last executing test programs: 16.863896624s ago: executing program 4 (id=6085): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xa, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x8001}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x14, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000040)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000280)=@req3={0x8, 0x81, 0x9, 0x1, 0x9, 0x357, 0xdb}, 0x1c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r7, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) 16.103909368s ago: executing program 4 (id=6091): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000040)='GPL\x00', 0x20080, &(0x7f0000000080)={@align, {0x40, 0x7fff, 0x0, 0x5}}, 0x8, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x400}) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000040)='GPL\x00', 0x20080, &(0x7f0000000080)={@align, {0x40, 0x7fff, 0x0, 0x5}}, 0x8, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x400}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) (async) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x50) socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) (async) sendmsg$nl_xfrm(r2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="187f4b08000000ff0000000000003e0000001800", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180200000020782500000000002020207b1bf8ff00000000bfa100000000000007010000f8ffffffb70200000800ff80b50af9ff00000000850000000600000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) 15.595516052s ago: executing program 4 (id=6096): socket$inet6(0xa, 0x80802, 0x0) pipe(&(0x7f0000000240)) socket$netlink(0x10, 0x3, 0xa88167b2fea28b0b) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x18, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x18, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020fe29817a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000400704000000000000b7040000100000206a0700fe000000008500000005000000b70000000a00000095000000000000000000c2c62f6004ad13aa957e2af5e49a53c2868f0399d909a63796c113a80c19aab9d607000000b6c9483be3f0d3253730e714c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18c3d1a1fbe96dc86035b44174f7c0620254ab6d285e6b343185089a0f119e31975e551558050800000000000000125d67857f290870093f38153608561a2128a79cce912d1f05de330800a9f5422bee8ca49166f6a587f2f593775afcd071efc5a972f757521b7b38ec273c2ad3e406f8c124f7dc1c4553229a69df4b2780e6da4420d71489fe383e0b5ce08b750502f2b8add8d2dddde19ac050537e973782b4053150580035fb2c579e1b2100000033d1ee8cab6d236f05b1f7b9f78fd5abfe033eb79f7a0b498366f5edfe311258016fbf47d9c85bf5325bf61419372be377022433e20900a262b20bb8b36de7b0e6c5ebfc5baec1ebe58d4af587d33e2935ad68da6e0fea5c21301f5d002b51a5b60fc741cb2c5d4cd5e896774f9293a6435558795043404ac6eafc8310fbcacca7f971b260fd06d4590ded8429fcd1c9a8dbbdedb32675388df363c0bc536e00448208b72405ebf27ddb402e5a2d675aaad92e183cef1eadc1661140fb567b55c72907a1aca75277a5f0022b1e957ba737f10f1161c5ae6e2cc64072ff3b4e76084922242e63d4b7806e30f786cff147e4bc819060678319a0e5534f5a0db52526c30000000000000000000000a63705b1a60525620acca06d57c055059df7651768310c9085c5f86be6ab819506961ad51f18b35fdc3fd4d0a0dbbdcd494ef168931f27748787bee95d739fef7ee67dd21c34647de82707e41d7db6d981a4fcf0bbd3d38ebb7a2489e28c6b28c0f70092ffb016b7766399555f3e6b538c2c862d17e53eaeb2036f9f0ab6e95e71bda4b5bbf53344264ad93bac1207b31d6e9c78181c7fe204c0b7582d1c762857f2a2e0c60f4a4855591a4f70f94df9629e470701103c40c8f6d3a3068091d62b58999e0a046f9509cb8ddc2a9ad4e0f1f85e5f076218b4b931acdff0c34fc5bdbad17ec481f1c9b17727c14e053e315d0d8d03c24ddaba65c5ce5b1aa04d1f767e25662b155d49460ec720d54044ac2856c11407835f341e2614bcae270000000001000000df7f736aab5d713240b2f40ec7be8251eba969686b2670ddc1a84df6ab12ab3e0cf8747837062233935704ebbd943ef0c5fef29513c7c1d6d2611796dccb45bdfd9e6533ad3574be5b9ea70e0c3b41a32067c03f5f8ed147cd0655c90d656f66eaed18a3c284c4f19417b5d91431759356db5d45ea40c9866957105b6252b0c028c672049ce163126f143f5758faf2a43f4c4f45a69b4e9113f85ae531085c11c75edbdee5af454757cdaff396c15ab9b210c202ffaea96d1bac60c6d6c56a4babc659858789bd479334e13e1c7876f95429431e61400815788c1397b260600d78e7513c58d9ac9474d392cc06f789753e1e7ebf5f1b55e2a64b9150c6580bf48e7bff763034801cccf403108d127b959ffc425a563ea2b90fbe779fd7d2ebfe94"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) (async) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000040000000000000003000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000180000085000000ae00000095"], &(0x7f0000000380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000040000000000000003000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000180000085000000ae00000095"], &(0x7f0000000380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r6 = socket(0x400000000010, 0x3, 0x0) socket(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010800000000000000000a"], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x0) (async) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010800000000000000000a"], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0x4}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x44840) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r12 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r12, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) connect$inet6(r12, &(0x7f00000000c0)={0xa, 0x4e1f, 0x2200005, @local, 0x1}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000030180c200002286dd6100000000083aff00000000000000000000ffffac1e0001ff0200000000000000000000000000018100907800020004"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.207410547s ago: executing program 4 (id=6101): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbf7, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000850}, 0x20044004) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) listen(r3, 0x5) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000000), 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7800000013000500010000000000000007000000", @ANYRES32=r8, @ANYBLOB="000000000000000058001a00060000000200000004"], 0x78}}, 0x0) bind$packet(r5, &(0x7f0000000040)={0x11, 0x5, r8, 0x1, 0xf, 0x6, @multicast}, 0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) connect$inet(r4, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) 14.329751655s ago: executing program 4 (id=6109): r0 = socket$inet(0x2, 0x5, 0x6) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_int(r2, 0x6, 0x7, &(0x7f0000000080)=0xe9, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) (async) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x101, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb1}, 0x1c) (async) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000140)=0x1) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000180)={0x0, 0x8}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e23, 0xd, @mcast2, 0x9}}, 0x6, 0x6}, 0x90) (async) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000002c0)={r3, 0x1000, "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"}, &(0x7f0000001300)=0x1008) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000001340)=@assoc_value, &(0x7f0000001380)=0x8) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000013c0)={r3, @in={{0x2, 0x4e20, @broadcast}}, 0x3, 0x7}, 0x90) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000001480)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001500)={r3, 0x8}, &(0x7f0000001540)=0x8) (async, rerun: 64) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000001580)={0x0, 0xa1, "2539ede826b1a6c2e622461e7bb8e8fc60c46c206f8f4288e5eecdd27abc51516fab88988d5e7b7613f2a82f858f7fa154ad1d038118d4b68cb5b0580fcaf36844456ccc02861d78282e93b616651b2a495dd32e9716969f39ebd9658ee296aa16f50258f9264afe56ba9033a5a3f98d810ce78340671d907b998b71a8e3c62549a56fdddb2d882b839e8a888b843ebf62a5f54e2a17051c6c6b9c8702140b8656"}, &(0x7f0000001640)=0xa9) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) connect$pppl2tp(r1, &(0x7f0000001680)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @empty}, 0x0, 0x0, 0x3, 0x3}}, 0x2e) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001740)={{r1}, &(0x7f00000016c0), &(0x7f0000001700)=r1}, 0x20) (async, rerun: 32) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000001780)={r2}, 0x8) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f00000017c0)={r6, 0x10000}, 0x8) (async, rerun: 32) pipe(&(0x7f0000001800)) (rerun: 32) socket$nl_rdma(0x10, 0x3, 0x14) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), r7) sendmsg$NL80211_CMD_GET_WIPHY(r8, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x14, r9, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044018}, 0x80) (async) socket$netlink(0x10, 0x3, 0x15) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000001980), 0x200, 0x0) (async) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000019c0)=0x8000, 0x4) 13.827151879s ago: executing program 4 (id=6112): ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(0xffffffffffffffff, 0x40086e81, &(0x7f0000000000)) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={r1, 0x1}, &(0x7f0000000180)=0x8) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000300)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000340)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r4, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r7 = socket(0x5, 0x80000, 0x4) ioctl$sock_ifreq(r0, 0xe0e02f23b1ad337f, &(0x7f0000000440)={'ip6gretap0\x00', @ifru_ivalue=0x1}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r3) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x1d, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @exit, @generic={0x2, 0x4, 0xc, 0x4f01, 0x8000}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='syzkaller\x00', 0x5, 0x88, &(0x7f0000000600)=""/136, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x1, 0x6, 0x6, 0xd1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000740)=[r0, 0xffffffffffffffff, r0, r0, 0x1, r0, r0, r0]}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r8, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x9, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x50, &(0x7f0000000940)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x12, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000b80), r3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, &(0x7f0000000bc0)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000fc0)=0x80000001, 0x4) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r8) getsockopt$EBT_SO_GET_INIT_INFO(r7, 0x0, 0x82, &(0x7f0000001000)={'broute\x00', 0x0, 0x0, 0x0, [0x5, 0x0, 0xf, 0x7, 0x5, 0x4]}, &(0x7f0000001080)=0x78) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001100), r0) sendmsg$IPVS_CMD_SET_DEST(r7, &(0x7f00000012c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001280)={&(0x7f0000001140)={0x10c, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xe}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x3}}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x88d}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8090}, 0x1) syz_genetlink_get_family_id$tipc(&(0x7f0000001300), 0xffffffffffffffff) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x4000010, r0, 0x180000000) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000001340)={r2, 0xc7e}, &(0x7f0000001380)=0x8) accept4(0xffffffffffffffff, &(0x7f0000001400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001480)=0x80, 0x80800) syz_genetlink_get_family_id$tipc(&(0x7f00000013c0), r10) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0xc000000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x34, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 8.192964628s ago: executing program 0 (id=6142): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0x200, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x3, 0x4, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x2, 0x5, 0x2, 0x1, 0x10, 0x0, 0x5, 0x3], 0x2, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x0, 0x1000], [0x0, 0x4, 0x0, 0x0, 0xffff, 0x0, 0xfffd, 0x4, 0x0, 0x0, 0x2, 0xfffd, 0x0, 0x0, 0xfffe, 0x1000]}}}}]}, 0x3e}}, 0x20000000) write(0xffffffffffffffff, &(0x7f0000000300)="600000001800050601000000000000000a400000fe040001000000001400200020010db8000100000000000000000001080004000100000006", 0x39) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000041000100000000000000000001010000000000000400060004000280200001801000040000000000000000000000000004"], 0x40}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000300", @ANYRES16=0x0, @ANYBLOB="000828bd7000fbdbdf25050000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20004041}, 0x4085) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYRES64=r4], 0x28}, 0x1, 0x0, 0x0, 0x48891}, 0x880) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, r4, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x7b}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x14, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x3}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x8400) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x24, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0xa, 0x10}, {0xfff1}, {0xe, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 7.047990032s ago: executing program 0 (id=6146): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c881}, 0x40014) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@alu={0x7, 0x1, 0xc, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x2f}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r3, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xff, 0x49}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000014}, 0x100) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x6c, r3, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x72, 0x38}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fffffff}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24f}], @NL80211_ATTR_MAC={0xa}]}, 0x6c}}, 0x814) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc817}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5c}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x48, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x0, 0x2, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x0, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x0, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x0, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0x0, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x0, 0x6, "51527da9723da5ee411521796027334608b6302aee2c2c80184ddcaca641ae29ebfe079df25aaf896e281dacb3ea3499a5fbe0050e198cc9a0eafd0b3ac5e6a3273f9dc532faa7afca2767b1b871e1bd6bc0c240240311ae5e453cf8359e9774b13f671344ad8d"}, @NFTA_TABLE_USERDATA={0x0, 0x6, "f3f9a99a3ce55bc4d639f33d4ade2e6dcfa2dda31479577312394cde9b411c93d6ce2a5a2dc2f989dd92a51be4d9aca8cca6b29eef"}, @NFTA_TABLE_FLAGS={0x0, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x0, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x4050) 6.744530812s ago: executing program 0 (id=6149): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'veth1_to_team\x00', &(0x7f0000000300)=@ethtool_gfeatures}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7fff}, 0x55, &(0x7f0000000680)=[{&(0x7f0000000280)='Q', 0xfffffffffffffce1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x2, 0x4000840) (async) r3 = socket(0x10, 0x3, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x3b, 0x1, 0x70bd27, 0x25dfdbfd, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x48c1}, 0x20040000) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0xd}, 0x10) (async) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x1c}, 0x1, 0x0, 0x0, 0x60080c1}, 0x0) (async) shutdown(r2, 0x1) (async) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x6}, 0x8) (async) r5 = socket$kcm(0xa, 0x2, 0x3a) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000100)=@newlink={0x58, 0x10, 0x40d, 0x70bd2a, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x600b2, 0x40c41}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x1}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004804}, 0x0) (async) sendmsg$kcm(r5, 0x0, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000f3ff00000010"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r12, r10, 0x25, 0x0, @void}, 0x10) (async) syz_emit_ethernet(0xd81, &(0x7f0000000740)={@remote, @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x1a, 0xd73, 0x68, 0x0, 0x1, 0x2f, 0x0, @multicast1, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x1}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "4986fd9508362700dfa53bd2b658e64b8d2c24a10d9f7df01a4a9f744dac4396dc93ebd353e75908eb894a36f7c613382384ca503fa292008b6292fd41b2cb1adef4a79727881433945928ec55287354c24c7676ab13ca24a50c4ab1232b3122b7248eb18d82d9aae1edd3ced3b7d16fd2cc0bc7d86c9e554e72364e046f4249e9f8b257c0d385788d9a2c667f10d89c73cb93cad9a4c6e02f57dbd87d3dd8917f2953b4d52f5390b0ab71960f389c38585449d22742052c3e9505705ad20c1d24dd721fdbe1d0f83d3a5181c3514c2bf50b386be4d1bc2db81a885f4a4d4c307658d357b8f2ffc5f62589a4358e4d874080f1586d23109e585c038e07dac80ba1a333123949870af9e12cee007bd8109604c422cb327d137d4701ce3c1a621476a00da966ef2c4e1433930deee07effcbe39ac5259afe7ef2b5bd4c08c8602adbcb9c83245dfbb5023b33f9b292cd4330dee6deeb00d51ddc4b052cb9db68bdb1edf00524b1da945f38291675fcbba9a0f52614bf9f1bb8a35f518138dd7cf8724524bad4d9a6b44a943f11172d6386a66a9171bc982449a07fdf63fa6b093264beb9d679581cefd2a1c23f9f7d50abbc90e9036224276b11a2195f0535571185373feee1c74c822fdcfcca39ad4588d20a0266dba1961eaa5c5c1b6fbe47f61ed366b758ec4fd927471024155a8654e0df3304690e63945ac7207b4920d4dda7018b8a9c40b55f7950134259f1e31c7700a76c594e21bb51698cefc4dcfa1201d65511c86ef72f69bf0d7b301128c78ba94bb0b27ec85c87f85f5db00f3b8e5d4b4e23af8cc67cd8d095ce5215d7d0ad6172e41bde8880e555c375d2681416c92d73ee141300b4c2181dbb84a027f6e9d58efda5a1a2f5dffeac77c3b892973d8bc97afb19a70742ed9648474b16a07d3d96635c67d93117dd9180c4e247427a4e01b8f9d1cbb9a3c96b348b6ec0cc7eda3565e9447cc2fc1d53e66bd1a007d04b4176863ccf0858e470ed16d6a529dd91fe175a7f1c9af4662a00397bf72e808561c239601924b8d7c3dc2b475abbc2b29d405c1fcc7f30031f8d62eeeb067e34930834bd9e1340cc5d2fb3e5582d31f1d3b3cca26cf4f47fc16e14650f08f9e920834e29465ff5a3ea4f411008f01d3a4139e3859baf49f21f57c97d429e1f5f0103a2b243bf82119d94ecfe977b0e4fa4bc47bf2a1ed9dc5f9da81b217974e174ac2ea2e881611143c3f0ab79aa1a8e503f2092267efbc4e65ad5e7b49d96f77ff4edd2f0b728720b9b5741b75e7bd751ee15f99799bc003a9f10a875f16b19c1bac1581ddb6d4bd7441291267821602cedb9ceefa804a9f52510f42c72b96ee05917c4d8dcfa2634c8e2267a41fcf75f0116a2f57268a966a8ca93cf186f014bd2f00034662e3377422e9d029d9911f61e5a5eaabaa3973abd483579bf7a7c891798780e9f21f343bf0bb299a8976738f62d5b28afb5592b62650af6de6470dfb47a18249cd0f149fa1c59ede212fc50fb24e548f1bc52be590e880726c384f19a25335fc3f7591635b24fd2237d53646a1105469e86a28ce6b5c1db3f7d99d940fcfc1ea46eed1eb88e8b38997a1c4dcefa4f5e3aeaed01079febbd7a816f9f19ae17c18f3d083f176bfdae4046e1a83173b52e77b088d0bcab93cf15aacafb007bdb76706a52ce8db5e8792353defddc9949d8023130c0a9ac27a8f0a5954e4100b983b1c022647ac537ea1547476c85fbbabab8daa79df78075beb7ccc6725a1abdaa3760fef2aef4e0344c550565a73aca314b44c0b43c2575df7cec9bcaf0f025174e830fccc62c0802f89aafe2735b153b0bbc74d9ae90acba6af3d8debf32fc638194264642380a34d36f6388393496b21802fbf2837613886e6774be8a5b3e0901c97f2eeaa16944c9d961c44eb9f2b290c717e779239d565057115b9827b019866ae3d23fcb0eef0d31504da6e269f01323305b331d9e9431829a9f9bf741ae54ddd53d4218a7dbdbb4c3a9829e49c70b815c600994ad9bcea047e44be3b774b0884d1dbcbb430fde644e8642c0a5f94f4cc9f076a9d762ed04c88b2b7f82cb3a1475f3b15425d2c27ef5d46fd327377f75a77c3a617ad4800dc73c5958eb71e32ae643f53837d3398f1eb48754b25767389b9e03566ad1a06617c0260057a69e961b04c7ce4bee01dd188884bfdfcd1cf77934dcba587abc667a09f93734f13631f03dbcd40aedb76153daf461286fcc2bfacf11d50722a4d5ba36783a68fde14c7a3d202078b021805d9319e805f9ad99043d76201a28be4563785cc7c892d4830ad6f32cbd46edb8900788f35060cfe09646374ac2ec537e1105c7be0606c1046d2a778d0b80a72dd396c48040336aa69c2f4bcb1fce9f5fa65ecfb5fd0dbe649891125966d0192104b2f6512a56fb521433d37e97828c773e8e833fde4a683c6b817f02e170dc0a5296857bddbcb627157d939c12a054321d0e828694b77588b5bfe73810bb1b62b5f8b00e8663216bfba3ee88084c7d048a1f3062ca23c1b9062954ecd08d257e63f45a70d85ad7ce56c5b1ee763b93962c59893d42918e3e5bf3fa13a46ec204d20004b4f1eccbddcfe8bd3193c2b97dd3aef5b20b5fd0cb1da8c3f10a5478aa3a6270436bb342a100b6629600f59dbc4a4e833eff537cbc65ca697f2212c26d27d6d37202d44e495db9669fe6273ac6964f3a8557d2f5f526d87e427f955cb7064a395e711f08bcf7f1a18a1579e71bec5df1038a41fcead486d0b40fe8a80024f417c2688ed4d54c12b5b0afb7282a7d9ddaa76ab1c0de2554ffe26da4b3dcc5e471ec30f16e98989e9f1d9612f377a9ee8ec72a319a8b6558953b78ee5517dca0adcc4e9f39d2e8be5495d4de5b634601dc678337eb6f89b85e3198e6b1cb8acddfd55c1a708baa7cd22b4ebe92ed0a8f73dc3b126e4dc2081ad7c139b9896b9b2db075c10636bb965574e8257b8a402b58f026d517b220c420f504cd51d8325a02a70a72976b6921ff2ec3aaba8f6b6163c8e90a495ea6c785ae8401d2b545ce0d620c1b4bf5f14284c1fade793c76210d076338063f861a8e718c9d898da08bb162f423fdefc537ad8664246b17ed7f85a25c536b83fa17121a3b37f945ae0545f7fc37db00274aa6ebddcd2e0b7881bbe0543d12dfab3f3e72f69d6fb83206912b07399156255c9fc1cfc123c5e28ca378f3f2f6dcc30f2baa9d3d40c60d6e6fcefa94d836bbb023b509174efb75ab56abda0c04d163fb17bb65ed0060163d5207bd7f8affa25d36f5b4245eef5a0d0dbd20c456db0c297eb39b2ac8e483900a5199f23a84ca55a52d77156cd798ee22c167eb49bcf5a3ce652f04873182f03adf53484112550f4d284282d1dcf762bdcccbcc2c9e94bd0dd0bbe8291e83c5d13c22c1d9a02357b6fbe91798fe0fce0c4ff39a5aa6e9eb56292fbde24b3d7bd5fff32f16d527444b2133461b5d3b953ebdc2c4ee1b988929b8dbddcea57a5ec2f0559ef46c3a5dad120fd8f444933243454b79f440cb90cac9fe9f3a56e14cf3beb4a386709912df2599316406086c8be9fdfd2fb82ea39f1e572b782a101ceb1497fcafedcd649a412485592d23ff71f910f77facbc8b65329eb21772f08d6dbf39afe251e419abc7728d187dfdf0e5bcb87e5eaf54a23fa39a680123d3cbfa3daf8e5def7aac4615c68ea272d311573483337ea0dc5f911d1bcd2d487745bb7060a1bd327b4a38a3448b67ce325f58be163eb7cacab440e50ff34e5baad73819e63b57d71a66e85b8e4ed533adf7a20d4f910e9ca93e2e7834a3a0039a3c7f8211fad0153d3e603e4eab472377956bfbd40be2379a483950ee851e4db83e3d48305a30583c98b7ed62956d3907dd26acfb9ffd9b34bf0b3214e28e3913a1945061966fe5835051c4a777dcb077ef5357f6bbe30d8a27846bc323be0591b9ce800cfbecf4efdc2a0443c24365aa95be4767037fa905df7fd6781eca073268f76e30ebf8a6f763774300ccbd90f3ab6ec2fc4b8f8e91228ba265e2464a838f1bedf649d5830cf3640e64bd2de3b07644ed2fa66a20ffa657e4520754afe142df52c95b69395100149a3469c8a3f4cef0957d6573212d92059e9045eb7d0b8467163ea13e5a2800aaf40a6de3a868b79558dd3d17640099198486573359c3b8493b008915d8f24e6ba68ea07a38f2bcfee76d5bb6c6b90ca49042d5ddca14b275bf44151d3847e8717cd2bf6216af750a09155df8c4154a6873d68bb3f1ffd819496dd54020f2ebbaf549ade19e081ff088eabb3d58d1d97980818ac3192c4def47870d900b51d649b7b1de80fa9bd0779145fb16857d199505e11168bdc36c8613e65c70ba07b2f28eaf6d635e3a76ae43e7252cc336c12c75e23a229fdce769236583bb28a1704725d3c9e84fb60f7819ea25010427ab12bb3adce73dff9b8bdce9de93378599e77b69ac3478af523bf04a490826c5b633b24d4cdcb931618d2a445fb6573ad85a782ca8c2e96ef1411f949c5092fc67a4455c0b90b77462f444e63b2c921047afe01328c9066a1bedcc6f7e29f238836b8674bbe8f27ead2d5f882a8d3111f2afe91baaa40f296c718bfefbe0e8ec87ce806f201a0dede78ff0456d34132bfea5f6c1abbf61e8a1e668da7b71"}, {0x8, 0x88be, 0x3, {{0x4, 0x1, 0x6, 0x1, 0x1, 0x1, 0x1, 0x2}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x4, {{0xc, 0x2, 0xdc, 0x0, 0x1, 0x3, 0x7, 0x6}, 0x2, {0xfffffe00, 0x57, 0x1, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x3, "86d1a95fc35539230a82135569dcad7841a8b850e950757123b863bc9e10257e93e59121b5fd6ec1084a46baf6e1fb0e68c5f1"}}}}}}, 0x0) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffffffff}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0x7e, 0x0, 0x0, 0xfffd}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffff8b}, @exit]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r13, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000a40)={0x50, r14, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @val={0x76, 0x6, {0x61, 0x3, 0xd, 0x5}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x4000) 6.16286453s ago: executing program 0 (id=6152): r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x7c, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0xf, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4090}, 0x20000040) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x689aece2b491f820}, {0xfff2, 0xffff}, {0xfff2, 0xffe5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x3}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) unshare(0x68040000) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r8, 0x0, 0x20040044) r9 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x70bd2b, 0x80, {0x0, 0x0, 0x0, 0x0, 0x26f13}}, 0x20}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r10 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r10, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg(r10, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) write(r7, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff8070000001700000000000000", 0x1c) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@newtaction={0x8d8, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x8c4, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x64, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r12}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x874, 0x2, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2a, 0xfffffff8, 0x3, 0x4, 0xffffffc0, 0x6, 0x5, 0x5, 0x2, 0x117, 0x10000, 0x8001, 0x2, 0x70e, 0x7, 0x9, 0x80000000, 0xaa, 0x3ff, 0x4, 0x9, 0x0, 0x51, 0xd, 0x2, 0x1, 0x10000, 0x200, 0x7, 0x2, 0x4, 0x8, 0x101, 0x8, 0x0, 0x3, 0xe, 0x66d, 0x80000000, 0x3, 0x1, 0x8, 0x2, 0x7fff, 0xd, 0x4, 0x1ff, 0xffff, 0x7f, 0xfffffffd, 0x40, 0x7, 0x3, 0x400, 0x6, 0x8, 0x2, 0x1, 0x7, 0x9, 0x594, 0x0, 0x2900, 0x100, 0x4, 0x305c004, 0x7, 0xfffffff7, 0x7, 0x800, 0x5, 0xf24, 0x5, 0x7fffffff, 0x923, 0x101, 0x1155, 0x3, 0x1, 0x0, 0xffffffff, 0xcd2, 0xfffffffa, 0x800, 0x4, 0x81, 0x3, 0x0, 0x3, 0xf, 0x1, 0x1, 0xe, 0x3b2, 0x6, 0x4, 0x1ff, 0x6, 0x5, 0x1000, 0xe6, 0x7fff, 0x1, 0x8c, 0x1, 0x80, 0xfffffffb, 0x5, 0x7f0, 0xfffffff0, 0xffff, 0xfffffff7, 0xcfb6, 0x6, 0x4, 0x1194, 0xaf, 0xa, 0x2, 0xe0, 0x0, 0x7f, 0x6, 0x0, 0x2, 0x9a7, 0x7a2, 0x5, 0x83f, 0xa36e58b, 0x100, 0x9, 0x7, 0x8, 0x2, 0x1, 0xfffffffe, 0x1242, 0x579, 0x3, 0x5, 0x7, 0x0, 0x4, 0x8d, 0x3, 0x4, 0x5, 0x8, 0xc, 0x6, 0xffffffff, 0xaebe, 0x7, 0x90a, 0x7, 0x3, 0x2, 0x7ffffffe, 0x9, 0x9, 0x5, 0xfffffff1, 0x3cd, 0xc, 0x4, 0x2, 0x9, 0x6, 0x4, 0x4, 0x7, 0x0, 0x2, 0x1, 0x5, 0x7f, 0xe6ef, 0x9, 0x6, 0x5, 0x7, 0x0, 0x7fffffff, 0x7, 0x0, 0x8, 0x9, 0x5, 0x8, 0x0, 0x6, 0x7, 0x1, 0x401, 0x8762, 0x9, 0x0, 0x4, 0x4, 0xff, 0x3, 0xc, 0x8, 0xf, 0x2, 0x6, 0x80000000, 0x3, 0x7f, 0xfffffffc, 0x2, 0x61, 0x8, 0x100, 0x5, 0xc56, 0xe, 0x0, 0x8, 0x8, 0x6, 0x9, 0x5b0, 0x6, 0xffff, 0x5f3, 0xc5f8, 0x1000, 0x2, 0x9, 0x7, 0x1, 0x1, 0x3, 0x0, 0x2, 0x200, 0x253a, 0xb, 0x9, 0x3, 0x0, 0xf, 0x1, 0x4, 0x2, 0x1000, 0x7, 0xb96, 0x3, 0xff, 0x8, 0x9, 0xb]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1ff, 0x4835, 0x4c30, 0x8, 0x8, 0xffffff68, 0x1000000, 0x7, 0x1d, 0x8000, 0xd3d9, 0x2, 0x82fd, 0x3, 0x8000, 0x7f, 0x401, 0x800, 0x2, 0xe3a2, 0x2, 0x9, 0x1, 0x401, 0x400, 0x1855af6b, 0xff, 0xfffffffa, 0xf5, 0xffff70f3, 0x8, 0xfff, 0x6, 0x8, 0x7, 0x0, 0xf61, 0x8, 0x80000000, 0x5, 0xc2, 0x14c6, 0x4, 0x2, 0xfffff800, 0x3d3, 0x4, 0x0, 0x1, 0x163af427, 0x6, 0xfffffff8, 0xffff5f90, 0x9, 0x5, 0x6, 0xca41, 0x4, 0xffffffff, 0x7, 0x80000001, 0x7, 0x6, 0x80, 0x3, 0x9, 0x9, 0x8, 0x40, 0xe5, 0x6, 0x0, 0x4, 0xe, 0x9, 0xc7f, 0x7, 0x7363, 0x3, 0xc0000000, 0x47d2, 0x200, 0x13e, 0x5, 0x4d, 0x10000, 0x2, 0x1e7, 0x8, 0x7fff, 0xfffffff8, 0xc, 0x6, 0x3, 0xfffffff9, 0xb, 0x8001, 0x7, 0xfffffdfe, 0x7, 0x0, 0x954, 0x8, 0x3ff, 0x5, 0x0, 0xab2e, 0xaf, 0x7, 0x2, 0x4, 0x3, 0x3, 0x5, 0xe6, 0x8, 0x0, 0xfffffff8, 0x1, 0x2, 0xffffff52, 0x3, 0xf, 0x4, 0x2, 0x4, 0x6, 0x4, 0x3, 0x7, 0x7, 0xffffffff, 0x1, 0x9, 0x6, 0x4, 0x178, 0xbbfc, 0x8000, 0xc, 0x0, 0x7, 0x101, 0xfffffffd, 0xfff, 0x2, 0x4, 0x0, 0x2, 0x8, 0x0, 0x10, 0x8, 0x0, 0x62, 0x3, 0x6, 0x10000, 0x7, 0xe9, 0x6, 0x7f, 0x6, 0xfffffff8, 0x0, 0x0, 0x81, 0x2, 0x0, 0xd, 0x7f, 0x200000, 0x3, 0x2, 0x8839, 0x200, 0x80, 0xffff0000, 0x1ff, 0x6fc3eb4a, 0x8f, 0x2, 0x4, 0x6, 0x9, 0x7, 0x0, 0x1000, 0x7, 0x3, 0x8000, 0xb96, 0x200, 0x1, 0x80, 0xfff, 0xff, 0x400, 0xe7d, 0xd, 0x80000000, 0x9, 0xe122, 0x9, 0xffffff80, 0x2, 0x3, 0x3fffc000, 0x1ff, 0x6, 0x7, 0x0, 0x7, 0x7, 0x7, 0x6, 0x9000, 0xffffffff, 0x9, 0x800, 0x6, 0x1000, 0x0, 0xe, 0xcca, 0x7, 0x80, 0x0, 0x8, 0xef000000, 0x0, 0x3, 0x4, 0xba, 0x7ff, 0x1, 0x8, 0x5320, 0x7, 0xdd, 0x1, 0xfb, 0x1ff, 0x6, 0xc90, 0x40, 0xffffffff, 0x2, 0x7, 0xd, 0x1, 0x0, 0x1, 0x73be, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xfffffffffffffffa, 0xffff, 0x7, 0x401, {0x4, 0x2, 0x3ff, 0x5, 0x3ff, 0x2ddc}, {0x5, 0x0, 0x8, 0x6, 0x2, 0xc23}, 0x5, 0x800, 0xec3b}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x8d8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 6.03215459s ago: executing program 3 (id=6153): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004800)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xfffd}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3e}]}, @NFT_MSG_NEWSETELEM={0x40, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "549faa30"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000500)=0xe, 0x80000) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000540), 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000400)={0x100, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newqdisc={0x6c, 0x24, 0x3fe3aa0262d8c583, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xf, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x6, 0xfdfffff9, 0xacc, 0x80000001, 0x0, 0x4}, [@TCA_NETEM_RATE={0x14, 0x6, {0x100, 0x4, 0xa75c, 0x4}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x41, 0xfffffffe}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='>\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00022abd7000fedbdf251100000008000300", @ANYRES32=r6, @ANYBLOB="0c0099000a0000007d000000080011800400050006001000d200000006001201000000000600ed0017010000050029000a0000000500e400000000000500130102000000"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="7c010000130001010000000000000000ac14141f004000000000000000000000640101020000000000000000000000000100000d040000090a00000000000000ee84af20c022e336885085b35054a21dfce33ee895cdfa6d2428be091d13dec9922d46feed2b6d2b337cf160bcd8faa16b9a9b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 4.648960541s ago: executing program 3 (id=6159): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) r1 = socket$inet(0x2, 0x4, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d}, 0x94) unshare(0x400) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x330, 0x40000, 0x198, 0x330, 0x198, 0x428, 0x358, 0x358, 0x428, 0x358, 0x3, 0x0, {[{{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x16}, 0x0, 0x0, 'vcan0\x00', 'wg1\x00'}, 0x0, 0x2c8, 0x330, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r2}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x5, 0xe0000000, 0x9, 'snmp_trap\x00', 'syz1\x00'}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'team_slave_1\x00', 'netdevsim0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x3, 0x10, [0x40, 0x37, 0x32, 0x2a, 0x2, 0x2d, 0x29, 0x17, 0x23, 0x1c, 0xe, 0x38, 0xb, 0x22, 0x27, 0xd], 0x2, 0x4b, 0x9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x520) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4044) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) r5 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x430, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x360, 0xffffffff, 0xffffffff, 0x360, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x228, 0x270, 0x0, {}, [@common=@hl={{0x28}, {0x4, 0x1}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x490) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002cc0)={&(0x7f0000000180)=ANY=[], 0x24c4}, 0x1, 0x0, 0x0, 0x8}, 0xc0) sendmmsg$inet(r4, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_udp_int(r4, 0x11, 0xa, &(0x7f00000002c0), &(0x7f00000003c0)=0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000540)={0x0, @initdev, @initdev}, &(0x7f0000000580)=0xc) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0xc7bc, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x6, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000300c1bd773e6cb7c90687b4c4f2590082805161a5450a957b5c403c0599446533404a8b167d19a75a3b0c75fed7812b41f2e2a2cd922d1d70b0f42128612adb28ba32e5e8283208e3de877aae3cf28fe622411a1990fb58a4a0d0d47e8ee1ec8c9835707e7123c7653fa559aba05752ea9435560a4b65601e52e154842c373b06e924f9f52b03f0ee6e8a73eaa76e98e4a2d51900ea3caa1a2456f117a421566aff4794adcaa67dc9f42e08096f3835a7f4df28482cd46115f0e09b6b02554d4154b661c77c83c5f5c2f130385d70ab851deed8d096e95a3df29773b9ff33dd0e2e536bfcf7c90b0cc8cb08f28789dab3b37ac2416713bc44688bc3b157c8b3"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001300)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x8001}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x8}]}, &(0x7f0000001200)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2f, '\x00', r7, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000001240)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x1916, r6, 0x2, &(0x7f0000001280)=[r0, r0, r0, r0, r0, r0, r0, 0xffffffffffffffff], &(0x7f00000012c0)=[{0x4, 0x3, 0x10, 0x1}, {0x2, 0x1, 0xb, 0x7}], 0x10, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f0000000880), &(0x7f00000008c0)=r6}, 0x20) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r10, 0x6, 0x17, &(0x7f0000000000)=0x6, 0x4) 4.520741967s ago: executing program 1 (id=6160): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1d, 0x13, &(0x7f0000000180)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x64, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000180)="8d4d8affffffb000", &(0x7f0000000280), 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000000, 0x11, r0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@remote, 0x80059}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000440)={@multicast1, 0x0, 0x0, 0x10, 0x0, [{@private}]}}) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x1, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0xe4, 0x4}, 0x3}}, 0x10) syz_emit_ethernet(0x3b6, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xff, 0xdb0b, 0x1, 0x0, [{0x18, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x1f, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb04619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc237ae0e9f6a1afd6a3ed5304d642081ba42399907ccd0a562db212baa39eb8164e240069f604d3a05fecf894222a141123167f010000000000000090aa235a6706"}, {0x3, 0xb, "17dc3546805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084713475671545e65eb2e9ac946a3f0e2bc4619f91394c03bcfbbb7d71138537d68e2de66393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e10090cf6164000000020000000000000000000000ffff008879e66485201a0015ca837c7357a0274500f700"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff09e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) socket$tipc(0x1e, 0x5, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000001c0)={0x44, 0x2}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)={0x10000042, 0x0, 0x2}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r5, &(0x7f0000000500)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x8d4) getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'ip6gretap0\x00', 0x8002}) r7 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6erspan0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0xfff3, 0xfff2}, {0x8}, {0x8, 0x3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS={0x8}, @TCA_BPF_FD={0x8, 0x6, r6}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0xb5b96a66ed7ec9f}, 0x4000800) socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000540), 0x2) connect$tipc(r6, &(0x7f0000000040)=@id={0x1e, 0x3, 0x1, {0x4e21, 0x4}}, 0x10) 3.523053566s ago: executing program 1 (id=6162): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x102, 0xf2, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43f9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) unshare(0x2c020400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x800) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r5 = epoll_create(0x2c4f) epoll_wait(r5, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0xdd) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x80087601, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 3.173734979s ago: executing program 2 (id=6163): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000068000903000000fab1afcdd266527400000000000400040004000b"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.971607499s ago: executing program 3 (id=6164): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="190000000400000004"], 0x50) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x21, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r4, r1, 0x25, 0x0, @void}, 0x10) 2.753878878s ago: executing program 2 (id=6165): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x631, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x3000c005}, 0x8c0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r8 = socket$kcm(0x29, 0x2, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r10 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r10, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) (async) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000040)={r10, r9}) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x89e1, &(0x7f00000001c0)={r10}) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r11, 0x4) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x50, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbba, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x5}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) (async) r13 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r13, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x6}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) (async) write$tun(r5, &(0x7f0000000500)=ANY=[], 0xfdef) (async) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 2.422509517s ago: executing program 1 (id=6166): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/146, 0x92}], 0x1}, 0x9}], 0x1, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)={0x28, r3, 0x1, 0x0, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0xc001}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000010}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x34, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x1d}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x1a}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x8010) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r5) r7 = socket$kcm(0x2d, 0x2, 0x0) sendmsg$IPSET_CMD_LIST(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000fc0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x8041) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x28, 0x2, 0x3, 0x401, 0x0, 0x0, {0x3}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x101, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x9}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004000) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r6, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000) 2.316017007s ago: executing program 3 (id=6167): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x10000) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x200, @local}, 0x10) splice(r2, 0x0, r1, 0x0, 0x5, 0xa) r3 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x29, 0x9, 0x0, 0xfffffffd, 0x30, @mcast1, @local, 0x0, 0x0, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x0, 0x0, 0x1000002}}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r4, @ANYBLOB="0500060001000000050007a10000000005000300df00000008000200", @ANYRES64=r0], 0x68}}, 0x0) 2.255141334s ago: executing program 2 (id=6168): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0x80000006}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40000}, {0x85, 0x0, 0x0, 0x86}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, 0x0, 0xa, 0xfffffffffffffedc, 0x0, 0x41000, 0x4d}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000d0000000000010005000093737b8662ff010000006868f8ff0000000018110000", @ANYBLOB, @ANYBLOB="e100000000000000b7080000080000007b8af873e875f522ff00000000bfa200000000000007020000f8ffffffb703000008080000000000f9ebe0f47eae1eaf17183171335700000000000001f94000090000009500"/103, @ANYRES8, @ANYRES8], &(0x7f0000000200)='GPL\x00', 0x4, 0x1009, &(0x7f0000001ac0)=""/4105, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0xa}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0xf, 0x8000, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x10, 0x6}, 0x94) getsockopt$MRT(r2, 0x0, 0xce, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000001580)={'erspan0\x00', r1, 0x40, 0x7807, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x1, 0x0, 0x0, @empty, @multicast2}}}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket(0x2b, 0x1, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000804}, 0x2004c0c0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000240)={0x0, 0x5}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000240)={'tunl0\x00', r1, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) 1.70948667s ago: executing program 3 (id=6169): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) (async) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) close(r2) (async) close(r2) write(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"6b2f3b6a399bc2f1af59106a2a1667f8", 0x0, 0x0, {0x8, 0x9d5f}, {0xd, 0x41}, 0xfffe, [0xde9a, 0x8e9, 0xc, 0x1d, 0x43, 0xfffffffffffffffb, 0x28, 0x6, 0x34e0000, 0x7ffffffffffffffb, 0x9, 0x5, 0x6, 0x8, 0x7, 0x4]}) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0x10448) (async) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1001, 0x2, 0x11fe726f7e78fcf0}, 0x28) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x100000e, 0x13, r2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000080), &(0x7f0000000100)=0xe) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) bind$unix(r6, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = socket$unix(0x1, 0x2, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6bdae952", @ANYRES16=r8, @ANYBLOB="000829bd7000fcdbdf25140000000500190000000000080012000a000000"], 0x24}, 0x1, 0x0, 0x0, 0x8051}, 0x0) ppoll(&(0x7f0000000000)=[{r7, 0xa43c}, {r6, 0x4221}], 0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'ipvlan0\x00', 0x0}) socket(0x10, 0x3, 0x0) (async) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffbffff, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) 1.191794887s ago: executing program 1 (id=6170): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d00)=ANY=[@ANYBLOB="1c0000001600070128bd7000ffdbdd25217c000008003b00", @ANYRES32=0x0, @ANYBLOB="3eb83caf6f3e416b74622632e240beb14206570cefec3a5204fa132f724669bf910c773f3f370dec2e1e9a4d943cc8e0785a92e82541c01c2af72c296ac8453a380e91b5"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc090) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001a0069ae35bd7000000000001c000004ff07000400000000"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000b80)) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x40007f, @dev={0xfe, 0x80, '\x00', 0x20}, 0xc7}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=ANY=[@ANYBLOB="200000000906010200000000000000000500ffff0900020073797a3100000000e5fe17b8b62e18666d715208b95bea39ce306f2bd52735092f0d39424f062e2a95f51c33a3e54ffd824d56d6b76ce91f1437fc70524104841b03289432ed756ec286fa677a3a8eeded5ce154ff753dd6680ed3c398a7226634281c5e9f64de50b66508904513d8fc2bdbd3e7302c403a8c4dd17895f306a131e933dfbe0c77c439ff174d56aefa74ca66d17bc0c36db3eab1e34b3437e1a32529df739b3af850b3ddbeb3427c4a9b"], 0x20}, 0x1, 0x0, 0x0, 0x40c80}, 0x40c0080) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x538, 0x2c0, 0x398, 0x398, 0x398, 0x0, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [0xffffff00], [], 'nicvf0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@empty, 0x39, 0x16}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x0, 0x5, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@ipv6={@mcast1, @loopback, [], [], 'batadv_slave_0\x00', 'ipvlan1\x00', {}, {}, 0x2}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'batadv0\x00', 'virt_wifi0\x00', {}, {0xff}}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB="2f00000010"], 0x20) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r10, 0x8b2c, &(0x7f0000000040)) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r5, @ANYBLOB="0c0099000080000030000000140004006e69637666300000000000000000000008000500060000000c00178004000700"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x40048a4) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r6, 0x942e, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f0000000bc0)=0x4, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000e00)=ANY=[@ANYBLOB="34000000000801010000000000000000020000056c96fd1fe15bf310f7e80217721906000240886300000900010073797a300000b308754b9e473744d7d0c54ec5641937b87e0a16fb62bc5fe430ddcbd5e8746ccee15b9a6b73711ae4666f83c07c8cc70c6401ada4ecd622e7e894af87ca66bb3fd82662abcfdb459191b6cd3d1bfb68a3d6b5edf3f61324ca6dc168c8a70815634ee3fb3720df7ba93d8be01d2427e5b739c53765b9e1c0d3def228386e2414"], 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000d80)=ANY=[@ANYRES16=r3, @ANYRES16=0x0, @ANYBLOB="040028bd7000fddbdf2501000000080003000600000008000200030000000c0004003600000005000000080004008500000005000500050000001400010000000000000000000000000000000001"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) socket$tipc(0x1e, 0x2, 0x0) 988.074191ms ago: executing program 2 (id=6171): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x68, 0x30, 0xffff, 0x70bd29, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x20000000, 0x5, 0xfffffff7}, 0x21}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008880}, 0x0) socket$kcm(0x29, 0x7, 0x0) 820.32872ms ago: executing program 2 (id=6172): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x32}], 0x8, &(0x7f0000001440)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x4000000) r1 = epoll_create(0x7) r2 = epoll_create1(0x0) r3 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)={0x6}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f00000040c0)={0x2010}) r5 = socket$inet6(0xa, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000100)={0x2}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x40, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x3, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x40000) 723.764032ms ago: executing program 0 (id=6173): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000069c0)=ANY=[@ANYBLOB="2428000041000701feffffffffdbdf25017c0000040042800c00018006000600800a000000280280040010"], 0x2824}, 0x1, 0x0, 0x0, 0x400c0c5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 447.887827ms ago: executing program 2 (id=6174): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}}) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x0, 0x1}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x1b, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000006"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x28, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="01051c0010001400060046eeff600000000040119078ac140041ac1400014404bb7012344e20004890780300000002000000f3a74d33b95518f01bbd7604731c892a0a13e19a51f64f9e78077bb13c9fc3304cf3c5cd542ab66fee275d6644654e5b0e7123e822a71d27"], 0x6a) 446.903136ms ago: executing program 0 (id=6175): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f6", 0x4}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x46, &(0x7f00000000c0)}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x3, 0x6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dbdbfd, {0x0, 0x0, 0x0, r6, {0xa, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x8, 0x7}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @broadcast}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x26044028}, 0x24000891) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) r7 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xff}}, {0x1, @broadcast}, 0x4a, {0x2, 0x0, @dev}, 'veth1_to_bridge\x00'}) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8953, &(0x7f0000000640)={{0x2, 0x0, @dev}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x4a, {0x2, 0x0, @broadcast}, 'syz_tun\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) recvfrom$inet(r3, &(0x7f00000004c0)=""/119, 0x77, 0x2062, &(0x7f0000000540)={0x2, 0x4e22, @multicast2}, 0x10) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$packet(0x11, 0x2, 0x300) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="64dc6542b49815f7b4572e9b0377871b07c76a53827b2bf528c3603a8a5212a931d10ed7ec4c79daea2ea5fb129b91e61feabe395b22cffeff4db4a2eeff639a4e4b295c77fc88ea834e18f03f52a4e7d50471ef3254b5cacc271289cd7c86eb89cabb122ec7bf817dda2fd2a64abb84e13bbfe66d8fa6c9e2bda144f31dc60ea45ce146979e28f21091d7efa1176cbafb0bd3b4d76a8d", 0x97}], 0x1}}], 0x1, 0xc010) 437.174384ms ago: executing program 3 (id=6176): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x10, [{}, {0x0, 0x100000000000000}]}, 0x60) (async) close(r2) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000002d0007012cbd7000fedbdf25017c000008001ebb2f00", @ANYRES32=r4, @ANYBLOB="04002380"], 0x20}, 0x1, 0x0, 0x0, 0x34008805}, 0x4008030) (async) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r5, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES16=r1, @ANYBLOB="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"], 0x3c}}, 0x40000) (async) r6 = socket(0x1d, 0x2, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff0f00000b3d9d7394ea6070009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r6, 0x84, 0x74, 0x0, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xa, 0x6, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1, 0x9e}, @map_fd={0x18, 0x1, 0x1, 0x0, r9}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c0001800600060080350000140002"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350073797a5f74756e00000000000000000008000a00", @ANYRES32=r3, @ANYBLOB="5be17d96e11fd4b9f3d0a692c3b76fa1c9b3630cf2b4f87217d931e422fa5af9a845c1b7fa053a2472573666e5f2a6a8b060c5aace1e11593d104a58c70f2fc3a1d41d075b589398f2656116080ec4024f65"], 0x3c}}, 0x8000) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) (async) sendmsg$TIPC_NL_NET_GET(r10, &(0x7f0000000840)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x104, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000090) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="e6000300", @ANYRES16=r11, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r12, @ANYBLOB="04005b000600650000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) ioctl$F2FS_IOC_SEC_TRIM_FILE(r2, 0x4018f514, &(0x7f00000000c0)={0x0, 0x9, 0x3}) 342.868023ms ago: executing program 1 (id=6177): unshare(0x8010080) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c0c0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000060a421e00"/18], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') 0s ago: executing program 1 (id=6178): r0 = socket$kcm(0x2, 0xa, 0x2) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c, 0x0, 0x0, 0x40000800}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0c14db8382c5c9dff6614ef050e90e9a0f3e63dbbf635fc542ce0f732d09b3ea9f5c8f98a6491b9bf44ce56b9553bdcd91a19884200878a10e293822ed0875adb42c21b15f7164b5899d1f69ffa55da185a867ad136296765e876ba73a09b59bc0126f321d2b92705a3cea40aafd9438749f7e1027f4b97938396414e922b7c5fb244b5de4f9190b1f406c4738112f098bc8e8e0a67ba2cae4758206ad68165587509a03ad557270eb74a8530938c0cc12b6", @ANYRES16=r3, @ANYBLOB="01042ebd7000fcdbdf2516000000050003000000000005000300010000000500040000000000"], 0x2c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) syz_emit_ethernet(0x3e, &(0x7f0000000480)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaaaa08004540003000000000c0069078ac1e0101abf114aa10002000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYBLOB="7004004090780000fe06e2d4c3d90402"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) socket(0x2a, 0x6, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x526cca49}, 0x8) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x0, 0x2, 0x6, {0x3, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@multicast1, @private=0xa010101, 0x0, 0x5}, {0x0, @empty, 0x6, 0x5, [0x6, 0x9]}, 0xff, 0x3}}}) kernel console output (not intermixed with test programs): 2 has an invalid length. [ 1013.843259][T29420] syzkaller0: entered promiscuous mode [ 1013.843281][T29420] syzkaller0: entered allmulticast mode [ 1014.292906][T10022] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1014.323025][T29435] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1014.662424][ T13] net_ratelimit: 31 callbacks suppressed [ 1014.662446][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 1014.768075][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 1014.804048][T29444] openvswitch: netlink: Message has 4 unknown bytes. [ 1014.879017][T10029] bond3: (slave dummy0): failed to get link speed/duplex [ 1014.988420][T10029] bond3: (slave dummy0): failed to get link speed/duplex [ 1015.108821][T10029] bond3: (slave dummy0): failed to get link speed/duplex [ 1015.221031][T17353] bond3: (slave dummy0): failed to get link speed/duplex [ 1015.329417][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 1015.390688][T29460] dvmrp8: entered allmulticast mode [ 1015.539646][T10022] bond3: (slave dummy0): failed to get link speed/duplex [ 1015.650625][T10022] bond3: (slave dummy0): failed to get link speed/duplex [ 1015.695767][T29471] __nla_validate_parse: 2 callbacks suppressed [ 1015.695784][T29471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5228'. [ 1015.695804][T29471] netlink: 'syz.1.5228': attribute type 6 has an invalid length. [ 1015.695817][T29471] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5228'. [ 1016.247717][T29482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5232'. [ 1016.396685][T29486] IPVS: length: 78 != 24 [ 1017.575485][T29515] netlink: 'syz.3.5239': attribute type 29 has an invalid length. [ 1017.624344][T29515] batman_adv: batadv0: Adding interface: macvtap1 [ 1017.624362][T29515] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1017.624387][T29515] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 1018.155480][T29523] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5243'. [ 1018.625148][T29533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5245'. [ 1019.711208][ T13] net_ratelimit: 32 callbacks suppressed [ 1019.711229][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 1019.819023][T10021] bond3: (slave dummy0): failed to get link speed/duplex [ 1019.948568][T10021] bond3: (slave dummy0): failed to get link speed/duplex [ 1019.981190][T29559] lo: left promiscuous mode [ 1020.005214][T29560] netlink: 'syz.3.5250': attribute type 83 has an invalid length. [ 1020.005458][T29560] netlink: 'syz.3.5250': attribute type 83 has an invalid length. [ 1020.005666][T29560] netlink: 'syz.3.5250': attribute type 83 has an invalid length. [ 1020.005874][T29560] netlink: 'syz.3.5250': attribute type 83 has an invalid length. [ 1020.006107][T29560] netlink: 'syz.3.5250': attribute type 83 has an invalid length. [ 1020.006312][T29560] netlink: 'syz.3.5250': attribute type 83 has an invalid length. [ 1020.006558][T29560] netlink: 'syz.3.5250': attribute type 83 has an invalid length. [ 1020.159673][T29560] netlink: 'syz.3.5250': attribute type 83 has an invalid length. [ 1020.159894][T29560] netlink: 'syz.3.5250': attribute type 83 has an invalid length. [ 1020.205056][T29559] veth1_vlan: left promiscuous mode [ 1020.236166][T29559] veth0_vlan: left promiscuous mode [ 1020.273853][T29559] veth0_vlan: entered promiscuous mode [ 1020.307441][T29559] veth1_vlan: entered promiscuous mode [ 1020.349053][T29559] veth1_vlan: entered allmulticast mode [ 1020.410483][T29559] veth1_macvtap: left promiscuous mode [ 1020.415256][T29559] veth0_macvtap: left promiscuous mode [ 1020.455903][T29559] veth0_macvtap: entered promiscuous mode [ 1020.470166][T29559] veth1_macvtap: entered promiscuous mode [ 1020.618439][T29559] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1020.653306][T29559] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1020.749255][T29559] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1020.775324][T29559] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1020.807550][T29559] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1020.820490][T29559] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1020.843223][T29559] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1020.872140][T29559] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1020.873136][T29559] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 1020.896742][T29559] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1020.931088][T29559] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1020.970045][T29559] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1020.990041][T29559] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 1020.997485][T29559] syzkaller0: left promiscuous mode [ 1021.043110][T29559] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1021.133933][T29559] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1021.172655][T29559] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1021.214309][T29559] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1021.243554][T29559] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1021.276916][T29559] bond12: left promiscuous mode [ 1021.277321][T29559] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1021.307393][T29559] xfrm1: left promiscuous mode [ 1021.469141][T10029] bond3: (slave dummy0): failed to get link speed/duplex [ 1021.610703][T29583] vlan2: entered promiscuous mode [ 1021.751098][T29589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5255'. [ 1022.472110][T29595] bond13: entered promiscuous mode [ 1022.477268][T29595] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1022.481436][T17350] bond3: (slave dummy0): failed to get link speed/duplex [ 1022.631324][T29596] bond13: (slave bridge0): making interface the new active one [ 1022.631347][T29596] bridge0: entered promiscuous mode [ 1022.654758][T29596] bond13: (slave bridge0): Enslaving as an active interface with an up link [ 1022.675316][T10029] bond3: (slave dummy0): failed to get link speed/duplex [ 1022.793316][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 1022.819503][T10029] wlan1: Trigger new scan to find an IBSS to join [ 1022.990977][T29620] ip6tnl2: entered allmulticast mode [ 1023.022935][T10029] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1023.023247][T10029] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1023.045687][T17353] bond3: (slave dummy0): failed to get link speed/duplex [ 1023.048267][T29323] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1023.390869][T29632] validate_nla: 26 callbacks suppressed [ 1023.390888][T29632] netlink: 'syz.4.5268': attribute type 1 has an invalid length. [ 1023.442765][T29638] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5268'. [ 1023.507347][T29639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5268'. [ 1023.639024][T29323] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1023.876970][T29632] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1023.878205][T29644] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5269'. [ 1023.896244][T17350] bond3: (slave dummy0): failed to get link speed/duplex [ 1023.968193][T29316] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1024.057131][T29642] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 1024.082092][T29642] bond12: (slave batadv4): making interface the new active one [ 1024.099765][T29642] bond12: (slave batadv4): Enslaving as an active interface with an up link [ 1024.288368][T17350] bond3: (slave dummy0): failed to get link speed/duplex [ 1024.798531][T17350] net_ratelimit: 3 callbacks suppressed [ 1024.798553][T17350] bond3: (slave dummy0): failed to get link speed/duplex [ 1024.908188][T17353] bond3: (slave dummy0): failed to get link speed/duplex [ 1024.918469][T29662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5274'. [ 1024.918490][T29662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5274'. [ 1025.204174][T29667] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5276'. [ 1025.240627][T29669] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5277'. [ 1025.240647][T29669] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5277'. [ 1025.313430][T29673] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5277'. [ 1025.372525][T29672] veth0: entered promiscuous mode [ 1025.384862][T17350] bond3: (slave dummy0): failed to get link speed/duplex [ 1025.716140][T29670] veth0: left promiscuous mode [ 1025.729460][T17353] bond3: (slave dummy0): failed to get link speed/duplex [ 1025.786640][T17353] wlan1: Trigger new scan to find an IBSS to join [ 1025.853275][T10021] bond3: (slave dummy0): failed to get link speed/duplex [ 1025.993563][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 1026.099173][T17350] bond3: (slave dummy0): failed to get link speed/duplex [ 1026.231518][T10021] bond3: (slave dummy0): failed to get link speed/duplex [ 1026.341097][T20642] bond3: (slave dummy0): failed to get link speed/duplex [ 1026.449847][T10021] bond3: (slave dummy0): failed to get link speed/duplex [ 1026.563096][T17350] batadv5: left promiscuous mode [ 1027.181980][T29725] hsr_slave_0 (unregistering): left promiscuous mode [ 1027.378356][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1027.403211][T29755] __nla_validate_parse: 3 callbacks suppressed [ 1027.403228][T29755] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5291'. [ 1027.403261][T29755] ksmbd: Unknown IPC event: 0, ignore. [ 1027.591589][T29758] bond8 (unregistering): Released all slaves [ 1027.845889][T29765] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5296'. [ 1028.007111][T29766] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5295'. [ 1028.543689][T29783] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5301'. [ 1028.586164][T29783] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5301'. [ 1028.652062][T29790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5302'. [ 1028.709631][T29787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5302'. [ 1028.819105][T17354] wlan1: Trigger new scan to find an IBSS to join [ 1028.890154][T29799] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5305'. [ 1029.649494][T29809] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5306'. [ 1029.728711][T29819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5309'. [ 1029.898708][ T13] net_ratelimit: 11 callbacks suppressed [ 1029.898731][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 1030.008092][T20642] bond3: (slave dummy0): failed to get link speed/duplex [ 1030.118268][T10029] bond3: (slave dummy0): failed to get link speed/duplex [ 1030.228759][T20642] bond3: (slave dummy0): failed to get link speed/duplex [ 1030.237966][T10021] wlan1: Creating new IBSS network, BSSID da:e7:76:38:81:74 [ 1030.339417][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 1030.453336][T10021] bond3: (slave dummy0): failed to get link speed/duplex [ 1030.495379][T29831] bridge0: port 1(bond0) entered blocking state [ 1030.495466][T29831] bridge0: port 1(bond0) entered disabled state [ 1030.523095][T29831] bond0: entered promiscuous mode [ 1030.523116][T29831] bond_slave_1: entered promiscuous mode [ 1030.935459][T29861] netlink: ct family unspecified [ 1030.935520][T29861] openvswitch: netlink: Actions may not be safe on all matching packets [ 1031.427591][T29840] hsr_slave_1 (unregistering): left promiscuous mode [ 1031.543473][T29855] syzkaller0: left promiscuous mode [ 1031.543495][T29855] syzkaller0: left allmulticast mode [ 1031.543806][T29855] tipc: Resetting bearer [ 1031.685267][T29865] bond7: entered allmulticast mode [ 1031.694627][T17353] bond3: (slave dummy0): failed to get link speed/duplex [ 1031.803607][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 1032.579273][ T4928] block nbd6: Possible stuck request ffff888027815080: control (read@0,4096B). Runtime 120 seconds [ 1033.494590][T29919] x_tables: duplicate underflow at hook 1 [ 1033.537824][T29921] x_tables: duplicate underflow at hook 1 [ 1033.890598][T29930] __nla_validate_parse: 3 callbacks suppressed [ 1033.890618][T29930] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5337'. [ 1034.348573][T29948] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5341'. [ 1034.478627][T29958] netlink: 'syz.0.5343': attribute type 3 has an invalid length. [ 1034.499393][ T2003] block nbd5: Possible stuck request ffff8880277d7000: control (read@0,1024B). Runtime 300 seconds [ 1034.499431][ T2003] block nbd5: Possible stuck request ffff8880277d71c0: control (read@1024,1024B). Runtime 300 seconds [ 1034.499455][ T2003] block nbd5: Possible stuck request ffff8880277d7380: control (read@2048,1024B). Runtime 300 seconds [ 1034.499479][ T2003] block nbd5: Possible stuck request ffff8880277d7540: control (read@3072,1024B). Runtime 300 seconds [ 1034.574495][T29958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5343'. [ 1034.574517][T29958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5343'. [ 1034.577023][T29955] netlink: 'syz.1.5342': attribute type 16 has an invalid length. [ 1034.918311][T10022] net_ratelimit: 25 callbacks suppressed [ 1034.918333][T10022] bond3: (slave dummy0): failed to get link speed/duplex [ 1034.996355][T29964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5344'. [ 1035.065769][T20642] bond3: (slave dummy0): failed to get link speed/duplex [ 1035.170950][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 1035.212899][T29964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5344'. [ 1035.328844][T17350] bond3: (slave dummy0): failed to get link speed/duplex [ 1035.468297][T17350] bond3: (slave dummy0): failed to get link speed/duplex [ 1035.581613][T10029] bond3: (slave dummy0): failed to get link speed/duplex [ 1035.688114][T17350] bond3: (slave dummy0): failed to get link speed/duplex [ 1035.724716][T29990] bridge_slave_0: entered promiscuous mode [ 1035.745332][T29984] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5349'. [ 1035.750374][T29990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5351'. [ 1035.750394][T29990] openvswitch: netlink: Flow key attribute not present in set flow. [ 1035.798715][T20642] bond3: (slave dummy0): failed to get link speed/duplex [ 1035.838562][T29984] Bluetooth: ISO socket layer initialized [ 1035.921523][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 1036.419231][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1036.504549][T30015] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5357'. [ 1036.622941][T30019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5359'. [ 1037.535181][T30057] netlink: 'syz.0.5368': attribute type 8 has an invalid length. [ 1037.560510][T30057] bridge0: port 3() entered disabled state [ 1037.560752][T30057] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.560935][T30057] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.442576][T30088] netlink: 'syz.3.5373': attribute type 1 has an invalid length. [ 1038.926299][T30092] __nla_validate_parse: 9 callbacks suppressed [ 1038.926318][T30092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5375'. [ 1039.021468][T30092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5375'. [ 1039.400684][T30109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5378'. [ 1039.676670][T30117] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5380'. [ 1039.991089][T17353] net_ratelimit: 27 callbacks suppressed [ 1039.991109][T17353] bond3: (slave dummy0): failed to get link speed/duplex [ 1040.099128][T17353] bond3: (slave dummy0): failed to get link speed/duplex [ 1040.207318][T30136] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5385'. [ 1040.210711][T17353] bond3: (slave dummy0): failed to get link speed/duplex [ 1040.293174][T30139] bond0: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1040.313992][T30137] syzkaller0: Caught tx_queue_len zero misconfig [ 1040.442131][T30140] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1041.446721][T30162] xt_MASQUERADE: bad MAP_IPS. [ 1043.146854][T30141] syzkaller0: entered promiscuous mode [ 1043.146887][T30141] syzkaller0: entered allmulticast mode [ 1043.147270][T30141] tipc: Resetting bearer [ 1043.210635][T17353] bond3: (slave dummy0): failed to get link speed/duplex [ 1043.217839][T30149] lo: MTU too low for tipc bearer [ 1043.223152][T30149] tipc: Enabling of bearer rejected, failed to enable media [ 1043.283988][T30163] batman_adv: batadv0: Adding interface: veth0 [ 1043.284005][T30163] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1043.297895][T30163] batman_adv: batadv0: Interface activated: veth0 [ 1043.618871][T10029] bond3: (slave dummy0): failed to get link speed/duplex [ 1043.618951][T30164] batman_adv: batadv0: Interface deactivated: veth0 [ 1043.618969][T30164] batman_adv: batadv0: Removing interface: veth0 [ 1043.748103][T17354] bond3: (slave dummy0): failed to get link speed/duplex [ 1043.858921][T17354] bond3: (slave dummy0): failed to get link speed/duplex [ 1043.979096][T17353] bond3: (slave dummy0): failed to get link speed/duplex [ 1044.054174][T30175] --map-set only usable from mangle table [ 1044.055855][T30175] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 1044.179891][T17350] bond3: (slave dummy0): failed to get link speed/duplex [ 1044.489394][T30181] bond15: entered promiscuous mode [ 1044.490362][T30181] bond15: entered allmulticast mode [ 1044.492395][T30181] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1044.597618][T30181] bond16: entered promiscuous mode [ 1044.597803][T30181] bond16: entered allmulticast mode [ 1044.639924][T30181] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1044.820581][T30181] bond17: entered promiscuous mode [ 1044.820618][T30181] bond17: entered allmulticast mode [ 1044.821014][T30181] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1044.972644][T30181] bond18: entered promiscuous mode [ 1044.972990][T30181] bond18: entered allmulticast mode [ 1044.976298][T30181] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1045.008776][T20642] net_ratelimit: 1 callbacks suppressed [ 1045.008794][T20642] bond3: (slave dummy0): failed to get link speed/duplex [ 1045.156247][T30181] bond19: entered promiscuous mode [ 1045.156765][T30181] bond19: entered allmulticast mode [ 1045.170922][T30181] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1045.172230][T30214] syzkaller0: mtu less than device minimum [ 1045.195494][T30181] workqueue: Failed to create a rescuer kthread for wq "bond20": -EINTR [ 1045.345869][T30190] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 1045.373663][T30190] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 1046.028197][T17350] bond3: (slave dummy0): failed to get link speed/duplex [ 1046.140064][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 1046.345126][T30224] ipvlan3: entered promiscuous mode [ 1046.484823][T30224] team0: Device ipvlan3 failed to register rx_handler [ 1046.573945][T30230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5408'. [ 1046.689104][T30230] 8021q: adding VLAN 0 to HW filter on device team0 [ 1046.695343][T30230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1046.834866][T30235] IPv6: addrconf: prefix option has invalid lifetime [ 1047.013062][T30230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1047.017033][T30230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1047.094436][T30230] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1047.152826][T30230] veth0_vlan: left promiscuous mode [ 1047.165821][T30230] veth0_vlan: entered promiscuous mode [ 1047.236957][T30242] netlink: 'syz.0.5412': attribute type 10 has an invalid length. [ 1047.250794][T30230] veth1_macvtap: left promiscuous mode [ 1047.254182][T30230] veth0_macvtap: left promiscuous mode [ 1047.257276][T30230] veth0_macvtap: entered promiscuous mode [ 1047.282346][T30230] veth1_macvtap: entered promiscuous mode [ 1047.287597][T30230] geneve0: entered promiscuous mode [ 1047.310485][T30245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5413'. [ 1047.313725][T30230] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1047.315680][T30230] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1047.356095][T30230] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1047.367080][T30246] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5413'. [ 1047.381952][T30230] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1047.404154][T30230] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1047.407089][T30230] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1047.425944][T30230] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1047.441160][T30230] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1047.444599][T30230] syzkaller0: left promiscuous mode [ 1047.461161][T30230] tipc: Resetting bearer [ 1047.479923][T30230] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1047.507633][T30230] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1047.519803][T30230] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1047.553139][T30230] bridge3: left promiscuous mode [ 1047.572357][T30230] bond6: left promiscuous mode [ 1047.584742][T30230] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1047.600742][T30230] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1047.604308][T30230] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1047.606651][T30230] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1047.636296][T30230] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 1047.648087][T20642] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.648115][T20642] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1047.648155][T20642] bond3: (slave dummy0): failed to get link speed/duplex [ 1047.648196][T20642] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.648218][T20642] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1047.654472][T20642] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.654498][T20642] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1047.654534][T20642] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.654557][T20642] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1047.736451][T29316] ±ÿ speed is unknown, defaulting to 1000 [ 1047.736562][T29316] sz1: Port: 1 Link ACTIVE [ 1047.912902][T29325] s`z1: Port: 1 Link ACTIVE [ 1047.915648][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.915753][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1047.945244][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.945366][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1048.035074][T30238] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5411'. [ 1048.035098][T30238] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5411'. [ 1048.035869][T30242] tipc: Resetting bearer [ 1048.083485][T30242] : (slave team0): Releasing backup interface [ 1048.085447][T30242] team0 (unregistering): left promiscuous mode [ 1048.085465][T30242] team_slave_0: left promiscuous mode [ 1048.085655][T30242] team_slave_1: left promiscuous mode [ 1048.117693][T30242] team0 (unregistering): left allmulticast mode [ 1048.117712][T30242] team_slave_0: left allmulticast mode [ 1048.117727][T30242] team_slave_1: left allmulticast mode [ 1048.147738][T30242] tipc: Resetting bearer [ 1048.156791][T30242] tipc: Disabling bearer [ 1048.268397][T30242] team0 (unregistering): Port device team_slave_0 removed [ 1048.299871][T30242] team0 (unregistering): Port device team_slave_1 removed [ 1048.340394][T30245] workqueue: Failed to create a rescuer kthread for wq "bond20": -EINTR [ 1048.343693][T29316] ±ÿ speed is unknown, defaulting to 1000 [ 1048.452736][T10029] bond3: (slave dummy0): failed to get link speed/duplex [ 1048.626446][T30264] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1048.627179][T30264] bridge0: port 1(bond6) entered blocking state [ 1048.644776][T30264] bridge0: port 1(bond6) entered disabled state [ 1048.644930][T30264] bond6: entered allmulticast mode [ 1048.679628][T30264] bridge0: port 1(bond6) entered blocking state [ 1048.679747][T30264] bridge0: port 1(bond6) entered forwarding state [ 1048.702322][T10029] bond3: (slave dummy0): failed to get link speed/duplex [ 1048.817007][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 1048.834551][T30264] bond0: entered allmulticast mode [ 1048.955455][T17353] bridge0: port 1(bond6) entered disabled state [ 1049.218431][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1049.612874][T30286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5422'. [ 1049.613001][T30286] tipc: Resetting bearer [ 1049.761417][T30286] tipc: Disabling bearer [ 1050.059579][T10029] net_ratelimit: 3 callbacks suppressed [ 1050.059600][T10029] bond3: (slave dummy0): failed to get link speed/duplex [ 1050.168946][T17350] bond3: (slave dummy0): failed to get link speed/duplex [ 1050.280813][T10029] bond3: (slave dummy0): failed to get link speed/duplex [ 1050.392322][T10029] bond3: (slave dummy0): failed to get link speed/duplex [ 1050.570481][T17350] bond3: (slave dummy0): failed to get link speed/duplex [ 1050.627794][T30317] netlink: 'syz.0.5430': attribute type 1 has an invalid length. [ 1050.627832][T30317] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1050.718164][T17350] bond3: (slave dummy0): failed to get link speed/duplex [ 1050.830915][T17350] bond3: (slave dummy0): failed to get link speed/duplex [ 1050.940029][T10022] bond3: (slave dummy0): failed to get link speed/duplex [ 1051.056539][T17353] bond3: (slave dummy0): failed to get link speed/duplex [ 1051.861259][ T31] audit: type=1804 audit(1790366640.715:18): pid=30348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5437" name="/newroot/444/cgroup.controllers" dev="tmpfs" ino=2296 res=1 errno=0 [ 1051.861311][ T31] audit: type=1800 audit(1790366640.715:19): pid=30348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5437" name="cgroup.controllers" dev="tmpfs" ino=2296 res=0 errno=0 [ 1051.891820][T30359] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5435'. [ 1051.891851][T30359] netlink: 'syz.3.5435': attribute type 1 has an invalid length. [ 1051.983549][T30359] geneve6: entered promiscuous mode [ 1052.065690][T30367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5442'. [ 1052.067813][T30368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5442'. [ 1052.131359][T17354] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1052.131698][T10022] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1052.131734][T10022] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1052.131765][T10022] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1052.345002][T30378] netlink: 'syz.4.5440': attribute type 16 has an invalid length. [ 1052.345026][T30378] netlink: 'syz.4.5440': attribute type 3 has an invalid length. [ 1052.345039][T30378] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.5440'. [ 1053.856729][T30402] syzkaller0: entered promiscuous mode [ 1053.856917][T30402] syzkaller0: entered allmulticast mode [ 1054.339791][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1054.342695][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.543852][T30347] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1054.978830][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1055.114017][T30420] net_ratelimit: 31 callbacks suppressed [ 1055.114036][T30420] netlink: Conntrack attr has 8 unknown bytes [ 1055.114062][T30420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1055.114465][T30421] netlink: Conntrack attr has 8 unknown bytes [ 1055.114491][T30421] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1055.161416][T20642] bond3: (slave dummy0): failed to get link speed/duplex [ 1055.270391][T10029] bond3: (slave dummy0): failed to get link speed/duplex [ 1055.382792][T10022] bond3: (slave dummy0): failed to get link speed/duplex [ 1055.387128][T30430] netlink: 'syz.1.5457': attribute type 32 has an invalid length. [ 1055.517797][T30432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5454'. [ 1055.666573][T30442] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20001 [ 1055.761706][T30438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5454'. [ 1055.763902][T30429] ±ÿ speed is unknown, defaulting to 1000 [ 1055.785376][T17350] bond3: (slave dummy0): failed to get link speed/duplex [ 1055.888306][T17350] bond3: (slave dummy0): failed to get link speed/duplex [ 1055.998373][T17350] bond3: (slave dummy0): failed to get link speed/duplex [ 1056.155408][T30449] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5460'. [ 1056.170772][T30449] gretap0: entered promiscuous mode [ 1057.372414][T30472] bridge0: port 4(bridge_slave_0) entered blocking state [ 1057.373044][T30472] bridge0: port 4(bridge_slave_0) entered disabled state [ 1057.373178][T30472] bridge_slave_0: entered allmulticast mode [ 1057.387291][T30472] bridge0: port 4(bridge_slave_0) entered blocking state [ 1057.387401][T30472] bridge0: port 4(bridge_slave_0) entered forwarding state [ 1057.462470][T30456] ±ÿ speed is unknown, defaulting to 1000 [ 1057.595023][T30472] bridge_slave_0: left allmulticast mode [ 1057.595251][T30472] bridge0: port 4(bridge_slave_0) entered disabled state [ 1057.654835][T30472] bond0: left allmulticast mode [ 1057.654857][T30472] bond_slave_0: left allmulticast mode [ 1057.654874][T30472] bond_slave_1: left allmulticast mode [ 1057.654963][T30472] bond0: left promiscuous mode [ 1057.655008][T30472] bond_slave_0: left promiscuous mode [ 1057.655225][T30472] bond_slave_1: left promiscuous mode [ 1057.655641][T30472] bridge0: port 3(bond0) entered disabled state [ 1057.709763][T30472] ip6gretap0: left allmulticast mode [ 1057.709786][T30472] ip6gretap0: left promiscuous mode [ 1057.710066][T30472] bridge0: port 2(ip6gretap0) entered disabled state [ 1057.715295][T30472] syz_tun: left allmulticast mode [ 1057.715316][T30472] syz_tun: left promiscuous mode [ 1057.716198][T30472] bridge0: port 1(syz_tun) entered disabled state [ 1057.819788][T30472] bond1: (slave bridge0): Releasing backup interface [ 1058.312002][T30449] rdma_rxe: rxe_newlink: failed to add bond0 [ 1058.657767][T30488] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5472'. [ 1060.288881][T17354] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1060.289000][T17354] net_ratelimit: 24 callbacks suppressed [ 1060.289015][T17354] bond3: (slave dummy0): failed to get link speed/duplex [ 1060.402149][T17354] bond3: (slave dummy0): failed to get link speed/duplex [ 1060.508866][T17354] bond3: (slave dummy0): failed to get link speed/duplex [ 1060.908112][T10029] bond3: (slave dummy0): failed to get link speed/duplex [ 1061.098423][T10021] bond3: (slave dummy0): failed to get link speed/duplex [ 1061.208498][T10021] bond3: (slave dummy0): failed to get link speed/duplex [ 1061.272389][T30532] TCP: TCP_TX_DELAY enabled [ 1061.324671][T10021] bond3: (slave dummy0): failed to get link speed/duplex [ 1061.428171][T10022] bond3: (slave dummy0): failed to get link speed/duplex [ 1061.545400][T17350] bond3: (slave dummy0): failed to get link speed/duplex [ 1061.650949][T10022] bond3: (slave dummy0): failed to get link speed/duplex [ 1062.138431][T30554] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5484'. [ 1062.365281][T30557] xt_policy: too many policy elements [ 1062.672663][ T4928] block nbd6: Possible stuck request ffff888027815080: control (read@0,4096B). Runtime 150 seconds [ 1063.182707][T30585] netlink: 'syz.3.5493': attribute type 2 has an invalid length. [ 1063.182731][T30585] netlink: 'syz.3.5493': attribute type 2 has an invalid length. [ 1064.229404][T30616] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5499'. [ 1064.408530][T30621] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5502'. [ 1064.497814][T30624] IPVS: Scheduler module ip_vs_ not found [ 1064.599669][T30630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5501'. [ 1064.687982][ T2003] block nbd5: Possible stuck request ffff8880277d7000: control (read@0,1024B). Runtime 330 seconds [ 1064.688021][ T2003] block nbd5: Possible stuck request ffff8880277d71c0: control (read@1024,1024B). Runtime 330 seconds [ 1064.688046][ T2003] block nbd5: Possible stuck request ffff8880277d7380: control (read@2048,1024B). Runtime 330 seconds [ 1064.688071][ T2003] block nbd5: Possible stuck request ffff8880277d7540: control (read@3072,1024B). Runtime 330 seconds [ 1065.302493][T17353] net_ratelimit: 20 callbacks suppressed [ 1065.302513][T17353] bond3: (slave dummy0): failed to get link speed/duplex [ 1065.414816][T10022] bond3: (slave dummy0): failed to get link speed/duplex [ 1065.485791][T30648] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5506'. [ 1065.531818][T17354] bond3: (slave dummy0): failed to get link speed/duplex [ 1065.822306][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 1065.929612][T17354] bond3: (slave dummy0): failed to get link speed/duplex [ 1066.039494][T10021] bond3: (slave dummy0): failed to get link speed/duplex [ 1066.152762][T17354] bond3: (slave dummy0): failed to get link speed/duplex [ 1066.259852][T10021] bond3: (slave dummy0): failed to get link speed/duplex [ 1066.371657][T30677] FAULT_INJECTION: forcing a failure. [ 1066.371657][T30677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1066.371690][T30677] CPU: 0 UID: 0 PID: 30677 Comm: syz.4.5512 Not tainted syzkaller #0 PREEMPT(full) [ 1066.371712][T30677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1066.371724][T30677] Call Trace: [ 1066.371732][T30677] [ 1066.371742][T30677] dump_stack_lvl+0xe8/0x150 [ 1066.371778][T30677] should_fail_ex+0x410/0x560 [ 1066.371811][T30677] _copy_from_user+0x2d/0xb0 [ 1066.371839][T30677] ___sys_sendmsg+0x1c6/0x360 [ 1066.371868][T30677] ? __lock_acquire+0x747/0x2de0 [ 1066.371895][T30677] ? __pfx____sys_sendmsg+0x10/0x10 [ 1066.371957][T30677] ? __fget_files+0x2a/0x420 [ 1066.371983][T30677] ? __fget_files+0x3a2/0x420 [ 1066.372019][T30677] __x64_sys_sendmsg+0x1b1/0x290 [ 1066.372049][T30677] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1066.372097][T30677] do_syscall_64+0x166/0x520 [ 1066.372124][T30677] ? trace_irq_disable+0x3b/0x140 [ 1066.372145][T30677] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.372165][T30677] ? clear_bhb_loop+0x70/0xc0 [ 1066.372189][T30677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.372209][T30677] RIP: 0033:0x7f7d2bd9e159 [ 1066.372228][T30677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1066.372243][T30677] RSP: 002b:00007f7d2cc83028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1066.372270][T30677] RAX: ffffffffffffffda RBX: 00007f7d2c025fa0 RCX: 00007f7d2bd9e159 [ 1066.372284][T30677] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1066.372297][T30677] RBP: 00007f7d2cc83090 R08: 0000000000000000 R09: 0000000000000000 [ 1066.372309][T30677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1066.372320][T30677] R13: 00007f7d2c026038 R14: 00007f7d2c025fa0 R15: 00007ffedaea81f8 [ 1066.372352][T30677] [ 1066.373072][T20642] bond3: (slave dummy0): failed to get link speed/duplex [ 1066.490689][T10021] bond3: (slave dummy0): failed to get link speed/duplex [ 1066.812598][T30679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5513'. [ 1066.812619][T30679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5513'. [ 1066.948449][T30684] nft_compat: unsupported protocol 1 [ 1067.000802][T30684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5515'. [ 1067.026946][T30689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5516'. [ 1067.474911][T30713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5522'. [ 1067.474933][T30713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5522'. [ 1067.616284][T30705] syz_tun (unregistering): left allmulticast mode [ 1067.677399][T30713] bond0: left promiscuous mode [ 1067.680247][T30713] bridge3: left promiscuous mode [ 1067.945840][T30719] netlink: 'syz.0.5526': attribute type 1 has an invalid length. [ 1067.946541][T30720] FAULT_INJECTION: forcing a failure. [ 1067.946541][T30720] name failslab, interval 1, probability 0, space 0, times 0 [ 1067.946568][T30720] CPU: 0 UID: 0 PID: 30720 Comm: syz.4.5525 Not tainted syzkaller #0 PREEMPT(full) [ 1067.946588][T30720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1067.946599][T30720] Call Trace: [ 1067.946607][T30720] [ 1067.946615][T30720] dump_stack_lvl+0xe8/0x150 [ 1067.946648][T30720] should_fail_ex+0x410/0x560 [ 1067.946672][T30720] ? __alloc_skb+0x1db/0x7a0 [ 1067.946695][T30720] should_failslab+0xa8/0x100 [ 1067.946720][T30720] ? __alloc_skb+0x1db/0x7a0 [ 1067.946739][T30720] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1067.946766][T30720] ? __alloc_skb+0x18d/0x7a0 [ 1067.946789][T30720] ? __alloc_skb+0x1db/0x7a0 [ 1067.946818][T30720] __alloc_skb+0x1db/0x7a0 [ 1067.946845][T30720] netlink_sendmsg+0x5d4/0xb40 [ 1067.946877][T30720] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1067.946904][T30720] ? apparmor_socket_sendmsg+0x98/0x360 [ 1067.946929][T30720] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1067.946948][T30720] sock_sendmsg_nosec+0x13a/0x180 [ 1067.946975][T30720] ____sys_sendmsg+0x54e/0x850 [ 1067.947006][T30720] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1067.947042][T30720] ? import_iovec+0x73/0xa0 [ 1067.947070][T30720] ___sys_sendmsg+0x2a5/0x360 [ 1067.947095][T30720] ? __lock_acquire+0x747/0x2de0 [ 1067.947119][T30720] ? __pfx____sys_sendmsg+0x10/0x10 [ 1067.947188][T30720] ? __fget_files+0x2a/0x420 [ 1067.947213][T30720] ? __fget_files+0x3a2/0x420 [ 1067.947249][T30720] __x64_sys_sendmsg+0x1b1/0x290 [ 1067.947278][T30720] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1067.947326][T30720] do_syscall_64+0x166/0x520 [ 1067.947350][T30720] ? trace_irq_disable+0x3b/0x140 [ 1067.947370][T30720] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.947390][T30720] ? clear_bhb_loop+0x70/0xc0 [ 1067.947413][T30720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.947432][T30720] RIP: 0033:0x7f7d2bd9e159 [ 1067.947451][T30720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1067.947466][T30720] RSP: 002b:00007f7d2cc83028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1067.947488][T30720] RAX: ffffffffffffffda RBX: 00007f7d2c025fa0 RCX: 00007f7d2bd9e159 [ 1067.947502][T30720] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1067.947515][T30720] RBP: 00007f7d2cc83090 R08: 0000000000000000 R09: 0000000000000000 [ 1067.947527][T30720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1067.947538][T30720] R13: 00007f7d2c026038 R14: 00007f7d2c025fa0 R15: 00007ffedaea81f8 [ 1067.947570][T30720] [ 1069.893600][T30798] netlink: 'syz.4.5540': attribute type 1 has an invalid length. [ 1070.003558][T30802] __nla_validate_parse: 5 callbacks suppressed [ 1070.003576][T30802] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5540'. [ 1070.003604][T30802] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5540'. [ 1070.050399][T30798] bond13: entered promiscuous mode [ 1070.050792][T30798] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1070.090605][T30798] bond13: (slave bridge5): making interface the new active one [ 1070.090626][T30798] bridge5: entered promiscuous mode [ 1070.092799][T30798] bond13: (slave bridge5): Enslaving as an active interface with an up link [ 1070.376446][T10022] net_ratelimit: 21 callbacks suppressed [ 1070.376468][T10022] bond3: (slave dummy0): failed to get link speed/duplex [ 1070.469720][T30816] FAULT_INJECTION: forcing a failure. [ 1070.469720][T30816] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1070.469751][T30816] CPU: 0 UID: 0 PID: 30816 Comm: syz.2.5545 Not tainted syzkaller #0 PREEMPT(full) [ 1070.469772][T30816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1070.469784][T30816] Call Trace: [ 1070.469792][T30816] [ 1070.469801][T30816] dump_stack_lvl+0xe8/0x150 [ 1070.469833][T30816] should_fail_ex+0x410/0x560 [ 1070.469862][T30816] _copy_from_iter+0x1d3/0x1660 [ 1070.469887][T30816] ? __alloc_skb+0x27a/0x7a0 [ 1070.469914][T30816] ? __alloc_skb+0x27a/0x7a0 [ 1070.469941][T30816] ? __alloc_skb+0x27a/0x7a0 [ 1070.469968][T30816] ? __pfx__copy_from_iter+0x10/0x10 [ 1070.469989][T30816] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 1070.470018][T30816] ? __alloc_skb+0x27a/0x7a0 [ 1070.470040][T30816] ? __alloc_skb+0x27a/0x7a0 [ 1070.470069][T30816] ? netlink_sendmsg+0x650/0xb40 [ 1070.470089][T30816] ? skb_put+0x112/0x210 [ 1070.470116][T30816] netlink_sendmsg+0x6c0/0xb40 [ 1070.470146][T30816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1070.470175][T30816] ? apparmor_socket_sendmsg+0x98/0x360 [ 1070.470200][T30816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1070.470220][T30816] sock_sendmsg_nosec+0x13a/0x180 [ 1070.470244][T30816] ____sys_sendmsg+0x54e/0x850 [ 1070.470277][T30816] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1070.470313][T30816] ? import_iovec+0x73/0xa0 [ 1070.470341][T30816] ___sys_sendmsg+0x2a5/0x360 [ 1070.470367][T30816] ? __lock_acquire+0x747/0x2de0 [ 1070.470399][T30816] ? __pfx____sys_sendmsg+0x10/0x10 [ 1070.470461][T30816] ? __fget_files+0x2a/0x420 [ 1070.470486][T30816] ? __fget_files+0x3a2/0x420 [ 1070.470523][T30816] __x64_sys_sendmsg+0x1b1/0x290 [ 1070.470553][T30816] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1070.470602][T30816] do_syscall_64+0x166/0x520 [ 1070.470629][T30816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.470649][T30816] ? clear_bhb_loop+0x70/0xc0 [ 1070.470674][T30816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.470694][T30816] RIP: 0033:0x7f2a39d9e159 [ 1070.470712][T30816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1070.470729][T30816] RSP: 002b:00007f2a3abc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1070.470751][T30816] RAX: ffffffffffffffda RBX: 00007f2a3a025fa0 RCX: 00007f2a39d9e159 [ 1070.470766][T30816] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1070.470780][T30816] RBP: 00007f2a3abc6090 R08: 0000000000000000 R09: 0000000000000000 [ 1070.470793][T30816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1070.470806][T30816] R13: 00007f2a3a026038 R14: 00007f2a3a025fa0 R15: 00007ffe81702ef8 [ 1070.470839][T30816] [ 1070.479483][T17350] bond3: (slave dummy0): failed to get link speed/duplex [ 1070.609316][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 1070.757504][T17354] bond3: (slave dummy0): failed to get link speed/duplex [ 1070.847511][T30818] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5543'. [ 1070.847541][T30818] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 1070.890228][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 1071.046810][T10021] bond3: (slave dummy0): failed to get link speed/duplex [ 1071.149242][T17354] bond3: (slave dummy0): failed to get link speed/duplex [ 1071.270098][T17353] bond3: (slave dummy0): failed to get link speed/duplex [ 1071.379611][T10022] bond3: (slave dummy0): failed to get link speed/duplex [ 1071.421422][T30824] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5547'. [ 1071.421533][T30824] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5547'. [ 1071.590218][T30835] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5549'. [ 1072.194147][T30847] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5551'. [ 1072.194168][T30847] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5551'. [ 1072.372236][T30853] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5554'. [ 1072.788670][T30849] v: left promiscuous mode [ 1072.794300][T30849] v: entered promiscuous mode [ 1072.857783][T30849] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1072.879184][T30849] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1072.884421][T30849] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1072.950939][T30869] netlink: 'syz.0.5557': attribute type 32 has an invalid length. [ 1072.961765][T30849] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1072.989704][T30849] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1072.991665][T30849] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1073.019486][T29325] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1073.037672][T30849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1073.047431][T30849] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1073.061282][T30849] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1073.064475][T29322] ±ÿ speed is unknown, defaulting to 1000 [ 1073.064508][T29322] sz1: Port: 1 Link DOWN [ 1073.064575][T29322] ±ÿ speed is unknown, defaulting to 1000 [ 1073.168739][T17353] bond2: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 1073.169024][T17353] bond2: (slave veth7): making interface the new active one [ 1073.210391][T17353] bond2: active interface up! [ 1073.233075][T30869] tc_dump_action: action bad kind [ 1073.683690][T30896] tc_dump_action: action bad kind [ 1073.701004][T30896] x_tables: ip_tables: ah match: only valid for protocol 51 [ 1074.019787][T29316] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1074.872388][T30930] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5569'. [ 1074.912607][T30930] netlink: 'syz.0.5569': attribute type 5 has an invalid length. [ 1075.519187][T17394] net_ratelimit: 20 callbacks suppressed [ 1075.519209][T17394] bond3: (slave dummy0): failed to get link speed/duplex [ 1075.924163][T30956] netlink: 'syz.2.5573': attribute type 1 has an invalid length. [ 1075.926715][T30959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5573'. [ 1076.525779][T30954] macvlan0: entered promiscuous mode [ 1076.526018][T30954] macvlan0: entered allmulticast mode [ 1076.526032][T30954] veth1_vlan: entered allmulticast mode [ 1076.814544][T30956] bond8: entered promiscuous mode [ 1076.823027][T30956] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1076.833783][T17394] bond3: (slave dummy0): failed to get link speed/duplex [ 1076.859670][T30959] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1076.869809][T30964] FAULT_INJECTION: forcing a failure. [ 1076.869809][T30964] name failslab, interval 1, probability 0, space 0, times 0 [ 1076.869839][T30964] CPU: 1 UID: 0 PID: 30964 Comm: syz.0.5574 Not tainted syzkaller #0 PREEMPT(full) [ 1076.869860][T30964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1076.869871][T30964] Call Trace: [ 1076.869879][T30964] [ 1076.869888][T30964] dump_stack_lvl+0xe8/0x150 [ 1076.869920][T30964] should_fail_ex+0x410/0x560 [ 1076.869945][T30964] ? __alloc_skb+0x1db/0x7a0 [ 1076.869968][T30964] should_failslab+0xa8/0x100 [ 1076.869992][T30964] ? __alloc_skb+0x1db/0x7a0 [ 1076.870012][T30964] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1076.870040][T30964] ? __alloc_skb+0x18d/0x7a0 [ 1076.870063][T30964] ? __alloc_skb+0x1db/0x7a0 [ 1076.870090][T30964] __alloc_skb+0x1db/0x7a0 [ 1076.870117][T30964] netlink_ack+0x136/0xb30 [ 1076.870144][T30964] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1076.870261][T30964] ? __copy_skb_header+0xa3/0x4a0 [ 1076.870298][T30964] netlink_rcv_skb+0x2a4/0x4a0 [ 1076.870336][T30964] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1076.870362][T30964] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1076.870403][T30964] ? netlink_deliver_tap+0x2e/0x1b0 [ 1076.870422][T30964] ? netlink_deliver_tap+0x2e/0x1b0 [ 1076.870446][T30964] netlink_unicast+0x7bd/0x940 [ 1076.870484][T30964] netlink_sendmsg+0x813/0xb40 [ 1076.870512][T30964] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1076.870540][T30964] ? apparmor_socket_sendmsg+0x98/0x360 [ 1076.870564][T30964] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1076.870582][T30964] sock_sendmsg_nosec+0x13a/0x180 [ 1076.870606][T30964] ____sys_sendmsg+0x54e/0x850 [ 1076.870638][T30964] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1076.870672][T30964] ? import_iovec+0x73/0xa0 [ 1076.870700][T30964] ___sys_sendmsg+0x2a5/0x360 [ 1076.870725][T30964] ? __lock_acquire+0x747/0x2de0 [ 1076.870749][T30964] ? __pfx____sys_sendmsg+0x10/0x10 [ 1076.870811][T30964] ? __fget_files+0x2a/0x420 [ 1076.870835][T30964] ? __fget_files+0x3a2/0x420 [ 1076.870870][T30964] __x64_sys_sendmsg+0x1b1/0x290 [ 1076.870899][T30964] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1076.870946][T30964] do_syscall_64+0x166/0x520 [ 1076.870971][T30964] ? trace_irq_disable+0x3b/0x140 [ 1076.870990][T30964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.871008][T30964] ? clear_bhb_loop+0x70/0xc0 [ 1076.871030][T30964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.871048][T30964] RIP: 0033:0x7fcfedf9e159 [ 1076.871066][T30964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1076.871082][T30964] RSP: 002b:00007fcfeef0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1076.871102][T30964] RAX: ffffffffffffffda RBX: 00007fcfee225fa0 RCX: 00007fcfedf9e159 [ 1076.871117][T30964] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1076.871128][T30964] RBP: 00007fcfeef0f090 R08: 0000000000000000 R09: 0000000000000000 [ 1076.871141][T30964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1076.871152][T30964] R13: 00007fcfee226038 R14: 00007fcfee225fa0 R15: 00007ffd9a046f48 [ 1076.871184][T30964] [ 1077.005967][T10021] bond3: (slave dummy0): failed to get link speed/duplex [ 1077.015341][T30973] syzkaller1: entered promiscuous mode [ 1077.015517][T30973] syzkaller1: entered allmulticast mode [ 1077.119709][T17354] bond3: (slave dummy0): failed to get link speed/duplex [ 1077.281359][T17394] bond3: (slave dummy0): failed to get link speed/duplex [ 1077.325042][T30972] tipc: Enabling of bearer rejected, already enabled [ 1077.342053][T30972] syzkaller0: entered promiscuous mode [ 1077.358833][T30972] netlink: 116 bytes leftover after parsing attributes in process `syz.4.5577'. [ 1077.391640][T17354] bond3: (slave dummy0): failed to get link speed/duplex [ 1077.441066][T30968] syzkaller1: left promiscuous mode [ 1077.441086][T30968] syzkaller1: left allmulticast mode [ 1077.499683][T20642] bond3: (slave dummy0): failed to get link speed/duplex [ 1077.739844][T17394] bond3: (slave dummy0): failed to get link speed/duplex [ 1077.861165][T30988] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5581'. [ 1078.558524][T17404] bond3: (slave dummy0): failed to get link speed/duplex [ 1078.679270][T17354] bond3: (slave dummy0): failed to get link speed/duplex [ 1079.016359][T31022] xt_LOG: level 115 >= 8 [ 1079.030745][T31025] netlink: 'syz.1.5591': attribute type 1 has an invalid length. [ 1079.072298][T31023] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5590'. [ 1079.276247][T31023] bond14: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 1079.312907][T31023] bond14 (unregistering): Released all slaves [ 1079.453341][T31038] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5596'. [ 1079.505593][T31040] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5596'. [ 1079.940756][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1080.540203][T17394] net_ratelimit: 13 callbacks suppressed [ 1080.540222][T17394] bond3: (slave dummy0): failed to get link speed/duplex [ 1080.648094][T17394] bond3: (slave dummy0): failed to get link speed/duplex [ 1080.655551][T31070] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1080.655563][T31070] IPv6: NLM_F_CREATE should be set when creating new route [ 1080.655589][T31070] IPv6: NLM_F_CREATE should be set when creating new route [ 1080.758813][T17394] bond3: (slave dummy0): failed to get link speed/duplex [ 1080.874913][T31073] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5602'. [ 1080.888096][T17354] bond3: (slave dummy0): failed to get link speed/duplex [ 1081.192040][T31078] gretap0: left promiscuous mode [ 1081.222185][T31094] netlink: 'syz.3.5610': attribute type 1 has an invalid length. [ 1081.222205][T31094] netlink: 248 bytes leftover after parsing attributes in process `syz.3.5610'. [ 1081.406885][T31079] netlink: 'syz.1.5603': attribute type 15 has an invalid length. [ 1081.406907][T31079] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5603'. [ 1081.722632][T31078] dummy0: left promiscuous mode [ 1082.857467][T31078] tipc: Resetting bearer [ 1082.987787][T31078] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1083.356008][T31078] geneve2: left promiscuous mode [ 1083.356033][T31078] geneve2: left allmulticast mode [ 1083.612860][T31078] ip6gretap1: left allmulticast mode [ 1083.653317][T31078] macsec1: left promiscuous mode [ 1083.693261][T31078] ip6gre1: left promiscuous mode [ 1083.693284][T31078] ip6gre1: left allmulticast mode [ 1084.068946][T31078] syzkaller0: left promiscuous mode [ 1084.068992][T31078] syzkaller0: left allmulticast mode [ 1084.138024][ T4982] udevd[4982]: worker [21813] /devices/virtual/block/nbd5 timeout; kill it [ 1084.138106][ T4982] udevd[4982]: seq 26201 '/devices/virtual/block/nbd5' killed [ 1084.138147][ T4982] udevd[4982]: worker [22247] /devices/virtual/block/nbd6 is taking a long time [ 1084.413009][T31078] sit1: left promiscuous mode [ 1084.536901][T31078] bond7: left allmulticast mode [ 1084.654817][T31078] bond8: left promiscuous mode [ 1084.765385][T17394] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1084.765418][T17394] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.765463][T17394] bond3: (slave dummy0): failed to get link speed/duplex [ 1084.769441][T17354] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1084.769469][T17354] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.769758][T17354] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1084.769782][T17354] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.769815][T17354] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1084.769838][T17354] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.854275][T31074] ±ÿ speed is unknown, defaulting to 1000 [ 1084.868114][T31092] veth1_vlan: entered allmulticast mode [ 1084.869798][T31092] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 1084.888663][T10021] bond3: (slave dummy0): failed to get link speed/duplex [ 1084.999641][T17353] bond3: (slave dummy0): failed to get link speed/duplex [ 1085.111654][T17353] bond3: (slave dummy0): failed to get link speed/duplex [ 1085.127401][T31102] netlink: 'syz.2.5611': attribute type 21 has an invalid length. [ 1085.127420][T31102] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5611'. [ 1085.127487][T31102] netlink: 'syz.2.5611': attribute type 4 has an invalid length. [ 1085.127500][T31102] netlink: 'syz.2.5611': attribute type 3 has an invalid length. [ 1085.127511][T31102] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5611'. [ 1085.221945][T10022] bond3: (slave dummy0): failed to get link speed/duplex [ 1085.553445][T17354] net_ratelimit: 2 callbacks suppressed [ 1085.553464][T17354] bond3: (slave dummy0): failed to get link speed/duplex [ 1085.661231][T10021] bond3: (slave dummy0): failed to get link speed/duplex [ 1085.745158][T31124] xt_hashlimit: size too large, truncated to 1048576 [ 1085.769802][T17354] bond3: (slave dummy0): failed to get link speed/duplex [ 1085.883038][T10022] bond3: (slave dummy0): failed to get link speed/duplex [ 1085.994210][T10022] bond3: (slave dummy0): failed to get link speed/duplex [ 1086.101817][T17353] bond3: (slave dummy0): failed to get link speed/duplex [ 1086.103484][T31134] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1086.209826][T10022] bond3: (slave dummy0): failed to get link speed/duplex [ 1086.321210][T17353] bond3: (slave dummy0): failed to get link speed/duplex [ 1086.344243][T31140] netlink: zone id is out of range [ 1086.344256][T31140] netlink: zone id is out of range [ 1086.367731][T31141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5623'. [ 1086.430758][T31141] gre1: entered promiscuous mode [ 1086.430780][T31141] gre1: entered allmulticast mode [ 1086.523638][T31142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5623'. [ 1087.357331][T31158] netlink: 260 bytes leftover after parsing attributes in process `syz.4.5627'. [ 1088.498987][T31180] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5634'. [ 1089.111642][T31188] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5637'. [ 1089.111668][T31188] netlink: 43 bytes leftover after parsing attributes in process `syz.2.5637'. [ 1089.111682][T31188] netlink: 'syz.2.5637': attribute type 6 has an invalid length. [ 1089.111695][T31188] netlink: 'syz.2.5637': attribute type 5 has an invalid length. [ 1089.111707][T31188] netlink: 43 bytes leftover after parsing attributes in process `syz.2.5637'. [ 1090.172134][T31222] xt_IDLETIMER: timeout value is too big [ 1090.324008][T31227] gretap2: entered promiscuous mode [ 1090.600080][T17353] net_ratelimit: 469 callbacks suppressed [ 1090.600103][T17353] bond3: (slave dummy0): failed to get link speed/duplex [ 1090.711068][T17394] bond3: (slave dummy0): failed to get link speed/duplex [ 1090.784273][T31236] netlink: 'syz.4.5648': attribute type 1 has an invalid length. [ 1090.925373][T31244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5648'. [ 1090.926264][T31248] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 1090.962729][T31248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5651'. [ 1091.067539][T31236] bond14: entered promiscuous mode [ 1091.077321][T31236] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1091.315553][T10021] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1091.459612][T31238] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1091.460635][T31238] bond14: (slave gre2): The slave device specified does not support setting the MAC address [ 1091.460655][T31238] bond14: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 1091.570987][T31238] bond14: (slave gre2): making interface the new active one [ 1091.571018][T31238] gre2: entered promiscuous mode [ 1091.573762][T31238] bond14: (slave gre2): Enslaving as an active interface with an up link [ 1091.626991][T31244] bond14 (unregistering): (slave gre2): Releasing backup interface [ 1091.627016][T31244] gre2: left promiscuous mode [ 1091.650652][T31244] bond14 (unregistering): Released all slaves [ 1091.692859][T20642] bond3: (slave dummy0): failed to get link speed/duplex [ 1091.811043][T31270] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5653'. [ 1091.815757][T31288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5655'. [ 1091.837810][T10022] bond3: (slave dummy0): failed to get link speed/duplex [ 1092.029299][T31258] syzkaller0: entered promiscuous mode [ 1092.029324][T31258] syzkaller0: entered allmulticast mode [ 1092.051912][T31294] netlink: 'syz.2.5656': attribute type 10 has an invalid length. [ 1092.232433][T31296] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5656'. [ 1092.279656][T31297] netlink: 'syz.1.5657': attribute type 1 has an invalid length. [ 1092.743322][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1092.744389][ T4928] block nbd6: Possible stuck request ffff888027815080: control (read@0,4096B). Runtime 180 seconds [ 1095.361752][ T4982] udevd[4982]: worker [22247] /devices/virtual/block/nbd6 timeout; kill it [ 1095.361846][ T4982] udevd[4982]: seq 30126 '/devices/virtual/block/nbd6' killed [ 1095.363195][ T2003] block nbd5: Possible stuck request ffff8880277d7000: control (read@0,1024B). Runtime 360 seconds [ 1095.363233][ T2003] block nbd5: Possible stuck request ffff8880277d71c0: control (read@1024,1024B). Runtime 360 seconds [ 1095.363258][ T2003] block nbd5: Possible stuck request ffff8880277d7380: control (read@2048,1024B). Runtime 360 seconds [ 1095.363281][ T2003] block nbd5: Possible stuck request ffff8880277d7540: control (read@3072,1024B). Runtime 360 seconds [ 1095.476122][T31294] team0 (unregistering): Port device team_slave_0 removed [ 1095.492468][T31294] team0 (unregistering): Port device team_slave_1 removed [ 1095.494323][T31294] team0 (unregistering): Port device netdevsim1 removed [ 1095.552009][T20642] bond3: (slave dummy0): failed to get link speed/duplex [ 1095.659809][T17394] bond3: (slave dummy0): failed to get link speed/duplex [ 1095.754176][T31308] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5659'. [ 1095.771008][T17394] bond3: (slave dummy0): failed to get link speed/duplex [ 1095.888239][T17394] bond3: (slave dummy0): failed to get link speed/duplex [ 1096.000318][T10021] bond3: (slave dummy0): failed to get link speed/duplex [ 1096.077159][T31325] IPVS: set_ctl: invalid protocol: 94 172.20.20.187:21 [ 1096.091682][T31325] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5666'. [ 1096.208100][T17350] bond3: (slave dummy0): failed to get link speed/duplex [ 1096.295230][T31333] netlink: 'syz.2.5667': attribute type 11 has an invalid length. [ 1096.311734][T31332] IPVS: stopping master sync thread 22106 ... [ 1096.339649][T17350] bond3: (slave dummy0): failed to get link speed/duplex [ 1096.451457][T17350] bond3: (slave dummy0): failed to get link speed/duplex [ 1096.509670][T31337] syzkaller1: entered promiscuous mode [ 1096.509691][T31337] syzkaller1: entered allmulticast mode [ 1096.536298][T31339] veth0: entered promiscuous mode [ 1096.545003][T31339] veth0: left promiscuous mode [ 1096.565598][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 1096.858216][T20642] bond3: (slave dummy0): failed to get link speed/duplex [ 1096.968434][T10022] bond3: (slave dummy0): failed to get link speed/duplex [ 1097.256051][T31353] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5674'. [ 1097.882142][T31359] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5675'. [ 1097.882169][T31359] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5675'. [ 1098.629812][T31375] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.671654][T31375] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.882028][T31375] tipc: Resetting bearer [ 1098.882286][T31375] tipc: Resetting bearer [ 1099.185748][T31392] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1099.220187][T31397] ip6t_rt: unknown flags 1F [ 1099.220713][T31402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5687'. [ 1099.591238][T31421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1099.623125][T31416] Cannot find del_set index 3 as target [ 1099.626061][T31420] netlink: 'syz.4.5690': attribute type 3 has an invalid length. [ 1099.626079][T31420] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5690'. [ 1099.693195][T31424] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5692'. [ 1099.837573][T31426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5694'. [ 1099.932908][T31426] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1100.505159][T31439] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5696'. [ 1100.752572][T10029] net_ratelimit: 20 callbacks suppressed [ 1100.752593][T10029] bond3: (slave dummy0): failed to get link speed/duplex [ 1100.898857][T17394] bond3: (slave dummy0): failed to get link speed/duplex [ 1101.008642][T17394] bond3: (slave dummy0): failed to get link speed/duplex [ 1101.121685][T10021] bond3: (slave dummy0): failed to get link speed/duplex [ 1101.211502][T31457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5702'. [ 1101.215148][T31458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5702'. [ 1101.242421][T17394] bond3: (slave dummy0): failed to get link speed/duplex [ 1101.348971][T10021] bond3: (slave dummy0): failed to get link speed/duplex [ 1101.458971][T17394] bond3: (slave dummy0): failed to get link speed/duplex [ 1101.578895][T20642] bond3: (slave dummy0): failed to get link speed/duplex [ 1101.693277][T17394] bond3: (slave dummy0): failed to get link speed/duplex [ 1101.801097][T17350] bond3: (slave dummy0): failed to get link speed/duplex [ 1101.817049][T31471] IPVS: Error joining to the multicast group [ 1102.229573][T31482] syzkaller0: entered promiscuous mode [ 1102.230375][T31482] syzkaller0: entered allmulticast mode [ 1102.291094][T31482] __nla_validate_parse: 1 callbacks suppressed [ 1102.291112][T31482] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5708'. [ 1103.080792][T31510] tipc: New replicast peer: 255.255.255.255 [ 1103.081764][T31510] tipc: Enabled bearer , priority 10 [ 1103.082739][T31510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5715'. [ 1103.086630][T31510] netlink: 'syz.2.5715': attribute type 1 has an invalid length. [ 1103.152457][T31510] bond10: entered promiscuous mode [ 1103.152874][T31510] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1103.177328][T31510] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5715'. [ 1103.275614][T31510] bond10: entered allmulticast mode [ 1103.377580][T31518] netlink: 165 bytes leftover after parsing attributes in process `syz.4.5717'. [ 1103.593985][T31510] bond10: (slave bridge6): making interface the new active one [ 1103.594009][T31510] bridge6: entered promiscuous mode [ 1103.594184][T31510] bridge6: entered allmulticast mode [ 1103.597711][T31510] bond10: (slave bridge6): Enslaving as an active interface with an up link [ 1103.921023][T31527] netlink: 27 bytes leftover after parsing attributes in process `syz.0.5719'. [ 1104.232452][T31539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5722'. [ 1104.986013][T31574] netlink: 'syz.2.5729': attribute type 1 has an invalid length. [ 1105.001751][T31560] xt_CT: No such helper "netbios-ns" [ 1105.238463][T31574] bond11: entered promiscuous mode [ 1105.238499][T31574] bond11: entered allmulticast mode [ 1105.239081][T31574] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1105.385698][T31564] tipc: Resetting bearer [ 1105.696378][T31589] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5733'. [ 1105.696408][T31589] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5733'. [ 1105.788202][T10021] net_ratelimit: 24 callbacks suppressed [ 1105.788221][T10021] bond3: (slave dummy0): failed to get link speed/duplex [ 1105.829769][T31595] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5736'. [ 1105.927733][T17354] bond3: (slave dummy0): failed to get link speed/duplex [ 1106.068473][T17354] bond3: (slave dummy0): failed to get link speed/duplex [ 1106.168499][T31599] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1106.189788][T10021] bond3: (slave dummy0): failed to get link speed/duplex [ 1106.298067][T17354] bond3: (slave dummy0): failed to get link speed/duplex [ 1106.409023][T10021] bond3: (slave dummy0): failed to get link speed/duplex [ 1106.529319][T10022] bond3: (slave dummy0): failed to get link speed/duplex [ 1106.647899][T10029] bond3: (slave dummy0): failed to get link speed/duplex [ 1106.750925][T31612] netlink: 'syz.2.5740': attribute type 1 has an invalid length. [ 1106.824821][T31617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5741'. [ 1106.894383][T31619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1106.920124][T31619] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1106.927203][T31619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1106.945301][T31619] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1106.946122][T31619] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1107.328000][T31612] bond12: entered promiscuous mode [ 1107.328417][T31612] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1107.329287][T31617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1107.432287][T31617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1107.563136][T31609] bridge7: entered promiscuous mode [ 1107.563158][T31609] bridge7: entered allmulticast mode [ 1107.636340][T31630] bond12: entered allmulticast mode [ 1107.748259][T10021] bond3: (slave dummy0): failed to get link speed/duplex [ 1107.855066][T31641] bond12: (slave bridge7): making interface the new active one [ 1107.855091][T31641] bridge7: entered promiscuous mode [ 1107.855267][T31641] bridge7: entered allmulticast mode [ 1107.884812][T31641] bond12: (slave bridge7): Enslaving as an active interface with an up link [ 1107.899453][T10022] bond3: (slave dummy0): failed to get link speed/duplex [ 1108.184463][T31649] __nla_validate_parse: 3 callbacks suppressed [ 1108.184481][T31649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5745'. [ 1108.210593][T31649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5745'. [ 1108.238269][T31648] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5744'. [ 1108.238289][T31648] netlink: 'syz.1.5744': attribute type 1 has an invalid length. [ 1108.658538][T31654] team0: Port device team_slave_1 removed [ 1108.659357][T31654] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1108.659379][T31654] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1108.712302][T31654] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1108.712324][T31654] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1108.978569][T31619] Bluetooth: hci1: command tx timeout [ 1109.092296][T31616] ±ÿ speed is unknown, defaulting to 1000 [ 1109.409374][T31684] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5752'. [ 1109.409396][T31684] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5752'. [ 1109.473211][T31687] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5752'. [ 1110.798898][T17353] net_ratelimit: 22 callbacks suppressed [ 1110.798918][T17353] bond3: (slave dummy0): failed to get link speed/duplex [ 1110.909265][T10021] bond3: (slave dummy0): failed to get link speed/duplex [ 1110.996066][T31720] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5764'. [ 1111.058556][T31619] Bluetooth: hci1: command tx timeout [ 1111.088035][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 1111.111540][T31725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5765'. [ 1111.168744][T31720] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5764'. [ 1111.206311][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 1111.348054][T17353] bond3: (slave dummy0): failed to get link speed/duplex [ 1111.409324][T31737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5768'. [ 1111.518552][T10022] bond3: (slave dummy0): failed to get link speed/duplex [ 1111.628109][T17353] bond3: (slave dummy0): failed to get link speed/duplex [ 1111.738238][T17350] bond3: (slave dummy0): failed to get link speed/duplex [ 1111.848439][T17353] bond3: (slave dummy0): failed to get link speed/duplex [ 1112.179902][T31616] bridge0: port 1(bridge_slave_0) entered blocking state [ 1112.181810][T31616] bridge0: port 1(bridge_slave_0) entered disabled state [ 1112.181939][T31616] bridge_slave_0: entered allmulticast mode [ 1112.185809][T31616] bridge_slave_0: entered promiscuous mode [ 1112.223170][T31616] bridge0: port 2(bridge_slave_1) entered blocking state [ 1112.224903][T31616] bridge0: port 2(bridge_slave_1) entered disabled state [ 1112.225049][T31616] bridge_slave_1: entered allmulticast mode [ 1112.253354][T31616] bridge_slave_1: entered promiscuous mode [ 1112.355195][T31616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1112.375660][T31616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1112.650823][T31616] team0: Port device team_slave_0 added [ 1112.673417][T31616] team0: Port device team_slave_1 added [ 1113.013818][T31616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1113.013836][T31616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1113.013859][T31616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1113.056419][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 1113.084007][T31616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1113.084023][T31616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1113.084046][T31616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1113.142116][T31619] Bluetooth: hci1: command tx timeout [ 1113.502632][T31793] macvtap2: entered promiscuous mode [ 1113.502653][T31793] batadv0: entered promiscuous mode [ 1113.503930][T31793] macvtap2: entered allmulticast mode [ 1113.503972][T31793] batadv0: entered allmulticast mode [ 1113.533126][T31793] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1113.594953][T31793] batadv0: left allmulticast mode [ 1113.595321][T31793] batadv0: left promiscuous mode [ 1113.973816][T31616] hsr_slave_0: entered promiscuous mode [ 1113.976267][T31616] hsr_slave_1: entered promiscuous mode [ 1113.979420][T31616] debugfs: 'hsr0' already exists in 'hsr' [ 1113.979445][T31616] Cannot create hsr debugfs directory [ 1114.245521][T31810] syzkaller0: entered promiscuous mode [ 1114.454651][T31823] __nla_validate_parse: 1 callbacks suppressed [ 1114.454670][T31823] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5786'. [ 1115.223506][T31619] Bluetooth: hci1: command tx timeout [ 1115.726493][T31616] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 1115.726530][T31616] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.851460][T10029] net_ratelimit: 2 callbacks suppressed [ 1115.851482][T10029] bond3: (slave dummy0): failed to get link speed/duplex [ 1115.959525][T17350] bond3: (slave dummy0): failed to get link speed/duplex [ 1116.135450][T31616] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 1116.135485][T31616] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.172996][T10021] bond3: (slave dummy0): failed to get link speed/duplex [ 1116.204075][T31877] netlink: 388 bytes leftover after parsing attributes in process `syz.4.5798'. [ 1116.396063][T31616] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 1116.396099][T31616] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.413707][T31885] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 1116.432616][T17350] bond3: (slave dummy0): failed to get link speed/duplex [ 1116.930842][T31616] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 1116.930877][T31616] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.002308][T31885] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1117.018601][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 1117.033685][T31894] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5801'. [ 1117.128229][T10022] bond3: (slave dummy0): failed to get link speed/duplex [ 1117.304530][T31897] vlan2: entered promiscuous mode [ 1117.304551][T31897] bridge0: entered promiscuous mode [ 1117.346188][T31899] openvswitch: netlink: Unexpected mask (mask=1010, allowed=10058) [ 1117.510106][T10021] bond3: (slave dummy0): failed to get link speed/duplex [ 1117.622551][T17353] bond3: (slave dummy0): failed to get link speed/duplex [ 1118.419369][T31616] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1118.440804][T31931] x_tables: duplicate underflow at hook 1 [ 1118.452191][T31616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1118.454938][T31616] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1118.484242][T31616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1118.487324][T31616] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1118.516301][T31616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1118.529989][T31616] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1118.582222][T31616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1118.723177][T31949] netlink: 'syz.3.5813': attribute type 1 has an invalid length. [ 1118.723199][T31949] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5813'. [ 1118.754710][T31933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5809'. [ 1119.365333][T31616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1119.412818][T31616] 8021q: adding VLAN 0 to HW filter on device team0 [ 1119.462308][T17353] bridge0: port 1(bridge_slave_0) entered blocking state [ 1119.462414][T17353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1119.484120][T17353] bridge0: port 2(bridge_slave_1) entered blocking state [ 1119.484223][T17353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1119.709024][T31963] netlink: 'syz.4.5816': attribute type 4 has an invalid length. [ 1120.026524][T31971] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5819'. [ 1120.101935][T31971] netlink: 'syz.1.5819': attribute type 1 has an invalid length. [ 1120.101983][T31971] netlink: 200 bytes leftover after parsing attributes in process `syz.1.5819'. [ 1120.341886][T31973] gretap2: entered promiscuous mode [ 1120.929276][T10029] net_ratelimit: 18 callbacks suppressed [ 1120.929297][T10029] bond3: (slave dummy0): failed to get link speed/duplex [ 1121.038243][T10029] bond3: (slave dummy0): failed to get link speed/duplex [ 1121.134913][T31998] xt_hashlimit: size too large, truncated to 1048576 [ 1121.171037][T10021] bond3: (slave dummy0): failed to get link speed/duplex [ 1121.278384][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 1121.280888][T32003] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5824'. [ 1121.384329][T32001] ip_tables: iptables: counters copy to user failed while replacing table [ 1121.389364][T17354] bond3: (slave dummy0): failed to get link speed/duplex [ 1121.501554][T17354] bond3: (slave dummy0): failed to get link speed/duplex [ 1121.609177][T32008] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5827'. [ 1121.615318][T17354] bond3: (slave dummy0): failed to get link speed/duplex [ 1121.815022][T31616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1121.890676][T10022] bond3: (slave dummy0): failed to get link speed/duplex [ 1121.927562][T32015] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5827'. [ 1122.019465][T10029] bond3: (slave dummy0): failed to get link speed/duplex [ 1122.053725][T31616] veth0_vlan: entered promiscuous mode [ 1122.115196][T31616] veth1_vlan: entered promiscuous mode [ 1122.163665][T32021] tap0: tun_chr_ioctl cmd 21731 [ 1122.230488][T31616] veth0_macvtap: entered promiscuous mode [ 1122.253280][T31616] veth1_macvtap: entered promiscuous mode [ 1122.342627][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1122.348535][T32021] tap0: tun_chr_ioctl cmd 1076925456 [ 1122.517137][T32033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5830'. [ 1122.700290][T31616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1122.804814][T31616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1122.823117][ T4928] block nbd6: Possible stuck request ffff888027815080: control (read@0,4096B). Runtime 210 seconds [ 1122.914097][T10029] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.938609][T10021] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.938786][T10021] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.938831][T10021] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.216245][T10021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1123.216267][T10021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1123.312298][T17354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1123.312319][T17354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1123.595977][T32055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5840'. [ 1123.596001][T32055] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5840'. [ 1123.639682][T32055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5840'. [ 1123.639705][T32055] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5840'. [ 1123.865455][T32065] geneve4: entered promiscuous mode [ 1124.147520][T32067] veth0_to_batadv: entered allmulticast mode [ 1124.221006][T32071] netlink: 'syz.0.5844': attribute type 19 has an invalid length. [ 1124.391635][T32076] syzkaller0: left promiscuous mode [ 1124.391657][T32076] syzkaller0: left allmulticast mode [ 1124.392112][T32076] tipc: Resetting bearer [ 1124.476816][T32071] batman_adv: batadv0: Adding interface: syzkaller0 [ 1124.476833][T32071] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1124.476862][T32071] batman_adv: batadv0: Interface activated: syzkaller0 [ 1124.559869][T32069] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1124.706176][T32069] batman_adv: batadv0: Removing interface: syzkaller0 [ 1125.379719][ T2003] block nbd5: Possible stuck request ffff8880277d7000: control (read@0,1024B). Runtime 390 seconds [ 1125.379760][ T2003] block nbd5: Possible stuck request ffff8880277d71c0: control (read@1024,1024B). Runtime 390 seconds [ 1125.379785][ T2003] block nbd5: Possible stuck request ffff8880277d7380: control (read@2048,1024B). Runtime 390 seconds [ 1125.379809][ T2003] block nbd5: Possible stuck request ffff8880277d7540: control (read@3072,1024B). Runtime 390 seconds [ 1125.767557][T32116] netlink: 'syz.2.5857': attribute type 1 has an invalid length. [ 1125.939100][T10021] net_ratelimit: 24 callbacks suppressed [ 1125.939122][T10021] bond3: (slave dummy0): failed to get link speed/duplex [ 1126.058597][T17354] bond3: (slave dummy0): failed to get link speed/duplex [ 1126.174884][T10021] bond3: (slave dummy0): failed to get link speed/duplex [ 1126.278540][T17353] bond3: (slave dummy0): failed to get link speed/duplex [ 1126.389319][T17354] bond3: (slave dummy0): failed to get link speed/duplex [ 1126.505687][T17354] bond3: (slave dummy0): failed to get link speed/duplex [ 1126.608440][T17354] bond3: (slave dummy0): failed to get link speed/duplex [ 1126.664015][T32132] veth0: entered promiscuous mode [ 1126.673930][T32131] veth0: left promiscuous mode [ 1126.721731][T17353] bond3: (slave dummy0): failed to get link speed/duplex [ 1126.837907][T17354] bond3: (slave dummy0): failed to get link speed/duplex [ 1126.948887][T10021] bond3: (slave dummy0): failed to get link speed/duplex [ 1127.835873][T32090] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1128.187359][T32143] __nla_validate_parse: 3 callbacks suppressed [ 1128.187378][T32143] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5866'. [ 1128.564815][T32162] netlink: 480 bytes leftover after parsing attributes in process `syz.0.5871'. [ 1128.564894][T32162] netlink: 480 bytes leftover after parsing attributes in process `syz.0.5871'. [ 1128.668652][T32164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5868'. [ 1129.182213][T32172] netlink: 'syz.4.5864': attribute type 1 has an invalid length. [ 1129.453590][T32144] gretap1: entered allmulticast mode [ 1129.572840][T32144] bond1: (slave gretap1): making interface the new active one [ 1129.594059][T32144] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1129.723723][T32191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5876'. [ 1129.884599][T32195] tipc: Started in network mode [ 1129.884629][T32195] tipc: Node identity ac14140f, cluster identity 4711 [ 1129.911367][T32195] tipc: New replicast peer: 255.255.255.255 [ 1129.927687][T32198] netlink: 'syz.1.5877': attribute type 1 has an invalid length. [ 1129.935196][T32195] tipc: Enabled bearer , priority 10 [ 1129.936396][T32197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5877'. [ 1130.099677][T32209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5878'. [ 1130.157193][T32195] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5877'. [ 1130.159782][T32198] bond21: entered promiscuous mode [ 1130.169492][T32198] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1130.327136][T32198] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5877'. [ 1130.416293][T32195] bond21: entered allmulticast mode [ 1130.446256][T32201] rdma_rxe: rxe_newlink: failed to add lo [ 1131.532579][T29316] tipc: Node number set to 2886997007 [ 1131.538929][T10021] net_ratelimit: 21 callbacks suppressed [ 1131.538969][T10021] bond3: (slave dummy0): failed to get link speed/duplex [ 1131.649447][T10029] bond3: (slave dummy0): failed to get link speed/duplex [ 1131.792281][T10029] bond3: (slave dummy0): failed to get link speed/duplex [ 1131.908568][T17354] bond3: (slave dummy0): failed to get link speed/duplex [ 1132.009985][T32265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5887'. [ 1132.035262][T10029] bond3: (slave dummy0): failed to get link speed/duplex [ 1132.156662][T20635] bond3: (slave dummy0): failed to get link speed/duplex [ 1132.261638][T17354] bond3: (slave dummy0): failed to get link speed/duplex [ 1132.281061][T32281] netlink: 'syz.3.5888': attribute type 83 has an invalid length. [ 1132.370564][T17354] bond3: (slave dummy0): failed to get link speed/duplex [ 1132.480537][T17353] bond3: (slave dummy0): failed to get link speed/duplex [ 1132.619910][T32293] x_tables: duplicate underflow at hook 2 [ 1132.707972][T10029] bond3: (slave dummy0): failed to get link speed/duplex [ 1132.854476][T32302] syzkaller0: entered promiscuous mode [ 1132.854498][T32302] syzkaller0: entered allmulticast mode [ 1132.888152][T32302] tcf_pedit_act: 7 callbacks suppressed [ 1132.888247][T32302] tc action pedit 'at' offset 5 out of bounds [ 1134.219267][T32358] ªªªªªª: renamed from vlan0 [ 1134.241348][T32360] __nla_validate_parse: 1 callbacks suppressed [ 1134.241366][T32360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5905'. [ 1134.241858][T32360] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5905'. [ 1134.296166][T32356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5904'. [ 1136.307535][T32423] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5916'. [ 1137.161244][T32401] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5913'. [ 1137.248112][T17354] net_ratelimit: 18 callbacks suppressed [ 1137.248132][T17354] bond3: (slave dummy0): failed to get link speed/duplex [ 1137.358549][T17395] bond3: (slave dummy0): failed to get link speed/duplex [ 1137.478551][T17354] bond3: (slave dummy0): failed to get link speed/duplex [ 1137.588995][T17354] bond3: (slave dummy0): failed to get link speed/duplex [ 1137.698509][T17354] bond3: (slave dummy0): failed to get link speed/duplex [ 1137.701159][T32458] netlink: 'syz.3.5923': attribute type 10 has an invalid length. [ 1137.702952][T32458] netlink: 'syz.3.5923': attribute type 10 has an invalid length. [ 1137.703918][T32456] netlink: 'syz.0.5924': attribute type 3 has an invalid length. [ 1137.704124][T32456] netlink: 'syz.0.5924': attribute type 3 has an invalid length. [ 1137.704295][T32456] netlink: 'syz.0.5924': attribute type 3 has an invalid length. [ 1137.704473][T32456] netlink: 'syz.0.5924': attribute type 3 has an invalid length. [ 1137.704642][T32456] netlink: 'syz.0.5924': attribute type 3 has an invalid length. [ 1137.704820][T32456] netlink: 'syz.0.5924': attribute type 3 has an invalid length. [ 1137.705015][T32456] netlink: 'syz.0.5924': attribute type 3 has an invalid length. [ 1137.705187][T32456] netlink: 'syz.0.5924': attribute type 3 has an invalid length. [ 1137.814870][T20642] bond3: (slave dummy0): failed to get link speed/duplex [ 1137.923517][T10029] bond3: (slave dummy0): failed to get link speed/duplex [ 1138.231504][T32465] bond22: option all_slaves_active: invalid value (3) [ 1138.249391][T32465] bond22 (unregistering): Released all slaves [ 1138.321581][T32478] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5925'. [ 1138.528361][T20642] bond3: (slave dummy0): failed to get link speed/duplex [ 1138.595188][T31619] block nbd7: Receive control failed (result -32) [ 1138.767736][T32477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1138.787962][T10029] bond3: (slave dummy0): failed to get link speed/duplex [ 1138.898993][T10029] bond3: (slave dummy0): failed to get link speed/duplex [ 1139.088689][T32498] syzkaller0: entered promiscuous mode [ 1139.088711][T32498] syzkaller0: entered allmulticast mode [ 1139.304451][T32511] netlink: 240 bytes leftover after parsing attributes in process `syz.1.5934'. [ 1139.625184][T32523] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5935'. [ 1140.572244][T32546] veth0: entered promiscuous mode [ 1140.615168][T32548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5938'. [ 1140.828519][T32548] bridge_slave_0: left allmulticast mode [ 1140.829934][T32548] bridge_slave_0: left promiscuous mode [ 1140.830811][T32548] bridge0: port 1(bridge_slave_0) entered disabled state [ 1141.041620][T32535] veth0: left promiscuous mode [ 1141.695232][T32581] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5946'. [ 1141.843287][T32588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5947'. [ 1141.923203][T32592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5948'. [ 1142.320936][T17353] net_ratelimit: 16 callbacks suppressed [ 1142.320957][T17353] bond3: (slave dummy0): failed to get link speed/duplex [ 1142.461338][T20644] bond3: (slave dummy0): failed to get link speed/duplex [ 1142.574582][T17353] bond3: (slave dummy0): failed to get link speed/duplex [ 1142.678394][T10022] bond3: (slave dummy0): failed to get link speed/duplex [ 1142.763512][T32620] netlink: 495 bytes leftover after parsing attributes in process `syz.0.5955'. [ 1142.794095][T17354] bond3: (slave dummy0): failed to get link speed/duplex [ 1142.898484][T17354] bond3: (slave dummy0): failed to get link speed/duplex [ 1143.011074][T17353] bond3: (slave dummy0): failed to get link speed/duplex [ 1143.176172][T20644] bond3: (slave dummy0): failed to get link speed/duplex [ 1143.278186][T20642] bond3: (slave dummy0): failed to get link speed/duplex [ 1143.284568][T32632] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5956'. [ 1143.465472][T32638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5959'. [ 1143.465592][T32638] openvswitch: netlink: Missing valid actions attribute. [ 1143.621483][T32638] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5959'. [ 1143.857090][T32644] sctp: [Deprecated]: syz.4.5961 (pid 32644) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1143.857090][T32644] Use struct sctp_sack_info instead [ 1144.546843][T32680] __nla_validate_parse: 4 callbacks suppressed [ 1144.546862][T32680] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5966'. [ 1144.546881][T32680] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5966'. [ 1144.906968][T32688] validate_nla: 62 callbacks suppressed [ 1144.906986][T32688] netlink: 'syz.4.5968': attribute type 10 has an invalid length. [ 1145.054562][T32690] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5968'. [ 1145.054594][T32690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5968'. [ 1145.055693][T32688] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1145.097357][T32688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5968'. [ 1146.565786][T32718] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5974'. [ 1147.358998][T17351] net_ratelimit: 27 callbacks suppressed [ 1147.359021][T17351] bond3: (slave dummy0): failed to get link speed/duplex [ 1147.468292][T20637] bond3: (slave dummy0): failed to get link speed/duplex [ 1147.581344][T17351] bond3: (slave dummy0): failed to get link speed/duplex [ 1147.688093][T17351] bond3: (slave dummy0): failed to get link speed/duplex [ 1147.760685][T32758] ip_tables: iptables: counters copy to user failed while replacing table [ 1147.808236][T17351] bond3: (slave dummy0): failed to get link speed/duplex [ 1147.827341][T32758] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5981'. [ 1147.991245][T32759] bond7: (slave bond0): Releasing backup interface [ 1148.036881][T32759] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1148.074332][T32759] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1148.104155][T20642] smbdirect: ib_dev[syz1] removed [ 1148.130030][T32759] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1148.162390][T32759] bond0 (unregistering): Released all slaves [ 1148.217558][T29322] infiniband syz1: ib_query_port failed (-19) [ 1148.218210][T10022] bond3: (slave dummy0): failed to get link speed/duplex [ 1148.270592][ T301] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5984'. [ 1148.330272][T20642] bond3: (slave dummy0): failed to get link speed/duplex [ 1148.451219][T20642] bond3: (slave dummy0): failed to get link speed/duplex [ 1148.669889][ T309] erspan1: entered allmulticast mode [ 1148.860860][ T5277] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1148.909841][T20642] bond3: (slave dummy0): failed to get link speed/duplex [ 1149.641596][ T344] netlink: 964 bytes leftover after parsing attributes in process `syz.1.5993'. [ 1149.658487][ T353] netlink: 'syz.3.5994': attribute type 2 has an invalid length. [ 1149.658508][ T353] netlink: 11575 bytes leftover after parsing attributes in process `syz.3.5994'. [ 1149.658528][ T353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5994'. [ 1149.753743][ T353] bridge9: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1149.817844][ T354] veth0: entered promiscuous mode [ 1149.972043][ T363] syzkaller0: entered promiscuous mode [ 1149.972068][ T363] syzkaller0: entered allmulticast mode [ 1149.973635][ T342] veth0: left promiscuous mode [ 1150.274136][ T372] netlink: 'syz.3.5998': attribute type 83 has an invalid length. [ 1150.283800][ T372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5998'. [ 1150.323370][ T376] xt_policy: output policy not valid in PREROUTING and INPUT [ 1150.451868][ T379] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6001'. [ 1151.488145][ T419] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6008'. [ 1151.505982][ T419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6008'. [ 1151.623960][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1152.429598][T10022] net_ratelimit: 22 callbacks suppressed [ 1152.429619][T10022] bond3: (slave dummy0): failed to get link speed/duplex [ 1152.466474][ T434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6013'. [ 1152.562843][T10022] bond3: (slave dummy0): failed to get link speed/duplex [ 1152.670072][T20644] bond3: (slave dummy0): failed to get link speed/duplex [ 1152.691326][ T439] netlink: 'syz.4.6011': attribute type 1 has an invalid length. [ 1152.691364][ T439] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1152.779771][T20642] bond3: (slave dummy0): failed to get link speed/duplex [ 1152.888236][T10022] bond3: (slave dummy0): failed to get link speed/duplex [ 1152.905713][ T4928] block nbd6: Possible stuck request ffff888027815080: control (read@0,4096B). Runtime 240 seconds [ 1153.000115][T10022] bond3: (slave dummy0): failed to get link speed/duplex [ 1153.108607][T20642] bond3: (slave dummy0): failed to get link speed/duplex [ 1153.344239][ T458] ip_tables: iptables: counters copy to user failed while replacing table [ 1153.357475][T17395] bond3: (slave dummy0): failed to get link speed/duplex [ 1153.369668][T17395] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1153.678622][ T478] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6020'. [ 1153.908971][ T484] syzkaller0: entered promiscuous mode [ 1153.908995][ T484] syzkaller0: entered allmulticast mode [ 1153.909387][ T484] tipc: Resetting bearer [ 1154.275366][ T502] sock: sock_timestamping_bind_phc: sock not bind to device [ 1155.347865][ T531] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6031'. [ 1155.411368][ T539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6034'. [ 1155.430297][ T538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1155.461036][ T2003] block nbd5: Possible stuck request ffff8880277d7000: control (read@0,1024B). Runtime 420 seconds [ 1155.461076][ T2003] block nbd5: Possible stuck request ffff8880277d71c0: control (read@1024,1024B). Runtime 420 seconds [ 1155.461100][ T2003] block nbd5: Possible stuck request ffff8880277d7380: control (read@2048,1024B). Runtime 420 seconds [ 1155.461125][ T2003] block nbd5: Possible stuck request ffff8880277d7540: control (read@3072,1024B). Runtime 420 seconds [ 1155.519382][ T531] netlink: 120 bytes leftover after parsing attributes in process `syz.4.6031'. [ 1155.632356][ T547] netlink: 4416 bytes leftover after parsing attributes in process `syz.3.6035'. [ 1155.635468][ T547] netlink: 4416 bytes leftover after parsing attributes in process `syz.3.6035'. [ 1156.877039][ T602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6041'. [ 1157.508112][T17353] net_ratelimit: 27 callbacks suppressed [ 1157.508133][T17353] bond3: (slave dummy0): failed to get link speed/duplex [ 1157.618815][T10022] bond3: (slave dummy0): failed to get link speed/duplex [ 1157.728088][T20642] bond3: (slave dummy0): failed to get link speed/duplex [ 1157.838131][T17351] bond3: (slave dummy0): failed to get link speed/duplex [ 1157.948443][T17353] bond3: (slave dummy0): failed to get link speed/duplex [ 1157.972492][ T633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6047'. [ 1157.975817][ T634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6047'. [ 1158.058822][T20642] bond3: (slave dummy0): failed to get link speed/duplex [ 1158.170927][T17394] bond3: (slave dummy0): failed to get link speed/duplex [ 1158.360633][T17394] bond3: (slave dummy0): failed to get link speed/duplex [ 1158.470144][T17353] bond3: (slave dummy0): failed to get link speed/duplex [ 1158.578977][T17394] bond3: (slave dummy0): failed to get link speed/duplex [ 1158.895819][ T656] batman_adv: batadv0: Adding interface: macvlan2 [ 1158.895838][ T656] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1158.895966][ T656] batman_adv: batadv0: Interface activated: macvlan2 [ 1158.973564][ T667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6055'. [ 1159.066221][ T670] netlink: 'syz.3.6053': attribute type 4 has an invalid length. [ 1159.149232][ T680] netlink: 'syz.4.6055': attribute type 8 has an invalid length. [ 1159.149251][ T680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6055'. [ 1160.187670][ T714] netlink: 'syz.1.6064': attribute type 15 has an invalid length. [ 1160.268618][ T705] bond0: Unable to set down delay as MII monitoring is disabled [ 1160.369137][ T705] bond0 (unregistering): Released all slaves [ 1162.559506][T17394] net_ratelimit: 27 callbacks suppressed [ 1162.559529][T17394] bond3: (slave dummy0): failed to get link speed/duplex [ 1162.668410][T17351] bond3: (slave dummy0): failed to get link speed/duplex [ 1162.778738][T17394] bond3: (slave dummy0): failed to get link speed/duplex [ 1162.888795][T17351] bond3: (slave dummy0): failed to get link speed/duplex [ 1162.998920][T17351] bond3: (slave dummy0): failed to get link speed/duplex [ 1163.108086][T17395] bond3: (slave dummy0): failed to get link speed/duplex [ 1163.220351][T17351] bond3: (slave dummy0): failed to get link speed/duplex [ 1163.382441][T17351] bond3: (slave dummy0): failed to get link speed/duplex [ 1163.493177][T17351] bond3: (slave dummy0): failed to get link speed/duplex [ 1163.599987][T17351] bond3: (slave dummy0): failed to get link speed/duplex [ 1167.587985][T17395] net_ratelimit: 35 callbacks suppressed [ 1167.588008][T17395] bond3: (slave dummy0): failed to get link speed/duplex [ 1167.698310][T17395] bond3: (slave dummy0): failed to get link speed/duplex [ 1167.818474][T17395] bond3: (slave dummy0): failed to get link speed/duplex [ 1167.928520][T20642] bond3: (slave dummy0): failed to get link speed/duplex [ 1168.038162][T20642] bond3: (slave dummy0): failed to get link speed/duplex [ 1168.148387][T17395] bond3: (slave dummy0): failed to get link speed/duplex [ 1168.260221][T17395] bond3: (slave dummy0): failed to get link speed/duplex [ 1168.368033][T20642] bond3: (slave dummy0): failed to get link speed/duplex [ 1168.478368][T17395] bond3: (slave dummy0): failed to get link speed/duplex [ 1168.588572][T17351] bond3: (slave dummy0): failed to get link speed/duplex [ 1172.099434][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1172.658616][T17395] net_ratelimit: 36 callbacks suppressed [ 1172.658638][T17395] bond3: (slave dummy0): failed to get link speed/duplex [ 1172.768040][T20642] bond3: (slave dummy0): failed to get link speed/duplex [ 1172.878467][T20637] bond3: (slave dummy0): failed to get link speed/duplex [ 1172.988051][T20637] bond3: (slave dummy0): failed to get link speed/duplex [ 1173.098059][T17395] bond3: (slave dummy0): failed to get link speed/duplex [ 1173.208324][T17394] bond3: (slave dummy0): failed to get link speed/duplex [ 1173.328575][T17394] bond3: (slave dummy0): failed to get link speed/duplex [ 1173.583030][T17395] bond3: (slave dummy0): failed to get link speed/duplex [ 1173.688585][T20637] bond3: (slave dummy0): failed to get link speed/duplex [ 1173.810344][T20637] bond3: (slave dummy0): failed to get link speed/duplex [ 1177.669088][T17351] net_ratelimit: 34 callbacks suppressed [ 1177.669111][T17351] bond3: (slave dummy0): failed to get link speed/duplex [ 1177.780896][T17351] bond3: (slave dummy0): failed to get link speed/duplex [ 1177.889437][T17394] bond3: (slave dummy0): failed to get link speed/duplex [ 1177.998823][T17394] bond3: (slave dummy0): failed to get link speed/duplex [ 1178.109225][T17351] bond3: (slave dummy0): failed to get link speed/duplex [ 1178.220423][T17394] bond3: (slave dummy0): failed to get link speed/duplex [ 1178.329032][T20642] bond3: (slave dummy0): failed to get link speed/duplex [ 1178.438836][T17351] bond3: (slave dummy0): failed to get link speed/duplex [ 1178.549613][T17394] bond3: (slave dummy0): failed to get link speed/duplex [ 1178.658997][T20642] bond3: (slave dummy0): failed to get link speed/duplex [ 1182.728948][T17394] net_ratelimit: 36 callbacks suppressed [ 1182.728971][T17394] bond3: (slave dummy0): failed to get link speed/duplex [ 1182.839232][T17394] bond3: (slave dummy0): failed to get link speed/duplex [ 1182.948966][T17394] bond3: (slave dummy0): failed to get link speed/duplex [ 1182.984589][ T4928] block nbd6: Possible stuck request ffff888027815080: control (read@0,4096B). Runtime 270 seconds [ 1183.059307][T20637] bond3: (slave dummy0): failed to get link speed/duplex [ 1183.169040][T20637] bond3: (slave dummy0): failed to get link speed/duplex [ 1183.279513][T17395] bond3: (slave dummy0): failed to get link speed/duplex [ 1183.389264][T20637] bond3: (slave dummy0): failed to get link speed/duplex [ 1183.498951][T20637] bond3: (slave dummy0): failed to get link speed/duplex [ 1183.608959][T17395] bond3: (slave dummy0): failed to get link speed/duplex [ 1183.719609][T17394] bond3: (slave dummy0): failed to get link speed/duplex [ 1184.704361][T17394] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1185.539022][ T2003] block nbd5: Possible stuck request ffff8880277d7000: control (read@0,1024B). Runtime 450 seconds [ 1185.539062][ T2003] block nbd5: Possible stuck request ffff8880277d71c0: control (read@1024,1024B). Runtime 450 seconds [ 1185.539087][ T2003] block nbd5: Possible stuck request ffff8880277d7380: control (read@2048,1024B). Runtime 450 seconds [ 1185.539111][ T2003] block nbd5: Possible stuck request ffff8880277d7540: control (read@3072,1024B). Runtime 450 seconds [ 1187.812023][T20642] net_ratelimit: 36 callbacks suppressed [ 1187.812046][T20642] bond3: (slave dummy0): failed to get link speed/duplex [ 1187.920152][T17395] bond3: (slave dummy0): failed to get link speed/duplex [ 1188.029427][T17351] bond3: (slave dummy0): failed to get link speed/duplex [ 1188.140564][T17395] bond3: (slave dummy0): failed to get link speed/duplex [ 1188.249052][T17395] bond3: (slave dummy0): failed to get link speed/duplex [ 1188.359739][T17395] bond3: (slave dummy0): failed to get link speed/duplex [ 1188.469281][T20642] bond3: (slave dummy0): failed to get link speed/duplex [ 1188.580764][T17394] bond3: (slave dummy0): failed to get link speed/duplex [ 1188.688977][T17394] bond3: (slave dummy0): failed to get link speed/duplex [ 1188.801060][T17395] bond3: (slave dummy0): failed to get link speed/duplex [ 1192.869965][T20642] net_ratelimit: 36 callbacks suppressed [ 1192.869988][T20642] bond3: (slave dummy0): failed to get link speed/duplex [ 1192.980137][T17394] bond3: (slave dummy0): failed to get link speed/duplex [ 1193.090301][T17394] bond3: (slave dummy0): failed to get link speed/duplex [ 1193.199170][T17394] bond3: (slave dummy0): failed to get link speed/duplex [ 1193.310394][T20642] bond3: (slave dummy0): failed to get link speed/duplex [ 1193.419033][T17395] bond3: (slave dummy0): failed to get link speed/duplex [ 1193.530136][T17395] bond3: (slave dummy0): failed to get link speed/duplex [ 1193.639444][T20637] bond3: (slave dummy0): failed to get link speed/duplex [ 1193.749936][T17395] bond3: (slave dummy0): failed to get link speed/duplex [ 1193.860276][T17395] bond3: (slave dummy0): failed to get link speed/duplex [ 1197.939710][T17351] net_ratelimit: 36 callbacks suppressed [ 1197.939732][T17351] bond3: (slave dummy0): failed to get link speed/duplex [ 1198.050228][T17394] bond3: (slave dummy0): failed to get link speed/duplex [ 1198.159010][T17351] bond3: (slave dummy0): failed to get link speed/duplex [ 1198.268814][T20637] bond3: (slave dummy0): failed to get link speed/duplex [ 1198.379360][T20637] bond3: (slave dummy0): failed to get link speed/duplex [ 1198.488842][T20637] bond3: (slave dummy0): failed to get link speed/duplex [ 1198.600031][T17351] bond3: (slave dummy0): failed to get link speed/duplex [ 1198.709100][T17351] bond3: (slave dummy0): failed to get link speed/duplex [ 1198.820211][T17351] bond3: (slave dummy0): failed to get link speed/duplex [ 1198.929151][T20642] bond3: (slave dummy0): failed to get link speed/duplex [ 1202.999817][T20637] net_ratelimit: 36 callbacks suppressed [ 1202.999842][T20637] bond3: (slave dummy0): failed to get link speed/duplex [ 1203.109626][T17394] bond3: (slave dummy0): failed to get link speed/duplex [ 1203.221402][T20637] bond3: (slave dummy0): failed to get link speed/duplex [ 1203.328998][T20637] bond3: (slave dummy0): failed to get link speed/duplex [ 1203.440182][T17351] bond3: (slave dummy0): failed to get link speed/duplex [ 1203.549204][T17394] bond3: (slave dummy0): failed to get link speed/duplex [ 1203.660055][T20637] bond3: (slave dummy0): failed to get link speed/duplex [ 1203.769107][T17351] bond3: (slave dummy0): failed to get link speed/duplex [ 1203.879929][T20642] bond3: (slave dummy0): failed to get link speed/duplex [ 1203.989332][T17351] bond3: (slave dummy0): failed to get link speed/duplex [ 1208.059857][T17351] net_ratelimit: 36 callbacks suppressed [ 1208.059881][T17351] bond3: (slave dummy0): failed to get link speed/duplex [ 1208.169248][T20642] bond3: (slave dummy0): failed to get link speed/duplex [ 1208.279957][T20642] bond3: (slave dummy0): failed to get link speed/duplex [ 1208.389187][T17351] bond3: (slave dummy0): failed to get link speed/duplex [ 1208.501129][T20642] bond3: (slave dummy0): failed to get link speed/duplex [ 1208.608862][T17351] bond3: (slave dummy0): failed to get link speed/duplex [ 1208.720393][T17351] bond3: (slave dummy0): failed to get link speed/duplex [ 1208.828843][T17351] bond3: (slave dummy0): failed to get link speed/duplex [ 1208.939953][T20637] bond3: (slave dummy0): failed to get link speed/duplex [ 1209.049617][T17351] bond3: (slave dummy0): failed to get link speed/duplex [ 1213.059273][ T4928] block nbd6: Possible stuck request ffff888027815080: control (read@0,4096B). Runtime 300 seconds [ 1213.211046][ T861] __nla_validate_parse: 1 callbacks suppressed [ 1213.211066][ T861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6068'. [ 1213.215281][T17395] net_ratelimit: 36 callbacks suppressed [ 1213.215298][T17395] bond3: (slave dummy0): failed to get link speed/duplex [ 1213.320584][T20637] bond3: (slave dummy0): failed to get link speed/duplex [ 1213.331684][ T863] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6067'. [ 1213.339103][ T863] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6067'. [ 1213.430745][T17351] bond3: (slave dummy0): failed to get link speed/duplex [ 1213.489788][ T865] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6066'. [ 1213.582852][ T872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6067'. [ 1213.660856][ T874] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6071'. [ 1213.660933][ T874] netlink: 'syz.2.6071': attribute type 7 has an invalid length. [ 1213.660947][ T874] netlink: 'syz.2.6071': attribute type 8 has an invalid length. [ 1213.660959][ T874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6071'. [ 1214.026885][ T888] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6072'. [ 1214.088389][ T890] SET target dimension over the limit! [ 1214.258799][T17353] bond3: (slave dummy0): failed to get link speed/duplex [ 1214.302606][ T888] ip6gre3: entered promiscuous mode [ 1214.302629][ T888] ip6gre3: entered allmulticast mode [ 1214.368293][T17351] bond3: (slave dummy0): failed to get link speed/duplex [ 1214.478505][T17394] bond3: (slave dummy0): failed to get link speed/duplex [ 1214.591169][T20637] bond3: (slave dummy0): failed to get link speed/duplex [ 1214.702819][T20642] bond3: (slave dummy0): failed to get link speed/duplex [ 1214.823188][T20637] bond3: (slave dummy0): failed to get link speed/duplex [ 1214.929712][T20642] bond3: (slave dummy0): failed to get link speed/duplex [ 1215.007397][ T909] Bluetooth: hci0: unsupported parameter 5161 [ 1215.007419][ T909] Bluetooth: hci0: unsupported parameter 8192 [ 1215.007431][ T909] Bluetooth: hci0: unsupported parameter 5161 [ 1215.007442][ T909] Bluetooth: hci0: unsupported parameter 8192 [ 1215.587193][ T941] netlink: 'syz.2.6081': attribute type 1 has an invalid length. [ 1215.619670][ T2003] block nbd5: Possible stuck request ffff8880277d7000: control (read@0,1024B). Runtime 480 seconds [ 1215.619709][ T2003] block nbd5: Possible stuck request ffff8880277d71c0: control (read@1024,1024B). Runtime 480 seconds [ 1215.619733][ T2003] block nbd5: Possible stuck request ffff8880277d7380: control (read@2048,1024B). Runtime 480 seconds [ 1215.619757][ T2003] block nbd5: Possible stuck request ffff8880277d7540: control (read@3072,1024B). Runtime 480 seconds [ 1215.620348][ T944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6081'. [ 1215.620474][ T899] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1215.693038][T17394] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1215.743176][ T956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6083'. [ 1216.004190][ T941] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1216.121621][ T936] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 1216.150105][ T936] bond13: (slave batadv4): making interface the new active one [ 1216.166422][ T936] bond13: (slave batadv4): Enslaving as an active interface with an up link [ 1216.312556][ T964] erspan0: entered promiscuous mode [ 1216.312683][ T964] macvlan2: entered allmulticast mode [ 1216.312698][ T964] erspan0: entered allmulticast mode [ 1218.363065][T10055] net_ratelimit: 18 callbacks suppressed [ 1218.363088][T10055] bond3: (slave dummy0): failed to get link speed/duplex [ 1218.468068][ T1048] bond3: (slave dummy0): failed to get link speed/duplex [ 1218.533886][ T1075] : renamed from bond0 [ 1218.579766][T10055] bond3: (slave dummy0): failed to get link speed/duplex [ 1218.698331][T17354] bond3: (slave dummy0): failed to get link speed/duplex [ 1218.806979][ T1093] __nla_validate_parse: 10 callbacks suppressed [ 1218.807000][ T1093] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6110'. [ 1218.819731][T17404] bond3: (slave dummy0): failed to get link speed/duplex [ 1218.833771][ T1093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6110'. [ 1218.919967][T17354] bond3: (slave dummy0): failed to get link speed/duplex [ 1219.029797][T17349] bond3: (slave dummy0): failed to get link speed/duplex [ 1219.138678][T17354] bond3: (slave dummy0): failed to get link speed/duplex [ 1219.249704][T10055] bond3: (slave dummy0): failed to get link speed/duplex [ 1219.361649][T10055] bond3: (slave dummy0): failed to get link speed/duplex [ 1219.641190][ T1110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6115'. [ 1219.768738][ T1110] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6115'. [ 1219.805139][ T1110] pimreg1: entered allmulticast mode [ 1219.882366][ T1114] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6117'. [ 1219.951200][T17354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1219.951222][T17354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1220.119979][ T5613] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1220.122867][ T5613] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1220.127368][ T5613] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1220.152532][ T5613] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1220.154773][ T5613] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1220.866641][T20637] smbdirect: ib_dev[s`z1] removed [ 1220.867497][T29325] infiniband s`z1: ib_query_port failed (-19) [ 1221.145103][ T1154] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6123'. [ 1222.063691][ T1123] ±ÿ speed is unknown, defaulting to 1000 [ 1222.258076][T31619] Bluetooth: hci4: command tx timeout [ 1222.387442][ T1192] netlink: 'syz.1.6132': attribute type 2 has an invalid length. [ 1222.387465][ T1192] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6132'. [ 1222.748323][ T1198] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.6134'. [ 1222.819836][ T1198] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.6134'. [ 1222.998376][ T1203] bridge0: port 1(bridge_slave_0) entered disabled state [ 1223.598010][T20644] net_ratelimit: 33 callbacks suppressed [ 1223.598031][T20644] bond3: (slave dummy0): failed to get link speed/duplex [ 1223.708345][ T1048] bond3: (slave dummy0): failed to get link speed/duplex [ 1223.761155][ T1213] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6137'. [ 1224.049326][ T1229] __nla_validate_parse: 4 callbacks suppressed [ 1224.049447][ T1229] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6138'. [ 1224.188106][ T1232] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6139'. [ 1224.309765][T20644] bond3: (slave dummy0): failed to get link speed/duplex [ 1224.357862][T31619] Bluetooth: hci4: command tx timeout [ 1224.418749][ T1048] bond3: (slave dummy0): failed to get link speed/duplex [ 1224.530498][T20637] bond3: (slave dummy0): failed to get link speed/duplex [ 1224.640617][T20644] bond3: (slave dummy0): failed to get link speed/duplex [ 1224.897494][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state [ 1224.926479][ T1123] bridge0: port 1(bridge_slave_0) entered disabled state [ 1224.926620][ T1123] bridge_slave_0: entered allmulticast mode [ 1224.966993][ T1123] bridge_slave_0: entered promiscuous mode [ 1224.990548][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.006105][ T1123] bridge0: port 2(bridge_slave_1) entered disabled state [ 1225.006246][ T1123] bridge_slave_1: entered allmulticast mode [ 1225.031203][ T1123] bridge_slave_1: entered promiscuous mode [ 1225.091032][ T1123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1225.094170][ T1123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1225.168663][ T1123] team0: Port device team_slave_0 added [ 1225.168858][ T1048] bond3: (slave dummy0): failed to get link speed/duplex [ 1225.244467][ T1123] team0: Port device team_slave_1 added [ 1225.336923][ T1263] openvswitch: netlink: EtherType 2 is less than min 600 [ 1225.411744][ T1263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6142'. [ 1225.494506][ T1123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1225.494523][ T1123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1225.494546][ T1123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1225.555267][T17404] bond3: (slave dummy0): failed to get link speed/duplex [ 1225.573327][ T1123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1225.573342][ T1123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1225.573363][ T1123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1225.736148][ T1123] hsr_slave_0: entered promiscuous mode [ 1225.749589][ T1123] hsr_slave_1: entered promiscuous mode [ 1225.750302][ T1123] debugfs: 'hsr0' already exists in 'hsr' [ 1225.750319][ T1123] Cannot create hsr debugfs directory [ 1226.064420][ T1276] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6148'. [ 1226.167987][T20637] bond3: (slave dummy0): failed to get link speed/duplex [ 1226.240255][ T1279] sctp: [Deprecated]: syz.0.6149 (pid 1279) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1226.240255][ T1279] Use struct sctp_sack_info instead [ 1226.418240][T31619] Bluetooth: hci4: command tx timeout [ 1226.434314][ T1123] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1226.434348][ T1123] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.434373][ T1123] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1226.469271][ T1290] xt_l2tp: v2 sid > 0xffff: 33554432 [ 1226.596470][ T1290] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6151'. [ 1226.761875][ T1123] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1226.761935][ T1123] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.761960][ T1123] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1227.123847][ T1304] netlink: 196 bytes leftover after parsing attributes in process `syz.3.6153'. [ 1227.325460][ T1123] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1227.325495][ T1123] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.325521][ T1123] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1227.642887][ T1298] ±ÿ speed is unknown, defaulting to 1000 [ 1227.709784][ T1123] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1227.709816][ T1123] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.738088][ T1123] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1227.979355][ T1325] netlink: 'syz.1.6157': attribute type 1 has an invalid length. [ 1228.084626][ T1325] 8021q: adding VLAN 0 to HW filter on device bond22 [ 1228.385496][ T1329] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6158'. [ 1228.499636][ T5613] Bluetooth: hci4: command tx timeout [ 1228.646400][ T1337] xt_hl: Unknown Hop Limit match mode: 4 [ 1228.841298][T20637] net_ratelimit: 9 callbacks suppressed [ 1228.841319][T20637] bond3: (slave dummy0): failed to get link speed/duplex [ 1229.068823][T20637] bond3: (slave dummy0): failed to get link speed/duplex [ 1229.268633][T20644] bond3: (slave dummy0): failed to get link speed/duplex [ 1229.380106][T17404] bond3: (slave dummy0): failed to get link speed/duplex [ 1229.411954][ T1123] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1229.465081][ T1351] netlink: 'syz.1.6162': attribute type 11 has an invalid length. [ 1229.465101][ T1351] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6162'. [ 1229.513328][ T1123] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1229.525764][T17404] bond3: (slave dummy0): failed to get link speed/duplex [ 1229.539754][ T1123] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1229.568483][ T1123] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1229.569480][ T1123] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1229.601421][ T1123] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1229.633944][ T1123] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1229.670775][ T1123] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1230.441087][T20638] bond3: (slave dummy0): failed to get link speed/duplex [ 1230.478304][ T1370] syzkaller0: left promiscuous mode [ 1230.478324][ T1370] syzkaller0: left allmulticast mode [ 1230.502086][ T5613] Bluetooth: hci1: command 0x0406 tx timeout [ 1230.677217][ T1378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6167'. [ 1230.679698][ T1123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1230.680827][T20637] bond3: (slave dummy0): failed to get link speed/duplex [ 1230.855644][ T1378] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1230.932932][ T1378] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1230.988119][T17349] bond3: (slave dummy0): failed to get link speed/duplex [ 1231.672666][T20637] bond3: (slave dummy0): failed to get link speed/duplex [ 1231.692425][ T1123] 8021q: adding VLAN 0 to HW filter on device team0 [ 1231.742631][ T1048] bridge0: port 1(bridge_slave_0) entered blocking state [ 1231.742737][ T1048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1231.817018][ T1048] bridge0: port 2(bridge_slave_1) entered blocking state [ 1231.817168][ T1048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1231.818146][ T1048] bond3: (slave dummy0): failed to get link speed/duplex [ 1232.087068][ T1401] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6170'. [ 1232.200745][ T1398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6170'. [ 1232.654496][ T1414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6176'. [ 1232.725978][ T1414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6176'. [ 1233.543492][ T32] INFO: task udevd:21813 blocked in I/O wait for more than 143 seconds. [ 1233.543519][ T32] Not tainted syzkaller #0 [ 1233.543530][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1233.543538][ T32] task:udevd state:D stack:25824 pid:21813 tgid:21813 ppid:4982 task_flags:0x400140 flags:0x00080802 [ 1233.543590][ T32] Call Trace: [ 1233.543598][ T32] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1233.543612][ T32] __schedule+0x17db/0x58f0 [ 1233.543729][ T32] ? __lock_acquire+0x747/0x2de0 [ 1233.543764][ T32] ? __pfx___schedule+0x10/0x10 [ 1233.543793][ T32] ? schedule+0x90/0x2b0 [ 1233.543819][ T32] schedule+0x164/0x2b0 [ 1233.543845][ T32] io_schedule+0x7f/0xd0 [ 1233.543871][ T32] folio_wait_bit_common+0x836/0xbc0 [ 1233.543943][ T32] ? filemap_get_entry+0xcd/0x3f0 [ 1233.543980][ T32] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1233.544000][ T32] ? filemap_read_folio+0x234/0x3a0 [ 1233.544025][ T32] ? __pfx_wake_page_function+0x10/0x10 [ 1233.544051][ T32] ? __filemap_get_folio_mpol+0x7c8/0x1000 [ 1233.544252][ T32] do_read_cache_folio+0x1ac/0x590 [ 1233.544283][ T32] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1233.544395][ T32] read_part_sector+0xb6/0x2b0 [ 1233.544447][ T32] adfspart_check_POWERTEC+0x9a/0x7a0 [ 1233.544472][ T32] ? rcu_is_watching+0x16/0xb0 [ 1233.544501][ T32] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 1233.544525][ T32] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 1233.544550][ T32] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1233.544570][ T32] ? bdev_disk_changed+0x56c/0x17a0 [ 1233.544591][ T32] ? bdev_disk_changed+0x56c/0x17a0 [ 1233.544620][ T32] bdev_disk_changed+0x851/0x17a0 [ 1233.544666][ T32] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1233.544699][ T32] blkdev_get_whole+0x372/0x510 [ 1233.544728][ T32] bdev_open+0x324/0xd70 [ 1233.544762][ T32] blkdev_open+0x461/0x600 [ 1233.544789][ T32] ? __pfx_blkdev_open+0x10/0x10 [ 1233.544813][ T32] do_dentry_open+0x816/0x1380 [ 1233.544850][ T32] vfs_open+0x3b/0x340 [ 1233.544871][ T32] ? path_openat+0x1428/0x1d60 [ 1233.544919][ T32] path_openat+0x1443/0x1d60 [ 1233.544961][ T32] do_file_open+0x23e/0x4a0 [ 1233.544988][ T32] ? __pfx_do_file_open+0x10/0x10 [ 1233.586352][ T32] ? _raw_spin_unlock+0x28/0x50 [ 1233.586450][ T32] ? alloc_fd+0x651/0x6c0 [ 1233.586489][ T32] do_sys_openat2+0x115/0x200 [ 1233.586519][ T32] ? __pfx_do_sys_openat2+0x10/0x10 [ 1233.586541][ T32] ? __x64_sys_epoll_wait+0x1d7/0x230 [ 1233.586588][ T32] __x64_sys_openat+0x138/0x170 [ 1233.586619][ T32] do_syscall_64+0x166/0x520 [ 1233.586646][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.586667][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1233.586692][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.586712][ T32] RIP: 0033:0x7fce212a7407 [ 1233.586731][ T32] RSP: 002b:00007fff111fbed0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1233.586752][ T32] RAX: ffffffffffffffda RBX: 00007fce219ea880 RCX: 00007fce212a7407 [ 1233.586768][ T32] RDX: 00000000000a0800 RSI: 00005592765fb5e0 RDI: ffffffffffffff9c [ 1233.586782][ T32] RBP: 00005592765fa910 R08: 0000000000000000 R09: 0000000000000000 [ 1233.586794][ T32] R10: 0000000000000000 R11: 0000000000000202 R12: 000055927660f830 [ 1233.586807][ T32] R13: 0000559276608190 R14: 0000000000000000 R15: 000055927660f830 [ 1233.586840][ T32] [ 1233.586951][ T32] [ 1233.586951][ T32] Showing all locks held in the system: [ 1233.586969][ T32] locks held by pr/ttyS0/16: 1, last CPU#0: [ 1233.587049][ T32] #0: ffffffff8ec36538 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 1233.587200][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 1233.587214][ T32] #0: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1233.587290][ T32] locks held by getty/5368: 2, on CPU#1: [ 1233.587330][ T32] #0: ffff8880364760a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 ** replaying previous printk message ** [ 1233.587330][ T32] #0: ffff8880364760a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1233.587469][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1233.587524][ T32] locks held by kworker/u8:59/10055: 3, on CPU#0: [ 1233.587537][ T32] #0: ffff8880323af140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1233.587601][ T32] #1: ffffc900024cfc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1233.587652][ T32] #2: ffffffff90254ee0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 1233.587744][ T32] locks held by kworker/u8:9/17349: 3, on CPU#0: [ 1233.587758][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1233.936113][ T32] #1: ffffc900033a7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1233.936159][ T32] #2: ffffffff90254ee0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1233.936276][ T32] locks held by kworker/u8:18/17394: 2, on CPU#1: [ 1233.936291][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1233.936342][ T32] #1: ffffc900020afc40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1233.936393][ T32] locks held by kworker/u8:20/17404: 3, last CPU#1: [ 1233.936406][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1233.936456][ T32] #1: ffffc90004ca7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1233.936507][ T32] #2: ffff88807d667258 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 1233.936653][ T32] locks held by kworker/u8:22/20637: 2, on CPU#1: [ 1233.936667][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1233.936717][ T32] #1: ffffc900045c7c40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1233.936767][ T32] locks held by kworker/u8:24/20638: 3, last CPU#1: [ 1233.936781][ T32] #0: ffff888030de3140 ((wq_completion)krds_cp_wq#10/0#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1233.936836][ T32] #1: ffffc900045d7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1233.936887][ T32] #2: ffff88805ae34980 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1233.937016][ T32] locks held by kworker/u8:34/20644: 2, last CPU#0: [ 1233.937030][ T32] #0: ffff888032d0c940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1233.937080][ T32] #1: ffffffff9acf30e0 (&obj_hash[i].lock){-.-.}-{2:2}, at: process_scheduled_works+0x97a/0x1630 [ 1233.937135][ T32] locks held by udevd/21813: 1, on CPU#0: [ 1233.937147][ T32] #0: ffff88802764a350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 1233.937192][ T32] locks held by udevd/22247: 1, on CPU#0: [ 1233.937202][ T32] #0: ffff88802764e350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 1233.937250][ T32] locks held by kworker/0:23/29322: 3, on CPU#0: [ 1233.937261][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1233.937308][ T32] #1: ffffc9000d5f7c40 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1233.937353][ T32] #2: ffffffff8ed62bb8 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1233.937398][ T32] locks held by kworker/0:26/29325: 3, last CPU#0: [ 1233.937410][ T32] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1233.937456][ T32] #1: ffff8880b8624408 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 1233.937499][ T32] #2: ffff888026590958 (_xmit_ETHER#2){+.-.}-{3:3}, at: virtnet_poll_tx+0x1e1/0x1720 [ 1233.937651][ T32] locks held by syz-executor/1123: 1, on CPU#0: [ 1233.937663][ T32] #0: ffffffff90254ee0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1233.937749][ T32] locks held by syz.0.6175/1408: 1, on CPU#0: [ 1233.937763][ T32] #0: ffff888058ef69c0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 1233.952629][ T32] locks held by syz.0.6175/1411: 1, last CPU#0: [ 1233.952644][ T32] #0: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: bpf_test_timer_enter+0xf9/0x260 [ 1233.952744][ T32] locks held by syz.0.6175/1420: 1, on CPU#0: [ 1233.952757][ T32] #0: ffffffff90254ee0 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 1233.952805][ T32] locks held by syz.0.6175/1423: 1, on CPU#0: [ 1233.952818][ T32] #0: ffffffff90254ee0 (rtnl_mutex){+.+.}-{4:4}, at: arp_ioctl+0x387/0x490 [ 1233.952889][ T32] locks held by syz.0.6175/1425: 1, on CPU#0: [ 1233.952902][ T32] #0: ffffffff90254ee0 (rtnl_mutex){+.+.}-{4:4}, at: arp_ioctl+0x387/0x490 [ 1233.952945][ T32] locks held by syz.0.6175/1428: 1, on CPU#0: [ 1233.952957][ T32] #0: ffffffff90254ee0 (rtnl_mutex){+.+.}-{4:4}, at: arp_ioctl+0x3a2/0x490 [ 1233.952998][ T32] locks held by syz.0.6175/1429: 2, on CPU#0: [ 1233.953011][ T32] #0: ffffffff90258780 (bpf_dispatcher_xdp.mutex){+.+.}-{4:4}, at: bpf_dispatcher_change_prog+0xc2/0xf20 [ 1233.953066][ T32] #1: ffffffff8ed62ce8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1233.953120][ T32] locks held by syz.2.6174/1409: 2, on CPU#0: [ 1233.953133][ T32] #0: ffffffff90254ee0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1233.953376][ T32] #1: ffffffff8ed62ce8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1233.953425][ T32] locks held by syz.3.6176/1412: 2, on CPU#0: [ 1233.953438][ T32] #0: ffff88803dc19f00 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 1233.953484][ T32] #1: ffffffff90254ee0 (rtnl_mutex){+.+.}-{4:4}, at: isotp_release+0x4c9/0xaa0 [ 1233.953573][ T32] locks held by syz.3.6176/1414: 1, on CPU#0: [ 1233.953586][ T32] #0: ffffffff90254ee0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 1233.953633][ T32] locks held by syz.1.6178/1427: 1, on CPU#0: [ 1233.953645][ T32] #0: ffffffff90254ee0 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150 [ 1233.953748][ T32] [ 1233.953753][ T32] ============================================= [ 1233.953753][ T32] [ 1233.953768][ T32] NMI backtrace for cpu 1 [ 1233.953781][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1233.953801][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1233.953812][ T32] Call Trace: [ 1233.953821][ T32] [ 1233.953830][ T32] dump_stack_lvl+0xe8/0x150 [ 1233.953858][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 1233.953907][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1233.953945][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1233.953968][ T32] sys_info+0x135/0x170 [ 1233.953985][ T32] watchdog+0xfd7/0x1030 [ 1233.954011][ T32] ? watchdog+0x1c7/0x1030 [ 1233.954037][ T32] kthread+0x38b/0x480 [ 1233.954056][ T32] ? __pfx_watchdog+0x10/0x10 [ 1233.954071][ T32] ? __pfx_kthread+0x10/0x10 [ 1233.954091][ T32] ret_from_fork+0x514/0xb70 [ 1233.954123][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1233.954141][ T32] ? __switch_to+0xc89/0x1420 [ 1233.954177][ T32] ? __pfx_kthread+0x10/0x10 [ 1233.954197][ T32] ret_from_fork_asm+0x1a/0x30 [ 1233.954239][ T32] [ 1233.954246][ T32] Sending NMI from CPU 1 to CPUs 0: [ 1233.954277][ C0] NMI backtrace for cpu 0 [ 1233.954290][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 1233.954312][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1233.954323][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 1233.954409][ C0] Code: e8 be 9a 54 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ff 9e c4 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 1233.954426][ C0] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 1233.954443][ C0] RAX: 1ffffffff35a8a00 RBX: 00000000000003fd RCX: 0000000000000000 [ 1233.954457][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 1233.954469][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1233.954483][ C0] R10: dffffc0000000000 R11: ffffffff857340f0 R12: dffffc0000000000 [ 1233.954498][ C0] R13: 0000000000000000 R14: ffffffff9ad45300 R15: 0000000000000000 [ 1233.954511][ C0] FS: 0000000000000000(0000) GS:ffff888124cc6000(0000) knlGS:0000000000000000 [ 1233.954532][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1233.954550][ C0] CR2: 00007f2da8cbdbc5 CR3: 000000007abfe000 CR4: 00000000003526f0 [ 1233.954567][ C0] Call Trace: [ 1233.954574][ C0] [ 1233.954584][ C0] wait_for_lsr+0x184/0x2f0 [ 1233.954614][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 1233.954647][ C0] serial8250_console_write+0xaa1/0x1200 [ 1233.954668][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 1233.954699][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 1233.954720][ C0] ? __schedule+0x17f1/0x58f0 [ 1233.954752][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 1233.954782][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 1233.954808][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 1233.954841][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 1233.954866][ C0] nbcon_kthread_func+0x679/0x880 [ 1233.954891][ C0] ? nbcon_kthread_func+0x163/0x880 [ 1233.954910][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1233.954935][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1233.954962][ C0] ? __kthread_parkme+0x199/0x1f0 [ 1233.954993][ C0] kthread+0x38b/0x480 [ 1233.955011][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1233.955030][ C0] ? __pfx_kthread+0x10/0x10 [ 1233.955049][ C0] ret_from_fork+0x514/0xb70 [ 1233.955068][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1233.955086][ C0] ? __switch_to+0xc89/0x1420 [ 1233.955112][ C0] ? __pfx_kthread+0x10/0x10 [ 1233.955131][ C0] ret_from_fork_asm+0x1a/0x30 [ 1233.955169][ C0] [ 1233.955280][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1234.921945][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1234.931046][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1234.941090][ T32] Call Trace: [ 1234.944365][ T32] [ 1234.947284][ T32] vpanic+0x56d/0xa60 [ 1234.951266][ T32] ? __pfx_vpanic+0x10/0x10 [ 1234.955763][ T32] ? console_srcu_read_unlock+0x3a/0x60 [ 1234.961303][ T32] panic+0xc5/0xd0 [ 1234.965022][ T32] ? __pfx_panic+0x10/0x10 [ 1234.969430][ T32] ? wq_watchdog_touch+0xf9/0x160 [ 1234.974447][ T32] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 1234.980593][ T32] watchdog+0x1030/0x1030 [ 1234.984922][ T32] ? watchdog+0x1c7/0x1030 [ 1234.989335][ T32] kthread+0x38b/0x480 [ 1234.993397][ T32] ? __pfx_watchdog+0x10/0x10 [ 1234.998056][ T32] ? __pfx_kthread+0x10/0x10 [ 1235.002633][ T32] ret_from_fork+0x514/0xb70 [ 1235.007210][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1235.012307][ T32] ? __switch_to+0xc89/0x1420 [ 1235.016976][ T32] ? __pfx_kthread+0x10/0x10 [ 1235.021556][ T32] ret_from_fork_asm+0x1a/0x30 [ 1235.026325][ T32] [ 1235.029605][ T32] Kernel Offset: disabled [ 1235.033919][ T32] Rebooting in 86400 seconds..