last executing test programs: 35.807351071s ago: executing program 3 (id=13927): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x4b}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000140)=[@in={0x2, 0x4e24, @broadcast}], 0x10) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000680)) socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018010000202073250000000000202020731af8ff00000000bfa100000000000007010000f8fffffdb702000008000000b703000000000028850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x9}, 0x94) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r2, 0x0, 0x20004805) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x7d, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e20, 0xfffff496, @mcast1}}, 0x5, 0x400}, 0x90) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="100008000000ffdbdf25080000c581003b00ff0f0000050035000400000008003200f8ffffff080034000800000008002c00ff00000008002c00af0000000a9e41f4b980c2000000000900bdb738f08baf971c629c4f4a1efc7efa4e5235e944ea2f"], 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x14) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_udp_int(r7, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r7, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r7, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) r10 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r10, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0x200008, @dev={0xfe, 0x80, '\x00', 0x2c}}, 0x1c, 0x0}}], 0x1, 0xc040) writev(r10, &(0x7f0000000440)=[{&(0x7f0000000180)="4889d18c", 0xfdef}], 0x1) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 35.280143443s ago: executing program 3 (id=13931): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000)={0x4d1d}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x5c}}, 0x0) sendto$inet6(r1, &(0x7f0000000340)="877413cebae8e93cd4a3875d1daef51ca2b2c20d2d24847e01ca5c8b88ef4e3948abd00689cda1cf2d6be6c97862a0191e917720df083ff967993c96dd2634861ab468b7b3b2ad8fcaf59c48f4421d4ce0db656df8803fc64d9835fa2595daf7f2ded94390c0a969966916437a1796eb9f3b24f43f71afdaa918369c6f5651cd6650182f7d7a3f059b224a12ba707b3ef32406", 0x93, 0x4000000, &(0x7f0000000400)={0xa, 0x4e20, 0x6, @private1, 0x6}, 0x1c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r3) sendmsg$NFC_CMD_LLC_GET_PARAMS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x6}, 0x4) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000001600)) 34.356799583s ago: executing program 3 (id=13945): openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000240)='devices.deny\x00', 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r0, 0x0) r1 = socket$inet(0x2, 0x200000003, 0x6) getsockopt$inet_buf(r1, 0x0, 0x50, 0x0, &(0x7f00000000c0)) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)="39944aacb312b5d3296bb48409d023a6da53652e28a7303cf789bce73ffb2f0e3ebe95d6e42a1d49fcd4e2467c1a7f5c759b9fabbb0e4a30ae7195134465eaa3863ada", 0x43) 34.196535664s ago: executing program 3 (id=13948): close(0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuacct.usage_user\x00', 0x26e1, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000500)={r3, &(0x7f0000000400)='@&#\xce}\'*,@\x00', 0x22280, &(0x7f0000000440)={@align=0xd, {0x401, 0xed37, 0x124, 0x1000}}, 0x2, &(0x7f0000000480)={@_ha_fsid}, &(0x7f00000004c0)=0x6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x18, &(0x7f0000000300)=@raw=[@ldst={0x3, 0x2, 0x1, 0xb, 0x5, 0xffffffffffffffc0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @generic={0x7, 0x3, 0x6, 0xfffa, 0xc5}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @alu={0x4, 0x0, 0xd, 0x9, 0x8, 0xffffffffffffffc0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], &(0x7f00000003c0)='GPL\x00', 0x800, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000006c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x3, 0xf, 0x400000, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f00000002c0), &(0x7f0000000240)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff0307680426b1929e14f08800", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, 0x2f) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x5}]}}}]}, 0x40}}, 0x4800) ioctl$OCFS2_IOC_RESVSP(r5, 0x40305828, &(0x7f00000000c0)={0x2, 0x1, 0x406, 0x5, 0xffff, 0xfffffffb}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe326c2ed0a432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r6, 0x26}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r7, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 33.784840288s ago: executing program 3 (id=13950): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"/414, @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) write$nci(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="610601e004"], 0xd) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x82, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 32.093109212s ago: executing program 3 (id=13971): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xfff3}, {0x5, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x200001d4}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0x10448) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4) getsockopt$inet6_buf(r9, 0x29, 0x6, &(0x7f0000001500)=""/9, &(0x7f0000000240)=0x9) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r5}, &(0x7f00000003c0), &(0x7f0000000400)='%ps \x00'}, 0x20) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[], 0x6) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0) r11 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r11, 0x6b, 0x4, 0xffffffffffffffff, &(0x7f0000000080)) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2) 16.951917963s ago: executing program 32 (id=13971): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xfff3}, {0x5, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x200001d4}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0x10448) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4) getsockopt$inet6_buf(r9, 0x29, 0x6, &(0x7f0000001500)=""/9, &(0x7f0000000240)=0x9) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r5}, &(0x7f00000003c0), &(0x7f0000000400)='%ps \x00'}, 0x20) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[], 0x6) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0) r11 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r11, 0x6b, 0x4, 0xffffffffffffffff, &(0x7f0000000080)) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2) 6.574247758s ago: executing program 2 (id=14242): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, 0x0, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000003ac0)="bb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='Z', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)='x', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000f40)="11", 0x1}], 0x1}}], 0x4, 0x6085094) sendmsg$nl_route(r0, 0x0, 0x8030) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000380)={r1, &(0x7f00000000c0)='\x00', 0x4002, &(0x7f0000000100)={@align, {0x6, 0xff, 0x7, 0x8000000000000001}}, 0xa, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0xe3}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0x0, 0x0, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000003c0)={r5, @empty, @local}, 0xc) r6 = socket(0x2, 0xa, 0x300) sendmsg$NFQNL_MSG_VERDICT(r6, &(0x7f0000000740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4001) syz_emit_ethernet(0x4e, &(0x7f0000001000)={@random="d9ea693249ca", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[@routing={0x0, 0x0, 0x2, 0x5}], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0xec, 0x2, 0x4, 0x2}}}}}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x8042) r8 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xfffffff7}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="2400000000000000290000000200000000000000000000000000000000010000ac"], 0x28}}], 0x1, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x64, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x100}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x9}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 5.652508664s ago: executing program 2 (id=14259): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000003008000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000003c0)}], 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0xfc}}, 0x0) writev(r4, &(0x7f0000001640)=[{&(0x7f0000000240)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}], 0x1) getpeername$l2tp(r3, 0x0, &(0x7f0000000100)) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xffe0}}}, 0x24}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x0) 5.413154826s ago: executing program 2 (id=14262): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x20}, 0x4000) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4811}, 0x20000801) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) (async) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x74, 0x10, 0x403, 0x278bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90606}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x8, 0x18}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x26}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x400, 0x84}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x74}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8000, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000854) 5.269200008s ago: executing program 2 (id=14263): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9defcb4}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) getsockopt(r0, 0x1, 0xd, &(0x7f0000000180)=""/120, &(0x7f0000000200)=0x78) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0xffffffff, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x2a060}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x8}]}, 0x3c}}, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) 1.968032477s ago: executing program 5 (id=14293): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "0cbeb67c876b6de6", "dec5441e1fbf4ca771bbdfa10bf4708a", "2ce23716", "afe9312ecf5bb974"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) shutdown(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000005000000000095000000000000e6c9fb5c2e6b"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) 1.827719891s ago: executing program 5 (id=14296): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c0001800600060086dd"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0x22020600) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES16=r8], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r10, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r9}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r11}, &(0x7f0000000100)=0x2, &(0x7f00000005c0)=r9}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r10, &(0x7f0000000100)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="e50002000000000071113d00000000008510000002000000850000007d00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffdffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r12, 0x4) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1705, 0x200feff}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc041) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) 1.762498419s ago: executing program 1 (id=14297): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000006000000000000000000000203000000000000000000000904000000000000000000000200000000040000000000000f01000000000000005f"], 0x0, 0x4e}, 0x28) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0xfffffffe, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dd2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f0000004e00)=ANY=[], 0x2300}], 0x2}, 0x200408d0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="016f00f60100270000002700000045", @ANYRES32=0x41424344], 0x4a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000055000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4509c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a900d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a3c0db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848022e8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0000000000000000000000000001545f0ec539c3b58facd2f62dc3307a6c91d6b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) 1.197272689s ago: executing program 5 (id=14298): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x373, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000300)=r1, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r2, 0x0, r4, 0x0, 0x100000000, 0x4) vmsplice(r3, &(0x7f00000003c0)=[{&(0x7f00000002c0)="22879d4a76", 0x5}, {&(0x7f0000000200)="ea1060", 0x3}, {&(0x7f0000000240)="43e96c", 0x3}], 0x3, 0x3) r5 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0xf8, 0x6, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, @private0, 0x1, 0x10, 0xff, 0x2}}) bind$xdp(r5, &(0x7f00000004c0)={0x2c, 0x1, r6, 0x14, r4}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r7, 0x0, 0x0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0xfffffffffffff4fb, 0x70bd25, 0x25de59f7, {0x0, 0x0, 0x0, 0x0, 0x3833, 0x42c30}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20004800) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) 1.097201573s ago: executing program 5 (id=14301): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r0}) sendmmsg$inet(r1, &(0x7f00000028c0)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000280)}, {&(0x7f0000000400)="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", 0xc31}], 0x2}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001440)="85ac6755b3764d9d8071a63907858eec8443bec7adaaea2c917ac41790a95d62511755a808b50539fb719daae0341b7d172229c58deb7f2d95c793aee3365bd04cc81c838294ad5237c74cd19b3ea8431a190ea1caf0524e623f56791d2d55bf1a24c7c7b42198afd133af01bbbd167d04159bceb80648e2e740f1d58b762d50ed", 0x81}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40) 1.029141648s ago: executing program 4 (id=14302): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0xe}, {0x8}, {0xe}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000001, 0xc3072, 0xffffffffffffffff, 0x3000000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c40)=ANY=[], 0x50}}, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0x1, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}, @TCA_CHAIN={0x8, 0xb, 0xf382}]}, 0x48}}, 0x4000) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 1.027740853s ago: executing program 0 (id=14303): r0 = socket$kcm(0x10, 0x400000002, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000600)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r1}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r4}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r3}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r4, 0xffffffffffffffff}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, &(0x7f0000000000), &(0x7f0000000340)=r3}, 0x20) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r6}, 0xc) recvmsg$kcm(r0, &(0x7f0000006480)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000034c0)=""/4092, 0xffc}, {&(0x7f0000000640)=""/129, 0x81}, {&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f0000000c00)=""/4083, 0xff3}, {&(0x7f0000000480)=""/66, 0x42}, {&(0x7f00000002c0)=""/35, 0x23}], 0x6}, 0x0) (async) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000440), 0x10) listen(r7, 0xfffffffe) (async) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x77}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8a}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) writev(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)="cf71df", 0x3}, {&(0x7f00000005c0)="848593bd4ff4b8296deaffc0e25673a91856c5b454d6741891c4c82cbd2eb171584e25ce293fedee9a533ebc33f32b37c13ac552458e28c4fab7052c5ec2938ad16b7ddbe4da276d981cb3a3a459ac5d6f7a7351b493b52236dd60d0d24947391e0ffd661d8906621cf77a3c6f59180523b475b62113dc87dba56b187a54cb0db8b4a4596a568e3891700256372043a5fd646de19b361313680ce84f85f958a5a1a206152b960ad3c017f70f6e0055b1303890ed0f13510b6d0d696874e3bb542665c697de73f8eac44410a73afb1a2de2779576b79ba09bbaa76a1ce249ef1a40436d017e559c3f22c25a636e00fd81e4e1ddd4b661431444ca034f0fe533402979411d91508886", 0x108}], 0x2) r9 = accept4$unix(r7, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}], 0x1}}], 0x1, 0x2, 0x0) (async) r10 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r10, 0x6a, 0x4, 0x1, 0x27) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x200, 0x1}, &(0x7f0000000280)=0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fcffffff00000000691c6db28c43ed", @ANYRES32, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$team(&(0x7f0000000540), r11) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x58, r12, 0x1, 0x70bd29, 0x25dfdbfd, {}, [{{0x8, 0x1, r13}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x36}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4080}, 0x8010) socket$kcm(0x2, 0x3, 0x2) 1.006835622s ago: executing program 5 (id=14304): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000c00)=[{&(0x7f0000000100)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000440)="d5a96e02cfbf62", 0x7}], 0x1, 0x0, 0x0, 0x800}], 0x1, 0xc000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000240)=0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f0000000280)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) sendmmsg$unix(r3, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES8=r4, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x38, 0x4005c}}], 0x1, 0x805) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={r1, r4, r6}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="720ac4ff000000007110c4000000000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010105}]}, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000003c0)={r8, 0x1}, 0x8) select(0x0, 0x0, &(0x7f0000000400)={0xc38, 0x3, 0xd, 0x6, 0xffff, 0x101, 0x2f0a0ca4, 0x6}, 0x0, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r9, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r9, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) unshare(0x2c020400) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 923.223139ms ago: executing program 1 (id=14305): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000001180)=[{&(0x7f0000000080)="bddbceb17fc33032119c04b8c2a00ee04b3e55ff53f1efebd4ffb33c64680ea558fbbd83c4da32f465403c14b0b7683b6a661cc2707748ad37bef62e6039f3e3f365e7506716aa04cb74f44c69bd26d6894d5a527512c9e34f6db3171433d62b3968464dba22fc7286395daf0a2373eaad528a4340560381c12d4175a94ee99db54739dc1873dbce877141d3cb7c158f6a4e73b6923feb5666d5131c548fb7f9c722ceae9c9f08dc", 0xa8}], 0x1) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3", 0x30}], 0x3}], 0x1, 0x40800) recvmmsg$unix(r2, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000600)=""/56, 0x38}, {&(0x7f0000000740)=""/83, 0x53}], 0x2}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000c80)=""/93, 0x5d}], 0x1}}], 0x2, 0x10001, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000200)=0x4) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0x2000004) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000240)={0xffffffffffffffff, 0x20, '\x00', 0x1, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0]}) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000340)="00214717a70700000000030600710a5e31163ceb950471200400f32a6036b8000500000000000000ffff03425d4d50e7182ce0", 0x33}], 0x1, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 861.622209ms ago: executing program 0 (id=14306): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10800}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}]}}}]}, 0x48}}, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x6) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'ipvlan1\x00', @link_local}) close(0x4) 786.981037ms ago: executing program 1 (id=14307): gettid() setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x31, &(0x7f0000001600), 0x4) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/233, &(0x7f0000000240)=0xe9) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], 0xec}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="400000001000010026bd7000fcdbdf25000000", @ANYRES32=0x0, @ANYBLOB="621d020018050000140003007465616d3000000000000000000000000a0001"], 0x40}}, 0x20084084) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000001900000000000000000060b55aa9f03df4ab97e4a10f59ab84e3af684385cefaccfe96267c66740f5327a8315bae694e0c0ec615ea14a571e4d1bd924b861a56bf26dc82dca0055c20f4010f729873a3bb02b6b18dff9f2efbe0cd66003159a832495fccd466c65fb8974dc395620c05ec8b7c0d367c6753467f77e8c744bd722e0f3ea33d3435a8dd068a7c13c279071a7e716374", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="5c0100001000010037a3ffff000188e1ff0000000000337dd3f8000001fc020000000000000000000000000001000107144e23004c7f0000003a000000144d40e7713ea482854c1407f57398fd33fc95e3327b084b7f9fde58ef0be5c3bd449ba060a6a3b988c98feaad1601855fd9ee4a67167adb37bb90cb0b9cd9b21f17c3b38a7193", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r5, 0xc0385868, &(0x7f00000005c0)={r2, &(0x7f0000000500)='\x00\xe7\x95\xdd\xa5\b\xe0=\x88DYi{\x10\xff\xff*\xf8\x87Y5#\x13\xecs\xbeK844w\x0eJX\xb4\b\xf8\x14\xd6\xcd\xf9\xbeG{\xefw\xbd\b\xda\xb7\xad/.a\x01:\xfb\x84_\x00\x00\x00', 0x200800, &(0x7f0000000400)={@_ha_fsid={[0x5, 0x598]}, {0x4, 0x7d, 0x40a285}}, 0x6, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000480)=0x7f}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0x8}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x11, &(0x7f0000000f40)=ANY=[@ANYBLOB="1800000000000000000000000008000018110000bd6bbccd257c3f02707e810000002ab2fdf3106894c75511114ecc4948cb1eb3fd5b8edbc79e81f21d881f1865c2c34ebefe16050b37bd3ee1fc698028", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018340000010000000000000000000000bf91000000000000b7020000000000008500000085000000b700"], &(0x7f0000000700)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0xb, 0xffff, 0x5}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000007c0)=[r4, r3, r3, r4, r4, r4, r3], &(0x7f0000000800)=[{0x2, 0x1, 0xb, 0xc}, {0x0, 0x4, 0x9, 0x9}, {0x5, 0x3, 0x8, 0xc}, {0x2, 0x2, 0xb, 0x1}], 0x10, 0x68}, 0x94) ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, 0x2c, 0x107, 0xf0bd2b, 0x25dfdbff, {0x4, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x73, 0x0, 0x0, @pid}]}, @nested={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x12f}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) r8 = socket(0x11, 0x3, 0x0) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000000)=@req3={0x10000, 0x1, 0x100, 0x100, 0x100, 0x0, 0x4}, 0xfffffffffffffdfb) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r8, 0x84, 0x15, &(0x7f0000000340)={0x2}, 0x1) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r7) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f0000000900)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r9, 0x1, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x5c, 0xb, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) 705.276402ms ago: executing program 4 (id=14308): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2a}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r1}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00357428bd7000fed3df2502000000", @ANYRES32=r4, @ANYBLOB="080026040a000100000000000000000008000f0005"], 0x30}, 0x1, 0x0, 0x0, 0x240400c0}, 0x80c0) connect$phonet_pipe(r2, &(0x7f00000001c0)={0x23, 0x5, 0x1, 0x4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000540)="00000000000000008a7e84d67aa8", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 649.210231ms ago: executing program 0 (id=14309): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1a28a9bbe50b44e38ca8b288b283218b225e16caeb7b9d7513fbdcd28da028a132d9a7bb7efb92de57d2078924b17082a001f3e19903938984e62fabcf2ce5ad5bc0656d049945e320a0b938882a834f02e1f9803250df180cc02e361a7fdb35fb66312c48fd75ceccf8f28f6ae3b7c9c6787b1cdcc7ee1d883973fd9ecc1c398f187cc119dd12fd457d65e696df3d55d9df1a2b072f0d938f41455fa596dc5b444aaac2280a22f880bd7152183cda135fa4929562570232fe2c9d02"], 0x7c}, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f0000000240)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020001030900020073797a310000000008000440000000000900010073797a30000000000800034000000003"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}}}, &(0x7f0000000380)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@empty, @in=@multicast1, 0x4e20, 0x0, 0x4e20, 0x6, 0x2, 0x80, 0x30, 0x6c, r3, r4}, {0x9, 0x6, 0x53, 0xffff, 0xe67, 0x0, 0x7, 0x81}, {0x7ae8, 0x0, 0x9, 0x1}, 0xb383, 0x6e6bb4, 0x2, 0x1, 0x2, 0x3}, {{@in6=@private2, 0x4d2, 0xff}, 0xa, @in=@broadcast, 0x3503, 0x4, 0x0, 0x7, 0x5, 0x3, 0x5e}}, 0xe8) 648.546057ms ago: executing program 1 (id=14310): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa08640009003f0caa30ef9d27a470c58bfd27cfb90bc04a56b90d91ba554ad97e94a412b815f4f4d86d15aac48aac16f21bd760b41235fdf9b2df91d71e02d97683454771cde66cf1ce9c3f99d8c72485b72704a4157238946e14a48aed9a02"], 0x48}}, 0x0) (async) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x20000000) (async) sendmmsg(r0, &(0x7f0000000000), 0x400000000000047, 0x0) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000000), 0x4) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4, 0xf}, {0xe, 0xfff3}, {0x9, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x3}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES8=r1, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x40004}, 0x4008840) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) (async) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRESDEC=r3], &(0x7f00000000c0)='GPL\x00'}, 0x94) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r7, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c0000000002010200000000000000000100000708000440000008002acf16453aa758292ad884dbe1b101c7a3497c45f87023f6892d5c563ee49a0207487f4cbe930e99797d9c167ee5c928facb371c1d0025c14b4fc42b428aa0029518"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000081) (async) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) sendfile(r9, r10, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3) (async) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) (async) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "50b82a61641e535b", "c358af365ff0b4eada5e3b2588d8319d", "02b12d1b", "b9e36b52a0b097d0"}, 0x28) 582.6224ms ago: executing program 0 (id=14311): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000080)={0x23, 0x81}, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r2, &(0x7f0000000040)={0x23, 0x14}, 0x10) bind$phonet(r1, &(0x7f0000000000)={0x23, 0x4, 0x1}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000002c0017010000000000000000037c000008962e47ed381178ad116092bf06dae9"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000180)="ebe3a0f939dcd27e671a28d8b95d7ad9c882e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa69", 0x42}], 0x2, &(0x7f0000000940)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x28044854}], 0x1, 0x800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/66, 0x42}, {&(0x7f0000000200)=""/61, 0x3d}], 0x2}, 0x151) r7 = accept4(r0, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000280)=0x80, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r9 = accept(r3, &(0x7f0000000340)=@generic, &(0x7f00000003c0)=0x80) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r12 = socket(0x25, 0x3, 0x8) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xb, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r13 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r11, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000000640)={{0xffffffffffffffff, &(0x7f0000000400)='\x00', 0x102, &(0x7f0000000440)={@align=0x30a8, {0x2, 0x3, 0x7fff, 0x1}}, 0x251f, &(0x7f00000004c0), &(0x7f0000000500)=0x4}, {[0x0, 0x10000, 0xb32, 0xff]}, 0x3, 0xfe, &(0x7f0000000540)=""/254}) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1e, 0x802, 0x4, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x90, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x70, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r15}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r16}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x401}]}, 0x90}, 0x1, 0x0, 0x0, 0x448d0}, 0x4) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b, 0x30020}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xe}]}}}]}, 0x3c}}, 0x0) 581.802064ms ago: executing program 4 (id=14312): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x6c, 0x30, 0x1, 0x70bd25, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x9, 0x4, 0x7, 0x8}, 0x4}}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f00000000c0)=ANY=[], &(0x7f0000000500)=""/4096, 0xc8, 0x1000, 0x1, 0x3d6af909}, 0x28) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="7912b8000000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002000000760300000ee60060bf050000000000003c6500bf000000006507f9ff01000000070700004cdfffff1e75040000000000bf54000000000000070400000400f9ffad43010000000000d5000000000000000500000000000000950000000000000032410000000000000054bb12dc8c27df8ecfc7bdd2d17f2f1754558f22dd399703d6c4f6f3be0b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf7a13ba1fcf1111ce4fc0d742a81762bab8395fa64810b5b40d893ea8fe0ffffff7f1b546cad3f1d5af65706fd4f68795cce6cf16ab689b555202da2e0ec2871a51445dc8da39e5b0ab71ca9b901627b562ed84b026002d4519af619e3cca4d69e0dee080006774a8f3e691700ec88158f02001b0000c81c8b297dff0445a13d0045fb3cda32a673a6bb55d8c80800dce431e56723888fb126a1403d2b63f16fb2ad9bc117aba7cbebe174aba210d739a018f9bbec63222d20cedbc4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b3156268784f2af9e4bcf8b07a10d6735154be1602f9dd1d7d4301e00000000000460bcc5989ec85e3cbcb6bcfaf0000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d0861cd64722cf74686ebfbe2562671cd47840f81d2a8f8f9be3bcd19dc6840aa7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab049b1bd47287cd31cc43ea0ffb567b40407d000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) ioctl$OCFS2_IOC_UNRESVSP(r0, 0x40305829, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x8, 0x0, 0x5}) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x2, 0x0, 0x7, 0x1}, {0x34, 0x29, 0x0, 0xfffff00d}, {0x6, 0x80, 0x0, 0xfffffffc}]}, 0x10) 558.534033ms ago: executing program 1 (id=14313): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x10000000}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX=r3], 0x48}}], 0x2, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x45, 0x3, 0x1, 0x9}, {0x35, 0x36, 0x0, 0x10001}, {0x6, 0xff, 0x0, 0x4}]}, 0x10) 489.298413ms ago: executing program 4 (id=14314): socket(0x28, 0x5, 0x0) (async) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (async) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$MRT6(r0, 0x29, 0xce, &(0x7f00000000c0), &(0x7f0000000140)=0x4) (async) getsockopt$MRT6(r0, 0x29, 0xce, &(0x7f00000000c0), &(0x7f0000000140)=0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000000, 0x39071, 0xffffffffffffffff, 0x65969000) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000001680)=""/256, 0x100, 0x1120, 0x0, 0x0) socket(0x2, 0x80802, 0x0) (async) r3 = socket(0x2, 0x80802, 0x0) sendmsg$inet(r3, &(0x7f0000000a80)={&(0x7f00000007c0)={0x2, 0x4e23, @loopback}, 0x10, 0x0}, 0x1c880) sendmmsg$unix(r3, &(0x7f0000005e80)=[{{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40000005}}, {{&(0x7f0000000a00)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x44800}}], 0x2, 0x0) 468.84385ms ago: executing program 1 (id=14315): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000140)='\\#-+)^*]\'\x00', 0x430002, &(0x7f0000000180)={@align=0xffff, {0x7, 0x8, 0x5}}, 0x5, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f00000002c0)=0x100}) connect$can_bcm(r0, &(0x7f0000000340), 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_ethernet(0x86, &(0x7f0000000080)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts={0x0, 0x2, '\x00', [@ra={0x5, 0x89}, @ra={0x5, 0x2, 0xe}, @jumbo={0xc2, 0x4, 0x55}, @pad1]}]}}}}}}}, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e1d, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000002a80)=[{&(0x7f0000000040)="1b", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) write$cgroup_pid(r6, &(0x7f0000000000), 0xffffff98) splice(r2, 0x0, r6, 0x0, 0x80, 0xe) write(r4, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x2c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x4}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4000080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000090) 433.110781ms ago: executing program 2 (id=14316): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8ac41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$XFS_IOC_DIOINFO(r0, 0x800c581e, &(0x7f0000000000)) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0xfffffe64, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800800080088a8ffff"], 0x3c}}, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r5, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000001100)="3b83dd003faddffc16d382eaabf303f8", 0x10) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) write$tun(r0, &(0x7f00000010c0)=ANY=[@ANYRES8=r6], 0x2e) 419.871724ms ago: executing program 4 (id=14317): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x83, &(0x7f0000000480)={0x0, 0x2}, 0x8) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000180)={r2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x800, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10001}], 0x1c) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f0000000100)) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000101010100"], 0x44}}, 0x4000) recvmmsg(r7, &(0x7f0000006840)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2180, 0x0) 177.2072ms ago: executing program 0 (id=14318): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x2, 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=""/25, 0x19}, 0x8}], 0x1, 0x120, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2ccf3766}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x38, 0x3, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) 127.263136ms ago: executing program 2 (id=14319): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0xa, 0x7ffffffb, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x0, 0x2}, 0x50) (async) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0x10, 0x4) (async) recvmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x0, 0x0) (async) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$'], 0x28}}], 0x1, 0x0) 87.897548ms ago: executing program 4 (id=14320): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x5c, 0x10, 0x1, 0x71bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x7afc5, 0xe8f}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xffffffff, 0xffffffffffff0001}}]}]}]}, 0x5c}}, 0x0) 1.153005ms ago: executing program 0 (id=14321): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x808, 0x12) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r0, r0, 0x2f}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r3, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x17, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 0s ago: executing program 5 (id=14322): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000180)={{0xffffffffffffffff, &(0x7f0000000000)='}**\':\x97\x00', 0x80, &(0x7f0000000040)={@_ha_fsid={[0x386d]}, {0x101, 0x8, 0xffffffff, 0x7f}}, 0x5, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0xa}, {[0x3, 0x2, 0xc, 0xffff]}, 0x6, 0x70, &(0x7f0000000100)=""/112}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000380)={{r1, &(0x7f0000000200)='\x00', 0x2000, &(0x7f0000000240)={@_ha_fsid={[0x9, 0x5d9]}, {0x9, 0x7, 0xb9, 0x7}}, 0x4, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0xaf}, {[0x4, 0x2, 0x6, 0x40]}, 0x8, 0x77, &(0x7f0000000300)=""/119}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000440)=0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@ipv4={""/10, ""/2, @remote}}}, &(0x7f0000000580)=0xe8) sendmsg$nl_generic(r0, &(0x7f00000008c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000880)={&(0x7f00000005c0)={0x284, 0x18, 0x2, 0x70bd2a, 0x25dfdbfc, {0x16}, [@typed={0x8, 0x160, 0x0, 0x0, @pid=r3}, @nested={0x25a, 0xe1, 0x0, 0x1, [@nested={0x4, 0x125}, @typed={0xbd, 0x118, 0x0, 0x0, @binary="98b85b4b707461e88cec2f0dfdefa933e6e6535d9abbba8ffaef0b8cb73432337a8f2e2a11c134c72066dadddc66d357498fe7d116426e1f14084e277f510be3c199253bac6e4b2eb1a14de3e919bda4396beeae5d744f5a5d017fca9283c8bda9c791994dee97df31d5b95aaaa8385e3e86fede1c51dabd9b2411aba1a956367044d0206dfcc9c999b81336b96e2e8a74b551718ac925133f2cc5c84203803fda22f495c26467fcd7c8e603a1079aa8571051e5894d793667"}, @generic="c2dee31a9b5cfee0aa98c5d3fdd702450860eadd3c2ec994fd3f04b1a6173f439e6d7ce46d3ff5d69484e8dd444041006e344a66554106a39d0ca8ec9fae9c2d91e8fd3f413d54b01c229f6af8a26a62b8f96daebdf110db4aa37c8af483bdf6adac94f5dde408ce548652f91c998755541988d4afc4c74c93c5308cb8c2d1b20426137673e48c64f48a1cfae6834a129fcaf65d4ca3a5f857ac0696eb25b52ea2c6dc579cefc45c46417a21d9104254b363c2d78d03a9100281967c8b84988dc86f50f7419a0857a78204", @nested={0x4, 0x126}, @typed={0xc, 0xb0, 0x0, 0x0, @u64=0x5}, @generic="0daa0e57bf00f7707a7914bf9278d0109803e1905c999b37d567b78ace17c5d1ac", @typed={0x8, 0x101, 0x0, 0x0, @uid=r5}, @generic="0d7e81d55d9a753094009dd4fc49f6ba4441e4964ba2ab1130381fa316706265d5376f95fa197777778f640fb001b86738eb0bc69c06eb3ff91069645a73989196de24760629be273d50a98afc228184b30685a680c045f255d94d4c229d2a1951c078fa70be68b862a83b8cf56a791cc804aa582642cec1058d8444dc1394dacee914881a3af258aa5456354c07"]}, @typed={0xc, 0x11f, 0x0, 0x0, @u64=0x4}]}, 0x284}, 0x1, 0x0, 0x0, 0x50}, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r6, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x24040004) sendmsg$rds(r2, &(0x7f0000002480)={&(0x7f0000000a80)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000ac0)=""/53, 0x35}, {&(0x7f0000000b00)=""/90, 0x5a}, {&(0x7f0000000b80)=""/180, 0xb4}], 0x3, &(0x7f00000022c0)=[@rdma_dest={0x18, 0x114, 0x2, {0x42, 0x1}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000c80)=""/242, 0xf2}, &(0x7f0000000d80)}}, @fadd={0x58, 0x114, 0x6, {{0x5, 0x8000}, &(0x7f0000000dc0)=0x1, &(0x7f0000000e00)=0x8, 0xe, 0x1, 0x780, 0x8, 0x12}}, @cswp={0x58, 0x114, 0x7, {{0x7fffffff, 0x2}, &(0x7f0000000e40)=0x8001, &(0x7f0000000e80)=0x7, 0x2, 0x100000001, 0x2000000000, 0x1, 0x50, 0x61a}}, @mask_fadd={0x58, 0x114, 0x8, {{0x10000, 0x100}, &(0x7f0000000ec0)=0x604a42f4, &(0x7f0000000f00)=0xcf, 0xffff, 0x8000, 0x2, 0x5, 0x4, 0x7}}, @rdma_args={0x48, 0x114, 0x1, {{0x4, 0xc63f}, {&(0x7f0000000f40)=""/166, 0xa6}, &(0x7f0000002240)=[{&(0x7f0000001000)=""/25, 0x19}, {&(0x7f0000001040)=""/121, 0x79}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/143, 0x8f}, {&(0x7f0000002180)=""/85, 0x55}, {&(0x7f0000002200)=""/58, 0x3a}], 0x6, 0x40, 0x8}}], 0x198, 0x840}, 0x4010010) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000002540)={'syztnl2\x00', &(0x7f00000024c0)={'syztnl2\x00', r4, 0x4, 0xde, 0xf, 0x72ec8c16, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0xcb017603f4e0a6f4, 0x80, 0x7d, 0x3ff}}) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000002640)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002600)={&(0x7f00000025c0)={0x2c, 0xc, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$tipc(r2, &(0x7f0000002880)={&(0x7f0000002680)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x2}}, 0x10, &(0x7f0000002780)=[{&(0x7f00000026c0)="a8c072f3167c2075d6c89663de6cf359635a051ba26cf3563e147d6ead38ab6a9de6b0f9d59c97a93c8f8c0260d0c55a51949d5ea0b79eb1719a248ea891150858b9130928390627809673f77129b56a03861c7feb7254a6f7243f74ca8c004036627b964d0f3cf01e2e2162ef1930727176a1b94be61aa8cafa6fde501b4ae6746a94939039a3f4ebe70dff8095ff0852f8ca87f30b177ad8f4829488bd9a0e882094e635a8d9", 0xa7}], 0x1, &(0x7f00000027c0)="8799728f06d90c9bfecc6587b01d62310ac8e008d7be23a78fc4258a8e6307cbb2a49a29be8f8a2dd2495317d4f0a9c8753081adcdef49cf00e97baa553f8d9e9c6bfdae899a84f1b2e03ad09e2195cd9cc836c36b650cbc4891528e9f27de9d3ad5dd206c2fb46bede7e592740f4c7bc0bca8f95e36ed5f0f1831d558a22e1cd810eb88dc102447c92f1860041bd702f5c5b46ce72c0e39c0219fad9c5753a82f66b00432c0c8a84c0c3c8bc161028d21a8581b89108c4fc02e046b6f", 0xbd, 0x10}, 0x4040) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000002940)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002900)={0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) sendmsg$802154_raw(r0, &(0x7f0000002b00)={&(0x7f0000002980)={0x24, @short={0x2, 0xffff, 0xaaa2}}, 0x14, &(0x7f0000002ac0)={&(0x7f00000029c0)="3614587995544860e46dc34bab1528998e39067a8a08e70d90c2db7a2e37fca8f2d1889173a4c96ea18bff7755b6e58fbc258263b579ed3951cc2d017fbbb7dd9c381df8a98a12722394413a1587e1bd6799ca68996f754f8afb0b0218cd85cd99b953d780b4cca8169861304564f8c7c62c95542099746e1498b6fbd171dfea2d3958ccb15505ad993cdbed4f3b44c28b60574a1149904adb9f12ba934cce07442844af6d50de57adf233bcbfc82db26289f8666b8e9cb27ee415a8f22c215ba9849df042580b72", 0xc8}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002e40)={r2, 0xe0, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000002b80)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000002bc0)=[0x0], &(0x7f0000002c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc7, &(0x7f0000002c40)=[{}], 0x8, 0x10, &(0x7f0000002c80), &(0x7f0000002cc0), 0x8, 0x45, 0x8, 0x8, &(0x7f0000002d00)}}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000003000)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002e80)=@expire={0x138, 0x18, 0x4, 0x70bd2a, 0x25dfdbfe, {{{@in=@rand_addr=0x64010102, @in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x4e22, 0x1000, 0x4e23, 0x5, 0xa, 0x120, 0x0, 0x1d, r9, r5}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x6c}, @in6=@loopback, {0x3ff, 0x4, 0x3, 0x7b3a, 0x0, 0x5, 0xfffffffffffffffe, 0x8200000000}, {0x2, 0x4, 0x3f, 0x3}, {0x6, 0x1, 0x7}, 0x70bd2b, 0x3501, 0xa, 0x1, 0x1, 0x18}, 0x9}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd25, 0x70bd28, 0x70bd26, 0x70bd28, 0x1, [0x665d5120, 0x9, 0x4, 0xe]}}, @srcaddr={0x14, 0xd, @in=@private=0xa010101}]}, 0x138}, 0x1, 0x0, 0x0, 0x4040000}, 0x80) recvmmsg(r0, &(0x7f0000007400)=[{{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000003040)=""/228, 0xe4}, {&(0x7f0000003140)}, {&(0x7f0000003180)=""/138, 0x8a}, {&(0x7f0000003240)=""/55, 0x37}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000004780)=[{&(0x7f00000032c0)=""/132, 0x84}, {&(0x7f0000003380)=""/152, 0x98}, {&(0x7f0000003440)=""/95, 0x5f}, {&(0x7f00000034c0)=""/156, 0x9c}, {&(0x7f0000003580)=""/109, 0x6d}, {&(0x7f0000003600)}, {&(0x7f0000003640)=""/33, 0x21}, {&(0x7f0000003680)=""/136, 0x88}, {&(0x7f0000003740)=""/21, 0x15}, {&(0x7f0000003780)=""/4096, 0x1000}], 0xa, &(0x7f0000004840)=""/200, 0xc8}, 0x6}, {{&(0x7f0000004940)=@ieee802154, 0x80, &(0x7f0000004b40)=[{&(0x7f00000049c0)=""/70, 0x46}, {&(0x7f0000004a40)=""/244, 0xf4}], 0x2, &(0x7f0000004b80)=""/4096, 0x1000}, 0x8001}, {{&(0x7f0000005b80)=@sco, 0x80, &(0x7f0000006f80)=[{&(0x7f0000005c00)=""/4096, 0x1000}, {&(0x7f0000006c00)=""/160, 0xa0}, {&(0x7f0000006cc0)=""/179, 0xb3}, {&(0x7f0000006d80)=""/82, 0x52}, {&(0x7f0000006e00)=""/218, 0xda}, {&(0x7f0000006f00)=""/94, 0x5e}], 0x6}, 0x1}, {{0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000007000)=""/112, 0x70}, {&(0x7f0000007080)=""/11, 0xb}, {&(0x7f00000070c0)=""/48, 0x30}], 0x3, &(0x7f0000007140)=""/117, 0x75}, 0x10000}, {{&(0x7f00000071c0)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000007340)=[{&(0x7f0000007240)=""/109, 0x6d}, {&(0x7f00000072c0)=""/117, 0x75}], 0x2, &(0x7f0000007380)=""/99, 0x63}, 0x8}], 0x6, 0x2061, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000007740)={&(0x7f0000007580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000007700)={&(0x7f00000075c0)={0x114, 0x3, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_TUPLE_ORIG={0x60, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_TUPLE_REPLY={0xa0, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x10000000}, 0x28000800) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000077c0), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r10, &(0x7f0000007980)={&(0x7f0000007780)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000007940)={&(0x7f0000007800)={0x11c, r11, 0x2, 0x70bd2b, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xff00}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1000}, {0x6, 0x11, 0x3a5d}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x74dd}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x8001}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x1000}}]}, 0x11c}}, 0x40) sendfile(r8, r0, &(0x7f00000079c0)=0x2, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000007a00)={r2}) sendmsg$802154_dgram(r12, &(0x7f0000007b40)={&(0x7f0000007a40)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14, &(0x7f0000007b00)={&(0x7f0000007a80)="b275f3a0b97cc58e460c3ef78f2f5e1f47e0801d4b6a370e4582dd332fc0bb81d3f8be5b093278f4de2f7d778da5aceb4dd3dbe06c842ca610df37e3ac026e674c4d939d747069d24097cef9ac38b240c8c3ab489960d8ec5ee1f7b414b1c04af8710ba29ea3947da03473d3", 0x6c}, 0x1, 0x0, 0x0, 0x4040080}, 0x800) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007bc0), r0) sendmsg$NL80211_CMD_SET_KEY(r13, &(0x7f0000007cc0)={&(0x7f0000007b80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000007c80)={&(0x7f0000007c00)={0x68, r14, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0xc, 0x4, "1f8081cf6cba2f5b"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "093c45f051"}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004004}, 0x805) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000007dc0)={&(0x7f0000007d00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000007d80)={&(0x7f0000007d40)={0x40, 0x140c, 0x9, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x8014) kernel console output (not intermixed with test programs): t link speed/duplex [ 1282.402226][T24382] vlan2: entered promiscuous mode [ 1282.417513][T24382] bridge0: entered promiscuous mode [ 1282.471985][ T7080] bond8: (slave bridge8): failed to get link speed/duplex [ 1282.600139][T24391] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1282.633729][T24391] bond7 (unregistering): Released all slaves [ 1282.663324][T24405] netlink: 64 bytes leftover after parsing attributes in process `syz.0.12876'. [ 1282.689682][T24404] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20002 [ 1282.742829][T31057] bond8: (slave bridge8): failed to get link speed/duplex [ 1282.818332][T24409] syzkaller0: entered promiscuous mode [ 1282.828533][T24409] syzkaller0: entered allmulticast mode [ 1282.828553][T24414] netlink: 'syz.4.12881': attribute type 1 has an invalid length. [ 1282.922313][T31057] bond8: (slave bridge8): failed to get link speed/duplex [ 1282.940512][T24415] syzkaller0: entered promiscuous mode [ 1282.958793][T24415] syzkaller0: entered allmulticast mode [ 1283.062758][T31059] bond8: (slave bridge8): failed to get link speed/duplex [ 1283.080970][T24428] sctp: [Deprecated]: syz.3.12886 (pid 24428) Use of int in max_burst socket option. [ 1283.080970][T24428] Use struct sctp_assoc_value instead [ 1283.114731][T24429] bond0: entered promiscuous mode [ 1283.154286][T24429] bond_slave_0: entered promiscuous mode [ 1283.164085][T24429] bond_slave_1: entered promiscuous mode [ 1283.175276][T24429] bond0: left promiscuous mode [ 1283.180218][T24429] bond_slave_0: left promiscuous mode [ 1283.186668][T24429] bond_slave_1: left promiscuous mode [ 1283.349571][T24438] xt_NFQUEUE: number of total queues is 0 [ 1283.581952][T24436] syzkaller0: entered promiscuous mode [ 1283.596844][T24436] syzkaller0: entered allmulticast mode [ 1283.733529][T31068] bond8: (slave bridge8): failed to get link speed/duplex [ 1284.110305][T24483] __nla_validate_parse: 3 callbacks suppressed [ 1284.110327][T24483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12903'. [ 1284.138903][T24484] ip6gre4: entered allmulticast mode [ 1284.235036][T31057] nci: nci_ntf_packet: unknown ntf opcode 0x227 [ 1284.285023][T24500] netlink: 2712 bytes leftover after parsing attributes in process `syz.4.12905'. [ 1284.827044][T24523] netlink: 56 bytes leftover after parsing attributes in process `syz.3.12912'. [ 1284.838983][T24523] netlink: 19 bytes leftover after parsing attributes in process `syz.3.12912'. [ 1284.849655][T24523] netlink: 19 bytes leftover after parsing attributes in process `syz.3.12912'. [ 1284.929236][T24483] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1285.039398][T24530] gretap0: entered promiscuous mode [ 1285.049048][T24530] macsec1: entered allmulticast mode [ 1285.058407][T24530] gretap0: entered allmulticast mode [ 1285.067620][T24530] gretap0: left allmulticast mode [ 1285.081997][T24530] gretap0: left promiscuous mode [ 1285.112226][T24532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12915'. [ 1285.168018][T24546] netlink: 76 bytes leftover after parsing attributes in process `syz.4.12919'. [ 1285.179217][T24546] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12919'. [ 1285.189322][T24541] nbd: device at index 1 is going down [ 1285.196777][T24541] block nbd1: NBD_DISCONNECT [ 1285.205236][T24541] block nbd1: Send disconnect failed -32 [ 1285.219774][T24541] block nbd1: Send disconnect failed -32 [ 1285.226498][T24541] block nbd1: shutting down sockets [ 1285.249552][T24535] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12917'. [ 1285.439679][T31068] bond10 (unregistering): (slave erspan1): Releasing active interface [ 1285.520891][T31068] bond14 (unregistering): (slave geneve4): Releasing active interface [ 1285.532752][T31068] bond9 (unregistering): (slave geneve3): Releasing active interface [ 1285.587617][T31068] bond12 (unregistering): (slave bridge8): Releasing active interface [ 1285.604938][T31068] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1285.614037][T31068] bond0 (unregistering): Released all slaves [ 1285.623461][T31068] bond1 (unregistering): Released all slaves [ 1285.639583][T31068] bond2 (unregistering): Released all slaves [ 1285.651087][T31068] bond3 (unregistering): Released all slaves [ 1285.662247][T31068] bond4 (unregistering): Released all slaves [ 1285.673052][T31068] bond5 (unregistering): Released all slaves [ 1285.686193][T31068] bond6 (unregistering): Released all slaves [ 1285.699236][T31068] bond7 (unregistering): Released all slaves [ 1285.711112][T31068] bond8 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1285.724659][T31068] bond8 (unregistering): Released all slaves [ 1285.736708][T31068] bond9 (unregistering): Released all slaves [ 1285.748142][T31068] bond10 (unregistering): Released all slaves [ 1285.759885][T31068] bond11 (unregistering): (slave vlan3): Releasing active interface [ 1285.769378][T31068] bond11 (unregistering): Released all slaves [ 1285.789070][T31068] bond12 (unregistering): Released all slaves [ 1285.804591][T31068] bond13 (unregistering): (slave veth7): Releasing active interface [ 1285.815342][T31068] bond13 (unregistering): Released all slaves [ 1285.826244][T31068] bond14 (unregistering): Released all slaves [ 1285.841329][T31068] bond15 (unregistering): Released all slaves [ 1285.963254][T31068] tipc: Left network mode [ 1285.972349][T24545] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1285.981153][T24567] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1285.989239][T24567] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12924'. [ 1286.022521][T31068] IPVS: stopping backup sync thread 30101 ... [ 1286.616121][T24604] xt_policy: output policy not valid in PREROUTING and INPUT [ 1286.661900][T31061] net_ratelimit: 53 callbacks suppressed [ 1286.661919][T31061] bond8: (slave bridge8): failed to get link speed/duplex [ 1286.886539][T24610] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1286.896426][T24609] netlink: 'syz.2.12935': attribute type 1 has an invalid length. [ 1287.417463][T24609] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1287.497881][T24612] vlan3: entered allmulticast mode [ 1287.507967][T24612] bond5: entered allmulticast mode [ 1287.533964][ T7080] bond8: (slave bridge8): failed to get link speed/duplex [ 1287.556002][T24615] bond5: (slave geneve3): making interface the new active one [ 1287.563753][T24615] geneve3: entered allmulticast mode [ 1287.570724][T24615] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 1287.580899][T24617] batadv0: entered promiscuous mode [ 1287.587194][T24617] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1287.855005][T24635] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1287.868245][T24631] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1287.904222][T24635] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1288.096911][ T7069] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1288.123297][ T7069] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1288.161377][ T7069] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1288.182636][ T7069] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1288.262557][ T7069] bond8: (slave bridge8): failed to get link speed/duplex [ 1288.402067][ T7067] bond8: (slave bridge8): failed to get link speed/duplex [ 1288.532524][ T7069] bond8: (slave bridge8): failed to get link speed/duplex [ 1288.584631][T31068] IPVS: stop unused estimator thread 0... [ 1288.661766][T31057] bond8: (slave bridge8): failed to get link speed/duplex [ 1288.825552][T24694] netlink: 'syz.0.12950': attribute type 11 has an invalid length. [ 1288.844517][T31057] bond8: (slave bridge8): failed to get link speed/duplex [ 1289.039513][T24710] netlink: 'syz.0.12953': attribute type 13 has an invalid length. [ 1289.055457][T24715] netlink: 'syz.3.12952': attribute type 1 has an invalid length. [ 1289.159618][T24723] __nla_validate_parse: 12 callbacks suppressed [ 1289.159639][T24723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12956'. [ 1289.199591][T24724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12956'. [ 1289.319561][T24715] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1289.624446][T24757] Unsupported ieee802154 address type: 0 [ 1290.146133][T24792] netlink: 'syz.0.12966': attribute type 5 has an invalid length. [ 1290.319254][T24805] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12971'. [ 1290.370348][T24814] netlink: 80 bytes leftover after parsing attributes in process `syz.2.12971'. [ 1290.402356][T24814] netlink: 80 bytes leftover after parsing attributes in process `syz.2.12971'. [ 1290.414501][T24794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1290.449842][T24794] 8021q: adding VLAN 0 to HW filter on device team0 [ 1290.458725][T24820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12972'. [ 1290.480240][T24794] batadv0: left promiscuous mode [ 1290.495226][T24794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1290.517614][T24812] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12972'. [ 1290.598449][T24794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1290.618416][T24794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1290.645119][T24794] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1290.660519][T24794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1290.705147][T24794] veth1_vlan: left promiscuous mode [ 1290.736486][T24794] veth0_vlan: left promiscuous mode [ 1290.755697][T24794] veth0_vlan: entered promiscuous mode [ 1290.773723][T24794] veth1_vlan: entered promiscuous mode [ 1290.869119][T24794] veth1_macvtap: left promiscuous mode [ 1291.152783][T24794] veth0_macvtap: left promiscuous mode [ 1291.168743][T24794] veth0_macvtap: entered promiscuous mode [ 1291.211015][T24794] veth1_macvtap: entered promiscuous mode [ 1291.240114][T24794] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1291.254323][T24794] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1291.263648][T24794] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1291.272647][T24794] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1291.281675][T24794] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1291.314544][ T7067] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.321723][ T7067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1291.332299][ T7067] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.339446][ T7067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1291.381217][T24845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12974'. [ 1291.397109][T24818] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1291.421665][T24824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12972'. [ 1291.433550][T24846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12974'. [ 1291.445624][T24831] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1291.445808][T31059] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1291.490233][T31059] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1291.555572][T31059] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1291.601702][T31059] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1291.844359][T31068] net_ratelimit: 10 callbacks suppressed [ 1291.844381][T31068] bond8: (slave bridge8): failed to get link speed/duplex [ 1291.982985][ T2620] bond8: (slave bridge8): failed to get link speed/duplex [ 1292.027810][T24887] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1292.213054][ T7067] bond8: (slave bridge8): failed to get link speed/duplex [ 1292.270995][T24904] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 1292.342207][ T2620] bond8: (slave bridge8): failed to get link speed/duplex [ 1292.451304][T24912] tipc: Enabling of bearer rejected, failed to enable media [ 1292.497941][ T2620] bond8: (slave bridge8): failed to get link speed/duplex [ 1292.613884][T24911] nbd1: detected capacity change from 0 to 63 [ 1292.621654][ T7080] bond8: (slave bridge8): failed to get link speed/duplex [ 1292.631123][T24918] block nbd1: NBD_DISCONNECT [ 1292.639561][T24918] block nbd1: Disconnected due to user request. [ 1292.650977][T24918] block nbd1: shutting down sockets [ 1292.670379][ C1] blk_print_req_error: 138 callbacks suppressed [ 1292.670469][ C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1292.685990][ C1] buffer_io_error: 138 callbacks suppressed [ 1292.686071][ C1] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1292.703903][ C1] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1292.713084][ C1] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1292.720895][ C1] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1292.730042][ C1] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1292.737838][ C1] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1292.746989][ C1] Buffer I/O error on dev nbd1, logical block 3, async page read [ 1292.757566][ T7080] bond8: (slave bridge8): failed to get link speed/duplex [ 1292.761441][T22319] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1292.774496][T22319] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1292.784556][T22319] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1292.801951][T22319] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1292.816985][T22319] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1292.836128][T22319] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1292.874548][T22319] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1292.902417][T22319] Buffer I/O error on dev nbd1, logical block 3, async page read [ 1292.925600][T22319] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1292.940002][T22319] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1292.949692][T22319] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1292.958963][T22319] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1292.974735][T22319] ldm_validate_partition_table(): Disk read failed. [ 1292.985709][T22319] Dev nbd1: unable to read RDB block 0 [ 1292.994469][T22319] nbd1: unable to read partition table [ 1293.008315][T22319] ldm_validate_partition_table(): Disk read failed. [ 1293.028836][T22319] Dev nbd1: unable to read RDB block 0 [ 1293.050525][T22319] nbd1: unable to read partition table [ 1293.253035][T24929] bond3: entered promiscuous mode [ 1293.285543][T24940] netlink: 'syz.0.12999': attribute type 4 has an invalid length. [ 1293.321970][T31059] bond8: (slave bridge8): failed to get link speed/duplex [ 1293.461659][ T7080] bond8: (slave bridge8): failed to get link speed/duplex [ 1293.517246][T24953] xt_connbytes: Forcing CT accounting to be enabled [ 1293.721904][T31059] bond8: (slave bridge8): failed to get link speed/duplex [ 1293.733737][T24963] netlink: 'syz.0.13004': attribute type 62 has an invalid length. [ 1293.869484][T24971] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1294.150803][T24992] syzkaller0: entered promiscuous mode [ 1294.175997][T24997] netlink: 'syz.0.13013': attribute type 13 has an invalid length. [ 1294.191855][T24992] syzkaller0: entered allmulticast mode [ 1294.237939][T25002] netlink: 'syz.2.13014': attribute type 13 has an invalid length. [ 1294.260679][ T2620] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1294.261164][T25002] netlink: 'syz.2.13014': attribute type 17 has an invalid length. [ 1294.278395][ T2620] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.278497][ T2620] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1294.278524][ T2620] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.278581][ T2620] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1294.278607][ T2620] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.278637][ T2620] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1294.278662][ T2620] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.456120][T25002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1294.474172][T25002] 8021q: adding VLAN 0 to HW filter on device team0 [ 1294.571471][T25002] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1294.587866][T25002] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1294.602428][T25002] hsr0: left promiscuous mode [ 1294.607181][T25002] hsr0: left allmulticast mode [ 1294.612850][T25002] hsr_slave_0: left allmulticast mode [ 1294.618294][T25002] hsr_slave_1: left allmulticast mode [ 1294.628628][T25002] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1294.638878][T25002] veth1_vlan: left promiscuous mode [ 1294.646415][T25002] veth0_vlan: left promiscuous mode [ 1294.653565][T25002] veth0_vlan: entered promiscuous mode [ 1294.663418][T25002] veth1_vlan: entered promiscuous mode [ 1294.675700][T25002] veth1_macvtap: left promiscuous mode [ 1294.684555][T25002] veth0_macvtap: left promiscuous mode [ 1294.691206][T25002] veth0_macvtap: entered promiscuous mode [ 1294.706523][T25002] veth1_macvtap: entered promiscuous mode [ 1294.718552][T25002] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1294.731845][T25002] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1294.745140][T25002] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1294.763373][T25002] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1294.778842][T25002] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1294.787169][T25002] ip6erspan0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1294.803590][T25002] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1294.812320][T25002] vlan2: left allmulticast mode [ 1294.817262][T25002] bond1: left allmulticast mode [ 1294.824725][T25002] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1294.845080][T25002] bond3: left promiscuous mode [ 1294.853412][T25002] bond3: left allmulticast mode [ 1294.866338][T25002] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1294.905226][T25002] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1294.916599][T25002] geneve2: left promiscuous mode [ 1294.937807][T31059] bridge0: port 1(bridge_slave_0) entered blocking state [ 1294.945034][T31059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1294.968011][T31059] bridge0: port 2(bridge_slave_1) entered blocking state [ 1294.975292][T31059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1295.085752][T31057] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.104565][T31057] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.158974][T31057] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.187046][T31057] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.270355][T25034] __nla_validate_parse: 9 callbacks suppressed [ 1295.270374][T25034] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13022'. [ 1295.309354][T25034] netlink: 64 bytes leftover after parsing attributes in process `syz.2.13022'. [ 1295.505820][T25048] netlink: 44 bytes leftover after parsing attributes in process `syz.1.13026'. [ 1295.545586][T25052] ip6tnl0: entered promiscuous mode [ 1295.558753][T25052] ip6tnl0: entered allmulticast mode [ 1295.589728][T25052] netlink: 'syz.2.13027': attribute type 58 has an invalid length. [ 1295.610531][T25052] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13027'. [ 1295.649718][T25051] netlink: 104 bytes leftover after parsing attributes in process `syz.2.13027'. [ 1296.121561][ T5624] Bluetooth: hci2: command 0x0405 tx timeout [ 1296.139389][T25072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13032'. [ 1296.474816][T25074] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1296.489609][T25074] bond8 (unregistering): Released all slaves [ 1296.553584][T25078] netlink: 'syz.2.13033': attribute type 21 has an invalid length. [ 1296.594913][T25078] netlink: 'syz.2.13033': attribute type 21 has an invalid length. [ 1296.595383][T25083] (: renamed from bridge_slave_0 (while UP) [ 1296.627654][T31059] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1296.646071][T25083] netlink: 'syz.3.13034': attribute type 1 has an invalid length. [ 1296.666945][T31059] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1296.701300][T31059] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1296.817706][T25083] bond4: entered promiscuous mode [ 1296.835797][T25083] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1296.861763][ T7080] net_ratelimit: 11 callbacks suppressed [ 1296.861783][ T7080] bond8: (slave bridge8): failed to get link speed/duplex [ 1296.911208][T31059] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1297.012406][T31059] bond8: (slave bridge8): failed to get link speed/duplex [ 1297.067604][T25099] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1297.209278][T31059] bond8: (slave bridge8): failed to get link speed/duplex [ 1297.351921][T31059] bond8: (slave bridge8): failed to get link speed/duplex [ 1297.492492][ T2620] bond8: (slave bridge8): failed to get link speed/duplex [ 1297.533324][T25152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13051'. [ 1297.598191][T25152] netlink: 'syz.2.13051': attribute type 4 has an invalid length. [ 1297.627058][ T2620] bond8: (slave bridge8): failed to get link speed/duplex [ 1297.772035][T25166] tipc: Failed to obtain node identity [ 1297.810955][T25166] tipc: Enabling of bearer rejected, failed to enable media [ 1297.856625][T31070] bond8: (slave bridge8): failed to get link speed/duplex [ 1297.974101][ T2620] bond8: (slave bridge8): failed to get link speed/duplex [ 1298.011240][T25176] x_tables: duplicate underflow at hook 1 [ 1298.171719][ T7080] bond8: (slave bridge8): failed to get link speed/duplex [ 1298.332638][T31070] bond8: (slave bridge8): failed to get link speed/duplex [ 1298.442305][T25210] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13064'. [ 1298.464362][T25210] netlink: 'syz.1.13064': attribute type 10 has an invalid length. [ 1298.480382][T25210] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13064'. [ 1298.494424][T25210] dummy0: entered promiscuous mode [ 1298.892243][T25244] netlink: 64 bytes leftover after parsing attributes in process `syz.3.13073'. [ 1299.137941][T25238] ipvlan2: entered promiscuous mode [ 1299.186266][T25249] syzkaller1: entered promiscuous mode [ 1299.198111][T25249] syzkaller1: entered allmulticast mode [ 1299.214473][ T2620] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1299.275978][ T2620] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1299.284626][ T2620] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1299.305803][ T2620] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1299.727816][T25295] bond0: Caught tx_queue_len zero misconfig [ 1299.899674][T25295] batadv_slave_1: entered promiscuous mode [ 1300.006687][T25294] batadv_slave_1: left promiscuous mode [ 1300.073765][T25323] netlink: 'syz.1.13094': attribute type 1 has an invalid length. [ 1300.221376][T25335] syzkaller0: entered promiscuous mode [ 1300.231040][T25335] syzkaller0: entered allmulticast mode [ 1300.322402][T25335] batman_adv: batadv0: Interface deactivated: gretap0 [ 1300.653878][T25369] __nla_validate_parse: 8 callbacks suppressed [ 1300.653898][T25369] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13107'. [ 1300.671173][T25369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13107'. [ 1300.683655][T25369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13107'. [ 1301.032724][T25345] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1301.285534][T25388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13111'. [ 1301.669645][T25433] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 1301.803561][T25439] tipc: Enabling of bearer rejected, failed to enable media [ 1301.929573][T25445] netlink: 'syz.0.13124': attribute type 11 has an invalid length. [ 1301.942319][T25445] net_ratelimit: 27 callbacks suppressed [ 1301.942338][T25445] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1301.981641][ T7080] bond8: (slave bridge8): failed to get link speed/duplex [ 1302.030159][T25449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13125'. [ 1302.058473][T25453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13126'. [ 1302.068254][T25449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13125'. [ 1302.102571][T31057] bond8: (slave bridge8): failed to get link speed/duplex [ 1302.192081][ T7067] tipc: Subscription rejected, illegal request [ 1302.218594][T25463] syzkaller1: entered promiscuous mode [ 1302.236591][T25463] syzkaller1: entered allmulticast mode [ 1302.273320][T31059] bond8: (slave bridge8): failed to get link speed/duplex [ 1302.363590][T25474] netlink: 'syz.1.13131': attribute type 14 has an invalid length. [ 1302.402133][ T7080] bond8: (slave bridge8): failed to get link speed/duplex [ 1302.410424][T25474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13131'. [ 1302.470006][T25474] netlink: 'syz.1.13131': attribute type 14 has an invalid length. [ 1302.485056][T25474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13131'. [ 1302.520950][T25482] erspan0: entered promiscuous mode [ 1302.543802][T25486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13132'. [ 1302.556109][T31070] bond8: (slave bridge8): failed to get link speed/duplex [ 1302.693986][ T7067] bond8: (slave bridge8): failed to get link speed/duplex [ 1302.880743][T25514] netlink: 'syz.4.13140': attribute type 1 has an invalid length. [ 1302.895952][T25514] netlink: 'syz.4.13140': attribute type 6 has an invalid length. [ 1302.905606][T25514] netlink: 'syz.4.13140': attribute type 3 has an invalid length. [ 1302.924804][T25507] netlink: 'syz.1.13138': attribute type 1 has an invalid length. [ 1302.933141][T31059] bond8: (slave bridge8): failed to get link speed/duplex [ 1303.055881][T31059] bond8: (slave bridge8): failed to get link speed/duplex [ 1303.181606][ T2620] bond8: (slave bridge8): failed to get link speed/duplex [ 1303.280242][T25525] syzkaller0: entered promiscuous mode [ 1303.289962][T25525] syzkaller0: entered allmulticast mode [ 1303.710176][T25572] syzkaller0: entered promiscuous mode [ 1303.719359][T25572] syzkaller0: entered allmulticast mode [ 1303.774385][T25572] tipc: Enabled bearer , priority 0 [ 1303.802072][T25571] tipc: Resetting bearer [ 1303.831190][T25571] tipc: Disabling bearer [ 1304.218054][ T7067] nci: nci_ntf_packet: unknown ntf opcode 0x227 [ 1304.415815][T25610] team0 (unregistering): Port device team_slave_0 removed [ 1304.749036][T25592] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1304.787822][T25642] netlink: 'syz.1.13166': attribute type 1 has an invalid length. [ 1304.872055][T25610] team0 (unregistering): Port device team_slave_1 removed [ 1304.889912][T25610] team0 (unregistering): Port device batadv1 removed [ 1304.996751][T25642] bond2: entered promiscuous mode [ 1305.002604][T25642] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1305.018162][T25646] bond2: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1305.035989][T25646] bond2: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 1305.047737][T25646] bond2: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 1305.078099][T25649] ip6tnl1: entered allmulticast mode [ 1305.219210][T25674] xt_NFQUEUE: number of queues (3633) out of range (got 69161) [ 1305.251330][T25674] netlink: 'syz.0.13174': attribute type 2 has an invalid length. [ 1305.342445][T25680] netlink: 'syz.0.13177': attribute type 1 has an invalid length. [ 1305.412569][T25684] netlink: 'syz.0.13177': attribute type 1 has an invalid length. [ 1305.487114][T25680] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1305.489187][T25684] NCSI netlink: No device for ifindex 0 [ 1305.538535][T25685] bond8: (slave dummy0): Enslaving as a backup interface with an up link [ 1305.548029][T25680] netlink: 'syz.0.13177': attribute type 10 has an invalid length. [ 1305.578329][T25680] dummy0: entered promiscuous mode [ 1305.618479][T25680] bond8: (slave dummy0): Removing an active aggregator [ 1305.644034][T25680] bond8: (slave dummy0): Releasing backup interface [ 1305.769292][T31057] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1305.798191][T31057] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1305.834408][T31057] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1305.857936][T31057] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1305.884853][T25713] __nla_validate_parse: 9 callbacks suppressed [ 1305.884893][T25713] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13185'. [ 1305.968926][T25720] pim6reg1: entered promiscuous mode [ 1305.984172][T25720] pim6reg1: entered allmulticast mode [ 1306.017909][T25723] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1306.026705][T25723] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 1306.116797][T25730] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1306.307145][T25739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13193'. [ 1306.320219][T25743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13194'. [ 1306.331086][T25736] can: request_module (can-proto-5) failed. [ 1306.448229][T25750] netlink: 'syz.1.13195': attribute type 25 has an invalid length. [ 1306.473079][T25741] netlink: 'syz.2.13193': attribute type 32 has an invalid length. [ 1306.481321][T25741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13193'. [ 1306.518796][T25741] bond6: Setting coupled_control to off (0) [ 1306.572661][T25754] ip6tnl0: left promiscuous mode [ 1306.577705][T25754] ip6tnl0: left allmulticast mode [ 1306.599770][T25754] bridge0: port 2(bridge_slave_1) entered disabled state [ 1306.607119][T25754] bridge0: port 1(bridge_slave_0) entered disabled state [ 1306.737287][T25754] vlan3: left allmulticast mode [ 1306.743189][T25754] bond5: left allmulticast mode [ 1306.748250][T25754] geneve3: left allmulticast mode [ 1306.756395][T25754] ip6tnl1: left allmulticast mode [ 1306.765385][T31059] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1306.776186][T31059] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1306.785485][T31059] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1306.794874][T31059] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1306.804473][T31059] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1306.814043][T31059] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1306.823374][T31059] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1306.835672][T31059] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1306.965118][T25762] netlink: 'syz.2.13199': attribute type 1 has an invalid length. [ 1306.972519][T31070] net_ratelimit: 23 callbacks suppressed [ 1306.972588][T31070] bond8: (slave bridge8): failed to get link speed/duplex [ 1306.974530][T25767] netlink: 632 bytes leftover after parsing attributes in process `syz.4.13201'. [ 1307.077713][T25771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13202'. [ 1307.087517][T25764] netlink: 'syz.3.13200': attribute type 39 has an invalid length. [ 1307.131998][T31070] bond8: (slave bridge8): failed to get link speed/duplex [ 1307.204580][T25779] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13206'. [ 1307.241803][ T7067] bond8: (slave bridge8): failed to get link speed/duplex [ 1307.260684][T25779] can: request_module (can-proto-5) failed. [ 1307.351784][T31059] bond8: (slave bridge8): failed to get link speed/duplex [ 1307.451059][T25800] syzkaller1: entered promiscuous mode [ 1307.457063][T25800] syzkaller1: entered allmulticast mode [ 1307.487129][T25805] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.13214'. [ 1307.496645][ T2620] bond8: (slave bridge8): failed to get link speed/duplex [ 1307.519966][T25801] sctp: [Deprecated]: syz.0.13208 (pid 25801) Use of int in max_burst socket option. [ 1307.519966][T25801] Use struct sctp_assoc_value instead [ 1307.553182][T25809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13215'. [ 1307.601652][T31057] bond8: (slave bridge8): failed to get link speed/duplex [ 1307.630656][T25813] netlink: 56 bytes leftover after parsing attributes in process `syz.3.13217'. [ 1307.709541][T25815] netlink: 'syz.3.13218': attribute type 1 has an invalid length. [ 1307.729490][T25815] bond5: entered promiscuous mode [ 1307.735324][T25815] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1307.761666][T31057] bond8: (slave bridge8): failed to get link speed/duplex [ 1307.873415][ T2620] bond8: (slave bridge8): failed to get link speed/duplex [ 1307.991733][T31070] bond8: (slave bridge8): failed to get link speed/duplex [ 1308.182051][T31070] bond8: (slave bridge8): failed to get link speed/duplex [ 1308.314744][T25824] bond3 (unregistering): Released all slaves [ 1308.335539][T25831] nbd: nbd64 already in use [ 1308.340415][T25830] nbd: nbd64 already in use [ 1308.403065][T25826] macsec1: entered promiscuous mode [ 1308.421117][T25826] bridge0: entered promiscuous mode [ 1308.543417][T22319] udevd[22319]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1309.385913][T25904] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 1309.545224][T25924] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1309.792903][T25944] bridge0: port 2(bridge_slave_1) entered disabled state [ 1309.882191][T25957] validate_nla: 3 callbacks suppressed [ 1309.882209][T25957] netlink: 'syz.1.13258': attribute type 1 has an invalid length. [ 1310.061207][T25957] bond3: entered promiscuous mode [ 1310.071115][T25957] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1310.333368][T26001] bond4: option ad_user_port_key: invalid value (65535) [ 1310.340505][T26001] bond4: option ad_user_port_key: allowed values 0 - 1023 [ 1310.360081][T26001] bond4 (unregistering): Released all slaves [ 1310.864818][T26019] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:19999 [ 1310.875030][T26019] IPVS: set_ctl: invalid protocol: 51 10.1.1.0:20000 [ 1310.963699][T26026] __nla_validate_parse: 22 callbacks suppressed [ 1310.963721][T26026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13276'. [ 1310.995280][T26026] hsr_slave_0: left promiscuous mode [ 1311.008690][T26026] hsr_slave_1: left promiscuous mode [ 1311.053243][T26033] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 1311.139697][T26039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13280'. [ 1311.166179][T26039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13280'. [ 1311.191112][T26039] netlink: 'syz.3.13280': attribute type 20 has an invalid length. [ 1311.346186][T26067] netlink: 19 bytes leftover after parsing attributes in process `syz.4.13283'. [ 1311.737908][T26101] syzkaller0: entered promiscuous mode [ 1311.744155][T26101] syzkaller0: entered allmulticast mode [ 1312.052071][ T2620] net_ratelimit: 31 callbacks suppressed [ 1312.052094][ T2620] bond8: (slave bridge8): failed to get link speed/duplex [ 1312.171835][ T7069] bond8: (slave bridge8): failed to get link speed/duplex [ 1312.282069][ T7067] bond8: (slave bridge8): failed to get link speed/duplex [ 1312.392088][ T7067] bond8: (slave bridge8): failed to get link speed/duplex [ 1312.501728][ T2620] bond8: (slave bridge8): failed to get link speed/duplex [ 1312.611925][ T2620] bond8: (slave bridge8): failed to get link speed/duplex [ 1312.721657][ T7080] bond8: (slave bridge8): failed to get link speed/duplex [ 1312.832249][T31070] bond8: (slave bridge8): failed to get link speed/duplex [ 1312.942326][ T2620] bond8: (slave bridge8): failed to get link speed/duplex [ 1313.051809][ T2620] bond8: (slave bridge8): failed to get link speed/duplex [ 1314.258038][T26053] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1314.843771][T26166] netlink: 'syz.4.13311': attribute type 1 has an invalid length. [ 1314.930248][T26166] bond6: entered promiscuous mode [ 1314.945201][T26166] bond6: entered allmulticast mode [ 1314.970388][T26166] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1315.037062][T26166] syzkaller0: entered promiscuous mode [ 1315.056956][T26166] syzkaller0: entered allmulticast mode [ 1315.063382][T26192] netlink: 'syz.2.13316': attribute type 3 has an invalid length. [ 1315.091744][T26192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13316'. [ 1315.146386][T26172] tipc: Enabled bearer , priority 0 [ 1315.198816][T26198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13317'. [ 1315.260377][T26203] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1315.273607][T26203] bond7 (unregistering): Released all slaves [ 1315.309768][T26164] tipc: Resetting bearer [ 1315.328812][T26164] tipc: Disabling bearer [ 1315.360801][T26211] lo: entered promiscuous mode [ 1315.371183][T26211] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13322'. [ 1315.409418][T26210] netlink: 'syz.3.13321': attribute type 1 has an invalid length. [ 1315.537732][T26222] netlink: 'syz.3.13321': attribute type 10 has an invalid length. [ 1315.567141][T26222] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13321'. [ 1315.603199][T26210] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1315.640549][T26219] bond6: (slave dummy0): making interface the new active one [ 1315.654153][T26219] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 1315.666523][T26222] dummy0: entered promiscuous mode [ 1315.711132][T26222] bond6: (slave dummy0): Releasing active interface [ 1315.827111][T26228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13325'. [ 1315.868751][T26231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13326'. [ 1316.032424][T26241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13328'. [ 1316.049774][T26244] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13329'. [ 1316.088735][T26244] netlink: 96 bytes leftover after parsing attributes in process `syz.2.13329'. [ 1316.140319][T26250] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13331'. [ 1316.162926][T26250] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13331'. [ 1316.173297][T26250] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13331'. [ 1316.183387][T26250] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13331'. [ 1316.197078][T26212] lo: left promiscuous mode [ 1316.207648][T26252] netlink: 64 bytes leftover after parsing attributes in process `syz.3.13332'. [ 1316.224756][T26250] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13331'. [ 1316.256700][T26250] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13331'. [ 1316.526096][T26264] xt_hashlimit: size too large, truncated to 1048576 [ 1317.111710][ T7067] net_ratelimit: 33 callbacks suppressed [ 1317.111732][ T7067] bond8: (slave bridge8): failed to get link speed/duplex [ 1317.271867][ T2620] bond8: (slave bridge8): failed to get link speed/duplex [ 1317.412155][ T2620] bond8: (slave bridge8): failed to get link speed/duplex [ 1317.531904][T31059] bond8: (slave bridge8): failed to get link speed/duplex [ 1317.651660][T31059] bond8: (slave bridge8): failed to get link speed/duplex [ 1317.771655][T31059] bond8: (slave bridge8): failed to get link speed/duplex [ 1317.891741][T31059] bond8: (slave bridge8): failed to get link speed/duplex [ 1318.014345][T26327] syzkaller0: entered promiscuous mode [ 1318.031727][T26327] syzkaller0: entered allmulticast mode [ 1318.064874][ T7069] bond8: (slave bridge8): failed to get link speed/duplex [ 1318.282311][T26343] syzkaller0: entered promiscuous mode [ 1318.287898][T26343] syzkaller0: entered allmulticast mode [ 1318.302094][T31059] bond8: (slave bridge8): failed to get link speed/duplex [ 1318.310007][T26343] lo: entered allmulticast mode [ 1318.431886][ T2620] bond8: (slave bridge8): failed to get link speed/duplex [ 1318.604375][T26361] syzkaller0: entered promiscuous mode [ 1318.610012][T26361] syzkaller0: entered allmulticast mode [ 1318.845081][T26379] tipc: Started in network mode [ 1318.858249][T26379] tipc: Node identity eac11906886b, cluster identity 4711 [ 1318.866581][T26379] tipc: Enabled bearer , priority 0 [ 1318.899432][ T4988] udevd[4988]: worker [21389] /devices/virtual/block/nbd2 is taking a long time [ 1318.977718][T26379] syzkaller0: entered promiscuous mode [ 1318.986290][T26379] syzkaller0: entered allmulticast mode [ 1318.994077][T26379] tipc: Resetting bearer [ 1319.020804][T26379] tipc: Resetting bearer [ 1319.114421][T26379] tipc: Disabling bearer [ 1319.130180][T26399] batadv_slave_1: Caught tx_queue_len zero misconfig [ 1319.366205][T26417] tipc: Enabling of bearer rejected, failed to enable media [ 1319.488058][ T9350] IPVS: starting estimator thread 0... [ 1319.506144][T26426] vlan5: entered promiscuous mode [ 1319.511354][T26426] bridge0: entered promiscuous mode [ 1319.591717][T26427] IPVS: using max 39 ests per chain, 93600 per kthread [ 1321.306766][T26581] __nla_validate_parse: 75 callbacks suppressed [ 1321.306792][T26581] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13417'. [ 1321.562579][T26582] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13416'. [ 1322.141640][ T7069] net_ratelimit: 26 callbacks suppressed [ 1322.141662][ T7069] bond8: (slave bridge8): failed to get link speed/duplex [ 1322.261727][T31059] bond8: (slave bridge8): failed to get link speed/duplex [ 1322.352981][T26618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13424'. [ 1322.372527][ T7069] bond8: (slave bridge8): failed to get link speed/duplex [ 1322.471463][T26622] netlink: 'syz.3.13425': attribute type 13 has an invalid length. [ 1322.562333][ T7080] bond8: (slave bridge8): failed to get link speed/duplex [ 1322.672167][T31059] bond8: (slave bridge8): failed to get link speed/duplex [ 1322.781806][T31057] bond8: (slave bridge8): failed to get link speed/duplex [ 1322.911839][T31059] bond8: (slave bridge8): failed to get link speed/duplex [ 1323.031664][ T7069] bond8: (slave bridge8): failed to get link speed/duplex [ 1323.141960][ T7067] bond8: (slave bridge8): failed to get link speed/duplex [ 1323.251903][ T7067] bond8: (slave bridge8): failed to get link speed/duplex [ 1324.206992][T26576] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1324.339417][T26636] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13428'. [ 1324.363457][T26638] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13429'. [ 1324.412465][T26635] netlink: 9 bytes leftover after parsing attributes in process `syz.1.13427'. [ 1324.437884][T26635] netlink: 9 bytes leftover after parsing attributes in process `syz.1.13427'. [ 1324.504669][T26648] syzkaller0: entered promiscuous mode [ 1324.539314][T26648] syzkaller0: entered allmulticast mode [ 1324.568891][T26652] syzkaller0: tun_net_xmit 14 [ 1324.646550][T26654] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13433'. [ 1324.730496][T26660] tipc: Started in network mode [ 1324.746737][T26660] tipc: Node identity 7e738faa7c19, cluster identity 4711 [ 1324.761040][T26662] netlink: 'syz.2.13436': attribute type 9 has an invalid length. [ 1324.770390][T26662] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.13436'. [ 1324.777863][T26660] tipc: Enabled bearer , priority 0 [ 1324.788316][T26665] syzkaller0: entered promiscuous mode [ 1324.794180][T26665] syzkaller0: entered allmulticast mode [ 1324.803814][T26660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13435'. [ 1324.817201][T26660] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1324.844873][T26660] tipc: Resetting bearer [ 1324.853304][T26659] tipc: Resetting bearer [ 1324.865147][T26659] tipc: Disabling bearer [ 1325.040155][T26676] syzkaller0: entered promiscuous mode [ 1325.046834][T26676] syzkaller0: entered allmulticast mode [ 1325.103742][ T30] audit: type=1804 audit(1782083693.206:34): pid=26685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.13442" name="/newroot/220/cgroup.controllers" dev="tmpfs" ino=1144 res=1 errno=0 [ 1325.156337][ T30] audit: type=1800 audit(1782083693.206:35): pid=26685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.13442" name="cgroup.controllers" dev="tmpfs" ino=1144 res=0 errno=0 [ 1325.179177][ T30] audit: type=1804 audit(1782083693.206:36): pid=26685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.13442" name="/newroot/220/cgroup.controllers" dev="tmpfs" ino=1144 res=1 errno=0 [ 1325.237037][T26688] netlink: 'syz.1.13445': attribute type 1 has an invalid length. [ 1325.353611][T26693] bridge5: port 1(dummy0) entered blocking state [ 1325.361268][T26693] bridge5: port 1(dummy0) entered disabled state [ 1325.369271][T26693] dummy0: entered allmulticast mode [ 1325.377078][T26693] dummy0: entered promiscuous mode [ 1325.385922][T26693] netlink: 'syz.4.13446': attribute type 10 has an invalid length. [ 1325.398985][T26693] bridge5: port 1(dummy0) entered blocking state [ 1325.405493][T26693] bridge5: port 1(dummy0) entered forwarding state [ 1325.414240][T26693] dummy0: left allmulticast mode [ 1325.419470][T26693] bridge5: port 1(dummy0) entered disabled state [ 1325.806411][ T7080] bond13: left allmulticast mode [ 1325.813939][ T7080] bond13: left promiscuous mode [ 1325.826847][ T7080] bridge0: port 1(bond13) entered disabled state [ 1325.896921][ T7080] pim6reg: left allmulticast mode [ 1325.914005][ T7080] pimreg: left allmulticast mode [ 1326.126514][ T7080] bond17 (unregistering): (slave geneve3): Releasing active interface [ 1326.202985][ T7080] bond8 (unregistering): (slave bridge4): Releasing active interface [ 1326.257067][ T7080] bond0 (unregistering): Released all slaves [ 1326.267361][ T7080] bond1 (unregistering): Released all slaves [ 1326.286823][ T7080] bond2 (unregistering): Released all slaves [ 1326.307625][ T7080] bond3 (unregistering): Released all slaves [ 1326.323466][ T7080] bond4 (unregistering): Released all slaves [ 1326.337368][ T7080] bond5 (unregistering): (slave veth9): Releasing backup interface [ 1326.358031][ T7080] bond5 (unregistering): (slave batadv1): Releasing backup interface [ 1326.369014][ T7080] bond5 (unregistering): Released all slaves [ 1326.383258][ T7080] bond6 (unregistering): Released all slaves [ 1326.398364][ T7080] bond7 (unregistering): Released all slaves [ 1326.413830][ T7080] bond8 (unregistering): Released all slaves [ 1326.429857][ T7080] bond9 (unregistering): Released all slaves [ 1326.446586][ T7080] bond10 (unregistering): Released all slaves [ 1326.458870][ T7080] bond11 (unregistering): (slave veth11): Releasing active interface [ 1326.469052][ T7080] bond11 (unregistering): (slave veth13): Releasing active interface [ 1326.478185][ T7080] bond11 (unregistering): Released all slaves [ 1326.492973][ T7080] bond12 (unregistering): Released all slaves [ 1326.504257][ T7080] bond13 (unregistering): Released all slaves [ 1326.515914][ T7080] bond14 (unregistering): Released all slaves [ 1326.528758][ T7080] bond15 (unregistering): Released all slaves [ 1326.540714][ T7080] bond16 (unregistering): Released all slaves [ 1326.552066][ T7080] bond17 (unregistering): Released all slaves [ 1326.563022][ T7080] bond18 (unregistering): Released all slaves [ 1326.578742][T26731] veth0: entered promiscuous mode [ 1326.638698][T26725] veth0: left promiscuous mode [ 1326.659363][ T7080] tipc: Disabling bearer [ 1326.673602][ T7080] tipc: Disabling bearer [ 1326.689289][ T7080] tipc: Left network mode [ 1326.738427][T26761] __nla_validate_parse: 11 callbacks suppressed [ 1326.738448][T26761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13466'. [ 1326.810244][T26761] x_tables: duplicate underflow at hook 1 [ 1326.855967][T26757] netlink: 80 bytes leftover after parsing attributes in process `syz.4.13464'. [ 1326.870825][T26767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13465'. [ 1327.018390][T26780] netlink: 'syz.2.13470': attribute type 12 has an invalid length. [ 1327.238568][T26797] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.13473'. [ 1327.259407][T26790] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13471'. [ 1327.305287][T26799] netlink: 52 bytes leftover after parsing attributes in process `syz.3.13476'. [ 1327.320408][T26796] syzkaller0: entered promiscuous mode [ 1327.326377][T26796] syzkaller0: entered allmulticast mode [ 1327.334165][T26799] mac80211_hwsim hwsim182 wlan0: Caught tx_queue_len zero misconfig [ 1327.349451][T26796] netlink: 3 bytes leftover after parsing attributes in process `syz.4.13475'. [ 1327.452739][T26805] netlink: 'syz.0.13477': attribute type 10 has an invalid length. [ 1327.580238][T26805] bond5: (slave veth0_to_bond): Releasing active interface [ 1327.594825][T26805] veth0_to_bond: left promiscuous mode [ 1327.608279][T26805] veth0_to_bond: left allmulticast mode [ 1327.630858][T26805] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1327.662100][T31057] net_ratelimit: 23 callbacks suppressed [ 1327.662119][T31057] bond8: (slave bridge8): failed to get link speed/duplex [ 1327.771081][T26819] syzkaller0: entered promiscuous mode [ 1327.807259][T26819] syzkaller0: entered allmulticast mode [ 1327.952622][ T2620] bond8: (slave bridge8): failed to get link speed/duplex [ 1328.144585][ T7080] hsr_slave_0: left promiscuous mode [ 1328.160700][ T7080] hsr_slave_1: left promiscuous mode [ 1328.284018][ T7785] block nbd1: Receive control failed (result -32) [ 1328.408494][T26870] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1328.438092][T26870] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1328.499531][T31057] smc: removing ib device uyz0 [ 1328.513302][ T9] IPVS: starting estimator thread 0... [ 1328.530926][T26871] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13496'. [ 1328.593262][T31070] bond8: (slave bridge8): failed to get link speed/duplex [ 1328.621753][T26874] IPVS: using max 32 ests per chain, 76800 per kthread [ 1328.641586][T31057] smbdirect: ib_dev[uyz0] removed [ 1328.775584][T26886] nbd: must specify a size in bytes for the device [ 1329.031953][T31070] bond8: (slave bridge8): failed to get link speed/duplex [ 1329.152783][T31059] bond8: (slave bridge8): failed to get link speed/duplex [ 1329.273095][ T2620] bond8: (slave bridge8): failed to get link speed/duplex [ 1329.493033][T26912] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13503'. [ 1329.597973][ T7069] bond8: (slave bridge8): failed to get link speed/duplex [ 1329.619631][T26912] netlink: 'syz.0.13503': attribute type 1 has an invalid length. [ 1329.667709][T26887] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 1329.672764][T26912] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13503'. [ 1329.754897][T31059] bond8: (slave bridge8): failed to get link speed/duplex [ 1330.460736][T26953] netlink: 'syz.1.13515': attribute type 1 has an invalid length. [ 1330.567813][T26953] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1330.656515][T26957] bond4: (slave syz_tun): Enslaving as a backup interface with an up link [ 1330.797638][T26965] IPVS: set_ctl: invalid protocol: 0 172.20.20.61:20003 [ 1330.832665][ T7785] Bluetooth: hci2: command 0x0405 tx timeout [ 1331.538881][T26999] IPVS: set_ctl: invalid protocol: 4 224.0.0.1:20002 [ 1331.622149][T27001] tipc: Enabled bearer , priority 0 [ 1331.641452][T27001] syzkaller0: entered promiscuous mode [ 1331.665385][T27001] syzkaller0: entered allmulticast mode [ 1331.698533][T27001] tipc: Resetting bearer [ 1331.725050][T27000] tipc: Resetting bearer [ 1331.751923][T27000] tipc: Disabling bearer [ 1331.800913][ T7080] IPVS: stop unused estimator thread 0... [ 1331.905746][T27008] __nla_validate_parse: 5 callbacks suppressed [ 1331.905769][T27008] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13528'. [ 1331.929652][T27008] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13528'. [ 1331.940833][T27010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13530'. [ 1331.960706][T27010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13530'. [ 1332.091241][T27019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13534'. [ 1332.100939][T27019] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13534'. [ 1332.120428][T27019] GUP no longer grows the stack in syz.0.13534 (27019): 200000003000-20000000a000 (200000001000) [ 1332.134005][T27019] CPU: 1 UID: 0 PID: 27019 Comm: syz.0.13534 Not tainted syzkaller #0 PREEMPT(full) [ 1332.134036][T27019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1332.134052][T27019] Call Trace: [ 1332.134071][T27019] [ 1332.134114][T27019] dump_stack_lvl+0xe8/0x150 [ 1332.134303][T27019] __get_user_pages+0x238c/0x2720 [ 1332.134391][T27019] ? __gup_longterm_locked+0xc3b/0x15c0 [ 1332.134459][T27019] ? rcu_is_watching+0x15/0xb0 [ 1332.134537][T27019] __gup_longterm_locked+0xd52/0x15c0 [ 1332.134562][T27019] ? gup_fast_fallback+0xbc4/0x20d0 [ 1332.134586][T27019] ? rcu_is_watching+0x15/0xb0 [ 1332.134607][T27019] ? rcu_is_watching+0x15/0xb0 [ 1332.134630][T27019] gup_fast_fallback+0x1d82/0x20d0 [ 1332.134671][T27019] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1332.134696][T27019] ? __fget_files+0x2a/0x420 [ 1332.134751][T27019] ? is_valid_gup_args+0x11f/0x200 [ 1332.134775][T27019] ? get_user_pages_fast+0x4d/0xb0 [ 1332.134799][T27019] __iov_iter_get_pages_alloc+0x378/0xa40 [ 1332.134921][T27019] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 1332.135008][T27019] iov_iter_get_pages2+0x5e/0xa0 [ 1332.135037][T27019] __se_sys_vmsplice+0x7b5/0x1660 [ 1332.135074][T27019] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 1332.135102][T27019] ? __pfx_futex_wake+0x10/0x10 [ 1332.135162][T27019] ? rcu_is_watching+0x15/0xb0 [ 1332.135213][T27019] ? rcu_is_watching+0x15/0xb0 [ 1332.135235][T27019] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1332.135270][T27019] do_syscall_64+0x174/0x580 [ 1332.135383][T27019] ? trace_irq_disable+0x3b/0x140 [ 1332.135437][T27019] ? clear_bhb_loop+0x40/0x90 [ 1332.135481][T27019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1332.135502][T27019] RIP: 0033:0x7f34baf9ce59 [ 1332.135546][T27019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1332.135587][T27019] RSP: 002b:00007f34b91f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1332.135635][T27019] RAX: ffffffffffffffda RBX: 00007f34bb215fa0 RCX: 00007f34baf9ce59 [ 1332.135651][T27019] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a [ 1332.135664][T27019] RBP: 00007f34bb032e6f R08: 0000000000000000 R09: 0000000000000000 [ 1332.135677][T27019] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1332.135689][T27019] R13: 00007f34bb216038 R14: 00007f34bb215fa0 R15: 00007fff1c3d99c8 [ 1332.135715][T27019] [ 1332.561404][T27029] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1332.605375][T27028] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1332.676791][T27045] netlink: 'syz.4.13541': attribute type 5 has an invalid length. [ 1332.722118][T31057] net_ratelimit: 13 callbacks suppressed [ 1332.722138][T31057] bond8: (slave bridge8): failed to get link speed/duplex [ 1332.873003][ T7080] bond8: (slave bridge8): failed to get link speed/duplex [ 1332.982777][ T2620] bond8: (slave bridge8): failed to get link speed/duplex [ 1333.092087][T31059] bond8: (slave bridge8): failed to get link speed/duplex [ 1333.202213][ T7080] bond8: (slave bridge8): failed to get link speed/duplex [ 1333.213716][T27067] netlink: 'syz.0.13545': attribute type 89 has an invalid length. [ 1333.225791][T27067] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13545'. [ 1333.240325][T27069] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1333.321633][T31059] bond8: (slave bridge8): failed to get link speed/duplex [ 1333.461875][ T7080] bond8: (slave bridge8): failed to get link speed/duplex [ 1333.572094][ T2620] bond8: (slave bridge8): failed to get link speed/duplex [ 1333.681692][T31059] bond8: (slave bridge8): failed to get link speed/duplex [ 1333.791854][T31059] bond8: (slave bridge8): failed to get link speed/duplex [ 1333.994917][T27058] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1334.063666][T27098] vlan6: entered allmulticast mode [ 1334.072126][T27098] bond0: entered allmulticast mode [ 1334.082940][T27098] bond_slave_0: entered allmulticast mode [ 1334.090114][T27098] bond_slave_1: entered allmulticast mode [ 1334.096654][T27098] veth0_to_bond: entered allmulticast mode [ 1334.105023][T27098] netlink: 14 bytes leftover after parsing attributes in process `syz.0.13555'. [ 1334.110174][T27101] dummy0: left promiscuous mode [ 1334.120637][T27101] dummy0: entered allmulticast mode [ 1334.157035][T27098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1334.168100][T27098] bond_slave_0: left allmulticast mode [ 1334.177795][T27098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1334.191164][T27098] bond_slave_1: left allmulticast mode [ 1334.203172][T27098] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 1334.212151][T27106] nbd: nbd2 already in use [ 1334.217425][T27098] veth0_to_bond: left allmulticast mode [ 1334.225055][T27098] bond0 (unregistering): Released all slaves [ 1334.239689][T27104] =v: renamed from veth0_to_bond [ 1334.582235][T27131] bond0: (slave wlan0): Error: Device can not be enslaved while up [ 1334.636944][T27137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13568'. [ 1334.883643][T27149] tunl0: Caught tx_queue_len zero misconfig [ 1335.241134][T27165] veth1: entered promiscuous mode [ 1335.254322][T27165] macsec1: entered promiscuous mode [ 1335.267935][T27165] macsec1: entered allmulticast mode [ 1335.275369][T27165] veth1: entered allmulticast mode [ 1335.292280][T27165] veth1: left allmulticast mode [ 1335.298664][T27165] veth1: left promiscuous mode [ 1335.327682][T27168] xt_hashlimit: size too large, truncated to 1048576 [ 1335.334605][T27168] xt_hashlimit: max too large, truncated to 1048576 [ 1335.343142][T27168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13577'. [ 1335.367712][T27168] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1335.456899][T27168] bond7: (slave veth13): Enslaving as an active interface with an up link [ 1335.563054][T27183] ip6gre1: entered promiscuous mode [ 1335.579957][T27183] ip6gre1: entered allmulticast mode [ 1335.816449][T27202] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1335.845880][T27204] syzkaller0: entered promiscuous mode [ 1335.851714][T27204] syzkaller0: entered allmulticast mode [ 1335.974971][T27208] syzkaller1: entered allmulticast mode [ 1335.984611][T27212] netlink: 'syz.2.13590': attribute type 1 has an invalid length. [ 1336.031459][T27215] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 1336.346701][T27253] netlink: 'syz.1.13603': attribute type 1 has an invalid length. [ 1336.782349][ T7069] bond4: (slave syz_tun): link status definitely down, disabling slave [ 1336.855385][T27279] sch_tbf: burst 0 is lower than device veth15 mtu (1514) ! [ 1336.963126][T27285] vlan1: entered promiscuous mode [ 1336.972364][T27285] bridge0: entered promiscuous mode [ 1337.070304][T27300] netlink: 'syz.4.13611': attribute type 4 has an invalid length. [ 1337.326535][T27301] bridge0: port 1(bridge_slave_0) entered disabled state [ 1337.344849][T27301] dummy0: left promiscuous mode [ 1337.382641][T27301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1337.393866][T27301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1337.499700][T27301] vlan2: left allmulticast mode [ 1337.505425][T27301] bond0: left allmulticast mode [ 1337.510427][T27301] bond_slave_0: left allmulticast mode [ 1337.516709][T27301] bond_slave_1: left allmulticast mode [ 1337.539994][T27301] ipvlan2: left promiscuous mode [ 1337.549212][T27301] bond2: left promiscuous mode [ 1337.556255][T27301] macsec1: left promiscuous mode [ 1337.564948][T27301] bond3: left promiscuous mode [ 1337.589165][T31057] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1337.617218][T31057] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.649499][T31057] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1337.679278][T31057] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.764813][T31057] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1337.797758][T31057] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.841247][T31057] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1337.886446][T31057] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.932251][ T7067] net_ratelimit: 22 callbacks suppressed [ 1337.932271][ T7067] bond8: (slave bridge8): failed to get link speed/duplex [ 1338.059206][T27334] __nla_validate_parse: 14 callbacks suppressed [ 1338.059227][T27334] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13620'. [ 1338.141662][T31068] bond8: (slave bridge8): failed to get link speed/duplex [ 1338.412942][T27359] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13626'. [ 1338.422722][T27359] openvswitch: netlink: Flow key attr not present in new flow. [ 1338.462614][ T7067] bond8: (slave bridge8): failed to get link speed/duplex [ 1338.612072][T31068] bond8: (slave bridge8): failed to get link speed/duplex [ 1338.649890][T27370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13628'. [ 1338.735521][T31068] bond8: (slave bridge8): failed to get link speed/duplex [ 1338.851863][T31068] bond8: (slave bridge8): failed to get link speed/duplex [ 1338.895150][T27395] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13637'. [ 1338.904889][T27395] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13637'. [ 1338.964962][T27399] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1338.982380][T31068] bond8: (slave bridge8): failed to get link speed/duplex [ 1339.057400][T27408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13642'. [ 1339.068879][T27408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13642'. [ 1339.092716][ T7080] bond8: (slave bridge8): failed to get link speed/duplex [ 1339.136149][T27406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13641'. [ 1339.147802][T27406] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20000 [ 1339.155820][T27406] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1339.190254][T27410] netlink: 56 bytes leftover after parsing attributes in process `syz.0.13643'. [ 1339.268350][T27419] netlink: 'syz.4.13646': attribute type 1 has an invalid length. [ 1339.276746][T27419] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13646'. [ 1339.494682][T27429] bond3: (slave netdevsim0): Releasing active interface [ 1339.853616][T27471] syzkaller1: entered promiscuous mode [ 1339.864911][T27465] can: request_module (can-proto-0) failed. [ 1339.872567][T27471] syzkaller1: entered allmulticast mode [ 1339.925045][T27465] netlink: 'syz.4.13656': attribute type 1 has an invalid length. [ 1339.950684][T27465] dummy0: left promiscuous mode [ 1339.958874][T27465] batman_adv: batadv0: Adding interface: dummy0 [ 1339.965413][T27465] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 1339.986146][T27465] batman_adv: batadv0: Interface activated: dummy0 [ 1340.067055][T27484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1340.138838][T27496] bond0: (slave batadv1): Opening slave failed [ 1340.190796][T27501] sctp: [Deprecated]: syz.4.13666 (pid 27501) Use of int in max_burst socket option deprecated. [ 1340.190796][T27501] Use struct sctp_assoc_value instead [ 1340.341339][T27514] bond8: entered promiscuous mode [ 1340.347920][T27514] bond8: entered allmulticast mode [ 1340.643561][T27545] tipc: Enabled bearer , priority 2 [ 1340.950826][T27566] netlink: 'syz.3.13684': attribute type 1 has an invalid length. [ 1340.981125][T27566] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1341.001996][T27566] bond9: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 1341.013816][T27566] bond9: entered allmulticast mode [ 1341.034498][T27566] bond9: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1341.100685][T27571] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1341.176278][T27580] syz_tun: entered allmulticast mode [ 1341.189332][T27580] dvmrp6: entered allmulticast mode [ 1341.202646][T27578] syz_tun: left allmulticast mode [ 1341.284249][T27588] pim6reg: entered allmulticast mode [ 1341.365459][T27590] bridge3: entered promiscuous mode [ 1341.372171][T27590] bridge3: entered allmulticast mode [ 1341.409316][T27590] hmó3)ó€: entered promiscuous mode [ 1341.533313][T27602] veth17: entered promiscuous mode [ 1341.539210][T27602] veth17: entered allmulticast mode [ 1341.548254][T27602] team0: Port device veth17 added [ 1341.831729][T27316] tipc: Node number set to 655665921 [ 1342.019846][T27638] syzkaller0: entered promiscuous mode [ 1342.025638][T27638] syzkaller0: entered allmulticast mode [ 1342.226646][T27653] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1342.244329][T27658] dummy0: left promiscuous mode [ 1342.347616][T27653] xfrm0: Caught tx_queue_len zero misconfig [ 1342.368948][T27665] x_tables: duplicate underflow at hook 1 [ 1342.868926][T27712] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1343.001308][T27720] syzkaller0: entered promiscuous mode [ 1343.015567][T27720] syzkaller0: entered allmulticast mode [ 1343.127130][T31057] net_ratelimit: 55 callbacks suppressed [ 1343.127151][T31057] bond8: (slave bridge8): failed to get link speed/duplex [ 1343.186741][T27731] __nla_validate_parse: 27 callbacks suppressed [ 1343.186883][T27731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13739'. [ 1343.262623][T31057] bond8: (slave bridge8): failed to get link speed/duplex [ 1343.324864][T27740] lo speed is unknown, defaulting to 1000 [ 1343.340633][T27740] lo speed is unknown, defaulting to 1000 [ 1343.354727][T27740] lo speed is unknown, defaulting to 1000 [ 1343.403492][T31057] bond8: (slave bridge8): failed to get link speed/duplex [ 1343.531979][T31057] bond8: (slave bridge8): failed to get link speed/duplex [ 1343.548849][T27760] tunl0: entered allmulticast mode [ 1343.652178][T31057] bond8: (slave bridge8): failed to get link speed/duplex [ 1343.725609][T27744] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20002 [ 1343.747643][T27744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13744'. [ 1343.772096][T31057] bond8: (slave bridge8): failed to get link speed/duplex [ 1343.778571][T27744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13744'. [ 1343.843654][T27770] x_tables: duplicate underflow at hook 3 [ 1343.902179][T31070] bond8: (slave bridge8): failed to get link speed/duplex [ 1344.036320][T31059] bond8: (slave bridge8): failed to get link speed/duplex [ 1344.065106][T27740] infiniband syz1: set active [ 1344.070091][ T5713] lo speed is unknown, defaulting to 1000 [ 1344.098154][T27740] infiniband syz1: added lo [ 1344.108432][T27779] bond6 (unregistering): Released all slaves [ 1344.192188][ T7080] bond8: (slave bridge8): failed to get link speed/duplex [ 1344.275798][T27740] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1344.303827][T31059] bond8: (slave bridge8): failed to get link speed/duplex [ 1344.438448][T27740] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1344.469208][T27740] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1344.499783][T27740] RDS/IB: syz1: added [ 1344.505874][T27740] smc: adding ib device syz1 with port count 1 [ 1344.518352][T27740] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 1344.547411][ T9358] lo speed is unknown, defaulting to 1000 [ 1344.553881][T27740] lo speed is unknown, defaulting to 1000 [ 1344.576499][T27795] x_tables: unsorted entry at hook 3 [ 1344.601667][T27797] netlink: 'syz.2.13759': attribute type 2 has an invalid length. [ 1344.870695][T27811] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13761'. [ 1344.899814][T27811] netlink: 'syz.2.13761': attribute type 1 has an invalid length. [ 1344.904072][T27740] lo speed is unknown, defaulting to 1000 [ 1345.200169][T27740] lo speed is unknown, defaulting to 1000 [ 1345.378048][T27740] lo speed is unknown, defaulting to 1000 [ 1345.465789][T27838] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13770'. [ 1345.490117][T27840] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13771'. [ 1345.503814][T27841] syzkaller0: entered promiscuous mode [ 1345.509756][T27841] syzkaller0: entered allmulticast mode [ 1345.517516][T27838] tipc: Enabling of bearer rejected, failed to enable media [ 1345.613252][T27848] syzkaller0: entered promiscuous mode [ 1345.624084][T27849] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1345.638783][T27848] syzkaller0: entered allmulticast mode [ 1345.654209][T27740] lo speed is unknown, defaulting to 1000 [ 1345.779575][T27740] lo speed is unknown, defaulting to 1000 [ 1345.911312][T27856] netlink: 31 bytes leftover after parsing attributes in process `syz.1.13774'. [ 1345.938979][T27856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13774'. [ 1346.017862][T27740] lo speed is unknown, defaulting to 1000 [ 1346.041431][T27866] syzkaller1: entered promiscuous mode [ 1346.047115][T27856] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13774'. [ 1346.058148][T27866] syzkaller1: entered allmulticast mode [ 1346.207759][T27875] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1346.257044][T27740] lo speed is unknown, defaulting to 1000 [ 1346.368222][T27883] syzkaller0: entered promiscuous mode [ 1346.380007][T27883] syzkaller0: entered allmulticast mode [ 1346.387904][T27892] netlink: 2 bytes leftover after parsing attributes in process `syz.2.13785'. [ 1346.427693][T27740] lo speed is unknown, defaulting to 1000 [ 1346.587031][T27740] lo speed is unknown, defaulting to 1000 [ 1346.729067][T27740] lo speed is unknown, defaulting to 1000 [ 1346.846399][T27740] lo speed is unknown, defaulting to 1000 [ 1346.968575][T27740] lo speed is unknown, defaulting to 1000 [ 1347.062643][T27918] syzkaller0: entered promiscuous mode [ 1347.078870][T27918] syzkaller0: entered allmulticast mode [ 1347.105643][T27918] tipc: Enabled bearer , priority 0 [ 1347.139006][T27918] tipc: Resetting bearer [ 1347.164675][T27922] IPv6: sit1: Disabled Multicast RS [ 1347.183867][T27922] sit1: entered allmulticast mode [ 1347.193531][T27740] lo speed is unknown, defaulting to 1000 [ 1347.200215][T27917] tipc: Resetting bearer [ 1347.226504][T27917] tipc: Disabling bearer [ 1347.369411][T27740] lo speed is unknown, defaulting to 1000 [ 1347.430632][T27939] bridge_slave_0 (unregistering): left allmulticast mode [ 1347.452168][T27939] bridge_slave_0 (unregistering): left promiscuous mode [ 1347.462883][T27939] bridge0: port 1(bridge_slave_0) entered disabled state [ 1347.777301][T27956] 0ªî{X¹¦: renamed from gretap0 [ 1347.817617][T27956] 0ªî{X¹¦: entered allmulticast mode [ 1347.879535][T27964] netlink: 'syz.0.13807': attribute type 2 has an invalid length. [ 1348.086609][T27977] netlink: 'syz.1.13806': attribute type 6 has an invalid length. [ 1348.103821][T27977] netlink: 'syz.1.13806': attribute type 6 has an invalid length. [ 1348.222314][ T7080] net_ratelimit: 30 callbacks suppressed [ 1348.222334][ T7080] bond8: (slave bridge8): failed to get link speed/duplex [ 1348.362462][T31059] bond8: (slave bridge8): failed to get link speed/duplex [ 1348.409332][T31057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1348.419571][T27997] syzkaller0: entered promiscuous mode [ 1348.433356][T31057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1348.440797][T27997] syzkaller0: entered allmulticast mode [ 1348.464740][T27972] lo speed is unknown, defaulting to 1000 [ 1348.472985][T28001] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1348.490881][T31059] bond8: (slave bridge8): failed to get link speed/duplex [ 1348.549008][T28001] __nla_validate_parse: 6 callbacks suppressed [ 1348.549029][T28001] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13817'. [ 1348.578579][T28004] syzkaller0: entered promiscuous mode [ 1348.596233][T28004] syzkaller0: entered allmulticast mode [ 1348.613641][T31070] bond8: (slave bridge8): failed to get link speed/duplex [ 1348.669695][T28005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1348.731584][ T7080] bond8: (slave bridge8): failed to get link speed/duplex [ 1348.757111][T28014] netlink: 72 bytes leftover after parsing attributes in process `syz.0.13818'. [ 1348.783324][T28014] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13818'. [ 1348.806005][T28014] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13818'. [ 1348.828753][T28014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13818'. [ 1348.922111][T31059] bond8: (slave bridge8): failed to get link speed/duplex [ 1349.031632][ T7080] bond8: (slave bridge8): failed to get link speed/duplex [ 1349.120895][T28027] syzkaller1: entered promiscuous mode [ 1349.127989][T28027] syzkaller1: entered allmulticast mode [ 1349.163155][T31070] bond8: (slave bridge8): failed to get link speed/duplex [ 1349.226425][T28027] xt_CT: No such helper "snmp_trap" [ 1349.302576][T31070] bond8: (slave bridge8): failed to get link speed/duplex [ 1349.424144][T31070] bond8: (slave bridge8): failed to get link speed/duplex [ 1349.573059][T28044] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13827'. [ 1349.604026][T28046] netlink: 'syz.3.13828': attribute type 1 has an invalid length. [ 1349.644293][T28046] bond10: entered promiscuous mode [ 1349.649966][T28046] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1349.681175][T28046] bond10: (slave bridge2): making interface the new active one [ 1349.691196][T28046] bridge2: entered promiscuous mode [ 1349.698843][T28046] bond10: (slave bridge2): Enslaving as an active interface with an up link [ 1349.760347][T28049] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.13829'. [ 1349.917836][T28057] hsr0: entered promiscuous mode [ 1349.940031][T28057] lo: Caught tx_queue_len zero misconfig [ 1349.961423][T28057] gretap1: entered allmulticast mode [ 1350.039402][T28061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13834'. [ 1350.057867][T28061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13834'. [ 1350.067454][T28062] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13836'. [ 1350.097929][T28062] ip6gre1: entered promiscuous mode [ 1350.106682][T28062] ip6gre1: entered allmulticast mode [ 1350.269741][T28084] bridge0: port 2(bridge_slave_1) entered disabled state [ 1350.277181][T28084] bridge0: port 1(bridge_slave_0) entered disabled state [ 1350.523761][T28103] (: left allmulticast mode [ 1350.530675][T28103] (: left promiscuous mode [ 1350.542242][T28103] bridge0: port 1(() entered disabled state [ 1350.557313][T28103] bridge_slave_1: left allmulticast mode [ 1350.568215][T28103] bridge_slave_1: left promiscuous mode [ 1350.578509][T28103] bridge0: port 2(bridge_slave_1) entered disabled state [ 1350.599827][T28103] bond0: (slave bond_slave_0): Releasing backup interface [ 1350.628171][T28103] bond0: (slave bond_slave_1): Releasing backup interface [ 1350.715160][T28103] team0: Port device team_slave_0 removed [ 1350.760558][T28103] team0: Port device team_slave_1 removed [ 1350.778932][T28103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1350.799608][T28103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1350.816295][T28103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1350.829250][T28103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1350.843247][T31059] wlan1: Trigger new scan to find an IBSS to join [ 1351.024775][T28119] syzkaller0: entered promiscuous mode [ 1351.044856][T28119] syzkaller0: entered allmulticast mode [ 1351.082194][T28125] netlink: 'syz.3.13851': attribute type 4 has an invalid length. [ 1351.096285][T28125] netlink: 'syz.3.13851': attribute type 1 has an invalid length. [ 1351.132852][T28125] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1351.269220][T28125] bond11: (slave geneve3): making interface the new active one [ 1351.279131][T28125] bond11: (slave geneve3): Enslaving as an active interface with an up link [ 1351.532927][T28159] netlink: 'syz.3.13861': attribute type 1 has an invalid length. [ 1352.074683][T28203] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1352.087638][T28203] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.160250][T28203] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1352.173156][T28203] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.212475][T28211] gre0: entered promiscuous mode [ 1352.217462][T28211] gre0: entered allmulticast mode [ 1352.335161][T28203] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1352.361281][T28203] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.448964][T28203] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1352.473386][T28203] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.548694][T28227] xt_cgroup: path and classid specified [ 1352.586599][T31059] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1352.596913][T31059] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1352.619663][T31059] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1352.631289][T31059] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1352.656603][ T7080] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1352.676727][ T7080] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1352.710698][ T7080] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1352.723675][ T7080] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1353.119398][T22319] udevd[22319]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1353.136836][T28268] TCP: TCP_TX_DELAY enabled [ 1353.152007][ T7785] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1353.301877][ T7067] net_ratelimit: 29 callbacks suppressed [ 1353.301896][ T7067] bond8: (slave bridge8): failed to get link speed/duplex [ 1353.409816][T28281] netlink: 'syz.3.13894': attribute type 2 has an invalid length. [ 1353.430370][T28281] netlink: 'syz.3.13894': attribute type 1 has an invalid length. [ 1353.438743][T31057] bond8: (slave bridge8): failed to get link speed/duplex [ 1353.448100][T28281] netlink: 'syz.3.13894': attribute type 2 has an invalid length. [ 1353.456417][T28281] netlink: 'syz.3.13894': attribute type 2 has an invalid length. [ 1353.481343][T28281] netlink: 'syz.3.13894': attribute type 2 has an invalid length. [ 1353.528616][T28289] netlink: 'syz.1.13897': attribute type 8 has an invalid length. [ 1353.537458][T28281] netlink: 'syz.3.13894': attribute type 1 has an invalid length. [ 1353.546004][T28289] sch_fq: defrate 0 ignored. [ 1353.552456][ T7080] bond8: (slave bridge8): failed to get link speed/duplex [ 1353.662250][ T7080] bond8: (slave bridge8): failed to get link speed/duplex [ 1353.700552][T28302] __nla_validate_parse: 19 callbacks suppressed [ 1353.700575][T28302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13901'. [ 1353.724247][T28302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1353.740007][T28302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1353.781897][ T7067] bond8: (slave bridge8): failed to get link speed/duplex [ 1353.873726][T31070] wlan1: Trigger new scan to find an IBSS to join [ 1353.883509][T28312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13905'. [ 1353.911906][ T7067] bond8: (slave bridge8): failed to get link speed/duplex [ 1353.993718][T28314] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.13906'. [ 1354.032304][T31070] bond8: (slave bridge8): failed to get link speed/duplex [ 1354.079129][T28307] lo speed is unknown, defaulting to 1000 [ 1354.162165][T31057] bond8: (slave bridge8): failed to get link speed/duplex [ 1354.244963][T28328] netlink: 104 bytes leftover after parsing attributes in process `syz.1.13911'. [ 1354.282813][T31070] bond8: (slave bridge8): failed to get link speed/duplex [ 1354.401796][ T7067] bond8: (slave bridge8): failed to get link speed/duplex [ 1354.647245][T28354] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13915'. [ 1354.703236][T28356] geneve0: Caught tx_queue_len zero misconfig [ 1355.169115][T28385] syzkaller0: entered promiscuous mode [ 1355.183187][T28385] syzkaller0: entered allmulticast mode [ 1355.225863][T28344] lo speed is unknown, defaulting to 1000 [ 1355.259042][T28399] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13926'. [ 1355.737787][T28413] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13930'. [ 1356.067599][T28411] lo speed is unknown, defaulting to 1000 [ 1356.173660][T28427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13935'. [ 1356.206626][T28428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13935'. [ 1356.288730][T28431] dvmrp1: entered allmulticast mode [ 1356.674318][T28452] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1356.691215][T28452] bond7: (slave lo): Enslaving as an active interface with an up link [ 1356.782114][T28433] lo speed is unknown, defaulting to 1000 [ 1356.832654][T31070] wlan1: Trigger new scan to find an IBSS to join [ 1357.439575][T28470] lo speed is unknown, defaulting to 1000 [ 1357.660742][T28490] bridge0: left promiscuous mode [ 1357.669226][T28490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1357.680358][T28490] 8021q: adding VLAN 0 to HW filter on device team0 [ 1357.724649][T28490] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1357.738060][T28490] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1357.758402][T28490] veth1_vlan: left promiscuous mode [ 1357.765939][T28490] veth0_vlan: left promiscuous mode [ 1357.772650][T28490] veth0_vlan: entered promiscuous mode [ 1357.778520][ T7069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1357.790006][T28490] veth1_vlan: entered promiscuous mode [ 1357.802482][T28490] veth1_macvtap: left promiscuous mode [ 1357.809469][T28490] veth0_macvtap: left promiscuous mode [ 1357.818547][T28490] veth0_macvtap: entered promiscuous mode [ 1357.826246][T28490] veth1_macvtap: entered promiscuous mode [ 1357.846592][T28490] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1357.881309][T28490] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1357.891335][T28490] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1357.899474][T28490] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1357.907389][T28490] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1357.932636][T28493] syzkaller0: entered promiscuous mode [ 1357.948551][T28493] syzkaller0: entered allmulticast mode [ 1357.972583][T31070] bridge0: port 1(bridge_slave_0) entered blocking state [ 1357.979880][T31070] bridge0: port 1(bridge_slave_0) entered listening state [ 1357.995675][T31070] bridge0: port 2(bridge_slave_1) entered blocking state [ 1358.002864][T31070] bridge0: port 2(bridge_slave_1) entered listening state [ 1358.035651][T31068] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1358.044761][T31068] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.053890][T31068] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1358.062768][T31068] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.071024][T31068] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1358.079777][T31068] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.104214][T31068] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1358.122095][T31068] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.230460][T28506] tipc: Enabling of bearer rejected, failed to enable media [ 1358.246409][T28506] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13959'. [ 1358.321914][T31059] net_ratelimit: 23 callbacks suppressed [ 1358.321935][T31059] bond8: (slave bridge8): failed to get link speed/duplex [ 1358.387929][T28514] IPv6: sit2: Disabled Multicast RS [ 1358.631680][T31057] bond8: (slave bridge8): failed to get link speed/duplex [ 1358.673242][T28524] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1358.739272][T28533] __nla_validate_parse: 3 callbacks suppressed [ 1358.739292][T28533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13967'. [ 1358.765390][ T7069] bond8: (slave bridge8): failed to get link speed/duplex [ 1358.814506][T28533] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1358.866210][T28538] syzkaller0: entered promiscuous mode [ 1358.872185][T28538] syzkaller0: entered allmulticast mode [ 1358.887379][T28533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13967'. [ 1358.896911][T31057] bond8: (slave bridge8): failed to get link speed/duplex [ 1358.908721][T28538] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13969'. [ 1359.011855][T31057] bond8: (slave bridge8): failed to get link speed/duplex [ 1359.122084][ T7080] bond8: (slave bridge8): failed to get link speed/duplex [ 1359.232140][T31070] bond8: (slave bridge8): failed to get link speed/duplex [ 1359.371854][T31057] bond8: (slave bridge8): failed to get link speed/duplex [ 1359.533488][T31070] bond8: (slave bridge8): failed to get link speed/duplex [ 1359.795816][T28579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13981'. [ 1359.842318][T28579] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 1359.877572][T28584] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13982'. [ 1359.930132][T28584] validate_nla: 2 callbacks suppressed [ 1359.930154][T28584] netlink: 'syz.4.13982': attribute type 3 has an invalid length. [ 1360.126851][T28600] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13985'. [ 1360.298801][T28611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13988'. [ 1360.347245][T28611] bridge1: port 1(veth3) entered blocking state [ 1360.360738][T28611] bridge1: port 1(veth3) entered disabled state [ 1360.368379][T28611] veth3: entered allmulticast mode [ 1360.377451][T28611] veth3: entered promiscuous mode [ 1360.966858][T28637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13993'. [ 1360.999599][T28637] v: renamed from gre0 (while UP) [ 1361.043837][T28637] v: left allmulticast mode [ 1361.056295][T28637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13993'. [ 1361.262641][T28627] lo speed is unknown, defaulting to 1000 [ 1361.341734][T28659] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13997'. [ 1361.472220][T28666] 1ªî{X¹¦: left allmulticast mode [ 1361.482421][T28666] batman_adv: batadv0: Interface deactivated: dummy0 [ 1361.525747][T28666] veth5: left allmulticast mode [ 1361.544034][T28666] bridge2: left promiscuous mode [ 1361.557142][T28670] netlink: 'syz.2.13999': attribute type 1 has an invalid length. [ 1361.567308][T28666] bridge3: left promiscuous mode [ 1361.579549][T28668] netlink: 'syz.2.13999': attribute type 1 has an invalid length. [ 1361.587672][T28666] bridge3: left allmulticast mode [ 1361.587915][T28666] ip6gre3: left promiscuous mode [ 1361.587940][T28666] ip6gre3: left allmulticast mode [ 1361.588402][T28666] ipvlan2: left allmulticast mode [ 1361.593749][T28666] bond4: left allmulticast mode [ 1361.594573][T28666] ip6gre4: left allmulticast mode [ 1361.668675][T28669] Cannot find add_set index 2 as target [ 1361.684070][T28666] bond6: left promiscuous mode [ 1361.694108][T28666] bond6: left allmulticast mode [ 1363.324917][T28753] syzkaller0: entered promiscuous mode [ 1363.330489][T28753] syzkaller0: entered allmulticast mode [ 1363.352846][T28733] lo speed is unknown, defaulting to 1000 [ 1363.372349][ T7067] net_ratelimit: 25 callbacks suppressed [ 1363.372373][ T7067] bond8: (slave bridge8): failed to get link speed/duplex [ 1363.627377][T28773] netlink: 'syz.0.14026': attribute type 11 has an invalid length. [ 1363.639234][T28773] netlink: 'syz.0.14026': attribute type 11 has an invalid length. [ 1363.647751][T28772] netlink: 'syz.0.14026': attribute type 11 has an invalid length. [ 1363.681425][T28772] netlink: 'syz.0.14026': attribute type 11 has an invalid length. [ 1363.742101][ T7069] bond8: (slave bridge8): failed to get link speed/duplex [ 1363.944881][T28788] geneve3: entered promiscuous mode [ 1363.957471][ T7069] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 59137 - 0 [ 1363.972403][T31070] bond8: (slave bridge8): failed to get link speed/duplex [ 1363.995114][ T7069] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 59137 - 0 [ 1364.014467][ T7069] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 59137 - 0 [ 1364.046341][ T7069] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 59137 - 0 [ 1364.048514][T28792] nbd: must specify a device to reconfigure [ 1364.088405][T28795] tipc: Enabled bearer , priority 0 [ 1364.099811][T28792] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20001 [ 1364.122023][T28795] syzkaller0: entered promiscuous mode [ 1364.135410][T28795] syzkaller0: entered allmulticast mode [ 1364.174977][T28804] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1364.255379][T28805] tipc: Resetting bearer [ 1364.292376][T31059] bond8: (slave bridge8): failed to get link speed/duplex [ 1364.378232][T28793] tipc: Resetting bearer [ 1364.426815][T28793] tipc: Disabling bearer [ 1364.533560][T28824] __nla_validate_parse: 11 callbacks suppressed [ 1364.533578][T28824] netlink: 44 bytes leftover after parsing attributes in process `syz.2.14039'. [ 1364.651836][ T7069] bond8: (slave bridge8): failed to get link speed/duplex [ 1364.801390][T28834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14041'. [ 1364.812230][T31057] bond8: (slave bridge8): failed to get link speed/duplex [ 1365.447862][T28845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1365.462283][T31057] bond8: (slave bridge8): failed to get link speed/duplex [ 1365.587586][T31070] bond8: (slave bridge8): failed to get link speed/duplex [ 1365.604164][T28855] netlink: 'syz.0.14048': attribute type 142 has an invalid length. [ 1365.615664][T28855] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1365.623979][T28855] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1365.633387][T28855] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1365.766896][T28866] syzkaller0: entered promiscuous mode [ 1365.786737][T28866] syzkaller0: entered allmulticast mode [ 1365.796918][ T7067] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1365.902620][T28881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14054'. [ 1365.961984][T28883] netlink: 'syz.4.14055': attribute type 11 has an invalid length. [ 1365.971753][T28884] veth0: entered promiscuous mode [ 1366.557478][T28886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14056'. [ 1366.574705][T28886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14056'. [ 1366.734693][T28880] veth0: left promiscuous mode [ 1366.862766][T28890] sctp: [Deprecated]: syz.4.14057 (pid 28890) Use of int in maxseg socket option. [ 1366.862766][T28890] Use struct sctp_assoc_value instead [ 1368.382153][T31057] net_ratelimit: 24 callbacks suppressed [ 1368.382175][T31057] bond8: (slave bridge8): failed to get link speed/duplex [ 1368.501859][T31057] bond8: (slave bridge8): failed to get link speed/duplex [ 1368.611603][T31070] bond8: (slave bridge8): failed to get link speed/duplex [ 1368.661263][T28858] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1368.723321][T31070] bond8: (slave bridge8): failed to get link speed/duplex [ 1368.741438][T28901] netlink: 'syz.1.14062': attribute type 1 has an invalid length. [ 1368.842098][T31057] bond8: (slave bridge8): failed to get link speed/duplex [ 1368.883313][T22425] lo speed is unknown, defaulting to 1000 [ 1368.899584][T22425] syz1: Port: 1 Link DOWN [ 1368.936343][T27316] lo speed is unknown, defaulting to 1000 [ 1368.954878][T28913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14068'. [ 1368.976261][T28917] netlink: 'syz.0.14069': attribute type 1 has an invalid length. [ 1368.987849][T28916] syzkaller1: entered promiscuous mode [ 1368.994047][T28917] netlink: 244 bytes leftover after parsing attributes in process `syz.0.14069'. [ 1369.003868][T28916] syzkaller1: entered allmulticast mode [ 1369.016244][T28917] siw: device registration error -23 [ 1369.022828][ T7069] bond8: (slave bridge8): failed to get link speed/duplex [ 1369.141931][T31070] bond8: (slave bridge8): failed to get link speed/duplex [ 1369.271697][ T7069] bond8: (slave bridge8): failed to get link speed/duplex [ 1369.303751][T28937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14070'. [ 1369.313852][T28937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14070'. [ 1369.323457][T28930] netlink: 72 bytes leftover after parsing attributes in process `syz.1.14067'. [ 1369.333096][T28937] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1369.381991][T31059] bond8: (slave bridge8): failed to get link speed/duplex [ 1369.859570][T28951] xt_hashlimit: size too large, truncated to 1048576 [ 1370.023361][T28959] netlink: 'syz.1.14080': attribute type 3 has an invalid length. [ 1370.114648][T28969] netlink: 27 bytes leftover after parsing attributes in process `syz.0.14081'. [ 1370.349065][T28988] bond8: entered promiscuous mode [ 1370.354477][T28988] bond8: entered allmulticast mode [ 1370.399910][T28998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14090'. [ 1370.409436][T28998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14090'. [ 1370.418709][T28998] netlink: 'syz.2.14090': attribute type 12 has an invalid length. [ 1370.428430][T28998] netlink: 'syz.2.14090': attribute type 11 has an invalid length. [ 1370.544930][T29006] netlink: 220 bytes leftover after parsing attributes in process `syz.4.14093'. [ 1370.566086][T29008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14094'. [ 1370.687504][T29015] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14096'. [ 1371.031448][T29036] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0 [ 1371.096881][T29037] xt_l2tp: v2 tid > 0xffff: 37482740 [ 1371.195595][T29041] ip6tnl0: Caught tx_queue_len zero misconfig [ 1371.289725][T29039] lo speed is unknown, defaulting to 1000 [ 1371.549839][T29052] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14108'. [ 1371.642347][ T5624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1371.649732][ T5624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1371.657257][ T5624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1371.665974][T29054] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14108'. [ 1371.676129][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1371.683725][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1371.692044][T29054] nbd: nbd64 already in use [ 1371.819075][T29061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14109'. [ 1371.873840][ C1] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 1371.947658][T22319] udevd[22319]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1372.002005][T29061] bond10: option broadcast_neighbor: invalid value (30) [ 1372.048287][T29061] bond10 (unregistering): Released all slaves [ 1372.298566][T29076] syzkaller0: entered promiscuous mode [ 1372.305024][T29076] syzkaller0: entered allmulticast mode [ 1372.316460][T29078] netlink: 868 bytes leftover after parsing attributes in process `syz.0.14114'. [ 1372.523117][T29089] netlink: 'syz.2.14116': attribute type 1 has an invalid length. [ 1372.637819][T29094] nbd: nbd1 already in use [ 1372.652988][T29094] block nbd1: NBD_DISCONNECT [ 1372.669176][T29094] block nbd1: Send disconnect failed -32 [ 1372.695405][T29094] block nbd1: shutting down sockets [ 1372.708625][T29056] lo speed is unknown, defaulting to 1000 [ 1372.812991][T29092] nbd1: detected capacity change from 0 to 63 [ 1372.846278][ T7785] block nbd1: Receive control failed (result -104) [ 1373.094104][T29056] bridge0: port 1(bridge_slave_0) entered blocking state [ 1373.110236][T29056] bridge0: port 1(bridge_slave_0) entered disabled state [ 1373.122505][T29056] bridge_slave_0: entered allmulticast mode [ 1373.129917][T29056] bridge_slave_0: entered promiscuous mode [ 1373.175766][T29056] bridge0: port 2(bridge_slave_1) entered blocking state [ 1373.191950][T29056] bridge0: port 2(bridge_slave_1) entered disabled state [ 1373.199850][T29056] bridge_slave_1: entered allmulticast mode [ 1373.213753][T29056] bridge_slave_1: entered promiscuous mode [ 1373.241391][T29056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1373.283241][T29056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1373.340834][T29131] netlink: 'syz.2.14125': attribute type 1 has an invalid length. [ 1373.369297][T29056] team0: Port device team_slave_0 added [ 1373.412295][T29131] bond9: entered promiscuous mode [ 1373.424131][T29131] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1373.441884][T29056] team0: Port device team_slave_1 added [ 1373.469384][T29142] netlink: 'syz.0.14128': attribute type 3 has an invalid length. [ 1373.489021][T29056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1373.496981][T29056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1373.523516][T29056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1373.547406][T29131] bond9: (slave bridge7): making interface the new active one [ 1373.556650][T29131] bridge7: entered promiscuous mode [ 1373.563489][T29131] bond9: (slave bridge7): Enslaving as an active interface with an up link [ 1373.573044][T29056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1373.580060][T29056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1373.607402][T29056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1373.691710][T29056] hsr_slave_0: entered promiscuous mode [ 1373.698269][T29056] hsr_slave_1: entered promiscuous mode [ 1373.707676][T29056] debugfs: 'hsr0' already exists in 'hsr' [ 1373.714172][ T7785] Bluetooth: hci3: command tx timeout [ 1373.720087][T29056] Cannot create hsr debugfs directory [ 1373.856491][T29161] sit0: entered promiscuous mode [ 1373.876757][T29163] netlink: 'syz.2.14133': attribute type 1 has an invalid length. [ 1373.909793][T29161] netlink: 'syz.0.14134': attribute type 1 has an invalid length. [ 1373.931964][T29162] netlink: 'syz.0.14134': attribute type 1 has an invalid length. [ 1373.998986][T29170] netlink: 'syz.1.14136': attribute type 1 has an invalid length. [ 1374.025065][T29170] netlink: 'syz.1.14136': attribute type 1 has an invalid length. [ 1374.034799][T29163] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1374.057958][T29174] netlink: 'syz.0.14137': attribute type 3 has an invalid length. [ 1374.077199][T29163] netlink: 'syz.2.14133': attribute type 10 has an invalid length. [ 1374.124910][T29166] bond10: (slave veth7): Enslaving as a backup interface with a down link [ 1374.162436][T31059] net_ratelimit: 29 callbacks suppressed [ 1374.162458][T31059] bond8: (slave bridge8): failed to get link speed/duplex [ 1374.199995][T29172] bond4: (slave dummy0): Releasing active interface [ 1374.216980][T29172] bond10: (slave dummy0): Enslaving as a backup interface with an up link [ 1374.243611][T29163] dummy0: entered promiscuous mode [ 1374.261917][T31057] bond10: (slave dummy0): link status up again after 0 ms [ 1374.269945][T31057] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1374.287345][T29163] bond10: (slave dummy0): Removing an active aggregator [ 1374.293859][T31057] bond10: (slave dummy0): link status up again after 0 ms [ 1374.303110][T29163] bond10: (slave dummy0): Releasing backup interface [ 1374.336970][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1374.347076][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1374.358698][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1374.368851][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1374.376618][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1374.483345][T31059] bond8: (slave bridge8): failed to get link speed/duplex [ 1374.592211][T31059] bond8: (slave bridge8): failed to get link speed/duplex [ 1374.670461][T29056] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1374.686984][T29056] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1374.702213][T29056] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1374.722679][T29056] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1374.731074][T29056] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1374.757144][T29056] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1374.773303][T29056] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1374.794566][T29056] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1374.820810][T29187] lo speed is unknown, defaulting to 1000 [ 1374.833429][ T7069] bond8: (slave bridge8): failed to get link speed/duplex [ 1374.909252][T29056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1374.941054][T29056] 8021q: adding VLAN 0 to HW filter on device team0 [ 1374.957845][T31057] bridge0: port 1(bridge_slave_0) entered blocking state [ 1374.965138][T31057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1374.999114][T31059] bridge0: port 2(bridge_slave_1) entered blocking state [ 1375.006311][T31059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1375.173362][T31059] bond8: (slave bridge8): failed to get link speed/duplex [ 1375.222824][T29231] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 1375.308479][T31059] bond8: (slave bridge8): failed to get link speed/duplex [ 1375.390718][T29242] __nla_validate_parse: 16 callbacks suppressed [ 1375.390738][T29242] netlink: 260 bytes leftover after parsing attributes in process `syz.1.14152'. [ 1375.468938][T29187] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.492812][T29187] bridge0: port 1(bridge_slave_0) entered disabled state [ 1375.508185][T29187] bridge_slave_0: entered allmulticast mode [ 1375.520361][T29187] bridge_slave_0: entered promiscuous mode [ 1375.531619][T29187] bridge0: port 2(bridge_slave_1) entered blocking state [ 1375.549046][T29187] bridge0: port 2(bridge_slave_1) entered disabled state [ 1375.575200][T29187] bridge_slave_1: entered allmulticast mode [ 1375.588193][T29187] bridge_slave_1: entered promiscuous mode [ 1375.621003][T29187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1375.636773][T29187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1375.680052][T29187] team0: Port device team_slave_0 added [ 1375.710222][T29187] team0: Port device team_slave_1 added [ 1375.744196][T31070] bond8: (slave bridge8): failed to get link speed/duplex [ 1375.792043][ T50] Bluetooth: hci3: command tx timeout [ 1375.807096][T29187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1375.823107][T29187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1375.850953][T29187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1375.868414][T29187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1375.887142][T29187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1375.919548][T29187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1376.006284][T29187] hsr_slave_0: entered promiscuous mode [ 1376.025586][T29187] hsr_slave_1: entered promiscuous mode [ 1376.032228][ T50] Bluetooth: hci2: command 0x0405 tx timeout [ 1376.047086][T29187] debugfs: 'hsr0' already exists in 'hsr' [ 1376.059755][T29187] Cannot create hsr debugfs directory [ 1376.139399][T29056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1376.320948][T29290] netlink: 52 bytes leftover after parsing attributes in process `syz.1.14162'. [ 1376.351216][T29290] bridge0: port 2(bridge_slave_1) entered disabled state [ 1376.358482][T29290] bridge0: port 1(bridge_slave_0) entered disabled state [ 1376.426821][T29187] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1376.436394][ T50] Bluetooth: hci4: command tx timeout [ 1376.450353][T29187] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1376.470665][T29187] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1376.501032][T29187] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1376.522936][T29187] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1376.537462][T29187] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1376.554109][T29187] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1376.581988][T29187] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1376.633479][T29311] syzkaller0: entered promiscuous mode [ 1376.647924][T29311] syzkaller0: entered allmulticast mode [ 1376.682657][T29322] tipc: Enabled bearer , priority 0 [ 1376.706458][T29322] syzkaller0: entered promiscuous mode [ 1376.716106][T29322] syzkaller0: entered allmulticast mode [ 1376.735291][T29322] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1376.773639][T29322] tipc: Resetting bearer [ 1376.806703][T29329] netlink: 144 bytes leftover after parsing attributes in process `syz.2.14169'. [ 1376.904400][T29187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1376.928410][T29321] tipc: Resetting bearer [ 1376.945656][T29321] tipc: Disabling bearer [ 1376.996591][T29056] veth0_vlan: entered promiscuous mode [ 1377.165848][T29187] 8021q: adding VLAN 0 to HW filter on device team0 [ 1377.180062][T29342] syzkaller1: entered promiscuous mode [ 1377.187322][T29342] syzkaller1: entered allmulticast mode [ 1377.211119][T29056] veth1_vlan: entered promiscuous mode [ 1377.244567][T31059] bridge0: port 1(bridge_slave_0) entered blocking state [ 1377.251751][T31059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1377.337061][T31059] bridge0: port 2(bridge_slave_1) entered blocking state [ 1377.344276][T31059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1377.439757][T29056] veth0_macvtap: entered promiscuous mode [ 1377.474247][T29056] veth1_macvtap: entered promiscuous mode [ 1377.576522][T29056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1377.613749][T29056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1377.675939][T31070] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.700269][T31070] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.713920][T31070] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.726458][T31070] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.751191][T29380] syzkaller0: entered promiscuous mode [ 1377.761691][T29380] syzkaller0: entered allmulticast mode [ 1377.809695][T29376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14178'. [ 1377.872034][ T50] Bluetooth: hci3: command tx timeout [ 1377.933352][T31059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1377.968172][T31059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1378.027607][ T7080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1378.058581][ T7080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1378.438132][T29187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1378.511767][ T50] Bluetooth: hci4: command tx timeout [ 1378.654627][T29444] ip6t_srh: unknown srh match flags 4000 [ 1378.967495][T29458] veth0: entered promiscuous mode [ 1378.980024][T29458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14190'. [ 1379.723095][T29480] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14194'. [ 1379.742938][T29461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1379.757807][T29461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1379.952159][ T50] Bluetooth: hci3: command tx timeout [ 1380.167996][ T7069] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1380.197516][ T7069] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.246406][ T7069] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 59137 - 0 [ 1380.275974][ T7069] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1380.303654][ T7069] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.331328][ T7069] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 59137 - 0 [ 1380.350994][ T7069] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1380.376535][ T7069] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.402729][ T7069] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 59137 - 0 [ 1380.459344][ T7069] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1380.477999][ T7069] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.502100][ T7069] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 59137 - 0 [ 1380.561352][T29187] veth0_vlan: entered promiscuous mode [ 1380.592133][ T50] Bluetooth: hci4: command tx timeout [ 1380.628036][T29187] veth1_vlan: entered promiscuous mode [ 1380.680647][T29187] veth0_macvtap: entered promiscuous mode [ 1380.697819][T29187] veth1_macvtap: entered promiscuous mode [ 1380.731853][T29187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1380.758691][T29187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1380.787350][ T7080] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1380.803894][ T7080] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1380.826731][T29526] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1380.835117][ T7069] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1380.883170][ T7069] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1380.910369][T29505] lo speed is unknown, defaulting to 1000 [ 1380.927199][ T7080] net_ratelimit: 13 callbacks suppressed [ 1380.927218][ T7080] bond8: (slave bridge8): failed to get link speed/duplex [ 1381.067986][T29545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1381.077706][T29545] 8021q: adding VLAN 0 to HW filter on device team0 [ 1381.122479][T29545] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1381.133548][T29545] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1381.149401][T29545] veth1_vlan: left promiscuous mode [ 1381.156900][T29545] veth0_vlan: left promiscuous mode [ 1381.163893][T29545] veth0_vlan: entered promiscuous mode [ 1381.172900][T29545] veth1_vlan: entered promiscuous mode [ 1381.183087][T29545] veth1_macvtap: left promiscuous mode [ 1381.189897][T29545] veth0_macvtap: left promiscuous mode [ 1381.197113][T29545] veth0_macvtap: entered promiscuous mode [ 1381.204281][T29545] veth1_macvtap: entered promiscuous mode [ 1381.214580][T29545] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1381.226261][T29545] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1381.235229][T29545] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1381.244999][T29545] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1381.255056][T29545] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1381.263050][T29545] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 1381.284643][ T7069] bridge0: port 2(bridge_slave_1) entered blocking state [ 1381.291801][ T7069] bridge0: port 2(bridge_slave_1) entered listening state [ 1381.326230][T31068] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.359600][T31068] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.368062][T31068] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.396918][T31068] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.408462][T31068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1381.424365][T31068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1381.537972][ T7069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1381.546000][ T2620] bond8: (slave bridge8): failed to get link speed/duplex [ 1381.566883][ T7069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1381.701889][ T2620] bond8: (slave bridge8): failed to get link speed/duplex [ 1381.783693][T29556] netlink: 276 bytes leftover after parsing attributes in process `syz.5.14139'. [ 1381.821857][ T7069] bond8: (slave bridge8): failed to get link speed/duplex [ 1381.880463][T29564] SET target dimension over the limit! [ 1381.890524][T29565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14210'. [ 1381.921374][T29566] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14209'. [ 1381.922781][T29565] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14210'. [ 1382.007746][T29566] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1382.035515][T29577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14213'. [ 1382.062507][T31068] bond8: (slave bridge8): failed to get link speed/duplex [ 1382.067210][T29565] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1382.079032][T29565] validate_nla: 1 callbacks suppressed [ 1382.079051][T29565] netlink: 'syz.4.14210': attribute type 41 has an invalid length. [ 1382.221620][T31068] bond8: (slave bridge8): failed to get link speed/duplex [ 1382.312368][T29589] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 1382.341610][ T2620] bond8: (slave bridge8): failed to get link speed/duplex [ 1382.470090][T29603] vlan4: entered promiscuous mode [ 1382.493280][T29603] bridge0: entered promiscuous mode [ 1382.531793][ T7080] bond8: (slave bridge8): failed to get link speed/duplex [ 1382.540427][T29608] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14221'. [ 1382.540427][T29609] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14221'. [ 1382.661856][T31068] bond8: (slave bridge8): failed to get link speed/duplex [ 1382.675953][ T50] Bluetooth: hci4: command tx timeout [ 1383.166885][T29640] netlink: 'syz.4.14227': attribute type 1 has an invalid length. [ 1383.467453][T29657] netlink: 68 bytes leftover after parsing attributes in process `syz.0.14231'. [ 1383.813035][T29653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14230'. [ 1383.910665][T29644] netlink: 'syz.2.14230': attribute type 1 has an invalid length. [ 1384.059812][T29673] x_tables: duplicate underflow at hook 1 [ 1384.249410][T29698] netlink: 424 bytes leftover after parsing attributes in process `syz.2.14239'. [ 1384.259481][T29698] netlink: 'syz.2.14239': attribute type 1 has an invalid length. [ 1384.317290][T29690] lo speed is unknown, defaulting to 1000 [ 1384.364769][T29704] netlink: 'syz.2.14241': attribute type 1 has an invalid length. [ 1384.373787][T29704] netlink: 'syz.2.14241': attribute type 1 has an invalid length. [ 1384.390257][T29704] netlink: 'syz.2.14241': attribute type 8 has an invalid length. [ 1384.798371][T29713] syzkaller1: entered promiscuous mode [ 1384.804603][T29713] syzkaller1: entered allmulticast mode [ 1385.440967][T29753] tipc: Started in network mode [ 1385.446492][T29753] tipc: Node identity 9a314da08436, cluster identity 4711 [ 1385.454201][T10055] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1385.463240][T29753] tipc: Enabled bearer , priority 0 [ 1385.504735][T29753] syzkaller0: entered promiscuous mode [ 1385.510257][T29753] syzkaller0: entered allmulticast mode [ 1385.517267][T29753] tipc: Resetting bearer [ 1385.537899][T29753] xfrm0 speed is unknown, defaulting to 1000 [ 1385.544365][T29753] xfrm0 speed is unknown, defaulting to 1000 [ 1385.550919][T29753] xfrm0 speed is unknown, defaulting to 1000 [ 1385.558250][T29753] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1385.573428][T29753] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1385.593156][T29753] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1385.622750][T29753] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1385.643404][T29753] xfrm0 speed is unknown, defaulting to 1000 [ 1385.654927][T29753] xfrm0 speed is unknown, defaulting to 1000 [ 1385.667251][T29753] xfrm0 speed is unknown, defaulting to 1000 [ 1385.674793][T29753] xfrm0 speed is unknown, defaulting to 1000 [ 1385.683642][T29753] xfrm0 speed is unknown, defaulting to 1000 [ 1385.692006][T29753] xfrm0 speed is unknown, defaulting to 1000 [ 1385.699006][T29753] xfrm0 speed is unknown, defaulting to 1000 [ 1385.706798][T29753] xfrm0 speed is unknown, defaulting to 1000 [ 1385.713426][T31059] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1385.724108][T29753] xfrm0 speed is unknown, defaulting to 1000 [ 1385.736696][T29753] xfrm0 speed is unknown, defaulting to 1000 [ 1385.747775][T29753] xfrm0 speed is unknown, defaulting to 1000 [ 1385.755418][T29753] xfrm0 speed is unknown, defaulting to 1000 [ 1385.762920][T29753] xfrm0 speed is unknown, defaulting to 1000 [ 1385.769994][T29753] xfrm0 speed is unknown, defaulting to 1000 [ 1385.778071][T29753] xfrm0 speed is unknown, defaulting to 1000 [ 1385.785635][T29753] xfrm0 speed is unknown, defaulting to 1000 [ 1385.794232][T29753] xfrm0 speed is unknown, defaulting to 1000 [ 1385.815435][T29751] tipc: Resetting bearer [ 1385.859287][T29751] tipc: Disabling bearer [ 1386.012419][T31057] net_ratelimit: 23 callbacks suppressed [ 1386.012441][T31057] bond8: (slave bridge8): failed to get link speed/duplex [ 1386.131779][T31070] bond8: (slave bridge8): failed to get link speed/duplex [ 1386.338337][T29789] x_tables: duplicate underflow at hook 2 [ 1386.351028][T29783] syzkaller0: entered promiscuous mode [ 1386.352242][T10053] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1386.375944][T29783] syzkaller0: entered allmulticast mode [ 1386.391591][T31059] bond8: (slave bridge8): failed to get link speed/duplex [ 1386.838331][T31070] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1386.857986][T31070] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1386.888889][T29800] tipc: Enabled bearer , priority 0 [ 1386.910915][T29800] syzkaller0: entered promiscuous mode [ 1386.930789][T29800] syzkaller0: entered allmulticast mode [ 1386.971599][ T7067] bond8: (slave bridge8): failed to get link speed/duplex [ 1387.057006][T29804] tipc: Resetting bearer [ 1387.111983][ T7067] bond8: (slave bridge8): failed to get link speed/duplex [ 1387.242545][ T7067] bond8: (slave bridge8): failed to get link speed/duplex [ 1387.368781][T29825] tipc: Enabled bearer , priority 0 [ 1387.380086][T29825] syzkaller0: entered promiscuous mode [ 1387.421700][T29825] syzkaller0: entered allmulticast mode [ 1387.451771][ T9706] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1387.468261][ T7067] bond8: (slave bridge8): failed to get link speed/duplex [ 1387.563481][T29826] tipc: Resetting bearer [ 1387.592548][T29799] tipc: Resetting bearer [ 1387.643539][T29799] tipc: Disabling bearer [ 1387.661961][ T7069] bond8: (slave bridge8): failed to get link speed/duplex [ 1387.684111][T29807] lo speed is unknown, defaulting to 1000 [ 1387.769193][T29824] tipc: Resetting bearer [ 1387.798764][T29824] tipc: Disabling bearer [ 1387.812632][T31057] bond8: (slave bridge8): failed to get link speed/duplex [ 1387.924030][ T7067] bond8: (slave bridge8): failed to get link speed/duplex [ 1387.991645][T29807] xfrm0 speed is unknown, defaulting to 1000 [ 1388.005621][T29829] __nla_validate_parse: 11 callbacks suppressed [ 1388.005642][T29829] netlink: 128 bytes leftover after parsing attributes in process `syz.0.14278'. [ 1388.286076][T29842] netlink: 'syz.0.14281': attribute type 30 has an invalid length. [ 1388.286075][T29841] netlink: 'syz.0.14281': attribute type 30 has an invalid length. [ 1388.308984][T29844] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14282'. [ 1388.439463][T29849] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14283'. [ 1388.452455][T29850] netlink: 'syz.5.14282': attribute type 1 has an invalid length. [ 1388.481694][T29849] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14283'. [ 1388.491001][T29850] netlink: 2088 bytes leftover after parsing attributes in process `syz.5.14282'. [ 1389.058436][T29885] netlink: 72 bytes leftover after parsing attributes in process `syz.1.14291'. [ 1389.344868][T29903] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.14296'. [ 1389.394284][T29903] netlink: 'syz.5.14296': attribute type 1 has an invalid length. [ 1389.624461][T29903] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1389.726557][T29909] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 1389.741237][T29910] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 1389.939013][T29918] tipc: Enabling of bearer rejected, failed to enable media [ 1390.328981][T29943] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14307'. [ 1390.342565][T29943] netlink: 108 bytes leftover after parsing attributes in process `syz.1.14307'. [ 1390.361600][T29943] netlink: 'syz.1.14307': attribute type 1 has an invalid length. [ 1390.370355][T29943] netlink: 'syz.1.14307': attribute type 1 has an invalid length. [ 1390.482399][T29949] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14310'. [ 1390.614424][T29957] veth0_macvtap: Caught tx_queue_len zero misconfig [ 1390.667174][T29957] bond13: Unable to set up delay as MII monitoring is disabled [ 1390.685503][T29957] bond13 (unregistering): Released all slaves [ 1390.735691][T29968] syzkaller1: entered promiscuous mode [ 1390.741334][T29968] syzkaller1: entered allmulticast mode [ 1391.073514][ T31] INFO: task udevd:21389 blocked for more than 143 seconds. [ 1391.092906][ T31] Not tainted syzkaller #0 [ 1391.101610][ T7052] net_ratelimit: 21 callbacks suppressed [ 1391.101630][ T7052] bond8: (slave bridge8): failed to get link speed/duplex [ 1391.130674][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1391.157346][ T31] task:udevd state:D stack:23688 pid:21389 tgid:21389 ppid:4988 task_flags:0x400140 flags:0x00080000 [ 1391.179047][T29989] team0: entered allmulticast mode [ 1391.203369][T29989] team_slave_0: entered allmulticast mode [ 1391.212342][ T31] Call Trace: [ 1391.218445][ T31] [ 1391.224647][T29989] team_slave_1: entered allmulticast mode [ 1391.231793][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1391.239996][ T31] __schedule+0x17d9/0x56c0 [ 1391.255844][T29989] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1391.274506][ T31] ? blk_mq_flush_plug_list+0x415/0x540 [ 1391.289117][ T31] ? rcu_is_watching+0x15/0xb0 [ 1391.304412][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 1391.322203][ T7052] bond8: (slave bridge8): failed to get link speed/duplex [ 1391.325057][ T31] ? __blk_flush_plug+0x416/0x4d0 [ 1391.354397][ T31] ? __pfx___schedule+0x10/0x10 [ 1391.374162][ T31] ? rcu_is_watching+0x15/0xb0 [ 1391.391111][ T31] ? lock_release+0x4b/0x3c0 [ 1391.406378][ T31] schedule+0x164/0x360 [ 1391.415088][ T31] schedule_timeout+0x152/0x2c0 [ 1391.425685][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1391.443525][ T31] ? __pfx_process_timeout+0x10/0x10 [ 1391.449092][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1391.455419][ T31] ? prepare_to_wait_event+0x436/0x480 [ 1391.461099][ T31] nbd_queue_rq+0x889/0x1150 [ 1391.466354][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 1391.471632][ T7052] bond8: (slave bridge8): failed to get link speed/duplex [ 1391.479486][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1391.486448][ T31] ? trace_sched_exit_tp+0x3a/0x130 [ 1391.498802][ T31] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1391.521261][ T31] ? sbitmap_get+0x229/0x390 [ 1391.537113][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 1391.551042][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 1391.563260][ T31] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1391.569839][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 1391.577204][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 1391.582959][ T31] ? rcu_is_watching+0x15/0xb0 [ 1391.587842][ T31] ? lock_acquire+0x5f/0x350 [ 1391.592606][T31070] bond8: (slave bridge8): failed to get link speed/duplex [ 1391.600208][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1391.606685][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 1391.614757][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 1391.619994][ T31] blk_mq_dispatch_list+0xd11/0xe10 [ 1391.626311][ T31] ? blk_mq_dispatch_list+0x230/0xe10 [ 1391.633816][ T31] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 1391.646314][ T31] ? __pfx_update_io_ticks+0x10/0x10 [ 1391.657597][ T31] ? rcu_is_watching+0x15/0xb0 [ 1391.667258][ T31] blk_mq_flush_plug_list+0x45f/0x540 [ 1391.677759][ T31] ? blk_add_rq_to_plug+0x300/0x450 [ 1391.689039][ T31] ? blk_mq_submit_bio+0x1c62/0x2a80 [ 1391.700819][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 1391.718529][ T7052] bond8: (slave bridge8): failed to get link speed/duplex [ 1391.734320][ T31] ? blk_mq_submit_bio+0x2f8/0x2a80 [ 1391.747235][ T31] __blk_flush_plug+0x3ed/0x4d0 [ 1391.759019][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 1391.770593][ T31] ? blkg_get+0x20/0x1d0 [ 1391.780605][ T31] ? rcu_is_watching+0x15/0xb0 [ 1391.791003][ T31] __submit_bio+0x465/0x560 [ 1391.806676][ T31] ? __pfx___submit_bio+0x10/0x10 [ 1391.817191][ T31] ? bio_associate_blkg+0x6d/0x230 [ 1391.828026][ T31] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1391.839288][ T31] ? bio_associate_blkg+0x6d/0x230 [ 1391.852218][ T7067] bond8: (slave bridge8): failed to get link speed/duplex [ 1391.869706][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 1391.878535][ T31] ? submit_bio_noacct+0xf7b/0x1b20 [ 1391.888013][ T31] ? blkcg_set_ioprio+0x16b/0x2a0 [ 1391.896978][ T31] block_read_full_folio+0x7a6/0x810 [ 1391.902700][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 1391.908220][ T31] filemap_read_folio+0x12c/0x3a0 [ 1391.913663][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1391.919192][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 1391.925138][ T31] ? filemap_add_folio+0x350/0x530 [ 1391.930334][ T31] do_read_cache_folio+0x354/0x590 [ 1391.936323][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1391.942844][ T31] read_part_sector+0xb6/0x2b0 [ 1391.947745][ T31] adfspart_check_ICS+0xb1/0x960 [ 1391.959121][ T31] ? seq_buf_printf+0x212/0x2d0 [ 1391.965678][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 1391.971332][ T31] ? __kmalloc_cache_noprof+0x318/0x660 [ 1391.983186][ T7067] bond8: (slave bridge8): failed to get link speed/duplex [ 1391.990399][ T31] bdev_disk_changed+0x851/0x17a0 [ 1391.996248][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1392.002216][ T31] blkdev_get_whole+0x372/0x510 [ 1392.007236][ T31] bdev_open+0x324/0xd70 [ 1392.015756][ T31] blkdev_open+0x461/0x600 [ 1392.020328][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 1392.025787][ T31] do_dentry_open+0x816/0x1380 [ 1392.030831][ T31] vfs_open+0x3b/0x340 [ 1392.036990][ T31] ? path_openat+0x2e2d/0x3830 [ 1392.042625][ T31] path_openat+0x2e44/0x3830 [ 1392.047354][ T31] ? kasan_save_track+0x3e/0x80 [ 1392.053988][ T31] ? do_getname+0x2e/0x250 [ 1392.058508][ T31] ? do_sys_openat2+0xcc/0x200 [ 1392.070357][ T31] ? __x64_sys_openat+0x138/0x170 [ 1392.076374][ T31] do_file_open+0x23e/0x4a0 [ 1392.081066][ T31] ? __pfx_do_file_open+0x10/0x10 [ 1392.087131][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1392.092410][ T31] ? alloc_fd+0x651/0x6c0 [ 1392.096847][ T31] do_sys_openat2+0x115/0x200 [ 1392.101709][T31057] bond8: (slave bridge8): failed to get link speed/duplex [ 1392.109307][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1392.115278][ T31] ? __x64_sys_epoll_wait+0x1d7/0x230 [ 1392.120866][ T31] ? rcu_is_watching+0x15/0xb0 [ 1392.126234][ T31] __x64_sys_openat+0x138/0x170 [ 1392.131257][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1392.143084][ T31] do_syscall_64+0x174/0x580 [ 1392.147805][ T31] ? clear_bhb_loop+0x40/0x90 [ 1392.153042][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1392.159083][ T31] RIP: 0033:0x7f0b518a7407 [ 1392.164848][ T31] RSP: 002b:00007ffd7c177290 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1392.175432][ T31] RAX: ffffffffffffffda RBX: 00007f0b5206b880 RCX: 00007f0b518a7407 [ 1392.184156][ T31] RDX: 00000000000a0800 RSI: 0000557f2c217250 RDI: ffffffffffffff9c [ 1392.193548][ T31] RBP: 0000557f2c1f5910 R08: 0000000000000000 R09: 0000000000000000 [ 1392.201983][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000557f2c243720 [ 1392.210114][ T31] R13: 0000557f2c203190 R14: 0000000000000000 R15: 0000557f2c243720 [ 1392.218561][ T31] [ 1392.221748][ T7067] bond8: (slave bridge8): failed to get link speed/duplex [ 1392.229372][ T31] INFO: lockdep is turned off. [ 1392.234698][ T31] NMI backtrace for cpu 0 [ 1392.234713][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1392.234732][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1392.234742][ T31] Call Trace: [ 1392.234749][ T31] [ 1392.234757][ T31] dump_stack_lvl+0xe8/0x150 [ 1392.234781][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1392.234801][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1392.234918][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1392.234937][ T31] sys_info+0x135/0x170 [ 1392.234952][ T31] watchdog+0xfd7/0x1030 [ 1392.235006][ T31] ? watchdog+0x1c7/0x1030 [ 1392.235032][ T31] kthread+0x388/0x470 [ 1392.235098][ T31] ? __pfx_watchdog+0x10/0x10 [ 1392.235118][ T31] ? __pfx_kthread+0x10/0x10 [ 1392.235134][ T31] ret_from_fork+0x514/0xb70 [ 1392.235182][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1392.235198][ T31] ? __switch_to+0xc89/0x1420 [ 1392.235270][ T31] ? __pfx_kthread+0x10/0x10 [ 1392.235285][ T31] ret_from_fork_asm+0x1a/0x30 [ 1392.235311][ T31] [ 1392.235318][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1392.349890][ C1] NMI backtrace for cpu 1 [ 1392.349907][ C1] CPU: 1 UID: 0 PID: 29982 Comm: syz.2.14319 Not tainted syzkaller #0 PREEMPT(full) [ 1392.349928][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1392.349939][ C1] RIP: 0010:post_alloc_hook+0x1b4/0x280 [ 1392.350041][ C1] Code: 8e 48 c1 ed 03 49 c7 c6 00 3f 27 8e 49 c1 ee 03 eb 2f 48 8b 3d bd 88 04 0c 49 c1 e5 06 4c 29 ef 4c 01 e7 b9 00 10 00 00 31 c0 aa 0f 1f 44 00 00 49 81 c4 00 10 00 00 49 ff cf 0f 84 ee fe ff [ 1392.350057][ C1] RSP: 0018:ffffc900001e7708 EFLAGS: 00010246 [ 1392.350073][ C1] RAX: 0000000000000000 RBX: 000000000000000a RCX: 0000000000000f80 [ 1392.350085][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88816cd2f080 [ 1392.350096][ C1] RBP: 1ffffffff1c4e7e2 R08: ffffffff903116f7 R09: 0000000000000000 [ 1392.350108][ C1] R10: ffffed102d980000 R11: fffffbfff20622df R12: fffa80016cd2f000 [ 1392.350121][ C1] R13: fffa800000000000 R14: 1ffffffff1c4e7e0 R15: 00000000000002d1 [ 1392.350134][ C1] FS: 00007f8a1ba4b6c0(0000) GS:ffff88812537c000(0000) knlGS:0000000000000000 [ 1392.350149][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1392.350161][ C1] CR2: 00007fce59d7c068 CR3: 00000000534dc000 CR4: 00000000003526f0 [ 1392.350176][ C1] Call Trace: [ 1392.350184][ C1] [ 1392.350195][ C1] get_page_from_freelist+0x24ae/0x2530 [ 1392.350243][ C1] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1392.350270][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1392.350298][ C1] ? rcu_is_watching+0x15/0xb0 [ 1392.350315][ C1] ? percpu_ref_get_many+0x19/0x140 [ 1392.350382][ C1] ? lock_release+0x4b/0x3c0 [ 1392.350411][ C1] __alloc_pages_noprof+0x10/0x100 [ 1392.350435][ C1] __vmalloc_node_range_noprof+0x7d7/0x1730 [ 1392.350493][ C1] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1392.350524][ C1] bpf_map_area_alloc+0x12d/0x170 [ 1392.350600][ C1] ? bloom_map_alloc+0x22f/0x470 [ 1392.350643][ C1] bloom_map_alloc+0x22f/0x470 [ 1392.350664][ C1] map_create+0xaa3/0x1660 [ 1392.350688][ C1] ? security_bpf+0x7e/0x2d0 [ 1392.350769][ C1] __sys_bpf+0x6e1/0x950 [ 1392.350792][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 1392.350822][ C1] ? __pfx___se_sys_rt_sigprocmask+0x10/0x10 [ 1392.350895][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1392.350913][ C1] __x64_sys_bpf+0x7c/0x90 [ 1392.350934][ C1] do_syscall_64+0x174/0x580 [ 1392.350958][ C1] ? trace_irq_disable+0x3b/0x140 [ 1392.350981][ C1] ? clear_bhb_loop+0x40/0x90 [ 1392.351000][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1392.351023][ C1] RIP: 0033:0x7f8a1ab9ce59 [ 1392.351038][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1392.351053][ C1] RSP: 002b:00007f8a1ba4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1392.351070][ C1] RAX: ffffffffffffffda RBX: 00007f8a1ae15fa0 RCX: 00007f8a1ab9ce59 [ 1392.351083][ C1] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 0000000000000000 [ 1392.351094][ C1] RBP: 00007f8a1ac32e6f R08: 0000000000000000 R09: 0000000000000000 [ 1392.351105][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1392.351116][ C1] R13: 00007f8a1ae16038 R14: 00007f8a1ae15fa0 R15: 00007ffc30ae1a78 [ 1392.351137][ C1] [ 1392.724130][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1392.731047][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1392.740188][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1392.750318][ T31] Call Trace: [ 1392.753634][ T31] [ 1392.756599][ T31] vpanic+0x56c/0xa60 [ 1392.760695][ T31] ? __pfx___schedule+0x10/0x10 [ 1392.765582][ T31] ? __pfx_vpanic+0x10/0x10 [ 1392.770123][ T31] panic+0xc5/0xd0 [ 1392.773882][ T31] ? __pfx_panic+0x10/0x10 [ 1392.778324][ T31] ? preempt_schedule_common+0x82/0xd0 [ 1392.783898][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 1392.789384][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1392.795580][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1392.801772][ T31] watchdog+0x1030/0x1030 [ 1392.806150][ T31] ? watchdog+0x1c7/0x1030 [ 1392.810617][ T31] kthread+0x388/0x470 [ 1392.814722][ T31] ? __pfx_watchdog+0x10/0x10 [ 1392.819442][ T31] ? __pfx_kthread+0x10/0x10 [ 1392.824061][ T31] ret_from_fork+0x514/0xb70 [ 1392.828692][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1392.833850][ T31] ? __switch_to+0xc89/0x1420 [ 1392.838594][ T31] ? __pfx_kthread+0x10/0x10 [ 1392.843257][ T31] ret_from_fork_asm+0x1a/0x30 [ 1392.848067][ T31] [ 1392.851734][ T31] Kernel Offset: disabled [ 1392.856066][ T31] Rebooting in 86400 seconds..