last executing test programs: 2.984923906s ago: executing program 1 (id=10687): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x2e, 0xfffffffffffffffc, 0x40f00, 0x40, '\x00', 0x0, 0x38}, 0x94) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) (async) socket$igmp6(0xa, 0x3, 0x2) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x2e, 0xfffffffffffffffc, 0x40f00, 0x40, '\x00', 0x0, 0x38}, 0x94) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) (async) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) (async) 2.909019582s ago: executing program 3 (id=10689): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000440)={0x11, {{0x29, 0x0, 0x5000000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, 0x8}}}, 0x88) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x60, 0x1406, 0x210, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4048014) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x6) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x150, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x100}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xfe}]}, @IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0xfa}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xf}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1}, @IPSET_ATTR_IFACE={0x14, 0x17, 'syzkaller0\x00'}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x55}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x48, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'ipvlan1\x00'}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}]}, @IPSET_ATTR_ADT={0x48, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xe}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x800}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xf8}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x150}, 0x1, 0x0, 0x0, 0x4008801}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x58, 0x30, 0x1, 0x0, 0x0, {}, [{0x44, 0x1, [@m_vlan={0x40, 0x1, 0x0, 0x0, {{0x9}, {0x11, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x58}}, 0x0) shutdown(r0, 0x1) 2.776108206s ago: executing program 3 (id=10692): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x2, &(0x7f0000000200)=@raw=[@ldst={0x0, 0x0, 0x2}, @exit], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0xc}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x30, r0, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x5, 0x8031, r1, 0xd56ab000) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="021800001400000000"], 0xa0}}, 0x0) unshare(0x8000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0xa, 0x200, 0x7, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r2, &(0x7f0000000a40)='&', &(0x7f0000000040)=""/98}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400), &(0x7f0000000480), 0x2, r2}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x41, 0x30, 0x0, 0x5f]}}, 0x0, 0x36, 0x0, 0xa, 0x32e}, 0x28) unshare(0x24020400) r3 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000003c40)=0x8, 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000500)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x7, 0x6, "da7120", 0x18, 0x11, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @empty}, {[], {0x4e23, 0x4e21, 0x18, 0x0, @wg=@data={0x4, 0x8b5, 0x7ff}}}}}}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000000)='%\\)&\x00', 0xc8800, &(0x7f0000000040)={@align=0x1, {0xd, 0x3, 0x8e27, 0x7}}, 0x40, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000200)=0x10}) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f00000002c0)) socket$inet_smc(0x2b, 0x1, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000020000002000000c02000000000000000000000d0000000000006130"], 0x0, 0x35}, 0x28) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'}) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000300)=0x200) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004b0000400000000000059078ac1414000a01010044140503ac14141d000000040a010101000000009402000000000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0600000090380000"], 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) 2.774271304s ago: executing program 1 (id=10693): socket(0x10, 0x803, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@getqdisc={0x0, 0x26, 0x200, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0xc}, {0x2, 0x3}, {0xb, 0x6}}, [{}, {}, {}, {}]}, 0x48}}, 0x0) 2.721948226s ago: executing program 1 (id=10694): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%-5lx \x00'}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x200800, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2000cc0, r2}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x1, r2}, 0x38) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) close(0x3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'veth0_macvtap\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000000)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0x80) unshare(0x26020480) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast1, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x2f}, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x400000000}, 0x3, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@local, 0x1, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) 1.719062863s ago: executing program 1 (id=10707): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}, {&(0x7f0000002140)=""/4096, 0x694}], 0x2) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r2, 0x84, 0x14, &(0x7f00000002c0)="1a00000002000000", 0x8) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x730) r3 = socket$igmp6(0xa, 0x3, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000080), 0x4a) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000000c0)=0x9, 0x4) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r5) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) bind$can_raw(r6, &(0x7f0000000480), 0x10) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f00000001c0)=[{{0x4, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x1, 0x1}}], 0x10) close(r6) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @local, 0x8001}, 0x1c) setsockopt$inet6_int(r7, 0x29, 0x11, &(0x7f0000000400)=0x3, 0x4) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x40000) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r9, 0x100, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004810}, 0x4000800) 1.084920415s ago: executing program 0 (id=10712): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r3, 0x0) unshare(0x22020400) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') read(r4, &(0x7f0000000200)=""/196, 0xc4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @loopback}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x60}}, 0x0) 1.084280472s ago: executing program 0 (id=10713): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x403, 0x70bd2d, 0x3d, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x1}, @IFLA_GENEVE_ID={0x8, 0x1, 0x3}, @IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfff9, 0x8}, 0x8) (async) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfff9, 0x8}, 0x8) sendto$inet6(r2, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, &(0x7f0000000400)) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, &(0x7f0000000400)) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x17, &(0x7f0000000040)=0x10000, 0x4) listen(r1, 0x3) (async) listen(r1, 0x3) syz_emit_ethernet(0x42, &(0x7f0000002a80)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x5, 0x2}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x34, 0x0, 0x4000, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0xfffffffe}]}}}}}}}, 0x0) 944.527981ms ago: executing program 1 (id=10715): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) shutdown(r0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000040)=0x81, 0x4) recvfrom$inet6(r2, 0x0, 0xffffffffffffff32, 0x40010043, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x72, 0xffffffffffffffff, 0x2bebc000) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x0, 0x43, 0xa0, 0x0, 0x98, 0x210, 0x178, 0x178, 0x210, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0xe0, 0x140, 0x0, {0x0, 0x7a010000}, [@common=@inet=@ecn={{0x28}, {0x8, 0x30, 0x6, 0x7}}, @common=@unspec=@helper={{0x48}, {0x0, 'Q.931\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x7, 0x0, 0x2, 0x0, 0x8], 0x4, 0x5}, {0x1, [0xb, 0x4, 0x4, 0x4, 0x1, 0x2], 0x2, 0x3}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [0xff, 0xff], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x2b8, 0xd8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, &(0x7f0000000340), {[{{@ipv6={@local, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0xffffffff], 'veth1_to_bond\x00', 'dummy0\x00', {}, {0xff}, 0x21, 0xf7, 0x4}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7, 0xfc45, 0x7f}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x12, 0x8000, 0x8, 0x6, 'snmp\x00', 'syz0\x00', {0x10}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r5, &(0x7f0000000a40)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) shutdown(r5, 0x1) getsockopt$inet6_opts(r3, 0x29, 0x4d, 0x0, &(0x7f00000001c0)) 942.399432ms ago: executing program 4 (id=10716): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="14ff0000", @ANYRES16=r1, @ANYBLOB="110226bd7000fddbdf251f000000"], 0x14}, 0x1, 0x0, 0x0, 0x4885}, 0x40000) 884.659825ms ago: executing program 2 (id=10717): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000080)={0x57}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x8, &(0x7f00000006c0), &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$inet6(r1, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000013c0)={0x1c, 0x3, 0x8, 0x301, 0x0, 0x0, {0x0, 0x0, 0x20}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ip6gre0\x00'}) setsockopt$inet6_mreq(r5, 0x29, 0x1b, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000280)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="7019725bd9e8a9613d79621dbe2a37927515f63b370042d1049855480d12fbba5b545b25adf5dea650298aacdd83041021d9127e0e1e21abd760b5a348916b55d49ced8cc237c337a934bc1604f3d74ddf5ab1", @ANYRES64=0x0], 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@fallback=r6, r7, 0x2f, 0x2030, 0x4, @void, @void, @value=r8}, 0x20) 876.858255ms ago: executing program 4 (id=10718): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$unix(r0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x44080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, 0x0, 0x40050) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000040000000600000080"], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x3c, 0x301, 0x70bd25, 0xfffffffc, {0xd}, [@typed={0x8, 0x3, 0x0, 0x0, @fd=r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x5031, 0xffffffffffffffff, 0xc2dd0000) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000340), &(0x7f000001f200)=0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000001000080000000006287281e18100000", @ANYRES32=r9, @ANYBLOB="0000000000000000c30000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x7, 0xc2, &(0x7f00000002c0)=""/194, 0x0, 0x20}, 0x94) 750.840751ms ago: executing program 0 (id=10719): r0 = socket(0x22, 0xb624fa8dfaab198f, 0xff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001a00)=ANY=[@ANYBLOB="a00000000001010410000000000000000a000000440001802c00018014000300fe8000000000000000000000000000aa14000400fc0200000000000000000000000000010c000280050001000000000006000340000200003c0002040000008014000300fe8000002602bcb100000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007400000000004000680"], 0xa0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b40000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000c0003400004000008000740000004001800068014000400200100"/177], 0xb4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100001040093636b3c2eadf2f0539547", @ANYRES32=0x0, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c00028005002100010400080500010004"], 0x4c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r2) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x3c, r3, 0x1, 0x70bd2b, 0x25dfdbf9, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x68, 0x4, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2400c810}, 0x80) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000005000000020000000200000f03000000020000000100000001000000010000001da300000100000044942d000000000000000f010000008400002e89"], 0x0, 0x51, 0x0, 0x1, 0x400000}, 0x28) sendto$inet6(r4, &(0x7f0000000140)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000e80)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000003c0)="e3", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000380)={0x4, 0x0, 0x8, 0x9d}, 0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x800, 0x9, 0x200, 0x82, 0xb}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={r5, 0x4, 0x10}, &(0x7f0000000280)=0xc) 712.447633ms ago: executing program 3 (id=10720): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d000000040000000200000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000400)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r3, &(0x7f0000000000), &(0x7f0000000500)=""/216}, 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket(0xa, 0x5, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000040)=0x8, 0x4) sendmsg$inet_sctp(r5, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e26, 0x200000ff, @loopback, 0x5}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000100)="a6", 0x1}], 0x1, &(0x7f0000000080)=[@dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @local}}], 0x20, 0x4855}, 0x24000052) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000180)=0xffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1f1c000002060101000000000000000000000001000000000a000000090002008d001f106f194eb3050001"], 0x30}, 0x1, 0x0, 0x0, 0x40840}, 0x40) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x68, 0x24, 0x400, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x34, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xffffffff}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x4}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x8}, @TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x7}]}}]}, 0x68}}, 0x20040084) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32, @ANYBLOB="00000016010000001800120008000100736974000c00020008"], 0x38}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="680000000b06010200000000000000000000000005000100070000000900020073797a310000000040000780"], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x80) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000000400000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffa21489aec08586dd61bcc1d700006cfffe8000000000000000000000000000bb00000000000000000000000000000601ac26b5f06624d2653b45550e96487f227e7b4a8b8dbe771fb8b6c48bc0c75a0fe09852d702286e76974b009e14f79badebce16b9f71fc6c7905de22df00ffc93f53cb6d4256e76cc4908a7cdab64ac848b0b0ec38daa8ddb6cb724545741c5a042bc11d96de92c377dec16ae83574fb9c6d4e1893ddec0d89f968059247a1554"], 0x0) 665.303732ms ago: executing program 4 (id=10721): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x6}, {0xfff1, 0xffff}, {0xd, 0x3f}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000001100)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r4, 0x8000000000000003, {0x0, 0x1}}, 0x18) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r3) 664.860424ms ago: executing program 2 (id=10722): r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000240)='devices.deny\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r0, 0x0) r2 = socket$inet(0x2, 0x200000003, 0x6) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000000280)="f9", 0x1, 0x20000050, &(0x7f0000000040)={0xa, 0x4e21, 0xa, @private2}, 0x1c) sendto$inet6(r3, &(0x7f00000002c0)="ed1afe65", 0x4, 0x808d1, &(0x7f00000001c0)={0xa, 0x4e22, 0x1, @private0, 0x6}, 0x1c) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, &(0x7f0000000080)={0x0, 0x0, 0x10, 0xaf9}, &(0x7f00000010c0)=0x18) getsockopt$inet_buf(r2, 0x0, 0x50, 0x0, &(0x7f00000000c0)) 632.916572ms ago: executing program 4 (id=10723): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffd, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r3, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x7, 0x3, 0x0, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x40, 0x3, 0x9}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0x1}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x3f00, 0xa000, 0x7, 0x0, {{0x5, 0x4, 0x0, 0x3f, 0x14, 0x1, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x3f00, 0xa000, 0x7, 0x0, {{0x5, 0x4, 0x0, 0x3f, 0x14, 0x1, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}}}}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0x1, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000900)={'syztnl1\x00', &(0x7f00000008c0)={'gre0\x00', r4, 0x8, 0x80, 0x0, 0xafe68000, {{0x6, 0x4, 0x3, 0x35, 0x18, 0x67, 0x0, 0xa, 0x0, 0x0, @remote, @local, {[@noop]}}}}}) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x78, '\x00', r9, 0xffffffffffffffff, 0x5, 0x4, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdec7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xa, 0xe, 0x8, 0x80000001, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_ext={0x1c, 0x32, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xcd}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffd}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffa}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000500)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0xd, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x4000f, 0x8, 0x9}, 0x10, 0xc73e, 0xffffffffffffffff, 0x6, &(0x7f00000009c0)=[0x1, r5, r7, 0x1, r8, r10, r11, r12], &(0x7f0000000a00)=[{0x5, 0x1, 0x6, 0x8}, {0x5, 0x1, 0x3, 0x5}, {0x0, 0x4, 0x3, 0x7}, {0x4, 0x5, 0x3, 0xb}, {0x2, 0x1, 0xa, 0xc}, {0x5, 0x2, 0x7, 0x6}], 0x10, 0x4}, 0x94) 624.075966ms ago: executing program 0 (id=10724): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000001740)=[{0x0}], 0x1}}, {{&(0x7f0000000540)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001c80)=[{0x0}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e1e, @private=0xa010102}, 0x10, &(0x7f0000000880)=[{&(0x7f00000003c0)="29653633f1", 0x5}], 0x1}}], 0x3, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000001c0)={r3, 0x6}, 0x8) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x3fa, 0x400, 0x70bd2b, 0x25dfdbff, {0x1, 0x1, 0x0, 0x1}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x8001) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) read(r6, &(0x7f0000000300)=""/103, 0x67) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="2000fa7731085d00000000000000000000000000139d55af6adea90bf9cb41ec6e408e08155517f5d62c39a311f80e70108882489874ba34a2a4f6c2d66023335269647e38474336fe3e8bdd895663c381b582f60a97df4d3562a4a518fafbe6ce4f294a20fcca3c7d435f49", @ANYRES32=r4, @ANYBLOB="0800020096a68e15"], 0x20}}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000100003052abd70000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006380000180012000c00028008000400e000000108000a000000000000000000", @ANYRES32=r4, @ANYBLOB], 0x40}}, 0x440b0) r7 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) accept4(r7, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) pipe(&(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000eb15000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$alg(0x26, 0x5, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r8}, 0xc) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) 517.168438ms ago: executing program 2 (id=10725): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000002340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000080), &(0x7f0000000100)=0x43) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000100)={@local, @local, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x60, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [@routing={0x2b, 0x0, 0x2}, @srh={0x0, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2={0xfc, 0x2, '\x00', 0x1}]}]}}}}}}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000cc0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x640246, r7}) setsockopt$RDS_FREE_MR(r5, 0x114, 0x3, &(0x7f0000000040)={{}, 0x6d}, 0x10) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000080)={0x2, 0x6}, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0, 0x0, 0x34, 0x0, "f1f7882eade7f9ed59dd754ed3fa9513bc8d9662eaae6a87ea17d19cced73fca9d00b370eaefb2ecab4c20fb0d62c726cc3cb83d211da63fb4007c81ad7a2edac7859b8988028702e2027b84c554f86f"}, 0xd8) r9 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x144}, 0x1, 0x0, 0x0, 0xc0}, 0x0) setsockopt$sock_linger(r9, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r9, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r9, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty, 0x4}}, 0x0, 0x0, 0x19, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd92a1d01c79"}, 0xd8) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) 479.164703ms ago: executing program 3 (id=10726): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r0, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000080)=0x5b9, 0x4) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) (async) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e1e, 0x3, 'lc\x00', 0x15, 0xa7e, 0x13}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x10}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x10048, 0xcd, 0x48}}, 0x44) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000e00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x90) (async) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000380)={{0x84, @local, 0x4e21, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@multicast1, 0x4e23, 0x2, 0x1bd, 0x12d5c, 0x12d59}}, 0x44) (async) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@gettaction={0x7c, 0x32, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x60}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x809}, 0x4041080) r10 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910300000000000730a11ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x1a, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) (async) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x6c, 0x30, 0x871a15abc695f91d, 0x0, 0x80000, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xcc1}, @TCA_VLAN_PARMS={0x5, 0x2, {{0x3468802, 0x7, 0x1, 0x3, 0x80000000}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) (async) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001800ffff00000000000000000ae00000fe00c8070000000014000500fc0000000000000000000000000000000c00090008"], 0x3c}, 0x1, 0x0, 0x0, 0x2048800}, 0x0) (async) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r12, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x2a, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) r13 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x9, 0x9, 0x8, 0x2, 0x0, 0x70bd29, 0x25dfdbfb}, 0x10}}, 0x4008000) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x0, 0x0, 0x44, 0x0, "44d7f86366867a2b084cd36c617e69ce4bbf39b07f38dfa715ae836f81e8aab7cc06f4e6d87f7eade194197a83fa7ab5138c8cace4bf1e1061714c634021fdc9eb7bcf7b84d3be8c268707b146ea5422"}, 0xd8) 337.564072ms ago: executing program 4 (id=10727): r0 = socket$kcm(0x10, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x100, 0xfdfffc80, 0x0, 0x6, 0x8, 0x0, 0x73a, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20, 0x0, 0xfffffffc, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0xfeffffff, 0x0, 0x1ff, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0xfffffff7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400004, 0x7, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x400, 0x0, 0x10000, 0x1, 0xfff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfa, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x135, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffefe, 0x0, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x10000000, 0x0, 0x0, 0x800000, 0x0, 0x0, 0xfffffff8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0xffffffff, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x100, 0x1000, 0x0, 0x0, 0x0, 0x7, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x71280dd2, 0x0, 0x9, 0x0, 0x0, 0x5, 0x8, 0x0, 0xfffefffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x17, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x100, 0xfdfffc80, 0x0, 0x6, 0x8, 0x0, 0x73a, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20, 0x0, 0xfffffffc, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0xfeffffff, 0x0, 0x1ff, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0xfffffff7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400004, 0x7, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x400, 0x0, 0x10000, 0x1, 0xfff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfa, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x135, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffefe, 0x0, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x10000000, 0x0, 0x0, 0x800000, 0x0, 0x0, 0xfffffff8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0xffffffff, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x100, 0x1000, 0x0, 0x0, 0x0, 0x7, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x71280dd2, 0x0, 0x9, 0x0, 0x0, 0x5, 0x8, 0x0, 0xfffefffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x17, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$sock_int(r4, 0x1, 0x14, &(0x7f0000000040), 0x50) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="d8000000200081044e81f782db44b90402000000e8fe55a11800150006001c0000000e120900100000000401a80016000a0011400600000003080000004dcf5c0468c1d67f6f94007134cf6ee08088568ab35d6e7016bb234841ef52b49816277ce06bbace806069438e6fb599e0ced72a6ba86cf917cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b10d414f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce34d4a13821f4fbb9ad809d561cdce81ed0bffece0b42a9e", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0xffff}}, 0x14) 233.237576ms ago: executing program 3 (id=10728): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="b40000000000000779116000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000060000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x18, &(0x7f000000cf3d)=""/195, 0x0, 0xc, '\x00', 0x0, @fallback=0xd}, 0x59) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x3, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0xfb165b60812efe9e, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x9, @mcast1, 0x1}}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @private=0xa010102}}]}, 0x50}, 0x1, 0x7}, 0x0) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r1, 0xc0205866, &(0x7f0000000980)={&(0x7f0000000380)=0xea7, 0x3, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000940)}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000009c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000c80)={{r0}, r2, 0x6, @inherit={0x98, &(0x7f0000000bc0)={0x1, 0xa, 0x0, 0x2, {0x0, 0x3, 0x400, 0x1, 0x4}, [0xb, 0x90, 0x80000000, 0x6, 0x8, 0x10000, 0x0, 0xfffffffffffff418, 0x1, 0x9]}}, @name="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"}) r3 = socket(0x1e, 0x5, 0x0) connect$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x41, 0x3}, 0x4}}, 0xfffffed6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], 0x0, 0xc0, &(0x7f00000000c0)=[{}], 0x8, 0x10, &(0x7f0000000100), &(0x7f00000001c0), 0x8, 0x99, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000440)={'syztnl1\x00', r4, 0x29, 0x10, 0x36, 0xe4, 0x77, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x10, 0x10, 0x8, 0x1}}) 232.009027ms ago: executing program 0 (id=10729): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000003030103000000000500000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x24000014}, 0x4040) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000300)={@multicast1, @empty, 0x0}, &(0x7f0000000340)=0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@getqdisc={0x44, 0x26, 0x10, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xfff3, 0xfff3}, {0xe, 0x8}, {0x10, 0xc}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x690}, 0x40) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000003030103000000000500000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x24000014}, 0x4040) (async) pipe(&(0x7f0000019480)) (async) close(r4) (async) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) (async) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000300)={@multicast1, @empty}, &(0x7f0000000340)=0xc) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@getqdisc={0x44, 0x26, 0x10, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xfff3, 0xfff3}, {0xe, 0x8}, {0x10, 0xc}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x80) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x690}, 0x40) (async) 181.005791ms ago: executing program 2 (id=10730): socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0400000004000000040000000500010000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000bb549be7e49c3ee5c6d52389c4bd877621616d3109e43ffddfef7f62357e7a111afd3dd7c726d568a47c59ebb8a1d944bae4457cb26723faebdf2ebb750d0cc2175828b26b1408926bcba6ea5314badd000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(r2) (async) listen(r1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x6, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r4, &(0x7f0000006140)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000002500)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}, {{&(0x7f0000000200)=@abs, 0x67, &(0x7f0000002a40)=[{&(0x7f0000003100)=""/4080, 0xff0}], 0x1}}, {{&(0x7f0000000280), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000002d80)=""/136, 0x88}, {0x0}], 0x2, 0x0, 0x25}}], 0x3, 0x120, 0x0) (async) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r6 = socket(0x11, 0xa, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=@tcp=r6}, 0x20) listen(r5, 0x7d4165c9) (async) listen(r3, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) (async) r9 = socket$netlink(0x10, 0x3, 0x8000000004) (async) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) (async, rerun: 64) writev(r9, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c566f0200ff000000000000000058000b482406000000000000000325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c1000"/88, 0x58}], 0x23) (rerun: 64) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 146.033749ms ago: executing program 1 (id=10731): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x30, 0x3, 0x8, 0x201, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x65}]}]}, 0x30}}, 0x0) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x800) 49.105442ms ago: executing program 2 (id=10732): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0022070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x44004000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a7c000000060a010400000000000000000a0000013c000480380001800a0001006d617463680000002800028010000300709c897c82b1095a67232d630800024000000001090001006d61726b000000000900020073797a32000000000900010073797a3100000000140005800800014000008917080002"], 0xa4}, 0x1, 0x0, 0x0, 0x855}, 0x24000840) socket$netlink(0x10, 0x3, 0xf) 48.062373ms ago: executing program 3 (id=10733): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newqdisc={0x68, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4, 0xc}, {0xb, 0x4}, {0x4, 0x2}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x1, 0x0, 0x7ff, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x9, 0x6e, 0x8, 0xd, 0x1, 0x8, 0x8000002}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4080}, 0x20000040) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) (async) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) (async) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000003c0)={r9, 0xd, 0xffff, 0x2f5cef67, 0x380, 0x8}, 0x14) (async) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4620}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) 43.225319ms ago: executing program 4 (id=10734): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129642, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56441, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x204c000) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x100000c, 0x30, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000012c0)=[{0x81, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r9, 0x0) (async) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r9, 0x0) socket$key(0xf, 0x3, 0x2) (async) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="020a0009020000000000000000000200"], 0x10}}, 0x4) (async) sendmsg$key(r10, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="020a0009020000000000000000000200"], 0x10}}, 0x4) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r9, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xfffff000) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x1000000, 0x100010, r0, 0x5eaaa000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) 31.269068ms ago: executing program 0 (id=10735): socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x20000000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1400000004000000040000002200000000000000", @ANYRES32, @ANYBLOB="0300000000000000000000000000000000000000753da8b14d4c35c368aa9f461959ab50bf47b273ae1fd1c39ad15bb619e2301b12becfcfce17165cf37ef9de0e23691640fc4e65b5792c52fc9f443b64adf3a88733549f3ab25ddc59a1eafda06b1ddba1652b17ce277a6b9191c5386017eb44c31e1b0fc7645a0ca37c46cfa65982c96452bf1198329aa2b9f325c1a31932cfe014f82a1dd23e5dfa3f129703524ca2259c6d9b574ecef6a65748a2672420432eea3dfeea453b8cd286969fd431ec8ab3183353fcb2975f8e6f6be994533bb1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1400000004000000040000002200000000000000", @ANYRES32, @ANYBLOB="0300000000000000000000000000000000000000753da8b14d4c35c368aa9f461959ab50bf47b273ae1fd1c39ad15bb619e2301b12becfcfce17165cf37ef9de0e23691640fc4e65b5792c52fc9f443b64adf3a88733549f3ab25ddc59a1eafda06b1ddba1652b17ce277a6b9191c5386017eb44c31e1b0fc7645a0ca37c46cfa65982c96452bf1198329aa2b9f325c1a31932cfe014f82a1dd23e5dfa3f129703524ca2259c6d9b574ecef6a65748a2672420432eea3dfeea453b8cd286969fd431ec8ab3183353fcb2975f8e6f6be994533bb1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r2, &(0x7f0000000240), &(0x7f0000000080)=@tcp}, 0x20) writev(r1, 0x0, 0x0) socket(0x1e, 0x4, 0x0) (async) r3 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0xfffffce3, 0x7, 0x40, 0x40000001}, 0x10) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r7 = socket(0x1e, 0x4, 0x0) r8 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000480)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e21, @broadcast}, 0x2, 0x2, 0x2, 0x4}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001000000000000000000000010"], 0x28}, 0xfc40) close(0x3) (async) close(0x3) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg$unix(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) recvmmsg$unix(r0, &(0x7f0000006200), 0x0, 0x0, 0x0) (async) recvmmsg$unix(r0, &(0x7f0000006200), 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=10736): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x400) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x37, 0x0, &(0x7f0000001fc0)=0xfe82) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000340)=[@in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e22, 0x2, @remote, 0x2}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}], 0x4c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000100003040000008e0000000000000000", @ANYRES32=r4, @ANYBLOB="00000000000000000a000100aaaaaaaaaa00000008000400f20f0004"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xec37, 0x40024}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MTU={0x8, 0x4, 0x1ff}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x24004004) unshare(0x24020400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000100)='cgroup.freeze\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r9, 0x0) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x2}, 0x20) r11 = socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000009, 0x37871, 0xffffffffffffffff, 0x0) bind$rds(r11, &(0x7f0000000840)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) sendmsg$rds(r9, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000001880)=[{&(0x7f0000002640)=""/102389, 0x18ff5}, {&(0x7f0000000400)=""/226, 0xe2}, {&(0x7f0000000500)=""/158, 0x9e}, {&(0x7f00000005c0)=""/89, 0x59}, {&(0x7f0000000880)=""/4096, 0x1000}], 0x5, 0x19026}}], 0x48}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r1, @ANYRESOCT=r1, @ANYRES8=0x0], 0x44}}, 0x0) kernel console output (not intermixed with test programs): ][T10013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9535'. [ 870.545496][ T5856] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 870.567871][T10022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9535'. [ 870.663523][ T5856] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 870.786778][ T57] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 870.913487][ T7576] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 871.267828][T10056] IPVS: set_ctl: invalid protocol: 206 127.0.0.1:20002 [ 871.290952][T10056] tipc: Enabled bearer , priority 25 [ 871.411253][T10061] geneve2: entered promiscuous mode [ 871.418010][T10061] geneve2: entered allmulticast mode [ 871.611520][T10072] veth0: entered promiscuous mode [ 871.716562][T10083] bond4: Unable to set down delay as MII monitoring is disabled [ 871.759563][T10083] bond4 (unregistering): Released all slaves [ 871.762686][T10091] xt_CT: You must specify a L4 protocol and not use inversions on it [ 871.790844][T10091] C: renamed from veth1_to_team (while UP) [ 871.803014][T10091] netlink: 'syz.3.9558': attribute type 4 has an invalid length. [ 871.956365][T10104] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.016323][T10067] veth0: left promiscuous mode [ 872.046727][T10104] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.216323][T10104] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.323863][T10104] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.450823][ T5856] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.505778][T30421] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.526963][T30421] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.550231][T30421] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.559553][T10152] veth0_to_bond: default FDB implementation only supports local addresses [ 872.905865][T10178] 8021q: adding VLAN 0 to HW filter on device bond1 [ 872.950774][T10178] gretap1: entered allmulticast mode [ 872.980509][T10178] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 873.023127][T10178] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 873.163624][T10178] bond1 (unregistering): Released all slaves [ 873.353664][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 873.485393][T10205] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.519000][T10205] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.886271][T10220] syzkaller0: entered promiscuous mode [ 873.894526][T10220] syzkaller0: entered allmulticast mode [ 873.948794][T10239] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 874.046706][T10242] __nla_validate_parse: 11 callbacks suppressed [ 874.046725][T10242] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9600'. [ 874.102155][T10250] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9603'. [ 874.135907][T10253] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9603'. [ 874.212199][T10257] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9605'. [ 874.228478][T10259] netlink: 'syz.4.9606': attribute type 2 has an invalid length. [ 874.239174][T10259] netlink: 232 bytes leftover after parsing attributes in process `syz.4.9606'. [ 874.389067][T10271] netlink: 'syz.1.9610': attribute type 1 has an invalid length. [ 874.460460][T10276] netlink: 840 bytes leftover after parsing attributes in process `syz.4.9612'. [ 874.481256][T10272] netlink: 840 bytes leftover after parsing attributes in process `syz.4.9612'. [ 874.521207][T10279] mac80211_hwsim hwsim146 syzkaller0: entered promiscuous mode [ 874.541881][T10279] mac80211_hwsim hwsim146 syzkaller0: entered allmulticast mode [ 874.681610][T10285] netlink: 'syz.4.9616': attribute type 16 has an invalid length. [ 874.859344][T10295] bond1: option arp_all_targets: invalid value (3) [ 874.870771][T10295] bond1 (unregistering): Released all slaves [ 874.919794][T10299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9621'. [ 874.934562][ T5856] net_ratelimit: 34 callbacks suppressed [ 874.934584][ T5856] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 874.942286][T10299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9621'. [ 874.959555][T10299] netlink: 'syz.4.9621': attribute type 11 has an invalid length. [ 875.053599][ T5192] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 875.184971][ T5856] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 875.264356][T10323] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9628'. [ 875.313622][ T5856] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 875.315784][T10327] netlink: 'syz.4.9629': attribute type 1 has an invalid length. [ 875.353618][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 875.434298][ T7576] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 875.553942][ T5856] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 875.650072][T10336] ip_vti0: entered promiscuous mode [ 875.697520][ T5856] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 875.855019][ T5856] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 875.900880][T10356] netlink: 'syz.2.9641': attribute type 5 has an invalid length. [ 875.939016][T10365] dummy0: entered allmulticast mode [ 875.986305][ T5192] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 876.555275][ T5621] Bluetooth: hci0: command tx timeout [ 877.516692][T10439] bond2: (slave dummy0): Releasing active interface [ 877.589650][T10439] dummy0: left promiscuous mode [ 877.647891][T10439] bridge_slave_0: left allmulticast mode [ 877.672040][T10439] bridge_slave_0: left promiscuous mode [ 877.679120][T10439] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.697047][T10439] bridge_slave_1: left allmulticast mode [ 877.713558][T10439] bridge_slave_1: left promiscuous mode [ 877.729907][T10439] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.762248][T10439] bond0: (slave bond_slave_0): Releasing backup interface [ 877.793284][T10439] bond0: (slave bond_slave_1): Releasing backup interface [ 877.821297][T10439] team0: Port device team_slave_0 removed [ 877.831691][T10439] team0: Port device team_slave_1 removed [ 877.851192][T10439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 877.875366][T10439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 877.889856][T10444] team0: No ports can be present during mode change [ 877.979217][T10454] team0: Port device team_slave_0 removed [ 878.038198][T10479] netlink: 'syz.4.9675': attribute type 1 has an invalid length. [ 878.198411][T10492] netlink: 'syz.3.9677': attribute type 1 has an invalid length. [ 878.220384][T10492] netlink: 'syz.3.9677': attribute type 2 has an invalid length. [ 878.255195][T10492] netlink: 'syz.3.9677': attribute type 3 has an invalid length. [ 879.943567][ T5856] net_ratelimit: 34 callbacks suppressed [ 879.943588][ T5856] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 880.063502][ T5856] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 880.173528][ T57] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 880.283883][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 880.396757][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 880.513529][ T5192] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 880.553726][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 880.623581][ T5856] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 880.733622][ T5856] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 880.843573][ T5192] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 881.014764][T10476] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 881.130598][T10526] __nla_validate_parse: 13 callbacks suppressed [ 881.130617][T10526] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9686'. [ 881.179329][T10531] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9688'. [ 881.378439][T10548] netlink: 6068 bytes leftover after parsing attributes in process `syz.4.9687'. [ 881.391279][T10551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9695'. [ 881.404166][T10555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9695'. [ 881.414415][T10551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9695'. [ 881.424669][T10555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9695'. [ 881.440480][T10556] netlink: 6068 bytes leftover after parsing attributes in process `syz.4.9687'. [ 881.749483][T10569] veth0: entered promiscuous mode [ 881.761221][T10569] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9697'. [ 881.786773][T10571] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 881.802048][T10571] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 881.810724][T10568] veth0: left promiscuous mode [ 882.024518][T10590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9703'. [ 882.060780][T10590] 8021q: adding VLAN 0 to HW filter on device bond4 [ 882.125274][T10590] bond4: (slave veth3): Enslaving as an active interface with an up link [ 882.403422][T10610] netlink: 'syz.4.9708': attribute type 12 has an invalid length. [ 882.857507][T10637] bridge0: port 1(ipvlan2) entered blocking state [ 882.884469][T10637] bridge0: port 1(ipvlan2) entered disabled state [ 882.900588][T10637] ipvlan2: entered allmulticast mode [ 882.915457][T10637] bridge0: entered allmulticast mode [ 882.927434][T10637] ipvlan2: left allmulticast mode [ 882.958268][T10637] bridge0: left allmulticast mode [ 883.078744][T10646] 8021q: adding VLAN 0 to HW filter on device bond2 [ 883.091032][T10646] bond1: (slave bond2): Enslaving as an active interface with an up link [ 883.552200][T10672] tc action pedit offset must be on 32 bit boundaries [ 883.737087][T10686] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.744308][T10686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 883.751781][T10686] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.758938][T10686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 883.799743][T10686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 883.839916][T10686] 8021q: adding VLAN 0 to HW filter on device bond3 [ 883.925373][ T5856] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 883.938124][T28294] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 883.964070][ T5856] bond1: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 883.981095][ T5856] bond1: (slave veth3): making interface the new active one [ 883.993758][ T5856] bond1: active interface up! [ 884.010372][T10715] netlink: 'syz.2.9736': attribute type 11 has an invalid length. [ 884.051239][T10715] netlink: 'syz.2.9736': attribute type 11 has an invalid length. [ 884.062189][T10715] netlink: 'syz.2.9736': attribute type 11 has an invalid length. [ 884.063083][T10693] workqueue: Failed to create a rescuer kthread for wq "nfc7_nci_cmd_wq": -EINTR [ 884.123885][T30421] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 884.140950][T30421] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 884.260731][T10726] netlink: 'syz.0.9741': attribute type 1 has an invalid length. [ 884.318820][T10726] 8021q: adding VLAN 0 to HW filter on device bond4 [ 884.431621][T10733] bond4: (slave veth7): Enslaving as an active interface with a down link [ 884.450546][T10741] netlink: 'syz.4.9745': attribute type 15 has an invalid length. [ 884.477588][T10726] bond4: (slave veth9): Enslaving as an active interface with a down link [ 884.506944][T10733] bond4: entered allmulticast mode [ 884.760160][T10751] tipc: Enabling of bearer rejected, failed to enable media [ 885.034249][T10777] syzkaller1: entered promiscuous mode [ 885.047211][T10777] syzkaller1: entered allmulticast mode [ 885.066124][T10779] tipc: Started in network mode [ 885.071340][T10779] tipc: Node identity 080211000001, cluster identity 4711 [ 885.079327][T10779] tipc: Enabled bearer , priority 0 [ 885.093912][ T5198] net_ratelimit: 29 callbacks suppressed [ 885.093932][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 885.227119][ T5198] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 885.246710][ T5198] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 885.376153][ T7578] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 885.384108][T28278] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 885.452130][T10791] syzkaller1: entered promiscuous mode [ 885.470299][T10791] syzkaller1: entered allmulticast mode [ 885.623897][T30421] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 885.743890][T30421] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 885.753585][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 885.786220][T10826] sctp: [Deprecated]: syz.1.9769 (pid 10826) Use of int in max_burst socket option. [ 885.786220][T10826] Use struct sctp_assoc_value instead [ 885.864156][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 885.897763][T10832] netlink: 'syz.4.9773': attribute type 10 has an invalid length. [ 885.984117][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 886.118913][T30421] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 886.198695][T28278] tipc: Node number set to 134418688 [ 886.303447][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 886.353912][T10871] nbd4: detected capacity change from 0 to 63 [ 886.379306][T10863] ip_vti0: left promiscuous mode [ 886.397996][T10863] sit0: left promiscuous mode [ 886.517941][T10863] vlan0: left promiscuous mode [ 886.545912][T10863] 8021q: adding VLAN 0 to HW filter on device bond1 [ 886.561465][T10863] 8021q: adding VLAN 0 to HW filter on device bond3 [ 886.571017][T10863] ip6gre1: left promiscuous mode [ 886.604005][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 886.662824][ T5192] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 886.686195][ T5192] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 886.713133][ T5192] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 886.727061][ T5192] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 886.751835][T30421] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 886.784249][T30421] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 886.843598][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 886.919048][T10922] netlink: 'syz.3.9795': attribute type 21 has an invalid length. [ 886.929317][T10922] netlink: 'syz.3.9795': attribute type 6 has an invalid length. [ 886.941125][ T5621] block nbd4: Receive control failed (result -104) [ 886.954066][T10922] __nla_validate_parse: 20 callbacks suppressed [ 886.954084][T10922] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9795'. [ 887.123168][T10932] bond5 (unregistering): Released all slaves [ 887.188193][T10936] netlink: 13 bytes leftover after parsing attributes in process `syz.4.9796'. [ 887.260658][T10932] netlink: 72 bytes leftover after parsing attributes in process `syz.4.9796'. [ 887.351231][T10939] syzkaller1: entered promiscuous mode [ 887.361503][T10939] syzkaller1: entered allmulticast mode [ 887.408879][T10967] netlink: 'syz.4.9804': attribute type 16 has an invalid length. [ 887.485919][T10972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9806'. [ 887.495749][T10972] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9806'. [ 887.520888][T10973] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9805'. [ 887.550119][T10975] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9807'. [ 887.736938][T10981] syzkaller0: entered promiscuous mode [ 887.742993][T10981] syzkaller0: entered allmulticast mode [ 888.714036][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 889.273517][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 890.114875][ T7578] net_ratelimit: 33 callbacks suppressed [ 890.114895][ T7578] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 890.161071][T10938] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 890.211143][T11001] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9816'. [ 890.290664][T11006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9817'. [ 890.363735][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 890.383806][T11013] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9819'. [ 890.554044][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 890.567426][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 890.704220][T30421] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 890.823881][ T5196] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 890.953438][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 890.970772][ T5192] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 891.103653][ T5192] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 891.234901][ T5196] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 891.374364][ T5196] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 891.538522][T11104] netlink: 'syz.4.9840': attribute type 1 has an invalid length. [ 891.651037][T11104] 8021q: adding VLAN 0 to HW filter on device bond5 [ 891.704226][T11119] bond5: (slave geneve2): making interface the new active one [ 891.713009][T11119] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 891.769252][T11112] vlan2: entered allmulticast mode [ 891.795481][T11112] bond5: entered allmulticast mode [ 891.814002][T11112] geneve2: entered allmulticast mode [ 891.820051][T11131] netlink: 'syz.1.9845': attribute type 1 has an invalid length. [ 891.905804][T11131] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 892.150344][T11160] __nla_validate_parse: 21 callbacks suppressed [ 892.150365][T11160] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9852'. [ 892.255637][T11160] netlink: 43 bytes leftover after parsing attributes in process `syz.3.9852'. [ 892.264599][T11172] netlink: 9 bytes leftover after parsing attributes in process `syz.2.9854'. [ 892.276007][T11172] netlink: 9 bytes leftover after parsing attributes in process `syz.2.9854'. [ 892.329154][T11171] syzkaller0: entered promiscuous mode [ 892.340909][T11171] syzkaller0: entered allmulticast mode [ 892.351779][T11160] netlink: 'syz.3.9852': attribute type 6 has an invalid length. [ 892.362141][T11160] netlink: 'syz.3.9852': attribute type 5 has an invalid length. [ 892.383385][T11160] netlink: 43 bytes leftover after parsing attributes in process `syz.3.9852'. [ 892.406305][T11166] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9852'. [ 892.424533][T11166] netlink: 43 bytes leftover after parsing attributes in process `syz.3.9852'. [ 892.434447][T11166] netlink: 'syz.3.9852': attribute type 6 has an invalid length. [ 892.445357][T11166] netlink: 'syz.3.9852': attribute type 5 has an invalid length. [ 892.453803][T11166] netlink: 43 bytes leftover after parsing attributes in process `syz.3.9852'. [ 892.741422][T11197] syzkaller1: entered promiscuous mode [ 892.749056][T11197] syzkaller1: entered allmulticast mode [ 892.905067][T11213] bond6: option min_links: invalid value (18446744073709551612) [ 892.918857][T11213] bond6: option min_links: allowed values 0 - 2147483647 [ 892.930180][T11213] bond6 (unregistering): Released all slaves [ 893.180363][T11237] bond5: entered promiscuous mode [ 893.236429][T11242] 8021q: adding VLAN 0 to HW filter on device bond1 [ 893.337991][T11245] bond6: entered promiscuous mode [ 893.343130][T11245] bond6: entered allmulticast mode [ 893.348923][T11245] 8021q: adding VLAN 0 to HW filter on device bond6 [ 893.374809][T11245] bond7: entered promiscuous mode [ 893.379939][T11245] bond7: entered allmulticast mode [ 893.385696][T11245] 8021q: adding VLAN 0 to HW filter on device bond7 [ 893.766862][T11256] netlink: 'syz.4.9871': attribute type 1 has an invalid length. [ 895.153533][ T7578] net_ratelimit: 33 callbacks suppressed [ 895.153575][ T7578] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 895.273859][ T5196] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 895.383836][ T7578] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 895.494090][T30421] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 895.603779][ T5196] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 895.714325][T30421] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 895.732465][T11199] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 895.748958][T11251] netlink: 216 bytes leftover after parsing attributes in process `syz.0.9870'. [ 895.765670][T11251] netlink: 'syz.0.9870': attribute type 2 has an invalid length. [ 895.823693][ T13] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 895.989446][T11277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9876'. [ 896.009231][T11277] tc_dump_action: action bad kind [ 896.033541][ T5192] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 896.071396][T11266] @0: renamed from bond_slave_1 (while UP) [ 896.153620][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 896.164595][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 896.526665][T11296] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.534027][T11296] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.898344][T11336] xt_hashlimit: size too large, truncated to 1048576 [ 896.906163][T11337] xt_hashlimit: size too large, truncated to 1048576 [ 896.927354][T11296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 896.977008][T11296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 897.177637][T11346] __nla_validate_parse: 2 callbacks suppressed [ 897.177655][T11346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9885'. [ 897.204723][T11346] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9885'. [ 897.374503][ T7572] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.405917][ T7572] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.429829][ T5283] veth0_macvtap: left promiscuous mode [ 897.501399][ T7572] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.547143][ T7572] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.649893][T11373] netlink: 80 bytes leftover after parsing attributes in process `syz.2.9890'. [ 898.170035][T11384] x_tables: duplicate underflow at hook 2 [ 898.313514][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 900.243785][ T3341] net_ratelimit: 28 callbacks suppressed [ 900.243807][ T3341] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 900.313695][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 900.363917][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 900.442714][T11355] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 900.473667][ T3341] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 900.627928][T11394] netlink: 116 bytes leftover after parsing attributes in process `syz.2.9896'. [ 900.657494][T11391] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 900.676794][T11394] openvswitch: netlink: Flow key attr not present in new flow. [ 900.723661][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 900.821469][T11405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9898'. [ 900.843466][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 900.857783][T11405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 900.880054][T11405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 900.919176][T11405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 900.944350][T11405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 901.019560][ T7572] vlan0: left allmulticast mode [ 901.037342][ T7572] geneve0: left allmulticast mode [ 901.053646][ T7572] bridge0: port 3(vlan0) entered disabled state [ 901.363751][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 901.742304][ T7572] bridge_slave_1: left promiscuous mode [ 901.749955][ T7572] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.761344][ T7572] bridge_slave_0: left allmulticast mode [ 901.791701][ T7572] bridge_slave_0: left promiscuous mode [ 901.800617][ T7572] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.942623][ T7572] bond3 (unregistering): (slave vti0): Releasing backup interface [ 901.981289][ T7572] bond14 (unregistering): (slave geneve4): Releasing active interface [ 902.036832][ T7572] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 902.046471][ T7572] bond_slave_0: left allmulticast mode [ 902.056700][ T7572] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 902.066012][ T7572] bond_slave_1: left allmulticast mode [ 902.072620][ T7572] bond0 (unregistering): Released all slaves [ 902.082175][ T7572] bond1 (unregistering): Released all slaves [ 902.094135][ T7572] bond2 (unregistering): Released all slaves [ 902.109605][ T7572] bond3 (unregistering): Released all slaves [ 902.122259][ T7572] bond4 (unregistering): (slave team_slave_1): Releasing backup interface [ 902.134868][ T7572] bond4 (unregistering): Released all slaves [ 902.146457][ T7572] bond5 (unregistering): Released all slaves [ 902.158315][ T7572] bond6 (unregistering): (slave veth7): Releasing active interface [ 902.168731][ T7572] dummy0: entered promiscuous mode [ 902.177531][ T7572] bond6 (unregistering): (slave dummy0): Releasing active interface [ 902.187501][ T7572] bond6 (unregistering): Released all slaves [ 902.199485][ T7572] bond7 (unregistering): (slave bond8): Releasing backup interface [ 902.208918][ T7572] bond7 (unregistering): Released all slaves [ 902.220548][ T7572] bond8 (unregistering): Released all slaves [ 902.234942][ T7572] bond9 (unregistering): Released all slaves [ 902.246754][ T7572] bond10 (unregistering): Released all slaves [ 902.258794][ T7572] bond11 (unregistering): Released all slaves [ 902.272364][ T7572] bond12 (unregistering): Released all slaves [ 902.284909][ T7572] bond13 (unregistering): (slave veth0_to_bond): Releasing active interface [ 902.295655][ T7572] bond13 (unregistering): Released all slaves [ 902.307242][ T7572] bond14 (unregistering): Released all slaves [ 902.325922][ T7572] bond15 (unregistering): (slave bond16): Releasing backup interface [ 902.335100][ T7572] bond15 (unregistering): Released all slaves [ 902.347127][ T7572] bond16 (unregistering): Released all slaves [ 902.361319][ T7572] bond17 (unregistering): Released all slaves [ 902.372654][T11421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9898'. [ 902.391843][T11428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9902'. [ 902.401194][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 902.517789][ T5196] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 902.599130][ T7572] : left promiscuous mode [ 902.692670][T11447] veth1_to_bond: entered promiscuous mode [ 902.707285][T11447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9904'. [ 902.707829][ T7572] hm3): left promiscuous mode [ 902.746909][T11448] netlink: 840 bytes leftover after parsing attributes in process `syz.0.9903'. [ 902.784653][T11447] veth1_to_bond (unregistering): left promiscuous mode [ 902.838021][T11447] bond0: (slave bond_slave_1): Releasing backup interface [ 902.877102][ T7572] tipc: Disabling bearer [ 902.898661][ T7572] tipc: Left network mode [ 902.924219][T11468] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 902.935064][T11468] team0: Port device batadv1 added [ 902.945979][ T7572] IPVS: stopping backup sync thread 25350 ... [ 902.955059][T11471] nbd0: detected capacity change from 0 to 6 [ 902.981661][T10197] block nbd0: Dead connection, failed to find a fallback [ 903.092355][T11483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9912'. [ 903.229433][T11506] netlink: 277 bytes leftover after parsing attributes in process `syz.0.9915'. [ 903.438599][T11511] tipc: Resetting bearer [ 903.711653][T11510] syzkaller1: entered promiscuous mode [ 903.734435][T11510] syzkaller1: entered allmulticast mode [ 903.960314][ T7572] hsr_slave_0: left promiscuous mode [ 903.972409][ T7572] hsr_slave_1: left promiscuous mode [ 905.303443][ T5856] net_ratelimit: 9 callbacks suppressed [ 905.303465][ T5856] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 905.443011][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 905.512468][ T7572] IPVS: stop unused estimator thread 0... [ 905.518367][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 905.576805][ T5856] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 905.694087][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 905.803509][ T5856] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 905.913778][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 906.023845][ T5856] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 906.115979][T11492] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 906.135934][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 906.283868][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 906.382691][T11596] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9929'. [ 906.501372][T11601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9931'. [ 906.542105][T11602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9931'. [ 906.552363][T11604] netlink: 'syz.2.9931': attribute type 3 has an invalid length. [ 906.579830][T11601] ip6tnl1: entered allmulticast mode [ 906.591602][T11602] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9931'. [ 907.023776][T11646] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 907.175154][T11654] netlink: 'syz.1.9946': attribute type 4 has an invalid length. [ 907.197755][T11655] netlink: 'syz.1.9946': attribute type 4 has an invalid length. [ 907.359133][T11673] IPVS: set_ctl: invalid protocol: 46 172.20.20.170:20001 [ 907.401753][T11676] __nla_validate_parse: 5 callbacks suppressed [ 907.401773][T11676] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9952'. [ 907.424453][T11666] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 907.535959][T11682] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 907.553821][T11682] syzkaller1: linktype set to 778 [ 907.902388][T11717] netlink: 'syz.2.9965': attribute type 1 has an invalid length. [ 907.950097][ T29] audit: type=1800 audit(1781985682.770:35): pid=11725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.9966" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=777 res=0 errno=0 [ 907.967692][T11726] netlink: 'syz.2.9965': attribute type 4 has an invalid length. [ 908.044474][T11736] netlink: 'syz.2.9965': attribute type 4 has an invalid length. [ 908.070648][T11720] netlink: 'syz.0.9963': attribute type 1 has an invalid length. [ 908.137776][T11717] tun0: tun_chr_ioctl cmd 1074812118 [ 908.143379][T11717] tun0: tun_chr_ioctl cmd 1074033169 [ 908.152117][T11744] netlink: 'syz.4.9971': attribute type 32 has an invalid length. [ 908.169195][T11742] syzkaller1: entered promiscuous mode [ 908.174842][T11742] syzkaller1: entered allmulticast mode [ 908.181416][T11746] netlink: 'syz.1.9972': attribute type 1 has an invalid length. [ 908.206416][T11749] Cannot find set identified by id 65534 to match [ 908.208024][T11746] 8021q: adding VLAN 0 to HW filter on device bond3 [ 908.302164][T11754] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9975'. [ 908.326945][T11746] vlan3: entered promiscuous mode [ 908.332219][T11746] bond3: entered promiscuous mode [ 908.337971][T11746] vlan3: entered allmulticast mode [ 908.343293][T11746] bond3: entered allmulticast mode [ 908.352345][T11746] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9972'. [ 908.509404][T11774] netlink: 'syz.0.9980': attribute type 6 has an invalid length. [ 908.517539][T11774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9980'. [ 908.989948][T11798] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9989'. [ 909.005607][T11803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9987'. [ 909.060583][T11803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9987'. [ 909.102582][T11797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9988'. [ 909.148747][T11797] syzkaller0: renamed from batadv_slave_1 (while UP) [ 909.259610][T11819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9993'. [ 909.272283][T11818] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9992'. [ 909.314504][T11797] vlan3: entered promiscuous mode [ 909.326919][T11797] bridge0: entered promiscuous mode [ 910.353692][ T7572] net_ratelimit: 34 callbacks suppressed [ 910.353714][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 910.474367][ T5856] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 910.583725][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 910.693513][ T5856] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 910.713643][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 910.803442][ T5196] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 910.913879][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 911.023535][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 911.133702][ T5196] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 911.243733][ T5196] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 913.033584][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 915.423613][ T5198] net_ratelimit: 41 callbacks suppressed [ 915.423632][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 915.543745][ T7578] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 915.653763][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 915.763445][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 915.873726][ T7578] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 915.913423][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 915.983701][ T7578] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 916.093509][ T5196] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 916.203606][ T5196] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 916.313902][ T7578] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 916.874076][ T1769] block nbd4: Possible stuck request ffff88802710e000: control (read@0,1024B). Runtime 30 seconds [ 916.885380][ T1769] block nbd4: Possible stuck request ffff88802710e1c0: control (read@1024,1024B). Runtime 30 seconds [ 916.896542][ T1769] block nbd4: Possible stuck request ffff88802710e380: control (read@2048,1024B). Runtime 30 seconds [ 916.907528][ T1769] block nbd4: Possible stuck request ffff88802710e540: control (read@3072,1024B). Runtime 30 seconds [ 919.433772][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 920.493509][ T7578] net_ratelimit: 41 callbacks suppressed [ 920.493530][ T7578] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 920.613573][ T5196] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 920.723683][ T5856] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 920.833511][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 920.943660][ T3341] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 921.053760][ T5856] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 921.113635][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 921.163436][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 921.273880][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 921.383675][ T3341] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 925.563497][ T5196] net_ratelimit: 41 callbacks suppressed [ 925.563518][ T5196] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 925.683475][ T5856] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 925.793713][ T5196] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 925.903537][ T5856] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 926.013642][ T7578] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 926.123686][ T7578] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 926.233599][ T5856] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 926.313415][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 926.343674][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 926.453712][ T5856] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 930.634410][ T7572] net_ratelimit: 41 callbacks suppressed [ 930.634446][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 930.753690][ T3341] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 930.863761][ T3341] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 930.973566][ T3341] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 931.083668][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 931.194004][ T5196] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 931.303541][ T7578] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 931.413720][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 931.513610][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 931.523746][ T5196] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 935.673619][ C0] net_ratelimit: 40 callbacks suppressed [ 935.673640][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 935.713669][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 935.823705][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 935.933508][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 936.043855][ T5856] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 936.153978][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 936.263535][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 936.373655][ T5856] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 936.483531][ T5856] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 936.593476][ T5856] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 938.794013][T11843] Bluetooth: hci1: command 0x0406 tx timeout [ 940.773674][ T7572] net_ratelimit: 41 callbacks suppressed [ 940.773713][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 940.873436][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 940.893684][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 941.003690][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 941.113649][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 941.223714][ T5196] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 941.333841][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 941.443453][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 941.553674][ T5856] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 941.663808][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 943.113752][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 943.913489][T11843] Bluetooth: hci2: command 0x0406 tx timeout [ 945.843775][ T7578] net_ratelimit: 41 callbacks suppressed [ 945.843796][ T7578] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 945.963775][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 946.073657][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 946.080977][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 946.193590][ T7578] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 946.303576][ T7578] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 946.413777][ T5196] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 946.523509][ T5196] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 946.633600][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 946.743786][ T5196] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 946.923814][ T4988] udevd[4988]: worker [10200] /devices/virtual/block/nbd4 is taking a long time [ 946.955906][ T1769] block nbd4: Possible stuck request ffff88802710e000: control (read@0,1024B). Runtime 60 seconds [ 946.966749][ T1769] block nbd4: Possible stuck request ffff88802710e1c0: control (read@1024,1024B). Runtime 60 seconds [ 946.978177][ T1769] block nbd4: Possible stuck request ffff88802710e380: control (read@2048,1024B). Runtime 60 seconds [ 946.989604][ T1769] block nbd4: Possible stuck request ffff88802710e540: control (read@3072,1024B). Runtime 60 seconds [ 950.923521][ T5198] net_ratelimit: 41 callbacks suppressed [ 950.923555][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 951.043639][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 951.153856][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 951.263639][ T5196] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 951.273426][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 951.373557][ T3341] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 951.483909][ T3341] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 951.593499][ T3341] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 951.703555][ T3341] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 951.813760][ T3341] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 952.731361][T11849] __nla_validate_parse: 1 callbacks suppressed [ 952.731392][T11849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9994'. [ 952.776359][T11847] validate_nla: 1 callbacks suppressed [ 952.776389][T11847] netlink: 'syz.1.9995': attribute type 8 has an invalid length. [ 953.419548][T11881] netlink: 'syz.0.10002': attribute type 23 has an invalid length. [ 953.447640][T11879] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10003'. [ 953.458317][T11881] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10002'. [ 953.549317][T11888] bond4: entered allmulticast mode [ 953.561431][T11888] macvlan3: entered promiscuous mode [ 953.567667][T11888] macvlan3: entered allmulticast mode [ 953.574169][T11888] bond4: entered promiscuous mode [ 953.579976][T11888] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 953.588451][T11888] bond4: left promiscuous mode [ 953.686946][T11900] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10011'. [ 953.711678][T11901] syzkaller1: entered promiscuous mode [ 953.740243][T11901] syzkaller1: entered allmulticast mode [ 953.783622][T11905] netlink: 'syz.0.10010': attribute type 1 has an invalid length. [ 953.850391][T11904] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10012'. [ 954.153988][T11843] Bluetooth: hci5: command 0x0406 tx timeout [ 954.422969][T11922] netlink: 81 bytes leftover after parsing attributes in process `syz.1.10016'. [ 954.584508][T11934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10019'. [ 954.630705][T11928] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.638083][T11928] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.795607][T11962] netlink: 'syz.1.10028': attribute type 1 has an invalid length. [ 954.965084][ T5856] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.974201][ T5856] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.001386][T11972] pim6reg: entered allmulticast mode [ 955.008289][ T5856] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.021186][ T5856] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.037330][T11976] pim6reg: left allmulticast mode [ 955.058512][T11969] syzkaller0: entered promiscuous mode [ 955.069363][T11969] syzkaller0: entered allmulticast mode [ 955.130899][T11984] syzkaller0: entered promiscuous mode [ 955.142469][T11984] syzkaller0: entered allmulticast mode [ 955.254356][T11997] : renamed from bond_slave_0 (while UP) [ 955.316910][T12003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10039'. [ 955.327884][T12003] netlink: 'syz.0.10039': attribute type 3 has an invalid length. [ 955.359204][T12007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10042'. [ 955.525075][T12020] netlink: 52 bytes leftover after parsing attributes in process `syz.4.10047'. [ 955.569176][T12022] 8021q: adding VLAN 0 to HW filter on device bond9 [ 955.656325][T12036] syzkaller0: left promiscuous mode [ 955.662031][T12036] syzkaller0: left allmulticast mode [ 955.668867][T12032] tipc: Started in network mode [ 955.675106][T12032] tipc: Node identity , cluster identity 4711 [ 955.681291][T12032] tipc: Failed to obtain node identity [ 955.688651][T12032] tipc: Enabling of bearer rejected, failed to enable media [ 955.973729][ T7578] net_ratelimit: 37 callbacks suppressed [ 955.973750][ T7578] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 956.027438][T12070] bridge1: entered promiscuous mode [ 956.077066][T12072] netlink: 'syz.2.10064': attribute type 10 has an invalid length. [ 956.092949][T12072] mac80211_hwsim hwsim146 syzkaller0: Caught tx_queue_len zero misconfig [ 956.106084][T12072] netlink: 'syz.2.10064': attribute type 1 has an invalid length. [ 956.133458][ T7578] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 956.243766][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 956.353868][ T7578] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 956.463983][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 956.473569][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 956.574493][ T3341] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 956.593889][T12100] netlink: 'syz.2.10073': attribute type 1 has an invalid length. [ 956.683732][ T7578] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 956.734526][T12103] netlink: 'syz.4.10074': attribute type 2 has an invalid length. [ 956.793975][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 956.812165][T12107] xt_cluster: node mask cannot exceed total number of nodes [ 956.933468][ T7578] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 957.191817][T12151] tipc: Enabling of bearer rejected, already enabled [ 957.240641][ T7572] pim6reg: left allmulticast mode [ 957.461538][ T7572] bond14 (unregistering): (slave erspan1): Releasing active interface [ 957.496071][ T7572] erspan1 (unregistering): left promiscuous mode [ 957.613979][ T7572] bond10 (unregistering): (slave bridge10): Releasing backup interface [ 957.622460][ T7572] bridge10 (unregistering): left promiscuous mode [ 957.629761][ T7572] bridge10 (unregistering): left allmulticast mode [ 957.649859][ T7572] bond0 (unregistering): Released all slaves [ 957.659799][ T7572] bond1 (unregistering): Released all slaves [ 957.674116][ T7572] bond2 (unregistering): Released all slaves [ 957.684363][T12178] sctp: [Deprecated]: syz.2.10093 (pid 12178) Use of struct sctp_assoc_value in delayed_ack socket option. [ 957.684363][T12178] Use struct sctp_sack_info instead [ 957.702330][ T7572] team0: Port device bond3 removed [ 957.711190][ T7572] bond3 (unregistering): Released all slaves [ 957.726291][ T7572] bond4 (unregistering): Released all slaves [ 957.737984][ T7572] bond5 (unregistering): Released all slaves [ 957.752141][ T7572] bond6 (unregistering): Released all slaves [ 957.763816][ T7572] bond7 (unregistering): Released all slaves [ 957.776018][ T7572] bond8 (unregistering): Released all slaves [ 957.787333][ T7572] bond9 (unregistering): Released all slaves [ 957.802911][ T7572] bond10 (unregistering): Released all slaves [ 957.814769][ T7572] bond11 (unregistering): Released all slaves [ 957.826218][ T7572] bond12 (unregistering): Released all slaves [ 957.838180][ T7572] bond13 (unregistering): Released all slaves [ 957.852942][ T7572] bond14 (unregistering): Released all slaves [ 957.865703][T12165] veth0: entered promiscuous mode [ 957.889168][T12157] veth0: left promiscuous mode [ 957.897762][T12161] debugfs: '1^!Y [ 957.897762][T12161] 3UH5rBn\' already exists in 'ieee80211' [ 957.968911][ T7572] : left promiscuous mode [ 957.990630][T12162] sysfs: cannot create duplicate filename '/class/ieee80211/1^!Y [ 957.990630][T12162] 3UH5rBn\' [ 958.007843][T12162] CPU: 0 UID: 0 PID: 12162 Comm: syz.1.10092 Not tainted syzkaller #0 PREEMPT(full) [ 958.007866][T12162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 958.007877][T12162] Call Trace: [ 958.007884][T12162] [ 958.007892][T12162] dump_stack_lvl+0xe8/0x150 [ 958.007921][T12162] sysfs_warn_dup+0x8e/0xa0 [ 958.007943][T12162] sysfs_do_create_link_sd+0xc0/0x110 [ 958.007962][T12162] device_add_class_symlinks+0x1cf/0x240 [ 958.008142][T12162] device_add+0x467/0xb80 [ 958.008159][T12162] wiphy_register+0x1fc8/0x2ff0 [ 958.008240][T12162] ? __pfx_wiphy_register+0x10/0x10 [ 958.008257][T12162] ? __pfx_netdev_run_todo+0x10/0x10 [ 958.008307][T12162] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 958.008369][T12162] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 958.008450][T12162] ieee80211_register_hw+0x3d3d/0x4a50 [ 958.008533][T12162] ? ieee80211_register_hw+0x1931/0x4a50 [ 958.008562][T12162] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 958.008583][T12162] ? __asan_memset+0x22/0x50 [ 958.008602][T12162] ? __hrtimer_setup+0x1b7/0x260 [ 958.008622][T12162] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 958.008719][T12162] mac80211_hwsim_new_radio+0x3238/0x5680 [ 958.008750][T12162] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 958.008768][T12162] ? kstrndup+0xbd/0x160 [ 958.008785][T12162] ? kstrndup+0xbd/0x160 [ 958.008799][T12162] hwsim_new_radio_nl+0xd8b/0xf90 [ 958.008823][T12162] genl_family_rcv_msg_doit+0x233/0x340 [ 958.008853][T12162] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 958.008876][T12162] ? bpf_lsm_capable+0x9/0x20 [ 958.008890][T12162] ? security_capable+0x7e/0x2c0 [ 958.008917][T12162] genl_rcv_msg+0x614/0x7a0 [ 958.008936][T12162] ? __pfx_genl_rcv_msg+0x10/0x10 [ 958.008951][T12162] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 958.008970][T12162] ? __netlink_lookup+0xc6/0x8b0 [ 958.008983][T12162] ? rcu_is_watching+0x15/0xb0 [ 958.009002][T12162] netlink_rcv_skb+0x226/0x4a0 [ 958.009063][T12162] ? __pfx_genl_rcv_msg+0x10/0x10 [ 958.009080][T12162] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 958.009105][T12162] ? down_read+0x2be/0x330 [ 958.009165][T12162] genl_rcv+0x28/0x40 [ 958.009181][T12162] netlink_unicast+0x7bb/0x940 [ 958.009205][T12162] netlink_sendmsg+0x813/0xb40 [ 958.009231][T12162] ? __pfx_netlink_sendmsg+0x10/0x10 [ 958.009251][T12162] ? futex_unqueue+0x22/0x240 [ 958.009276][T12162] ? aa_sock_msg_perm+0xf1/0x1b0 [ 958.009294][T12162] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 958.009312][T12162] ? __pfx_netlink_sendmsg+0x10/0x10 [ 958.009333][T12162] ____sys_sendmsg+0x9b9/0xa20 [ 958.009359][T12162] ? __pfx_____sys_sendmsg+0x10/0x10 [ 958.009379][T12162] ? lock_release+0x4b/0x3c0 [ 958.009402][T12162] ? import_iovec+0x73/0xa0 [ 958.009424][T12162] ___sys_sendmsg+0x2a5/0x360 [ 958.009446][T12162] ? __pfx____sys_sendmsg+0x10/0x10 [ 958.009467][T12162] ? futex_wait+0x2a2/0x390 [ 958.009506][T12162] ? __fget_files+0x2a/0x420 [ 958.009524][T12162] ? __fget_files+0x3a2/0x420 [ 958.009542][T12162] __x64_sys_sendmsg+0x1b1/0x290 [ 958.009563][T12162] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 958.009590][T12162] ? rcu_is_watching+0x15/0xb0 [ 958.009607][T12162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.009625][T12162] do_syscall_64+0x174/0x580 [ 958.009644][T12162] ? trace_irq_disable+0x3b/0x140 [ 958.009663][T12162] ? clear_bhb_loop+0x40/0x90 [ 958.009681][T12162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.009696][T12162] RIP: 0033:0x7f50d459ce59 [ 958.009713][T12162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 958.009727][T12162] RSP: 002b:00007f50d5423028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 958.009746][T12162] RAX: ffffffffffffffda RBX: 00007f50d4816090 RCX: 00007f50d459ce59 [ 958.009757][T12162] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000008 [ 958.009767][T12162] RBP: 00007f50d4632e6f R08: 0000000000000000 R09: 0000000000000000 [ 958.009777][T12162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 958.009787][T12162] R13: 00007f50d4816128 R14: 00007f50d4816090 R15: 00007ffee370d088 [ 958.009807][T12162] [ 958.483030][ T7572] tipc: Disabling bearer [ 958.488787][ T7572] tipc: Disabling bearer [ 958.528364][ T7572] tipc: Left network mode [ 958.547306][T12191] __nla_validate_parse: 8 callbacks suppressed [ 958.547335][T12191] netlink: 120 bytes leftover after parsing attributes in process `syz.3.10096'. [ 958.596163][T12191] netlink: 'syz.3.10096': attribute type 1 has an invalid length. [ 958.604155][T12191] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10096'. [ 958.645179][T12204] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10100'. [ 958.700491][T12203] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 958.832815][T12211] lo speed is unknown, defaulting to 1000 [ 958.855663][T12211] lo speed is unknown, defaulting to 1000 [ 958.878035][T12211] lo speed is unknown, defaulting to 1000 [ 958.936446][T12234] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10109'. [ 958.946150][T12234] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10109'. [ 958.956615][T12234] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10109'. [ 958.966265][T12234] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10109'. [ 958.978082][T12234] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10109'. [ 958.990008][T12234] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10109'. [ 959.001029][T12234] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10109'. [ 959.075996][T12211] infiniband syz0: set down [ 959.080905][T12211] infiniband syz0: added lo [ 959.089410][T12211] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 959.091663][T12211] infiniband syz0: Couldn't open port 1 [ 959.108049][T12211] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 959.124687][T12211] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 959.144840][T12211] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 959.159078][T28287] lo speed is unknown, defaulting to 1000 [ 959.167081][T12211] RDS/IB: syz0: added [ 959.173268][T12211] smc: adding ib device syz0 with port count 1 [ 959.176802][T28287] lo speed is unknown, defaulting to 1000 [ 959.180809][T12211] smc: ib device syz0 port 1 has no pnetid [ 959.195047][T12211] lo speed is unknown, defaulting to 1000 [ 959.290638][T12211] lo speed is unknown, defaulting to 1000 [ 959.384370][T12211] lo speed is unknown, defaulting to 1000 [ 959.476140][T12211] lo speed is unknown, defaulting to 1000 [ 959.568573][T12211] lo speed is unknown, defaulting to 1000 [ 959.661648][T12211] lo speed is unknown, defaulting to 1000 [ 959.795591][T12211] lo speed is unknown, defaulting to 1000 [ 959.887023][T12211] lo speed is unknown, defaulting to 1000 [ 959.979047][T12211] lo speed is unknown, defaulting to 1000 [ 960.071049][T12211] lo speed is unknown, defaulting to 1000 [ 960.165744][T12211] lo speed is unknown, defaulting to 1000 [ 960.258203][T12211] lo speed is unknown, defaulting to 1000 [ 960.350640][T12211] lo speed is unknown, defaulting to 1000 [ 960.444068][T12238] lo speed is unknown, defaulting to 1000 [ 960.454404][T12238] lo speed is unknown, defaulting to 1000 [ 960.461418][T12238] lo speed is unknown, defaulting to 1000 [ 960.567092][T12238] infiniband syz1: set active [ 960.571868][ T10] lo speed is unknown, defaulting to 1000 [ 960.573176][T12238] infiniband syz1: added lo [ 960.591864][T12238] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 960.607892][T12238] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 960.625859][T12238] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 960.651445][T12238] RDS/IB: syz1: added [ 960.657793][T12238] smc: adding ib device syz1 with port count 1 [ 960.666344][T12238] smc: ib device syz1 port 1 has no pnetid [ 960.683578][ T10] lo speed is unknown, defaulting to 1000 [ 960.690622][T12238] lo speed is unknown, defaulting to 1000 [ 960.803913][T12238] lo speed is unknown, defaulting to 1000 [ 960.901680][T12238] lo speed is unknown, defaulting to 1000 [ 960.998207][T12238] lo speed is unknown, defaulting to 1000 [ 961.064029][ T7578] net_ratelimit: 31 callbacks suppressed [ 961.064063][ T7578] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 961.093622][T12238] lo speed is unknown, defaulting to 1000 [ 961.192528][T12238] lo speed is unknown, defaulting to 1000 [ 961.204378][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 961.287003][T12238] lo speed is unknown, defaulting to 1000 [ 961.313597][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 961.379958][T12238] lo speed is unknown, defaulting to 1000 [ 961.423628][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 961.472936][T12238] lo speed is unknown, defaulting to 1000 [ 961.533808][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 961.567364][T12238] lo speed is unknown, defaulting to 1000 [ 961.644205][ T5192] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 961.660742][T12238] lo speed is unknown, defaulting to 1000 [ 961.673448][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 961.754415][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 961.763780][T12238] lo speed is unknown, defaulting to 1000 [ 961.858045][T12238] lo speed is unknown, defaulting to 1000 [ 961.864081][ T5192] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 961.882834][T12225] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 961.973662][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 962.039497][T12279] sit0: entered promiscuous mode [ 962.061933][T12279] netlink: 'syz.0.10120': attribute type 1 has an invalid length. [ 962.092216][T12278] netlink: 'syz.0.10120': attribute type 1 has an invalid length. [ 962.130534][T12287] netlink: 'syz.2.10122': attribute type 1 has an invalid length. [ 962.284229][T12287] 8021q: adding VLAN 0 to HW filter on device bond2 [ 962.331001][T12275] syzkaller1: entered promiscuous mode [ 962.343809][T12275] syzkaller1: entered allmulticast mode [ 962.429227][T12296] syzkaller0: entered promiscuous mode [ 962.459425][T12296] syzkaller0: entered allmulticast mode [ 962.539515][ T7572] hsr_slave_0: left promiscuous mode [ 962.566654][ T7572] hsr_slave_1: left promiscuous mode [ 962.738504][T12321] xt_hashlimit: size too large, truncated to 1048576 [ 962.756309][ T7572] team0 (unregistering): Port device batadv0 removed [ 963.143083][T12339] netlink: 'syz.0.10134': attribute type 4 has an invalid length. [ 963.171288][T12338] vlan4: entered promiscuous mode [ 963.193127][T12339] netlink: 'syz.0.10134': attribute type 4 has an invalid length. [ 963.210791][ T7572] IPVS: stop unused estimator thread 0... [ 963.270288][T12339] netlink: 'syz.0.10134': attribute type 4 has an invalid length. [ 963.564647][T12362] __nla_validate_parse: 157 callbacks suppressed [ 963.564666][T12362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10139'. [ 963.634739][ T7572] pimreg: left allmulticast mode [ 963.646076][ T7572] dvmrp6: left allmulticast mode [ 963.660752][ T7572] tipc: Resetting bearer [ 963.792828][T12377] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.10141'. [ 964.235432][T12383] sctp: [Deprecated]: syz.4.10142 (pid 12383) Use of int in max_burst socket option deprecated. [ 964.235432][T12383] Use struct sctp_assoc_value instead [ 964.273879][ T7572] tipc: Disabling bearer [ 964.312452][ T7572] bond11 (unregistering): (slave bridge10): Releasing backup interface [ 964.345770][ T7572] bridge10 (unregistering): left promiscuous mode [ 964.408438][ T7572] bond0 (unregistering): Released all slaves [ 964.420464][ T7572] bond1 (unregistering): Released all slaves [ 964.440377][ T7572] bond2 (unregistering): Released all slaves [ 964.461557][ T7572] bond3 (unregistering): Released all slaves [ 964.482479][ T7572] bond4 (unregistering): Released all slaves [ 964.508973][ T7572] bond5 (unregistering): Released all slaves [ 964.524195][ T7572] bond6 (unregistering): Released all slaves [ 964.554031][ T7572] bond7 (unregistering): (slave bond8): Releasing backup interface [ 964.564907][ T7572] bond7 (unregistering): Released all slaves [ 964.582531][ T7572] bond8 (unregistering): Released all slaves [ 964.599799][ T7572] bond9 (unregistering): Released all slaves [ 964.622573][ T7572] bond10 (unregistering): Released all slaves [ 964.648750][ T7572] bond11 (unregistering): Released all slaves [ 964.719604][ T5621] Bluetooth: hci3: link tx timeout [ 964.725904][ T5621] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 964.802788][T12396] netlink: 'syz.0.10145': attribute type 1 has an invalid length. [ 964.820514][T12395] netlink: 'syz.0.10145': attribute type 1 has an invalid length. [ 964.831992][T12395] netlink: 'syz.0.10145': attribute type 4 has an invalid length. [ 964.851103][T12396] netlink: 'syz.0.10145': attribute type 4 has an invalid length. [ 964.869605][T12395] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.10145'. [ 964.886650][ T7572] tipc: Disabling bearer [ 964.899288][ T7572] tipc: Left network mode [ 964.906093][T12396] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.10145'. [ 965.046483][ T5856] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 965.076182][T11843] Bluetooth: hci3: link tx timeout [ 965.081423][T11843] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 965.109205][T11843] Bluetooth: hci3: link tx timeout [ 965.111562][T12411] syzkaller0: entered promiscuous mode [ 965.120238][T11843] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 965.133758][T12411] syzkaller0: entered allmulticast mode [ 965.236301][T12427] vlan2: entered allmulticast mode [ 965.241586][T12427] bond0: entered allmulticast mode [ 965.248097][T12427] bond_slave_0: entered allmulticast mode [ 965.276116][T12427] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10151'. [ 965.368790][T12427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 965.388450][T12427] bond_slave_0: left allmulticast mode [ 965.408498][T12427] bond0 (unregistering): Released all slaves [ 965.443236][T11843] Bluetooth: hci3: link tx timeout [ 965.452374][T11843] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 965.510532][T12450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10156'. [ 965.720746][T12456] syzkaller0: entered promiscuous mode [ 965.727743][T12456] syzkaller0: entered allmulticast mode [ 965.771119][T11843] Bluetooth: hci3: link tx timeout [ 965.776936][T11843] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 965.923521][T11843] Bluetooth: hci3: link tx timeout [ 965.929001][T11843] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 965.983762][ T7572] hsr_slave_0: left promiscuous mode [ 966.010037][ T7572] hsr_slave_1: left promiscuous mode [ 966.082114][ T7572] veth5 (unregistering): left promiscuous mode [ 966.102680][ T7572] veth5 (unregistering): left allmulticast mode [ 966.125126][ T7572] team0 (unregistering): Port device veth5 removed [ 966.338471][T12488] netlink: 'syz.3.10163': attribute type 12 has an invalid length. [ 966.375469][T12488] netlink: 'syz.3.10163': attribute type 5 has an invalid length. [ 966.474518][T11843] Bluetooth: hci3: link tx timeout [ 966.475430][ T5198] net_ratelimit: 15 callbacks suppressed [ 966.475457][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 966.479695][T11843] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 966.653495][ T7578] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 966.736568][T12506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10169'. [ 966.756682][T12506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10169'. [ 966.782455][T12506] netlink: 'syz.0.10169': attribute type 11 has an invalid length. [ 966.790725][ T7578] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 966.799081][T11843] Bluetooth: hci3: command 0x0406 tx timeout [ 966.820056][T12506] netlink: 'syz.0.10169': attribute type 13 has an invalid length. [ 966.842099][ T7572] IPVS: stop unused estimator thread 0... [ 966.944845][ T7578] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 967.075432][T12530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10177'. [ 967.088458][ T5856] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 967.094245][T12522] can: request_module (can-proto-0) failed. [ 967.100516][T12530] netlink: 'syz.0.10177': attribute type 20 has an invalid length. [ 967.116387][T12530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10177'. [ 967.126394][T12529] bridge1: entered promiscuous mode [ 967.136495][T12529] bridge1: entered allmulticast mode [ 967.158090][ T7578] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 967.180537][ T7578] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 967.207108][ T7578] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 967.231549][ T7578] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 967.277342][ T7578] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 967.300033][ T7578] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 967.331627][ T7578] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 967.347361][ T7578] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 967.367184][T12552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 967.425234][T12552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 967.461569][ T5198] bond3: left allmulticast mode [ 967.468277][ T5198] bond3: left promiscuous mode [ 967.474473][ T5198] bridge0: port 3(bond3) entered disabled state [ 967.483597][ T5198] bridge_slave_1: left allmulticast mode [ 967.489664][ T5198] bridge_slave_1: left promiscuous mode [ 967.495963][ T5198] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.544597][ T5198] bridge_slave_0: left allmulticast mode [ 967.556314][ T5198] bridge_slave_0: left promiscuous mode [ 967.570243][ T5198] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.629813][ T5198] dvmrp9: left allmulticast mode [ 969.353628][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 969.513913][T11843] Bluetooth: hci0: command 0x0406 tx timeout [ 970.291588][T12554] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 970.404694][T12582] __nla_validate_parse: 1 callbacks suppressed [ 970.404713][T12582] netlink: 72 bytes leftover after parsing attributes in process `syz.4.10188'. [ 970.431802][ T5198] bond5 (unregistering): (slave erspan1): Releasing active interface [ 970.432262][T12587] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.10189'. [ 970.564176][ T5198] bond1 (unregistering): (slave bridge2): Releasing active interface [ 970.573157][ T5198] veth3: entered promiscuous mode [ 970.585689][ T5198] bond4 (unregistering): (slave bridge4): Releasing backup interface [ 970.608268][ T5198] bond7 (unregistering): (slave bridge7): Releasing backup interface [ 970.653370][ T5198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 970.671288][ T5198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 970.693927][ T5198] bond0 (unregistering): Released all slaves [ 970.706545][T12598] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10191'. [ 970.732128][ T5198] bond1 (unregistering): (slave veth3): Releasing active interface [ 970.740655][ T5198] veth3: left promiscuous mode [ 970.751562][ T5198] bond1 (unregistering): Released all slaves [ 970.768535][ T5198] bond2 (unregistering): Released all slaves [ 970.781403][ T5198] bond3 (unregistering): Released all slaves [ 970.793197][ T5198] bond4 (unregistering): Released all slaves [ 970.813631][ T5198] bond5 (unregistering): Released all slaves [ 970.825724][ T5198] bond6 (unregistering): Released all slaves [ 970.837240][ T5198] bond7 (unregistering): Released all slaves [ 970.849024][ T5198] bond8 (unregistering): Released all slaves [ 970.865635][ T5198] bond9 (unregistering): (slave bond10): Releasing backup interface [ 970.875380][ T5198] bond9 (unregistering): Released all slaves [ 970.888284][ T5198] bond10 (unregistering): Released all slaves [ 970.900302][ T5198] bond11 (unregistering): Released all slaves [ 970.917143][T12571] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.963875][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 971.000426][ T5198] m1Ie5n: left promiscuous mode [ 971.037047][ T5198] tipc: Disabling bearer [ 971.053962][ T5198] tipc: Left network mode [ 971.056143][T12610] netlink: 'syz.0.10195': attribute type 1 has an invalid length. [ 971.079291][T12610] netlink: 'syz.0.10195': attribute type 2 has an invalid length. [ 971.102638][T12610] netlink: 'syz.0.10195': attribute type 1 has an invalid length. [ 971.130287][T12610] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10195'. [ 971.144321][ T5196] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 971.159277][T12610] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10195'. [ 971.299373][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 971.465663][ T3341] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 971.596011][ T5192] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 971.724023][ T5192] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 971.776912][T12672] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10209'. [ 971.797114][T12669] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10209'. [ 971.944489][ T5283] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 971.994208][T12689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10210'. [ 971.996035][ T5196] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 972.255405][ T3341] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 972.373517][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 972.498646][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 972.653774][ T3341] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 972.778385][ T5198] hsr_slave_0: left promiscuous mode [ 972.804455][ T5198] hsr_slave_1: left promiscuous mode [ 972.886752][T12716] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10217'. [ 973.011463][ T5198] team0 (unregistering): Port device team_slave_1 removed [ 973.038084][ T5198] team0 (unregistering): Port device team_slave_0 removed [ 973.173787][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 973.304281][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 973.423877][ T5856] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 973.435365][ T5198] IPVS: stop unused estimator thread 0... [ 976.478329][ T4988] udevd[4988]: worker [10197] /devices/virtual/block/nbd0 is taking a long time [ 976.613449][ T5196] net_ratelimit: 28 callbacks suppressed [ 976.613495][ T5196] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 976.733663][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 976.843451][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 976.953810][ T5196] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 977.034512][ T1769] block nbd4: Possible stuck request ffff88802710e000: control (read@0,1024B). Runtime 90 seconds [ 977.045426][ T1769] block nbd4: Possible stuck request ffff88802710e1c0: control (read@1024,1024B). Runtime 90 seconds [ 977.056413][ T1769] block nbd4: Possible stuck request ffff88802710e380: control (read@2048,1024B). Runtime 90 seconds [ 977.063559][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 977.067600][ T1769] block nbd4: Possible stuck request ffff88802710e540: control (read@3072,1024B). Runtime 90 seconds [ 977.194952][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 977.303729][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 977.413461][ T5192] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 977.523475][ T5192] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 977.633713][ T5192] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 977.673704][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 981.703523][ T3341] net_ratelimit: 36 callbacks suppressed [ 981.703545][ T3341] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 981.823482][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 981.933784][ T3341] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 982.043423][ T3341] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 982.153612][ T3341] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 982.263730][ T3341] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 982.373501][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 982.483510][T30421] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 982.593812][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 982.703505][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 982.793687][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 986.773510][ T7572] net_ratelimit: 36 callbacks suppressed [ 986.773530][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 986.893549][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 987.003727][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 987.114796][ T3341] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 987.223557][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 987.333756][T30421] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 987.443472][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 987.553509][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 987.663867][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 987.773477][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 991.843712][ T5192] net_ratelimit: 35 callbacks suppressed [ 991.843744][ T5192] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 991.973714][ T5192] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 992.093681][ T5192] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 992.203486][T30421] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 992.314043][T30421] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 992.433627][T30421] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 992.543493][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 992.653711][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 992.773690][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 992.883711][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 993.673598][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 996.923612][ T7572] net_ratelimit: 35 callbacks suppressed [ 996.923632][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 997.043818][ T3341] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 997.153544][ T5192] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 997.263933][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 997.373492][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 997.483625][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 997.593697][ T3341] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 997.703640][ T3341] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 997.813478][T30421] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 997.923813][ T5856] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1001.973777][ T5856] net_ratelimit: 35 callbacks suppressed [ 1001.973799][ T5856] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1002.093735][ T5856] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1002.203484][ T5856] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1002.313578][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1002.423802][T30421] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1002.533522][ T5856] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1002.643842][T30421] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1002.753739][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1002.863654][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1002.973571][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1003.283769][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1006.993627][ T3341] net_ratelimit: 35 callbacks suppressed [ 1006.993649][ T3341] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1007.113699][ T1769] block nbd4: Possible stuck request ffff88802710e000: control (read@0,1024B). Runtime 120 seconds [ 1007.114257][ T3341] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1007.124634][ T1769] block nbd4: Possible stuck request ffff88802710e1c0: control (read@1024,1024B). Runtime 120 seconds [ 1007.124666][ T1769] block nbd4: Possible stuck request ffff88802710e380: control (read@2048,1024B). Runtime 120 seconds [ 1007.124689][ T1769] block nbd4: Possible stuck request ffff88802710e540: control (read@3072,1024B). Runtime 120 seconds [ 1007.274876][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1007.383794][ T3341] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1007.494516][ T3341] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1007.603956][ T5856] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1007.713491][ T5856] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1007.823860][T30421] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1007.933561][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1008.043656][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1012.074193][ T3341] net_ratelimit: 35 callbacks suppressed [ 1012.074241][ T3341] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1012.203710][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1012.313632][ T3341] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1012.433568][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1012.543469][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1012.653834][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1012.773886][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1012.883614][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1012.993563][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1013.103813][ T5856] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1017.153825][ T3341] net_ratelimit: 35 callbacks suppressed [ 1017.153846][ T3341] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1017.274891][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1017.394037][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1017.503616][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1017.613710][T30421] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1017.723813][T30421] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1017.833928][T30421] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1017.953821][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1018.063531][ T3341] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1018.173776][T30421] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1021.671115][T12763] netlink: 'syz.1.10220': attribute type 3 has an invalid length. [ 1021.700010][T12763] rdma_op ffff8880803b59f0 conn xmit_rdma 0000000000000000 [ 1021.895624][T12794] tipc: Enabling of bearer rejected, failed to enable media [ 1021.922295][T12797] netdevsim netdevsim0: Direct firmware load for failed with error -2 [ 1021.948555][T12797] netdevsim netdevsim0: Falling back to sysfs fallback for: [ 1022.096408][T12813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10236'. [ 1022.105704][T12819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10237'. [ 1022.116575][T12818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10232'. [ 1022.253723][ T3341] net_ratelimit: 36 callbacks suppressed [ 1022.253745][ T3341] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1022.348209][T12830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10241'. [ 1022.429840][T12827] lo speed is unknown, defaulting to 1000 [ 1022.437600][T12837] netlink: 'syz.1.10243': attribute type 1 has an invalid length. [ 1022.455199][ T5192] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1022.456741][T12837] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.10243'. [ 1022.488149][T12839] netlink: 'syz.4.10244': attribute type 1 has an invalid length. [ 1022.556697][T12839] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1022.622224][T12850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10246'. [ 1022.668484][T12846] bond7: (slave veth5): Enslaving as a backup interface with a down link [ 1022.694942][T12853] netlink: 'syz.4.10244': attribute type 10 has an invalid length. [ 1022.717183][T12853] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10244'. [ 1022.720632][T12839] dummy0: left allmulticast mode [ 1022.808261][T12839] bond0: (slave dummy0): Releasing backup interface [ 1022.839085][T12839] bond7: (slave dummy0): Enslaving as a backup interface with an up link [ 1022.874487][ T3341] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1022.894764][T12851] vlan4: entered allmulticast mode [ 1022.902559][T12851] bridge3: entered allmulticast mode [ 1022.915599][T12827] lo speed is unknown, defaulting to 1000 [ 1022.915768][T12853] dummy0: entered promiscuous mode [ 1022.945842][T12853] bond7: (slave dummy0): Removing an active aggregator [ 1022.955118][T12853] bond7: (slave dummy0): Releasing backup interface [ 1022.971250][T12855] bridge3: port 1(erspan0) entered blocking state [ 1022.979905][T12855] bridge3: port 1(erspan0) entered disabled state [ 1022.991245][T12855] erspan0: entered allmulticast mode [ 1023.004492][T12855] erspan0: entered promiscuous mode [ 1023.036295][T12865] debugfs: '1^!Y [ 1023.036295][T12865] 3UH5rBn\' already exists in 'ieee80211' [ 1023.096018][T12868] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10251'. [ 1023.203507][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1023.335145][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1023.371765][T12876] tipc: Started in network mode [ 1023.386502][T12873] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 1023.395012][T12876] tipc: Node identity f67a20aa9082, cluster identity 4711 [ 1023.438955][T12876] tipc: Enabled bearer , priority 0 [ 1023.453224][T12877] syzkaller0: entered promiscuous mode [ 1023.468332][T12877] syzkaller0: entered allmulticast mode [ 1023.519997][T12877] tipc: Resetting bearer [ 1023.532907][T12877] tipc: Disabling bearer [ 1023.683523][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1023.767103][ T5621] Bluetooth: hci3: link tx timeout [ 1023.772610][ T5621] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 1023.834492][ T3341] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1023.921257][T12922] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10263'. [ 1023.953969][T12922] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10263'. [ 1024.053485][ T5192] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1024.119271][T12928] lo speed is unknown, defaulting to 1000 [ 1024.179971][ T3341] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1024.318116][ T3341] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1024.811585][T12928] lo speed is unknown, defaulting to 1000 [ 1024.844941][T12951] xt_CT: No such helper "snmp" [ 1025.033604][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1025.347830][T12974] tc_dump_action: action bad kind [ 1025.521114][T12978] lo speed is unknown, defaulting to 1000 [ 1025.833680][T11843] Bluetooth: hci3: command 0x0406 tx timeout [ 1025.921078][T12978] lo speed is unknown, defaulting to 1000 [ 1026.356331][T13023] can: request_module (can-proto-0) failed. [ 1026.519998][T13019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1027.284144][ T5856] net_ratelimit: 23 callbacks suppressed [ 1027.284181][ T5856] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1027.344893][T13083] __nla_validate_parse: 11 callbacks suppressed [ 1027.344927][T13083] netlink: 161180 bytes leftover after parsing attributes in process `syz.4.10300'. [ 1027.446318][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1027.486652][T13092] netlink: 'syz.1.10302': attribute type 1 has an invalid length. [ 1027.532334][T13092] netlink: 96 bytes leftover after parsing attributes in process `syz.1.10302'. [ 1027.574870][ T5856] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1027.599412][T13092] netlink: 1 bytes leftover after parsing attributes in process `syz.1.10302'. [ 1027.717312][ T5856] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1027.844287][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1027.892234][T12978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10279'. [ 1027.958432][T12978] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1027.975116][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1028.013845][T12978] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10279'. [ 1028.220515][T13122] netlink: 332 bytes leftover after parsing attributes in process `syz.0.10307'. [ 1028.230604][T13122] netlink: 'syz.0.10307': attribute type 9 has an invalid length. [ 1028.242500][T13122] netlink: 'syz.0.10307': attribute type 1 has an invalid length. [ 1028.354520][ T5192] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1028.492869][T13127] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10308'. [ 1028.521148][ T5192] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1028.664345][T30421] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1028.698669][T13131] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1028.928448][T13139] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10310'. [ 1029.040949][T13134] bond1: left allmulticast mode [ 1029.106102][T13134] ip6gretap1: left allmulticast mode [ 1029.133688][T13134] bond1: left promiscuous mode [ 1029.153109][T13134] ip6gretap1: left promiscuous mode [ 1029.185399][T13134] macvlan2: left promiscuous mode [ 1029.211060][T13134] macvlan2: left allmulticast mode [ 1029.360725][T13134] vlan3: left promiscuous mode [ 1029.385953][T13134] bond3: left promiscuous mode [ 1029.401875][T13134] vlan3: left allmulticast mode [ 1029.425981][T13134] bond3: left allmulticast mode [ 1029.473256][T13134] bond4: left allmulticast mode [ 1029.487081][T13134] bridge1: left promiscuous mode [ 1029.541455][T13134] vlan4: left allmulticast mode [ 1029.568837][T13134] bridge3: left allmulticast mode [ 1029.677945][T13139] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1029.901846][T13173] netlink: 'syz.4.10319': attribute type 13 has an invalid length. [ 1029.978032][T13173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10319'. [ 1030.033181][T13181] gre0: entered promiscuous mode [ 1030.049457][T13183] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10319'. [ 1030.071561][T13181] gre0: entered allmulticast mode [ 1030.098093][T13173] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 1030.422816][T10199] udevd[10199]: inotify_add_watch(7, /dev/nbd5, 10) failed: No such file or directory [ 1030.566346][T13223] netlink: 'syz.0.10328': attribute type 18 has an invalid length. [ 1030.697756][T13236] Bluetooth: MGMT ver 1.23 [ 1032.303495][ T5198] net_ratelimit: 25 callbacks suppressed [ 1032.303516][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1032.423479][ T5192] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1032.533446][T30421] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1032.643739][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1032.753519][ T5192] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1032.863491][ T5192] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1032.973800][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1033.083533][ T3341] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1033.193533][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1033.245695][T13196] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1033.307477][ T5198] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1033.438226][T13302] __nla_validate_parse: 3 callbacks suppressed [ 1033.438247][T13302] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10336'. [ 1033.519758][T13304] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10337'. [ 1033.550184][T13309] bridge_slave_0: left allmulticast mode [ 1033.565001][T13309] bridge_slave_0: left promiscuous mode [ 1033.591944][T13309] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.641568][T13309] bridge_slave_1: left allmulticast mode [ 1033.651256][T13309] bridge_slave_1: left promiscuous mode [ 1033.657581][T13309] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.683267][T13324] netlink: 'syz.2.10340': attribute type 3 has an invalid length. [ 1033.705276][T13324] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10340'. [ 1033.806477][T13333] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10343'. [ 1033.910746][T13333] netlink: 'syz.4.10343': attribute type 3 has an invalid length. [ 1034.397376][T13309] team0: Port device team_slave_0 removed [ 1034.410540][T13309] team0: Port device team_slave_1 removed [ 1034.418123][T13309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1034.426145][T13309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1034.680309][T13362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10349'. [ 1036.549090][T13313] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1036.707521][T13382] geneve2: entered promiscuous mode [ 1036.716173][ T3341] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.743215][ T3341] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.745128][T13385] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10357'. [ 1036.767688][ T3341] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.778790][ T3341] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.796325][T13385] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10357'. [ 1036.808543][T13390] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10358'. [ 1036.840722][T13390] netlink: 76 bytes leftover after parsing attributes in process `syz.2.10358'. [ 1036.857838][T13390] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10358'. [ 1037.168024][T13413] lo speed is unknown, defaulting to 1000 [ 1037.193845][ T1769] block nbd4: Possible stuck request ffff88802710e000: control (read@0,1024B). Runtime 150 seconds [ 1037.204783][ T1769] block nbd4: Possible stuck request ffff88802710e1c0: control (read@1024,1024B). Runtime 150 seconds [ 1037.215862][ T1769] block nbd4: Possible stuck request ffff88802710e380: control (read@2048,1024B). Runtime 150 seconds [ 1037.227165][ T1769] block nbd4: Possible stuck request ffff88802710e540: control (read@3072,1024B). Runtime 150 seconds [ 1037.355133][ T5192] net_ratelimit: 29 callbacks suppressed [ 1037.355168][ T5192] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1037.434146][T13413] lo speed is unknown, defaulting to 1000 [ 1037.573483][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1037.753937][T13461] veth11: entered allmulticast mode [ 1037.803608][T30421] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1037.994600][ T5856] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1038.123743][ T5856] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1038.266986][ T3341] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1038.395668][ T5192] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1038.526828][ T5856] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1038.567191][T13515] netlink: 'syz.4.10392': attribute type 1 has an invalid length. [ 1038.649119][T13515] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1038.698464][T13523] bond8: (slave veth7): Enslaving as an active interface with a down link [ 1038.734681][T30421] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1038.771808][T13528] __nla_validate_parse: 5 callbacks suppressed [ 1038.771840][T13528] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10395'. [ 1038.788134][T13529] bond11: option lacp_active: invalid value (8) [ 1038.794868][T13528] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10395'. [ 1038.809044][T13529] bond11 (unregistering): Released all slaves [ 1038.816667][T13528] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10395'. [ 1038.918393][T13528] bond10 (unregistering): Released all slaves [ 1038.974969][ T3341] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1039.084713][T13558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10402'. [ 1039.107875][T13558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10402'. [ 1039.135564][T13558] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 1039.169100][T13561] sysfs: cannot create duplicate filename '/class/ieee80211/1^!Y [ 1039.169100][T13561] 3UH5rBn\' [ 1039.198463][T13565] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20002 [ 1039.218845][T13561] CPU: 0 UID: 0 PID: 13561 Comm: syz.1.10403 Not tainted syzkaller #0 PREEMPT(full) [ 1039.218869][T13561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1039.218879][T13561] Call Trace: [ 1039.218886][T13561] [ 1039.218893][T13561] dump_stack_lvl+0xe8/0x150 [ 1039.218920][T13561] sysfs_warn_dup+0x8e/0xa0 [ 1039.218942][T13561] sysfs_do_create_link_sd+0xc0/0x110 [ 1039.218963][T13561] device_add_class_symlinks+0x1cf/0x240 [ 1039.218984][T13561] device_add+0x467/0xb80 [ 1039.219001][T13561] wiphy_register+0x1fc8/0x2ff0 [ 1039.219030][T13561] ? __pfx_wiphy_register+0x10/0x10 [ 1039.219048][T13561] ? __pfx_netdev_run_todo+0x10/0x10 [ 1039.219077][T13561] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1039.219096][T13561] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1039.219119][T13561] ieee80211_register_hw+0x3d3d/0x4a50 [ 1039.219145][T13561] ? ieee80211_register_hw+0x1931/0x4a50 [ 1039.219175][T13561] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1039.219195][T13561] ? __asan_memset+0x22/0x50 [ 1039.219214][T13561] ? __hrtimer_setup+0x1b7/0x260 [ 1039.219233][T13561] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1039.219258][T13561] mac80211_hwsim_new_radio+0x3238/0x5680 [ 1039.219290][T13561] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1039.219308][T13561] ? kstrndup+0xbd/0x160 [ 1039.219325][T13561] ? kstrndup+0xbd/0x160 [ 1039.219340][T13561] hwsim_new_radio_nl+0xd8b/0xf90 [ 1039.219364][T13561] genl_family_rcv_msg_doit+0x233/0x340 [ 1039.219386][T13561] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1039.219408][T13561] ? bpf_lsm_capable+0x9/0x20 [ 1039.219423][T13561] ? security_capable+0x7e/0x2c0 [ 1039.219450][T13561] genl_rcv_msg+0x614/0x7a0 [ 1039.219469][T13561] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1039.219485][T13561] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1039.219503][T13561] ? __netlink_lookup+0xc6/0x8b0 [ 1039.219516][T13561] ? rcu_is_watching+0x15/0xb0 [ 1039.219537][T13561] netlink_rcv_skb+0x226/0x4a0 [ 1039.219559][T13561] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1039.219576][T13561] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1039.219602][T13561] ? down_read+0x2be/0x330 [ 1039.219627][T13561] genl_rcv+0x28/0x40 [ 1039.219643][T13561] netlink_unicast+0x7bb/0x940 [ 1039.219667][T13561] netlink_sendmsg+0x813/0xb40 [ 1039.219689][T13561] ? __folio_batch_add_and_move+0x11a/0xc50 [ 1039.219714][T13561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1039.219737][T13561] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1039.219754][T13561] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1039.219772][T13561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1039.219796][T13561] ____sys_sendmsg+0x9b9/0xa20 [ 1039.219822][T13561] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1039.219843][T13561] ? lock_release+0x4b/0x3c0 [ 1039.219866][T13561] ? import_iovec+0x73/0xa0 [ 1039.219890][T13561] ___sys_sendmsg+0x2a5/0x360 [ 1039.219910][T13561] ? count_memcg_event_mm+0x21/0x260 [ 1039.219930][T13561] ? __pfx____sys_sendmsg+0x10/0x10 [ 1039.219949][T13561] ? rcu_is_watching+0x15/0xb0 [ 1039.219980][T13561] ? __fget_files+0x2a/0x420 [ 1039.219997][T13561] ? __fget_files+0x3a2/0x420 [ 1039.220018][T13561] __x64_sys_sendmsg+0x1b1/0x290 [ 1039.220038][T13561] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1039.220064][T13561] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1039.220089][T13561] ? do_user_addr_fault+0xc4a/0x1340 [ 1039.220107][T13561] ? rcu_is_watching+0x15/0xb0 [ 1039.220123][T13561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.220139][T13561] do_syscall_64+0x174/0x580 [ 1039.220158][T13561] ? trace_irq_disable+0x3b/0x140 [ 1039.220178][T13561] ? clear_bhb_loop+0x40/0x90 [ 1039.220194][T13561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.220209][T13561] RIP: 0033:0x7f50d459ce59 [ 1039.220224][T13561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1039.220238][T13561] RSP: 002b:00007f50d5423028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1039.220256][T13561] RAX: ffffffffffffffda RBX: 00007f50d4816090 RCX: 00007f50d459ce59 [ 1039.220268][T13561] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1039.220278][T13561] RBP: 00007f50d4632e6f R08: 0000000000000000 R09: 0000000000000000 [ 1039.220288][T13561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1039.220297][T13561] R13: 00007f50d4816128 R14: 00007f50d4816090 R15: 00007ffee370d088 [ 1039.220316][T13561] [ 1039.671000][T13560] sysfs: cannot create duplicate filename '/class/ieee80211/1^!Y [ 1039.671000][T13560] 3UH5rBn\' [ 1039.695872][T13560] CPU: 0 UID: 0 PID: 13560 Comm: syz.1.10403 Not tainted syzkaller #0 PREEMPT(full) [ 1039.695898][T13560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1039.695908][T13560] Call Trace: [ 1039.695915][T13560] [ 1039.695923][T13560] dump_stack_lvl+0xe8/0x150 [ 1039.695947][T13560] sysfs_warn_dup+0x8e/0xa0 [ 1039.695967][T13560] sysfs_do_create_link_sd+0xc0/0x110 [ 1039.695988][T13560] device_add_class_symlinks+0x1cf/0x240 [ 1039.696008][T13560] device_add+0x467/0xb80 [ 1039.696025][T13560] wiphy_register+0x1fc8/0x2ff0 [ 1039.696051][T13560] ? __pfx_wiphy_register+0x10/0x10 [ 1039.696069][T13560] ? __pfx_netdev_run_todo+0x10/0x10 [ 1039.696093][T13560] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1039.696111][T13560] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1039.696132][T13560] ieee80211_register_hw+0x3d3d/0x4a50 [ 1039.696157][T13560] ? ieee80211_register_hw+0x1931/0x4a50 [ 1039.696186][T13560] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1039.696207][T13560] ? __asan_memset+0x22/0x50 [ 1039.696224][T13560] ? __hrtimer_setup+0x1b7/0x260 [ 1039.696242][T13560] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1039.696263][T13560] mac80211_hwsim_new_radio+0x3238/0x5680 [ 1039.696299][T13560] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1039.696318][T13560] ? kstrndup+0xbd/0x160 [ 1039.696333][T13560] ? kstrndup+0xbd/0x160 [ 1039.696347][T13560] hwsim_new_radio_nl+0xd8b/0xf90 [ 1039.696373][T13560] genl_family_rcv_msg_doit+0x233/0x340 [ 1039.696394][T13560] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1039.696417][T13560] ? bpf_lsm_capable+0x9/0x20 [ 1039.696431][T13560] ? security_capable+0x7e/0x2c0 [ 1039.696456][T13560] genl_rcv_msg+0x614/0x7a0 [ 1039.696477][T13560] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1039.696494][T13560] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1039.696513][T13560] ? __netlink_lookup+0xc6/0x8b0 [ 1039.696527][T13560] ? rcu_is_watching+0x15/0xb0 [ 1039.696548][T13560] netlink_rcv_skb+0x226/0x4a0 [ 1039.696570][T13560] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1039.696586][T13560] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1039.696613][T13560] ? down_read+0x2be/0x330 [ 1039.696635][T13560] genl_rcv+0x28/0x40 [ 1039.696651][T13560] netlink_unicast+0x7bb/0x940 [ 1039.696675][T13560] netlink_sendmsg+0x813/0xb40 [ 1039.696700][T13560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1039.696723][T13560] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1039.696739][T13560] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1039.696757][T13560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1039.696778][T13560] ____sys_sendmsg+0x9b9/0xa20 [ 1039.696804][T13560] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1039.696825][T13560] ? lock_release+0x4b/0x3c0 [ 1039.696849][T13560] ? import_iovec+0x73/0xa0 [ 1039.696871][T13560] ___sys_sendmsg+0x2a5/0x360 [ 1039.696893][T13560] ? __pfx____sys_sendmsg+0x10/0x10 [ 1039.696913][T13560] ? futex_wake+0x51b/0x5f0 [ 1039.696941][T13560] ? __fget_files+0x2a/0x420 [ 1039.696960][T13560] ? __fget_files+0x3a2/0x420 [ 1039.696981][T13560] __x64_sys_sendmsg+0x1b1/0x290 [ 1039.697002][T13560] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1039.697029][T13560] ? rcu_is_watching+0x15/0xb0 [ 1039.697044][T13560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.697061][T13560] do_syscall_64+0x174/0x580 [ 1039.697087][T13560] ? trace_irq_disable+0x3b/0x140 [ 1039.697108][T13560] ? clear_bhb_loop+0x40/0x90 [ 1039.697125][T13560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.697140][T13560] RIP: 0033:0x7f50d459ce59 [ 1039.697156][T13560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1039.697170][T13560] RSP: 002b:00007f50d5444028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1039.697188][T13560] RAX: ffffffffffffffda RBX: 00007f50d4815fa0 RCX: 00007f50d459ce59 [ 1039.697201][T13560] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1039.697211][T13560] RBP: 00007f50d4632e6f R08: 0000000000000000 R09: 0000000000000000 [ 1039.697220][T13560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1039.697230][T13560] R13: 00007f50d4816038 R14: 00007f50d4815fa0 R15: 00007ffee370d088 [ 1039.697248][T13560] [ 1040.209063][T13573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10407'. [ 1040.236906][T13599] batadv_slave_0: entered promiscuous mode [ 1040.285050][T13604] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10416'. [ 1040.402525][T13615] lo speed is unknown, defaulting to 1000 [ 1040.495695][T13615] lo speed is unknown, defaulting to 1000 [ 1040.529246][T13622] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10418'. [ 1040.665733][T13627] netlink: 'syz.4.10423': attribute type 1 has an invalid length. [ 1040.700254][T13627] bond10: entered promiscuous mode [ 1040.706061][T13627] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1040.734659][T13627] bond10: (slave bridge1): making interface the new active one [ 1040.742424][T13627] bridge1: entered promiscuous mode [ 1040.748882][T13627] bond10: (slave bridge1): Enslaving as an active interface with an up link [ 1040.774288][T13627] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10423'. [ 1040.891852][T13634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10425'. [ 1040.898525][T13636] x_tables: duplicate underflow at hook 1 [ 1040.952972][T13639] netlink: 'syz.4.10427': attribute type 11 has an invalid length. [ 1041.005038][T13589] batadv_slave_0: left promiscuous mode [ 1041.204170][T13654] vlan2: entered promiscuous mode [ 1041.214401][T13654] syz_tun: entered promiscuous mode [ 1041.365793][T13662] netlink: 'syz.0.10435': attribute type 4 has an invalid length. [ 1041.375926][T13662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1041.491732][T13669] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1041.521461][T13669] bond3: (slave veth3): Enslaving as an active interface with an up link [ 1041.604831][T13676] netlink: 'syz.3.10439': attribute type 27 has an invalid length. [ 1041.658700][T13679] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 1041.668845][T13679] bond4 (unregistering): Released all slaves [ 1041.892618][T13692] netlink: 'syz.3.10444': attribute type 12 has an invalid length. [ 1041.924169][T13692] ip6gre1: entered promiscuous mode [ 1041.934121][T13692] ip6gre1: entered allmulticast mode [ 1041.946608][ T5856] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1041.961365][ T5856] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1041.974263][T28287] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1042.039074][T13701] bond11: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1042.052981][T13701] bond11 (unregistering): Released all slaves [ 1042.314005][T11843] Bluetooth: hci3: command 0x0406 tx timeout [ 1042.391606][T13721] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1042.404101][T13721] mac80211_hwsim hwsim138 wlan1: entered promiscuous mode [ 1042.415656][T13721] bond11: (slave wlan1): Enslaving as an active interface with an up link [ 1042.422464][T13718] net_ratelimit: 19 callbacks suppressed [ 1042.422497][T13718] netlink: set zone limit has 4 unknown bytes [ 1042.437980][T28287] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1042.444212][ T5856] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1042.454911][ T5751] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1042.584319][ T5856] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1042.694226][ T7578] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1042.726208][T13737] macvlan0: entered promiscuous mode [ 1042.731785][T13737] macvlan0: entered allmulticast mode [ 1042.742858][T13739] syzkaller1: entered promiscuous mode [ 1042.750790][T13739] syzkaller1: entered allmulticast mode [ 1042.833626][T30421] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1042.862520][T13741] Cannot find del_set index 4 as target [ 1042.930154][T13743] netlink: 'syz.3.10465': attribute type 2 has an invalid length. [ 1042.963539][ T7578] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1042.972613][T13748] openvswitch: : Dropping previously announced user features [ 1043.074010][T30421] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1043.185572][ T7578] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1043.305857][T30421] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1043.434084][T30421] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1045.753497][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1046.201551][T13778] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1046.786645][T13863] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1046.797029][T13866] __nla_validate_parse: 16 callbacks suppressed [ 1046.797050][T13866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10497'. [ 1046.853536][T13866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10497'. [ 1046.867473][T13866] netlink: 124 bytes leftover after parsing attributes in process `syz.1.10497'. [ 1047.271758][T13874] sctp: [Deprecated]: syz.1.10498 (pid 13874) Use of int in max_burst socket option. [ 1047.271758][T13874] Use struct sctp_assoc_value instead [ 1047.370845][T13874] lo speed is unknown, defaulting to 1000 [ 1047.476784][T13883] netlink: 'syz.3.10501': attribute type 1 has an invalid length. [ 1047.541030][T13883] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1047.569225][T13890] bond4: (slave gretap2): making interface the new active one [ 1047.581153][T13890] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 1047.595569][T13888] netlink: 10184 bytes leftover after parsing attributes in process `syz.4.10502'. [ 1047.606191][T13888] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10502'. [ 1047.627370][T13874] lo speed is unknown, defaulting to 1000 [ 1047.643692][ T5192] net_ratelimit: 30 callbacks suppressed [ 1047.643711][ T5192] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1047.734997][T13895] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10503'. [ 1047.763493][T13895] syzkaller1: entered promiscuous mode [ 1047.769495][T13895] syzkaller1: entered allmulticast mode [ 1047.784093][ T5192] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1047.851341][T13901] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.10506'. [ 1047.862311][T13901] veth0_to_bond: default FDB implementation only supports local addresses [ 1047.946928][T30421] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1048.063478][ T3341] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1048.205869][T13930] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10515'. [ 1048.255859][T13932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10516'. [ 1048.276363][T13932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10516'. [ 1048.294908][ T5192] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1048.404325][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1048.431779][T13948] syzkaller0: entered promiscuous mode [ 1048.448233][T13948] syzkaller0: entered allmulticast mode [ 1048.526388][ T5192] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1048.578847][T13958] netlink: 'syz.0.10525': attribute type 97 has an invalid length. [ 1048.595784][T13958] netlink: 'syz.0.10525': attribute type 10 has an invalid length. [ 1048.669397][ T5192] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1048.783521][ T7572] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1048.913871][ T5192] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1048.949723][T13988] netlink: 'syz.1.10532': attribute type 1 has an invalid length. [ 1049.120201][T14006] tipc: Started in network mode [ 1049.130178][T14006] tipc: Node identity ac14140f, cluster identity 4711 [ 1049.145227][T14006] tipc: New replicast peer: 255.255.255.255 [ 1049.162502][T14006] tipc: Enabled bearer , priority 26 [ 1049.998737][T14064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1050.007664][T14064] bond5: (slave bond0): making interface the new active one [ 1050.016045][T14064] bond5: (slave bond0): Enslaving as an active interface with an up link [ 1050.029144][T14064] netlink: 'syz.1.10555': attribute type 4 has an invalid length. [ 1050.039411][T14064] .`: renamed from bond0 (while UP) [ 1050.304755][T28287] tipc: Node number set to 2886997007 [ 1050.377313][T14086] netlink: 'syz.1.10562': attribute type 2 has an invalid length. [ 1050.398908][T14086] netlink: 'syz.1.10562': attribute type 1 has an invalid length. [ 1050.415275][T14086] netlink: 'syz.1.10562': attribute type 1 has an invalid length. [ 1050.574052][T14106] netlink: 'syz.2.10570': attribute type 4 has an invalid length. [ 1050.594162][T14107] netlink: 'syz.2.10570': attribute type 4 has an invalid length. [ 1050.600009][T14109] xfrm1: entered allmulticast mode [ 1051.106343][T14077] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1051.245614][T14140] lo speed is unknown, defaulting to 1000 [ 1051.420676][T14140] lo speed is unknown, defaulting to 1000 [ 1052.147967][T14170] syzkaller0: entered promiscuous mode [ 1052.154201][T14170] syzkaller0: entered allmulticast mode [ 1052.174791][T14170] __nla_validate_parse: 18 callbacks suppressed [ 1052.174805][T14170] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10589'. [ 1052.591561][T14203] validate_nla: 4 callbacks suppressed [ 1052.591579][T14203] netlink: 'syz.4.10599': attribute type 3 has an invalid length. [ 1052.648399][T14210] syzkaller0: entered promiscuous mode [ 1052.655019][T14210] syzkaller0: entered allmulticast mode [ 1052.704933][T14215] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10602'. [ 1052.840987][T30421] net_ratelimit: 32 callbacks suppressed [ 1052.841007][T30421] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1052.879162][T14228] syzkaller1: entered promiscuous mode [ 1052.884697][T14228] syzkaller1: entered allmulticast mode [ 1052.892112][T14230] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.912628][T14230] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.929880][T14230] bridge_slave_0: entered allmulticast mode [ 1052.944615][T14230] bridge_slave_0: entered promiscuous mode [ 1053.316249][T14228] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.323864][T14228] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.344722][T14228] dummy0: left promiscuous mode [ 1053.392151][T14228] syzkaller0: left promiscuous mode [ 1053.400940][T14228] syzkaller0: left allmulticast mode [ 1053.452726][T14228] tipc: Resetting bearer [ 1053.496942][T14228] ip6gre1: left allmulticast mode [ 1053.525946][T14228] vlan2: left allmulticast mode [ 1053.530882][T14228] bond5: left allmulticast mode [ 1053.536560][T14228] geneve2: left allmulticast mode [ 1053.541871][T14228] vlan3: left promiscuous mode [ 1053.549842][T14228] vlan4: left promiscuous mode [ 1053.555075][T14228] bridge0: left promiscuous mode [ 1053.566747][T14228] bond10: left promiscuous mode [ 1053.571669][T14228] bridge1: left promiscuous mode [ 1053.580481][T14228] syzkaller1: left promiscuous mode [ 1053.585957][T14228] syzkaller1: left allmulticast mode [ 1053.593942][T14242] sch_tbf: burst 0 is lower than device ip6gre0 mtu (5376) ! [ 1053.607391][ T24] lo speed is unknown, defaulting to 1000 [ 1053.613683][T30421] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1053.622351][ T24] syz1: Port: 1 Link DOWN [ 1053.625692][ T3341] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1053.636974][ T3341] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.647129][ T24] lo speed is unknown, defaulting to 1000 [ 1053.662681][ T3341] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1053.688851][ T3341] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.698677][ T3341] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1053.710541][ T3341] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.724391][ T3341] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1053.735133][ T3341] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.738134][T14265] netlink: 'syz.0.10614': attribute type 3 has an invalid length. [ 1053.754163][T14265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10614'. [ 1053.764704][T30421] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1053.833462][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1053.859652][T14272] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10617'. [ 1053.875917][T14272] ip6gre2: entered promiscuous mode [ 1053.884214][T14272] ip6gre2: entered allmulticast mode [ 1053.893497][T30421] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1054.043843][ T5856] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1054.097805][ T5856] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.118410][ T5856] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.151878][ T5856] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.162068][ T5856] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.213476][ T5192] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1054.324142][ T5192] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1054.365442][T14316] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 1054.456519][ T3341] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1054.466706][T14320] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10630'. [ 1054.502473][T30421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1054.511114][T14324] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10631'. [ 1054.517552][T30421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1054.531764][T14320] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10630'. [ 1054.547467][T14320] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10630'. [ 1054.583541][ T7578] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1054.599420][T14323] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10632'. [ 1054.612437][T14329] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10631'. [ 1054.746110][T14348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1054.798436][T14351] sch_tbf: burst 6 is lower than device gretap0 mtu (1476) ! [ 1054.946837][T14366] tipc: Enabled bearer , priority 0 [ 1054.962480][T14365] tipc: Disabling bearer [ 1056.571756][T14475] lo speed is unknown, defaulting to 1000 [ 1056.891449][T14475] lo speed is unknown, defaulting to 1000 [ 1056.920083][T14500] xt_policy: output policy not valid in PREROUTING and INPUT [ 1056.954598][T14451] wlan1: Trigger new scan to find an IBSS to join [ 1057.048631][T14507] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1057.068309][T14507] bond6: (slave macvlan2): making interface the new active one [ 1057.091525][T14507] bond6: (slave macvlan2): Enslaving as an active interface with an up link [ 1057.380305][T14521] netlink: 'syz.2.10678': attribute type 1 has an invalid length. [ 1057.388958][T14521] __nla_validate_parse: 14 callbacks suppressed [ 1057.388981][T14521] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10678'. [ 1057.483564][T14530] netlink: 'syz.4.10680': attribute type 4 has an invalid length. [ 1057.883805][T14443] net_ratelimit: 28 callbacks suppressed [ 1057.883838][T14443] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1057.936099][T14561] netlink: 13 bytes leftover after parsing attributes in process `syz.3.10689'. [ 1058.004570][ T5856] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1058.038894][T14570] netlink: 'syz.0.10691': attribute type 10 has an invalid length. [ 1058.047433][T14570] netlink: 228 bytes leftover after parsing attributes in process `syz.0.10691'. [ 1058.072338][T14570] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10691'. [ 1058.115215][T14573] lo speed is unknown, defaulting to 1000 [ 1058.123754][ T5856] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1058.187420][T14580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10696'. [ 1058.204286][T14580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10696'. [ 1058.254288][T14448] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1058.367217][T14591] tun0: tun_chr_ioctl cmd 1074025673 [ 1058.386814][T14593] IPVS: set_ctl: invalid protocol: 137 10.1.1.2:20001 [ 1058.395660][T14594] tun0: tun_chr_ioctl cmd 1074025681 [ 1058.423045][T14602] IPVS: set_ctl: invalid protocol: 137 10.1.1.2:20001 [ 1058.504405][T14451] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1058.600065][T14573] lo speed is unknown, defaulting to 1000 [ 1058.623862][T14443] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1058.687485][T14613] tipc: Enabled bearer , priority 25 [ 1058.753849][T14443] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1058.883489][T14443] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1058.938991][T14632] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 1058.940390][T14622] netlink: 'syz.2.10703': attribute type 12 has an invalid length. [ 1059.220214][T14647] gre0: entered promiscuous mode [ 1059.225854][T14647] gre0: entered allmulticast mode [ 1059.244172][T14647] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1059.263836][T14445] bond5: (slave ip6gretap2): failed to get link speed/duplex [ 1059.357467][T14660] sctp: [Deprecated]: syz.2.10708 (pid 14660) Use of int in max_burst socket option. [ 1059.357467][T14660] Use struct sctp_assoc_value instead [ 1059.494570][T14663] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10709'. [ 1059.759825][T14680] geneve2: entered promiscuous mode [ 1059.766005][T14453] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.774887][T14453] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.796210][T14453] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.815275][T14453] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.837282][ T5621] Bluetooth: hci3: command 0x0406 tx timeout [ 1059.914707][T14447] wlan1: Trigger new scan to find an IBSS to join [ 1060.021941][T14693] sctp: [Deprecated]: syz.4.10718 (pid 14693) Use of int in maxseg socket option. [ 1060.021941][T14693] Use struct sctp_assoc_value instead [ 1060.138135][T14696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10719'. [ 1060.272532][T14706] netlink: 'syz.0.10724': attribute type 1 has an invalid length. [ 1060.323781][T14712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10724'. [ 1060.429981][T14706] bond12: entered promiscuous mode [ 1060.439201][T14706] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1060.516173][T14688] x_tables: duplicate underflow at hook 3 [ 1060.579972][T14731] sch_tbf: burst 0 is lower than device ip6gre0 mtu (5376) ! [ 1060.619701][T14732] sch_tbf: burst 0 is lower than device ip6gre0 mtu (5376) ! [ 1060.657894][T14731] netlink: 'syz.4.10727': attribute type 16 has an invalid length. [ 1060.685841][T14731] netlink: 156 bytes leftover after parsing attributes in process `syz.4.10727'. [ 1060.844864][T14752] tipc: Enabled bearer , priority 0 [ 1060.864610][T14752] syzkaller0: entered promiscuous mode [ 1060.874663][ T30] INFO: task udevd:10197 blocked for more than 143 seconds. [ 1060.884070][T14752] syzkaller0: entered allmulticast mode [ 1060.884349][ T30] Not tainted syzkaller #0 [ 1060.895113][T14752] tipc: Resetting bearer [ 1060.906771][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1060.927977][T14752] tipc: Resetting bearer [ 1060.933809][ T30] task:udevd state:D stack:23688 pid:10197 tgid:10197 ppid:4988 task_flags:0x400140 flags:0x00080000 [ 1060.933864][ T30] Call Trace: [ 1060.933872][ T30] [ 1060.933882][ T30] __schedule+0x17d9/0x56c0 [ 1060.933909][ T30] ? blk_mq_flush_plug_list+0x415/0x540 [ 1060.934065][ T30] ? rcu_is_watching+0x15/0xb0 [ 1060.934086][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 1060.934107][ T30] ? rcu_is_watching+0x15/0xb0 [ 1060.934127][ T30] ? __blk_flush_plug+0x416/0x4d0 [ 1060.934176][ T30] ? __pfx___schedule+0x10/0x10 [ 1060.934197][ T30] ? rcu_is_watching+0x15/0xb0 [ 1060.934214][ T30] ? lock_release+0x4b/0x3c0 [ 1060.934240][ T30] schedule+0x164/0x360 [ 1060.934260][ T30] schedule_timeout+0x152/0x2c0 [ 1060.934278][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1060.934296][ T30] ? __pfx_process_timeout+0x10/0x10 [ 1060.934320][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1060.934339][ T30] ? prepare_to_wait_event+0x436/0x480 [ 1060.934376][ T30] nbd_queue_rq+0x889/0x1150 [ 1060.934474][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 1060.934491][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1060.934510][ T30] ? unwind_next_frame+0x1baf/0x2550 [ 1060.935658][ T30] ? deref_stack_reg+0x18e/0x220 [ 1061.064325][ T30] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1061.079281][ T30] ? sbitmap_get+0x229/0x390 [ 1061.084170][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 1061.090211][ T30] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 1061.096492][ T30] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1061.102990][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 1061.110240][ T30] ? blk_mq_hw_queue_need_run+0x134/0x630 [ 1061.116340][ T30] ? rcu_is_watching+0x15/0xb0 [ 1061.121175][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 1061.127179][ T30] ? rcu_is_watching+0x15/0xb0 [ 1061.132001][ T30] ? lock_acquire+0x5f/0x350 [ 1061.137646][ T30] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1061.143770][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 1061.149115][ T30] blk_mq_run_hw_queue+0x348/0x4f0 [ 1061.154627][ T30] blk_mq_dispatch_list+0xd11/0xe10 [ 1061.159903][ T30] ? blk_mq_dispatch_list+0x230/0xe10 [ 1061.165752][ T30] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 1061.171544][ T30] ? __pfx_update_io_ticks+0x10/0x10 [ 1061.177085][ T30] ? rcu_is_watching+0x15/0xb0 [ 1061.181932][ T30] blk_mq_flush_plug_list+0x45f/0x540 [ 1061.187856][ T30] ? blk_add_rq_to_plug+0x300/0x450 [ 1061.193129][ T30] ? blk_mq_submit_bio+0x1c62/0x2a80 [ 1061.198931][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 1061.209402][ T30] ? blk_mq_submit_bio+0x2f8/0x2a80 [ 1061.215104][ T30] __blk_flush_plug+0x3ed/0x4d0 [ 1061.220027][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 1061.226058][ T30] ? blkg_get+0x20/0x1d0 [ 1061.230663][ T30] ? rcu_is_watching+0x15/0xb0 [ 1061.236095][ T30] __submit_bio+0x465/0x560 [ 1061.240862][ T30] ? __pfx___submit_bio+0x10/0x10 [ 1061.247267][ T30] ? bio_associate_blkg+0x6d/0x230 [ 1061.252452][ T30] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1061.258555][ T30] ? bio_associate_blkg+0x6d/0x230 [ 1061.263924][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 1061.270139][ T30] ? submit_bio_noacct+0xf7b/0x1b20 [ 1061.276474][ T30] ? blkcg_set_ioprio+0x16b/0x2a0 [ 1061.281575][ T30] block_read_full_folio+0x581/0x810 [ 1061.287372][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 1061.292919][ T30] filemap_read_folio+0x12c/0x3a0 [ 1061.298199][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1061.304059][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 1061.309678][ T30] ? filemap_add_folio+0x350/0x530 [ 1061.315174][ T30] do_read_cache_folio+0x354/0x590 [ 1061.320368][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1061.326118][ T30] read_part_sector+0xb6/0x2b0 [ 1061.330943][ T30] adfspart_check_ICS+0xb1/0x960 [ 1061.336477][ T30] ? seq_buf_printf+0x212/0x2d0 [ 1061.341594][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 1061.347798][ T30] ? sized_strscpy+0x13e/0x250 [ 1061.352624][ T30] bdev_disk_changed+0x851/0x17a0 [ 1061.358312][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1061.364303][ T30] blkdev_get_whole+0x372/0x510 [ 1061.369213][ T30] bdev_open+0x324/0xd70 [ 1061.374023][ T30] blkdev_open+0x461/0x600 [ 1061.378546][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 1061.383852][ T30] do_dentry_open+0x816/0x1380 [ 1061.388734][ T30] vfs_open+0x3b/0x340 [ 1061.392854][ T30] ? path_openat+0x2e2d/0x3830 [ 1061.398299][ T30] path_openat+0x2e44/0x3830 [ 1061.402994][ T30] ? kasan_save_track+0x3e/0x80 [ 1061.408394][ T30] ? do_getname+0x2e/0x250 [ 1061.412854][ T30] ? do_sys_openat2+0xcc/0x200 [ 1061.418011][ T30] ? __x64_sys_openat+0x138/0x170 [ 1061.423097][ T30] do_file_open+0x23e/0x4a0 [ 1061.432711][ T30] ? __pfx_do_file_open+0x10/0x10 [ 1061.438390][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1061.443752][ T30] ? alloc_fd+0x651/0x6c0 [ 1061.448137][ T30] do_sys_openat2+0x115/0x200 [ 1061.452844][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 1061.458422][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1061.464207][ T30] ? irqtime_account_irq+0x1f8/0x260 [ 1061.469551][ T30] ? handle_softirqs+0x70f/0x840 [ 1061.474661][ T30] __x64_sys_openat+0x138/0x170 [ 1061.479574][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.485958][ T30] do_syscall_64+0x174/0x580 [ 1061.490583][ T30] ? clear_bhb_loop+0x40/0x90 [ 1061.495698][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.501639][ T30] RIP: 0033:0x7f68e2ca7407 [ 1061.506192][ T30] RSP: 002b:00007ffc9e4812a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1061.515873][ T30] RAX: ffffffffffffffda RBX: 00007f68e3371880 RCX: 00007f68e2ca7407 [ 1061.524291][ T30] RDX: 00000000000a0800 RSI: 000055ca4a5b6a60 RDI: ffffffffffffff9c [ 1061.532339][ T30] RBP: 000055ca4a5a3910 R08: 0000000000000000 R09: 0000000000000000 [ 1061.540518][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000055ca4a5ef4f0 [ 1061.548951][ T30] R13: 000055ca4a5b1190 R14: 0000000000000000 R15: 000055ca4a5ef4f0 [ 1061.557310][ T30] [ 1061.560446][ T30] INFO: lockdep is turned off. [ 1061.565425][ T30] NMI backtrace for cpu 0 [ 1061.565443][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1061.565461][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1061.565470][ T30] Call Trace: [ 1061.565477][ T30] [ 1061.565485][ T30] dump_stack_lvl+0xe8/0x150 [ 1061.565508][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1061.565526][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1061.565575][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1061.565593][ T30] sys_info+0x135/0x170 [ 1061.565606][ T30] watchdog+0xfd7/0x1030 [ 1061.565636][ T30] ? watchdog+0x1c7/0x1030 [ 1061.565657][ T30] kthread+0x388/0x470 [ 1061.565672][ T30] ? __pfx_watchdog+0x10/0x10 [ 1061.565689][ T30] ? __pfx_kthread+0x10/0x10 [ 1061.565704][ T30] ret_from_fork+0x514/0xb70 [ 1061.565723][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1061.565738][ T30] ? __switch_to+0xc89/0x1420 [ 1061.565762][ T30] ? __pfx_kthread+0x10/0x10 [ 1061.565778][ T30] ret_from_fork_asm+0x1a/0x30 [ 1061.565802][ T30] [ 1061.565810][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1061.682807][ C1] NMI backtrace for cpu 1 [ 1061.682828][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1061.682846][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1061.682857][ C1] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 1061.682884][ C1] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 e9 c0 a6 35 0a cc 89 f6 31 d2 e9 86 8e 7a 03 66 0f 1f 44 00 [ 1061.682899][ C1] RSP: 0018:ffffc90000a08eb0 EFLAGS: 00000046 [ 1061.682915][ C1] RAX: 00000000000005c7 RBX: ffff8880b8723c80 RCX: 0000000000000838 [ 1061.682926][ C1] RDX: 0000000000000000 RSI: 00000000000005c7 RDI: 0000000000000838 [ 1061.682937][ C1] RBP: ffffc90000a08f80 R08: 0000000000000001 R09: 0000000000000000 [ 1061.682947][ C1] R10: 0000000000000003 R11: ffffffff8173f530 R12: 00000000000005c7 [ 1061.682957][ C1] R13: dffffc0000000000 R14: 0000000010006657 R15: 0000000000000020 [ 1061.682969][ C1] FS: 0000000000000000(0000) GS:ffff88812537c000(0000) knlGS:0000000000000000 [ 1061.682982][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1061.682994][ C1] CR2: 00007f50d47e8158 CR3: 0000000021368000 CR4: 00000000003526f0 [ 1061.683009][ C1] Call Trace: [ 1061.683017][ C1] [ 1061.683023][ C1] lapic_next_event+0x11/0x20 [ 1061.683042][ C1] clockevents_program_event+0x385/0x630 [ 1061.683063][ C1] ? __pfx_clockevents_program_event+0x10/0x10 [ 1061.683081][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1061.683106][ C1] ? tick_program_event+0x8f/0x120 [ 1061.683129][ C1] __hrtimer_rearm_deferred+0x26c/0x420 [ 1061.683152][ C1] __irq_exit_rcu+0x14e/0x220 [ 1061.683173][ C1] irq_exit_rcu+0x9/0x30 [ 1061.683192][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1061.683213][ C1] [ 1061.683219][ C1] [ 1061.683225][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1061.683243][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1061.683262][ C1] Code: 0c 80 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 a7 21 00 fb f4 7c 03 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1061.683276][ C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000246 [ 1061.683289][ C1] RAX: ffff88812537c000 RBX: ffffffff819a5170 RCX: 0000000080000001 [ 1061.683299][ C1] RDX: 0000000000000001 RSI: ffffffff8c291100 RDI: ffffffff819a5170 [ 1061.683309][ C1] RBP: ffffc90000197f10 R08: ffff8880b87338db R09: 1ffff110170e671b [ 1061.683320][ C1] R10: dffffc0000000000 R11: ffffed10170e671c R12: 0000000000000000 [ 1061.683337][ C1] R13: 1ffff11003bd0000 R14: 1ffff92000032fd0 R15: dffffc0000000000 [ 1061.683350][ C1] ? do_idle+0x2e0/0x540 [ 1061.683374][ C1] ? do_idle+0x2e0/0x540 [ 1061.683398][ C1] default_idle+0x9/0x20 [ 1061.683421][ C1] default_idle_call+0x72/0xb0 [ 1061.683444][ C1] do_idle+0x2e0/0x540 [ 1061.683467][ C1] ? __pfx_do_idle+0x10/0x10 [ 1061.683494][ C1] cpu_startup_entry+0x43/0x60 [ 1061.683518][ C1] start_secondary+0x101/0x110 [ 1061.683542][ C1] common_startup_64+0x13e/0x157 [ 1061.683572][ C1] [ 1061.684463][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1061.684482][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1061.684501][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1061.684510][ T30] Call Trace: [ 1061.684518][ T30] [ 1061.684525][ T30] vpanic+0x56c/0xa60 [ 1061.684548][ T30] ? __pfx___schedule+0x10/0x10 [ 1061.684567][ T30] ? __pfx_vpanic+0x10/0x10 [ 1061.684588][ T30] panic+0xc5/0xd0 [ 1061.684603][ T30] ? __pfx_panic+0x10/0x10 [ 1061.684619][ T30] ? preempt_schedule_common+0x82/0xd0 [ 1061.684637][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 1061.684659][ T30] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1061.684678][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1061.684697][ T30] watchdog+0x1030/0x1030 [ 1061.684721][ T30] ? watchdog+0x1c7/0x1030 [ 1061.684742][ T30] kthread+0x388/0x470 [ 1061.684757][ T30] ? __pfx_watchdog+0x10/0x10 [ 1061.684775][ T30] ? __pfx_kthread+0x10/0x10 [ 1061.684790][ T30] ret_from_fork+0x514/0xb70 [ 1061.684807][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1061.684829][ T30] ? __switch_to+0xc89/0x1420 [ 1061.684851][ T30] ? __pfx_kthread+0x10/0x10 [ 1061.684866][ T30] ret_from_fork_asm+0x1a/0x30 [ 1061.684890][ T30] [ 1062.106560][ T30] Kernel Offset: disabled [ 1062.110875][ T30] Rebooting in 86400 seconds..