla_validate_parse: 6 callbacks suppressed [ 1130.901374][ T1729] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9076'. [ 1130.977421][ T1732] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9078'. [ 1131.199182][ T1740] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9080'. [ 1131.532473][ T1754] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9082'. [ 1131.631807][T20658] net_ratelimit: 39 callbacks suppressed [ 1131.631833][T20658] bond3: (slave gretap1): failed to get link speed/duplex [ 1131.745022][T20657] bond3: (slave gretap1): failed to get link speed/duplex [ 1131.780525][ T1761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9083'. [ 1131.852113][T20658] bond3: (slave gretap1): failed to get link speed/duplex [ 1131.965575][T18783] bond3: (slave gretap1): failed to get link speed/duplex [ 1132.075600][T20657] bond3: (slave gretap1): failed to get link speed/duplex [ 1132.111173][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1132.183001][T23510] bond3: (slave gretap1): failed to get link speed/duplex [ 1132.205461][ T1765] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9084'. [ 1132.295849][T18779] bond3: (slave gretap1): failed to get link speed/duplex [ 1132.402451][T18779] bond3: (slave gretap1): failed to get link speed/duplex [ 1132.426914][ T1776] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9086'. [ 1132.512934][T20657] bond3: (slave gretap1): failed to get link speed/duplex [ 1133.514613][ T1716] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1133.851191][ T1781] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9089'. [ 1134.156000][ T1794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9091'. [ 1134.156038][ T1794] netlink: 'syz.4.9091': attribute type 30 has an invalid length. [ 1134.156057][ T1794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9091'. [ 1134.765506][ T1811] lo speed is unknown, defaulting to 1000 [ 1134.778287][ T1811] lo speed is unknown, defaulting to 1000 [ 1134.791851][ T1811] lo speed is unknown, defaulting to 1000 [ 1135.017984][T18779] nci: nci_rx_work: unknown MT 0x7 [ 1135.835424][ T1853] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1136.018971][ T1853] xt_CT: No such helper "netbios-ns" [ 1136.165414][ T1859] __nla_validate_parse: 6 callbacks suppressed [ 1136.165439][ T1859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9109'. [ 1136.284971][ T1864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9109'. [ 1136.332205][ T1863] bond_slave_0: entered promiscuous mode [ 1136.332730][ T1868] netlink: 'syz.1.9110': attribute type 1 has an invalid length. [ 1136.333932][ T1863] tipc: Resetting bearer [ 1136.368812][ T1863] veth0_macvtap: left promiscuous mode [ 1136.370170][ T1863] veth0_macvtap: entered promiscuous mode [ 1136.385342][ T1863] veth1_macvtap: entered promiscuous mode [ 1136.402302][ T59] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.402375][ T59] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.402415][ T59] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.402452][ T59] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.483323][ T1871] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9110'. [ 1136.534135][ T1868] bond19: entered promiscuous mode [ 1136.536291][ T1868] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1136.539184][ T1871] bond19: entered allmulticast mode [ 1136.599661][ T1868] bond19: (slave bridge0): making interface the new active one [ 1136.599686][ T1868] bridge0: entered promiscuous mode [ 1136.599851][ T1868] bridge0: entered allmulticast mode [ 1136.627720][ T1868] bond19: (slave bridge0): Enslaving as an active interface with an up link [ 1136.681926][ T1841] net_ratelimit: 37 callbacks suppressed [ 1136.681952][ T1841] bond3: (slave gretap1): failed to get link speed/duplex [ 1136.791812][ T1841] bond3: (slave gretap1): failed to get link speed/duplex [ 1136.901432][ T1841] bond3: (slave gretap1): failed to get link speed/duplex [ 1136.926060][ T1883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1136.979001][ T1884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.011165][ T1841] bond3: (slave gretap1): failed to get link speed/duplex [ 1137.122549][ T59] bond3: (slave gretap1): failed to get link speed/duplex [ 1137.231982][ T59] bond3: (slave gretap1): failed to get link speed/duplex [ 1137.311396][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1137.341011][ T59] bond3: (slave gretap1): failed to get link speed/duplex [ 1137.776973][ T1818] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1138.106847][ T1892] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9116'. [ 1138.232106][ T1898] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9118'. [ 1138.380693][ T1896] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9119'. [ 1138.661222][ T1910] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9124'. [ 1138.664486][ T1908] netlink: 'syz.1.9123': attribute type 29 has an invalid length. [ 1138.664511][ T1908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9123'. [ 1138.664537][ T1908] bond0: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 1138.758005][ T1917] tc_dump_action: action bad kind [ 1138.935507][ T1924] tipc: Enabling of bearer rejected, already enabled [ 1139.226910][ T1931] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.9129'. [ 1139.257468][ T1940] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9131'. [ 1139.275653][T23510] nci: nci_rx_work: unknown MT 0x7 [ 1139.484768][ T1935] bond4: (slave batadv0): Removing an active aggregator [ 1139.485563][ T1935] bond4: (slave batadv0): Releasing backup interface [ 1139.510256][ T1935] bond13: (slave veth0_to_bond): Releasing active interface [ 1139.510286][ T1935] veth23: entered promiscuous mode [ 1140.010404][ T1964] syzkaller0: entered promiscuous mode [ 1140.010422][ T1964] syzkaller0: entered allmulticast mode [ 1140.233143][ T7409] lo speed is unknown, defaulting to 1000 [ 1140.233173][ T7409] syz_device_name_32_chars_1234567: Port: 1 Link DOWN [ 1141.343924][ T1980] syzkaller0: entered promiscuous mode [ 1141.343943][ T1980] syzkaller0: entered allmulticast mode [ 1141.550163][ T1985] __nla_validate_parse: 5 callbacks suppressed [ 1141.550179][ T1985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9142'. [ 1141.741612][ T59] net_ratelimit: 40 callbacks suppressed [ 1141.741638][ T59] bond3: (slave gretap1): failed to get link speed/duplex [ 1141.852243][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 1141.944336][ T1929] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1141.967070][ T1841] bond3: (slave gretap1): failed to get link speed/duplex [ 1142.096779][ T1991] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9143'. [ 1142.104973][ T59] bond3: (slave gretap1): failed to get link speed/duplex [ 1142.228778][ T1149] bond3: (slave gretap1): failed to get link speed/duplex [ 1142.333039][ T1841] bond3: (slave gretap1): failed to get link speed/duplex [ 1142.443908][T18783] bond3: (slave gretap1): failed to get link speed/duplex [ 1142.475372][ T1998] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9145'. [ 1142.502189][ T2004] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9146'. [ 1142.511285][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1142.572466][ T1149] bond3: (slave gretap1): failed to get link speed/duplex [ 1142.629337][ T2005] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20001 [ 1142.652186][ T1999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9146'. [ 1142.686345][ T1841] bond3: (slave gretap1): failed to get link speed/duplex [ 1142.921487][ T2019] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1143.135238][ T10] lo speed is unknown, defaulting to 1000 [ 1143.135268][ T10] syz_device_name_32_chars_1234567: Port: 1 Link ACTIVE [ 1143.144518][ T2031] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9154'. [ 1143.210318][ T2028] tipc: Resetting bearer [ 1143.260470][ T2029] netlink: 'syz.1.9152': attribute type 1 has an invalid length. [ 1143.273341][ T10] lo speed is unknown, defaulting to 1000 [ 1143.273372][ T10] s: Port: 1 Link ACTIVE [ 1143.276514][ T2036] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9154'. [ 1143.441204][ T2029] lo: entered promiscuous mode [ 1143.454785][ T2029] tunl0: entered promiscuous mode [ 1143.463967][ T2029] gre0: entered promiscuous mode [ 1143.464635][ T2029] erspan0: entered promiscuous mode [ 1143.464988][ T2029] ip_vti0: entered promiscuous mode [ 1143.470172][ T2029] ip6_vti0: entered promiscuous mode [ 1143.470522][ T2029] sit0: entered promiscuous mode [ 1143.479047][ T2029] ip6tnl0: entered promiscuous mode [ 1143.479377][ T2029] ip6gre0: entered promiscuous mode [ 1143.501530][ T2029] ip6gretap0: entered promiscuous mode [ 1143.524756][ T2029] .`: entered promiscuous mode [ 1143.525516][ T2029] team0: entered promiscuous mode [ 1143.525535][ T2029] batadv1: entered promiscuous mode [ 1143.526175][ T2029] nlmon0: entered promiscuous mode [ 1143.526601][ T2029] batadv0: entered promiscuous mode [ 1143.526999][ T2029] wg0: entered promiscuous mode [ 1143.528695][ T2029] wg1: entered promiscuous mode [ 1143.529135][ T2029] wg2: entered promiscuous mode [ 1143.529690][ T2029] veth0_to_bridge: entered promiscuous mode [ 1143.541207][ T2041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9157'. [ 1143.590328][ T2029] bridge_slave_0: entered promiscuous mode [ 1143.597961][ T2029] veth0_to_bond: entered promiscuous mode [ 1143.598494][ T2029] bond_slave_0: entered promiscuous mode [ 1143.598958][ T2029] veth1_to_bond: entered promiscuous mode [ 1143.599428][ T2029] bond_slave_1: entered promiscuous mode [ 1143.599822][ T2029] tipc: Resetting bearer [ 1143.599865][ T2029] veth1_to_team: entered promiscuous mode [ 1143.600311][ T2029] team_slave_1: entered promiscuous mode [ 1143.635189][ T2029] veth0_to_batadv: entered promiscuous mode [ 1143.635710][ T2029] batadv_slave_0: entered promiscuous mode [ 1143.636185][ T2029] xfrm0: entered promiscuous mode [ 1143.636616][ T2029] veth0_to_hsr: entered promiscuous mode [ 1143.658223][ T10] lo speed is unknown, defaulting to 1000 [ 1143.658248][ T10] syz2: Port: 1 Link DOWN [ 1143.730095][ T2045] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9156'. [ 1144.063758][ T2057] netlink: 'syz.1.9159': attribute type 1 has an invalid length. [ 1144.306062][ T2064] netlink: 'syz.2.9163': attribute type 1 has an invalid length. [ 1144.408976][ T2064] 8021q: adding VLAN 0 to HW filter on device bond30 [ 1144.850289][ T2076] syzkaller1: entered promiscuous mode [ 1144.850317][ T2076] syzkaller1: entered allmulticast mode [ 1145.033419][ T2090] block nbd17: server does not support multiple connections per device. [ 1145.033744][ T2090] block nbd17: shutting down sockets [ 1145.088658][ T2097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9168'. [ 1145.351669][ T2090] ------------[ cut here ]------------ [ 1145.351687][ T2090] sdata->crypto_tx_tailroom_needed_cnt != master->crypto_tx_tailroom_needed_cnt [ 1145.351700][ T2090] WARNING: net/mac80211/key.c:1172 at ieee80211_free_keys+0x56e/0x680, CPU#1: syz.1.9167/2090 [ 1145.379277][ T2090] Modules linked in: [ 1145.383337][ T2090] CPU: 1 UID: 0 PID: 2090 Comm: syz.1.9167 Not tainted syzkaller #0 PREEMPT(full) [ 1145.394250][ T2090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1145.404865][ T2090] RIP: 0010:ieee80211_free_keys+0x56e/0x680 [ 1145.411045][ T2090] Code: 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 47 92 86 00 cc e8 91 23 66 f6 90 0f 0b 90 e9 22 fc ff ff e8 83 23 66 f6 90 <0f> 0b 90 e9 30 fe ff ff e8 75 23 66 f6 e9 1b fe ff ff 48 c7 c1 80 [ 1145.431262][ T2090] RSP: 0018:ffffc90004c17560 EFLAGS: 00010283 [ 1145.437506][ T2090] RAX: ffffffff8b61a72d RBX: ffff88804d9acec0 RCX: 0000000000080000 [ 1145.445872][ T2090] RDX: ffffc90005a41000 RSI: 000000000000f93a RDI: 000000000000f93b [ 1145.454241][ T2090] RBP: ffffc90004c17630 R08: ffffc90004c17347 R09: 1ffff92000982e68 [ 1145.462444][ T2090] R10: dffffc0000000000 R11: fffff52000982e69 R12: dffffc0000000000 [ 1145.470457][ T2090] R13: 1ffff92000982eb4 R14: 0000000000000001 R15: 0000000000000000 [ 1145.478907][ T2090] FS: 00007fd4c6fea6c0(0000) GS:ffff888124dd1000(0000) knlGS:0000000000000000 [ 1145.488361][ T2090] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1145.495212][ T2090] CR2: 00007fc85715da08 CR3: 000000007e6d4000 CR4: 00000000003526f0 [ 1145.503424][ T2090] Call Trace: [ 1145.506812][ T2090] [ 1145.509874][ T2090] ? __pfx_ieee80211_free_keys+0x10/0x10 [ 1145.515731][ T2090] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1145.521771][ T2090] ieee80211_do_stop+0x11fd/0x2410 [ 1145.527043][ T2090] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 1145.532696][ T2090] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1145.538569][ T2090] ieee80211_stop+0x1ab/0x200 [ 1145.543413][ T2090] ? __pfx_ieee80211_stop+0x10/0x10 [ 1145.548754][ T2090] __dev_close_many+0x366/0x6e0 [ 1145.553960][ T2090] ? kasan_save_track+0x4f/0x80 [ 1145.559008][ T2090] ? kasan_save_track+0x3e/0x80 [ 1145.564197][ T2090] ? __pfx___dev_close_many+0x10/0x10 [ 1145.569627][ T2090] ? __mutex_trylock_common+0x15f/0x270 [ 1145.575383][ T2090] netif_close_many+0x249/0x660 [ 1145.580311][ T2090] ? rcu_is_watching+0x16/0xb0 [ 1145.585265][ T2090] ? __pfx_netif_close_many+0x10/0x10 [ 1145.591019][ T2090] ? __mutex_lock+0x30b/0x1550 [ 1145.595848][ T2090] ? rfkill_fill_event+0x29c/0x3f0 [ 1145.601337][ T2090] netif_close+0x160/0x220 [ 1145.605804][ T2090] ? __pfx_netif_close+0x10/0x10 [ 1145.610912][ T2090] ? __pfx___mutex_lock+0x10/0x10 [ 1145.615990][ T2090] ? do_raw_spin_lock+0x12b/0x2f0 [ 1145.621159][ T2090] dev_close+0xf7/0x210 [ 1145.625434][ T2090] cfg80211_shutdown_all_interfaces+0xb0/0x220 [ 1145.632462][ T2090] ? __pfx_cfg80211_rfkill_set_block+0x10/0x10 [ 1145.638681][ T2090] cfg80211_rfkill_set_block+0x2d/0x50 [ 1145.644476][ T2090] rfkill_set_block+0x19f/0x4d0 [ 1145.649467][ T2090] rfkill_fop_write+0x43b/0x560 [ 1145.654487][ T2090] ? common_file_perm+0x20e/0x2b0 [ 1145.659668][ T2090] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1145.665795][ T2090] ? security_file_permission+0x10/0x260 [ 1145.671663][ T2090] ? rw_verify_area+0x203/0x4c0 [ 1145.676570][ T2090] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1145.682147][ T2090] vfs_write+0x296/0xba0 [ 1145.686444][ T2090] ? __pfx_vfs_write+0x10/0x10 [ 1145.691396][ T2090] ? __fget_files+0x2a/0x420 [ 1145.696240][ T2090] ? __fget_files+0x2a/0x420 [ 1145.701011][ T2090] ? __fget_files+0x3a2/0x420 [ 1145.705744][ T2090] ? __fget_files+0x2a/0x420 [ 1145.710399][ T2090] ksys_write+0x150/0x270 [ 1145.714890][ T2090] ? __pfx_ksys_write+0x10/0x10 [ 1145.719814][ T2090] do_syscall_64+0x166/0x520 [ 1145.724588][ T2090] ? trace_irq_disable+0x3b/0x140 [ 1145.729687][ T2090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.735925][ T2090] ? clear_bhb_loop+0x70/0xc0 [ 1145.740658][ T2090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.746714][ T2090] RIP: 0033:0x7fd4c619e159 [ 1145.751231][ T2090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1145.770948][ T2090] RSP: 002b:00007fd4c6fea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1145.779382][ T2090] RAX: ffffffffffffffda RBX: 00007fd4c6425fa0 RCX: 00007fd4c619e159 [ 1145.787520][ T2090] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000009 [ 1145.796307][ T2090] RBP: 00007fd4c623503b R08: 0000000000000000 R09: 0000000000000000 [ 1145.804682][ T2090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1145.813082][ T2090] R13: 00007fd4c6426038 R14: 00007fd4c6425fa0 R15: 00007ffe680579d8 [ 1145.821274][ T2090] [ 1145.824341][ T2090] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1145.831652][ T2090] CPU: 1 UID: 0 PID: 2090 Comm: syz.1.9167 Not tainted syzkaller #0 PREEMPT(full) [ 1145.841089][ T2090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1145.851164][ T2090] Call Trace: [ 1145.854460][ T2090] [ 1145.857397][ T2090] vpanic+0x56d/0xa60 [ 1145.861449][ T2090] ? __pfx__printk+0x10/0x10 [ 1145.866046][ T2090] ? __pfx_vpanic+0x10/0x10 [ 1145.870575][ T2090] ? is_bpf_text_address+0x292/0x2b0 [ 1145.875966][ T2090] ? is_bpf_text_address+0x26/0x2b0 [ 1145.881192][ T2090] panic+0xc5/0xd0 [ 1145.884942][ T2090] ? __pfx_panic+0x10/0x10 [ 1145.889392][ T2090] __warn+0x315/0x4c0 [ 1145.893386][ T2090] ? ieee80211_free_keys+0x56e/0x680 [ 1145.898687][ T2090] ? ieee80211_free_keys+0x56e/0x680 [ 1145.903985][ T2090] __report_bug+0x276/0x570 [ 1145.908584][ T2090] ? ieee80211_free_keys+0x56e/0x680 [ 1145.913884][ T2090] ? __pfx___report_bug+0x10/0x10 [ 1145.918920][ T2090] ? schedule+0x16e/0x2b0 [ 1145.923258][ T2090] ? synchronize_rcu_expedited+0x663/0x770 [ 1145.929080][ T2090] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 1145.935249][ T2090] ? ieee80211_free_keys+0x56e/0x680 [ 1145.940559][ T2090] report_bug+0x16b/0x220 [ 1145.944902][ T2090] ? ieee80211_free_keys+0x56e/0x680 [ 1145.950223][ T2090] ? ieee80211_free_keys+0x570/0x680 [ 1145.955522][ T2090] handle_bug+0x9c/0x200 [ 1145.959781][ T2090] exc_invalid_op+0x1a/0x50 [ 1145.964298][ T2090] asm_exc_invalid_op+0x1a/0x20 [ 1145.969155][ T2090] RIP: 0010:ieee80211_free_keys+0x56e/0x680 [ 1145.975060][ T2090] Code: 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 47 92 86 00 cc e8 91 23 66 f6 90 0f 0b 90 e9 22 fc ff ff e8 83 23 66 f6 90 <0f> 0b 90 e9 30 fe ff ff e8 75 23 66 f6 e9 1b fe ff ff 48 c7 c1 80 [ 1145.994672][ T2090] RSP: 0018:ffffc90004c17560 EFLAGS: 00010283 [ 1146.000756][ T2090] RAX: ffffffff8b61a72d RBX: ffff88804d9acec0 RCX: 0000000000080000 [ 1146.008740][ T2090] RDX: ffffc90005a41000 RSI: 000000000000f93a RDI: 000000000000f93b [ 1146.016717][ T2090] RBP: ffffc90004c17630 R08: ffffc90004c17347 R09: 1ffff92000982e68 [ 1146.024696][ T2090] R10: dffffc0000000000 R11: fffff52000982e69 R12: dffffc0000000000 [ 1146.032688][ T2090] R13: 1ffff92000982eb4 R14: 0000000000000001 R15: 0000000000000000 [ 1146.040673][ T2090] ? ieee80211_free_keys+0x56d/0x680 [ 1146.045989][ T2090] ? __pfx_ieee80211_free_keys+0x10/0x10 [ 1146.051644][ T2090] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1146.057471][ T2090] ieee80211_do_stop+0x11fd/0x2410 [ 1146.062613][ T2090] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 1146.068104][ T2090] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1146.073930][ T2090] ieee80211_stop+0x1ab/0x200 [ 1146.078622][ T2090] ? __pfx_ieee80211_stop+0x10/0x10 [ 1146.083840][ T2090] __dev_close_many+0x366/0x6e0 [ 1146.088708][ T2090] ? kasan_save_track+0x4f/0x80 [ 1146.093572][ T2090] ? kasan_save_track+0x3e/0x80 [ 1146.098435][ T2090] ? __pfx___dev_close_many+0x10/0x10 [ 1146.103832][ T2090] ? __mutex_trylock_common+0x15f/0x270 [ 1146.109405][ T2090] netif_close_many+0x249/0x660 [ 1146.114265][ T2090] ? rcu_is_watching+0x16/0xb0 [ 1146.119045][ T2090] ? __pfx_netif_close_many+0x10/0x10 [ 1146.124421][ T2090] ? __mutex_lock+0x30b/0x1550 [ 1146.129200][ T2090] ? rfkill_fill_event+0x29c/0x3f0 [ 1146.134421][ T2090] netif_close+0x160/0x220 [ 1146.138864][ T2090] ? __pfx_netif_close+0x10/0x10 [ 1146.143809][ T2090] ? __pfx___mutex_lock+0x10/0x10 [ 1146.148854][ T2090] ? do_raw_spin_lock+0x12b/0x2f0 [ 1146.153901][ T2090] dev_close+0xf7/0x210 [ 1146.158069][ T2090] cfg80211_shutdown_all_interfaces+0xb0/0x220 [ 1146.164240][ T2090] ? __pfx_cfg80211_rfkill_set_block+0x10/0x10 [ 1146.170409][ T2090] cfg80211_rfkill_set_block+0x2d/0x50 [ 1146.175885][ T2090] rfkill_set_block+0x19f/0x4d0 [ 1146.180764][ T2090] rfkill_fop_write+0x43b/0x560 [ 1146.185639][ T2090] ? common_file_perm+0x20e/0x2b0 [ 1146.190679][ T2090] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1146.196058][ T2090] ? security_file_permission+0x10/0x260 [ 1146.201709][ T2090] ? rw_verify_area+0x203/0x4c0 [ 1146.206575][ T2090] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1146.211958][ T2090] vfs_write+0x296/0xba0 [ 1146.216224][ T2090] ? __pfx_vfs_write+0x10/0x10 [ 1146.221005][ T2090] ? __fget_files+0x2a/0x420 [ 1146.225613][ T2090] ? __fget_files+0x2a/0x420 [ 1146.230214][ T2090] ? __fget_files+0x3a2/0x420 [ 1146.234904][ T2090] ? __fget_files+0x2a/0x420 [ 1146.239513][ T2090] ksys_write+0x150/0x270 [ 1146.243864][ T2090] ? __pfx_ksys_write+0x10/0x10 [ 1146.248740][ T2090] do_syscall_64+0x166/0x520 [ 1146.253343][ T2090] ? trace_irq_disable+0x3b/0x140 [ 1146.258380][ T2090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.264454][ T2090] ? clear_bhb_loop+0x70/0xc0 [ 1146.269141][ T2090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.275045][ T2090] RIP: 0033:0x7fd4c619e159 [ 1146.279471][ T2090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1146.299084][ T2090] RSP: 002b:00007fd4c6fea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1146.307521][ T2090] RAX: ffffffffffffffda RBX: 00007fd4c6425fa0 RCX: 00007fd4c619e159 [ 1146.315504][ T2090] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000009 [ 1146.323481][ T2090] RBP: 00007fd4c623503b R08: 0000000000000000 R09: 0000000000000000 [ 1146.331462][ T2090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1146.339443][ T2090] R13: 00007fd4c6426038 R14: 00007fd4c6425fa0 R15: 00007ffe680579d8 [ 1146.347615][ T2090] [ 1146.350800][ T2090] Kernel Offset: disabled [ 1146.355130][ T2090] Rebooting in 86400 seconds..