last executing test programs: 2.320139056s ago: executing program 4 (id=13401): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0xf753}, [@map_val={0x18, 0xb, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xfffffff8}]}, &(0x7f0000000040)='GPL\x00', 0x401, 0x14, &(0x7f0000000080)=""/20, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x6, 0x800}, 0x8, 0x10, &(0x7f0000000100)={0x3, 0xc, 0x1, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000140)=[{0x1, 0x3, 0x5, 0x1}, {0x5, 0x4, 0x8, 0x1}], 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000020009500000000000000b7020000000000007b9af8ff00000000bd09020000000000dbaaf8fff1000000bf8200000000000007080000f8ffffffbfa420000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYRESHEX=r0], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.30188044s ago: executing program 4 (id=13405): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000003f40)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x2000200a}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10ef2b3307796d82}, 0x4004) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c000780080012400000000505000500020000000500040001000000110003"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18}], 0x18, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r6) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0xffffffffffffffff) sendmsg$kcm(r4, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) socket$tipc(0x1e, 0x5, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) readv(r4, &(0x7f0000000540)=[{&(0x7f0000000180)=""/234, 0xea}, {0x0}], 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="143967002400000326bd7000fcdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x40049}, 0x20000000) r8 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 1.737509561s ago: executing program 0 (id=13420): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000500014003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r1, 0x1, 0x2, 0x0, 0x48) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in=@multicast2, @in=@private=0xa010100, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x20, 0x87}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0x200, 0x1000, 0x200000000000000}, 0xfffffffa, 0x6e6bb0}}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x8008010) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x200000000, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff2, 0xffff}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8011}, 0x0) 1.594174208s ago: executing program 3 (id=13424): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x20, 0x4f, 0x4, 0x2, 0x0, 0x1}, 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f00000003c0), &(0x7f0000000300)=@tcp=r1, 0x1}, 0x20) sendmmsg(0xffffffffffffffff, &(0x7f000000a7c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1000"], 0x20}}], 0x1, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0xf0, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0x1a, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}}, 0xf0}}, 0x844) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190001090000000020000000021800000002fd010000000008000100ac1414000800040000285cd7cf53d7af4998d0386838131bf2d83f08101b37bc1347abbaef5b46baaa1e34a9a128c64fbd5f9d45fc2a", @ANYRES32=r6, @ANYBLOB="100016800c00010003080108020000000600150004000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r7, &(0x7f0000001d40)={&(0x7f0000000080)=@un=@abs, 0x80, &(0x7f0000000440)=[{&(0x7f0000000140)=""/208, 0xd0}, {&(0x7f0000000340)=""/208, 0xd0}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/77, 0x4d}, {&(0x7f0000001800)=""/24, 0x18}, {&(0x7f0000001840)}, {&(0x7f0000001880)=""/176, 0xb0}, {&(0x7f0000000240)=""/143, 0x8f}, {&(0x7f0000001a00)=""/147, 0x93}, {&(0x7f0000001ac0)=""/139, 0x8b}], 0xa, &(0x7f0000001c40)=""/252, 0xfc}, 0x143) bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r7, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 1.515656811s ago: executing program 0 (id=13425): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000240)={@local, @rand_addr, 0x0}, &(0x7f0000000280)=0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x9, [@enum64={0x6, 0x2, 0x0, 0x13, 0x0, 0x7, [{0xc, 0xf}, {0x7, 0x8, 0x1}]}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x5}, @union={0xb, 0x1, 0x0, 0x5, 0x1, 0xcf5, [{0xc, 0x4, 0x200}]}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x2}, @float={0x10, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x61, 0x0, 0x1e, 0x5f, 0x0, 0x30, 0x30]}}, &(0x7f0000000380)=""/206, 0x81, 0xce, 0x1, 0x2}, 0x28) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xa445, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0x1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1c, 0x4, 0x43, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000180)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r8, &(0x7f0000000380), &(0x7f00000003c0)=""/247}, 0x20) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@generic={&(0x7f0000000640)='./file0\x00', 0x0, 0x10}, 0x18) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r10, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0xf, &(0x7f0000000880)=ANY=[@ANYBLOB="18110000241c2572dba77dc179bb4ec7a715819414", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000085100000fcffffff825b1800efffffff9500000000000000852000000300000018000000000034030000000000100000"], &(0x7f0000000180)='GPL\x00', 0x3, 0x39, &(0x7f0000000200)=""/57, 0x41000, 0x22, '\x00', r1, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4, 0xf, 0x5, 0x72ba}, 0x10, 0x0, 0x0, 0xa, &(0x7f00000006c0)=[r5, r6, r8, r9, r10, 0xffffffffffffffff], &(0x7f0000000700)=[{0x4, 0x5, 0x9}, {0x0, 0x1, 0xf, 0xa}, {0x1, 0x5, 0x8, 0x1}, {0x2, 0x3, 0x9, 0x9}, {0x0, 0x2, 0x5, 0x3}, {0x0, 0x4, 0xd, 0x8}, {0x0, 0x3, 0x0, 0x9}, {0x5, 0x1, 0x6, 0x6}, {0x0, 0x5, 0xf, 0x7}, {0x4, 0x1, 0x9, 0x1}], 0x10, 0x800}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.51510218s ago: executing program 1 (id=13426): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000040)) 1.444176089s ago: executing program 0 (id=13428): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008080) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040)={r2, 0xfffffffc}, 0x8) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r0, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000"], 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) sendmmsg$inet(r3, &(0x7f0000002240)=[{{&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0xfffffffffffffeef}}], 0x1, 0x8040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a3200000000140004800800024000000000080001"], 0x110}}, 0x40040) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001480)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000480)=""/102, 0x66}], 0x1}, 0x2041) 1.387997367s ago: executing program 1 (id=13429): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x7, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="1808001eba0000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000003509010000000000950000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000040000bf9800000000000056080000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7050000000000006110480000000000dc0500001000000095000000000000009abb1723bf24203831c9545b21c751ee4024f479cbe4b89f9808837203000000000000c2d182c7a3221481f5009edaf5f5ac058299e10e790a198f42a715b99fb3d2a73dd025848710155ad1efd7d991408000000000000085a0db0401fa29e075b7ab0408a0d8cfceeb23465bb027ee1151c02af21d8f9aa57e673a6724441d08087aff070eda8abef22b3a806c8226f5a2886c93bd29b37252ba4a6e9cc5f69e75680c431aa855e487ae513abd6c4ee973fce29a26018ed5e0780f8778a602a3533a3dac7da4fe491edf3abfa7bf871c58848ac46ada6776bd9b85df01e626026a59ddfa7a9c879acbfb0bf426785dec7d8611dc850df49ed8633bdb83dd505fb20649f53841a0e200c91f5bf1bb186ed87efc7b6f8859d029c8376ca19265e281fea0a6fd2222f8850c8445758503ede0ce1b3f73ecd8989e8c53c5e679b13802bddf80f3b1d07d6d68bfa12ab34697d40ac1150a842f8bb381344b994c19642a10eb30845a993daaa8bd4aebc595475feb3475d8e802498382e73edb98fcf2df96ab3c870490c4"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) accept4(r0, &(0x7f0000000100)=@phonet, &(0x7f0000000180)=0x80, 0x80000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) 1.342871708s ago: executing program 1 (id=13431): r0 = socket(0x6, 0x4, 0x8) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x7, 0x1}, {0x5, 0x3}, {0x5}, {}, {0x4, 0x3}, {0x1, 0x1}, {0x7}, {0xf0, 0x1}], "892a2f102dd84407"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x1, 0x6}, {0xc3, 0x6}, {0x5, 0x2}, {0x2, 0x5}], "51e40a93800920e6"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0xd, 0x3}, {}, {0x0, 0x6}, {0xc, 0x1}, {0x7e, 0x2}, {0x6, 0x1}, {0xa, 0x2}], "1a2a5ecebe0b8d8f"}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x39, 0x100, 0x70bd29, 0x25dfdbfb, {0x9}, [@nested={0x20, 0xc8, 0x0, 0x1, [@typed={0x8, 0xeb, 0x0, 0x0, @u32=0x6}, @typed={0x14, 0x128, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, @nested={0x1c, 0x7c, 0x0, 0x1, [@typed={0x8, 0xb7, 0x0, 0x0, @uid=0xee00}, @nested={0x4, 0x6f}, @nested={0x4, 0x1e}, @nested={0x4, 0x7}, @nested={0x4, 0x42}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000001}, 0x24040000) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x3, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}}, 0x40) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@initdev, @in6=@mcast2}}, {{@in=@remote}, 0x0, @in=@initdev}}, &(0x7f0000000480)=0xe8) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000004c0)={0x2b, @dev={0xac, 0x14, 0x14, 0x3a}, 0x4e22, 0x3, 'wrr\x00', 0x2c, 0x6, 0x55}, 0x2c) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000540)=0x0) sendmsg$nl_generic(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x3e, 0x200, 0x70bd2b, 0x25dfdbff, {0xb}, [@typed={0x8, 0x4, 0x0, 0x0, @pid=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000640)={0x3a, @loopback, 0x4e21, 0x2, 'sh\x00', 0xc, 0x100, 0x65}, 0x2c) r3 = accept$alg(r0, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000780)={r0, &(0x7f0000000680)='--@\x00', 0x101000, &(0x7f00000006c0)={@_ha_fsid={[0x7, 0x3]}, {0x3, 0x80, 0x7ff, 0x2}}, 0x0, &(0x7f0000000700), &(0x7f0000000740)=0x5}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x84, 0x23, 0x100, 0x70bd2c, 0x25dfdbfd, {0x13}, [@generic="6b322e0dade139059b5307f15ffd62d9e3436fa53a5249d0ed381764bf438899aea7a29c329f7bc60b3f7e12e08eee6a01bddebf9516e8a01b712c613e83b508df5c78de74be82b5bc045ce84d9c7a539b087a0e56d5f95ba2230188769dd307ebb6186224872efdcf747f278392af"]}, 0x84}, 0x1, 0x0, 0x0, 0x40001}, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r5, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x48, r6, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x46c, 0xc}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xffff7fff}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x21}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x22}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x800) setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000b00)={0x4}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)=@ipv6_delroute={0x44, 0x19, 0x10, 0x70bd29, 0x25dfdbfe, {0xa, 0x14, 0x10, 0xa1, 0xfe, 0x0, 0xc8, 0x4, 0x3900}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_FLAGS={0x6, 0x6, 0x48}}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0x6c}}]}, 0x44}}, 0x4800) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000c80)={'security\x00', 0x6a, "aa7732fc39f43f3e4bd720afacbbbbe54f9a00638d2e29b142d58a6b666730a9ac0ab368a78107ab898ba8ddf1125d7176f3698b3b9000bf4c73f53c41b114998e248f2b1eeeca387ab67c38c094ed71ad27b3e85a2cffe5f8af50894dfaff50bb9f1e30ab7d4e9fa79c"}, &(0x7f0000000d40)=0x8e) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000d80), &(0x7f0000000dc0)=0x4) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000e00)=0x9, 0x4) r8 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000e40), 0x2, 0x0) ioctl$XFS_IOC_ERROR_INJECTION(0xffffffffffffffff, 0x40085874, &(0x7f0000000e80)={r8, 0x8}) socket$igmp6(0xa, 0x3, 0x2) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$EBT_SO_GET_INIT_INFO(r9, 0x0, 0x82, &(0x7f0000000ec0)={'nat\x00', 0x0, 0x0, 0x0, [0x3, 0x4, 0x7, 0x246, 0x60, 0xab2]}, &(0x7f0000000f40)=0x78) getsockopt(r9, 0x9, 0x1, &(0x7f0000000f80)=""/25, &(0x7f0000000fc0)=0x19) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000001000)=0xfffffffe, 0x4) 1.28406416s ago: executing program 4 (id=13432): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002440)=@newsa={0x170, 0x1a, 0x633, 0x70bd25, 0x25dfdbfd, {{@in=@dev={0xac, 0x14, 0x14, 0x4a}, @in=@dev={0xac, 0x14, 0x14, 0x21}, 0x0, 0x0, 0x4e23, 0x8001, 0x0, 0x0, 0x0, 0x3c}, {@in=@rand_addr=0x64010101, 0x0, 0x32}, @in=@empty, {0x323, 0x1, 0x7, 0xfffffffffffffffd, 0xc, 0x92be, 0x6}, {0x0, 0x40000, 0x0, 0xffffffffffffffff}, {0xfffffffb, 0x3, 0xca09}, 0x70bd25, 0x3502, 0xa, 0x1, 0x0, 0x9}, [@encap={0x1c, 0x4, {0x1, 0x4e21, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x42}}}, @algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e1e, 0xfffc, @in6=@mcast2}}]}, 0x170}, 0x1, 0x0, 0x0, 0x44000840}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYRESHEX], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x27, 0x39, 0x0, &(0x7f0000000500), 0x0, 0x1402, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000240)={&(0x7f0000000100)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000240)={0x8000, {{0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8000}}}, 0x88) 1.266285883s ago: executing program 3 (id=13433): syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d9a", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, '\x00'/12}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4610001394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "00000000170000000000000200000000000000000000000000008879e66485201a0015ca837400000000000000000000001c0000000000"}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x1f, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 1.16243677s ago: executing program 2 (id=13434): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000140)='^', 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r2, 0xda90) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_ADDRESS={0xa}]}, 0x97}, 0x1, 0x0, 0x0, 0x45844}, 0x0) 1.103644022s ago: executing program 3 (id=13435): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042ebd7000fcdbdf251600000018000180140002006e657464657673696d30000000000000050003000100000005"], 0x44}}, 0x14008080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a28000000000a0101000000005e1affd5020000000900010073797a300000200008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x4}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_FROM_DATA={0x1c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "780d1e7c1a4d2043ca0d839776579fb5f0"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x9c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042ebd7000fcdbdf251600000018000180140002006e657464657673696d30000000000000050003000100000005"], 0x44}}, 0x14008080) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a28000000000a0101000000005e1affd5020000000900010073797a300000200008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x4}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_FROM_DATA={0x1c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "780d1e7c1a4d2043ca0d839776579fb5f0"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x9c}}, 0x0) (async) 1.103167684s ago: executing program 1 (id=13436): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r6}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r6, @ANYBLOB="0000000000000000890000000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x94) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000980)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000001300)={{r6}, r7, 0x1c, @inherit={0x50, &(0x7f0000000b80)={0x1, 0x1, 0x9, 0x6, {0x18, 0x1, 0x3, 0xfffffffffffffffa, 0x1}, [0x6]}}, @subvolid=0x8000}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x9}, 0x27) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x0, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x238, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff000000, 0xff], 'wg2\x00', 'geneve0\x00', {}, {}, 0x29, 0xd, 0x0, 0x60}, 0x0, 0xd0, 0x118, 0x60030000, {0x0, 0xff000000}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0x8}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff000000, 0xffffff00, 0xffffff00, 0xff], [0xff, 0xff, 0xffffffff, 0xff000000], 'ip6gre0\x00', '\x00', {0xff}, {}, 0x84, 0x2, 0x4}, 0x0, 0xf0, 0x120, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x7, 0x0, [0x1, 0xa2e8, 0x4, 0x0, 0x9, 0x2, 0x7, 0x6f, 0x3a, 0x489, 0x2c, 0x8, 0x8, 0xfffe, 0x5, 0x9], 0xb}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x6, 0xd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=@newqdisc={0x24, 0x29, 0x29, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0xffff}, {0xffff}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 1.053547423s ago: executing program 3 (id=13437): socket(0xf, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x5, 0x7) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000001}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f000000a280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=@newtaction={0x48, 0x5a, 0x301, 0x0, 0x0, {0x2}, [{0x34, 0x1, [@m_skbedit={0x30, 0x0, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x4000001) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x6, &(0x7f00000006c0)={0x101, {{0xa, 0x4e24, 0x9, @mcast1, 0x4}}, {{0xa, 0x4e24, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x5}}}, 0x108) close(0x3) getsockname$packet(r2, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000e70c00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000e70c00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0) r5 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001300)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x50}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x200}]}}]}, 0x44}}, 0x400c4) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001300)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x50}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x200}]}}]}, 0x44}}, 0x400c4) socket$packet(0x11, 0x2, 0x300) (async) r8 = socket$packet(0x11, 0x2, 0x300) bind$rds(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10) sendto$packet(r8, 0x0, 0x0, 0x4004892, &(0x7f00000001c0)={0x11, 0x1, r4, 0x1, 0x8, 0x6, @remote}, 0x14) (async) sendto$packet(r8, 0x0, 0x0, 0x4004892, &(0x7f00000001c0)={0x11, 0x1, r4, 0x1, 0x8, 0x6, @remote}, 0x14) 1.005115404s ago: executing program 3 (id=13438): sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="16000022", 0x4, 0x8000, &(0x7f0000000000)={0xa, 0x4e21, 0x4, @mcast2, 0x4}, 0x1c) r0 = socket$xdp(0x2c, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x14, 0x17, 0x301, 0x270bd27, 0x25dfdbfa, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4e20, 0x80000, @loopback={0xfec0ffffffffffff}, 0xffee}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x28}, 0x14) (async) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4e20, 0x80000, @loopback={0xfec0ffffffffffff}, 0xffee}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x28}, 0x14) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) (async) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000004000000000000000000000085000000a300000018010000757b1af8ff00000000bfa100000000000007e9fffff7ffffffb702000008000000b703000000000000850000007b0007000000000000000000"], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="0000010051227b17774892c91ad1", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x2d) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x3d, &(0x7f00000000c0)=""/50, &(0x7f0000000100)=0x32) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0xa04a, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="000000000032ac94ce0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="000000000032ac94ce0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) 843.568213ms ago: executing program 3 (id=13439): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00') (async) unshare(0x6a040000) r2 = socket(0x8, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x40c0) (async) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x2, 0x40, 0x4, 0x7, 0x7f, 0x1, 0x9f, 0xc0, 0x72, 0x6, 0x5, 0x31, 0x10, 0x5, 0xb5, 0x0, [0x2, 0x2]}}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x20048041) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 842.831992ms ago: executing program 2 (id=13440): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) (async) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0) (async) r3 = socket$inet(0x2, 0x2, 0x1007ffe) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000f7ff0000400001802c00040014000100020000007f00000100000000000000001400020002000000e0b9860200000000000000000d000100756470eaa6e7843200000000"], 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000017000000440006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee77b9fd7de774fc79f789a4198904000500"], 0x58}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'veth1_to_hsr\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000007c0)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000c000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000004000000030000000100000f000000040b00000006000000003000007715"], 0x0, 0x30, 0x0, 0x1, 0x1002}, 0x28) (async) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) r8 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r8, 0x0, 0xcf, 0xfffffffffffffffc, &(0x7f0000000040)) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r9, &(0x7f0000000640)=ANY=[@ANYBLOB="6d6ff16900e011fffe880000000000000000000000000001fc0100000000000000000000000000004e254e2100e09078ee373935ef0f8da10b47000507b0025a9001e6cc070855848340507e8bd26f3ca1d633ec368e2be6a38e100ad79a38fb5c1436b5988215e096f64a843aafad7b82e65587c020411aefc61cb5c51b9788796ac34f4a8e455dd1d07d4684c7b2e91b6fd3fbaeffe77e10e2bd1d0cde2e814806120485b4b6f5c6d14b23c1b00be5fe8ca59610a206c47126484462b109828cae2dbbdd69bf1f853aaaac48ed7002cfe08806b1a56c2886d7fd3c77f48ae33282aa4e245082bbcabdba8d34197fec5a19521e8557bb8c690fdd6f108251a924d3740ce4effb9f7c89ca60e0f70c2b203a3781395b228249ff5dc4755242ffd9b4a526fad4aa28a0b94e123563012e73656c526002ebc8c339e20d3085d5f9afea446958"], 0x108) 798.395118ms ago: executing program 1 (id=13441): r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0xd, r2, 0x3e}, 0x80, 0x0}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x0, 0x1170, 0x1398, 0x1d0, 0x1170, 0x310, 0x1398, 0x1398, 0x310, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0x0, 0xff000000], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x0, 0x28}, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x6, 0x2}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@dev={0xac, 0x14, 0x14, 0x3c}, [0xff000000, 0xff, 0xff, 0xffffffff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff000000, 0xffffff00], @ipv6=@dev={0xfe, 0x80, '\x00', 0xb}, [0xff, 0xffffffff, 0xffffffff, 0xffffffff], @ipv4=@multicast2, [0xff, 0xffffff00, 0xffffff00, 0xff], 0x4, 0x101, 0x87, 0x4e21, 0x4e23, 0x4e21, 0x4e21, 0x410, 0x300}, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3, 0x6, 0x1, 'syz0\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'bond_slave_0\x00', 'veth1_vlan\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xfffe, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) 685.106274ms ago: executing program 4 (id=13442): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0x32600) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, 0x0, &(0x7f0000000080)) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000240)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) 455.559093ms ago: executing program 0 (id=13443): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x2f, 0x87, 0x7f, 0x2a7e, 0x7, @remote, @private2, 0x710, 0x7800, 0x80, 0x7ff}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c010000010901040000000000000000010000040c0004800800014000000008bc0002002c0001801400030000000000000000000000ffffac1414bb140004000000000000000000000000000000000006000340000400000c00028005000100010000000600034000030000060008400003000014000180080001006401010208000200640101000c00028005000100840000001400018008000100ac1e010108000200e00000012c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aa060003400003000008000640000000010c000480080001400000aac80800034000000001080005400000001f3c0002"], 0x13c}}, 0x800) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2, 0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000000000)=r0}, 0x20) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r4, 0xd) (async) sendmmsg(r4, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x200, @dev={0xfe, 0x80, '\x00', 0x15}, 0xa, 0x2}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000400)="83", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x10}}], 0x2, 0xc88c4) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r3, &(0x7f0000000200), 0x0}, 0x20) 452.25013ms ago: executing program 1 (id=13444): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f00000003c0)=0x1, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) write$tun(r0, &(0x7f0000000140)={@void, @void, @eth={@multicast, @empty, @val={@val={0x88a8, 0x7, 0x1, 0x2}, {0x8100, 0x1}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x9, 0xaa74304a58906390, 0x67, 0x0, 0x9, 0x6, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x2a) close(0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={0x38, r4, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc}, @NL80211_BAND_6GHZ={0xfffffffffffffe90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x1) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000500)={r9, 0x6, 0x4279, 0x6, 0x2, 0x5}, 0x14) 451.895386ms ago: executing program 2 (id=13445): syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d9a", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, '\x00'/12}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4610001394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "00000000400000000000000200000000000000000000000000008879e66485201a0015ca837400000000000000000000001c0000000000"}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x1f, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 349.554876ms ago: executing program 2 (id=13446): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000), 0x8) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="e7b8e450434be3c95833bdd9584110d9bf54ccd3f12b0f9fd215c1c460692acf52eb41d8d6b6aff85f087b2fd3577d50218b6d02a94e7ea768e9994d7f5ab643dd23585bf4f01314a21c2e91037c587413451c1f6a662ce0d7da8aee588cf00c11438c963745a94a6329a771d65f7d86d8410872", 0x74) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x199}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={r2, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xf, 0x23e, 0xfffffffc, 0x7, 0x80, 0x1400, 0x3}, &(0x7f0000000200)=0x9c) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000240)={r3, 0x10}, 0x8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) poll(&(0x7f00000002c0)=[{r4}, {r1, 0x9}, {r5}, {r1, 0x4}], 0x4, 0x4) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000300)=0x1, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000340)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000540)={{r4}, r9, 0x2, @unused=[0xfffffffffffffffb, 0x2, 0x5, 0x8], @subvolid=0x7}) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000015c0)=@nat={'nat\x00', 0x1b, 0x5, 0x418, 0x290, 0xa8, 0xffffffff, 0x290, 0x178, 0x380, 0x380, 0xffffffff, 0x380, 0x380, 0x5, &(0x7f0000001540), {[{{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x1f}, 0x0, 0xffffffff, 'ip6gretap0\x00', 'bond_slave_1\x00', {}, {0xff}, 0x0, 0x1, 0x16}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x10, @broadcast, @rand_addr=0x64010100, @gre_key=0x6, @gre_key=0x9}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x9}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x1c}, @icmp_id=0x65, @port=0x4e20}}}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x6, 0x4, 0x7, 0x7, 0x0, 0x2], 0x4, 0x1}}}, @common=@addrtype={{0x30}, {0x3a, 0x48}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x22, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @gre_key=0x9, @gre_key=0x4}}}}, {{@ip={@rand_addr=0x64010102, @multicast1, 0xff0000ff, 0xff000000, 'veth0_to_bond\x00', '\x00', {0xff}, {}, 0x88, 0x1, 0x50}, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@icmp={{0x28}, {0xf, 'TE'}}, @common=@socket0={{0x20}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xc, @multicast2, @remote, @icmp_id=0x67, @gre_key=0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) connect$bt_rfcomm(r5, &(0x7f0000001a40)={0x1f, @none, 0x8}, 0xa) r10 = socket$kcm(0x29, 0x7, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001a80), r11) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001ac0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000001cc0)={{0x0, 0x5, 0x16, 0x4, 0xeef, 0xf, 0xf, 0x7, 0x7, 0x2a1e46ff, 0x498e6f79, 0x7, 0xfffffffffffffffb, 0x4, 0x6}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f0000001d80)={0x1, [{r7, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {0x0, r8}, {r6, r8}, {r6, r8}, {r7}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {0x0, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {0x0, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {0x0, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r6}, {r6, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r7}, {r6, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {0x0, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {0x0, r8}, {r6, r8}, {r7, r8}, {0x0, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {0x0, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r6}, {r7}, {r7, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {0x0, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {0x0, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {0x0, r8}, {r6, r8}, {r6, r8}, {0x0, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r6, r8}], 0x0, "e8af44e9fe06fd"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000002d80)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000002f80)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000003180)={{r6, 0x0, 0x200, 0x9b, 0xffffffffffffffff, 0x3, 0x200, 0x5, 0x4, 0x1, 0x5, 0xfffffffffffffff8, 0x6a0c2881, 0x6, 0xa7ac}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000003200)={{r6, 0xfff, 0x27e, 0x6, 0x0, 0xf, 0x7f, 0x7, 0xe, 0x8, 0x7ff, 0xe31d, 0x8, 0x8}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r10, 0xd000943d, &(0x7f0000003280)={0xfa45, [{r6, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {0x0, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r7}, {r7, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {0x0, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r6}, {r6, r8}, {r6, r8}, {r6, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r7}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r7}, {r7, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {0x0, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {}, {r7, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {0x0, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {0x0, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r7}, {r6}, {r7, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r6}, {r6, r8}, {r7, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r7}, {r6, r8}, {r7}, {r6, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {0x0, r8}, {r7}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r7}, {r6, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r6}, {r6, r8}, {r7, r8}, {r7, r8}, {r7}, {r6, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r6}, {0x0, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r6}, {r7, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {0x0, r8}], 0x4, "41d4fc269c3066"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000004280)={r8, r6, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000005280)={r8, r7, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000006280)={0x8001, [{r6, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r7}, {r6}, {r7, r8}, {r7, r8}, {0x0, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {0x0, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r7}, {r6, r8}, {r7, r8}, {r7, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r7}, {r6, r8}, {r7, r8}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {}, {r7, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r7}, {r7, r8}, {r6, r8}, {r6, r8}, {r6}, {r7, r8}, {r6}, {r7, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {0x0, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r7}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {0x0, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {0x0, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {0x0, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {0x0, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r6}, {r6, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r6}, {r7, r8}], 0x2, "4788ac037f323b"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000040dc0)={0x0, [{r6, r8}, {r12, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {0x0, r8}, {r13, r8}, {r7, r8}, {}, {r7, r8}, {r7, r8}, {r7, r14}, {r6, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r7, r15}, {r6, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r16, r8}, {r17, r8}, {r6, r8}, {r18, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r19, r8}, {r6, r20}, {r7, r21}, {r6, r22}, {r7, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r6, r8}, {r7}, {0x0, r8}, {0x0, r8}, {r6}, {r7, r8}, {r6}, {0x0, r8}, {0x0, r8}, {r6, r8}, {r6}, {r6}, {r6, r8}, {r7, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {}, {r7, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {}, {r7, r8}, {r6, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r6}, {r7, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r6}, {r7, r8}, {r6, r8}, {r6, r8}, {0x0, r8}, {r6, r8}, {r6}, {r7, r8}, {r7, r8}, {r7, r8}, {r7}, {r6, r8}, {0x0, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r6}, {r7}, {0x0, r8}, {r6, r8}, {r6}, {r6, r8}, {0x0, r8}, {r7, r8}, {r7, r8}, {0x0, r8}, {r6, r8}, {r7}, {r6, r8}, {r7, r8}, {r7}, {}, {0x0, r8}, {r7}, {0x0, r8}, {r6, r8}, {r6, r8}, {r6}, {r6, r8}, {r6}, {r6, r8}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r6}, {r7, r8}, {r7, r8}, {0x0, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {0x0, r8}, {r6, r8}, {0x0, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {}, {0x0, r8}, {r7}, {r7, r8}, {r7, r8}, {r6, r8}, {r6}, {0x0, r8}, {0x0, r8}, {r7, r8}, {r7}, {r6}, {}, {0x0, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r7}, {r7, r8}, {r7}, {r7}, {r7, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r7}, {r6, r8}, {r7, r8}, {r7, r8}, {r6, r8}, {}, {0x0, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {0x0, r8}, {r6, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {0x0, r8}, {0x0, r8}, {r6}, {r6, r8}, {r6, r8}, {r6, r8}, {r7}, {r7, r8}, {}, {r7, r8}, {0x0, r8}, {r7, r8}, {r7, r8}, {r7, r8}, {0x0, r8}, {}, {r7}, {r7}, {r7}, {r6, r8}, {r6}, {r7}, {r7, r8}, {r6}, {r6}, {0x0, r8}, {r7, r8}, {}, {r6, r8}, {r6, r8}, {r7, r8}, {r7, r8}, {0x0, r8}, {r6}, {r7, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {}, {r6}, {r7, r8}, {r6, r8}, {r7, r8}, {r6, r8}, {0x0, r8}, {r6, r8}, {r6, r8}, {0x0, r8}, {0x0, r8}, {r6, r8}, {r6, r8}, {}, {0x0, r8}, {r6}], 0xbd, "9e4478495ec8cb"}) 324.690328ms ago: executing program 0 (id=13447): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_test={0x1a, 0x7, 0x2, 0x1, [0x7ff]}}) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCGNPMODE(r5, 0xc008744c, &(0x7f0000000100)={0x283, 0x2}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x2, 0x4}, {0x0, 0xfff3}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000001000370429bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="890c02000000000040001f800b00010069703667726500003000028004001200140007002001000000000000000000000000000214000600200100000000000000000000000000019dfdc75ad2416546fe9c1ba7944d6d0523e66fcbc3f1d8f030e2cd0b9b8dde1699860f43896fd1357e41818e5b8fbdb4420051ea098e3589636be0667bd5d2f4ac5f829583841ffc318d19d0645ba2ab6c0e9b336ae2ed97e13cf5d0da0c440543fc2e6a7d5110e587f05524ee73afad2601dd88f11a923efce9d4956e0699a944281c731b9be16fb63ce942fac7cb4f"], 0x60}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) 255.800227ms ago: executing program 4 (id=13448): socket$can_j1939(0x1d, 0x2, 0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x4, r0}, 0x38) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000040)=0x100000001, 0x4) socket$can_j1939(0x1d, 0x2, 0x7) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f0000000240), &(0x7f0000000280)=0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c000000100003042dbd70003d00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad88000000022c0094750b00010067656e0a766500001c00028005000d00010000000800000310000005000c000000000000535f5cf275957c4a730217909f9e05499a80a146059d5d6f0286544a68788380d5cc33ed1891b0d396b8d446d0007023dfa8d45c8a44d037d709c51f7fb64e22126209fa3e3b5271f9a76f8de21f30ce163d79cd9500ffaf20d930fbcaa4fb5405b4acd4547711ceef801f65c3cfaea8e46930a5f13f979363e719d9d62fab3eaf39164fd616e415d67a2f43f4ccb792028c59360e3c266aecd488082fe2e0a2bafba55bf3d0bc25c7383fcbd42ad8b126d0f00138023225e480b86a78a719ee408bd1b5bf236924c4050ec7165ec48e935242494e300a49dd11a5fc6523a903d240361ab25933bf1d06f1d19a14dddd99a0fac0"], 0x4c}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) pwritev(r4, &(0x7f0000000100)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x4008001, 0x80) close(r4) socket(0x1e, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=@bridge_delvlan={0x54, 0x71, 0x230, 0x70bd2c, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0xc, 0x1}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x8}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x12, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x8}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xf}}]}, 0x54}}, 0x8000) sendfile(r4, r3, 0x0, 0xf03a0005) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r7, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r7, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000200)="a90000000100000001efafbdd6c406e9", 0xfffffffffffffe4c) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x14, 0x3d, 0x301, 0x70bd25, 0xfffffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000102c0), r8) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x38, 0x1, 0x1, 0x301, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x2}]}]}, 0x38}}, 0x0) 159.998264ms ago: executing program 2 (id=13449): r0 = socket(0x400000000010, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xffff7ffc}, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r2, 0x1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r5, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000880)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv4=@gre={{0x5, 0x4, 0x1, 0x5, 0x58, 0x65, 0x0, 0x8, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x9, 0x0, 0x1, 0x2, 0x2, 0xb}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x6, 0x2, 0x6, 0x3, 0x1, 0x1, 0x4, 0x2e}, 0x2, {0x5, 0x5, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) 44.001781ms ago: executing program 0 (id=13450): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) r7 = socket(0x400000000010, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x10001, 0x1, 0x20000007, 0x7fffffff, 0x101}, 0x3, 0x8}, [{0xde, 0xe3, 0x1, 0x9, 0x8000, 0x4}, {0x2000000, 0x8, 0x5, 0x1, 0xa66, 0x100}, {0x4, 0x3ee1, 0x6, 0x5432, 0xd, 0x40}, {0x0, 0x9, 0x1, 0xbd, 0x9e3, 0xffffff49}, {0xfff, 0x0, 0x7, 0x80000000, 0x6, 0x55f}, {0x6, 0xb8c, 0x6, 0x3, 0x0, 0x10001}, {0x401, 0x9, 0x5, 0x10000, 0x9, 0x76}, {0x66, 0x7, 0x9, 0x4, 0x0, 0xc4}, {0x1, 0xcc, 0xf, 0x8, 0x0, 0x9}, {0x6, 0x5, 0x1, 0x401, 0x7, 0x4}, {0x6, 0x3, 0x2, 0x2, 0x5, 0x3}, {0x400, 0x8, 0xcf02, 0x876, 0x401, 0x7370d629}, {0x4, 0x7, 0x7fff, 0xdc0d, 0x6, 0x3}, {0xb, 0xe, 0x0, 0x80000001, 0x7, 0x4}, {0x0, 0x800, 0xa2e6, 0x10008000}, {0x6, 0x9, 0x1, 0xffffaf21, 0x8, 0x7}, {0xa6, 0x2, 0x1, 0x4, 0x6, 0xfffffffa}, {0x7, 0x100, 0x9, 0x1, 0x3, 0x4}, {0x2, 0x5, 0x4, 0x81, 0x3ff, 0x8000}, {0x7, 0x4, 0x1, 0x1, 0xfffffffa, 0x90e7}, {0x0, 0x1, 0x9, 0x7fff, 0x81, 0x45}, {0x7, 0x2, 0x10, 0x4, 0xffffffff, 0x2}, {0x5, 0x10, 0x8001, 0x5, 0x8, 0x1}, {0x2, 0xffffff64, 0x5, 0xff, 0xc455, 0x4}, {0xb2, 0x1, 0x6, 0x1, 0x3, 0x1}, {0x2, 0x4, 0x200, 0x10000, 0x0, 0x6}, {0x8001, 0x7, 0x7, 0x9, 0xa39, 0x1}, {0xfaa8, 0x0, 0xc, 0x0, 0xa, 0xa}, {0x425, 0x6, 0x1, 0x4, 0x9, 0xbeaa}, {0x2, 0x80000001, 0x0, 0x8, 0x0, 0x7}, {0x101, 0x7, 0xfe3, 0x935, 0x9, 0x8001}, {0x829a, 0x3, 0x0, 0x10001, 0x1, 0x1}, {0xffffffff, 0x6, 0x100, 0x0, 0x9, 0x4}, {0x1, 0xde4c, 0x800, 0x7, 0x8, 0x646f}, {0x7, 0x81, 0x9, 0x6, 0x8}, {0x2, 0x9, 0x40, 0x5, 0x1, 0x71b0}, {0x80000001, 0x7, 0x1, 0xa00000, 0x10, 0x101}, {0x8, 0x80000001, 0x10001, 0x8, 0x7, 0x4}, {0x5, 0x8, 0xfffff6e0, 0xfffffffe, 0x5, 0x424}, {0x7, 0x5, 0x6, 0x5, 0x0, 0xfffffff7}, {0x53, 0xf, 0x7, 0x6707, 0x400, 0x7}, {0x1, 0x1, 0x7, 0x401, 0x9cf58fe}, {0x1, 0xffffffff, 0x81c3, 0x1, 0x0, 0x80000001}, {0xffffffff, 0x7, 0x3, 0x8, 0x81, 0x6}, {0x9, 0xfff, 0x6, 0x1, 0x8, 0xfffffff8}, {0x7ff, 0x8, 0x7, 0x800, 0x81, 0x400}, {0x5, 0x7, 0x18000000, 0x0, 0x200, 0x5}, {0xfffff800, 0x6, 0x7, 0x12000, 0x6, 0xffffffff}, {0x9, 0x7f, 0x3, 0x9, 0xffffffff, 0xffffffff}, {0x9, 0x37, 0x8, 0x12b, 0x89e1, 0x101}, {0x9, 0x53, 0x1, 0x6, 0xfffffffa, 0x5}, {0x7, 0x1, 0x4, 0x7, 0xffffffff}, {0x63bd, 0x8, 0x3, 0xb63a, 0x1, 0x4}, {0x6, 0x0, 0x2e25, 0x81, 0xff, 0x3}, {0x4, 0xa, 0xc, 0x2, 0x800100, 0x2}, {0xee, 0x2, 0x5, 0x3, 0x2, 0x3}, {0x10000, 0xfffff7fe, 0x8, 0x8, 0x868, 0xb406}, {0x6, 0xb8ed, 0xeb, 0xffffffff, 0x0, 0x3}, {0x7bd, 0x5, 0x85, 0x4, 0x9, 0x7}, {0x7fff, 0x73b, 0x8001, 0xdcb, 0x8, 0x8}, {0xfffff001, 0x4, 0x9000000, 0x2, 0x7fffffff, 0x94}, {0x6, 0x8001, 0x8, 0x367, 0x8, 0x1}, {0x2, 0x40, 0x3, 0x7ff, 0xe66a, 0x698}, {0x7f, 0xf, 0xffff98b3, 0xa, 0x3}, {0xa, 0x4, 0x5, 0x2, 0x10001}, {0x30000, 0x1, 0x5, 0xf90, 0x6ed, 0x2}, {0x3, 0xfff, 0x8, 0x3, 0x66d9, 0x8}, {0x8000, 0x3, 0x7, 0x800, 0x10001, 0x6}, {0xa, 0xdd2fc5d, 0x8, 0xf1, 0x9, 0x6}, {0x9, 0xffffffff, 0xb38c, 0x6, 0x81, 0x891c}, {0x1, 0xe, 0x8000, 0x3, 0x3, 0x1}, {0x0, 0x3, 0x5fbb, 0x0, 0x5, 0xffff}, {0x1, 0x1, 0x400, 0x3, 0x3c12, 0x74a}, {0x20, 0x2, 0x5, 0x1, 0x2, 0xffff8000}, {0x0, 0x9, 0xaf4e, 0xe3, 0x4, 0x2800}, {0x7, 0x8, 0x9, 0x2, 0x5, 0x4}, {0x5, 0x7, 0x5, 0xa, 0x6, 0x4}, {0x9, 0xffffff81, 0x7, 0x0, 0x3, 0xd}, {0x9bd, 0x2, 0x8, 0x3, 0x0, 0xf}, {0x7, 0x81, 0x3, 0x8, 0x3, 0x9}, {0x1, 0x800, 0xf, 0x5, 0x1000, 0x3}, {0x9, 0xa24, 0x2, 0x5, 0x400, 0xa}, {0x2b4e, 0x8, 0x5, 0x3, 0xf, 0x7800000}, {0x80000001, 0x100, 0x8c, 0x6, 0x7, 0x8}, {0x6, 0x2, 0xb5, 0x8, 0x9, 0x1000}, {0x7, 0x1, 0xe3c, 0x0, 0x3, 0x1}, {0x6, 0x5, 0x9, 0x5, 0x1, 0xc}, {0x8, 0x7, 0x800, 0x5, 0x9, 0x3}, {0xfff, 0x764, 0x400, 0xd7b, 0x0, 0x2}, {0x4, 0xfffffff7, 0x80000001, 0xce, 0xfffffffd, 0x1}, {0x3, 0x8, 0x10000, 0x5cf, 0xae9, 0xd}, {0x8, 0x5, 0x80000000, 0x6, 0x1, 0x1}, {0x5, 0x401, 0x1000, 0xaa, 0x3, 0xf}, {0x7ca, 0x2, 0x0, 0x401, 0x4, 0x2}, {0x1, 0xffffffff, 0x0, 0x4, 0x2, 0x7}, {0x2, 0x9, 0x5, 0xf, 0x2, 0x6}, {0x80000000, 0x0, 0xd041, 0x4, 0x734, 0x3ff}, {0x6, 0x3c00000, 0x5d51, 0x10001, 0x4, 0xffffffff}, {0x9, 0x5, 0x3, 0x2c28, 0xfffffff7, 0x4}, {0x2cb, 0x5, 0x8, 0x1, 0x5e6, 0x4}, {0x2, 0x1ff, 0xb, 0x2007, 0x3ff, 0x8}, {0x34, 0x3, 0x1, 0x6, 0x1000, 0x80}, {0x80000001, 0xd, 0x5, 0x9, 0xf4, 0x6}, {0x80, 0xf, 0x80000000, 0x0, 0x967, 0x3}, {0x3, 0xfffffffb, 0xf44, 0xa51, 0x0, 0x5}, {0x4, 0x3, 0x6, 0xffffff1d, 0xbcd, 0x8}, {0x4, 0x100, 0x3, 0x9, 0xa, 0x5}, {0x4, 0x9, 0x4, 0x7fffffff, 0xffffffaf, 0x5}, {0x0, 0x5, 0x800, 0x2, 0x10001, 0x4}, {0x4, 0x7cbdf1ab, 0x3d7, 0x5, 0x8, 0x3}, {0x7, 0x8, 0xffffa250, 0x4, 0x3, 0x8}, {0x20004, 0x7fffffff, 0x8, 0xff, 0xffff, 0x7}, {0xe3, 0x5, 0x0, 0xd, 0x9, 0xffffffc0}, {0x7fff, 0x4, 0xffffffff, 0x3, 0x80, 0x9}, {0x8, 0xfffffff9, 0x0, 0x0, 0x80, 0x6}, {0x4, 0x2, 0x8, 0x5, 0x5, 0x2}, {0x6784, 0xfff, 0x7, 0xd, 0x3, 0x7}, {0xfe52, 0x5, 0x2, 0x7, 0x4, 0xfffffffb}, {0xa, 0x4, 0x81, 0xe9ca, 0x7, 0x3}, {0x5, 0x9, 0x4, 0x7, 0x1, 0x472517a2}, {0x0, 0x0, 0x1, 0x6, 0x3, 0xfffffffa}, {0x1, 0x49c, 0x5, 0x2f4b, 0x724e88c2, 0x2}, {0xd, 0xfffffffc, 0x2, 0x9, 0x2ca, 0x401}, {0x7, 0x6, 0x9, 0x7ff, 0x6ec, 0x1ff}, {0xfff, 0x5, 0xb4d, 0x8, 0x1, 0x4}, {0xfffffff8, 0xffffffff, 0x3, 0x1, 0x2, 0x703d}, {0xc, 0x4, 0xe8b6, 0x0, 0x9, 0x3}, {0xf, 0x1c, 0x5, 0x5, 0x6, 0x7fffffff}], [{0x4}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x3, 0x1}, {0x4}, {0x2}, {0x3}, {0x84be6f01e67e12d7, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x6, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x6}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0xe94b35fccb9c3a2a}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x4}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x7}, {0x2, 0x3}, {0x2}, {0x2}, {0x3, 0x1}, {}, {}, {0x3}, {0x3, 0x1}, {0x2}, {}, {}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x5}, {0x2, 0x1}, {0x1}, {0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x1}, {0x4}, {0x1, 0x1}, {}, {0x4, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x2}, {}, {0x2}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x2}, {0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x2}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x17, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4084) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xeffe}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "2a8e"}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xcc}}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64) r11 = socket$kcm(0x2, 0x3, 0x2) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_cmd={0x41, 0xa2, 0x1, 0x1, 0x8, 0x40, 0x4, 0x6, 0x0, 0xf2, 0x0, 0xa5b9, 0xfccd, 0x8, 0x9, 0x86ff, [0x7, 0xe]}}) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async, rerun: 64) write$tun(r10, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x300, 0x0, 0x0, 0x89, 0x0, @rand_addr, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x2}}}}, 0x36) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x20008000) 43.350886ms ago: executing program 4 (id=13451): sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fedbdf25070000000a0004007770616e30000000080001"], 0x40}, 0x1, 0x0, 0x0, 0xc080}, 0x48084) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000020000115053f88bafcdbdf2504"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000040)) 0s ago: executing program 2 (id=13452): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000140), &(0x7f00000001c0)=0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x48095}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x0, 0xa, r2}]}, 0x3c}}, 0x8000) kernel console output (not intermixed with test programs): utes in process `syz.1.11977'. [ 1154.107106][T20234] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11977'. [ 1154.108816][T20231] syzkaller0: entered promiscuous mode [ 1154.123310][T20231] syzkaller0: entered allmulticast mode [ 1154.145898][T20231] sctp: [Deprecated]: syz.2.11976 (pid 20231) Use of int in max_burst socket option deprecated. [ 1154.145898][T20231] Use struct sctp_assoc_value instead [ 1154.171005][T20231] tipc: Enabled bearer , priority 0 [ 1154.183585][T20231] tipc: Resetting bearer [ 1154.196942][T20230] tipc: Resetting bearer [ 1154.206870][T20230] tipc: Disabling bearer [ 1154.383792][T20244] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1154.779021][T20279] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11993'. [ 1154.901986][T20296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11996'. [ 1155.152939][T20308] netlink: 'syz.0.12000': attribute type 1 has an invalid length. [ 1155.317136][T20308] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.324638][T20308] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.464826][T20308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1155.490951][T20308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1155.614096][T17566] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1155.641752][T17566] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.660402][ T6277] net_ratelimit: 23 callbacks suppressed [ 1155.660421][ T6277] bond5: (slave dummy0): failed to get link speed/duplex [ 1155.708748][T20351] syzkaller0: entered promiscuous mode [ 1155.714289][T20351] syzkaller0: entered allmulticast mode [ 1155.721421][T17566] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1155.731953][T17566] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.746518][T17566] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1155.756273][T17566] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.766266][T17566] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1155.775518][T17566] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.830450][ T6261] bond5: (slave dummy0): failed to get link speed/duplex [ 1155.948244][ T49] bond5: (slave dummy0): failed to get link speed/duplex [ 1156.057881][ T49] bond5: (slave dummy0): failed to get link speed/duplex [ 1156.167859][T17566] bond5: (slave dummy0): failed to get link speed/duplex [ 1156.277827][ T49] bond5: (slave dummy0): failed to get link speed/duplex [ 1156.387912][ T49] bond5: (slave dummy0): failed to get link speed/duplex [ 1156.497892][ T49] bond5: (slave dummy0): failed to get link speed/duplex [ 1158.357828][T20327] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1158.373483][T20370] netlink: 'syz.3.12015': attribute type 1 has an invalid length. [ 1158.388981][T20370] NCSI netlink: No device for ifindex 0 [ 1158.519659][T20387] netlink: zone id is out of range [ 1158.528874][T20387] netlink: zone id is out of range [ 1158.710681][T20397] bond15: Removing last arp target with arp_interval on [ 1158.937091][T20429] __nla_validate_parse: 167 callbacks suppressed [ 1158.937121][T20429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12031'. [ 1158.996598][T20429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12031'. [ 1159.101990][T20446] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1159.154980][T20446] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12034'. [ 1159.385033][T20463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12040'. [ 1159.426548][T20473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12040'. [ 1159.492773][T17921] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1159.500862][T17921] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1159.509472][T17921] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1159.519475][T17921] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1159.531156][T17921] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1159.625705][T20492] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12044'. [ 1159.702016][T20499] ±ÿ: renamed from lo (while UP) [ 1159.751379][T20499] netlink: 224 bytes leftover after parsing attributes in process `syz.3.12046'. [ 1159.812657][T20511] tc_dump_action: action bad kind [ 1159.853913][T20477] lo speed is unknown, defaulting to 1000 [ 1159.861174][T20477] lo speed is unknown, defaulting to 1000 [ 1159.899368][ T6277] batadv0: left promiscuous mode [ 1160.004900][T20523] xt_CT: No such helper "syz0" [ 1160.079803][T20532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12052'. [ 1160.120415][T20532] netlink: 'syz.3.12052': attribute type 30 has an invalid length. [ 1160.131049][T20530] lo speed is unknown, defaulting to 1000 [ 1160.134096][T20477] lo speed is unknown, defaulting to 1000 [ 1160.179081][T20530] lo speed is unknown, defaulting to 1000 [ 1160.541482][T20555] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1160.666681][T20477] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.681072][T20477] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.689426][T20477] bridge_slave_0: entered allmulticast mode [ 1160.700401][T20477] bridge_slave_0: entered promiscuous mode [ 1160.719134][T20477] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.726498][T20477] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.734999][T20477] bridge_slave_1: entered allmulticast mode [ 1160.742971][T20477] bridge_slave_1: entered promiscuous mode [ 1160.750845][T20530] lo speed is unknown, defaulting to 1000 [ 1160.781339][T20562] netlink: 120 bytes leftover after parsing attributes in process `syz.0.12060'. [ 1160.800147][T20477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1160.830616][T20477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1160.878952][ T6277] net_ratelimit: 368 callbacks suppressed [ 1160.878971][ T6277] bond5: (slave dummy0): failed to get link speed/duplex [ 1160.907059][T20477] team0: Port device team_slave_0 added [ 1160.941060][T20477] team0: Port device team_slave_1 added [ 1161.017753][T20477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1161.031930][T20477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1161.059191][T20477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1161.072883][T20574] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1161.074648][T20477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1161.122369][T20477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1161.153379][T20477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1161.155972][T20580] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1161.187925][ T6277] bond5: (slave dummy0): failed to get link speed/duplex [ 1161.223396][T20477] hsr_slave_0: entered promiscuous mode [ 1161.233507][T20477] hsr_slave_1: entered promiscuous mode [ 1161.241457][T20477] debugfs: 'hsr0' already exists in 'hsr' [ 1161.259650][T20477] Cannot create hsr debugfs directory [ 1161.577493][T17921] Bluetooth: hci0: command tx timeout [ 1161.587317][ T49] bond5: (slave dummy0): failed to get link speed/duplex [ 1161.708360][ T49] bond5: (slave dummy0): failed to get link speed/duplex [ 1161.818699][ T7308] bond5: (slave dummy0): failed to get link speed/duplex [ 1161.937719][ T7308] bond5: (slave dummy0): failed to get link speed/duplex [ 1162.047831][T17566] bond5: (slave dummy0): failed to get link speed/duplex [ 1162.168090][ T49] bond5: (slave dummy0): failed to get link speed/duplex [ 1162.277589][ T49] bond5: (slave dummy0): failed to get link speed/duplex [ 1163.652706][T20565] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1163.665559][T20477] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1163.677484][T17921] Bluetooth: hci0: command tx timeout [ 1163.699239][T20477] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1163.721717][T20477] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1163.765685][T20477] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1163.782487][T20477] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1163.809239][T20477] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1163.861445][T20477] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1163.892683][T20477] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1163.923781][T20619] syzkaller1: entered promiscuous mode [ 1163.955126][T20619] syzkaller1: entered allmulticast mode [ 1164.101329][T20477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1164.148614][T20653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12080'. [ 1164.194083][T20653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12080'. [ 1164.205566][T20477] 8021q: adding VLAN 0 to HW filter on device team0 [ 1164.214030][ T7303] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1164.225133][T20660] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12078'. [ 1164.243369][T20653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12080'. [ 1164.296784][T20663] syzkaller0: entered promiscuous mode [ 1164.316353][T20663] syzkaller0: entered allmulticast mode [ 1164.324680][ T7303] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1164.334240][ T7303] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1164.349536][ T7303] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1164.368387][ T6261] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.375562][ T6261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1164.385295][T20653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12080'. [ 1164.446870][T20674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12085'. [ 1164.463173][ T7308] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.470335][ T7308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1164.486008][T20674] netlink: 'syz.4.12085': attribute type 1 has an invalid length. [ 1164.486923][T20653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12080'. [ 1164.512229][T20653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12080'. [ 1164.530313][T20653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12080'. [ 1164.543248][T20679] xt_hashlimit: size too large, truncated to 1048576 [ 1164.556384][T20653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12080'. [ 1164.622981][T20678] gretap1: entered allmulticast mode [ 1164.675034][T20688] lo speed is unknown, defaulting to 1000 [ 1164.686818][T20688] lo speed is unknown, defaulting to 1000 [ 1165.034935][T20701] tipc: Enabling of bearer rejected, already enabled [ 1165.066715][T20688] lo speed is unknown, defaulting to 1000 [ 1165.091700][T20477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1165.134064][T20705] lo speed is unknown, defaulting to 1000 [ 1165.184737][T20705] lo speed is unknown, defaulting to 1000 [ 1165.220449][T20477] veth0_vlan: entered promiscuous mode [ 1165.266752][T20477] veth1_vlan: entered promiscuous mode [ 1165.328403][T20477] veth0_macvtap: entered promiscuous mode [ 1165.363939][T20477] veth1_macvtap: entered promiscuous mode [ 1165.416087][T20477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1165.440216][T20477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1165.461003][T17566] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.514951][T17566] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.526291][T17566] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.544529][T17566] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.561827][T20705] lo speed is unknown, defaulting to 1000 [ 1165.625692][ T6273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1165.644876][ T6273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1165.676002][ T7308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1165.685529][ T7308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1165.737859][T17921] Bluetooth: hci0: command tx timeout [ 1165.924755][T20732] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1165.964875][T20741] debugfs: '1ùà^!‚Y‡°”õËí [ 1165.964875][T20741] 3ìUH†5rºBnœæ\' already exists in 'ieee80211' [ 1166.031326][ T6273] net_ratelimit: 23 callbacks suppressed [ 1166.031346][ T6273] bond5: (slave dummy0): failed to get link speed/duplex [ 1166.177752][ T49] bond5: (slave dummy0): failed to get link speed/duplex [ 1166.298138][ T6273] bond5: (slave dummy0): failed to get link speed/duplex [ 1166.678306][ T6277] bond5: (slave dummy0): failed to get link speed/duplex [ 1166.837756][ T49] bond5: (slave dummy0): failed to get link speed/duplex [ 1166.957891][ T6277] bond5: (slave dummy0): failed to get link speed/duplex [ 1166.972598][T20800] netlink: 'syz.2.12112': attribute type 4 has an invalid length. [ 1166.994853][T20800] netlink: 'syz.2.12112': attribute type 4 has an invalid length. [ 1167.078539][ T6277] bond5: (slave dummy0): failed to get link speed/duplex [ 1167.188115][ T6277] bond5: (slave dummy0): failed to get link speed/duplex [ 1167.297492][ T6277] bond5: (slave dummy0): failed to get link speed/duplex [ 1167.407675][ T6261] bond5: (slave dummy0): failed to get link speed/duplex [ 1167.736894][T20837] syzkaller0: entered promiscuous mode [ 1167.744530][T20837] syzkaller0: entered allmulticast mode [ 1167.818073][T17921] Bluetooth: hci0: command tx timeout [ 1167.877559][T20839] netlink: 'syz.0.12120': attribute type 4 has an invalid length. [ 1167.889412][T20839] .`: renamed from bond0 [ 1169.802431][T20789] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1169.933285][T20866] __nla_validate_parse: 65 callbacks suppressed [ 1169.933303][T20866] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12128'. [ 1170.014319][T20871] syzkaller0: entered promiscuous mode [ 1170.030516][T20871] syzkaller0: entered allmulticast mode [ 1170.044789][T20871] sctp: [Deprecated]: syz.3.12130 (pid 20871) Use of int in max_burst socket option deprecated. [ 1170.044789][T20871] Use struct sctp_assoc_value instead [ 1170.060125][T20878] syzkaller0: entered promiscuous mode [ 1170.078202][T20878] syzkaller0: entered allmulticast mode [ 1170.091026][T20871] tipc: Enabled bearer , priority 0 [ 1170.105659][T20869] tipc: Resetting bearer [ 1170.128487][T20869] tipc: Disabling bearer [ 1170.136770][T20877] macsec0: entered promiscuous mode [ 1170.153275][T20877] macsec0: left promiscuous mode [ 1170.534101][T20924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12145'. [ 1170.556955][T20924] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12145'. [ 1170.571873][T20924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12145'. [ 1170.586382][T20924] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12145'. [ 1171.047719][ T6261] net_ratelimit: 30 callbacks suppressed [ 1171.047735][ T6261] bond5: (slave dummy0): failed to get link speed/duplex [ 1171.069829][T20950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12153'. [ 1171.164024][T20961] lo speed is unknown, defaulting to 1000 [ 1171.170449][ T6261] bond5: (slave dummy0): failed to get link speed/duplex [ 1171.179948][T20961] lo speed is unknown, defaulting to 1000 [ 1171.277845][ T6261] bond5: (slave dummy0): failed to get link speed/duplex [ 1171.292883][T20961] lo speed is unknown, defaulting to 1000 [ 1171.406704][T20966] syzkaller1: entered promiscuous mode [ 1171.412998][T20966] syzkaller1: entered allmulticast mode [ 1171.447829][ T6261] bond5: (slave dummy0): failed to get link speed/duplex [ 1171.544577][T20973] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12159'. [ 1171.561583][ T7308] bond5: (slave dummy0): failed to get link speed/duplex [ 1171.689861][ T6261] bond5: (slave dummy0): failed to get link speed/duplex [ 1171.819942][ T7303] bond5: (slave dummy0): failed to get link speed/duplex [ 1171.939285][T20994] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12165'. [ 1171.950021][ T7308] bond5: (slave dummy0): failed to get link speed/duplex [ 1171.963733][T20997] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12165'. [ 1172.020532][T20998] netlink: 'syz.3.12166': attribute type 4 has an invalid length. [ 1172.046925][T20998] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.12166'. [ 1172.060075][T20996] nbd: must specify at least one socket [ 1172.077092][T20996] block nbd1: NBD_DISCONNECT [ 1172.092771][ T7303] bond5: (slave dummy0): failed to get link speed/duplex [ 1172.108281][T20996] block nbd1: Send disconnect failed -32 [ 1172.122704][T20996] block nbd1: shutting down sockets [ 1172.256567][T21025] netlink: 'syz.3.12173': attribute type 21 has an invalid length. [ 1172.319702][ T7303] bond5: (slave dummy0): failed to get link speed/duplex [ 1172.782970][T21069] netlink: 'syz.3.12185': attribute type 1 has an invalid length. [ 1172.808192][T21069] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1172.819202][T21069] netlink: 'syz.3.12185': attribute type 10 has an invalid length. [ 1172.885697][T21078] netlink: 'syz.4.12187': attribute type 1 has an invalid length. [ 1172.916191][T21078] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1172.921353][T21083] "syz.3.12190" (21083) uses obsolete ecb(arc4) skcipher [ 1172.966902][T21088] netlink: 'syz.0.12191': attribute type 1 has an invalid length. [ 1172.992153][T21088] bond0: entered promiscuous mode [ 1172.997929][T21088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1173.021262][T21088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1173.030803][T21088] bond0: (slave vti0): The slave device specified does not support setting the MAC address [ 1173.041260][T21088] bond0: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 1173.053819][T21088] bond0: (slave vti0): making interface the new active one [ 1173.062057][T21088] vti0: entered promiscuous mode [ 1173.068824][T21088] bond0: (slave vti0): Enslaving as an active interface with an up link [ 1173.182570][T21103] syzkaller0: entered promiscuous mode [ 1173.189612][T21103] syzkaller0: entered allmulticast mode [ 1173.280563][T21107] mac80211_hwsim hwsim132 syzkaller1: entered promiscuous mode [ 1173.288854][T21107] mac80211_hwsim hwsim132 syzkaller1: entered allmulticast mode [ 1173.534883][T21131] vlan0: entered promiscuous mode [ 1173.792939][T21165] sctp: [Deprecated]: syz.2.12209 (pid 21165) Use of int in maxseg socket option. [ 1173.792939][T21165] Use struct sctp_assoc_value instead [ 1173.863067][T21169] batadv_slave_1: entered promiscuous mode [ 1173.961005][T21173] syzkaller0: entered promiscuous mode [ 1173.966837][T21173] syzkaller0: entered allmulticast mode [ 1173.979281][T21173] sctp: [Deprecated]: syz.1.12216 (pid 21173) Use of int in max_burst socket option deprecated. [ 1173.979281][T21173] Use struct sctp_assoc_value instead [ 1174.194208][T21192] lo speed is unknown, defaulting to 1000 [ 1174.201941][T21192] lo speed is unknown, defaulting to 1000 [ 1174.253776][T21198] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1174.365818][T21192] lo speed is unknown, defaulting to 1000 [ 1174.505282][T21219] netlink: 'syz.4.12225': attribute type 1 has an invalid length. [ 1174.544307][T21224] bridge2: entered promiscuous mode [ 1174.556274][T21224] bridge2: entered allmulticast mode [ 1174.566492][T21224] team0: Port device bridge2 added [ 1174.702981][T21168] batadv_slave_1: left promiscuous mode [ 1174.849197][T21247] syzkaller1: entered promiscuous mode [ 1174.870342][T21247] syzkaller1: entered allmulticast mode [ 1174.880202][T21246] tipc: Enabling of bearer rejected, already enabled [ 1174.942344][T21246] tipc: Resetting bearer [ 1175.053764][T21255] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1175.124978][T21265] __nla_validate_parse: 15 callbacks suppressed [ 1175.125001][T21265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12239'. [ 1175.173946][T21265] netlink: 'syz.2.12239': attribute type 1 has an invalid length. [ 1175.216939][T21265] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1175.294821][T21265] bond1: (slave gretap2): making interface the new active one [ 1175.305450][T21265] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 1175.451550][T21284] Bluetooth: MGMT ver 1.23 [ 1175.558387][T21278] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12243'. [ 1175.648622][ T5624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1175.656800][ T5624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1175.666509][ T5624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1175.676480][ T5624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1175.685739][ T5624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1175.998439][T21307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12249'. [ 1176.010671][T21305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12248'. [ 1176.099854][T21305] bond3: option broadcast_neighbor: invalid value (30) [ 1176.141964][T21305] bond3 (unregistering): Released all slaves [ 1176.230150][T21323] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12252'. [ 1176.240871][T17566] net_ratelimit: 427 callbacks suppressed [ 1176.240890][T17566] bond5: (slave dummy0): failed to get link speed/duplex [ 1176.307964][T21290] lo speed is unknown, defaulting to 1000 [ 1176.315196][T21290] lo speed is unknown, defaulting to 1000 [ 1176.398016][ T7302] bond5: (slave dummy0): failed to get link speed/duplex [ 1176.493528][T21335] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.12253'. [ 1176.508859][ T1857] IPVS: starting estimator thread 0... [ 1176.518225][ T49] bond5: (slave dummy0): failed to get link speed/duplex [ 1176.527831][T21335] openvswitch: netlink: Key type 11488 is out of range max 32 [ 1176.604947][T21290] lo speed is unknown, defaulting to 1000 [ 1176.607356][T21336] IPVS: using max 47 ests per chain, 112800 per kthread [ 1176.638305][T17566] bond5: (slave dummy0): failed to get link speed/duplex [ 1176.747999][T17566] bond5: (slave dummy0): failed to get link speed/duplex [ 1176.868007][ T7303] bond5: (slave dummy0): failed to get link speed/duplex [ 1176.941876][T21355] netlink: 244 bytes leftover after parsing attributes in process `syz.0.12258'. [ 1176.979301][T21356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12262'. [ 1177.016376][T21356] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12262'. [ 1177.068108][T17566] bond5: (slave dummy0): failed to get link speed/duplex [ 1177.082106][T21357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12262'. [ 1177.207318][T17566] bond5: (slave dummy0): failed to get link speed/duplex [ 1177.346639][T21290] bridge0: port 1(bridge_slave_0) entered blocking state [ 1177.358686][T21290] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.367863][T21290] bridge_slave_0: entered allmulticast mode [ 1177.375225][T21290] bridge_slave_0: entered promiscuous mode [ 1177.385300][T21290] bridge0: port 2(bridge_slave_1) entered blocking state [ 1177.393093][T21290] bridge0: port 2(bridge_slave_1) entered disabled state [ 1177.401416][T21290] bridge_slave_1: entered allmulticast mode [ 1177.409949][T21290] bridge_slave_1: entered promiscuous mode [ 1177.476587][T21290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1177.489495][T21290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1177.521281][T21378] netlink: 'syz.2.12265': attribute type 1 has an invalid length. [ 1177.544439][T21290] team0: Port device team_slave_0 added [ 1177.597969][T21290] team0: Port device team_slave_1 added [ 1177.603867][ T49] bond5: (slave dummy0): failed to get link speed/duplex [ 1177.621163][T21380] bond3: entered promiscuous mode [ 1177.636497][T21380] bond3: entered allmulticast mode [ 1177.658967][T21380] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1177.707036][T21290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1177.718518][T21290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1177.745836][ T5624] Bluetooth: hci5: command tx timeout [ 1177.752526][T21290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1177.764739][T21290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1177.783597][T21290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1177.828939][T21290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1177.899520][T21393] hmó3)ó€: entered promiscuous mode [ 1177.922093][T21290] hsr_slave_0: entered promiscuous mode [ 1177.945779][T21290] hsr_slave_1: entered promiscuous mode [ 1177.985961][T21290] debugfs: 'hsr0' already exists in 'hsr' [ 1178.006557][T21290] Cannot create hsr debugfs directory [ 1178.011867][T21406] netlink: 'syz.4.12272': attribute type 46 has an invalid length. [ 1178.079285][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1178.092933][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1178.185881][ T7308] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 1178.249881][T21290] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1178.276230][T21290] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.341441][T21290] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1178.366161][T21290] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.436753][T21437] team0: Port device dummy0 removed [ 1178.466262][T21290] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1178.486223][T21290] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.562479][T21290] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1178.584714][T21290] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.633193][T21452] bridge0: port 1(vlan3) entered blocking state [ 1178.655879][T21452] bridge0: port 1(vlan3) entered disabled state [ 1178.663578][T21452] vlan3: entered allmulticast mode [ 1178.670054][T21452] geneve0: entered allmulticast mode [ 1178.676818][T21452] vlan3: entered promiscuous mode [ 1178.683294][T21452] geneve0: entered promiscuous mode [ 1178.731570][T21461] syzkaller1: entered promiscuous mode [ 1178.738962][T21461] syzkaller1: entered allmulticast mode [ 1178.799130][T21290] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1178.811765][T21290] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1178.828985][T21290] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1178.838895][T21290] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1178.846750][T21290] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1178.858152][T21290] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1178.873982][T21290] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1178.884733][T21290] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1178.892967][T21470] syzkaller0: entered promiscuous mode [ 1178.900926][T21470] syzkaller0: entered allmulticast mode [ 1178.920014][T21470] tipc: Started in network mode [ 1178.925468][T21470] tipc: Node identity debc1fbc60c3, cluster identity 4711 [ 1178.935142][T21470] tipc: Enabled bearer , priority 0 [ 1179.025234][T21468] tipc: Resetting bearer [ 1179.035489][T21468] tipc: Disabling bearer [ 1179.073485][T21290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1179.100565][T21290] 8021q: adding VLAN 0 to HW filter on device team0 [ 1179.124468][T21496] geneve2: entered promiscuous mode [ 1179.131232][T21496] geneve2: entered allmulticast mode [ 1179.154362][ T7303] bridge0: port 1(bridge_slave_0) entered blocking state [ 1179.161575][ T7303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1179.182321][ T7303] bridge0: port 2(bridge_slave_1) entered blocking state [ 1179.189513][ T7303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1179.272431][T21506] bond4: ARP target 9.0.0.0 is already present [ 1179.289188][T21506] bond4: option arp_ip_target: invalid value (9) [ 1179.305537][T21506] bond4 (unregistering): Released all slaves [ 1179.424191][T21519] netlink: 'syz.2.12302': attribute type 1 has an invalid length. [ 1179.719147][T21549] netlink: 'syz.4.12310': attribute type 61 has an invalid length. [ 1179.742732][T21549] netlink: 'syz.4.12310': attribute type 105 has an invalid length. [ 1179.818859][ T5624] Bluetooth: hci5: command tx timeout [ 1179.925491][T21290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1179.956167][T21572] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 1179.972469][T21568] bridge2: entered promiscuous mode [ 1179.979893][T21568] bridge2: entered allmulticast mode [ 1179.991110][T21568] team0: Port device bridge2 added [ 1180.076702][T21568] bridge3: entered promiscuous mode [ 1180.092141][T21568] bridge3: entered allmulticast mode [ 1180.113470][T21568] team0: Port device bridge3 added [ 1180.133989][T21290] veth0_vlan: entered promiscuous mode [ 1180.156906][T21290] veth1_vlan: entered promiscuous mode [ 1180.261144][T21290] veth0_macvtap: entered promiscuous mode [ 1180.284049][T21290] veth1_macvtap: entered promiscuous mode [ 1180.320913][T21593] netlink: 'syz.4.12321': attribute type 1 has an invalid length. [ 1180.337894][T21290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1180.357120][T21290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1180.372153][T21593] xt_CT: No such helper "snmp_trap" [ 1180.386544][T21591] debugfs: '1ùà^!‚Y‡°”õËí [ 1180.386544][T21591] 3ìUH†5rºBnœæ\' already exists in 'ieee80211' [ 1180.403980][T21593] __nla_validate_parse: 23 callbacks suppressed [ 1180.404001][T21593] netlink: 220 bytes leftover after parsing attributes in process `syz.4.12321'. [ 1180.424967][T21593] xt_NFQUEUE: number of total queues is 0 [ 1180.432764][ T7303] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.442771][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.461923][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.471672][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.566753][ T7303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1180.578387][ T7303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1180.620032][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1180.628903][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1180.664895][T21605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12327'. [ 1180.766765][T21614] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12329'. [ 1180.787948][T21615] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12246'. [ 1180.826428][T21620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12330'. [ 1180.849400][T21620] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12330'. [ 1180.886289][T21631] netlink: 'syz.4.12333': attribute type 1 has an invalid length. [ 1180.897089][T21620] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.12330'. [ 1180.970277][T21636] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12335'. [ 1181.288744][ T49] net_ratelimit: 21 callbacks suppressed [ 1181.288772][ T49] bond5: (slave dummy0): failed to get link speed/duplex [ 1181.408232][ T6261] bond5: (slave dummy0): failed to get link speed/duplex [ 1181.517698][ T6273] bond5: (slave dummy0): failed to get link speed/duplex [ 1181.628520][ T6273] bond5: (slave dummy0): failed to get link speed/duplex [ 1181.656434][T21655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12339'. [ 1181.738040][ T7303] bond5: (slave dummy0): failed to get link speed/duplex [ 1181.848656][ T6261] bond5: (slave dummy0): failed to get link speed/duplex [ 1181.897635][ T5624] Bluetooth: hci5: command tx timeout [ 1181.958475][ T7302] bond5: (slave dummy0): failed to get link speed/duplex [ 1182.067871][ T6273] bond5: (slave dummy0): failed to get link speed/duplex [ 1182.187458][ T7302] bond5: (slave dummy0): failed to get link speed/duplex [ 1182.298750][ T7303] bond5: (slave dummy0): failed to get link speed/duplex [ 1183.736413][T21614] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1183.969534][T21694] IPVS: set_ctl: invalid protocol: 255 224.0.0.2:20000 [ 1183.990110][ T5624] Bluetooth: hci5: command tx timeout [ 1184.070905][T21709] netlink: 4928 bytes leftover after parsing attributes in process `syz.4.12352'. [ 1184.186338][T21721] ip_vti0: entered promiscuous mode [ 1184.238674][T21723] vlan2: entered promiscuous mode [ 1184.255657][T21723] bridge0: entered promiscuous mode [ 1184.270374][T21726] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1184.298289][T21728] netlink: 'syz.0.12356': attribute type 4 has an invalid length. [ 1184.311690][T21730] x_tables: duplicate underflow at hook 3 [ 1184.326182][T21731] x_tables: duplicate underflow at hook 3 [ 1184.359279][T21736] netlink: 'syz.2.12360': attribute type 1 has an invalid length. [ 1184.540434][T21753] 8021q: adding VLAN 0 to HW filter on device macsec3 [ 1184.561962][T12066] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1185.091662][T21801] batadv_slave_1: entered promiscuous mode [ 1185.101241][T21798] batadv_slave_1: left promiscuous mode [ 1185.197142][T21810] netlink: 'syz.1.12383': attribute type 11 has an invalid length. [ 1185.364422][T21826] netlink: 'syz.3.12390': attribute type 1 has an invalid length. [ 1185.604824][T21838] netlink: 'syz.3.12394': attribute type 23 has an invalid length. [ 1185.689439][T21846] geneve3: entered promiscuous mode [ 1185.706125][ T6261] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.740722][ T6261] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.761642][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.789451][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.935966][T21872] netlink: 'syz.0.12401': attribute type 4 has an invalid length. [ 1186.030055][T21883] xt_hashlimit: size too large, truncated to 1048576 [ 1186.068629][T21883] xt_hashlimit: max too large, truncated to 1048576 [ 1186.102767][T21892] __nla_validate_parse: 6 callbacks suppressed [ 1186.102785][T21892] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12406'. [ 1186.163629][T21896] netlink: 'syz.0.12406': attribute type 1 has an invalid length. [ 1186.230367][T21896] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1186.281179][T21903] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12409'. [ 1186.293215][T21892] bond3: (slave geneve4): making interface the new active one [ 1186.313282][T21892] bond3: (slave geneve4): Enslaving as an active interface with an up link [ 1186.332826][T21896] netlink: 'syz.0.12406': attribute type 8 has an invalid length. [ 1186.343979][T21896] sch_fq: defrate 0 ignored. [ 1186.418978][ T49] net_ratelimit: 31 callbacks suppressed [ 1186.418997][ T49] bond5: (slave dummy0): failed to get link speed/duplex [ 1186.441327][T21918] sctp: [Deprecated]: syz.0.12415 (pid 21918) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1186.441327][T21918] Use struct sctp_sack_info instead [ 1186.538344][ T7303] bond5: (slave dummy0): failed to get link speed/duplex [ 1186.569225][ T29] audit: type=1107 audit(1782019016.203:22): pid=21927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1186.592539][T21928] syzkaller0: entered promiscuous mode [ 1186.705422][T21928] syzkaller0: entered allmulticast mode [ 1186.717702][ T7302] bond5: (slave dummy0): failed to get link speed/duplex [ 1186.831518][ T6273] bond5: (slave dummy0): failed to get link speed/duplex [ 1186.952163][T21960] IPv6: sit1: Disabled Multicast RS [ 1187.108956][ T7302] bond5: (slave dummy0): failed to get link speed/duplex [ 1187.252828][ T7303] bond5: (slave dummy0): failed to get link speed/duplex [ 1187.288630][T21992] netlink: 156 bytes leftover after parsing attributes in process `syz.2.12435'. [ 1187.303785][T21990] netlink: 72 bytes leftover after parsing attributes in process `syz.2.12435'. [ 1187.314587][T21992] netlink: 72 bytes leftover after parsing attributes in process `syz.2.12435'. [ 1187.318583][T21991] netlink: 'syz.4.12433': attribute type 10 has an invalid length. [ 1187.362875][T21991] netlink: 'syz.4.12433': attribute type 10 has an invalid length. [ 1187.388110][ T6273] bond5: (slave dummy0): failed to get link speed/duplex [ 1187.422270][T22000] IPVS: set_ctl: invalid protocol: 92 224.0.0.2:20001 [ 1187.454239][T22003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12438'. [ 1187.503724][T22003] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1187.522025][ T6273] bond5: (slave dummy0): failed to get link speed/duplex [ 1187.564465][T22003] bond4: (slave veth3): Enslaving as an active interface with an up link [ 1187.611256][T22011] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1187.622432][T22011] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 1187.638491][ T6273] bond5: (slave dummy0): failed to get link speed/duplex [ 1187.675169][T22025] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1187.685202][T22025] IPVS: set_ctl: invalid protocol: 12037 0.0.0.0:0 [ 1187.692858][T22025] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1187.773687][T22034] bond4: entered promiscuous mode [ 1187.779707][T22034] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1187.815115][T22034] bond4: (slave bridge4): making interface the new active one [ 1187.823338][T22034] bridge4: entered promiscuous mode [ 1187.830746][T22034] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 1187.867857][ T7302] bond5: (slave dummy0): failed to get link speed/duplex [ 1187.987463][T22044] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12451'. [ 1188.024926][T22048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12453'. [ 1188.042120][T22046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12451'. [ 1188.045466][T22048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12453'. [ 1188.221882][T22055] syzkaller1: entered promiscuous mode [ 1188.239097][T22055] syzkaller1: entered allmulticast mode [ 1188.270404][T22055] geneve2: left promiscuous mode [ 1188.290559][T22055] bond0: left promiscuous mode [ 1188.298935][T22055] vti0: left promiscuous mode [ 1188.324464][T22055] bridge2: left promiscuous mode [ 1188.335446][T22055] bridge2: left allmulticast mode [ 1188.342856][T22063] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1188.350461][T22055] geneve3: left promiscuous mode [ 1188.398612][T22055] bond4: left promiscuous mode [ 1188.411213][T22055] bridge4: left promiscuous mode [ 1188.450895][T22055] syzkaller1: left promiscuous mode [ 1188.462248][T22055] syzkaller1: left allmulticast mode [ 1188.475636][ T49] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1188.495358][ T49] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.505323][ T49] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1188.515456][ T49] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.543634][ T49] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1188.555154][ T49] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.565496][ T49] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1188.577321][ T49] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.760102][T22075] xt_bpf: check failed: parse error [ 1188.882246][T22082] IPv6: NLM_F_CREATE should be specified when creating new route [ 1189.544361][T22119] sctp: [Deprecated]: syz.4.12474 (pid 22119) Use of int in max_burst socket option. [ 1189.544361][T22119] Use struct sctp_assoc_value instead [ 1189.742036][T22126] validate_nla: 2 callbacks suppressed [ 1189.742053][T22126] netlink: 'syz.3.12478': attribute type 1 has an invalid length. [ 1189.747586][ T5624] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1189.749913][ T5624] Bluetooth: hci0: command 0x0c1a tx timeout [ 1190.178936][T22159] syzkaller0: entered allmulticast mode [ 1190.253716][T22168] netlink: 'syz.1.12489': attribute type 1 has an invalid length. [ 1190.338753][T22177] syzkaller0: entered promiscuous mode [ 1190.351937][T22177] syzkaller0: entered allmulticast mode [ 1190.472171][ T6261] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x23 [ 1190.609688][T22204] netlink: 'syz.3.12499': attribute type 1 has an invalid length. [ 1190.633755][T22204] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1190.908936][T22213] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1190.925230][T22235] sctp: [Deprecated]: syz.4.12503 (pid 22235) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1190.925230][T22235] Use struct sctp_sack_info instead [ 1191.096573][T22251] netlink: 'syz.3.12509': attribute type 1 has an invalid length. [ 1191.114078][T22250] syzkaller0: entered promiscuous mode [ 1191.120388][T22250] syzkaller0: entered allmulticast mode [ 1191.145564][T22251] bond1: entered promiscuous mode [ 1191.156088][T22251] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1191.177877][ T7302] nci: nci_rsp_packet: unknown rsp opcode 0x7 [ 1191.517560][ T7308] net_ratelimit: 27 callbacks suppressed [ 1191.517581][ T7308] bond5: (slave dummy0): failed to get link speed/duplex [ 1191.637817][ T7308] bond5: (slave dummy0): failed to get link speed/duplex [ 1191.748400][ T7308] bond5: (slave dummy0): failed to get link speed/duplex [ 1191.858265][ T6273] bond5: (slave dummy0): failed to get link speed/duplex [ 1191.967876][ T7308] bond5: (slave dummy0): failed to get link speed/duplex [ 1192.050991][T22281] syzkaller0: entered promiscuous mode [ 1192.056547][T22281] syzkaller0: entered allmulticast mode [ 1192.127832][ T6261] bond5: (slave dummy0): failed to get link speed/duplex [ 1192.237615][ T49] bond5: (slave dummy0): failed to get link speed/duplex [ 1192.357877][ T6273] bond5: (slave dummy0): failed to get link speed/duplex [ 1192.467785][ T6273] bond5: (slave dummy0): failed to get link speed/duplex [ 1192.577593][ T7308] bond5: (slave dummy0): failed to get link speed/duplex [ 1194.003142][T22238] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1194.106598][T22305] x_tables: duplicate entry at hook 1 [ 1194.119919][T22303] __nla_validate_parse: 14 callbacks suppressed [ 1194.119937][T22303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12519'. [ 1194.159424][T22305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12521'. [ 1194.193860][T22305] netlink: 'syz.1.12521': attribute type 1 has an invalid length. [ 1194.316705][T22332] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.12526'. [ 1194.353869][T22336] syzkaller0: entered promiscuous mode [ 1194.366104][T22339] netlink: 68 bytes leftover after parsing attributes in process `syz.1.12528'. [ 1194.375200][T22336] syzkaller0: entered allmulticast mode [ 1194.383943][T22336] tipc: Started in network mode [ 1194.398594][T22336] tipc: Node identity f6909bd6636b, cluster identity 4711 [ 1194.418439][T22336] tipc: Enabled bearer , priority 0 [ 1194.435611][T22336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12527'. [ 1194.456582][T22338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12528'. [ 1194.529992][T22351] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 1194.537951][ T1861] IPVS: starting estimator thread 0... [ 1194.543996][T22353] netlink: 'syz.0.12527': attribute type 10 has an invalid length. [ 1194.553233][T22353] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12527'. [ 1194.658000][T22352] IPVS: using max 44 ests per chain, 105600 per kthread [ 1194.935064][T22380] netlink: 'syz.2.12537': attribute type 1 has an invalid length. [ 1194.975237][T22380] bond5: entered promiscuous mode [ 1194.981203][T22380] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1195.004964][T22380] bond5: (slave bridge2): making interface the new active one [ 1195.013537][T22380] bridge2: entered promiscuous mode [ 1195.020964][T22380] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 1195.117853][T22326] tipc: Resetting bearer [ 1195.135159][T22326] tipc: Disabling bearer [ 1195.195918][T22393] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12540'. [ 1195.214193][T22393] netlink: 256 bytes leftover after parsing attributes in process `syz.2.12540'. [ 1195.594890][T22415] netlink: 'syz.3.12548': attribute type 1 has an invalid length. [ 1195.610277][T22415] netlink: 224 bytes leftover after parsing attributes in process `syz.3.12548'. [ 1195.650114][T22416] batadv0: entered promiscuous mode [ 1195.718628][T22418] syzkaller0: entered promiscuous mode [ 1195.727847][T22418] syzkaller0: entered allmulticast mode [ 1195.943465][T17921] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1195.951432][T17921] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1195.959232][T17921] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1195.975349][T17921] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1195.985757][T17921] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1196.517868][T22481] syzkaller0: entered promiscuous mode [ 1196.526701][T22481] syzkaller0: entered allmulticast mode [ 1196.557462][ T7303] net_ratelimit: 30 callbacks suppressed [ 1196.557496][ T7303] bond5: (slave dummy0): failed to get link speed/duplex [ 1196.582230][T22442] lo speed is unknown, defaulting to 1000 [ 1196.596293][T22442] lo speed is unknown, defaulting to 1000 [ 1196.718750][ T7308] bond5: (slave dummy0): failed to get link speed/duplex [ 1196.813041][T22442] lo speed is unknown, defaulting to 1000 [ 1196.848218][ T7308] bond5: (slave dummy0): failed to get link speed/duplex [ 1197.077599][ T7302] bond5: (slave dummy0): failed to get link speed/duplex [ 1197.248890][T22508] netlink: 'syz.2.12573': attribute type 1 has an invalid length. [ 1197.322084][T22512] netlink: 'syz.2.12574': attribute type 12 has an invalid length. [ 1197.362564][T22442] bridge0: port 1(bridge_slave_0) entered blocking state [ 1197.376179][T22442] bridge0: port 1(bridge_slave_0) entered disabled state [ 1197.385935][T22442] bridge_slave_0: entered allmulticast mode [ 1197.394606][T22442] bridge_slave_0: entered promiscuous mode [ 1197.403789][T22442] bridge0: port 2(bridge_slave_1) entered blocking state [ 1197.411938][T22442] bridge0: port 2(bridge_slave_1) entered disabled state [ 1197.419984][T22442] bridge_slave_1: entered allmulticast mode [ 1197.429214][T22442] bridge_slave_1: entered promiscuous mode [ 1197.465489][T22442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1197.496207][T22442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1197.533905][T22442] team0: Port device team_slave_0 added [ 1197.543410][T22442] team0: Port device team_slave_1 added [ 1197.577059][T22521] syzkaller0: entered promiscuous mode [ 1197.583208][T22521] syzkaller0: entered allmulticast mode [ 1197.591144][T22442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1197.600079][T22442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1197.662244][T22442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1197.730290][T22442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1197.750783][T22442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1197.782247][T22442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1197.838497][ T7308] bond5: (slave dummy0): failed to get link speed/duplex [ 1197.882760][T22442] hsr_slave_0: entered promiscuous mode [ 1197.890228][T22442] hsr_slave_1: entered promiscuous mode [ 1197.896586][T22442] debugfs: 'hsr0' already exists in 'hsr' [ 1197.917352][T22442] Cannot create hsr debugfs directory [ 1198.058075][T17921] Bluetooth: hci2: command tx timeout [ 1198.102865][T22442] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1198.114230][T22442] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.125054][T22442] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1198.136973][T22442] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1198.173420][T22567] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1198.189670][ T7303] bond5: (slave dummy0): failed to get link speed/duplex [ 1198.212943][T22567] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1198.220650][T22573] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20004 [ 1198.232570][T22567] bond5: (slave ipip0): The slave device specified does not support setting the MAC address [ 1198.243831][T22567] bond5: (slave ipip0): Error -95 calling set_mac_address [ 1198.278893][T22442] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1198.291585][T22442] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.305731][T22442] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1198.331775][T22442] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1198.415339][T22442] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1198.444996][T22442] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.469981][T22442] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1198.480674][T22442] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1198.508034][ T7302] bond5: (slave dummy0): failed to get link speed/duplex [ 1198.534518][T22442] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1198.550262][T22442] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.562473][T22442] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1198.579271][T22442] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1198.618935][ T7303] bond5: (slave dummy0): failed to get link speed/duplex [ 1198.628073][T22600] netlink: 'syz.2.12600': attribute type 1 has an invalid length. [ 1198.645897][T22601] syzkaller0: entered promiscuous mode [ 1198.652597][T22601] syzkaller0: entered allmulticast mode [ 1198.665684][T22601] tipc: Enabled bearer , priority 0 [ 1198.684607][T22601] tipc: Resetting bearer [ 1198.706154][T22599] tipc: Resetting bearer [ 1198.721768][T22599] tipc: Disabling bearer [ 1198.741380][T22603] geneve3: entered promiscuous mode [ 1198.804496][ T7302] bond5: (slave dummy0): failed to get link speed/duplex [ 1198.875982][T22442] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1198.896973][T22442] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1198.912578][T22442] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1198.925999][T22442] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1198.945781][T22442] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1198.962239][T22442] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1198.985369][T22442] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1199.009398][T22442] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1199.028109][ T6261] bond5: (slave dummy0): failed to get link speed/duplex [ 1199.159641][T22642] __nla_validate_parse: 12 callbacks suppressed [ 1199.159664][T22642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12611'. [ 1199.214815][T22642] netlink: 'syz.2.12611': attribute type 8 has an invalid length. [ 1200.138979][T17921] Bluetooth: hci2: command tx timeout [ 1201.598670][ T6261] net_ratelimit: 22 callbacks suppressed [ 1201.598692][ T6261] bond5: (slave dummy0): failed to get link speed/duplex [ 1201.717569][ T6261] bond5: (slave dummy0): failed to get link speed/duplex [ 1201.827655][ T7308] bond5: (slave dummy0): failed to get link speed/duplex [ 1201.849675][T22620] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1201.961333][T22675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12615'. [ 1201.967941][T22668] syzkaller0: entered promiscuous mode [ 1201.975871][T22668] syzkaller0: entered allmulticast mode [ 1202.014085][T22668] tipc: Started in network mode [ 1202.019913][T22668] tipc: Node identity ba80f48695ff, cluster identity 4711 [ 1202.029686][T22668] tipc: Enabled bearer , priority 0 [ 1202.059543][T22668] tipc: Resetting bearer [ 1202.092698][T22667] tipc: Resetting bearer [ 1202.106128][T22667] tipc: Disabling bearer [ 1202.119585][T22442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1202.130187][ T29] audit: type=1800 audit(1782019031.773:23): pid=22684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.12616" name="memory.events" dev="tmpfs" ino=1406 res=0 errno=0 [ 1202.182511][T22687] netlink: 'syz.2.12617': attribute type 13 has an invalid length. [ 1202.196518][T22442] 8021q: adding VLAN 0 to HW filter on device team0 [ 1202.211082][ T7303] bond5: (slave dummy0): failed to get link speed/duplex [ 1202.220419][T17921] Bluetooth: hci2: command tx timeout [ 1202.285196][ T6273] bridge0: port 1(bridge_slave_0) entered blocking state [ 1202.292522][ T6273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1202.322055][ T7308] bridge0: port 2(bridge_slave_1) entered blocking state [ 1202.329240][ T7308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1202.428382][ T6261] bond5: (slave dummy0): failed to get link speed/duplex [ 1202.550652][ T6273] bond5: (slave dummy0): failed to get link speed/duplex [ 1202.595850][T22700] syzkaller0: entered promiscuous mode [ 1202.603011][T22700] syzkaller0: entered allmulticast mode [ 1202.616896][T22700] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12620'. [ 1202.657007][T22713] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12623'. [ 1202.687992][ T7303] bond5: (slave dummy0): failed to get link speed/duplex [ 1202.725148][T22717] smc: net device wg2 erased user defined pnetid SYZ0 [ 1202.746011][T22719] rdma_op ffff888065a771f0 conn xmit_rdma 0000000000000000 [ 1202.751378][T22717] smc: net device wlan0 erased user defined pnetid SYZ0 [ 1202.798620][ T7303] bond5: (slave dummy0): failed to get link speed/duplex [ 1202.842722][T22726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12627'. [ 1202.918316][ T6273] bond5: (slave dummy0): failed to get link speed/duplex [ 1202.980824][T22739] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12631'. [ 1203.009600][T22733] netlink: 80 bytes leftover after parsing attributes in process `syz.3.12629'. [ 1203.070778][T22744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12629'. [ 1203.071871][T22739] bridge0: port 2(bridge_slave_1) entered disabled state [ 1203.087354][T22739] bridge0: port 1(bridge_slave_0) entered disabled state [ 1203.106257][T22748] netlink: 'syz.0.12633': attribute type 1 has an invalid length. [ 1203.172299][T22739] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1203.185801][T22739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1203.260135][T22442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1203.267110][T22755] netlink: 632 bytes leftover after parsing attributes in process `syz.0.12635'. [ 1203.310353][ T7302] bond5: (slave dummy0): failed to get link speed/duplex [ 1203.329202][ T6261] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.354780][ T6261] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.384112][ T6261] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.400101][ T6261] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.723170][T22442] veth0_vlan: entered promiscuous mode [ 1203.754553][T22442] veth1_vlan: entered promiscuous mode [ 1203.802540][T22787] dvmrp8: entered allmulticast mode [ 1203.826182][T22442] veth0_macvtap: entered promiscuous mode [ 1203.849401][T22442] veth1_macvtap: entered promiscuous mode [ 1203.874651][T22795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12643'. [ 1203.891360][T22442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1203.914774][T22442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1203.929400][ T7303] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1203.951193][ T7303] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1203.970053][ T7303] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.004607][ T7303] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.105548][ T6261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1204.118721][T22800] sctp: [Deprecated]: syz.3.12644 (pid 22800) Use of int in max_burst socket option. [ 1204.118721][T22800] Use struct sctp_assoc_value instead [ 1204.122327][ T6261] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1204.191565][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1204.207089][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1204.298483][T17921] Bluetooth: hci2: command tx timeout [ 1204.534900][T22816] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1204.688164][T22825] __nla_validate_parse: 1 callbacks suppressed [ 1204.688182][T22825] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12651'. [ 1204.730143][T22825] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12651'. [ 1204.741145][T22825] syz_tun: entered promiscuous mode [ 1204.754315][T22825] syz_tun: entered allmulticast mode [ 1204.768246][T22829] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12653'. [ 1204.775346][T22825] team0: Port device syz_tun added [ 1204.911728][T22834] lo speed is unknown, defaulting to 1000 [ 1204.924543][T22834] lo speed is unknown, defaulting to 1000 [ 1205.105400][T22857] lo speed is unknown, defaulting to 1000 [ 1205.118277][T22857] lo speed is unknown, defaulting to 1000 [ 1205.244049][T22834] lo speed is unknown, defaulting to 1000 [ 1205.430064][T22857] lo speed is unknown, defaulting to 1000 [ 1205.561352][T22867] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12664'. [ 1205.604072][T22867] netlink: 'syz.0.12664': attribute type 9 has an invalid length. [ 1205.637021][T22870] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12665'. [ 1205.672944][T22872] netlink: 44 bytes leftover after parsing attributes in process `syz.0.12666'. [ 1205.683844][T22872] netlink: 43 bytes leftover after parsing attributes in process `syz.0.12666'. [ 1205.693516][T22872] netlink: 'syz.0.12666': attribute type 5 has an invalid length. [ 1205.701845][T22872] netlink: 43 bytes leftover after parsing attributes in process `syz.0.12666'. [ 1206.069857][T22900] netlink: 48 bytes leftover after parsing attributes in process `syz.4.12672'. [ 1206.107441][T22903] syzkaller0: entered promiscuous mode [ 1206.126595][T22903] syzkaller0: entered allmulticast mode [ 1206.154551][T22903] tipc: Enabled bearer , priority 0 [ 1206.209868][T22903] tipc: Resetting bearer [ 1206.271599][T22901] tipc: Resetting bearer [ 1206.291957][T22901] tipc: Disabling bearer [ 1206.421956][T22919] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12678'. [ 1206.433340][T22911] lo speed is unknown, defaulting to 1000 [ 1206.464099][T22911] lo speed is unknown, defaulting to 1000 [ 1206.609081][ T7308] net_ratelimit: 26 callbacks suppressed [ 1206.609102][ T7308] bond5: (slave dummy0): failed to get link speed/duplex [ 1206.747593][ T7308] bond5: (slave dummy0): failed to get link speed/duplex [ 1206.858874][ T7303] bond5: (slave dummy0): failed to get link speed/duplex [ 1206.952702][T22911] lo speed is unknown, defaulting to 1000 [ 1206.992559][ T7308] bond5: (slave dummy0): failed to get link speed/duplex [ 1207.117924][ T7303] bond5: (slave dummy0): failed to get link speed/duplex [ 1207.236846][T22947] syzkaller0: entered promiscuous mode [ 1207.270640][T22947] syzkaller0: entered allmulticast mode [ 1207.306564][T22947] tipc: Enabled bearer , priority 0 [ 1207.342561][T22947] tipc: Resetting bearer [ 1207.376320][T22946] tipc: Resetting bearer [ 1207.399450][T22946] tipc: Disabling bearer [ 1207.624890][T22962] netlink: 'syz.0.12693': attribute type 11 has an invalid length. [ 1207.642130][T22959] netlink: 'syz.3.12692': attribute type 1 has an invalid length. [ 1207.708290][ T7302] bond5: (slave dummy0): failed to get link speed/duplex [ 1207.853388][T22974] syzkaller0: entered promiscuous mode [ 1207.872297][T22974] syzkaller0: entered allmulticast mode [ 1207.897794][ T7302] wlan1: Trigger new scan to find an IBSS to join [ 1207.909259][ T7308] bond5: (slave dummy0): failed to get link speed/duplex [ 1208.047631][ T49] bond5: (slave dummy0): failed to get link speed/duplex [ 1209.358406][ T49] bond5: (slave dummy0): failed to get link speed/duplex [ 1209.445782][T23000] syzkaller0: entered promiscuous mode [ 1209.452279][T23000] syzkaller0: entered allmulticast mode [ 1209.462297][T23000] tipc: Enabled bearer , priority 0 [ 1209.478874][ T7315] bond5: (slave dummy0): failed to get link speed/duplex [ 1209.500470][T23000] tipc: Resetting bearer [ 1209.515282][T22998] tipc: Resetting bearer [ 1209.526307][T22998] tipc: Disabling bearer [ 1209.585295][T23008] macsec1: entered allmulticast mode [ 1209.591085][T23008] bond0: entered allmulticast mode [ 1209.596315][T23008] bond_slave_0: entered allmulticast mode [ 1209.605214][T23008] bond_slave_1: entered allmulticast mode [ 1209.612400][T23008] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1209.621479][T23008] bond0: left allmulticast mode [ 1209.626462][T23008] bond_slave_0: left allmulticast mode [ 1209.632899][T23008] bond_slave_1: left allmulticast mode [ 1209.654500][T23010] netlink: 'syz.0.12705': attribute type 13 has an invalid length. [ 1209.663722][T23010] netlink: 'syz.0.12705': attribute type 17 has an invalid length. [ 1209.726188][T23010] 8021q: adding VLAN 0 to HW filter on device .` [ 1209.729906][T23013] __nla_validate_parse: 7 callbacks suppressed [ 1209.729927][T23013] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12706'. [ 1209.741039][T23010] 8021q: adding VLAN 0 to HW filter on device team0 [ 1209.760274][T23010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1209.834351][T23010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1209.845827][T23010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1209.859632][T23010] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1209.870309][T23010] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1209.885343][T23010] veth1_vlan: left promiscuous mode [ 1209.893452][T23010] veth0_vlan: left promiscuous mode [ 1209.902487][T23010] veth0_vlan: entered promiscuous mode [ 1209.916102][T23010] veth1_vlan: entered promiscuous mode [ 1209.931654][T23010] veth1_macvtap: left promiscuous mode [ 1209.942344][T23010] veth0_macvtap: left promiscuous mode [ 1209.950705][T23010] veth0_macvtap: entered promiscuous mode [ 1209.965387][T23010] veth1_macvtap: entered promiscuous mode [ 1209.975828][T23010] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1209.996047][T23010] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1210.012923][T23010] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1210.026786][T23010] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1210.052495][T23010] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1210.071345][T23010] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1210.083045][T23010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1210.099329][T23010] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1210.109430][T23010] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1210.124467][T23010] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1210.151744][ T7308] bridge0: port 1(bridge_slave_0) entered blocking state [ 1210.159123][ T7308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1210.171557][ T7308] bridge0: port 2(bridge_slave_1) entered blocking state [ 1210.178753][ T7308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1210.249492][ T49] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1210.259081][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.268600][ T49] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1210.278244][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.288211][T23021] tunl0: Caught tx_queue_len zero misconfig [ 1210.295860][T17566] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1210.338273][ T49] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1210.357120][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.413361][ T49] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1210.429809][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.454021][T23051] syz_tun: entered allmulticast mode [ 1210.462090][T23046] tipc: Enabled bearer , priority 0 [ 1210.463478][T23051] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 1210.483270][T23046] syzkaller0: entered promiscuous mode [ 1210.491177][T23046] syzkaller0: entered allmulticast mode [ 1210.510702][T23046] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1210.523173][T23046] tipc: Resetting bearer [ 1210.562821][T23044] tipc: Resetting bearer [ 1210.571696][T23044] tipc: Disabling bearer [ 1210.573933][T23059] netlink: 'syz.1.12717': attribute type 1 has an invalid length. [ 1210.605219][T23059] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1210.614254][T23061] can: request_module (can-proto-0) failed. [ 1210.663783][T23066] netlink: 160 bytes leftover after parsing attributes in process `syz.1.12719'. [ 1210.679837][T23066] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12719'. [ 1210.692389][T23066] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1210.705495][T23066] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1210.716162][T23066] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1211.698256][T17566] net_ratelimit: 12 callbacks suppressed [ 1211.698277][T17566] bond5: (slave dummy0): failed to get link speed/duplex [ 1211.823931][T23109] netlink: 'syz.3.12730': attribute type 1 has an invalid length. [ 1211.833061][T17566] bond5: (slave dummy0): failed to get link speed/duplex [ 1211.840928][T23109] netlink: 96 bytes leftover after parsing attributes in process `syz.3.12730'. [ 1211.851463][T23109] netlink: 1 bytes leftover after parsing attributes in process `syz.3.12730'. [ 1211.861836][T23109] netlink: 658 bytes leftover after parsing attributes in process `syz.3.12730'. [ 1211.900049][ T7303] wlan1: Trigger new scan to find an IBSS to join [ 1211.938302][ T49] bond5: (slave dummy0): failed to get link speed/duplex [ 1212.058876][ T7302] bond5: (slave dummy0): failed to get link speed/duplex [ 1212.151765][T23126] netlink: 'syz.3.12736': attribute type 1 has an invalid length. [ 1212.159890][T23126] netlink: 224 bytes leftover after parsing attributes in process `syz.3.12736'. [ 1212.169182][ T7302] bond5: (slave dummy0): failed to get link speed/duplex [ 1212.221406][T23128] netlink: 104 bytes leftover after parsing attributes in process `syz.0.12737'. [ 1212.241559][T23130] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1212.285342][T23140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12740'. [ 1212.327743][ T6261] bond5: (slave dummy0): failed to get link speed/duplex [ 1212.393875][T23145] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12742'. [ 1212.409821][T23148] netlink: 'syz.1.12743': attribute type 1 has an invalid length. [ 1212.425618][T23142] geneve2: entered promiscuous mode [ 1212.447306][T23142] geneve2: entered allmulticast mode [ 1212.488060][T17566] bond5: (slave dummy0): failed to get link speed/duplex [ 1212.604825][T23160] lo speed is unknown, defaulting to 1000 [ 1212.609326][ T6261] bond5: (slave dummy0): failed to get link speed/duplex [ 1212.635535][T23160] lo speed is unknown, defaulting to 1000 [ 1212.688748][T23172] pimreg: entered allmulticast mode [ 1212.739131][ T7303] bond5: (slave dummy0): failed to get link speed/duplex [ 1212.767943][T23178] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1212.831131][ T6261] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 1212.887376][ T49] bond5: (slave dummy0): failed to get link speed/duplex [ 1212.942924][T23160] lo speed is unknown, defaulting to 1000 [ 1213.179344][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1213.470988][T23218] tipc: Enabled bearer , priority 0 [ 1213.500495][T23217] tipc: Disabling bearer [ 1213.720225][T23225] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 1213.734918][T23225] bond2 (unregistering): Released all slaves [ 1214.007127][T23249] Cannot find set identified by id 65534 to match [ 1214.144956][T23264] netlink: 'syz.3.12779': attribute type 1 has an invalid length. [ 1214.161403][T23264] netlink: 'syz.3.12779': attribute type 1 has an invalid length. [ 1214.170094][T23264] netlink: 'syz.3.12779': attribute type 2 has an invalid length. [ 1214.178420][T23264] netlink: 'syz.3.12779': attribute type 1 has an invalid length. [ 1214.186577][T23264] netlink: 'syz.3.12779': attribute type 3 has an invalid length. [ 1214.291230][T23274] syzkaller1: entered promiscuous mode [ 1214.303069][T23274] syzkaller1: entered allmulticast mode [ 1214.321584][T23274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1214.355054][T23274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1214.444578][T23274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1214.500292][T23274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1214.617966][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1214.753985][T23308] netlink: 'syz.0.12788': attribute type 2 has an invalid length. [ 1214.763417][T23308] __nla_validate_parse: 13 callbacks suppressed [ 1214.763435][T23308] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12788'. [ 1214.782465][T23308] netlink: 'syz.0.12788': attribute type 5 has an invalid length. [ 1214.855995][T23313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12789'. [ 1214.903225][T23313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12789'. [ 1214.908207][T23317] netlink: 112 bytes leftover after parsing attributes in process `syz.4.12790'. [ 1215.071328][T23322] netlink: 'syz.1.12792': attribute type 39 has an invalid length. [ 1215.086580][T23332] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12795'. [ 1215.102401][T23330] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12794'. [ 1215.102660][T23332] netlink: 'syz.0.12795': attribute type 1 has an invalid length. [ 1215.186581][T23332] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1215.209057][T23332] netlink: 'syz.0.12795': attribute type 8 has an invalid length. [ 1215.234051][T23332] sch_fq: defrate 0 ignored. [ 1215.249137][T23332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12795'. [ 1215.269719][T23332] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12795'. [ 1215.364982][T23344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12799'. [ 1215.389265][T23344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12799'. [ 1215.496025][T23348] bridge0: port 2(bridge_slave_1) entered disabled state [ 1215.504104][T23348] bridge0: port 1(bridge_slave_0) entered disabled state [ 1215.675826][T23348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1215.692074][T23348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1215.805233][ T7308] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.828661][ T7308] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.842246][ T7308] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.866735][ T7308] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.939039][T23383] pimreg: entered allmulticast mode [ 1216.024221][T23390] syzkaller0: entered promiscuous mode [ 1216.031674][T23390] syzkaller0: entered allmulticast mode [ 1216.066363][T23390] tipc: Enabled bearer , priority 0 [ 1216.088226][T23390] tipc: Resetting bearer [ 1216.112183][T23389] tipc: Resetting bearer [ 1216.120359][T23389] tipc: Disabling bearer [ 1216.133005][T23396] hmac(sha2: entered promiscuous mode [ 1216.376251][T23416] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1216.429760][T23416] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1216.443952][T23422] vlan0: entered allmulticast mode [ 1216.449791][T23422] macvtap0: entered allmulticast mode [ 1216.470318][T23425] Cannot find add_set index 0 as target [ 1216.484777][T23416] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1216.495466][T23416] bond1: (slave batadv1): making interface the new active one [ 1216.507079][T23416] batadv1: entered promiscuous mode [ 1216.536648][T23416] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 1216.577735][T23416] bond1 (unregistering): (slave veth3): Releasing active interface [ 1216.590147][T23416] bond1 (unregistering): (slave batadv1): Releasing active interface [ 1216.602756][T23416] bond1 (unregistering): Released all slaves [ 1216.656130][T23436] xt_hashlimit: size too large, truncated to 1048576 [ 1216.684339][ T29] audit: type=1804 audit(1782019046.323:24): pid=23438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.12829" name="/newroot/325/memory.events" dev="tmpfs" ino=1694 res=1 errno=0 [ 1216.716890][T23440] xt_hashlimit: size too large, truncated to 1048576 [ 1216.729348][ T29] audit: type=1800 audit(1782019046.323:25): pid=23438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.12829" name="memory.events" dev="tmpfs" ino=1694 res=0 errno=0 [ 1216.731340][T23440] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1216.761361][ T29] audit: type=1804 audit(1782019046.323:26): pid=23438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.12829" name="/newroot/325/memory.events" dev="tmpfs" ino=1694 res=1 errno=0 [ 1216.789149][ T49] net_ratelimit: 22 callbacks suppressed [ 1216.789168][ T49] bond5: (slave dummy0): failed to get link speed/duplex [ 1216.871348][T23445] bond7: entered promiscuous mode [ 1216.876790][T23445] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1216.889202][T23445] bond7: entered allmulticast mode [ 1216.904932][T23448] bond7: (slave bridge6): making interface the new active one [ 1216.913157][T23448] bridge6: entered promiscuous mode [ 1216.919145][T23448] bridge6: entered allmulticast mode [ 1216.927032][T23448] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 1216.987904][ T7303] bond5: (slave dummy0): failed to get link speed/duplex [ 1217.108119][ T7303] bond5: (slave dummy0): failed to get link speed/duplex [ 1217.217789][ T7315] bond5: (slave dummy0): failed to get link speed/duplex [ 1217.328422][ T7315] bond5: (slave dummy0): failed to get link speed/duplex [ 1217.448507][ T7303] bond5: (slave dummy0): failed to get link speed/duplex [ 1217.461865][T23477] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1217.567826][ T7308] bond5: (slave dummy0): failed to get link speed/duplex [ 1217.580656][T23482] tipc: Started in network mode [ 1217.585676][T23482] tipc: Node identity 1340008, cluster identity 4711 [ 1217.592674][T23482] tipc: Node number set to 20185096 [ 1217.678533][ T49] bond5: (slave dummy0): failed to get link speed/duplex [ 1217.792004][T23492] syzkaller1: entered promiscuous mode [ 1217.798457][T23492] syzkaller1: entered allmulticast mode [ 1217.807755][ T49] bond5: (slave dummy0): failed to get link speed/duplex [ 1217.917408][ T49] bond5: (slave dummy0): failed to get link speed/duplex [ 1217.993865][T23501] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1218.121531][T23517] sctp: [Deprecated]: syz.0.12856 (pid 23517) Use of int in max_burst socket option. [ 1218.121531][T23517] Use struct sctp_assoc_value instead [ 1218.216907][T23525] sctp: [Deprecated]: syz.4.12859 (pid 23525) Use of int in max_burst socket option. [ 1218.216907][T23525] Use struct sctp_assoc_value instead [ 1218.752782][T23579] bond2: option all_slaves_active: invalid value (127) [ 1218.767792][T23579] bond2 (unregistering): Released all slaves [ 1219.898106][T17921] Bluetooth: hci0: command 0x0c1a tx timeout [ 1221.803380][T23587] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1221.812828][ T7315] net_ratelimit: 35 callbacks suppressed [ 1221.812848][ T7315] bond5: (slave dummy0): failed to get link speed/duplex [ 1221.961381][ T7315] bond5: (slave dummy0): failed to get link speed/duplex [ 1221.993437][T23636] __nla_validate_parse: 18 callbacks suppressed [ 1221.993455][T23636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12890'. [ 1222.036280][T23641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12892'. [ 1222.040236][T23643] netlink: 48 bytes leftover after parsing attributes in process `syz.4.12888'. [ 1222.131404][ T6273] bond5: (slave dummy0): failed to get link speed/duplex [ 1222.236949][T23657] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12896'. [ 1222.309605][T23657] veth0_to_batadv: entered allmulticast mode [ 1222.338581][T23641] tipc: Enabled bearer , priority 0 [ 1222.349475][T23654] syzkaller0: entered promiscuous mode [ 1222.355563][T23654] syzkaller0: entered allmulticast mode [ 1222.367610][T23641] syzkaller0: entered promiscuous mode [ 1222.383179][T23641] syzkaller0: entered allmulticast mode [ 1222.409335][T23654] tipc: Enabled bearer , priority 0 [ 1222.433707][T23641] tipc: Resetting bearer [ 1222.458625][T23653] tipc: Resetting bearer [ 1222.467087][T23653] tipc: Disabling bearer [ 1222.477557][ T6277] bond5: (slave dummy0): failed to get link speed/duplex [ 1222.486211][T23639] tipc: Resetting bearer [ 1222.495586][T23639] tipc: Disabling bearer [ 1222.597559][ T6277] bond5: (slave dummy0): failed to get link speed/duplex [ 1222.728656][ T6278] bond5: (slave dummy0): failed to get link speed/duplex [ 1222.800487][T23685] validate_nla: 7 callbacks suppressed [ 1222.800505][T23685] netlink: 'syz.1.12903': attribute type 1 has an invalid length. [ 1222.830573][T23685] netlink: 1008 bytes leftover after parsing attributes in process `syz.1.12903'. [ 1222.849038][ T6278] bond5: (slave dummy0): failed to get link speed/duplex [ 1222.880181][ T9953] IPVS: starting estimator thread 0... [ 1222.896323][T23696] tipc: Enabling of bearer rejected, failed to enable media [ 1222.912045][T23696] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12907'. [ 1222.931525][T23696] netlink: 'syz.1.12907': attribute type 1 has an invalid length. [ 1222.948774][T23696] netlink: 244 bytes leftover after parsing attributes in process `syz.1.12907'. [ 1222.961354][T23701] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12909'. [ 1222.978364][T23694] IPVS: using max 58 ests per chain, 139200 per kthread [ 1222.978948][ T7315] bond5: (slave dummy0): failed to get link speed/duplex [ 1223.049928][T23706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12910'. [ 1223.073313][T23704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12910'. [ 1223.094459][T23711] 8021q: VLANs not supported on gre0 [ 1223.107671][ T6278] bond5: (slave dummy0): failed to get link speed/duplex [ 1223.217723][ T7308] bond5: (slave dummy0): failed to get link speed/duplex [ 1223.372230][ T1857] hid-generic 0005:04F3:0440.0004: item fetching failed at offset 2/3 [ 1223.406530][ T1857] hid-generic 0005:04F3:0440.0004: probe with driver hid-generic failed with error -22 [ 1223.417494][ C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 1223.427036][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1223.570764][T23733] netlink: 'syz.2.12917': attribute type 13 has an invalid length. [ 1223.595429][T18243] udevd[18243]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1223.608659][T23733] netlink: 'syz.2.12917': attribute type 17 has an invalid length. [ 1223.754888][T23733] batadv0: left promiscuous mode [ 1223.776725][T23733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1223.872270][T23733] vlan0: left promiscuous mode [ 1224.003235][T23733] gretap1: left allmulticast mode [ 1224.034245][T23733] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1224.043734][T23733] bond3: left promiscuous mode [ 1224.050254][T23733] bond3: left allmulticast mode [ 1224.066896][T23768] xt_hashlimit: size too large, truncated to 1048576 [ 1224.067898][T23733] geneve2: left promiscuous mode [ 1224.073886][T23768] xt_hashlimit: max too large, truncated to 1048576 [ 1224.083987][T23776] nbd: must specify a device to reconfigure [ 1224.092331][T23733] geneve2: left allmulticast mode [ 1224.118741][T23774] macvlan0: entered promiscuous mode [ 1224.183401][T23780] tipc: Enabling of bearer rejected, failed to enable media [ 1224.375553][T23807] netlink: 'syz.2.12935': attribute type 3 has an invalid length. [ 1224.386396][T23808] netlink: 'syz.2.12935': attribute type 3 has an invalid length. [ 1224.668259][T23845] tipc: Trying to set illegal importance in message [ 1224.746074][T23851] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1224.832104][T23851] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1224.988518][T23880] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1225.594675][T23907] SET target dimension over the limit! [ 1225.601180][T23908] SET target dimension over the limit! [ 1225.760567][T23923] hmac(sha224: entered promiscuous mode [ 1225.810955][T23927] netlink: 'syz.4.12966': attribute type 1 has an invalid length. [ 1225.816280][T23925] netlink: 'syz.0.12965': attribute type 1 has an invalid length. [ 1225.873947][T23925] bond8: entered promiscuous mode [ 1225.889419][T23925] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1225.923873][T23941] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1225.949411][T23941] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1225.960512][T23941] bond0 (unregistering): Released all slaves [ 1225.994836][T23940] bond8: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1226.009737][T23940] bond8: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1226.020795][T23940] bond8: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 1226.442557][T23981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1226.564573][T23981] netlink: 'syz.1.12981': attribute type 1 has an invalid length. [ 1226.695836][T23990] Bluetooth: MGMT ver 1.23 [ 1226.848021][ T7308] net_ratelimit: 22 callbacks suppressed [ 1226.848042][ T7308] bond5: (slave dummy0): failed to get link speed/duplex [ 1226.997382][T17567] bond5: (slave dummy0): failed to get link speed/duplex [ 1227.118864][T17567] bond5: (slave dummy0): failed to get link speed/duplex [ 1227.237855][T17567] bond5: (slave dummy0): failed to get link speed/duplex [ 1227.440360][ T6261] bond5: (slave dummy0): failed to get link speed/duplex [ 1227.465371][T24008] __nla_validate_parse: 20 callbacks suppressed [ 1227.465391][T24008] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12989'. [ 1227.504960][T24018] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12992'. [ 1227.548662][T24019] netlink: 'syz.2.12993': attribute type 1 has an invalid length. [ 1227.558223][T17567] bond5: (slave dummy0): failed to get link speed/duplex [ 1227.596685][T24019] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1227.645867][T24022] veth1_to_batadv: entered allmulticast mode [ 1227.718000][T17567] bond5: (slave dummy0): failed to get link speed/duplex [ 1227.833980][T24050] blkio.reset_stats is deprecated [ 1227.839615][ T7302] bond5: (slave dummy0): failed to get link speed/duplex [ 1227.957553][T17567] bond5: (slave dummy0): failed to get link speed/duplex [ 1228.538173][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1228.611570][T24060] validate_nla: 3 callbacks suppressed [ 1228.611584][T24060] netlink: 'syz.3.13004': attribute type 13 has an invalid length. [ 1228.625596][T24060] netlink: 'syz.3.13004': attribute type 5 has an invalid length. [ 1228.650155][T24060] syzkaller0: entered promiscuous mode [ 1228.655671][T24060] syzkaller0: entered allmulticast mode [ 1230.708174][T24035] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1230.851183][T24080] netlink: 'syz.0.13007': attribute type 126 has an invalid length. [ 1230.892723][T24079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13009'. [ 1230.984056][T24084] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.005287][T24084] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13010'. [ 1231.017130][T24084] bridge0: port 1(bridge_slave_0) entered disabled state [ 1231.046925][T24090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13012'. [ 1231.059808][T24091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13013'. [ 1231.123612][T24095] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1231.135186][T24095] bond2: (slave bond3): Enslaving as an active interface with an up link [ 1231.136897][T24099] sctp: [Deprecated]: syz.0.13015 (pid 24099) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1231.136897][T24099] Use struct sctp_sack_info instead [ 1231.168100][T24101] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 1231.225084][T24109] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13019'. [ 1231.238189][T24090] nbd1: detected capacity change from 0 to 17179869247 [ 1231.251499][T17921] block nbd1: Receive control failed (result -104) [ 1231.546421][T24138] netlink: 47 bytes leftover after parsing attributes in process `syz.3.13028'. [ 1231.609163][T24144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13029'. [ 1231.811405][T24163] netlink: 14 bytes leftover after parsing attributes in process `syz.0.13031'. [ 1231.877273][ T7303] net_ratelimit: 32 callbacks suppressed [ 1231.877292][ T7303] bond5: (slave dummy0): failed to get link speed/duplex [ 1232.019023][T24172] xt_hashlimit: size too large, truncated to 1048576 [ 1232.039975][T17567] bond5: (slave dummy0): failed to get link speed/duplex [ 1232.118858][T24188] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 1232.128411][T24187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1232.135653][T24187] IPv6: NLM_F_CREATE should be set when creating new route [ 1232.168157][ T7302] bond5: (slave dummy0): failed to get link speed/duplex [ 1232.175381][T24187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1232.287756][ T7303] bond5: (slave dummy0): failed to get link speed/duplex [ 1232.418914][ T7302] bond5: (slave dummy0): failed to get link speed/duplex [ 1232.520531][T24213] netlink: 'syz.1.13045': attribute type 1 has an invalid length. [ 1232.559891][T24213] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1232.580420][ T7303] bond5: (slave dummy0): failed to get link speed/duplex [ 1232.616610][T24213] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1232.675855][T24230] bond4: entered promiscuous mode [ 1232.713241][T24230] bond4: entered allmulticast mode [ 1232.738379][ T7302] bond5: (slave dummy0): failed to get link speed/duplex [ 1232.773888][T24213] macvlan0: entered promiscuous mode [ 1232.787755][T24213] macvlan0: entered allmulticast mode [ 1232.818155][T24213] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1233.610188][ T7308] bond5: (slave dummy0): failed to get link speed/duplex [ 1233.626911][T24254] lo speed is unknown, defaulting to 1000 [ 1233.643736][T24254] lo speed is unknown, defaulting to 1000 [ 1233.673088][T24261] netlink: 'syz.0.13052': attribute type 21 has an invalid length. [ 1233.690208][T24261] __nla_validate_parse: 5 callbacks suppressed [ 1233.690226][T24261] netlink: 128 bytes leftover after parsing attributes in process `syz.0.13052'. [ 1233.728562][T24261] netlink: 'syz.0.13052': attribute type 5 has an invalid length. [ 1233.753578][T24261] netlink: 3 bytes leftover after parsing attributes in process `syz.0.13052'. [ 1233.786522][T24270] netlink: 44 bytes leftover after parsing attributes in process `syz.1.13055'. [ 1233.789354][ T7303] bond5: (slave dummy0): failed to get link speed/duplex [ 1234.005980][T24294] netlink: 'syz.4.13058': attribute type 1 has an invalid length. [ 1234.035096][T24296] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13060'. [ 1234.079803][T24294] bond1: entered promiscuous mode [ 1234.085636][T24294] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1234.103107][T24303] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13058'. [ 1234.527044][T24254] lo speed is unknown, defaulting to 1000 [ 1234.582459][T24294] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1234.621525][T24294] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1234.633321][ T25] block nbd1: Possible stuck request ffff888027575080: control (read@0,1024B). Runtime 2 seconds [ 1234.633522][T24294] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 1234.645655][ T25] block nbd1: Possible stuck request ffff888027575240: control (read@1024,1024B). Runtime 2 seconds [ 1234.665703][ T25] block nbd1: Possible stuck request ffff888027575400: control (read@2048,1024B). Runtime 2 seconds [ 1234.677612][ T25] block nbd1: Possible stuck request ffff8880275755c0: control (read@3072,1024B). Runtime 2 seconds [ 1234.696016][T24308] tipc: Enabled bearer , priority 0 [ 1234.714981][ T6261] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1234.730579][T24297] tipc: Disabling bearer [ 1234.906500][T24323] netlink: 'syz.1.13063': attribute type 32 has an invalid length. [ 1235.232482][T24348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13067'. [ 1235.316538][ T29] audit: type=1800 audit(1782019064.953:27): pid=24356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.13070" name="memory.events" dev="tmpfs" ino=1291 res=0 errno=0 [ 1235.763433][T24387] vxcan2: entered allmulticast mode [ 1235.817879][T24392] netlink: 'syz.3.13079': attribute type 10 has an invalid length. [ 1235.845886][T24392] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13079'. [ 1235.861179][T24392] dummy0: entered promiscuous mode [ 1235.909802][T24394] netlink: 'syz.0.13080': attribute type 1 has an invalid length. [ 1236.315229][T24425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13088'. [ 1236.348910][T24405] bridge0: port 2(bridge_slave_1) entered disabled state [ 1236.356459][T24405] bridge0: port 1(bridge_slave_0) entered disabled state [ 1236.942875][T24404] geneve0: entered promiscuous mode [ 1236.952791][T24404] macvlan2: entered promiscuous mode [ 1236.978718][T24419] tipc: Enabling of bearer rejected, failed to enable media [ 1237.000645][ T7308] net_ratelimit: 11 callbacks suppressed [ 1237.000666][ T7308] bond5: (slave dummy0): failed to get link speed/duplex [ 1237.045006][T24425] ipip1: entered promiscuous mode [ 1237.054901][ T7302] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1237.066435][ T7302] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1237.099372][ T7302] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1237.126337][ T7302] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1237.168073][ T6261] bond5: (slave dummy0): failed to get link speed/duplex [ 1237.250690][T24464] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13095'. [ 1237.280085][T24464] ip6gre2: entered promiscuous mode [ 1237.308039][T24464] ip6gre2: entered allmulticast mode [ 1237.379175][ T49] bond5: (slave dummy0): failed to get link speed/duplex [ 1237.518621][ T49] bond5: (slave dummy0): failed to get link speed/duplex [ 1237.573467][T24479] netlink: 'syz.4.13098': attribute type 1 has an invalid length. [ 1237.649233][ T6261] bond5: (slave dummy0): failed to get link speed/duplex [ 1237.957822][ T7308] bond5: (slave dummy0): failed to get link speed/duplex [ 1237.978965][ T25] block nbd1: Possible stuck request ffff888027575080: control (read@0,1024B). Runtime 4 seconds [ 1237.992284][ T25] block nbd1: Possible stuck request ffff888027575240: control (read@1024,1024B). Runtime 4 seconds [ 1238.009468][ T25] block nbd1: Possible stuck request ffff888027575400: control (read@2048,1024B). Runtime 4 seconds [ 1238.022393][ T25] block nbd1: Possible stuck request ffff8880275755c0: control (read@3072,1024B). Runtime 4 seconds [ 1238.088046][T24516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13105'. [ 1238.098404][ T49] bond5: (slave dummy0): failed to get link speed/duplex [ 1238.238578][ T7302] bond5: (slave dummy0): failed to get link speed/duplex [ 1238.357813][ T7302] bond5: (slave dummy0): failed to get link speed/duplex [ 1238.478505][T17561] bond5: (slave dummy0): failed to get link speed/duplex [ 1239.308847][T24545] syz.4.13116 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1239.326945][T24545] CPU: 1 UID: 0 PID: 24545 Comm: syz.4.13116 Not tainted syzkaller #0 PREEMPT(full) [ 1239.326969][T24545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1239.326979][T24545] Call Trace: [ 1239.326986][T24545] [ 1239.326993][T24545] dump_stack_lvl+0xe8/0x150 [ 1239.327014][T24545] dump_header+0xd3/0x4b0 [ 1239.327039][T24545] oom_kill_process+0x3ab/0x970 [ 1239.327058][T24545] out_of_memory+0x1064/0x1480 [ 1239.327072][T24545] ? try_charge_memcg+0xbca/0x1590 [ 1239.327095][T24545] ? __pfx_out_of_memory+0x10/0x10 [ 1239.327109][T24545] ? do_raw_spin_unlock+0xf5/0x210 [ 1239.327129][T24545] try_charge_memcg+0xc74/0x1590 [ 1239.327147][T24545] ? fs_reclaim_acquire+0x7c/0x100 [ 1239.327170][T24545] ? __pfx_try_charge_memcg+0x10/0x10 [ 1239.327191][T24545] ? lock_release+0x4b/0x3c0 [ 1239.327211][T24545] ? rcu_is_watching+0x15/0xb0 [ 1239.327239][T24545] ? rcu_is_watching+0x15/0xb0 [ 1239.327255][T24545] ? lock_release+0x4b/0x3c0 [ 1239.327275][T24545] ? percpu_ref_tryget+0xfd/0x180 [ 1239.327300][T24545] charge_memcg+0x19c/0x2b0 [ 1239.327320][T24545] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 1239.327341][T24545] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 1239.327363][T24545] __swap_cache_prepare_and_add+0xdd/0x700 [ 1239.327383][T24545] ? page_rmappable_folio+0x9a/0x170 [ 1239.327408][T24545] swap_cache_alloc_folio+0xf1/0x240 [ 1239.327427][T24545] swap_cluster_readahead+0x355/0x670 [ 1239.327447][T24545] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1239.327468][T24545] ? mod_memcg_lruvec_state+0xd5/0x270 [ 1239.327482][T24545] ? rcu_is_watching+0x15/0xb0 [ 1239.327498][T24545] ? get_vma_policy+0x27b/0x3c0 [ 1239.327520][T24545] swapin_readahead+0x196/0xc50 [ 1239.327539][T24545] ? swap_table_get+0x1e/0x260 [ 1239.327554][T24545] ? rcu_is_watching+0x15/0xb0 [ 1239.327571][T24545] ? __pfx_swapin_readahead+0x10/0x10 [ 1239.327588][T24545] ? lock_release+0x4b/0x3c0 [ 1239.327608][T24545] ? rcu_is_watching+0x15/0xb0 [ 1239.327623][T24545] ? get_swap_device_info+0x1c/0x2b0 [ 1239.327641][T24545] ? swap_table_get+0x1e/0x260 [ 1239.327655][T24545] ? swap_table_get+0x1e/0x260 [ 1239.327672][T24545] ? swap_table_get+0x216/0x260 [ 1239.327686][T24545] ? swap_cache_get_folio+0x2ea/0x2f0 [ 1239.327704][T24545] do_swap_page+0x545/0x5340 [ 1239.327722][T24545] ? __pte_offset_map+0x29/0x240 [ 1239.327738][T24545] ? lock_acquire+0x5f/0x350 [ 1239.327755][T24545] ? count_memcg_event_mm+0x21/0x260 [ 1239.327770][T24545] ? rcu_is_watching+0x15/0xb0 [ 1239.327784][T24545] ? count_memcg_event_mm+0x21/0x260 [ 1239.327799][T24545] ? do_swap_page+0x128/0x5340 [ 1239.327814][T24545] ? __pfx_do_swap_page+0x10/0x10 [ 1239.327828][T24545] ? __pte_offset_map+0x45/0x240 [ 1239.327845][T24545] ? __pte_offset_map+0x1ae/0x240 [ 1239.327863][T24545] ? pte_offset_map_rw_nolock+0xea/0x160 [ 1239.327882][T24545] handle_mm_fault+0x124c/0x3080 [ 1239.327904][T24545] ? handle_mm_fault+0xec/0x3080 [ 1239.327924][T24545] ? __pfx_handle_mm_fault+0x10/0x10 [ 1239.327940][T24545] ? lock_vma_under_rcu+0x45a/0x500 [ 1239.327967][T24545] ? lock_release+0x4b/0x3c0 [ 1239.327988][T24545] ? rcu_is_watching+0x15/0xb0 [ 1239.328007][T24545] do_user_addr_fault+0xa4d/0x1340 [ 1239.328028][T24545] ? trace_page_fault_user+0x84/0x1e0 [ 1239.328045][T24545] exc_page_fault+0x6a/0xc0 [ 1239.328184][T24545] asm_exc_page_fault+0x26/0x30 [ 1239.328200][T24545] RIP: 0033:0x7f8125a6a80c [ 1239.328225][T24545] Code: 8a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 1239.328238][T24545] RSP: 002b:00007fffc49c9ab0 EFLAGS: 00010202 [ 1239.328254][T24545] RAX: 0000000000000000 RBX: 00007f8125e15fa0 RCX: 00005555565c5808 [ 1239.328267][T24545] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1239.328277][T24545] RBP: 00007f8125e17da0 R08: 0000000000000000 R09: 0000000000000000 [ 1239.328288][T24545] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000012e95f [ 1239.328298][T24545] R13: 00007f8125e1627c R14: 000000000012e701 R15: 00007f8125e16270 [ 1239.328319][T24545] [ 1239.739426][T24545] memory: usage 300700kB, limit 307200kB, failcnt 811 [ 1239.746515][T24545] memory+swap: usage 297544kB, limit 9007199254740988kB, failcnt 0 [ 1239.756489][T24545] kmem: usage 293020kB, limit 9007199254740988kB, failcnt 0 [ 1239.764292][T24545] Memory cgroup stats for /syz4: [ 1239.764410][T24545] cache 0 [ 1239.773676][T24545] rss 0 [ 1239.776460][T24545] rss_huge 0 [ 1239.780927][T24545] shmem 0 [ 1239.784038][T24545] mapped_file 0 [ 1239.795282][T24545] dirty 0 [ 1239.798556][T24545] writeback 0 [ 1239.801887][T24545] workingset_refault_anon 14 [ 1239.806634][T24545] workingset_refault_file 2 [ 1239.812839][T24545] swap 229376 [ 1239.816170][T24545] swapcached 299008 [ 1239.820857][T24545] pgpgin 363352 [ 1239.824640][T24545] pgpgout 363349 [ 1239.830811][T24545] pgfault 666240 [ 1239.834489][T24545] pgmajfault 13 [ 1239.840287][T24545] inactive_anon 0 [ 1239.844243][T24545] active_anon 12288 [ 1239.848491][T24545] inactive_file 0 [ 1239.852138][T24545] active_file 0 [ 1239.855748][T24545] unevictable 0 [ 1239.859756][T24545] hierarchical_memory_limit 314572800 [ 1239.865138][T24545] hierarchical_memsw_limit 9223372036854771712 [ 1239.872761][T24545] total_cache 0 [ 1239.876238][T24545] total_rss 0 [ 1239.880011][T24545] total_rss_huge 0 [ 1239.883949][T24545] total_shmem 0 [ 1239.888361][T24545] total_mapped_file 0 [ 1239.892369][T24545] total_dirty 0 [ 1239.896096][T24545] total_writeback 0 [ 1239.901869][T24545] total_workingset_refault_anon 14 [ 1239.907549][T24545] total_workingset_refault_file 2 [ 1239.912593][T24545] total_swap 229376 [ 1239.916406][T24545] total_swapcached 299008 [ 1239.921445][T24545] total_pgpgin 364622 [ 1239.925452][T24545] total_pgpgout 364619 [ 1239.931078][T24545] total_pgfault 672601 [ 1239.935362][T24545] total_pgmajfault 13 [ 1239.939906][T24545] total_inactive_anon 0 [ 1239.944225][T24545] total_active_anon 12288 [ 1239.948981][T24545] total_inactive_file 0 [ 1239.953193][T24545] total_active_file 0 [ 1239.958206][T24545] total_unevictable 0 [ 1239.962220][T24545] anon_cost 0 [ 1239.965628][T24545] file_cost 0 [ 1239.969018][T24545] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.13116,pid=24545,uid=0 [ 1239.984526][T24545] Memory cgroup out of memory: Killed process 24545 (syz.4.13116) total-vm:106660kB, anon-rss:1252kB, file-rss:27040kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 1240.697530][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1240.996514][T24505] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1241.094855][T24561] __nla_validate_parse: 2 callbacks suppressed [ 1241.094877][T24561] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13120'. [ 1241.115742][T24561] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13120'. [ 1241.133045][T24566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13122'. [ 1241.175756][T24566] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1241.194872][T24566] erspan0: entered promiscuous mode [ 1241.200870][T24572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13124'. [ 1241.205497][T24566] debugfs: 'hsr1' already exists in 'hsr' [ 1241.216576][T24566] Cannot create hsr debugfs directory [ 1241.229883][T24577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13124'. [ 1241.350186][ T25] block nbd1: Possible stuck request ffff888027575080: control (read@0,1024B). Runtime 6 seconds [ 1241.361579][ T25] block nbd1: Possible stuck request ffff888027575240: control (read@1024,1024B). Runtime 6 seconds [ 1241.373366][ T25] block nbd1: Possible stuck request ffff888027575400: control (read@2048,1024B). Runtime 6 seconds [ 1241.386206][ T25] block nbd1: Possible stuck request ffff8880275755c0: control (read@3072,1024B). Runtime 6 seconds [ 1241.425999][T24591] lo speed is unknown, defaulting to 1000 [ 1241.432688][T24591] lo speed is unknown, defaulting to 1000 [ 1241.533124][T24584] syzkaller0: entered promiscuous mode [ 1241.578963][T24584] syzkaller0: entered allmulticast mode [ 1241.661605][T24623] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13134'. [ 1241.760229][T24584] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1241.775567][T24632] netlink: 'syz.2.13136': attribute type 1 has an invalid length. [ 1241.904919][T24643] hsr0: entered promiscuous mode [ 1241.958971][T24632] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1241.992775][T24652] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13138'. [ 1242.006025][T24632] bond9: (slave bond10): making interface the new active one [ 1242.019484][T24632] bond9: (slave bond10): Enslaving as an active interface with an up link [ 1242.028998][T24591] lo speed is unknown, defaulting to 1000 [ 1242.096495][T24643] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13138'. [ 1242.119014][ T49] net_ratelimit: 28 callbacks suppressed [ 1242.119034][ T49] bond5: (slave dummy0): failed to get link speed/duplex [ 1242.432473][T24660] netlink: 'syz.0.13141': attribute type 12 has an invalid length. [ 1242.463810][T24660] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13141'. [ 1242.584944][T24692] dvmrp6: entered allmulticast mode [ 1242.698576][T17561] bond5: (slave dummy0): failed to get link speed/duplex [ 1242.867843][ T49] bond5: (slave dummy0): failed to get link speed/duplex [ 1242.960428][T24729] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1242.966004][T24727] netlink: 44 bytes leftover after parsing attributes in process `syz.1.13152'. [ 1242.992062][ T7302] bond5: (slave dummy0): failed to get link speed/duplex [ 1243.078667][T24727] hsr_slave_0: left promiscuous mode [ 1243.091242][T24727] hsr_slave_1: left promiscuous mode [ 1243.237825][ T49] bond5: (slave dummy0): failed to get link speed/duplex [ 1243.827610][ T7302] bond5: (slave dummy0): failed to get link speed/duplex [ 1243.959304][ T7302] bond5: (slave dummy0): failed to get link speed/duplex [ 1244.097948][ T49] bond5: (slave dummy0): failed to get link speed/duplex [ 1244.228673][ T7308] bond5: (slave dummy0): failed to get link speed/duplex [ 1244.699487][ T25] block nbd1: Possible stuck request ffff888027575080: control (read@0,1024B). Runtime 8 seconds [ 1244.712125][ T25] block nbd1: Possible stuck request ffff888027575240: control (read@1024,1024B). Runtime 8 seconds [ 1244.724109][ T25] block nbd1: Possible stuck request ffff888027575400: control (read@2048,1024B). Runtime 8 seconds [ 1244.737790][ T25] block nbd1: Possible stuck request ffff8880275755c0: control (read@3072,1024B). Runtime 8 seconds [ 1244.846046][T24857] bond0: entered promiscuous mode [ 1244.884077][T24857] bond_slave_0: entered promiscuous mode [ 1244.935400][T24857] bond_slave_1: entered promiscuous mode [ 1245.189976][T24857] bond0: left promiscuous mode [ 1245.199547][T24857] bond_slave_0: left promiscuous mode [ 1245.241669][T24857] bond_slave_1: left promiscuous mode [ 1245.473562][T24909] syzkaller1: entered promiscuous mode [ 1245.512387][T24909] syzkaller1: entered allmulticast mode [ 1245.570722][T24920] syzkaller0: entered promiscuous mode [ 1245.588787][T24920] syzkaller0: entered allmulticast mode [ 1245.624889][T24920] netlink: 'syz.1.13190': attribute type 2 has an invalid length. [ 1246.004459][T24956] netlink: 'syz.1.13201': attribute type 1 has an invalid length. [ 1246.075134][T24961] syzkaller1: entered promiscuous mode [ 1246.082662][T24961] syzkaller1: entered allmulticast mode [ 1246.113330][T24961] macvlan1: entered allmulticast mode [ 1246.128654][T24961] veth1_vlan: entered allmulticast mode [ 1246.155088][T24961] ip6erspan0: entered allmulticast mode [ 1246.306923][T24972] __nla_validate_parse: 7 callbacks suppressed [ 1246.306940][T24972] netlink: 64 bytes leftover after parsing attributes in process `syz.4.13209'. [ 1246.462503][T24989] netlink: 840 bytes leftover after parsing attributes in process `syz.2.13212'. [ 1246.485031][T24997] syzkaller0: entered promiscuous mode [ 1246.500692][T24997] syzkaller0: entered allmulticast mode [ 1246.665518][T25006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13218'. [ 1246.676633][T25007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13216'. [ 1246.716059][T25010] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13219'. [ 1246.911587][T25015] netlink: 'syz.1.13220': attribute type 1 has an invalid length. [ 1247.066134][T25035] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13224'. [ 1247.104407][T25035] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13224'. [ 1247.147690][T17561] net_ratelimit: 24 callbacks suppressed [ 1247.147722][T17561] bond5: (slave dummy0): failed to get link speed/duplex [ 1247.298599][T17561] bond5: (slave dummy0): failed to get link speed/duplex [ 1247.311259][T25042] veth1_to_bond: entered allmulticast mode [ 1247.325462][T25042] veth1_to_bond: entered promiscuous mode [ 1247.450472][T25042] veth1_to_bond: left promiscuous mode [ 1247.469874][T25042] veth1_to_bond: left allmulticast mode [ 1247.502546][ T49] bond5: (slave dummy0): failed to get link speed/duplex [ 1247.638816][ T49] bond5: (slave dummy0): failed to get link speed/duplex [ 1247.741526][T25070] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13231'. [ 1247.753786][T25071] IPVS: Scheduler module ip_vs_ not found [ 1247.783202][T25070] syzkaller0: entered promiscuous mode [ 1247.808283][T25070] syzkaller0: entered allmulticast mode [ 1247.819401][T25068] netlink: 136 bytes leftover after parsing attributes in process `syz.3.13232'. [ 1247.821301][T25070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1247.847559][T25068] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 1247.889266][ T7302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1247.912466][T25082] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13237'. [ 1247.948044][ T7302] bond5: (slave dummy0): failed to get link speed/duplex [ 1248.051752][T25090] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1248.069644][ T49] bond5: (slave dummy0): failed to get link speed/duplex [ 1248.079701][ T25] block nbd1: Possible stuck request ffff888027575080: control (read@0,1024B). Runtime 10 seconds [ 1248.092782][ T25] block nbd1: Possible stuck request ffff888027575240: control (read@1024,1024B). Runtime 10 seconds [ 1248.104882][ T25] block nbd1: Possible stuck request ffff888027575400: control (read@2048,1024B). Runtime 10 seconds [ 1248.116951][ T25] block nbd1: Possible stuck request ffff8880275755c0: control (read@3072,1024B). Runtime 10 seconds [ 1248.146885][T25092] vlan2: entered promiscuous mode [ 1248.162083][T25092] bridge0: entered promiscuous mode [ 1248.372486][T25113] tipc: Enabling of bearer rejected, failed to enable media [ 1248.491283][T25113] syzkaller0: entered promiscuous mode [ 1248.516432][T25113] syzkaller0: entered allmulticast mode [ 1248.794752][T25138] netlink: 'syz.0.13253': attribute type 1 has an invalid length. [ 1248.830369][T25138] netlink: 'syz.0.13253': attribute type 1 has an invalid length. [ 1248.933713][T25141] netlink: 'syz.3.13254': attribute type 1 has an invalid length. [ 1248.996377][T25153] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1249.171608][T25166] netlink: 'syz.0.13260': attribute type 1 has an invalid length. [ 1249.196319][T25166] bond9: entered promiscuous mode [ 1249.203203][T25166] bond9: entered allmulticast mode [ 1249.209050][T25166] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1249.994244][T25201] bridge0: entered promiscuous mode [ 1250.000399][T25201] bridge0: entered allmulticast mode [ 1250.012908][T25201] netlink: 'syz.2.13271': attribute type 1 has an invalid length. [ 1250.015392][T25208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1250.054490][T25208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1250.101484][T25215] netlink: 'syz.2.13276': attribute type 1 has an invalid length. [ 1250.115513][T25215] netlink: 'syz.2.13276': attribute type 4 has an invalid length. [ 1250.173178][T25215] netlink: 'syz.2.13276': attribute type 4 has an invalid length. [ 1250.240484][T25221] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1250.282409][ T7303] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1250.315432][ T7303] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1250.345302][ T7303] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1250.362836][ T5624] block nbd11: Receive control failed (result -32) [ 1250.379306][ T7303] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1250.553287][T25256] lo speed is unknown, defaulting to 1000 [ 1250.561156][T25256] lo speed is unknown, defaulting to 1000 [ 1250.640658][T25265] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 1250.670575][T25261] tipc: Enabled bearer , priority 0 [ 1250.702204][T25261] tipc: Disabling bearer [ 1250.816946][T25276] syz_tun: left promiscuous mode [ 1250.846018][T25276] syz_tun: left allmulticast mode [ 1250.862371][T25276] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 1250.892932][T25276] bond1: left promiscuous mode [ 1250.929282][T25281] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 1251.080660][T25281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1251.097801][ T5624] Bluetooth: hci3: command 0x0406 tx timeout [ 1251.249889][ T49] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1251.260515][T25256] lo speed is unknown, defaulting to 1000 [ 1251.283300][ T49] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.319179][ T49] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1251.349871][T25288] __nla_validate_parse: 22 callbacks suppressed [ 1251.349892][T25288] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13295'. [ 1251.351346][ T49] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.378301][T25288] netlink: 'syz.2.13295': attribute type 7 has an invalid length. [ 1251.392323][ T49] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1251.408531][T25288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13295'. [ 1251.419989][ T49] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.432404][ T25] block nbd1: Possible stuck request ffff888027575080: control (read@0,1024B). Runtime 12 seconds [ 1251.443819][ T25] block nbd1: Possible stuck request ffff888027575240: control (read@1024,1024B). Runtime 12 seconds [ 1251.455322][ T25] block nbd1: Possible stuck request ffff888027575400: control (read@2048,1024B). Runtime 12 seconds [ 1251.470175][ T25] block nbd1: Possible stuck request ffff8880275755c0: control (read@3072,1024B). Runtime 12 seconds [ 1251.488625][ T49] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1251.499965][ T49] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.524068][T25288] erspan0: entered promiscuous mode [ 1251.545456][T25288] gretap0: entered promiscuous mode [ 1251.563225][T25288] erspan0: left promiscuous mode [ 1251.576993][T25288] gretap0: left promiscuous mode [ 1251.666655][T25304] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13302'. [ 1251.913575][ T7302] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 1251.983786][T25319] syzkaller0: entered promiscuous mode [ 1251.990423][T25319] syzkaller0: entered allmulticast mode [ 1252.001698][T25319] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1252.125350][T25326] xt_CT: No such helper "netbios-ns" [ 1252.257745][T17561] net_ratelimit: 31 callbacks suppressed [ 1252.257769][T17561] bond5: (slave dummy0): failed to get link speed/duplex [ 1252.378295][ T7308] bond5: (slave dummy0): failed to get link speed/duplex [ 1252.487782][T17561] bond5: (slave dummy0): failed to get link speed/duplex [ 1252.597451][T17561] bond5: (slave dummy0): failed to get link speed/duplex [ 1252.635325][T25308] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1252.709344][ T7308] bond5: (slave dummy0): failed to get link speed/duplex [ 1252.817713][ T7308] bond5: (slave dummy0): failed to get link speed/duplex [ 1252.928482][ T6261] bond5: (slave dummy0): failed to get link speed/duplex [ 1253.049004][ T7308] bond5: (slave dummy0): failed to get link speed/duplex [ 1253.160374][T25379] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13321'. [ 1253.168089][ T7302] bond5: (slave dummy0): failed to get link speed/duplex [ 1253.215825][T25385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13323'. [ 1253.226069][T25385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13323'. [ 1253.288016][ T7302] bond5: (slave dummy0): failed to get link speed/duplex [ 1253.402961][T25398] lo speed is unknown, defaulting to 1000 [ 1253.413968][T25398] lo speed is unknown, defaulting to 1000 [ 1253.424381][T25406] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13330'. [ 1253.539818][T25413] lo speed is unknown, defaulting to 1000 [ 1253.540348][T25410] netlink: 100 bytes leftover after parsing attributes in process `syz.3.13331'. [ 1253.585561][T25410] netlink: 100 bytes leftover after parsing attributes in process `syz.3.13331'. [ 1253.605857][T25413] lo speed is unknown, defaulting to 1000 [ 1253.629476][T25398] lo speed is unknown, defaulting to 1000 [ 1253.974622][T25424] validate_nla: 1 callbacks suppressed [ 1253.974640][T25424] netlink: 'syz.4.13334': attribute type 4 has an invalid length. [ 1254.020234][T25413] lo speed is unknown, defaulting to 1000 [ 1254.444640][T25441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13340'. [ 1254.610250][T25441] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1254.778271][ T25] block nbd1: Possible stuck request ffff888027575080: control (read@0,1024B). Runtime 14 seconds [ 1254.790080][ T25] block nbd1: Possible stuck request ffff888027575240: control (read@1024,1024B). Runtime 14 seconds [ 1254.801269][ T25] block nbd1: Possible stuck request ffff888027575400: control (read@2048,1024B). Runtime 14 seconds [ 1254.804563][T25447] netlink: 'syz.2.13341': attribute type 5 has an invalid length. [ 1254.812324][ T25] block nbd1: Possible stuck request ffff8880275755c0: control (read@3072,1024B). Runtime 14 seconds [ 1254.926642][T25448] tipc: Enabled bearer , priority 0 [ 1255.240390][T25444] tipc: Disabling bearer [ 1255.413127][T25475] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 1255.693966][T25522] tipc: Enabling of bearer rejected, failed to enable media [ 1255.820341][T25525] lo speed is unknown, defaulting to 1000 [ 1255.829829][T25525] lo speed is unknown, defaulting to 1000 [ 1256.003586][T25525] lo speed is unknown, defaulting to 1000 [ 1256.513868][T25522] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1256.598966][T25570] __nla_validate_parse: 7 callbacks suppressed [ 1256.598986][T25570] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13371'. [ 1256.619640][T25571] nbd: nbd3 already in use [ 1256.878327][T25592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13376'. [ 1257.280321][T17561] net_ratelimit: 27 callbacks suppressed [ 1257.280342][T17561] bond5: (slave dummy0): failed to get link speed/duplex [ 1257.422604][ T49] bond5: (slave dummy0): failed to get link speed/duplex [ 1257.547307][ T49] bond5: (slave dummy0): failed to get link speed/duplex [ 1257.679167][ T7302] bond5: (slave dummy0): failed to get link speed/duplex [ 1257.808069][ T6261] bond5: (slave dummy0): failed to get link speed/duplex [ 1257.855010][T25630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13383'. [ 1257.959250][T25630] ipip0: entered promiscuous mode [ 1258.007715][T17561] bond5: (slave dummy0): failed to get link speed/duplex [ 1258.033878][T24436] IPVS: starting estimator thread 0... [ 1258.127796][T25654] IPVS: using max 62 ests per chain, 148800 per kthread [ 1258.128802][T25660] syzkaller0: entered promiscuous mode [ 1258.142045][ T25] block nbd1: Possible stuck request ffff888027575080: control (read@0,1024B). Runtime 16 seconds [ 1258.152995][ T25] block nbd1: Possible stuck request ffff888027575240: control (read@1024,1024B). Runtime 16 seconds [ 1258.162851][T25660] syzkaller0: entered allmulticast mode [ 1258.164862][ T25] block nbd1: Possible stuck request ffff888027575400: control (read@2048,1024B). Runtime 16 seconds [ 1258.182964][ T25] block nbd1: Possible stuck request ffff8880275755c0: control (read@3072,1024B). Runtime 16 seconds [ 1258.187943][T17561] bond5: (slave dummy0): failed to get link speed/duplex [ 1258.317722][ T49] bond5: (slave dummy0): failed to get link speed/duplex [ 1258.352746][T25672] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13395'. [ 1258.427878][T17561] bond5: (slave dummy0): failed to get link speed/duplex [ 1258.538153][ T6261] bond5: (slave dummy0): failed to get link speed/duplex [ 1260.630328][T25618] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1260.848934][T25698] netlink: 84 bytes leftover after parsing attributes in process `syz.0.13403'. [ 1260.868958][T25698] netlink: 84 bytes leftover after parsing attributes in process `syz.0.13403'. [ 1260.975134][T25705] syzkaller0: entered promiscuous mode [ 1261.193613][T25724] netlink: 'syz.3.13412': attribute type 1 has an invalid length. [ 1261.243824][T25724] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13412'. [ 1261.412935][T25751] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13418'. [ 1261.423115][T25751] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13418'. [ 1261.435358][T25753] netlink: 'syz.0.13420': attribute type 21 has an invalid length. [ 1261.469787][T25753] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13420'. [ 1261.501567][ T25] block nbd1: Possible stuck request ffff888027575080: control (read@0,1024B). Runtime 18 seconds [ 1261.512770][ T25] block nbd1: Possible stuck request ffff888027575240: control (read@1024,1024B). Runtime 18 seconds [ 1261.525229][ T25] block nbd1: Possible stuck request ffff888027575400: control (read@2048,1024B). Runtime 18 seconds [ 1261.536626][ T25] block nbd1: Possible stuck request ffff8880275755c0: control (read@3072,1024B). Runtime 18 seconds [ 1261.609168][T25771] __nla_validate_parse: 1 callbacks suppressed [ 1261.609186][T25771] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13424'. [ 1261.616381][T25773] netlink: 'syz.1.13426': attribute type 4 has an invalid length. [ 1261.642515][T25773] netlink: 'syz.1.13426': attribute type 4 has an invalid length. [ 1261.704078][T25775] netlink: 'syz.2.13427': attribute type 58 has an invalid length. [ 1261.818736][T25781] bond11: option xmit_hash_policy: invalid value (10) [ 1261.829338][T25781] bond11 (unregistering): Released all slaves [ 1261.845914][T25789] netlink: 'syz.4.13432': attribute type 32 has an invalid length. [ 1261.909314][T25792] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20001 [ 1261.925089][T25782] tipc: Resetting bearer [ 1262.359410][T17567] net_ratelimit: 29 callbacks suppressed [ 1262.359429][T17567] bond5: (slave dummy0): failed to get link speed/duplex [ 1262.442111][T25828] lo speed is unknown, defaulting to 1000 [ 1262.471828][T25828] lo speed is unknown, defaulting to 1000 [ 1262.527757][ T7303] bond5: (slave dummy0): failed to get link speed/duplex [ 1262.560858][T25840] xt_CT: No such helper "syz0" [ 1262.659961][ T7302] bond5: (slave dummy0): failed to get link speed/duplex [ 1262.694575][T25853] netlink: 56 bytes leftover after parsing attributes in process `syz.0.13443'. [ 1262.705382][T25851] syzkaller1: entered promiscuous mode [ 1262.741922][T25851] syzkaller1: entered allmulticast mode [ 1262.836435][T25864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13444'. [ 1262.951969][ T7303] bond5: (slave dummy0): failed to get link speed/duplex [ 1262.969475][T25867] netlink: 'syz.0.13447': attribute type 31 has an invalid length. [ 1263.004097][T25828] lo speed is unknown, defaulting to 1000 [ 1263.068378][ T6261] bond5: (slave dummy0): failed to get link speed/duplex [ 1263.099061][ T30] INFO: task udevd:17431 blocked for more than 143 seconds. [ 1263.128746][T25876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13452'. [ 1263.137733][T25880] netlink: 'syz.4.13451': attribute type 4 has an invalid length. [ 1263.140052][ T30] Not tainted syzkaller #0 [ 1263.156775][T25880] netlink: 240 bytes leftover after parsing attributes in process `syz.4.13451'. [ 1263.176586][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1263.198630][ T30] task:udevd state:D stack:23688 pid:17431 tgid:17431 ppid:4989 task_flags:0x400140 flags:0x00080000 [ 1263.224603][ T30] Call Trace: [ 1263.228937][T25876] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1263.238568][ T6261] bond5: (slave dummy0): failed to get link speed/duplex [ 1263.248519][ T30] [ 1263.251662][ T30] __schedule+0x17d9/0x56c0 [ 1263.256478][ T30] ? blk_mq_flush_plug_list+0x415/0x540 [ 1263.272452][ T30] ? rcu_is_watching+0x15/0xb0 [ 1263.277823][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 1263.283880][ T30] ? __blk_flush_plug+0x416/0x4d0 [ 1263.289897][ T30] ? __pfx___schedule+0x10/0x10 [ 1263.298160][ T30] ? rcu_is_watching+0x15/0xb0 [ 1263.299056][T25876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13452'. [ 1263.303171][ T30] ? lock_release+0x4b/0x3c0 [ 1263.318833][ T30] schedule+0x164/0x360 [ 1263.323102][ T30] schedule_timeout+0x152/0x2c0 [ 1263.328950][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1263.334432][ T30] ? __pfx_process_timeout+0x10/0x10 [ 1263.340594][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1263.346497][ T30] ? prepare_to_wait_event+0x436/0x480 [ 1263.352609][ T30] nbd_queue_rq+0x889/0x1150 [ 1263.357965][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 1263.363142][ T30] ? rcu_is_watching+0x15/0xb0 [ 1263.368520][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1263.374742][ T30] ? rcu_is_watching+0x15/0xb0 [ 1263.380513][ T30] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1263.386421][ T30] ? sbitmap_get+0x1b3/0x390 [ 1263.392096][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 1263.398808][ T30] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 1263.405090][ T30] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1263.412269][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 1263.420207][ T30] ? blk_mq_hw_queue_need_run+0x134/0x630 [ 1263.426080][ T30] ? rcu_is_watching+0x15/0xb0 [ 1263.431699][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 1263.437122][ T30] ? rcu_is_watching+0x15/0xb0 [ 1263.442661][ T30] ? lock_acquire+0x5f/0x350 [ 1263.448017][ T30] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1263.454292][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 1263.460315][ T30] blk_mq_run_hw_queue+0x348/0x4f0 [ 1263.465717][ T30] blk_mq_dispatch_list+0xd11/0xe10 [ 1263.471591][ T30] ? blk_mq_dispatch_list+0x230/0xe10 [ 1263.477076][ T30] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 1263.483527][ T30] ? rcu_is_watching+0x15/0xb0 [ 1263.489057][ T30] blk_mq_flush_plug_list+0x45f/0x540 [ 1263.494604][ T30] ? blk_add_rq_to_plug+0x300/0x450 [ 1263.500693][ T30] ? blk_mq_submit_bio+0x1c62/0x2a80 [ 1263.506132][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 1263.512649][ T30] ? blk_mq_submit_bio+0x2f8/0x2a80 [ 1263.518578][ T30] __blk_flush_plug+0x3ed/0x4d0 [ 1263.523554][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 1263.529590][ T30] ? blkg_get+0x20/0x1d0 [ 1263.534051][ T30] ? rcu_is_watching+0x15/0xb0 [ 1263.539532][ T30] __submit_bio+0x465/0x560 [ 1263.544183][ T30] ? __pfx___submit_bio+0x10/0x10 [ 1263.549556][ T30] ? irqentry_exit+0x218/0x8f0 [ 1263.554479][ T30] ? trace_irq_disable+0x3b/0x140 [ 1263.559745][ T30] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1263.565693][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 1263.572074][ T30] ? submit_bio_noacct+0xf7b/0x1b20 [ 1263.578336][ T30] ? blkcg_set_ioprio+0x16b/0x2a0 [ 1263.583481][ T30] block_read_full_folio+0x581/0x810 [ 1263.589363][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 1263.595069][ T30] filemap_read_folio+0x12c/0x3a0 [ 1263.600786][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1263.606303][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 1263.612565][ T30] ? filemap_add_folio+0x350/0x530 [ 1263.618477][ T30] do_read_cache_folio+0x354/0x590 [ 1263.623814][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1263.631072][ T30] read_part_sector+0xb6/0x2b0 [ 1263.636075][ T30] adfspart_check_ICS+0xb1/0x960 [ 1263.641803][ T30] ? seq_buf_printf+0x212/0x2d0 [ 1263.646990][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 1263.653068][ T30] ? __kmalloc_cache_noprof+0x318/0x660 [ 1263.662006][ T30] bdev_disk_changed+0x851/0x17a0 [ 1263.667473][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1263.673435][ T30] blkdev_get_whole+0x372/0x510 [ 1263.679021][ T30] bdev_open+0x324/0xd70 [ 1263.683368][ T30] blkdev_open+0x461/0x600 [ 1263.688452][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 1263.693498][ T30] do_dentry_open+0x816/0x1380 [ 1263.699002][ T30] vfs_open+0x3b/0x340 [ 1263.703166][ T30] ? path_openat+0x2e2d/0x3830 [ 1263.708515][ T30] path_openat+0x2e44/0x3830 [ 1263.713930][ T30] ? kasan_save_track+0x3e/0x80 [ 1263.719524][ T30] ? do_getname+0x2e/0x250 [ 1263.724670][ T30] ? do_sys_openat2+0xcc/0x200 [ 1263.730050][ T30] ? __x64_sys_openat+0x138/0x170 [ 1263.735249][ T30] do_file_open+0x23e/0x4a0 [ 1263.745341][ T30] ? __pfx_do_file_open+0x10/0x10 [ 1263.750963][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1263.755956][ T30] ? alloc_fd+0x651/0x6c0 [ 1263.760981][ T30] do_sys_openat2+0x115/0x200 [ 1263.765727][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 1263.772323][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1263.778194][ T30] ? irqtime_account_irq+0x1f8/0x260 [ 1263.783669][ T30] ? handle_softirqs+0x70f/0x840 [ 1263.789233][ T30] __x64_sys_openat+0x138/0x170 [ 1263.794241][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.801054][ T30] do_syscall_64+0x174/0x580 [ 1263.805788][ T30] ? clear_bhb_loop+0x40/0x90 [ 1263.811028][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.817058][ T30] RIP: 0033:0x7fbcaeea7407 [ 1263.822432][ T30] RSP: 002b:00007fffaace2050 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1263.831657][ T30] RAX: ffffffffffffffda RBX: 00007fbcaf61e880 RCX: 00007fbcaeea7407 [ 1263.839993][ T30] RDX: 00000000000a0800 RSI: 000055ab5f80daa0 RDI: ffffffffffffff9c [ 1263.848188][ T30] RBP: 000055ab5f7fc910 R08: 0000000000000000 R09: 0000000000000000 [ 1263.856210][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000055ab5f810ba0 [ 1263.864575][ T30] R13: 000055ab5f80a190 R14: 0000000000000000 R15: 000055ab5f810ba0 [ 1263.873737][ T30] [ 1263.877068][ T30] INFO: lockdep is turned off. [ 1263.883049][ T30] NMI backtrace for cpu 0 [ 1263.883066][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1263.883084][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1263.883093][ T30] Call Trace: [ 1263.883100][ T30] [ 1263.883106][ T30] dump_stack_lvl+0xe8/0x150 [ 1263.883129][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1263.883148][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1263.883173][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1263.883191][ T30] sys_info+0x135/0x170 [ 1263.883206][ T30] watchdog+0xfd7/0x1030 [ 1263.883228][ T30] ? watchdog+0x1c7/0x1030 [ 1263.883250][ T30] kthread+0x388/0x470 [ 1263.883264][ T30] ? __pfx_watchdog+0x10/0x10 [ 1263.883281][ T30] ? __pfx_kthread+0x10/0x10 [ 1263.883296][ T30] ret_from_fork+0x514/0xb70 [ 1263.883313][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1263.883328][ T30] ? __switch_to+0xc89/0x1420 [ 1263.883349][ T30] ? __pfx_kthread+0x10/0x10 [ 1263.883363][ T30] ret_from_fork_asm+0x1a/0x30 [ 1263.883388][ T30] [ 1263.883394][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1263.885234][T25888] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1263.888567][ C1] NMI backtrace for cpu 1 [ 1263.888584][ C1] CPU: 1 UID: 0 PID: 25888 Comm: syz.2.13452 Not tainted syzkaller #0 PREEMPT(full) [ 1263.888602][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1263.888612][ C1] RIP: 0010:unwind_next_frame+0x4c9/0x2550 [ 1263.888638][ C1] Code: 49 bc 00 00 00 00 00 fc ff df 4c 8b 7c 24 10 49 8d 6e 38 0f 84 8a 16 00 00 e9 ee 01 00 00 49 89 d5 49 89 d7 4c 89 e0 4c 29 f8 <48> 89 c1 48 c1 f9 02 48 c1 e8 3f 48 01 c8 48 83 e0 fe 49 8d 1c 47 [ 1263.888657][ C1] RSP: 0018:ffffc90000a08708 EFLAGS: 00000006 [ 1263.888672][ C1] RAX: 0000000000000018 RBX: dffffc0000000000 RCX: 0000000000000100 [ 1263.888683][ C1] RDX: ffffffff90495d54 RSI: ffffffff90c4b4c0 RDI: ffffffff8c2910c0 [ 1263.888696][ C1] RBP: ffffffff816d2f12 R08: 0000000000000007 R09: 0000000000000000 [ 1263.888706][ C1] R10: ffffc90000a08858 R11: fffff5200014110d R12: ffffffff90495d6c [ 1263.888718][ C1] R13: ffffffff90495d54 R14: ffffc90000a08808 R15: ffffffff90495d54 [ 1263.888730][ C1] FS: 00007f38273226c0(0000) GS:ffff88812537c000(0000) knlGS:0000000000000000 [ 1263.888745][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1263.888756][ C1] CR2: 00007ffee75c6f20 CR3: 000000009595a000 CR4: 00000000003526f0 [ 1263.888771][ C1] Call Trace: [ 1263.888778][ C1] [ 1263.888786][ C1] ? arch_stack_walk+0xe3/0x150 [ 1263.888805][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1263.888825][ C1] __unwind_start+0x514/0x660 [ 1263.888844][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1263.888867][ C1] arch_stack_walk+0xe3/0x150 [ 1263.888887][ C1] ? arch_stack_walk+0xe3/0x150 [ 1263.888906][ C1] stack_trace_save+0xa9/0x100 [ 1263.888926][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1263.888947][ C1] ? stack_depot_save_flags+0x33/0x800 [ 1263.888968][ C1] kasan_save_stack+0x3e/0x60 [ 1263.889011][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 1263.889028][ C1] insert_work+0x3d/0x330 [ 1263.889048][ C1] __queue_work+0xcb6/0xff0 [ 1263.889069][ C1] ? __queue_work+0x1b8/0xff0 [ 1263.889099][ C1] call_timer_fn+0x192/0x5e0 [ 1263.889115][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1263.889136][ C1] ? call_timer_fn+0xd4/0x5e0 [ 1263.889151][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1263.889170][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 1263.889190][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1263.889212][ C1] __run_timer_base+0x67e/0x8b0 [ 1263.889240][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1263.889269][ C1] ? ktime_get+0x1f5/0x220 [ 1263.889291][ C1] ? lapic_next_event+0x11/0x20 [ 1263.889313][ C1] run_timer_softirq+0xb7/0x170 [ 1263.889337][ C1] handle_softirqs+0x225/0x840 [ 1263.889361][ C1] ? __irq_exit_rcu+0xca/0x220 [ 1263.889385][ C1] __irq_exit_rcu+0xca/0x220 [ 1263.889405][ C1] irq_exit_rcu+0x9/0x30 [ 1263.889422][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1263.889443][ C1] [ 1263.889449][ C1] [ 1263.889455][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1263.889472][ C1] RIP: 0010:vprintk_emit+0x45d/0x560 [ 1263.889489][ C1] Code: 0f 84 44 ff ff ff e8 d2 52 21 00 fb eb 44 e8 ca 52 21 00 e8 b5 21 03 0a 4d 85 f6 74 94 e8 bb 52 21 00 fb 48 c7 c7 80 bd 94 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 ab 1c [ 1263.889503][ C1] RSP: 0018:ffffc90004e4e800 EFLAGS: 00000287 [ 1263.889516][ C1] RAX: ffffffff81a4a365 RBX: ffffffff81a4a1df RCX: 0000000000080000 [ 1263.889528][ C1] RDX: ffffc900121d8000 RSI: 000000000002659b RDI: ffffffff8e94bd80 [ 1263.889539][ C1] RBP: ffffc90004e4e8b0 R08: ffffffff903116f7 R09: 1ffffffff20622de [ 1263.889551][ C1] R10: dffffc0000000000 R11: fffffbfff20622df R12: 0000000000000000 [ 1263.889562][ C1] R13: 0000000000000032 R14: 0000000000000200 R15: 1ffff920009c9d04 [ 1263.889575][ C1] ? vprintk_emit+0x2cf/0x560 [ 1263.889591][ C1] ? vprintk_emit+0x455/0x560 [ 1263.889611][ C1] ? __wake_up_common_lock+0x195/0x1f0 [ 1263.889631][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1263.889647][ C1] ? __mutex_trylock_common+0x15f/0x270 [ 1263.889669][ C1] _printk+0xdd/0x130 [ 1263.889692][ C1] ? __pfx__printk+0x10/0x10 [ 1263.889710][ C1] ? dsa_user_netdevice_event+0x6a2/0x28e0 [ 1263.889841][ C1] ? rcu_is_watching+0x15/0xb0 [ 1263.889859][ C1] vlan_device_event+0x1c68/0x1f00 [ 1263.889996][ C1] ? packet_notifier+0xf1b/0xf70 [ 1263.890066][ C1] ? br_device_event+0x282/0x9c0 [ 1263.890118][ C1] ? __pfx_phonet_device_notify+0x10/0x10 [ 1263.890164][ C1] ? __pfx_vlan_device_event+0x10/0x10 [ 1263.890184][ C1] ? bcm_notifier+0xa9/0x890 [ 1263.890229][ C1] ? raw_notifier+0x9d/0x7d0 [ 1263.890249][ C1] ? cgw_notifier+0x314/0x380 [ 1263.890272][ C1] notifier_call_chain+0x1a5/0x3d0 [ 1263.890299][ C1] netif_open+0x10f/0x190 [ 1263.890350][ C1] ? __pfx_netif_open+0x10/0x10 [ 1263.890372][ C1] dev_open+0x101/0x220 [ 1263.890417][ C1] bond_enslave+0x914/0x3b10 [ 1263.890492][ C1] ? rcu_is_watching+0x15/0xb0 [ 1263.890513][ C1] ? sock_def_readable+0xae/0x550 [ 1263.890557][ C1] ? __pfx_bond_enslave+0x10/0x10 [ 1263.890581][ C1] ? __pfx___dev_notify_flags+0x10/0x10 [ 1263.890630][ C1] ? mutex_is_locked+0x17/0x50 [ 1263.890647][ C1] do_set_master+0x563/0x720 [ 1263.890702][ C1] rtnl_newlink_create+0x641/0xb00 [ 1263.890729][ C1] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1263.890753][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1263.890778][ C1] ? ns_capable+0x89/0xe0 [ 1263.890799][ C1] rtnl_newlink+0x167f/0x1bd0 [ 1263.890827][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 1263.890845][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.890876][ C1] ? rcu_is_watching+0x15/0xb0 [ 1263.890892][ C1] ? trace_irq_enable+0x3b/0x140 [ 1263.890915][ C1] ? nlmon_xmit+0xb0/0x100 [ 1263.890961][ C1] ? kmem_cache_free+0x182/0x650 [ 1263.890989][ C1] ? dev_hard_start_xmit+0x7c7/0x830 [ 1263.891012][ C1] ? __dev_queue_xmit+0x29b/0x37f0 [ 1263.891027][ C1] ? __dev_queue_xmit+0x29b/0x37f0 [ 1263.891051][ C1] ? rcu_is_watching+0x15/0xb0 [ 1263.891066][ C1] ? __dev_queue_xmit+0x29b/0x37f0 [ 1263.891081][ C1] ? trace_irq_enable+0x3b/0x140 [ 1263.891107][ C1] ? __dev_queue_xmit+0x29b/0x37f0 [ 1263.891121][ C1] ? __dev_queue_xmit+0x29b/0x37f0 [ 1263.891135][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 1263.891153][ C1] ? __dev_queue_xmit+0x29b/0x37f0 [ 1263.891174][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 1263.891193][ C1] ? lock_release+0x4b/0x3c0 [ 1263.891215][ C1] ? bpf_lsm_capable+0x9/0x20 [ 1263.891229][ C1] ? security_capable+0x7e/0x2c0 [ 1263.891311][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 1263.891330][ C1] rtnetlink_rcv_msg+0x802/0xc00 [ 1263.891352][ C1] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1263.891372][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1263.891391][ C1] ? ref_tracker_free+0x689/0x830 [ 1263.891410][ C1] ? __pfx_ref_tracker_free+0x10/0x10 [ 1263.891433][ C1] netlink_rcv_skb+0x226/0x4a0 [ 1263.891502][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1263.891522][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1263.891551][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 1263.891576][ C1] netlink_unicast+0x7bb/0x940 [ 1263.891601][ C1] netlink_sendmsg+0x813/0xb40 [ 1263.891623][ C1] ? format_decode+0xdc/0xe20 [ 1263.891642][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1263.891667][ C1] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1263.891710][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1263.891729][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1263.891753][ C1] ____sys_sendmsg+0x9b9/0xa20 [ 1263.891830][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1263.891854][ C1] ? lock_release+0x4b/0x3c0 [ 1263.891877][ C1] ? import_iovec+0x73/0xa0 [ 1263.891950][ C1] ___sys_sendmsg+0x2a5/0x360 [ 1263.891975][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 1263.891995][ C1] ? kfree+0x1c5/0x640 [ 1263.892014][ C1] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1263.892210][ C1] ? __fget_files+0x2a/0x420 [ 1263.892227][ C1] ? __fget_files+0x3a2/0x420 [ 1263.892249][ C1] __x64_sys_sendmsg+0x1b1/0x290 [ 1263.892273][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1263.892294][ C1] ? kfree+0x4d/0x640 [ 1263.892317][ C1] ? rcu_is_watching+0x15/0xb0 [ 1263.892334][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.892349][ C1] do_syscall_64+0x174/0x580 [ 1263.892369][ C1] ? trace_irq_disable+0x3b/0x140 [ 1263.892390][ C1] ? clear_bhb_loop+0x40/0x90 [ 1263.892407][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.892422][ C1] RIP: 0033:0x7f382639ce59 [ 1263.892438][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1263.892451][ C1] RSP: 002b:00007f3827322028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1263.892468][ C1] RAX: ffffffffffffffda RBX: 00007f3826616090 RCX: 00007f382639ce59 [ 1263.892480][ C1] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1263.892491][ C1] RBP: 00007f3826432e6f R08: 0000000000000000 R09: 0000000000000000 [ 1263.892501][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1263.892510][ C1] R13: 00007f3826616128 R14: 00007f3826616090 R15: 00007ffcca5b0898 [ 1263.892530][ C1] [ 1263.903520][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1263.903542][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1263.903561][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1263.903571][ T30] Call Trace: [ 1263.903578][ T30] [ 1263.903593][ T30] vpanic+0x56c/0xa60 [ 1263.903615][ T30] ? __pfx___schedule+0x10/0x10 [ 1263.903635][ T30] ? __pfx_vpanic+0x10/0x10 [ 1263.903657][ T30] panic+0xc5/0xd0 [ 1263.903673][ T30] ? __pfx_panic+0x10/0x10 [ 1263.903688][ T30] ? preempt_schedule_common+0x82/0xd0 [ 1263.903707][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 1263.903729][ T30] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1263.903748][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1263.903767][ T30] watchdog+0x1030/0x1030 [ 1263.903791][ T30] ? watchdog+0x1c7/0x1030 [ 1263.903812][ T30] kthread+0x388/0x470 [ 1263.903827][ T30] ? __pfx_watchdog+0x10/0x10 [ 1263.903845][ T30] ? __pfx_kthread+0x10/0x10 [ 1263.903861][ T30] ret_from_fork+0x514/0xb70 [ 1263.903878][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1263.903894][ T30] ? __switch_to+0xc89/0x1420 [ 1263.903917][ T30] ? __pfx_kthread+0x10/0x10 [ 1263.903932][ T30] ret_from_fork_asm+0x1a/0x30 [ 1263.903957][ T30] [ 1263.914462][ T30] Kernel Offset: disabled