last executing test programs: 4.177526191s ago: executing program 2 (id=11920): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x7, 0x0, @loopback, 0x8}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="0bac0f0001ac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="00012bbd7000fb37cd92dbdf253100000008045d0000"], 0x1c}}, 0x10) 2.118019996s ago: executing program 2 (id=11932): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket(0x2, 0x80805, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$l2tp6(0xa, 0x2, 0x73) (async) shutdown(r1, 0x0) close(0x3) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (rerun: 32) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) (async) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000000)=""/4087, &(0x7f0000001040)=0xff7) 2.117726304s ago: executing program 2 (id=11933): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0xf0, 0x10, 0x1, 0x8000000, 0x0, {{@in6=@remote, @in6=@empty, 0x2, 0x0, 0x4e23, 0xd0, 0x0, 0x20, 0x0, 0x16}, {@in6=@local, 0xfffffffc, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0xffffffffffffffff, 0xfffffffffffffffe, 0x10000}, {0x401, 0x9, 0x70b}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x90}}, 0xf0}}, 0x24000058) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r4 = socket(0x10, 0x803, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000600000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r7 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r8, 0x25, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="46ff0f00000000001c00128009000100626f6e64000000000c000280050001"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 1.976797837s ago: executing program 2 (id=11938): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) sendmsg$NFC_CMD_GET_SE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x2, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4020}, 0x24048001) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r4, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f00000004c0)={&(0x7f0000000380), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000540)=0x0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40085) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000640)=[{{0x3, 0x1}, {0x4, 0x0, 0x1, 0x1}}, {{0x3, 0x1, 0x1}, {0x2, 0x0, 0x1}}, {{0x1}, {0x4, 0x0, 0x1}}, {{0x1, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1}}, {{0x1, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}}], 0x28) syz_80211_inject_frame(&(0x7f0000000680), &(0x7f00000006c0)=@mgmt_frame=@beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x3}, @device_b, @device_a, @initial, {0xe, 0x7}}, 0x0, @random=0x9, 0x5, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x7}, @void, @void, @void, @val={0x25, 0x3, {0x1, 0xa1, 0x7}}, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x20, 0x2, 0x3, 0x0, {0xa, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x0, 0x3a63bb4a, 0x8}}, @void, @void, @val={0x76, 0x6, {0x5, 0x5, 0x2f, 0xff}}, [{0xdd, 0x7d, "10f4b38787cafc2243b02f3e7542f93d8935fb9ccbebe45467a28817515e89900c92d35e1f3464229d6cd7265ac02fd9e4370195a525e7916ec04b4a0ec5ec36e928dbd87dd7be774598cefe33f6596af4a8136f1334a89d1ccfb268f37ce71a34b36bae064a96625c19d48dbcf8f9c446c374f09e0de10d514426fe42"}, {0xdd, 0x2e, "3dc1e1882f977ceecb772400285702c85e28bb4a608627cbedae7ba701271bc9367793008f657b817689a896e8f8"}]}, 0x10a) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000800)='cpuacct.usage_percpu\x00', 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(r8, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x44, 0xd, 0x6, 0x500, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8814}, 0x20000040) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000009c0), r2) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20, r9, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x400c000) setsockopt$RDS_CANCEL_SENT_TO(r8, 0x114, 0x1, &(0x7f0000000ac0)={0x2, 0x4e23, @multicast1}, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r2, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x28, r9, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x200}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4006001}, 0x40004) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x94, r4, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}]}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xfa}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xf7}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x11) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r8) sendmsg$NL80211_CMD_ASSOCIATE(r8, &(0x7f0000000f00)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e00)={0xbc, r10, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8e, 0x31}}}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xc0000000, {0x3, 0x7, 0x1, 0x7}}}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x2}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_SAE_PASSWORD={0x67, 0x115, "f3c434760e7c8f94f68a94164d50a4458b1996b5f17fefe8f73755d837f3fb3645c3398d00596887a67322f55c313099e006ab3fef6b8798df23b9729f921a5e3ab8f8ae0325a309d654b553a05e87ceeffb668b07e3398f3a9095b35b5a272d669a0a"}], @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x4004000) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000f80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x38, r10, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}], @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000011) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x20, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) sendmsg$AUDIT_TRIM(r8, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x10, 0x3f6, 0x2, 0x70bd25, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000001280)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r8, &(0x7f0000001380)={&(0x7f00000012c0)={0x1d, r12}, 0x10, &(0x7f0000001340)={&(0x7f0000001300)=@can={{0x3, 0x0, 0x1, 0x1}, 0x5, 0x1, 0x0, 0x0, "c0df9673269012b0"}, 0x10}, 0x1, 0x0, 0x0, 0x24000005}, 0x20000000) 1.781397616s ago: executing program 0 (id=11942): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x28}}, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000100)={0x0, 0x6, 0x100}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000500)={r2, 0x1, 0x5}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000002a80)=[@in={0x2, 0x4e22, @empty}], 0x10) 1.746812649s ago: executing program 3 (id=11943): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$kcm(0xa, 0x2, 0x0) shutdown(r2, 0x1) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e24, 0x0, @dev, 0xfffffeec}, 0x80, 0x0}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000040000701feffffff00000000017c0000040042800c00018006000600a00a0000100002800c001480070006"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) unshare(0x8010000) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$rds(r5, &(0x7f0000000380)={0x2, 0x4e24, @remote}, 0x10) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000a5f5fde31abc816a3c47e25a6d0cbe49ba8f9f869f35d1f710db6bfcbc49ec9533ac8127d4fda8164789e9e388271e9c36391f21fff45c1d1f7f6ce7ee817fc1c55153f68f7fc70c5f8a08ec61fefba9683096e59c0d4d7ccc0db823b9dc38069c2336e1630f16e835b390646094d13a13b8257228c34b6c665ca1b31f383239f4b6fe1ab766ca4c337128614dd8f3b5e70283111c2f17fa6a8e67b6453b8fc7f84f3ce1e943219521e80cf60612b3431725290910629c1614aa6e13b92374763bb2d2318166f12e1b0340defc05"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @sched_cls, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r7, r7}, &(0x7f0000000600), &(0x7f0000000640)=r6}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000080000000003500000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000940000000c62cdcd440000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r1) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r9, &(0x7f0000000900)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xb0, r10, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xe}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x404c8d3}, 0x4000044) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r11, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x4}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x9}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x2c}}, 0x20000040) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8015) 1.606310927s ago: executing program 3 (id=11945): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f00000000c0)={0x9, 0x7ff, 0x3, 0x7, 0x5, 0x9, 0x1}, 0xc) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r5], 0x44}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r9}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f00000000c0)={0x9, 0x7ff, 0x3, 0x7, 0x5, 0x9, 0x1}, 0xc) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r5], 0x44}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x4) (async) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r8, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r9}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) (async) 1.602328492s ago: executing program 0 (id=11946): unshare(0x22020400) r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2}, 0xc) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9380, 0x0) close(0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)=0x7) r2 = epoll_create1(0x0) unshare(0x2c020400) epoll_wait(r2, &(0x7f0000000100), 0x0, 0x401) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xa0000004}) 1.399987735s ago: executing program 4 (id=11947): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x2, @empty, 0x8ac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0xffff) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x40) 1.371710464s ago: executing program 3 (id=11948): r0 = socket$unix(0x1, 0x0, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)=0x7) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001200)={'gretap0\x00', &(0x7f00000010c0)={'syztnl0\x00', 0x0, 0x1, 0x1, 0x74c, 0x1ff, {{0x3b, 0x4, 0x0, 0x8, 0xec, 0x68, 0x0, 0x5, 0x29, 0x0, @rand_addr=0x64010101, @remote, {[@timestamp_prespec={0x44, 0x44, 0x16, 0x3, 0x6, [{@remote}, {@rand_addr=0x64010102, 0xffffffe0}, {@multicast2, 0x4}, {@rand_addr=0x64010102, 0x363b}, {@local, 0x9}, {@multicast2, 0xe}, {@broadcast, 0x7}, {@loopback, 0x5}]}, @lsrr={0x83, 0x1f, 0x69, [@private=0xa010100, @multicast1, @dev={0xac, 0x14, 0x14, 0x2e}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @loopback]}, @timestamp={0x44, 0x1c, 0xfe, 0x0, 0x3, [0x5, 0x2000000, 0x6, 0x4, 0x8, 0x6]}, @lsrr={0x83, 0xb, 0x2f, [@local, @private=0xa010101]}, @generic={0x88, 0x4, "99a4"}, @lsrr={0x83, 0xf, 0x4f, [@private=0xa010102, @broadcast, @rand_addr=0x64010101]}, @timestamp={0x44, 0x28, 0x2c, 0x0, 0x2, [0x6e, 0xbcca, 0x9, 0x3, 0x6, 0x3, 0x9, 0x3, 0x2]}, @cipso={0x86, 0x12, 0x2, [{0x0, 0xc, "27c7c4478f12371407b3"}]}]}}}}}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@fwd={0xe}, @decl_tag={0x7, 0x0, 0x0, 0x11, 0x2, 0xa}]}, {0x0, [0x61, 0x5f]}}, &(0x7f0000001280)=""/209, 0x38, 0xd1, 0x1, 0x6}, 0x28) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001440)={0x0, 0x2, 0x18}, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x1f, 0x5, &(0x7f0000000040)=@raw=[@cb_func={0x18, 0x7, 0x4, 0x0, 0x7}, @generic={0x1, 0x9, 0x4, 0x3, 0x87f}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x7}], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x1000, &(0x7f00000000c0)=""/4096, 0x40f00, 0x18, '\x00', r1, @fallback=0x1f, r2, 0x8, &(0x7f00000013c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000001400)={0x2, 0xa, 0x19, 0xffff}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000001480)=[r3], &(0x7f00000014c0)=[{0x1, 0x3, 0x8, 0x6}, {0x1, 0x3, 0x10, 0x9}, {0x5, 0x3, 0x4, 0x2}], 0x10, 0x8}, 0x94) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000015c0)=r3, 0x4) r5 = socket$packet(0x11, 0x3, 0x300) bind$packet(r5, &(0x7f0000001600)={0x11, 0x3, r1, 0x1, 0x7}, 0x14) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000001640)={0x1000, {{0xa, 0x4e23, 0x9, @remote, 0x56}}, 0x1, 0x1, [{{0xa, 0x4e24, 0x8001, @empty, 0x10001}}]}, 0x110) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000001780)) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001800), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x30, r6, 0x4, 0x70bd29, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x2e}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004c405}, 0x881) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000001900)={0x0, 0x1}, &(0x7f0000001940)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000001980)={r7, 0x7}, &(0x7f00000019c0)=0x8) ioctl$sock_SIOCBRDELBR(r5, 0x89a1, &(0x7f0000001a00)='veth0_to_hsr\x00') connect$pppoe(0xffffffffffffffff, &(0x7f0000001a40)={0x18, 0x0, {0x2, @empty, 'veth0_to_bond\x00'}}, 0x1e) getsockopt$sock_buf(r5, 0x1, 0x37, &(0x7f0000001a80)=""/81, &(0x7f0000001b00)=0x51) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001cc0)={0x6, 0x3, &(0x7f0000001b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000001b80)='GPL\x00', 0x7, 0x23, &(0x7f0000001bc0)=""/35, 0x41100, 0x2d, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000001c00)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001c40)=[{0x4, 0x2, 0x8, 0x2}, {0x5, 0x1, 0x9, 0x2}, {0x0, 0x3, 0x4, 0x5}, {0x2, 0x3, 0x3}, {0x5, 0x5, 0xd, 0x9}, {0x5, 0x2, 0x9, 0x1}, {0x1, 0x2}, {0x1, 0x5, 0x9, 0x3}], 0x10, 0x7f}, 0x94) ioctl$OCFS2_IOC_GROUP_ADD(r5, 0x40186f02, &(0x7f0000001d80)={0x1000, 0xfffffffa, 0x8, 0x9}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f0000001e00), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002100)={r8, 0xe0, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000001e80)=[0x0], &(0x7f0000001ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2a, &(0x7f0000001f00)=[{}, {}], 0x10, 0x10, &(0x7f0000001f40), &(0x7f0000001f80), 0x8, 0x6f, 0x8, 0x8, &(0x7f0000001fc0)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000002140)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000002200)={'syztnl1\x00', &(0x7f0000002180)={'gretap0\x00', r1, 0x7800, 0x1, 0x21a, 0xffffffff, {{0x17, 0x4, 0x1, 0x3f, 0x5c, 0x65, 0x0, 0xff, 0x4, 0x0, @empty, @multicast1, {[@rr={0x7, 0x23, 0x8a, [@multicast2, @dev={0xac, 0x14, 0x14, 0x3c}, @multicast1, @empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x23}, @multicast1, @multicast2]}, @end, @end, @timestamp={0x44, 0x1c, 0x4b, 0x0, 0x0, [0xfffffffc, 0x401, 0x6, 0x3, 0xffffffff, 0xd]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000002240)={'syz_tun\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000023c0)={'gretap0\x00', &(0x7f0000002280)={'erspan0\x00', r1, 0x8080, 0x700, 0x5, 0x10001, {{0x48, 0x4, 0x1, 0x1e, 0x120, 0x68, 0x0, 0x0, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xb, 0xc7, [@private=0xa010102, @private=0xa010100]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x2c, 0x6a, 0x3, 0x8, [{@multicast2, 0xe}, {@local, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffff0000}, {@private=0xa010101}, {@rand_addr=0x64010101, 0x1000}]}, @timestamp_prespec={0x44, 0x14, 0x89, 0x3, 0xe, [{@broadcast, 0xcb8eb2a}, {@multicast1, 0x3}]}, @timestamp_addr={0x44, 0x44, 0x85, 0x1, 0x1, [{@rand_addr=0x64010101, 0x6}, {@remote, 0xab09}, {@multicast2, 0x6}, {@private=0xa010102, 0xd13}, {@multicast1, 0x5}, {@empty, 0x4}, {@local, 0x5}, {@private=0xa010100}]}, @cipso={0x86, 0x3d, 0x3, [{0x2, 0x11, "56a27dbeb7502ea87c4d17c98ff8f9"}, {0x1, 0x8, "a9f1bd8fa563"}, {0x6, 0x2}, {0x5, 0x9, "910483a95dfa21"}, {0x5, 0x10, "f9b4dcccf30473800143db9e28f3"}, {0x1, 0x3, "a9"}]}, @lsrr={0x83, 0x23, 0x98, [@dev={0xac, 0x14, 0x14, 0x33}, @multicast1, @rand_addr=0x64010100, @broadcast, @local, @broadcast, @local, @rand_addr=0x64010102]}, @rr={0x7, 0xb, 0x4d, [@remote, @loopback]}, @timestamp_prespec={0x44, 0xc, 0x8a, 0x3, 0x9, [{@loopback, 0x2}]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(r9, &(0x7f0000002a80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002400)={0x620, r10, 0x300, 0x70bd28, 0x25dfdbfb, {}, [{{0x8, 0x1, r1}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r1}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x157}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r1}, {0x168, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r1}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6334}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd0a}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0xf4, 0x2, 0x0, 0x1, [{0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0xfff, 0x7b, 0xff, 0x2}, {0x0, 0xb4, 0x7, 0xfffffff8}, {0x5ae7, 0xa, 0x7f, 0x9}, {0x3, 0x4, 0x9, 0x4}, {0x8000, 0x0, 0x57, 0x4}, {0x5, 0xff, 0xc, 0xffffffff}, {0xffff, 0x8, 0x2, 0x8}, {0x3ff, 0x7, 0xd3}, {0xa4, 0x5, 0x9, 0x3ff}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r15}}, {0x8}}}]}}]}, 0x620}, 0x1, 0x0, 0x0, 0x4}, 0x1c850) syz_genetlink_get_family_id$smc(&(0x7f0000002ac0), r9) recvfrom(r9, &(0x7f0000002b00)=""/178, 0xb2, 0x120, &(0x7f0000002bc0)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}, 0x2}, 0x80) 1.29166253s ago: executing program 4 (id=11949): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x25, &(0x7f00000002c0), 0x8) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000500)={{r0, &(0x7f0000000040)='/dev/net/tun\x00', 0x20200, &(0x7f00000000c0)={@_ha_fsid={[0xebb]}, {0x10, 0xfff, 0x6, 0x1}}, 0x3ff, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x6}, 0x3, &(0x7f0000000480)=[{0x1, 0x5, &(0x7f0000000200)='}\x00', &(0x7f0000000240)="ad78ec544c9f0a1b825e8e6c7e0afa1e8cfd34c94cd2cf6e9c09f4405e03147d3cb4759aa266f91603ddbf31394b18d075070ae4ebf6320042686c5188971fac1ec225ace22958ba403328026a4ef9ea006561afbb47f93fac776b194a589344fc707034a86483c8372a03a9c633740651a5bf1d4ef4c21f31864cab5df78036babcf5570963f7e489eb65a41dc3220067", 0x91, 0x8}, {0x3, 0x1, &(0x7f0000000300)='pim6reg1\x00', &(0x7f0000000340)="f98925f1752537ee8d75c420f26b4d3da7f721f5f2b0e55709b7e4857d5db2eae443a03181b327cea29e58832df7fac23b05cd7f654b9e90179e5e49750858330885a0ec1c5a9b3e52a720af35233e2269bf1ac8621cb59960e4f45ad92db851f43e87ac279fdcf1d380c50f1f64268d0829a018f43b400930dea58876bcd38ffc7891ab18b7f9", 0x87, 0x12}, {0x1, 0x3, &(0x7f0000000400)='/dev/net/tun\x00', &(0x7f0000000440)="cf5886eb84", 0x5, 0x22}]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r2, &(0x7f0000002240)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000100)="f7b4d88cd69a0209b9eb7ac797881b8b391e1480dad3dca6af162fe3", 0x1c}, {&(0x7f00000005c0)="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", 0x467}, {&(0x7f0000000000)="dd379b8b71f6648eb919786616813330ede0090293c0", 0x16}, {&(0x7f0000001600)="3d71d9965b856b60a2700de0476c13211432d2f8f0479090eb7aa603369d5ddd95dcc299ade5edc5595525387991c032ab1dd6ccb9c97a34b33e48cfd45751c3738f1463a3938df65ee68276cdf2d8e54da3e6450ebf28dccc1f7932b0e18fed2babac94e24964824f1a354b86e75734dbc7f57d4d7c3ae9744849e826a9793258c15c34afa2a42df51d6072c88ab10961b31f87f54cda96f1c89491c6cf01c8fa6c950305d6f7292a2874f0cef164de3ad93b9232b5adf51be7d34aa6887e603b6a8cd7dcd6146805a818ddccdbb29a5758311b0893de0f7e40da37bba3dc93c4ecbba4f3a3d6b2fe19cb5835ed7080f59c", 0xf2}, {&(0x7f0000001700)="c9bc917bfb3a8cfd3e9d86f7f946c8e718a4c3377638c22e0097355b1aa5cac2c7b811372cb058af60e8a1c2ddad5ed9ee27", 0x32}, {&(0x7f0000001740)="f49618b8eb5c05f26730653fc1dfa654c5849fac165f7761db2fd07279a00fe6d17ccc3f6227132493e1421b47868f1eb1fd53da48479616bf887fad16d5b155e646982119689df65ea8f57fd32fc5296d4796964a8d447838ea685e788519cfd7373461b04e53f06b83d400a6a58a0d12ec2a1ea14d5185fb37c2ffd1fcdde1d8a1da75fd772c4228e0dbd63f08f699199e4e89fde8813ba38e219fc044a366d192490fa2983d07bf519cc599f24b639b00a1aec69092", 0xb7}, {&(0x7f0000001800)="af7905507c9d79f7173b1c24caf96e48fe530a1ba40bec5c20e688eeb45e5014bdb24d88318e99ee1b2cd41893040ad1a5220b8426275b5efc290e66808d89a376ffd28d7d655afff8c77297399d34ff112b06d769206253ac8d16bb91d08da6cd15ab7cdb979d8df5394f4a5bd5b17170d76059a9117a92670d32a098edbbef67ae7beaf69cfef96a66fb5c79690fafd00f3e025057591ce4f5ffaf4560", 0x9e}, {&(0x7f00000018c0)="e3452c85eb62e7d957c8f5aa1b44f1b4e2932cc4619fab8e852424dd67540e1762f7048c0c83dfdf0204eef138cb09f7ebdb9d1c561488836a622922d8d60a2a40598e232ce59f86a6bed9af76b9f10b5c88348dec4ff73bc341fa599a3c6ef441f38e10acd5638b53b72743b2fc20eb8910f619102f40c71803169160fc741ef67c344318fbbb4d84c5c3c8ef", 0x8d}, {&(0x7f0000001980)="a7697005d84076998d0f8320dbe6a7ba8a112d3f042739aec365bfb1a99136540e50cd589d16a2d55a3684f54228a3e8de04f1347898411d0e0c58af8cc06f89a7267716239acb92bf4744a19d9989149a97d0e2d3a8", 0x56}], 0x9}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8844) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$tun(r4, &(0x7f00000001c0)=ANY=[], 0xc2) ioctl$OCFS2_IOC_REFLINK(r4, 0x40186f04, &(0x7f0000000a80)={&(0x7f0000000580)='}\x00', &(0x7f0000000a40)='\':\x00', 0x910}) write$tun(r3, &(0x7f0000000140)={@void, @void, @eth={@empty, @random="34243c5dca95", @void, {@llc_tr={0x11, {@snap={0x1, 0xaa, "ee", "e832ea", 0x88a2}}}}}}, 0x16) 1.168509698s ago: executing program 0 (id=11950): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000280)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x1, 0x7}]}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000580)=ANY=[@ANYRES16=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x24}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) (async) socket(0x2, 0x80805, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r1, 0x0) (async) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000280)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x1, 0x7}]}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000580)=ANY=[@ANYRES16=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x24}, 0x94) (async) 1.156921907s ago: executing program 0 (id=11951): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = epoll_create(0x100) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r2, 0x107, 0x2, &(0x7f0000000480)="640880bb03b3a13511d32658e3670f20", 0x10) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB='!\x00%'], 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f00000002c0)) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000214000e00002f74214b34586d47423cddcb0000008000008276000000000000006e81a357601e3876", 0x2e}], 0x1}, 0x5) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r7, &(0x7f00000020c0)={0x90000000}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)='batadv_slave_1\x00', 0x10) close(0x3) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000340)={{r0, &(0x7f0000000000)='-$![\x00', 0x408000, &(0x7f0000000040)={@_ha_fsid={[0x0, 0x3]}, {0x7, 0x4004, 0x0, 0x7}}, 0x52, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x2}, 0x1, &(0x7f0000000300)=[{0x3, 0x441, &(0x7f0000000440)='\x00zs\xae\xe3>\x88\xe3\f\xef\x19\xf0\\\xbaIV @N\xb0\xa7Mf\x16/3\xb9\xcd\x89\x9e\xf2y\x1e\xdcl\xa9\xa7\xf9\xb5\xe6 1\f\xfb\x99O\xb6\xccg\xee*\x80@;g@:\xd4g\xdb\x02zL\x1cVj\x85\xa0lU.{*\x91]\x85\xf4\xd6nA\x1fY\x8ek\x92S\x80\x97a\xacQJ\xa3\xea\xe2jf\xe2\xba\x9c\x8f.~D\xd4\xdb_\x1e!\xfa\xaf\x9e\xe0\x10i\b4\xea\xce\x8f\x8e\x82B{w\xe5\xea=i4\x83F\xb8\xf9\x02\xf2#\a\x15\xe2\xb9\xf8\x13\xc6\f\x00:\xc6\xec[\x88k<\xf6', &(0x7f0000000400)="505555389e5ef080aa64c3e9bb5e7441a2c63c417daa8e63d901b64d96e590ee9cacb9", 0x23, 0x8}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) 1.085404003s ago: executing program 2 (id=11952): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r1, 0x81d4590d60ad9057, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff6}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000004}, 0x20008800) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xcc, r2, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x3}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000380)=@raw=[@generic={0xa, 0x2, 0x1, 0x1, 0xabeb}, @exit, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f00000003c0)='GPL\x00', 0x80, 0x68, &(0x7f0000000400)=""/104, 0x40f00, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x5, 0xa, 0x3, 0xb365}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000004c0)=[0x1, 0xffffffffffffffff, r0], &(0x7f0000000500)=[{0x1, 0x4, 0x6, 0x8}, {0x5, 0x2, 0x2}, {0x1, 0x5, 0xd, 0x1}, {0x5, 0x5, 0x4, 0x5}, {0x0, 0x5, 0xc, 0x2}, {0x5, 0x1, 0x2, 0xb}, {0x4, 0x2, 0x10, 0x2}], 0x10, 0x6}, 0x94) ioctl$OCFS2_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000640)={0x2, 0x0, 0x7, 0xfffffffeffffffff, 0x2, 0x5}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000680), 0x100800) sendto$packet(r4, &(0x7f00000006c0)="07c9026646b25201d13b52a5f02fa06bbd4cc3151b9a7ab64efdb518e16c1ce77ccfd5cede08812a37bc85cf741ef8e397deb7a0f29b5848b3", 0x39, 0x4004004, &(0x7f0000000700)={0x11, 0x5, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000740)={0x0, 0x7, 0x1, [0x9]}, &(0x7f0000000780)=0xa) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000007c0)={0xda, 0xfffa, 0x1, 0x8, 0x9, 0x6, 0x2, 0x1, r5}, 0x20) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000840), r0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r6, 0x20, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4005}, 0x8000) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000980), r0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000a00)={'syztnl1\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x10, 0x40, 0xeb5, 0x5, {{0x6, 0x4, 0x1, 0x8, 0x18, 0x66, 0x0, 0x5, 0x4, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1f}, {[@ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl2\x00', 0x0, 0x29, 0x9, 0x7f, 0x8f2, 0x62, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x7800, 0x7800, 0x10000, 0x9}}) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000bc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x68, r7, 0x20, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xe2e}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x44}, 0x20008001) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0xa0, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xd904}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xdf}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xf}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0xa0}}, 0x20000000) sendmmsg(r0, &(0x7f0000001140)=[{{&(0x7f0000000d80)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000e00)="68410098538b470c9f95089a396cc7c6bf66ac030203bbe3c529ed5131ca5b9f75d4fc92496e70981f534b673c177adff3d2fe8303bb0d131f912f8e53317ed55ed2f4d6b3822a97cc87e1653f7ee66d4585ac67793e81f27a06804931ce54866028", 0x62}], 0x1, &(0x7f0000000ec0)=[{0x78, 0x109, 0x9, "e84f87fcec5a196081a41677dc65828d106211c7476aa21006910d225ad56376739a909302a69278525211a68cd90fc305fbdb916eb356ab200e267dda2a322550dfe2abcadd215c27c6b9c32e661803eb051ffaeff42853865141c029e8237bf189cc9fe4ad437c"}, {0xa0, 0x119, 0x4a66, "254ce050f7d521d72f9d48ace28517506372a6581009570fdf61dea70e9837e6929ed757d41de81615a230b1a01351536dffbfe4400e420638df53cfcc760d76846d8a0f150103801f76d9f5621b6ba04a178427d227583b8c77b83d46aaa6c7bc562f895b2405ba6095e9e6c63731e6db4d23cccab0b5e2c734332fe47f87161f56da9827720b38bca6c130"}, {0x28, 0x117, 0x101, "a277253c2e299dfeb314885141640ef38fbf"}, {0xc8, 0x117, 0x3, "e58238b896259cc009b2b7df0b40816394356c4984222d4264779a1b87f96b296e90143d5f96a7040298d3a7c04dcad5e74c37a83d9a24ded7e7e43cd63f0bf4e249ee9294f353075d5d3ce7dd0c95870e2304f0dd3c9274f65d9c50603c86f9018f616102f801f3878ab08870fa8744d01e20406576098db65906b037cac51d2bab57bb2d197cdc89f2a24b44964178fd91a574ebab84d76c20b97a8be937f45b0e1b47e5ed14f71fe02f28217bb62be10a30"}, {0x38, 0x3a, 0x9, "94f70a72d2ded689c2fe2be75e8abc2ee8edb8d565ea21a98df399dce8828ad202"}, {0x30, 0x110, 0x1ff, "382adfdbfcfa1ac6ddb88c826af73ab22d580bc6341a81d0b74071651e8110"}], 0x270}}], 0x1, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000001440)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001400)={&(0x7f0000001200)={0x1cc, r10, 0x20, 0x70bd28, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x2c0}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3bfd}, {0x6, 0x16, 0xa21b}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x400}, {0x6, 0x16, 0x6}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x7}, {0x5}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x20000000}, 0x820) getsockname$packet(r4, &(0x7f0000001480), &(0x7f00000014c0)=0x14) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001540), r3) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000001680)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001580)={0x98, r11, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9a}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x885}, 0x810) r12 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_mreq(r12, 0x0, 0x20, &(0x7f00000016c0)={@dev={0xac, 0x14, 0x14, 0x30}, @rand_addr=0x64010100}, 0x8) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x14, r1, 0x100, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4040004) syz_genetlink_get_family_id$ipvs(&(0x7f0000001800), r0) sendmsg$AUDIT_TRIM(r4, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x10, 0x3f6, 0x0, 0x70bd28, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4000) 1.022658864s ago: executing program 0 (id=11953): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x6, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) write$cgroup_devices(r2, &(0x7f0000000200)=ANY=[], 0x6) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r2, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$IP_SET_OP_GET_BYINDEX(r4, 0x1, 0x53, 0x0, &(0x7f00000004c0)) 888.898089ms ago: executing program 1 (id=11954): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket(0x1d, 0x2, 0x6) r5 = epoll_create(0x9660) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000100)) close(r4) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0x2, 0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xca6e, 0x10, 0x6, 0x8, 0xfbee}, 0x20000001, 0xffffffff, 0x1, 0x5, 0xe, 0x4, 0xd, 0x18, 0x5, 0x2, {0x3, 0x8, 0xfffffffc, 0x0, 0x7, 0x200005}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0xd0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r3, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600602fb96d", 0xe}], 0x1}, 0x59) 845.366874ms ago: executing program 2 (id=11955): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x99e86f6a6737948, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1d, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x12, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000f008eade7fb36a31a9a19d6d99c0000850000007a00000095d386ac90140e3cff84638dd2a57c23bb1f8c1df15f9ee2d62fe81bf8606f7d05f52a92e5fe90e6132a554fd7ce0e31d8209f678f062f1f2b013aba2599585a94e5c5c5723d6e94269ee1d3d3e6c180", @ANYRES32=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00'}) r4 = socket$kcm(0x11, 0x2, 0x300) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, 0x0, 0x40000) sendmsg$rds(r5, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x29, 0x2, 0x0) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000300)=ANY=[], 0xfdef) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ppoll(&(0x7f00000001c0)=[{r9, 0x460}], 0x1, 0x0, 0x0, 0x0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$int_in(r10, 0x5421, &(0x7f0000000100)=0x9) socket$nl_route(0x10, 0x3, 0x0) connect$inet(r10, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) 730.567518ms ago: executing program 4 (id=11956): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000400000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000079000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000f8ffff850000000400000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) getgid() (async, rerun: 64) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async, rerun: 64) getgid() (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) (rerun: 32) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100fdfffffffdffffff1d00000008000300", @ANYRES32=r1, @ANYBLOB="38002f800c0002000201aaaaaaaaaaaa08000100040000000c00030108000100aaaa00"/48], 0x4c}}, 0x0) 614.495644ms ago: executing program 4 (id=11957): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000001600)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045000028006400000402907800000000e000000111009078e0000002000100010000000000005ad0131d1f83c6d8e967b8dc000011eb5e29"], 0x0) syz_open_procfs$namespace(0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) sendmmsg$unix(r1, &(0x7f00000023c0)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000380)='T', 0x1}], 0x1, 0x0, 0x0, 0x800}}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000000cc0)="58ad7743", 0x4}], 0x1, &(0x7f0000002200)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x20, 0x4000000}}], 0x2, 0x200440c0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000000100008018150000", @ANYRES32=r2, @ANYBLOB="0000000000020000b7080000000001007b8af8ff00000000bfa200000000000007020002f8ffffffb703000008000000b70400000000000085000000cb00000095000000000000006b10e757e2d70a631782fc86501a223ee85619b56be37379a67b6d40edb853eba9a492e480703518c2bad8df02c5da0364695ddcabf8f3b56bd6f631287f16c72abab901443383766b41ba96dd489261e3e49902e9622529da8f87b027b9bbc4012ba2fab9193b566b74ee51"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000008000000c4623a1800cdc0000000cf2bf8f832c99808ae8000000020000"], &(0x7f0000000f80)=""/4096, 0x26, 0x1000, 0x1, 0x80}, 0x1f) 589.193139ms ago: executing program 1 (id=11958): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'caif0\x00', @multicast}) (async) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r3, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000540), 0x0, 0xad, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0xce, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r4) sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="010029bd7000ffdbdf251f00000008000200", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000084}, 0x8042) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffd86, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x800, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0x2, 0xffff}, {0xfff2, 0x8}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x0, 0x3, 0x18f, 0x1, 0x6, 0x507, 0x2}}, {0x8, 0x2, [0x92, 0x7]}}]}, @TCA_RATE={0x6, 0x5, {0x9, 0xfc}}, @TCA_RATE={0x6, 0x5, {0x80, 0x8}}, @TCA_RATE={0x6, 0x5, {0x52, 0x7f}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40088c0}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'gretap0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc081) (async) sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x4) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xfff3}}}, 0x24}}, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r0, &(0x7f0000000380)='j', 0x1, 0x24024095, 0x0, 0x0) 479.723928ms ago: executing program 4 (id=11959): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x2, @empty, 0x8ac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0xffff) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x40) 431.454693ms ago: executing program 3 (id=11960): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) (async) sendmmsg$inet(r0, &(0x7f0000002000)=[{{&(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}], 0x1, 0x2400c040) (async) r1 = socket$igmp(0x2, 0x3, 0x2) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x700, 0x10, 0x5, 0x240, {{0x37, 0x4, 0x0, 0x4, 0xdc, 0x64, 0x0, 0x9, 0x4, 0x0, @multicast2, @local, {[@end, @cipso={0x86, 0xa, 0xfffffffffffffffc, [{0x5, 0x2}, {0x0, 0x2}]}, @ssrr={0x89, 0x1b, 0xa4, [@rand_addr=0x64010100, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @broadcast, @remote]}, @ssrr={0x89, 0xf, 0x84, [@local, @rand_addr=0x64010102, @broadcast]}, @end, @rr={0x7, 0x17, 0xd7, [@remote, @remote, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @end, @timestamp_prespec={0x44, 0x3c, 0x82, 0x3, 0xa, [{@multicast1, 0x4}, {@multicast1, 0x7}, {@remote, 0xfffffff8}, {@loopback, 0x11b}, {@local, 0xfff}, {@remote, 0x6dbf}, {@local, 0xffff}]}, @timestamp={0x44, 0x20, 0xda, 0x0, 0xf, [0x100, 0x7, 0x48000000, 0x1000, 0x1ff, 0x0, 0x10001]}, @timestamp_addr={0x44, 0x1c, 0x5e, 0x1, 0x1, [{@broadcast, 0x63}, {@broadcast, 0x6d}, {@loopback, 0xffffffff}]}]}}}}}) (rerun: 64) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_ifindex=r2, @loopback}, 0x10) 358.314311ms ago: executing program 1 (id=11961): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000000)=""/108, &(0x7f0000000080)=0x6c) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x6f3, 0x13, 0x6}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={r1, 0x40, 0x4, [0x5, 0x9, 0x2, 0x6]}, &(0x7f0000000180)=0x10) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f00000001c0)=r1, 0x4) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000240), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0}, &(0x7f00000003c0)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'erspan0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x8, 0x40, 0x7fffffff, 0x7, {{0x2a, 0x4, 0x0, 0x28, 0xa8, 0x68, 0x0, 0xb, 0x4, 0x0, @broadcast, @empty, {[@lsrr={0x83, 0x23, 0x18, [@empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x19}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x24, 0xed, 0x3, 0x1, [{@broadcast, 0x5}, {@loopback, 0xb7b}, {@multicast1, 0x714}, {@empty, 0x9}]}, @lsrr={0x83, 0xf, 0x87, [@rand_addr=0x64010101, @rand_addr=0x64010101, @loopback]}, @rr={0x7, 0x27, 0xd9, [@dev={0xac, 0x14, 0x14, 0x15}, @empty, @local, @multicast2, @multicast2, @dev={0xac, 0x14, 0x14, 0x12}, @private=0xa010102, @multicast1, @remote]}, @timestamp={0x44, 0xc, 0xfb, 0x0, 0x9, [0x1, 0x5]}, @end, @generic={0x86, 0x6, "3ae2871e"}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000600)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000640)={'gretap0\x00', 0x0, 0x7800, 0x7800, 0x4, 0xffffffdb, {{0x22, 0x4, 0x0, 0x0, 0x88, 0x65, 0x0, 0x9, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x8, 0xd5, 0x0, 0xe, [0xc540]}, @cipso={0x86, 0x5a, 0x1, [{0x1, 0x8, "c8086893dc7e"}, {0x6, 0x9, "02c4abb1ff0372"}, {0x1, 0xf, "3cf6fd30c07e7546eb38a6b2fa"}, {0x5, 0x10, "60ca6bbd5d4d7a1808e58c500820"}, {0x1, 0x4, "0fd9"}, {0x7, 0xc, "5f79f190de4e16bb1245"}, {0x7, 0x5, "a7a4cb"}, {0x0, 0xf, "a390dbf8641ed3bb1632e66bfb"}]}, @rr={0x7, 0xf, 0xc3, [@dev={0xac, 0x14, 0x14, 0x28}, @broadcast, @multicast1]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={0x1, 0x58, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000840)={'syzkaller0\x00', 0x0}) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000880)={@multicast2, @multicast2, 0x0}, &(0x7f00000008c0)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000e80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e40)={&(0x7f0000000900)={0x53c, r4, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0x4}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x6, 0x0, 0xf, 0x8b6}]}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xf5f3, 0xfb, 0x9f, 0x2}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x160000}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5a}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}]}}, {{0x8, 0x1, r16}, {0x1c0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3a4}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0xfff7, 0x73, 0x1}, {0x8, 0x7, 0x6, 0x280000}, {0x4, 0x2, 0xb, 0x5}]}}}]}}]}, 0x53c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) pipe(&(0x7f0000000ec0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_qrtr_TIOCINQ(r18, 0x541b, &(0x7f0000000f00)) (async) connect$unix(0xffffffffffffffff, &(0x7f0000000f40)=@abs={0x1, 0x0, 0x4e22}, 0x6e) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001280)={&(0x7f0000001040)={0x234, r4, 0x400, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r19}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r7}, {0x10c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe9a}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x100, 0xd1, 0x4}, {0x7, 0x7, 0x3, 0x6e5c89de}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r16}}}]}}, {{0x8, 0x1, r8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r16}}}]}}]}, 0x234}, 0x1, 0x0, 0x0, 0x4}, 0x24008004) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r17, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x8052000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x48, 0x140c, 0x200, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000010) (async) ioctl$sock_SIOCGPGRP(r17, 0x8904, &(0x7f0000001440)) sendmmsg$inet(r3, &(0x7f0000002a40)=[{{&(0x7f0000001480)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000002700)=[{&(0x7f00000014c0)="904e08a3a9a2ffd37618fcb81561e159cc26658a2c8e24603b3f2d2c0cebbc54df0a59201d82e95b186bed01ceb19b4682e645d8e7cfaf07b8e2cbe43c92e7accfa3fbe66d4527b7725f0865569d94f2e1675494f160869d06930c5054e440f5bfc3082de0e9946f082a3131803bf3d9a1218b0e26858cd1c4a2738fe7afe9efeee291a0d423dadce047f52104fcc57777767ba60afa0117a3640ff402a69f1527cbe55bfd9556eecda71852b2cc33d608c165428194755a8353924c4b93af3f319fdfb40ce0c9c73096", 0xca}, {&(0x7f00000015c0)="c2b2e2fa3018f620d0bd35199b50c0b5530b331d4ebc20e7826fa3a53edfe897f5332200a698ca64ea93923bc041e950efac2341495d48289c52f021571ec04dcf9d483b905f515c6b4593caaa4f97b5172c1458d98242643210fabaa9f7c95f29ee605f3ecc7e17021dfec23f6f2761b4c721bfe9d3585c865315167341468deb20c49ca38dc76cd770a265c457d4acf10644dc609264f972bb916ffd396751a249818b5ccec203ff965cb336df0896c77f3ae68a19d443e4110eb3e61ae724f9f76960d609d61e4769f22199819a724b3d1f13421d0624f794cbc8126a2cf13f56487ca5eee6676f7da7f3d9ff30b532318c7a047ba835bcc0543af14e", 0xfe}, {&(0x7f00000016c0)="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", 0x1000}, {&(0x7f00000026c0)="eb6d1f687a5dce7b1a2fda5b2f025e7555bfb0339bf3187a5e8bbacc330eb7", 0x1f}], 0x4, &(0x7f0000002740)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_retopts={{0x30, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x5c, 0x1, 0xe, [{@empty, 0x63}, {@local, 0x1ff}]}, @timestamp={0x44, 0xc, 0x38, 0x0, 0xa, [0x4, 0xffff]}]}}}, @ip_retopts={{0xf0, 0x0, 0x7, {[@cipso={0x86, 0x69, 0x2, [{0x6, 0xd, "b2c32ea22475ba3d202669"}, {0x7, 0x11, "3514362a6b8cf4440de9f5ac7c9f1d"}, {0x7, 0xf, "cb57616556ac1f5e8bdb4a3fba"}, {0x0, 0x3, "b1"}, {0x7, 0x8, "3da5f4b42b4d"}, {0x1, 0x9, "9ccaf65086eba8"}, {0x7, 0x2}, {0x2, 0xf, "58911972dbce3d73cf22d15846"}, {0x0, 0x11, "32c72ad5e1399ce03c41b152024a1a"}]}, @rr={0x7, 0x1b, 0xd8, [@multicast1, @multicast2, @rand_addr=0x64010100, @empty, @multicast1, @broadcast]}, @timestamp_prespec={0x44, 0x44, 0xef, 0x3, 0x2, [{@multicast2, 0x9}, {@private=0xa010102, 0xffffffff}, {@private=0xa010100, 0x8}, {@multicast1, 0x10001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@empty, 0x800}, {@broadcast, 0x1}]}, @cipso={0x86, 0x14, 0xffffffffffffffff, [{0x6, 0xe, "bf400c53e2bd996a93de2e31"}]}, @ra={0x94, 0x4}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fff}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffff7}}], 0x198}}, {{&(0x7f0000002900)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000002940), 0x0, &(0x7f0000002980)=[@ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x44, 0x4, "96ed"}, @lsrr={0x83, 0x7, 0x87, [@loopback]}, @generic={0x86, 0x5, "60ed0c"}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xd}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0xb0}}], 0x2, 0x200040a1) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r17, 0x84, 0x7b, &(0x7f0000002ac0)={r1, 0x10000}, &(0x7f0000002b00)=0x8) 320.342232ms ago: executing program 4 (id=11962): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x7}}, 0x14}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0xc, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @rand_addr=0x64010181}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000002c0)={r8, 0x2c, "66741295fd8bfb328418c65c6294e2de12bdfc4fb2fc57ff5cc0b5e2b18797578b2bccedc1a80f4e6af632b2"}, &(0x7f0000000340)=0x34) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000100)={r8}, &(0x7f0000000200)=0x8) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3010000}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000001600000000000000ebffffff91113f000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x4000052) connect$inet(r9, &(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10) sendmmsg$inet(r9, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) getsockopt$IP_SET_OP_GET_BYINDEX(r4, 0x1, 0x53, &(0x7f0000000380)={0x7, 0x7, 0x3}, &(0x7f00000003c0)=0x28) poll(&(0x7f0000000300)=[{r5, 0x80}], 0x1, 0x101) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000104fcffffffffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4319030000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB="25c3e74d633849f609b85bf0eed43ef57675f02a6693e73ac77777a04462d3e170cf00995c9c607722fd96f832985c3dd63e917c922668dfa5dbffedbe0c3e3bbaaddb165eb186614fbdd611b5f2b9467b0b9848838ed588f2be63849b59af64ac7c21b83b7cd2abd5a0abb26b4b36"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 304.882535ms ago: executing program 3 (id=11963): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r3, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000014c0)="d480dc19", 0x4}], 0x1}}], 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)={0x1c, r1, 0x701, 0x70bd2b, 0x0, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000c500000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 252.323221ms ago: executing program 1 (id=11964): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/21, 0x15}, {&(0x7f0000000740)=""/147, 0x93}, {&(0x7f0000000800)=""/162, 0xa2}, {&(0x7f00000008c0)=""/237, 0xed}, {&(0x7f0000000300)=""/87, 0x57}, {&(0x7f0000000a40)=""/227, 0xe3}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000000040)=""/128, 0x80}, {&(0x7f00000000c0)=""/19, 0x13}], 0x9}, 0xfffffffd}], 0x1, 0x2000, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) socket(0x2, 0x3, 0xef) (async) setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @private=0xa010100, @loopback}}}], 0x20}}], 0x1, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r0) 118.525113ms ago: executing program 1 (id=11965): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@bridge_dellink={0x24, 0x13, 0x5, 0x0, 0xfffffffb, {0x7, 0x0, 0x0, r1, 0x30a0}, [@IFLA_AF_SPEC={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 114.666477ms ago: executing program 3 (id=11966): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x25, &(0x7f00000002c0), 0x8) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000500)={{r0, &(0x7f0000000040)='/dev/net/tun\x00', 0x20200, &(0x7f00000000c0)={@_ha_fsid={[0xebb]}, {0x10, 0xfff, 0x6, 0x1}}, 0x3ff, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x6}, 0x3, &(0x7f0000000480)=[{0x1, 0x5, &(0x7f0000000200)='}\x00', &(0x7f0000000240)="ad78ec544c9f0a1b825e8e6c7e0afa1e8cfd34c94cd2cf6e9c09f4405e03147d3cb4759aa266f91603ddbf31394b18d075070ae4ebf6320042686c5188971fac1ec225ace22958ba403328026a4ef9ea006561afbb47f93fac776b194a589344fc707034a86483c8372a03a9c633740651a5bf1d4ef4c21f31864cab5df78036babcf5570963f7e489eb65a41dc3220067", 0x91, 0x8}, {0x3, 0x1, &(0x7f0000000300)='pim6reg1\x00', &(0x7f0000000340)="f98925f1752537ee8d75c420f26b4d3da7f721f5f2b0e55709b7e4857d5db2eae443a03181b327cea29e58832df7fac23b05cd7f654b9e90179e5e49750858330885a0ec1c5a9b3e52a720af35233e2269bf1ac8621cb59960e4f45ad92db851f43e87ac279fdcf1d380c50f1f64268d0829a018f43b400930dea58876bcd38ffc7891ab18b7f9", 0x87, 0x12}, {0x1, 0x3, &(0x7f0000000400)='/dev/net/tun\x00', &(0x7f0000000440)="cf5886eb84", 0x5, 0x22}]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r2, &(0x7f0000002240)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000100)="f7b4d88cd69a0209b9eb7ac797881b8b391e1480dad3dca6af162fe3", 0x1c}, {&(0x7f00000005c0)="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", 0x467}, {&(0x7f0000000000)="dd379b8b71f6648eb919786616813330ede0090293c0", 0x16}, {&(0x7f0000001600)="3d71d9965b856b60a2700de0476c13211432d2f8f0479090eb7aa603369d5ddd95dcc299ade5edc5595525387991c032ab1dd6ccb9c97a34b33e48cfd45751c3738f1463a3938df65ee68276cdf2d8e54da3e6450ebf28dccc1f7932b0e18fed2babac94e24964824f1a354b86e75734dbc7f57d4d7c3ae9744849e826a9793258c15c34afa2a42df51d6072c88ab10961b31f87f54cda96f1c89491c6cf01c8fa6c950305d6f7292a2874f0cef164de3ad93b9232b5adf51be7d34aa6887e603b6a8cd7dcd6146805a818ddccdbb29a5758311b0893de0f7e40da37bba3dc93c4ecbba4f3a3d6b2fe19cb5835ed7080f59c", 0xf2}, {&(0x7f0000001700)="c9bc917bfb3a8cfd3e9d86f7f946c8e718a4c3377638c22e0097355b1aa5cac2c7b811372cb058af60e8a1c2ddad5ed9ee27", 0x32}, {&(0x7f0000001740)="f49618b8eb5c05f26730653fc1dfa654c5849fac165f7761db2fd07279a00fe6d17ccc3f6227132493e1421b47868f1eb1fd53da48479616bf887fad16d5b155e646982119689df65ea8f57fd32fc5296d4796964a8d447838ea685e788519cfd7373461b04e53f06b83d400a6a58a0d12ec2a1ea14d5185fb37c2ffd1fcdde1d8a1da75fd772c4228e0dbd63f08f699199e4e89fde8813ba38e219fc044a366d192490fa2983d07bf519cc599f24b639b00a1aec69092", 0xb7}, {&(0x7f0000001800)="af7905507c9d79f7173b1c24caf96e48fe530a1ba40bec5c20e688eeb45e5014bdb24d88318e99ee1b2cd41893040ad1a5220b8426275b5efc290e66808d89a376ffd28d7d655afff8c77297399d34ff112b06d769206253ac8d16bb91d08da6cd15ab7cdb979d8df5394f4a5bd5b17170d76059a9117a92670d32a098edbbef67ae7beaf69cfef96a66fb5c79690fafd00f3e025057591ce4f5ffaf4560", 0x9e}, {&(0x7f00000018c0)="e3452c85eb62e7d957c8f5aa1b44f1b4e2932cc4619fab8e852424dd67540e1762f7048c0c83dfdf0204eef138cb09f7ebdb9d1c561488836a622922d8d60a2a40598e232ce59f86a6bed9af76b9f10b5c88348dec4ff73bc341fa599a3c6ef441f38e10acd5638b53b72743b2fc20eb8910f619102f40c71803169160fc741ef67c344318fbbb4d84c5c3c8ef", 0x8d}, {&(0x7f0000001980)="a7697005d84076998d0f8320dbe6a7ba8a112d3f042739aec365bfb1a99136540e50cd589d16a2d55a3684f54228a3e8de04f1347898411d0e0c58af8cc06f89a7267716239acb92bf4744a19d9989149a97d0e2d3a8", 0x56}], 0x9}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8844) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$tun(r4, &(0x7f00000001c0)=ANY=[], 0xc2) ioctl$OCFS2_IOC_REFLINK(r4, 0x40186f04, &(0x7f0000000a80)={&(0x7f0000000580)='}\x00', &(0x7f0000000a40)='\':\x00', 0x910}) write$tun(r3, &(0x7f0000000140)={@void, @void, @eth={@empty, @random="34243c5dca95", @void, {@llc_tr={0x11, {@snap={0x1, 0xaa, "ee", "e832ea", 0x88a2}}}}}}, 0x16) 74.918397ms ago: executing program 1 (id=11967): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000840)=@deltfilter={0x11dc, 0x2d, 0x400, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x3, 0x8}, {0x5}, {0xfff3, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x11a8, 0x2, [@TCA_U32_POLICE={0x4e0, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x10000000, 0x1, 0x9, 0x400, {0xfb, 0x1, 0x9, 0x4, 0x2, 0x7}, {0x37, 0x0, 0x1, 0x4, 0x7ff, 0x2}, 0x3, 0x5, 0x6a2}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x4, 0x7, 0x6, 0x8, {0x2, 0x0, 0x7fff, 0x80, 0x9, 0x392e}, {0x9, 0x2, 0x7, 0x40, 0x557, 0x1}, 0x3, 0x1, 0x1}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3800000000000}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000001}, @TCA_POLICE_RATE64={0xc, 0x8, 0xe2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3ff, 0x1, 0xbc2, 0x5, 0xffffffff, {0x1, 0x1, 0x8, 0xcd, 0x8, 0x7}, {0x1, 0x0, 0x7, 0x0, 0x3, 0x2}, 0x4, 0x2, 0x2}}, @TCA_POLICE_RATE={0x404, 0x2, [0xcb4, 0x810, 0x4, 0x3, 0x8, 0xa, 0x6, 0x101, 0x2, 0x8, 0xa, 0xffffffff, 0xb, 0x4, 0x8000, 0x6, 0x2, 0xe, 0x1, 0xfb6, 0x7, 0x5, 0x2, 0x5, 0xa, 0x9, 0x6, 0xe, 0xfffffffa, 0x7, 0x7ff, 0xffffffff, 0x6, 0xfffffffa, 0x9, 0x0, 0x6281, 0x3, 0x316, 0x8, 0x6, 0x3, 0x5, 0x5, 0x9, 0x930c, 0x77, 0x40, 0x7, 0x100, 0x7fffffff, 0x7, 0x5, 0x8b, 0xb, 0x0, 0x5, 0x8, 0xfffffffb, 0x9, 0xfff, 0xa, 0x6, 0xfffffffe, 0x5, 0x80, 0x5, 0x4, 0x80, 0x6, 0x6, 0x101, 0x10000, 0x4, 0x2, 0x9, 0x1, 0x65, 0x0, 0x3ff, 0x7fff, 0xb1, 0x2, 0xfffffe01, 0x5f03, 0x7, 0x1, 0xacd, 0xbcf, 0x200, 0x9, 0x4, 0x0, 0x67d, 0x10001, 0x1f6, 0x8, 0x4, 0x2, 0x667, 0x6, 0x0, 0x9, 0xffff, 0x4eb, 0x6, 0x1, 0x8, 0x40, 0xffff8000, 0x9, 0x80000001, 0x4, 0xb66, 0xfd0d, 0x9, 0x6, 0x9, 0x563, 0x3, 0x1, 0x0, 0x1, 0x80, 0x6, 0xddaa, 0x8000, 0x4, 0x6, 0x6, 0x9, 0x5, 0x165, 0x1, 0xff, 0x1000, 0x5, 0x7fff, 0x5, 0x9, 0x9, 0x101, 0x9, 0x3, 0x3, 0x9, 0x19, 0x2d0, 0x2334, 0xff, 0xffffff7f, 0x3, 0x7fff, 0xc2, 0x10, 0x81f, 0x6, 0xfffffffa, 0x5, 0x2, 0x5, 0x8, 0x9, 0x8, 0xfe0, 0x2, 0x5800, 0x30000, 0x8, 0x6, 0x3, 0x1, 0x0, 0x8001, 0x86, 0xc, 0x101, 0x4, 0x7, 0x6, 0x6, 0x7, 0x0, 0xac44, 0xa64b, 0xffff, 0x80, 0x8, 0x6, 0x6, 0x2, 0x400, 0x1000, 0x0, 0x33, 0x4, 0x0, 0x7, 0x6, 0x8, 0x9, 0x4, 0x0, 0x6, 0x1, 0x6, 0x5, 0x9, 0x0, 0x8, 0x4, 0x6, 0x5, 0x7, 0x8000, 0x62, 0x10001, 0x8, 0x31c00000, 0x3, 0x8, 0x5, 0x99e, 0x2, 0x8000, 0x7, 0x8, 0xfffff5da, 0x20000, 0x78, 0x7, 0x140000, 0x8, 0x10000, 0x3bf8, 0x7f, 0x2, 0x8000, 0x0, 0x80000000, 0x9, 0x0, 0xf48, 0x3, 0xfffffffe, 0x4, 0xffff8001, 0x1000, 0x9, 0x829f, 0x4, 0x5, 0x80000001, 0x9, 0x2e, 0x73d6]}]}, @TCA_U32_POLICE={0xc74, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x0, 0x10001, 0x8, 0x3, 0x6, 0x8, 0x2, 0x3563fcd2, 0xffffffdf, 0x8, 0x200000fc, 0x0, 0x1, 0x12, 0x7ff, 0x7ffffffe, 0x6, 0xffff, 0x8, 0x4, 0x4, 0x5, 0x4, 0x3, 0x48, 0x6, 0xf, 0x5, 0xfffffff9, 0x0, 0x3, 0xb, 0xfffffffa, 0xb, 0xdb, 0x4, 0x7fffffff, 0x8e, 0xc6, 0x6, 0x401, 0x9, 0x408001, 0x5, 0x7, 0x4, 0x8000, 0x6, 0x9e1, 0x2, 0x3ff, 0x4, 0x1, 0x8e4, 0x1, 0x5, 0x9, 0x231f, 0x2, 0x10000, 0x42b, 0xfffffff7, 0x7, 0x0, 0x4, 0x0, 0xd, 0x1000, 0x5, 0x6, 0x8000, 0x2, 0xff74, 0x400, 0x80000001, 0x7, 0xffffffc7, 0x9, 0xf, 0x2, 0x40, 0x5, 0x1, 0x5, 0x8, 0xa70, 0x1, 0x0, 0x3ff, 0x7fffffff, 0x6, 0xffffada1, 0x800, 0x1, 0x0, 0x4, 0x9, 0x0, 0x7, 0x8, 0xb, 0xfffffffa, 0x7, 0x6, 0x4, 0x80000001, 0x9, 0x8001, 0x6000, 0x3, 0x80000001, 0x4, 0xee97, 0x50000, 0x7, 0x75ba, 0xff, 0x1, 0xffffffff, 0x4, 0x50, 0x8, 0x80, 0x1, 0xa, 0x0, 0x0, 0x3, 0x1, 0x8000, 0xfffffff8, 0x9, 0xb, 0x8, 0xde, 0x4, 0x4, 0xfff, 0x2, 0x5, 0x9, 0x7, 0x3, 0x3, 0x7da98878, 0x670, 0x100, 0x40, 0x9, 0xa, 0x101, 0x2, 0x5, 0x4, 0x8, 0x7, 0x2, 0x80, 0x3, 0x7e, 0x0, 0x80000280, 0x9, 0x3ff, 0x200, 0x400, 0x9, 0xe9, 0x7f, 0x400, 0x9, 0xff, 0x400, 0x10, 0x400, 0x6, 0x1, 0x1000, 0x4, 0x10001, 0x5, 0x60fdccc8, 0x80, 0x6, 0x3, 0xfffffff9, 0xff, 0x0, 0x5, 0x8, 0x4f3, 0x7, 0x7f, 0x9, 0x2, 0x80000000, 0x6fe04425, 0xf6f, 0xff, 0x8000, 0xfffffff7, 0xd, 0x401, 0x8, 0xc, 0x100, 0x4, 0x6, 0x7, 0x0, 0x9, 0x4, 0x12b63eaa, 0x5, 0x3, 0x1, 0x8, 0x7, 0x8, 0xce, 0x80000001, 0x9, 0x4, 0x5, 0x0, 0x1, 0x70e, 0x6, 0xffffffff, 0x40, 0x7, 0x14, 0x10, 0x9, 0xffff4bf4, 0x80, 0xce58, 0x7, 0x800, 0xffffffff, 0x1000, 0x3, 0x2, 0x1, 0xa9, 0xffffffff, 0x1, 0xbfe2, 0x7f, 0x40, 0x0, 0x1, 0x0, 0x2, 0x80]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0xf2b, 0x1, 0xffffffff, 0xbd, 0x3, {0x6, 0x1, 0x400, 0xb, 0x4, 0x7f}, {0xb, 0x0, 0x3, 0x3, 0x5, 0x9}, 0x9, 0x7fff0000, 0x6}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8bfa, 0x8, 0x1, 0xb9, 0x6, 0x8e, 0x0, 0x401, 0x2, 0x2, 0x3, 0x2, 0xd, 0x6, 0x0, 0x8, 0x7fff, 0x32, 0x6, 0x3, 0x7, 0x5, 0x6, 0x4, 0x6, 0xffffffff, 0x6, 0x14, 0x0, 0x475f121f, 0x40, 0xd4fe, 0x80000001, 0x3, 0x2, 0x2, 0x8000000, 0xf4a8, 0x1, 0x7168, 0x7, 0x5, 0x3, 0x7ff, 0x63a, 0x538, 0xbed6, 0x26, 0xfffffffa, 0x8, 0x9, 0x0, 0x5ff2, 0x7c, 0xfff, 0x7, 0x4, 0x1ff, 0x200, 0x4, 0x6, 0x5, 0x0, 0x400000, 0xfffffffc, 0x2, 0xfffffff9, 0x0, 0x383e, 0x9, 0x4f3, 0xfdc, 0x9, 0x6, 0x7, 0x8, 0x6, 0xc, 0x8, 0x9, 0x7, 0x3, 0x5e3, 0x1, 0x40, 0x7, 0x46fa, 0x5, 0xe4b, 0x4f, 0x9, 0x100, 0x4, 0xb702, 0x2, 0x7, 0x5, 0x26b, 0x101, 0x800, 0x4, 0x1ff, 0x1, 0x6, 0x3ff, 0x9, 0x2, 0x5, 0x9, 0x9, 0x0, 0x7, 0x3, 0x7fff, 0x4, 0x7b, 0x3ff, 0xfffffffd, 0x8, 0x9, 0x0, 0x3, 0x9, 0x7, 0x5, 0x7, 0x5, 0x7, 0x0, 0x8, 0x7, 0x5, 0x2, 0x1, 0x1, 0x2, 0x2, 0x10001, 0x1, 0x383, 0x9, 0x3, 0x40, 0x1000, 0x92f0, 0x6, 0x200, 0x28e5df78, 0x7, 0x7fff, 0x3d0, 0x1, 0x8, 0x3, 0xfffffffe, 0xfffffffc, 0x5, 0x6, 0x1, 0x401, 0x1ff, 0x800, 0xf4, 0x5, 0x3, 0x51, 0xc81, 0x9, 0x2, 0xf, 0x3, 0x2, 0x1, 0xf5, 0x8, 0x47, 0x9, 0x0, 0x4, 0x5, 0x4, 0x7, 0x800, 0x6d2f, 0x7, 0x9, 0x792f7c97, 0xffffffff, 0xaa2, 0xd1e0, 0xcc, 0x10000, 0x5, 0x1, 0xec65, 0x7, 0xad, 0x0, 0x100, 0x3, 0x8, 0xc, 0x593, 0x4, 0xfdb, 0x4, 0x401, 0x4, 0x187aabfb, 0x40, 0xe651, 0x7fb, 0x8, 0x6, 0x0, 0xc07, 0x2, 0xc, 0x3, 0x80000001, 0xb0e5, 0xb, 0x6, 0x3, 0x8, 0x2, 0x40, 0x9, 0x2, 0x4, 0xf, 0x101, 0x1, 0x0, 0xe98, 0x8, 0x80000001, 0x5, 0x1, 0x0, 0x7, 0x10000, 0x5, 0x6, 0x2, 0x4, 0x6, 0x4, 0x2, 0xb, 0x4, 0x4, 0xc, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff5, 0x0, 0x9, 0x6, 0x5, 0x7, 0x5, 0xb, 0x28, 0x7e42, 0x6, 0x2, 0xf, 0x8001, 0x200, 0xd, 0x4, 0x56b, 0x1000, 0x401, 0x7, 0x8, 0x7, 0x922f, 0x5, 0x7, 0x5, 0x8, 0x3, 0x3, 0x6, 0x2, 0x3, 0xffffffff, 0x8001, 0x9, 0xe, 0x6, 0x9, 0x6, 0x7, 0x6, 0x8001, 0x3, 0x10000, 0x7f, 0x4, 0xa966, 0x5, 0x9, 0x8, 0x0, 0x10, 0xb3, 0x4, 0x4, 0xb802, 0x5, 0x200, 0x1, 0x3, 0x3ff, 0x5f, 0x79b, 0x9, 0x6, 0xff, 0x0, 0x2, 0xc832, 0x9, 0x5, 0x10000, 0xfffffe00, 0x8, 0x4, 0x5, 0x4, 0x1ff, 0x8, 0x100, 0xa, 0x5ff1, 0x95, 0x2, 0x5, 0x0, 0x4, 0x6, 0x0, 0x3, 0x9, 0xb108, 0x2003, 0x2, 0xff, 0x6, 0x4aff, 0x9, 0x10001, 0x3, 0xa66, 0x401, 0x4, 0x3, 0x7, 0x7, 0xf, 0x1, 0xe5, 0xa66b, 0x1, 0x7, 0x0, 0x7, 0xfff, 0x6, 0x10, 0x1a, 0x2, 0xe, 0x1, 0x3, 0x40, 0x4, 0x2, 0x1, 0x7, 0xe9a, 0x0, 0xfffffffd, 0x9, 0x7, 0x5, 0x3ff, 0xc, 0x1, 0x9, 0x3, 0x946, 0x80000000, 0xfff, 0x7, 0x1, 0xf, 0x22, 0x8, 0x4, 0x0, 0x8000, 0x3, 0xa, 0x1, 0x4, 0x3, 0x2, 0xffff, 0x5, 0x5, 0x9, 0xffff, 0x0, 0x5, 0xa, 0x2c2b, 0x791b, 0x8a, 0xfc7f, 0x5cec, 0x5c80, 0xe, 0x90a, 0x4, 0x0, 0x7fff, 0x80000000, 0x6, 0x1, 0xdef, 0x4, 0x2, 0xffffb8af, 0xb, 0xe, 0x7, 0xffff1a50, 0x39, 0x3, 0xb149, 0x5, 0xfffffffc, 0x9b, 0xfffffff7, 0xc69, 0x100, 0x9, 0x2, 0x80000001, 0x3, 0xd, 0x17fc, 0x8b4, 0x80000001, 0xffffffff, 0x3, 0x7, 0xdd8, 0xffff, 0xd, 0x6, 0x2, 0x69, 0x8, 0x5df4, 0x1ff, 0xc, 0x0, 0x80, 0xefb, 0x7, 0x9, 0x3, 0x3, 0x2, 0x6, 0x8000, 0x2, 0x9, 0x7, 0x4a, 0x6, 0x0, 0x80000001, 0x7, 0x5, 0x1, 0x80000001, 0x1, 0x7fffffff, 0x0, 0x3, 0x85, 0x7, 0xfffffffb, 0x7ffc, 0x7, 0x4, 0xffffffff, 0x8932, 0x7, 0xfffff000, 0x40, 0xe8d7, 0xb, 0x80, 0x890]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}]}, @TCA_U32_LINK={0x8, 0x3, 0x8}, @TCA_U32_POLICE={0x48, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x4, 0xf, 0xfffffffa, 0x59, {0x6d, 0x0, 0x3, 0x1b0c, 0x72, 0x572d}, {0x3, 0x2, 0xf9b, 0xfff2, 0x101, 0x2}, 0x2, 0xfffffff9, 0x5}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10001}]}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x56}}]}, 0x11dc}, 0x1, 0x0, 0x0, 0x90}, 0x80) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket(0x40000000015, 0x5, 0x0) socketpair(0xb, 0x1, 0x6, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bind$inet(r11, 0x0, 0x0) sendmmsg$inet(r11, &(0x7f0000000040)=[{{&(0x7f0000000500)={0x2, 0x4e63, @rand_addr=0x64010102}, 0x10, &(0x7f0000000640)}}], 0x1, 0x4000040) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000700"/20, @ANYRES32=r12, @ANYBLOB="04010100010a0000140003007866726d30000000000000000000000008000a00", @ANYRES32=r13, @ANYBLOB="3eed334342dbcff5e237c56c523d692ff4d4b9ffb36286f7e7c17bd1e9fcd506dbdd63d25e46ee2d960bd05b5413e41107"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000440)={0x0, 0xa1ff, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000ffdbdf25010000000018001700000000000000006574683a7465616d30000000da155885bd91ed42a6e0"], 0x34}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r0, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0xfce) 0s ago: executing program 0 (id=11968): unshare(0x2a020400) r0 = socket(0xa, 0x3, 0x3a) (async) r1 = socket(0x10, 0x3, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r1], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x805) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bf2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x42ff}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x2a5f13df9afa8791, 0x70bd2c, 0x27dfdafd, {0x0, 0x0, 0x0, r4, {0xc, 0xffe1}, {0x1, 0xfff1}, {0x10, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x200008c1}, 0x4041080) (async) setsockopt$MRT6_ADD_MIF(r0, 0x3a, 0xca, 0x0, 0xfffffd12) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=r0, @ANYRES64=r0, @ANYRES32, @ANYRES8=r0], 0x40}, 0x1, 0x0, 0x0, 0x51}, 0x0) kernel console output (not intermixed with test programs): tlink: 'syz.0.10906': attribute type 13 has an invalid length. [ 1038.097592][T16448] netlink: 'syz.0.10906': attribute type 17 has an invalid length. [ 1038.155292][T16432] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1038.177893][T16447] tipc: Resetting bearer [ 1038.336115][T16426] tipc: Resetting bearer [ 1038.352976][T16426] tipc: Disabling bearer [ 1038.381866][T16454] netlink: 76 bytes leftover after parsing attributes in process `syz.3.10907'. [ 1038.949938][ C0] net_ratelimit: 48 callbacks suppressed [ 1038.949979][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1038.992279][ T6412] bond6: (slave bridge2): failed to get link speed/duplex [ 1039.020083][ T6412] bond2: (slave gretap1): failed to get link speed/duplex [ 1039.120908][ T6416] bond6: (slave bridge2): failed to get link speed/duplex [ 1039.162322][ T6414] bond2: (slave gretap1): failed to get link speed/duplex [ 1039.250525][ T6416] bond6: (slave bridge2): failed to get link speed/duplex [ 1039.358470][ T6416] bond2: (slave gretap1): failed to get link speed/duplex [ 1039.402180][ T6412] bond6: (slave bridge2): failed to get link speed/duplex [ 1039.490488][T10505] bond2: (slave gretap1): failed to get link speed/duplex [ 1039.530300][ T6412] bond6: (slave bridge2): failed to get link speed/duplex [ 1039.556880][T16502] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10917'. [ 1039.803932][T16519] netlink: 'syz.2.10920': attribute type 25 has an invalid length. [ 1039.863315][T16519] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1040.914195][T16580] tipc: Enabling of bearer rejected, failed to enable media [ 1041.118860][T16607] mac80211_hwsim hwsim128 syzkaller1: entered promiscuous mode [ 1041.185200][T16607] mac80211_hwsim hwsim128 syzkaller1: entered allmulticast mode [ 1041.205855][T16611] netlink: 'syz.2.10936': attribute type 1 has an invalid length. [ 1041.254142][T16611] bond10: entered promiscuous mode [ 1041.260631][T16611] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1041.401547][T16611] ipvlan2: entered allmulticast mode [ 1041.407004][T16611] bond10: entered allmulticast mode [ 1041.424049][T16611] ipvlan3: entered allmulticast mode [ 1041.451744][T16611] bond10: (slave bridge9): making interface the new active one [ 1041.469632][T16611] bridge9: entered promiscuous mode [ 1041.476604][T16611] bridge9: entered allmulticast mode [ 1041.495716][T16611] bond10: (slave bridge9): Enslaving as an active interface with an up link [ 1041.650918][T16628] bond22: Removing last ns target with arp_interval on [ 1041.957688][T16652] __nla_validate_parse: 7 callbacks suppressed [ 1041.957722][T16652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10944'. [ 1042.000844][T16652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10944'. [ 1042.879464][T16698] netlink: 'syz.2.10956': attribute type 16 has an invalid length. [ 1042.922402][T16698] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.10956'. [ 1042.943312][T16706] bridge12: entered allmulticast mode [ 1042.962661][T16707] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10958'. [ 1043.053029][T16719] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10962'. [ 1043.093930][T16719] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1043.161617][T16723] syzkaller0: entered promiscuous mode [ 1043.167158][T16723] syzkaller0: entered allmulticast mode [ 1043.211032][T16731] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10967'. [ 1043.243614][T16731] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10967'. [ 1043.246075][T16723] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1043.318856][T16741] netlink: 'syz.0.10969': attribute type 3 has an invalid length. [ 1043.851506][T16781] lo speed is unknown, defaulting to 1000 [ 1043.887119][T16785] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 1043.950900][T16787] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10982'. [ 1044.010292][ T6412] net_ratelimit: 68 callbacks suppressed [ 1044.010335][ T6412] bond2: (slave gretap1): failed to get link speed/duplex [ 1044.040109][ T6412] bond6: (slave bridge2): failed to get link speed/duplex [ 1044.114416][T16781] xfrm0 speed is unknown, defaulting to 1000 [ 1044.170382][ T6412] bond6: (slave bridge2): failed to get link speed/duplex [ 1044.180118][ T6412] bond2: (slave gretap1): failed to get link speed/duplex [ 1044.229933][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1044.279814][ T6416] bond6: (slave bridge2): failed to get link speed/duplex [ 1044.320451][ T6415] bond2: (slave gretap1): failed to get link speed/duplex [ 1044.601849][T16810] --map-set only usable from mangle table [ 1044.851168][ T4936] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1044.871699][ T4936] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1044.883035][ T4936] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1044.907718][ T4936] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1044.970670][ T4936] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1045.101057][T16832] xt_CONNSECMARK: invalid mode: 254 [ 1045.110595][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1045.118906][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1045.218155][T16837] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input9 [ 1045.269937][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1045.327188][T16841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10990'. [ 1045.449911][ T6416] bond6: (slave bridge2): failed to get link speed/duplex [ 1045.471147][ T6416] bond2: (slave gretap1): failed to get link speed/duplex [ 1045.549174][T16846] xt_bpf: check failed: parse error [ 1045.561989][T16848] xt_bpf: check failed: parse error [ 1046.089134][T16882] "syz.4.10996" (16882) uses obsolete ecb(arc4) skcipher [ 1046.143534][T16815] lo speed is unknown, defaulting to 1000 [ 1046.206638][T16887] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10996'. [ 1046.293329][T16815] xfrm0 speed is unknown, defaulting to 1000 [ 1046.344429][T16889] macsec1: entered promiscuous mode [ 1046.672264][T16815] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.679583][T16815] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.687538][T16815] bridge_slave_0: entered allmulticast mode [ 1046.696101][T16815] bridge_slave_0: entered promiscuous mode [ 1046.706967][T16815] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.714962][T16815] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.724232][T16815] bridge_slave_1: entered allmulticast mode [ 1046.732171][T16815] bridge_slave_1: entered promiscuous mode [ 1046.777941][T16815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1046.793082][T16815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1046.822436][T16815] team0: Port device team_slave_0 added [ 1046.831146][T16815] team0: Port device team_slave_1 added [ 1046.857462][T16815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1046.879859][T16815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1046.916558][T16815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1046.963801][T16815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1046.970805][T16815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1046.996723][T16815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1047.038556][ T5628] Bluetooth: hci5: command tx timeout [ 1047.092001][T16815] hsr_slave_0: entered promiscuous mode [ 1047.098827][T16815] hsr_slave_1: entered promiscuous mode [ 1047.105256][T16815] debugfs: 'hsr0' already exists in 'hsr' [ 1047.111069][T16815] Cannot create hsr debugfs directory [ 1047.238391][T16930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11002'. [ 1047.298994][T16815] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1047.308800][T16815] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 33012 - 0 [ 1047.433768][T16939] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20004 [ 1047.692949][T16815] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1047.729879][T16815] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 33012 - 0 [ 1047.825960][T16815] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1047.838574][T16815] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 33012 - 0 [ 1047.865544][T16974] FAULT_INJECTION: forcing a failure. [ 1047.865544][T16974] name failslab, interval 1, probability 0, space 0, times 0 [ 1047.890062][T16974] CPU: 0 UID: 0 PID: 16974 Comm: syz.2.11010 Not tainted syzkaller #0 PREEMPT(full) [ 1047.890096][T16974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1047.890109][T16974] Call Trace: [ 1047.890118][T16974] [ 1047.890128][T16974] dump_stack_lvl+0xe8/0x150 [ 1047.890157][T16974] should_fail_ex+0x40c/0x560 [ 1047.890184][T16974] should_failslab+0xa8/0x100 [ 1047.890216][T16974] __kmalloc_cache_noprof+0x88/0x660 [ 1047.890243][T16974] ? __raw_spin_lock_init+0x45/0x100 [ 1047.890269][T16974] ? register_netdevice+0x57e/0x1eb0 [ 1047.890294][T16974] register_netdevice+0x57e/0x1eb0 [ 1047.890315][T16974] ? trace_kmalloc+0x2a/0xf0 [ 1047.890342][T16974] ? __kvmalloc_node_noprof+0x53d/0x890 [ 1047.890369][T16974] ? alloc_netdev_mqs+0xd00/0x1270 [ 1047.890389][T16974] ? __pfx_register_netdevice+0x10/0x10 [ 1047.890407][T16974] ? __kvmalloc_node_noprof+0x38b/0x890 [ 1047.890439][T16974] ? validate_linkmsg+0x765/0x950 [ 1047.890468][T16974] bond_newlink+0x48/0xd0 [ 1047.890603][T16974] ? __pfx_bond_newlink+0x10/0x10 [ 1047.890624][T16974] rtnl_newlink_create+0x310/0xb00 [ 1047.890659][T16974] ? __mutex_lock+0x5d4/0x1550 [ 1047.890691][T16974] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1047.890723][T16974] ? __pfx___mutex_lock+0x10/0x10 [ 1047.890755][T16974] ? ns_capable+0x89/0xe0 [ 1047.890792][T16974] rtnl_newlink+0x167f/0x1bd0 [ 1047.890827][T16974] ? __pfx_rtnl_newlink+0x10/0x10 [ 1047.890853][T16974] ? do_syscall_64+0x174/0x580 [ 1047.890879][T16974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.890920][T16974] ? rcu_is_watching+0x15/0xb0 [ 1047.890942][T16974] ? trace_irq_enable+0x3b/0x140 [ 1047.890973][T16974] ? nlmon_xmit+0xb0/0x100 [ 1047.891039][T16974] ? kmem_cache_free+0x182/0x650 [ 1047.891073][T16974] ? dev_hard_start_xmit+0x7c7/0x830 [ 1047.891155][T16974] ? __dev_queue_xmit+0x29b/0x37f0 [ 1047.891174][T16974] ? __dev_queue_xmit+0x29b/0x37f0 [ 1047.891194][T16974] ? rcu_is_watching+0x15/0xb0 [ 1047.891215][T16974] ? __dev_queue_xmit+0x29b/0x37f0 [ 1047.891233][T16974] ? trace_irq_enable+0x3b/0x140 [ 1047.891260][T16974] ? __dev_queue_xmit+0x29b/0x37f0 [ 1047.891278][T16974] ? __dev_queue_xmit+0x29b/0x37f0 [ 1047.891293][T16974] ? __local_bh_enable_ip+0xd0/0x130 [ 1047.891315][T16974] ? __dev_queue_xmit+0x29b/0x37f0 [ 1047.891339][T16974] ? __pfx_rtnl_newlink+0x10/0x10 [ 1047.891365][T16974] ? lock_release+0x4b/0x3c0 [ 1047.891393][T16974] ? bpf_lsm_capable+0x9/0x20 [ 1047.891411][T16974] ? security_capable+0x7e/0x2c0 [ 1047.891448][T16974] ? __pfx_rtnl_newlink+0x10/0x10 [ 1047.891473][T16974] rtnetlink_rcv_msg+0x802/0xc00 [ 1047.891503][T16974] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1047.891529][T16974] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1047.891553][T16974] ? ref_tracker_free+0x689/0x830 [ 1047.891578][T16974] ? __pfx_ref_tracker_free+0x10/0x10 [ 1047.891605][T16974] netlink_rcv_skb+0x226/0x4a0 [ 1047.891639][T16974] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1047.891667][T16974] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1047.891705][T16974] ? netlink_deliver_tap+0x2e/0x1b0 [ 1047.891738][T16974] netlink_unicast+0x7bb/0x940 [ 1047.891771][T16974] netlink_sendmsg+0x813/0xb40 [ 1047.891819][T16974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1047.891853][T16974] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1047.891875][T16974] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1047.891901][T16974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1047.891933][T16974] ____sys_sendmsg+0x9b9/0xa20 [ 1047.891969][T16974] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1047.892000][T16974] ? lock_release+0x4b/0x3c0 [ 1047.892032][T16974] ? import_iovec+0x73/0xa0 [ 1047.892061][T16974] ___sys_sendmsg+0x2a5/0x360 [ 1047.892090][T16974] ? _parse_integer_limit+0x1ae/0x1f0 [ 1047.892114][T16974] ? __pfx____sys_sendmsg+0x10/0x10 [ 1047.892147][T16974] ? kstrtouint+0x6e/0xe0 [ 1047.892183][T16974] ? rcu_is_watching+0x15/0xb0 [ 1047.892205][T16974] ? lock_release+0x4b/0x3c0 [ 1047.892235][T16974] ? __might_fault+0xcb/0x130 [ 1047.892263][T16974] __sys_sendmmsg+0x273/0x4d0 [ 1047.892296][T16974] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1047.892332][T16974] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1047.892368][T16974] ? ksys_write+0x242/0x270 [ 1047.892398][T16974] ? __pfx_ksys_write+0x10/0x10 [ 1047.892429][T16974] __x64_sys_sendmmsg+0xa0/0xc0 [ 1047.892460][T16974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.892496][T16974] do_syscall_64+0x174/0x580 [ 1047.892524][T16974] ? clear_bhb_loop+0x40/0x90 [ 1047.892548][T16974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.892569][T16974] RIP: 0033:0x7fdccd59ce59 [ 1047.892589][T16974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1047.892608][T16974] RSP: 002b:00007fdcce490028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1047.892630][T16974] RAX: ffffffffffffffda RBX: 00007fdccd815fa0 RCX: 00007fdccd59ce59 [ 1047.892647][T16974] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 1047.892662][T16974] RBP: 00007fdcce490090 R08: 0000000000000000 R09: 0000000000000000 [ 1047.892676][T16974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1047.892688][T16974] R13: 00007fdccd816038 R14: 00007fdccd815fa0 R15: 00007ffdd64e4f08 [ 1047.892714][T16974] [ 1048.488845][T16981] xt_l2tp: v2 doesn't support IP mode [ 1048.546921][T16815] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1048.558903][T16815] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 33012 - 0 [ 1048.583635][T16988] IPVS: set_ctl: invalid protocol: 19 10.1.1.2:20003 [ 1048.701430][T16997] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11017'. [ 1048.775684][T17002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11017'. [ 1049.025111][T17014] net_ratelimit: 44 callbacks suppressed [ 1049.025158][T17014] openvswitch: netlink: IP tunnel dst address not specified [ 1049.090498][ T6412] bond6: (slave bridge2): failed to get link speed/duplex [ 1049.110158][ T6412] bond2: (slave gretap1): failed to get link speed/duplex [ 1049.111269][ T5628] Bluetooth: hci5: command tx timeout [ 1049.156008][T17016] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1049.203594][ T6412] bond6: (slave bridge2): failed to get link speed/duplex [ 1049.251303][ T6412] bond2: (slave gretap1): failed to get link speed/duplex [ 1049.323653][ T6412] bond6: (slave bridge2): failed to get link speed/duplex [ 1049.361225][ T6412] bond2: (slave gretap1): failed to get link speed/duplex [ 1049.440356][ T6412] bond6: (slave bridge2): failed to get link speed/duplex [ 1049.472431][ T6412] bond2: (slave gretap1): failed to get link speed/duplex [ 1049.523319][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1049.701913][T17024] netlink: 6 bytes leftover after parsing attributes in process `syz.3.11023'. [ 1050.012080][T17026] netlink: 48 bytes leftover after parsing attributes in process `syz.3.11024'. [ 1050.230598][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1050.526585][T16963] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1050.537525][T16815] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1050.576592][T16815] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1050.599339][T16815] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1050.613263][T16815] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1050.622662][T16815] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1050.675987][T16815] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1050.685777][T16815] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1050.698286][T16815] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1050.834891][T17041] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11027'. [ 1050.858291][T17041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11027'. [ 1050.937861][T17046] netlink: 'syz.4.11029': attribute type 1 has an invalid length. [ 1050.948444][T16815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1051.001705][T17046] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1051.048470][T17049] bond12: (slave gretap3): making interface the new active one [ 1051.061833][T17049] bond12: (slave gretap3): Enslaving as an active interface with an up link [ 1051.075680][T17052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11032'. [ 1051.090926][T16815] 8021q: adding VLAN 0 to HW filter on device team0 [ 1051.106851][ T3468] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.114127][ T3468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1051.134153][ T3468] bridge0: port 2(bridge_slave_1) entered blocking state [ 1051.141304][ T3468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1051.273468][T17056] bond15: (slave veth11): Releasing active interface [ 1051.296259][ T5628] Bluetooth: hci5: command tx timeout [ 1051.329044][T17060] lo speed is unknown, defaulting to 1000 [ 1051.540294][T17072] tipc: Enabled bearer , priority 0 [ 1051.547434][T17071] tipc: Enabling of bearer rejected, already enabled [ 1051.565920][T17072] syzkaller0: entered promiscuous mode [ 1051.596132][T17072] syzkaller0: entered allmulticast mode [ 1051.635660][T17071] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11035'. [ 1051.648301][T17072] tipc: Resetting bearer [ 1051.656885][T17069] tipc: Resetting bearer [ 1051.667574][T17069] tipc: Disabling bearer [ 1051.720941][T16815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1051.755909][T16815] veth0_vlan: entered promiscuous mode [ 1051.766679][T16815] veth1_vlan: entered promiscuous mode [ 1051.804758][T16815] veth0_macvtap: entered promiscuous mode [ 1051.837328][T16815] veth1_macvtap: entered promiscuous mode [ 1051.884742][T16815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1051.900397][T16815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1051.913419][T17079] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1051.958299][ T6416] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.974481][ T6416] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.986069][ T6416] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.083908][ T6416] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.204428][T17113] netlink: 156 bytes leftover after parsing attributes in process `syz.2.11044'. [ 1052.233456][T17112] 0ªî{X¹¦: left allmulticast mode [ 1052.238860][T17112] 0ªî{X¹¦: left promiscuous mode [ 1052.266909][ T6412] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1052.279954][ T6412] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.301181][T17060] xfrm0 speed is unknown, defaulting to 1000 [ 1052.319252][T17109] syzkaller0: entered promiscuous mode [ 1052.326284][T17109] syzkaller0: entered allmulticast mode [ 1052.335773][ T6412] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1052.345595][ T6412] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.355516][ T6412] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1052.364999][ T6412] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.398880][ T6414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1052.411428][ T6414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.411453][ T6412] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1052.430370][ T6412] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.532581][ T6414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1052.557519][ T6414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.778411][T17135] pim6reg1: entered promiscuous mode [ 1052.792605][T17135] pim6reg1: entered allmulticast mode [ 1052.981777][T17150] netlink: 72 bytes leftover after parsing attributes in process `syz.2.11049'. [ 1053.353241][ T5628] Bluetooth: hci5: command tx timeout [ 1054.012887][T17182] FAULT_INJECTION: forcing a failure. [ 1054.012887][T17182] name failslab, interval 1, probability 0, space 0, times 0 [ 1054.026650][T17182] CPU: 1 UID: 0 PID: 17182 Comm: syz.4.11061 Not tainted syzkaller #0 PREEMPT(full) [ 1054.026680][T17182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1054.026694][T17182] Call Trace: [ 1054.026703][T17182] [ 1054.026712][T17182] dump_stack_lvl+0xe8/0x150 [ 1054.026742][T17182] should_fail_ex+0x40c/0x560 [ 1054.026780][T17182] should_failslab+0xa8/0x100 [ 1054.026811][T17182] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 1054.026841][T17182] ? alloc_unbound_pwq+0xaa6/0xe00 [ 1054.026871][T17182] alloc_unbound_pwq+0xaa6/0xe00 [ 1054.026903][T17182] apply_wqattrs_prepare+0x389/0xdc0 [ 1054.026930][T17182] ? pcpu_alloc_noprof+0x100f/0x1900 [ 1054.026970][T17182] __alloc_workqueue+0x10bf/0x1f70 [ 1054.026998][T17182] alloc_workqueue_noprof+0xe3/0x210 [ 1054.027017][T17182] ? rcu_is_watching+0x15/0xb0 [ 1054.027038][T17182] ? net_generic+0x1e/0x240 [ 1054.027140][T17182] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 1054.027177][T17182] ? net_generic+0x1e/0x240 [ 1054.027199][T17182] bond_init+0xd4/0x8b0 [ 1054.027259][T17182] ? __pfx_bond_init+0x10/0x10 [ 1054.027287][T17182] ? __kmalloc_cache_noprof+0x318/0x660 [ 1054.027319][T17182] register_netdevice+0x6a1/0x1eb0 [ 1054.027346][T17182] ? __kvmalloc_node_noprof+0x53d/0x890 [ 1054.027377][T17182] ? __pfx_register_netdevice+0x10/0x10 [ 1054.027395][T17182] ? __kvmalloc_node_noprof+0x38b/0x890 [ 1054.027426][T17182] ? validate_linkmsg+0x765/0x950 [ 1054.027455][T17182] bond_newlink+0x48/0xd0 [ 1054.027474][T17182] ? __pfx_bond_newlink+0x10/0x10 [ 1054.027495][T17182] rtnl_newlink_create+0x310/0xb00 [ 1054.027530][T17182] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1054.027563][T17182] ? __pfx___mutex_lock+0x10/0x10 [ 1054.027598][T17182] ? ns_capable+0x89/0xe0 [ 1054.027628][T17182] rtnl_newlink+0x167f/0x1bd0 [ 1054.027665][T17182] ? __pfx_rtnl_newlink+0x10/0x10 [ 1054.027695][T17182] ? unwind_next_frame+0x8f/0x2550 [ 1054.027734][T17182] ? unwind_next_frame+0x8f/0x2550 [ 1054.027767][T17182] ? rcu_is_watching+0x15/0xb0 [ 1054.027794][T17182] ? is_bpf_text_address+0x26/0x2b0 [ 1054.027826][T17182] ? rcu_is_watching+0x15/0xb0 [ 1054.027850][T17182] ? unwind_next_frame+0x8f/0x2550 [ 1054.027873][T17182] ? rcu_is_watching+0x15/0xb0 [ 1054.027896][T17182] ? unwind_next_frame+0x8f/0x2550 [ 1054.027919][T17182] ? rcu_is_watching+0x15/0xb0 [ 1054.027944][T17182] ? is_bpf_text_address+0x26/0x2b0 [ 1054.027973][T17182] ? rcu_is_watching+0x15/0xb0 [ 1054.027996][T17182] ? rcu_is_watching+0x15/0xb0 [ 1054.028018][T17182] ? lock_release+0x4b/0x3c0 [ 1054.028047][T17182] ? lock_release+0x4b/0x3c0 [ 1054.028081][T17182] ? is_bpf_text_address+0x292/0x2b0 [ 1054.028111][T17182] ? is_bpf_text_address+0x26/0x2b0 [ 1054.028144][T17182] ? kernel_text_address+0xa5/0xe0 [ 1054.028167][T17182] ? __kernel_text_address+0xd/0x30 [ 1054.028188][T17182] ? unwind_get_return_address+0x4d/0x90 [ 1054.028213][T17182] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1054.028241][T17182] ? arch_stack_walk+0xfb/0x150 [ 1054.028288][T17182] ? __pfx_rtnl_newlink+0x10/0x10 [ 1054.028314][T17182] ? lock_release+0x4b/0x3c0 [ 1054.028343][T17182] ? bpf_lsm_capable+0x9/0x20 [ 1054.028362][T17182] ? security_capable+0x7e/0x2c0 [ 1054.028398][T17182] ? __pfx_rtnl_newlink+0x10/0x10 [ 1054.028424][T17182] rtnetlink_rcv_msg+0x802/0xc00 [ 1054.028451][T17182] ? kasan_save_track+0x3e/0x80 [ 1054.028481][T17182] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1054.028508][T17182] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1054.028538][T17182] ? __netlink_lookup+0xc6/0x8b0 [ 1054.028557][T17182] ? rcu_is_watching+0x15/0xb0 [ 1054.028584][T17182] netlink_rcv_skb+0x226/0x4a0 [ 1054.028615][T17182] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1054.028644][T17182] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1054.028681][T17182] ? net_generic+0x1e/0x240 [ 1054.028704][T17182] ? net_generic+0x1e/0x240 [ 1054.028730][T17182] ? netlink_deliver_tap+0x2e/0x1b0 [ 1054.028771][T17182] netlink_unicast+0x7bb/0x940 [ 1054.028806][T17182] netlink_sendmsg+0x813/0xb40 [ 1054.028843][T17182] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1054.028876][T17182] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1054.028898][T17182] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1054.028924][T17182] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1054.028956][T17182] ____sys_sendmsg+0x9b9/0xa20 [ 1054.028991][T17182] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1054.029032][T17182] ? lock_release+0x4b/0x3c0 [ 1054.029073][T17182] ? import_iovec+0x73/0xa0 [ 1054.029104][T17182] ___sys_sendmsg+0x2a5/0x360 [ 1054.029133][T17182] ? _parse_integer_limit+0x1ae/0x1f0 [ 1054.029158][T17182] ? __pfx____sys_sendmsg+0x10/0x10 [ 1054.029191][T17182] ? kstrtouint+0x6e/0xe0 [ 1054.029228][T17182] ? rcu_is_watching+0x15/0xb0 [ 1054.029250][T17182] ? lock_release+0x4b/0x3c0 [ 1054.029280][T17182] ? __might_fault+0xcb/0x130 [ 1054.029308][T17182] __sys_sendmmsg+0x273/0x4d0 [ 1054.029342][T17182] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1054.029377][T17182] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1054.029414][T17182] ? ksys_write+0x242/0x270 [ 1054.029444][T17182] ? __pfx_ksys_write+0x10/0x10 [ 1054.029475][T17182] __x64_sys_sendmmsg+0xa0/0xc0 [ 1054.029505][T17182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.029527][T17182] do_syscall_64+0x174/0x580 [ 1054.029554][T17182] ? trace_irq_disable+0x3b/0x140 [ 1054.029582][T17182] ? clear_bhb_loop+0x40/0x90 [ 1054.029605][T17182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.029625][T17182] RIP: 0033:0x7ff49b19ce59 [ 1054.029644][T17182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1054.029663][T17182] RSP: 002b:00007ff49bfc4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1054.029684][T17182] RAX: ffffffffffffffda RBX: 00007ff49b415fa0 RCX: 00007ff49b19ce59 [ 1054.029699][T17182] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 1054.029713][T17182] RBP: 00007ff49bfc4090 R08: 0000000000000000 R09: 0000000000000000 [ 1054.029726][T17182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1054.029738][T17182] R13: 00007ff49b416038 R14: 00007ff49b415fa0 R15: 00007ffde61f7be8 [ 1054.029771][T17182] [ 1054.661478][ T6415] net_ratelimit: 66 callbacks suppressed [ 1054.662048][ T6415] bond2: (slave gretap1): failed to get link speed/duplex [ 1054.676941][ T6415] bond6: (slave bridge2): failed to get link speed/duplex [ 1054.708725][T17181] netlink: 'syz.2.11060': attribute type 8 has an invalid length. [ 1054.779827][ T6414] bond2: (slave gretap1): failed to get link speed/duplex [ 1054.791030][ T6414] bond6: (slave bridge2): failed to get link speed/duplex [ 1054.814747][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1054.828515][T17188] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11063'. [ 1054.889836][ T6415] bond2: (slave gretap1): failed to get link speed/duplex [ 1054.899851][ T6415] bond6: (slave bridge2): failed to get link speed/duplex [ 1055.000420][ T6415] bond2: (slave gretap1): failed to get link speed/duplex [ 1055.010068][ T6415] bond6: (slave bridge2): failed to get link speed/duplex [ 1055.082483][T17206] netlink: 'syz.1.11067': attribute type 1 has an invalid length. [ 1055.110710][ T3467] bond2: (slave gretap1): failed to get link speed/duplex [ 1055.617601][T17221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11071'. [ 1055.863773][T17240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11080'. [ 1055.879853][T17244] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11081'. [ 1055.950237][T17254] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1056.035229][T17260] netlink: 'syz.3.11086': attribute type 1 has an invalid length. [ 1056.062541][T17252] syzkaller0: entered promiscuous mode [ 1056.068089][T17252] syzkaller0: entered allmulticast mode [ 1056.079306][T17259] IPVS: set_ctl: invalid protocol: 12 172.30.1.5:20001 [ 1056.261722][T17270] dvmrp0: entered allmulticast mode [ 1056.278336][T17262] syzkaller0: entered promiscuous mode [ 1056.284612][T17262] syzkaller0: entered allmulticast mode [ 1056.290792][T17272] lo speed is unknown, defaulting to 1000 [ 1056.414219][T17287] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11091'. [ 1056.571866][T17272] xfrm0 speed is unknown, defaulting to 1000 [ 1057.107998][T17316] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11099'. [ 1057.141065][T17316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11099'. [ 1057.294816][T17328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11103'. [ 1057.410568][T17333] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11106'. [ 1057.423004][T17340] netlink: 'syz.1.11108': attribute type 1 has an invalid length. [ 1057.827650][T17359] netlink: 'syz.2.11113': attribute type 5 has an invalid length. [ 1058.338748][T17386] xt_hashlimit: size too large, truncated to 1048576 [ 1058.378389][T17390] xt_hashlimit: size too large, truncated to 1048576 [ 1058.385750][T17390] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1058.408884][T17390] __nla_validate_parse: 3 callbacks suppressed [ 1058.408910][T17390] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11121'. [ 1058.466277][T17393] netlink: 'syz.2.11125': attribute type 4 has an invalid length. [ 1058.478899][T17395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11126'. [ 1058.492254][T17393] netlink: 'syz.2.11125': attribute type 4 has an invalid length. [ 1058.492353][T17395] syzkaller0: entered promiscuous mode [ 1058.505700][T17395] syzkaller0: entered allmulticast mode [ 1058.523652][ T5628] Bluetooth: hci5: command tx timeout [ 1058.756400][T17419] geneve2: entered promiscuous mode [ 1059.168694][T17442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11135'. [ 1059.243296][T17442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11135'. [ 1059.445554][T17447] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11139'. [ 1059.831311][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1059.912904][ T6414] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1059.925852][ T6414] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.964435][ T6414] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1059.985019][ T6414] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.999928][ C0] net_ratelimit: 65 callbacks suppressed [ 1059.999960][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1060.032796][ T6414] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1060.042861][ T6414] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.054652][ T6414] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1060.065833][ T6414] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.090680][ T3468] bond2: (slave gretap1): failed to get link speed/duplex [ 1060.100680][ T6414] bond6: (slave bridge2): failed to get link speed/duplex [ 1060.209849][ T6416] bond2: (slave gretap1): failed to get link speed/duplex [ 1060.220841][ T6416] bond6: (slave bridge2): failed to get link speed/duplex [ 1060.319857][ T6412] bond2: (slave gretap1): failed to get link speed/duplex [ 1060.340517][ T6412] bond6: (slave bridge2): failed to get link speed/duplex [ 1060.413900][T17483] netlink: 'syz.1.11147': attribute type 9 has an invalid length. [ 1060.430766][ T6412] bond2: (slave gretap1): failed to get link speed/duplex [ 1060.481540][ T3468] bond6: (slave bridge2): failed to get link speed/duplex [ 1060.526936][ T6412] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 1060.540419][ T6414] bond2: (slave gretap1): failed to get link speed/duplex [ 1060.603610][T17495] Cannot find set identified by id 0 to match [ 1060.639578][T17495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11149'. [ 1060.667986][T17493] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR [ 1061.093277][T17538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11160'. [ 1061.110321][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1061.142773][T17544] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11159'. [ 1061.170322][T17539] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11158'. [ 1061.181670][T17546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11161'. [ 1061.238803][T17548] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1061.253159][T17551] IPv6: NLM_F_CREATE should be specified when creating new route [ 1061.281648][T17548] bond11: (slave veth9): Enslaving as an active interface with an up link [ 1061.301513][T17548] bond11: (slave dummy0): Enslaving as an active interface with an up link [ 1062.013171][T17599] bond11: entered allmulticast mode [ 1062.163451][T17618] rdma_rxe: rxe_newlink: failed to add lo [ 1062.253888][T17618] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1062.287545][T17618] bond1 (unregistering): Released all slaves [ 1062.390521][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 1062.624840][T17650] veth0: entered promiscuous mode [ 1062.714526][T17661] netlink: 'syz.2.11181': attribute type 8 has an invalid length. [ 1062.955107][T17667] macsec1: entered promiscuous mode [ 1063.011271][T17650] veth0: left promiscuous mode [ 1063.327944][T17685] netlink: 'syz.2.11188': attribute type 1 has an invalid length. [ 1063.463211][T17687] geneve0: Caught tx_queue_len zero misconfig [ 1063.480917][T17687] __nla_validate_parse: 5 callbacks suppressed [ 1063.480937][T17687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11189'. [ 1063.606780][T17698] xfrm2: entered allmulticast mode [ 1063.682558][T17702] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11194'. [ 1063.797055][T17700] sctp: [Deprecated]: syz.1.11193 (pid 17700) Use of int in max_burst socket option. [ 1063.797055][T17700] Use struct sctp_assoc_value instead [ 1063.856218][T17700] netlink: 104 bytes leftover after parsing attributes in process `syz.1.11193'. [ 1063.866157][T17719] netlink: 'syz.4.11199': attribute type 12 has an invalid length. [ 1063.888206][T17719] netlink: 'syz.4.11199': attribute type 11 has an invalid length. [ 1063.913364][T17719] netlink: 212004 bytes leftover after parsing attributes in process `syz.4.11199'. [ 1063.982744][T17724] bond16: option arp_interval: invalid value (18446744073709551615) [ 1064.016196][T17724] bond16: option arp_interval: allowed values 0 - 2147483647 [ 1064.025392][T17724] bond16 (unregistering): Released all slaves [ 1064.161687][ T4936] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1064.169025][ T4936] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1064.176458][ T4936] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1064.184837][ T4936] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1064.194733][ T4936] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1064.809239][T17733] lo speed is unknown, defaulting to 1000 [ 1064.839425][T17761] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11209'. [ 1064.869605][T17761] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11209'. [ 1065.063185][T17733] xfrm0 speed is unknown, defaulting to 1000 [ 1065.075230][T17761] tipc: Started in network mode [ 1065.082014][T17761] tipc: Node identity e6e3d1254d7d, cluster identity 4711 [ 1065.089334][T17761] tipc: Enabled bearer , priority 0 [ 1065.115626][T17761] syzkaller0: entered promiscuous mode [ 1065.121559][T17761] syzkaller0: entered allmulticast mode [ 1065.206859][T17762] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11209'. [ 1065.270416][ C0] net_ratelimit: 63 callbacks suppressed [ 1065.270455][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1065.281727][ T6416] bond6: (slave bridge2): failed to get link speed/duplex [ 1065.363082][T17780] xt_ecn: cannot match TCP bits for non-tcp packets [ 1065.428710][T17760] tipc: Resetting bearer [ 1065.485727][T17786] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1065.541695][T17760] tipc: Disabling bearer [ 1065.596686][ T6415] bond6: (slave bridge2): failed to get link speed/duplex [ 1065.609920][T17787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11213'. [ 1065.630054][ T3467] bond2: (slave gretap1): failed to get link speed/duplex [ 1065.719885][ T6412] bond6: (slave bridge2): failed to get link speed/duplex [ 1065.875646][T17791] tipc: Enabled bearer , priority 0 [ 1065.900917][T17790] tipc: Disabling bearer [ 1065.914307][T17733] bridge0: port 1(bridge_slave_0) entered blocking state [ 1065.922409][T17733] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.931743][T17733] bridge_slave_0: entered allmulticast mode [ 1065.939231][T17733] bridge_slave_0: entered promiscuous mode [ 1065.948525][T17733] bridge0: port 2(bridge_slave_1) entered blocking state [ 1065.956924][T17733] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.964942][T17733] bridge_slave_1: entered allmulticast mode [ 1065.973148][T17733] bridge_slave_1: entered promiscuous mode [ 1066.008175][T17733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1066.021793][T17733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1066.060035][ T6414] bond6: (slave bridge2): failed to get link speed/duplex [ 1066.071713][T17733] team0: Port device team_slave_0 added [ 1066.080315][T17733] team0: Port device team_slave_1 added [ 1066.104782][T17733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1066.111783][T17733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1066.148393][T17733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1066.160455][ T6412] bond2: (slave gretap1): failed to get link speed/duplex [ 1066.169029][T17733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1066.176028][T17733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1066.176415][T17798] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11215'. [ 1066.201946][T17733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1066.244575][T17733] hsr_slave_0: entered promiscuous mode [ 1066.251471][ T4936] Bluetooth: hci0: command tx timeout [ 1066.273608][T17733] hsr_slave_1: entered promiscuous mode [ 1066.280385][T17733] debugfs: 'hsr0' already exists in 'hsr' [ 1066.286164][T17733] Cannot create hsr debugfs directory [ 1066.296560][T17798] ip6gre3: entered promiscuous mode [ 1066.301834][T17798] ip6gre3: entered allmulticast mode [ 1066.308872][ T6412] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1066.323155][ T6412] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1066.331141][ T8575] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1066.351979][ T6416] bond2: (slave gretap1): failed to get link speed/duplex [ 1066.365922][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1066.370563][ T8575] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1066.407223][T17806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11218'. [ 1066.424667][T17798] Cannot find del_set index 0 as target [ 1066.591013][T17817] netlink: 'syz.3.11220': attribute type 13 has an invalid length. [ 1066.729277][T17816] tipc: Enabling of bearer rejected, failed to enable media [ 1066.759881][ T3467] bond2: (slave gretap1): failed to get link speed/duplex [ 1067.190965][ T8575] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1067.563731][T17835] syzkaller0: entered promiscuous mode [ 1067.572058][T17835] syzkaller0: entered allmulticast mode [ 1067.670533][T17815] lo speed is unknown, defaulting to 1000 [ 1067.891361][T17733] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1067.909612][T17733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1067.918586][T17733] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1067.932989][T17733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1067.942258][T17854] IPVS: Error connecting to the multicast addr [ 1067.948780][T17733] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1067.973961][T17733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1067.983630][T17733] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1067.997504][T17733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1068.008978][T17861] netdevsim netdevsim3 €Â: renamed from netdevsim0 [ 1068.018135][T17815] xfrm0 speed is unknown, defaulting to 1000 [ 1068.129020][T17733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1068.159068][T17733] 8021q: adding VLAN 0 to HW filter on device team0 [ 1068.172192][T17872] smc: adding net device nicvf0 with user defined pnetid SYZ2 [ 1068.193668][ T6416] bridge0: port 1(bridge_slave_0) entered blocking state [ 1068.200867][ T6416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1068.212830][ T3468] bridge0: port 2(bridge_slave_1) entered blocking state [ 1068.219977][ T3468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1068.239389][T17871] smc: removing net device nicvf0 with user defined pnetid SYZ2 [ 1068.310783][ T4936] Bluetooth: hci0: command tx timeout [ 1068.502199][T17881] syzkaller0: entered promiscuous mode [ 1068.507767][T17881] syzkaller0: entered allmulticast mode [ 1068.709598][T17892] syzkaller0: entered promiscuous mode [ 1068.730313][T17892] syzkaller0: entered allmulticast mode [ 1068.789563][T17903] __nla_validate_parse: 8 callbacks suppressed [ 1068.789585][T17903] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11245'. [ 1068.944603][T17907] erspan1: entered allmulticast mode [ 1069.182102][T17917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11248'. [ 1069.220528][T17917] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.228360][T17917] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.300819][T17733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1069.388705][T17917] bond1 (unregistering): Released all slaves [ 1069.426774][T17914] vlan3: entered promiscuous mode [ 1069.433891][T17914] bond_slave_1: entered promiscuous mode [ 1069.446902][T17935] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11248'. [ 1069.613697][T17947] pimreg: entered allmulticast mode [ 1069.635903][T17733] veth0_vlan: entered promiscuous mode [ 1069.647915][T17733] veth1_vlan: entered promiscuous mode [ 1069.675073][T17733] veth0_macvtap: entered promiscuous mode [ 1069.695624][T17946] pimreg: left allmulticast mode [ 1069.707557][T17733] veth1_macvtap: entered promiscuous mode [ 1069.727660][T17733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1069.743322][T17733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1069.756662][ T3467] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.781357][ T3467] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.795406][ T3468] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.804206][ T3468] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.925579][ T6414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1069.937919][ T6414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1069.967837][T17958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11256'. [ 1069.995298][ T6415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1070.019854][ T6415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1070.062598][T17973] syzkaller1: entered promiscuous mode [ 1070.068147][T17973] syzkaller1: entered allmulticast mode [ 1070.091738][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1070.235044][T17977] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11259'. [ 1070.327280][T17987] netlink: 276 bytes leftover after parsing attributes in process `syz.4.11263'. [ 1070.390576][ T4936] Bluetooth: hci0: command tx timeout [ 1070.424846][ T3467] net_ratelimit: 32 callbacks suppressed [ 1070.424870][ T3467] bond6: (slave bridge2): failed to get link speed/duplex [ 1070.441461][ T6412] bond2: (slave gretap1): failed to get link speed/duplex [ 1070.482290][T18000] dummy0: entered promiscuous mode [ 1070.488622][T18000] netlink: 'syz.0.11266': attribute type 12 has an invalid length. [ 1070.512058][T17993] dummy0: left promiscuous mode [ 1070.559858][ T6416] bond2: (slave gretap1): failed to get link speed/duplex [ 1070.603619][T18006] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11269'. [ 1070.615423][T18006] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11269'. [ 1070.627257][T18006] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11269'. [ 1070.636489][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1070.637092][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1070.658726][ T6416] bond6: (slave bridge2): failed to get link speed/duplex [ 1070.670420][ T6416] bond2: (slave gretap1): failed to get link speed/duplex [ 1070.769886][ T3467] bond6: (slave bridge2): failed to get link speed/duplex [ 1070.779855][ T3467] bond2: (slave gretap1): failed to get link speed/duplex [ 1070.796517][T18024] xt_TCPMSS: Only works on TCP SYN packets [ 1070.835419][T18030] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1070.853491][T18029] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1070.931147][T18038] syzkaller0: entered promiscuous mode [ 1070.936685][T18038] syzkaller0: entered allmulticast mode [ 1070.945981][T18038] x_tables: ip_tables: ah match: only valid for protocol 51 [ 1070.969482][T18038] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1070.990980][T18038] batman_adv: batadv0: Adding interface: gretap1 [ 1070.997517][T18038] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1071.024717][T18038] batman_adv: batadv0: Interface activated: gretap1 [ 1071.120928][T18048] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11283'. [ 1071.250202][T18056] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1071.409384][T18074] syzkaller0: entered promiscuous mode [ 1071.414929][T18074] syzkaller0: entered allmulticast mode [ 1071.455918][T18074] tipc: Started in network mode [ 1071.462461][T18074] tipc: Node identity 32b4562ba221, cluster identity 4711 [ 1071.471298][T18074] tipc: Enabled bearer , priority 0 [ 1071.479091][T18074] veth0_to_bond: entered promiscuous mode [ 1071.485017][T18074] veth0_to_bond: entered allmulticast mode [ 1071.494005][T18074] veth0_to_bond: left promiscuous mode [ 1071.501376][T18074] veth0_to_bond: left allmulticast mode [ 1071.539609][T18073] tipc: Resetting bearer [ 1071.556281][T18073] tipc: Disabling bearer [ 1071.664392][T18088] syzkaller0: entered promiscuous mode [ 1071.670479][T18088] syzkaller0: entered allmulticast mode [ 1071.905343][T18100] tipc: Failed to remove unknown binding: 66,0,0/0:293524193/293524195 [ 1071.915314][T18100] tipc: Failed to remove unknown binding: 66,0,0/0:293524193/293524194 [ 1071.925869][T18100] tipc: Failed to remove unknown binding: 66,0,0/0:293524193/293524195 [ 1071.934505][T18100] tipc: Failed to remove unknown binding: 66,0,0/0:293524193/293524194 [ 1072.470338][ T4936] Bluetooth: hci0: command tx timeout [ 1072.586737][T18126] netlink: 'syz.0.11307': attribute type 1 has an invalid length. [ 1072.774047][T18146] netlink: 'syz.3.11313': attribute type 6 has an invalid length. [ 1072.962130][T18155] netlink: 'syz.3.11317': attribute type 1 has an invalid length. [ 1072.982049][T18155] netlink: 'syz.3.11317': attribute type 2 has an invalid length. [ 1073.002443][T18155] netlink: 'syz.3.11317': attribute type 1 has an invalid length. [ 1073.117037][T18160] netlink: 'syz.4.11320': attribute type 83 has an invalid length. [ 1073.472866][T18187] xt_hashlimit: size too large, truncated to 1048576 [ 1073.584481][T18194] FAULT_INJECTION: forcing a failure. [ 1073.584481][T18194] name failslab, interval 1, probability 0, space 0, times 0 [ 1073.600318][T18194] CPU: 0 UID: 0 PID: 18194 Comm: syz.1.11328 Not tainted syzkaller #0 PREEMPT(full) [ 1073.600351][T18194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1073.600364][T18194] Call Trace: [ 1073.600373][T18194] [ 1073.600383][T18194] dump_stack_lvl+0xe8/0x150 [ 1073.600412][T18194] should_fail_ex+0x40c/0x560 [ 1073.600438][T18194] should_failslab+0xa8/0x100 [ 1073.600468][T18194] ? __kernfs_new_node+0xe6/0x980 [ 1073.600498][T18194] kmem_cache_alloc_noprof+0x87/0x650 [ 1073.600524][T18194] ? kernfs_new_node+0xea/0x140 [ 1073.600549][T18194] ? kernfs_create_link+0xa7/0x200 [ 1073.600570][T18194] ? device_add_class_symlinks+0x1cf/0x240 [ 1073.600605][T18194] ? netdev_register_kobject+0x178/0x310 [ 1073.600719][T18194] __kernfs_new_node+0xe6/0x980 [ 1073.600746][T18194] ? ____sys_sendmsg+0x9b9/0xa20 [ 1073.600775][T18194] ? ___sys_sendmsg+0x2a5/0x360 [ 1073.600808][T18194] ? __pfx___kernfs_new_node+0x10/0x10 [ 1073.600835][T18194] ? rcu_is_watching+0x15/0xb0 [ 1073.600857][T18194] ? kernfs_root+0x1c/0x230 [ 1073.600882][T18194] ? rcu_is_watching+0x15/0xb0 [ 1073.600902][T18194] ? kernfs_root+0x1c/0x230 [ 1073.600926][T18194] ? lock_release+0x4b/0x3c0 [ 1073.600964][T18194] ? idr_alloc_u32+0x1f1/0x330 [ 1073.601050][T18194] ? kernfs_root+0x1c/0x230 [ 1073.601074][T18194] ? kernfs_root+0x1c/0x230 [ 1073.601102][T18194] kernfs_new_node+0xea/0x140 [ 1073.601133][T18194] __kernfs_create_file+0x4b/0x2e0 [ 1073.601155][T18194] sysfs_add_file_mode_ns+0x237/0x300 [ 1073.601182][T18194] internal_create_group+0x679/0x1180 [ 1073.601212][T18194] ? rcu_is_watching+0x15/0xb0 [ 1073.601233][T18194] ? lock_release+0x4b/0x3c0 [ 1073.601261][T18194] ? rcu_is_watching+0x15/0xb0 [ 1073.601281][T18194] ? kernfs_root+0x1c/0x230 [ 1073.601305][T18194] ? __pfx_internal_create_group+0x10/0x10 [ 1073.601333][T18194] ? up_write+0x19f/0x4a0 [ 1073.601358][T18194] sysfs_create_groups+0x59/0x120 [ 1073.601385][T18194] device_add_attrs+0xde/0x600 [ 1073.601408][T18194] ? __pfx_device_add_attrs+0x10/0x10 [ 1073.601430][T18194] ? device_add_class_symlinks+0x21f/0x240 [ 1073.601453][T18194] device_add+0x488/0xb80 [ 1073.601474][T18194] netdev_register_kobject+0x178/0x310 [ 1073.601498][T18194] register_netdevice+0x1433/0x1eb0 [ 1073.601525][T18194] ? __pfx_register_netdevice+0x10/0x10 [ 1073.601541][T18194] ? __kvmalloc_node_noprof+0x38b/0x890 [ 1073.601578][T18194] bond_newlink+0x48/0xd0 [ 1073.601607][T18194] ? __pfx_bond_newlink+0x10/0x10 [ 1073.601627][T18194] rtnl_newlink_create+0x310/0xb00 [ 1073.601661][T18194] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1073.601692][T18194] ? __pfx___mutex_lock+0x10/0x10 [ 1073.601723][T18194] ? ns_capable+0x89/0xe0 [ 1073.601749][T18194] rtnl_newlink+0x167f/0x1bd0 [ 1073.601783][T18194] ? __pfx_rtnl_newlink+0x10/0x10 [ 1073.601808][T18194] ? do_syscall_64+0x174/0x580 [ 1073.601835][T18194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1073.601874][T18194] ? rcu_is_watching+0x15/0xb0 [ 1073.601896][T18194] ? trace_irq_enable+0x3b/0x140 [ 1073.601928][T18194] ? nlmon_xmit+0xb0/0x100 [ 1073.601953][T18194] ? kmem_cache_free+0x182/0x650 [ 1073.601987][T18194] ? dev_hard_start_xmit+0x7c7/0x830 [ 1073.602019][T18194] ? __dev_queue_xmit+0x29b/0x37f0 [ 1073.602039][T18194] ? __dev_queue_xmit+0x29b/0x37f0 [ 1073.602058][T18194] ? rcu_is_watching+0x15/0xb0 [ 1073.602079][T18194] ? __dev_queue_xmit+0x29b/0x37f0 [ 1073.602097][T18194] ? trace_irq_enable+0x3b/0x140 [ 1073.602124][T18194] ? __dev_queue_xmit+0x29b/0x37f0 [ 1073.602143][T18194] ? __dev_queue_xmit+0x29b/0x37f0 [ 1073.602162][T18194] ? __local_bh_enable_ip+0xd0/0x130 [ 1073.602188][T18194] ? __dev_queue_xmit+0x29b/0x37f0 [ 1073.602216][T18194] ? __pfx_rtnl_newlink+0x10/0x10 [ 1073.602241][T18194] ? lock_release+0x4b/0x3c0 [ 1073.602271][T18194] ? bpf_lsm_capable+0x9/0x20 [ 1073.602290][T18194] ? security_capable+0x7e/0x2c0 [ 1073.602324][T18194] ? __pfx_rtnl_newlink+0x10/0x10 [ 1073.602350][T18194] rtnetlink_rcv_msg+0x802/0xc00 [ 1073.602379][T18194] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1073.602406][T18194] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1073.602432][T18194] ? ref_tracker_free+0x689/0x830 [ 1073.602458][T18194] ? __pfx_ref_tracker_free+0x10/0x10 [ 1073.602486][T18194] netlink_rcv_skb+0x226/0x4a0 [ 1073.602518][T18194] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1073.602546][T18194] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1073.602585][T18194] ? netlink_deliver_tap+0x2e/0x1b0 [ 1073.602628][T18194] netlink_unicast+0x7bb/0x940 [ 1073.602661][T18194] netlink_sendmsg+0x813/0xb40 [ 1073.602697][T18194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1073.602729][T18194] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1073.602750][T18194] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1073.602776][T18194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1073.602808][T18194] ____sys_sendmsg+0x9b9/0xa20 [ 1073.602844][T18194] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1073.602875][T18194] ? lock_release+0x4b/0x3c0 [ 1073.602907][T18194] ? import_iovec+0x73/0xa0 [ 1073.602937][T18194] ___sys_sendmsg+0x2a5/0x360 [ 1073.602966][T18194] ? _parse_integer_limit+0x1ae/0x1f0 [ 1073.602990][T18194] ? __pfx____sys_sendmsg+0x10/0x10 [ 1073.603024][T18194] ? irqentry_exit+0x218/0x8f0 [ 1073.603069][T18194] ? rcu_is_watching+0x15/0xb0 [ 1073.603118][T18194] ? lock_release+0x4b/0x3c0 [ 1073.603148][T18194] ? __might_fault+0xcb/0x130 [ 1073.603174][T18194] __sys_sendmmsg+0x273/0x4d0 [ 1073.603207][T18194] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1073.603243][T18194] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1073.603280][T18194] ? ksys_write+0x242/0x270 [ 1073.603309][T18194] ? __pfx_ksys_write+0x10/0x10 [ 1073.603340][T18194] __x64_sys_sendmmsg+0xa0/0xc0 [ 1073.603370][T18194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1073.603392][T18194] do_syscall_64+0x174/0x580 [ 1073.603421][T18194] ? clear_bhb_loop+0x40/0x90 [ 1073.603444][T18194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1073.603466][T18194] RIP: 0033:0x7fa3d119ce59 [ 1073.603486][T18194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1073.603504][T18194] RSP: 002b:00007fa3d1fe4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1073.603528][T18194] RAX: ffffffffffffffda RBX: 00007fa3d1415fa0 RCX: 00007fa3d119ce59 [ 1073.603544][T18194] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 1073.603559][T18194] RBP: 00007fa3d1fe4090 R08: 0000000000000000 R09: 0000000000000000 [ 1073.603572][T18194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1073.603584][T18194] R13: 00007fa3d1416038 R14: 00007fa3d1415fa0 R15: 00007ffc45788508 [ 1073.603616][T18194] [ 1073.604897][T18194] bond1 (unregistered): Released all slaves [ 1073.792013][T18196] __nla_validate_parse: 51 callbacks suppressed [ 1073.792077][T18196] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11323'. [ 1074.125863][T18198] netlink: 'syz.1.11330': attribute type 1 has an invalid length. [ 1074.125888][T18198] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11330'. [ 1074.128884][T18198] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11330'. [ 1074.794537][T18211] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11333'. [ 1074.828748][T18234] netlink: 56 bytes leftover after parsing attributes in process `syz.4.11335'. [ 1074.968406][T18245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11338'. [ 1075.304361][T18271] netlink: 'syz.4.11347': attribute type 1 has an invalid length. [ 1075.318496][T18275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11345'. [ 1075.328460][T18271] netlink: 228 bytes leftover after parsing attributes in process `syz.4.11347'. [ 1075.337858][T18275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11345'. [ 1075.348345][T18271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11347'. [ 1075.369832][T18276] batadv1: left allmulticast mode [ 1075.378079][T18276] batadv1: left promiscuous mode [ 1075.405677][T18276] bridge0: port 1(batadv1) entered disabled state [ 1075.444675][T18276] bridge_slave_1: left allmulticast mode [ 1075.456663][T18276] bridge_slave_1: left promiscuous mode [ 1075.483190][T18276] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.599916][ T3467] net_ratelimit: 70 callbacks suppressed [ 1075.599940][ T3467] bond2: (slave gretap1): failed to get link speed/duplex [ 1075.630027][ T3467] bond6: (slave bridge2): failed to get link speed/duplex [ 1075.645333][T18285] syzkaller0: entered promiscuous mode [ 1075.651804][T18285] syzkaller0: entered allmulticast mode [ 1075.666732][T18249] syzkaller0: entered promiscuous mode [ 1075.730065][ T6416] bond2: (slave gretap1): failed to get link speed/duplex [ 1075.760811][ T6416] bond6: (slave bridge2): failed to get link speed/duplex [ 1075.823712][T18295] lo speed is unknown, defaulting to 1000 [ 1075.837195][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1075.862742][ T3467] bond2: (slave gretap1): failed to get link speed/duplex [ 1075.899982][ T3467] bond6: (slave bridge2): failed to get link speed/duplex [ 1075.967381][T18295] xfrm0 speed is unknown, defaulting to 1000 [ 1075.990070][ T3468] bond2: (slave gretap1): failed to get link speed/duplex [ 1076.167686][T18325] xt_hashlimit: size too large, truncated to 1048576 [ 1076.192002][ T3468] bond2: (slave gretap1): failed to get link speed/duplex [ 1076.202728][ T6416] bond6: (slave bridge2): failed to get link speed/duplex [ 1076.603475][T18344] netlink: 'syz.4.11368': attribute type 1 has an invalid length. [ 1076.709017][T18350] netlink: 'syz.4.11371': attribute type 1 has an invalid length. [ 1076.734036][T18350] bond1: entered promiscuous mode [ 1076.739327][T18350] bond1: entered allmulticast mode [ 1076.745434][T18350] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1076.764521][T18350] macvlan2: entered promiscuous mode [ 1076.770897][T18350] macvlan2: entered allmulticast mode [ 1076.778324][T18350] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1077.498324][T18407] wg1: Caught tx_queue_len zero misconfig [ 1077.648254][T18412] netlink: 'syz.2.11387': attribute type 1 has an invalid length. [ 1077.928668][T18422] lo speed is unknown, defaulting to 1000 [ 1078.075887][T18422] xfrm0 speed is unknown, defaulting to 1000 [ 1078.388158][T18434] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.396482][T18434] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.733775][T18434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1078.752154][T18434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1078.959025][T18434] bond1: left promiscuous mode [ 1078.964170][T18434] bond1: left allmulticast mode [ 1078.996585][T18447] gretap0: entered promiscuous mode [ 1079.003272][ T3468] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.012346][ T3468] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.032272][ T6416] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.043607][ T6416] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.060098][T18433] lo speed is unknown, defaulting to 1000 [ 1079.078619][T18447] __nla_validate_parse: 17 callbacks suppressed [ 1079.078638][T18447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11394'. [ 1079.217471][T18460] (: renamed from veth0_to_hsr [ 1079.236615][T18433] xfrm0 speed is unknown, defaulting to 1000 [ 1079.369752][T18465] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11398'. [ 1079.442907][T18469] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1079.516941][T18469] netlink: 'syz.4.11399': attribute type 61 has an invalid length. [ 1079.522991][T18471] netlink: 'syz.4.11399': attribute type 61 has an invalid length. [ 1079.533992][T18469] netlink: 'syz.4.11399': attribute type 106 has an invalid length. [ 1079.542074][T18471] netlink: 'syz.4.11399': attribute type 106 has an invalid length. [ 1079.669949][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1079.946028][T18483] lo speed is unknown, defaulting to 1000 [ 1080.121997][T18483] xfrm0 speed is unknown, defaulting to 1000 [ 1080.149125][T18484] lo speed is unknown, defaulting to 1000 [ 1080.305765][T18499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11407'. [ 1080.459357][T18515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11410'. [ 1080.507150][T18484] xfrm0 speed is unknown, defaulting to 1000 [ 1080.643998][T18508] netlink: 128 bytes leftover after parsing attributes in process `syz.2.11410'. [ 1080.670067][T18508] net_ratelimit: 52 callbacks suppressed [ 1080.670090][T18508] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1080.721624][ T6415] bond6: (slave bridge2): failed to get link speed/duplex [ 1080.728852][ T6415] bond2: (slave gretap1): failed to get link speed/duplex [ 1080.895480][T10505] bond6: (slave bridge2): failed to get link speed/duplex [ 1080.915630][T18535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11418'. [ 1080.925095][ T6415] bond2: (slave gretap1): failed to get link speed/duplex [ 1081.009834][ T6414] bond6: (slave bridge2): failed to get link speed/duplex [ 1081.134525][T10505] bond2: (slave gretap1): failed to get link speed/duplex [ 1081.134793][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1081.153992][ T3467] bond6: (slave bridge2): failed to get link speed/duplex [ 1081.230618][T18558] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11424'. [ 1081.249800][ T3467] bond2: (slave gretap1): failed to get link speed/duplex [ 1081.466124][T18566] netlink: 'syz.0.11426': attribute type 1 has an invalid length. [ 1081.555266][ T8575] IPVS: starting estimator thread 0... [ 1081.575643][T18573] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11428'. [ 1081.616543][T18566] bond13: entered promiscuous mode [ 1081.623184][T18566] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1081.662275][T18574] IPVS: using max 35 ests per chain, 84000 per kthread [ 1081.694139][T18582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11430'. [ 1081.710954][T18566] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11426'. [ 1081.833774][T18588] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 1081.924807][ T30] audit: type=1107 audit(1782417695.255:31): pid=18587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='<øãÖÙ ‡î y’Abå"šˆh¹y¦ç@™ åWR-3ÂZe´¢oû—Ö,³Ÿâ²qÿ#ë±ß=pH.Ïm:›Uš–ÿ)ísãÅ*?ËhvÝ;Þ¡•&ŠÀsâ~GT÷ÅŸ>{wÜ ”û‡+,×6‚4Š#ï#rUcòâñú+#š4K`Ÿ±¯žþM6ɉÆëи Ú˜7ç ‡ƒh)àý¶p'ûYw¤' [ 1082.314834][T18619] IPv6: NLM_F_CREATE should be specified when creating new route [ 1082.350748][T18617] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1082.463053][T18624] bond14: option broadcast_neighbor: invalid value (30) [ 1082.476976][T18624] bond14 (unregistering): Released all slaves [ 1082.508656][T18628] tipc: MTU too low for tipc bearer [ 1082.624656][T18637] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1083.343232][T18661] ip6gre1: entered promiscuous mode [ 1083.348692][T18661] ip6gre1: entered allmulticast mode [ 1085.430230][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1085.489442][T18628] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1085.682048][ T6415] net_ratelimit: 77 callbacks suppressed [ 1085.682092][ T6415] bond2: (slave gretap1): failed to get link speed/duplex [ 1085.809887][T10505] bond6: (slave bridge2): failed to get link speed/duplex [ 1085.858077][T18687] netlink: 'syz.2.11455': attribute type 49 has an invalid length. [ 1085.965114][ T3467] bond6: (slave bridge2): failed to get link speed/duplex [ 1086.000517][T18690] Cannot find add_set index 0 as target [ 1086.007453][T18691] Cannot find add_set index 0 as target [ 1086.074617][T10505] bond2: (slave gretap1): failed to get link speed/duplex [ 1086.100394][T10505] bond6: (slave bridge2): failed to get link speed/duplex [ 1086.190526][T10505] bond2: (slave gretap1): failed to get link speed/duplex [ 1086.222471][T10505] bond6: (slave bridge2): failed to get link speed/duplex [ 1086.310345][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1086.318860][T10505] bond2: (slave gretap1): failed to get link speed/duplex [ 1086.349905][ T6412] bond6: (slave bridge2): failed to get link speed/duplex [ 1086.496165][T18717] __nla_validate_parse: 16 callbacks suppressed [ 1086.496189][T18717] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11466'. [ 1086.726378][T18726] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11468'. [ 1086.760498][T18717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11466'. [ 1087.009286][T18735] lo speed is unknown, defaulting to 1000 [ 1087.214446][T18735] xfrm0 speed is unknown, defaulting to 1000 [ 1087.258794][T18744] lo speed is unknown, defaulting to 1000 [ 1087.293576][T18744] lo speed is unknown, defaulting to 1000 [ 1087.299790][T18744] lo speed is unknown, defaulting to 1000 [ 1087.306203][T18744] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1087.369070][T18744] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1087.386365][T18744] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1087.402205][T18744] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1087.573077][T18747] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11473'. [ 1087.592746][T18744] lo speed is unknown, defaulting to 1000 [ 1087.694374][T18744] lo speed is unknown, defaulting to 1000 [ 1087.749232][T18744] lo speed is unknown, defaulting to 1000 [ 1087.764095][T18753] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11475'. [ 1087.774851][T18753] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11475'. [ 1087.794606][T18744] lo speed is unknown, defaulting to 1000 [ 1087.823103][T18744] lo speed is unknown, defaulting to 1000 [ 1087.831699][T18744] lo speed is unknown, defaulting to 1000 [ 1087.838603][T18744] lo speed is unknown, defaulting to 1000 [ 1087.847198][T18744] lo speed is unknown, defaulting to 1000 [ 1087.854173][T18744] lo speed is unknown, defaulting to 1000 [ 1087.861862][T18744] lo speed is unknown, defaulting to 1000 [ 1087.868675][T18744] lo speed is unknown, defaulting to 1000 [ 1087.876059][T18744] lo speed is unknown, defaulting to 1000 [ 1087.882883][T18744] lo speed is unknown, defaulting to 1000 [ 1087.889649][T18744] lo speed is unknown, defaulting to 1000 [ 1087.896390][T18744] lo speed is unknown, defaulting to 1000 [ 1087.903268][T18744] lo speed is unknown, defaulting to 1000 [ 1088.184980][T18778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11484'. [ 1088.226577][T18782] lo speed is unknown, defaulting to 1000 [ 1088.486435][T18782] xfrm0 speed is unknown, defaulting to 1000 [ 1088.497118][T18782] lo speed is unknown, defaulting to 1000 [ 1088.630169][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1088.842386][T18813] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11490'. [ 1088.866113][T18813] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1088.959464][T18813] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11490'. [ 1088.974621][T18813] ipvlan2: entered allmulticast mode [ 1088.979991][T18813] bond2: entered allmulticast mode [ 1089.067948][T18823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11492'. [ 1089.426617][T18845] syzkaller1: entered promiscuous mode [ 1089.439311][T18845] syzkaller1: entered allmulticast mode [ 1089.571355][T18842] netlink: 'syz.1.11497': attribute type 1 has an invalid length. [ 1089.610020][T18842] netlink: 'syz.1.11497': attribute type 1 has an invalid length. [ 1089.689038][T18842] netlink: 'syz.1.11497': attribute type 8 has an invalid length. [ 1089.694792][T18866] vlan2: entered promiscuous mode [ 1089.731707][T18866] macvlan0: entered promiscuous mode [ 1090.743884][T18932] syzkaller0: entered promiscuous mode [ 1090.750627][T18932] syzkaller0: entered allmulticast mode [ 1090.769912][T10506] net_ratelimit: 52 callbacks suppressed [ 1090.769951][T10506] bond2: (slave gretap1): failed to get link speed/duplex [ 1090.821678][ T6412] bond6: (slave bridge2): failed to get link speed/duplex [ 1090.890437][ T3467] bond2: (slave gretap1): failed to get link speed/duplex [ 1090.950147][T10505] bond6: (slave bridge2): failed to get link speed/duplex [ 1091.010803][T10505] bond2: (slave gretap1): failed to get link speed/duplex [ 1091.072332][T10505] bond6: (slave bridge2): failed to get link speed/duplex [ 1091.130210][T10506] bond2: (slave gretap1): failed to get link speed/duplex [ 1091.190041][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1091.210233][T10506] bond6: (slave bridge2): failed to get link speed/duplex [ 1091.261784][ T3468] bond2: (slave gretap1): failed to get link speed/duplex [ 1091.284914][T18962] netlink: 'syz.2.11522': attribute type 1 has an invalid length. [ 1091.443800][T18965] bond12: (slave veth3): Enslaving as an active interface with a down link [ 1091.542044][T18962] bond12: (slave veth5): Enslaving as an active interface with a down link [ 1091.553788][T18965] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1091.580747][ T3468] bond6: (slave bridge2): failed to get link speed/duplex [ 1091.957390][ T5628] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1091.967137][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1091.977059][ T5628] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1091.991764][ T5628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1091.999642][ T5628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1092.676869][ T7452] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1092.706821][T19033] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1092.718469][T19033] bond10: left promiscuous mode [ 1092.726129][T19033] bridge9: left promiscuous mode [ 1092.735077][T19033] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1092.748678][T19033] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1092.761057][T19033] geneve2: left promiscuous mode [ 1092.771873][T19033] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1092.788090][T19033] ip6gre3: left promiscuous mode [ 1092.806239][T19033] vlan3: left promiscuous mode [ 1092.813608][T19033] bond_slave_1: left promiscuous mode [ 1092.818271][T19045] xt_CT: No such helper "snmp_trap" [ 1092.856248][T19004] lo speed is unknown, defaulting to 1000 [ 1092.910881][T19050] xt_hashlimit: size too large, truncated to 1048576 [ 1092.927972][ T6414] bond12: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 1092.929708][T13914] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1092.952823][ T6414] bond12: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 1092.974366][ T6414] bond12: (slave veth3): making interface the new active one [ 1092.991356][ T6414] bond12: active interface up! [ 1093.008717][T19004] xfrm0 speed is unknown, defaulting to 1000 [ 1093.015699][T19004] lo speed is unknown, defaulting to 1000 [ 1093.085998][ T7452] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1093.263391][T19042] __nla_validate_parse: 9 callbacks suppressed [ 1093.263410][T19042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11540'. [ 1093.327605][T19042] xt_hashlimit: size too large, truncated to 1048576 [ 1093.472063][T19004] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.481473][T19004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1093.499835][T19004] bridge_slave_0: entered allmulticast mode [ 1093.507181][T19004] bridge_slave_0: entered promiscuous mode [ 1093.549331][T19004] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.556553][T19004] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.563924][T19004] bridge_slave_1: entered allmulticast mode [ 1093.571247][T19004] bridge_slave_1: entered promiscuous mode [ 1093.597967][T19004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1093.610161][T19004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1093.647054][T19004] team0: Port device team_slave_0 added [ 1093.656092][T19004] team0: Port device team_slave_1 added [ 1093.679086][T19004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1093.708744][T19004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1093.753116][T19004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1093.778865][T19004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1093.786110][T19004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1093.812053][T19004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1093.866120][T19004] hsr_slave_0: entered promiscuous mode [ 1093.872891][T19004] hsr_slave_1: entered promiscuous mode [ 1093.879477][T19004] debugfs: 'hsr0' already exists in 'hsr' [ 1093.885285][T19004] Cannot create hsr debugfs directory [ 1093.897261][T19072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11549'. [ 1093.946083][T19074] syzkaller0: entered promiscuous mode [ 1093.954929][T19074] syzkaller0: entered allmulticast mode [ 1093.971928][T13914] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1094.048682][T19074] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11548'. [ 1094.072848][ T4936] Bluetooth: hci1: command tx timeout [ 1094.078710][T19080] netlink: 'syz.1.11551': attribute type 1 has an invalid length. [ 1094.105805][T19077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11550'. [ 1094.182567][T19084] netlink: 260 bytes leftover after parsing attributes in process `syz.2.11552'. [ 1094.195179][T19080] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1094.249257][T19083] bridge0: entered promiscuous mode [ 1094.254565][T19083] bridge0: entered allmulticast mode [ 1094.279570][T19080] bond1: (slave veth0_to_bond): making interface the new active one [ 1094.295010][T19080] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1094.349341][T19080] macvlan0: entered promiscuous mode [ 1094.355302][T19080] macvlan0: entered allmulticast mode [ 1094.363131][T19080] bond1: entered promiscuous mode [ 1094.368602][T19080] veth0_to_bond: entered promiscuous mode [ 1094.377650][T19080] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1094.388569][T19080] bond1: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1094.407941][T19080] bond1: left promiscuous mode [ 1094.412780][T19080] veth0_to_bond: left promiscuous mode [ 1094.486915][T19098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11556'. [ 1094.496823][T19098] netlink: 'syz.2.11556': attribute type 5 has an invalid length. [ 1094.506436][T19098] netlink: 'syz.2.11556': attribute type 8 has an invalid length. [ 1094.519109][T19098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11556'. [ 1094.530778][T19100] netlink: 149280 bytes leftover after parsing attributes in process `syz.4.11554'. [ 1094.542542][T19098] geneve3: entered promiscuous mode [ 1094.547938][T19098] geneve3: entered allmulticast mode [ 1094.557916][ T6414] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 41919 - 0 [ 1094.571584][ T6414] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 41919 - 0 [ 1094.580742][ T6414] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 41919 - 0 [ 1094.591334][ T6414] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 41919 - 0 [ 1094.651034][T19104] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11558'. [ 1094.688923][T19108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11560'. [ 1094.887283][ T5731] IPVS: starting estimator thread 0... [ 1094.911098][T19111] bridge3: entered promiscuous mode [ 1094.922721][T19111] bridge3: entered allmulticast mode [ 1094.933074][T19111] team0: Port device bridge3 added [ 1095.156008][T19122] IPVS: using max 43 ests per chain, 103200 per kthread [ 1095.220801][T19004] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1095.232950][T19004] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1095.241531][T19004] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1095.257134][T19004] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1095.282503][T19004] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1095.297276][T19004] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1095.320860][T19004] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1095.336673][T19004] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1095.392295][T19160] netlink: 'syz.1.11566': attribute type 1 has an invalid length. [ 1095.457472][T19004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1095.479908][T19004] 8021q: adding VLAN 0 to HW filter on device team0 [ 1095.493122][T10505] bridge0: port 1(bridge_slave_0) entered blocking state [ 1095.500362][T10505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1095.525983][ T6414] bridge0: port 2(bridge_slave_1) entered blocking state [ 1095.533174][ T6414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1095.589208][T19004] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1095.604390][T19004] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1095.690272][ T3467] bridge0: left allmulticast mode [ 1095.771476][ T3467] batman_adv: batadv0: Interface deactivated: vlan2 [ 1095.867930][ T3467] bond4 (unregistering): (slave gretap1): Releasing backup interface [ 1095.952930][ T3467] geneve0 (unregistering): left promiscuous mode [ 1095.965092][ T3467] batman_adv: batadv0: Removing interface: vlan2 [ 1095.978475][ T3467] team0: Port device bridge1 removed [ 1095.987033][ T3467] team0: Port device bridge2 removed [ 1096.005308][ T3467] bond7 (unregistering): (slave bridge4): Releasing backup interface [ 1096.026694][ T3467] bond0 (unregistering): Released all slaves [ 1096.038587][ T3467] bond1 (unregistering): Released all slaves [ 1096.051861][ T3467] bond2 (unregistering): Released all slaves [ 1096.070710][ T3467] bond3 (unregistering): Released all slaves [ 1096.082194][ T3467] bond4 (unregistering): (slave bond5): Releasing backup interface [ 1096.091499][ T3467] bond4 (unregistering): Released all slaves [ 1096.103876][ T3467] bond5 (unregistering): Released all slaves [ 1096.117096][ T3467] bond6 (unregistering): Released all slaves [ 1096.137036][ T3467] bond7 (unregistering): Released all slaves [ 1096.147616][ T3467] bond8 (unregistering): Released all slaves [ 1096.151107][ T4936] Bluetooth: hci1: command tx timeout [ 1096.162658][ T3467] bond9 (unregistering): Released all slaves [ 1096.173054][ T3467] bond10 (unregistering): Released all slaves [ 1096.318128][T10505] net_ratelimit: 55 callbacks suppressed [ 1096.318151][T10505] bond2: (slave gretap1): failed to get link speed/duplex [ 1096.387453][T19194] netlink: 'syz.2.11572': attribute type 2 has an invalid length. [ 1096.406911][ T3467] tipc: Disabling bearer [ 1096.431721][ T3467] tipc: Left network mode [ 1096.459835][T10505] bond6: (slave bridge2): failed to get link speed/duplex [ 1096.467076][ T3468] bond2: (slave gretap1): failed to get link speed/duplex [ 1096.483878][T19004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1096.519057][T19004] veth0_vlan: entered promiscuous mode [ 1096.535327][T19004] veth1_vlan: entered promiscuous mode [ 1096.566317][T19004] veth0_macvtap: entered promiscuous mode [ 1096.578147][T19004] veth1_macvtap: entered promiscuous mode [ 1096.645135][T19004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1096.658173][T19004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1096.675410][ T6416] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.696861][ T6416] bond2: (slave gretap1): failed to get link speed/duplex [ 1096.721998][T10506] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.730792][T10506] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.749275][T10506] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.885910][T10506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1096.911648][T10506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1096.985990][T10506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1096.994456][T10506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1097.018402][ T6416] bond2: (slave gretap1): failed to get link speed/duplex [ 1097.026739][ T6416] bond6: (slave bridge2): failed to get link speed/duplex [ 1097.187544][T19214] bridge_slave_0: left allmulticast mode [ 1097.202545][T19214] bridge_slave_0: left promiscuous mode [ 1097.217450][T19214] bridge0: port 1(bridge_slave_0) entered disabled state [ 1097.237690][T19214] bridge_slave_1: left allmulticast mode [ 1097.245206][T19214] bridge_slave_1: left promiscuous mode [ 1097.256859][T19214] bridge0: port 2(bridge_slave_1) entered disabled state [ 1097.274099][T19214] bond1: (slave veth0_to_bond): Releasing active interface [ 1097.304452][T19214] bond0: (slave bond_slave_0): Releasing backup interface [ 1097.324746][T19214] bond0: (slave bond_slave_1): Releasing backup interface [ 1097.357232][T19214] team0: Port device team_slave_0 removed [ 1097.377912][T19214] team0: Port device team_slave_1 removed [ 1097.387185][T19214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1097.395736][T19214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1097.407941][T19214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1097.417032][T19214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1097.427459][T19214] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1097.504798][ T6416] bond6: (slave bridge2): failed to get link speed/duplex [ 1097.542355][ T6412] bond2: (slave gretap1): failed to get link speed/duplex [ 1097.590064][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1097.629927][T10506] bond6: (slave bridge2): failed to get link speed/duplex [ 1097.644741][T19229] IPVS: Error connecting to the multicast addr [ 1097.757926][T19235] tipc: Enabled bearer , priority 0 [ 1097.894925][T19235] syzkaller0: entered promiscuous mode [ 1097.917946][T19235] syzkaller0: entered allmulticast mode [ 1097.939032][T19235] tipc: Resetting bearer [ 1097.972885][T19250] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1097.985116][T19233] tipc: Resetting bearer [ 1097.995378][T19250] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1098.015043][T19250] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1098.232202][ T4936] Bluetooth: hci1: command tx timeout [ 1098.401969][T19274] __nla_validate_parse: 7 callbacks suppressed [ 1098.401991][T19274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11589'. [ 1098.936040][T19233] tipc: Disabling bearer [ 1098.953108][T19277] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 1098.995330][T19279] netlink: 48 bytes leftover after parsing attributes in process `syz.3.11593'. [ 1099.267144][T19297] netlink: 272 bytes leftover after parsing attributes in process `syz.1.11597'. [ 1099.282285][T19297] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11597'. [ 1099.328592][T19289] tipc: Enabled bearer , priority 0 [ 1099.337527][T19283] syzkaller0: entered promiscuous mode [ 1099.344402][T19283] syzkaller0: entered allmulticast mode [ 1099.357150][T19299] hmó3)óÿ: entered promiscuous mode [ 1099.379376][T19283] tipc: Resetting bearer [ 1099.445303][T19282] tipc: Resetting bearer [ 1099.454292][T19282] tipc: Disabling bearer [ 1099.530050][T19302] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11599'. [ 1099.570395][T19312] netlink: 'syz.3.11602': attribute type 1 has an invalid length. [ 1099.608570][T19302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11599'. [ 1099.657738][ T3467] hsr_slave_0: left promiscuous mode [ 1099.679384][ T3467] hsr_slave_1: left promiscuous mode [ 1099.690449][ T3467] veth1_macvtap: left promiscuous mode [ 1099.721272][ T3467] veth0_macvtap: left promiscuous mode [ 1099.727257][ T3467] veth1_vlan: left promiscuous mode [ 1099.733750][ T3467] veth0_vlan: left promiscuous mode [ 1100.056836][T19334] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11606'. [ 1100.074122][T19334] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11606'. [ 1100.092957][T19334] netlink: 'syz.4.11606': attribute type 4 has an invalid length. [ 1100.143661][T19349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11609'. [ 1100.152688][T19349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11609'. [ 1100.357219][ T4936] Bluetooth: hci1: command tx timeout [ 1100.479226][T19359] bridge3: left promiscuous mode [ 1100.784445][ T5724] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1100.835833][ T7452] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1100.853338][ T3467] IPVS: stop unused estimator thread 0... [ 1100.930330][ T7452] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1101.093519][ T7452] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1101.267398][T19404] xt_hashlimit: overflow, try lower: 6/0 [ 1101.340431][T10505] net_ratelimit: 25 callbacks suppressed [ 1101.340456][T10505] bond6: (slave bridge2): failed to get link speed/duplex [ 1101.440008][ T6416] bond2: (slave gretap1): failed to get link speed/duplex [ 1101.501654][ T6414] bond6: (slave bridge2): failed to get link speed/duplex [ 1101.824669][T19422] gre0: Caught tx_queue_len zero misconfig [ 1101.850550][ T6416] bond2: (slave gretap1): failed to get link speed/duplex [ 1101.880734][ T6416] bond6: (slave bridge2): failed to get link speed/duplex [ 1101.970422][ T3468] bond2: (slave gretap1): failed to get link speed/duplex [ 1102.010105][ T6416] bond6: (slave bridge2): failed to get link speed/duplex [ 1102.078827][T19427] openvswitch: netlink: IP tunnel dst address not specified [ 1102.099882][ T6415] bond2: (slave gretap1): failed to get link speed/duplex [ 1102.130155][ T6416] bond6: (slave bridge2): failed to get link speed/duplex [ 1102.517623][T19427] IPVS: Error joining to the multicast group [ 1102.545317][T19427] No such timeout policy "syz0" [ 1102.806982][T19449] netlink: 'syz.4.11633': attribute type 11 has an invalid length. [ 1104.243733][T19404] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1104.410069][T19485] netlink: 'syz.1.11642': attribute type 1 has an invalid length. [ 1104.420370][T19482] netlink: 'syz.2.11641': attribute type 5 has an invalid length. [ 1104.542456][T19487] syzkaller0: entered promiscuous mode [ 1104.559347][T19487] syzkaller0: entered allmulticast mode [ 1104.586321][T19490] tipc: Started in network mode [ 1104.606141][T19490] tipc: Node identity fa8db9164bc1, cluster identity 4711 [ 1104.633868][T19490] tipc: Enabled bearer , priority 0 [ 1104.671301][T19500] __nla_validate_parse: 9 callbacks suppressed [ 1104.671324][T19500] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11647'. [ 1104.747963][T19503] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11647'. [ 1104.796148][ T3467] tipc: Resetting bearer [ 1104.808016][T19487] tipc: Resetting bearer [ 1104.822092][T19480] tipc: Enabling of bearer rejected, already enabled [ 1104.886048][T19511] netlink: 100 bytes leftover after parsing attributes in process `syz.0.11644'. [ 1104.895672][T19511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11644'. [ 1104.904923][T19473] tipc: Resetting bearer [ 1104.911136][T19511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11644'. [ 1105.222207][T19473] tipc: Disabling bearer [ 1105.373237][T19540] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11658'. [ 1105.421881][T19540] bond3: entered promiscuous mode [ 1105.428646][T19540] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1105.497707][T19540] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1105.509212][T19540] bond3: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 1105.525881][T19540] bond3: (slave ip6gre2): Error -95 calling set_mac_address [ 1105.714257][T19553] netlink: 'syz.0.11655': attribute type 12 has an invalid length. [ 1105.790750][T19558] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11662'. [ 1105.970427][T19566] syzkaller0: entered promiscuous mode [ 1105.976198][T19566] syzkaller0: entered allmulticast mode [ 1105.987771][T19566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11663'. [ 1106.006791][T19546] lo speed is unknown, defaulting to 1000 [ 1106.026850][T19569] netlink: 'syz.4.11665': attribute type 1 has an invalid length. [ 1106.036703][T19569] netlink: 'syz.4.11665': attribute type 1 has an invalid length. [ 1106.054552][T19572] netlink: 'syz.1.11666': attribute type 1 has an invalid length. [ 1106.324818][T19580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11669'. [ 1106.358974][T19580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11669'. [ 1106.407270][T19580] netlink: 'syz.2.11669': attribute type 2 has an invalid length. [ 1106.552671][ T6415] net_ratelimit: 377 callbacks suppressed [ 1106.552696][ T6415] bond6: (slave bridge2): failed to get link speed/duplex [ 1106.595431][ T3468] bond2: (slave gretap1): failed to get link speed/duplex [ 1106.651823][T19607] netlink: 'syz.2.11673': attribute type 1 has an invalid length. [ 1106.709204][T19607] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1106.755899][ T6415] bond6: (slave bridge2): failed to get link speed/duplex [ 1106.763809][ T6415] bond2: (slave gretap1): failed to get link speed/duplex [ 1106.844806][T19597] bond13: (slave erspan0): Enslaving as a backup interface with an up link [ 1106.896441][ T3468] bond6: (slave bridge2): failed to get link speed/duplex [ 1106.921057][ T3467] bond13: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1106.941608][ T3468] bond2: (slave gretap1): failed to get link speed/duplex [ 1107.006911][T19629] netlink: 'syz.4.11681': attribute type 1 has an invalid length. [ 1107.010876][ T3468] bond6: (slave bridge2): failed to get link speed/duplex [ 1107.039855][ T3468] bond13: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1107.070411][ T6414] bond2: (slave gretap1): failed to get link speed/duplex [ 1107.261493][T19545] lo speed is unknown, defaulting to 1000 [ 1107.267742][T19546] xfrm0 speed is unknown, defaulting to 1000 [ 1107.286585][T19546] lo speed is unknown, defaulting to 1000 [ 1107.462678][T19545] xfrm0 speed is unknown, defaulting to 1000 [ 1107.471941][T19545] lo speed is unknown, defaulting to 1000 [ 1107.767492][T19654] sctp: [Deprecated]: syz.3.11686 (pid 19654) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1107.767492][T19654] Use struct sctp_sack_info instead [ 1107.787187][T19654] sctp: [Deprecated]: syz.3.11686 (pid 19654) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1107.787187][T19654] Use struct sctp_sack_info instead [ 1107.806893][T19654] sctp: [Deprecated]: syz.3.11686 (pid 19654) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1107.806893][T19654] Use struct sctp_sack_info instead [ 1107.827519][T19655] sctp: [Deprecated]: syz.3.11686 (pid 19655) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1107.827519][T19655] Use struct sctp_sack_info instead [ 1108.013718][T19639] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1108.252270][T19674] validate_nla: 2 callbacks suppressed [ 1108.252292][T19674] netlink: 'syz.1.11693': attribute type 1 has an invalid length. [ 1108.327984][T19686] ip6gre1: entered promiscuous mode [ 1108.335394][T19686] ip6gre1: entered allmulticast mode [ 1108.343509][ T3468] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1108.355314][ T3468] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1108.369910][ T8575] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1108.510695][ T8575] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1108.762432][T19704] bridge3: entered promiscuous mode [ 1108.767735][T19704] bridge3: entered allmulticast mode [ 1108.776235][T19704] team0: Port device bridge3 added [ 1108.915327][T19716] netlink: 'syz.2.11706': attribute type 3 has an invalid length. [ 1109.112574][ T5731] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1109.476192][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888024e21000: rx timeout, send abort [ 1109.485414][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888024e21000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1109.784926][T19760] __nla_validate_parse: 6 callbacks suppressed [ 1109.784947][T19760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11721'. [ 1109.881434][T19753] pim6reg1: entered allmulticast mode [ 1110.411523][T19787] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11728'. [ 1110.769736][T19806] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11735'. [ 1111.033232][ T5731] hsr0: entered promiscuous mode [ 1111.161359][T19815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11740'. [ 1111.268473][T19817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11741'. [ 1111.427132][T19828] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11747'. [ 1111.541584][T19833] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.11748'. [ 1111.572225][ T3468] net_ratelimit: 70 callbacks suppressed [ 1111.572249][ T3468] bond2: (slave gretap1): failed to get link speed/duplex [ 1111.621150][ T3468] bond6: (slave bridge2): failed to get link speed/duplex [ 1111.722301][ T6415] bond2: (slave gretap1): failed to get link speed/duplex [ 1111.760522][ T6414] bond6: (slave bridge2): failed to get link speed/duplex [ 1111.775074][T19846] Bluetooth: MGMT ver 1.23 [ 1111.840851][ T3468] bond2: (slave gretap1): failed to get link speed/duplex [ 1111.893420][ T3468] bond6: (slave bridge2): failed to get link speed/duplex [ 1111.914418][T19849] netlink: 'syz.4.11752': attribute type 13 has an invalid length. [ 1111.926503][T19849] netlink: 'syz.4.11752': attribute type 17 has an invalid length. [ 1112.001011][T19849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1112.012142][T19849] 8021q: adding VLAN 0 to HW filter on device team0 [ 1112.041285][T19849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1112.094878][T19849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1112.106148][T19849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1112.128726][T19849] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1112.144897][T19849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1112.177156][T19849] veth1_vlan: left promiscuous mode [ 1112.185190][T19849] veth0_vlan: left promiscuous mode [ 1112.195966][T19849] veth0_vlan: entered promiscuous mode [ 1112.212425][T19849] veth1_vlan: entered promiscuous mode [ 1112.243683][T19849] veth1_macvtap: left promiscuous mode [ 1112.254922][T19849] veth0_macvtap: left promiscuous mode [ 1112.263684][T19849] veth0_macvtap: entered promiscuous mode [ 1112.284846][T19849] veth1_macvtap: entered promiscuous mode [ 1112.301604][T19849] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1112.322372][T19849] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1112.344567][T19849] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1112.364973][T19849] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1112.387938][T19849] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1112.407127][T19849] ip6gre1: left promiscuous mode [ 1112.413237][T19849] ip6gre1: left allmulticast mode [ 1112.424568][T19849] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1112.434224][T19849] ipvlan2: left allmulticast mode [ 1112.441708][T19849] bond2: left allmulticast mode [ 1112.447309][T19849] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1112.461027][T19849] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1112.469859][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1112.485271][T19849] bridge3: left promiscuous mode [ 1112.490737][T19849] bridge3: left allmulticast mode [ 1112.580804][ T6415] bridge0: port 1(bridge_slave_0) entered blocking state [ 1112.588052][ T6415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1112.601966][ T6415] bridge0: port 2(bridge_slave_1) entered blocking state [ 1112.609190][ T6415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1112.678949][T19858] syzkaller0: entered promiscuous mode [ 1112.724232][T19858] syzkaller0: entered allmulticast mode [ 1112.745027][ T6412] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.756322][ T6412] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.766572][ T6412] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.776213][ T6412] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.883730][T10505] bond2: (slave gretap1): failed to get link speed/duplex [ 1112.910333][T10505] bond6: (slave bridge2): failed to get link speed/duplex [ 1113.021412][T19882] netlink: 'syz.3.11762': attribute type 10 has an invalid length. [ 1113.029598][T19882] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11762'. [ 1113.112749][T19884] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11763'. [ 1113.138985][T19887] netlink: 'syz.3.11764': attribute type 39 has an invalid length. [ 1113.163682][T19884] ip6gre2: entered promiscuous mode [ 1113.169154][T19884] ip6gre2: entered allmulticast mode [ 1113.230184][T10505] bond6: (slave bridge2): failed to get link speed/duplex [ 1113.249756][ T6416] bond2: (slave gretap1): failed to get link speed/duplex [ 1113.301845][T19890] netlink: 'syz.4.11765': attribute type 21 has an invalid length. [ 1113.310465][T19890] netlink: 'syz.4.11765': attribute type 1 has an invalid length. [ 1113.318408][T19890] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11765'. [ 1113.365551][T19894] syzkaller0: entered promiscuous mode [ 1113.372126][T19894] syzkaller0: entered allmulticast mode [ 1113.831491][ T4936] Bluetooth: hci0: command tx timeout [ 1113.864056][T19909] 8021q: VLANs not supported on ip6tnl0 [ 1114.423005][T19945] bond4: Unable to set down delay as MII monitoring is disabled [ 1114.434647][T19945] bond4 (unregistering): Released all slaves [ 1114.538401][T19945] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1114.744099][T19965] tipc: Enabling of bearer rejected, failed to enable media [ 1114.817196][T19974] __nla_validate_parse: 5 callbacks suppressed [ 1114.817211][T19974] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11790'. [ 1114.835096][T19974] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11790'. [ 1114.998609][T19979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11791'. [ 1115.043670][T19985] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11792'. [ 1115.079933][T19985] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11792'. [ 1115.097675][T19985] bridge0: port 1(vlan0) entered blocking state [ 1115.123592][T19985] bridge0: port 1(vlan0) entered disabled state [ 1115.135424][T19985] vlan0: entered allmulticast mode [ 1115.141649][T19985] geneve0: entered allmulticast mode [ 1115.283259][T19994] netlink: 'syz.3.11797': attribute type 1 has an invalid length. [ 1115.387205][T19994] syzkaller0: entered promiscuous mode [ 1115.396143][T19994] syzkaller0: entered allmulticast mode [ 1115.402848][T19998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11799'. [ 1115.425317][T19998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11799'. [ 1115.703010][T20019] syzkaller0: entered promiscuous mode [ 1115.719208][T20019] syzkaller0: entered allmulticast mode [ 1116.063771][T20048] pim6reg1: entered promiscuous mode [ 1116.070293][T20048] pim6reg1: entered allmulticast mode [ 1116.291800][T20066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11815'. [ 1116.306003][T20066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11815'. [ 1116.381110][T20071] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11817'. [ 1116.595813][T20081] net_ratelimit: 44 callbacks suppressed [ 1116.595853][T20081] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1116.650474][ T6412] bond2: (slave gretap1): failed to get link speed/duplex [ 1116.750431][ T6412] bond6: (slave bridge2): failed to get link speed/duplex [ 1116.758927][T20085] netlink: 'syz.4.11823': attribute type 11 has an invalid length. [ 1116.771524][ T6412] bond2: (slave gretap1): failed to get link speed/duplex [ 1116.860299][T10505] bond6: (slave bridge2): failed to get link speed/duplex [ 1116.900553][T10505] bond2: (slave gretap1): failed to get link speed/duplex [ 1116.972416][ T6415] bond6: (slave bridge2): failed to get link speed/duplex [ 1117.009925][T10505] bond2: (slave gretap1): failed to get link speed/duplex [ 1117.059380][T20102] geneve2: entered promiscuous mode [ 1117.067490][T20106] netlink: 'syz.2.11829': attribute type 29 has an invalid length. [ 1117.084691][T20106] netlink: 'syz.2.11829': attribute type 29 has an invalid length. [ 1117.095115][ T3468] bond6: (slave bridge2): failed to get link speed/duplex [ 1117.126328][T20107] syz_tun: entered promiscuous mode [ 1117.142125][T20107] macvlan2: entered allmulticast mode [ 1117.158487][T20107] syz_tun: entered allmulticast mode [ 1117.238080][T20109] macvlan3: entered allmulticast mode [ 1117.260747][T20106] netlink: 'syz.2.11829': attribute type 29 has an invalid length. [ 1117.271459][T10505] bond6: (slave bridge2): failed to get link speed/duplex [ 1117.320657][T20106] netlink: 'syz.2.11829': attribute type 29 has an invalid length. [ 1117.357696][T20106] netlink: 'syz.2.11829': attribute type 29 has an invalid length. [ 1117.366966][T20106] netlink: 'syz.2.11829': attribute type 29 has an invalid length. [ 1117.375931][T20106] netlink: 'syz.2.11829': attribute type 29 has an invalid length. [ 1117.842513][T20143] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1118.076968][T20152] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1118.091489][T20152] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1118.098902][T20152] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1118.109403][T20152] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1118.118519][T20152] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1118.150002][ T5628] Bluetooth: hci1: command 0x0405 tx timeout [ 1118.337152][T20147] syzkaller0: entered promiscuous mode [ 1118.343388][T20147] syzkaller0: entered allmulticast mode [ 1118.413955][T20166] validate_nla: 33 callbacks suppressed [ 1118.413978][T20166] netlink: 'syz.1.11841': attribute type 11 has an invalid length. [ 1118.493954][T20172] netlink: 'syz.1.11842': attribute type 1 has an invalid length. [ 1118.639730][T20150] lo speed is unknown, defaulting to 1000 [ 1118.677543][T20185] xt_hashlimit: size too large, truncated to 1048576 [ 1118.816942][T20150] xfrm0 speed is unknown, defaulting to 1000 [ 1118.838181][T20150] lo speed is unknown, defaulting to 1000 [ 1118.916424][T20196] syzkaller0: entered promiscuous mode [ 1118.922792][T20196] syzkaller0: entered allmulticast mode [ 1119.329521][T20150] bridge0: port 1(bridge_slave_0) entered blocking state [ 1119.343193][T20150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1119.351799][T20150] bridge_slave_0: entered allmulticast mode [ 1119.361581][T20150] bridge_slave_0: entered promiscuous mode [ 1119.374023][T20150] bridge0: port 2(bridge_slave_1) entered blocking state [ 1119.382687][T20150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.390921][T20150] bridge_slave_1: entered allmulticast mode [ 1119.398926][T20150] bridge_slave_1: entered promiscuous mode [ 1119.442791][T20150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1119.465377][T20215] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.482296][T20150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1119.512889][T20150] team0: Port device team_slave_0 added [ 1119.521497][T20150] team0: Port device team_slave_1 added [ 1119.554913][T20150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1119.561925][T20150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1119.587840][T20150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1119.600383][T20150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1119.607374][T20150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1119.633289][T20150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1119.733072][T20150] hsr_slave_0: entered promiscuous mode [ 1119.744822][T20150] hsr_slave_1: entered promiscuous mode [ 1119.756449][T20150] debugfs: 'hsr0' already exists in 'hsr' [ 1119.765879][T20150] Cannot create hsr debugfs directory [ 1119.835348][T20220] syzkaller0: entered promiscuous mode [ 1119.842571][T20220] syzkaller0: entered allmulticast mode [ 1119.906608][T20220] tcf_pedit_act: 22 callbacks suppressed [ 1119.906628][T20220] tc action pedit 'at' offset 20 out of bounds [ 1119.955222][T20226] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1120.064534][T20150] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.096653][T20150] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 41919 - 0 [ 1120.169199][T20215] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.215806][ T5628] Bluetooth: hci2: command tx timeout [ 1120.263738][T20150] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.301210][T20150] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 41919 - 0 [ 1120.376135][T20215] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.416186][T20150] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.430804][T20150] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 41919 - 0 [ 1120.462033][T20215] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.511312][T20150] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.522092][T20150] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 41919 - 0 [ 1120.563222][ T3468] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.581379][ T3468] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.596373][ T3468] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.634458][ T3468] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.734820][T20259] __nla_validate_parse: 50 callbacks suppressed [ 1120.734845][T20259] netlink: 52 bytes leftover after parsing attributes in process `syz.0.11863'. [ 1121.166254][T20245] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1121.181201][T20150] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1121.211117][T20150] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1121.236128][T20150] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1121.251928][T20150] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1121.261842][T20150] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1121.270662][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1121.301943][T20150] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1121.338464][T20150] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1121.351734][T20150] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1121.359305][T20267] netlink: 'syz.3.11866': attribute type 1 has an invalid length. [ 1121.370863][T20269] x_tables: duplicate underflow at hook 2 [ 1121.379119][T20267] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1121.512413][T20283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11869'. [ 1121.538538][T20150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1121.561620][T20283] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.11869'. [ 1121.579147][T20281] lo speed is unknown, defaulting to 1000 [ 1121.600579][T20283] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.11869'. [ 1121.611035][T20150] 8021q: adding VLAN 0 to HW filter on device team0 [ 1121.639411][ T3467] bridge0: port 1(bridge_slave_0) entered blocking state [ 1121.646807][ T3467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1121.689691][ T3467] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.696916][ T3467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1121.790113][T20281] xfrm0 speed is unknown, defaulting to 1000 [ 1121.797378][T20281] lo speed is unknown, defaulting to 1000 [ 1121.900261][ T6416] net_ratelimit: 32 callbacks suppressed [ 1121.900282][ T6416] bond2: (slave gretap1): failed to get link speed/duplex [ 1121.942313][ T3468] bond6: (slave bridge2): failed to get link speed/duplex [ 1122.020829][ T3467] bond2: (slave gretap1): failed to get link speed/duplex [ 1122.071733][ T6415] bond6: (slave bridge2): failed to get link speed/duplex [ 1122.140251][ T6415] bond2: (slave gretap1): failed to get link speed/duplex [ 1122.269917][ T6415] bond2: (slave gretap1): failed to get link speed/duplex [ 1122.277424][ T6415] bond6: (slave bridge2): failed to get link speed/duplex [ 1122.294369][ T5628] Bluetooth: hci2: command tx timeout [ 1122.387851][T10506] bond2: (slave gretap1): failed to get link speed/duplex [ 1122.441499][T10506] bond6: (slave bridge2): failed to get link speed/duplex [ 1122.515062][T20318] netlink: zone id is out of range [ 1122.843742][T20337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11886'. [ 1122.874347][T20337] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11886'. [ 1122.934698][T20150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1123.055084][T20344] netlink: 'syz.0.11882': attribute type 1 has an invalid length. [ 1123.064200][T20344] netlink: 84 bytes leftover after parsing attributes in process `syz.0.11882'. [ 1123.087045][T20344] netlink: 658 bytes leftover after parsing attributes in process `syz.0.11882'. [ 1123.097637][T20344] netlink: 'syz.0.11882': attribute type 1 has an invalid length. [ 1123.115214][T20342] pim6reg: entered allmulticast mode [ 1123.127604][T20150] veth0_vlan: entered promiscuous mode [ 1123.142880][T20150] veth1_vlan: entered promiscuous mode [ 1123.186787][T20354] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11888'. [ 1123.210384][T20354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11888'. [ 1123.254644][T20342] pim6reg: left allmulticast mode [ 1123.277272][T20360] netlink: 'syz.4.11892': attribute type 1 has an invalid length. [ 1123.320772][T20360] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1123.340370][T20360] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1123.358384][T20360] bond4: (slave gre1): The slave device specified does not support setting the MAC address [ 1123.371605][T20360] bond4: (slave gre1): Error -95 calling set_mac_address [ 1123.468713][T20368] gretap1: entered promiscuous mode [ 1123.482388][T20368] bond4: (slave gretap1): making interface the new active one [ 1123.491476][T20368] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 1123.536462][T20369] syzkaller0: entered promiscuous mode [ 1123.542980][T20369] syzkaller0: entered allmulticast mode [ 1123.564346][T20360] macvlan4: entered promiscuous mode [ 1123.570623][T20360] macvlan4: entered allmulticast mode [ 1123.577130][T20360] bond4: entered promiscuous mode [ 1123.584824][T20360] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1123.597439][T20360] bond4: (slave macvlan4): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 1123.611740][T20360] bond4: left promiscuous mode [ 1123.669102][T20150] veth0_macvtap: entered promiscuous mode [ 1123.680911][T20150] veth1_macvtap: entered promiscuous mode [ 1123.696669][T20150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1123.711777][T20150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1123.733611][T10505] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.743547][T10505] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.752869][T10506] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.761719][T10506] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.841166][ T6415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1123.884282][ T6415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1123.969525][ T6415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1123.985810][ T6415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1124.125467][T20395] netlink: 'syz.1.11901': attribute type 1 has an invalid length. [ 1124.152626][T20383] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 1124.188418][T20383] 0ªî{X¹¦: entered allmulticast mode [ 1124.208268][T20395] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1124.216851][T20392] syzkaller1: entered promiscuous mode [ 1124.242518][T20392] syzkaller1: entered allmulticast mode [ 1124.339639][ T5628] Bluetooth: hci2: command tx timeout [ 1124.420726][T20415] netlink: 'syz.0.11897': attribute type 12 has an invalid length. [ 1124.615673][T20438] netlink: 'syz.1.11910': attribute type 21 has an invalid length. [ 1124.625585][T20438] netlink: 'syz.1.11910': attribute type 5 has an invalid length. [ 1124.763590][T20440] syzkaller0: create flow: hash 3548668583 index 1 [ 1124.774066][T20440] syzkaller0: delete flow: hash 3548668583 index 1 [ 1125.785761][T20477] __nla_validate_parse: 5 callbacks suppressed [ 1125.785783][T20477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11917'. [ 1125.810664][T20464] netlink: 52 bytes leftover after parsing attributes in process `syz.0.11915'. [ 1125.850616][T20477] vxlan0: entered promiscuous mode [ 1125.855997][T20477] vxlan0: entered allmulticast mode [ 1125.867054][ T6415] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1125.889041][ T6415] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1125.904623][ T6415] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1125.927659][ T6415] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1125.950061][T20482] netlink: 10 bytes leftover after parsing attributes in process `syz.4.11919'. [ 1125.963729][T20482] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11919'. [ 1126.111634][T20495] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1126.123826][T20495] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1126.159521][T20497] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11925'. [ 1126.394191][ T5628] Bluetooth: hci2: command tx timeout [ 1126.411029][ T3468] team0: left allmulticast mode [ 1126.417222][ T3468] team_slave_1: left allmulticast mode [ 1126.427140][ T3468] bridge6: left allmulticast mode [ 1126.437217][ T3468] team0: left promiscuous mode [ 1126.445719][ T3468] team_slave_1: left promiscuous mode [ 1126.454269][ T3468] bridge6: left promiscuous mode [ 1126.463065][ T3468] bridge0: port 4(team0) entered disabled state [ 1126.472632][ T3468] bond8: left allmulticast mode [ 1126.477686][ T3468] bond8: left promiscuous mode [ 1126.484474][ T3468] bridge0: port 3(bond8) entered disabled state [ 1126.493558][ T3468] bridge_slave_1: left allmulticast mode [ 1126.499489][ T3468] bridge_slave_1: left promiscuous mode [ 1126.506928][ T3468] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.516373][ T3468] bridge_slave_0: left allmulticast mode [ 1126.523274][ T3468] bridge_slave_0: left promiscuous mode [ 1126.529266][ T3468] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.548795][ T3468] erspan0: left allmulticast mode [ 1126.561446][ T3468] erspan0: left promiscuous mode [ 1126.567145][ T3468] bridge4: port 1(erspan0) entered disabled state [ 1126.596097][ T3468] pimreg9: left allmulticast mode [ 1126.721232][T10505] smbdirect: ib_dev[syz0] removed [ 1126.766944][ T3468] bond6 (unregistering): (slave gretap2): Releasing active interface [ 1126.835149][ T3468] bond18 (unregistering): (slave gre2): Releasing backup interface [ 1126.855995][ T3468] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1126.908562][ T3468] team0: Port device bridge6 removed [ 1126.926532][ T3468] bond21 (unregistering): (slave bridge10): Releasing backup interface [ 1126.934926][ T3468] bridge10 (unregistering): left promiscuous mode [ 1126.959654][ T3468] team0: Port device bridge11 removed [ 1126.975218][ T3468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1126.985441][ T3468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1126.995029][ T3468] bond0 (unregistering): Released all slaves [ 1127.004103][ T3468] bond1 (unregistering): Released all slaves [ 1127.014678][ T3468] bond2 (unregistering): Released all slaves [ 1127.025445][ T3468] bond3 (unregistering): Released all slaves [ 1127.039270][ T3468] bond4 (unregistering): Released all slaves [ 1127.065612][ T3468] bond5 (unregistering): Released all slaves [ 1127.084793][ T3468] bond6 (unregistering): Released all slaves [ 1127.097134][ T3468] bond7 (unregistering): (slave veth3): Releasing active interface [ 1127.106158][ T3468] bond7 (unregistering): Released all slaves [ 1127.117037][ T3468] bond8 (unregistering): Released all slaves [ 1127.128143][ T3468] bond9 (unregistering): Released all slaves [ 1127.139413][ T3468] bond10 (unregistering): (slave veth5): Releasing active interface [ 1127.148595][ T3468] bond10 (unregistering): Released all slaves [ 1127.175890][ T3468] bond11 (unregistering): Released all slaves [ 1127.190995][ T3468] bond12 (unregistering): Released all slaves [ 1127.205014][ T3468] bond13 (unregistering): Released all slaves [ 1127.228518][ T3468] bond14 (unregistering): (slave veth13): Releasing active interface [ 1127.237277][ T3468] batadv2: entered promiscuous mode [ 1127.245225][ T3468] bond14 (unregistering): (slave batadv2): Releasing active interface [ 1127.255776][ T3468] bond14 (unregistering): Released all slaves [ 1127.269601][ T3468] bond15 (unregistering): Released all slaves [ 1127.287572][ T3468] bond16 (unregistering): (slave bond17): Releasing backup interface [ 1127.296957][ T3468] bond16 (unregistering): Released all slaves [ 1127.308418][ T3468] bond17 (unregistering): Released all slaves [ 1127.322694][ T3468] bond18 (unregistering): Released all slaves [ 1127.335062][ T3468] bond19 (unregistering): Released all slaves [ 1127.345949][ T3468] bond20 (unregistering): Released all slaves [ 1127.362970][ T3468] bond21 (unregistering): Released all slaves [ 1127.374670][ T3468] bond22 (unregistering): Released all slaves [ 1127.393115][T10505] net_ratelimit: 501 callbacks suppressed [ 1127.393138][T10505] bond6: (slave bridge2): failed to get link speed/duplex [ 1127.407031][T10505] bond2: (slave gretap1): failed to get link speed/duplex [ 1127.511980][ T6415] bond6: (slave bridge2): failed to get link speed/duplex [ 1127.520571][ T6415] bond2: (slave gretap1): failed to get link speed/duplex [ 1127.546620][T20433] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1127.578653][ T3468] tipc: Left network mode [ 1127.719442][T10505] bond2: (slave gretap1): failed to get link speed/duplex [ 1127.789886][T10505] bond6: (slave bridge2): failed to get link speed/duplex [ 1127.851572][ T6415] bond2: (slave gretap1): failed to get link speed/duplex [ 1127.912316][T10505] bond6: (slave bridge2): failed to get link speed/duplex [ 1127.978450][T20520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11933'. [ 1127.991882][T10505] bond2: (slave gretap1): failed to get link speed/duplex [ 1128.169869][ T6416] bond2: (slave gretap1): failed to get link speed/duplex [ 1128.275658][T20548] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11940'. [ 1128.297150][T20548] bridge0: port 2(bridge_slave_1) entered disabled state [ 1128.304559][T20548] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.402990][T20555] Cannot find del_set index 1 as target [ 1128.425600][T20555] netlink: 'syz.4.11944': attribute type 1 has an invalid length. [ 1128.428884][ T3468] batman_adv: batadv0: Removing interface: macvtap1 [ 1128.477374][T20562] netlink: 'syz.3.11945': attribute type 1 has an invalid length. [ 1128.493140][T20555] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1128.524391][T20562] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1128.555877][T20562] vlan2: entered promiscuous mode [ 1128.561805][T20562] bond1: entered promiscuous mode [ 1128.567118][T20562] vlan2: entered allmulticast mode [ 1128.573192][T20562] bond1: entered allmulticast mode [ 1128.603582][T20562] bond1: (slave bridge1): making interface the new active one [ 1128.611600][T20562] bridge1: entered promiscuous mode [ 1128.617032][T20562] bridge1: entered allmulticast mode [ 1128.626068][T20562] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1128.644040][T20555] bond6: (slave ip6gretap1): making interface the new active one [ 1128.654105][T20555] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1128.833335][ T3468] hsr_slave_0: left promiscuous mode [ 1128.843279][ T3468] hsr_slave_1: left promiscuous mode [ 1128.853106][ T3468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1128.862973][ T3468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1129.063567][ T3468] team0 (unregistering): Port device team_slave_1 removed [ 1129.331935][T20602] syzkaller0: entered promiscuous mode [ 1129.355602][T20602] syzkaller0: entered allmulticast mode [ 1129.646030][ T3468] IPVS: stop unused estimator thread 0... [ 1130.149264][T20641] macsec1: entered promiscuous mode [ 1130.195242][T20656] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11968'. [ 1130.231670][ T31] INFO: task udevd:12462 blocked for more than 143 seconds. [ 1130.240661][ T31] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1130.245707][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1130.255258][ T31] task:udevd state:D stack:23688 pid:12462 tgid:12462 ppid:4985 task_flags:0x400140 flags:0x00080000 [ 1130.267906][ T31] Call Trace: [ 1130.272624][ T31] [ 1130.275665][ T31] __schedule+0x17d9/0x56c0 [ 1130.290126][ T31] ? blk_mq_flush_plug_list+0x415/0x540 [ 1130.300777][ T31] ? rcu_is_watching+0x15/0xb0 [ 1130.311467][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 1130.330722][ T31] ? __blk_flush_plug+0x416/0x4d0 [ 1130.336684][ T31] ? __pfx___schedule+0x10/0x10 [ 1130.350152][ T31] ? rcu_is_watching+0x15/0xb0 [ 1130.356177][ T31] ? lock_release+0x4b/0x3c0 [ 1130.370448][ T31] schedule+0x164/0x360 [ 1130.374717][ T31] schedule_timeout+0x152/0x2c0 [ 1130.379613][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1130.396231][ T31] ? __pfx_process_timeout+0x10/0x10 [ 1130.410256][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1130.422907][ T31] ? prepare_to_wait_event+0x436/0x480 [ 1130.461381][ T31] nbd_queue_rq+0x889/0x1150 [ 1130.483030][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 1130.500732][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1130.523491][ T31] ? __pfx___schedule+0x10/0x10 [ 1130.540379][ T31] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1130.547821][ T31] ? sbitmap_get+0x229/0x390 [ 1130.560040][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 1130.579796][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 1130.585777][ T31] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1130.597545][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 1130.604416][ T31] ? blk_mq_hw_queue_need_run+0x134/0x630 [ 1130.610236][ T31] ? rcu_is_watching+0x15/0xb0 [ 1130.615102][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 1130.620621][ T31] ? rcu_is_watching+0x15/0xb0 [ 1130.625448][ T31] ? lock_acquire+0x5f/0x350 [ 1130.638767][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1130.644882][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 1130.650233][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 1130.655402][ T31] blk_mq_dispatch_list+0xd11/0xe10 [ 1130.660672][ T31] ? blk_mq_dispatch_list+0x230/0xe10 [ 1130.666117][ T31] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 1130.671893][ T31] ? __pfx_update_io_ticks+0x10/0x10 [ 1130.677230][ T31] ? rcu_is_watching+0x15/0xb0 [ 1130.682044][ T31] blk_mq_flush_plug_list+0x45f/0x540 [ 1130.687513][ T31] ? blk_add_rq_to_plug+0x300/0x450 [ 1130.692799][ T31] ? blk_mq_submit_bio+0x1c62/0x2a80 [ 1130.698217][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 1130.704157][ T31] ? blk_mq_submit_bio+0x2f8/0x2a80 [ 1130.709504][ T31] __blk_flush_plug+0x3ed/0x4d0 [ 1130.714643][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 1130.720083][ T31] ? blkg_get+0x20/0x1d0 [ 1130.724503][ T31] ? rcu_is_watching+0x15/0xb0 [ 1130.729316][ T31] __submit_bio+0x465/0x560 [ 1130.733868][ T31] ? __pfx___submit_bio+0x10/0x10 [ 1130.749298][ T31] ? bio_associate_blkg+0x6d/0x230 [ 1130.754516][ T31] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1130.760294][ T31] ? bio_associate_blkg+0x6d/0x230 [ 1130.765513][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 1130.771764][ T31] ? submit_bio_noacct+0xf7b/0x1b20 [ 1130.777018][ T31] ? blkcg_set_ioprio+0x16b/0x2a0 [ 1130.782109][ T31] block_read_full_folio+0x581/0x810 [ 1130.787445][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 1130.793133][ T31] filemap_read_folio+0x12c/0x3a0 [ 1130.798502][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1130.804022][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 1130.809634][ T31] ? filemap_add_folio+0x350/0x530 [ 1130.814800][ T31] do_read_cache_folio+0x354/0x590 [ 1130.819965][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1130.825481][ T31] read_part_sector+0xb6/0x2b0 [ 1130.830299][ T31] adfspart_check_ICS+0xb1/0x960 [ 1130.835293][ T31] ? seq_buf_printf+0x212/0x2d0 [ 1130.840278][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 1130.859752][ T31] ? __kmalloc_cache_noprof+0x318/0x660 [ 1130.865397][ T31] bdev_disk_changed+0x851/0x17a0 [ 1130.873077][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1130.878654][ T31] blkdev_get_whole+0x372/0x510 [ 1130.883596][ T31] bdev_open+0x324/0xd70 [ 1130.887896][ T31] blkdev_open+0x461/0x600 [ 1130.892410][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 1130.897395][ T31] do_dentry_open+0x816/0x1380 [ 1130.902227][ T31] vfs_open+0x3b/0x340 [ 1130.906349][ T31] ? path_openat+0x2e2d/0x3830 [ 1130.911235][ T31] path_openat+0x2e44/0x3830 [ 1130.915882][ T31] ? kasan_save_track+0x3e/0x80 [ 1130.920782][ T31] ? do_getname+0x2e/0x250 [ 1130.925231][ T31] ? do_sys_openat2+0xcc/0x200 [ 1130.930007][ T31] ? __x64_sys_openat+0x138/0x170 [ 1130.935081][ T31] do_file_open+0x23e/0x4a0 [ 1130.939605][ T31] ? __pfx_do_file_open+0x10/0x10 [ 1130.944736][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1130.949605][ T31] ? alloc_fd+0x651/0x6c0 [ 1130.962063][ T31] do_sys_openat2+0x115/0x200 [ 1130.967210][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1130.973634][ T31] ? __x64_sys_epoll_wait+0x1d7/0x230 [ 1130.979533][ T31] __x64_sys_openat+0x138/0x170 [ 1130.985123][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.992047][ T31] do_syscall_64+0x174/0x580 [ 1130.996744][ T31] ? clear_bhb_loop+0x40/0x90 [ 1131.001718][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.007955][ T31] RIP: 0033:0x7fb7134a7407 [ 1131.012892][ T31] RSP: 002b:00007ffceb4bfa60 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1131.022288][ T31] RAX: ffffffffffffffda RBX: 00007fb713b4b880 RCX: 00007fb7134a7407 [ 1131.031346][ T31] RDX: 00000000000a0800 RSI: 00005638eac48760 RDI: ffffffffffffff9c [ 1131.040823][ T31] RBP: 00005638eac30910 R08: 0000000000000000 R09: 0000000000000000 [ 1131.048900][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 00005638eac431a0 [ 1131.059108][ T31] R13: 00005638eac3e190 R14: 0000000000000000 R15: 00005638eac431a0 [ 1131.067646][ T31] [ 1131.074127][ T31] INFO: lockdep is turned off. [ 1131.129032][ T31] NMI backtrace for cpu 0 [ 1131.129058][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1131.129083][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1131.129096][ T31] Call Trace: [ 1131.129105][ T31] [ 1131.129114][ T31] dump_stack_lvl+0xe8/0x150 [ 1131.129145][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1131.129169][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1131.129239][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1131.129264][ T31] sys_info+0x135/0x170 [ 1131.129283][ T31] watchdog+0xfd7/0x1030 [ 1131.129327][ T31] ? watchdog+0x1c7/0x1030 [ 1131.129359][ T31] kthread+0x388/0x470 [ 1131.129379][ T31] ? __pfx_watchdog+0x10/0x10 [ 1131.129403][ T31] ? __pfx_kthread+0x10/0x10 [ 1131.129422][ T31] ret_from_fork+0x514/0xb70 [ 1131.129445][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1131.129464][ T31] ? __switch_to+0xc89/0x1420 [ 1131.129494][ T31] ? __pfx_kthread+0x10/0x10 [ 1131.129513][ T31] ret_from_fork_asm+0x1a/0x30 [ 1131.129546][ T31] [ 1131.129602][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1131.250072][ C1] NMI backtrace for cpu 1 [ 1131.250093][ C1] CPU: 1 UID: 0 PID: 20644 Comm: syz.3.11966 Not tainted syzkaller #0 PREEMPT(full) [ 1131.250116][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1131.250133][ C1] RIP: 0010:unwind_next_frame+0x9f/0x2550 [ 1131.250165][ C1] Code: 84 46 02 00 00 89 44 24 5c 4c 89 6c 24 68 e8 b8 fc 34 00 4c 8d 2d 00 00 00 00 48 c7 c7 20 9a 95 8e 31 f6 31 d2 b9 02 00 00 00 <45> 31 c0 45 31 c9 41 55 e8 f4 1d 2b 00 48 83 c4 08 e8 3b 28 31 0a [ 1131.250185][ C1] RSP: 0018:ffffc90008d6efc0 EFLAGS: 00000246 [ 1131.250203][ C1] RAX: 0000000000000001 RBX: ffffffff81aedaa4 RCX: 0000000000000002 [ 1131.250217][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e959a20 [ 1131.250229][ C1] RBP: 1ffff920011ade14 R08: ffffc90008d6f130 R09: 000000000000000c [ 1131.250242][ C1] R10: ffffc90008d6f0b8 R11: ffffffff81b10630 R12: dffffc0000000000 [ 1131.250257][ C1] R13: ffffffff8176a21f R14: ffffc90008d6f068 R15: 1ffff920011ade0d [ 1131.250271][ C1] FS: 0000000000000000(0000) GS:ffff88812537c000(0000) knlGS:0000000000000000 [ 1131.250288][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1131.250302][ C1] CR2: 0000556e26099ee8 CR3: 000000000e746000 CR4: 00000000003526f0 [ 1131.250320][ C1] Call Trace: [ 1131.250328][ C1] [ 1131.250340][ C1] ? arch_do_signal_or_restart+0xbb/0x860 [ 1131.250370][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1131.250394][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1131.250421][ C1] arch_stack_walk+0x11b/0x150 [ 1131.250446][ C1] ? exit_to_user_mode_loop+0x104/0x730 [ 1131.250476][ C1] stack_trace_save+0xa9/0x100 [ 1131.250501][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1131.250525][ C1] ? __mem_cgroup_threshold+0x1f/0x7e0 [ 1131.250551][ C1] ? __mem_cgroup_threshold+0x1f/0x7e0 [ 1131.250579][ C1] save_stack+0x122/0x230 [ 1131.250601][ C1] ? __mem_cgroup_threshold+0x1f/0x7e0 [ 1131.250626][ C1] ? __pfx_save_stack+0x10/0x10 [ 1131.250651][ C1] ? free_unref_folios+0xdb2/0x14d0 [ 1131.250675][ C1] ? folios_put_refs+0xa59/0xba0 [ 1131.250701][ C1] ? free_pages_and_swap_cache+0x2ba/0x490 [ 1131.250723][ C1] ? tlb_flush_mmu+0x6d3/0xa30 [ 1131.250749][ C1] ? tlb_finish_mmu+0xf4/0x220 [ 1131.250780][ C1] ? exit_mmap+0x4b2/0x9f0 [ 1131.250801][ C1] ? __mmput+0x118/0x420 [ 1131.250829][ C1] ? exit_mm+0x221/0x2d0 [ 1131.250847][ C1] ? do_exit+0x6cd/0x2360 [ 1131.250862][ C1] ? do_group_exit+0x22d/0x2f0 [ 1131.250880][ C1] ? get_signal+0x121b/0x12c0 [ 1131.250902][ C1] ? arch_do_signal_or_restart+0xbb/0x860 [ 1131.250928][ C1] ? exit_to_user_mode_loop+0x104/0x730 [ 1131.250956][ C1] ? lock_release+0x4b/0x3c0 [ 1131.250983][ C1] ? page_ext_get+0x22/0x2e0 [ 1131.251011][ C1] __reset_page_owner+0x71/0x1f0 [ 1131.251037][ C1] free_unref_folios+0xdb2/0x14d0 [ 1131.251069][ C1] folios_put_refs+0xa59/0xba0 [ 1131.251102][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 1131.251132][ C1] ? free_swap_cache+0x109/0x300 [ 1131.251153][ C1] free_pages_and_swap_cache+0x2ba/0x490 [ 1131.251178][ C1] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 1131.251214][ C1] ? __virt_addr_valid+0x137/0x390 [ 1131.251251][ C1] tlb_flush_mmu+0x6d3/0xa30 [ 1131.251281][ C1] tlb_finish_mmu+0xf4/0x220 [ 1131.251309][ C1] exit_mmap+0x4b2/0x9f0 [ 1131.251334][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1131.251368][ C1] ? trace_irq_enable+0x3b/0x140 [ 1131.251393][ C1] ? __pfx_exit_aio+0x10/0x10 [ 1131.251421][ C1] ? arch_uprobe_clear_state+0x1c8/0x240 [ 1131.251442][ C1] ? uprobe_clear_state+0x2ac/0x3e0 [ 1131.251469][ C1] __mmput+0x118/0x420 [ 1131.251492][ C1] exit_mm+0x221/0x2d0 [ 1131.251510][ C1] do_exit+0x6cd/0x2360 [ 1131.251533][ C1] ? __pfx_do_exit+0x10/0x10 [ 1131.251551][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1131.251575][ C1] ? rcu_is_watching+0x15/0xb0 [ 1131.251598][ C1] do_group_exit+0x22d/0x2f0 [ 1131.251615][ C1] ? trace_irq_enable+0x3b/0x140 [ 1131.251641][ C1] get_signal+0x121b/0x12c0 [ 1131.251675][ C1] arch_do_signal_or_restart+0xbb/0x860 [ 1131.251704][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1131.251737][ C1] ? rcu_is_watching+0x15/0xb0 [ 1131.251759][ C1] exit_to_user_mode_loop+0x104/0x730 [ 1131.251785][ C1] ? rcu_is_watching+0x15/0xb0 [ 1131.251805][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.251862][ C1] do_syscall_64+0x353/0x580 [ 1131.251889][ C1] ? clear_bhb_loop+0x40/0x90 [ 1131.251910][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.251930][ C1] RIP: 0033:0x7fd0beb9ce59 [ 1131.251945][ C1] Code: Unable to access opcode bytes at 0x7fd0beb9ce2f. [ 1131.252033][ C1] RSP: 002b:00007ffd6caaccf8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1131.252054][ C1] RAX: 0000000000000000 RBX: 00007ffd6caacde0 RCX: 00007fd0beb9ce59 [ 1131.252067][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1131.252079][ C1] RBP: 0000000000113d6f R08: 0000000000000001 R09: 0000000000000000 [ 1131.252091][ C1] R10: 0000001b2f820000 R11: 0000000000000246 R12: 00007ffd6caace20 [ 1131.252104][ C1] R13: 00007fd0bee15fac R14: 0000000000113de5 R15: 00007fd0bee15fa0 [ 1131.252127][ C1] [ 1131.968571][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1131.975535][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1131.984727][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1131.994918][ T31] Call Trace: [ 1131.998254][ T31] [ 1132.001216][ T31] vpanic+0x56c/0xa60 [ 1132.005282][ T31] ? __pfx___schedule+0x10/0x10 [ 1132.010181][ T31] ? __pfx_vpanic+0x10/0x10 [ 1132.014731][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 1132.020937][ T31] panic+0xc5/0xd0 [ 1132.024698][ T31] ? __pfx_panic+0x10/0x10 [ 1132.029146][ T31] ? preempt_schedule_common+0x82/0xd0 [ 1132.034661][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 1132.040075][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1132.046367][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1132.052587][ T31] watchdog+0x1030/0x1030 [ 1132.056974][ T31] ? watchdog+0x1c7/0x1030 [ 1132.061449][ T31] kthread+0x388/0x470 [ 1132.065579][ T31] ? __pfx_watchdog+0x10/0x10 [ 1132.070309][ T31] ? __pfx_kthread+0x10/0x10 [ 1132.074949][ T31] ret_from_fork+0x514/0xb70 [ 1132.079596][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1132.084806][ T31] ? __switch_to+0xc89/0x1420 [ 1132.089534][ T31] ? __pfx_kthread+0x10/0x10 [ 1132.094255][ T31] ret_from_fork_asm+0x1a/0x30 [ 1132.099082][ T31] [ 1132.102763][ T31] Kernel Offset: disabled [ 1132.107100][ T31] Rebooting in 86400 seconds..